Segment Routing

RSVP Auto Bypass on OcNOS: Automating MPLS Resiliency at Scale

In traditional MPLS networks running RSVP-TE, protecting every LSP against link and node failures requires manually pre-configuring bypass tunnels for each potential failure scenario. In a network with dozens of nodes, this means hundreds of manually engineered tunnels — each requiring careful path specification, ongoing maintenance as the topology changes, and operational expertise to troubleshoot when something goes wrong.

RSVP Auto Bypass solves this problem. OcNOS dynamically discovers protected LSPs traversing each interface, automatically creates the optimal bypass tunnel for each failure scenario, and maintains these tunnels as the network topology evolves. The result is sub-50ms failover coverage without a single manually configured bypass tunnel.

How RSVP Auto Bypass Works

R1 Head-end R2 PLR node R5 Bypass hop R3 MP node R4 Tail-end ✕ LINK FAILURE Auto Bypass tunnel (R2→R5→R3) Created automatically by OcNOS Primary LSP Auto Bypass tunnel Failed link
RSVP Auto Bypass in action. The primary LSP (R1→R2→R3→R4) traverses the R2–R3 link. When that link fails, R2 (the Point of Local Repair) immediately switches traffic to the automatically created bypass tunnel via R5. No manual bypass tunnel configuration was required.

Configuring RSVP Auto Bypass on OcNOS

! OcNOS -- RSVP-TE with Auto Bypass enabled
!
! Step 1: Enable MPLS and RSVP-TE globally
mpls traffic-eng tunnels
!
router ospf 1
  mpls traffic-eng router-id Loopback0
  mpls traffic-eng area 0
!
! Step 2: Enable RSVP on all core interfaces
interface eth-0-1
  ip rsvp bandwidth 1000000      ! Reserve up to 1 Gbps for RSVP-TE
  ip rsvp signalling hello        ! Enable RSVP hello for fast failure detection
!
interface eth-0-2
  ip rsvp bandwidth 1000000
  ip rsvp signalling hello
!
! Step 3: Enable Auto Bypass on protected interfaces
! OcNOS automatically creates bypass tunnels for any LSP
! traversing these interfaces
interface eth-0-1
  mpls traffic-eng backup-path auto-backup
  mpls traffic-eng fast-reroute protect link    ! Link protection
  mpls traffic-eng fast-reroute protect node    ! Node protection (stronger)
!
interface eth-0-2
  mpls traffic-eng backup-path auto-backup
  mpls traffic-eng fast-reroute protect link
  mpls traffic-eng fast-reroute protect node
! OcNOS -- Head-end LSP configured for Fast Reroute
! The LSP requests FRR protection; bypass tunnels are auto-created by transit nodes
!
interface Tunnel0
  ip unnumbered Loopback0
  tunnel destination 10.0.0.4          ! Tail-end: R4
  tunnel mode mpls traffic-eng
  tunnel mpls traffic-eng fast-reroute ! Request FRR protection
  tunnel mpls traffic-eng priority 5 5
  tunnel mpls traffic-eng path-option 10 dynamic

Verification Commands

! OcNOS -- RSVP Auto Bypass verification
!
! View all auto-created bypass tunnels:
show mpls traffic-eng tunnels backup
! Expected: auto-bypass tunnels listed with protect type (link/node)
! and protected interface, PLR node, and MP node

! Check FRR state per protected interface:
show mpls traffic-eng fast-reroute database
! Shows: protected LSPs, bypass tunnel assigned, FRR state (Ready/Active)

! Verify bypass tunnel path:
show mpls traffic-eng tunnels tunnel0 detail
! Shows: explicit path used by bypass, RSVP reservation, bandwidth

! Simulate failure and verify bypass activates:
! (Shut eth-0-1 on R2, then check)
show mpls traffic-eng fast-reroute database
! Expected: FRR state changes from Ready to Active for affected LSPs

! RSVP statistics:
show ip rsvp interface
show ip rsvp neighbor

Auto Bypass vs. Manual Bypass vs. SR TI-LFA

Method Configuration Coverage Best For
Manual RSVP bypass Engineer per-tunnel Only what you configure Legacy; specific path requirements
RSVP Auto Bypass Enable per-interface All LSPs on interface RSVP-TE brownfield networks
SR TI-LFA Enable globally in IS-IS 100% topology-independent New SR-MPLS deployments

For new deployments, Segment Routing with TI-LFA is the recommended fast-reroute mechanism — simpler, stateless, and 100% coverage. RSVP Auto Bypass is the right choice for operators with existing RSVP-TE deployments who need automated protection without migrating to SR.


IP Infusion Engineering Team

Share