可选配置:DHCP 中继和组播
使用这些示例在折叠式主干数据中心架构上配置可选的 DHCP 中继和组播转发。
配置 DHCP 中继(可选)
要求
DHCP 服务器。
在如何使用 EVPN 多宿主配置折叠主干中配置的设备。
概述
使用此部分可以配置主干交换机,以便将 DHCP 请求中继到 DHCP 服务器。使用选项 forward-only
在路由实例中启用 DHCP 中继。此 forward-only
选项可确保在交换机上转发 DHCP 数据包,但不会创建任何 DHCP 服务器客户端绑定。
拓扑学
DHCP 服务器可以位于数据中心的任何位置,也可以位于不同的数据中心。在这种情况下,DHCP 服务器连接到 DC1 中的一台 ToR 交换机,DHCP 服务器的 IP 地址为 192.168.201.10。DHCP 中继拓扑如 图 1 所示。

配置
配置主干 1
分步过程
在第一个路由实例上配置 DHCP 中继。
set routing-instances JNPR_1_VRF forwarding-options dhcp-relay forward-only set routing-instances JNPR_1_VRF forwarding-options dhcp-relay server-group Server_Group1 192.168.201.10 set routing-instances JNPR_1_VRF forwarding-options dhcp-relay group Relay_Group1 active-server-group Server_Group1 set routing-instances JNPR_1_VRF forwarding-options dhcp-relay group Relay_Group1 route-suppression destination set routing-instances JNPR_1_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.201 set routing-instances JNPR_1_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.202 set routing-instances JNPR_1_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.203
在第二个路由实例上配置 DHCP 中继。
set routing-instances JNPR_2_VRF forwarding-options dhcp-relay forward-only set routing-instances JNPR_2_VRF forwarding-options dhcp-relay server-group Server_Group1 192.168.201.10 set routing-instances JNPR_2_VRF forwarding-options dhcp-relay group Relay_Group1 active-server-group Server_Group1 set routing-instances JNPR_2_VRF forwarding-options dhcp-relay group Relay_Group1 route-suppression destination set routing-instances JNPR_2_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.211 set routing-instances JNPR_2_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.212 set routing-instances JNPR_2_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.213
验证主干 1 上的 DHCP 中继。
user@spine1> show dhcp relay statistics routing-instance JNPR_1_VRF Packets dropped: Total 50741 Invalid server address 0 dhcp-service total 50738 Messages received: BOOTREQUEST 3 DHCPDECLINE 0 DHCPDISCOVER 1 DHCPINFORM 0 DHCPRELEASE 0 DHCPREQUEST 2 DHCPLEASEACTIVE 0 DHCPLEASEUNASSIGNED 0 DHCPLEASEUNKNOWN 0 DHCPLEASEQUERYDONE 0 Messages sent: BOOTREPLY 2 DHCPOFFER 0 DHCPACK 2 DHCPNAK 0 DHCPFORCERENEW 0 DHCPLEASEQUERY 0 DHCPBULKLEASEQUERY 0
配置主干 2
分步过程
在第一个路由实例上配置 DHCP 中继。
set routing-instances JNPR_1_VRF forwarding-options dhcp-relay forward-only set routing-instances JNPR_1_VRF forwarding-options dhcp-relay forward-only-replies set routing-instances JNPR_1_VRF forwarding-options dhcp-relay server-group Server_Group1 192.168.201.10 set routing-instances JNPR_1_VRF forwarding-options dhcp-relay group Relay_Group1 active-server-group Server_Group1 set routing-instances JNPR_1_VRF forwarding-options dhcp-relay group Relay_Group1 route-suppression destination set routing-instances JNPR_1_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.201 set routing-instances JNPR_1_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.202 set routing-instances JNPR_1_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.203
在第二个路由实例上配置 DHCP 中继。
set routing-instances JNPR_2_VRF forwarding-options dhcp-relay forward-only set routing-instances JNPR_2_VRF forwarding-options dhcp-relay forward-only-replies set routing-instances JNPR_2_VRF forwarding-options dhcp-relay server-group Server_Group1 192.168.201.10 set routing-instances JNPR_2_VRF forwarding-options dhcp-relay group Relay_Group1 active-server-group Server_Group1 set routing-instances JNPR_2_VRF forwarding-options dhcp-relay group Relay_Group1 route-suppression destination set routing-instances JNPR_2_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.211 set routing-instances JNPR_2_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.212 set routing-instances JNPR_2_VRF forwarding-options dhcp-relay group Relay_Group1 interface irb.213
验证主干 2 上的 DHCP 中继。
user@spine2> show dhcp relay statistics routing-instance JNPR_1_VRF Packets dropped: Total 50741 Invalid server address 0 dhcp-service total 50738 Messages received: BOOTREQUEST 3 DHCPDECLINE 0 DHCPDISCOVER 1 DHCPINFORM 0 DHCPRELEASE 0 DHCPREQUEST 2 DHCPLEASEACTIVE 0 DHCPLEASEUNASSIGNED 0 DHCPLEASEUNKNOWN 0 DHCPLEASEQUERYDONE 0 Messages sent: BOOTREPLY 2 DHCPOFFER 0 DHCPACK 2 DHCPNAK 0 DHCPFORCERENEW 0 DHCPLEASEQUERY 0 DHCPBULKLEASEQUERY 0
为 VNI 内流量配置组播(可选)
要求
在如何使用 EVPN 多宿主配置折叠主干中配置的设备。
概述
使用此部分配置折叠主干架构,以允许 VNI 内部组播流量。组播源和接收器属于同一 VLAN。
带有QFX5120主干交换机的折叠主干架构不支持 VNI 间组播流量。
拓扑学
本部分包括两个组播组的配置。第一个是组播组 224.0.0.66。如 图 2 所示,组播源为端点 62。组播接收器端点 61 连接到 ToR 2。源和接收器都在同一 VLAN 中,因此它们之间的流量是 VNI 内组播流量。

配置
配置设备
分步过程
为两台主干交换机上的所有 VLAN 启用 IGMP 侦听。
set protocols igmp-snooping vlan VLAN-201 immediate-leave set protocols igmp-snooping vlan VLAN-202 immediate-leave set protocols igmp-snooping vlan VLAN-211 immediate-leave set protocols igmp-snooping vlan VLAN-212 immediate-leave
为所有 VLAN 配置具有 IGMP 侦听的 ToR 交换机。
set protocols igmp-snooping vlan VLAN-201 immediate-leave set protocols igmp-snooping vlan VLAN-201 interface ae1.0 multicast-router-interface set protocols igmp-snooping vlan VLAN-202 immediate-leave set protocols igmp-snooping vlan VLAN-202 interface ae1.0 multicast-router-interface set protocols igmp-snooping vlan VLAN-211 immediate-leave set protocols igmp-snooping vlan VLAN-211 interface ae1.0 multicast-router-interface set protocols igmp-snooping vlan VLAN-212 immediate-leave set protocols igmp-snooping vlan VLAN-212 interface ae1.0 multicast-router-interface
组播组 224.0.0.66 的验证
分步过程
验证 ToR 2 上的 IGMP 侦听成员资格。
user@tor2> show igmp snooping membership Instance: default-switch Vlan: VLAN-201 Learning-Domain: default Interface: ae1.0, Groups: 0 Vlan: VLAN-202 Learning-Domain: default Interface: ae1.0, Groups: 0 Learning-Domain: default Interface: xe-0/2/2.0, Groups: 1 Group: 225.0.0.66 Group mode: Exclude Source: 0.0.0.0 Last reported by: 192.168.202.61 Group timeout: 177 Type: Dynamic Vlan: VLAN-211 Learning-Domain: default Interface: ae1.0, Groups: 0 Vlan: VLAN-212 Learning-Domain: default Interface: ae1.0, Groups: 0
验证主干 1 上的 IGMP 侦听成员身份。
user@spine1> show igmp snooping evpn membership detail Instance: default-switch Vlan: VLAN-201, EVPN-Core-NH: 524301 Learning-Domain: default Interface: ae2.0, Groups: 0 Interface: ae1.0, Groups: 0 Vlan: VLAN-202, EVPN-Core-NH: 524303 Learning-Domain: default Interface: ae2.0, Groups: 1 Group: 225.0.0.66 Group mode: Exclude Source: 0.0.0.0 Type: Local Interface: ae1.0, Groups: 0 Vlan: VLAN-211, EVPN-Core-NH: 524307 Learning-Domain: default Interface: ae2.0, Groups: 0 Interface: ae1.0, Groups: 0 Vlan: VLAN-212, EVPN-Core-NH: 524298 Learning-Domain: default Interface: ae2.0, Groups: 0 Interface: ae1.0, Groups: 0
验证主干 2 上的 IGMP 侦听成员身份。
user@spine2> show igmp snooping evpn membership detail Instance: default-switch Vlan: VLAN-201, EVPN-Core-NH: 524298 Learning-Domain: default Interface: ae2.0, Groups: 0 Interface: ae1.0, Groups: 0 Vlan: VLAN-202, EVPN-Core-NH: 524300 Learning-Domain: default Interface: ae2.0, Groups: 1 Group: 225.0.0.66 Group mode: Exclude Source: 0.0.0.0 Type: Remote Interface: ae1.0, Groups: 0 Vlan: VLAN-211, EVPN-Core-NH: 524304 Learning-Domain: default Interface: ae2.0, Groups: 0 Interface: ae1.0, Groups: 0 Vlan: VLAN-212, EVPN-Core-NH: 524306 Learning-Domain: default Interface: ae2.0, Groups: 0 Interface: ae1.0, Groups: 0
验证主干 1 上指定的转发器。输出显示主干 1 是所有以太网网段的指定转发器。
user@spine1> show evpn instance designated-forwarder Instance: default-switch Number of ethernet segments: 12 ESI: 00:00:00:00:00:00:00:00:01:01 Designated forwarder: 192.168.255.13 ESI: 00:00:00:00:00:00:00:00:01:02 Designated forwarder: 192.168.255.13 ESI: 00:00:00:00:00:00:00:00:01:11 Designated forwarder: 192.168.255.13 ESI: 00:00:00:00:00:00:00:00:01:12 Designated forwarder: 192.168.255.13
验证主干 1 上的组播流量。
基于 LAG 散列,ToR 1 将组播流量发送到主干 1。流量到达 AE1 接口上的主干 1。主干 1 根据 IGMP 组成员身份通过 AE2 转发此流量。
user@spine1> monitor interface traffic detail Interface Link Input packets (pps) Output packets (pps) ae1 Up 6742041146 (2946565) 3924 (1) ae2 Up 2536 (0) 6741411465 (2948357)
验证主干 2 上的组播流量。
基于 LAG 散列,ToR 1 不会将组播流量发送到主干 2。主干 2 通过叠加层接收来自主干 1 的此流量,但会丢弃此流量,并且不会将其转发到 AE2。
user@spine2> monitor interface traffic detail Interface Link Input packets (pps) Output packets (pps) ae1 Up 2547 (0) 3762 (1) ae2 Up 2462 (0) 3769 (1)
组播组 224.0.0.65 的验证
分步过程
验证主干 1 上指定的转发器。输出显示主干 1 仍然是所有以太网网段的指定转发器。
user@spine1> show evpn instance designated-forwarder Instance: default-switch Number of ethernet segments: 12 ESI: 00:00:00:00:00:00:00:00:01:01 Designated forwarder: 192.168.255.13 ESI: 00:00:00:00:00:00:00:00:01:02 Designated forwarder: 192.168.255.13 ESI: 00:00:00:00:00:00:00:00:01:11 Designated forwarder: 192.168.255.13 ESI: 00:00:00:00:00:00:00:00:01:12 Designated forwarder: 192.168.255.13
验证主干 1 上的组播流量。
根据 LAG 散列,ToR 1 不会将组播流量发送到主干 1,因此主干 1 上没有该组播组的传入流量。主干 1 通过叠加接收来自主干 2 的组播流。主干 1 会丢弃流量,并且不会将其转发到 AE2,因为主干 1 和主干 2 属于 AE1 和 AE2 的相同以太网段。
user@spine1> monitor interface traffic detail Interface Link Input packets (pps) Output packets (pps) et-0/0/51 Up 4750 (2947862) 4741 (3) ae1 Up 1027 (1) 1543 (1) ae2 Up 991 (0) 1537 (1)
验证主干 2 上的组播流量。
基于 LAG 散列,ToR 1 将组播流量发送到主干 2。主干 2 不是以太网段的指定转发器,但主干 2 仍会根据组播转发的本地偏置规则将此流量转发至 AE2 上的接收器。有关 EVPN 组播转发规则的更多信息,请参阅 选择性组播转发概述 。
user@spine2> monitor interface traffic detail Interface Link Input packets (pps) Output packets (pps) et-0/0/51 Up 4603 (3) 3458201844 (2948641) ae1 Up 2985999842 (2948821) 1542 (1) ae2 Up 1009 (0) 2986000009 (2947024)
您已在网络上成功配置组播流量转发。