付録:このファブリックからのJunos設定
キャンパスファブリックコアディストリビューションCRB構成
このセクションには、eBGP を使用したコア スイッチとディストリビューション スイッチ上の IP ファブリック アンダーレイ用のジュニパー Mist クラウドからの設定出力が表示されます。
Mistには以下のオプションがあります(デフォルトは括弧内)。
- BGPローカルAS(65001)
- ループバックプール(172.16.254.0/23)
- サブネット(10.255.240.0/20)- 隣接するレイヤー間のポイントツーポイントインターフェイス
コア層とディストリビューション層の間のキャンパスファブリック全体で、MistはECMPを使用したパケット単位(Junos OSではこれをフロー単位と定義しています)のロードバランシングと、BFDを使用してリンクまたはノード障害が発生した場合のBGPの高速コンバージェンスを可能にします。
Core1の構成:
- 2つの分散型スイッチ間の相互接続:
set interfaces xe-1/0/5 description evpn_downlink-to-d8539a646fc0 set interfaces xe-1/0/5 unit 0 family inet address 10.255.240.6/31 set interfaces xe-1/0/6 description evpn_downlink-to-d8539a64b5c0 set interfaces xe-1/0/6 unit 0 family inet address 10.255.240.8/31
- ループバックインターフェイスとルーター IDおよびAS:
set groups top interfaces lo0 unit 0 family inet address 172.16.254.2/32 set groups top routing-options router-id 172.16.254.2 set groups top routing-options autonomous-system 65002
- パケット単位のロードバランシング:
set groups top policy-options policy-statement ecmp_policy then load-balance per-packet set groups top policy-options policy-statement ecmp_policy then accept set groups top routing-options forwarding-table export ecmp_policy
- 2 つの分散型スイッチ間のアンダーレイ ネットワークBGP:
set protocols bgp group evpn_underlay type external set protocols bgp group evpn_underlay log-updown set protocols bgp group evpn_underlay import evpn_underlay_import set protocols bgp group evpn_underlay family inet unicast set protocols bgp group evpn_underlay authentication-key "xyz" set protocols bgp group evpn_underlay export evpn_underlay_export set protocols bgp group evpn_underlay local-as 65002 set protocols bgp group evpn_underlay multipath multiple-as set protocols bgp group evpn_underlay bfd-liveness-detection minimum-interval 350 set protocols bgp group evpn_underlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_underlay neighbor 10.255.240.7 peer-as 65003 set protocols bgp group evpn_underlay neighbor 10.255.240.9 peer-as 65004 set protocols bgp graceful-restart
Core2の構成:
- 2つの分散型スイッチ間の相互接続:
set interfaces xe-1/0/4 description evpn_downlink-to-d8539a646fc0 set interfaces xe-1/0/4 unit 0 family inet address 10.255.240.2/31 set interfaces xe-1/0/5 description evpn_downlink-to-d8539a64b5c0 set interfaces xe-1/0/5 unit 0 family inet address 10.255.240.4/31
- ループバックインターフェイスとルーター IDおよびAS:
set groups top interfaces lo0 unit 0 family inet address 172.16.254.1/32 set groups top routing-options router-id 172.16.254.1 set groups top routing-options autonomous-system 65001
- パケット単位のロードバランシング:
set groups top policy-options policy-statement ecmp_policy then load-balance per-packet set groups top policy-options policy-statement ecmp_policy then accept set groups top routing-options forwarding-table export ecmp_policy
- 2 つの分散型スイッチ間のアンダーレイ ネットワークBGP、
set protocols bgp group evpn_underlay type external set protocols bgp group evpn_underlay log-updown set protocols bgp group evpn_underlay import evpn_underlay_import set protocols bgp group evpn_underlay family inet unicast set protocols bgp group evpn_underlay authentication-key "xyz" set protocols bgp group evpn_underlay export evpn_underlay_export set protocols bgp group evpn_underlay local-as 65001 set protocols bgp group evpn_underlay multipath multiple-as set protocols bgp group evpn_underlay bfd-liveness-detection minimum-interval 350 set protocols bgp group evpn_underlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_underlay neighbor 10.255.240.3 peer-as 65003 set protocols bgp group evpn_underlay neighbor 10.255.240.5 peer-as 65004 set protocols bgp graceful-restart
Dist1の設定:
- 2つのコアスイッチ間の相互接続:
# Core Interfaces: set interfaces xe-0/0/4 description evpn_uplink-to-f4b52ff3f400 set interfaces xe-0/0/4 unit 0 family inet address 10.255.240.3/31 set interfaces xe-0/0/5 description evpn_uplink-to-f4b52ff40400 set interfaces xe-0/0/5 unit 0 family inet address 10.255.240.7/31
- ループバックインターフェイスとルーター ID:
set groups top interfaces lo0 unit 0 family inet address 172.16.254.3/32 set groups top routing-options router-id 172.16.254.3 set groups top routing-options autonomous-system 65003
- パケット単位のロードバランシング:
set groups top policy-options policy-statement ecmp_policy then load-balance per-packet set groups top policy-options policy-statement ecmp_policy then accept set groups top routing-options forwarding-table export ecmp_policy
- アンダーレイネットワークを2台のコアスイッチに接続BGP:
set protocols bgp group evpn_underlay type external set protocols bgp group evpn_underlay log-updown set protocols bgp group evpn_underlay import evpn_underlay_import set protocols bgp group evpn_underlay family inet unicast set protocols bgp group evpn_underlay authentication-key "xyz" set protocols bgp group evpn_underlay export evpn_underlay_export set protocols bgp group evpn_underlay local-as 65003 set protocols bgp group evpn_underlay multipath multiple-as set protocols bgp group evpn_underlay bfd-liveness-detection minimum-interval 350 set protocols bgp group evpn_underlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_underlay neighbor 10.255.240.2 peer-as 65001 set protocols bgp group evpn_underlay neighbor 10.255.240.6 peer-as 65002 set protocols bgp graceful-restart
Dist2の設定:
- 2つのコアスイッチ間の相互接続:
# Core Interfaces: set interfaces xe-0/0/5 description evpn_uplink-to-f4b52ff3f400 set interfaces xe-0/0/5 unit 0 family inet address 10.255.240.5/31 set interfaces xe-0/0/6 description evpn_uplink-to-f4b52ff40400 set interfaces xe-0/0/6 unit 0 family inet address 10.255.240.9/31
- ループバックインターフェイスとルーター ID:
set groups top interfaces lo0 unit 0 family inet address 172.16.254.4/32 set groups top routing-options router-id 172.16.254.4 set groups top routing-options autonomous-system 65004
- パケット単位のロードバランシング:
set groups top policy-options policy-statement ecmp_policy then load-balance per-packet set groups top policy-options policy-statement ecmp_policy then accept set groups top routing-options forwarding-table export ecmp_policy
- BGPコアスイッチへのアンダーレイネットワーク:
set protocols bgp group evpn_underlay type external set protocols bgp group evpn_underlay log-updown set protocols bgp group evpn_underlay import evpn_underlay_import set protocols bgp group evpn_underlay family inet unicast set protocols bgp group evpn_underlay authentication-key "xyz" set protocols bgp group evpn_underlay export evpn_underlay_export set protocols bgp group evpn_underlay local-as 65004 set protocols bgp group evpn_underlay multipath multiple-as set protocols bgp group evpn_underlay bfd-liveness-detection minimum-interval 350 set protocols bgp group evpn_underlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_underlay neighbor 10.255.240.4 peer-as 65001 set protocols bgp group evpn_underlay neighbor 10.255.240.8 peer-as 65002 set protocols bgp graceful-restart
EVPN VXLANオーバーレイと仮想ネットワークの設定
このセクションでは、eBGP を使用したコア スイッチとディストリビューション スイッチ上の EVPN VXLAN オーバーレイの ジュニパー Mist クラウド設定出力を表示します。
Mistは、コア層とディストリビューション層の間にBFDを使用することで、オーバーレイネットワーク全体でのロードバランシングと、リンクやノード障害が発生した場合のBGPの高速コンバージェンスを可能にします。
Mistは、ディストリビューションレイヤーでL3 IRBインターフェイスをプロビジョニングします。
Mistは、ディストリビューションスイッチとコアスイッチで、VXLANトンネリング、VLANからVXLANへのマッピング、およびvrfターゲットなどのMP BGP設定スニペットを可能にします。
トラフィック分離用のVRFは、分散型スイッチ上にプロビジョニングされます。
Core1の構成:
- 2 つの分散型スイッチ間のオーバーレイ ピアリングをBGPします。
set protocols bgp group evpn_overlay type external set protocols bgp group evpn_overlay multihop ttl 1 set protocols bgp group evpn_overlay multihop no-nexthop-change set protocols bgp group evpn_overlay local-address 172.16.254.2 set protocols bgp group evpn_overlay log-updown set protocols bgp group evpn_overlay family evpn signaling loops 2 set protocols bgp group evpn_overlay authentication-key "xyz" set protocols bgp group evpn_overlay local-as 65002 set protocols bgp group evpn_overlay multipath multiple-as set protocols bgp group evpn_overlay bfd-liveness-detection minimum-interval 1000 set protocols bgp group evpn_overlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_overlay bfd-liveness-detection session-mode automatic set protocols bgp group evpn_overlay neighbor 172.16.254.3 peer-as 65003 set protocols bgp group evpn_overlay neighbor 172.16.254.4 peer-as 65004
- VXLANに使用するvrfターゲットと送信元ループバックインターフェイスを定義するスイッチオプション:
set groups top routing-instances evpn_vs vtep-source-interface lo0.0 set groups top routing-instances evpn_vs route-distinguisher 172.16.254.2:1 set groups top routing-instances evpn_vs vrf-target target:65000:1
- VXLANカプセル化:
set groups top routing-instances evpn_vs protocols evpn encapsulation vxlan set groups top routing-instances evpn_vs protocols evpn default-gateway no-gateway-community set groups top routing-instances evpn_vs protocols evpn extended-vni-list all
- VLANからVXLANへのマッピング:
set groups top routing-instances evpn_vs vlans vlan1033 vlan-id 1033 set groups top routing-instances evpn_vs vlans vlan1033 vxlan vni 11033 set groups top routing-instances evpn_vs vlans vlan1088 vlan-id 1088 set groups top routing-instances evpn_vs vlans vlan1088 vxlan vni 11088 set groups top routing-instances evpn_vs vlans vlan1099 vlan-id 1099 set groups top routing-instances evpn_vs vlans vlan1099 vxlan vni 11099
- トラフィック分離に使用されるVRF:
set groups top routing-instances guest-wifi instance-type vrf set groups top routing-instances guest-wifi interface irb.1033 set groups top routing-instances guest-wifi routing-options static route 0.0.0.0/0 next-hop [ 10.33.33.254 ] set groups top routing-instances guest-wifi routing-options auto-export set groups top routing-instances guest-wifi routing-options multipath set groups top routing-instances guest-wifi route-distinguisher 172.16.254.2:103 set groups top routing-instances guest-wifi vrf-target target:65000:103 set groups top routing-instances guest-wifi vrf-table-label set groups top routing-instances guest-wifi interface lo0.3 set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes vni 15560868 set groups top routing-instances developers instance-type vrf set groups top routing-instances developers interface irb.1088 set groups top routing-instances developers routing-options static route 0.0.0.0/0 next-hop [ 10.88.88.254 ] set groups top routing-instances developers routing-options auto-export set groups top routing-instances developers routing-options multipath set groups top routing-instances developers route-distinguisher 172.16.254.2:102 set groups top routing-instances developers vrf-target target:65000:102 set groups top routing-instances developers vrf-table-label set groups top routing-instances developers interface lo0.2 set groups top routing-instances developers protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances developers protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances developers protocols evpn ip-prefix-routes vni 15600414 set groups top routing-instances corp-it instance-type vrf set groups top routing-instances corp-it interface irb.1099 set groups top routing-instances corp-it routing-options static route 0.0.0.0/0 next-hop [ 10.99.99.254 ] set groups top routing-instances corp-it routing-options auto-export set groups top routing-instances corp-it routing-options multipath set groups top routing-instances corp-it route-distinguisher 172.16.254.2:101 set groups top routing-instances corp-it vrf-target target:65000:101 set groups top routing-instances corp-it vrf-table-label set groups top routing-instances corp-it interface lo0.1 set groups top routing-instances corp-it protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances corp-it protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances corp-it protocols evpn ip-prefix-routes vni 11284517
- 仮想ゲートウェイアドレッシングによるL3 IRBインターフェイスの有効化:
set interfaces irb unit 1033 family inet address 10.33.33.2/24 virtual-gateway-address 10.33.33.1 set interfaces irb unit 1033 family inet mtu 9000 set interfaces irb unit 1033 description vlan1033 set interfaces irb unit 1033 proxy-macip-advertisement set interfaces irb unit 1033 virtual-gateway-accept-data set interfaces irb unit 1088 family inet address 10.88.88.2/24 virtual-gateway-address 10.88.88.1 set interfaces irb unit 1088 family inet mtu 9000 set interfaces irb unit 1088 description vlan1088 set interfaces irb unit 1088 proxy-macip-advertisement set interfaces irb unit 1088 virtual-gateway-accept-data set interfaces irb unit 1099 family inet address 10.99.99.2/24 virtual-gateway-address 10.99.99.1 set interfaces irb unit 1099 family inet mtu 9000 set interfaces irb unit 1099 description vlan1099 set interfaces irb unit 1099 proxy-macip-advertisement set interfaces irb unit 1099 virtual-gateway-accept-data
Core2の構成:
- 2つの分散型スイッチ間のオーバーレイピアリングBGP:
set protocols bgp group evpn_overlay type external set protocols bgp group evpn_overlay multihop ttl 1 set protocols bgp group evpn_overlay multihop no-nexthop-change set protocols bgp group evpn_overlay local-address 172.16.254.1 set protocols bgp group evpn_overlay log-updown set protocols bgp group evpn_overlay family evpn signaling loops 2 set protocols bgp group evpn_overlay authentication-key "xyz" set protocols bgp group evpn_overlay local-as 65001 set protocols bgp group evpn_overlay multipath multiple-as set protocols bgp group evpn_overlay bfd-liveness-detection minimum-interval 1000 set protocols bgp group evpn_overlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_overlay bfd-liveness-detection session-mode automatic set protocols bgp group evpn_overlay neighbor 172.16.254.3 peer-as 65003 set protocols bgp group evpn_overlay neighbor 172.16.254.4 peer-as 65004
- VXLANに使用するvrfターゲットと送信元ループバックインターフェイスを定義するスイッチオプション:
set groups top routing-instances evpn_vs vtep-source-interface lo0.0 set groups top routing-instances evpn_vs route-distinguisher 172.16.254.1:1 set groups top routing-instances evpn_vs vrf-target target:65000:1
- VXLANカプセル化:
set groups top routing-instances evpn_vs protocols evpn encapsulation vxlan set groups top routing-instances evpn_vs protocols evpn default-gateway no-gateway-community set groups top routing-instances evpn_vs protocols evpn extended-vni-list all
- VLANからVXLANへのマッピング:
set groups top routing-instances evpn_vs vlans vlan1033 vlan-id 1033 set groups top routing-instances evpn_vs vlans vlan1033 vxlan vni 11033 set groups top routing-instances evpn_vs vlans vlan1088 vlan-id 1088 set groups top routing-instances evpn_vs vlans vlan1088 vxlan vni 11088 set groups top routing-instances evpn_vs vlans vlan1099 vlan-id 1099 set groups top routing-instances evpn_vs vlans vlan1099 vxlan vni 11099
- トラフィック分離に使用されるVRF:
set groups top routing-instances guest-wifi instance-type vrf set groups top routing-instances guest-wifi interface irb.1033 set groups top routing-instances guest-wifi routing-options static route 0.0.0.0/0 next-hop [ 10.33.33.254 ] set groups top routing-instances guest-wifi routing-options auto-export set groups top routing-instances guest-wifi routing-options multipath set groups top routing-instances guest-wifi route-distinguisher 172.16.254.1:103 set groups top routing-instances guest-wifi vrf-target target:65000:103 set groups top routing-instances guest-wifi vrf-table-label set groups top routing-instances guest-wifi interface lo0.3 set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes vni 15560868 set groups top routing-instances developers instance-type vrf set groups top routing-instances developers interface irb.1088 set groups top routing-instances developers routing-options static route 0.0.0.0/0 next-hop [ 10.88.88.254 ] set groups top routing-instances developers routing-options auto-export set groups top routing-instances developers routing-options multipath set groups top routing-instances developers route-distinguisher 172.16.254.1:102 set groups top routing-instances developers vrf-target target:65000:102 set groups top routing-instances developers vrf-table-label set groups top routing-instances developers interface lo0.2 set groups top routing-instances developers protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances developers protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances developers protocols evpn ip-prefix-routes vni 15600414 set groups top routing-instances corp-it instance-type vrf set groups top routing-instances corp-it interface irb.1099 set groups top routing-instances corp-it routing-options static route 0.0.0.0/0 next-hop [ 10.99.99.254 ] set groups top routing-instances corp-it routing-options auto-export set groups top routing-instances corp-it routing-options multipath set groups top routing-instances corp-it route-distinguisher 172.16.254.1:101 set groups top routing-instances corp-it vrf-target target:65000:101 set groups top routing-instances corp-it vrf-table-label set groups top routing-instances corp-it interface lo0.1 set groups top routing-instances corp-it protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances corp-it protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances corp-it protocols evpn ip-prefix-routes vni 11284517
- 仮想ゲートウェイアドレッシングによるL3 IRBインターフェイスの有効化:
set interfaces irb unit 1033 family inet address 10.33.33.3/24 virtual-gateway-address 10.33.33.1 set interfaces irb unit 1033 family inet mtu 9000 set interfaces irb unit 1033 description vlan1033 set interfaces irb unit 1033 proxy-macip-advertisement set interfaces irb unit 1033 virtual-gateway-accept-data set interfaces irb unit 1088 family inet address 10.88.88.3/24 virtual-gateway-address 10.88.88.1 set interfaces irb unit 1088 family inet mtu 9000 set interfaces irb unit 1088 description vlan1088 set interfaces irb unit 1088 proxy-macip-advertisement set interfaces irb unit 1088 virtual-gateway-accept-data set interfaces irb unit 1099 family inet address 10.99.99.3/24 virtual-gateway-address 10.99.99.1 set interfaces irb unit 1099 family inet mtu 9000 set interfaces irb unit 1099 description vlan1099 set interfaces irb unit 1099 proxy-macip-advertisement set interfaces irb unit 1099 virtual-gateway-accept-data
Dist1の設定:
- 2つのコアスイッチ間のオーバーレイピアリングBGP:
set protocols bgp group evpn_overlay type external set protocols bgp group evpn_overlay multihop ttl 1 set protocols bgp group evpn_overlay multihop no-nexthop-change set protocols bgp group evpn_overlay local-address 172.16.254.3 set protocols bgp group evpn_overlay log-updown set protocols bgp group evpn_overlay family evpn signaling loops 2 set protocols bgp group evpn_overlay authentication-key "xyz" set protocols bgp group evpn_overlay local-as 65003 set protocols bgp group evpn_overlay multipath multiple-as set protocols bgp group evpn_overlay bfd-liveness-detection minimum-interval 1000 set protocols bgp group evpn_overlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_overlay bfd-liveness-detection session-mode automatic set protocols bgp group evpn_overlay neighbor 172.16.254.1 peer-as 65001 set protocols bgp group evpn_overlay neighbor 172.16.254.2 peer-as 65002
- VXLANに使用するvrfターゲットと送信元ループバックインターフェイスを定義するスイッチオプション:
set groups top switch-options vtep-source-interface lo0.0 set groups top switch-options route-distinguisher 172.16.254.3:1 set groups top switch-options vrf-target target:65000:1
- VXLANカプセル化:
set groups top protocols evpn encapsulation vxlan set groups top protocols evpn default-gateway no-gateway-community set groups top protocols evpn extended-vni-list all
- VLANからVXLANへのマッピング:
set vlans vlan1033 vlan-id 1033 set vlans vlan1033 vxlan vni 11033 set vlans vlan1088 vlan-id 1088 set vlans vlan1088 vxlan vni 11088 set vlans vlan1099 vlan-id 1099 set vlans vlan1099 vxlan vni 11099
Dist2の設定:
- 2つのコアスイッチ間のオーバーレイピアリングBGP:
set protocols bgp group evpn_overlay type external set protocols bgp group evpn_overlay local-address 172.16.254.4 set protocols bgp group evpn_overlay local-as 65004 set protocols bgp group evpn_overlay multipath multiple-as set protocols bgp group evpn_overlay authentication-key "xyz" set protocols bgp group evpn_overlay family evpn signaling loops 2 set protocols bgp group evpn_overlay log-updown set protocols bgp group evpn_overlay bfd-liveness-detection minimum-interval 1000 set protocols bgp group evpn_overlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_overlay bfd-liveness-detection session-mode automatic set protocols bgp group evpn_overlay multihop ttl 1 set protocols bgp group evpn_overlay multihop no-nexthop-change set protocols bgp group evpn_overlay neighbor 172.16.254.1 peer-as 65001 set protocols bgp group evpn_overlay neighbor 172.16.254.2 peer-as 65002
- VXLANに使用するvrfターゲットと送信元ループバックインターフェイスを定義するスイッチオプション:
set groups top switch-options vtep-source-interface lo0.0 set groups top switch-options route-distinguisher 172.16.254.4:1 set groups top switch-options vrf-target target:65000:1
- VXLANカプセル化:
set groups top protocols evpn encapsulation vxlan set groups top protocols evpn default-gateway no-gateway-community set groups top protocols evpn extended-vni-list all
- VLANからVXLANへのマッピング:
set vlans vlan1033 vlan-id 1033 set vlans vlan1033 vxlan vni 11033 set vlans vlan1088 vlan-id 1088 set vlans vlan1088 vxlan vni 11088 set vlans vlan1099 vlan-id 1099 set vlans vlan1099 vxlan vni 11099
分散型スイッチとアクセススイッチ間のレイヤー2 ESI-LAGの設定
このセクションには、ディストリビューションスイッチとアクセススイッチ間のレイヤー2 ESI-LAGを有効にするためのジュニパーMistクラウドからの設定出力が表示されます。このMistプロファイルでは、必要なESIおよびLACP設定オプションを使用して、イーサネットバンドル上のすべてのVLANを有効にします。アクセス スイッチの観点から見ると、アクセス レイヤーに設定されたイーサネット バンドルは、ESI-LAG を同じ LACP システム ID を持つ単一の MACアドレスと見なします。これにより、RSTPなどのL2ループフリー検出プロトコルを必要とせずに、ディストリビューション層とアクセス層間のロードハッシュが可能になります。
への接続
Dist1の設定:
- ESIおよびLACP設定を含む、新しく作成されたイーサネットバンドルとのインターフェイスの関連付け:
set interfaces ae11 apply-groups crb-lag set interfaces ae11 esi all-active set interfaces ae11 esi 00:11:00:00:00:01:00:01:03:0b set interfaces ae11 aggregated-ether-options lacp active set interfaces ae11 aggregated-ether-options lacp periodic fast set interfaces ae11 aggregated-ether-options lacp system-id 00:00:00:31:57:0b set interfaces ae11 aggregated-ether-options lacp admin-key 11 set interfaces ae12 apply-groups crb-lag set interfaces ae12 esi all-active set interfaces ae12 esi 00:11:00:00:00:01:00:01:03:0c set interfaces ae12 aggregated-ether-options lacp active set interfaces ae12 aggregated-ether-options lacp periodic fast set interfaces ae12 aggregated-ether-options lacp system-id 00:00:00:31:57:0c set interfaces ae12 aggregated-ether-options lacp admin-key 12 set groups crb-lag interfaces <*> unit 0 family ethernet-switching interface-mode trunk set groups crb-lag interfaces <*> unit 0 family ethernet-switching vlan members [ vlan1033 vlan1088 vlan1099 ] set groups crb-lag interfaces <*> mtu 9100 set interfaces ge-0/0/36 ether-options 802.3ad ae11 set interfaces ge-0/0/36 description esilag-to-00cc34f3cf00 set interfaces ge-0/0/36 hold-time up 120000 down 1 set interfaces ge-0/0/37 ether-options 802.3ad ae12 set interfaces ge-0/0/37 description esilag-to-00cc34f3cf00 set interfaces ge-0/0/37 hold-time up 120000 down 1
Dist2の設定:
- ESIおよびLACP設定を含む、新しく作成されたイーサネットバンドルとのインターフェイスの関連付け:
set interfaces ae11 apply-groups crb-lag set interfaces ae11 esi all-active set interfaces ae11 esi 00:11:00:00:00:01:00:01:03:0b set interfaces ae11 aggregated-ether-options lacp active set interfaces ae11 aggregated-ether-options lacp periodic fast set interfaces ae11 aggregated-ether-options lacp system-id 00:00:00:31:57:0b set interfaces ae11 aggregated-ether-options lacp admin-key 11 set interfaces ae12 apply-groups crb-lag set interfaces ae12 esi all-active set interfaces ae12 esi 00:11:00:00:00:01:00:01:03:0c set interfaces ae12 aggregated-ether-options lacp active set interfaces ae12 aggregated-ether-options lacp periodic fast set interfaces ae12 aggregated-ether-options lacp system-id 00:00:00:31:57:0c set interfaces ae12 aggregated-ether-options lacp admin-key 12 set groups crb-lag interfaces <*> unit 0 family ethernet-switching interface-mode trunk set groups crb-lag interfaces <*> unit 0 family ethernet-switching vlan members [ vlan1033 vlan1088 vlan1099 ] set groups crb-lag interfaces <*> mtu 9100 set interfaces ge-0/0/36 description esilag-to-00cc34f3cf00 set interfaces ge-0/0/36 hold-time up 120000 set interfaces ge-0/0/36 hold-time down 1 set interfaces ge-0/0/36 ether-options 802.3ad ae12 set interfaces ge-0/0/37 description esilag-to-00cc34f3cf00 set interfaces ge-0/0/37 hold-time up 120000 set interfaces ge-0/0/37 hold-time down 1 set interfaces ge-0/0/37 ether-options 802.3ad ae11
アクセス設定:
- 新しいLACPイーサネットバンドルに関連付けられたVLAN:
set groups crb-lag interfaces <*> unit 0 family ethernet-switching interface-mode trunk set groups crb-lag interfaces <*> unit 0 family ethernet-switching vlan members [ vlan1033 vlan1088 vlan1099 ] set groups crb-lag interfaces <*> mtu 9100 set interfaces ae11 apply-groups crb-lag set interfaces ae11 aggregated-ether-options lacp active set interfaces ge-0/0/36 ether-options 802.3ad ae11 set interfaces ge-0/0/37 ether-options 802.3ad ae11
コアスイッチとMXルーター間のレイヤー2 ESI-LAGの設定
このセクションには、コアスイッチとMXルーター間のレイヤー2 ESI-LAGを有効にするためのジュニパーMistクラウドからの設定出力が表示されます。このMistプロファイルでは、必要なESIおよびLACP設定オプションを使用して、イーサネットバンドル上のすべてのVLANを有効にします。MXルーターの観点から見ると、MXルーターに設定されたイーサネットバンドルは、ESI-LAGを同じLACPシステムIDを持つ単一のMACアドレスとして見なします。これにより、RSTPなどのL2ループフリー検出プロトコルを必要とせずに、コアとMXルーター間のロードハッシュが可能になります。
コア1の構成:
- ESIおよびLACP設定を含む、新しく作成されたイーサネットバンドルとのインターフェイスの関連付け:
set interfaces xe-1/0/0 hold-time up 120000 set interfaces xe-1/0/0 hold-time down 1 set interfaces xe-1/0/0 ether-options 802.3ad ae0 set interfaces xe-1/0/0 unit 0 family ethernet-switching storm-control default set groups myesilag interfaces <*> mtu 9014 set groups myesilag interfaces <*> unit 0 family ethernet-switching interface-mode trunk set groups myesilag interfaces <*> unit 0 family ethernet-switching vlan members all set interfaces ae0 apply-groups myesilag set interfaces ae0 esi 00:11:00:00:00:01:00:01:02:00 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 00:00:00:31:57:00 set interfaces ae0 aggregated-ether-options lacp admin-key 0
コア2の構成:
- ESIおよびLACP設定を含む、新しく作成されたイーサネットバンドルとのインターフェイスの関連付け:
set interfaces xe-1/0/1 hold-time up 120000 set interfaces xe-1/0/1 hold-time down 1 set interfaces xe-1/0/1 ether-options 802.3ad ae0 set interfaces xe-1/0/1 unit 0 family ethernet-switching storm-control default set groups myesilag interfaces <*> mtu 9014 set groups myesilag interfaces <*> unit 0 family ethernet-switching interface-mode trunk set groups myesilag interfaces <*> unit 0 family ethernet-switching vlan members all set interfaces ae0 apply-groups myesilag set interfaces ae0 esi 00:11:00:00:00:01:00:01:02:00 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 00:00:00:31:57:00 set interfaces ae0 aggregated-ether-options lacp admin-key 0
MXルーターの設定:
- 新しく作成されたイーサネットバンドルおよびLACP設定とのインターフェイスの関連付け:
set interfaces xe-0/0/0 gigether-options 802.3ad ae0 set interfaces xe-0/0/1 gigether-options 802.3ad ae0 set chassis aggregated-devices ethernet device-count 1 set interfaces ae0 mtu 9014 set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1033 set interfaces ae0 unit 0 family bridge vlan-id-list 1088 set interfaces ae0 unit 0 family bridge vlan-id-list 1099 set interfaces irb unit 1033 family inet address 10.33.33.254/24 set interfaces irb unit 1088 family inet address 10.88.88.254/24 set interfaces irb unit 1099 family inet address 10.99.99.254/24 set bridge-domains vlan1033 vlan-id 1033 set bridge-domains vlan1033 routing-interface irb.1033 set bridge-domains vlan1088 vlan-id 1088 set bridge-domains vlan1088 routing-interface irb.1088 set bridge-domains vlan1099 vlan-id 1099 set bridge-domains vlan1099 routing-interface irb.1099