Cisco ASR 9000 Series Routing Configuration Guide

PurposeCommand or Action
Enables the source RLOC based decapsulation
filtering feature.
decapsulation filter rloc source [ locator-set locator_set_name ][
members ]
Example:
RP/0/RSP0/CPU0:router(config-lisp)#decapsulation filter
Step 12
•
The members keyword enables the
establishment of a reliable transport (TCP)
session with configured Map-Server(s), and
the download of the decapsulation filer list
rloc
source member locator-set loc_sh1_vrf1
maintained by the Map-Server(s)and the
download of the decapsulation filer list
maintained by the Map-Server(s)
•
The locator-set keyword is used, the prefixes
named in the locator-set are used, if included
alone, or added to the (downloaded) dynamic
list when used in conjunction with the
member keyword.
Associate a virtual routing and forwarding (VRF)
table through which the routing locator address
locator-table name [ default | vrf vrf_name]
Example:
RP/0/RSP0/CPU0:router(config-lisp)#locator-table vrf 1
Step 13
space is reachable to a router Locator ID Separation
Protocol (LISP) instantiation.
commit
Step 14
In this example, an xTR is configured to establish a reliable transport session with the Map-Server at 204.1.0.1,
download the decapsulation filter list (in this case for IID 1002), and source-check all LISP-encapsulated
packets using this filter list prior to decapsulation.
router lisp
address-family ipv4 unicast
!
locator-set loc_sh1_vrf1
202.1.0.1
203.1.0.1
!
eid-table vrf sh1_vrf2 instance-id 1002
address-family ipv4 unicast
etr map-server 204.1.0.1 key encrypted lisp
etr
itr map-resolver 204.1.0.1
itr
map-cache 12.2.0.0/24 map-request
map-cache 102.2.0.0/24 map-request
map-cache 103.2.0.0/24 map-request
database-mapping 11.2.0.0/24 201.1.0.1 priority 1 weight 100
database-mapping 101.2.0.0/24 201.1.0.1 priority 1 weight 100
!
decapsulation filter rloc source member locator-set
loc_sh1_vrf1
!
locator-table default
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide, Release 5.3.x
666
Implementing Data Plane Security
Enable Source RLOC-based Decapsulation Filtering

Cisco ASR 9000 Series Specifications

General

Series	ASR 9000
Category	Network Router
Modular Design	Yes
Redundancy	Yes (Hardware and Software)
Operating System	Cisco IOS XR
Interfaces/Ports	10G, 40G, 100G, 400G Ethernet
Expansion Slots	Varies by model
Routing Protocol	BGP, OSPF, IS-IS, EIGRP
Management	CLI, SNMP, NETCONF
Power Supply	Redundant
Port Density	Varies by model
Power Supply Options	AC, DC
Memory	Varies by model
Storage	Varies by model
Dimensions	Varies by model
Weight	Varies by model