VPN Console: Provisioning Menu

Add VPN Service to CE, which explains how to submit a new Service Request to add VPN service between a PE and a CE.
Deploy Service Requests, which explains how to set up a scheduled task that deploys Service Request(s) to the appropriate routers.
View Deployment Log, which explains how to view a deployment log.
Export Service Request Configlets, which explains how to export configlets to a directory.
List All New Service Requests, which explains how to get a report of all new Service Requests with the state of Requested.
List All Service Requests, which explains how to get a report of all Service Requests in the system.
Purge Closed Requests from Database, which explains how to purge all closed Service Requests from the database.

Note Refer to the Cisco VPN Solutions Center: MPLS Solution User Guide for more details.

Add VPN Service to CE

This section explains how to submit a new Service Request to add VPN service between a PE and a CE.

To add VPN service to a CE, implement the following steps:

Step 1 From the VPN Console window, choose Provisioning > Add VPN Service to CE, as shown in Figure 6-2, "Add VPN Service to CE."

Note An alternative to selecting Provisioning > Add VPN Service to CE is to select Tools > Tasks and then in the Actions menu item select New Task > Add VPN Service to CE and click Ok. Both paths navigate to the same set of wizards.

Figure 6-2: Add VPN Service to CE

The next window to appear is an Introduction that explains what occurs when taking this path.

Step 2 Click Next in the Introduction window to continue.

Step 3 In Figure 6-2, "Add VPN Service to CE," use the drop down menu to select the Customer from which you want to select a CE.

Figure 6-3: Add VPN Service to CE

Step 4 Use the drop-down menu to select the Site from which you want to select the CE.

Step 5 In the CE Routers pane, highlight one CE router you want to select.

Step 6 Click Next to continue.

Step 7 In the resulting window, as shown in Figure 6-4, "Add VPN Service to CESelect CE," use the drop-down menu to select the Provider from which you want to select a PE.

Figure 6-4: Add VPN Service to CE---Select CE

Step 8 Use the drop-down menu to select the Region from which you want to select a PE.

Step 9 In the PE Routers pane, highlight one PE router that you want to select.

Step 10 Click Next to continue.

Step 11 From the Select a VPN pane in Figure 6-5, "Add VPN Service to CESelect VPN," select the VPN for which you want to create CERC memberships.

Figure 6-5: Add VPN Service to CE---Select VPN

Step 12 Optionally click one of the following:

Join as spoke The default is to join as hub. Check this option to define the VPN membership as spoke.
Advanced setup required If checked, a new window appears that allows you to join multiple VPNs.
Join the management VPN When a Management VPN has been previously created, this choice is automatically checked. Uncheck this option if you choose not to join the Management VPN.

Note Refer to the Cisco VPN Solutions Center: MPLS Solution User Guide for more information.

Step 13 Click Next to continue.

The next window to appear is shown in Figure 6-6, "Add VPN Service to CESelect Routing Policy."

Step 14 From the window in Figure 6-6, "Add VPN Service to CESelect Routing Policy," click on one of the following:

Static to select manual routing.
BGP to select the Border Gateway Protocol.
RIP to select the Routing Information Protocol.

With each routing protocol selected, certain choices are made available.

Figure 6-6: Add VPN Service to CE---Select Routing Policy

Step 15 For the Static and RIP protocols, select Give Only default routes to CE or not, depending on whether you want to give a default route.

Step 16 For the BGP protocol, you can optionally select from the following:

Neighbor AllowAS-in allows you to go to multiple BGP sites with the same AS number. Fill in the associated field with a number 1 to 10, which specifies the number of hops allowed for AS-Override.
Neighbor AS-Override allows you to re-use the same AS number for multiple BGP sites.

Step 17 For the BGP routing protocol, you must specify the BGP AS ID in the associated field. The valid numbers are 1 to 65535.

Step 18 Click Next to continue.

The next window to appear depends on the routing protocol you chose.

Step 19 Proceed to one of the following sections, depending on the protocol you chose:

Static Proto col

After choosing information for the Static Protocol, the next window to appear is shown in Figure 6-7, "Add VPN Service to CEStatic Type."

Figure 6-7: Add VPN Service to CE---Static Type

Note If in Figure 6-6, "Add VPN Service to CESelect Routing Policy," you chose Give Only Defaults Routes to CE, the defaults will be chosen and the window that appears will not have the bottom pane as shown in Figure 6-7.

Step 1 In the top pane in Figure 6-7, "Add VPN Service to CEStatic Type," click Add.

Step 2 In the resulting window, as shown in Figure 6-8, "Advertised Routes," you can enter all CE routes that you want advertised to other CEs in the same VPN. Enter the specific address in IP Address and click Add.

This populates the bottom pane. Then you can choose to Modify or Delete entries in this bottom pane.

Figure 6-8: Advertised Rou tes

Step 3 In the bottom pane in Figure 6-7, "Add VPN Service to CEStatic Type," click Add.

Step 4 In the resulting window, as shown in Figure 6-9, "Routes to Reach All Sites," you can enter routes to reach all sites. Enter the specific address in IP Address and click Add.

This populates the bottom pane. Then you can choose to Modify or Delete entries in this bottom pane.

Figure 6-9: Routes to Reach All Sites

Step 5 Click Ok to continue.

Step 6 Returned to a window as in Figure 6-7, "Add VPN Service to CEStatic Type," you will find the panel populated. Click Next to continue.

Step 7 Proceed to the "Steps After Choosing the Protocol" section.

BGP Proto col

After choosing information for the BGP Protocol, the next window to appear is shown in Figure 6-10, "Add VPN Service to CEBGP Type."

Figure 6-10: Add VPN Service to CE---BGP Type

Step 1 In Figure 6-10, "Add VPN Service to CEBGP Type," click Add to add the routing protocol you want to redistribute into BGP.

Step 2 In the resulting window, shown in Figure 6-11, "Redistributed Protocols," select a redistributed protocol. This allows a CE using BGP to learn its routing information by redistribution.

Figure 6-11: Redistributed Prot ocols

Step 3 Click Add to populate the lower pane with the protocol you choose.

Step 4 Repeat Step 2 and Step 3 until you have populated the bottom pane with all the redistributed protocols you want to use.

Note Once information exists in the bottom pane, you can highlight an item and click Delete to delete it.

Step 5 Click Ok to continue.

Step 6 Returned to a window as in Figure 6-10, "Add VPN Service to CEBGP Type," you will find the panel populated. Click Next to continue.

Step 7 Proceed to the "Steps After Choosing the Protocol" section.

RIP Protocol

After choosing information for the RIP Protocol, the next window to appear is shown in Figure 6-12, "Add VPN Service to CERIP Type."

Figure 6-12: Add VPN Service to CE---RIP Type

Step 1 In Figure 6-12, "Add VPN Service to CERIP Type," click Add to add the routing protocol you want to redistribute into RIP.

Step 2 In the resulting window, shown in Figure 6-13, "Redistributed Protocols," select a redistributed protocol. This allows a CE using RIP to learn its routing information by redistribution.

Figure 6-13: Redistributed Proto cols

Step 3 Click Add to populate the lower pane with the protocol you choose.

Step 4 Repeat Step 2 and Step 3 until you have populated the bottom pane with all the redistributed protocols you want to use.

Note Once information exists in the bottom pane, you can highlight an item and click Delete to delete it.

Step 5 Click Ok to continue.

Step 6 Returned to a window as in Figure 6-12, "Add VPN Service to CERIP Type," you will find the panel populated. Click Next to continue.

Step 7 Proceed to the "Steps After Choosing the Protocol" section.

Steps After Choosing the Protocol

After choosing a routing protocol, in the resulting window, shown in Figure 6-14, "Add VPN Service to CESelect PE CE Interface," you select in formation about the type of interface.

Figure 6-14: Add VPN Service to CE---Select PE CE Interface

Step 1 Choose the WAN or LAN interface.

Step 2 In the second pane, select the interface and encapsulation types for the PE from the Interface and Encapsulation drop-down menus, respectively. The Interface choices come from the configuration file and the Encapsulation choices are associated by the interface.

Step 3 In the final pane, select the interface and encapsulation types for the CE from the Interface and Encapsulation drop-down menus, respectively. The Interface choices come from the configuration file and the Encapsulation choices are associated by the interface.

Step 4 Click Next to continue.

Step 5 The layout of the next window to appear depends on the interface and encapsulation you chose in Figure 6-14, "Add VPN Service to CESelect PE CE Interface." Figure 6-15, "Example of Add VPN Service to CESelect Encap Info," is an example of selecting encapsulation information.

Enter the following information for the associated encapsulation types:

Frame Relay: Enter the data-link connection identifier (DLCI).
ATM: Enter the Sub-interface, virtual path identifier (VPI), and virtual channel identifier (VCI).
ISL: Enter the virtual LAN (VLAN) identifier.

For other encapsulation types, this window does not appear. Proceed to Step 6.

Figure 6-15: Example of Add VPN Service to CE---Select Encap Info

Step 6 In the next window, as shown in Figure 6-16, "Add VPN Service to CESelect VRF Parameters," select an IP addressing scheme for the PE and CE.

Select one of the following:

IP Unnumbered is only available if you chose WAN in Figure 6-14, "Add VPN Service to CESelect PE CE Interface." IP unnumbered is configured on the PE and CE interfaces.
IP Numb ered is available if you chose WAN or LAN in Figure 6-14, "Add VPN Service to CESelect PE CE Interface." IP numbered is configured on the PE and CE interfaces.
IP Numbered With Extra CE Loopback is available if you chose WAN or LAN in Figure 6-14, "Add VPN Service to CESelect PE CE Interface." IP numbered is configured on the PE and CE interfaces and a loopback is configured on the CE.

Additionally, you can check the box to Use Automatically Assigned IP Address (only if you chose WAN in Figure 6-14, "Add VPN Service to CESelect PE CE Interface") or uncheck the box and enter IP address information for the following (the choices available depend on the address scheme you chose):

PE Interface If IP Unnumbered was chosen, this is from pool /32; if IP Numbered was chosen, this is from pool /30; if IP Numbered With Extra CE Loopback was chosen, this is from pool /30.
CE Interface If IP Unnumbered was chosen, this is from pool /32; if IP Numbered was chosen, this is from pool /30; if IP Numbered With Extra CE Loopback was chosen, this is from pool /30.
CE Loopback This choice is only available if IP Numbered With Extra CE Loopback was chosen. It is from pool /32.

Figure 6-16: Add VPN Service to CE---Select VRF Parameters

Step 7 Click Next to continue.

Step 8 In the resulting window, as shown in Figure 6-17, "Add VPN Service to CESelect VRF Parameters," enter the following information:

Export Map Enter the name of an existing export route map on the PE.
Import Map Enter the name of an existing import route map on the PE.
Maximum Ro ute Enter the maximum number of routes that can be imported into the VPN routing/forwarding instant (VRF) on this PE.
Turn on NetFlow accounting Check this box if you want to turn on NetFlow accounting. Otherwise, be sure this box is not checked.

Figure 6-17: Add VPN Service to CE---Select VRF Parameters

Step 9 Click Next to continue.

Step 10 In the next window, as shown in Figure 6-18, "Add VPN Service to CESelect CoS Profile," from the list, you can optionally highlight a Class of Service (CoS) profile to assign to the PE to CE link.

Figure 6-18: Add VPN Service to CE---Select CoS Profile

Step 11 Click Next to continue.

Step 12 The final window, as shown in Figure 6-19, "Add VPN Service to CEConfirm," provides a list of all the information for Add VPN Service to CE. Review this information. If information is inaccurate, be sure to continue to click < Back until you reach the window to update the invalid information. Then click Next until you exit.

Figure 6-19: Add VPN Service to CE---Confirm

If the information in this final window is accurate, click Next to complete this path.

Deploy Service Requests

This section explains how to set up a scheduled task that deploys Service Request(s) to the appropriate routers.

To deploy Service Requests, implement the following step:

Step 1 From the VPN Console window, choose Provisioning > Deploy Service Requests, as shown in Figure 6-20, "Deploy Service Requests."

Note An alternative to selecting Provisioning > Deploy Service Requests is to select Tools > Tasks and then in the Actions menu item select New Task > Deploy Service Requests and click Ok. Both paths navigate to the same set of wizards.

Figure 6-20: Deploy Service Requests

The next window to appear is an Introduction that explains what occurs when taking this path.

Step 2 Click Next in the Introduction window to continue.

The next window to appear is shown in Figure 6-21, "Deploy Service RequestsDeploy Which Requests."

Figure 6-21: Deploy Service Requests---Deploy Which Requests

Step 3 From the window in Figure 6-21, "Deploy Service RequestsDeploy Which Requests," choose which of the following you want to deploy:

Deploy all new service requests
Deploy selected service requests

Step 4 Click Next to continue.

If you selected Deploy selected service requests the next window to appear is as shown in Figure 6-22, "Deploy Service RequestsSelect Requests," and you should proceed to Step 9.

If you selected Deploy all new service requests, proceed to Step 7.

Figure 6-22: Deploy Service Requests---Select Requests

Step 5 From the window in Figure 6-22, "Deploy Service RequestsSelect Requests," choose one or more specific Service Request IDs.

Step 6 Click Next to continue.

Step 7 From the window in Figure 6-23, "Deploy Service RequestsSelect Audit Options," choose either of the following:

Generate audit reports
Do not generate audit reports

Figure 6-23: Deploy Service Requests---Select Audit Options

Step 8 Click Next to continue.

The next window to appear is shown in Figure 6-24, "Deploy Service RequestsSave."

Figure 6-24: Deploy Service Requests---Save

Step 9 In the window in Figure 6-24, "Deploy Service RequestsSave," provide a unique Task Name.

Step 10 Click Next to continue.

Step 11 In the next window you can choose to schedule the task by selecting Yes and clicking Next. In this case, the next step is Step 12.

You can choose not to schedule the task by selecting No and clicking Next. In this case, the next step is Step 13.

Step 12 If you chose to schedule the task, in the next window, choose the scheduling directions and click Next. See Chapter 11, "Scheduling," for a detailed description of scheduling.

Step 13 If you did not schedule the task, you are informed that "The task manager is about to save the task." If you did schedule the task, you are informed that "The task manager is about to save and schedule the task." If you want to change your mind on the scheduling instructions, click Back and return to Step 11 or Step 12. When you are ready to save and schedule the task, click Next.

Step 14 You are informed that "All steps are done." Click Close to close the wizard.

View Deployment Log

This section explains how to view a deployment log.

To view the deployment log, implement the following step:

Step 1 From the VPN Console window, choose Provisioning > View Deployment Log, as shown in Figure 6-25, "View Deployment Log."

Figure 6-25: View Deployment Log

The window that appears is as shown in Figure 6-26, "Task Logs Information." This presently is the same information as when you navigate Tools > Task Logs. See the "Task Logs" section.

Figure 6-26: Task Logs Information

Export Service Request Configlets

This section explains how to export configlets to a directory.

To export Service Request configlets, implement the following steps:

Step 1 From the VPN Console window, choose Provisioning > Export Service Request Configlets, as shown in Figure 6-27, "Export Service Request Configlets."

Note An alternative to selecting Provisioning > Export Service Request Configlets is to select Tools > Tasks and then in the Actions menu item select New Task > Export Service Request Configlets and click Ok. Both paths navigate to the same set of wizards.

Figure 6-27: Export Service Request Configlets

The next window to appear is an Introduction that explains what occurs when taking this path.

Step 2 Click Next in the Introduction window to continue.

Figure 6-28: Export Service Request Configlets---Specify Output Directory

Step 3 From the window as shown in Figure 6-28, "Export Service Request ConfigletsSpecify Output Directory," in the field enter the output directory for the configlets.

Step 4 Click Next to continue.

Step 5 From the window as shown in Figure 6-29, "Export Service Request ConfigletsSpecify Type of Requests," select the button Specific requests or a button for one of the states: Pending; Invalid; Failed Deploy; Deployed; Broken; Functional; Lost; or Closed.

Figure 6-29: Export Service Request Configlets---Specify Type of Requests

Step 6 From the window as shown in Figure 6-30, "Export Service Request ConfigletsSelect Specific Requests," select one or more Service Requests.

Figure 6-30: Export Service Request Configlets---Select Specific Requests

Step 7 Click Next to continue.

The resulting window indicates completion and the name of the directory where the configuration files for the CE and PE reside.

Step 8 Click Close.

List All New Service Requests

This section explains how to get a report of all new Service Requests with the state of Requested.

To list all new Service Requests, implement the following step:

Step 1 From the VPN Console window, choose Provisioning > List All New Service Requests, as shown in Figure 6-31, "List All New Service Requests."

Figure 6-31: List All New Service Requests

An example of a report that lists new service requests is provided in Figure 6-32, "Sample New VPN Service Requests Report."

Figure 6-32: Sample New VPN Service Requests Report

For information within the List New Service Requests reports, first see the generic report fields and their explanations in Chapter 12, "Reports Overview." Additionally each report has a report-specific Results pane and bottom task bar information, as shown in the following sections.

Results Pane for List All Service Requests

The columns of information are as follows:

ID is the internal identification of the service request.
Type is the service request type. The valid values are: Add VPN Service; Modify VPN Service; Remove VPN Service.
State is the service request state. The only valid value is Requested.
PE Router is the name of the PE Router that is chosen when you create a service request.
CE Router is the name of the CE Router that is chosen when you create a service request.
Customer is the name of the customer to which the service request belongs.
VPN is the name of the VPN to which the service request belongs.
Created At is the time that the service request was created.
Last State Change is the time of the last state change.

Bottom Task Bar

The buttons are described from left to right as follows:

Request Details button. Click this button to get a Service Request Detail Report, as shown in Figure 6-33, "Example of Service Request Detail Report."
Provisioning button. Click this button to point to actions of what to do with Service Requests. Remove VPN Service to create a new Service Request to remove the selected Service Request; Modify VPN Service to bring up Service Request Modification to modify the Service Request; or Deploy VPN Service to call the servers to deploy the Service Request to the network

Service Request Detail Report

The Service Request Detail Report contains the detailed information of a Service Request entered at creation time and/or at the process of Provisioning. An example of the Service Request Detail Report is shown in Figure 6-33, "Example of Service Request Detail Report."

Figure 6-33: Example of Service Request Detail Report

The buttons on the bottom task bar are described from left to right as follows:

Provisioning. Click this drop-down menu and then choose Remove VPN Service to create a new Service Request to remove the selected Service Request; Modify VPN Service to bring up Service Request Modification task to modify the Service Request; or Deploy VPN Service to call the servers to deploy the Service Request to the network.
Configlets. Click this button to produce a report that contains configlets that have been downloaded to PE and CE for Service Requests.
Audit Detail. Click this button to get audit information about this Service Request.
State History. If the current Service Request was created to remove or modify a previous Service Request, click this button to see the replaced Service Request.

List All Service Requests

This section explains how to get a report of all Service Requests in the system.

To list all Service Requests, implement the following step:

Step 1 From the VPN Console window, choose Provisioning > List All Service Requests, as shown in Figure 6-34, "List All Service Requests."

Figure 6-34: List All Service Requests

An example of a report that lists all service requests is provided in Figure 6-35, "Sample All VPN Service Requests Report."

Figure 6-35: Sample All VPN Service Requests Report

For information within the List All Service Requests reports, first see the generic report fields and their explanations in Chapter 12, "Reports Overview." Additionally each report has a report-specific Results pane and bottom task bar information, as shown in the following sections.

Results Pane for List All Service Requests

The columns of information are as follows:

ID is the internal identification of the service request.
Type is the service request type. The valid values are: Add VPN Service; Modify VPN Service; Remove VPN Service.
State is the service request state. The valid values are: Requested; Pending; Invalid; Failed Deploy; Deployed; Broken; Functional; Lost; Closed.
PE Router is the name of the PE Router that is chosen when you create a service request.
CE Router is the name of the CE Router that is chosen when you create a service request.
Customer is the name of the customer to which the service request belongs.
VPN is the name of the VPN to which the service request belongs.
Created At is the time that the service request was created.
Last State Change is the time of the last state change.

Bottom Task Bar

The buttons are described from left to right as follows:

Request Details button. Click this button to get a Service Request Detail Report, as shown in Figure 6-36, "Example of Service Request Detail Report."
Provisioning button. Click this button to point to actions of what to do with Service Requests. Remove VPN Service to create a new Service Request to remove the selected Service Request; Modify VPN Service to bring up Service Request Modification to modify the Service Request; or Deploy VPN Service to call the servers to deploy the Service Request to the network

Service Request Detail Report

Figure 6-36: Example of Service Request Detail Report

The buttons on the bottom task bar are described from left to right as follows:

Provisioning. Click this drop-down menu and then choose Remove VPN Service to create a new Service Request to remove the selected Service Request; Modify VPN Service to bring up Service Request Modification task to modify the Service Request; or Deploy VPN Service to call the servers to deploy the Service Request to the network.
Configlets. Click this button to produce a report that contains configlets that have been downloaded to PE and CE for Service Requests.
Audit Detail. Click this button to get audit information about this Service Request.
State History. If the current Service Request was created to remove or modify a previous Service Request, click this button to see the replaced Service Request.

Purge Closed Requests from Database

This section explains how to purge all closed Service Requests from the database.

To purge closed requests from the database, implement the following steps:

Step 1 From the VPN Console window, choose Provisioning> Purge Closed Requests from Database, as shown in Figure 6-37, "Purge Closed Requests from Database."

Figure 6-37: Purge Closed Requests from Database

Step 2 From the resulting window shown in Figure 6-38, "WarningPurging Service Requests," choose one of the following:

Yes Be very careful. This will purge all closed Service Requests from the database.
No This will cancel this procedure and not purge closed Service Requests from the database.

Figure 6-38: Warning---Purgin g Service Requests

Table of Contents

VPN Console: Provisioning Menu