Configuring QFX Series Devices as Data Center Gateway
You can configure a QFX series device as a Data Center Gateway (DC-GW). DC-GW is an overlay role that is assigned to a QFX series switch to:
Extend private network
Extend public routable network
You can extend private network and extend public routable network with EVPN Type 5.
For more information on supported QFX series devices, see Contrail Networking Supported Hardware Platforms and Associated Roles And Node Profiles.
These sections provide instructions to configure a QFX10000 switch as a DC-GW.
Discover a Fabric
Follow these steps to discover a fabric by using the Contrail Command user interface (UI):
- Navigate to Infrastructure>Fabrics page.
- Click Create.
You are prompted to select a provisioning option.
- Click Existing Fabric to import existing (brownfield)
devices by discovery.
Figure 1: Select Provisioning Option - Click Provision.
The Create Fabric page is displayed.
- Enter the fabric provisioning information as listed in Table 1.
Table 1: Provision Existing Fabric
Field
Action
Name
Enter a name for the fabric.
Username
Enter a username for the device.
Password
Enter a password for the device.
Overlay ASN (iBGP)
Enter autonomous system (AS) number in the range of 1-65,535.
If you enable 4 Byte ASN in Global Config, you can enter 4-byte AS number in the range of 1-4,294,967,295.
Node profiles
Add node profiles.
You can add more than one node profile.
All preloaded node profiles are added to the fabric by default. You can remove a node profile by clicking X on the node profile.
Management subnets
Enter the following information:
CIDR—Enter CIDR network address.
Gateway—Enter gateway address.
Note: You enter the CIDR address range in the Management subnets field to search for devices. Any device that has a previously configured management IP on the subnet is discovered.
Underlay ASNs (eBGP)
Enter autonomous system (AS) number in the range of 1-65,535.
If you enable 4 Byte ASN in Global Config, you can enter 4-byte AS number in the range of 1-4,294,967,295.
Enter minimum value in ASN From field.
Enter maximum value in ASN To field.
Fabric subnets (CIDR)
Enter fabric CIDR address.
Note: Fabric subnets are used to assign IP addresses to interfaces that connect to leaf or spine devices.
Loopback subnets (CIDR)
Enter loopback address.
Note: Loopback subnets are used to auto-assign loopback IP addresses to the fabric devices.
VLAN-ID Fabric Wide Significance
Select the check box to enable enterprise style of configuration for the CRB-Access role on QFX devices. De-select the check box to enable service provider style of configuration for the CRB-Access role. The check box is selected by default since enterprise style is the default setting.
You can modify the enterprise style setting to service provider style once configured. However, you cannot modify the service provider style to enterprise style.
Note: Contrail Networking Release 1909 supports QFX10002-60C device running Junos OS Release 19.1R2 and later. QFX10002-60C device works only if enterprise style of configuration is enabled. To enable enterprise style of configuration, select the VLAN-ID Fabric Wide Significance check box when onboarding the QFX10002-60C device. For more information on enterprise style of configuration, see Configuring EVPN VXLAN Fabric with Multitenant Networking Services.
For more information on supported hardware platforms and roles, see Contrail Networking Supported Hardware Platforms and Associated Roles And Node Profiles.
- Click Next.
The Discovered devices page is displayed. The Device discovery progress bar on the Discovered devices page displays the progress of the device discovery job. The list of devices discovered is listed in the Discovered devices page.
- Select the device you want to add to the fabric and then
click Add.
The device is added to the fabric.
- Click Next to assign roles.
The Assign to devices page is displayed.
- Click the Assign icon at the end of the row
to assign roles.
The Assign role to devices pop-up is displayed.
- Assign physical roles and routing bridging roles.
To configure centrally-routed bridging (CRB):
For Spine Devices:
Select spine from the Physical Role list.
Select CRB-Gateway from the Routing Bridging Role list.
For Leaf Devices:
Select leaf from the Physical Role list.
Select CRB-Access from the Routing Bridging Role list.
To configure edge-routed bridging (ERB):
For Spine Devices:
Select spine from the Physical Role list.
Select CRB-MCAST-Gateway from the Routing Bridging Role list.
For Leaf Devices:
Select leaf from the Physical Role list.
Select ERB-UCAST-Gateway from the Routing Bridging Role list.
Note Contrail Networking Release 19XX supports CRB-Access, CRB-Gateway, DC-Gateway, ERB-UCAST-Gateway, and CRB-MCAST-Gateway roles overlay roles. For more information, see Centrally-Routed Bridging Overlay Design and Implementation.
Assign a DC-Gateway Role to the spine device.
Select spine from the Physical Role list.
Select DC-Gateway from the Routing Bridging Role list.
For more information on supported hardware platforms, associated node profiles and roles, see Contrail Networking Supported Hardware Platforms and Associated Roles And Node Profiles.
- Click Assign to confirm selection and then
click Autoconfigure to initiate the auto-configuration
job.
The Autoconfigure page is displayed.
Add Bare Metal Server
Follow these steps to add an existing bare metal server (BMS) by using the Contrail Command UI:
- Click Workloads>Instances.
The Instances page is displayed.
- Click Create to create a new instance.
The Create Instance page is displayed.
- Select Existing Baremetal Server as the Server Type.
- Enter the following information in the Existing Baremetal
Server pane:
Table 2: Add Existing Bare Metal Server Information
Field
Action
Instance Name
Displays the name of the BMS instance.
Baremetal Node
Select a bare metal node.
Interface
Select an interface from the list.
IP Address
Enter IP address of the instance.
VLAN ID
Enter VLAN ID.
Virtual Network
Select a virtual network from the list.
Select Security Groups
Select default security group from the list.
Figure 2: Existing Bare Metal Server - Click Create to confirm.
Create Tenant Virtual Network
A virtual network in a EVPN VXLAN data center corresponds to a bridge domain for one tenant in a multi-tenant data center fabric.
Follow these steps to create a tenant virtual network by using the Contrail Command UI:
- Click Overlay>Virtual Networks.
The All networks pane is displayed.
- Click Create.
The Network page is displayed.
- Enter the following information:
Table 3: Add Tenant Virtual Network Information
Field
Action
Name
Enter a name for the virtual network.
Network Policies
Select network policy from the list.
Allocation Mode
Select User defined subnet only as the allocation mode.
VxLAN Network Identifier
Enter VXLAN Network Identifier in the range from 1 through 16,777,215.
Subnets
Click +Add to add subnets.
Network IPAM
Select the default Network IPAM.
CIDR
Enter CIDR address.
Allocation Pools
Enter allocation pool information.
Gateway
Enter gateway IP address.
Auto Gateway
Select Auto Gateway check box.
DHCP
Select DHCP check box.
- Click Create to confirm.
Add CSN Nodes
Follow these steps to add CSN Nodes to the fabric by using the Contrail Command UI:
Navigate to the EVPN fabric you provisioned.
- Click the fabric name, and then click the fabric device.
The Fabric Device page is displayed.
- Enter the following information:
Table 4: Add CSN Node to Fabric Device Information
Field
Action
Management IP
Enter management IP address.
VTEP Address
Enter VTEP address.
Loopback IP
Enter loopback IP address.
BGP Router
Select BGP router from the list.
Virtual Router Type
Select virtual router type from the list.
Existing CSN
Select existing CSN from the list.
- Click Save to confirm changes to the fabric.
Create Logical Router
Follow these steps to create a logical router:
- Click Overlay>Logical Routers.
The Logical Routers page is displayed.
- Click Create.
The Create Logical Router page is displayed.
- Enter the following information:
Table 5: Add Logical Router Information
Field
Action
Name
Enter a name for the logical router.
Admin State
Select Up as the state.
Extend to Physical Router
Select the device you want to extend the physical router information to from the list.
Logical Router Type
Select VXLAN Routing from the list.
Connected networks
Select connected network information from the list.
NAT
Enable NAT by selecting the NAT check box.
VxLAN Network Identifier
Edit VXLAN network identifier.
- Click Create.
The Logical Routers pages is displayed.
Verification
EVPN type 5 configuration is pushed to QFX10000 switch as a DC-GW.
