VPLS with Storm Control

Load vpls.ldp.basic.complete.cfg

#IOS-XE (R1-R6, CE1-3)
config replace flash:vpls.ldp.basic.complete.cfg

VPLS is already pre-configured in the core.

Configure storm control on all PEs (R1, R3, R5) so that BUM traffic is policed at 8kbps.

Answer

#R1
int gi4
 service instance 1 eth
  storm-control unicast cir 8 k
  storm-control multicast cir 8 k
  storm-control broadcast cir 8 k

#R3
int gi6
 service instance 1 eth
  storm-control unicast cir 8 k
  storm-control multicast cir 8 k
  storm-control broadcast cir 8 k

#R5
int gi6
 service instance 1 eth
  storm-control unicast cir 8 k
  storm-control multicast cir 8 k
  storm-control broadcast cir 8 k

Explanation

In IOS-XR, storm control can be configured on the bridge-domain. In IOS-XE this does not appear to be an option. Instead you can set storm control on a per-service instance basis.

Testing

On CE2, join 239.1.1.1 on Gi0/0. Ping this from CE1. First set storm-control for multicast to a very high level and test how many pings are returned during normal operation. CSR1000v has a 2mb policer, so we don’t get 100% success anyways:

Now set the CIR for multicast back to 8k and test again:

The pings are so large that none get through. Reduce this to the minimum, 36 bytes, and we should at least get one or two replies:

Further Reading

https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/routers/asr920/configuration/guide/sec-data-acl/17-1-1/b-sec-data-acl-xe-17-1-asr920/b-sec-data-acl-xe-17-1-asr920_chapter_0101.html.xml