To configure a tunnel interface on an IES or VPRN

Note: The tabs and parameters that are configurable vary depending on the NE.

The 7705 SAR only supports the configuration of a tunnel interface on a VPRN service.

Steps
 
1 

Choose Manage→Service→Services from the NFM-P main menu. The Manage Services form opens.

2 

Choose an IES or VPRN service and click Properties. The service properties form opens.

3 

Click on the Interfaces tab. The TMS Interfaces tab is displayed.

4 

Click on the Tunnel Interfaces tab.

5 

Click Create. The Tunnel Interface (Create) form opens.

6 

Configure the required parameters.

7 

Configure Cflowd sampling, if applicable.

Use the following steps:

  1. Click Create in the Cflowd Sampling panel. The Cflowd Sampling (Create) form opens.

  2. Configure the parameters.

  3. Save your changes and close the form.

8 

Configure a port for the interface.

Use the following steps:

  1. Click on the Port tab.

  2. Select a port.

    Additional tabs may become available based on the type of port selected.

  3. Configure the required parameters.

    Note:

    You can configure the NFM-P to automatically assign the lowest unused outer encapsulation value by enabling the Auto-Assign ID parameter.

    You can set the Auto-Assign ID parameter to be the default parameter for dot1q encapsulation by enabling the Access Interface Encap Value (Dot1q only) parameter in the User Preferences form. Choose Application→ User Preferences from the main menu.

    Private and public tunnel connection points support only dot1q encapsulation.

9 

To configure multichassis redundancy, if applicable, see To configure MC IPsec on an MC peer group.

10 

Assign ingress and egress QoS policies to the interface.

Use the following steps:

  1. Click on the QoS tab.

  2. Configure the required parameters.

  3. Click Select in the Ingress Policy and Egress Policy panels to choose ingress and egress QoS policies.

11 

Assign an accounting policy to the interface, if applicable.

Use the following steps:

  1. Click on the Accounting tab.

  2. Select an accounting policy.

  3. Configure the Collect Accounting Statistics parameter.

12 

Configure scheduling.

Use the following steps:

  1. Click on the Schedulers tab.

  2. Configure the Aggregate Rate Limit (kbps) parameter.

    Note:

    The Aggregate Rate Limit (kbps) parameter is configurable when the Assign Aggregate Rate Limit check box is enabled and there is no scheduler specified in the Egress Scheduler panel.

    You cannot specify an egress scheduler when the Aggregate Rate Limit (kbps) parameter is set to a value greater than zero.

  3. Select ingress and egress schedulers in the Ingress Scheduler and Egress Scheduler panels.

  4. Select ingress and egress policer control policies in the Ingress Policer Control Policy and Egress Policer Control Policy panels.

13 

Assign ingress and egress ACL filters to the interface.

Use the following steps:

  1. Click on the ACL tab.

  2. Select ingress and egress ACL filters in the IP Filter and IPv6 Filter panels.

14 

Configure BFD.

Use the following steps:

  1. Click on the BFD tab.

  2. Set the Administration Status parameter to Up. Additional parameters are displayed.

  3. Configure the required parameters.

  4. To view local and remote session peers, click on the BFD Session tab. The NFM-P retrieves information from the local and remote NEs and lists the current BFD sessions.

  5. Select a session and click Properties. The session properties form opens.

    View the following:

    • BFD status

    • protocol used

    • local address

    • remote address

    • operational status and statistics

    The BFD Status field indicates one of the following:

    • no service, when BFD is disabled

    • in service, when BFD is running

    • out of service, when BFD has failed

  6. Close the session properties form.

    Note:

    You cannot enable BFD on an interface if BFD is not configured on the interface, and cannot administratively disable the interface if a routing protocol that uses the interface has BFD enabled.

    See Chapter 28, Routing protocol configuration for information about enabling and disabling BFD for routing protocols.

15 

Assign a security zone policy to the VPRN tunnel interface, if applicable.

Use the following steps:

  1. Click on the Zone tab.

  2. Select a security zone policy.

  3. Configure the ByPass Zone Config parameter.

  4. Save your changes and close the form.

16 

Assign an IP address to the interface.

Use the following steps:

  1. Click on the Addresses tab and click Create. The IP Address (Create) form opens.

  2. Configure the required parameters.

  3. Save your changes and close the form.

17 

Configure ICMPv6 if IPv6 is enabled.

Use the following steps:

  1. Click on the ICMPv6 tab.

  2. Configure the parameters, as required.

  3. Save and close the form.

18 

Configure an IP-IP tunnel or GRE tunnel on the interface.

Note: Step 8 must be performed before this step.

Use the following steps:

  1. Click on the IP/GRE Tunnels tab and click Create. The IP/GRE Tunnel - IP-GRE|IP-IP Tunnel (Create) form opens.

  2. Configure the required parameters.

  3. If you are configuring a GRE tunnel, enable the Include GRE Header parameter and configure the GRE tunnel parameters.

  4. Select a delivery service in the Delivery Service panel.

  5. Click on the States tab and configure the Administrative State parameter.

  6. Save and close the form.

19 

To specify queue overrides, click on the Override Policy Items tab.

Note: The Override Policy Items tab contains a number of sub-tabs. However, the sub-tabs that are displayed depend on the port type that you have chosen for this interface.

  • If the port is not an HSMDA port, the Access Ingress Queues, Access Egress Queues, Ingress Policer, and Egress Policer sub-tabs are active.

  • If the port is an HSMDA port, the Access Ingress Queues, Access Egress HSMDA Queues, and Ingress Policer sub-tabs are active.

20 

Save your changes and close the forms.

End of steps