示例:使用单宿主 EVPN 配置 PBB
此示例说明如何将提供商主干桥接 (PBB) 与以太网 VPN (EVPN) 集成。通过这种集成,核心中的控制平面操作得以简化,提供比常规 EVPN 更快的融合和可扩展性增强。PBB-EVPN 应用包括数据中心互连 (DCI) 和运营商以太网 E-LAN 服务。
要求
此示例使用以下硬件和软件组件:
三台提供商边缘 (PE) 设备,每台设备连接到单宿主客户站点。
单个宿主到 PE 设备的四个客户边缘 (CE) 设备。
在所有 PE 路由器上运行的 Junos OS 17.2R1 或更高版本。
准备工作:
配置设备接口。
在所有 PE 设备上配置 IGP,例如 OSPF。
在 PE 设备之间建立内部 BGP 会话。
在 PE 设备上启用 RSVP。
在 PE 设备之间配置 MPLS 和标签交换路径 (LSP)。
概述和拓扑
从 Junos OS 17.2R1 版开始,PBB 与以太网 VPN (EVPN) 集成,可显著减少跨核心的控制平面学习,从而允许大量第 2 层服务(如数据中心连接)以简化的方式传输网络。
在 PBB-EVPN 网络中,PBB 核心中的骨干核心网桥 (BCB) 设备将替换为 MPLS,同时保留 PBB 主干边缘网桥 (BEB) 的服务扩展属性。B 组件(提供商路由实例)使用 EVPN BGP 信令发出信号,并使用提供商边缘 (PE) 和提供商 (P) 设备封装在 MPLS 中。因此,PBB-EVPN 将 PBB 的巨大扩展特性与传统基本 MPLS 核心网络的简单性相结合,与常规 PBB 相比,可显著减少全网状态信息量。
在图 1 中,PBB 与 EVPN 集成,其中 CE 设备单宿主到设备 PE1、PE2 和 PE3。
配置
CLI 快速配置
要快速配置此示例,请复制以下命令,将其粘贴到文本文件中,删除所有换行符,更改与您的网络配置匹配所需的任何详细信息,将命令复制并粘贴到层次结构级别的 CLI [edit]
中,然后从配置模式进入 commit
。
PE1
set chassis aggregated-devices ethernet device-count 16 set chassis network-services enhanced-ip set interfaces xe-1/0/0 flexible-vlan-tagging set interfaces xe-1/0/0 encapsulation flexible-ethernet-services set interfaces xe-1/0/0 unit 0 encapsulation vlan-bridge set interfaces xe-1/0/0 unit 0 vlan-id 10 set interfaces xe-1/0/0 unit 1 encapsulation vlan-bridge set interfaces xe-1/0/0 unit 1 vlan-id 20 set interfaces xe-1/2/2 flexible-vlan-tagging set interfaces xe-1/2/2 encapsulation flexible-ethernet-services set interfaces xe-1/2/2 unit 0 encapsulation vlan-bridge set interfaces xe-1/2/2 unit 0 vlan-id 10 set interfaces xe-1/2/2 unit 0 family bridge filter input BRI set interfaces xe-1/2/2 unit 1 encapsulation vlan-bridge set interfaces xe-1/2/2 unit 1 vlan-id 20 set interfaces xe-1/2/2 unit 2 encapsulation vlan-bridge set interfaces xe-1/2/2 unit 2 vlan-id 11 set interfaces xe-1/2/2 unit 2 family bridge set interfaces xe-1/2/2 unit 3 encapsulation vlan-bridge set interfaces xe-1/2/2 unit 3 vlan-id 21 set interfaces xe-1/2/2 unit 3 family bridge set interfaces ge-2/1/0 gigether-options 802.3ad ae6 set interfaces ge-2/1/1 unit 0 family inet address 10.0.0.1/8 set interfaces ge-2/1/1 unit 0 family iso set interfaces ge-2/1/1 unit 0 family mpls set interfaces ae6 encapsulation ethernet-bridge set interfaces ae6 unit 0 family bridge set interfaces cbp0 unit 0 family bridge interface-mode trunk set interfaces cbp0 unit 0 family bridge bridge-domain-type bvlan set interfaces cbp0 unit 0 family bridge isid-list all set interfaces cbp0 unit 1 family bridge interface-mode trunk set interfaces cbp0 unit 1 family bridge bridge-domain-type bvlan set interfaces cbp0 unit 1 family bridge isid-list all set interfaces irb unit 0 family inet address 10.0.0.1/8 set interfaces irb unit 0 family iso set interfaces irb unit 0 family mpls set interfaces lo0 unit 0 family inet address 127.0.0.1/8 primary set interfaces pip0 unit 0 family bridge interface-mode trunk set interfaces pip0 unit 0 family bridge bridge-domain-type svlan set interfaces pip0 unit 0 family bridge isid-list all-service-groups set interfaces pip0 unit 1 family bridge interface-mode trunk set interfaces pip0 unit 1 family bridge bridge-domain-type svlan set interfaces pip0 unit 1 family bridge isid-list all-service-groups set routing-options router-id 127.0.0.1 set routing-options autonomous-system 65221 set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path PE1toPE2 from 127.0.0.1 set protocols mpls label-switched-path PE1toPE2 to 127.0.0.2 set protocols mpls label-switched-path PE1toPE3 from 127.0.0.1 set protocols mpls label-switched-path PE1toPE3 to 127.0.0.3 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp group ibgp type internal set protocols bgp group ibgp local-address 127.0.0.1 set protocols bgp group ibgp family evpn signaling set protocols bgp group ibgp neighbor 127.0.0.2 set protocols bgp group ibgp neighbor 127.0.0.3 set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface all set protocols ospf area 0.0.0.0 interface fxp0.0 disable set routing-instances pbbn1 instance-type virtual-switch set routing-instances pbbn1 interface cbp0.0 set routing-instances pbbn1 route-distinguisher 127.0.0.1:100 set routing-instances pbbn1 vrf-target target:100:100 set routing-instances pbbn1 protocols evpn pbb-evpn-core set routing-instances pbbn1 protocols evpn extended-isid-list 1000 set routing-instances pbbn1 protocols evpn extended-isid-list 2000 set routing-instances pbbn1 bridge-domains bda vlan-id 100 set routing-instances pbbn1 bridge-domains bda isid-list 1000 set routing-instances pbbn1 bridge-domains bda vlan-id-scope-local set routing-instances pbbn1 bridge-domains bdb vlan-id 200 set routing-instances pbbn1 bridge-domains bdb isid-list 2000 set routing-instances pbbn1 bridge-domains bdb vlan-id-scope-local set routing-instances pbn1 instance-type virtual-switch set routing-instances pbn1 interface pip0.0 set routing-instances pbn1 bridge-domains bda domain-type bridge set routing-instances pbn1 bridge-domains bda vlan-id 10 set routing-instances pbn1 bridge-domains bda interface xe-1/2/2.0 set routing-instances pbn1 bridge-domains bda interface xe-1/0/0.0 set routing-instances pbn1 bridge-domains bdb domain-type bridge set routing-instances pbn1 bridge-domains bdb vlan-id 20 set routing-instances pbn1 bridge-domains bdb interface xe-1/2/2.1 set routing-instances pbn1 bridge-domains bdb interface xe-1/0/0.1 set routing-instances pbn1 bridge-domains bdc domain-type bridge set routing-instances pbn1 bridge-domains bdc vlan-id 11 set routing-instances pbn1 bridge-domains bdc interface xe-1/2/2.2 set routing-instances pbn1 bridge-domains bdd domain-type bridge set routing-instances pbn1 bridge-domains bdd vlan-id 21 set routing-instances pbn1 bridge-domains bdd interface xe-1/2/2.3 set routing-instances pbn1 pbb-options peer-instance pbbn1 set routing-instances pbn1 service-groups sga service-type elan set routing-instances pbn1 service-groups sga pbb-service-options isid 1000 vlan-id-list 10 set routing-instances pbn1 service-groups sga pbb-service-options isid 1000 vlan-id-list 11 set routing-instances pbn1 service-groups sga pbb-service-options source-bmac 00:50:50:50:50:50 set routing-instances pbn1 service-groups sgb service-type elan set routing-instances pbn1 service-groups sgb pbb-service-options isid 2000 vlan-id-list 20 set routing-instances pbn1 service-groups sgb pbb-service-options isid 2000 vlan-id-list 21 set bridge-domains bd vlan-id none set bridge-domains bd interface ae6.0 set bridge-domains bd routing-interface irb.0
PE2
set chassis aggregated-devices ethernet device-count 3 set chassis network-services enhanced-ip set interfaces xe-0/0/0 flexible-vlan-tagging set interfaces xe-0/0/0 encapsulation flexible-ethernet-services set interfaces xe-0/0/0 unit 0 encapsulation vlan-bridge set interfaces xe-0/0/0 unit 0 vlan-id 10 set interfaces xe-0/0/0 unit 1 encapsulation vlan-bridge set interfaces xe-0/0/0 unit 1 vlan-id 20 set interfaces xe-0/0/0 unit 2 encapsulation vlan-bridge set interfaces xe-0/0/0 unit 2 vlan-id 11 set interfaces xe-0/0/0 unit 2 family bridge set interfaces xe-0/0/0 unit 3 encapsulation vlan-bridge set interfaces xe-0/0/0 unit 3 vlan-id 21 set interfaces xe-0/0/0 unit 3 family bridge set interfaces ge-0/2/1 unit 0 family inet address 172.16.0.1/16 set interfaces ge-0/2/1 unit 0 family mpls set interfaces ge-0/2/9 gigether-options 802.3ad ae6 set interfaces ae6 encapsulation ethernet-bridge set interfaces ae6 unit 0 family bridge set interfaces cbp0 unit 0 family bridge interface-mode trunk set interfaces cbp0 unit 0 family bridge bridge-domain-type bvlan set interfaces cbp0 unit 0 family bridge isid-list all set interfaces cbp0 unit 1 family bridge interface-mode trunk set interfaces cbp0 unit 1 family bridge bridge-domain-type bvlan set interfaces cbp0 unit 1 family bridge isid-list all set interfaces irb unit 0 family inet address 10.0.0.2/8 set interfaces irb unit 0 family mpls set interfaces lo0 unit 0 family inet address 127.0.0.2/8 primary set interfaces pip0 unit 0 family bridge interface-mode trunk set interfaces pip0 unit 0 family bridge bridge-domain-type svlan set interfaces pip0 unit 0 family bridge isid-list all-service-groups set interfaces pip0 unit 1 family bridge interface-mode trunk set interfaces pip0 unit 1 family bridge bridge-domain-type svlan set interfaces pip0 unit 1 family bridge isid-list all-service-groups set routing-options router-id 127.0.0.2 set routing-options autonomous-system 65221 set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path PE2toPE1 from 127.0.0.2 set protocols mpls label-switched-path PE2toPE1 to 127.0.0.1 set protocols mpls label-switched-path PE2toPE3 from 127.0.0.2 set protocols mpls label-switched-path PE2toPE3 to 127.0.0.3 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp group ibgp type internal set protocols bgp group ibgp local-address 127.0.0.2 set protocols bgp group ibgp family evpn signaling set protocols bgp group ibgp neighbor 127.0.0.1 set protocols bgp group ibgp neighbor 127.0.0.3 set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface all set protocols ospf area 0.0.0.0 interface fxp0.0 disable set routing-instances pbbn1 instance-type virtual-switch set routing-instances pbbn1 interface cbp0.0 set routing-instances pbbn1 route-distinguisher 127.0.0.2:100 set routing-instances pbbn1 vrf-target target:100:100 set routing-instances pbbn1 protocols evpn pbb-evpn-core set routing-instances pbbn1 protocols evpn extended-isid-list 1000 set routing-instances pbbn1 protocols evpn extended-isid-list 2000 set routing-instances pbbn1 bridge-domains bda vlan-id 100 set routing-instances pbbn1 bridge-domains bda isid-list 1000 set routing-instances pbbn1 bridge-domains bda vlan-id-scope-local set routing-instances pbbn1 bridge-domains bdb vlan-id 200 set routing-instances pbbn1 bridge-domains bdb isid-list 2000 set routing-instances pbbn1 bridge-domains bdb vlan-id-scope-local set routing-instances pbn1 instance-type virtual-switch set routing-instances pbn1 interface pip0.0 set routing-instances pbn1 bridge-domains bda domain-type bridge set routing-instances pbn1 bridge-domains bda vlan-id 10 set routing-instances pbn1 bridge-domains bda interface xe-0/0/0.0 set routing-instances pbn1 bridge-domains bdb domain-type bridge set routing-instances pbn1 bridge-domains bdb vlan-id 20 set routing-instances pbn1 bridge-domains bdb interface xe-0/0/0.1 set routing-instances pbn1 bridge-domains bdc domain-type bridge set routing-instances pbn1 bridge-domains bdc vlan-id 11 set routing-instances pbn1 bridge-domains bdc interface xe-0/0/0.2 set routing-instances pbn1 bridge-domains bdd domain-type bridge set routing-instances pbn1 bridge-domains bdd vlan-id 21 set routing-instances pbn1 bridge-domains bdd interface xe-0/0/0.3 set routing-instances pbn1 pbb-options peer-instance pbbn1 set routing-instances pbn1 service-groups sga service-type elan set routing-instances pbn1 service-groups sga pbb-service-options isid 1000 vlan-id-list 10 set routing-instances pbn1 service-groups sga pbb-service-options isid 1000 vlan-id-list 11 set routing-instances pbn1 service-groups sga pbb-service-options source-bmac 00:51:51:51:51:51 set routing-instances pbn1 service-groups sgb service-type elan set routing-instances pbn1 service-groups sgb pbb-service-options isid 2000 vlan-id-list 20 set routing-instances pbn1 service-groups sgb pbb-service-options isid 2000 vlan-id-list 21 set bridge-domains bd vlan-id none set bridge-domains bd interface ae6.0 set bridge-domains bd routing-interface irb.0
PE3
set chassis aggregated-devices ethernet device-count 16 set chassis network-services enhanced-ip set interfaces xe-0/0/3 flexible-vlan-tagging set interfaces xe-0/0/3 encapsulation flexible-ethernet-services set interfaces xe-0/0/3 unit 0 encapsulation vlan-bridge set interfaces xe-0/0/3 unit 0 vlan-id 10 set interfaces xe-0/0/3 unit 1 encapsulation vlan-bridge set interfaces xe-0/0/3 unit 1 vlan-id 20 set interfaces xe-0/0/3 unit 2 encapsulation vlan-bridge set interfaces xe-0/0/3 unit 2 vlan-id 11 set interfaces xe-0/0/3 unit 2 family bridge set interfaces xe-0/0/3 unit 3 encapsulation vlan-bridge set interfaces xe-0/0/3 unit 3 vlan-id 21 set interfaces xe-0/0/3 unit 3 family bridge set interfaces ge-1/0/6 unit 0 family inet address 172.17.0.1/16 set interfaces ge-1/0/6 unit 0 family mpls set interfaces ge-1/1/4 unit 0 family inet address 172.16.0.2/16 set interfaces ge-1/1/4 unit 0 family mpls set interfaces cbp0 unit 0 family bridge interface-mode trunk set interfaces cbp0 unit 0 family bridge bridge-domain-type bvlan set interfaces cbp0 unit 0 family bridge isid-list all set interfaces cbp0 unit 1 family bridge interface-mode trunk set interfaces cbp0 unit 1 family bridge bridge-domain-type bvlan set interfaces cbp0 unit 1 family bridge isid-list all set interfaces lo0 unit 0 family inet address 127.0.0.3/8 primary set interfaces pip0 unit 0 family bridge interface-mode trunk set interfaces pip0 unit 0 family bridge bridge-domain-type svlan set interfaces pip0 unit 0 family bridge isid-list all-service-groups set interfaces pip0 unit 1 family bridge interface-mode trunk set interfaces pip0 unit 1 family bridge bridge-domain-type svlan set interfaces pip0 unit 1 family bridge isid-list all-service-groups set routing-options router-id 127.0.0.3 set routing-options autonomous-system 65221 set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path PE3toPE1 from 127.0.0.3 set protocols mpls label-switched-path PE3toPE1 to 127.0.0.1 set protocols mpls label-switched-path PE3toPE2 from 127.0.0.3 set protocols mpls label-switched-path PE3toPE2 to 127.0.0.2 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp group ibgp type internal set protocols bgp group ibgp local-address 127.0.0.3 set protocols bgp group ibgp family evpn signaling set protocols bgp group ibgp neighbor 127.0.0.1 set protocols bgp group ibgp neighbor 127.0.0.2 set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface all set protocols ospf area 0.0.0.0 interface fxp0.0 disable set routing-instances pbbn1 instance-type virtual-switch set routing-instances pbbn1 interface cbp0.0 set routing-instances pbbn1 route-distinguisher 127.0.0.3:100 set routing-instances pbbn1 vrf-target target:100:100 set routing-instances pbbn1 protocols evpn pbb-evpn-core set routing-instances pbbn1 protocols evpn extended-isid-list 1000 set routing-instances pbbn1 protocols evpn extended-isid-list 2000 set routing-instances pbbn1 bridge-domains bda vlan-id 100 set routing-instances pbbn1 bridge-domains bda isid-list 1000 set routing-instances pbbn1 bridge-domains bda vlan-id-scope-local set routing-instances pbbn1 bridge-domains bdb vlan-id 200 set routing-instances pbbn1 bridge-domains bdb isid-list 2000 set routing-instances pbbn1 bridge-domains bdb vlan-id-scope-local set routing-instances pbn1 instance-type virtual-switch set routing-instances pbn1 interface pip0.0 set routing-instances pbn1 bridge-domains bda domain-type bridge set routing-instances pbn1 bridge-domains bda vlan-id 10 set routing-instances pbn1 bridge-domains bda interface xe-0/0/3.0 set routing-instances pbn1 bridge-domains bdb domain-type bridge set routing-instances pbn1 bridge-domains bdb vlan-id 20 set routing-instances pbn1 bridge-domains bdb interface xe-0/0/3.1 set routing-instances pbn1 bridge-domains bdc domain-type bridge set routing-instances pbn1 bridge-domains bdc vlan-id 11 set routing-instances pbn1 bridge-domains bdc interface xe-0/0/3.2 set routing-instances pbn1 bridge-domains bdd domain-type bridge set routing-instances pbn1 bridge-domains bdd vlan-id 21 set routing-instances pbn1 bridge-domains bdd interface xe-0/0/3.3 set routing-instances pbn1 pbb-options peer-instance pbbn1 set routing-instances pbn1 service-groups sga service-type elan set routing-instances pbn1 service-groups sga pbb-service-options isid 1000 vlan-id-list 10 set routing-instances pbn1 service-groups sga pbb-service-options isid 1000 vlan-id-list 11 set routing-instances pbn1 service-groups sga pbb-service-options source-bmac 00:52:52:52:52:52 set routing-instances pbn1 service-groups sgb service-type elan set routing-instances pbn1 service-groups sgb pbb-service-options isid 2000 vlan-id-list 20 set routing-instances pbn1 service-groups sgb pbb-service-options isid 2000 vlan-id-list 21
程序
分步过程
以下示例要求您在配置层次结构中导航各个级别。有关导航 CLI 的信息,请参阅 CLI 用户指南中的在配置模式下使用 CLI 编辑器。
要配置设备 PE1:
设置设备 PE1 上的聚合以太网接口数量。
[edit chassis] user@PE1# set aggregated-devices ethernet device-count 16
将设备 PE1 的网络服务设置为增强型互联网协议,并使用增强模式功能。
[edit chassis] user@PE1# set chassis network-services enhanced-ip
配置设备 PE1 面向 CE 的接口。
[edit interfaces] user@PE1# set xe-1/0/0 flexible-vlan-tagging user@PE1# set xe-1/0/0 encapsulation flexible-ethernet-services user@PE1# set xe-1/0/0 unit 0 encapsulation vlan-bridge user@PE1# set xe-1/0/0 unit 0 vlan-id 10 user@PE1# set xe-1/0/0 unit 1 encapsulation vlan-bridge user@PE1# set xe-1/0/0 unit 1 vlan-id 20 user@PE1# set xe-1/2/2 flexible-vlan-tagging user@PE1# set xe-1/2/2 encapsulation flexible-ethernet-services user@PE1# set xe-1/2/2 unit 0 encapsulation vlan-bridge user@PE1# set xe-1/2/2 unit 0 vlan-id 10 user@PE1# set xe-1/2/2 unit 0 family bridge filter input BRI user@PE1# set xe-1/2/2 unit 1 encapsulation vlan-bridge user@PE1# set xe-1/2/2 unit 1 vlan-id 20 user@PE1# set xe-1/2/2 unit 2 encapsulation vlan-bridge user@PE1# set xe-1/2/2 unit 2 vlan-id 11 user@PE1# set xe-1/2/2 unit 2 family bridge user@PE1# set xe-1/2/2 unit 3 encapsulation vlan-bridge user@PE1# set xe-1/2/2 unit 3 vlan-id 21 user@PE1# set xe-1/2/2 unit 3 family bridge
配置连接设备 PE1 与其他 PE 设备的接口。
[edit interfaces] user@PE1# set ge-2/1/0 gigether-options 802.3ad ae6 user@PE1# set ge-2/1/1 unit 0 family inet address 10.0.0.1/8 user@PE1# set ge-2/1/1 unit 0 family iso user@PE1# set ge-2/1/1 unit 0 family mpls
配置聚合以太网捆绑包 ae6。
[edit interfaces] user@PE1# set ae6 encapsulation ethernet-bridge user@PE1# set ae6 unit 0 family bridge
配置设备 PE1 的环路接口。
[edit interfaces] user@PE1# set interfaces lo0 unit 0 family inet address 127.0.0.1/8 primary
为设备 PE1 配置集成路由和桥接 (IRB) 接口。
[edit interfaces] user@PE1# set interfaces irb unit 0 family inet address 10.0.0.1/8 user@PE1# set interfaces irb unit 0 family iso user@PE1# set interfaces irb unit 0 family mpls
在设备 PE1 上配置客户主干端口 (CBP) 接口。
[edit interfaces] user@PE1# set cbp0 unit 0 family bridge interface-mode trunk user@PE1# set cbp0 unit 0 family bridge bridge-domain-type bvlan user@PE1# set cbp0 unit 0 family bridge isid-list all user@PE1# set cbp0 unit 1 family bridge interface-mode trunk user@PE1# set cbp0 unit 1 family bridge bridge-domain-type bvlan user@PE1# set cbp0 unit 1 family bridge isid-list all
在设备 PE1 上配置提供程序实例端口 (PIP)。
[edit interfaces] user@PE1# set pip0 unit 0 family bridge interface-mode trunk user@PE1# set pip0 unit 0 family bridge bridge-domain-type svlan user@PE1# set pip0 unit 0 family bridge isid-list all-service-groups user@PE1# set pip0 unit 1 family bridge interface-mode trunk user@PE1# set pip0 unit 1 family bridge bridge-domain-type svlan user@PE1# set pip0 unit 1 family bridge isid-list all-service-groups
配置设备 PE1 的路由器 ID 和自治系统编号。
[edit routing-options] user@PE1# set router-id 127.0.0.1 user@PE1# set autonomous-system 65221
在设备 PE1 的所有接口上配置 RSVP,管理接口除外。
[edit protocols] user@PE1# set rsvp interface all user@PE1# set rsvp interface fxp0.0 disable
在设备 PE1 的所有接口上配置 MPLS,管理接口除外。
[edit protocols] user@PE1# set mpls interface all user@PE1# set mpls interface fxp0.0 disable
配置从设备 PE1 到所有其他 PE 设备的 LSP。
[edit protocols] user@PE1# set mpls label-switched-path PE1toPE2 from 127.0.0.1 user@PE1# set mpls label-switched-path PE1toPE2 to 127.0.0.2 user@PE1# set mpls label-switched-path PE1toPE3 from 127.0.0.1 user@PE1# set mpls label-switched-path PE1toPE3 to 127.0.0.3
在系列 EVPN 下配置从设备 PE1 到所有其他 PE 设备的内部 BGP 会话。
[edit protocols] user@PE1# set bgp group ibgp type internal user@PE1# set bgp group ibgp local-address 127.0.0.1 user@PE1# set bgp group ibgp family evpn signaling user@PE1# set bgp group ibgp neighbor 127.0.0.2 user@PE1# set bgp group ibgp neighbor 127.0.0.3
在 PE1 设备的所有接口上配置 OSPF,管理接口除外。
[edit protocols] user@PE1# set ospf traffic-engineering user@PE1# set ospf area 0.0.0.0 interface all user@PE1# set ospf area 0.0.0.0 interface fxp0.0 disable
在设备 PE1 上配置类型为虚拟交换机的客户路由实例(I 组件)。将 CBP 接口、路由识别符以及虚拟路由和转发 (VRF) 目标值分配给 PBBN 路由实例。
[edit routing-instances] user@PE1# set pbbn1 instance-type virtual-switch user@PE1# set pbbn1 interface cbp0.0 user@PE1# set pbbn1 route-distinguisher 127.0.0.1:100 user@PE1# set pbbn1 vrf-target target:100:100
从客户路由实例配置 PBB-EVPN 集成。将扩展的 I-SID 列表和桥接域分配给路由实例。
[edit routing-instances] user@PE1# set pbbn1 protocols evpn pbb-evpn-core user@PE1# set pbbn1 protocols evpn extended-isid-list 1000 user@PE1# set pbbn1 protocols evpn extended-isid-list 2000 user@PE1# set pbbn1 bridge-domains bda vlan-id 100 user@PE1# set pbbn1 bridge-domains bda isid-list 1000 user@PE1# set pbbn1 bridge-domains bda vlan-id-scope-local user@PE1# set pbbn1 bridge-domains bdb vlan-id 200 user@PE1# set pbbn1 bridge-domains bdb isid-list 2000 user@PE1# set pbbn1 bridge-domains bdb vlan-id-scope-local
在设备PE1上配置虚拟交换机类型的提供商路由实例。将 PBP 接口和桥接域分配给路由实例。
[edit routing-instances] user@PE1# set pbn1 instance-type virtual-switch user@PE1# set pbn1 interface pip0.0 user@PE1# set pbn1 bridge-domains bda domain-type bridge user@PE1# set pbn1 bridge-domains bda vlan-id 10 user@PE1# set pbn1 bridge-domains bda interface xe-1/2/2.0 user@PE1# set pbn1 bridge-domains bda interface xe-1/0/0.0 user@PE1# set pbn1 bridge-domains bdb domain-type bridge user@PE1# set pbn1 bridge-domains bdb vlan-id 20 user@PE1# set pbn1 bridge-domains bdb interface xe-1/2/2.1 user@PE1# set pbn1 bridge-domains bdb interface xe-1/0/0.1 user@PE1# set pbn1 bridge-domains bdc domain-type bridge user@PE1# set pbn1 bridge-domains bdc vlan-id 11 user@PE1# set pbn1 bridge-domains bdc interface xe-1/2/2.2 user@PE1# set pbn1 bridge-domains bdd domain-type bridge user@PE1# set pbn1 bridge-domains bdd vlan-id 21 user@PE1# set pbn1 bridge-domains bdd interface xe-1/2/2.3
在客户路由实例中配置对等 PBBN 路由实例。
[edit routing-instances] user@PE1# set pbn1 pbb-options peer-instance pbbn1
配置客户路由实例中要受支持的服务组。
[edit routing-instances] user@PE1# set pbn1 service-groups sga service-type elan user@PE1# set pbn1 service-groups sga pbb-service-options isid 1000 vlan-id-list 10 user@PE1# set pbn1 service-groups sga pbb-service-options isid 1000 vlan-id-list 11 user@PE1# set pbn1 service-groups sga pbb-service-options source-bmac 00:50:50:50:50:50 user@PE1# set pbn1 service-groups sgb service-type elan user@PE1# set pbn1 service-groups sgb pbb-service-options isid 2000 vlan-id-list 20 user@PE1# set pbn1 service-groups sgb pbb-service-options isid 2000 vlan-id-list 21
在设备 PE1 上配置桥接域。
[edit bridge-domains] user@PE1# set bd vlan-id none user@PE1# set bd interface ae6.0 user@PE1# set bd routing-interface irb.0
结果
在配置模式下,输入 show chassis
、 show interfaces
、 show routing-instances
show routing-options
show protocols
、 和show bridge-domains
命令,以确认您的配置。如果输出未显示预期的配置,请重复此示例中的说明以更正配置。
user@PE1# show chassis aggregated-devices { ethernet { device-count 16; } } network-services enhanced-ip;
user@PE1# show interfaces xe-1/0/0 { flexible-vlan-tagging; encapsulation flexible-ethernet-services; unit 0 { encapsulation vlan-bridge; vlan-id 10; } unit 1 { encapsulation vlan-bridge; vlan-id 20; } } xe-1/2/2 { flexible-vlan-tagging; encapsulation flexible-ethernet-services; unit 0 { encapsulation vlan-bridge; vlan-id 10; family bridge { filter { input BRI; ## reference 'BRI' not found } } } unit 1 { encapsulation vlan-bridge; vlan-id 20; } unit 2 { encapsulation vlan-bridge; vlan-id 11; family bridge; } unit 3 { encapsulation vlan-bridge; vlan-id 21; family bridge; } } ge-2/1/0 { gigether-options { 802.3ad ae6; } } ge-2/1/1 { unit 0 { family inet { address 10.0.0.1/8; } family iso; family mpls; } } ae6 { encapsulation ethernet-bridge; unit 0 { family bridge; } } cbp0 { unit 0 { family bridge { interface-mode trunk; bridge-domain-type bvlan; isid-list all; } } unit 1 { family bridge { interface-mode trunk; bridge-domain-type bvlan; isid-list all; } } } irb { unit 0 { family inet { address 10.0.0.1/8; } family iso; family mpls; } } lo0 { unit 0 { family inet { address 127.0.0.1/8 { primary; } } } } pip0 { unit 0 { family bridge { interface-mode trunk; bridge-domain-type svlan; isid-list all-service-groups; } } unit 1 { family bridge { interface-mode trunk; bridge-domain-type svlan; isid-list all-service-groups; } } }
user@PE1# show routing-options router-id 127.0.0.1; autonomous-system 65221;
user@PE1# show protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path PE1toPE2 { from 127.0.0.1; to 127.0.0.2; } label-switched-path PE1toPE3 { from 127.0.0.1; to 127.0.0.3; } interface all; interface fxp0.0 { disable; } } bgp { group ibgp { type internal; local-address 127.0.0.1; family evpn { signaling; } neighbor 127.0.0.2; neighbor 127.0.0.3; } } ospf { traffic-engineering; area 0.0.0.0 { interface all; interface fxp0.0 { disable; } } }
user@PE1# show routing-instances pbbn1 { instance-type virtual-switch; interface cbp0.0; route-distinguisher 127.0.0.1:100; vrf-target target:100:100; protocols { evpn { pbb-evpn-core; extended-isid-list [ 1000 2000 ]; } } bridge-domains { bda { vlan-id 100; isid-list 1000; vlan-id-scope-local; } bdb { vlan-id 200; isid-list 2000; vlan-id-scope-local; } } } pbn1 { instance-type virtual-switch; interface pip0.0; bridge-domains { bda { domain-type bridge; vlan-id 10; interface xe-1/2/2.0; interface xe-1/0/0.0; } bdb { domain-type bridge; vlan-id 20; interface xe-1/2/2.1; interface xe-1/0/0.1; } bdc { domain-type bridge; vlan-id 11; interface xe-1/2/2.2; } bdd { domain-type bridge; vlan-id 21; interface xe-1/2/2.3; } } pbb-options { peer-instance pbbn1; } service-groups { sga { service-type elan; pbb-service-options { isid 1000 vlan-id-list [ 10 11 ]; source-bmac 00:50:50:50:50:50; } } sgb { service-type elan; pbb-service-options { isid 2000 vlan-id-list [ 20 21 ]; } } } }
user@PE1# show bridge-domains bd { vlan-id none; interface ae6.0; routing-interface irb.0; }
如果完成设备配置,请从配置模式输入 commit
。
验证
确认配置工作正常。
验证 BGP 对等状态
目的
验证是否已在 PE 设备之间建立 BGP 会话。
行动
在操作模式下,运行 show bgp summary
命令。
user@PE1> show bgp summary Groups: 1 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending bgp.evpn.0 8 8 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped... 127.0.0.2 65221 9 7 0 0 2:09 Establ bgp.evpn.0: 4/4/4/0 pbbn1.evpn.0: 4/4/4/0 __default_evpn__.evpn.0: 0/0/0/0 127.0.0.3 65221 7 7 0 0 1:25 Establ bgp.evpn.0: 4/4/4/0 pbbn1.evpn.0: 4/4/4/0 __default_evpn__.evpn.0: 0/0/0/0
意义
在 PE 设备之间建立 BGP 会话。
验证 MPLS LSP
目的
验证设备 PE1 上的 MPLS LSP 状态。
行动
在操作模式下,运行 show mpls lsp
命令。
user@PE1> show mpls lsp Ingress LSP: 2 sessions To From State Rt P ActivePath LSPname 127.0.0.2 127.0.0.1 Up 0 * PE1toPE2 127.0.0.3 127.0.0.1 Up 0 * PE1toPE3 Total 2 displayed, Up 2, Down 0 Egress LSP: 2 sessions To From State Rt Style Labelin Labelout LSPname 127.0.0.1 127.0.0.3 Up 0 1 FF 3 - PE3toPE1 127.0.0.1 127.0.0.2 Up 0 1 FF 3 - PE2toPE1 Total 2 displayed, Up 2, Down 0 Transit LSP: 0 sessions Total 0 displayed, Up 0, Down 0
验证 EVPN 路由实例
目的
验证 EVPN 路由实例信息。
行动
在操作模式下,运行 show evpn instance extensive
命令。
user@PE1> show evpn instance extensive Instance: __default_evpn__ Route Distinguisher: 127.0.0.1:0 Number of bridge domains: 0 Number of neighbors: 0 Instance: pbbn1 Route Distinguisher: 127.0.0.1:100 Per-instance MAC route label: 16 Per-instance multicast route label: 17 PBB EVPN Core enabled Control word enabled MAC database status Local Remote MAC advertisements: 2 4 MAC+IP advertisements: 0 0 Default gateway MAC advertisements: 0 0 Number of local interfaces: 1 (1 up) Interface name ESI Mode Status AC-Role cbp0.0 00:00:00:00:00:00:00:00:00:00 single-homed Up Root Number of IRB interfaces: 0 (0 up) Number of bridge domains: 2 VLAN Domain ID Intfs / up IRB intf Mode MAC sync IM route label SG sync IM core nexthop 1000 0 0 Extended Enabled 17 Disabled 2000 0 0 Extended Enabled 17 Disabled Number of Bundle bridge domains: 0 Number of neighbors: 2 Address MAC MAC+IP AD IM ES Leaf-label 127.0.0.2 2 0 0 2 0 127.0.0.3 2 0 0 2 0 Number of ethernet segments: 0
意义
输出显示 pbbn1
路由实例信息,例如 PBB 与 EVPN 的集成、单宿主 EVPN 操作模式以及设备 PE2 和 PE3 作为网络端口的 IP 地址。
验证 EVPN 路由实例的路由表条目
目的
验证 EVPN 路由实例的路由表条目。
行动
在操作模式下,运行 show route table pbbn1.evpn.0
命令。
user@PE1> show route table pbbn1.evpn.0 pbbn1.evpn.0: 12 destinations, 12 routes (12 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 2:127.0.0.1:100::1000::00:50:50:50:50:50/304 MAC/IP *[EVPN/170] 00:04:20 Indirect 2:127.0.0.1:100::2000::00:1d:b5:a2:47:b0/304 MAC/IP *[EVPN/170] 00:04:20 Indirect 2:127.0.0.2:100::1000::00:51:51:51:51:51/304 MAC/IP *[BGP/170] 00:02:50, localpref 100, from 127.0.0.2 AS path: I, validation-state: unverified > to 10.0.0.2 via irb.0, label-switched-path PE1toPE2 2:127.0.0.2:100::2000::00:23:9c:5e:a7:b0/304 MAC/IP *[BGP/170] 00:02:50, localpref 100, from 127.0.0.2 AS path: I, validation-state: unverified > to 10.0.0.2 via irb.0, label-switched-path PE1toPE2 2:127.0.0.3:100::1000::00:52:52:52:52:52/304 MAC/IP *[BGP/170] 00:02:05, localpref 100, from 127.0.0.3 AS path: I, validation-state: unverified > to 172.17.0.1 via ge-2/1/1.0, label-switched-path PE1toPE3 2:127.0.0.3:100::2000::5c:5e:ab:0d:3a:b8/304 MAC/IP *[BGP/170] 00:02:05, localpref 100, from 127.0.0.3 AS path: I, validation-state: unverified > to 172.17.0.1 via ge-2/1/1.0, label-switched-path PE1toPE3 3:127.0.0.1:100::1000::127.0.0.1/248 IM *[EVPN/170] 00:04:20 Indirect 3:127.0.0.1:100::2000::127.0.0.1/248 IM *[EVPN/170] 00:04:20 Indirect 3:127.0.0.2:100::1000::127.0.0.2/248 IM *[BGP/170] 00:02:50, localpref 100, from 127.0.0.2 AS path: I, validation-state: unverified > to 10.0.0.2 via irb.0, label-switched-path PE1toPE2 3:127.0.0.2:100::2000::127.0.0.2/248 IM *[BGP/170] 00:02:50, localpref 100, from 127.0.0.2 AS path: I, validation-state: unverified > to 10.0.0.2 via irb.0, label-switched-path PE1toPE2 3:127.0.0.3:100::1000::127.0.0.3/248 IM *[BGP/170] 00:02:05, localpref 100, from 127.0.0.3 AS path: I, validation-state: unverified > to 172.17.0.1 via ge-2/1/1.0, label-switched-path PE1toPE3 3:127.0.0.3:100::2000::127.0.0.3/248 IM *[BGP/170] 00:02:05, localpref 100, from 127.0.0.3 AS path: I, validation-state: unverified > to 172.17.0.1 via ge-2/1/1.0, label-switched-path PE1toPE3
意义
输出显示如何使用 IRB 集成在 PE 设备之间路由 LSP。
验证 EVPN 数据库
目的
验证 PE 设备上的 EVPN 数据库信息。
行动
在操作模式下,运行 show evpn database
命令。
user@PE1> show evpn database Instance: pbbn1 VLAN DomainId MAC address Active source Timestamp IP address 2000 00:1d:b5:a2:47:b0 Local Apr 14 13:48:51 2000 00:23:9c:5e:a7:b0 127.0.0.2 Apr 14 13:53:04 2000 5c:5e:ab:0d:3a:b8 127.0.0.3 Apr 14 13:53:38 1000 00:50:50:50:50:50 Local Apr 14 13:48:51 1000 00:51:51:51:51:51 127.0.0.2 Apr 14 13:53:04 1000 00:52:52:52:52:52 127.0.0.3 Apr 14 13:53:38
user@PE2> show evpn database Instance: pbbn1 VLAN DomainId MAC address Active source Timestamp IP address 2000 00:1d:b5:a2:47:b0 127.0.0.1 Apr 14 13:53:04 2000 00:23:9c:5e:a7:b0 Local Apr 14 13:48:46 2000 5c:5e:ab:0d:3a:b8 127.0.0.3 Apr 14 13:53:37 1000 00:50:50:50:50:50 127.0.0.1 Apr 14 13:53:04 1000 00:51:51:51:51:51 Local Apr 14 13:48:46 1000 00:52:52:52:52:52 127.0.0.3 Apr 14 13:53:37
user@PE3> show evpn database Instance: pbbn1 VLAN DomainId MAC address Active source Timestamp IP address 1000 00:50:50:50:50:50 127.0.0.1 Apr 14 13:53:34 1000 00:51:51:51:51:51 127.0.0.2 Apr 14 13:53:27 1000 00:52:52:52:52:52 Local Apr 14 13:52:04 2000 00:1d:b5:a2:47:b0 127.0.0.1 Apr 14 13:53:34 2000 00:23:9c:5e:a7:b0 127.0.0.2 Apr 14 13:53:27 2000 5c:5e:ab:0d:3a:b8 Local
验证 MAC 表条目
目的
验证网桥 MAC 表条目。
行动
在操作模式下,运行 show bridge mac-table
命令。
user@PE1> show bridge mac-table MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC, P -Pinned MAC) Routing instance : default-switch Bridging domain : bd, VLAN : none MAC MAC Logical NH MAC address flags interface Index property 00:23:9c:5e:a7:f0 D ae6.0 MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC, P -Pinned MAC) Routing instance : pbbn1 Bridging domain : bda, VLAN : 100 MAC MAC Logical NH MAC address flags interface Index property 00:51:51:51:51:51 DC 1048576 00:52:52:52:52:52 DC 1048581 01:1e:83:00:03:e8 DC 1048578 MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC, P -Pinned MAC) Routing instance : pbbn1 Bridging domain : bdb, VLAN : 200 MAC MAC Logical NH MAC address flags interface Index property 00:23:9c:5e:a7:b0 DC 1048576 01:1e:83:00:07:d0 DC 1048577 5c:5e:ab:0d:3a:b8 DC 1048581 MAC flags (S -static MAC, D -dynamic MAC, SE -Statistics enabled, NM -Non configured MAC, P -Pinned MAC) Routing instance : pbn1 Bridging domain : bda, ISID : 1000, VLAN : 10 MAC MAC Logical Remote address flags interface BEB address 00:00:00:00:0a:00 D xe-1/0/0.0 00:00:00:00:0a:01 D xe-1/0/0.0 00:00:00:00:0a:02 D xe-1/0/0.0 00:00:00:00:0a:03 D xe-1/0/0.0 00:00:00:00:0a:04 D xe-1/0/0.0 00:00:00:00:0a:05 D xe-1/0/0.0 00:00:00:00:0a:06 D xe-1/0/0.0 00:00:00:00:0a:07 D xe-1/0/0.0 00:00:00:00:0a:08 D xe-1/0/0.0 00:00:00:00:0a:09 D xe-1/0/0.0
意义
输出显示与聚合以太网捆绑包关联的 ae6
MAC 地址。
验证 inet.3 路由表条目
目的
验证设备 PE1 上的 inet.3 路由表条目。
行动
在操作模式下,运行 show route table inet.3
命令。
user@PE1> show route table inet.3 inet.3: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 127.0.0.2/8 *[RSVP/7/1] 00:11:15, metric 1 > to 10.0.0.2 via irb.0, label-switched-path PE1toPE2 127.0.0.3/8 *[RSVP/7/1] 00:09:48, metric 1 > to 172.17.0.1 via ge-2/1/1.0, label-switched-path PE1toPE3
意义
设备 PE2 和 PE3 的 LSP 使用 IRB 接口进行路由。