예: EVPN 기반 MPLS를 실행하는 WAN을 통해 EVPN-VXLAN 데이터센터 네트워크 상호 연결
이 예에서는 EVPN-MPLS를 실행하는 WAN을 통해 EVPN-VXLAN 데이터센터 네트워크를 상호 연결하여 DCI(Data Center Interconnect) 솔루션으로서 EVPN의 이점을 활용하는 방법을 보여줍니다.
요구 사항
이 예에서 사용되는 하드웨어 및 소프트웨어 구성 요소는 다음과 같습니다.
데이터센터 게이트웨이 및 WAN 에지 라우터로 구성할 주니퍼 네트웍스 MX 시리즈 라우터 4개.
ToR(Top-of-Rack) 라우터로 구성할 주니퍼 네트웍스 MX 시리즈 라우터 4개.
고객 에지(CE) 디바이스 6개.
여러 VLAN을 구성할 수 있는 각 CE 디바이스에 연결된 6개의 호스트 디바이스.
EVPN-MPLS WAN 네트워크의 프로바이더(P) 라우터 부분 1개.
Junos OS 릴리스 17.2 이상.
개요
논리 터널(lt-) 인터페이스를 사용하여 MPLS 기반 EVPN을 실행하는 WAN을 통해 EVPN(Ethernet VPN)을 실행하는 여러 데이터센터 네트워크를 VXLAN(Virtual Extensible LAN) 캡슐화와 상호 연결할 수 있습니다.
그림 1 은 MPLS 기반 EVPN을 실행하는 WAN을 통해 EVPN을 실행하는 데이터센터 네트워크와 VXLAN 캡슐화를 실행하는 데이터센터 네트워크의 상호 연결을 보여줍니다. 이 예의 목적을 위해 데이터센터 게이트웨이 및 WAN 에지 라우터 역할을 하는 MX 시리즈 라우터의 이름은 MX11, MX12, MX21 및 MX22입니다. ToR(Top-of-Rack) 라우터 역할을 하는 MX 시리즈 라우터의 이름은 ToR11, ToR12, ToR21 및 ToR22입니다. 데이터센터 네트워크 1(DC1)에 연결된 고객 에지(CE) 디바이스의 이름은 CE1, CE2, CE3입니다. 데이터센터 네트워크 2(DC2)에 연결된 고객 에지(CE) 디바이스의 이름은 CE4, CE5, CE6입니다. 각 CE 디바이스에 연결된 호스트 디바이스는 여러 호스트 VLAN을 구성할 수 있어야 합니다. WAN 공급자 라우터의 이름은 P입니다.
CE 디바이스는 ToR 디바이스의 논리적 시스템의 일부입니다.

데이터센터 게이트웨이 및 WAN 에지 라우터 역할을 하는 MX 시리즈 라우터의 경우 다음 정보를 구성합니다.
IRB 인터페이스, 가상 게이트웨이 주소 및 루프백 논리적 인터페이스.
게이트웨이와 ToR 라우터 간의 외부 BGP(EBGP) 언더레이 연결, EVPN을 신호 프로토콜로 사용합니다.
특정 경로를 가상 스위치 테이블로 허용하는 라우팅 정책.
각 가상 네트워크에 대한 라우팅 인스턴스(레이어 3 VRF), 고유한 경로 구분자 및 vrf-target 값 포함.
각 가상 네트워크에 대한 가상 스위치 인스턴스(레이어 2 MAC-VRF), VTEP 소스 인터페이스(항상 lo0.0), 경로 구분자 및 vrf-가져오기 정책.
각 가상 스위치에 대한 EVPN 프로토콜, 캡슐화 방법, VNI 목록 및 BUM 트래픽 전달 방법.
VNID를 VLAN ID, IRB(Layer 3) 인터페이스 및 BUM 전달 방법에 매핑하는 각 가상 스위치 내의 브리지 도메인입니다.
ToR(Top-of-Rack) 라우터 역할을 하는 MX 시리즈 라우터의 경우 다음 정보를 구성합니다.
VLAN, VLAN ID 및 루프백 논리적 인터페이스가 있는 호스트 대면 인터페이스.
LACP(Link Aggregation Control Protocol) 지원 LAG(Link Aggregation Group), ESI(Ethernet Segment ID) 및
all-active
모드.EVPN을 신호 프로토콜로 사용하여 ToR과 게이트웨이 라우터 사이에 MP-EBGP(Multiprotocol External BGP) 오버레이를 제공합니다.
캡슐화 방법으로 VXLAN을 사용하는 EVPN, extended-vni-list, 멀티캐스트 모드 및 각 VNI에 대한 경로 대상.
Vrf 가져오기 정책, vtep-source-interface,
route-distinguisher
vrf 가져오기 및 대상 정보.전역적으로 중요한 VNI에 매핑된 VLAN ID가 있는 VLAN.
가상 게이트웨이 주소를 최종 호스트(가상 머신 또는 서버)의 기본 IPv4 또는 IPv6 게이트웨이 주소로 설정할 수 있습니다.
구성
- CLI 빠른 구성
- ToR11 구성
- ToR12 구성
- 데이터센터 게이트웨이 및 WAN 에지 1 라우터(MX11) 구성
- 데이터센터 게이트웨이 및 WAN 에지 2 라우터 구성(MX12)
- 데이터센터 게이트웨이 및 WAN 에지 3 라우터 구성(MX21)
- 데이터센터 게이트웨이 및 WAN 에지 4 라우터(MX22) 구성
- ToR21 구성
- ToR22 구성
CLI 빠른 구성
이 예를 빠르게 구성하려면, 아래 명령을 복사하여 텍스트 파일로 붙여 넣은 다음 모든 라인브레이크를 제거하고, 네트워크 구성을 일치하는 데 필요한 세부 사항을 변경한 다음, 계층 수준에서 명령을 CLI로 [edit]
복사해 붙여 넣습니다.
ToR11
set system host-name ToR11 set logical-systems CE-2 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host-2" set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-2 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR11" set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-2 bridge-domains BD-1 domain-type bridge set logical-systems CE-2 bridge-domains BD-1 vlan-id 1 set logical-systems CE-2 bridge-domains BD-2 domain-type bridge set logical-systems CE-2 bridge-domains BD-2 vlan-id 2 set logical-systems CE-2 bridge-domains BD-3 domain-type bridge set logical-systems CE-2 bridge-domains BD-3 vlan-id 3 set logical-systems CE-2 bridge-domains BD-4 domain-type bridge set logical-systems CE-2 bridge-domains BD-4 vlan-id 4 set logical-systems CE-2 bridge-domains BD-5 domain-type bridge set logical-systems CE-2 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 1 set interfaces traceoptions file ToR11-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces ge-1/0/0 description "CONNECTED TO CE-1" set interfaces ge-1/0/0 gigether-options 802.3ad ae0 set interfaces ge-1/0/5 unit 0 description "CONNECTED TO MX–12" set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.1/24 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-2" set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/1/1 unit 0 description "CONNECTED TO MX–11" set interfaces ge-1/1/1 unit 0 family inet address 192.168.3.1/24 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR12" set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.1/24 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces lo0 unit 81 family inet address 192.0.2.11/32 set routing-options router-id 192.0.2.11 set routing-options autonomous-system 65100 set routing-options forwarding-table export evpn-pplb set protocols bgp local-as 65100 set protocols bgp group MX11 type external set protocols bgp group MX11 local-address 192.168.3.1 set protocols bgp group MX11 export LO set protocols bgp group MX11 export TEST set protocols bgp group MX11 peer-as 65400 set protocols bgp group MX11 neighbor 192.168.3.2 family inet unicast set protocols bgp group MX12 type external set protocols bgp group MX12 local-address 192.168.4.1 set protocols bgp group MX12 export LO set protocols bgp group MX12 export TEST set protocols bgp group MX12 peer-as 65500 set protocols bgp group MX12 neighbor 192.168.4.2 family inet unicast set protocols bgp group ToR12 type external set protocols bgp group ToR12 local-address 192.168.2.1 set protocols bgp group ToR12 export LO set protocols bgp group ToR12 export TEST set protocols bgp group ToR12 peer-as 65200 set protocols bgp group ToR12 local-as 65100 set protocols bgp group ToR12 neighbor 192.168.2.2 family inet unicast set protocols bgp group MX11-EVPN type external set protocols bgp group MX11-EVPN multihop ttl 2 set protocols bgp group MX11-EVPN multihop no-nexthop-change set protocols bgp group MX11-EVPN local-address 192.0.2.11 set protocols bgp group MX11-EVPN export TEST set protocols bgp group MX11-EVPN peer-as 65400 set protocols bgp group MX11-EVPN local-as 65100 set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling set protocols bgp group MX12-EVPN type external set protocols bgp group MX12-EVPN multihop ttl 2 set protocols bgp group MX12-EVPN multihop no-nexthop-change set protocols bgp group MX12-EVPN local-address 192.0.2.11 set protocols bgp group MX12-EVPN export TEST set protocols bgp group MX12-EVPN peer-as 65500 set protocols bgp group MX12-EVPN local-as 65100 set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling set protocols bgp group ToR12-EVPN type external set protocols bgp group ToR12-EVPN multihop ttl 2 set protocols bgp group ToR12-EVPN multihop no-nexthop-change set protocols bgp group ToR12-EVPN local-address 192.0.2.11 set protocols bgp group ToR12-EVPN export TEST set protocols bgp group ToR12-EVPN peer-as 65200 set protocols bgp group ToR12-EVPN local-as 65100 set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling set protocols l2-learning traceoptions file TOR11-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 192.0.2.11/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.81 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.11:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR11-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
ToR12
set system host-name ToR12 set logical-systems CE-1 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 1" set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-1 interfaces ae1 unit 0 description "CONNECTED TO ToR12" set logical-systems CE-1 interfaces ae1 unit 0 family bridge interface-mode trunk set logical-systems CE-1 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-1 bridge-domains BD-1 domain-type bridge set logical-systems CE-1 bridge-domains BD-1 vlan-id 1 set logical-systems CE-1 bridge-domains BD-2 domain-type bridge set logical-systems CE-1 bridge-domains BD-2 vlan-id 2 set logical-systems CE-1 bridge-domains BD-3 domain-type bridge set logical-systems CE-1 bridge-domains BD-3 vlan-id 3 set logical-systems CE-1 bridge-domains BD-4 domain-type bridge set logical-systems CE-1 bridge-domains BD-4 vlan-id 4 set logical-systems CE-1 bridge-domains BD-5 domain-type bridge set logical-systems CE-1 bridge-domains BD-5 vlan-id 5 set logical-systems CE-3 interfaces ge-1/1/7 unit 0 description "CONNECTED TO ToR12" set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge interface-mode trunk set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-3 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 3" set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-3 bridge-domains BD-1 domain-type bridge set logical-systems CE-3 bridge-domains BD-1 vlan-id 1 set logical-systems CE-3 bridge-domains BD-2 domain-type bridge set logical-systems CE-3 bridge-domains BD-2 vlan-id 2 set logical-systems CE-3 bridge-domains BD-3 domain-type bridge set logical-systems CE-3 bridge-domains BD-3 vlan-id 3 set logical-systems CE-3 bridge-domains BD-4 domain-type bridge set logical-systems CE-3 bridge-domains BD-4 vlan-id 4 set logical-systems CE-3 bridge-domains BD-5 domain-type bridge set logical-systems CE-3 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 2 set interfaces traceoptions file ToR12-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX11" set interfaces ge-1/0/0 unit 0 family inet address 192.168.6.1/24 set interfaces ge-1/0/4 unit 0 description "CONNECTED TO MX12" set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.1/24 set interfaces ge-1/0/6 description "CONNECTED TO CE-1" set interfaces ge-1/0/6 gigether-options 802.3ad ae0 set interfaces ge-1/0/7 unit 0 description "CONNECTED TO CE-3" set interfaces ge-1/0/7 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/7 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/1/0 description "CONNECTED TO ToR11" set interfaces ge-1/1/0 gigether-options 802.3ad ae1 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR11" set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.2/24 set interfaces ge-1/1/6 description "CONNECTED TO ToR12" set interfaces ge-1/1/6 gigether-options 802.3ad ae1 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options lacp periodic fast set interfaces lo0 unit 82 family inet address 192.0.2.12/32 set routing-options router-id 192.0.2.12 set routing-options autonomous-system 65200 set routing-options forwarding-table export evpn-pplb set protocols bgp local-as 65200 set protocols bgp group MX11 type external set protocols bgp group MX11 local-address 192.168.6.1 set protocols bgp group MX11 export LO set protocols bgp group MX11 export TEST set protocols bgp group MX11 peer-as 65400 set protocols bgp group MX11 local-as 65200 set protocols bgp group MX11 neighbor 192.168.6.2 family inet unicast set protocols bgp group MX12 type external set protocols bgp group MX12 local-address 192.168.5.1 set protocols bgp group MX12 export LO set protocols bgp group MX12 export TEST set protocols bgp group MX12 peer-as 65500 set protocols bgp group MX12 local-as 65200 set protocols bgp group MX12 neighbor 192.168.5.2 family inet unicast set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.2.2 set protocols bgp group ToR11 export LO set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 peer-as 65100 set protocols bgp group ToR11 local-as 65200 set protocols bgp group ToR11 neighbor 192.168.2.1 family inet unicast set protocols bgp group MX11-EVPN type external set protocols bgp group MX11-EVPN multihop ttl 2 set protocols bgp group MX11-EVPN multihop no-nexthop-change set protocols bgp group MX11-EVPN local-address 192.0.2.12 set protocols bgp group MX11-EVPN export TEST set protocols bgp group MX11-EVPN peer-as 65400 set protocols bgp group MX11-EVPN local-as 65200 set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling set protocols bgp group MX12-EVPN type external set protocols bgp group MX12-EVPN multihop ttl 2 set protocols bgp group MX12-EVPN multihop no-nexthop-change set protocols bgp group MX12-EVPN local-address 192.0.2.12 set protocols bgp group MX12-EVPN export TEST set protocols bgp group MX12-EVPN peer-as 65500 set protocols bgp group MX12-EVPN local-as 65200 set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.12 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 65100 set protocols bgp group ToR11-EVPN local-as 65200 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN export TEST set protocols l2-learning traceoptions file TOR12-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 192.0.2.12/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.82 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/7.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.12:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR12-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
데이터센터 게이트웨이 및 WAN 에지 1 라우터(MX11)
set system host-name MX11 set interfaces traceoptions file MX11-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces ge-1/1/1 unit 0 description "CONNECTED TO ToR11" set interfaces ge-1/1/1 unit 0 family inet address 192.168.3.2/24 set interfaces ge-5/1/0 unit 0 description "CONNECTED TO MX12" set interfaces ge-5/1/0 unit 0 family inet address 192.168.7.1/24 set interfaces lt-5/1/0 esi 00:22:22:22:22:22:22:22:22:22 set interfaces lt-5/1/0 esi all-active set interfaces lt-5/1/0 unit 0 peer-unit 1 set interfaces lt-5/1/0 unit 0 family bridge interface-mode trunk set interfaces lt-5/1/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-5/1/0 unit 1 peer-unit 0 set interfaces lt-5/1/0 unit 1 family bridge interface-mode trunk set interfaces lt-5/1/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-5/1/8 unit 0 description "CONNECTED TO ToR12" set interfaces ge-5/1/8 unit 0 family inet address 192.168.6.2/24 set interfaces ge-5/1/9 unit 0 description "CONNECTED TO P" set interfaces ge-5/1/9 unit 0 family inet address 203.0.1.1/24 set interfaces ge-5/1/9 unit 0 family mpls set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.12/24 virtual-gateway-address 10.11.1.10 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.12/24 virtual-gateway-address 10.12.1.10 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.12/24 virtual-gateway-address 10.13.1.10 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.12/24 virtual-gateway-address 10.14.1.10 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.12/24 virtual-gateway-address 10.15.1.10 set interfaces lo0 unit 84 family inet address 192.0.2.21/32 set interfaces lo0 unit 84 family mpls set routing-options router-id 192.0.2.21 set routing-options autonomous-system 65300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX11-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX11-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX11-TO-MX21 to 198.51.100.21 set protocols mpls label-switched-path MX11-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 192.0.2.21 set protocols bgp local-as 65300 set protocols bgp group INT type internal set protocols bgp group INT local-address 192.0.2.21 set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX12 type external set protocols bgp group MX12 local-address 192.168.7.1 set protocols bgp group MX12 export TEST set protocols bgp group MX12 export LO set protocols bgp group MX12 peer-as 65500 set protocols bgp group MX12 local-as 65400 set protocols bgp group MX12 neighbor 192.168.7.2 family inet unicast set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.3.2 set protocols bgp group ToR11 import TEST set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 export LO set protocols bgp group ToR11 peer-as 65100 set protocols bgp group ToR11 local-as 65400 set protocols bgp group ToR11 neighbor 192.168.3.1 family inet unicast set protocols bgp group ToR12 type external set protocols bgp group ToR12 local-address 192.168.6.2 set protocols bgp group ToR12 export TEST set protocols bgp group ToR12 export LO set protocols bgp group ToR12 peer-as 65200 set protocols bgp group ToR12 local-as 65400 set protocols bgp group ToR12 neighbor 192.168.6.1 family inet unicast set protocols bgp group MX12-EVPN type external set protocols bgp group MX12-EVPN multihop ttl 2 set protocols bgp group MX12-EVPN multihop no-nexthop-change set protocols bgp group MX12-EVPN local-address 192.0.2.21 set protocols bgp group MX12-EVPN export TEST set protocols bgp group MX12-EVPN peer-as 65500 set protocols bgp group MX12-EVPN local-as 65400 set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.21 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 65100 set protocols bgp group ToR11-EVPN local-as 65400 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN type external set protocols bgp group ToR12-EVPN multihop ttl 2 set protocols bgp group ToR12-EVPN multihop no-nexthop-change set protocols bgp group ToR12-EVPN local-address 192.0.2.21 set protocols bgp group ToR12-EVPN export TEST set protocols bgp group ToR12-EVPN peer-as 65200 set protocols bgp group ToR12-EVPN local-as 65400 set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-5/1/9.0 set protocols ospf area 0.0.0.0 interface lo0.84 passive set protocols l2-learning traceoptions file MX11-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 192.0.2.21/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-5/1/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.21:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX11-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.84 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-5/1/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.21:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX11-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
데이터센터 게이트웨이 및 WAN 에지 2 라우터(MX12)
set system host-name MX12 set logical-systems P interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX21" set logical-systems P interfaces ge-1/0/0 unit 0 family inet address 203.0.113.32/24 set logical-systems P interfaces ge-1/0/0 unit 0 family mpls set logical-systems P interfaces ge-1/0/2 unit 0 description "CONNECTED TO MX22" set logical-systems P interfaces ge-1/0/2 unit 0 family inet address 203.0.113.52/24 set logical-systems P interfaces ge-1/0/2 unit 0 family mpls set logical-systems P interfaces ge-1/1/1 unit 0 description "CONNECTED TO MX11" set logical-systems P interfaces ge-1/1/1 unit 0 family inet address 203.0.113.42/24 set logical-systems P interfaces ge-1/1/1 unit 0 family mpls set logical-systems P interfaces ge-1/1/6 unit 0 description "CONNECTED TO MX12" set logical-systems P interfaces ge-1/1/6 unit 0 family inet address 203.0.113.12/24 set logical-systems P interfaces ge-1/1/6 unit 0 family mpls set logical-systems P interfaces lo0 unit 86 family inet address 203.0.113.1/32 set logical-systems P interfaces lo0 unit 86 family mpls set logical-systems P protocols rsvp interface all set logical-systems P protocols mpls label-switched-path P-TO-MX11 from 203.0.113.1 set logical-systems P protocols mpls label-switched-path P-TO-MX11 to 192.0.2.21 set logical-systems P protocols mpls label-switched-path P-TO-MX12 to 192.0.2.22 set logical-systems P protocols mpls label-switched-path P-TO-MX21 to 198.51.100.21 set logical-systems P protocols mpls label-switched-path P-TO-MX22 to 198.51.100.22 set logical-systems P protocols mpls interface all set logical-systems P protocols bgp local-address 203.0.113.1 set logical-systems P protocols bgp local-as 65300 set logical-systems P protocols bgp group INT type internal set logical-systems P protocols bgp group INT import BLOCK-VXLAN-ROUTES-FROM-CORE set logical-systems P protocols bgp group INT family evpn signaling set logical-systems P protocols bgp group INT cluster 203.0.113.1 set logical-systems P protocols bgp group INT neighbor 192.0.2.21 set logical-systems P protocols bgp group INT neighbor 192.0.2.22 set logical-systems P protocols bgp group INT neighbor 198.51.100.21 set logical-systems P protocols bgp group INT neighbor 198.51.100.22 set logical-systems P protocols ospf traffic-engineering set logical-systems P protocols ospf area 0.0.0.0 interface all set logical-systems P protocols ospf area 0.0.0.0 interface lo0.86 set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from protocol bgp set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from community RT-CORE set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 then accept set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from protocol bgp set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from community RT-DC1 set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 then reject set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from protocol bgp set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from community RT-DC2 set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 then reject set logical-systems P policy-options community RT-CORE members target:1:2 set logical-systems P policy-options community RT-DC1 members target:1:1 set logical-systems P policy-options community RT-DC2 members target:1:3 set logical-systems P routing-options router-id 203.0.113.1 set logical-systems P routing-options autonomous-system 65300 set chassis fpc 1 pic 0 tunnel-services set interfaces traceoptions file MX12-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces lt-1/0/0 esi 00:22:22:22:22:22:22:22:22:22 set interfaces lt-1/0/0 esi all-active set interfaces lt-1/0/0 unit 0 peer-unit 1 set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-1/0/0 unit 1 peer-unit 0 set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-1/0/4 unit 0 description "CONNECTED TO ToR12" set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.2/24 set interfaces ge-1/0/5 unit 0 description "CONNECTED TO ToR11" set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.2/24 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO P" set interfaces ge-1/0/6 unit 0 family inet address 203.0.113.11/24 set interfaces ge-1/0/6 unit 0 family mpls set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX11" set interfaces ge-1/1/0 unit 0 family inet address 192.168.7.2/24 set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.13/24 virtual-gateway-address 10.11.1.10 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.13/24 virtual-gateway-address 10.12.1.10 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.13/24 virtual-gateway-address 10.13.1.10 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.13/24 virtual-gateway-address 10.14.1.10 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.13/24 virtual-gateway-address 10.15.1.10 set interfaces lo0 unit 85 family inet address 192.0.2.22/32 set interfaces lo0 unit 85 family mpls set routing-options router-id 192.0.2.22 set routing-options autonomous-system 65300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX12-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX12-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX12-TO-MX21 to 198.51.100.21 set protocols mpls label-switched-path MX12-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 192.0.2.22 set protocols bgp local-as 65300 set protocols bgp group INT type internal set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX11 type external set protocols bgp group MX11 local-address 192.168.7.2 set protocols bgp group MX11 export TEST set protocols bgp group MX11 export LO set protocols bgp group MX11 peer-as 65400 set protocols bgp group MX11 local-as 65500 set protocols bgp group MX11 neighbor 192.168.7.1 family inet unicast set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.4.2 set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 export LO set protocols bgp group ToR11 peer-as 65100 set protocols bgp group ToR11 local-as 65500 set protocols bgp group ToR11 neighbor 192.168.4.1 family inet unicast set protocols bgp group ToR12 type external set protocols bgp group ToR12 local-address 192.168.5.2 set protocols bgp group ToR12 export TEST set protocols bgp group ToR12 export LO set protocols bgp group ToR12 peer-as 65200 set protocols bgp group ToR12 local-as 65500 set protocols bgp group ToR12 neighbor 192.168.5.1 family inet unicast set protocols bgp group MX11-EVPN type external set protocols bgp group MX11-EVPN multihop ttl 2 set protocols bgp group MX11-EVPN multihop no-nexthop-change set protocols bgp group MX11-EVPN local-address 192.0.2.22 set protocols bgp group MX11-EVPN export TEST set protocols bgp group MX11-EVPN peer-as 65400 set protocols bgp group MX11-EVPN local-as 65500 set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.22 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 65100 set protocols bgp group ToR11-EVPN local-as 65500 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN type external set protocols bgp group ToR12-EVPN multihop ttl 2 set protocols bgp group ToR12-EVPN multihop no-nexthop-change set protocols bgp group ToR12-EVPN local-address 192.0.2.22 set protocols bgp group ToR12-EVPN export TEST set protocols bgp group ToR12-EVPN peer-as 65200 set protocols bgp group ToR12-EVPN local-as 65500 set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-1/0/6.0 set protocols ospf area 0.0.0.0 interface lo0.85 passive set protocols l2-learning traceoptions file MX12-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 192.0.2.22/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST from protocol bgp set policy-options policy-statement TEST from protocol evpn set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.22:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX12-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.85 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.22:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX12-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
데이터센터 게이트웨이 및 WAN 에지 3 라우터(MX21)
set system host-name MX21 set interfaces ge-3/0/0 unit 0 description "CONNECTED TO MX22" set interfaces ge-3/0/0 unit 0 family inet address 192.168.13.1/24 set interfaces ge-3/1/0 unit 0 description "CONNECTED TO ToR22" set interfaces ge-3/1/0 unit 0 family inet address 192.168.8.1/24 set interfaces ge-5/0/0 unit 0 description "CONNECTED TO P" set interfaces ge-5/0/0 unit 0 family inet address 203.0.113.31/24 set interfaces ge-5/0/0 unit 0 family mpls set interfaces lt-5/0/0 esi 00:33:33:33:33:33:33:33:33:33 set interfaces lt-5/0/0 esi all-active set interfaces lt-5/0/0 unit 0 peer-unit 1 set interfaces lt-5/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-5/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-5/0/0 unit 1 peer-unit 0 set interfaces lt-5/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-5/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-5/0/1 unit 0 description "CONNECTED TO ToR21" set interfaces ge-5/0/1 unit 0 family inet address 192.168.9.1/24 set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.14/24 virtual-gateway-address 10.11.1.11 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.14/24 virtual-gateway-address 10.12.1.11 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.14/24 virtual-gateway-address 10.13.1.11 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.14/24 virtual-gateway-address 10.14.1.11 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.14/24 virtual-gateway-address 10.15.1.11 set interfaces lo0 unit 87 family inet address 198.51.100.21/32 set interfaces lo0 unit 87 family mpls set routing-options router-id 198.51.100.21 set routing-options autonomous-system 65300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX21-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX21-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX21-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX21-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 198.51.100.21 set protocols bgp export TEST set protocols bgp local-as 65300 set protocols bgp group INT type internal set protocols bgp group INT local-address 198.51.100.21 set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 192.168.13.1 set protocols bgp group MX22 export TEST set protocols bgp group MX22 export LO set protocols bgp group MX22 peer-as 64900 set protocols bgp group MX22 local-as 64800 set protocols bgp group MX22 neighbor 192.168.13.2 family inet unicast set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.9.1 set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 export LO set protocols bgp group ToR21 peer-as 64600 set protocols bgp group ToR21 local-as 64800 set protocols bgp group ToR21 neighbor 192.168.9.2 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 192.168.8.1 set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 export LO set protocols bgp group ToR22 peer-as 64700 set protocols bgp group ToR22 local-as 64800 set protocols bgp group ToR22 neighbor 192.168.8.2 family inet unicast set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.21 set protocols bgp group MX22-EVPN peer-as 64900 set protocols bgp group MX22-EVPN local-as 64800 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.21 set protocols bgp group ToR21-EVPN peer-as 64600 set protocols bgp group ToR21-EVPN local-as 64800 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.21 set protocols bgp group ToR22-EVPN peer-as 64700 set protocols bgp group ToR22-EVPN local-as 64800 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-5/0/0.0 set protocols ospf area 0.0.0.0 interface lo0.87 passive set protocols l2-learning traceoptions file MX21-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 198.51.100.21/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-5/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.21:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX21-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.87 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-5/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.21:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX21-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
데이터센터 게이트웨이 및 WAN 에지 4 라우터(MX22)
set system host-name MX22 set interfaces xe-0/0/0 unit 0 description "CONNECTED TO ToR22" set interfaces xe-0/0/0 unit 0 family inet address 192.168.11.1/24 set interfaces xe-0/0/1 unit 0 description "CONNECTED TO ToR21" set interfaces xe-0/0/1 unit 0 family inet address 192.168.10.1/24 set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX21" set interfaces ge-1/0/0 unit 0 family inet address 192.168.13.2/24 set interfaces lt-1/0/0 esi 00:33:33:33:33:33:33:33:33:33 set interfaces lt-1/0/0 esi all-active set interfaces lt-1/0/0 unit 0 peer-unit 1 set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-1/0/0 unit 1 peer-unit 0 set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-1/0/2 unit 0 description "CONNECTED TO P" set interfaces ge-1/0/2 unit 0 family inet address 203.0.113.51/24 set interfaces ge-1/0/2 unit 0 family mpls set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.15/24 virtual-gateway-address 10.11.1.11 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.15/24 virtual-gateway-address 10.12.1.11 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.15/24 virtual-gateway-address 10.13.1.11 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.15/24 virtual-gateway-address 10.14.1.11 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.15/24 virtual-gateway-address 10.15.1.11 set interfaces lo0 unit 88 family inet address 198.51.100.22/32 set interfaces lo0 unit 88 family mpls set routing-options router-id 198.51.100.22 set routing-options autonomous-system 65300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX22-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX22-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX22-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX22-TO-MX21 to 198.51.100.21 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 198.51.100.22 set protocols bgp export TEST set protocols bgp local-as 65300 set protocols bgp group INT type internal set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 192.168.13.2 set protocols bgp group MX21 export TEST set protocols bgp group MX21 export LO set protocols bgp group MX21 peer-as 64800 set protocols bgp group MX21 local-as 64900 set protocols bgp group MX21 neighbor 192.168.13.1 family inet unicast set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.10.1 set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 export LO set protocols bgp group ToR21 peer-as 64600 set protocols bgp group ToR21 local-as 64900 set protocols bgp group ToR21 neighbor 192.168.10.2 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 192.168.11.1 set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 export LO set protocols bgp group ToR22 peer-as 64700 set protocols bgp group ToR22 local-as 64900 set protocols bgp group ToR22 neighbor 192.168.11.2 family inet unicast set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.22 set protocols bgp group MX21-EVPN peer-as 64800 set protocols bgp group MX21-EVPN local-as 64900 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.22 set protocols bgp group ToR21-EVPN peer-as 64600 set protocols bgp group ToR21-EVPN local-as 64900 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.22 set protocols bgp group ToR22-EVPN peer-as 64700 set protocols bgp group ToR22-EVPN local-as 64900 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-1/0/2.0 set protocols ospf area 0.0.0.0 interface lo0.88 passive set protocols l2-learning traceoptions file MX22-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 198.51.100.22/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.22:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX22-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.88 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.22:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX22-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
ToR21
set system host-name ToR21 set logical-systems CE-4 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 4" set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-4 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR21" set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-4 bridge-domains BD-1 domain-type bridge set logical-systems CE-4 bridge-domains BD-1 vlan-id 1 set logical-systems CE-4 bridge-domains BD-2 domain-type bridge set logical-systems CE-4 bridge-domains BD-2 vlan-id 2 set logical-systems CE-4 bridge-domains BD-3 domain-type bridge set logical-systems CE-4 bridge-domains BD-3 vlan-id 3 set logical-systems CE-4 bridge-domains BD-4 domain-type bridge set logical-systems CE-4 bridge-domains BD-4 vlan-id 4 set logical-systems CE-4 bridge-domains BD-5 domain-type bridge set logical-systems CE-4 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 1 set interfaces traceoptions file ToR21-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces xe-0/0/0 unit 0 description "CONNECTED TO MX22" set interfaces xe-0/0/0 unit 0 family inet address 192.168.10.2/24 set interfaces ge-1/0/0 description "CONNECTED TO CE-5" set interfaces ge-1/0/0 gigether-options 802.3ad ae0 set interfaces ge-1/0/1 unit 0 description "CONNECTED TO MX21" set interfaces ge-1/0/1 unit 0 family inet address 192.168.9.2/24 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-4" set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR22" set interfaces ge-1/1/3 unit 0 family inet address 192.168.12.1/24 set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces lo0 unit 90 family inet address 198.51.100.11/32 set routing-options router-id 198.51.100.11 set routing-options autonomous-system 64600 set routing-options forwarding-table export evpn-pplb set protocols bgp export TEST set protocols bgp local-as 64600 set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 192.168.9.2 set protocols bgp group MX21 export LO set protocols bgp group MX21 export TEST set protocols bgp group MX21 peer-as 64800 set protocols bgp group MX21 local-as 64600 set protocols bgp group MX21 neighbor 192.168.9.1 family inet unicast set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 192.168.10.2 set protocols bgp group MX22 export LO set protocols bgp group MX22 export TEST set protocols bgp group MX22 peer-as 64900 set protocols bgp group MX22 local-as 64600 set protocols bgp group MX22 neighbor 192.168.10.1 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 192.168.12.1 set protocols bgp group ToR22 export LO set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 peer-as 64700 set protocols bgp group ToR22 local-as 64600 set protocols bgp group ToR22 neighbor 192.168.12.2 family inet unicast set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.11 set protocols bgp group MX21-EVPN peer-as 64800 set protocols bgp group MX21-EVPN local-as 64600 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.11 set protocols bgp group MX22-EVPN peer-as 64900 set protocols bgp group MX22-EVPN local-as 64600 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.11 set protocols bgp group ToR22-EVPN peer-as 64700 set protocols bgp group ToR22-EVPN local-as 64600 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols l2-learning traceoptions file TOR21-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 198.51.100.11/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.90 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.11:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR21-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
ToR22
set system host-name ToR22 set logical-systems CE-5 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 5" set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-5 interfaces ae1 unit 0 description "CONNECTED TO ToR21" set logical-systems CE-5 interfaces ae1 unit 0 family bridge interface-mode trunk set logical-systems CE-5 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-5 bridge-domains BD-1 domain-type bridge set logical-systems CE-5 bridge-domains BD-1 vlan-id 1 set logical-systems CE-5 bridge-domains BD-2 domain-type bridge set logical-systems CE-5 bridge-domains BD-2 vlan-id 2 set logical-systems CE-5 bridge-domains BD-3 domain-type bridge set logical-systems CE-5 bridge-domains BD-3 vlan-id 3 set logical-systems CE-5 bridge-domains BD-4 domain-type bridge set logical-systems CE-5 bridge-domains BD-4 vlan-id 4 set logical-systems CE-5 bridge-domains BD-5 domain-type bridge set logical-systems CE-5 bridge-domains BD-5 vlan-id 5 set logical-systems CE-6 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR22" set logical-systems CE-6 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk set logical-systems CE-6 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-6 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 6" set logical-systems CE-6 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk set logical-systems CE-6 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-6 bridge-domains BD-1 domain-type bridge set logical-systems CE-6 bridge-domains BD-1 vlan-id 1 set logical-systems CE-6 bridge-domains BD-2 domain-type bridge set logical-systems CE-6 bridge-domains BD-2 vlan-id 2 set logical-systems CE-6 bridge-domains BD-3 domain-type bridge set logical-systems CE-6 bridge-domains BD-3 vlan-id 3 set logical-systems CE-6 bridge-domains BD-4 domain-type bridge set logical-systems CE-6 bridge-domains BD-4 vlan-id 4 set logical-systems CE-6 bridge-domains BD-5 domain-type bridge set logical-systems CE-6 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 2 set interfaces traceoptions file ToR22-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces xe-0/0/0 unit 0 description "CONNECTED TO MX22" set interfaces xe-0/0/0 unit 0 family inet address 192.168.11.2/24 set interfaces ge-1/0/0 description "CONNECTED TO ToR21" set interfaces ge-1/0/0 gigether-options 802.3ad ae1 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-6" set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/0/7 description "CONNECTED TO ToR22" set interfaces ge-1/0/7 gigether-options 802.3ad ae1 set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX21" set interfaces ge-1/1/0 unit 0 family inet address 192.168.8.2/24 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR21" set interfaces ge-1/1/3 unit 0 family inet address 192.168.12.2/24 set interfaces ge-1/1/7 description "CONNECTED TO CE-5" set interfaces ge-1/1/7 gigether-options 802.3ad ae0 set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options lacp periodic fast set interfaces ae1 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces lo0 unit 92 family inet address 198.51.100.12/32 set routing-options router-id 198.51.100.12 set routing-options autonomous-system 64700 set routing-options forwarding-table export evpn-pplb set protocols bgp export TEST set protocols bgp local-as 64700 set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 192.168.8.2 set protocols bgp group MX21 export LO set protocols bgp group MX21 export TEST set protocols bgp group MX21 peer-as 64800 set protocols bgp group MX21 local-as 64700 set protocols bgp group MX21 neighbor 192.168.8.1 family inet unicast set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 192.168.11.2 set protocols bgp group MX22 export LO set protocols bgp group MX22 export TEST set protocols bgp group MX22 peer-as 64900 set protocols bgp group MX22 local-as 64700 set protocols bgp group MX22 neighbor 192.168.11.1 family inet unicast set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.12.2 set protocols bgp group ToR21 export LO set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 peer-as 64600 set protocols bgp group ToR21 local-as 64700 set protocols bgp group ToR21 neighbor 192.168.12.1 family inet unicast set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.12 set protocols bgp group MX21-EVPN peer-as 64800 set protocols bgp group MX21-EVPN local-as 64700 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.12 set protocols bgp group MX22-EVPN peer-as 64900 set protocols bgp group MX22-EVPN local-as 64700 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.12 set protocols bgp group ToR21-EVPN peer-as 64600 set protocols bgp group ToR21-EVPN local-as 64700 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols l2-learning traceoptions file TOR22-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 198.51.100.12/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.92 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.12:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR22-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
ToR11 구성
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
MX 라우터를 ToR11로 구성합니다.
시스템 호스트 이름을 설정합니다.
[edit] user@ToR11# set system host-name ToR11
레이어 2 연결을 활성화하기 위해 CE2 디바이스에서 인터페이스 및 브리지 도메인을 구성합니다.
[edit] user@ToR11# set logical-systems CE-2 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 2" user@ToR11# set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ToR11# set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ToR11# set logical-systems CE-2 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR11" user@ToR11# set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk user@ToR11# set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 user@ToR11# set logical-systems CE-2 bridge-domains BD-1 domain-type bridge user@ToR11# set logical-systems CE-2 bridge-domains BD-1 vlan-id 1 user@ToR11# set logical-systems CE-2 bridge-domains BD-2 domain-type bridge user@ToR11# set logical-systems CE-2 bridge-domains BD-2 vlan-id 2 user@ToR11# set logical-systems CE-2 bridge-domains BD-3 domain-type bridge user@ToR11# set logical-systems CE-2 bridge-domains BD-3 vlan-id 3 user@ToR11# set logical-systems CE-2 bridge-domains BD-4 domain-type bridge user@ToR11# set logical-systems CE-2 bridge-domains BD-4 vlan-id 4 user@ToR11# set logical-systems CE-2 bridge-domains BD-5 domain-type bridge user@ToR11# set logical-systems CE-2 bridge-domains BD-5 vlan-id 5
인터페이스에 대한 추적 옵션을 구성하여 추적 로그를 활성화합니다.
[edit] user@ToR11# set interfaces traceoptions file ToR11-DCD.log user@ToR11# set interfaces traceoptions file size 10m user@ToR11# set interfaces traceoptions flag all
어그리게이션 이더넷 인터페이스의 수를 설정합니다.
[edit] user@ToR11# set chassis aggregated-devices ethernet device-count 1
MX12, CE-2, CE-1, ToR12 및 MX11 디바이스에 연결하도록 ToR11 디바이스의 인터페이스를 구성하여 언더레이 연결을 활성화합니다.
[edit] user@ToR11# set interfaces ge-1/0/0 description "CONNECTED TO CE-1" user@ToR11# set interfaces ge-1/0/0 gigether-options 802.3ad ae0 user@ToR11# set interfaces ge-1/0/5 unit 0 description "CONNECTED TO MX12" user@ToR11# set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.1/24 user@ToR11# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-2" user@ToR11# set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk user@ToR11# set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 user@ToR11# set interfaces ge-1/1/1 unit 0 description "CONNECTED TO MX11" user@ToR11# set interfaces ge-1/1/1 unit 0 family inet address 192.168.3.1/24 user@ToR11# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR12" user@ToR11# set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.1/24
CE-1 종단 호스트 디바이스를 향해 LACP(Link Aggregation Control Protocol) 지원 LAG(Link Aggregation Group) 인터페이스를 구성합니다. ESI 값은 전체 EVPN 도메인에서 전역적으로 고유합니다. 이
all-active
구성을 통해 ToR11 및 ToR12는 모든 CE 링크가 활발하게 사용되도록 CE 디바이스와 트래픽을 주고받을 수 있습니다.[edit] user@ToR11# set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 user@ToR11# set interfaces ae0 esi all-active user@ToR11# set interfaces ae0 aggregated-ether-options lacp active user@ToR11# set interfaces ae0 aggregated-ether-options lacp periodic fast user@ToR11# set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 user@ToR11# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR11# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5
루프백 인터페이스 주소 및 라우팅 옵션을 구성합니다.
[edit] user@ToR11# set interfaces lo0 unit 81 family inet address 192.0.2.11/32 user@ToR11# set routing-options router-id 192.0.2.11 user@ToR11# set routing-options autonomous-system 65100
포워딩 테이블에 로드 밸런싱 정책을 적용합니다.
[edit] user@ToR11# set routing-options forwarding-table export evpn-pplb
ToR(ToR11 및 ToR12)과 게이트웨이 라우터(MX11 및 MX12) 간에 외부 BGP(EBGP) 언더레이 연결을 구성합니다.
[edit] user@ToR11# set protocols bgp local-as 64100 user@ToR11# set protocols bgp group MX11 type external user@ToR11# set protocols bgp group MX11 local-address 192.168.3.1 user@ToR11# set protocols bgp group MX11 export LO user@ToR11# set protocols bgp group MX11 export TEST user@ToR11# set protocols bgp group MX11 peer-as 65400 user@ToR11# set protocols bgp group MX11 neighbor 192.168.3.2 family inet unicast user@ToR11# set protocols bgp group MX12 type external user@ToR11# set protocols bgp group MX12 local-address 192.168.4.1 user@ToR11# set protocols bgp group MX12 export LO user@ToR11# set protocols bgp group MX12 export TEST user@ToR11# set protocols bgp group MX12 peer-as 65500 user@ToR11# set protocols bgp group MX12 neighbor 192.168.4.2 family inet unicast user@ToR11# set protocols bgp group ToR12 type external user@ToR11# set protocols bgp group ToR12 local-address 192.168.2.1 user@ToR11# set protocols bgp group ToR12 export LO user@ToR11# set protocols bgp group ToR12 export TEST user@ToR11# set protocols bgp group ToR12 peer-as 65200 user@ToR11# set protocols bgp group ToR12 local-as 65100 user@ToR11# set protocols bgp group ToR12 neighbor 192.168.2.2 family inet unicast
ToR(ToR11 및 ToR12)과 게이트웨이 라우터(MX11 및 MX12) 사이에 외부 BGP(EBGP) 오버레이를 구성하고 EVPN을 신호 프로토콜로 설정합니다.
단계별 절차
EVPN 신호를 사용하여 ToR11과 MX11 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR11# set protocols bgp group MX11-EVPN type external user@ToR11# set protocols bgp group MX11-EVPN multihop ttl 2 user@ToR11# set protocols bgp group MX11-EVPN multihop no-nexthop-change user@ToR11# set protocols bgp group MX11-EVPN local-address 192.0.2.11 user@ToR11# set protocols bgp group MX11-EVPN export TEST user@ToR11# set protocols bgp group MX11-EVPN peer-as 65400 user@ToR11# set protocols bgp group MX11-EVPN local-as 65100 user@ToR11# set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling
EVPN 신호를 사용하여 ToR11과 MX12 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR11# set protocols bgp group MX12-EVPN type external user@ToR11# set protocols bgp group MX12-EVPN multihop ttl 2 user@ToR11# set protocols bgp group MX12-EVPN multihop no-nexthop-change user@ToR11# set protocols bgp group MX12-EVPN local-address 192.0.2.11 user@ToR11# set protocols bgp group MX12-EVPN export TEST user@ToR11# set protocols bgp group MX12-EVPN peer-as 65500 user@ToR11# set protocols bgp group MX12-EVPN local-as 65100 user@ToR11# set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling
EVPN 시그널링을 사용하여 ToR11과 ToR12 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR11# set protocols bgp group ToR12-EVPN type external user@ToR11# set protocols bgp group ToR12-EVPN multihop ttl 2 user@ToR11# set protocols bgp group ToR12-EVPN multihop no-nexthop-change user@ToR11# set protocols bgp group ToR12-EVPN local-address 192.0.2.11 user@ToR11# set protocols bgp group ToR12-EVPN export TEST user@ToR11# set protocols bgp group ToR12-EVPN peer-as 65200 user@ToR11# set protocols bgp group ToR12-EVPN local-as 65100 user@ToR11# set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling
모든 레이어 2 주소 학습 및 전달 속성을 추적하도록 추적 작업을 구성합니다.
[edit] user@ToR11# set protocols l2-learning traceoptions file TOR11-L2ALD.log user@ToR11# set protocols l2-learning traceoptions file size 10m user@ToR11# set protocols l2-learning traceoptions level all user@ToR11# set protocols l2-learning traceoptions flag all
직접 루프백 주소 경로를 수락하도록 라우팅 정책을 구성합니다.
[edit] user@ToR11# set policy-options policy-statement LO term 1 from protocol direct user@ToR11# set policy-options policy-statement LO term 1 from route-filter 192.0.2.11/32 exact user@ToR11# set policy-options policy-statement LO term 1 then accept
NO-EXPORT 커뮤니티를 구성합니다.
[edit] user@ToR11# set policy-options community NO-EXPORT members no-advertise user@ToR11# set policy-options community NO-EXPORT members no-export user@ToR11# set policy-options community NO-EXPORT members no-export-subconfed
로드 밸런싱 및 TEST 정책을 구성합니다.
[edit] user@ToR11# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR11# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR11# set policy-options policy-statement evpn-pplb then load-balance per-packet
각 가상 네트워크에 대한 EVPN 라우팅 인스턴스를 구성합니다. VTEP 소스 인터페이스, 경로 구분자(EVPN 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. EVPN 프로토콜, 캡슐화 방법, VNI 목록 및 BUM 트래픽 전달 방법을 구성합니다. 마지막으로, VNID를 VLAN ID에 매핑하는 각 가상 라우터에 대한 브리지 도메인을 구성하고 BUM 전달 방법을 식별합니다.[edit] user@ToR11# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.81 user@ToR11# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR11# set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 user@ToR11# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR11# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.11:1 user@ToR11# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR11-EVPN-VXLAN-1.log user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
ToR12 구성
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
MX 라우터 ToR12 구성:
시스템 호스트 이름을 설정합니다.
[edit] user@ToR12# set system host-name ToR12
레이어 2 연결을 활성화하기 위해 CE-1 디바이스의 인터페이스 및 브리지 도메인을 구성합니다.
[edit] user@ToR12# set logical-systems CE-1 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 1" user@ToR12# set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ToR12# set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set logical-systems CE-1 interfaces ae1 unit 0 description "CONNECTED TO ToR12" user@ToR12# set logical-systems CE-1 interfaces ae1 unit 0 family bridge interface-mode trunk user@ToR12# set logical-systems CE-1 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set logical-systems CE-1 bridge-domains BD-1 domain-type bridge user@ToR12# set logical-systems CE-1 bridge-domains BD-1 vlan-id 1 user@ToR12# set logical-systems CE-1 bridge-domains BD-2 domain-type bridge user@ToR12# set logical-systems CE-1 bridge-domains BD-2 vlan-id 2 user@ToR12# set logical-systems CE-1 bridge-domains BD-3 domain-type bridge user@ToR12# set logical-systems CE-1 bridge-domains BD-3 vlan-id 3 user@ToR12# set logical-systems CE-1 bridge-domains BD-4 domain-type bridge user@ToR12# set logical-systems CE-1 bridge-domains BD-4 vlan-id 4 user@ToR12# set logical-systems CE-1 bridge-domains BD-5 domain-type bridge user@ToR12# set logical-systems CE-1 bridge-domains BD-5 vlan-id 5
레이어 2 연결을 활성화하기 위해 CE-3 디바이스의 인터페이스 및 브리지 도메인을 구성합니다.
[edit] user@ToR12# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 description "CONNECTED TO ToR12" user@ToR12# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge interface-mode trunk user@ToR12# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 3" user@ToR12# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk user@ToR12# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set logical-systems CE-3 bridge-domains BD-1 domain-type bridge user@ToR12# set logical-systems CE-3 bridge-domains BD-1 vlan-id 1 user@ToR12# set logical-systems CE-3 bridge-domains BD-2 domain-type bridge user@ToR12# set logical-systems CE-3 bridge-domains BD-2 vlan-id 2 user@ToR12# set logical-systems CE-3 bridge-domains BD-3 domain-type bridge user@ToR12# set logical-systems CE-3 bridge-domains BD-3 vlan-id 3 user@ToR12# set logical-systems CE-3 bridge-domains BD-4 domain-type bridge user@ToR12# set logical-systems CE-3 bridge-domains BD-4 vlan-id 4 user@ToR12# set logical-systems CE-3 bridge-domains BD-5 domain-type bridge user@ToR12# set logical-systems CE-3 bridge-domains BD-5 vlan-id 5
인터페이스에 대한 추적 옵션을 구성하여 추적 로그를 활성화합니다.
[edit] user@ToR12# set interfaces traceoptions file ToR12-DCD.log user@ToR12# set interfaces traceoptions file size 10m user@ToR12# set interfaces traceoptions flag all
어그리게이션 이더넷 인터페이스의 수를 설정합니다.
[edit] user@ToR12# set chassis aggregated-devices ethernet device-count 2
MX12, CE-2, CE-3, ToR11 및 MX11 디바이스에 연결하도록 ToR12 디바이스의 인터페이스를 구성하여 언더레이 연결을 활성화합니다.
[edit] user@ToR12# set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX11" user@ToR12# set interfaces ge-1/0/0 unit 0 family inet address 192.168.6.1/24 user@ToR12# set interfaces ge-1/0/4 unit 0 description "CONNECTED TO MX12" user@ToR12# set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.1/24 user@ToR12# set interfaces ge-1/0/6 description "CONNECTED TO CE-1" user@ToR12# set interfaces ge-1/0/6 gigether-options 802.3ad ae0 user@ToR12# set interfaces ge-1/0/7 unit 0 description "CONNECTED TO CE-3" user@ToR12# set interfaces ge-1/0/7 unit 0 family bridge interface-mode trunk user@ToR12# set interfaces ge-1/0/7 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set interfaces ge-1/1/0 description "CONNECTED TO ToR11" user@ToR12# set interfaces ge-1/1/0 gigether-options 802.3ad ae1 user@ToR12# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR11" user@ToR12# set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.2/24 user@ToR12# set interfaces ge-1/1/6 description "CONNECTED TO ToR12" user@ToR12# set interfaces ge-1/1/6 gigether-options 802.3ad ae1
CE-1 종단 호스트 디바이스를 향해 LACP(Link Aggregation Control Protocol) 지원 LAG(Link Aggregation Group) 인터페이스를 구성합니다. ESI 값은 전체 EVPN 도메인에서 전역적으로 고유합니다. 이
all-active
구성을 통해 ToR11 및 ToR12는 모든 CE 링크가 활발하게 사용되도록 CE 디바이스와 트래픽을 주고받을 수 있습니다.[edit] user@ToR12# set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 user@ToR12# set interfaces ae0 esi all-active user@ToR12# set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 user@ToR12# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR12# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set interfaces ae1 aggregated-ether-options lacp active user@ToR12# set interfaces ae1 aggregated-ether-options lacp periodic fast
루프백 인터페이스 주소 및 라우팅 옵션을 구성합니다.
[edit] user@ToR12# set interfaces lo0 unit 82 family inet address 192.0.2.12/32 user@ToR12# set routing-options router-id 192.0.2.12 user@ToR12# set routing-options autonomous-system 65200
포워딩 테이블에 로드 밸런싱 정책을 적용합니다.
[edit] user@ToR12# set routing-options forwarding-table export evpn-pplb
ToR(ToR12 및 ToR11)과 게이트웨이 라우터(MX11 및 MX12) 간의 외부 BGP(EBGP) 언더레이 연결을 구성합니다.
[edit] user@ToR12# set protocols bgp local-as 65200 user@ToR12# set protocols bgp group MX11 type external user@ToR12# set protocols bgp group MX11 local-address 192.168.6.1 user@ToR12# set protocols bgp group MX11 export LO user@ToR12# set protocols bgp group MX11 export TEST user@ToR12# set protocols bgp group MX11 peer-as 65400 user@ToR12# set protocols bgp group MX11 local-as 65200 user@ToR12# set protocols bgp group MX11 neighbor 192.168.6.2 family inet unicast user@ToR12# set protocols bgp group MX12 type external user@ToR12# set protocols bgp group MX12 local-address 192.168.5.1 user@ToR12# set protocols bgp group MX12 export LO user@ToR12# set protocols bgp group MX12 export TEST user@ToR12# set protocols bgp group MX12 peer-as 65500 user@ToR12# set protocols bgp group MX12 local-as 65200 user@ToR12# set protocols bgp group MX12 neighbor 192.168.5.2 family inet unicast user@ToR12# set protocols bgp group ToR11 type external user@ToR12# set protocols bgp group ToR11 local-address 192.168.2.2 user@ToR12# set protocols bgp group ToR11 export LO user@ToR12# set protocols bgp group ToR11 export TEST user@ToR12# set protocols bgp group ToR11 peer-as 65100 user@ToR12# set protocols bgp group ToR11 local-as 65200 user@ToR12# set protocols bgp group ToR11 neighbor 192.168.2.1 family inet unicast
ToR(ToR12 및 ToR11)과 게이트웨이 라우터(MX11 및 MX12) 간에 멀티프로토콜 외부 BGP(MP-EBGP) 오버레이를 구성하고 EVPN을 신호 프로토콜로 설정합니다.
단계별 절차
EVPN 신호를 사용하여 ToR12와 MX11 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR12# set protocols bgp group MX11-EVPN type external user@ToR12# set protocols bgp group MX11-EVPN multihop ttl 2 user@ToR12# set protocols bgp group MX11-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group MX11-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group MX11-EVPN export TEST user@ToR12# set protocols bgp group MX11-EVPN peer-as 65400 user@ToR12# set protocols bgp group MX11-EVPN local-as 65200 user@ToR12# set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling
EVPN 신호를 사용하여 ToR12와 MX12 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR12# set protocols bgp group MX12-EVPN type external user@ToR12# set protocols bgp group MX12-EVPN multihop ttl 2 user@ToR12# set protocols bgp group MX12-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group MX12-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group MX12-EVPN export TEST user@ToR12# set protocols bgp group MX12-EVPN peer-as 65500 user@ToR12# set protocols bgp group MX12-EVPN local-as 65200 user@ToR12# set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling
EVPN 시그널링을 사용하여 ToR12와 ToR11 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR12# set protocols bgp group ToR11-EVPN type external user@ToR12# set protocols bgp group ToR11-EVPN multihop ttl 2 user@ToR12# set protocols bgp group ToR11-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group ToR11-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group ToR11-EVPN export TEST user@ToR12# set protocols bgp group ToR11-EVPN peer-as 65100 user@ToR12# set protocols bgp group ToR11-EVPN local-as 65200 user@ToR12# set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling user@ToR12# set protocols bgp group ToR12-EVPN export TEST
모든 레이어 2 주소 학습 및 전달 속성을 추적하도록 추적 작업을 구성합니다.
[edit] user@ToR12# set protocols l2-learning traceoptions file TOR12-L2ALD.log user@ToR12# set protocols l2-learning traceoptions file size 10m user@ToR12# set protocols l2-learning traceoptions level all user@ToR12# set protocols l2-learning traceoptions flag all
직접 루프백 주소 경로를 수락하도록 라우팅 정책을 구성합니다.
[edit] user@ToR12# set policy-options policy-statement LO term 1 from protocol direct user@ToR12# set policy-options policy-statement LO term 1 from route-filter 192.0.2.12/32 exact user@ToR12# set policy-options policy-statement LO term 1 then accept
NO-EXPORT 커뮤니티를 구성합니다.
[edit] user@ToR12# set policy-options community NO-EXPORT members no-advertise user@ToR12# set policy-options community NO-EXPORT members no-export user@ToR12# set policy-options community NO-EXPORT members no-export-subconfed
로드 밸런싱 및 TEST 정책을 구성합니다.
[edit] user@ToR12# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR12# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR12# set policy-options policy-statement evpn-pplb then load-balance per-packet
각 가상 네트워크에 대한 EVPN 라우팅 인스턴스를 구성합니다. VTEP 소스 인터페이스, 경로 구분자(EVPN 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. EVPN 프로토콜, 캡슐화 방법, VNI 목록 및 BUM 트래픽 전달 방법을 구성합니다. 마지막으로, VNID를 VLAN ID에 매핑하는 각 가상 라우터에 대한 브리지 도메인을 구성하고 BUM 전달 방법을 식별합니다.[edit] user@ToR12# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.82 user@ToR12# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR12# set routing-instances EVPN-VXLAN-1 interface ge-1/0/7.0 user@ToR12# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR12# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.12:1 user@ToR12# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR12-EVPN-VXLAN-1.log user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
데이터센터 게이트웨이 및 WAN 에지 1 라우터(MX11) 구성
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
MX 시리즈 라우터를 데이터센터 게이트웨이 및 WAN 에지 라우터로 구성하고 이름을 MX11로 지정합니다.
시스템 호스트 이름을 설정합니다.
[edit] user@MX11# set system host-name MX11
MX11 라우터(DC GW/WAN Edge1)의 인터페이스를 구성하여 DC1 네트워크의 EVPN-VXLAN 부분인 MX12, ToR11, ToR12 및 P 디바이스에 대한 언더레이 연결을 활성화합니다.
[edit] user@MX11# set interfaces ge-1/1/1 unit 0 description "CONNECTED TO ToR11" user@MX11# set interfaces ge-1/1/1 unit 0 family inet address 192.168.3.2/24 user@MX11# set interfaces ge-5/1/0 unit 0 description "CONNECTED TO MX12" user@MX11# set interfaces ge-5/1/0 unit 0 family inet address 192.168.7.1/24 user@MX11# set interfaces ge-5/1/8 unit 0 description "CONNECTED TO ToR12" user@MX11# set interfaces ge-5/1/8 unit 0 family inet address 192.168.6.2/24 user@MX11# set interfaces ge-5/1/9 unit 0 description "CONNECTED TO P" user@MX11# set interfaces ge-5/1/9 unit 0 family inet address 203.0.1.1/24 user@MX11# set interfaces ge-5/1/9 unit 0 family mpls
게이트웨이 라우터(MX11 및 MX12)와 ToR(ToR11 및 ToR12) 간의 외부 BGP(EBGP) 언더레이 연결을 구성합니다.
[edit] user@MX11# set protocols bgp group MX12 type external user@MX11# set protocols bgp group MX12 local-address 192.168.7.1 user@MX11# set protocols bgp group MX12 export TEST user@MX11# set protocols bgp group MX12 export LO user@MX11# set protocols bgp group MX12 peer-as 65500 user@MX11# set protocols bgp group MX12 local-as 65400 user@MX11# set protocols bgp group MX12 neighbor 192.168.7.2 family inet unicast user@MX11# set protocols bgp group ToR11 type external user@MX11# set protocols bgp group ToR11 local-address 192.168.3.2 user@MX11# set protocols bgp group ToR11 import TEST user@MX11# set protocols bgp group ToR11 export TEST user@MX11# set protocols bgp group ToR11 export LO user@MX11# set protocols bgp group ToR11 peer-as 65100 user@MX11# set protocols bgp group ToR11 local-as 65400 user@MX11# set protocols bgp group ToR11 neighbor 192.168.3.1 family inet unicast user@MX11# set protocols bgp group ToR12 type external user@MX11# set protocols bgp group ToR12 local-address 192.168.6.2 user@MX11# set protocols bgp group ToR12 export TEST user@MX11# set protocols bgp group ToR12 export LO user@MX11# set protocols bgp group ToR12 peer-as 65200 user@MX11# set protocols bgp group ToR12 local-as 65400 user@MX11# set protocols bgp group ToR12 neighbor 192.168.6.1 family inet unicast
게이트웨이 라우터(MX11 및 MX12)와 ToR(ToR11 및 ToR12) 간에 멀티프로토콜 외부 BGP(MP-EBGP) 오버레이 연결을 구성하고 EVPN을 신호 프로토콜로 설정합니다.
[edit] user@MX11# set protocols bgp group MX12-EVPN type external user@MX11# set protocols bgp group MX12-EVPN multihop ttl 2 user@MX11# set protocols bgp group MX12-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group MX12-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group MX12-EVPN export TEST user@MX11# set protocols bgp group MX12-EVPN peer-as 65500 user@MX11# set protocols bgp group MX12-EVPN local-as 65400 user@MX11# set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling user@MX11# set protocols bgp group ToR11-EVPN type external user@MX11# set protocols bgp group ToR11-EVPN multihop ttl 2 user@MX11# set protocols bgp group ToR11-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group ToR11-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group ToR11-EVPN export TEST user@MX11# set protocols bgp group ToR11-EVPN peer-as 65100 user@MX11# set protocols bgp group ToR11-EVPN local-as 65400 user@MX11# set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling user@MX11# set protocols bgp group ToR12-EVPN type external user@MX11# set protocols bgp group ToR12-EVPN multihop ttl 2 user@MX11# set protocols bgp group ToR12-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group ToR12-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group ToR12-EVPN export TEST user@MX11# set protocols bgp group ToR12-EVPN peer-as 65200 user@MX11# set protocols bgp group ToR12-EVPN local-as 65400 user@MX11# set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling
토폴로지의 호스트에 대한 MAC 및 IP 경로(MAC+IP 유형 2 경로)를 광고하는 통합 라우팅 및 브리징(IRB) 인터페이스를 구성합니다. IRB 구성은 호스트의 VLAN에 대한 게이트웨이입니다.
단계별 절차
다음은 MX11(VLAN-1의 호스트 부분)의 VLAN-1에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX11# set interfaces irb unit 1 proxy-macip-advertisement user@MX11# set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa user@MX11# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 1 family inet address 10.11.1.12/24 virtual-gateway-address 10.11.1.10
다음은 MX11(VLAN-2의 호스트 부분)의 VLAN-2에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX11# set interfaces irb unit 2 proxy-macip-advertisement user@MX11# set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb user@MX11# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 2 family inet address 10.12.1.12/24 virtual-gateway-address 10.12.1.10
다음은 MX11(VLAN-3의 호스트 부분)의 VLAN-3에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX11# set interfaces irb unit 3 proxy-macip-advertisement user@MX11# set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc user@MX11# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 3 family inet address 10.13.1.12/24 virtual-gateway-address 10.13.1.10
다음은 MX11(VLAN-4의 호스트 부분)의 VLAN-4에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX11# set interfaces irb unit 4 proxy-macip-advertisement user@MX11# set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd user@MX11# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 4 family inet address 10.14.1.12/24 virtual-gateway-address 10.14.1.10
다음은 MX11(VLAN-5의 호스트 부분)의 VLAN-5에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX11# set interfaces irb unit 5 proxy-macip-advertisement user@MX11# set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee user@MX11# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 5 family inet address 10.15.1.12/24 virtual-gateway-address 10.15.1.10
모든 레이어 2 주소 학습 및 전달 속성을 추적하도록 추적 작업을 구성합니다.
[edit] user@MX11# set protocols l2-learning traceoptions file MX11-L2ALD.log user@MX11# set protocols l2-learning traceoptions file size 10m user@MX11# set protocols l2-learning traceoptions level all user@MX11# set protocols l2-learning traceoptions flag all
직접 루프백 주소 경로를 수락하도록 라우팅 정책을 구성합니다.
[edit] user@MX11# set policy-options policy-statement LO from protocol direct user@MX11# set policy-options policy-statement LO from route-filter 192.0.2.21/32 exact user@MX11# set policy-options policy-statement LO then accept
NO-EXPORT 커뮤니티를 구성합니다.
[edit] user@MX11# set policy-options community NO-EXPORT members no-advertise user@MX11# set policy-options community NO-EXPORT members no-export user@MX11# set policy-options community NO-EXPORT members no-export-subconfed
로드 밸런싱 및 TEST 정책을 구성합니다.
[edit] user@MX11# set policy-options policy-statement TEST then community add NO-EXPORT user@MX11# set policy-options policy-statement evpn-pplb from protocol evpn user@MX11# set policy-options policy-statement evpn-pplb then load-balance per-packet
논리적 터널 인터페이스에서 ESI 값을 구성합니다. DC1 네트워크의 다른 모든 게이트웨이/WAN 에지 라우터에서 동일한 ESI 값을 사용합니다.
[edit] user@MX11# set interfaces lt-5/1/0 esi 00:22:22:22:22:22:22:22:22:22
명령문을 포함하여 논리 터널 인터페이스에서 액티브-액티브 멀티호밍을
all-active
구성합니다.[edit] user@MX11# set interfaces lt-5/1/0 esi all-active
MX11 게이트웨이 라우터에 한 쌍의 논리 터널(lt-) 인터페이스를 구성하여 데이터센터 네트워크의 EVPN-VXLAN 인스턴스를 WAN의 MPLS 기반 EVPN 인스턴스와 상호 연결합니다. 하나의 논리 터널(lt-) 인터페이스는 EVPN-VXLAN의 액세스 인터페이스로 구성되고 다른 논리 터널(lt-) 인터페이스는 MPLS 기반 EVPN의 액세스 인터페이스로 구성됩니다.
[edit] user@MX11# set interfaces lt-5/1/0 unit 0 peer-unit 1 user@MX11# set interfaces lt-5/1/0 unit 0 family bridge interface-mode trunk user@MX11# set interfaces lt-5/1/0 unit 0 family bridge vlan-id-list 1-5 user@MX11# set interfaces lt-5/1/0 unit 1 peer-unit 0 user@MX11# set interfaces lt-5/1/0 unit 1 family bridge interface-mode trunk user@MX11# set interfaces lt-5/1/0 unit 1 family bridge vlan-id-list 1-5
루프백 인터페이스 주소 및 라우팅 옵션을 구성합니다.
[edit] user@MX11# set interfaces lo0 unit 84 family inet address 192.0.2.21/32 user@MX11# set interfaces lo0 unit 84 family mpls user@MX11# set routing-options router-id 192.0.2.21 user@MX11# set routing-options autonomous-system 65300
포워딩 테이블에 로드 밸런싱 정책을 적용합니다.
[edit] user@MX11# set routing-options forwarding-table export evpn-pplb
코어 인터페이스에서 RSVP, MPLS, BGP 및 OSPF 프로토콜을 활성화합니다. MPLS LSP를 생성하고 다른 게이트웨이 및 WAN 에지 라우터(MX12, P, MX21, MX22)의 주소를 지정합니다.
[edit] user@MX11# set protocols rsvp interface all user@MX11# set protocols rsvp interface fxp0.0 disable user@MX11# set protocols mpls label-switched-path MX11-TO-MX12 to 192.0.2.22 user@MX11# set protocols mpls label-switched-path MX11-TO-P to 203.0.113.1 user@MX11# set protocols mpls label-switched-path MX11-TO-MX21 to 198.51.100.21 user@MX11# set protocols mpls label-switched-path MX11-TO-MX22 to 198.51.100.22 user@MX11# set protocols mpls interface all user@MX11# set protocols mpls interface fxp0.0 disable user@MX11# set protocols bgp local-address 192.0.2.21 user@MX11# set protocols bgp local-as 65300 user@MX11# set protocols bgp group INT type internal user@MX11# set protocols bgp group INT local-address 192.0.2.21 user@MX11# set protocols bgp group INT family evpn signaling user@MX11# set protocols bgp group INT export TEST user@MX11# set protocols bgp group INT neighbor 203.0.113.1 user@MX11# set protocols ospf traffic-engineering user@MX11# set protocols ospf area 0.0.0.0 interface ge-5/1/9.0 user@MX11# set protocols ospf area 0.0.0.0 interface lo0.84 passive
각 가상 네트워크의 MX11 라우터에서 EVPN 기반 MPLS 라우팅 인스턴스를 구성합니다. 경로 구분자(EVPN-MPLS 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. VLAN ID를 매핑하는 각 가상 라우터에 대해 브리지 도메인을 구성합니다.[edit] user@MX11# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX11# set routing-instances EVPN-MPLS-1 interface lt-5/1/0.0 user@MX11# set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.21:100 user@MX11# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX11-EVPN-MPLS-1.log user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
각 가상 네트워크의 MX11 라우터에서 EVPN-VXLAN 라우팅 인스턴스를 구성합니다. VTEP 소스 인터페이스, 경로 구분자(EVPN 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. EVPN 프로토콜, 캡슐화 방법, VNI 목록 및 BUM 트래픽 전달 방법을 구성합니다. 마지막으로, VNID를 VLAN ID에 매핑하는 각 가상 라우터에 대한 브리지 도메인을 구성하고 BUM 전달 방법을 식별합니다.[edit] user@MX11# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.84 user@MX11# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX11# set routing-instances EVPN-VXLAN-1 interface lt-5/1/0.1 user@MX11# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.21:1 user@MX11# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX11-EVPN-VXLAN-1.log user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX11# set routing-instances VRF instance-type vrf user@MX11# set routing-instances VRF interface irb.1 user@MX11# set routing-instances VRF interface irb.2 user@MX11# set routing-instances VRF interface irb.3 user@MX11# set routing-instances VRF interface irb.4 user@MX11# set routing-instances VRF interface irb.5 user@MX11# set routing-instances VRF route-distinguisher 1:1 user@MX11# set routing-instances VRF vrf-target target:10:10
데이터센터 게이트웨이 및 WAN 에지 2 라우터 구성(MX12)
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
MX 시리즈 라우터를 데이터센터 게이트웨이 및 WAN 에지 라우터로 구성하고 이름을 MX12로 지정합니다.
시스템 호스트 이름을 설정합니다.
[edit] user@MX12# set system host-name MX12
P 디바이스를 MX12 데이터센터 게이트웨이 및 WAN 에지 라우터의 논리적 시스템으로 구성합니다.
단계별 절차
P 디바이스의 인터페이스를 구성합니다.
[edit] user@MX12# set logical-systems P interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX21" user@MX12# set logical-systems P interfaces ge-1/0/0 unit 0 family inet address 203.0.113.32/24 user@MX12# set logical-systems P interfaces ge-1/0/0 unit 0 family mpls user@MX12# set logical-systems P interfaces ge-1/0/2 unit 0 description "CONNECTED TO MX22" user@MX12# set logical-systems P interfaces ge-1/0/2 unit 0 family inet address 203.0.113.52/24 user@MX12# set logical-systems P interfaces ge-1/0/2 unit 0 family mpls user@MX12# set logical-systems P interfaces ge-1/1/1 unit 0 description "CONNECTED TO MX11" user@MX12# set logical-systems P interfaces ge-1/1/1 unit 0 family inet address 203.0.113.42/24 user@MX12# set logical-systems P interfaces ge-1/1/1 unit 0 family mpls user@MX12# set logical-systems P interfaces ge-1/1/6 unit 0 description "CONNECTED TO MX12" user@MX12# set logical-systems P interfaces ge-1/1/6 unit 0 family inet address 203.0.113.12/24 user@MX12# set logical-systems P interfaces ge-1/1/6 unit 0 family mpls
P 디바이스의 코어 인터페이스에서 RSVP, MPLS, BGP, 및 OSPF 프로토콜을 활성화합니다. MPLS LSP를 생성하고 다른 게이트웨이 및 WAN 에지 라우터(MX11, MX12, MX21, MX22)의 주소를 지정합니다.
[edit] user@MX12# set logical-systems P protocols rsvp interface all user@MX12# set logical-systems P protocols mpls label-switched-path P-TO-MX11 from 203.0.113.1 user@MX12# set logical-systems P protocols mpls label-switched-path P-TO-MX11 to 192.0.2.21 user@MX12# set logical-systems P protocols mpls label-switched-path P-TO-MX12 to 192.0.2.22 user@MX12# set logical-systems P protocols mpls label-switched-path P-TO-MX21 to 198.51.100.21 user@MX12# set logical-systems P protocols mpls label-switched-path P-TO-MX22 to 198.51.100.22 user@MX12# set logical-systems P protocols mpls interface all user@MX12# set logical-systems P protocols bgp local-address 203.0.113.1 user@MX12# set logical-systems P protocols bgp local-as 65300 user@MX12# set logical-systems P protocols bgp group INT type internal user@MX12# set logical-systems P protocols bgp group INT import BLOCK-VXLAN-ROUTES-FROM-CORE user@MX12# set logical-systems P protocols bgp group INT family evpn signaling user@MX12# set logical-systems P protocols bgp group INT cluster 203.0.113.1 user@MX12# set logical-systems P protocols bgp group INT neighbor 192.0.2.21 user@MX12# set logical-systems P protocols bgp group INT neighbor 192.0.2.22 user@MX12# set logical-systems P protocols bgp group INT neighbor 198.51.100.21 user@MX12# set logical-systems P protocols bgp group INT neighbor 198.51.100.22 user@MX12# set logical-systems P protocols ospf traffic-engineering user@MX12# set logical-systems P protocols ospf area 0.0.0.0 interface all user@MX12# set logical-systems P protocols ospf area 0.0.0.0 interface lo0.86
루프백 인터페이스 주소 및 라우팅 옵션을 구성합니다.
[edit] user@MX12# set logical-systems P interfaces lo0 unit 86 family inet address 203.0.113.1/32 user@MX12# set logical-systems P interfaces lo0 unit 86 family mpls user@MX12# set logical-systems P routing-options router-id 203.0.113.1 user@MX12# set logical-systems P routing-options autonomous-system 65300
라우팅 정책 BLOCK-VXLAN-ROUTES-FROM-CORE를 구성합니다.
[edit] user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from protocol bgp user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from community RT-CORE user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 then accept user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from protocol bgp user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from community RT-DC1 user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 then reject user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from protocol bgp user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from community RT-DC2 user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 then reject
RT-CORE, RT-DC1 및 RT-DC2 커뮤니티를 구성합니다.
[edit] user@MX12# set logical-systems P policy-options community RT-CORE members target:1:2 user@MX12# set logical-systems P policy-options community RT-DC1 members target:1:1 user@MX12# set logical-systems P policy-options community RT-DC2 members target:1:3
인터페이스에 대한 추적 옵션을 구성하여 추적 로그를 활성화합니다.
[edit] user@MX12# set interfaces traceoptions file MX12-DCD.log user@MX12# set interfaces traceoptions file size 10m user@MX12# set interfaces traceoptions flag all
MX12 라우터(DC GW/WAN Edge 2)의 인터페이스를 구성하여 DC1 네트워크의 EVPN-VXLAN 부분인 MX11, ToR12, ToR11 및 P 디바이스에 대한 언더레이 연결을 활성화합니다.
[edit] user@MX12# set interfaces ge-1/0/4 unit 0 description "CONNECTED TO ToR12" user@MX12# set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.2/24 user@MX12# set interfaces ge-1/0/5 unit 0 description "CONNECTED TO TOR11" user@MX12# set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.2/24 user@MX12# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO P" user@MX12# set interfaces ge-1/0/6 unit 0 family inet address 203.0.113.11/24 user@MX12# set interfaces ge-1/0/6 unit 0 family mpls user@MX12# set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX11" user@MX12# set interfaces ge-1/1/0 unit 0 family inet address 192.168.7.2/24
게이트웨이 라우터(MX11 및 MX12)와 ToR(ToR11 및 ToR12) 간의 외부 BGP(EBGP) 언더레이 연결을 구성합니다.
[edit] user@MX12# set protocols bgp group MX11 type external user@MX12# set protocols bgp group MX11 local-address 192.168.7.2 user@MX12# set protocols bgp group MX11 export TEST user@MX12# set protocols bgp group MX11 export LO user@MX12# set protocols bgp group MX11 peer-as 65400 user@MX12# set protocols bgp group MX11 local-as 65500 user@MX12# set protocols bgp group MX11 neighbor 192.168.7.1 family inet unicast user@MX12# set protocols bgp group ToR11 type external user@MX12# set protocols bgp group ToR11 local-address 192.168.4.2 user@MX12# set protocols bgp group ToR11 export TEST user@MX12# set protocols bgp group ToR11 export LO user@MX12# set protocols bgp group ToR11 peer-as 65100 user@MX12# set protocols bgp group ToR11 local-as 65500 user@MX12# set protocols bgp group ToR11 neighbor 192.168.4.1 family inet unicast user@MX12# set protocols bgp group ToR12 type external user@MX12# set protocols bgp group ToR12 local-address 192.168.5.2 user@MX12# set protocols bgp group ToR12 export TEST user@MX12# set protocols bgp group ToR12 export LO user@MX12# set protocols bgp group ToR12 peer-as 65200 user@MX12# set protocols bgp group ToR12 local-as 65500 user@MX12# set protocols bgp group ToR12 neighbor 192.168.5.1 family inet unicast
게이트웨이 라우터(MX11 및 MX12)와 ToR(ToR11 및 ToR12) 간에 멀티프로토콜 외부 BGP(MP-EBGP) 오버레이 연결을 구성하고 EVPN을 신호 프로토콜로 설정합니다.
[edit] user@MX12# set protocols bgp group MX11-EVPN type external user@MX12# set protocols bgp group MX11-EVPN multihop ttl 2 user@MX12# set protocols bgp group MX11-EVPN multihop no-nexthop-change user@MX12# set protocols bgp group MX11-EVPN local-address 192.0.2.22 user@MX12# set protocols bgp group MX11-EVPN export TEST user@MX12# set protocols bgp group MX11-EVPN peer-as 65400 user@MX12# set protocols bgp group MX11-EVPN local-as 65500 user@MX12# set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling user@MX12# set protocols bgp group ToR11-EVPN type external user@MX12# set protocols bgp group ToR11-EVPN multihop ttl 2 user@MX12# set protocols bgp group ToR11-EVPN multihop no-nexthop-change user@MX12# set protocols bgp group ToR11-EVPN local-address 192.0.2.22 user@MX12# set protocols bgp group ToR11-EVPN export TEST user@MX12# set protocols bgp group ToR11-EVPN peer-as 65100 user@MX12# set protocols bgp group ToR11-EVPN local-as 65500 user@MX12# set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling user@MX12# set protocols bgp group ToR12-EVPN type external user@MX12# set protocols bgp group ToR12-EVPN multihop ttl 2 user@MX12# set protocols bgp group ToR12-EVPN multihop no-nexthop-change user@MX12# set protocols bgp group ToR12-EVPN local-address 192.0.2.22 user@MX12# set protocols bgp group ToR12-EVPN export TEST user@MX12# set protocols bgp group ToR12-EVPN peer-as 65200 user@MX12# set protocols bgp group ToR12-EVPN local-as 65500 user@MX12# set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling
토폴로지의 호스트에 대한 MAC 및 IP 경로(MAC+IP 유형 2 경로)를 광고하는 통합 라우팅 및 브리징(IRB) 인터페이스를 구성합니다. IRB 구성은 호스트의 VLAN에 대한 게이트웨이입니다.
단계별 절차
다음은 MX12(VLAN-1의 호스트 부분)의 VLAN-1에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX12# set interfaces irb unit 1 proxy-macip-advertisement user@MX12# set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa user@MX12# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 1 family inet address 10.11.1.13/24 virtual-gateway-address 10.11.1.10
다음은 MX12(VLAN-2의 호스트 부분)의 VLAN-2에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX12# set interfaces irb unit 2 proxy-macip-advertisement user@MX12# set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb user@MX12# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 2 family inet address 10.12.1.13/24 virtual-gateway-address 10.12.1.10
다음은 MX12(VLAN-3의 호스트 부분)의 VLAN-3에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX12# set interfaces irb unit 3 proxy-macip-advertisement user@MX12# set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc user@MX12# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 3 family inet address 10.13.1.13/24 virtual-gateway-address 10.13.1.10
다음은 MX12(VLAN-4의 호스트 부분)의 VLAN-4에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX12# set interfaces irb unit 4 proxy-macip-advertisement user@MX12# set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd user@MX12# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 4 family inet address 10.14.1.13/24 virtual-gateway-address 10.14.1.10
다음은 MX12(VLAN-5의 호스트 부분)의 VLAN-5에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX12# set interfaces irb unit 5 proxy-macip-advertisement user@MX12# set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee user@MX12# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 5 family inet address 10.15.1.13/24 virtual-gateway-address 10.15.1.10
모든 레이어 2 주소 학습 및 전달 속성을 추적하도록 추적 작업을 구성합니다.
[edit] user@MX12# set protocols l2-learning traceoptions file MX12-L2ALD.log user@MX12# set protocols l2-learning traceoptions file size 10m user@MX12# set protocols l2-learning traceoptions level all user@MX12# set protocols l2-learning traceoptions flag all
직접 루프백 주소 경로를 수락하도록 라우팅 정책을 구성합니다.
[edit] user@MX12# set policy-options policy-statement LO from protocol direct user@MX12# set policy-options policy-statement LO from route-filter 192.0.2.22/32 exact user@MX12# set policy-options policy-statement LO then accept
NO-EXPORT 커뮤니티를 구성합니다.
[edit] user@MX12# set policy-options community NO-EXPORT members no-advertise user@MX12# set policy-options community NO-EXPORT members no-export user@MX12# set policy-options community NO-EXPORT members no-export-subconfed
로드 밸런싱 및 TEST 정책을 구성합니다.
[edit] user@MX12# set policy-options policy-statement TEST then community add NO-EXPORT user@MX12# set policy-options policy-statement evpn-pplb from protocol evpn user@MX12# set policy-options policy-statement evpn-pplb then load-balance per-packet
논리적 터널 인터페이스에서 ESI 값을 구성합니다. DC1 네트워크의 다른 모든 게이트웨이/WAN 에지 라우터에서 동일한 ESI 값을 사용합니다.
[edit] user@MX12# set interfaces lt-1/0/0 esi 00:22:22:22:22:22:22:22:22:22
명령문을 포함하여 논리 터널 인터페이스에서 액티브-액티브 멀티호밍을
all-active
구성합니다.[edit] user@MX12# set interfaces lt-1/0/0 esi all-active
MX12 게이트웨이 라우터에 한 쌍의 논리적 터널(lt-) 인터페이스를 구성하여 데이터센터 네트워크의 EVPN-VXLAN 인스턴스를 WAN의 MPLS 기반 EVPN 인스턴스와 상호 연결합니다. 하나의 논리 터널(lt-) 인터페이스는 EVPN-VXLAN의 액세스 인터페이스로 구성되고 다른 논리 터널(lt-) 인터페이스는 MPLS 기반 EVPN의 액세스 인터페이스로 구성됩니다.
[edit] user@MX12# set interfaces lt-1/0/0 unit 0 peer-unit 1 user@MX12# set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk user@MX12# set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 user@MX12# set interfaces lt-1/0/0 unit 1 peer-unit 0 user@MX12# set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk user@MX12# set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5
루프백 인터페이스 주소 및 라우팅 옵션을 구성합니다.
[edit] user@MX12# set interfaces lo0 unit 85 family inet address 192.0.2.22/32 user@MX12# set interfaces lo0 unit 85 family mpls user@MX12# set routing-options router-id 192.0.2.22 user@MX12# set routing-options autonomous-system 65300
포워딩 테이블에 로드 밸런싱 정책을 적용합니다.
[edit] user@MX12# set routing-options forwarding-table export evpn-pplb
코어 인터페이스에서 RSVP, MPLS, BGP 및 OSPF 프로토콜을 활성화합니다. MPLS LSP를 생성하고 다른 게이트웨이 및 WAN 에지 라우터(MX11, MX21, P, MX22)의 주소를 지정합니다.
[edit] user@MX12# set protocols rsvp interface all user@MX12# set protocols rsvp interface fxp0.0 disable user@MX12# set protocols mpls label-switched-path MX12-TO-MX11 to 192.0.2.21 user@MX12# set protocols mpls label-switched-path MX12-TO-P to 203.0.113.1 user@MX12# set protocols mpls label-switched-path MX12-TO-MX21 to 198.51.100.21 user@MX12# set protocols mpls label-switched-path MX12-TO-MX22 to 198.51.100.22 user@MX12# set protocols mpls interface all user@MX12# set protocols mpls interface fxp0.0 disable user@MX12# set protocols bgp local-address 192.0.2.22 user@MX12# set protocols bgp local-as 65300 user@MX12# set protocols bgp group INT type internal user@MX12# set protocols bgp group INT family evpn signaling user@MX12# set protocols bgp group INT export TEST user@MX12# set protocols bgp group INT neighbor 203.0.113.1 user@MX12# set protocols ospf traffic-engineering user@MX12# set protocols ospf area 0.0.0.0 interface ge-1/0/6.0 user@MX12# set protocols ospf area 0.0.0.0 interface lo0.85 passive
각 가상 네트워크의 MX12 라우터에서 EVPN 기반 MPLS 라우팅 인스턴스를 구성합니다. 경로 구분자(EVPN-MPLS 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. VLAN ID를 매핑하는 각 가상 라우터에 대해 브리지 도메인을 구성합니다.[edit] user@MX12# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX12# set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 user@MX12# set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.22:100 user@MX12# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX12-EVPN-MPLS-1.log user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
각 가상 네트워크에 대한 MX12 라우터에서 EVPN-VXLAN 라우팅 인스턴스를 구성합니다. VTEP 소스 인터페이스, 경로 구분자(EVPN 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. EVPN 프로토콜, 캡슐화 방법, VNI 목록 및 BUM 트래픽 전달 방법을 구성합니다. 마지막으로, VNID를 VLAN ID에 매핑하는 각 가상 라우터에 대한 브리지 도메인을 구성하고 BUM 전달 방법을 식별합니다.[edit] user@MX12# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.85 user@MX12# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX12# set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 user@MX12# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.22:1 user@MX12# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX12-EVPN-VXLAN-1.log user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX12# set routing-instances VRF instance-type vrf user@MX12# set routing-instances VRF interface irb.1 user@MX12# set routing-instances VRF interface irb.2 user@MX12# set routing-instances VRF interface irb.3 user@MX12# set routing-instances VRF interface irb.4 user@MX12# set routing-instances VRF interface irb.5 user@MX12# set routing-instances VRF route-distinguisher 1:1 user@MX12# set routing-instances VRF vrf-target target:10:10
데이터센터 게이트웨이 및 WAN 에지 3 라우터 구성(MX21)
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
MX 시리즈 라우터를 데이터센터 게이트웨이 및 WAN 에지 라우터로 구성하고 이름을 MX21로 지정합니다.
시스템 호스트 이름을 설정합니다.
[edit] user@MX21# set system host-name MX21
MX21 라우터(DC GW/WAN Edge 3)의 인터페이스를 구성하여 DC2 네트워크의 EVPN-VXLAN 부분인 MX22, ToR22, ToR21 및 P 디바이스에 대한 언더레이 연결을 활성화합니다.
[edit] user@MX21# set interfaces ge-3/0/0 unit 0 description "CONNECTED TO MX22" user@MX21# set interfaces ge-3/0/0 unit 0 family inet address 192.168.13.1/24 user@MX21# set interfaces ge-3/1/0 unit 0 description "CONNECTED TO ToR22" user@MX21# set interfaces ge-3/1/0 unit 0 family inet address 192.168.8.1/24 user@MX21# set interfaces ge-5/0/0 unit 0 description "CONNECTED TO P" user@MX21# set interfaces ge-5/0/0 unit 0 family inet address 203.0.113.31/24 user@MX21# set interfaces ge-5/0/0 unit 0 family mpls user@MX21# set interfaces ge-5/0/1 unit 0 description "CONNECTED TO ToR21" user@MX21# set interfaces ge-5/0/1 unit 0 family inet address 192.168.9.1/24
게이트웨이 라우터(MX21 및 MX22)와 ToR(ToR21 및 ToR22) 간의 외부 BGP(EBGP) 언더레이 연결을 구성합니다.
[edit] user@MX21# set protocols bgp group MX22 type external user@MX21# set protocols bgp group MX22 local-address 192.168.13.1 user@MX21# set protocols bgp group MX22 export TEST user@MX21# set protocols bgp group MX22 export LO user@MX21# set protocols bgp group MX22 peer-as 64900 user@MX21# set protocols bgp group MX22 local-as 64800 user@MX21# set protocols bgp group MX22 neighbor 192.168.13.2 family inet unicast user@MX21# set protocols bgp group ToR21 type external user@MX21# set protocols bgp group ToR21 local-address 192.168.9.1 user@MX21# set protocols bgp group ToR21 export TEST user@MX21# set protocols bgp group ToR21 export LO user@MX21# set protocols bgp group ToR21 peer-as 64600 user@MX21# set protocols bgp group ToR21 local-as 64800 user@MX21# set protocols bgp group ToR21 neighbor 192.168.9.2 family inet unicast user@MX21# set protocols bgp group ToR22 type external user@MX21# set protocols bgp group ToR22 local-address 192.168.8.1 user@MX21# set protocols bgp group ToR22 export TEST user@MX21# set protocols bgp group ToR22 export LO user@MX21# set protocols bgp group ToR22 peer-as 64700 user@MX21# set protocols bgp group ToR22 local-as 64800 user@MX21# set protocols bgp group ToR22 neighbor 192.168.8.2 family inet unicast
게이트웨이 라우터(MX21 및 MX22)와 ToR(ToR21 및 ToR22) 간에 멀티프로토콜 외부 BGP(MP-EBGP) 오버레이 연결을 구성하고 EVPN을 신호 프로토콜로 설정합니다.
[edit] user@MX21# set protocols bgp group MX22-EVPN type external user@MX21# set protocols bgp group MX22-EVPN multihop ttl 2 user@MX21# set protocols bgp group MX22-EVPN multihop no-nexthop-change user@MX21# set protocols bgp group MX22-EVPN local-address 198.51.100.21 user@MX21# set protocols bgp group MX22-EVPN peer-as 64900 user@MX21# set protocols bgp group MX22-EVPN local-as 64800 user@MX21# set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling user@MX21# set protocols bgp group ToR21-EVPN type external user@MX21# set protocols bgp group ToR21-EVPN multihop ttl 2 user@MX21# set protocols bgp group ToR21-EVPN multihop no-nexthop-change user@MX21# set protocols bgp group ToR21-EVPN local-address 198.51.100.21 user@MX21# set protocols bgp group ToR21-EVPN peer-as 64600 user@MX21# set protocols bgp group ToR21-EVPN local-as 64800 user@MX21# set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling user@MX21# set protocols bgp group ToR22-EVPN type external user@MX21# set protocols bgp group ToR22-EVPN multihop ttl 2 user@MX21# set protocols bgp group ToR22-EVPN multihop no-nexthop-change user@MX21# set protocols bgp group ToR22-EVPN local-address 198.51.100.21 user@MX21# set protocols bgp group ToR22-EVPN peer-as 64700 user@MX21# set protocols bgp group ToR22-EVPN local-as 64800 user@MX21# set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling
토폴로지의 호스트에 대한 MAC 및 IP 경로(MAC+IP 유형 2 경로)를 광고하는 통합 라우팅 및 브리징(IRB) 인터페이스를 구성합니다. IRB 구성은 호스트의 VLAN에 대한 게이트웨이입니다.
단계별 절차
다음은 MX21(VLAN-1의 호스트 부분)의 VLAN-1에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX21# set interfaces irb unit 1 proxy-macip-advertisement user@MX21# set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa user@MX21# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 1 family inet address 10.11.1.14/24 virtual-gateway-address 10.11.1.11
다음은 MX21(VLAN-2의 호스트 부분)의 VLAN-2에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX21# set interfaces irb unit 2 proxy-macip-advertisement user@MX21# set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb user@MX21# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 2 family inet address 10.12.1.14/24 virtual-gateway-address 10.12.1.11
다음은 MX21(VLAN-3의 호스트 부분)의 VLAN-3에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX21# set interfaces irb unit 3 proxy-macip-advertisement user@MX21# set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc user@MX21# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 3 family inet address 10.13.1.14/24 virtual-gateway-address 10.13.1.11
다음은 MX21(VLAN-4의 호스트 부분)의 VLAN-4에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX21# set interfaces irb unit 4 proxy-macip-advertisement user@MX21# set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd user@MX21# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 4 family inet address 10.14.1.14/24 virtual-gateway-address 10.14.1.11
다음은 MX21(VLAN-5의 호스트 부분)의 VLAN-5에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX21# set interfaces irb unit 5 proxy-macip-advertisement user@MX21# set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee user@MX21# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 5 family inet address 10.15.1.14/24 virtual-gateway-address 10.15.1.11
모든 레이어 2 주소 학습 및 전달 속성을 추적하도록 추적 작업을 구성합니다.
[edit] user@MX21# set protocols l2-learning traceoptions file MX21-L2ALD.log user@MX21# set protocols l2-learning traceoptions file size 10m user@MX21# set protocols l2-learning traceoptions level all user@MX21# set protocols l2-learning traceoptions flag all
직접 루프백 주소 경로를 수락하도록 라우팅 정책을 구성합니다.
[edit] user@MX21# set policy-options policy-statement LO from protocol direct user@MX21# set policy-options policy-statement LO from route-filter 198.51.100.21/32 exact user@MX21# set policy-options policy-statement LO then accept
NO-EXPORT 커뮤니티를 구성합니다.
[edit] user@MX21# set policy-options community NO-EXPORT members no-advertise user@MX21# set policy-options community NO-EXPORT members no-export user@MX21# set policy-options community NO-EXPORT members no-export-subconfed
로드 밸런싱 및 TEST 정책을 구성합니다.
[edit] user@MX21# set policy-options policy-statement TEST then community add NO-EXPORT user@MX21# set policy-options policy-statement evpn-pplb from protocol evpn user@MX21# set policy-options policy-statement evpn-pplb then load-balance per-packet
논리적 터널 인터페이스에서 ESI 값을 구성합니다. DC2 네트워크의 다른 모든 게이트웨이/WAN 에지 라우터에서 동일한 ESI 값을 사용합니다.
[edit] user@MX21# set interfaces lt-5/0/0 esi 00:33:33:33:33:33:33:33:33:33
명령문을 포함하여 논리 터널 인터페이스에서 액티브-액티브 멀티호밍을
all-active
구성합니다.[edit] user@MX21# set interfaces lt-5/0/0 esi all-active
MX21 게이트웨이 라우터에 논리적 터널(lt-) 인터페이스 쌍을 구성하여 데이터센터 네트워크의 EVPN-VXLAN 인스턴스를 WAN의 MPLS 기반 EVPN 인스턴스와 상호 연결합니다. 하나의 논리 터널(lt-) 인터페이스는 EVPN-VXLAN의 액세스 인터페이스로 구성되고 다른 논리 터널(lt-) 인터페이스는 MPLS 기반 EVPN의 액세스 인터페이스로 구성됩니다.
[edit] user@MX21# set interfaces lt-5/0/0 unit 0 peer-unit 1 user@MX21# set interfaces lt-5/0/0 unit 0 family bridge interface-mode trunk user@MX21# set interfaces lt-5/0/0 unit 0 family bridge vlan-id-list 1-5 user@MX21# set interfaces lt-5/0/0 unit 1 peer-unit 0 user@MX21# set interfaces lt-5/0/0 unit 1 family bridge interface-mode trunk user@MX21# set interfaces lt-5/0/0 unit 1 family bridge vlan-id-list 1-5
루프백 인터페이스 주소 및 라우팅 옵션을 구성합니다.
[edit] user@MX21# set interfaces lo0 unit 87 family inet address 198.51.100.21/32 user@MX21# set interfaces lo0 unit 87 family mpls user@MX21# set routing-options router-id 198.51.100.21 user@MX21# set routing-options autonomous-system 65300
포워딩 테이블에 로드 밸런싱 정책을 적용합니다.
[edit] user@MX21# set routing-options forwarding-table export evpn-pplb
코어 인터페이스에서 RSVP, MPLS, BGP 및 OSPF 프로토콜을 활성화합니다. MPLS LSP를 생성하고 다른 게이트웨이 및 WAN 에지 라우터(MX11, MX12, P, MX22)의 주소를 지정합니다.
[edit] user@MX21# set protocols rsvp interface all user@MX21# set protocols rsvp interface fxp0.0 disable user@MX21# set protocols mpls label-switched-path MX21-TO-MX11 to 192.0.2.21 user@MX21# set protocols mpls label-switched-path MX21-TO-MX12 to 192.0.2.22 user@MX21# set protocols mpls label-switched-path MX21-TO-P to 203.0.113.1 user@MX21# set protocols mpls label-switched-path MX21-TO-MX22 to 198.51.100.22 user@MX21# set protocols mpls interface all user@MX21# set protocols mpls interface fxp0.0 disable user@MX21# set protocols bgp local-address 198.51.100.21 user@MX21# set protocols bgp export TEST user@MX21# set protocols bgp local-as 65300 user@MX21# set protocols bgp group INT type internal user@MX21# set protocols bgp group INT local-address 198.51.100.21 user@MX21# set protocols bgp group INT family evpn signaling user@MX21# set protocols bgp group INT export TEST user@MX21# set protocols bgp group INT neighbor 203.0.113.1 user@MX21# set protocols ospf traffic-engineering user@MX21# set protocols ospf area 0.0.0.0 interface ge-5/0/0.0 user@MX21# set protocols ospf area 0.0.0.0 interface lo0.87 passive
각 가상 네트워크의 MX21 라우터에서 EVPN 기반 MPLS 라우팅 인스턴스를 구성합니다. 경로 구분자(EVPN-MPLS 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. VLAN ID를 매핑하는 각 가상 라우터에 대해 브리지 도메인을 구성합니다.[edit] user@MX21# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX21# set routing-instances EVPN-MPLS-1 interface lt-5/0/0.0 user@MX21# set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.21:100 user@MX21# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX21-EVPN-MPLS-1.log user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
각 가상 네트워크에 대한 MX21 라우터에서 EVPN-VXLAN 라우팅 인스턴스를 구성합니다. VTEP 소스 인터페이스, 경로 구분자(EVPN 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. EVPN 프로토콜, 캡슐화 방법, VNI 목록 및 BUM 트래픽 전달 방법을 구성합니다. 마지막으로, VNID를 VLAN ID에 매핑하는 각 가상 라우터에 대한 브리지 도메인을 구성하고 BUM 전달 방법을 식별합니다.[edit] user@MX21# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.87 user@MX21# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX21# set routing-instances EVPN-VXLAN-1 interface lt-5/0/0.1 user@MX21# set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.21:1 user@MX21# set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX21-EVPN-VXLAN-1.log user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX21# set routing-instances VRF instance-type vrf user@MX21# set routing-instances VRF interface irb.1 user@MX21# set routing-instances VRF interface irb.2 user@MX21# set routing-instances VRF interface irb.3 user@MX21# set routing-instances VRF interface irb.4 user@MX21# set routing-instances VRF interface irb.5 user@MX21# set routing-instances VRF route-distinguisher 1:1 user@MX21# set routing-instances VRF vrf-target target:10:10
데이터센터 게이트웨이 및 WAN 에지 4 라우터(MX22) 구성
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
MX 시리즈 라우터를 데이터센터 게이트웨이 및 WAN 에지 라우터로 구성하고 이름을 MX22로 지정합니다.
시스템 호스트 이름을 설정합니다.
[edit] user@MX22# set system host-name MX22
MX22 라우터(DC GW/WAN Edge 4)의 인터페이스를 구성하여 DC2 네트워크의 EVPN-VXLAN 부분인 MX22, ToR21, MX21 및 P 디바이스에 대한 언더레이 연결을 활성화합니다.
[edit] user@MX22# set interfaces xe-0/0/0 unit 0 description "CONNECTED TO ToR22" user@MX22# set interfaces xe-0/0/0 unit 0 family inet address 192.168.11.1/24 user@MX22# set interfaces xe-0/0/1 unit 0 description "CONNECTED TO ToR21" user@MX22# set interfaces xe-0/0/1 unit 0 family inet address 192.168.10.1/24 user@MX22# set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX21" user@MX22# set interfaces ge-1/0/0 unit 0 family inet address 192.168.13.2/24 user@MX22# set interfaces ge-1/0/2 unit 0 description "CONNECTED TO P" user@MX22# set interfaces ge-1/0/2 unit 0 family inet address 203.0.113.51/24 user@MX22# set interfaces ge-1/0/2 unit 0 family mpls
게이트웨이 라우터(MX21 및 MX22)와 ToR(ToR21 및 ToR22) 간의 외부 BGP(EBGP) 언더레이 연결을 구성합니다.
[edit] user@MX22# set protocols bgp group MX21 type external user@MX22# set protocols bgp group MX21 local-address 192.168.13.2 user@MX22# set protocols bgp group MX21 export TEST user@MX22# set protocols bgp group MX21 export LO user@MX22# set protocols bgp group MX21 peer-as 64800 user@MX22# set protocols bgp group MX21 local-as 64900 user@MX22# set protocols bgp group MX21 neighbor 192.168.13.1 family inet unicast user@MX22# set protocols bgp group ToR21 type external user@MX22# set protocols bgp group ToR21 local-address 192.168.10.1 user@MX22# set protocols bgp group ToR21 export TEST user@MX22# set protocols bgp group ToR21 export LO user@MX22# set protocols bgp group ToR21 peer-as 64600 user@MX22# set protocols bgp group ToR21 local-as 64900 user@MX22# set protocols bgp group ToR21 neighbor 192.168.10.2 family inet unicast user@MX22# set protocols bgp group ToR22 type external user@MX22# set protocols bgp group ToR22 local-address 192.168.11.1 user@MX22# set protocols bgp group ToR22 export TEST user@MX22# set protocols bgp group ToR22 export LO user@MX22# set protocols bgp group ToR22 peer-as 64700 user@MX22# set protocols bgp group ToR22 local-as 64900 user@MX22# set protocols bgp group ToR22 neighbor 192.168.11.2 family inet unicast
게이트웨이 라우터(MX21 및 MX22)와 ToR(ToR21 및 ToR22) 간에 멀티프로토콜 외부 BGP(MP-EBGP) 오버레이 연결을 구성하고 EVPN을 신호 프로토콜로 설정합니다.
[edit] user@MX22# set protocols bgp group MX21-EVPN type external user@MX22# set protocols bgp group MX21-EVPN multihop ttl 2 user@MX22# set protocols bgp group MX21-EVPN multihop no-nexthop-change user@MX22# set protocols bgp group MX21-EVPN local-address 198.51.100.22 user@MX22# set protocols bgp group MX21-EVPN peer-as 64800 user@MX22# set protocols bgp group MX21-EVPN local-as 64900 user@MX22# set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling user@MX22# set protocols bgp group ToR21-EVPN type external user@MX22# set protocols bgp group ToR21-EVPN multihop ttl 2 user@MX22# set protocols bgp group ToR21-EVPN multihop no-nexthop-change user@MX22# set protocols bgp group ToR21-EVPN local-address 198.51.100.22 user@MX22# set protocols bgp group ToR21-EVPN peer-as 64600 user@MX22# set protocols bgp group ToR21-EVPN local-as 64900 user@MX22# set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling user@MX22# set protocols bgp group ToR22-EVPN type external user@MX22# set protocols bgp group ToR22-EVPN multihop ttl 2 user@MX22# set protocols bgp group ToR22-EVPN multihop no-nexthop-change user@MX22# set protocols bgp group ToR22-EVPN local-address 198.51.100.22 user@MX22# set protocols bgp group ToR22-EVPN peer-as 64700 user@MX22# set protocols bgp group ToR22-EVPN local-as 64900 user@MX22# set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling
토폴로지의 호스트에 대한 MAC 및 IP 경로(MAC+IP 유형 2 경로)를 광고하는 통합 라우팅 및 브리징(IRB) 인터페이스를 구성합니다. IRB 구성은 호스트의 VLAN에 대한 게이트웨이입니다.
단계별 절차
다음은 MX22(VLAN-1의 호스트 부분)의 VLAN-1에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX22# set interfaces irb unit 1 proxy-macip-advertisement user@MX22# set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa user@MX22# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 1 family inet address 10.11.1.15/24 virtual-gateway-address 10.11.1.11
다음은 MX22(VLAN-2의 호스트 부분)의 VLAN-2에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX22# set interfaces irb unit 2 proxy-macip-advertisement user@MX22# set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb user@MX22# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 2 family inet address 10.12.1.15/24 virtual-gateway-address 10.12.1.11
다음은 MX22(VLAN-3의 호스트 부분)의 VLAN-3에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX22# set interfaces irb unit 3 proxy-macip-advertisement user@MX22# set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc user@MX22# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 3 family inet address 10.13.1.15/24 virtual-gateway-address 10.13.1.11
다음은 MX22(VLAN-4의 호스트 부분)의 VLAN-4에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX22# set interfaces irb unit 4 proxy-macip-advertisement user@MX22# set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd user@MX22# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 4 family inet address 10.14.1.15/24 virtual-gateway-address 10.14.1.11
다음은 MX22의 VLAN-5(VLAN-5의 호스트 부분)에 대한 IRB 게이트웨이 구성입니다.
[edit] user@MX22# set interfaces irb unit 5 proxy-macip-advertisement user@MX22# set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee user@MX22# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 5 family inet address 10.15.1.15/24 virtual-gateway-address 10.15.1.11
모든 레이어 2 주소 학습 및 전달 속성을 추적하도록 추적 작업을 구성합니다.
[edit] user@MX22# set protocols l2-learning traceoptions file MX22-L2ALD.log user@MX22# set protocols l2-learning traceoptions file size 10m user@MX22# set protocols l2-learning traceoptions level all user@MX22# set protocols l2-learning traceoptions flag all
직접 루프백 주소 경로를 수락하도록 라우팅 정책을 구성합니다.
[edit] user@MX22# set policy-options policy-statement LO from protocol direct user@MX22# set policy-options policy-statement LO from route-filter 198.51.100.22/32 exact user@MX22# set policy-options policy-statement LO then accept
NO-EXPORT 커뮤니티를 구성합니다.
[edit] user@MX22# set policy-options community NO-EXPORT members no-advertise user@MX22# set policy-options community NO-EXPORT members no-export user@MX22# set policy-options community NO-EXPORT members no-export-subconfed
로드 밸런싱 및 TEST 정책을 구성합니다.
[edit] user@MX22# set policy-options policy-statement TEST then community add NO-EXPORT user@MX22# set policy-options policy-statement evpn-pplb from protocol evpn user@MX22# set policy-options policy-statement evpn-pplb then load-balance per-packet
논리적 터널 인터페이스에서 ESI 값을 구성합니다. DC2 네트워크의 다른 모든 게이트웨이/WAN 에지 라우터에서 동일한 ESI 값을 사용합니다.
[edit] user@MX22# set interfaces lt-1/0/0 esi 00:33:33:33:33:33:33:33:33:33
명령문을 포함하여 논리 터널 인터페이스에서 액티브-액티브 멀티호밍을
all-active
구성합니다.[edit] user@MX22# set interfaces lt-1/0/0 esi all-active
MX22 게이트웨이 라우터에 한 쌍의 논리적 터널(lt-) 인터페이스를 구성하여 데이터센터 네트워크의 EVPN-VXLAN 인스턴스를 WAN의 MPLS 기반 EVPN 인스턴스와 상호 연결합니다. 하나의 논리 터널(lt-) 인터페이스는 EVPN-VXLAN의 액세스 인터페이스로 구성되고 다른 논리 터널(lt-) 인터페이스는 MPLS 기반 EVPN의 액세스 인터페이스로 구성됩니다.
[edit] user@MX22# set interfaces lt-1/0/0 unit 0 peer-unit 1 user@MX22# set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk user@MX22# set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 user@MX22# set interfaces lt-1/0/0 unit 1 peer-unit 0 user@MX22# set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk user@MX22# set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5
루프백 인터페이스 주소 및 라우팅 옵션을 구성합니다.
[edit] user@MX22# set interfaces lo0 unit 88 family inet address 198.51.100.22/32 user@MX22# set routing-options router-id 198.51.100.22 user@MX22# set routing-options autonomous-system 65300
포워딩 테이블에 로드 밸런싱 정책을 적용합니다.
[edit] user@MX22# set routing-options forwarding-table export evpn-pplb
코어 인터페이스에서 RSVP, MPLS, BGP 및 OSPF 프로토콜을 활성화합니다. MPLS LSP를 생성하고 다른 게이트웨이 및 WAN 에지 라우터(MX11, MX12, P, MX21)의 주소를 지정합니다.
[edit] user@MX22# set protocols rsvp interface all user@MX22# set protocols rsvp interface fxp0.0 disable user@MX22# set protocols mpls label-switched-path MX22-TO-MX11 to 192.0.2.21 user@MX22# set protocols mpls label-switched-path MX22-TO-MX12 to 192.0.2.22 user@MX22# set protocols mpls label-switched-path MX22-TO-P to 203.0.113.1 user@MX22# set protocols mpls label-switched-path MX22-TO-MX21 to 198.51.100.21 user@MX22# set protocols mpls interface all user@MX22# set protocols mpls interface fxp0.0 disable user@MX22# set protocols bgp local-address 198.51.100.22 user@MX22# set protocols bgp export TEST user@MX22# set protocols bgp local-as 65300 user@MX22# set protocols bgp group INT type internal user@MX22# set protocols bgp group INT family evpn signaling user@MX22# set protocols bgp group INT export TEST user@MX22# set protocols bgp group INT neighbor 203.0.113.1 user@MX22# set protocols ospf traffic-engineering user@MX22# set protocols ospf area 0.0.0.0 interface ge-1/0/2.0 user@MX22# set protocols ospf area 0.0.0.0 interface lo0.88 passive
각 가상 네트워크의 MX22 라우터에서 EVPN 기반 MPLS 라우팅 인스턴스를 구성합니다. 경로 구분자(EVPN-MPLS 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. VLAN ID를 매핑하는 각 가상 라우터에 대해 브리지 도메인을 구성합니다.[edit] user@MX22# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX22# set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 user@MX22# set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.22:100 user@MX22# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX22-EVPN-MPLS-1.log user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
각 가상 네트워크에 대한 MX22 라우터에서 EVPN-VXLAN 라우팅 인스턴스를 구성합니다. VTEP 소스 인터페이스, 경로 구분자(EVPN 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. EVPN 프로토콜, 캡슐화 방법, VNI 목록 및 BUM 트래픽 전달 방법을 구성합니다. 마지막으로, VNID를 VLAN ID에 매핑하는 각 가상 라우터에 대한 브리지 도메인을 구성하고 BUM 전달 방법을 식별합니다.[edit] user@MX22# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.88 user@MX22# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX22# set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 user@MX22# set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.22:1 user@MX22# set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX22-EVPN-VXLAN-1.log user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX22# set routing-instances VRF instance-type vrf user@MX22# set routing-instances VRF interface irb.1 user@MX22# set routing-instances VRF interface irb.2 user@MX22# set routing-instances VRF interface irb.3 user@MX22# set routing-instances VRF interface irb.4 user@MX22# set routing-instances VRF interface irb.5 user@MX22# set routing-instances VRF route-distinguisher 1:1 user@MX22# set routing-instances VRF vrf-target target:10:10
ToR21 구성
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
MX 라우터를 ToR21로 구성합니다.
시스템 호스트 이름을 설정합니다.
[edit] user@ToR21# set system host-name ToR21
레이어 2 연결을 활성화하기 위해 CE4 디바이스에서 인터페이스 및 브리지 도메인을 구성합니다.
[edit] user@ToR21# set logical-systems CE-4 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 4" user@ToR21# set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ToR21# set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ToR21# set logical-systems CE-4 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR21" user@ToR21# set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk user@ToR21# set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 user@ToR21# set logical-systems CE-4 bridge-domains BD-1 domain-type bridge user@ToR21# set logical-systems CE-4 bridge-domains BD-1 vlan-id 1 user@ToR21# set logical-systems CE-4 bridge-domains BD-2 domain-type bridge user@ToR21# set logical-systems CE-4 bridge-domains BD-2 vlan-id 2 user@ToR21# set logical-systems CE-4 bridge-domains BD-3 domain-type bridge user@ToR21# set logical-systems CE-4 bridge-domains BD-3 vlan-id 3 user@ToR21# set logical-systems CE-4 bridge-domains BD-4 domain-type bridge user@ToR21# set logical-systems CE-4 bridge-domains BD-4 vlan-id 4 user@ToR21# set logical-systems CE-4 bridge-domains BD-5 domain-type bridge user@ToR21# set logical-systems CE-4 bridge-domains BD-5 vlan-id 5
인터페이스에 대한 추적 옵션을 구성하여 추적 로그를 활성화합니다.
[edit] user@ToR21# set interfaces traceoptions file ToR21-DCD.log user@ToR21# set interfaces traceoptions file size 10m user@ToR21# set interfaces traceoptions flag all
어그리게이션 이더넷 인터페이스의 수를 설정합니다.
[edit] user@ToR21# set chassis aggregated-devices ethernet device-count 1
MX22, CE-5, CE-4, ToR22 및 MX21 디바이스에 연결하도록 ToR21 디바이스의 인터페이스를 구성하여 언더레이 연결을 활성화합니다.
[edit] user@ToR21# set interfaces xe-0/0/0 unit 0 description "CONNECTED TO MX22" user@ToR21# set interfaces xe-0/0/0 unit 0 family inet address 192.168.10.2/24 user@ToR21# set interfaces ge-1/0/0 description "CONNECTED TO CE-5" user@ToR21# set interfaces ge-1/0/0 gigether-options 802.3ad ae0 user@ToR21# set interfaces ge-1/0/1 unit 0 description "CONNECTED TO MX21" user@ToR21# set interfaces ge-1/0/1 unit 0 family inet address 192.168.9.2/24 user@ToR21# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-4" user@ToR21# set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk user@ToR21# set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 user@ToR21# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR22" user@ToR21# set interfaces ge-1/1/3 unit 0 family inet address 192.168.12.1/24
CE-5 종단 호스트 디바이스를 향한 LACP(Link Aggregation Control Protocol) 지원 LAG(Link Aggregation Group) 인터페이스를 구성합니다. ESI 값은 전체 EVPN 도메인에서 전역적으로 고유합니다. 이
all-active
구성을 통해 ToR21 및 ToR22는 모든 CE 링크가 활발하게 사용되도록 CE 디바이스와 트래픽을 주고받을 수 있습니다.[edit] user@ToR21# set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 user@ToR21# set interfaces ae0 esi all-active user@ToR21# set interfaces ae0 aggregated-ether-options lacp active user@ToR21# set interfaces ae0 aggregated-ether-options lacp periodic fast user@ToR21# set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 user@ToR21# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR21# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5
루프백 인터페이스 주소 및 라우팅 옵션을 구성합니다.
[edit] user@ToR21# set interfaces lo0 unit 90 family inet address 198.51.100.11/32 user@ToR21# set routing-options router-id 198.51.100.11 user@ToR21# set routing-options autonomous-system 64600
포워딩 테이블에 로드 밸런싱 정책을 적용합니다.
[edit] user@ToR21# set routing-options forwarding-table export evpn-pplb
ToR(ToR21 및 ToR22)과 게이트웨이 라우터(MX21 및 MX22) 간에 외부 BGP(EBGP) 언더레이 연결을 구성합니다.
[edit] user@ToR21# set protocols bgp export TEST user@ToR21# set protocols bgp local-as 64600 user@ToR21# set protocols bgp group MX21 type external user@ToR21# set protocols bgp group MX21 local-address 192.168.9.2 user@ToR21# set protocols bgp group MX21 export LO user@ToR21# set protocols bgp group MX21 export TEST user@ToR21# set protocols bgp group MX21 peer-as 64800 user@ToR21# set protocols bgp group MX21 local-as 64600 user@ToR21# set protocols bgp group MX21 neighbor 192.168.9.1 family inet unicast user@ToR21# set protocols bgp group MX22 type external user@ToR21# set protocols bgp group MX22 local-address 192.168.10.2 user@ToR21# set protocols bgp group MX22 export LO user@ToR21# set protocols bgp group MX22 export TEST user@ToR21# set protocols bgp group MX22 peer-as 64900 user@ToR21# set protocols bgp group MX22 local-as 64600 user@ToR21# set protocols bgp group MX22 neighbor 192.168.10.1 family inet unicast user@ToR21# set protocols bgp group ToR22 type external user@ToR21# set protocols bgp group ToR22 local-address 192.168.12.1 user@ToR21# set protocols bgp group ToR22 export LO user@ToR21# set protocols bgp group ToR22 export TEST user@ToR21# set protocols bgp group ToR22 peer-as 64700 user@ToR21# set protocols bgp group ToR22 local-as 64600 user@ToR21# set protocols bgp group ToR22 neighbor 192.168.12.2 family inet unicast
ToR(ToR21 및 ToR22)과 게이트웨이 라우터(MX21 및 MX22) 간에 멀티프로토콜 외부 BGP(MP-EBGP) 오버레이를 구성하고 EVPN을 신호 프로토콜로 설정합니다.
단계별 절차
EVPN 신호를 사용하여 ToR21과 MX21 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR21# set protocols bgp group MX21-EVPN type external user@ToR21# set protocols bgp group MX21-EVPN multihop ttl 2 user@ToR21# set protocols bgp group MX21-EVPN multihop no-nexthop-change user@ToR21# set protocols bgp group MX21-EVPN local-address 198.51.100.11 user@ToR21# set protocols bgp group MX21-EVPN peer-as 64800 user@ToR21# set protocols bgp group MX21-EVPN local-as 64600 user@ToR21# set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling
EVPN 신호를 사용하여 ToR21과 MX22 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR21# set protocols bgp group MX22-EVPN type external user@ToR21# set protocols bgp group MX22-EVPN multihop ttl 2 user@ToR21# set protocols bgp group MX22-EVPN multihop no-nexthop-change user@ToR21# set protocols bgp group MX22-EVPN local-address 198.51.100.11 user@ToR21# set protocols bgp group MX22-EVPN peer-as 64900 user@ToR21# set protocols bgp group MX22-EVPN local-as 64600 user@ToR21# set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling
EVPN 시그널링을 사용하여 ToR21과 ToR22 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR21# set protocols bgp group ToR22-EVPN type external user@ToR21# set protocols bgp group ToR22-EVPN multihop ttl 2 user@ToR21# set protocols bgp group ToR22-EVPN multihop no-nexthop-change user@ToR21# set protocols bgp group ToR22-EVPN local-address 198.51.100.11 user@ToR21# set protocols bgp group ToR22-EVPN peer-as 64700 user@ToR21# set protocols bgp group ToR22-EVPN local-as 64600 user@ToR21# set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling
모든 레이어 2 주소 학습 및 전달 속성을 추적하도록 추적 작업을 구성합니다.
[edit] user@ToR21# set protocols l2-learning traceoptions file TOR21-L2ALD.log user@ToR21# set protocols l2-learning traceoptions file size 10m user@ToR21# set protocols l2-learning traceoptions level all user@ToR21# set protocols l2-learning traceoptions flag all
직접 루프백 주소 경로를 수락하도록 라우팅 정책을 구성합니다.
[edit] user@ToR21# set policy-options policy-statement LO term 1 from protocol direct user@ToR21# set policy-options policy-statement LO term 1 from route-filter 198.51.100.11/32 exact user@ToR21# set policy-options policy-statement LO term 1 then accept
NO-EXPORT 커뮤니티를 구성합니다.
[edit] user@ToR21# set policy-options community NO-EXPORT members no-advertise user@ToR21# set policy-options community NO-EXPORT members no-export user@ToR21# set policy-options community NO-EXPORT members no-export-subconfed
로드 밸런싱 및 TEST 정책을 구성합니다.
[edit] user@ToR21# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR21# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR21# set policy-options policy-statement evpn-pplb then load-balance per-packet
각 가상 네트워크에 대한 EVPN 라우팅 인스턴스를 구성합니다. VTEP 소스 인터페이스, 경로 구분자(EVPN 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. EVPN 프로토콜, 캡슐화 방법, VNI 목록 및 BUM 트래픽 전달 방법을 구성합니다. 마지막으로, VNID를 VLAN ID에 매핑하는 각 가상 라우터에 대한 브리지 도메인을 구성하고 BUM 전달 방법을 식별합니다.[edit] user@ToR21# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.90 user@ToR21# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR21# set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 user@ToR21# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR21# set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.11:1 user@ToR21# set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR21-EVPN-VXLAN-1.log user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
ToR22 구성
단계별 절차
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
MX 라우터 ToR22 구성:
시스템 호스트 이름을 설정합니다.
[edit] user@ToR22# set system host-name ToR22
레이어 2 연결을 활성화하기 위해 CE-5 디바이스의 인터페이스 및 브리지 도메인을 구성합니다.
[edit] user@ToR22# set logical-systems CE-5 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 5" user@ToR22# set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ToR22# set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set logical-systems CE-5 interfaces ae1 unit 0 description "CONNECTED TO ToR21" user@ToR22# set logical-systems CE-5 interfaces ae1 unit 0 family bridge interface-mode trunk user@ToR22# set logical-systems CE-5 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set logical-systems CE-5 bridge-domains BD-1 domain-type bridge user@ToR22# set logical-systems CE-5 bridge-domains BD-1 vlan-id 1 user@ToR22# set logical-systems CE-5 bridge-domains BD-2 domain-type bridge user@ToR22# set logical-systems CE-5 bridge-domains BD-2 vlan-id 2 user@ToR22# set logical-systems CE-5 bridge-domains BD-3 domain-type bridge user@ToR22# set logical-systems CE-5 bridge-domains BD-3 vlan-id 3 user@ToR22# set logical-systems CE-5 bridge-domains BD-4 domain-type bridge user@ToR22# set logical-systems CE-5 bridge-domains BD-4 vlan-id 4 user@ToR22# set logical-systems CE-5 bridge-domains BD-5 domain-type bridge user@ToR22# set logical-systems CE-5 bridge-domains BD-5 vlan-id 5
레이어 2 연결을 활성화하기 위해 CE-6 디바이스의 인터페이스 및 브리지 도메인을 구성합니다.
[edit] user@ToR22# set logical-systems CE-6 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR22" user@ToR22# set logical-systems CE-6 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk user@ToR22# set logical-systems CE-6 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set logical-systems CE-6 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 6" user@ToR22# set logical-systems CE-6 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk user@ToR22# set logical-systems CE-6 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set logical-systems CE-6 bridge-domains BD-1 domain-type bridge user@ToR22# set logical-systems CE-6 bridge-domains BD-1 vlan-id 1 user@ToR22# set logical-systems CE-6 bridge-domains BD-2 domain-type bridge user@ToR22# set logical-systems CE-6 bridge-domains BD-2 vlan-id 2 user@ToR22# set logical-systems CE-6 bridge-domains BD-3 domain-type bridge user@ToR22# set logical-systems CE-6 bridge-domains BD-3 vlan-id 3 user@ToR22# set logical-systems CE-6 bridge-domains BD-4 domain-type bridge user@ToR22# set logical-systems CE-6 bridge-domains BD-4 vlan-id 4 user@ToR22# set logical-systems CE-6 bridge-domains BD-5 domain-type bridge user@ToR22# set logical-systems CE-6 bridge-domains BD-5 vlan-id 5
인터페이스에 대한 추적 옵션을 구성하여 추적 로그를 활성화합니다.
[edit] user@ToR22# set interfaces traceoptions file R7-DCD.log user@ToR22# set interfaces traceoptions file size 10m user@ToR22# set interfaces traceoptions flag all
어그리게이션 이더넷 인터페이스의 수를 설정합니다.
[edit] user@ToR22# set chassis aggregated-devices ethernet device-count 2
MX22, CE-5, CE-6, ToR21 및 MX21 디바이스에 연결하도록 ToR22 디바이스의 인터페이스를 구성하여 언더레이 연결을 활성화합니다.
[edit] user@ToR22# set interfaces xe-0/0/0 unit 0 description "CONNECTED TO MX22" user@ToR22# set interfaces xe-0/0/0 unit 0 family inet address 192.168.11.2/24 user@ToR22# set interfaces ge-1/0/0 description "CONNECTED TO ToR21" user@ToR22# set interfaces ge-1/0/0 gigether-options 802.3ad ae1 user@ToR22# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-6" user@ToR22# set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk user@ToR22# set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set interfaces ge-1/0/7 description "CONNECTED TO ToR22" user@ToR22# set interfaces ge-1/0/7 gigether-options 802.3ad ae1 user@ToR22# set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX21" user@ToR22# set interfaces ge-1/1/0 unit 0 family inet address 192.168.8.2/24 user@ToR22# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR21" user@ToR22# set interfaces ge-1/1/3 unit 0 family inet address 192.168.12.2/24 user@ToR22# set interfaces ge-1/1/7 description "CONNECTED TO CE-5" user@ToR22# set interfaces ge-1/1/7 gigether-options 802.3ad ae0
CE-5 종단 호스트 디바이스를 향한 LACP(Link Aggregation Control Protocol) 지원 LAG(Link Aggregation Group) 인터페이스를 구성합니다. ESI 값은 전체 EVPN 도메인에서 전역적으로 고유합니다. 이
all-active
구성을 통해 ToR21 및 ToR22는 모든 CE 링크가 활발하게 사용되도록 CE 디바이스와 트래픽을 주고받을 수 있습니다.[edit] user@ToR22# set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 user@ToR22# set interfaces ae0 esi all-active user@ToR22# set interfaces ae0 aggregated-ether-options lacp active user@ToR22# set interfaces ae0 aggregated-ether-options lacp periodic fast user@ToR22# set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 user@ToR22# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR22# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set interfaces ae1 aggregated-ether-options lacp active user@ToR22# set interfaces ae1 aggregated-ether-options lacp periodic fast user@ToR22# set interfaces ae1 aggregated-ether-options lacp system-id 22:22:22:22:22:22
루프백 인터페이스 주소 및 라우팅 옵션을 구성합니다.
[edit] user@ToR22# set interfaces lo0 unit 92 family inet address 198.51.100.12/32 user@ToR22# set routing-options router-id 198.51.100.12 user@ToR22# set routing-options autonomous-system 64700
포워딩 테이블에 로드 밸런싱 정책을 적용합니다.
[edit] user@ToR22# set routing-options forwarding-table export evpn-pplb
ToR(ToR22 및 ToR21)과 게이트웨이 라우터(MX21 및 MX22) 간에 외부 BGP(EBGP) 언더레이 연결을 구성합니다.
[edit] user@ToR22# set protocols bgp local-as 64700 user@ToR22# set protocols bgp group MX21 type external user@ToR22# set protocols bgp group MX21 local-address 192.168.8.2 user@ToR22# set protocols bgp group MX21 export LO user@ToR22# set protocols bgp group MX21 export TEST user@ToR22# set protocols bgp group MX21 peer-as 64800 user@ToR22# set protocols bgp group MX21 local-as 64700 user@ToR22# set protocols bgp group MX21 neighbor 192.168.8.1 family inet unicast user@ToR22# set protocols bgp group MX22 type external user@ToR22# set protocols bgp group MX22 local-address 192.168.11.2 user@ToR22# set protocols bgp group MX22 export LO user@ToR22# set protocols bgp group MX22 export TEST user@ToR22# set protocols bgp group MX22 peer-as 64900 user@ToR22# set protocols bgp group MX22 local-as 64700 user@ToR22# set protocols bgp group MX22 neighbor 192.168.11.1 family inet unicast user@ToR22# set protocols bgp group ToR21 type external user@ToR22# set protocols bgp group ToR21 local-address 192.168.12.2 user@ToR22# set protocols bgp group ToR21 export LO user@ToR22# set protocols bgp group ToR21 export TEST user@ToR22# set protocols bgp group ToR21 peer-as 64600 user@ToR22# set protocols bgp group ToR21 local-as 64700 user@ToR22# set protocols bgp group ToR21 neighbor 192.168.12.1 family inet unicast
ToR(ToR22 및 ToR21)과 게이트웨이 라우터(MX21 및 MX22) 사이에 MP-EBGP(Multiprotocol External BGP) 오버레이를 구성하고 EVPN을 신호 프로토콜로 설정합니다.
단계별 절차
EVPN 신호를 사용하여 ToR22와 MX21 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR22# set protocols bgp group MX21-EVPN type external user@ToR22# set protocols bgp group MX21-EVPN multihop ttl 2 user@ToR22# set protocols bgp group MX21-EVPN multihop no-nexthop-change user@ToR22# set protocols bgp group MX21-EVPN local-address 198.51.100.12 user@ToR22# set protocols bgp group MX21-EVPN peer-as 64800 user@ToR22# set protocols bgp group MX21-EVPN local-as 64700 user@ToR22# set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling
EVPN 신호를 사용하여 ToR22와 MX22 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR22# set protocols bgp group MX22-EVPN type external user@ToR22# set protocols bgp group MX22-EVPN multihop ttl 2 user@ToR22# set protocols bgp group MX22-EVPN multihop no-nexthop-change user@ToR22# set protocols bgp group MX22-EVPN local-address 198.51.100.12 user@ToR22# set protocols bgp group MX22-EVPN peer-as 64900 user@ToR22# set protocols bgp group MX22-EVPN local-as 64700 user@ToR22# set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling
EVPN 시그널링을 사용하여 ToR22와 ToR21 사이를 연결하도록 MP-EBGP 오버레이를 구성합니다.
[edit] user@ToR22# set protocols bgp group ToR21-EVPN type external user@ToR22# set protocols bgp group ToR21-EVPN multihop ttl 2 user@ToR22# set protocols bgp group ToR21-EVPN multihop no-nexthop-change user@ToR22# set protocols bgp group ToR21-EVPN local-address 198.51.100.12 user@ToR22# set protocols bgp group ToR21-EVPN peer-as 64600 user@ToR22# set protocols bgp group ToR21-EVPN local-as 64700 user@ToR22# set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling
모든 레이어 2 주소 학습 및 전달 속성을 추적하도록 추적 작업을 구성합니다.
[edit] user@ToR22# set protocols l2-learning traceoptions file TOR22-L2ALD.log user@ToR22# set protocols l2-learning traceoptions file size 10m user@ToR22# set protocols l2-learning traceoptions level all user@ToR22# set protocols l2-learning traceoptions flag all
직접 루프백 주소 경로를 수락하도록 라우팅 정책을 구성합니다.
[edit] user@ToR22# set policy-options policy-statement LO term 1 from protocol direct user@ToR22# set policy-options policy-statement LO term 1 from route-filter 198.51.100.12/32 exact user@ToR22# set policy-options policy-statement LO term 1 then accept
NO-EXPORT 커뮤니티를 구성합니다.
[edit] user@ToR22# set policy-options community NO-EXPORT members no-advertise user@ToR22# set policy-options community NO-EXPORT members no-export user@ToR22# set policy-options community NO-EXPORT members no-export-subconfed
로드 밸런싱 및 TEST 정책을 구성합니다.
[edit] user@ToR22# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR22# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR22# set policy-options policy-statement evpn-pplb then load-balance per-packet
각 가상 네트워크에 대한 EVPN 라우팅 인스턴스를 구성합니다. VTEP 소스 인터페이스, 경로 구분자(EVPN 경로를 식별하고 보급하는 데 사용됨) 및
vrf-target
(정의된 경로 대상을 사용하여 해당 로컬 VRF에 대한 모든 경로를 내보내고 태그를 지정)를 정의합니다. EVPN 프로토콜, 캡슐화 방법, VNI 목록 및 BUM 트래픽 전달 방법을 구성합니다. 마지막으로, VNID를 VLAN ID에 매핑하는 각 가상 라우터에 대한 브리지 도메인을 구성하고 BUM 전달 방법을 식별합니다.[edit] user@ToR22# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.92 user@ToR22# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR22# set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 user@ToR22# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR22# set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.12:1 user@ToR22# set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 user@ToR22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR22-EVPN-VXLAN-1.log user@ToR22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR22# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR22# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
확인
언더레이와 EVPN 오버레이를 모두 구성한 후 구성이 의도한 대로 작동하는지 확인하는 것이 좋습니다.
- ToR11 구성 확인
- ToR12 구성 확인
- 데이터센터 게이트웨이 및 WAN 에지 1 라우터(MX11) 구성 확인
- 데이터센터 게이트웨이 및 WAN 에지 2 라우터(MX12) 구성 확인
- 데이터센터 게이트웨이 및 WAN 에지 3 라우터(MX21) 구성 확인
- 데이터센터 게이트웨이 및 WAN 에지 4 라우터(MX22) 구성 확인
- ToR21 구성 확인
- ToR22 구성 검증
ToR11 구성 확인
목적
ToR11이 올바르게 구성되었는지 확인합니다.
행동
CE2 디바이스의 논리적 시스템 인터페이스와 브리지 도메인이 레이어 2 연결을 활성화하도록 올바르게 구성되었는지 확인합니다.
user@ToR11> show configuration logical-systems CE-2 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host-2"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/6 { unit 0 { description "CONNECTED TO ToR11"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
ToR11의 인터페이스 및 추적 옵션이 다른 ToR 및 게이트웨이 및 WAN 에지 디바이스에 대한 언더레이 연결을 활성화하도록 올바르게 구성되었는지 확인합니다.
user@ToR11> show configuration interfaces traceoptions { file ToR11-DCD.log size 10m; flag all; } ge-1/0/0 { description "CONNECTED TO CE-1"; gigether-options { 802.3ad ae0; } } ge-1/0/5 { unit 0 { description "CONNECTED TO MX12"; family inet { address 192.168.4.1/24; } } } ge-1/0/6 { unit 0 { description "CONNECTED TO CE-2"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/1 { unit 0 { description "CONNECTED TO MX11"; family inet { address 192.168.3.1/24; } } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR12"; family inet { address 192.168.2.1/24; } } } ae0 { esi { 00:11:11:11:11:11:11:11:11:11; all-active; } aggregated-ether-options { lacp { active; periodic fast; system-id 11:11:11:11:11:11; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } lo0 { unit 81 { family inet { address 192.0.2.11/32; } } }
라우팅 및 로드 밸런싱 옵션이 올바르게 구성되었는지 확인합니다.
user@ToR11> show configuration routing-options router-id 192.0.2.11; autonomous-system 65100; forwarding-table { export evpn-pplb; }
외부 BGP(EBGP) 언더레이 및 오버레이 프로토콜과 레이어 2 주소 학습 및 전달 속성이 올바르게 구성되었는지 확인합니다.
user@ToR11> show configuration protocols bgp { local-as 65100; group MX11 { type external; local-address 192.168.3.1; export [ LO TEST ]; peer-as 65400; neighbor 192.168.3.2 { family inet { unicast; } } } group MX12 { type external; local-address 192.168.4.1; export [ LO TEST ]; peer-as 65500; neighbor 192.168.4.2 { family inet { unicast; } } } group ToR12 { type external; local-address 192.168.2.1; export [ LO TEST ]; peer-as 65200; local-as 65100; neighbor 192.168.2.2 { family inet { unicast; } } } group MX11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.11; export TEST; peer-as 65400; local-as 65100; neighbor 192.0.2.21 { family evpn { signaling; } } } group MX12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.11; export TEST; peer-as 65500; local-as 65100; neighbor 192.0.2.22 { family evpn { signaling; } } } group ToR12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.11; export TEST; peer-as 65200; local-as 65100; neighbor 192.0.2.12 { family evpn { signaling; } } } } l2-learning { traceoptions { file TOR11-L2ALD.log size 10m; level all; flag all; } }
루프백 주소, 로드 밸런싱 및 TEST 정책에 대한 라우팅 정책과 커뮤니티 정책 옵션이 올바르게 구성되었는지 확인합니다.
user@ToR11> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 192.0.2.11/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
각 가상 네트워크에 대한 EVPN-VXLAN 라우팅 인스턴스가 올바르게 구성되었는지 확인합니다.
user@ToR11> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.81; instance-type virtual-switch; interface ge-1/0/6.0; interface ae0.0; route-distinguisher 192.0.2.11:1; vrf-target target:1:1; protocols { evpn { traceoptions { file TOR11-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }
ToR12 구성 확인
목적
ToR12가 올바르게 구성되었는지 확인합니다.
행동
CE1 및 CE3 디바이스의 논리적 시스템 인터페이스와 브리지 도메인이 레이어 2 연결을 활성화하도록 올바르게 구성되었는지 확인합니다.
user@ToR12> show configuration logical-systems CE-1 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host 1"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { unit 0 { description "CONNECTED TO ToR12"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } user@ToR12> show configuration logical-systems CE-3 { interfaces { ge-1/1/7 { unit 0 { description "CONNECTED TO ToR12"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/9 { unit 0 { description "CONNECTED TO Host 3"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
ToR12의 인터페이스 및 추적 옵션이 다른 ToR 및 게이트웨이 및 WAN 에지 디바이스에 대한 언더레이 연결을 사용하도록 올바르게 구성되었는지 확인합니다.
user@ToR12>show configuration interfaces traceoptions { file ToR12-DCD.log size 10m; flag all; } ge-1/0/0 { unit 0 { description "CONNECTED TO MX11"; family inet { address 192.168.6.1/24; } } } ge-1/0/4 { unit 0 { description "CONNECTED TO MX12"; family inet { address 192.168.5.1/24; } } } ge-1/0/6 { description "CONNECTED TO CE-1"; gigether-options { 802.3ad ae0; } } ge-1/0/7 { unit 0 { description "CONNECTED TO CE-3"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/0 { description "CONNECTED TO ToR11"; gigether-options { 802.3ad ae1; } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR11"; family inet { address 192.168.2.2/24; } } } ge-1/1/6 { description "CONNECTED TO ToR12"; gigether-options { 802.3ad ae1; } } ae0 { esi { 00:11:11:11:11:11:11:11:11:11; all-active; } aggregated-ether-options { lacp { system-id 11:11:11:11:11:11; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { aggregated-ether-options { lacp { active; periodic fast; } } } lo0 { unit 82 { family inet { address 192.0.2.12/32; } } }
라우팅 및 로드 밸런싱 옵션이 올바르게 구성되었는지 확인합니다.
user@ToR12> show configuration routing-options router-id 192.0.2.12; autonomous-system 65200; forwarding-table { export evpn-pplb; }
외부 BGP(EBGP) 언더레이 및 오버레이 프로토콜과 레이어 2 주소 학습 및 전달 속성이 올바르게 구성되었는지 확인합니다.
user@ToR12> show configuration protocols bgp { local-as 65200; group MX11 { type external; local-address 192.168.6.1; export [ LO TEST ]; peer-as 65400; local-as 65200; neighbor 192.168.6.2 { family inet { unicast; } } } group MX12 { type external; local-address 192.168.5.1; export [ LO TEST ]; peer-as 65500; local-as 65200; neighbor 192.168.5.2 { family inet { unicast; } } } group ToR11 { type external; local-address 192.168.2.2; export [ LO TEST ]; peer-as 65100; local-as 65200; neighbor 192.168.2.1 { family inet { unicast; } } } group MX11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.12; export TEST; peer-as 65400; local-as 65200; neighbor 192.0.2.21 { family evpn { signaling; } } } group MX12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.12; export TEST; peer-as 65500; local-as 65200; neighbor 192.0.2.22 { family evpn { signaling; } } } group ToR11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.12; export TEST; peer-as 65100; local-as 65200; neighbor 192.0.2.11 { family evpn { signaling; } } } group ToR12-EVPN { export TEST; } } l2-learning { traceoptions { file TOR12-L2ALD.log size 10m; level all; flag all; } }
루프백 주소, 로드 밸런싱 및 TEST 정책에 대한 라우팅 정책과 커뮤니티 정책 옵션이 올바르게 구성되었는지 확인합니다.
user@ToR12> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 192.0.2.12/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
각 가상 네트워크에 대한 EVPN-VXLAN 라우팅 인스턴스가 올바르게 구성되었는지 확인합니다.
user@ToR12> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.82; instance-type virtual-switch; interface ge-1/0/7.0; interface ae0.0; route-distinguisher 192.0.2.12:1; vrf-target target:1:1; protocols { evpn { traceoptions { file TOR12-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }
데이터센터 게이트웨이 및 WAN 에지 1 라우터(MX11) 구성 확인
목적
MX11이 올바르게 구성되었는지 확인합니다.
행동
MX11 라우터(DC GW/WAN Edge1)의 인터페이스가 다음을 위해 구성되었는지 확인합니다.
DC1 네트워크의 EVPN-VXLAN 부분인 MX12, ToR11, ToR12 및 P 디바이스에 대한 언더레이 연결.
user@MX11> show configuration interfaces traceoptions { file MX11-DCD.log size 10m; flag all; } ge-1/1/1 { unit 0 { description "CONNECTED TO ToR11"; family inet { address 192.168.3.2/24; } } } ge-5/1/0 { unit 0 { description "CONNECTED TO MX12"; family inet { address 192.168.7.1/24; } } } ge-5/1/8 { unit 0 { description "CONNECTED TO ToR12"; family inet { address 192.168.6.2/24; } } } ge-5/1/9 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.1.1/24; } family mpls; } }
토폴로지의 호스트에 대한 MAC 및 IP 경로(MAC+IP 유형 2 경로)를 광고하는 통합 라우팅 및 브리징(IRB) 인터페이스. IRB 구성은 호스트의 VLAN에 대한 게이트웨이입니다.
user@MX11> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.12/24 { virtual-gateway-address 10.11.1.10; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.12/24 { virtual-gateway-address 10.12.1.10; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.12/24 { virtual-gateway-address 10.13.1.10; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.12/24 { virtual-gateway-address 10.14.1.10; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.12/24 { virtual-gateway-address 10.15.1.10; } } } }
논리 터널 인터페이스의 ESI 값 및 액티브-액티브 멀티호밍. DC1 네트워크의 다른 모든 게이트웨이/WAN 에지 라우터에서 동일한 ESI 값을 사용합니다.
user@MX11> show configuration interfaces lt-5/1/0 { esi { 00:22:22:22:22:22:22:22:22:22; all-active; } }
데이터센터 네트워크의 EVPN-VXLAN 인스턴스를 WAN의 MPLS 기반 EVPN 인스턴스와 상호 연결하기 위한 MX11 게이트웨이 라우터의 한 쌍의 논리적 터널(lt-) 인터페이스. 하나의 논리 터널(lt-) 인터페이스는 EVPN-VXLAN의 액세스 인터페이스로 구성되고 다른 논리 터널(lt-) 인터페이스는 MPLS 기반 EVPN의 액세스 인터페이스로 구성됩니다.
user@MX11> show configuration interfaces lt-5/1/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
루프백 인터페이스 주소입니다.
user@MX11> show configuration interfaces lo0 { unit 84 { family inet { address 192.0.2.21/32; } family mpls; } }
라우팅 옵션 및 로드 밸런싱이 올바르게 구성되었는지 확인합니다.
user@MX11> show configuration routing-options router-id 192.0.2.21; autonomous-system 65300; forwarding-table { export evpn-pplb; }
외부 BGP(EBGP) 언더레이 및 오버레이 프로토콜과 RSVP, MPLS, BGP 및 OSPF 프로토콜이 올바르게 구성되었는지 확인합니다.
user@MX11> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX11-TO-MX12 { to 192.0.2.22; } label-switched-path MX11-TO-P { to 203.0.113.1; } label-switched-path MX11-TO-MX21 { to 198.51.100.21; } label-switched-path MX11-TO-MX22 { to 198.51.100.22; } interface all; interface fxp0.0 { disable; } } bgp { local-address 192.0.2.21; local-as 65300; group INT { type internal; local-address 192.0.2.21; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group MX12 { type external; local-address 192.168.7.1; export [ TEST LO ]; peer-as 65500; local-as 65400; neighbor 192.168.7.2 { family inet { unicast; } } } group ToR11 { type external; local-address 192.168.3.2; import TEST; export [ TEST LO ]; peer-as 65100; local-as 65400; neighbor 192.168.3.1 { family inet { unicast; } } } group ToR12 { type external; local-address 192.168.6.2; export [ TEST LO ]; peer-as 65200; local-as 65400; neighbor 192.168.6.1 { family inet { unicast; } } } group MX12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 65500; local-as 65400; neighbor 192.0.2.22 { family evpn { signaling; } } } group ToR11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 65100; local-as 65400; neighbor 192.0.2.11 { family evpn { signaling; } } } group ToR12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 65200; local-as 65400; neighbor 192.0.2.12 { family evpn { signaling; } } } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-5/1/9.0; interface lo0.84 { passive; } } } l2-learning { traceoptions { file MX11-L2ALD.log size 10m; level all; flag all; } }
루프백 주소, 로드 밸런싱 및 TEST 정책에 대한 라우팅 정책과 커뮤니티 정책 옵션이 올바르게 구성되었는지 확인합니다.
user@MX11> show configuration policy-options policy-statement LO { from { protocol direct; route-filter 192.0.2.21/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
EVPN 기반 MPLS 라우팅 인스턴스 및 EVPN-VXLAN 라우팅 인스턴스가 올바르게 구성되었는지 확인합니다.
user@MX11> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-5/1/0.0; route-distinguisher 192.0.2.21:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX11-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.84; instance-type virtual-switch; interface lt-5/1/0.1; route-distinguisher 192.0.2.21:1; vrf-target target:1:1; protocols { evpn { traceoptions { file MX11-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
데이터센터 게이트웨이 및 WAN 에지 2 라우터(MX12) 구성 확인
목적
MX12가 올바르게 구성되었는지 확인합니다.
행동
MX12 라우터(DC GW/WAN Edge2)의 인터페이스가 다음에 대해 구성되었는지 확인합니다.
DC1 네트워크의 EVPN-VXLAN 부분인 MX11, ToR11, ToR12 및 P 디바이스에 대한 언더레이 연결.
user@MX12> show configuration interfaces traceoptions { file MX12-DCD.log size 10m; flag all; } ge-1/0/4 { unit 0 { description "CONNECTED TO ToR12"; family inet { address 192.168.5.2/24; } } } ge-1/0/5 { unit 0 { description "CONNECTED TO ToR11"; family inet { address 192.168.4.2/24; } } } ge-1/0/6 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.113.11/24; } family mpls; } } ge-1/1/0 { unit 0 { description "CONNECTED TO MX11"; family inet { address 192.168.7.2/24; } } }
토폴로지의 호스트에 대한 MAC 및 IP 경로(MAC+IP 유형 2 경로)를 광고하는 통합 라우팅 및 브리징(IRB) 인터페이스. IRB 구성은 호스트의 VLAN에 대한 게이트웨이입니다.
user@MX12> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.13/24 { virtual-gateway-address 10.11.1.10; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.13/24 { virtual-gateway-address 10.12.1.10; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.13/24 { virtual-gateway-address 10.13.1.10; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.13/24 { virtual-gateway-address 10.14.1.10; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.13/24 { virtual-gateway-address 10.15.1.10; } } } }
논리 터널 인터페이스의 ESI 값 및 액티브-액티브 멀티호밍. DC1 네트워크의 다른 모든 게이트웨이/WAN 에지 라우터에서 동일한 ESI 값을 사용합니다.
user@MX12> show configuration interfaces lt-1/0/0 { esi { 00:22:22:22:22:22:22:22:22:22; all-active; } }
데이터센터 네트워크의 EVPN-VXLAN 인스턴스와 WAN의 MPLS 기반 EVPN 인스턴스를 상호 연결하기 위한 MX12 게이트웨이 라우터의 한 쌍의 논리적 터널(lt-) 인터페이스. 하나의 논리 터널(lt-) 인터페이스는 EVPN-VXLAN의 액세스 인터페이스로 구성되고 다른 논리 터널(lt-) 인터페이스는 MPLS 기반 EVPN의 액세스 인터페이스로 구성됩니다.
user@MX12> show configuration interfaces lt-1/0/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
루프백 인터페이스 주소입니다.
user@MX12> show configuration interfaces lo0 { unit 85 { family inet { address 192.0.2.22/32; } family mpls; } } }
라우팅 옵션 및 로드 밸런싱이 올바르게 구성되었는지 확인합니다.
user@MX12> show configuration routing-options router-id 192.0.2.22; autonomous-system 65300; forwarding-table { export evpn-pplb; }
외부 BGP(EBGP) 언더레이 및 오버레이 프로토콜과 RSVP, MPLS, BGP 및 OSPF 프로토콜이 올바르게 구성되었는지 확인합니다.
user@MX12> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX12-TO-MX11 { to 192.0.2.21; } label-switched-path MX12-TO-P { to 203.0.113.1; } label-switched-path MX12-TO-MX21 { to 198.51.100.21; } label-switched-path MX12-TO-MX22 { to 198.51.100.22; } interface all; interface fxp0.0 { disable; } } bgp { local-address 192.0.2.22; local-as 65300; group INT { type internal; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group MX11 { type external; local-address 192.168.7.2; export [ TEST LO ]; peer-as 65400; local-as 65500; neighbor 192.168.7.1 { family inet { unicast; } } } group ToR11 { type external; local-address 192.168.4.2; export [ TEST LO ]; peer-as 65100; local-as 65500; neighbor 192.168.4.1 { family inet { unicast; } } } group ToR12 { type external; local-address 192.168.5.2; export [ TEST LO ]; peer-as 65200; local-as 65500; neighbor 192.168.5.1 { family inet { unicast; } } } group MX11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.22; export TEST; peer-as 65400; local-as 65500; neighbor 192.0.2.21 { family evpn { signaling; } } } group ToR11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.22; export TEST; peer-as 65100; local-as 65500; neighbor 192.0.2.11 { family evpn { signaling; } } } group ToR12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.22; export TEST; peer-as 65200; local-as 65500; neighbor 192.0.2.12 { family evpn { signaling; } } } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-1/0/6.0; interface lo0.85 { passive; } } } l2-learning { traceoptions { file MX12-L2ALD.log size 10m; level all; flag all; } }
루프백 주소, 로드 밸런싱 및 TEST 정책에 대한 라우팅 정책과 커뮤니티 정책 옵션이 올바르게 구성되었는지 확인합니다.
user@MX12> show configuration policy-options policy-statement LO { from { protocol direct; route-filter 192.0.2.22/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
EVPN 기반 MPLS 라우팅 인스턴스 및 EVPN-VXLAN 라우팅 인스턴스가 올바르게 구성되었는지 확인합니다.
user@MX12> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-1/0/0.0; route-distinguisher 192.0.2.22:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX12-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.85; instance-type virtual-switch; interface lt-1/0/0.1; route-distinguisher 192.0.2.22:1; vrf-target target:1:1; protocols { evpn { traceoptions { file MX12-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
데이터센터 게이트웨이 및 WAN 에지 3 라우터(MX21) 구성 확인
목적
MX21이 올바르게 구성되었는지 확인합니다.
행동
MX21 라우터(DC GW/WAN Edge3)의 인터페이스가 다음에 대해 구성되었는지 확인합니다.
DC1 네트워크의 EVPN-VXLAN 부분인 MX22, ToR21, ToR22 및 P 디바이스에 대한 언더레이 연결.
user@MX21> show configuration interfaces ge-3/0/0 { unit 0 { description "CONNECTED TO MX22"; family inet { address 192.168.13.1/24; } } } ge-3/1/0 { unit 0 { description "CONNECTED TO ToR22"; family inet { address 192.168.8.1/24; } } } ge-5/0/0 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.113.31/24; } family mpls; } } ge-5/0/1 { unit 0 { description "CONNECTED TO ToR21"; family inet { address 192.168.9.1/24; } } }
토폴로지의 호스트에 대한 MAC 및 IP 경로(MAC+IP 유형 2 경로)를 광고하는 통합 라우팅 및 브리징(IRB) 인터페이스. IRB 구성은 호스트의 VLAN에 대한 게이트웨이입니다.
user@MX21> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.14/24 { virtual-gateway-address 10.11.1.11; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.14/24 { virtual-gateway-address 10.12.1.11; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.14/24 { virtual-gateway-address 10.13.1.11; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.14/24 { virtual-gateway-address 10.14.1.11; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.14/24 { virtual-gateway-address 10.15.1.11; } } } }
논리 터널 인터페이스의 ESI 값 및 액티브-액티브 멀티호밍. DC1 네트워크의 다른 모든 게이트웨이/WAN 에지 라우터에서 동일한 ESI 값을 사용합니다.
user@MX21> show configuration interfaces lt-5/0/0 { esi { 00:33:33:33:33:33:33:33:33:33; all-active; } }
데이터센터 네트워크의 EVPN-VXLAN 인스턴스를 WAN의 MPLS 기반 EVPN 인스턴스와 상호 연결하기 위한 MX21 게이트웨이 라우터의 한 쌍의 논리 터널(lt-) 인터페이스. 하나의 논리 터널(lt-) 인터페이스는 EVPN-VXLAN의 액세스 인터페이스로 구성되고 다른 논리 터널(lt-) 인터페이스는 MPLS 기반 EVPN의 액세스 인터페이스로 구성됩니다.
user@MX21> show configuration interfaces lt-5/0/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
루프백 인터페이스 주소입니다.
user@MX21> show configuration interfaces lo0 { unit 87 { family inet { address 198.51.100.21/32; } family mpls; } }
라우팅 옵션 및 로드 밸런싱이 올바르게 구성되었는지 확인합니다.
user@MX21> show configuration routing-options router-id 198.51.100.21; autonomous-system 65300; forwarding-table { export evpn-pplb; }
외부 BGP(EBGP) 언더레이 및 오버레이 프로토콜과 RSVP, MPLS, BGP 및 OSPF 프로토콜이 올바르게 구성되었는지 확인합니다.
user@MX21> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX21-TO-MX11 { to 192.0.2.21; } label-switched-path MX21-TO-MX12 { to 192.0.2.22; } label-switched-path MX21-TO-MX22 { to 198.51.100.22; } label-switched-path MX21-TO-P { to 203.0.113.1; } interface all; interface fxp0.0 { disable; } } bgp { local-address 198.52.100.21; local-as 65300; group INT { type internal; local-address 198.51.100.21; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group MX22 { type external; local-address 192.168.13.1; export [ TEST LO ]; peer-as 64900; local-as 64800; neighbor 192.168.13.2 { family inet { unicast; } } } group ToR21 { type external; local-address 192.168.9.1; export [ TEST LO ]; peer-as 64600; local-as 64800; neighbor 192.168.9.2 { family inet { unicast; } } } group ToR22 { type external; local-address 192.168.8.1; export [ TEST LO ]; peer-as 64700; local-as 64800; neighbor 192.168.8.2 { family inet { unicast; } } } group MX22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.21; peer-as 64900; local-as 64800; neighbor 198.51.100.22 { family evpn { signaling; } } } group ToR21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.21; peer-as 64600; local-as 64800; neighbor 198.51.100.11 { family evpn { signaling; } } } group ToR22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.21; peer-as 64700; local-as 64800; neighbor 198.51.100.12 { family evpn { signaling; } } } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-5/0/0.0; interface lo0.87 { passive; } } } l2-learning { traceoptions { file MX21-L2ALD.log size 10m; level all; flag all; } }
루프백 주소, 로드 밸런싱 및 TEST 정책에 대한 라우팅 정책과 커뮤니티 정책 옵션이 올바르게 구성되었는지 확인합니다.
user@MX21> show configuration policy-options policy-statement LO { from { protocol direct; route-filter 198.51.100.21/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
EVPN 기반 MPLS 라우팅 인스턴스 및 EVPN-VXLAN 라우팅 인스턴스가 올바르게 구성되었는지 확인합니다.
user@MX21> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-5/0/0.0; route-distinguisher 198.51.100.21:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX21-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.87; instance-type virtual-switch; interface lt-5/0/0.1; route-distinguisher 198.51.100.21:1; vrf-target target:1:3; protocols { evpn { traceoptions { file MX21-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
데이터센터 게이트웨이 및 WAN 에지 4 라우터(MX22) 구성 확인
목적
MX22가 올바르게 구성되었는지 확인합니다.
행동
MX22 라우터(DC GW/WAN Edge4)의 인터페이스가 다음을 위해 구성되었는지 확인합니다.
DC1 네트워크의 EVPN-VXLAN 부분인 MX21, ToR21, ToR22 및 P 디바이스에 대한 언더레이 연결.
user@MX22> show configuration interfaces xe-0/0/0 { unit 0 { description "CONNECTED TO ToR22"; family inet { address 192.168.11.1/24; } } } xe-0/0/1 { unit 0 { description "CONNECTED TO ToR21"; family inet { address 192.168.10.1/24; } } } ge-1/0/0 { unit 0 { description "CONNECTED TO MX21"; family inet { address 192.168.13.2/24; } } } ge-1/0/2 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.113.51/24; } family mpls; } }
토폴로지의 호스트에 대한 MAC 및 IP 경로(MAC+IP 유형 2 경로)를 광고하는 통합 라우팅 및 브리징(IRB) 인터페이스. IRB 구성은 호스트의 VLAN에 대한 게이트웨이입니다.
user@MX22> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.15/24 { virtual-gateway-address 10.11.1.11; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.15/24 { virtual-gateway-address 10.12.1.11; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.15/24 { virtual-gateway-address 10.13.1.11; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.15/24 { virtual-gateway-address 10.14.1.11; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.15/24 { virtual-gateway-address 10.15.1.11; } } } }
논리 터널 인터페이스의 ESI 값 및 액티브-액티브 멀티호밍. DC1 네트워크의 다른 모든 게이트웨이/WAN 에지 라우터에서 동일한 ESI 값을 사용합니다.
user@MX22> show configuration interfaces lt-1/0/0 { esi { 00:33:33:33:33:33:33:33:33:33; all-active; } }
데이터센터 네트워크의 EVPN-VXLAN 인스턴스를 WAN의 MPLS 기반 EVPN 인스턴스와 상호 연결하기 위한 MX22 게이트웨이 라우터의 한 쌍의 논리 터널(lt-) 인터페이스. 하나의 논리 터널(lt-) 인터페이스는 EVPN-VXLAN의 액세스 인터페이스로 구성되고 다른 논리 터널(lt-) 인터페이스는 MPLS 기반 EVPN의 액세스 인터페이스로 구성됩니다.
user@MX22> show configuration interfaces lt-1/0/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
루프백 인터페이스 주소입니다.
user@MX22> show configuration interfaces lo0 { unit 88 { family inet { address 198.51.100.22/32; } family mpls; } }
라우팅 옵션 및 로드 밸런싱이 올바르게 구성되었는지 확인합니다.
user@MX22> show configuration routing-options router-id 198.51.100.22; autonomous-system 65300; forwarding-table { export evpn-pplb; }
외부 BGP(EBGP) 언더레이 및 오버레이 프로토콜과 RSVP, MPLS, BGP 및 OSPF 프로토콜이 올바르게 구성되었는지 확인합니다.
user@MX22> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX22-TO-MX11 { to 192.0.2.21; } label-switched-path MX22-TO-MX12 { to 192.0.2.22; } label-switched-path MX22-TO-MX21 { to 198.51.100.21; } label-switched-path MX22-TO-P { to 203.0.113.1; } interface all; interface fxp0.0 { disable; } } bgp { local-address 198.51.100.22; local-as 65300; group INT { type internal; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group MX21 { type external; local-address 192.168.13.2; export [ TEST LO ]; peer-as 64800; local-as 64900; neighbor 192.168.13.1 { family inet { unicast; } } } group ToR21 { type external; local-address 192.168.10.1; export [ TEST LO ]; peer-as 64600; local-as 64900; neighbor 192.168.10.2 { family inet { unicast; } } } group ToR22 { type external; local-address 192.168.11.1; export [ TEST LO ]; peer-as 64700; local-as 64900; neighbor 192.168.11.2 { family inet { unicast; } } } group MX21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.22; peer-as 64800; local-as 64900; neighbor 198.51.100.21 { family evpn { signaling; } } } } group ToR21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.22; peer-as 64600; local-as 64900; neighbor 198.51.100.11 { family evpn { signaling; } } } group ToR22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.22; peer-as 64700; local-as 64900; neighbor 198.51.100.12 { family evpn { signaling; } } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-1/0/2.0; interface lo0.88 { passive; } } } l2-learning { traceoptions { file MX22-L2ALD.log size 10m; level all; flag all; } }
루프백 주소, 로드 밸런싱 및 TEST 정책에 대한 라우팅 정책과 커뮤니티 정책 옵션이 올바르게 구성되었는지 확인합니다.
user@MX22> show configuration policy-options policy-statement LO { from { protocol direct; route-filter 198.51.100.22/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
EVPN 기반 MPLS 라우팅 인스턴스 및 EVPN-VXLAN 라우팅 인스턴스가 올바르게 구성되었는지 확인합니다.
user@MX22> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-1/0/0.0; route-distinguisher 198.51.100.22:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX22-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.88; instance-type virtual-switch; interface lt-1/0/0.1; route-distinguisher 198.51.100.22:1; vrf-target target:1:3; protocols { evpn { traceoptions { file MX22-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
ToR21 구성 확인
목적
ToR21이 올바르게 구성되었는지 확인합니다.
행동
CE4 디바이스의 논리적 시스템 인터페이스와 브리지 도메인이 레이어 2 연결을 활성화하고 가상 확장형 LAN(VXLAN) 간 트래픽을 처리할 수 있도록 올바르게 구성되었는지 확인합니다.
user@ToR21> show configuration logical-systems CE-4 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host 4"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/6 { unit 0 { description "CONNECTED TO ToR21"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
ToR21의 인터페이스 및 추적 옵션이 다른 ToR 및 게이트웨이 및 WAN 에지 디바이스에 대한 언더레이 연결을 활성화하도록 올바르게 구성되었는지 확인합니다.
user@ToR21>show configuration interfaces traceoptions { file ToR21-DCD.log size 10m; flag all; } xe-0/0/0 { unit 0 { description "CONNECTED TO MX22"; family inet { address 192.168.10.2/24; } } } ge-1/0/0 { description "CONNECTED TO CE-5"; gigether-options { 802.3ad ae0; } } ge-1/0/1 { unit 0 { description "CONNECTED TO MX21"; family inet { address 192.168.9.2/24; } } } ge-1/0/6 { unit 0 { description "CONNECTED TO CE-4"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR22"; family inet { address 192.168.12.1/24; } } } ae0 { esi { 00:44:44:44:44:44:44:44:44:44; all-active; } aggregated-ether-options { lacp { active; periodic fast; system-id 22:22:22:22:22:22; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } lo0 { unit 90 { family inet { address 198.51.100.11/32; } } }
라우팅 및 로드 밸런싱 옵션이 올바르게 구성되었는지 확인합니다.
user@ToR21> show configuration routing-options router-id 198.51.100.11; autonomous-system 64600; forwarding-table { export evpn-pplb; }
외부 BGP(EBGP) 언더레이 및 오버레이 프로토콜과 레이어 2 주소 학습 및 전달 속성이 올바르게 구성되었는지 확인합니다.
user@ToR21> show configuration protocols bgp { export TEST; local-as 64600; group MX21 { type external; local-address 192.168.9.2; export [ LO TEST ]; peer-as 64800; local-as 64600; neighbor 192.168.9.1 { family inet { unicast; } } } group MX22 { type external; local-address 192.168.10.2; export [ LO TEST ]; peer-as 64900; local-as 64600; neighbor 192.168.10.1 { family inet { unicast; } } } group ToR22 { type external; local-address 192.168.12.1; export [ LO TEST ]; peer-as 64700; local-as 64600; neighbor 192.168.12.2 { family inet { unicast; } } } group MX21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.11; peer-as 64800; local-as 64600; neighbor 198.51.100.21 { family evpn { signaling; } } } group MX22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.11; peer-as 64900; local-as 64600; neighbor 198.51.100.22 { family evpn { signaling; } } } group ToR22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.11; peer-as 64700; local-as 64600; neighbor 198.51.100.12 { family evpn { signaling; } } } } l2-learning { traceoptions { file TOR21-L2ALD.log size 10m; level all; flag all; } }
루프백 주소, 로드 밸런싱 및 TEST 정책에 대한 라우팅 정책과 커뮤니티 정책 옵션이 올바르게 구성되었는지 확인합니다.
user@ToR21> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 198.51.100.11/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
각 가상 네트워크에 대한 EVPN-VXLAN 라우팅 인스턴스가 올바르게 구성되었는지 확인합니다.
user@ToR21> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.90; instance-type virtual-switch; interface ge-1/0/6.0; interface ae0.0; route-distinguisher 198.51.100.11:1; vrf-target target:1:3; protocols { evpn { traceoptions { file TOR21-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }
ToR22 구성 검증
목적
ToR22가 올바르게 구성되었는지 확인합니다.
행동
CE5 및 CE6 디바이스의 논리적 시스템 인터페이스와 브리지 도메인이 레이어 2 연결을 활성화하고 VXLAN 간 트래픽을 처리할 수 있도록 올바르게 구성되었는지 확인합니다.
user@ToR22> show configuration logical-systems CE-5 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host 5"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { unit 0 { description "CONNECTED TO ToR21"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } user@ToR22> show configuration logical-systems CE-6 { interfaces { ge-1/1/6 { unit 0 { description "CONNECTED TO ToR22"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/9 { unit 0 { description "CONNECTED TO Host 6"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
ToR22의 인터페이스 및 추적 옵션이 다른 ToR 및 게이트웨이 및 WAN 에지 디바이스에 대한 언더레이 연결을 활성화하도록 올바르게 구성되었는지 확인합니다.
user@ToR22>show configuration interfaces traceoptions { file ToR22-DCD.log size 10m; flag all; } xe-0/0/0 { unit 0 { description "CONNECTED TO MX22"; family inet { address 192.168.11.2/24; } } } ge-1/0/0 { description "CONNECTED TO ToR21"; gigether-options { 802.3ad ae1; } } ge-1/0/6 { unit 0 { description "CONNECTED TO CE-6"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/0/7 { description "CONNECTED TO ToR22"; gigether-options { 802.3ad ae1; } } ge-1/1/0 { unit 0 { description "CONNECTED TO MX21"; family inet { address 192.168.8.2/24; } } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR21"; family inet { address 192.168.12.2/24; } } } ge-1/1/7 { description "CONNECTED TO CE-5"; gigether-options { 802.3ad ae0; } } ae0 { esi { 00:44:44:44:44:44:44:44:44:44; all-active; } aggregated-ether-options { lacp { active; periodic fast; system-id 22:22:22:22:22:22; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { aggregated-ether-options { lacp { active; periodic fast; system-id 22:22:22:22:22:22; } } } lo0 { unit 92 { family inet { address 198.51.100.12/32; } } }
라우팅 및 로드 밸런싱 옵션이 올바르게 구성되었는지 확인합니다.
user@ToR22> show configuration routing-options router-id 198.51.100.12; autonomous-system 64700; forwarding-table { export evpn-pplb; }
외부 BGP(EBGP) 언더레이 및 오버레이 프로토콜과 레이어 2 주소 학습 및 전달 속성이 올바르게 구성되었는지 확인합니다.
user@ToR22> show configuration protocols bgp { export TEST; local-as 64700; group MX21 { type external; local-address 192.168.8.2; export [ LO TEST ]; peer-as 64800; local-as 64700; neighbor 192.168.8.1 { family inet { unicast; } } } group MX22 { type external; local-address 192.168.11.2; export [ LO TEST ]; peer-as 64900; local-as 64700; neighbor 192.168.11.1 { family inet { unicast; } } } group ToR21 { type external; local-address 192.168.12.2; export [ LO TEST ]; peer-as 64600; local-as 64700; neighbor 192.168.12.1 { family inet { unicast; } } } group MX21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.12; peer-as 64800; local-as 64700; neighbor 198.51.100.21 { family evpn { signaling; } } } group MX22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.12; peer-as 64900; local-as 64700; neighbor 198.51.100.22 { family evpn { signaling; } } } group ToR21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.12; peer-as 64600; local-as 64700; neighbor 198.51.100.11 { family evpn { signaling; } } } } l2-learning { traceoptions { file TOR22-L2ALD.log size 10m; level all; flag all; } }
루프백 주소, 로드 밸런싱 및 TEST 정책에 대한 라우팅 정책과 커뮤니티 정책 옵션이 올바르게 구성되었는지 확인합니다.
user@ToR22> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 198.51.100.12/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
각 가상 네트워크에 대한 EVPN-VXLAN 라우팅 인스턴스가 올바르게 구성되었는지 확인합니다.
user@ToR22> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.92; instance-type virtual-switch; interface ge-1/0/6.0; interface ae0.0; route-distinguisher 198.51.100.12:1; vrf-target target:1:3; protocols { evpn { traceoptions { file TOR22-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }