Cisco Prime Nerk 43 User Guide

							  
17-25
Cisco Prime Network 4.3.2 User Guide
Chapter 17      Managing MPLS Networks
  Working with VPN Overlays
Working with VPN Overlays
The following topics describe:
Applying VPN Overlays, page 17-25
Managing a VPN Overlay Display in the Map View, page 17-26
Displaying VPN Callouts in a VPN Overlay, page 17-26
Applying VPN Overlays
You can select and display an overlay of a specific VPN on top of the devices displayed in a map view. 
The overlay is a snapshot of the network that visualizes the flows between the sites and tunnel peers. 
When one network VPN is selected in the network map, the PE routers, MPLS routers, and physical links 
that carry the LSP used by the VPN are highlighted in the network map. All the devices and links that 
are not part of the VPN are dimmed.
The VPN service overlay allows you to isolate the parts of a network that are being used by a particular 
service. This information can then be used for troubleshooting. For example, the overlay can highlight 
configuration or design problems when bottlenecks occur and all the site interlinks use the same link.
To apply a VPN overlay:
Step 1In the Vision client, display the network map on which you want to apply an overlay. 
Step 2From the main toolbar, click Choose Overlay Type and choose VPN.
The Select VPN Overlay dialog box is displayed. 
Step 3Do one of the following:
Choose a search category, enter a search string, then click Go to narrow the search results to a range 
of VPNs or a specific VPN. Search categories include:
–Description
–Name
The search condition is “contains.” Search strings are case-insensitive. For example, if you choose 
the Name category and enter “net,” the Vision client displays VPNs “net” and “NET” in the names 
whether net appears at the beginning, middle, or at the end of the name: for example, Ethernet. 
Choose Show All to display all the VPNs. 
Step 4Select the VPN overlay that you want to apply to the map. 
The PE routers, MPLS routers, and physical links used by the selected VPN are highlighted in the 
network map. The VPN name is displayed in the title of the window.
NoteAn overlay is a snapshot taken at a specific point in time and does not reflect changes that occur in the 
service. As a result, the information in an overlay can become stale. To update the overlay, click Refresh 
Overlay in the main toolbar. 
						

							  
17-26
Cisco Prime Network 4.3.2 User Guide
Chapter 17      Managing MPLS Networks
  Working with VPN Overlays
Managing a VPN Overlay Display in the Map View
After a VPN overlay is applied to a map, you can manage its display by using the overlay tools in the 
main toolbar: 
To display the overlay, click Show Overlay on the main toolbar.
To hide an active overlay, click Hide Overlay on the main toolbar.
NoteThe Show Overlay button is a toggle. When clicked, the overlay is displayed. When clicked 
again, the overlay is hidden.
To remove the VPN overlay, choose Show Overlay Type > None.
Displaying VPN Callouts in a VPN Overlay
You can display or hide the callouts for VPN links displayed in a VPN overlay to show the details of the 
sites that are interlinked through the selected links. The callouts (see Figure 17-15) enable you to view 
the VPN traffic links for a specific link (either bidirectional or unidirectional).
NoteThe link must be displayed in the VPN overlay and not dimmed for you to display the link callouts.
Figure 17-15 Callouts Window
1Link details and direction. In this example, the 
link is from P-North to PE-West.3Details of sites using the link and interlinks. 
In this example, the site PE-West is linked to 
all sites on PE-South.
2Details of the sites using the link and 
interlinks. In this example, the site PE-88 is 
linked to site PE-West.4Link details and the direction. In this example, 
the link is from PE-West to P-North. 
						

							  
17-27
Cisco Prime Network 4.3.2 User Guide
Chapter 17      Managing MPLS Networks
  Monitoring MPLS Services
To display or hide the callouts:
Step 1In the Vision client window, display the map view with the VPN overlay.
Step 2Right-click the required link in the map view and choose Show Callouts.
Step 3To hide the callouts, right-click the link in the map view that is displaying the callouts and choose Hide 
Callouts.
Monitoring MPLS Services
The following topics provide details for viewing MPLS services and technologies:
Viewing VPN Properties, page 17-27
Viewing Site Properties, page 17-28
Viewing VRF Properties, page 17-28
Viewing VRF Egress and Ingress Adjacents, page 17-32
Viewing Routing Entities, page 17-32
Viewing Label Switched Entity Properties, page 17-41
Viewing MP-BGP Information, page 17-48
Viewing BFD Session Properties, page 17-50
Viewing Cross-VRF Routing Entries, page 17-57
Viewing Pseudowire End-to-End Emulation Tunnels, page 17-58
Viewing MPLS TE Tunnel Information, page 17-60
Viewing VPN Properties
To view the properties of a VPN:
Step 1In the Vision client navigation pane or map view, do either of the following: 
If the VPN icon is of the largest size, click the Properties button. 
Right-click the VPN and choose Properties. 
The VPN Properties window displays the following information: 
Name—Name of the VPN.
ID—Unique identifier assigned to the VPN.
Step 2Click Close to close the VPN Properties dialog box. 
						

							  
17-28
Cisco Prime Network 4.3.2 User Guide
Chapter 17      Managing MPLS Networks
  Monitoring MPLS Services
Viewing Site Properties
The Vision client enables you to view site properties, including the interfaces that are configured on the 
PE device. The displayed properties reflect the configuration that Prime Network automatically 
discovered for the device.
To view site properties, in the Vision client navigation pane or map view, right-click the required site 
and choose Properties. 
Table 17-8 describes the information that is displayed in the Router IP Interface Properties window:
Viewing VRF Properties
The Vision client enables you to view VRF properties, including the VRF route distinguisher, import and 
export route targets, and any provisioned sites and VRF routes. 
To view VRF properties, do either of the following in map view: 
Double-click the element configured for VRFs. 
Expand the required VPN and double-click the virtual router. 
Table 17-8 Router IP Interface Properties Window for Sites
Field Description
Name Name of the site, such as FastEthernet4/1.252.
State Interface state, either Up or Down.
IP Address IP address of the interface.
Mask Network mask.
Interface Description Description applied to the interface.
Associated Entity Element and interface associated with the site, hyperlinked to its 
entry in physical inventory.
Addresses Table
Subnet IP address and subnet mask.
NoteIf the site is an IPv6 VPN over MPLS with IPv6 addresses 
provisioned, the IPv6 addresses are displayed. For more 
information, see Viewing IPv6 Information (6VPE), 
page 17-1.
Type Address type, such as Primary, Secondary, or IPv6 Unicast. 
						

							  
17-29
Cisco Prime Network 4.3.2 User Guide
Chapter 17      Managing MPLS Networks
  Monitoring MPLS Services
The VRF properties window is displayed as shown in Figure 17-16. 
Figure 17-16 VRF Properties
The VRF Properties window contains the VRF routing table for the device. The table is a collection of 
routes that are available or reachable to all the destinations or networks in the VRF. The forwarding table 
also contains MPLS encapsulation information. 
Table 17-9 describes the information displayed in the VRF Properties window. 
NoteThe VRF Properties window only displays properties and attributes that are provisioned in the 
VRF. You might not see all the fields and tabs described in Table 17-9.
Table 17-9 VRF Properties
Field Description
Route Distinguisher Route distinguisher configured in the VRF. 
Name VRF name.
Description Description of the VRF.
IPv4 Tab
Export Route Targets IPv4 export route targets contained by the VRF.
Import Route Targets IPv4 import route targets contained by the VRF.
Route Maps Route maps for the VRF.  
						

							  
17-30
Cisco Prime Network 4.3.2 User Guide
Chapter 17      Managing MPLS Networks
  Monitoring MPLS Services
IPv6 Tab
Export Route Targets IPv6 export route targets contained by the VRF.
Import Route Targets IPv6 import route targets contained by the VRF.
Route Maps Route maps for the VRF. 
Routing Tables
Destination Destination of the specific network.
Prefix Length Length of the network prefix in bits. 
Next Hop Next routing hop. 
Outgoing Interface Name of the outgoing interface; displayed if the Routing Protocol type is 
local.
Type Route type: Direct (local), Indirect, or Static.
Routing  Protocol Routing protocol used to communicate with the other sites and VRFs: BGP 
or local.
BGP Next Hop Border Gateway Protocol (BGP) next hop. This is the PE address from 
which to continue to get to a specific address. This field is empty when the 
routing entry goes to the CE.
Bottom In Label Innermost label that is expected when MPLS traffic is received.
Bottom Out Label Innermost label sent with MPLS traffic.
Outer Label Outermost or top label in the stack used for MPLS traffic.
MRoute_Table 
Source Address The source IP address from where the multicast information is sent.
Group Address The group IP address of the multicast.
Flags The flag information pertaining to the multicast.
Up Time The amount of time the interface has been active.
Protocol The protocol information, which can be 4 or 6.
Sites Tab
Name Site name.
IP Address IP address of the interface.
Mask Subnet mask.
State State of the subinterface: Up or Down.
Associated Entity Element and interface associated with the site, hyperlinked to its entry in 
physical inventory.
Description Interface description.
Input Access List Access list applied to the inbound traffic.
Output Access List Access list applied to the outbound traffic.
Table 17-9 VRF Properties (continued)
Field Description 
						

							  
17-31
Cisco Prime Network 4.3.2 User Guide
Chapter 17      Managing MPLS Networks
  Monitoring MPLS Services
Viewing VRF Multicast Configuration details
To view global multicast configuration details for a VRF:
Step 1Right-click on the required device and select Inventory.
Step 2In the Inventory window, choose Logical Inventory > VRFs >vrf (where vrf is the required 
VRF)> IPV4VRF Multicast Configuration or IPV6VRF Multicast Configuration. The route 
policies configured on the device are displayed in the content pane.
Table 17-10 describes the information that is displayed in the Router IP Interface Properties window:
Rate Limits If a rate limit is configured on an IP interface, the limit is shown as an IP 
interface property. This option is checked when a rate limit is defined on 
the IP interface, meaning the access list is a rate limit access list. IP 
interface traffic is measured and includes the average rate, normal burst 
size, excess burst size, conform action, and exceed action. 
NoteDouble-clicking a row displays the properties of the IP interface. 
When a rate limit is configured on the IP interface, the Rate Limits 
tab is displayed. For more information about rate limits, see 
Viewing Rate Limit Information, page 17-38.
NoteThe Input Access, Output Access, and Rate Limits parameters 
apply only to certain operating systems, such as Cisco IOS.
IP Sec Map Name IP Security (IPsec) map name.
Site Name Name of the business element to which the interface is attached.
Table 17-9 VRF Properties (continued)
Field Description
Table 17-10 Global Multicast Configuration Details
Field Description
VPN ID The VPN ID configured for the VRF.
RoutePolicy The name of the multicast route policy.
BgpAD The BgpAd enabled on the device.
MdtSourceif The Multicast Distribution Tree (MDT) source interface.
MdtPartioned The MDT partitioned permission.
NSF The non-stop forwarding (NSF) information configured for the 
VRF.
MdtAddress The MDT address.
MdtData The MDT data that can be handled.
Address Family The address family, which can be IPV4 or IPV6.
RP Address The rendezvous point (RP) address configured for the VRF. 
						

							  
17-32
Cisco Prime Network 4.3.2 User Guide
Chapter 17      Managing MPLS Networks
  Monitoring MPLS Services
Viewing VRF Egress and Ingress Adjacents
The Vision client enables you to view the exporting and importing Neighbours by displaying the VRF 
egress and ingress adjacents. In addition, you can view the connectivity between the VRFs for the route 
targets and view their properties. For example, if VRF A retrieved route target import X, you can view 
all VRFs that export X as a route target whether it is in the same or another VPN.
To display the VRF egress and ingress adjacents, you can use either an element configured for VRFs or 
a virtual router: 
To use an element configured for VRFs: 
a.Double-click the element configured for VRFs.
b.In the Inventory window, choose Logical Inventory > VRFs >vrf where vrf is the required 
VRF.
c.Right-click the required VRF and choose Show VRF Egress Adjacents or Show VRF Ingress 
Adjacents. 
To use a virtual router, right-click the required VRF in the navigation pane, and choose Show VRF 
Egress Adjacents or Show VRF Ingress Adjacents. 
Table 17-11 describes the information displayed in the Adjacents window.
Viewing Routing Entities
To view routing entities:
Step 1Right-click the required device in the Vision client and choose Inventory. 
Step 2In the logical inventory window, choose Logical Inventory > Routing Entities > Routing Entity. 
The routing information is displayed as shown in Figure 17-17. 
Table 17-11 VRF Adjacents Properties Window
Field Description
Name VRF name.
Route Distinguisher Route distinguisher configured in the VRF.
VRF V6 Table IPv6 route distinguisher if IPv6 is configured. 
						

							  
17-33
Cisco Prime Network 4.3.2 User Guide
Chapter 17      Managing MPLS Networks
  Monitoring MPLS Services
Figure 17-17 Routing Entity Table
Table 17-12 describes the information that is displayed in the Routing Entity table.
Table 17-12 Routing Entity Table
Field Description
Name Name of the routing entity.
IP Interfaces Tab
Name Site name. 
IP Address IP address of the interface.
Mask Network mask.
State State of the subinterface: Up or Down.
Associated Entity Interface associated with the routing entity, hyperlinked to its location in 
physical inventory.
Description Description of the interface.
Input Access List If an input access list is assigned to an IP interface, the list is shown as an IP 
interface property, and a hyperlink highlights the related access list in the 
Access List table. When an access list is assigned to the inbound traffic on an 
IP interface, the actions assigned to the packet are performed. 
						

							  
17-34
Cisco Prime Network 4.3.2 User Guide
Chapter 17      Managing MPLS Networks
  Monitoring MPLS Services
VRRP Group If a VRRP group is configured on an IP interface, the information is shown 
as an IP interface property. This option is checked when a rate limit is defined 
on the IP interface. 
NoteDouble-clicking a row displays the properties of the IP interface. 
When a VRRP group is configured on an IP interface, the VRRP 
Groups tab is displayed in the IP Interface Properties window. For 
more information, see Viewing VRRP Information, page 17-39.
Output Access List If an output access list is assigned to an IP interface, the list is shown as an 
IP interface property, and a hyperlink highlights the related access list in the 
Access List table. When an access list is assigned to the outbound traffic on 
an IP interface, the actions assigned to the packet are performed. 
Rate Limits If a rate limit is configured on an IP interface, the limit is shown as an IP 
interface property. This option is checked when a rate limit is defined on the 
IP interface, meaning the access list is a rate limit access list. IP interface 
traffic is measured and includes the average rate, normal burst size, excess 
burst size, conform action, and exceed action. 
NoteDouble-clicking a row displays the properties of the IP interface. 
When a rate limit is configured on the IP interface, the Rate Limits 
tab is displayed. For more information, see Viewing Rate Limit 
Information, page 17-38.
NoteThe Input Access, Output Access, and Rate Limits parameters apply 
only to certain operating systems, such as Cisco IOS.
IP Sec Map Name IP Security (IPsec) crypto map name.
Site Name Name of the business element to which the interface is attached.
IPv4 and IPv6 Routing Table Tabs
Destination Destination of the specific network.
Outgoing If Name  Name of the outgoing interface.
Type Routing type: Direct, Indirect, Static, Other, Invalid, or Unknown. 
Next Hop IP address from which to continue to get to a specific address. This field is 
empty when the routing entry goes to a PE router.
Prefix Length Length of the network prefix in bits. 
Route Protocol Type Routing protocol used to communicate with other routers.
IPv4 and IPv6 Multicast Routing Tabs
Source Address The source IP address from where the multicast information is sent.
Group Address The group IP address of the multicast.
Flags The flag information pertaining to the multicast.
Up Time The amount of time the interface has been active.
Protocol The protocol information, which can be 4 or 6.
IPv4 and IPv6 BGP Label Routing Table Tabs 
Destination Destination of the specific network
Table 17-12 Routing Entity Table (continued)
Field Description