Configuring the MX Series Router in the Contrail Cloud Implementation for a Centralized Deployment
Before you configure the MX Series router, complete any basic setup procedures and install the correct Junos OS software release on the switch.
To configure the MX Series router:
- Configure interfaces, IP addresses, and basic routing
settings. For example:user@router# set interfaces ge-1/0/0 unit 0 family inet address 10.87.24.77/28user@router# set interfaces lo0 unit 0 family inet address 172.16.100.1/32user@router# set routing-options route-distinguisher-id 172.16.100.1user@router# set routing-options autonomous-system 64512user@router# set protocols ospf area 0.0.0.0 interface lo0.0user@router# set interfaces ge-1/0/0 unit 0 family inet service input service-set s1 service-filter ingress-1user@router# set interfaces ge-1/0/0 unit 0 family inet service output service-set s1 service-filter ingress-1
- Configure the interfaces that connect to the QFX Series
switch. For example:user@router# set chassis aggregated-devices ethernet device-count 2user@router# set interfaces xe-0/0/0 gigether-options 802.3ad ae0user@router# set interfaces xe-0/0/1 gigether-options 802.3ad ae0user@router# set interfaces ae0 aggregated-ether-options lacp periodic fastuser@router# set interfaces ae0 unit 0 family inet service input service-set s1 service-filter ingress-1user@router# set interfaces ae0 unit 0 family inet service output service-set s1 service-filter ingress-1user@router# set interfaces ae0 unit 0 family inet address 172.16.10.254/24user@router# set protocols ospf area 0.0.0.0 interface ae0.0
- Configure BGP and tunneling for the service provider’s
cloud. For example:user@router# set chassis fpc 0 pic 0 tunnel-servicesuser@router# set chassis fpc 0 pic 0 inline-services bandwidth 1guser@router# set routing-options dynamic-tunnels dynamic_overlay_tunnels source-address 172.16.100.1user@router# set routing-options dynamic-tunnels dynamic_overlay_tunnels greuser@router# set routing-options dynamic-tunnels dynamic_overlay_tunnels destination-networks 172.16.80.0/24user@router# set protocols mpls interface alluser@router# set protocols bgp group Contrail_Controller type internaluser@router# set protocols bgp group Contrail_Controller local-address 172.16.100.1user@router# set protocols bgp group Contrail_Controller keep alluser@router# set protocols bgp group Contrail_Controller family inet-vpn unicastuser@router# set protocols bgp group Contrail_Controller neighbor 172.16.80.2user@router# set protocols bgp group Contrail_Controller neighbor 172.16.80.3user@router# set protocols ospf export leak-default-only
- Set up routing. For example:user@router# set routing-options static rib-group inet-to-publicuser@router# set routing-options static route 0.0.0.0/0 next-hop 10.87.24.78user@router# set routing-options static route 0.0.0.0/0 retainuser@router# set routing-options static route 10.87.24.64/26 next-table public.inet.0user@router# set routing-options rib-groups inet-to-public import-rib inet.0user@router# set routing-options rib-groups inet-to-public import-rib public.inet.0user@router# set routing-options rib-groups inet-to-public import-policy leak-default-onlyuser@router# set policy-options policy-statement leak-default-only term default from route-filter 0.0.0.0/0 exactuser@router# set policy-options policy-statement leak-default-only term default then acceptuser@router# set policy-options policy-statement leak-default-only then rejectuser@router# set routing-instances public instance-type vrfuser@router# set routing-instances public interface lo0.10user@router# set routing-instances public vrf-target target:64512:10000user@router# set routing-instances public vrf-table-labeluser@router# set routing-instances public routing-options static route 10.87.24.64/26 discard
- Configure NAT. For example:user@router# set services service-set s1 nat-rules rule-napt-zoneuser@router# set services service-set s1 interface-service service-interface si-0/0/0.0user@router# set services nat pool contrailui address 10.87.24.81/32user@router# set services nat pool openstack address 10.87.24.82/32user@router# set services nat pool jumphost address 10.87.24.83/32user@router# set services nat rule rule-napt-zone term t1 from source-address 172.16.80.2/32user@router# set services nat rule rule-napt-zone term t1 then translated source-pool openstackuser@router# set services nat rule rule-napt-zone term t1 then translated translation-type basic-nat44user@router# set services nat rule rule-napt-zone term t2 from source-address 172.16.80.4/32user@router# set services nat rule rule-napt-zone term t2 then translated source-pool contrailuiuser@router# set services nat rule rule-napt-zone term t2 then translated translation-type basic-nat44user@router# set services nat rule rule-napt-zone term t3 from source-address 172.16.70.1/32user@router# set services nat rule rule-napt-zone term t3 then translated source-pool jumphostuser@router# set services nat rule rule-napt-zone term t3 then translated translation-type basic-nat44user@router# set firewall family inet service-filter ingress-1 term t1 from source-address 172.16.80.2/32user@router# set firewall family inet service-filter ingress-1 term t1 from protocol tcpuser@router# set firewall family inet service-filter ingress-1 term t1 from destination-port-except 179user@router# set firewall family inet service-filter ingress-1 term t1 then serviceuser@router# set firewall family inet service-filter ingress-1 term t2 from source-address 172.16.80.4/32user@router# set firewall family inet service-filter ingress-1 term t2 then serviceuser@router# set firewall family inet service-filter ingress-1 term t3 from source-address 172.16.70.1/32user@router# set firewall family inet service-filter ingress-1 term t3 then serviceuser@router# set firewall family inet service-filter ingress-1 term end then skip