Table Of Contents
Prerequisites for the LSP Health Monitor
Restrictions for the LSP Health Monitor
Information About the LSP Health Monitor
Benefits of the LSP Health Monitor
How the LSP Health Monitor Works
Discovery of Neighboring PE Routers
IP SLAs LSP Ping and LSP Traceroute Operations
Proactive Threshold Monitoring for the LSP Health Monitor
Multioperation Scheduling for the LSP Health Monitor
How to Use the LSP Health Monitor
Configuring the LSP Health Monitor on a Source PE Router
Manually Configuring an IP SLAs LSP Ping or LSP Traceroute Operation
Verifying and Troubleshooting the LSP Health Monitor
Configuration Examples for LSP Health Monitor
Configuring and Verifying the LSP Health Monitor: Example
Manually Configuring an IP SLAs LSP Ping Operation: Example
rtr mpls-lsp-monitor reaction-configuration
show rtr mpls-lsp-monitor configuration
show rtr mpls-lsp-monitor neighbors
show rtr mpls-lsp-monitor scan-queue
Feature Information for the LSP Health Monitor
IP SLAs—LSP Health Monitor
First Published: September 12, 2005Last Updated: May 29, 2006The IP Service Level Agreements (SLAs) label switched path (LSP) Health Monitor feature provides the capability to proactively monitor Layer 3 Multiprotocol Label Switching (MPLS) Virtual Private Networks (VPNs). This feature is useful for determining network availability or testing network connectivity between Provider Edge (PE) routers in an MPLS VPN. Once configured, the LSP Health Monitor will automatically create and delete IP SLAs LSP ping or LSP traceroute operations based on network topology.
The LSP Health Monitor feature also allows you to perform multioperation scheduling of IP SLAs operations and supports proactive threshold violation monitoring through SNMP trap notifications and syslog messages.
Finding Feature Information in This Module
Your Cisco IOS software release may not support all of the features documented in this module. To reach links to specific feature documentation in this module and to see a list of the releases in which each feature is supported, use the "Feature Information for the LSP Health Monitor" section.
Finding Support Information for Platforms and Cisco IOS and Catalyst OS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Contents
•
Prerequisites for the LSP Health Monitor
•
Restrictions for the LSP Health Monitor
•
Information About the LSP Health Monitor
•
How to Use the LSP Health Monitor
•
Configuration Examples for LSP Health Monitor
•
Feature Information for the LSP Health Monitor
Prerequisites for the LSP Health Monitor
The participating PE routers must support the MPLS LSP ping feature. It is recommended that the Provider (P) routers also support the MPLS LSP Ping feature in order to obtain complete error reporting and diagnostics information.
For more information about the MPLS LSP Ping feature, see the "Related Documents" section.
Note
The destination PE routers do not require the IP SLAs Responder to be enabled.
Restrictions for the LSP Health Monitor
The Cisco IOS Release 12.2(27)SBC and Release 12.2(33)SRA implementation of the LSP Health Monitor feature supports only Layer 3 MPLS VPNs. This software release also supports only single path connectivity measurements between the source PE router and associated Border Gateway Protocol (BGP) next hop neighbors.
Information About the LSP Health Monitor
To use the LSP Health Monitor feature, you should understand the following concepts:
•
Benefits of the LSP Health Monitor
•
How the LSP Health Monitor Works
•
Discovery of Neighboring PE Routers
•
IP SLAs LSP Ping and LSP Traceroute Operations
•
Proactive Threshold Monitoring for the LSP Health Monitor
•
Multioperation Scheduling for the LSP Health Monitor
Benefits of the LSP Health Monitor
The LSP Health Monitor feature provides the following key benefits:
•
End-to-end LSP connectivity measurements for determining network availability or testing network connectivity in MPLS networks
•
Proactive threshold violation monitoring through SNMP trap notifications and syslog messages
•
Reduced network troubleshooting time for MPLS networks
•
Scalable network error detection using fast retry capability
•
Creation and deletion of IP SLAs LSP ping and LSP traceroute operations based on network topology
•
Discovery of BGP next hop neighbors based on local VPN routing or forwarding instances (VRFs) and global routing tables
•
Multioperation scheduling of IP SLAs operations
How the LSP Health Monitor Works
The LSP Health Monitor feature provides the capability to proactively monitor Layer 3 MPLS VPNs. The general process for how the LSP Health Monitor works is as follows:
1.
The user enables the BGP next hop neighbor discovery process on a given PE router.
When this process is enable, a database of BGP next hop neighbors in use by any VRF associated with the source PE router is generated based on information from the local VRF and global routing tables. For more information about the BGP next hop neighbor discovery process, see the "Discovery of Neighboring PE Routers" section.
2.
The user configures an LSP Health Monitor operation.
Configuring an LSP Health Monitor operation is similar to configuring a standard IP SLAs operation. To illustrate, all operation parameters for an LSP Health Monitor operation are configured after an identification number for the operation is specified. However, unlike standard IP SLAs operations, these configured parameters are then used as the base configuration for the individual IP SLAs LSP ping and LSP traceroute operations that will be created by the LSP Health Monitor.
3.
The user configures proactive threshold violation monitoring for the LSP Health Monitor operation.
4.
The user configures multioperation scheduling parameters for the LSP Health Monitor operation.
5.
Depending on the configuration options chosen, the LSP Health Monitor automatically creates individual IP SLAs LSP ping or LSP traceroute operations for each applicable BGP next hop neighbor.
For any given LSP Health Monitor operation, only one IP SLAs LSP ping or LSP traceroute operation will be configured per BGP next hop neighbor. However, more than one LSP Health Monitor operation can be running on a particular PE router at the same time (for more details, see the note at the end of this section).
6.
Each IP SLAs LSP ping or LSP traceroute operation measures network connectivity between the source PE router and the discovered destination PE router.
Note
More than one LSP Health Monitor operation can be running on a particular PE router at the same time. For example, one LSP Health Monitor operation can be configured to discover BGP next hop neighbors belonging to the VRF named VPN1. On the same PE router, another LSP Health Monitor operation can be configured to discover neighbors belonging to the VRF named VPN2. In this case, if a BGP next hop neighbor belonged to both VPN1 and VPN2, then the PE router would create two IP SLAs operations for this neighbor—one for VPN1 and one for VPN2.
Adding and Deleting IP SLAs Operations from the LSP Health Monitor Database
The LSP Health Monitor receives periodic notifications about BGP next hop neighbors that have been added to or removed from a particular VPN. This information is stored in a queue maintained by the LSP Health Monitor. Based on the information in the queue and user-specified time intervals, new IP SLAs operations are automatically created for newly discovered PE routers and existing IP SLAs operations are automatically deleted for any PE routers that are no longer valid.
Access Lists for Filtering BGP Next Hop Neighbors
Standard IP access lists can be configured (using the access-list [IP standard] command in global configuration mode) to restrict the number of IP SLAs operations that are automatically created by the LSP Health Monitor. When the IP SLAs access list parameter is configured, the list of BGP next hop neighbors discovered by the LSP Health Monitor is filtered based on the conditions defined by the associated standard IP access list. In other words, the LSP Health Monitor will automatically create IP SLAs operations only for those BGP next hop neighbors with source addresses that satisfy the criteria permitted by the standard IP access list.
For more information about configuring standard IP access lists, see the "Related Documents" section.
Unique Identifier for Each Automatically Created IP SLAs Operation
The IP SLAs operations automatically created by the LSP Health Monitor are uniquely identified by their owner field. The owner field of an operation is generated using all the parameters that can be configured for that particular operation. If the length of the owner field is longer than 255 characters, it will be truncated.
Discovery of Neighboring PE Routers
A BGP next hop neighbor discovery process is used to find the BGP next hop neighbors in use by any VRF associated with the source PE router. In most cases, these neighbors will be PE routers.
When the BGP next hop neighbor discovery process is enabled, a database of BGP next hop neighbors in use by any VRF associated with the source PE router is generated based on information from the local VRF and global routing tables. As routing updates are received, new BGP next hop neighbors are added immediately to the database. However, BGP next hop neighbors (that are no longer valid) are only removed from the database periodically as defined by the user.
Figure 1 shows how the BGP next hop neighbor discovery process works for a simple VPN scenario for an Internet service provider (ISP). In this example, there are three VPNs associated with router PE1: red, blue, and green. From the perspective of router PE1, these VPNs are reachable remotely through BGP next hop neighbors PE2 (router ID: 12.12.12.12) and PE3 (router ID: 13.13.13.13). When the BGP next hop neighbor discovery process is enabled on router PE1, a database is generated based on the local VRF and global routing tables. The database in this example contains two BGP next hop router entries: PE2 12.12.12.12 and PE3 13.13.13.13. The routing entries are maintained per next hop router to distinguish which next hop routers belong within which particular VRF. For each next hop router entry, the IPv4 Forward Equivalence Class (FEC) of the BGP next hop router in the global routing table is provided so that it can be used by the MPLS LSP ping operation. For more information about the MPLS LSP Ping feature, see the "Related Documents" section.
Figure 1 BGP Next Hop Neighbor Discovery for a Simple VPN
IP SLAs LSP Ping and LSP Traceroute Operations
This feature introduces support for the IP SLAs LSP ping and IP SLAs LSP traceroute operations. These operations are useful for troubleshooting network connectivity issues and determining network availability in an MPLS VPN. When using the LSP Health Monitor, IP SLAs LSP ping and LSP traceroute operations are automatically created to measure network connectivity between the source PE router and the discovered destination PE routers. Individual IP SLAs LSP ping and LSP traceroute operations can also be manually configured. Manual configuration of these operations can be useful for troubleshooting a connectivity issue.
For more information on how to configure IP SLAs LSP ping or LSP traceroute operations using the LSP Health Monitor, see the "Configuring the LSP Health Monitor on a Source PE Router" section. For more information on how to manually configure an individual IP SLAs LSP ping or LSP traceroute operation, see the "Manually Configuring an IP SLAs LSP Ping or LSP Traceroute Operation" section.
The IP SLAs LSP ping and IP SLAs LSP traceroute operations are based on the same infrastructure used by the MPLS LSP Ping and MPLS LSP Traceroute features, respectively, for sending and receiving echo reply and request packets to test LSPs. For more information about the MPLS LSP Ping and MPLS LSP Traceroute features, see the "Related Documents" section.
Proactive Threshold Monitoring for the LSP Health Monitor
Proactive threshold monitoring support for the LSP Health Monitor feature provides the capability for triggering SNMP trap notifications and syslog messages when user-defined reaction conditions (such as a connection loss or timeout) are met. Configuring threshold monitoring for an LSP Health Monitor operation is similar to configuring threshold monitoring for a standard IP SLAs operation. For more information about proactive threshold monitoring for Cisco IOS IP SLAs, see the "Related Documents" section.
With the introduction of the LSP Health Monitor feature, a new operation parameter has been added that allows you to specify a secondary frequency. If the secondary frequency option is configured and a failure (such as a connection loss or timeout) is detected for a particular LSP, the frequency at which the failed LSP is remeasured will increase to the secondary frequency value (testing at a faster rate). When the configured reaction condition is met (such as n consecutive connection losses or n consecutive timeouts), an SNMP trap and syslog message can be sent and the measurement frequency will return to its original frequency value.
Multioperation Scheduling for the LSP Health Monitor
Multioperation scheduling support for the LSP Health Monitor feature provides the capability to easily schedule the automatically created IP SLAs operations (for a given LSP Health Monitor operation) to begin at intervals equally distributed over a specified duration of time (schedule period) and to restart at a specified frequency. Multioperation scheduling is particularly useful in cases where the LSP Health Monitor is enabled on a source PE router that has a large number of PE neighbors and, therefore, a large number of IP SLAs operations running at the same time.
Note
Newly created IP SLAs operations (for newly discovered BGP next hop neighbors) are added to the same schedule period as the operations that are currently running. To prevent too many operations from starting at the same time, the multioperation scheduling feature will schedule the operations to begin at random intervals uniformly distributed over the schedule period.
Configuring a multioperation schedule for the LSP Health Monitor is similar to configuring a standard multioperation schedule for a group of individual IP SLAs operations. For more information about scheduling a group of standard IP SLAs operations, see the "Related Documents" section.
How to Use the LSP Health Monitor
This section contains the following tasks:
•
Configuring the LSP Health Monitor on a Source PE Router (required)
•
Manually Configuring an IP SLAs LSP Ping or LSP Traceroute Operation (optional)
•
Verifying and Troubleshooting the LSP Health Monitor (optional)
Configuring the LSP Health Monitor on a Source PE Router
Perform this task to configure the operation parameters, reaction conditions, and scheduling options for an LSP Health Monitor operation. The IP SLAs measurement statistics are stored on the source PE router.
Prerequisites
The LSP Health Monitor must be configured on a PE router.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
mpls discovery vpn next-hop
4.
mpls discovery vpn interval seconds
5.
rtr mpls-lsp-monitor operation-number
6.
type {echo | pathEcho} [saa-vrf-all | vrf vpn-name]
7.
access-list access-list-number
8.
delete-scan-factor factor
9.
exp exp-bits
10.
lsp-selector ip-address
11.
reply-dscp-bits dscp-value
12.
reply-mode {ipv4 | router-alert}
13.
request-data-size bytes
14.
scan-interval minutes
15.
secondary-frequency {connection-loss | timeout} frequency
16.
tag text
17.
threshold milliseconds
18.
timeout milliseconds
19.
ttl time-to-live
20.
exit
21.
rtr mpls-lsp-monitor reaction-configuration operation-number react monitored-element [action-type option] [threshold-type {consecutive [occurrences] | immediate | never}]
22.
rtr mpls-lsp-monitor schedule operation-number schedule-period seconds [frequency [seconds]] [start-time {after hh:mm:ss | hh:mm[:ss] [month day | day month] | now | pending}]
23.
exit
DETAILED STEPS
Manually Configuring an IP SLAs LSP Ping or LSP Traceroute Operation
Perform this task to manually configure an IP SLAs LSP ping or LSP traceroute operation.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
rtr operation-number
4.
type mpls lsp {ping | trace} ipv4 destination-address destination-mask [lsp-selector ip-address] [src-ip-addr source-address] [reply {dscp dscp-value | mode {ipv4 | router-alert}}]
5.
exp exp-bits
6.
request-data-size bytes
7.
secondary-frequency {connection-loss | timeout} frequency
8.
tag text
9.
threshold milliseconds
10.
timeout milliseconds
11.
ttl time-to-live
12.
exit
13.
rtr reaction-configuration operation-number [react monitored-element] [threshold-type {never | immediate | consecutive [consecutive-occurrences] | xofy [x-value y-value] | average [number-of-probes]}] [threshold-value upper-threshold lower-threshold] [action-type {none | trapOnly | triggerOnly | trapAndTrigger}]
14.
rtr schedule operation-number [life {forever | seconds}] [start-time {hh:mm[:ss] [month day | day month] | pending | now | after hh:mm:ss}] [ageout seconds] [recurring]
15.
exit
DETAILED STEPS
Verifying and Troubleshooting the LSP Health Monitor
Perform this task to verify and troubleshoot the LSP Health Monitor.
SUMMARY STEPS
1.
show mpls discovery vpn
2.
show rtr mpls-lsp-monitor configuration [operation-number]
3.
show rtr mpls-lsp-monitor neighbors
4.
show rtr mpls-lsp-monitor scan-queue operation-number
5.
debug rtr mpls-lsp-monitor [operation-number]
6.
show rtr configuration [operation-number]
7.
show rtr operational-state [operation-number]
8.
show rtr collection-statistics [operation-number]
DETAILED STEPS
Configuration Examples for LSP Health Monitor
This section provides the following configuration examples:
•
Configuring and Verifying the LSP Health Monitor: Example
•
Manually Configuring an IP SLAs LSP Ping Operation: Example
Configuring and Verifying the LSP Health Monitor: Example
Figure 2 illustrates a simple VPN scenario for an ISP. This network consists of a core MPLS VPN with four PE routers belonging to three VPNs: red, blue, and green. From the perspective of router PE1, these VPNs are reachable remotely through BGP next hop routers PE2 (router ID: 10.10.10.5), PE3 (router ID: 10.10.10.7), and PE4 (router ID: 10.10.10.8).
The following example shows how to configure operation parameters, reaction conditions, and scheduling options on router PE1 (see Figure 2) using the LSP Health Monitor. In this example, LSP Health Monitor operation 1 is configured to automatically create IP SLAs LSP ping operations for all BGP next hop neighbors (PE2, PE3, and PE4) in use by all VRFs (red, blue, and green) associated with router PE1.
Router PE1 Configuration
mpls discovery vpn interval 60mpls discovery vpn next-hop!rtr mpls-lsp-monitor 1type echo saa-vrf-alltimeout 1000scan-interval 1secondary-frequency connection-loss 10secondary-frequency timeout 10!rtr mpls-lsp-monitor reaction-configuration 1 react connectionLoss threshold-type consecutive 3 action-type trapOnlyrtr mpls-lsp-monitor reaction-configuration 1 react timeout threshold-type consecutive 3 action-type trapOnlyrtr logging traps!rtr mpls-lsp-monitor schedule 1 schedule-period 60 start-time nowFigure 2 Network Used for LSP Health Monitor Example
The following is sample output from the show rtr mpls-lsp-monitor configuration command for router PE1:
PE1# show rtr mpls-lsp-monitor configuration 1Entry Number : 1Modification time : *12:18:21.830 PDT Fri Aug 19 2005Operation Type : echoVrf Name : saa-vrf-allTag :EXP Value : 0Timeout(ms) : 1000Threshold(ms) : 5000Frequency(sec) : Equals schedule periodLSP Selector : 127.0.0.1ScanInterval(min) : 1Delete Scan Factor : 1Operations List : 100001-100003Schedule Period(sec): 60Request size : 100Start Time : Start Time already passedSNMP RowStatus : ActiveTTL value : 255Reply Mode : ipv4Reply Dscp Bits :Secondary Frequency : Enabled on TimeoutValue(sec) : 10Reaction Configs :Reaction : connectionLossThreshold Type : ConsecutiveThreshold Count : 3Action Type : Trap OnlyReaction : timeoutThreshold Type : ConsecutiveThreshold Count : 3Action Type : Trap OnlyThe following is sample output from the show mpls discovery vpn command for router PE1:
PE1# show mpls discovery vpnRefresh interval set to 60 seconds.Next refresh in 46 secondsNext hop 10.10.10.5 (Prefix: 10.10.10.5/32)in use by: red, blue, greenNext hop 10.10.10.7 (Prefix: 10.10.10.7/32)in use by: red, blue, greenNext hop 10.10.10.8 (Prefix: 10.10.10.8/32)in use by: red, blue, greenThe following is sample output from the show rtr mpls-lsp-monitor neighbors command for router PE1:
PE1# show rtr mpls-lsp-monitor neighborsSAA MPLS LSP Monitor Database : 1BGP Next hop 10.10.10.5 (Prefix: 10.10.10.5/32) OKProbeID: 100001 (red, blue, green)BGP Next hop 10.10.10.7 (Prefix: 10.10.10.7/32) OKProbeID: 100002 (red, blue, green)BGP Next hop 10.10.10.8 (Prefix: 10.10.10.8/32) OKProbeID: 100003 (red, blue, green)The following is sample output from the show rtr mpls-lsp-monitor scan-queue 1 and debug rtr mpls-lsp-monitor commands when IP connectivity from router PE1 to router PE4 is lost. This output shows that connection loss to each of the VPNs associated with router PE4 (red, blue, and green) was detected and that this information was added to the LSP Health Monitor scan queue. Also, since router PE4 is no longer a valid BGP next hop neighbor, the IP SLAs operation for router PE4 (Probe 10003) is being deleted.
PE1# show rtr mpls-lsp-monitor scan-queue 1Next scan Time after: 20 SecsNext Delete scan Time after: 20 SecsBGP Next hop Prefix vrf Add/Delete?10.10.10.8 0.0.0.0/0 red Del(100003)10.10.10.8 0.0.0.0/0 blue Del(100003)10.10.10.8 0.0.0.0/0 green Del(100003)PE1# debug rtr mpls-lsp-monitorSAA MPLSLM debugging for all entries is on*Aug 19 19:48: SAA MPLSLM(1):Next hop 10.10.10.8 added in DeleteQ(1)*Aug 19 19:49: SAA MPLSLM(1):Removing vrf red from tree entry 10.10.10.8*Aug 19 19:56: SAA MPLSLM(1):Next hop 10.10.10.8 added in DeleteQ(1)*Aug 19 19:56: SAA MPLSLM(1):Next hop 10.10.10.8 added in DeleteQ(1)*Aug 19 19:49: SAA MPLSLM(1):Removing vrf blue from tree entry 10.10.10.8*Aug 19 19:49: SAA MPLSLM(1):Removing vrf green from tree entry 10.10.10.8*Aug 19 19:49: SAA MPLSLM(1):Removing Probe 100003The following is sample output from the show rtr mpls-lsp-monitor scan-queue 1 and debug rtr mpls-lsp-monitor commands when IP connectivity from router PE1 to router PE4 is restored. This output shows that each of the VPNs associated with router PE4 (red, blue, and green) were discovered and that this information was added to the LSP Health Monitor scan queue. Also, since router PE4 is a newly discovered BGP next hop neighbor, a new IP SLAs operation for router PE4 (Probe 100005) is being created and added to the LSP Health Monitor multioperation schedule. Even though router PE4 belongs to three VPNs, only one IP SLAs operation is being created.
PE1# show rtr mpls-lsp-monitor scan-queue 1Next scan Time after: 23 SecsNext Delete scan Time after: 23 SecsBGP Next hop Prefix vrf Add/Delete?10.10.10.8 10.10.10.8/32 red Add10.10.10.8 10.10.10.8/32 blue Add10.10.10.8 10.10.10.8/32 green AddPE1# debug rtr mpls-lsp-monitorSAA MPLSLM debugging for all entries is on*Aug 19 19:59: SAA MPLSLM(1):Next hop 10.10.10.8 added in AddQ*Aug 19 19:59: SAA MPLSLM(1):Next hop 10.10.10.8 added in AddQ*Aug 19 19:59: SAA MPLSLM(1):Next hop 10.10.10.8 added in AddQ*Aug 19 19:59: SAA MPLSLM(1):Adding vrf red into tree entry 10.10.10.8*Aug 19 19:59: SAA MPLSLM(1):Adding Probe 100005*Aug 19 19:59: SAA MPLSLM(1):Adding ProbeID 100005 to tree entry 10.10.10.8 (1)*Aug 19 19:59: SAA MPLSLM(1):Adding vrf blue into tree entry 10.10.10.8*Aug 19 19:59: SAA MPLSLM(1):Duplicate in AddQ 10.10.10.8*Aug 19 19:59: SAA MPLSLM(1):Adding vrf green into tree entry 10.10.10.8*Aug 19 19:59: SAA MPLSLM(1):Duplicate in AddQ 10.10.10.8*Aug 19 19:59: SAA MPLSLM(1):Added Probe(s) 100005 will be scheduled after 26 secs over schedule period 60Manually Configuring an IP SLAs LSP Ping Operation: Example
The following example shows how to manually configure and schedule an individual IP SLAs LSP ping operation:
rtr 1type mpls lsp ping ipv4 192.168.1.4 255.255.255.255 lsp-selector 127.1.1.1frequency 120secondary-frequency connection-loss 30secondary-frequency timeout 30!rtr reaction-configuration 1 react connectionLoss threshold-type consecutive 3 action-type trapOnlyrtr reaction-configuration 1 react timeout threshold-type consecutive 3 action-type trapOnlyrtr logging traps!rtr schedule 1 start-time now life foreverAdditional References
The following sections provide references related to the LSP Health Monitor feature.
Related Documents
Standards
MIBs
MIB MIBs LinkCISCO-RTTMON-MIB
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL:
RFCs
RFC TitleNo new or modified RFCs are supported by this feature, and support for existing RFCs has not been modified by this feature.
—
Technical Assistance
Command Reference
This section documents new commands only.
•
rtr mpls-lsp-monitor reaction-configuration
•
rtr mpls-lsp-monitor schedule
•
show rtr mpls-lsp-monitor configuration
•
show rtr mpls-lsp-monitor neighbors
•
show rtr mpls-lsp-monitor scan-queue
access-list (IP SLA)
To specify the access list to apply to a Cisco IOS IP Service Level Agreements (SLAs) label switched path (LSP) Health Monitor operation, use the access-list command in the Multiprotocol Label Switching (MPLS) parameters submode of auto IP SLA MPLS configuration or SAA MPLS configuration mode. To remove the access list, use the no form of this command.
access-list access-list-number
no access-list access-list-number
Syntax Description
access-list-number
Number of an access list. This value is a decimal number from 1 to 99 or from 1300 to 1999.
Command Default
No access list is specified.
Command Modes
Auto IP SLA MPLS Configuration
MPLS parameters configuration (config-auto-ip-sla-mpls-params)
SAA MPLS Configuration
MPLS parameters configuration (config-saa-mpls-params)
Note
The configuration mode varies depending on the Cisco IOS release you are running. See the "Usage Guidelines" section for more information.
Command History
Usage Guidelines
Standard IP access lists can be configured (using the access-list [IP standard] command in global configuration mode) to restrict the number of IP SLAs operations that are automatically created by the IP SLAs LSP Health Monitor. When the IP SLAs access list parameter is configured, the list of Border Gateway Protocol (BGP) next hop neighbors discovered by the LSP Health Monitor is filtered based on the conditions defined by the associated standard IP access list. In other words, the LSP Health Monitor will automatically create IP SLAs operations only for those BGP next hop neighbors with source addresses that satisfy the criteria permitted by the standard IP access list.
IP SLAs LSP Health Monitor Operation Configuration Dependence on Cisco IOS Release
The Cisco IOS command used to begin configuration for an IP SLAs LSP Health Monitor operation varies depending on the Cisco IOS release you are running (see Table 1). You must configure the type of LSP Health Monitor operation (such as LSP ping) before you can configure any of the other parameters of the operation.
Examples
The following example shows how to configure operation parameters, reaction conditions, and scheduling options using the LSP Health Monitor. In this example, LSP Health Monitor operation 1 is configured to automatically create IP SLAs LSP ping operations for all BGP next hop neighbors in use by all VRFs associated with the source Provider Edge (PE) router. Standard IP access list 10 is specified to restrict the number of IP SLAs operations to be created by LSP Health Monitor operation 1. Note that the Cisco IOS command used to begin configuration for an IP SLAs LSP Health Monitor operation varies depending on the Cisco IOS release you are running (see Table 1).
Auto IP SLA MPLS Configuration
!Configure standard IP access list in global configuration modeaccess-list 10 permit 10.10.10.8!



