예: EVPN-VXLAN 환경에서 IGMP 스누핑을 통해 대역폭 보존
이 예는 이더넷 VPN(EVPN)-가상 확장 가능 LAN의 프로바이더 에지(PE) 디바이스에서 IGMP 스누핑을 구성하는 방법을 보여줍니다. 멀티캐스트 트래픽이 VXLAN 코어에 도착하면 EVPN으로 구성된 PE 디바이스는 IGMP 리스너가 있는 로컬 액세스 인터페이스로만 트래픽을 전달합니다.
요구 사항
이 예에서 사용되는 하드웨어 및 소프트웨어 구성 요소는 다음과 같습니다.
CE에 연결된 멀티호밍 PE 디바이스로 구성된 2개의 QFX10000 스위치, 멀티호밍 PE에 연결된 PE 디바이스로 구성된 QFX10000 디바이스 1개, CE 디바이스로 구성된 QFX5110.
모든 디바이스에서 실행되는 Junos OS 릴리스 17.2R1 이상
개요
IGMP 스누핑은 브로드캐스트 도메인의 멀티캐스트 트래픽을 관심 있는 수신자 및 멀티캐스트 디바이스로 제한하는 데 사용됩니다. 멀티캐스트 트래픽이 많은 환경에서 멀티캐스트 트래픽은 IGMP 리스너가 있는 인터페이스에서만 전달되기 때문에 IGMP 스누핑은 대역폭을 보존합니다. IGMP는 멀티캐스트 그룹 구성원을 관리할 수 있습니다.
각 VLAN에서 IGMP 스누핑을 활성화하면 디바이스는 EVPN 유형 7 및 유형 8 경로(Join and Leave Sync Routes)를 광고하여 EVPN 인스턴스의 멀티호밍 피어 디바이스 간에 IGMP 조인 및 탈퇴 상태를 동기화합니다. 액세스 측에서 디바이스는 멀티캐스트 트래픽만 구독한 리스너에게 전달합니다. 그러나 멀티캐스트 트래픽은 원격 수신기가 없는 경우에도 EVPN 코어에서 여전히 플러딩됩니다.
EVPN-VXLAN 환경에서 IGMP 스누핑을 구성하려면 다음이 필요합니다.
all-active 모드의 멀티호밍 피어 PE 디바이스.
IGMP 버전 2 전용입니다. (IGMP 버전 1 및 3은 지원되지 않습니다.)
PE가 로컬 액세스 인터페이스에 대한 IGMP 쿼리 발생기가 되도록 프록시 모드로 구성된 IGMP 스누핑.
이 기능은 VLAN 내 및 VLAN 간 멀티캐스트 포워딩을 모두 지원합니다. 둘 중 하나 또는 둘 다를 수행하도록 PE 디바이스를 구성할 수 있습니다. 이 예에서는 VLAN 간 포워딩을 활성화하기 위해 각 PE 디바이스를 정적으로 정의된 PIM(Protocol Independent Multicast) RP(랑데부 포인트)로 구성하여 멀티캐스트 포워딩을 활성화합니다. 또한 각 IRB 인터페이스의 계층 수준에서 명령문을 [edit protocols pim interface interface-name] 구성합니다distributed-dr. 이 모드를 사용하면 PIM이 이 시나리오에서 필요하지 않은 PIM 기능을 사용하지 않도록 설정하여 멀티캐스트 트래픽을 보다 효율적으로 전달할 수 있습니다. 이 문을 구성하면 PIM은 인터페이스에서 수신된 IGMP 보고서를 처리할 때 인터페이스의 DR(지정 라우터) 상태를 무시합니다. 인터페이스가 IGMP 보고서를 수신하면 PE 디바이스는 인터페이스의 DR 상태에 관계없이 PIM 업스트림 가입 메시지를 전송하여 멀티캐스트 스트림을 끌어와 인터페이스로 전달합니다.
위상수학
그림 1 은 두 개의 PE 디바이스(PE1 및 PE2)가 고객 에지(CE) 디바이스에 연결된 EVPN-VXLAN 환경을 보여줍니다. 이러한 PE는 중복성을 제공하기 위해 액티브-액티브 모드에서 듀얼 아이홈입니다. 세 번째 PE 디바이스는 CE를 향하는 PE 디바이스로 트래픽을 전달합니다. IGMP는 통합 라우팅 및 브리징(IRB) 인터페이스에서 활성화됩니다. CE 디바이스는 5개의 VLAN을 호스팅합니다. IGMP 스누핑은 모든 VLAN에서 활성화됩니다. 이 구현은 멀티캐스트 라우터 사용을 지원하지 않으므로 PE의 각 VLAN은 IGMP 레이어 2 쿼리 발생기로 활성화됩니다. 멀티호밍 PE 디바이스는 IGMP 리스너가 있는 인터페이스에서만 CE를 향해 트래픽을 전달합니다.
그림 1: EVPN-VXLAN 환경
에서의 IGMP 스누핑
에서의 IGMP 스누핑
구성
EVPN-VXLAN 환경에서 IGMP 스누핑을 구성하려면 다음 작업을 수행하십시오.
CLI 빠른 구성
이 예를 빠르게 구성하려면, 아래 명령을 복사하여 텍스트 파일로 붙여 넣은 다음 모든 라인브레이크를 제거하고, 네트워크 구성을 일치하는 데 필요한 세부 사항을 변경하고, 계층 수준에서 명령을 CLI로 [edit] 복사해 붙여 넣은 다음, 구성 모드에서 을 입력합니다 commit .
디바이스 PE1
set chassis aggregated-devices ethernet device-count 2 set interfaces xe-0/0/0:1 description “Connected to CE” set interfaces xe-0/0/0:2 ether-options 802.3ad ae1 set interfaces xe-0/0/1:0 enable set interfaces xe-0/0/1:0 unit 0 description “Connected to PE3” set interfaces xe-0/0/1:0 unit 0 family inet address 192.0.2.1/24 set interfaces ae0 enable set interfaces ae1 enable set interfaces lo0 unit 0 family inet address 192.168.1.1/32 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 00:00:00:00:00:01 set interfaces ae0 unit 0 description “Connected to CE” set interfaces ae1 esi 00:22:22:22:22:22:22:22:22:22 set interfaces ae1 esi all-active set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options periodic fast set interfaces ae1 aggregated-ether-options lacp system id 00:00:00:00:00:02 set interfaces ae1 unit 0 description “Connected to CE” set interfaces ae0 family ethernet-switching interface-mode trunk set interfaces ae0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces ae1 unit 0 family ethernet-switching interface-mode trunk set interfaces ae1 unit 0 family ethernet-switching vlan [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces irb unit 1 family inet address 10.1.1.1/24 virtual-gateway-address 10.1.1.10 set interfaces irb unit 2 family inet address 10.2.1.1/24 virtual-gateway-address 10.2.1.10 set interfaces irb unit 3 family inet address 10.3.1.1/24 virtual-gateway-address 10.3.1.10 set interfaces irb unit 4 family inet address 10.4.1.1/24 virtual-gateway-address 10.4.1.10 set interfaces irb unit 5 family inet address 10.5.1.1/24 virtual-gateway-address 10.5.1.10 set routing-options router-id 192.168.1.1 set routing-options autonomous-system 65536 set protocols ospf area 0.0.0.0 interface xe-0/0/1:0.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols bgp group INT type internal set protocols bgp group INT local-address 192.168.1.1 set protocols bgp group INT family evpn signaling set protocols bgp group INT local-as 65536 set protocols bgp group INT neighbor 172.16.1.1 set vlans VLAN vlan-id 1 set vlans VLAN1 l3-interface irb.1 set vlans VLAN1 vxlan vni 1 set vlans VLAN2 vlan-id 2 set vlans VLAN2 l3-interface irb.2 set vlans VLAN2 vxlan vni2 set vlans VLAN3 vlan-id 3 set vlans VLAN3 l3-interface irb.3 set vlans VLAN3 vxlan vni 3 set vlans VLAN4 vlan-id 4 set vlans VLAN4 l3-interface irb.4 set vlans VLAN4 vxlan vni 4 set vlans VLAN5 vlan-id 5 set vlans VLAN5 l3-interface irb.5 set vlans VLAN5 vxlan vni 5 set protocols evpn encapsulation vxlan set protocols evpn ingress-replication set protocols evpn extended-vni-list 1-5 set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set routing-options forwarding-table export evpn-pplb set switch-options vtep-source-interface lo0:0 set switch-options route distinguisher 192.168.1.1:1 set switch-options vrf-target target:1:1 set protocols igmp interface irb.1 set protocols igmp interface irb.2 set protocols igmp interface irb.3 set protocols igmp interface irb.4 set protocols igmp interface irb.5 set protocols igmp-snooping vlan VLAN1 l2-querier source-address 10.1.1.1 set protocols igmp-snooping vlan VLAN1 proxy set protocols igmp-snooping vlan VLAN2 l2-querier source-address 10.2.1.1 set protocols igmp-snooping vlan VLAN2 proxy set protocols igmp-snooping vlan VLAN3 l2-querier source-address 10.3.1.1 set protocols igmp-snooping vlan VLAN3 proxy set protocols igmp-snooping vlan VLAN4 l2-querier source-address 10.4.1.1 set protocols igmp-snooping vlan VLAN4 proxy set protocols igmp-snooping vlan VLAN4 l2-querier source-address 10.5.1.1 set protocols igmp-snooping vlan VLAN5 proxy set protocols pim rp static address 172.16.1.1 set protocols pim interface irb.1 distributed-dr set protocols pim interface irb.2 distributed-dr set protocols pim interface irb.3 distributed-dr set protocols pim interface irb.4 distributed-dr set protocols pim interface irb.5 distributed-dr
디바이스 PE2
set chassis aggregated-devices ethernet device-count 2 set interfaces xe-0/0/0:0 ether-options 802.3ad ae1 set interfaces xe-0/0/0:1 description “Connected to CE” set interfaces xe-0/0/0:1 ether-options 802.3ad ae0 set interfaces xe-0/0/1:0 enable set interfaces xe-0/0/1:0 unit 0 description “Connected to PE3” set interfaces xe-0/0/1:0 family inet address 198.51.100.1/24 set interfaces ae0 enable set interfaces ae1 enable set interfaces lo0 unit 0 family inet address 192.168.2.1/32 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated ether-options lacp periodic fast set interfaces ae0 aggregated ether-options lacp system-id 00:00:00:00:00:01 set interfaces ae1 esi 00:22:22:22:22:22:22:22:22:22 set interfaces ae1 esi all-active set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options lacp periodic fast set interfaces ae1 aggregated-ether-options lacp system-id 00:00:00:00:00:02 set interfaces ae0 unit 0 description “Connected to CE” set interfaces ae0 unit family ethernet-switching interface-mode trunk set interfaces ae0 unit family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces ae1 unit 0 description “Connected to CE” set interfaces ae1 unit 0 family ethernet-switching interface-mode trunk set interfaces ae1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces irb unit 1 family inet address 10.1.1.2/24 virtual-gateway-address 10.1.1.10 set interfaces irb unit 2 family inet address 10.2.1.2/24 virtual-gateway-address 10.2.1.10 set interfaces irb unit 3 family inet address 10.3.1.2/24 virtual-gateway-address 10.3.1.10 set interfaces irb unit 4 family inet address 10.4.1.2/24 virtual-gateway-address 10.4.1.10 set interfaces irb unit 5 family inet address 10.5.1.2/24 virtual-gateway-address 10.5.1.10 set routing-options router-id 192.168.2.1 set routing-options autonomous-system 65536 set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols ospf area 0.0.0.0 interface xe-0/0/1:0.0 set protocols bgp group INT type internal set protocols bgp group INT local-address 192.168.2.1 set protocols bgp group INT family evpn signaling set protocols bgp group INT local-as 65536 set protocols bgp group INT neighbor 172.16.1.1 set vlans VLAN1 vlan-id 1 set vlans VLAN1 l3-interface irb.1 set vlans VLAN1 vxlan vni 1 set vlans VLAN2 vlan-id 2 set vlans VLAN2 l3-interface irb.2 set vlans VLAN2 vxlan vni 2 set vlans VLAN3 vlan-id 3 set vlans VLAN3 l3-interface irb.3 set vlans VLAN3 vxlan vni 3 set vlans VLAN4 vlan-id 4 set vlans VLAN4 l3-interface irb.4 set vlans VLAN4 vxlan vni 4 set vlans VLAN5 vlan-id 5 set vlans VLAN5 l3-interface irb.5 set vlans VLAN5 vxlan vni 3 set protocols evpn encapsulation vxlan set protocols evpn muticast-mode ingress-encapsulation set protocols evpn extended-vni-list 1-5 set policy-options policy statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set routing-options forwarding-table export evpn-pplb set switch-options vtep-source-interface lo0.0 set switch-options route-distinguisher 192.168.2.1:1 set switch-options vrf-target target:1:1 set protocols igmp interface irb.1 set protocols igmp interface irb.2 set protocols igmp interface irb.3 set protocols igmp interface irb.4 set protocols igmp interface irb.5 set protocols igmp-snooping vlan VLAN1 l2-querier source-address 10.1.1.2 set protocols igmp-snooping vlan VLAN1 proxy set protocols igmp-snooping vlan VLAN2 l2-querier source-address 10.2.1.2 set protocols igmp-snooping vlan VLAN2 proxy set protocols igmp-snooping vlan VLAN3 l2-querier source-address 10.3.1.2 set protocols igmp-snooping vlan VLAN3 proxy set protocols igmp-snooping vlan VLAN4 l2-querier source-address 10.4.1.2 set protocols igmp-snooping vlan VLAN4 proxy set protocols igmp-snooping vlan VLAN5 l2-querier source-address 10.5.1.2 set protocols igmp-snooping vlan VLAN5 proxy set protocols pim rp static address 172.16.1.1 set protocols pim interface irb.1 distributed-dr set protocols pim interface irb.2 distributed-dr set protocols pim interface irb.3 distributed-dr set protocols pim interface irb.4 distributed-dr set protocols pim interface irb.5 distributed-dr
세륨
set chassis aggregated devices ethernet device-count 2 set interfaces xe-0/2/0 ether-options 802.3ad ae0 set interfaces xe-0/2/1 ether-options 802.3ad ae0 set interfaces xe-0/2/0 unit 0 family ethernet-switching interface-mode trunk set interfaces xe-0/2/0 unit 0 family ethernet-switching vlan members 1-5 set interfaces xe-0/2/1 unit 0 family ethernet-switching interface-mode trunk set interfaces xe-0/2/1 unit 0 family ethernet-switching vlan members 1-5 set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk set interfaces ae0 unit 0 family ethernet-switching vlan members 1-5 set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options lacp periodic fast set interfaces ae1 unit 0 family ethernet-switching interface-mode trunk set interfaces ae1 unit 0 family ethernet-switching vlan members 1-5 set vlans BD-1 vlan-id 1 set vlans BD-2 vlan-id 2 set vlans BD-3 vlan-id 3 set vlans BD-4 vlan-id 4 set vlans BD-5 vlan-id 5
PE3
set interfaces xe-0/0/0 enable set interfaces xe-/0/0/0 unit 0 description “Connected to PE1” set interfaces xe-0/0/0 unit 0 family inet 192.0.2.2/24 set interfaces xe-0/0/1 enable set interfaces xe-0/0/1 unit 0 description “Connected to PE2” set interfaces xe-0/0/1 unit 0 family inet 198.51.100.2/24 set interfaces lo0 unit 0 family inet address 172.16.1.1/32 set interfaces xe-0/0/0:1 enable set interfaces xe-0/0/0:1 unit 0 family ethernet-switching interface-mode trunk set interfaces xe-0/0/0:1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces xe-0/0/1:1 enable set interfaces xe-0/0/1:1 unit 0 family ethernet-switching interface-mode trunk set interfaces xe-0/0/1:1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces irb unit 1 famly inet address 10.1.1.5/24 virtual-gateway address 10.1.1.10 set interfaces irb unit 2 family inet address 10.2.1.5/24 virtual-gateway address 10.2.1.10 set interfaces irb unit 3 family inet address 10.3.1.5/24 virtual-gateway address 10.3.1.10 set interfaces irb unit 4 family inet address 10.4.1.5/24 virtual-gateway address 10.4.1.10 set interrfaces irb unit 5 family inet address 10.5.1.5/24 virtual-gateway address 10.5.1.10 set routing-options router-id 172.16.1.1 se routing-options autonomous-system 65536 set ospf area 0.0.0.0 interface all set ospf area 0.0.0.0 fxp0.0 disable set protocols bgp group INT type internal set protocols bgp group INT local-address 172.16.1.1 set protocols bgp group INT family evpn signaling set protocols bgp group INT local-as 65536 set protocols bgp group INT neighbor 192.168.1.1 set protocols bgp group INT neighbor 192.168.2.1 set vlans VLAN1 vlan-id 1 set vlans VLAN1 l3-interface irb.1 set vlans VLAN1 vxlan vni 1 set vlans VLAN2 vlan-id 2 set vlans VLAN2 l3-interface irb.2 set vlans VLAN2 vxlan vni 2 set vlans VLAN3 vlan-id 3 set vlans VLAN3 l3-interface irb.3 set vlans VLAN3 vxlan vni 3 set vlans VLAN4 vlan-id 4 set vlans VLAN4 l3-interface irb.4 set vlans VLAN4 vxlan vni 4 set vlans VLAN5 vlan-id 5 set vlans VLAN5 l3-interface irb.5 set vlans VLAN5 vxlan vni 5 set protocols evpn encapsulation vxlan set protocols evpn multicast-mode ingress-replication set protocols evpn extended-vni-list 1-5 set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pbllb then load-balance per packet set routing-options forwarding-table export evpn-pplb set switch-options vtep-source-interface lo0 set switch-options route-distinguisher 172.16.1.1:1 set switch-option vrf-target target:1:1 set protocols igmp interface irb.1 set protocols igmp interface irb.2 set protocols igmp interface irb.3 set protocols igmp interface irb.4 set protocols igmp interface irb.5 set protocols igmp-snooping vlan VLAN1 l2-querier source-address 10.1.1.5 set protocols igmp-snooping vlan VLAN1 proxy set protocols igmp-snooping vlan VLAN2 l2-querier source-address 10.2.1.5 set protocols igmp-snooping vlan VLAN2 proxy set protocols igmp-snooping vlan VLAN3 l2-querier source-address 10.3.1.5 set protocols igmp-snooping vlan VLAN3 proxy set protocols igmp-snooping vlan VLAN4 l2-querier source-address 10.4.1.5 set protocols igmp-snooping vlan VLAN4 proxy set protocols igmp-snooping vlan VLAN5 l2-querier source-address 10.5.1.5 set protocols igmp-snooping vlan VLAN5 proxy set protocols pim rp local 172.16.1.1 set protocols pim interface irb.1 distributed-dr set protocols pim interface irb.2 distributed-dr set protocols pim interface irb.3 distributed-dr set protocols pim interface irb.4 distributed-dr set protocols pim interface irb.5 distributed-dr
PE1 구성
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
디바이스 PE1 구성:
어그리게이션 이더넷 논리적 인터페이스의 수를 지정합니다.
[edit chassis] user@PE1# set aggregated-devices ethernet device-count 2
인터페이스를 구성합니다.
[edit interfaces] user@PE1# set xe-0/0/0:1 description “Connected to CE” user@PE1# set xe-0/0/0:2 ether-options 802.3ad ae1 user@PE1# set xe-0/0/1:0 enable user@PE1# set xe-0/0/1:0 unit 0 description “Connected to PE3” user@PE1# set xe-0/0/1:0 unit 0 family inet address 192.0.2.1/24 user@PE1# set ae0 enable user@PE1# set ae1 enable user@PE2# set lo0 unit 0 family inet address 192.168.1.1/32
액티브-액티브 멀티호밍을 구성하고 각 어그리게이션 이더넷 인터페이스에서 LACP(Link Aggregation Control Protocol)를 활성화합니다.
[edit interfaces] user@PE1# set ae0 esi 00:11:11:11:11:11:11:11:11:11 user@PE1# set esi all-active user@PE1# set ae0 aggregated-ether-options lacp active user@PE1# set ae0 aggregated-ether-options lacp periodic-fast user@PE1# set ae0 aggregated-ether-options lacp system-id 00:00:00:00:00:01 user@PE1# set ae1 esi 00:22:22:22:22:22:22:22:22:22 user@PE1# set ae1 esi all-active user@PE1# set ae1 aggregated-ether-options lacp active user@PE1# set ae1 aggregated-ether-options lacp periodic-fast user@PE1# set ae0 aggregated-ether-options lacp system-id 00:00:00:00:00:02
각 어그리게이션 이더넷 인터페이스를 트렁크 포트로 구성합니다.
[edit interfaces] user@PE1# set ae0 unit 0 description “Connected to CE” user@PE1# set ae0 unit 0 family ethernet-switching interface-mode trunk user@PE1# set ae0 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] user@PE1# set ae1 unit 0 description “Connected to CE” user@PE1# set ae1 unit 0 family ethernet-switching interface-mode trunk user@PE1# set ae1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ]
IRB 인터페이스 및 가상 게이트웨이 주소를 구성합니다.
[edit interfaces] user@PE1# set irb unit 1 family inet address 10.1.1.1/24 virtual-gateway-address 10.1.1.10 user@PE1# set irb unit 2 family inet address 10.2.1.1/24 virtual-gateway-address 10.2.1.10 user@PE1# set irb unit 3 family inet address 10.3.1.1/24 virtual-gateway-address 10.3.1.10 user@PE1# set irb unit 4 family inet address 10.4.1.1/24 virtual-gateway-address 10.4.1.10 user@PE1# set irb unit 5 family inet address 10.5.1.1/24 virtual-gateway-address 10.5.1.10
자율 시스템을 구성합니다.
[edit routing-options] user@PE1# set router-id 192.168.1.1 user@PE1# set autonomous-system 65536
OSPF를 구성합니다.
[edit protocols ospf] user@PE1# set area 0.0.0.0 interface xe-0/0/1:0.0 user@PE1# set area 0.0.0.0 interface lo0. passive
BGP 내부 피어링을 구성합니다.
[edit protocols bgp] user@PE1# set group INT type internal user@PE1# set group INT local-address 192.168.1.1 user@PE1# set group INT family evpn signaling user@PE1# set group INT local-as 65536 user@PE1# set group INT neighbor 172.16.1.1
VLAN을 구성합니다.
[set vlans] user@PE1# set VLAN1 vlan-id 1 user@PE1# set VLAN1 l3-interface irb.1 user@PE1# set VLAN1 vxlan vni 1 user@PE1# set VLAN2 vlan-id 2 user@PE1# set VLAN2 l3-interface irb.2 user@PE1# set VLAN2 vxlan vni 2 user@PE1# set VLAN3 vlan-id 3 user@PE1# set VLAN3 l3-interface irb.3 user@PE1# set VLAN3 vxlan vni 3 user@PE1# set VLAN4 vlan-id 4 user@PE1# set VLAN4 l3-interface irb.4 user@PE1# set VLAN4 vxlan vni 4 user@PE1# set VLAN5 vlan-id 5 user@PE1# set VLAN5 l3-interface irb.5 user@PE1# set VLAN2 vxlan vni 5
EVPN을 활성화합니다.
[edit protocols evpn] user@PE1# set encapsulation vxlan user@PE1# set multicast-mode ingress-replication user@PE1# set extended-vni-list 1-5
EVPN 트래픽 로드 밸런싱을 위한 내보내기 라우팅 정책을 구성합니다.
[edit policy-options] user@PE1# set policy-statement evpn-pplb from protocol evpn user@PE1# set policy-statement evpn-pplb then load-balance per packet [edit routing-options] user@PE1# set forwarding-table export evpn-pplb
VXLAN 터널을 위한 소스 인터페이스를 구성합니다.
[edit switch-options] user@PE1# set vtep-source-interface lo0.0 user@PE1# set route-distinguisher 192.168.1.1:1 user@PE1# set vrf-target target:1:1
VLAN과 연결된 IRB 인터페이스에서 IGMP를 활성화합니다.
[edit protocols igmp] user@PE1# set interface irb.1 user@PE1# set interface irb.2 user@PE1# set interface irb.3 user@PE1# set interface irb.4 user@PE1# set interface irb.5
VLAN에서 IGMP 스누핑을 활성화합니다.
[edit protocols igmp-snooping vlan] user@PE1# set VLAN1 l2-querier source-address 10.1.1.1 user@PE1# set VLAN1 proxy user@PE1# set VLAN2 l2-querier source-address 10.2.1.1 user@PE1# set VLAN2 proxy user@PE1# set VLAN3 l2-querier source address 10.3.1.1 user@PE1# set VLAN3 proxy user@PE1# set VLAN4 l2-querier source-address 10.4.1.1 user@PE1# set VLAN4 proxy user@PE1# set VLAN5 l2-querier source-address 10.5.1.1 user@PE1# set VLAN5 proxy
정적 랑데부 지점을 정의하고 VLAN과 연결된 IRB 인터페이스에서 활성화하여 PIM을 구성합니다.
메모:이 단계는 VLAN 간 전달을 구성하려는 경우에만 필요합니다. PE 디바이스가 VLAN 내 포워딩만 수행하는 경우 이 단계를 생략합니다.
[edit protocols pim] user@PE1# set rp static address 172.16.1.1 user@PE1# set interface irb.1 distrbuted-dr user@PE1# set interface irb.2 distributed-dr user@PE1# set interface irb.3 distributed-dr user@PE1# set interface irb.4 distributed-dr user@PE1# set interface irb.5 distributed-dr
결과
구성 모드에서 , show interfaces. show routing-options,show protocols, show vlans, show policy-options및 show switch-options 명령을 입력하여 show chassis구성을 확인합니다. 출력에 의도한 구성이 표시되지 않으면 이 예의 지침을 반복하여 구성을 수정하십시오.
user@PE1# show chassis
aggregated-devices {
ethernet {
device-count 2;
}
}
user@PE1# show
interfaces {
xe-0/0/0:1 {
description "Connected to CE";
ether-options {
802.3ad ae0;
}
}
xe-0/0/0:2 {
ether-options {
802.3ad ae1;
}
}
xe-0/0/1:0 {
enable;
unit 0 {
description "Connected to PE3";
family inet {
address 192.0.2.1/24;
}
}
}
xe-0/0/1:1 {
enable;
}
ae0 {
enable;
esi {
00:11:11:11:11:11:11:11:11:11;
all-active;
}
aggregated-ether-options {
lacp {
active;
periodic fast;
system-id 00:00:00:00:00:01;
}
}
unit 0 {
description "Connected to CE";
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
ae1 {
enable;
esi {
00:22:22:22:22:22:22:22:22:22;
all-active;
}
aggregated-ether-options {
lacp {
active;
periodic fast;
system-id 00:00:00:00:00:02;
}
}
unit 0 {
description "Connected to CE";
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
irb {
unit 1 {
family inet {
address 10.1.1.1/24 {
virtual-gateway-address 10.1.1.10;
}
}
}
unit 2 {
family inet {
address 10.2.1.1./24 {
virtual-gateway-address 10.2.1.10;
}
}
}
unit 3 {
family inet {
address 10.3.1.1./24 {
virtual-gateway-address 10.3.1.10;
}
}
}
unit 4 {
family inet {
address 10.4.1.1./24 {
virtual-gateway-address 10.4.1.10;
}
}
}
unit 5 {
family inet {
address 10.5.1.1./24 {
virtual-gateway-address 10.5.1.10;
}
}
}
}
lo0 {
unit 0 {
family inet {
address 192.168.1.1/32;
}
}
}
}
routing-options {
router-id 192.168.1.1;
autonomous-system 65536;
forwarding-table {
export evpn-pplb;
}
}
protocols {
igmp {
interface irb.1;
interface irb.2;
interface irb.3;
interface irb.4;
interface irb.5;
}
bgp {
group INT {
type internal;
local-address 192.168.1.1;
family evpn {
signaling;
}
local-as 65536;
neighbor 172.16.1.1;
}
}
ospf {
area 0.0.0.0 {
interface xe-0/0/1:0.0;
interface lo0.0 {
passive;
}
}
}
pim {
rp {
static {
address 172.16.1.1;
}
}
interface irb.1 {
distributed-dr;
}
interface irb.2 {
distributed-dr;
}
interface irb.3 {
distributed-dr;
}
interface irb.4 {
distributed-dr;
}
interface irb.5 {
distributed-dr;
}
}
evpn {
encapsulation vxlan;
multicast-mode ingress-replication;
extended-vni-list 1-5;
}
igmp-snooping {
vlan VLAN1 {
l2-querier {
source-address 10.1.1.1;
}
proxy;
}
vlan VLAN2 {
l2-querier {
source-address 10.2.1.1;
}
proxy;
}
vlan VLAN3 {
l2-querier {
source-address 10.3.1.1;
}
proxy;
}
vlan VLAN4 {
l2-querier {
source-address 10.4.1.1;
}
proxy;
}
vlan VLAN5 {
l2-querier {
source-address 10.5.1.1;
}
proxy;
}
}
}
policy-options {
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
}
switch-options {
vtep-source-interface lo0.0;
route-distinguisher 192.168.1.1:1;
vrf-target target:1:1;
}
vlans {
VLAN1 {
vlan-id 1;
l3-interface irb.1;
vxlan {
vni 1;
}
}
VLAN2 {
vlan-id 2;
l3-interface irb.2;
vxlan {
vni 2;
}
}
VLAN3 {
vlan-id 3;
l3-interface irb.3;
vxlan {
vni 3;
}
}
VLAN4 {
vlan-id 4;
l3-interface irb.4;
vxlan {
vni 4;
}
}
VLAN5 {
vlan-id 5;
l3-interface irb.5;
vxlan {
vni 5;
}
}
}
PE2 구성
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
디바이스 PE2 구성:
어그리게이션 이더넷 논리적 인터페이스의 수를 지정합니다.
[edit chassis] user@PE2# set aggregated-devices ethernet device-count 2
인터페이스를 구성합니다.
[edit interfaces] user@PE2# set xe-0/0/0:0 ether-options 802.3ad ae1 user@PE2# set xe-0/0/0:1 description “Connected to CE” user@PE2# set xe-0/0/1:0 enable user@PE2# set xe-0/0/1:0 unit 0 description “Connected to PE3” user@PE2# set xe-0/0/1:0 unit 0 family inet address 198.51.100.1/24 user@PE2# set ae0 enable user@PE2# set ae1 enable user@PE2# set lo0 unit 0 family inet address 192.168.2.1/32
액티브-액티브 멀티호밍을 구성하고 각 어그리게이션 이더넷 인터페이스에서 LACP(Link Aggregation Control Protocol)를 활성화합니다.
[edit interfaces] user@PE2# set ae0 esi 00:11:11:11:11:11:11:11:11:11 user@PE2# set esi all-active user@PE2# set ae0 aggregated-ether-options lacp active user@PE2# set ae0 aggregated-ether-options lacp periodic-fast user@PE2# set ae0 aggregated-ether-options lacp system-id 00:00:00:00:00:01 user@PE2# set ae1 esi 00:22:22:22:22:22:22:22:22:22 user@PE2# set ae1 esi all-active user@PE2# set ae1 aggregated-ether-options lacp active user@PE2# set ae1 aggregated-ether-options lacp periodic-fast user@PE2# set ae0 aggregated-ether-options lacp system-id 00:00:00:00:00:02
각 어그리게이션 이더넷 인터페이스를 트렁크 포트로 구성합니다.
[edit interfaces] user@PE2# set ae0 unit 0 description “Connected to CE” user@PE2# set ae0 unit 0 family ethernet-switching interface-mode trunk user@PE2# set ae0 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] user@PE2# set ae1 unit 0 description “Connected to CE” user@PE2# set ae1 unit 0 family ethernet-switching interface-mode trunk user@PE2# set ae1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ]
IRB 인터페이스 및 가상 게이트웨이 주소를 구성합니다.
[edit interfaces] user@PE2# set irb unit 1 family inet address 10.1.1.2/24 virtual-gateway-address 10.1.1.10 user@PE2# set irb unit 2 family inet address 10.2.1.2/24 virtual-gateway-address 10.2.1.10 user@PE2# set irb unit 3 family inet address 10.3.1.2/24 virtual-gateway-address 10.3.1.10 user@PE2# set irb unit 4 family inet address 10.4.1.2/24 virtual-gateway-address 10.4.1.10 user@PE2# set irb unit 5 family inet address 10.5.1.2/24 virtual-gateway-address 10.5.1.10
자율 시스템을 구성합니다.
[edit routing-options] user@PE2# set router-id 192.168.2.1 user@PE2# set autonomous-system 65536
OSPF를 구성합니다.
[edit protocols ospf] user@PE2# set area 0.0.0.0 interface xe-0/0/1:0.0 user@PE2# set area 0.0.0.0 interface lo0. passive
BGP 내부 피어링을 구성합니다.
[edit protocols bgp] user@PE2# set group INT type internal user@PE2# set group INT local-address 192.168.2.1 user@PE2# set group INT family evpn signaling user@PE2# set group INT local-as 65536 user@PE2# set group INT neighbor 172.16.1.1
VLAN을 구성합니다.
[edit vlans] user@PE2# set VLAN1 vlan-id 1 user@PE2# set VLAN1 l3-interface irb.1 user@PE2# set VLAN1 vxlan vni 1 user@PE2# set VLAN2 vlan-id 2 user@PE2# set VLAN2 l3-interface irb.2 user@PE2# set VLAN2 vxlan vni 2 user@PE2# set VLAN3 vlan-id 3 user@PE2# set VLAN3 l3-interface irb.3 user@PE2# set VLAN3 vxlan vni 3 user@PE2# set VLAN4 vlan-id 4 user@PE2# set VLAN4 l3-interface irb.4 user@PE2# set VLAN4 vxlan vni 4 user@PE2# set VLAN5 vlan-id 5 user@PE2# set VLAN5 l3-interface irb.5 user@PE2# set VLAN2 vxlan vni 5
EVPN을 활성화합니다.
[edit protocols evpn] user@PE2# set encapsulation vxlan user@PE2# set multicast-mode ingress-replication user@PE2# set extended-vni-list 1-5
내보내기 라우팅 정책을 구성하여 EVPN 트래픽의 부하를 분산하고 포워딩 테이블에 적용합니다.
[edit policy-options] user@PE2# set policy-statement evpn-pplb from protocol evpn user@PE2# set policy-statement evpn-pplb then load-balance per packet [edit routing-options] user@PE2# set forwarding-table export evpn-pplb
VXLAN 터널을 위한 소스 인터페이스를 구성합니다.
[edit switch-options] user@PE2# set vtep-source-interface lo0.0 user@PE2# set route-distinguisher 192.168.2.1:1 user@PE2# set vrf-target target:1:1
IRB 인터페이스에서 IGMP를 활성화합니다.
[edit protocols igmp] user@PE2# set interface irb.1 user@PE2# set interface irb.2 user@PE2# set interface irb.3 user@PE2# set interface irb.4 user@PE2# set interface irb.5
IRB 인터페이스에서 IGMP 스누핑을 활성화합니다.
[edit protocols igmp-snooping vlan] user@PE2# set VLAN1 l2-querier source-address 10.1.1.2 user@PE2# set VLAN1 proxy user@PE2# set VLAN2 l2-querier source-address 10.2.1.2 user@PE2# set VLAN2 proxy user@PE2# set VLAN3 l2-querier source address 10.3.1.2 user@PE2# set VLAN3 proxy user@PE2# set VLAN4 l2-querier source-address 10.4.1.2 user@PE2# set VLAN4 proxy user@PE2# set VLAN5 l2-querier source-address 10.5.1.2 user@PE2# set VLAN5 proxy
정적 랑데부 지점을 정의하고 IRB 인터페이스에서 활성화하여 PIM을 구성합니다.
메모:이 단계는 VLAN 간 전달을 구성하려는 경우에만 필요합니다. PE 디바이스가 VLAN 내 포워딩만 수행하는 경우 이 단계를 생략합니다.
[edit protocols pim] user@PE2# set rp static address 172.16.1.1 user@PE2# set interface irb.1 distrbuted-dr user@PE2# set interface irb.2 distributed-dr user@PE2# set interface irb.3 distributed-dr user@PE2# set interface irb.4 distributed-dr user@PE2# set interface irb.5 distributed-dr
결과
구성 모드에서 , show interfaces. show routing-options,show protocols, show vlans, show policy-options및 show switch-options 명령을 입력하여 show chassis구성을 확인합니다. 출력에 의도한 구성이 표시되지 않으면 이 예의 지침을 반복하여 구성을 수정하십시오.
user@PE2# show chassis
aggregated-devices {
ethernet {
device-count 2;
}
}
user@PE2# show
interfaces {
xe-0/0/0:0 {
ether-options {
802.3ad ae1;
}
}
xe-0/0/0:1 {
description "Connected to CE";
ether-options {
802.3ad ae0;
}
}
xe-0/0/1:0 {
enable;
unit 0 {
description "Connected to PE3";
family inet {
address 198.51.100.1/24;
}
}
}
ae0 {
esi {
00:11:11:11:11:11:11:11:11:11;
all-active;
}
aggregated-ether-options {
lacp {
active;
periodic fast;
system-id 00:00:00:00:00:01;
}
}
unit 0 {
description "Connected to CE";
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
ae1 {
enable;
esi {
00:22:22:22:22:22:22:22:22:22;
all-active;
}
aggregated-ether-options {
lacp {
active;
periodic fast;
system-id 00:00:00:00:00:02;
}
}
unit 0 {
description "CONNECTED TO CE";
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
irb {
unit 1 {
family inet {
address 10.1.1.2/24 {
virtual-gateway-address 10.1.1.10;
}
}
}
unit 2 {
family inet {
address 10.2.1.2/24 {
virtual-gateway-address 10.2.1.10;
}
}
}
unit 3 {
family inet {
address 10.3.1.2/24 {
virtual-gateway-address 10.3.1.10;
}
}
}
unit 4 {
family inet {
address 10.4.1.2/24 {
virtual-gateway-address 10.4.1.10;
}
}
}
unit 5 {
family inet {
address 10.5.1.2/24 {
virtual-gateway-address 10.5.1.10;
}
}
}
}
lo0 {
unit 0 {
family inet {
address 192.168.2.1/32;
}
}
}
}
routing-options {
router-id 192.168.2.1;
autonomous-system 65536;
forwarding-table {
export evpn-pplb;
}
}
protocols {
igmp {
interface irb.1;
interface irb.2;
interface irb.3;
interface irb.4;
interface irb.5;
}
bgp {
group INT {
type internal;
local-address 192.168.2.1;
family evpn {
signaling;
}
local-as 65536;
neighbor 172.16.1.1;
}
}
ospf {
area 0.0.0.0 {
interface lo0.0 {
passive;
}
interface xe-0/0/1:0.0;
}
}
pim {
rp {
static {
address 172.16.1.1;
}
}
interface irb.1 {
distributed-dr;
}
interface irb.2 {
distributed-dr;
}
interface irb.3 {
distributed-dr;
}
interface irb.4 {
distributed-dr;
}
interface irb.5 {
distributed-dr;
}
}
evpn {
encapsulation vxlan;
multicast-mode ingress-replication;
extended-vni-list 1-5;
}
igmp-snooping {
vlan VLAN1 {
l2-querier {
source-address 10.1.1.2;
}
proxy;
}
vlan VLAN2 {
l2-querier {
source-address 10.2.1.2;
}
proxy;
}
vlan VLAN3 {
l2-querier {
source-address 10.3.1.2;
}
proxy;
}
vlan VLAN4 {
l2-querier {
source-address 10.4.1.2;
}
proxy;
}
vlan VLAN5 {
l2-querier {
source-address 10.5.1.2;
}
proxy;
}
}
}
policy-options {
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
}
switch-options {
vtep-source-interface lo0.0;
route-distinguisher 192.168.2.1:1;
vrf-target target:1:1;
}
vlans {
VLAN1 {
vlan-id 2;
l3-interface irb.2;
vxlan {
vni 2;
}
}
VLAN2 {
vlan-id 1;
l3-interface irb.1;
vxlan {
vni 1;
}
}
VLAN3 {
vlan-id 3;
l3-interface irb.3;
vxlan {
vni 3;
}
}
VLAN4 {
vlan-id 4;
l3-interface irb.4;
vxlan {
vni 4;
}
}
VLAN5 {
vlan-id 5;
l3-interface irb.5;
vxlan {
vni 5;
}
}
}
CE 디바이스 구성
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
디바이스 CE를 구성하려면:
어그리게이션 이더넷 논리적 인터페이스의 수를 지정합니다.
[edit chassis] user@CE# set aggregated-devices ethernet device-count 2
인터페이스를 구성하고 어그리게이션 이더넷 인터페이스에서 LACP를 활성화합니다.
[edit interfaces] user@CE# set xe-0/2/0 ether-options 802.3ad ae0 user@CE# set xe-0/2/1 ether-options 802.3ad ae0 user@CE# set ae0 aggregated ether-options lacp active user@CE# set ae0 aggregated ether-options lacp periodic fast user@CE# set ae1 aggregated ether-options lacp active user@CE# set ae1 aggregated ether-options lacp periodic fast
레이어 2 고객 브리지 도메인 및 도메인과 연결된 VLAN을 생성합니다.
[edit] user@CE# set vlans BD-1 vlan-id 1 user@CE# set vlans BD-2 vlan-id 2 user@CE# set vlans BD-3 vlan-id 3 user@CE# set vlans BD-4 vlan-id 4 user@CE# set vlans BD-5 vlan-id 5
지정된 VLAN 식별자로 태그가 지정된 패킷을 수락하기 위한 트렁크 포트로 CE 도메인에 포함하도록 각 인터페이스를 구성합니다.
[edit interfaces] user@CE# set xe-0/2/0 unit 0 family ethernet-switching interface-mode trunk user@CE# set xe-0/2/0 unit 0 family ethernet-switching vlan members 1-5 user@CE# set xe-0/2/1 unit 0 family ethernet-switching interface-mode trunk user@CE# set xe-0/2/1 unit 0 family ethernet-switching vlan members 1-5 user@CE# set ae0 unit 0 family ethernet-switching interface-mode trunk user@CE# set ae0 unit 0 family ethernet-switching vlan members 1-5 user@CE# set ae1 unit 0 family ethernet-switching interface-mode trunk user@CE# set ae1 unit 0 family ethernet-switching vlan members 1-5
결과
구성 모드에서 및 show interfaces 명령을 입력하여 show chassis 구성을 확인합니다. 출력에 의도한 구성이 표시되지 않으면 이 예의 지침을 반복하여 구성을 수정하십시오.
user@CE# show chassis
aggregated-devices {
ethernet {
device-count 2;
}
}
user@CE# show interfaces
xe-0/2/0 {
ether-options {
802.3ad ae0;
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members 1-5;
}
}
}
}
xe-0/2/1 {
ether-options {
802.3ad ae0;
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members 1-5;
}
}
}
}
ae0 {
aggregated-ether-options {
lacp {
active;
periodic fast;
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members 1-5;
}
}
}
}
ae1 {
aggregated-ether-options {
lacp {
active;
periodic fast;
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members 1-5;
}
}
}
}
user@CE# show vlans
BD-1 {
vlan-id 1;
domain-type bridge;
}
BD-2 {
vlan-id 2;
domain-type bridge;
}
BD-3 {
vlan-id 3;
domain-type bridge;
}
BD-3 {
vlan-id 3;
domain-type bridge;
}
BD-4 {
vlan-id 4;
domain-type bridge;
}
BD-5 {
vlan-id 5;
domain-type bridge;
}
PE3 구성
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
디바이스 PE3 구성:
인터페이스를 구성합니다.
[edit interfaces] user@PE3# set xe-0/0/0 enable user@PE3# set xe-0/0/0 unit 0 description “Connected to PE1” user@PE3# set xe-0/0/0 unit 0 family inet 192.0.2.2/24 user@PE3# set xe-0/0/1 unit 0 description “Connected to PE2” user@PE3# set xe-0/0/1 198.51.100.2/24 user@PE3# set lo0 unit 0 family inet address 172.16.1.1/32
각 논리 이더넷 인터페이스를 지정된 VLAN 식별자로 태그가 지정된 패킷을 수락하기 위한 트렁크 포트로 구성합니다.
[edit interfaces] user@PE3# set xe-0/0/0:1 enable user@PE3# set xe-0/0/0:1 unit 0 family ethernet-switching interface-mode trunk user@PE3# set xe-0/0/0:1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] user@PE3# set xe-0/0/1:1 enable user@PE3# set xe-0/0/1:1 unit 0 family ethernet-switching interface-mode trunk user@PE3# set xe-0/0/1:1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ]
IRB 인터페이스 및 가상 게이트웨이 주소를 구성합니다.
[edit interfaces] user@PE3# set irb unit 1 family inet address 10.1.1.5/24 virtual-gateway-address 10.1.1.10 user@PE3# set irb unit 2 family inet address 10.2.1.5/24 virtual-gateway-address 10.2.1.10 user@PE3# set irb unit 3 family inet address 10.3.1.5/24 virtual-gateway-address 10.3.1.10 user@PE3# set irb unit 4 family inet address 10.4.1.5/24 virtual-gateway-address 10.4.1.10 user@PE3# set irb unit 5 family inet address 10.5.1.5/24 virtual-gateway-address 10.5.1.10
자율 시스템을 구성합니다.
[edit routing-options] user@PE3# set router-id 172.16.1.1 user@PE3# set autonomous-system 65536
OSPF 구성
[edit protocols ospf] user@PE3# set area 0.0.0.0 interface all user@PE3# set ospf area 0.0.0.0 fxp0.0 disable
PE1 및 PE2를 사용하여 BGP 내부 피어링을 구성합니다.
[edit protocols bgp] user@PE3# set group INT type internal user@PE3# set group INT local-address 172.16.1.1 user@PE3# set group INT family evpn signaling user@PE3# set group INT local-as 65536 user@PE3# set group INT neighbor 192.168.1.1 user@PE3# set group INT neighbor 192.168.2.1
VLAN을 구성합니다.
[edit vlans] user@PE3# set VLAN1 vlan-id 1 user@PE3# set VLAN1 l3-interface irb.1 user@PE3# set VLAN1 vxlan vni 1 user@PE3# set VLAN2 vlan-id 2 user@PE3# set VLAN2 l3-interface irb.2 user@PE3# set VLAN2 vxlan vni 2 user@PE3# set VLAN3 vlan-id 3 user@PE3# set VLAN3 l3-interface irb.3 user@PE3# set VLAN3 vxlan vni 3 user@PE3# set VLAN4 vlan-id 4 user@PE3# set VLAN4 l3-interface irb.4 user@PE3# set VLAN4 vxlan vni 4 user@PE3# set VLAN5 vlan-id 5 user@PE3# set VLAN5 l3-interface irb.5 user@PE3# set VLAN2 vxlan vni 5
EVPN을 활성화합니다.
[edit protocols evpn] user@PE3# set encapsulation vxlan user@PE3# set multicast-mode ingress-replication user@PE3# set extended-vni-list 1-5
EVPN 트래픽 로드 밸런싱을 위한 내보내기 라우팅 정책을 구성합니다.
[edit policy-options] user@PE3# set policy-statement evpn-pplb from protocol evpn user@PE3# set policy-statement evpn-pplb then load-balance per packet [edit routing-options] user@PE3# set forwarding-table export evpn-pplb
VXLAN 터널을 위한 소스 인터페이스를 구성합니다.
[edit switch-options] user@PE3# set vtep-source-interface lo0.0 user@PE3# set route-distinguisher 172.16.1.1:1 user@PE3# set vrf-target target:1:1
IRB 인터페이스에서 IGMP를 활성화합니다.
[edit protocols igmp] user@PE1# set interface irb.1 user@PE1# set interface irb.2 user@PE1# set interface irb.3 user@PE1# set interface irb.4 user@PE1# set interface irb.5
IRB 인터페이스에서 IGMP 스누핑을 활성화합니다.
[edit protocols igmp-snooping vlan] user@PE1# set VLAN1 l2-querier source-address 10.1.1.5 user@PE1# set VLAN1 proxy user@PE1# set VLAN2 l2-querier source-address 10.2.1.5 user@PE1# set VLAN2 proxy user@PE1# set VLAN3 l2-querier source address 10.3.1.5 user@PE1# set VLAN3 proxy user@PE1# set VLAN4 l2-querier source-address 10.4.1.5 user@PE1# set VLAN4 proxy user@PE1# set VLAN5 l2-querier source-address 10.5.1.5 user@PE1# set VLAN5 proxy
로컬 랑데부 지점을 정의하고 IRB 인터페이스에서 활성화하여 PIM을 구성합니다.
메모:이 단계는 VLAN 간 전달을 구성하려는 경우에만 필요합니다. PE 디바이스가 VLAN 내 포워딩만 수행하는 경우 이 단계를 생략합니다.
[edit protocols pim] user@PE1# set rp local address 172.16.1:1 user@PE1# set interface irb.1 distrbuted-dr user@PE1# set interface irb.2 distributed-dr user@PE1# set interface irb.3 distributed-dr user@PE1# set interface irb.4 distributed-dr user@PE1# set interface irb.5 distributed-dr
결과
구성 모드에서 , show interfaces. show routing-options,show protocols, show vlans, show policy-options및 show switch-options 명령을 입력하여 show chassis구성을 확인합니다. 출력에 의도한 구성이 표시되지 않으면 이 예의 지침을 반복하여 구성을 수정하십시오.
user@PE3# show
interfaces {
xe-0/0/0 {
enable;
unit 0 {
description "Connected to PE1";
family inet {
address 192.0.2.2/24;
}
}
}
xe-0/0/1 {
enable;
unit 0 {
description “Connected to PE2”;
family inet {
address 198.51.100.2/24
}
}
}
xe-0/0/0:1 {
enable;
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
xe-0/0/1:1 enable;
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
irb {
unit 1 {
family inet {
address 10.1.1.5/24 {
virtual-gateway-address 10.1.1.10;
}
}
}
unit 2 {
family inet {
address 10.2.1.5/24 {
virtual-gateway-address 10.2.1.10;
}
}
}
unit 3 {
family inet {
address 10.3.1.5/24 {
virtual-gateway-address 10.3.1.10;
}
}
}
unit 4 {
family inet {
address 10.4.1.5/24 {
virtual-gateway-address 10.4.1.10;
}
}
}
unit 5 {
family inet {
address 10.5.1.5/24 {
virtual-gateway-address 10.5.1.10;
}
}
}
}
lo0 {
unit 0 {
family inet {
address 172.16.1.1/32;
}
}
}
}
routing-options {
router-id 172.16.1.1;
autonomous-system 65536
forwarding-table {
export evpn-pplb;
}
}
protocols {
igmp {
interface irb.1;
interface irb.2;
interface irb.3;
interface irb.4;
interface irb.5;
}
bgp {
group INT {
type internal;
local-address 172.16.1.1;
family evpn {
signaling;
}
local-as 65546;
neighbor 192.168.1.1;
neighbor 192.168.2.1;
}
}
ospf {
area 0.0.0.0 {
interface all ;
interface fxp0.0;
disable;
}
}
}
pim {
rp {
local {
address 172.16.1.1;
}
}
interface irb.1 {
distributed-dr;
}
interface irb.2 {
distributed-dr;
}
interface irb.3 {
distributed-dr;
}
interface irb.4 {
distributed-dr;
}
interface irb.5 {
distributed-dr;
}
}
evpn {
encapsulation vxlan;
multicast-mode ingress-replication;
extended-vni-list 1-5;
}
igmp-snooping {
vlan VLAN1 {
l2-querier {
source-address 10.1.1.5;
}
proxy;
}
vlan VLAN2 {
l2-querier {
source-address 10.2.1.5;
}
proxy;
}
vlan VLAN3 {
l2-querier {
source-address 10.3.1.5;
}
proxy;
}
vlan VLAN4 {
l2-querier {
source-address 10.4.1.5;
}
proxy;
}
vlan VLAN5 {
l2-querier {
source-address 10.5.1.5;
}
proxy;
}
}
}
policy-options {
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
}
switch-options {
vtep-source-interface lo0.0;
route-distinguisher 172.16.1.1:1;
vrf-target target:1:1;
}
vlans {
VLAN1 {
vlan-id 1;
l3-interface irb.1;
vxlan {
vni 1;
}
}
VLAN2 {
vlan-id 2;
l3-interface irb.2;
vxlan {
vni 2;
}
}
VLAN3 {
vlan-id 3;
l3-interface irb.3;
vxlan {
vni 3;
}
}
VLAN4 {
vlan-id 4;
l3-interface irb.4;
vxlan {
vni 4;
}
}
VLAN5 {
vlan-id 5;
l3-interface irb.5;
vxlan {
vni 5;
}
}
}
확인
구성이 올바르게 작동하고 있는지 확인합니다.
IGMP 메시지가 동기화되었는지 확인
목적
각 PE에서 IGMP 가입 및 탈퇴 메시지가 동기화되었는지 확인합니다.
행동
운영 모드에서 명령을 실행합니다 show evpn instance extensive .
user@PE1> show evpn instance extensive
Instance: default-switch
Route Distinguisher: 192.168.1.1:1
Encapsulation type: VXLAN
MAC database status Local Remote
MAC advertisements: 25 40
MAC+IP advertisements: 10 15
Default gateway MAC advertisements: 10 10
Number of local interfaces: 3 (3 up)
Interface name ESI Mode Status AC-Role
ae0.0 00:11:11:11:11:11:11:11:11:11 all-active Up Root
ae1.0 00:22:22:22:22:22:22:22:22:22 all-active Up Root
xe-0/0/1:1.0 00:00:00:00:00:00:00:00:00:00 single-homed Up Root
Number of IRB interfaces: 5 (5 up)
Interface name VLAN VNI Status L3 context
irb.1 1 Up master
irb.2 2 Up master
irb.3 3 Up master
irb.4 4 Up master
irb.5 5 Up master
Number of bridge domains: 5
VLAN Domain ID Intfs / up IRB intf Mode MAC sync IM route label SG sync IM core nexthop
1 1 3 3 irb.1 Extended Enabled 1 Enabled 2097159
2 2 3 3 irb.2 Extended Enabled 2 Enabled 2097161
3 3 3 3 irb.3 Extended Enabled 3 Enabled 2097162
4 4 3 3 irb.4 Extended Enabled 4 Enabled 2097163
5 5 3 3 irb.5 Extended Enabled 5 Enabled 2097164
Number of neighbors: 2
Address MAC MAC+IP AD IM ES Leaf-label
192.168.2.1 25 10 9 5 0
172.16.1.1 15 10 1 5 0
Number of ethernet segments: 7
ESI: 00:11:11:11:11:11:11:11:11:11
Status: Resolved by IFL ae0.0
Local interface: ae0.0, Status: Up/Forwarding
Number of remote PEs connected: 1
Remote PE MAC label Aliasing label Mode
192.168.2.1 5 0 all-active
DF Election Algorithm: MOD based
Designated forwarder: 192.168.2.1
Backup forwarder: 192.168.1.1
Last designated forwarder update: Jul 13 01:22:45
ESI: 00:22:22:22:22:22:22:22:22:22
Status: Resolved by IFL ae1.0
Local interface: ae1.0, Status: Up/Forwarding
Number of remote PEs connected: 1
Remote PE MAC label Aliasing label Mode
192.168.2.1 5 0 all-active
DF Election Algorithm: MOD based
Designated forwarder: 192.168.2.1
Backup forwarder: 192.168.1.1
Last designated forwarder update: Jul 13 21:02:47
ESI: 05:00:00:00:64:00:00:00:01:00
Local interface: irb.1, Status: Up/Forwarding
Number of remote PEs connected: 2
Remote PE MAC label Aliasing label Mode
192.168.2.1 1 0 all-active
172.16.1.1 1 0 single-homed
ESI: 05:00:00:00:64:00:00:00:02:00
Local interface: irb.2, Status: Up/Forwarding
Number of remote PEs connected: 2
Remote PE MAC label Aliasing label Mode
192.168.2.1 2 0 all-active
172.16.1.1 2 0 single-homed
ESI: 05:00:00:00:64:00:00:00:03:00
Local interface: irb.3, Status: Up/Forwarding
Number of remote PEs connected: 2
Remote PE MAC label Aliasing label Mode
192.168.2.1 3 0 all-active
172.16.1.1 3 0 single-homed
ESI: 05:00:00:00:64:00:00:00:04:00
Local interface: irb.4, Status: Up/Forwarding
Number of remote PEs connected: 2
Remote PE MAC label Aliasing label Mode
192.168.2.1 4 0 all-active
172.16.1.1 4 0 single-homed
ESI: 05:00:00:00:64:00:00:00:05:00
Local interface: irb.5, Status: Up/Forwarding
Number of remote PEs connected: 2
Remote PE MAC label Aliasing label Mode
172,168.1.1 5 0 all-active
192.168.2.1 5 0 all-active
Router-ID: 192.168.1.1
의미
은Enabled(는) SG Sync 이고 IM Core next-hop 필드는 유효한 경로를 표시합니다.
소스 주소가 학습되고 멀티캐스트 트래픽이 전달되고 있는지 확인
목적
각 PE에서 멀티캐스트 수신기가 VXLAN 터널의 소스 인터페이스를 학습했는지 확인합니다.
행동
운영 모드에서 명령과 show igmp snooping evpn database vlan VLAN1 명령을 입력합니다show evpn igmp-snooping database extensive l2-domain-id 1.
이 명령은 VLAN1에 대한 출력을 표시합니다. 이를 사용하여 구성된 각 VLAN에 대한 출력을 표시할 수 있습니다
운영 모드에서 를 show evpn multicast-snooping next-hops 입력하여 다운스트림 인터페이스가 학습되었는지 확인합니다.
user@PE1> show evpn igmp-snooping database extensive
l2-domain-id 1
Instance: default-switch
VN Identifier: 1
Group IP: 225.1.1.1
Access OIF Count: 2
Interface ESI Local Remote
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
ae0.0 00:11:11:11:11:11:11:11:11:11 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.2
Access OIF Count: 2
Interface ESI Local Remote
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
ae0.0 00:11:11:11:11:11:11:11:11:11 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.3
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 1 0
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.4
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 1 0
ae1.0 00:22:22:22:22:22:22:22:22:22 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.5
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 1 0
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.6
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 0 1
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.7
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 0 1
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.8
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 1 0
ae1.0 00:22:22:22:22:22:22:22:22:22 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.9
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 1 0
ae1.0 00:22:22:22:22:22:22:22:22:22 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.10
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 0 1
ae1.0 00:22:22:22:22:22:22:22:22:22 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
user@PE1> show igmp snooping evpn database vlan
VLAN1
Instance: default-switch
Bridge-Domain: VLAN1, VN Identifier: 1
Group IP: 225.1.1.1
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae0.0 0 1
xe-0/0/1:1.0 1 0
ae1.0 1 0
Group IP: 225.1.1.2
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae0.0 0 1
xe-0/0/1:1.0 1 0
ae1.0 1 0
Group IP: 225.1.1.3
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
xe-0/0/1:1.0 1 0
ae1.0 1 0
ae0.0 1 0
Group IP: 225.1.1.4
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae1.0 0 1
xe-0/0/1:1.0 1 0
ae0.0 1 0
Group IP: 225.1.1.5
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae1.0 1 0
xe-0/0/1:1.0 1 0
ae0.0 1 0
Group IP: 225.1.1.6
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae0.0 0 1
ae1.0 1 0
xe-0/0/1:1.0 1 0
Group IP: 225.1.1.7
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae0.0 0 1
ae1.0 1 0
xe-0/0/1:1.0 1 0
Group IP: 225.1.1.8
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae1.0 0 1
xe-0/0/1:1.0 1 0
ae0.0 1 0
Group IP: 225.1.1.9
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae1.0 0 1
xe-0/0/1:1.0 1 0
ae0.0 1 0
Group IP: 225.1.1.10
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae1.0 0 1
ae0.0 0 1
xe-0/0/1:1.0 1 0
user@PE1> show evpn multicast-snooping next-hops
Family: INET
ID Refcount KRefcount Downstream interface Addr
2097159 3 1 vtep.32769
vtep.32770
2097161 3 1 vtep.32769
vtep.32770
2097162 3 1 vtep.32769
vtep.32770
2097163 3 1 vtep.32769
vtep.32770
2097164 3 1 vtep.32769
vtep.32770