[Contents] [Prev] [Next] [Index] [Report an Error]

Configure Layer 2 VPNs

To configure Layer 2 virtual private network (VPN) functionality, you must enable Layer 2 VPN support on the provider edge (PE) router. You must also configure PE routers to distribute routing information to the other PE routers in the VPN and configure the circuits between the PE routers and the customer edge (CE) routers.

Each Layer 2 VPN is configured under a routing instance of type l2vpn. An l2vpn routing instance can transparently carry Layer 3 traffic across the service provider's network. As with other routing instances, all logical interfaces belonging to a Layer 2 VPN routing instance are listed under that instance.

The configuration of the CE routers is not relevant to the service provider. The CE routers need to provide only appropriate Layer 2 circuits (with appropriate circuit identifiers, such as data-link connection identifier [DLCI], virtual path identifier/virtual channel identifier [VPI/VCI], or virtual local area network identifier [VLAN ID]) to send traffic to the PE router.

To configure Layer 2 VPNs, include the following statements:

description text;

instance-type l2vpn;

interface interface-name;

route-distinguisher (as-number:id | ip-address:id);

vrf-export [ policy-name  ];

vrf-import [ policy-name ];

vrf-target {

    community;

    import community;

    export community;

}

protocols {

    l2vpn {

        (control-word | no-control-word);

        encapsulation type;

        traceoptions {

            file filename <replace> <size size> <files number> <nostamp>;

            flag flag <flag-modifier> <disable>;

        }

        site site-name {

            site-identifier identifier;

            interface interface-name {

                remote-site-id remote-site-id;

            }

        }

    }

}

You can include these statements at the following hierarchy levels:

For Layer 2 VPNs, only some of the statements in the [edit routing-instances] hierarchy are valid. For the full hierarchy, see the JUNOS Internet Software Routing Protocols Configuration Guide.

In addition to these statements, you must configure Multiprotocol Label Switching (MPLS) label-switched paths (LSPs) between the PE routers, internal Border Gateway Protocol (IBGP) sessions between the PE routers, and an interior gateway protocol (IGP) on the PE and provider (P) routers.

By default, Layer 2 VPNs are disabled.

Many of the configuration procedures for Layer 2 VPNs are identical to the procedures for Layer 3 VPNs and virtual private LAN service (VPLS). These procedures are described in detail in Configure VPNs, and include the following:

The following sections describe how to configure Layer 2 VPNs:

[Contents] [Prev] [Next] [Index] [Report an Error]