AUF DIESER SEITE
BNG-Redundanz für DHCP-Abonnenten mit paketgesteuerter basierter Wiederherstellung
Erfahren Sie mehr über Breitband-Netzwerk-Gateway (BNG)-Redundanz mit paketgesteuerter basierter Wiederherstellung, die eine einfache, benutzerfreundliche und leichtgewichtige zustandslose Teilnehmerredundanz bietet.
BNG-Redundanz für DHCP-Abonnenten mit paketgetriggerter basierter Wiederherstellung – Übersicht
Die BNG-Redundanz für DHCP-Abonnenten, die paketgesteuerte Wiederherstellung verwenden, bietet eine einfache, benutzerfreundliche und leichtgewichtige zustandslose Redundanz mit minimalem Datenverkehrsverlust. Die zustandslose BNG-Redundanz für DHCP-Abonnenten unterstützt dynamisches C-VLAN und ein statisches VLAN-Modell sowohl für Relay als auch für Server. Die paketgesteuerte Wiederherstellung nutzt die vorhandenen Funktionen wie die automatische Konfiguration von VLAN- und paketgetriggerten Teilnehmern.
- Automatische Konfiguration des VLAN
- Paketgetriggerte Abonnenten
- Vorteile der BNG-Redundanz für DHCP-Abonnenten mit paketgesteuerter basierter Wiederherstellung
Automatische Konfiguration des VLAN
Die automatische Konfigurationsfunktion erstellt beim Empfang des ersten VLAN-Pakets vom Client eine logische DVLAN-Schnittstelle (dynamisches VLAN). Beim Empfang des ersten Pakets authentifiziert die Routing-Engine den Abonnenten beim Authentifizierungsserver. Der Authentifizierungsserver benötigt möglicherweise die Buchhaltungs- und erweiterten Dienstdetails für die Authentifizierung des Abonnenten. Die Routing-Engine erstellt die logische DVLAN-Schnittstelle basierend auf der Anforderung des Authentifizierungsservers. Nach dem Erstellen der logischen DVLAN-Schnittstelle leitet das System das Paket zur weiteren Verarbeitung an den Protokoll-Stack weiter.
Paketgetriggerte Abonnenten
Die paketgesteuerte Teilnehmerfunktion erstellt eine logische IP-Demux-Schnittstelle, wenn ein Paket von Clients mit der vorab zugewiesenen IPv4- oder IPv6-Adresse empfangen wird. Die Weiterleitungsebene überprüft die Quell-IP-Adresse und stimmt mit der konfigurierten IP-Adresse oder den Präfixbereichen überein. Nach der Überprüfung der Quell-IP-Adresse leitet die Weiterleitungsebene das Paket an die Routing-Engine weiter. Die Routing-Engine authentifiziert den Abonnenten beim Authentifizierungsserver entsprechend dem Umfang der Buchhaltung und erweiterten Diensten wie Firewall, Filter und CoS. Die Routing-Engine erstellt eine logische IP-Demux-Schnittstelle gemäß den vom Authentifizierungsserver angeforderten Diensten.
Vorteile der BNG-Redundanz für DHCP-Abonnenten mit paketgesteuerter basierter Wiederherstellung
- Bietet eine einfache BNG-Backup-Bereitstellung.
Funktionsweise der BNG-Redundanz für DHCP-Abonnenten mit paketgesteuerter basierter Wiederherstellung
Primäres BNG hostet die Abonnenten während des normalen Datenverkehrsflusses. Wenn der Datenverkehrsfluss in der primären BNG fehlschlägt, leiten die Zugriffsknoten den Datenverkehr an die Backup-BNG um. Die primäre BNG kann aus folgenden Gründen fehlschlagen:
- Zwischenknoten- oder Verbindungsfehler, der den MPLS-Pfad zwischen Zugriffsknoten und primärem BNG unterbricht.
- Ausfall der primären BNG-Verbindung oder des primären Ports
- Fehler der primären BNG-Linecard.
- Ausfall der primären BNG-Routing-Engine.
- Primärer BNG-Chassis-Fehler.
- Ausfall der primären BNG-zu-Core-Netzwerkverbindung.
Abbildung 1: L2-Verbindung basierend auf IP/MPLS-PWHT-Szenario
Abbildung 1 zeigt das Topologiediagramm für eine Layer-2-Schaltung basierend auf dem IP/MPLS-Szenario für die Pseudowire Headend Termination (PWHT).
Basierend auf dem ersten Datenverkehr nach dem Failover erstellt die Routing-Engine DVLAN und einen dynamischen IP-Teilnehmer. Die Packet Forwarding Engine leitet den nachfolgenden Datenverkehr in der Weiterleitungsebene gemäß QoS und den mit dem IP-Teilnehmer verbundenen Services an den Core-Router weiter. Diese QoS und die Dienste sind nicht die gleichen QoS und Dienste des Abonnenten, die im primären BNG erstellt wurden. Hierbei handelt es sich um die allgemeinen standardmäßigen Funktionen für dynamische IP-Abonnentenprofile, die vom RADIUS-Server oder der lokalen Konfiguration zugewiesen werden, bis die Sitzungslease verlängert und erneut authentifiziert wird.
Sobald das System den DHCP-Abonnenten im sekundären BNG erstellt hat, bietet es eingeschränkte QoS und andere Dienste bei bestmöglichem Datenverkehr mit minimaler Unterbrechung. Wenn der DHCP-Client-Lease-Timer abläuft, wird versucht, die Lease-Zeit neu auszuhandeln, und es findet ein neuer DHCP-Protokollaustausch statt. Dieses Mal erstellt das System den voll funktionsfähigen DHCP-Teilnehmer zusammen mit QoS und erweiterten Services wie der primären BNG. Die Packet Forwarding Engine leitet den Datenverkehr entsprechend auch an den Core-Router weiter. Das System löscht den dynamischen IP-Teilnehmer, wenn der voll funktionsfähige DHCP-Teilnehmer aktiv ist.
Die Umschaltung des Datenverkehrs auf die Backup-BNG und die Wiederherstellung auf den primären BNG-Prozess ist ähnlich. Wenn die Wiederherstellung nach dem ersten Lease-Timeout erfolgt, fährt das System mit dem Switchover-Prozess fort. Wenn die Wiederherstellung vor dem ersten Lease-Timeout erfolgt, fährt das System mit der Wiederherstellung fort, da es noch über die zuvor zugewiesene IP-Adresse und die DHCP-Bindungen verfügt.
Die BNG-Redundanz mit paketgetriggerter Wiederherstellungsfunktion unterstützt die folgende Zugriffsnetzwerktopologie für BNG-Redundanz:
- Layer 2-VPN-Szenario
- Layer-2-Verbindung basierend auf IP/MPLS-PWHT-Szenario
- Ethernet-VPN: Virtual Private Wireless Service (EVPN-VPWS)
Konfigurieren der BNG-Redundanz mit paketgesteuerter Wiederherstellung für DHCP-Abonnenten
Überblick
Ab Version 22.4R1 unterstützt Junos die Konfiguration von Breitbandnetzwerk-Gateway (BNG) mit paket-Trigger-basierter Wiederherstellung, die eine benutzerfreundliche und leichtgewichtige zustandslose Anwenderredundanz bietet.
Dieser Abschnitt enthält ein Konfigurationsbeispiel für paketgesteuerte BNG-Redundanz für DHCP-Abonnenten, die einen lokalen DHCP-Server verwenden.
Anforderungen
Im Konfigurationsbeispiel werden die folgenden Geräte verwendet:
- Breitbandnetzwerk-Gateways BNG1 und BNG2 führen EVPN-VPWS Pseudowire Headend Termination (PWHT) mit den ACX-Aggregationsknoten aus und beenden die IPoE-Sitzungen. Die BNG implementiert die paketgesteuerte Redundanz für die IPoE-Sitzungen.
- ACX1- und ACX2-Geräte aggregieren den Datenverkehr der Access Nodes über die Cloud Metro-Fabric zu den BNGs.
- Das MX204-Gerät wird für simulierte Peripherieverbindungen verwendet.
- vQFX-Instanz für Q-in-Q-Tunneling und VLAN-Übersetzung.
Topologie
Abbildung 2 zeigt die physische Topologie mit zwei vMX-Geräten, die als BNG1- und BNG2-Server konfiguriert sind, zwei Zugriffsgeräten ACX1 und ACX2, einem vQFX- und einem MX204-Gerät.
Abbildung 2: Topologie
Konfiguration
- CLI Schnellkonfiguration
- Gerät BNG1
- Gerät BNG2
- Gerät ACX1
- Gerät ACX2
- Schritt-für-Schritt-Anleitung
- Konfigurieren von BNG1
- Konfigurieren von BNG2
- Konfigurieren von ACX1
- Konfigurieren von ACX2
CLI Schnellkonfiguration
Gerät BNG1
Um dieses Beispiel schnell zu konfigurieren, kopieren Sie die folgenden Befehle, fügen Sie sie in eine Textdatei ein, entfernen Sie alle Zeilenumbrüche, ändern Sie alle erforderlichen Details, um sie an Ihre Netzwerkkonfiguration anzupassen, und kopieren Sie dann die Befehle und fügen Sie sie in die CLI auf der Hierarchieebene [Bearbeiten] ein.
set system host-name BNG1 set system configuration-database max-db-size 698343424 set system services ssh root-login allow set chassis network-services enhanced-ip set groups GR-CORE-INTF interfaces <*> description ********GR-CORE-INTF-SETTINGS-APPLIED ******** set groups GR-CORE-INTF interfaces <*> traps set groups GR-CORE-INTF interfaces <*> mtu 9192 set groups GR-CORE-INTF interfaces <*> hold-time up 2000 set groups GR-CORE-INTF interfaces <*> hold-time down 0 set groups GR-CORE-INTF interfaces <*> damping half-life 30 set groups GR-CORE-INTF interfaces <*> damping max-suppress 600 set groups GR-CORE-INTF interfaces <*> damping reuse 250 set groups GR-CORE-INTF interfaces <*> damping suppress 2000 set groups GR-CORE-INTF interfaces <*> damping enable set groups GR-CORE-INTF interfaces <*> unit 0 traps set groups GR-CORE-INTF interfaces <*> unit 0 family inet mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family iso mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls mtu 9170 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls maximum-labels 5 set interfaces ge-0/0/0 apply-groups GR-CORE-INTF set interfaces ge-0/0/0 unit 0 family inet address 10.1.0.1/30 set interfaces ge-0/0/0 unit 0 family iso set interfaces ge-0/0/0 unit 0 family mpls set interfaces ge-0/0/1 apply-groups GR-CORE-INTF set interfaces ge-0/0/1 unit 0 family inet address 10.1.1.1/30 set interfaces ge-0/0/1 unit 0 family iso set interfaces ge-0/0/1 unit 0 family mpls set interfaces ge-0/0/2 apply-groups GR-CORE-INTF set interfaces ge-0/0/2 unit 0 family inet address 10.1.21.2/30 set interfaces ge-0/0/2 unit 0 family iso set interfaces ge-0/0/2 unit 0 family mpls set interfaces ge-0/0/3 mtu 9192 set interfaces ge-0/0/3 unit 0 family inet address 192.168.100.171/23 set interfaces lo0 unit 0 family inet address 172.31.100.3/32 set interfaces lo0 unit 0 family inet address 192.168.0.1/32 primary set interfaces lo0 unit 0 family inet address 192.168.0.1/32 preferred set interfaces lo0 unit 0 family iso address 49.0001.1000.0000.0003.00 set interfaces lo0 unit 0 family mpls set protocols isis interface ge-0/0/0.0 set protocols isis interface ge-0/0/1.0 set protocols isis interface ge-0/0/2.0 set protocols isis interface lo0.0 passive set protocols isis level 1 disable set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from interface lo0.0 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from route-filter 172.31.0.0/16 prefix-length-range /32-/32 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then tag 101 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then accept set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES then accept set policy-options policy-statement PL-ISIS-EXPORT then reject set protocols isis export PL-ISIS-EXPORT set routing-options router-id 172.31.100.3 set routing-options autonomous-system 65000 set protocols bgp group IBGP type internal set protocols bgp group IBGP local-address 172.31.100.3 set protocols bgp group IBGP family evpn signaling set protocols bgp group IBGP cluster 1.1.1.1 set protocols bgp group IBGP neighbor 172.31.100.4 set protocols bgp group IBGP neighbor 172.31.100.11 set protocols bgp group IBGP neighbor 172.31.100.12 set protocols ldp deaggregate set protocols ldp transport-address 172.31.100.3 set protocols ldp interface all set protocols mpls interface all set system services subscriber-management traceoptions file submgmt.log set system services subscriber-management traceoptions file size 30m set system services subscriber-management traceoptions file files 10 set system services subscriber-management traceoptions flag all set system services subscriber-management gres-route-flush-delay set system services subscriber-management enable set system processes general-authentication-service traceoptions file authd set system processes general-authentication-service traceoptions file size 10m set system processes general-authentication-service traceoptions file files 10 set system processes general-authentication-service traceoptions flag all set system processes smg-service traceoptions file smgd set system processes smg-service traceoptions file size 10m set system processes smg-service traceoptions file files 10 set system processes smg-service traceoptions level all set system processes smg-service traceoptions flag all set system processes dhcp-service traceoptions file jdhcpd set system processes dhcp-service traceoptions file size 10m set system processes dhcp-service traceoptions file files 10 set system processes dhcp-service traceoptions level all set system processes dhcp-service traceoptions flag packet set system processes dhcp-service traceoptions flag all set chassis fpc 0 pic 0 tunnel-services bandwidth 1g set chassis fpc 0 performance-mode set access-profile no-auth set access profile no-auth authentication-order none set access address-protection set chassis pseudowire-service device-count 10 set interfaces ps0 anchor-point lt-0/0/10 set interfaces ps0 flexible-vlan-tagging set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include delimiter "@" set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include user-prefix vlan set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include interface-name set interfaces ps0 auto-configure stacked-vlan-ranges access-profile no-auth set interfaces ps0 auto-configure remove-when-no-subscribers set interfaces ps0 mtu 2022 set interfaces ps0 esi 00:10:00:00:01:00:00:00:10:00 set interfaces ps0 esi single-active set interfaces ps0 esi df-election-type preference value 1000 set interfaces ps0 unit 0 encapsulation ethernet-ccc set interfaces lo0 unit 20 description "VRF:internet Loopback" set interfaces lo0 unit 20 family inet address 172.16.100.3/32 primary set routing-instances internet instance-type vrf set routing-instances internet routing-options auto-export set routing-instances internet interface lo0.20 set routing-instances internet route-distinguisher 172.31.100.3:12 set routing-instances internet vrf-import internet-vrf-import-pol set routing-instances internet vrf-export internet-vrf-export-pol set routing-instances internet vrf-table-label set policy-options policy-statement internet-vrf-export-pol term all then community add 65000:999 set policy-options policy-statement internet-vrf-export-pol term all then accept set policy-options policy-statement internet-vrf-import-pol term default from community 65000:999 set policy-options policy-statement internet-vrf-import-pol term default then accept set policy-options policy-statement internet-vrf-import-pol term subs from community 65000:1131 set policy-options policy-statement internet-vrf-import-pol term subs then accept set policy-options policy-statement internet-vrf-import-pol term other from community 65000:113 set policy-options policy-statement internet-vrf-import-pol term other then accept set policy-options community 65000:113 members target:65000:113 set policy-options community 65000:1131 members target:65000:1131 set policy-options community 65000:999 members target:65000:999 set interfaces lo0 unit 313 description "VRF:dhcp-subs Loopback" set interfaces lo0 unit 313 family inet address 172.16.16.3/32 set interfaces lo0 unit 313 family inet address 10.42.0.1/32 primary set interfaces lo0 unit 313 family inet6 address 2015:cafe:2000::1/128 set routing-instances dhcp-subs instance-type vrf set routing-instances dhcp-subs routing-options rib dhcp-subs.inet6.0 static route ::/0 next-table internet.inet6.0 set routing-instances dhcp-subs routing-options rib dhcp-subs.inet6.0 static route ::/0 no-readvertise set routing-instances dhcp-subs routing-options router-id 172.16.16.3 set routing-instances dhcp-subs routing-options flow term-order standard set routing-instances dhcp-subs routing-options static route 0.0.0.0/0 next-table internet.inet.0 set routing-instances dhcp-subs routing-options static route 0.0.0.0/0 no-readvertise set routing-instances dhcp-subs routing-options static route 10.42.0.0/16 discard set routing-instances dhcp-subs routing-options static route 10.42.0.0/16 tag 200 set routing-instances dhcp-subs routing-options auto-export set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection failure-action clear-binding-if-interface-up set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd version automatic set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd minimum-interval 30000 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd multiplier 3 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls overrides client-discover-match incoming-interface set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls overrides dual-stack dhcp-ds set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls interface demux0.0 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls interface ps0.0 set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds authentication username-include mac-address set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds on-demand-address-allocation set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds classification-key mac-address set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds protocol-master inet set routing-instances dhcp-subs system services dhcp-local-server no-stale-timer-refresh set routing-instances dhcp-subs system services dhcp-local-server stale-timer 60 set routing-instances dhcp-subs access address-assignment high-utilization 80 set routing-instances dhcp-subs access address-assignment abated-utilization 70 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet network 10.42.0.0/16 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet range range1 low 10.42.0.2 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet range range1 high 10.42.255.254 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes maximum-lease-time 600 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes server-identifier 10.42.0.1 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes router 10.42.0.1 set routing-instances dhcp-subs access-profile no-auth set routing-instances dhcp-subs interface lo0.313 set routing-instances dhcp-subs route-distinguisher 172.31.100.3:13 set routing-instances dhcp-subs vrf-import dhcp-subs-vrf-import-pol set routing-instances dhcp-subs vrf-export dhcp-subs-vrf-export-pol set routing-instances dhcp-subs vrf-table-label set policy-options policy-statement dhcp-subs-vrf-export-pol term loop from protocol direct set policy-options policy-statement dhcp-subs-vrf-export-pol term loop from route-filter 172.16.16.3/32 exact set policy-options policy-statement dhcp-subs-vrf-export-pol term loop then community add 65000:113 set policy-options policy-statement dhcp-subs-vrf-export-pol term pools from protocol static set policy-options policy-statement dhcp-subs-vrf-export-pol term pools from tag 200 set policy-options policy-statement dhcp-subs-vrf-export-pol term pools then community add 65000:113 set policy-options policy-statement dhcp-subs-vrf-export-pol term subs then community add 65000:1131 set policy-options policy-statement dhcp-subs-vrf-export-pol term subs then accept set policy-options policy-statement dhcp-subs-vrf-import-pol term all from community 65000:111 set policy-options policy-statement dhcp-subs-vrf-import-pol term all then accept set policy-options community 65000:111 members target:65000:111 set policy-options community 65000:111 members target:65000:11 set access domain map none access-profile no-auth set access domain map none target-routing-instance dhcp-subs set access domain map ps0.* access-profile no-auth set access domain map ps0.* target-routing-instance dhcp-subs set access domain map ps0:* access-profile no-auth set access domain map ps0:* target-routing-instance dhcp-subs set firewall family inet filter rpf-pass-dhcp term allow-dhcp from destination-address 255.255.255.255/32 set firewall family inet filter rpf-pass-dhcp term allow-dhcp from destination-port dhcp set firewall family inet filter rpf-pass-dhcp term allow-dhcp then accept set firewall family inet filter rpf-pass-dhcp term default then discard set system dynamic-profile-options versioning set dynamic-profiles prod-dhcp-base routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles prod-dhcp-base routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix metric "$junos-framed-route-cost" set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" actual-transit-statistics set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" demux-options underlying-interface "$junos-underlying-interface" set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet rpf-check fail-filter rpf-pass-dhcp set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet demux-source $junos-subscriber-ip-address set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet unnumbered-address lo0.313 set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet6 demux-source $junos-subscriber-ipv6-address set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet6 unnumbered-address lo0.313 set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds dynamic-profile prod-dhcp-base set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix next-hop "$junos-framed-route-nexthop" set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix metric "$junos-framed-route-cost" set dynamic-profiles auto-pwht interfaces interface-set "$junos-phy-ifd-interface-set-name" interface "$junos-interface-ifd-name" unit "$junos-interface-unit" set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" no-traps set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" proxy-arp restricted set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-id "$junos-vlan-id" set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet mac-validate loose set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet unnumbered-address "$junos-loopback-interface" set dynamic-profiles auto-stacked-pwht routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" no-traps set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" proxy-arp set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-tags outer "$junos-stacked-vlan-id" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-tags inner "$junos-vlan-id" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" demux-options underlying-interface "$junos-interface-ifd-name" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet mac-validate strict set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet unnumbered-address "$junos-loopback-interface" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges dynamic-profile PROF_AUTOSENSE_IPDEMUX network 10.42.0.0/16 set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges dynamic-profile PROF_AUTOSENSE_IPDEMUX network 10.43.0.0/16 set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include delimiter "@" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include user-prefix vlan set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include interface-name set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges session-timeout 600 set dynamic-profiles PROF_AUTOSENSE_IPDEMUX routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet mac-validate strict set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet unnumbered-address lo0.313 set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet6 unnumbered-address lo0.313 set interfaces ps0 auto-configure stacked-vlan-ranges dynamic-profile auto-stacked-pwht accept any set interfaces ps0 auto-configure stacked-vlan-ranges dynamic-profile auto-stacked-pwht ranges any,any set interfaces ps0 auto-configure vlan-ranges dynamic-profile auto-pwht accept any set interfaces ps0 auto-configure vlan-ranges dynamic-profile auto-pwht ranges any set routing-instances EVPN-VPWS-BNG-1 instance-type evpn-vpws set routing-instances EVPN-VPWS-BNG-1 protocols evpn interface ps0.0 vpws-service-id local 9999 set routing-instances EVPN-VPWS-BNG-1 protocols evpn interface ps0.0 vpws-service-id remote 1111 set routing-instances EVPN-VPWS-BNG-1 interface ps0.0 set routing-instances EVPN-VPWS-BNG-1 route-distinguisher 172.31.100.3:11 set routing-instances EVPN-VPWS-BNG-1 vrf-target target:65000:11
Gerät BNG2
set system host-name BNG2 set system configuration-database max-db-size 698343424 set system services ssh root-login allow set chassis network-services enhanced-ip set groups GR-CORE-INTF interfaces <*> description ********GR-CORE-INTF-SETTINGS-APPLIED-ADD-DESCRIPTION******** set groups GR-CORE-INTF interfaces <*> traps set groups GR-CORE-INTF interfaces <*> mtu 9192 set groups GR-CORE-INTF interfaces <*> hold-time up 2000 set groups GR-CORE-INTF interfaces <*> hold-time down 0 set groups GR-CORE-INTF interfaces <*> damping half-life 30 set groups GR-CORE-INTF interfaces <*> damping max-suppress 600 set groups GR-CORE-INTF interfaces <*> damping reuse 250 set groups GR-CORE-INTF interfaces <*> damping suppress 2000 set groups GR-CORE-INTF interfaces <*> damping enable set groups GR-CORE-INTF interfaces <*> unit 0 traps set groups GR-CORE-INTF interfaces <*> unit 0 family inet mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family iso mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls mtu 9170 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls maximum-labels 5 set interfaces ge-0/0/0 apply-groups GR-CORE-INTF set interfaces ge-0/0/0 unit 0 family inet address 10.1.0.2/30 set interfaces ge-0/0/0 unit 0 family iso set interfaces ge-0/0/0 unit 0 family mpls set interfaces ge-0/0/1 apply-groups GR-CORE-INTF set interfaces ge-0/0/1 unit 0 family inet address 10.1.2.2/30 set interfaces ge-0/0/1 unit 0 family iso set interfaces ge-0/0/1 unit 0 family mpls set interfaces ge-0/0/2 apply-groups GR-CORE-INTF set interfaces ge-0/0/2 unit 0 family inet address 10.1.12.2/30 set interfaces ge-0/0/2 unit 0 family iso set interfaces ge-0/0/2 unit 0 family mpls set interfaces ge-0/0/3 mtu 9192 set interfaces ge-0/0/3 unit 0 family inet address 192.168.100.171/23 set interfaces lo0 unit 0 family inet address 172.31.100.4/32 set interfaces lo0 unit 0 family inet address 192.168.0.1/32 primary set interfaces lo0 unit 0 family inet address 192.168.0.1/32 preferred set interfaces lo0 unit 0 family iso address 49.0001.1000.0000.0004.00 set interfaces lo0 unit 0 family mpls set protocols isis interface ge-0/0/0.0 set protocols isis interface ge-0/0/1.0 set protocols isis interface ge-0/0/2.0 set protocols isis interface lo0.0 passive set protocols isis level 1 disable set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from interface lo0.0 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from route-filter 172.31.0.0/16 prefix-length-range /32-/32 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then tag 101 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then accept set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES then accept set policy-options policy-statement PL-ISIS-EXPORT then reject set protocols isis export PL-ISIS-EXPORT set routing-options router-id 172.31.100.4 set routing-options autonomous-system 65000 set protocols bgp group IBGP type internal set protocols bgp group IBGP local-address 172.31.100.4 set protocols bgp group IBGP family evpn signaling set protocols bgp group IBGP cluster 2.2.2.2 set protocols bgp group IBGP neighbor 172.31.100.3 set protocols bgp group IBGP neighbor 172.31.100.11 set protocols bgp group IBGP neighbor 172.31.100.12 set protocols ldp deaggregate set protocols ldp transport-address 172.31.100.4 set protocols ldp interface all set protocols mpls interface all set system services subscriber-management traceoptions file submgmt.log set system services subscriber-management traceoptions file size 30m set system services subscriber-management traceoptions file files 10 set system services subscriber-management traceoptions flag all set system services subscriber-management gres-route-flush-delay set system services subscriber-management enable set system processes general-authentication-service traceoptions file authd set system processes general-authentication-service traceoptions file size 10m set system processes general-authentication-service traceoptions file files 10 set system processes general-authentication-service traceoptions flag all set system processes smg-service traceoptions file smgd set system processes smg-service traceoptions file size 10m set system processes smg-service traceoptions file files 10 set system processes smg-service traceoptions level all set system processes smg-service traceoptions flag all set system processes dhcp-service traceoptions file jdhcpd set system processes dhcp-service traceoptions file size 10m set system processes dhcp-service traceoptions file files 10 set system processes dhcp-service traceoptions level all set system processes dhcp-service traceoptions flag packet set system processes dhcp-service traceoptions flag all set chassis fpc 0 pic 0 tunnel-services bandwidth 1g set chassis fpc 0 performance-mode set access-profile no-auth set access profile no-auth authentication-order none set access address-protection set chassis pseudowire-service device-count 10 set interfaces ps0 anchor-point lt-0/0/10 set interfaces ps0 flexible-vlan-tagging set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include delimiter "@" set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include user-prefix vlan set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include interface-name set interfaces ps0 auto-configure stacked-vlan-ranges access-profile no-auth set interfaces ps0 auto-configure remove-when-no-subscribers set interfaces ps0 mtu 2022 set interfaces ps0 esi 00:10:00:00:01:00:00:00:10:00 set interfaces ps0 esi single-active set interfaces ps0 esi df-election-type preference value 999 set interfaces ps0 unit 0 encapsulation ethernet-ccc set interfaces lo0 unit 20 description "VRF:internet Loopback" set interfaces lo0 unit 20 family inet address 172.16.100.4/32 primary set routing-instances internet instance-type vrf set routing-instances internet routing-options auto-export set routing-instances internet interface lo0.20 set routing-instances internet route-distinguisher 172.31.100.4:12 set routing-instances internet vrf-import internet-vrf-import-pol set routing-instances internet vrf-export internet-vrf-export-pol set routing-instances internet vrf-table-label set policy-options policy-statement internet-vrf-export-pol term all then community add 65000:999 set policy-options policy-statement internet-vrf-export-pol term all then accept set policy-options policy-statement internet-vrf-import-pol term default from community 65000:999 set policy-options policy-statement internet-vrf-import-pol term default then accept set policy-options policy-statement internet-vrf-import-pol term subs from community 65000:1131 set policy-options policy-statement internet-vrf-import-pol term subs then accept set policy-options policy-statement internet-vrf-import-pol term other from community 65000:113 set policy-options policy-statement internet-vrf-import-pol term other then accept set policy-options community 65000:113 members target:65000:113 set policy-options community 65000:1131 members target:65000:1131 set policy-options community 65000:999 members target:65000:999 set interfaces lo0 unit 313 description "VRF:dhcp-subs Loopback" set interfaces lo0 unit 313 family inet address 172.16.16.4/32 set interfaces lo0 unit 313 family inet address 10.43.0.1/32 primary set interfaces lo0 unit 313 family inet6 address 2016:cafe:2000::1/128 set routing-instances dhcp-subs instance-type vrf set routing-instances dhcp-subs routing-options rib dhcp-subs.inet6.0 static route ::/0 next-table internet.inet6.0 set routing-instances dhcp-subs routing-options rib dhcp-subs.inet6.0 static route ::/0 no-readvertise set routing-instances dhcp-subs routing-options router-id 172.16.16.4 set routing-instances dhcp-subs routing-options flow term-order standard set routing-instances dhcp-subs routing-options static route 0.0.0.0/0 next-table internet.inet.0 set routing-instances dhcp-subs routing-options static route 0.0.0.0/0 no-readvertise set routing-instances dhcp-subs routing-options static route 10.43.0.0/16 discard set routing-instances dhcp-subs routing-options static route 10.43.0.0/16 tag 200 set routing-instances dhcp-subs routing-options auto-export set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection failure-action clear-binding-if-interface-up set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd version automatic set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd minimum-interval 30000 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd multiplier 3 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls overrides client-discover-match incoming-interface set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls overrides dual-stack dhcp-ds set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls interface demux0.0 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls interface ps0.0 set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds authentication username-include mac-address set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds on-demand-address-allocation set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds classification-key mac-address set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds protocol-master inet set routing-instances dhcp-subs system services dhcp-local-server no-stale-timer-refresh set routing-instances dhcp-subs system services dhcp-local-server stale-timer 60 set routing-instances dhcp-subs access address-assignment high-utilization 80 set routing-instances dhcp-subs access address-assignment abated-utilization 70 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet network 10.43.0.0/16 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet range range1 low 10.43.0.2 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet range range1 high 10.43.254.254 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes maximum-lease-time 600 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes server-identifier 10.43.0.1 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes router 10.43.0.1 set routing-instances dhcp-subs access-profile no-auth set routing-instances dhcp-subs interface lo0.313 set routing-instances dhcp-subs route-distinguisher 172.31.100.4:13 set routing-instances dhcp-subs vrf-import dhcp-subs-vrf-import-pol set routing-instances dhcp-subs vrf-export dhcp-subs-vrf-export-pol set routing-instances dhcp-subs vrf-table-label set policy-options policy-statement dhcp-subs-vrf-export-pol term loop from protocol direct set policy-options policy-statement dhcp-subs-vrf-export-pol term loop from route-filter 172.16.16.4/32 exact set policy-options policy-statement dhcp-subs-vrf-export-pol term loop then community add 65000:113 set policy-options policy-statement dhcp-subs-vrf-export-pol term pools from protocol static set policy-options policy-statement dhcp-subs-vrf-export-pol term pools from tag 200 set policy-options policy-statement dhcp-subs-vrf-export-pol term pools then community add 65000:113 set policy-options policy-statement dhcp-subs-vrf-export-pol term subs then community add 65000:1131 set policy-options policy-statement dhcp-subs-vrf-export-pol term subs then accept set policy-options policy-statement dhcp-subs-vrf-import-pol term all from community 65000:111 set policy-options policy-statement dhcp-subs-vrf-import-pol term all then accept set policy-options community 65000:111 members target:65000:111 set policy-options community 65000:111 members target:65000:11 set policy-options community 65000:113 members target:65000:113 set policy-options community 65000:1131 members target:65000:1131 set access-profile no-auth set access profile no-auth authentication-order none set access address-protection set access domain map none access-profile no-auth set access domain map none target-routing-instance dhcp-subs set access domain map ps0.* access-profile no-auth set access domain map ps0.* target-routing-instance dhcp-subs set access domain map ps0:* access-profile no-auth set access domain map ps0:* target-routing-instance dhcp-subs set firewall family inet filter rpf-pass-dhcp term allow-dhcp from destination-address 255.255.255.255/32 set firewall family inet filter rpf-pass-dhcp term allow-dhcp from destination-port dhcp set firewall family inet filter rpf-pass-dhcp term allow-dhcp then accept set firewall family inet filter rpf-pass-dhcp term default then discard set system dynamic-profile-options versioning set dynamic-profiles prod-dhcp-base routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles prod-dhcp-base routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix metric "$junos-framed-route-cost" set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" actual-transit-statistics set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" demux-options underlying-interface "$junos-underlying-interface" set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet rpf-check fail-filter rpf-pass-dhcp set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet demux-source $junos-subscriber-ip-address set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet unnumbered-address lo0.313 set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet6 demux-source $junos-subscriber-ipv6-address set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet6 unnumbered-address lo0.313 set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds dynamic-profile prod-dhcp-base set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix next-hop "$junos-framed-route-nexthop" set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix metric "$junos-framed-route-cost" set dynamic-profiles auto-pwht interfaces interface-set "$junos-phy-ifd-interface-set-name" interface "$junos-interface-ifd-name" unit "$junos-interface-unit" set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" no-traps set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" proxy-arp restricted set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-id "$junos-vlan-id" set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet mac-validate loose set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet unnumbered-address "$junos-loopback-interface" set dynamic-profiles auto-stacked-pwht routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" no-traps set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" proxy-arp set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-tags outer "$junos-stacked-vlan-id" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-tags inner "$junos-vlan-id" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" demux-options underlying-interface "$junos-interface-ifd-name" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet mac-validate strict set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet unnumbered-address "$junos-loopback-interface" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges dynamic-profile PROF_AUTOSENSE_IPDEMUX network 10.42.0.0/16 set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges dynamic-profile PROF_AUTOSENSE_IPDEMUX network 10.43.0.0/16 set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include delimiter "@" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include user-prefix vlan set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include interface-name set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges session-timeout 600 set dynamic-profiles PROF_AUTOSENSE_IPDEMUX routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet mac-validate strict set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet unnumbered-address lo0.313 set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet6 unnumbered-address lo0.313 set interfaces ps0 auto-configure stacked-vlan-ranges dynamic-profile auto-stacked-pwht accept any set interfaces ps0 auto-configure stacked-vlan-ranges dynamic-profile auto-stacked-pwht ranges any,any set interfaces ps0 auto-configure vlan-ranges dynamic-profile auto-pwht accept any set interfaces ps0 auto-configure vlan-ranges dynamic-profile auto-pwht ranges any set routing-instances EVPN-VPWS-BNG-2 instance-type evpn-vpws set routing-instances EVPN-VPWS-BNG-2 protocols evpn interface ps0.0 vpws-service-id local 9999 set routing-instances EVPN-VPWS-BNG-2 protocols evpn interface ps0.0 vpws-service-id remote 1111 set routing-instances EVPN-VPWS-BNG-2 interface ps0.0 set routing-instances EVPN-VPWS-BNG-2 route-distinguisher 172.31.100.4:11 set routing-instances EVPN-VPWS-BNG-2 vrf-target target:65000:11
Gerät ACX1
set system host-name ACX1 set system services ssh root-login allow set chassis network-services enhanced-ip set system processes dhcp-service traceoptions file dhcp_logfile set system processes dhcp-service traceoptions file size 10m set system processes dhcp-service traceoptions level all set system processes dhcp-service traceoptions flag packet set groups GR-CORE-INTF interfaces <*> description ********GR-CORE-INTF-SETTINGS-APPLIED-ADD-DESCRIPTION******** set groups GR-CORE-INTF interfaces <*> traps set groups GR-CORE-INTF interfaces <*> mtu 9192 set groups GR-CORE-INTF interfaces <*> hold-time up 2000 set groups GR-CORE-INTF interfaces <*> hold-time down 0 set groups GR-CORE-INTF interfaces <*> damping half-life 30 set groups GR-CORE-INTF interfaces <*> damping max-suppress 600 set groups GR-CORE-INTF interfaces <*> damping reuse 250 set groups GR-CORE-INTF interfaces <*> damping suppress 2000 set groups GR-CORE-INTF interfaces <*> damping enable set groups GR-CORE-INTF interfaces <*> unit 0 traps set groups GR-CORE-INTF interfaces <*> unit 0 family inet mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family iso mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls mtu 9170 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls maximum-labels 5 set interfaces ge-0/0/1 apply-groups GR-CORE-INTF set interfaces ge-0/0/1 unit 0 family inet address 10.1.1.2/30 set interfaces ge-0/0/1 unit 0 family iso set interfaces ge-0/0/1 unit 0 family mpls set interfaces ge-0/0/2 apply-groups GR-CORE-INTF set interfaces ge-0/0/2 unit 0 family inet address 10.1.12.1/30 set interfaces ge-0/0/2 unit 0 family iso set interfaces ge-0/0/2 unit 0 family mpls set chassis aggregated-devices ethernet device-count 10 set interfaces ge-0/0/3 gigether-options 802.3ad ae10 set interfaces ae10 flexible-vlan-tagging set interfaces ae10 encapsulation flexible-ethernet-services set interfaces ae10 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae10 esi all-active set interfaces ae10 aggregated-ether-options lacp active set interfaces ae10 aggregated-ether-options lacp system-id 00:00:00:00:00:10 set interfaces ae10 unit 0 encapsulation vlan-ccc set interfaces ae10 unit 0 vlan-id-list 301-500 set interfaces ae10 unit 0 input-vlan-map push set interfaces ae10 unit 0 input-vlan-map vlan-id 100 set interfaces ae10 unit 0 output-vlan-map pop set interfaces lo0 unit 0 family inet address 172.31.100.11/32 set interfaces lo0 unit 0 family iso address 49.0001.1000.0000.0011.00 set interfaces lo0 unit 0 family mpls set protocols isis interface all level 1 disable set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from interface lo0.0 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from route-filter 172.31.0.0/16 prefix-length-range /32-/32 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then tag 101 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then accept set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES then accept set policy-options policy-statement PL-ISIS-EXPORT then reject set protocols isis export PL-ISIS-EXPORT set routing-options router-id 172.31.100.11 set routing-options autonomous-system 65000 set protocols bgp group IBGP type internal set protocols bgp group IBGP local-address 172.31.100.11 set protocols bgp group IBGP family evpn signaling set protocols bgp group IBGP neighbor 172.31.100.3 set protocols bgp group IBGP neighbor 172.31.100.4 set protocols ldp interface all set protocols mpls interface all set routing-instances EVPN-VPWS instance-type evpn-vpws set routing-instances EVPN-VPWS protocols evpn interface ae10.0 vpws-service-id local 1111 set routing-instances EVPN-VPWS protocols evpn interface ae10.0 vpws-service-id remote 9999 set routing-instances EVPN-VPWS interface ae10.0 set routing-instances EVPN-VPWS route-distinguisher 172.31.100.11:11 set routing-instances EVPN-VPWS vrf-target target:65000:11
Gerät ACX2
set system host-name ACX2 set system services ssh root-login allow set chassis network-services enhanced-ip set system processes dhcp-service traceoptions file dhcp_logfile set system processes dhcp-service traceoptions file size 10m set system processes dhcp-service traceoptions level all set system processes dhcp-service traceoptions flag packet set groups GR-CORE-INTF interfaces <*> description ********GR-CORE-INTF-SETTINGS-APPLIED-ADD-DESCRIPTION******** set groups GR-CORE-INTF interfaces <*> traps set groups GR-CORE-INTF interfaces <*> mtu 9192 set groups GR-CORE-INTF interfaces <*> hold-time up 2000 set groups GR-CORE-INTF interfaces <*> hold-time down 0 set groups GR-CORE-INTF interfaces <*> damping half-life 30 set groups GR-CORE-INTF interfaces <*> damping max-suppress 600 set groups GR-CORE-INTF interfaces <*> damping reuse 250 set groups GR-CORE-INTF interfaces <*> damping suppress 2000 set groups GR-CORE-INTF interfaces <*> damping enable set groups GR-CORE-INTF interfaces <*> unit 0 traps set groups GR-CORE-INTF interfaces <*> unit 0 family inet mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family iso mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls mtu 9170 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls maximum-labels 5 set interfaces ge-0/0/1 apply-groups GR-CORE-INTF set interfaces ge-0/0/1 unit 0 family inet address 10.1.2.1/30 set interfaces ge-0/0/1 unit 0 family iso set interfaces ge-0/0/1 unit 0 family mpls set interfaces ge-0/0/2 apply-groups GR-CORE-INTF set interfaces ge-0/0/2 unit 0 family inet address 10.1.21.1/30 set interfaces ge-0/0/2 unit 0 family iso set interfaces ge-0/0/2 unit 0 family mpls set interfaces ge-0/0/3 gigether-options 802.3ad ae10 set interfaces ae10 flexible-vlan-tagging set interfaces ae10 encapsulation flexible-ethernet-services set interfaces ae10 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae10 esi all-active set interfaces ae10 aggregated-ether-options lacp active set interfaces ae10 aggregated-ether-options lacp system-id 00:00:00:00:00:10 set interfaces ae10 unit 0 encapsulation vlan-ccc set interfaces ae10 unit 0 vlan-id-list 301-500 set interfaces ae10 unit 0 input-vlan-map push set interfaces ae10 unit 0 input-vlan-map vlan-id 100 set interfaces ae10 unit 0 output-vlan-map pop set interfaces lo0 unit 0 family inet address 172.31.100.12/32 set interfaces lo0 unit 0 family iso address 49.0001.1000.0000.0012.00 set interfaces lo0 unit 0 family mpls set protocols isis interface all level 1 disable set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from interface lo0.0 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from route-filter 172.31.0.0/16 prefix-length-range /32-/32 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then tag 101 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then accept set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES then accept set policy-options policy-statement PL-ISIS-EXPORT then reject set protocols isis export PL-ISIS-EXPORT set routing-options router-id 172.31.100.12 set routing-options autonomous-system 65000 set protocols bgp group IBGP type internal set protocols bgp group IBGP local-address 172.31.100.12 set protocols bgp group IBGP family evpn signaling set protocols bgp group IBGP neighbor 172.31.100.3 set protocols bgp group IBGP neighbor 172.31.100.4 set protocols ldp interface all set protocols mpls interface all set routing-instances EVPN-VPWS instance-type evpn-vpws set routing-instances EVPN-VPWS protocols evpn interface ae10.0 vpws-service-id local 1111 set routing-instances EVPN-VPWS protocols evpn interface ae10.0 vpws-service-id remote 9999 set routing-instances EVPN-VPWS interface ae10.0 set routing-instances EVPN-VPWS route-distinguisher 172.31.100.12:11 set routing-instances EVPN-VPWS vrf-target target:65000:11
Schritt-für-Schritt-Anleitung
Konfigurieren von BNG1
-
Melden Sie sich beim BNG1-Gerät an. Stellen Sie sicher, dass auf dem Gerät Junos Version 22.4R1 oder höher ausgeführt wird.
-
Konfigurieren Sie die Systemeinstellungen.
set system host-name BNG1 set system configuration-database max-db-size 698343424 set system services ssh root-login allow set chassis network-services enhanced-ip
-
Erstellen Sie eine Gruppe, um allgemeine Core-Schnittstellenkonfigurationen wie MTU-, Haltezeit- und Dämpfungsparameter zu definieren.
set groups GR-CORE-INTF interfaces <*> description ********GR-CORE-INTF-SETTINGS-APPLIED ******** set groups GR-CORE-INTF interfaces <*> traps set groups GR-CORE-INTF interfaces <*> mtu 9192 set groups GR-CORE-INTF interfaces <*> hold-time up 2000 set groups GR-CORE-INTF interfaces <*> hold-time down 0 set groups GR-CORE-INTF interfaces <*> damping half-life 30 set groups GR-CORE-INTF interfaces <*> damping max-suppress 600 set groups GR-CORE-INTF interfaces <*> damping reuse 250 set groups GR-CORE-INTF interfaces <*> damping suppress 2000 set groups GR-CORE-INTF interfaces <*> damping enable set groups GR-CORE-INTF interfaces <*> unit 0 traps set groups GR-CORE-INTF interfaces <*> unit 0 family inet mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family iso mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls mtu 9170 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls maximum-labels 5
-
Konfigurieren der Schnittstellen für Core-Geräte.
set interfaces ge-0/0/0 apply-groups GR-CORE-INTF set interfaces ge-0/0/0 unit 0 family inet address 10.1.0.1/30 set interfaces ge-0/0/0 unit 0 family iso set interfaces ge-0/0/0 unit 0 family mpls set interfaces ge-0/0/1 apply-groups GR-CORE-INTF set interfaces ge-0/0/1 unit 0 family inet address 10.1.1.1/30 set interfaces ge-0/0/1 unit 0 family iso set interfaces ge-0/0/1 unit 0 family mpls set interfaces ge-0/0/2 apply-groups GR-CORE-INTF set interfaces ge-0/0/2 unit 0 family inet address 10.1.21.2/30 set interfaces ge-0/0/2 unit 0 family iso set interfaces ge-0/0/2 unit 0 family mpls
-
Konfigurieren Sie die Schnittstelle für vQFX.
set interfaces ge-0/0/3 mtu 9192 set interfaces ge-0/0/3 unit 0 family inet address 192.168.100.171/23
-
Konfigurieren Sie die Loopback-Schnittstelle.
set interfaces lo0 unit 0 family inet address 172.31.100.3/32 set interfaces lo0 unit 0 family inet address 192.168.0.1/32 primary set interfaces lo0 unit 0 family inet address 192.168.0.1/32 preferred set interfaces lo0 unit 0 family iso address 49.0001.1000.0000.0003.00 set interfaces lo0 unit 0 family mpls
-
Konfigurieren Sie das IS-IS-Protokoll im Core-Netzwerk.
set protocols isis interface ge-0/0/0.0 set protocols isis interface ge-0/0/1.0 set protocols isis interface ge-0/0/2.0 set protocols isis interface lo0.0 passive set protocols isis level 1 disable set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from interface lo0.0 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from route-filter 172.31.0.0/16 prefix-length-range /32-/32 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then tag 101 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then accept set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES then accept set policy-options policy-statement PL-ISIS-EXPORT then reject set protocols isis export PL-ISIS-EXPORT
-
Konfigurieren von Routing-Optionen.
set routing-options router-id 172.31.100.3 set routing-options autonomous-system 65000
-
Konfigurieren des BGP-Protokolls zwischen der BNG und den Zugriffsgeräten
set protocols bgp group IBGP type internal set protocols bgp group IBGP local-address 172.31.100.3 set protocols bgp group IBGP family evpn signaling set protocols bgp group IBGP cluster 1.1.1.1 set protocols bgp group IBGP neighbor 172.31.100.4 set protocols bgp group IBGP neighbor 172.31.100.11 set protocols bgp group IBGP neighbor 172.31.100.12
-
Konfigurieren Sie LDP und MPLS für alle Core-Schnittstellen.
set protocols ldp deaggregate set protocols ldp transport-address 172.31.100.3 set protocols ldp interface all set protocols mpls interface all
-
Konfigurieren Sie globale Services für die Abonnentenverwaltung, wie z. B. die Verwaltung von Abonnenten, Ablaufverfolgungsvorgänge und die Aktivierung einer erweiterten Abonnentenverwaltung.
set system services subscriber-management traceoptions file submgmt.log set system services subscriber-management traceoptions file size 30m set system services subscriber-management traceoptions file files 10 set system services subscriber-management traceoptions flag all set system services subscriber-management gres-route-flush-delay set system services subscriber-management enable
-
Konfigurieren Sie Ablaufverfolgungsoptionen für den allgemeinen Authentifizierungsdienst.
set system processes general-authentication-service traceoptions file authd set system processes general-authentication-service traceoptions file size 10m set system processes general-authentication-service traceoptions file files 10 set system processes general-authentication-service traceoptions flag all
-
Konfigurieren Sie Systemservices, einschließlich Ablaufverfolgungsvorgänge und Routing-Engine-Failover, für den wichtigsten Sitzungsverwaltungsprozess für die Abonnentenverwaltung, smg-service.
set system processes smg-service traceoptions file smgd set system processes smg-service traceoptions file size 10m set system processes smg-service traceoptions file files 10 set system processes smg-service traceoptions level all set system processes smg-service traceoptions flag all
-
Definieren Sie globale Ablaufverfolgungsvorgänge für erweiterte lokale DHCP-Server- und erweiterte DHCP-Relay-Agent-Prozesse.
set system processes dhcp-service traceoptions file jdhcpd set system processes dhcp-service traceoptions file size 10m set system processes dhcp-service traceoptions file files 10 set system processes dhcp-service traceoptions level all set system processes dhcp-service traceoptions flag packet set system processes dhcp-service traceoptions flag all
-
Konfigurieren Sie die Tunnelservices und alle zusätzlichen Chassis-Konfigurationen.
set chassis fpc 0 pic 0 tunnel-services bandwidth 1g set chassis fpc 0 performance-mode
-
Konfigurieren Sie Zugriffsprofile für DHCP-Abonnenten.
set access-profile no-auth set access profile no-auth authentication-order none set access address-protection
-
Konfigurieren Sie die Pseudowire-Schnittstelle für die Verwendung von dynamisch gestapelten VLANs. Konfigurieren Sie außerdem zusätzliche Schnittstellen- und VLAN-Abonnementeinstellungen. Konfigurieren Sie Ethernet Segment Identifier (ESI) für EVPN Aktiv-Standby-Multihoming.
set chassis pseudowire-service device-count 10 set interfaces ps0 anchor-point lt-0/0/10 set interfaces ps0 flexible-vlan-tagging set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include delimiter "@" set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include user-prefix vlan set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include interface-name set interfaces ps0 auto-configure stacked-vlan-ranges access-profile no-auth set interfaces ps0 auto-configure remove-when-no-subscribers set interfaces ps0 mtu 2022 set interfaces ps0 esi 00:10:00:00:01:00:00:00:10:00 set interfaces ps0 esi single-active set interfaces ps0 esi df-election-type preference value 1000 set interfaces ps0 unit 0 encapsulation ethernet-ccc
-
Konfigurieren Sie Internet-VRF für Internetrouten.
set interfaces lo0 unit 20 description "VRF:internet Loopback" set interfaces lo0 unit 20 family inet address 172.16.100.3/32 primary set routing-instances internet instance-type vrf set routing-instances internet routing-options auto-export set routing-instances internet interface lo0.20 set routing-instances internet route-distinguisher 172.31.100.3:12 set routing-instances internet vrf-import internet-vrf-import-pol set routing-instances internet vrf-export internet-vrf-export-pol set routing-instances internet vrf-table-label set policy-options policy-statement internet-vrf-export-pol term all then community add 65000:999 set policy-options policy-statement internet-vrf-export-pol term all then accept set policy-options policy-statement internet-vrf-import-pol term default from community 65000:999 set policy-options policy-statement internet-vrf-import-pol term default then accept set policy-options policy-statement internet-vrf-import-pol term subs from community 65000:1131 set policy-options policy-statement internet-vrf-import-pol term subs then accept set policy-options policy-statement internet-vrf-import-pol term other from community 65000:113 set policy-options policy-statement internet-vrf-import-pol term other then accept set policy-options community 65000:113 members target:65000:113 set policy-options community 65000:1131 members target:65000:1131 set policy-options community 65000:999 members target:65000:999
-
Konfigurieren Sie die Optionen für den lokalen DHCP-Server auf einer Routing-Instanz. Sie konfigurieren und wenden Routing-Richtlinien für die DHCP-Abonnenten-Routing-Instanz an und erstellen Domänenzuordnungen, Firewall-Filter und dynamische Profile für DHCP-Abonnenten.
set interfaces lo0 unit 313 description "VRF:dhcp-subs Loopback" set interfaces lo0 unit 313 family inet address 172.16.16.3/32 set interfaces lo0 unit 313 family inet address 10.42.0.1/32 primary set interfaces lo0 unit 313 family inet6 address 2015:cafe:2000::1/128 set routing-instances dhcp-subs instance-type vrf set routing-instances dhcp-subs routing-options rib dhcp-subs.inet6.0 static route ::/0 next-table internet.inet6.0 set routing-instances dhcp-subs routing-options rib dhcp-subs.inet6.0 static route ::/0 no-readvertise set routing-instances dhcp-subs routing-options router-id 172.16.16.3 set routing-instances dhcp-subs routing-options flow term-order standard set routing-instances dhcp-subs routing-options static route 0.0.0.0/0 next-table internet.inet.0 set routing-instances dhcp-subs routing-options static route 0.0.0.0/0 no-readvertise set routing-instances dhcp-subs routing-options static route 10.42.0.0/16 discard set routing-instances dhcp-subs routing-options static route 10.42.0.0/16 tag 200 set routing-instances dhcp-subs routing-options auto-export set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection failure-action clear-binding-if-interface-up set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd version automatic set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd minimum-interval 30000 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd multiplier 3 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls overrides client-discover-match incoming-interface set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls overrides dual-stack dhcp-ds set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls interface demux0.0 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls interface ps0.0 set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds authentication username-include mac-address set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds on-demand-address-allocation set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds classification-key mac-address set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds protocol-master inet set routing-instances dhcp-subs system services dhcp-local-server no-stale-timer-refresh set routing-instances dhcp-subs system services dhcp-local-server stale-timer 60 set routing-instances dhcp-subs access address-assignment high-utilization 80 set routing-instances dhcp-subs access address-assignment abated-utilization 70 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet network 10.42.0.0/16 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet range range1 low 10.42.0.2 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet range range1 high 10.42.255.254 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes maximum-lease-time 600 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes server-identifier 10.42.0.1 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes router 10.42.0.1 set routing-instances dhcp-subs access-profile no-auth set routing-instances dhcp-subs interface lo0.313 set routing-instances dhcp-subs route-distinguisher 172.31.100.3:13 set routing-instances dhcp-subs vrf-import dhcp-subs-vrf-import-pol set routing-instances dhcp-subs vrf-export dhcp-subs-vrf-export-pol set routing-instances dhcp-subs vrf-table-label set policy-options policy-statement dhcp-subs-vrf-export-pol term loop from protocol direct set policy-options policy-statement dhcp-subs-vrf-export-pol term loop from route-filter 172.16.16.3/32 exact set policy-options policy-statement dhcp-subs-vrf-export-pol term loop then community add 65000:113 set policy-options policy-statement dhcp-subs-vrf-export-pol term pools from protocol static set policy-options policy-statement dhcp-subs-vrf-export-pol term pools from tag 200 set policy-options policy-statement dhcp-subs-vrf-export-pol term pools then community add 65000:113 set policy-options policy-statement dhcp-subs-vrf-export-pol term subs then community add 65000:1131 set policy-options policy-statement dhcp-subs-vrf-export-pol term subs then accept set policy-options policy-statement dhcp-subs-vrf-import-pol term all from community 65000:111 set policy-options policy-statement dhcp-subs-vrf-import-pol term all then accept set policy-options community 65000:111 members target:65000:111 set policy-options community 65000:111 members target:65000:11 set access domain map none access-profile no-auth set access domain map none target-routing-instance dhcp-subs set access domain map ps0.* access-profile no-auth set access domain map ps0.* target-routing-instance dhcp-subs set access domain map ps0:* access-profile no-auth set access domain map ps0:* target-routing-instance dhcp-subs set firewall family inet filter rpf-pass-dhcp term allow-dhcp from destination-address 255.255.255.255/32 set firewall family inet filter rpf-pass-dhcp term allow-dhcp from destination-port dhcp set firewall family inet filter rpf-pass-dhcp term allow-dhcp then accept set firewall family inet filter rpf-pass-dhcp term default then discard set system dynamic-profile-options versioning set dynamic-profiles prod-dhcp-base routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles prod-dhcp-base routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix metric "$junos-framed-route-cost" set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" actual-transit-statistics set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" demux-options underlying-interface "$junos-underlying-interface" set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet rpf-check fail-filter rpf-pass-dhcp set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet demux-source $junos-subscriber-ip-address set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet unnumbered-address lo0.313 set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet6 demux-source $junos-subscriber-ipv6-address set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet6 unnumbered-address lo0.313 set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds dynamic-profile prod-dhcp-base
-
Konfigurieren Sie dynamische Profile für die Pseudowire-Schnittstelle, und wenden Sie sie an.
set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix next-hop "$junos-framed-route-nexthop" set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix metric "$junos-framed-route-cost" set dynamic-profiles auto-pwht interfaces interface-set "$junos-phy-ifd-interface-set-name" interface "$junos-interface-ifd-name" unit "$junos-interface-unit" set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" no-traps set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" proxy-arp restricted set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-id "$junos-vlan-id" set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet mac-validate loose set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet unnumbered-address "$junos-loopback-interface" set dynamic-profiles auto-stacked-pwht routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" no-traps set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" proxy-arp set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-tags outer "$junos-stacked-vlan-id" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-tags inner "$junos-vlan-id" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" demux-options underlying-interface "$junos-interface-ifd-name" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet mac-validate strict set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet unnumbered-address "$junos-loopback-interface" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges dynamic-profile PROF_AUTOSENSE_IPDEMUX network 10.42.0.0/16 set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges dynamic-profile PROF_AUTOSENSE_IPDEMUX network 10.43.0.0/16 set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include delimiter "@" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include user-prefix vlan set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include interface-name set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges session-timeout 600 set dynamic-profiles PROF_AUTOSENSE_IPDEMUX routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet mac-validate strict set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet unnumbered-address lo0.313 set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet6 unnumbered-address lo0.313 set interfaces ps0 auto-configure stacked-vlan-ranges dynamic-profile auto-stacked-pwht accept any set interfaces ps0 auto-configure stacked-vlan-ranges dynamic-profile auto-stacked-pwht ranges any,any set interfaces ps0 auto-configure vlan-ranges dynamic-profile auto-pwht accept any set interfaces ps0 auto-configure vlan-ranges dynamic-profile auto-pwht ranges any
-
Konfigurieren Sie eine Routing-Instanz vom Typ evpn-vpws, und definieren Sie dabei den Route Distinguisher und das VRF-Ziel.
set routing-instances EVPN-VPWS-BNG-1 instance-type evpn-vpws set routing-instances EVPN-VPWS-BNG-1 protocols evpn interface ps0.0 vpws-service-id local 9999 set routing-instances EVPN-VPWS-BNG-1 protocols evpn interface ps0.0 vpws-service-id remote 1111 set routing-instances EVPN-VPWS-BNG-1 interface ps0.0 set routing-instances EVPN-VPWS-BNG-1 route-distinguisher 172.31.100.3:11 set routing-instances EVPN-VPWS-BNG-1 vrf-target target:65000:11
Konfigurieren von BNG2
-
Melden Sie sich beim BNG2-Gerät an. Stellen Sie sicher, dass auf dem Gerät Junos Version 22.4R1 oder höher ausgeführt wird.
-
Konfigurieren von Systemdiensten.
set system host-name BNG2 set system configuration-database max-db-size 698343424 set system services ssh root-login allow set chassis network-services enhanced-ip
-
Erstellen Sie eine Gruppe, um allgemeine Core-Schnittstellenkonfigurationen wie MTU-, Haltezeit- und Dämpfungsparameter zu definieren.
set groups GR-CORE-INTF interfaces <*> description ********GR-CORE-INTF-SETTINGS-APPLIED-ADD-DESCRIPTION******** set groups GR-CORE-INTF interfaces <*> traps set groups GR-CORE-INTF interfaces <*> mtu 9192 set groups GR-CORE-INTF interfaces <*> hold-time up 2000 set groups GR-CORE-INTF interfaces <*> hold-time down 0 set groups GR-CORE-INTF interfaces <*> damping half-life 30 set groups GR-CORE-INTF interfaces <*> damping max-suppress 600 set groups GR-CORE-INTF interfaces <*> damping reuse 250 set groups GR-CORE-INTF interfaces <*> damping suppress 2000 set groups GR-CORE-INTF interfaces <*> damping enable set groups GR-CORE-INTF interfaces <*> unit 0 traps set groups GR-CORE-INTF interfaces <*> unit 0 family inet mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family iso mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls mtu 9170 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls maximum-labels 5
-
Konfigurieren der Schnittstellen für Core-Geräte.
set interfaces ge-0/0/0 apply-groups GR-CORE-INTF set interfaces ge-0/0/0 unit 0 family inet address 10.1.0.2/30 set interfaces ge-0/0/0 unit 0 family iso set interfaces ge-0/0/0 unit 0 family mpls set interfaces ge-0/0/1 apply-groups GR-CORE-INTF set interfaces ge-0/0/1 unit 0 family inet address 10.1.2.2/30 set interfaces ge-0/0/1 unit 0 family iso set interfaces ge-0/0/1 unit 0 family mpls set interfaces ge-0/0/2 apply-groups GR-CORE-INTF set interfaces ge-0/0/2 unit 0 family inet address 10.1.12.2/30 set interfaces ge-0/0/2 unit 0 family iso set interfaces ge-0/0/2 unit 0 family mpls
-
Konfigurieren Sie die Schnittstelle für vQFX.
set interfaces ge-0/0/3 mtu 9192 set interfaces ge-0/0/3 unit 0 family inet address 192.168.100.171/23
-
Konfigurieren Sie die Loopbackschnittstelle für die Verwendung im Zugriffsnetzwerk für die Teilnehmerverwaltung.
set interfaces lo0 unit 0 family inet address 172.31.100.4/32 set interfaces lo0 unit 0 family inet address 192.168.0.1/32 primary set interfaces lo0 unit 0 family inet address 192.168.0.1/32 preferred set interfaces lo0 unit 0 family iso address 49.0001.1000.0000.0004.00 set interfaces lo0 unit 0 family mpls
-
Konfigurieren Sie das IS-IS-Protokoll im Core-Netzwerk.
set protocols isis interface ge-0/0/0.0 set protocols isis interface ge-0/0/1.0 set protocols isis interface ge-0/0/2.0 set protocols isis interface lo0.0 passive set protocols isis level 1 disable set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from interface lo0.0 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from route-filter 172.31.0.0/16 prefix-length-range /32-/32 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then tag 101 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then accept set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES then accept set policy-options policy-statement PL-ISIS-EXPORT then reject set protocols isis export PL-ISIS-EXPORT
-
Konfigurieren von Routing-Optionen.
set routing-options router-id 172.31.100.4 set routing-options autonomous-system 65000
-
Konfigurieren Sie das BGP-Protokoll zwischen dem BNG und den Zugriffsgeräten.
set protocols bgp group IBGP type internal set protocols bgp group IBGP local-address 172.31.100.4 set protocols bgp group IBGP family evpn signaling set protocols bgp group IBGP cluster 2.2.2.2 set protocols bgp group IBGP neighbor 172.31.100.3 set protocols bgp group IBGP neighbor 172.31.100.11 set protocols bgp group IBGP neighbor 172.31.100.12
-
Konfigurieren Sie LDP und MPLS für alle Core-Schnittstellen.
set protocols ldp deaggregate set protocols ldp transport-address 172.31.100.4 set protocols ldp interface all set protocols mpls interface all
-
Konfigurieren Sie globale Services für die Abonnentenverwaltung, wie z. B. die Verwaltung von Abonnenten, Ablaufverfolgungsvorgänge und die Aktivierung einer erweiterten Abonnentenverwaltung.
set system services subscriber-management traceoptions file submgmt.log set system services subscriber-management traceoptions file size 30m set system services subscriber-management traceoptions file files 10 set system services subscriber-management traceoptions flag all set system services subscriber-management gres-route-flush-delay set system services subscriber-management enable
-
Konfigurieren Sie Ablaufverfolgungsoptionen für den allgemeinen Authentifizierungsdienst.
set system processes general-authentication-service traceoptions file authd set system processes general-authentication-service traceoptions file size 10m set system processes general-authentication-service traceoptions file files 10 set system processes general-authentication-service traceoptions flag all
-
Konfigurieren Sie Systemservices, einschließlich Ablaufverfolgungsvorgänge und Routing-Engine-Failover, für den wichtigsten Sitzungsverwaltungsprozess für die Abonnentenverwaltung, smg-service.
set system processes smg-service traceoptions file smgd set system processes smg-service traceoptions file size 10m set system processes smg-service traceoptions file files 10 set system processes smg-service traceoptions level all set system processes smg-service traceoptions flag all
-
Definieren Sie globale Ablaufverfolgungsvorgänge für erweiterte lokale DHCP-Server- und erweiterte DHCP-Relay-Agent-Prozesse.
set system processes dhcp-service traceoptions file jdhcpd set system processes dhcp-service traceoptions file size 10m set system processes dhcp-service traceoptions file files 10 set system processes dhcp-service traceoptions level all set system processes dhcp-service traceoptions flag packet set system processes dhcp-service traceoptions flag all
-
Konfigurieren Sie die Tunnelservices und alle zusätzlichen Chassis-Konfigurationen.
set chassis fpc 0 pic 0 tunnel-services bandwidth 1g set chassis fpc 0 performance-mode
-
Konfigurieren Sie Zugriffsprofile für DHCP-Abonnenten.
set access-profile no-auth set access profile no-auth authentication-order none set access address-protection
-
Konfigurieren Sie die Pseudowire-Schnittstelle für die Verwendung von dynamisch gestapelten VLANs. Konfigurieren Sie außerdem zusätzliche Schnittstellen- und VLAN-Abonnementeinstellungen. Konfigurieren Sie Ethernet Segment Identifier (ESI) für EVPN Aktiv-Standby-Multihoming.
set chassis pseudowire-service device-count 10 set interfaces ps0 anchor-point lt-0/0/10 set interfaces ps0 flexible-vlan-tagging set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include delimiter "@" set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include user-prefix vlan set interfaces ps0 auto-configure stacked-vlan-ranges authentication username-include interface-name set interfaces ps0 auto-configure stacked-vlan-ranges access-profile no-auth set interfaces ps0 auto-configure remove-when-no-subscribers set interfaces ps0 mtu 2022 set interfaces ps0 esi 00:10:00:00:01:00:00:00:10:00 set interfaces ps0 esi single-active set interfaces ps0 esi df-election-type preference value 999 set interfaces ps0 unit 0 encapsulation ethernet-ccc
-
Konfigurieren Sie Internet-VRF für Internetrouten.
set interfaces lo0 unit 20 description "VRF:internet Loopback" set interfaces lo0 unit 20 family inet address 172.16.100.4/32 primary set routing-instances internet instance-type vrf set routing-instances internet routing-options auto-export set routing-instances internet interface lo0.20 set routing-instances internet route-distinguisher 172.31.100.4:12 set routing-instances internet vrf-import internet-vrf-import-pol set routing-instances internet vrf-export internet-vrf-export-pol set routing-instances internet vrf-table-label set policy-options policy-statement internet-vrf-export-pol term all then community add 65000:999 set policy-options policy-statement internet-vrf-export-pol term all then accept set policy-options policy-statement internet-vrf-import-pol term default from community 65000:999 set policy-options policy-statement internet-vrf-import-pol term default then accept set policy-options policy-statement internet-vrf-import-pol term subs from community 65000:1131 set policy-options policy-statement internet-vrf-import-pol term subs then accept set policy-options policy-statement internet-vrf-import-pol term other from community 65000:113 set policy-options policy-statement internet-vrf-import-pol term other then accept set policy-options community 65000:113 members target:65000:113 set policy-options community 65000:1131 members target:65000:1131 set policy-options community 65000:999 members target:65000:999
-
Konfigurieren Sie die Optionen für den lokalen DHCP-Server auf einer Routing-Instanz. Sie konfigurieren und wenden Routing-Richtlinien für die DHCP-Abonnenten-Routing-Instanz an und erstellen Domänenzuordnungen, Firewall-Filter und dynamische Profile für DHCP-Abonnenten.
set interfaces lo0 unit 313 description "VRF:dhcp-subs Loopback" set interfaces lo0 unit 313 family inet address 172.16.16.4/32 set interfaces lo0 unit 313 family inet address 10.43.0.1/32 primary set interfaces lo0 unit 313 family inet6 address 2016:cafe:2000::1/128 set routing-instances dhcp-subs instance-type vrf set routing-instances dhcp-subs routing-options rib dhcp-subs.inet6.0 static route ::/0 next-table internet.inet6.0 set routing-instances dhcp-subs routing-options rib dhcp-subs.inet6.0 static route ::/0 no-readvertise set routing-instances dhcp-subs routing-options router-id 172.16.16.4 set routing-instances dhcp-subs routing-options flow term-order standard set routing-instances dhcp-subs routing-options static route 0.0.0.0/0 next-table internet.inet.0 set routing-instances dhcp-subs routing-options static route 0.0.0.0/0 no-readvertise set routing-instances dhcp-subs routing-options static route 10.43.0.0/16 discard set routing-instances dhcp-subs routing-options static route 10.43.0.0/16 tag 200 set routing-instances dhcp-subs routing-options auto-export set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection failure-action clear-binding-if-interface-up set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd version automatic set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd minimum-interval 30000 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls liveness-detection method bfd multiplier 3 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls overrides client-discover-match incoming-interface set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls overrides dual-stack dhcp-ds set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls interface demux0.0 set routing-instances dhcp-subs system services dhcp-local-server group dhcp-ls interface ps0.0 set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds authentication username-include mac-address set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds on-demand-address-allocation set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds classification-key mac-address set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds protocol-master inet set routing-instances dhcp-subs system services dhcp-local-server no-stale-timer-refresh set routing-instances dhcp-subs system services dhcp-local-server stale-timer 60 set routing-instances dhcp-subs access address-assignment high-utilization 80 set routing-instances dhcp-subs access address-assignment abated-utilization 70 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet network 10.43.0.0/16 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet range range1 low 10.43.0.2 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet range range1 high 10.43.254.254 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes maximum-lease-time 600 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes server-identifier 10.43.0.1 set routing-instances dhcp-subs access address-assignment pool ttt-fttx-res-ipv4-pool-0 family inet dhcp-attributes router 10.43.0.1 set routing-instances dhcp-subs access-profile no-auth set routing-instances dhcp-subs interface lo0.313 set routing-instances dhcp-subs route-distinguisher 172.31.100.4:13 set routing-instances dhcp-subs vrf-import dhcp-subs-vrf-import-pol set routing-instances dhcp-subs vrf-export dhcp-subs-vrf-export-pol set routing-instances dhcp-subs vrf-table-label set policy-options policy-statement dhcp-subs-vrf-export-pol term loop from protocol direct set policy-options policy-statement dhcp-subs-vrf-export-pol term loop from route-filter 172.16.16.4/32 exact set policy-options policy-statement dhcp-subs-vrf-export-pol term loop then community add 65000:113 set policy-options policy-statement dhcp-subs-vrf-export-pol term pools from protocol static set policy-options policy-statement dhcp-subs-vrf-export-pol term pools from tag 200 set policy-options policy-statement dhcp-subs-vrf-export-pol term pools then community add 65000:113 set policy-options policy-statement dhcp-subs-vrf-export-pol term subs then community add 65000:1131 set policy-options policy-statement dhcp-subs-vrf-export-pol term subs then accept set policy-options policy-statement dhcp-subs-vrf-import-pol term all from community 65000:111 set policy-options policy-statement dhcp-subs-vrf-import-pol term all then accept set policy-options community 65000:111 members target:65000:111 set policy-options community 65000:111 members target:65000:11 set policy-options community 65000:113 members target:65000:113 set policy-options community 65000:1131 members target:65000:1131 set access-profile no-auth set access profile no-auth authentication-order none set access address-protection set access domain map none access-profile no-auth set access domain map none target-routing-instance dhcp-subs set access domain map ps0.* access-profile no-auth set access domain map ps0.* target-routing-instance dhcp-subs set access domain map ps0:* access-profile no-auth set access domain map ps0:* target-routing-instance dhcp-subs set firewall family inet filter rpf-pass-dhcp term allow-dhcp from destination-address 255.255.255.255/32 set firewall family inet filter rpf-pass-dhcp term allow-dhcp from destination-port dhcp set firewall family inet filter rpf-pass-dhcp term allow-dhcp then accept set firewall family inet filter rpf-pass-dhcp term default then discard set system dynamic-profile-options versioning set dynamic-profiles prod-dhcp-base routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles prod-dhcp-base routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix metric "$junos-framed-route-cost" set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" actual-transit-statistics set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" demux-options underlying-interface "$junos-underlying-interface" set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet rpf-check fail-filter rpf-pass-dhcp set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet demux-source $junos-subscriber-ip-address set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet unnumbered-address lo0.313 set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet6 demux-source $junos-subscriber-ipv6-address set dynamic-profiles prod-dhcp-base interfaces demux0 unit "$junos-interface-unit" family inet6 unnumbered-address lo0.313 set routing-instances dhcp-subs system services dhcp-local-server dual-stack-group dhcp-ds dynamic-profile prod-dhcp-base
-
Konfigurieren Sie dynamische Profile für die Pseudowire-Schnittstelle, und wenden Sie sie an.
set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix next-hop "$junos-framed-route-nexthop" set dynamic-profiles auto-pwht routing-instances "$junos-routing-instance" routing-options access route $junos-framed-route-ip-address-prefix metric "$junos-framed-route-cost" set dynamic-profiles auto-pwht interfaces interface-set "$junos-phy-ifd-interface-set-name" interface "$junos-interface-ifd-name" unit "$junos-interface-unit" set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" no-traps set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" proxy-arp restricted set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-id "$junos-vlan-id" set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet mac-validate loose set dynamic-profiles auto-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet unnumbered-address "$junos-loopback-interface" set dynamic-profiles auto-stacked-pwht routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" no-traps set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" proxy-arp set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-tags outer "$junos-stacked-vlan-id" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-tags inner "$junos-vlan-id" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" demux-options underlying-interface "$junos-interface-ifd-name" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet mac-validate strict set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet unnumbered-address "$junos-loopback-interface" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges dynamic-profile PROF_AUTOSENSE_IPDEMUX network 10.42.0.0/16 set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges dynamic-profile PROF_AUTOSENSE_IPDEMUX network 10.43.0.0/16 set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include delimiter "@" set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include user-prefix vlan set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges authentication username-include interface-name set dynamic-profiles auto-stacked-pwht interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet auto-configure address-ranges session-timeout 600 set dynamic-profiles PROF_AUTOSENSE_IPDEMUX routing-instances "$junos-routing-instance" interface "$junos-interface-name" set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet mac-validate strict set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet unnumbered-address lo0.313 set dynamic-profiles PROF_AUTOSENSE_IPDEMUX interfaces demux0 unit "$junos-underlying-interface-unit" family inet6 unnumbered-address lo0.313 set interfaces ps0 auto-configure stacked-vlan-ranges dynamic-profile auto-stacked-pwht accept any set interfaces ps0 auto-configure stacked-vlan-ranges dynamic-profile auto-stacked-pwht ranges any,any set interfaces ps0 auto-configure vlan-ranges dynamic-profile auto-pwht accept any set interfaces ps0 auto-configure vlan-ranges dynamic-profile auto-pwht ranges any
-
Konfigurieren Sie eine Routing-Instanz vom Typ evpn-vpws, und definieren Sie dabei den Route Distinguisher und das VRF-Ziel.
set routing-instances EVPN-VPWS-BNG-2 instance-type evpn-vpws set routing-instances EVPN-VPWS-BNG-2 protocols evpn interface ps0.0 vpws-service-id local 9999 set routing-instances EVPN-VPWS-BNG-2 protocols evpn interface ps0.0 vpws-service-id remote 1111 set routing-instances EVPN-VPWS-BNG-2 interface ps0.0 set routing-instances EVPN-VPWS-BNG-2 route-distinguisher 172.31.100.4:11 set routing-instances EVPN-VPWS-BNG-2 vrf-target target:65000:11
Konfigurieren von ACX1
-
Melden Sie sich beim ACX1-Gerät an.
-
Konfigurieren Sie die Systemeinstellungen und DHCP-Diensteinstellungen.
set system host-name ACX1 set system services ssh root-login allow set chassis network-services enhanced-ip set system processes dhcp-service traceoptions file dhcp_logfile set system processes dhcp-service traceoptions file size 10m set system processes dhcp-service traceoptions level all set system processes dhcp-service traceoptions flag packet
-
Erstellen Sie eine Gruppe, um allgemeine Core-Schnittstellenkonfigurationen wie MTU-, Haltezeit- und Dämpfungsparameter zu definieren.
set groups GR-CORE-INTF interfaces <*> description ********GR-CORE-INTF-SETTINGS-APPLIED-ADD-DESCRIPTION******** set groups GR-CORE-INTF interfaces <*> traps set groups GR-CORE-INTF interfaces <*> mtu 9192 set groups GR-CORE-INTF interfaces <*> hold-time up 2000 set groups GR-CORE-INTF interfaces <*> hold-time down 0 set groups GR-CORE-INTF interfaces <*> damping half-life 30 set groups GR-CORE-INTF interfaces <*> damping max-suppress 600 set groups GR-CORE-INTF interfaces <*> damping reuse 250 set groups GR-CORE-INTF interfaces <*> damping suppress 2000 set groups GR-CORE-INTF interfaces <*> damping enable set groups GR-CORE-INTF interfaces <*> unit 0 traps set groups GR-CORE-INTF interfaces <*> unit 0 family inet mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family iso mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls mtu 9170 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls maximum-labels 5
-
Konfiguration der Schnittstellen zu den Core-Geräten
set interfaces ge-0/0/1 apply-groups GR-CORE-INTF set interfaces ge-0/0/1 unit 0 family inet address 10.1.1.2/30 set interfaces ge-0/0/1 unit 0 family iso set interfaces ge-0/0/1 unit 0 family mpls set interfaces ge-0/0/2 apply-groups GR-CORE-INTF set interfaces ge-0/0/2 unit 0 family inet address 10.1.12.1/30 set interfaces ge-0/0/2 unit 0 family iso set interfaces ge-0/0/2 unit 0 family mpls
-
Konfigurieren Sie die aggregierte Schnittstelle mit dem entsprechenden VLAN und der ESI-Konfiguration (Ethernet Segment Identifier).
set chassis aggregated-devices ethernet device-count 10 set interfaces ge-0/0/3 gigether-options 802.3ad ae10 set interfaces ae10 flexible-vlan-tagging set interfaces ae10 encapsulation flexible-ethernet-services set interfaces ae10 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae10 esi all-active set interfaces ae10 aggregated-ether-options lacp active set interfaces ae10 aggregated-ether-options lacp system-id 00:00:00:00:00:10 set interfaces ae10 unit 0 encapsulation vlan-ccc set interfaces ae10 unit 0 vlan-id-list 301-500 set interfaces ae10 unit 0 input-vlan-map push set interfaces ae10 unit 0 input-vlan-map vlan-id 100 set interfaces ae10 unit 0 output-vlan-map pop
-
Konfigurieren Sie die Loopback-Schnittstellen.
set interfaces lo0 unit 0 family inet address 172.31.100.11/32 set interfaces lo0 unit 0 family iso address 49.0001.1000.0000.0011.00 set interfaces lo0 unit 0 family mpls
-
Konfigurieren Sie das IS-IS-Protokoll für das Kernnetzwerk.
set protocols isis interface all level 1 disable set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from interface lo0.0 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from route-filter 172.31.0.0/16 prefix-length-range /32-/32 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then tag 101 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then accept set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES then accept set policy-options policy-statement PL-ISIS-EXPORT then reject set protocols isis export PL-ISIS-EXPORT
-
Konfigurieren von Routing-Optionen.
set routing-options router-id 172.31.100.11 set routing-options autonomous-system 65000
-
Konfigurieren Sie das BGP-Protokoll zwischen den Zugriffsgeräten und BNG.
set protocols bgp group IBGP type internal set protocols bgp group IBGP local-address 172.31.100.11 set protocols bgp group IBGP family evpn signaling set protocols bgp group IBGP neighbor 172.31.100.3 set protocols bgp group IBGP neighbor 172.31.100.4
-
Konfigurieren Sie die LDP- und MPLS-Protokolle auf den Core-Schnittstellen.
set protocols ldp interface all set protocols mpls interface all
-
Konfigurieren Sie eine Routing-Instanz vom Typ evpn-vpws, und definieren Sie dabei den Route Distinguisher und das VRF-Ziel.
set routing-instances EVPN-VPWS instance-type evpn-vpws set routing-instances EVPN-VPWS protocols evpn interface ae10.0 vpws-service-id local 1111 set routing-instances EVPN-VPWS protocols evpn interface ae10.0 vpws-service-id remote 9999 set routing-instances EVPN-VPWS interface ae10.0 set routing-instances EVPN-VPWS route-distinguisher 172.31.100.11:11 set routing-instances EVPN-VPWS vrf-target target:65000:11
Konfigurieren von ACX2
-
Melden Sie sich beim ACX2-Gerät an.
-
Konfigurieren Sie die Systemeinstellungen und DHCP-Diensteinstellungen.
set system host-name ACX2 set system services ssh root-login allow set chassis network-services enhanced-ip set system processes dhcp-service traceoptions file dhcp_logfile set system processes dhcp-service traceoptions file size 10m set system processes dhcp-service traceoptions level all set system processes dhcp-service traceoptions flag packet
-
Erstellen Sie eine Gruppe, um allgemeine Core-Schnittstellenkonfigurationen wie MTU-, Haltezeit- und Dämpfungsparameter zu definieren.
set groups GR-CORE-INTF interfaces <*> description ********GR-CORE-INTF-SETTINGS-APPLIED-ADD-DESCRIPTION******** set groups GR-CORE-INTF interfaces <*> traps set groups GR-CORE-INTF interfaces <*> mtu 9192 set groups GR-CORE-INTF interfaces <*> hold-time up 2000 set groups GR-CORE-INTF interfaces <*> hold-time down 0 set groups GR-CORE-INTF interfaces <*> damping half-life 30 set groups GR-CORE-INTF interfaces <*> damping max-suppress 600 set groups GR-CORE-INTF interfaces <*> damping reuse 250 set groups GR-CORE-INTF interfaces <*> damping suppress 2000 set groups GR-CORE-INTF interfaces <*> damping enable set groups GR-CORE-INTF interfaces <*> unit 0 traps set groups GR-CORE-INTF interfaces <*> unit 0 family inet mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family iso mtu 9106 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls mtu 9170 set groups GR-CORE-INTF interfaces <*> unit 0 family mpls maximum-labels 5
-
Konfigurieren Sie die Schnittstellen zu den Core-Geräten.
set interfaces ge-0/0/1 apply-groups GR-CORE-INTF set interfaces ge-0/0/1 unit 0 family inet address 10.1.2.1/30 set interfaces ge-0/0/1 unit 0 family iso set interfaces ge-0/0/1 unit 0 family mpls set interfaces ge-0/0/2 apply-groups GR-CORE-INTF set interfaces ge-0/0/2 unit 0 family inet address 10.1.21.1/30 set interfaces ge-0/0/2 unit 0 family iso set interfaces ge-0/0/2 unit 0 family mpls
-
Konfigurieren Sie die aggregierte Schnittstelle mit dem entsprechenden VLAN und der ESI-Konfiguration (Ethernet Segment Identifier).
set interfaces ge-0/0/3 gigether-options 802.3ad ae10 set interfaces ae10 flexible-vlan-tagging set interfaces ae10 encapsulation flexible-ethernet-services set interfaces ae10 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae10 esi all-active set interfaces ae10 aggregated-ether-options lacp active set interfaces ae10 aggregated-ether-options lacp system-id 00:00:00:00:00:10 set interfaces ae10 unit 0 encapsulation vlan-ccc set interfaces ae10 unit 0 vlan-id-list 301-500 set interfaces ae10 unit 0 input-vlan-map push set interfaces ae10 unit 0 input-vlan-map vlan-id 100 set interfaces ae10 unit 0 output-vlan-map pop
-
Konfigurieren Sie die Loopback-Schnittstellen.
set interfaces lo0 unit 0 family inet address 172.31.100.12/32 set interfaces lo0 unit 0 family iso address 49.0001.1000.0000.0012.00 set interfaces lo0 unit 0 family mpls
-
Konfigurieren Sie das IS-IS-Protokoll für das Kernnetzwerk.
set protocols isis interface all level 1 disable set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from interface lo0.0 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK from route-filter 172.31.0.0/16 prefix-length-range /32-/32 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then tag 101 set policy-options policy-statement PL-ISIS-EXPORT term LOCAL-LOOPBACK then accept set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES from protocol direct set policy-options policy-statement PL-ISIS-EXPORT term DIRECT-ROUTES then accept set policy-options policy-statement PL-ISIS-EXPORT then reject set protocols isis export PL-ISIS-EXPORT
-
Konfigurieren von Routing-Optionen.
set routing-options router-id 172.31.100.12 set routing-options autonomous-system 65000
-
Konfigurieren Sie das BGP-Protokoll zwischen den Zugriffsgeräten und BNG.
set protocols bgp group IBGP type internal set protocols bgp group IBGP local-address 172.31.100.12 set protocols bgp group IBGP family evpn signaling set protocols bgp group IBGP neighbor 172.31.100.3 set protocols bgp group IBGP neighbor 172.31.100.4
-
Konfigurieren Sie die LDP- und MPLS-Protokolle auf den Core-Schnittstellen.
set protocols ldp interface all set protocols mpls interface all
-
Konfigurieren Sie eine Routing-Instanz vom Typ evpn-vpws, und definieren Sie dabei den Route Distinguisher und das VRF-Ziel.
set routing-instances EVPN-VPWS instance-type evpn-vpws set routing-instances EVPN-VPWS protocols evpn interface ae10.0 vpws-service-id local 1111 set routing-instances EVPN-VPWS protocols evpn interface ae10.0 vpws-service-id remote 9999 set routing-instances EVPN-VPWS interface ae10.0 set routing-instances EVPN-VPWS route-distinguisher 172.31.100.12:11 set routing-instances EVPN-VPWS vrf-target target:65000:11
Verifizierung
Zweck
Sie können die Konfiguration überprüfen, indem Sie den show evpn vpws-instance Befehl auf der BNG eingeben und auf Geräte zugreifen, um die Details der VPWS-Instanz des EVPN anzuzeigen.
Aktion
-
Überprüfung auf dem BNG1-Gerät.
show evpn vpws-instance Instance: EVPN-VPWS-BNG-1, Instance type: EVPN VPWS, Encapsulation type: MPLS Route Distinguisher: 172.31.100.3:11 Number of local interfaces: 1 (1 up) Interface name ESI Mode Role Status Control-Word Flow-Label-Tx Flow-Label-Rx ps0.0 00:10:00:00:01:00:00:00:10:00 single-active Primary Up No No No Local SID: 9999 Advertised Label: 46 PE addr ESI Label End.Dx2 SID Mode Role TS Status 172.31.100.4 00:10:00:00:01:00:00:00:10:00 64 single-active Backup 2023-07-24 11:08:27.958 Resolved Remote SID: 1111 PE addr ESI Label End.Dx2 SID Mode Role TS Status 172.31.100.11 00:11:11:11:11:11:11:11:11:11 300112 all-active Primary 2023-07-24 11:08:17.689 Resolved 172.31.100.12 00:11:11:11:11:11:11:11:11:11 300096 all-active Primary 2023-07-24 11:08:17.689 Resolved Number of protect interfaces: 0 Fast Convergence Information ESI: 00:10:00:00:01:00:00:00:10:00 Number of PE nodes: 1 PE: 172.31.100.4 Advertised SID: 9999 Fast Convergence Information ESI: 00:11:11:11:11:11:11:11:11:11 Number of PE nodes: 2 PE: 172.31.100.11 Advertised SID: 1111 PE: 172.31.100.12 Advertised SID: 1111 DF Election Information for Single-Active ESI ESI: 00:10:00:00:01:00:00:00:10:00 DF Election Algorithm: Preference based Primary PE: 172.31.100.3, Preference: 1000 Backup PE: 172.31.100.4, Preference: 999 Last DF Election: 2023-07-24 11:08:27 -
Überprüfung auf dem BNG2-Gerät.
show evpn vpws-instance Instance: EVPN-VPWS-BNG-2, Instance type: EVPN VPWS, Encapsulation type: MPLS Route Distinguisher: 172.31.100.4:11 Number of local interfaces: 1 (1 up) Interface name ESI Mode Role Status Control-Word Flow-Label-Tx Flow-Label-Rx ps0.0 00:10:00:00:01:00:00:00:10:00 single-active Backup Up No No No Local SID: 9999 Advertised Label: 64 PE addr ESI Label End.Dx2 SID Mode Role TS Status 172.31.100.3 00:10:00:00:01:00:00:00:10:00 46 single-active Primary 2023-07-24 11:08:27.750 Resolved Remote SID: 1111 PE addr ESI Label End.Dx2 SID Mode Role TS Status 172.31.100.11 00:11:11:11:11:11:11:11:11:11 300112 all-active Primary 2023-07-24 10:59:26.019 Resolved 172.31.100.12 00:11:11:11:11:11:11:11:11:11 300096 all-active Primary 2023-07-24 10:59:26.317 Resolved Number of protect interfaces: 0 Fast Convergence Information ESI: 00:10:00:00:01:00:00:00:10:00 Number of PE nodes: 1 PE: 172.31.100.3 Advertised SID: 9999 Fast Convergence Information ESI: 00:11:11:11:11:11:11:11:11:11 Number of PE nodes: 2 PE: 172.31.100.11 Advertised SID: 1111 PE: 172.31.100.12 Advertised SID: 1111 DF Election Information for Single-Active ESI ESI: 00:10:00:00:01:00:00:00:10:00 DF Election Algorithm: Preference based Primary PE: 172.31.100.3, Preference: 1000 Backup PE: 172.31.100.4, Preference: 999 Last DF Election: 2023-07-24 11:08:27 -
Überprüfung auf ACX1-Gerät.
show evpn vpws-instance Instance: EVPN-VPWS, Instance type: EVPN VPWS, Encapsulation type: MPLS Route Distinguisher: 172.31.100.11:11 Number of local interfaces: 1 (1 up) Interface name ESI Mode Role Status Control-Word Flow-Label-Tx Flow-Label-Rx ae10.0 00:11:11:11:11:11:11:11:11:11 all-active Primary Up No No No Local SID: 1111 Advertised Label: 300112 PE addr ESI Label End.Dx2 SID Mode Role TS Status 172.31.100.12 00:11:11:11:11:11:11:11:11:11 300096 all-active Primary 2023-07-24 10:59:26.522 Resolved Remote SID: 9999 PE addr ESI Label End.Dx2 SID Mode Role TS Status 172.31.100.4 00:10:00:00:01:00:00:00:10:00 64 single-active Backup 2023-07-24 11:08:27.963 Resolved 172.31.100.3 00:10:00:00:01:00:00:00:10:00 46 single-active Primary 2023-07-24 11:08:27.749 Resolved Number of protect interfaces: 0 Fast Convergence Information ESI: 00:10:00:00:01:00:00:00:10:00 Number of PE nodes: 2 PE: 172.31.100.4 Advertised SID: 9999 PE: 172.31.100.3 Advertised SID: 9999 Fast Convergence Information ESI: 00:11:11:11:11:11:11:11:11:11 Number of PE nodes: 1 PE: 172.31.100.12 Advertised SID: 1111 -
Überprüfung auf dem ACX2-Gerät.
show evpn vpws-instance Instance: EVPN-VPWS, Instance type: EVPN VPWS, Encapsulation type: MPLS Route Distinguisher: 172.31.100.12:11 Number of local interfaces: 1 (1 up) Interface name ESI Mode Role Status Control-Word Flow-Label-Tx Flow-Label-Rx ae10.0 00:11:11:11:11:11:11:11:11:11 all-active Primary Up No No No Local SID: 1111 Advertised Label: 300096 PE addr ESI Label End.Dx2 SID Mode Role TS Status 172.31.100.11 00:11:11:11:11:11:11:11:11:11 300112 all-active Primary 2023-07-24 10:59:26.224 Resolved Remote SID: 9999 PE addr ESI Label End.Dx2 SID Mode Role TS Status 172.31.100.4 00:10:00:00:01:00:00:00:10:00 64 single-active Backup 2023-07-24 11:08:27.960 Resolved 172.31.100.3 00:10:00:00:01:00:00:00:10:00 46 single-active Primary 2023-07-24 11:08:27.750 Resolved Number of protect interfaces: 0 Fast Convergence Information ESI: 00:10:00:00:01:00:00:00:10:00 Number of PE nodes: 2 PE: 172.31.100.4 Advertised SID: 9999 PE: 172.31.100.3 Advertised SID: 9999 Fast Convergence Information ESI: 00:11:11:11:11:11:11:11:11:11 Number of PE nodes: 1 PE: 172.31.100.11 Advertised SID: 1111
Bedeutung
Die BNG-Geräte werden im Aktiv-Standby-Multihoming-Modus konfiguriert. In einem stationären Zustand werden alle Datenströme zu BNG1 geleitet, dem primären Gerät zwischen BNG1 und BNG2. Für den Fall, dass bei BNG1 ein Fehler auftritt, wird BNG2 zur primären designierten Weiterleitung. Die Zugangsgeräte werden im Aktiv-Aktiv-Multihoming konfiguriert, wobei der gesamte Datenverkehr der CE-Geräte auf Load Balancing erfolgt.