Example: Configuring Interfaces, Routing Instances, and Static Routes for the Master and Interconnect Logical Systems and Logical Tunnel Interfaces for the User Logical Systems

Requirements

The example uses an SRX5600 device running Junos operating system (Junos OS) with logical systems.

Before you begin:

• Read SRX Series Logical System Master Administrator Configuration Tasks Overview to understand how and where this procedure fits in the overall master administrator configuration process.
• Read Example: Creating User Logical Systems, Their Administrators, Their Users, and an Interconnect Logical System
• Understanding the Interconnect Logical System and Logical Tunnel Interfaces

Overview

This scenario shows how to configure interfaces for the logical systems on the device, including an interconnect logical system.

• For the interconnect logical system, the example configures logical tunnel interfaces lt-0/0/0.0, lt-0/0/0.2, lt-0/0/0.4, and lt-0/0/0.6. The example configures a routing instance called vr-ic and assigns the interfaces to it.

  Because the interconnect logical system acts as a virtual switch, it is configured as a virtual private LAN service (VPLS) routing instance type. The interconnect logical system’s lt-0/0/0 interfaces are configured with ethernet-vpls as the encapsulation type. The corresponding peer lt-0/0/0 interfaces in the master and user logical systems are configured with Ethernet as the encapsulation type.

  • lt-0/0/0.0 connects to lt-0/0/0.1 on the root logical system.
  • lt-0/0/0.2 connects to lt-0/0/0.3 on the ls-product-design logical system.
  • lt-0/0/0.4 connects to lt-0/0/0.5 on the ls-marketing-dept logical system.
  • lt-0/0/0.6 connects to lt-0/0/0.7 on the ls-accounting-dept logical system.
• For the master logical system, called root-logical-system, the example configures ge-0/0/4.0 and assigns it to the vr1-root routing instance. The example configures lt-0/0/0.1 to connect to lt-0/0/0.0 on the interconnect logical system and assigns it to the vr1-root routing instance. The example configures static routes to allow for communication with other logical systems and assigns them to the vr1-root routing instance.
• For the ls-product-design logical system, the example configures lt-0/0/0.3 to connect to lt-0/0/0.2 on the interconnect logical system.
• For the ls-marketing-dept logical system, the example configures lt-0/0/0.5 to connect to lt-0/0/0.4 on the interconnect logical system.
• For the ls-accounting-dept logical system, the example configures lt-0/0/0.7 to connect to lt-0/0/0.6 on the interconnect logical system.

Figure 1 shows the topology for this deployment including virtual routers and their interfaces for all logical systems.

Figure 1: Configuring Logical Tunnel Interfaces, Logical Interfaces, and Virtual Routers

Configuration

This topic explains how to configure interfaces for logical systems.

• Configuring Logical Tunnel Interfaces and a Routing Instance for the Interconnect Logical System
• Configuring Interfaces, a Routing Instance, and Static Routes for the Master Logical System
• Configuring Logical Tunnel Interfaces for the User Logical Systems

Configuring Logical Tunnel Interfaces and a Routing Instance for the Interconnect Logical System

CLI Quick Configuration

To quickly configure this section of the example, copy the following commands, paste them into a text file, remove any line breaks, change any details necessary to match your network configuration, and then copy and paste the commands into the CLI at the [edit] hierarchy level.

Step-by-Step Procedure

1. Configure the lt-0/0/0 interfaces.
   [edit logical-systems]user@host# set interconnect-logical-system interfaces lt-0/0/0 unit 0 encapsulation ethernet-vplsuser@host# set interconnect-logical-system interfaces lt-0/0/0 unit 0 peer-unit 1user@host# set interconnect-logical-system interfaces lt-0/0/0 unit 2 encapsulation ethernet-vplsuser@host# set interconnect-logical-system interfaces lt-0/0/0 unit 2 peer-unit 3user@host# set interconnect-logical-system interfaces lt-0/0/0 unit 4 encapsulation ethernet-vpls user@host# set interconnect-logical-system interfaces lt-0/0/0 unit 4 peer-unit 5user@host# set interconnect-logical-system interfaces lt-0/0/0 unit 6 encapsulation ethernet-vpls user@host# set interconnect-logical-system interfaces lt-0/0/0 unit 6 peer-unit 7
2. Configure the routing instance for the interconnect logical system and add its lt-0/0/0 interfaces to it.
   [edit logical-systems]user@host# set interconnect-logical-system routing-instances vr-ic instance-type vplsuser@host# set interconnect-logical-system routing-instances vr-ic interface lt-0/0/0.0user@host# set interconnect-logical-system routing-instances vr-ic interface lt-0/0/0.2user@host# set interconnect-logical-system routing-instances vr-ic interface lt-0/0/0.4user@host# set interconnect-logical-system routing-instances vr-ic interface lt-0/0/0.6

Results

From configuration mode, confirm your configuration by entering the show logical-systems interconnect-logical-system command. If the output does not display the intended configuration, repeat the configuration instructions in this example to correct it.

If you are done configuring the device, enter commit from configuration mode.

Configuring Interfaces, a Routing Instance, and Static Routes for the Master Logical System

CLI Quick Configuration

To quickly configure this section of the example, copy the following commands, paste them into a text file, remove any line breaks, change any details necessary to match your network configuration, and then copy and paste the commands into the CLI at the [edit] hierarchy level.

Step-by-Step Procedure

1. Configure the master (root) logical and lt-0/0/0.1 interfaces.
   [edit interfaces]user@host# set ge-0/0/4 vlan-tagginguser@host# set ge-0/0/4 unit 0 vlan-id 600user@host# set ge-0/0/4 unit 0 family inet address 12.12.1.1/24user@host# set lt-0/0/0 unit 1 encapsulation ethernetuser@host# set lt-0/0/0 unit 1 peer-unit 0user@host# set lt-0/0/0 unit 1 family inet address 10.0.1.1/24
2. Configure the interfaces for other logical systems to support VLAN tagging.
   [edit interfaces]user@host# set ge-0/0/5 vlan-tagginguser@host# set ge-0/0/6 vlan-tagginguser@host# set ge-0/0/7 vlan-tagging
3. Configure a routing instance for the master logical system, assign its interfaces to it, and configure static routes for it.
   [edit routing-instances]user@host# set vr1-root instance-type virtual-routeruser@host# set vr1-root interface ge-0/0/4.0 user@host# set vr1-root interface lt-0/0/0.1 user@host# set vr1-root routing-options static route 12.1.1.0/24 next-hop 10.0.1.2user@host# set vr1-root routing-options static route 13.1.1.0/24 next-hop 10.0.1.3user@host# set vr1-root routing-options static route 14.1.1.0/24 next-hop 10.0.1.4

Results

From configuration mode, confirm your configuration by entering the show interfaces and show routing-instances commands. If the output does not display the intended configuration, repeat the configuration instructions in this example to correct it.

If you are done configuring the device, enter commit from configuration mode.

Configuring Logical Tunnel Interfaces for the User Logical Systems

CLI Quick Configuration

To quickly configure this section of the example, copy the following commands, paste them into a text file, remove any line breaks, change any details necessary to match your network configuration, and then copy and paste the commands into the CLI at the [edit] hierarchy level.

Step-by-Step Procedure

1. Configure the lt-0/0/0 interface for the first user logical system:
   [edit logical-systems]user@host# set ls-product-design interfaces lt-0/0/0 unit 3 encapsulation ethernet user@host# set ls-product-design interfaces lt-0/0/0 unit 3 peer-unit 2 user@host# set ls-product-design interfaces lt-0/0/0 unit 3 family inet address 10.0.1.2/24
2. Configure the lt-0/0/0 interface for the second user logical system.
   [edit logical-systems]user@host# set ls-marketing-dept interfaces lt-0/0/0 unit 5 encapsulation ethernet user@host# set ls-marketing-dept interfaces lt-0/0/0 unit 5 peer-unit 4 user@host# set ls-marketing-dept interfaces lt-0/0/0 unit 5 family inet address 10.0.1.3/24 face
3. Configure the lt-0/0/0 interface for the third user logical system.
   [edit logical-systems]user@host# set ls-accounting-dept interfaces lt-0/0/0 unit 7 encapsulation ethernet user@host# set ls-accounting-dept interfaces lt-0/0/0 unit 7 peer-unit 6 user@host# set ls-accounting-dept interfaces lt-0/0/0 unit 7 family inet address 10.0.1.4/24

Results

From configuration mode, confirm your configuration by entering the show logical-systems ls-product-design interfaces lt-0/0/0, show logical-systems ls-marketing-dept interfaces lt-0/0/0 , and show logical-systems ls-accounting-dept interfaces lt-0/0/0 commands. If the output does not display the intended configuration, repeat the configuration instructions in this example to correct it.

If you are done configuring the device, enter commit from configuration mode.

Verification

To confirm that the configuration is working properly, perform these tasks:

• Verifying That the Static Routes Configured for the Master Administrator Are Correct

Verifying That the Static Routes Configured for the Master Administrator Are Correct

Purpose

Verify if you can send data from the master logical system to the other logical systems.

Action

From operational mode, use the ping command.