SR-MPLS and SRv6

This section describes the SR-MPLS and SRv6 policy features that Crosswork supports. For a list of known limitations and important notes, see the Cisco Crosswork Network Controller Release Notes.

View SR-MPLS and SRv6 Policies on the Topology Map

To get to the Traffic Engineering topology map, choose Services & Traffic Engineering > Traffic Engineering.

From the Traffic engineering table, click the checkbox of each SR-MPLS or SRv6 policy you want to view on the map. You can select up to 10 policies that will appear as separate colored links.

Figure 1. Traffic Engineering UI : SR-MPLS and SRv6 Policies


Callout No. Description

1

Click the appropriate check box to enable the following options:

  • Show: IGP path—Displays the IGP path for the selected SR-TE policy.

  • Show: Participating only—Displays only links that belong to selected SR-TE policy. All other links and devices disappear.

2

A device with an orange (Node SID) outline indicates there is a node SID associated with that device or a device in the cluster.

3

When SR-TE policies are selected in the SR-MPLS or SRv6 tables, they show as colored directional lines on the map indicating source and destination.

An adjacency segment ID (SID) is shown as an orange circle on a link along the path (Adjacency SID).

4

SR-MPLS and SRv6 Policy Origin and Destination: If both A and Z are displayed in a device cluster, at least one node in the cluster is a source, and another is a destination. The A+ denotes that there is more than one SR-TE policy that originates from a node. The Z+ denotes that the node is a destination for more than one SR policy.

5

The content of this window depends on what has been selected or filtered. In this example, the SR-MPLS tab is selected, and the SR Policy table is displayed.

6

 Click on either the SR-MPLS or SRv6 tabs to view the respective list of SR-TE policies.

7

Exports all data into a CSV file. You cannot export selected or filtered data.

8

The Mini Dashboard provides a summary of the operational SR-MPLS or SRv6 policy status. If filters are applied, the Mini Dashboard is updated to reflect what is displayed in the SR Policy and SRv6 Policy tables. In addition to the policy status, the SR-MPLS Mini Dashboard table displays the number of PCC and PCE initiated tunnels that are currently listed in the SR Policy table.

9

This option allows you to choose how the group filter (when in use) should be applied on the table data. For example, if Headend only was selected, then it would only display policies where the headend device of the policy is in the selected group. This filter allows you to see specific configurations and is useful when you have a large network.

Filter options:

  • Headend or Endpoint—Show policies with either the headend or endpoint device in the selected group.

  • Headend and Endpoint—Show policies if both the headend and endpoint are in the group.

  • Headend only—Show policies if the headend device of the policy is in the selected group.

  • Endpoint only—Show policies if the endpoint device of the policy is in the selected group.

View SR-MPLS and SRv6 Policy Details

View SR-MPLS or SRv6 TE policy level details as well segment lists and any path computation constraints configured on a per-candidate path basis.

Procedure

Step 1

From the Actions column, click More icon > View details for one of the SR-MPLS or SRv6 policies.

Figure 2. View SR Policy Details

View SR Policy Details

Step 2

View SR-MPLS or SRv6 policy details. From the browser, you can copy the URL and share with others.

Figure 3. SR Policy Details - Headend, Endpoint, and Summary

SR Policy Details - Headend, Endpoint, and Summary

Note

 

The Delay value is calculated for all policies every 10 minutes. Hover your mouse over the "i" icon (next to the Delay value) to view the last time the value was updated.

Visualize IGP Path and Metrics

View the physical path and metrics between the endpoints of the selected SR-MPLS policies.

Procedure

Step 1

From the SR Policy table, check the check box next to the SR-TE (SR-MPLS and SRv6) policies you are interested in.

Step 2

Check the Show IGP Path check box. The IGP paths for the selected SR-MPLS policies are displayed as straight lines instead of the segment hops. In a dual-stack topology, the Participating only checkbox must also be checked to view metrics on participating links.

Step 3

Click Display Preferences icon > Metrics tab.

Step 4

Toggle applicable metrics to ON.

Note

 

You must check the Show IGP Path check box to view metrics.

Figure 4. View Physical Path and Metrics

View Physical Path and Metrics

Find Multiple Candidate Paths (MCPs)

Visualizing MCPs gives you insight into which paths might be a better alternative to the currently active ones. If you determine to do so, you can then manually configure the device and change which path becomes active.

Important Notes

  • Only PCC-initialized SR-TE policies with MCPs are supported.

  • Crosswork does not distinguish dynamic paths from explicit paths. The Policy Type field value displays as 'Unknown'.

  • You can view active explicit paths but not inactive candidate explicit paths in the UI.

Before you begin

A policy must be configured with MCPs on devices before they can be visualized on the Traffic Engineering topology map. This configuration can be done manually or within the Crosswork Network Controller.

Procedure

Step 1

From the main menu, choose Services & Traffic Engineering > Traffic Engineering > SR-MPLS or SRv6 tab.

Step 2

Navigate to the active SR-TE policy that has MCPs configured and view it on the topology map.

  1. Check the check box next to the SR-TE policy that has MCPs configured.

  2. View the SR-TE policy that is highlighted on the topology map.

In this example, you see that the active path is going from cw-xrv53 > cw-xrv57 > cw-xrv58 > cw-xrv59 > cw-xrv60.
Figure 5. SR-TE policy on the Topology Map
SR-TE policy on the Topology Map

Step 3

View the list of candidate paths.

  1. From the SR-MPLS or SRv6 Policy table Actions column, click More icon > View details. A list of candidate paths appear along with policy details in the SR policy details window. The green A under the State column indicates the active path.

    Figure 6. Candidate Path in SR Policy Details

    Candidate Path in SR Policy Details

Step 4

You can expand individual paths or click Expand all to view details of each path.

Step 5

Visualize the candidate path on the topology map.

  1. Check the check box next to any candidate path.

    Note

     

    You will not be able to select or view explicit candidate paths.

  2. From the Candidate path area, hover your mouse over the candidate path name. The candidate path is highlighted on the topology map.

    In this example, you see that the alternate path goes directly from cw-xrv53 > cw-xrv60.

    Figure 7. Candidate Path on the Topology Map

    Candidate Path on the Topology Map

Visualize Underlying Paths Associated with a Defined Binding-Segment ID (B-SID) Label

Crosswork Network Controller allows you to visualize the underlying path of a B-SID hop that you have manually configured on a device or configured using Crosswork Network Controller. In this example, we have assigned 15700 as a B-SID label on an SR-MPLS policy hop.

To view the B-SID underlying path for an SR-MPLS or SRv6 policy, do the following:

Procedure

Step 1

From the main menu, choose Services & Traffic Engineering > Traffic Engineering.

Step 2

From the SR Policy table, check the check box next to the policy that has a hop assigned with a B-SID label. Hover your mouse over any part of the SR-MPLS row to see the B-SID name. The B-SID path is highlighted in orange on the topology map.

In this example, you see that the B-SID path is going from cw-xrv51 to cw-xrv52.

Figure 8. B-SID Label
B-SID Label

Step 3

From the SR policy details window, click More icon > View details.

Figure 9. View Details

View Details

Step 4

Expand the active path and click the B-Sid Label ID to see the underlying path.

Figure 10. B-Sid Label ID

B-Sid Label ID

In this example, the underlying path actually goes from cw-xrv51 > cw-xrv54 > cw-xrv53 > cw-xrv52.

Figure 11. B-SID Path
B-SID Path

Visualize Native SR Paths

Visualizing the native path will help you in OAM (Operations, Administration, and Maintenance) activities to monitor label-switched paths (LSPs) and quickly isolate forwarding problems to assist with fault detection and troubleshooting in the network. Since this feature uses multipaths, all ECMP paths are shown between the source and destination. You can visualize only native SR IGP paths.

Before you begin

Confirm that device requirements are met. See Visualize Native Path Device Prerequisites.

To create a path query, do the following:

Procedure

Step 1

From the main menu, choose Services & Traffic Engineering > Path Query.The Path Query dashboard appears.

Step 2

Click New query.

Step 3

Enter the device information in the required fields to find available Native SR IGP Paths and click Get paths.

Note

 

Path queries may take a moment to complete. When the Running Query ID pop-up appears, you can also select View past queries to return to the Path Query Dashboard. If you already had path queries in the list, you can view existing details as the new query continues to run in the background, which is indicated by the blue Running icon in the Query State column. When the new query state turns green, and is completed, it can be viewed.

Figure 12. New Path Query

New Path Query

Step 4

Click View results when it becomes available on the Running Query ID pop-up. The Path Details window appears with corresponding available paths details while the topology map displays the available Native SR IGP paths on the left.

Figure 13. Path Details

Path Details

Visualize Native Path Device Prerequisites

Confirm the following device software and configurations are met prior to visualizing native paths.

  1. Devices should be running Cisco IOS XR 7.3.2 or higher. Run show version command to verify it.

  2. Devices should have GRPC enabled.

    1. Run show grpc to confirm GRPC configuration. You should see something similar to this: 

      tpa
vrf default
address-family ipv4
default-route mgmt
!
address-family ipv6
default-route mgmt
!
!
!

or

linux networking
vrf default
address-family ipv4
default-route software-forwarding
!
address-family ipv6
default-route software-forwarding
!
!
!

    Note

    • address-family is only required in an IPv4 topology.

    • To enable GRPC with a secure connection, you must upload security certificates to connect to the device.

  3. Devices should have GNMI capability enabled and configured.

    1. From Device Management > Network Devices, click the IP address for the device you are interested in.

    2. Confirm that GNMI is listed under Connectivity details.


    Note

    Based on the type of devices, the following device encoding type are available:

    • JSON

    • BYTES

    • PROTO

    • ASCII

    • JSON IETF

  4. Devices should have the CDG router static address. Static route should be added from the device to the southbound CDG IP address. For example: 

    RP/0/RP0/CPU0:xrvr-7.3.2#config

RP/0/RP0/CPU0:xrvr-7.3.2(config)#router static

RP/0/RP0/CPU0:xrvr-7.3.2(config-static)#address-family ipv4 unicast <CDG Southbound interface IP: eg. 172.24.97.110> <Device Gateway eg: 172.29.105.1>

RP/0/RP0/CPU0:xrvr-7.3.2(config-static)#commit

Configure TE Link Affinities

If you have any affinities you wish to account for when provisioning an SR policy, Tree-SID, or RSVP-TE tunnel, then you can optionally define affinity mapping on the Cisco Crosswork UI for consistency with affinity names in device configurations. Cisco Crosswork will only send bit information to SR-PCE during provisioning. If an affinity mapping is not defined in the UI, then the affinity name is displayed as "UNKNOWN". If you want to configure affinity mappings in Cisco Crosswork for visualization purposes, you should collect affinities on the device, then define affinity mapping in the Cisco Crosswork UI with the same name and bits that are used on the device.

The affinity configuration on interfaces simply turns on some bits. It is a 32-bit value, with each bit position (0–31) representing a link attribute. Affinity mappings can be colors representing a certain type of service profile (for example, low delay, high bandwidth, and so on). This makes it easier to refer to link attributes.

See SR, Tree-SID, or RSVP-TE configuration documentation for your specific device to view descriptions and supported configuration commands (for example, Segment Routing Configuration Guide for Cisco ASR 9000 Series Router)

The following example shows the affinity configuration (affinity-map) on a device: 

RP/0/RP0/CPU0:c12#sh running-config segment-routing traffic-eng affinity-map
Wed Jul 27 12:14:50.027 PDT
segment-routing
 traffic-eng
  affinity-map
   name red bit-position 1
   name blue bit-position 5
   name green bit-position 4
  !
 !
!

Procedure

Step 1

From the main menu, choose Administration > Settings > System settings tab > Traffic engineering > Affinity > TE link affinities. You can also define affinities while creating an SR-TE policy, Tree-SID, or RSVP-TE tunnel by clicking Manage mapping under the Constraints > Affinity field.

Step 2

To add a new affinity mapping, click + Create.

Step 3

Enter the name and the bit it will be assigned. For example (using the above configuration):

Figure 14. Mapping Affinities

Mapping Affinities

Step 4

Click Save to save the mapping. To create another mapping, you must click + Create and save the entry.

Note

 

You should remove the TE tunnel before removing the affinity to avoid orphan TE tunnels. If you have removed an affinity associated with a TE tunnel, the affinity is shown as "UNKNOWN" in the SR policy / RSVP-TE tunnel details window.

Create Explicit SR-MPLS Policies

This task creates SR-MPLS policies using an explicit (fixed) path consisting of a list of prefix or adjacency Segment IDs (SID list), each representing a node or link along on the path.


Tip
If you plan to use affinities, collect affinity information from your devices, and then map them in Cisco Crosswork before creating an explicit SR-MPLS policy. For more information, see Configure TE Link Affinities.

Procedure

Step 1

From the main menu, choose Services & Traffic Engineering > Traffic Engineering > SR-MPLS tab.

Step 2

Click Create > PCE Init .

Note

 

If you would like to provision a PCC initiated policy using Cisco Network Services Orchestrator (NSO) via the Crosswork UI, see Create SR-TE Policies (PCC Initiated).

Step 3

Under Policy details, enter or select the required SR-MPLS policy values. Hover the mouse pointer over the Field Help icon to view a description of the field.

Tip

 

If you have set up device groups, you can select the device group from the Device Groups drop-down list. Then navigate and zoom in on the topology map to click the device for headend or endpoint selection.

Step 4

Under Policy path, click Explicit path and enter a path name.

Step 5

Add segments that will be part of the SR-MPLS policy path.

Step 6

Click Preview and confirm that the policy you created matched your intent.

Step 7

If you want to commit the policy path, click Provision to activate the policy on the network or exit to abort the configuration process.

Step 8

Validate the SR-MPLS policy creation:

  1. Confirm that the new SR-MPLS policy appears in the Traffic engineering table. You can also click the check box next to the policy to see it highlighted in the map.

    Note

     
    The newly provisioned SR-TE policy may take some time, depending on the network size and performance, to appear in the table. The Traffic engineering table is refreshed every 30 seconds.

  2. View and confirm the new SR-MPLS policy details. From the Traffic engineering table, click the More icon and select View details.

Note

 

On a setup with high node, policy, or interface counts, a timeout may occur during policy deployment. To configure timeout options, see Configure TE Timeout Settings.

Create Dynamic SR-MPLS Policies Based on Optimization Intent

This task creates an SR-MPLS policy with a dynamic path. SR-PCE computes a path for the policy based on metrics and path constraints (affinities or disjointness) defined by the user. A user can select from three available metrics to minimize in-path computation: IGP, TE, or latency. The SR-PCE will automatically re-optimize the path as necessary based on topology changes. If a link or interface fails, the network will find an alternate path that meets all the criteria specified in the policy and raise an alarm. If no path is found, an alarm is raised, and the packets are dropped.


Tip
For visualization purposes, you can optionally collect affinity information from your devices and then map them in Cisco Crosswork before creating a dynamic SR-MPLS policy. For more information, see Configure TE Link Affinities or Configure Flexible Algorithm Affinities.

Procedure

Step 1

From the main menu, choose Services & Traffic Engineering > Traffic Engineering > SR-MPLS tab.

Step 2

Click Create > PCE Init.

Note

 

If you would like to provision a PCC initiated policy using Cisco Network Services Orchestrator (NSO) via the Crosswork UI, see Create SR-TE Policies (PCC Initiated).

Step 3

Under Policy details, enter or select the required SR-MPLS policy values. Hover the mouse pointer over Field Help icon to view a description of each field.

Tip

 

If you have set up device groups, you can select the device group from the Device Groups drop-down menu. Then navigate and zoom in on the topology map to click the device for headend or endpoint selection.

Step 4

Under Policy path, click Dynamic path and enter a path name.

Step 5

Under Optimization objective, select the metric you want to minimize.

Step 6

Define any applicable constraints and disjointness.

Note

 

  • Affinity constraints and disjointness cannot be configured on the same SR-MPLS policy. Also, there cannot be more than two SR-MPLS policies in the same disjoint group or subgroup. The configuration will not be allowed during Preview.

  • If there are existing SR-MPLS policies belonging to a disjoint group that you define here, all SR-MPLS policies that belong to that same disjoint group are shown during Preview.

Step 7

Under Segments, select whether or not protected segments should be used when available.

Step 8

If applicable, enter a SID constraint in the SID Algorithm field. Cisco Crosswork will try to find a path with this SID. If a path with the SID constraint cannot be found, the provisioned policy will remain operationally down until the conditions are met.

Note

 

  • Flexible Algorithm: The values correspond to the Flexible Algorithm that are defined on the device and the 128-255 range is enforced by Cisco IOS XR.

  • Algorithm 0: This is a Shortest Path First (SPF) algorithm based on link metric. This shortest path algorithm is computed by the Interior gateway protocol (IGP).

  • Algorithm 1: This is a Strict Shortest Path First (SSPF) algorithm based on link metric. The algorithm 1 is identical to algorithm 0 but requires that all nodes along the path honor the SPF routing decision. Local policy does not alter the forwarding decision. For example, a packet is not forwarded through locally engineered path.

Step 9

Click Preview. The path is highlighted on the map.

Step 10

If you want to commit the policy path, click Provision.

Step 11

Validate the SR-MPLS policy creation:

  1. Confirm that the new SR-MPLS policy appears in the SR Policy table. You can also click the check box next to the policy to see it highlighted in the map.

    Note

     
    The newly provisioned SR-MPLS policy may take some time, depending on the network size and performance, to appear in the Traffic engineering table. The table is refreshed every 30 seconds.

  2. View and confirm the new SR-MPLS policy details. From the Traffic engineering table, click More icon and select View details.

Note

 

On a scaled setup with high node, policy, or interface counts, a timeout may occur during policy deployment. To configure timeout options, see Configure TE Timeout Settings.

Create SR-TE Policies (PCC Initiated)

This task creates explicit or dynamic SR-MPLS or SRv6 policies using Cisco Network Services Orchestrator (NSO) via the Crosswork UI.

Before you begin

If you want to create explicit PCC initiated SR-MPLS or SRv6 policies, you must create a Segment IDs list (Services & Traffic Engineering > Provisioning (NSO) > SR-TE > SID-List). An explicit (fixed) path consists of a list of prefix or adjacency Segment IDs, each representing a node or link along on the path.

Procedure

Step 1

From the main menu, choose Services & Traffic Engineering > Provisioning (NSO).

Step 2

From SR-TE > Policy, click Add icon. Crosswork displays the Create SR-TE > Policy window.

Note

 
You may also click Import icon to import an existing SR-TE policy.

Step 3

Enter the policy constraints and required values.

You must populate the following options:

Table 1. SR-TE Policy Configuration

Expand this:

To specify this:

name

Enter a name for this SR-TE policy.

head-end

  • You can click Add icon to select a node or manually enter the node name.

tail-end

Manually enter the node name.

color

Enter a color. For example: 200.

path

  1. Click Add icon and enter a preference value. For example: 123

  2. Select one of the following and toggle switch to enable:

    • explicit-path—Click Add icon to add previously configured SID lists.

    • dynamic-path—Select the metric you want to minimize and define any applicable constraints and disjointness.

srv6

If you are creating an SRv6 policy, toggle Enable srv6.

Step 4

When you are finished, click Dry Run to validate your changes and save them. Crosswork will display your changes in a pop-up window.

If you want to configure a service that has requirements that do not match those we describe in this example, contact Cisco Customer Experience.

Step 5

When you are ready to activate the policy, click Commit Changes.

Modify SR-MPLS Policies

To view, modify, or delete an SR-MPLS policy, do the following:

Procedure

Step 1

From the main menu, choose Services & Traffic Engineering > Traffic Engineering > SR-MPLS tab.

Step 2

From the Traffic engineering table, locate the SR-MPLS policy you are interested in and click More icon.

Step 3

Choose View details or Edit/Delete.

Note

 

  • You can only modify or delete SR-MPLS policies that have been created with the UI.

  • After updating the SR-MPLS policy details, you can preview the changes on the map before saving it.