NESTA PÁGINA
Exemplo: configuração de multihoming ativo EVPN básico
Este exemplo mostra como configurar dispositivos de borda do cliente (CE) multihomed ativos e provedores de borda (PE) em uma VPN Ethernet (EVPN).
Requisitos
Este exemplo usa os seguintes componentes de hardware e software:
Quatro plataformas de roteamento universal 5G da Série MX apenas com interfaces MPC, onde:
Dois dispositivos são configurados como roteadores de borda de provedor (PE) conectados a um site comum de clientes multihomed.
Um dispositivo é configurado como um roteador PE remoto conectado a um site de cliente único.
Um dispositivo é configurado como um roteador de provedor.
• Dois dispositivos de borda do cliente (CE), onde:
Dois dispositivos CE que são multihomed.
Um dispositivo CE que é single-homed.
Antes de começar:
Configure as interfaces do roteador.
Configure o OSPF ou qualquer outro protocolo IGP.
Configure um grupo interno BGP.
Configure MPLS.
Visão geral
A Figura 1 ilustra uma topologia EVPN simples. Os roteadores PE1 e PE2 são roteadores de borda de provedor (PE) conectados ao roteador CE1 de borda de clientes (CE). O roteador P é o roteador provedor conectado aos roteadores PE1, PE2 e PE3. O roteador PE3 está conectado ao roteador de borda do cliente CE2.
Figura 1: Topologia
multihomed EVPN simples
multihomed EVPN simples
Configuração
Configuração rápida da CLI
Os parâmetros de configuração para os roteadores são os seguintes:
CE1
chassis {
aggregated-devices {
ethernet {
device-count 1;
}
}
}
interfaces {
ge-0/0/1 {
description To-PE1;
gigether-options {
802.3ad ae0;
}
}
ge-0/0/2 {
description To-PE2;
gigether-options {
802.3ad ae0;
}
}
ge-0/0/7 {
unit 0 {
family bridge {
interface-mode access;
vlan-id 10;
}
}
}
ge-0/0/8 {
unit 0 {
family bridge {
interface-mode access;
vlan-id 20;
}
}
}
ae0 {
description To-PE1_and_PE2;
unit 0 {
family bridge {
interface-mode trunk;
vlan-id-list [ 10 20 ];
}
}
}
}
bridge-domains {
BD {
vlan-id-list [ 10 20 ];
}
}
PE1
interfaces {
ge-0/0/1 {
description To-CE1;
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
esi {
00:11:11:11:11:11:11:11:11:11;
all-active;
}
unit 10 {
family bridge {
interface-mode trunk;
vlan-id-list [ 10 20 ];
}
}
}
ge-0/0/3 {
unit 0 {
family inet {
address 10.3.3.1/30;
}
family mpls;
}
}
lo0 {
unit 0 {
family inet {
address 192.168.1.1/32;
}
}
}
}
routing-options {
router-id 192.168.1.1;
autonomous-system 65432;
forwarding-table {
export evpn-pplb;
}
}
protocols {
rsvp {
interface ge-0/0/3.0;
}
mpls {
no-cspf;
label-switched-path PE1-to-PE2 {
to 192.168.2.2;
}
label-switched-path PE1-to-PE3 {
to 192.168.3.3;
}
interface ge-0/0/3.0;
}
bgp {
group EVPN-PE {
type internal;
local-address 192.168.1.1;
family inet-vpn {
unicast;
}
family evpn {
signaling;
}
neighbor 192.168.3.3;
neighbor 192.168.2.2;
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface all {
interface-type p2p;
}
interface fxp0.0 {
disable;
}
}
}
}
routing-instances {
evpn-ta {
instance-type virtual-switch;
interface ge-0/0/1.10;
route-distinguisher 65432:10;
vrf-target target:65432:10;
protocols {
evpn {
extended-vlan-list [ 10 20 ];
}
}
bridge-domains {
bd10 {
domain-type bridge;
vlan-id 10;
}
bd20 {
domain-type bridge;
vlan-id 20;
}
}
}
}
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
PE2
interfaces {
ge-0/0/2 {
description To-CE1;
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
esi {
00:11:11:11:11:11:11:11:11:11;
all-active;
}
unit 10 {
family bridge {
interface-mode trunk;
vlan-id-list [ 10 20 ];
}
}
}
ge-0/0/4 {
unit 0 {
family inet {
address 10.4.4.1/30;
}
family mpls;
}
}
lo0 {
unit 0 {
family inet {
address 192.168.2.2/32;
}
}
}
}
routing-options {
router-id 192.168.2.2;
autonomous-system 65432;
forwarding-table {
export evpn-pplb;
}
}
protocols {
rsvp {
interface ge-0/0/4.0;
}
mpls {
no-cspf;
label-switched-path PE2-to-PE1 {
to 192.168.1.1;
}
label-switched-path PE2-to-PE3 {
to 192.168.3.3;
}
interface ge-0/0/4.0;
}
bgp {
group EVPN-PE {
type internal;
local-address 192.168.2.2;
family inet-vpn {
unicast;
}
family evpn {
signaling;
}
neighbor 192.168.1.1;
neighbor 192.168.3.3;
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface all {
interface-type p2p;
}
interface fxp0.0 {
disable;
}
}
}
}
routing-instances {
evpn-ta {
instance-type virtual-switch;
interface ge-0/0/2.10;
route-distinguisher 65432:10;
vrf-target target:65432:10;
protocols {
evpn {
extended-vlan-list [ 10 20 ];
}
}
bridge-domains {
bd10 {
domain-type bridge;
vlan-id 10;
}
bd20 {
domain-type bridge;
vlan-id 20;
}
}
}
}
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
Roteador PE3
interfaces {
ge-0/0/5 {
unit 0 {
family inet {
address 10.5.5.1/30;
}
family mpls;
}
}
ge-0/0/6 {
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
unit 10 {
family bridge {
interface-mode trunk;
vlan-id-list 10;
}
}
unit 20 {
family bridge {
interface-mode trunk;
vlan-id-list 20;
}
}
}
lo0 {
unit 0 {
family inet {
address 192.168.3.3/32;
}
}
}
routing-options {
router-id 192.168.3.3;
autonomous-system 65432;
forwarding-table {
export evpn-pplb;
}
}
protocols {
rsvp {
interface ge-0/0/5.0;
}
mpls {
no-cspf;
label-switched-path PE3-to-PE1 {
to 192.168.1.1;
}
label-switched-path PE3-to-PE2 {
to 192.168.2.2;
}
interface ge-0/0/5.0;
}
bgp {
group EVPN-PE {
type internal;
local-address 192.168.3.3;
family inet-vpn {
unicast;
}
family evpn {
signaling;
}
neighbor 192.168.1.1;
neighbor 192.168.2.2;
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface all {
interface-type p2p;
}
interface fxp0.0 {
disable;
}
}
}
}
routing-instances {
evpn-ta {
instance-type virtual-switch;
interface ge-0/0/6.10;
interface ge-0/0/6.20;
route-distinguisher 65432:10;
vrf-target target:65432:10;
protocols {
evpn {
extended-vlan-list [ 10 20 ];
}
}
bridge-domains {
bd10 {
domain-type bridge;
vlan-id 10;
bridge-options {
interface ge-0/0/6.10;
}
}
bd20 {
domain-type bridge;
vlan-id 20;
bridge-options {
interface ge-0/0/6.20;
}
}
}
}
}
}
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
Roteador P
interfaces {
ge-0/0/3 {
unit 0 {
family inet {
address 10.3.3.2/30;
}
family mpls;
}
}
ge-0/0/4 {
unit 0 {
family inet {
address 10.4.4.2/30;
}
family mpls;
}
}
ge-0/0/5 {
unit 0 {
family inet {
address 10.5.5.2/30;
}
family mpls;
}
}
lo0 {
unit 0 {
family inet {
address 192.168.4.4/32;
}
}
}
}
routing-options {
router-id 192.168.4.4;
autonomous-system 65432;
}
protocols {
rsvp {
interface all;
interface fxp0.0 {
disable;
}
}
mpls {
interface all;
interface fxp0.0 {
disable;
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface all {
interface-type p2p;
}
interface fxp0.0 {
disable;
}
}
}
}