示例:配置基本 EVPN 主动-主动多宿主
此示例说明如何在以太网 VPN (EVPN) 中配置 A/A 多宿主客户边缘 (CE) 设备和提供商边缘 (PE) 设备。
要求
此示例使用以下硬件和软件组件:
四个仅带 MPC 接口的 MX 系列 5G 通用路由平台,其中:
将两台设备配置为连接到公共多宿主客户站点的提供商边缘 (PE) 路由器。
一台设备被配置为连接到单宿主客户站点的远程 PE 路由器。
一台设备被配置为提供商路由器。
• 两台客户边缘 (CE) 设备,其中:
两台多宿主 CE 设备。
一台单宿主 CE 设备。
开始之前:
配置路由器接口。
配置 OSPF 或任何其他 IGP 协议。
配置 BGP 内部组。
配置 MPLS。
概述
图 1 展示了一个简单的 EVPN 拓扑。路由器 PE1 和 PE2 是连接到多宿主客户边缘 (CE) 路由器 CE1 的提供商边缘 (PE) 路由器。路由器 P 是连接到路由器 PE1、PE2 和 PE3 的提供商路由器。路由器 PE3 连接到客户边缘路由器 CE2。
图 1:简单的 EVPN 多宿主拓扑
配置
CLI 快速配置
路由器的配置参数如下:
CE1
chassis {
aggregated-devices {
ethernet {
device-count 1;
}
}
}
interfaces {
ge-0/0/1 {
description To-PE1;
gigether-options {
802.3ad ae0;
}
}
ge-0/0/2 {
description To-PE2;
gigether-options {
802.3ad ae0;
}
}
ge-0/0/7 {
unit 0 {
family bridge {
interface-mode access;
vlan-id 10;
}
}
}
ge-0/0/8 {
unit 0 {
family bridge {
interface-mode access;
vlan-id 20;
}
}
}
ae0 {
description To-PE1_and_PE2;
unit 0 {
family bridge {
interface-mode trunk;
vlan-id-list [ 10 20 ];
}
}
}
}
bridge-domains {
BD {
vlan-id-list [ 10 20 ];
}
}
PE1型
interfaces {
ge-0/0/1 {
description To-CE1;
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
esi {
00:11:11:11:11:11:11:11:11:11;
all-active;
}
unit 10 {
family bridge {
interface-mode trunk;
vlan-id-list [ 10 20 ];
}
}
}
ge-0/0/3 {
unit 0 {
family inet {
address 10.3.3.1/30;
}
family mpls;
}
}
lo0 {
unit 0 {
family inet {
address 192.168.1.1/32;
}
}
}
}
routing-options {
router-id 192.168.1.1;
autonomous-system 65432;
forwarding-table {
export evpn-pplb;
}
}
protocols {
rsvp {
interface ge-0/0/3.0;
}
mpls {
no-cspf;
label-switched-path PE1-to-PE2 {
to 192.168.2.2;
}
label-switched-path PE1-to-PE3 {
to 192.168.3.3;
}
interface ge-0/0/3.0;
}
bgp {
group EVPN-PE {
type internal;
local-address 192.168.1.1;
family inet-vpn {
unicast;
}
family evpn {
signaling;
}
neighbor 192.168.3.3;
neighbor 192.168.2.2;
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface all {
interface-type p2p;
}
interface fxp0.0 {
disable;
}
}
}
}
routing-instances {
evpn-ta {
instance-type virtual-switch;
interface ge-0/0/1.10;
route-distinguisher 65432:10;
vrf-target target:65432:10;
protocols {
evpn {
extended-vlan-list [ 10 20 ];
}
}
bridge-domains {
bd10 {
domain-type bridge;
vlan-id 10;
}
bd20 {
domain-type bridge;
vlan-id 20;
}
}
}
}
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
PE2
interfaces {
ge-0/0/2 {
description To-CE1;
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
esi {
00:11:11:11:11:11:11:11:11:11;
all-active;
}
unit 10 {
family bridge {
interface-mode trunk;
vlan-id-list [ 10 20 ];
}
}
}
ge-0/0/4 {
unit 0 {
family inet {
address 10.4.4.1/30;
}
family mpls;
}
}
lo0 {
unit 0 {
family inet {
address 192.168.2.2/32;
}
}
}
}
routing-options {
router-id 192.168.2.2;
autonomous-system 65432;
forwarding-table {
export evpn-pplb;
}
}
protocols {
rsvp {
interface ge-0/0/4.0;
}
mpls {
no-cspf;
label-switched-path PE2-to-PE1 {
to 192.168.1.1;
}
label-switched-path PE2-to-PE3 {
to 192.168.3.3;
}
interface ge-0/0/4.0;
}
bgp {
group EVPN-PE {
type internal;
local-address 192.168.2.2;
family inet-vpn {
unicast;
}
family evpn {
signaling;
}
neighbor 192.168.1.1;
neighbor 192.168.3.3;
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface all {
interface-type p2p;
}
interface fxp0.0 {
disable;
}
}
}
}
routing-instances {
evpn-ta {
instance-type virtual-switch;
interface ge-0/0/2.10;
route-distinguisher 65432:10;
vrf-target target:65432:10;
protocols {
evpn {
extended-vlan-list [ 10 20 ];
}
}
bridge-domains {
bd10 {
domain-type bridge;
vlan-id 10;
}
bd20 {
domain-type bridge;
vlan-id 20;
}
}
}
}
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
路由器 PE3
interfaces {
ge-0/0/5 {
unit 0 {
family inet {
address 10.5.5.1/30;
}
family mpls;
}
}
ge-0/0/6 {
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
unit 10 {
family bridge {
interface-mode trunk;
vlan-id-list 10;
}
}
unit 20 {
family bridge {
interface-mode trunk;
vlan-id-list 20;
}
}
}
lo0 {
unit 0 {
family inet {
address 192.168.3.3/32;
}
}
}
routing-options {
router-id 192.168.3.3;
autonomous-system 65432;
forwarding-table {
export evpn-pplb;
}
}
protocols {
rsvp {
interface ge-0/0/5.0;
}
mpls {
no-cspf;
label-switched-path PE3-to-PE1 {
to 192.168.1.1;
}
label-switched-path PE3-to-PE2 {
to 192.168.2.2;
}
interface ge-0/0/5.0;
}
bgp {
group EVPN-PE {
type internal;
local-address 192.168.3.3;
family inet-vpn {
unicast;
}
family evpn {
signaling;
}
neighbor 192.168.1.1;
neighbor 192.168.2.2;
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface all {
interface-type p2p;
}
interface fxp0.0 {
disable;
}
}
}
}
routing-instances {
evpn-ta {
instance-type virtual-switch;
interface ge-0/0/6.10;
interface ge-0/0/6.20;
route-distinguisher 65432:10;
vrf-target target:65432:10;
protocols {
evpn {
extended-vlan-list [ 10 20 ];
}
}
bridge-domains {
bd10 {
domain-type bridge;
vlan-id 10;
bridge-options {
interface ge-0/0/6.10;
}
}
bd20 {
domain-type bridge;
vlan-id 20;
bridge-options {
interface ge-0/0/6.20;
}
}
}
}
}
}
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
路由器 P
interfaces {
ge-0/0/3 {
unit 0 {
family inet {
address 10.3.3.2/30;
}
family mpls;
}
}
ge-0/0/4 {
unit 0 {
family inet {
address 10.4.4.2/30;
}
family mpls;
}
}
ge-0/0/5 {
unit 0 {
family inet {
address 10.5.5.2/30;
}
family mpls;
}
}
lo0 {
unit 0 {
family inet {
address 192.168.4.4/32;
}
}
}
}
routing-options {
router-id 192.168.4.4;
autonomous-system 65432;
}
protocols {
rsvp {
interface all;
interface fxp0.0 {
disable;
}
}
mpls {
interface all;
interface fxp0.0 {
disable;
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface all {
interface-type p2p;
}
interface fxp0.0 {
disable;
}
}
}
}