Re: How to verify triple layer label stack in Inter-AS option C

Brian is right on target :)
Just to add what Brian mentioned:-
If you are debugging a production MPLS network be careful. This command
'debug mpls packet' can bring down the whole network or customer will
complain for slow speed!

I normally use this with specific acl, remember to choose MPLS number from
acl list:
first show mpls-forwarding table to get the lable ID of an specific host/nw
-

FROG1#show mpls forwarding-table 10.10.10.10

Let's say u got label#500, now create an ACL for specific host and the
above label(500).

FROG1(config)#access-list ?
 <1-99> IP standard access list
 <100-199> IP extended access list
 <1100-1199> Extended 48-bit MAC address access list
 <1300-1999> IP standard access list (expanded range)
 <200-299> Protocol type-code access list
 <2000-2699> IP extended access list (expanded range)
 <2700-2799> MPLS access list
 <700-799> 48-bit MAC address access list
 compiled Enable IP access-list compilation
 dynamic-extended Extend the dynamic ACL absolute timer
 rate-limit Simple rate-limit specific access list

FROG1#access-list 2727 permit <any/or specific> <label> <dst>

THis would be the final ACL:

FROG1#access-list 2727 permit any 500 any any

Finally, you can turn this specific debug in your production network!!

FROG1#debug MPLS packet 2727

The show will start after that :)

HTH

frog

On Tue, May 22, 2012 at 2:01 AM, Brian McGahan

<bmcgahan_at_ine.com> wrote:

> Debug the packets in the data plane and you'll see the entire label stack.
> In IOS this is "debug mpls packet".
>
>
> HTH,
>
> Brian McGahan, CCIE #8593 (R&S/SP/Security)
> bmcgahan_at_INE.com
>
> Internetwork Expert, Inc.
> http://www.INE.com
>
> -----Original Message-----
> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> jeremy co
> Sent: Sunday, May 20, 2012 8:15 PM
> To: Cisco certification
> Subject: How to verify triple layer label stack in Inter-AS option C LSP
>
> Hi,
>
>
> I've been struggling to verify label stack in inter-as option c.
>
>
> VPN label can be verified with "sh ip bgp vpnv4 all labels" at PE.
> outer label can be verified on P routers.
>
> How to verify IPV4 label (middle label) or the whole stack on P routers?
>
> Please refer below for OptionC explanation for how LSP being constructed.
>
>
> http://www.juniper.net/techpubs/en_US/junose10.0/information-products/topic-collections/swconfig-bgp-mpls/inter-as-option-c.html
> http://www.huawei.com/products/datacomm/catalog.do?id=1495
>
>
>
> Is there anyway to verify label stack on say P routers and see all 3
> labels that has been assigned all the way ?
>
> Thanks.
>
>
> Jeremy
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Thu May 24 2012 - 10:21:56 ART