It should be just that below. You're concatenating string literals with a variable value, you don't need to do anything special.
DECLARE @CustomerName Nvarchar(100);
SET @CustomerName = 'ALAN';
WHERE UPPER(CustomerName) LIKE UPPER('%' + @CustomerName + '%');
Note, you didn't incluse SELECT
part, so I didn't include it either.