EN ESTA PÁGINA
Ejemplo: interconexión de redes de centro de datos EVPN-VXLAN a través de una WAN que ejecuta MPLS basada en EVPN
En este ejemplo se muestra cómo interconectar redes de centros de datos EVPN-VXLAN a través de una WAN que ejecuta EVPN-MPLS para aprovechar las ventajas de EVPN como solución de interconexión del centro de datos (DCI).
Requisitos
En este ejemplo se utilizan los siguientes componentes de hardware y software:
Cuatro enrutadores de la serie MX de Juniper Networks se configurarán como puertas de enlace de centro de datos y enrutadores de borde WAN.
Cuatro enrutadores de la serie MX de Juniper Networks se configurarán como enrutadores de la parte superior del rack (ToR).
Seis dispositivos perimetrales de cliente (CE).
Seis dispositivos host conectados a cada dispositivo CE que tienen la capacidad de configurar varias VLAN.
Un enrutador de proveedor (P) que forma parte de la red WAN de EVPN-MPLS.
Junos OS versión 17.2 o posterior.
Visión general
Puede interconectar diferentes redes de centros de datos que ejecutan Ethernet VPN (EVPN) con encapsulación Virtual extensible LAN (VXLAN) a través de una WAN que ejecuta EVPN basada en MPLS mediante la interfaz de túnel lógico (lt-).
La figura 1 ilustra la interconexión de redes de centros de datos que ejecutan EVPN con encapsulación VXLAN a través de una WAN que ejecuta EVPN basada en MPLS. Para los fines de este ejemplo, los enrutadores de la serie MX que actúan como puertas de enlace del centro de datos y como enrutadores de borde WAN se denominan MX11, MX12, MX21 y MX22. Los enrutadores de la serie MX que actúan como enrutadores de la parte superior del rack (ToR) se denominan ToR11, ToR12, ToR21 y ToR22. Los dispositivos perimetrales del cliente (CE) conectados a la red del centro de datos 1 (DC1) se denominan CE1, CE2 y CE3. Los dispositivos perimetrales del cliente (CE) conectados a la red del centro de datos 2 (DC2) se denominan CE4, CE5 y CE6. Los dispositivos host conectados a cada dispositivo CE deben poder configurar varias VLAN host. El enrutador del proveedor de WAN se denomina P.
Los dispositivos CE forman parte del sistema lógico de los dispositivos ToR.
Para los enrutadores de la serie MX que actúan como puertas de enlace de centro de datos y enrutadores de borde WAN, configure la siguiente información:
Interfaces IRB, direcciones de puerta de enlace virtual e interfaces lógicas de circuito cerrado.
El BGP externo (EBGP) subyace a la conectividad entre los enrutadores de puerta de enlace y ToR, EVPN como protocolo de señalización.
Políticas de enrutamiento para permitir rutas específicas en las tablas de conmutadores virtuales.
Instancias de enrutamiento (VRF de capa 3) para cada red virtual, incluido un diferenciador de ruta único y un valor de destino de vrf .
Instancias de conmutador virtual (MAC-VRF de capa 2) para cada red virtual, la interfaz de origen del VTEP (siempre lo0.0), el diferenciador de ruta y la política de importación de vrf .
Protocolo EVPN, método de encapsulación, lista de VNI y método de reenvío de tráfico BUM para cada conmutador virtual.
Dominio de puente dentro de cada conmutador virtual que asigna VNID a ID de VLAN, una interfaz IRB (capa 3) y el método de reenvío de BUM.
Para los enrutadores de la serie MX que actúan como enrutadores de la parte superior del rack (ToR), configure la siguiente información:
Interfaces orientadas al host con VLAN, ID de VLAN e interfaces lógicas de circuito cerrado.
Grupo de agregación de vínculos (LAG) habilitado para el Protocolo de control de agregación de vínculos (LACP), ID de segmento Ethernet (ESI) y
all-active
modo.Superposiciones de BGP externo multiprotocolo (MP-EBGP) entre ToR y enrutadores de puerta de enlace que utilizan EVPN como protocolo de señalización.
EVPN con VXLAN como método de encapsulación, lista de VNI extendida, modo de multidifusión y destinos de ruta para cada VNI.
Política de importación de vrf, interfaz
route-distinguisher
de origen de vtep e información de destino e importación de vrf.VLAN, con ID de VLAN asignados a VNI de importancia global.
Puede establecer la dirección de puerta de enlace virtual como la dirección de puerta de enlace IPv4 o IPv6 predeterminada para los hosts finales (máquinas virtuales o servidores).
Configuración
- Configuración rápida de CLI
- Configuración de ToR11
- Configuración de ToR12
- Configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 1 (MX11)
- Configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 2 (MX12)
- Configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 3 (MX21)
- Configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 4 (MX22)
- Configuración de ToR21
- Configuración de ToR22
Configuración rápida de CLI
Para configurar rápidamente este ejemplo, copie los siguientes comandos, péguelos en un archivo de texto, elimine los saltos de línea, cambie los detalles necesarios para que coincidan con su configuración de red y, a continuación, copie y pegue los comandos en la CLI en el nivel de [edit]
jerarquía.
ToR11
set system host-name ToR11 set logical-systems CE-2 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host-2" set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-2 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR11" set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-2 bridge-domains BD-1 domain-type bridge set logical-systems CE-2 bridge-domains BD-1 vlan-id 1 set logical-systems CE-2 bridge-domains BD-2 domain-type bridge set logical-systems CE-2 bridge-domains BD-2 vlan-id 2 set logical-systems CE-2 bridge-domains BD-3 domain-type bridge set logical-systems CE-2 bridge-domains BD-3 vlan-id 3 set logical-systems CE-2 bridge-domains BD-4 domain-type bridge set logical-systems CE-2 bridge-domains BD-4 vlan-id 4 set logical-systems CE-2 bridge-domains BD-5 domain-type bridge set logical-systems CE-2 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 1 set interfaces traceoptions file ToR11-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces ge-1/0/0 description "CONNECTED TO CE-1" set interfaces ge-1/0/0 gigether-options 802.3ad ae0 set interfaces ge-1/0/5 unit 0 description "CONNECTED TO MX–12" set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.1/24 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-2" set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/1/1 unit 0 description "CONNECTED TO MX–11" set interfaces ge-1/1/1 unit 0 family inet address 192.168.3.1/24 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR12" set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.1/24 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces lo0 unit 81 family inet address 192.0.2.11/32 set routing-options router-id 192.0.2.11 set routing-options autonomous-system 65100 set routing-options forwarding-table export evpn-pplb set protocols bgp local-as 65100 set protocols bgp group MX11 type external set protocols bgp group MX11 local-address 192.168.3.1 set protocols bgp group MX11 export LO set protocols bgp group MX11 export TEST set protocols bgp group MX11 peer-as 65400 set protocols bgp group MX11 neighbor 192.168.3.2 family inet unicast set protocols bgp group MX12 type external set protocols bgp group MX12 local-address 192.168.4.1 set protocols bgp group MX12 export LO set protocols bgp group MX12 export TEST set protocols bgp group MX12 peer-as 65500 set protocols bgp group MX12 neighbor 192.168.4.2 family inet unicast set protocols bgp group ToR12 type external set protocols bgp group ToR12 local-address 192.168.2.1 set protocols bgp group ToR12 export LO set protocols bgp group ToR12 export TEST set protocols bgp group ToR12 peer-as 65200 set protocols bgp group ToR12 local-as 65100 set protocols bgp group ToR12 neighbor 192.168.2.2 family inet unicast set protocols bgp group MX11-EVPN type external set protocols bgp group MX11-EVPN multihop ttl 2 set protocols bgp group MX11-EVPN multihop no-nexthop-change set protocols bgp group MX11-EVPN local-address 192.0.2.11 set protocols bgp group MX11-EVPN export TEST set protocols bgp group MX11-EVPN peer-as 65400 set protocols bgp group MX11-EVPN local-as 65100 set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling set protocols bgp group MX12-EVPN type external set protocols bgp group MX12-EVPN multihop ttl 2 set protocols bgp group MX12-EVPN multihop no-nexthop-change set protocols bgp group MX12-EVPN local-address 192.0.2.11 set protocols bgp group MX12-EVPN export TEST set protocols bgp group MX12-EVPN peer-as 65500 set protocols bgp group MX12-EVPN local-as 65100 set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling set protocols bgp group ToR12-EVPN type external set protocols bgp group ToR12-EVPN multihop ttl 2 set protocols bgp group ToR12-EVPN multihop no-nexthop-change set protocols bgp group ToR12-EVPN local-address 192.0.2.11 set protocols bgp group ToR12-EVPN export TEST set protocols bgp group ToR12-EVPN peer-as 65200 set protocols bgp group ToR12-EVPN local-as 65100 set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling set protocols l2-learning traceoptions file TOR11-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 192.0.2.11/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.81 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.11:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR11-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
ToR12
set system host-name ToR12 set logical-systems CE-1 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 1" set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-1 interfaces ae1 unit 0 description "CONNECTED TO ToR12" set logical-systems CE-1 interfaces ae1 unit 0 family bridge interface-mode trunk set logical-systems CE-1 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-1 bridge-domains BD-1 domain-type bridge set logical-systems CE-1 bridge-domains BD-1 vlan-id 1 set logical-systems CE-1 bridge-domains BD-2 domain-type bridge set logical-systems CE-1 bridge-domains BD-2 vlan-id 2 set logical-systems CE-1 bridge-domains BD-3 domain-type bridge set logical-systems CE-1 bridge-domains BD-3 vlan-id 3 set logical-systems CE-1 bridge-domains BD-4 domain-type bridge set logical-systems CE-1 bridge-domains BD-4 vlan-id 4 set logical-systems CE-1 bridge-domains BD-5 domain-type bridge set logical-systems CE-1 bridge-domains BD-5 vlan-id 5 set logical-systems CE-3 interfaces ge-1/1/7 unit 0 description "CONNECTED TO ToR12" set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge interface-mode trunk set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-3 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 3" set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-3 bridge-domains BD-1 domain-type bridge set logical-systems CE-3 bridge-domains BD-1 vlan-id 1 set logical-systems CE-3 bridge-domains BD-2 domain-type bridge set logical-systems CE-3 bridge-domains BD-2 vlan-id 2 set logical-systems CE-3 bridge-domains BD-3 domain-type bridge set logical-systems CE-3 bridge-domains BD-3 vlan-id 3 set logical-systems CE-3 bridge-domains BD-4 domain-type bridge set logical-systems CE-3 bridge-domains BD-4 vlan-id 4 set logical-systems CE-3 bridge-domains BD-5 domain-type bridge set logical-systems CE-3 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 2 set interfaces traceoptions file ToR12-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX11" set interfaces ge-1/0/0 unit 0 family inet address 192.168.6.1/24 set interfaces ge-1/0/4 unit 0 description "CONNECTED TO MX12" set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.1/24 set interfaces ge-1/0/6 description "CONNECTED TO CE-1" set interfaces ge-1/0/6 gigether-options 802.3ad ae0 set interfaces ge-1/0/7 unit 0 description "CONNECTED TO CE-3" set interfaces ge-1/0/7 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/7 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/1/0 description "CONNECTED TO ToR11" set interfaces ge-1/1/0 gigether-options 802.3ad ae1 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR11" set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.2/24 set interfaces ge-1/1/6 description "CONNECTED TO ToR12" set interfaces ge-1/1/6 gigether-options 802.3ad ae1 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options lacp periodic fast set interfaces lo0 unit 82 family inet address 192.0.2.12/32 set routing-options router-id 192.0.2.12 set routing-options autonomous-system 65200 set routing-options forwarding-table export evpn-pplb set protocols bgp local-as 65200 set protocols bgp group MX11 type external set protocols bgp group MX11 local-address 192.168.6.1 set protocols bgp group MX11 export LO set protocols bgp group MX11 export TEST set protocols bgp group MX11 peer-as 65400 set protocols bgp group MX11 local-as 65200 set protocols bgp group MX11 neighbor 192.168.6.2 family inet unicast set protocols bgp group MX12 type external set protocols bgp group MX12 local-address 192.168.5.1 set protocols bgp group MX12 export LO set protocols bgp group MX12 export TEST set protocols bgp group MX12 peer-as 65500 set protocols bgp group MX12 local-as 65200 set protocols bgp group MX12 neighbor 192.168.5.2 family inet unicast set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.2.2 set protocols bgp group ToR11 export LO set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 peer-as 65100 set protocols bgp group ToR11 local-as 65200 set protocols bgp group ToR11 neighbor 192.168.2.1 family inet unicast set protocols bgp group MX11-EVPN type external set protocols bgp group MX11-EVPN multihop ttl 2 set protocols bgp group MX11-EVPN multihop no-nexthop-change set protocols bgp group MX11-EVPN local-address 192.0.2.12 set protocols bgp group MX11-EVPN export TEST set protocols bgp group MX11-EVPN peer-as 65400 set protocols bgp group MX11-EVPN local-as 65200 set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling set protocols bgp group MX12-EVPN type external set protocols bgp group MX12-EVPN multihop ttl 2 set protocols bgp group MX12-EVPN multihop no-nexthop-change set protocols bgp group MX12-EVPN local-address 192.0.2.12 set protocols bgp group MX12-EVPN export TEST set protocols bgp group MX12-EVPN peer-as 65500 set protocols bgp group MX12-EVPN local-as 65200 set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.12 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 65100 set protocols bgp group ToR11-EVPN local-as 65200 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN export TEST set protocols l2-learning traceoptions file TOR12-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 192.0.2.12/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.82 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/7.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.12:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR12-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Puerta de enlace del centro de datos y enrutador WAN Edge 1 (MX11)
set system host-name MX11 set interfaces traceoptions file MX11-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces ge-1/1/1 unit 0 description "CONNECTED TO ToR11" set interfaces ge-1/1/1 unit 0 family inet address 192.168.3.2/24 set interfaces ge-5/1/0 unit 0 description "CONNECTED TO MX12" set interfaces ge-5/1/0 unit 0 family inet address 192.168.7.1/24 set interfaces lt-5/1/0 esi 00:22:22:22:22:22:22:22:22:22 set interfaces lt-5/1/0 esi all-active set interfaces lt-5/1/0 unit 0 peer-unit 1 set interfaces lt-5/1/0 unit 0 family bridge interface-mode trunk set interfaces lt-5/1/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-5/1/0 unit 1 peer-unit 0 set interfaces lt-5/1/0 unit 1 family bridge interface-mode trunk set interfaces lt-5/1/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-5/1/8 unit 0 description "CONNECTED TO ToR12" set interfaces ge-5/1/8 unit 0 family inet address 192.168.6.2/24 set interfaces ge-5/1/9 unit 0 description "CONNECTED TO P" set interfaces ge-5/1/9 unit 0 family inet address 203.0.1.1/24 set interfaces ge-5/1/9 unit 0 family mpls set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.12/24 virtual-gateway-address 10.11.1.10 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.12/24 virtual-gateway-address 10.12.1.10 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.12/24 virtual-gateway-address 10.13.1.10 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.12/24 virtual-gateway-address 10.14.1.10 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.12/24 virtual-gateway-address 10.15.1.10 set interfaces lo0 unit 84 family inet address 192.0.2.21/32 set interfaces lo0 unit 84 family mpls set routing-options router-id 192.0.2.21 set routing-options autonomous-system 65300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX11-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX11-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX11-TO-MX21 to 198.51.100.21 set protocols mpls label-switched-path MX11-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 192.0.2.21 set protocols bgp local-as 65300 set protocols bgp group INT type internal set protocols bgp group INT local-address 192.0.2.21 set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX12 type external set protocols bgp group MX12 local-address 192.168.7.1 set protocols bgp group MX12 export TEST set protocols bgp group MX12 export LO set protocols bgp group MX12 peer-as 65500 set protocols bgp group MX12 local-as 65400 set protocols bgp group MX12 neighbor 192.168.7.2 family inet unicast set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.3.2 set protocols bgp group ToR11 import TEST set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 export LO set protocols bgp group ToR11 peer-as 65100 set protocols bgp group ToR11 local-as 65400 set protocols bgp group ToR11 neighbor 192.168.3.1 family inet unicast set protocols bgp group ToR12 type external set protocols bgp group ToR12 local-address 192.168.6.2 set protocols bgp group ToR12 export TEST set protocols bgp group ToR12 export LO set protocols bgp group ToR12 peer-as 65200 set protocols bgp group ToR12 local-as 65400 set protocols bgp group ToR12 neighbor 192.168.6.1 family inet unicast set protocols bgp group MX12-EVPN type external set protocols bgp group MX12-EVPN multihop ttl 2 set protocols bgp group MX12-EVPN multihop no-nexthop-change set protocols bgp group MX12-EVPN local-address 192.0.2.21 set protocols bgp group MX12-EVPN export TEST set protocols bgp group MX12-EVPN peer-as 65500 set protocols bgp group MX12-EVPN local-as 65400 set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.21 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 65100 set protocols bgp group ToR11-EVPN local-as 65400 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN type external set protocols bgp group ToR12-EVPN multihop ttl 2 set protocols bgp group ToR12-EVPN multihop no-nexthop-change set protocols bgp group ToR12-EVPN local-address 192.0.2.21 set protocols bgp group ToR12-EVPN export TEST set protocols bgp group ToR12-EVPN peer-as 65200 set protocols bgp group ToR12-EVPN local-as 65400 set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-5/1/9.0 set protocols ospf area 0.0.0.0 interface lo0.84 passive set protocols l2-learning traceoptions file MX11-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 192.0.2.21/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-5/1/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.21:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX11-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.84 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-5/1/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.21:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX11-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
Puerta de enlace del centro de datos y enrutador WAN Edge 2 (MX12)
set system host-name MX12 set logical-systems P interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX21" set logical-systems P interfaces ge-1/0/0 unit 0 family inet address 203.0.113.32/24 set logical-systems P interfaces ge-1/0/0 unit 0 family mpls set logical-systems P interfaces ge-1/0/2 unit 0 description "CONNECTED TO MX22" set logical-systems P interfaces ge-1/0/2 unit 0 family inet address 203.0.113.52/24 set logical-systems P interfaces ge-1/0/2 unit 0 family mpls set logical-systems P interfaces ge-1/1/1 unit 0 description "CONNECTED TO MX11" set logical-systems P interfaces ge-1/1/1 unit 0 family inet address 203.0.113.42/24 set logical-systems P interfaces ge-1/1/1 unit 0 family mpls set logical-systems P interfaces ge-1/1/6 unit 0 description "CONNECTED TO MX12" set logical-systems P interfaces ge-1/1/6 unit 0 family inet address 203.0.113.12/24 set logical-systems P interfaces ge-1/1/6 unit 0 family mpls set logical-systems P interfaces lo0 unit 86 family inet address 203.0.113.1/32 set logical-systems P interfaces lo0 unit 86 family mpls set logical-systems P protocols rsvp interface all set logical-systems P protocols mpls label-switched-path P-TO-MX11 from 203.0.113.1 set logical-systems P protocols mpls label-switched-path P-TO-MX11 to 192.0.2.21 set logical-systems P protocols mpls label-switched-path P-TO-MX12 to 192.0.2.22 set logical-systems P protocols mpls label-switched-path P-TO-MX21 to 198.51.100.21 set logical-systems P protocols mpls label-switched-path P-TO-MX22 to 198.51.100.22 set logical-systems P protocols mpls interface all set logical-systems P protocols bgp local-address 203.0.113.1 set logical-systems P protocols bgp local-as 65300 set logical-systems P protocols bgp group INT type internal set logical-systems P protocols bgp group INT import BLOCK-VXLAN-ROUTES-FROM-CORE set logical-systems P protocols bgp group INT family evpn signaling set logical-systems P protocols bgp group INT cluster 203.0.113.1 set logical-systems P protocols bgp group INT neighbor 192.0.2.21 set logical-systems P protocols bgp group INT neighbor 192.0.2.22 set logical-systems P protocols bgp group INT neighbor 198.51.100.21 set logical-systems P protocols bgp group INT neighbor 198.51.100.22 set logical-systems P protocols ospf traffic-engineering set logical-systems P protocols ospf area 0.0.0.0 interface all set logical-systems P protocols ospf area 0.0.0.0 interface lo0.86 set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from protocol bgp set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from community RT-CORE set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 then accept set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from protocol bgp set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from community RT-DC1 set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 then reject set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from protocol bgp set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from community RT-DC2 set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 then reject set logical-systems P policy-options community RT-CORE members target:1:2 set logical-systems P policy-options community RT-DC1 members target:1:1 set logical-systems P policy-options community RT-DC2 members target:1:3 set logical-systems P routing-options router-id 203.0.113.1 set logical-systems P routing-options autonomous-system 65300 set chassis fpc 1 pic 0 tunnel-services set interfaces traceoptions file MX12-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces lt-1/0/0 esi 00:22:22:22:22:22:22:22:22:22 set interfaces lt-1/0/0 esi all-active set interfaces lt-1/0/0 unit 0 peer-unit 1 set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-1/0/0 unit 1 peer-unit 0 set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-1/0/4 unit 0 description "CONNECTED TO ToR12" set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.2/24 set interfaces ge-1/0/5 unit 0 description "CONNECTED TO ToR11" set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.2/24 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO P" set interfaces ge-1/0/6 unit 0 family inet address 203.0.113.11/24 set interfaces ge-1/0/6 unit 0 family mpls set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX11" set interfaces ge-1/1/0 unit 0 family inet address 192.168.7.2/24 set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.13/24 virtual-gateway-address 10.11.1.10 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.13/24 virtual-gateway-address 10.12.1.10 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.13/24 virtual-gateway-address 10.13.1.10 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.13/24 virtual-gateway-address 10.14.1.10 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.13/24 virtual-gateway-address 10.15.1.10 set interfaces lo0 unit 85 family inet address 192.0.2.22/32 set interfaces lo0 unit 85 family mpls set routing-options router-id 192.0.2.22 set routing-options autonomous-system 65300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX12-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX12-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX12-TO-MX21 to 198.51.100.21 set protocols mpls label-switched-path MX12-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 192.0.2.22 set protocols bgp local-as 65300 set protocols bgp group INT type internal set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX11 type external set protocols bgp group MX11 local-address 192.168.7.2 set protocols bgp group MX11 export TEST set protocols bgp group MX11 export LO set protocols bgp group MX11 peer-as 65400 set protocols bgp group MX11 local-as 65500 set protocols bgp group MX11 neighbor 192.168.7.1 family inet unicast set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.4.2 set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 export LO set protocols bgp group ToR11 peer-as 65100 set protocols bgp group ToR11 local-as 65500 set protocols bgp group ToR11 neighbor 192.168.4.1 family inet unicast set protocols bgp group ToR12 type external set protocols bgp group ToR12 local-address 192.168.5.2 set protocols bgp group ToR12 export TEST set protocols bgp group ToR12 export LO set protocols bgp group ToR12 peer-as 65200 set protocols bgp group ToR12 local-as 65500 set protocols bgp group ToR12 neighbor 192.168.5.1 family inet unicast set protocols bgp group MX11-EVPN type external set protocols bgp group MX11-EVPN multihop ttl 2 set protocols bgp group MX11-EVPN multihop no-nexthop-change set protocols bgp group MX11-EVPN local-address 192.0.2.22 set protocols bgp group MX11-EVPN export TEST set protocols bgp group MX11-EVPN peer-as 65400 set protocols bgp group MX11-EVPN local-as 65500 set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.22 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 65100 set protocols bgp group ToR11-EVPN local-as 65500 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN type external set protocols bgp group ToR12-EVPN multihop ttl 2 set protocols bgp group ToR12-EVPN multihop no-nexthop-change set protocols bgp group ToR12-EVPN local-address 192.0.2.22 set protocols bgp group ToR12-EVPN export TEST set protocols bgp group ToR12-EVPN peer-as 65200 set protocols bgp group ToR12-EVPN local-as 65500 set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-1/0/6.0 set protocols ospf area 0.0.0.0 interface lo0.85 passive set protocols l2-learning traceoptions file MX12-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 192.0.2.22/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST from protocol bgp set policy-options policy-statement TEST from protocol evpn set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.22:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX12-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.85 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.22:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX12-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
Puerta de enlace del centro de datos y enrutador WAN Edge 3 (MX21)
set system host-name MX21 set interfaces ge-3/0/0 unit 0 description "CONNECTED TO MX22" set interfaces ge-3/0/0 unit 0 family inet address 192.168.13.1/24 set interfaces ge-3/1/0 unit 0 description "CONNECTED TO ToR22" set interfaces ge-3/1/0 unit 0 family inet address 192.168.8.1/24 set interfaces ge-5/0/0 unit 0 description "CONNECTED TO P" set interfaces ge-5/0/0 unit 0 family inet address 203.0.113.31/24 set interfaces ge-5/0/0 unit 0 family mpls set interfaces lt-5/0/0 esi 00:33:33:33:33:33:33:33:33:33 set interfaces lt-5/0/0 esi all-active set interfaces lt-5/0/0 unit 0 peer-unit 1 set interfaces lt-5/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-5/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-5/0/0 unit 1 peer-unit 0 set interfaces lt-5/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-5/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-5/0/1 unit 0 description "CONNECTED TO ToR21" set interfaces ge-5/0/1 unit 0 family inet address 192.168.9.1/24 set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.14/24 virtual-gateway-address 10.11.1.11 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.14/24 virtual-gateway-address 10.12.1.11 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.14/24 virtual-gateway-address 10.13.1.11 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.14/24 virtual-gateway-address 10.14.1.11 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.14/24 virtual-gateway-address 10.15.1.11 set interfaces lo0 unit 87 family inet address 198.51.100.21/32 set interfaces lo0 unit 87 family mpls set routing-options router-id 198.51.100.21 set routing-options autonomous-system 65300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX21-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX21-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX21-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX21-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 198.51.100.21 set protocols bgp export TEST set protocols bgp local-as 65300 set protocols bgp group INT type internal set protocols bgp group INT local-address 198.51.100.21 set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 192.168.13.1 set protocols bgp group MX22 export TEST set protocols bgp group MX22 export LO set protocols bgp group MX22 peer-as 64900 set protocols bgp group MX22 local-as 64800 set protocols bgp group MX22 neighbor 192.168.13.2 family inet unicast set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.9.1 set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 export LO set protocols bgp group ToR21 peer-as 64600 set protocols bgp group ToR21 local-as 64800 set protocols bgp group ToR21 neighbor 192.168.9.2 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 192.168.8.1 set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 export LO set protocols bgp group ToR22 peer-as 64700 set protocols bgp group ToR22 local-as 64800 set protocols bgp group ToR22 neighbor 192.168.8.2 family inet unicast set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.21 set protocols bgp group MX22-EVPN peer-as 64900 set protocols bgp group MX22-EVPN local-as 64800 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.21 set protocols bgp group ToR21-EVPN peer-as 64600 set protocols bgp group ToR21-EVPN local-as 64800 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.21 set protocols bgp group ToR22-EVPN peer-as 64700 set protocols bgp group ToR22-EVPN local-as 64800 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-5/0/0.0 set protocols ospf area 0.0.0.0 interface lo0.87 passive set protocols l2-learning traceoptions file MX21-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 198.51.100.21/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-5/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.21:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX21-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.87 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-5/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.21:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX21-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
Puerta de enlace del centro de datos y enrutador WAN Edge 4 (MX22)
set system host-name MX22 set interfaces xe-0/0/0 unit 0 description "CONNECTED TO ToR22" set interfaces xe-0/0/0 unit 0 family inet address 192.168.11.1/24 set interfaces xe-0/0/1 unit 0 description "CONNECTED TO ToR21" set interfaces xe-0/0/1 unit 0 family inet address 192.168.10.1/24 set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX21" set interfaces ge-1/0/0 unit 0 family inet address 192.168.13.2/24 set interfaces lt-1/0/0 esi 00:33:33:33:33:33:33:33:33:33 set interfaces lt-1/0/0 esi all-active set interfaces lt-1/0/0 unit 0 peer-unit 1 set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-1/0/0 unit 1 peer-unit 0 set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-1/0/2 unit 0 description "CONNECTED TO P" set interfaces ge-1/0/2 unit 0 family inet address 203.0.113.51/24 set interfaces ge-1/0/2 unit 0 family mpls set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.15/24 virtual-gateway-address 10.11.1.11 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.15/24 virtual-gateway-address 10.12.1.11 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.15/24 virtual-gateway-address 10.13.1.11 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.15/24 virtual-gateway-address 10.14.1.11 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.15/24 virtual-gateway-address 10.15.1.11 set interfaces lo0 unit 88 family inet address 198.51.100.22/32 set interfaces lo0 unit 88 family mpls set routing-options router-id 198.51.100.22 set routing-options autonomous-system 65300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX22-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX22-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX22-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX22-TO-MX21 to 198.51.100.21 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 198.51.100.22 set protocols bgp export TEST set protocols bgp local-as 65300 set protocols bgp group INT type internal set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 192.168.13.2 set protocols bgp group MX21 export TEST set protocols bgp group MX21 export LO set protocols bgp group MX21 peer-as 64800 set protocols bgp group MX21 local-as 64900 set protocols bgp group MX21 neighbor 192.168.13.1 family inet unicast set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.10.1 set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 export LO set protocols bgp group ToR21 peer-as 64600 set protocols bgp group ToR21 local-as 64900 set protocols bgp group ToR21 neighbor 192.168.10.2 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 192.168.11.1 set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 export LO set protocols bgp group ToR22 peer-as 64700 set protocols bgp group ToR22 local-as 64900 set protocols bgp group ToR22 neighbor 192.168.11.2 family inet unicast set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.22 set protocols bgp group MX21-EVPN peer-as 64800 set protocols bgp group MX21-EVPN local-as 64900 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.22 set protocols bgp group ToR21-EVPN peer-as 64600 set protocols bgp group ToR21-EVPN local-as 64900 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.22 set protocols bgp group ToR22-EVPN peer-as 64700 set protocols bgp group ToR22-EVPN local-as 64900 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-1/0/2.0 set protocols ospf area 0.0.0.0 interface lo0.88 passive set protocols l2-learning traceoptions file MX22-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 198.51.100.22/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.22:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX22-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.88 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.22:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX22-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
ToR21
set system host-name ToR21 set logical-systems CE-4 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 4" set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-4 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR21" set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-4 bridge-domains BD-1 domain-type bridge set logical-systems CE-4 bridge-domains BD-1 vlan-id 1 set logical-systems CE-4 bridge-domains BD-2 domain-type bridge set logical-systems CE-4 bridge-domains BD-2 vlan-id 2 set logical-systems CE-4 bridge-domains BD-3 domain-type bridge set logical-systems CE-4 bridge-domains BD-3 vlan-id 3 set logical-systems CE-4 bridge-domains BD-4 domain-type bridge set logical-systems CE-4 bridge-domains BD-4 vlan-id 4 set logical-systems CE-4 bridge-domains BD-5 domain-type bridge set logical-systems CE-4 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 1 set interfaces traceoptions file ToR21-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces xe-0/0/0 unit 0 description "CONNECTED TO MX22" set interfaces xe-0/0/0 unit 0 family inet address 192.168.10.2/24 set interfaces ge-1/0/0 description "CONNECTED TO CE-5" set interfaces ge-1/0/0 gigether-options 802.3ad ae0 set interfaces ge-1/0/1 unit 0 description "CONNECTED TO MX21" set interfaces ge-1/0/1 unit 0 family inet address 192.168.9.2/24 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-4" set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR22" set interfaces ge-1/1/3 unit 0 family inet address 192.168.12.1/24 set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces lo0 unit 90 family inet address 198.51.100.11/32 set routing-options router-id 198.51.100.11 set routing-options autonomous-system 64600 set routing-options forwarding-table export evpn-pplb set protocols bgp export TEST set protocols bgp local-as 64600 set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 192.168.9.2 set protocols bgp group MX21 export LO set protocols bgp group MX21 export TEST set protocols bgp group MX21 peer-as 64800 set protocols bgp group MX21 local-as 64600 set protocols bgp group MX21 neighbor 192.168.9.1 family inet unicast set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 192.168.10.2 set protocols bgp group MX22 export LO set protocols bgp group MX22 export TEST set protocols bgp group MX22 peer-as 64900 set protocols bgp group MX22 local-as 64600 set protocols bgp group MX22 neighbor 192.168.10.1 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 192.168.12.1 set protocols bgp group ToR22 export LO set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 peer-as 64700 set protocols bgp group ToR22 local-as 64600 set protocols bgp group ToR22 neighbor 192.168.12.2 family inet unicast set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.11 set protocols bgp group MX21-EVPN peer-as 64800 set protocols bgp group MX21-EVPN local-as 64600 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.11 set protocols bgp group MX22-EVPN peer-as 64900 set protocols bgp group MX22-EVPN local-as 64600 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.11 set protocols bgp group ToR22-EVPN peer-as 64700 set protocols bgp group ToR22-EVPN local-as 64600 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols l2-learning traceoptions file TOR21-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 198.51.100.11/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.90 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.11:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR21-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
ToR22
set system host-name ToR22 set logical-systems CE-5 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 5" set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-5 interfaces ae1 unit 0 description "CONNECTED TO ToR21" set logical-systems CE-5 interfaces ae1 unit 0 family bridge interface-mode trunk set logical-systems CE-5 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-5 bridge-domains BD-1 domain-type bridge set logical-systems CE-5 bridge-domains BD-1 vlan-id 1 set logical-systems CE-5 bridge-domains BD-2 domain-type bridge set logical-systems CE-5 bridge-domains BD-2 vlan-id 2 set logical-systems CE-5 bridge-domains BD-3 domain-type bridge set logical-systems CE-5 bridge-domains BD-3 vlan-id 3 set logical-systems CE-5 bridge-domains BD-4 domain-type bridge set logical-systems CE-5 bridge-domains BD-4 vlan-id 4 set logical-systems CE-5 bridge-domains BD-5 domain-type bridge set logical-systems CE-5 bridge-domains BD-5 vlan-id 5 set logical-systems CE-6 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR22" set logical-systems CE-6 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk set logical-systems CE-6 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-6 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 6" set logical-systems CE-6 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk set logical-systems CE-6 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-6 bridge-domains BD-1 domain-type bridge set logical-systems CE-6 bridge-domains BD-1 vlan-id 1 set logical-systems CE-6 bridge-domains BD-2 domain-type bridge set logical-systems CE-6 bridge-domains BD-2 vlan-id 2 set logical-systems CE-6 bridge-domains BD-3 domain-type bridge set logical-systems CE-6 bridge-domains BD-3 vlan-id 3 set logical-systems CE-6 bridge-domains BD-4 domain-type bridge set logical-systems CE-6 bridge-domains BD-4 vlan-id 4 set logical-systems CE-6 bridge-domains BD-5 domain-type bridge set logical-systems CE-6 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 2 set interfaces traceoptions file ToR22-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces xe-0/0/0 unit 0 description "CONNECTED TO MX22" set interfaces xe-0/0/0 unit 0 family inet address 192.168.11.2/24 set interfaces ge-1/0/0 description "CONNECTED TO ToR21" set interfaces ge-1/0/0 gigether-options 802.3ad ae1 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-6" set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/0/7 description "CONNECTED TO ToR22" set interfaces ge-1/0/7 gigether-options 802.3ad ae1 set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX21" set interfaces ge-1/1/0 unit 0 family inet address 192.168.8.2/24 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR21" set interfaces ge-1/1/3 unit 0 family inet address 192.168.12.2/24 set interfaces ge-1/1/7 description "CONNECTED TO CE-5" set interfaces ge-1/1/7 gigether-options 802.3ad ae0 set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options lacp periodic fast set interfaces ae1 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces lo0 unit 92 family inet address 198.51.100.12/32 set routing-options router-id 198.51.100.12 set routing-options autonomous-system 64700 set routing-options forwarding-table export evpn-pplb set protocols bgp export TEST set protocols bgp local-as 64700 set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 192.168.8.2 set protocols bgp group MX21 export LO set protocols bgp group MX21 export TEST set protocols bgp group MX21 peer-as 64800 set protocols bgp group MX21 local-as 64700 set protocols bgp group MX21 neighbor 192.168.8.1 family inet unicast set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 192.168.11.2 set protocols bgp group MX22 export LO set protocols bgp group MX22 export TEST set protocols bgp group MX22 peer-as 64900 set protocols bgp group MX22 local-as 64700 set protocols bgp group MX22 neighbor 192.168.11.1 family inet unicast set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.12.2 set protocols bgp group ToR21 export LO set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 peer-as 64600 set protocols bgp group ToR21 local-as 64700 set protocols bgp group ToR21 neighbor 192.168.12.1 family inet unicast set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.12 set protocols bgp group MX21-EVPN peer-as 64800 set protocols bgp group MX21-EVPN local-as 64700 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.12 set protocols bgp group MX22-EVPN peer-as 64900 set protocols bgp group MX22-EVPN local-as 64700 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.12 set protocols bgp group ToR21-EVPN peer-as 64600 set protocols bgp group ToR21-EVPN local-as 64700 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols l2-learning traceoptions file TOR22-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 198.51.100.12/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.92 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.12:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR22-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Configuración de ToR11
Procedimiento paso a paso
En el ejemplo siguiente es necesario navegar por varios niveles en la jerarquía de configuración. Para obtener información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en modo de configuración en la Guía del usuario de CLI.
Configure el enrutador MX como ToR11:
Establezca el nombre de host del sistema.
[edit] user@ToR11# set system host-name ToR11
Configure las interfaces y los dominios de puente en el dispositivo CE2 para habilitar la conectividad de capa 2.
[edit] user@ToR11# set logical-systems CE-2 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 2" user@ToR11# set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ToR11# set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ToR11# set logical-systems CE-2 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR11" user@ToR11# set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk user@ToR11# set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 user@ToR11# set logical-systems CE-2 bridge-domains BD-1 domain-type bridge user@ToR11# set logical-systems CE-2 bridge-domains BD-1 vlan-id 1 user@ToR11# set logical-systems CE-2 bridge-domains BD-2 domain-type bridge user@ToR11# set logical-systems CE-2 bridge-domains BD-2 vlan-id 2 user@ToR11# set logical-systems CE-2 bridge-domains BD-3 domain-type bridge user@ToR11# set logical-systems CE-2 bridge-domains BD-3 vlan-id 3 user@ToR11# set logical-systems CE-2 bridge-domains BD-4 domain-type bridge user@ToR11# set logical-systems CE-2 bridge-domains BD-4 vlan-id 4 user@ToR11# set logical-systems CE-2 bridge-domains BD-5 domain-type bridge user@ToR11# set logical-systems CE-2 bridge-domains BD-5 vlan-id 5
Configure las opciones de seguimiento de las interfaces para habilitar los registros de seguimiento.
[edit] user@ToR11# set interfaces traceoptions file ToR11-DCD.log user@ToR11# set interfaces traceoptions file size 10m user@ToR11# set interfaces traceoptions flag all
Establezca el número de interfaces Ethernet agregadas.
[edit] user@ToR11# set chassis aggregated-devices ethernet device-count 1
Configure las interfaces en el dispositivo ToR11 para conectarse a los dispositivos MX12, CE-2, CE-1, ToR12 y MX11 para habilitar la conectividad subyacente.
[edit] user@ToR11# set interfaces ge-1/0/0 description "CONNECTED TO CE-1" user@ToR11# set interfaces ge-1/0/0 gigether-options 802.3ad ae0 user@ToR11# set interfaces ge-1/0/5 unit 0 description "CONNECTED TO MX12" user@ToR11# set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.1/24 user@ToR11# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-2" user@ToR11# set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk user@ToR11# set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 user@ToR11# set interfaces ge-1/1/1 unit 0 description "CONNECTED TO MX11" user@ToR11# set interfaces ge-1/1/1 unit 0 family inet address 192.168.3.1/24 user@ToR11# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR12" user@ToR11# set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.1/24
Configure una interfaz de grupo de agregación de vínculos (LAG) habilitada para el Protocolo de control de agregación de vínculos (LACP) hacia el dispositivo de host final CE-1. El valor ESI es único globalmente en todo el dominio EVPN. La
all-active
configuración permite que ToR11 y ToR12 reenvíen tráfico hacia y desde los dispositivos CE, de modo que todos los vínculos CE se utilicen activamente.[edit] user@ToR11# set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 user@ToR11# set interfaces ae0 esi all-active user@ToR11# set interfaces ae0 aggregated-ether-options lacp active user@ToR11# set interfaces ae0 aggregated-ether-options lacp periodic fast user@ToR11# set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 user@ToR11# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR11# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5
Configure la dirección de interfaz de circuito cerrado y las opciones de enrutamiento.
[edit] user@ToR11# set interfaces lo0 unit 81 family inet address 192.0.2.11/32 user@ToR11# set routing-options router-id 192.0.2.11 user@ToR11# set routing-options autonomous-system 65100
Aplique la directiva de equilibrio de carga a la tabla de reenvío.
[edit] user@ToR11# set routing-options forwarding-table export evpn-pplb
Configure la conectividad subyacente de BGP externo (EBGP) entre los ToR (ToR11 y ToR12) y los enrutadores de puerta de enlace (MX11 y MX12).
[edit] user@ToR11# set protocols bgp local-as 64100 user@ToR11# set protocols bgp group MX11 type external user@ToR11# set protocols bgp group MX11 local-address 192.168.3.1 user@ToR11# set protocols bgp group MX11 export LO user@ToR11# set protocols bgp group MX11 export TEST user@ToR11# set protocols bgp group MX11 peer-as 65400 user@ToR11# set protocols bgp group MX11 neighbor 192.168.3.2 family inet unicast user@ToR11# set protocols bgp group MX12 type external user@ToR11# set protocols bgp group MX12 local-address 192.168.4.1 user@ToR11# set protocols bgp group MX12 export LO user@ToR11# set protocols bgp group MX12 export TEST user@ToR11# set protocols bgp group MX12 peer-as 65500 user@ToR11# set protocols bgp group MX12 neighbor 192.168.4.2 family inet unicast user@ToR11# set protocols bgp group ToR12 type external user@ToR11# set protocols bgp group ToR12 local-address 192.168.2.1 user@ToR11# set protocols bgp group ToR12 export LO user@ToR11# set protocols bgp group ToR12 export TEST user@ToR11# set protocols bgp group ToR12 peer-as 65200 user@ToR11# set protocols bgp group ToR12 local-as 65100 user@ToR11# set protocols bgp group ToR12 neighbor 192.168.2.2 family inet unicast
Configure la superposición de BGP externo (EBGP) entre el ToR (ToR11 y ToR12) y los enrutadores de puerta de enlace (MX11 y MX12) y establezca EVPN como protocolo de señalización.
Procedimiento paso a paso
Configure una superposición MP-EBGP para conectar entre ToR11 y MX11 mediante la señalización EVPN.
[edit] user@ToR11# set protocols bgp group MX11-EVPN type external user@ToR11# set protocols bgp group MX11-EVPN multihop ttl 2 user@ToR11# set protocols bgp group MX11-EVPN multihop no-nexthop-change user@ToR11# set protocols bgp group MX11-EVPN local-address 192.0.2.11 user@ToR11# set protocols bgp group MX11-EVPN export TEST user@ToR11# set protocols bgp group MX11-EVPN peer-as 65400 user@ToR11# set protocols bgp group MX11-EVPN local-as 65100 user@ToR11# set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling
Configure una superposición MP-EBGP para conectar entre ToR11 y MX12 mediante la señalización EVPN.
[edit] user@ToR11# set protocols bgp group MX12-EVPN type external user@ToR11# set protocols bgp group MX12-EVPN multihop ttl 2 user@ToR11# set protocols bgp group MX12-EVPN multihop no-nexthop-change user@ToR11# set protocols bgp group MX12-EVPN local-address 192.0.2.11 user@ToR11# set protocols bgp group MX12-EVPN export TEST user@ToR11# set protocols bgp group MX12-EVPN peer-as 65500 user@ToR11# set protocols bgp group MX12-EVPN local-as 65100 user@ToR11# set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling
Configure una superposición MP-EBGP para conectar entre ToR11 y ToR12 mediante la señalización EVPN.
[edit] user@ToR11# set protocols bgp group ToR12-EVPN type external user@ToR11# set protocols bgp group ToR12-EVPN multihop ttl 2 user@ToR11# set protocols bgp group ToR12-EVPN multihop no-nexthop-change user@ToR11# set protocols bgp group ToR12-EVPN local-address 192.0.2.11 user@ToR11# set protocols bgp group ToR12-EVPN export TEST user@ToR11# set protocols bgp group ToR12-EVPN peer-as 65200 user@ToR11# set protocols bgp group ToR12-EVPN local-as 65100 user@ToR11# set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling
Configure operaciones de seguimiento para realizar un seguimiento de todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@ToR11# set protocols l2-learning traceoptions file TOR11-L2ALD.log user@ToR11# set protocols l2-learning traceoptions file size 10m user@ToR11# set protocols l2-learning traceoptions level all user@ToR11# set protocols l2-learning traceoptions flag all
Configure la directiva de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo.
[edit] user@ToR11# set policy-options policy-statement LO term 1 from protocol direct user@ToR11# set policy-options policy-statement LO term 1 from route-filter 192.0.2.11/32 exact user@ToR11# set policy-options policy-statement LO term 1 then accept
Configure la comunidad NO-EXPORT.
[edit] user@ToR11# set policy-options community NO-EXPORT members no-advertise user@ToR11# set policy-options community NO-EXPORT members no-export user@ToR11# set policy-options community NO-EXPORT members no-export-subconfed
Configure las políticas de equilibrio de carga y TEST.
[edit] user@ToR11# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR11# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR11# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure instancias de enrutamiento EVPN para cada red virtual. Defina la interfaz de origen de VTEP, el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN) y
vrf-target
(exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNID a ID de VLAN e identifique el método de reenvío de BUM.[edit] user@ToR11# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.81 user@ToR11# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR11# set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 user@ToR11# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR11# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.11:1 user@ToR11# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR11-EVPN-VXLAN-1.log user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Configuración de ToR12
Procedimiento paso a paso
En el ejemplo siguiente es necesario navegar por varios niveles en la jerarquía de configuración. Para obtener información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en modo de configuración en la Guía del usuario de CLI.
Configure el enrutador MX ToR12:
Establezca el nombre de host del sistema.
[edit] user@ToR12# set system host-name ToR12
Configure las interfaces y los dominios de puente en el dispositivo CE-1 para habilitar la conectividad de capa 2.
[edit] user@ToR12# set logical-systems CE-1 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 1" user@ToR12# set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ToR12# set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set logical-systems CE-1 interfaces ae1 unit 0 description "CONNECTED TO ToR12" user@ToR12# set logical-systems CE-1 interfaces ae1 unit 0 family bridge interface-mode trunk user@ToR12# set logical-systems CE-1 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set logical-systems CE-1 bridge-domains BD-1 domain-type bridge user@ToR12# set logical-systems CE-1 bridge-domains BD-1 vlan-id 1 user@ToR12# set logical-systems CE-1 bridge-domains BD-2 domain-type bridge user@ToR12# set logical-systems CE-1 bridge-domains BD-2 vlan-id 2 user@ToR12# set logical-systems CE-1 bridge-domains BD-3 domain-type bridge user@ToR12# set logical-systems CE-1 bridge-domains BD-3 vlan-id 3 user@ToR12# set logical-systems CE-1 bridge-domains BD-4 domain-type bridge user@ToR12# set logical-systems CE-1 bridge-domains BD-4 vlan-id 4 user@ToR12# set logical-systems CE-1 bridge-domains BD-5 domain-type bridge user@ToR12# set logical-systems CE-1 bridge-domains BD-5 vlan-id 5
Configure las interfaces y los dominios de puente en el dispositivo CE-3 para habilitar la conectividad de capa 2.
[edit] user@ToR12# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 description "CONNECTED TO ToR12" user@ToR12# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge interface-mode trunk user@ToR12# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 3" user@ToR12# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk user@ToR12# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set logical-systems CE-3 bridge-domains BD-1 domain-type bridge user@ToR12# set logical-systems CE-3 bridge-domains BD-1 vlan-id 1 user@ToR12# set logical-systems CE-3 bridge-domains BD-2 domain-type bridge user@ToR12# set logical-systems CE-3 bridge-domains BD-2 vlan-id 2 user@ToR12# set logical-systems CE-3 bridge-domains BD-3 domain-type bridge user@ToR12# set logical-systems CE-3 bridge-domains BD-3 vlan-id 3 user@ToR12# set logical-systems CE-3 bridge-domains BD-4 domain-type bridge user@ToR12# set logical-systems CE-3 bridge-domains BD-4 vlan-id 4 user@ToR12# set logical-systems CE-3 bridge-domains BD-5 domain-type bridge user@ToR12# set logical-systems CE-3 bridge-domains BD-5 vlan-id 5
Configure las opciones de seguimiento de las interfaces para habilitar los registros de seguimiento.
[edit] user@ToR12# set interfaces traceoptions file ToR12-DCD.log user@ToR12# set interfaces traceoptions file size 10m user@ToR12# set interfaces traceoptions flag all
Establezca el número de interfaces Ethernet agregadas.
[edit] user@ToR12# set chassis aggregated-devices ethernet device-count 2
Configure las interfaces en el dispositivo ToR12 para conectarse a los dispositivos MX12, CE-2, CE-3, ToR11 y MX11 para habilitar la conectividad subyacente.
[edit] user@ToR12# set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX11" user@ToR12# set interfaces ge-1/0/0 unit 0 family inet address 192.168.6.1/24 user@ToR12# set interfaces ge-1/0/4 unit 0 description "CONNECTED TO MX12" user@ToR12# set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.1/24 user@ToR12# set interfaces ge-1/0/6 description "CONNECTED TO CE-1" user@ToR12# set interfaces ge-1/0/6 gigether-options 802.3ad ae0 user@ToR12# set interfaces ge-1/0/7 unit 0 description "CONNECTED TO CE-3" user@ToR12# set interfaces ge-1/0/7 unit 0 family bridge interface-mode trunk user@ToR12# set interfaces ge-1/0/7 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set interfaces ge-1/1/0 description "CONNECTED TO ToR11" user@ToR12# set interfaces ge-1/1/0 gigether-options 802.3ad ae1 user@ToR12# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR11" user@ToR12# set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.2/24 user@ToR12# set interfaces ge-1/1/6 description "CONNECTED TO ToR12" user@ToR12# set interfaces ge-1/1/6 gigether-options 802.3ad ae1
Configure una interfaz de grupo de agregación de vínculos (LAG) habilitada para el Protocolo de control de agregación de vínculos (LACP) hacia el dispositivo de host final CE-1. El valor ESI es único globalmente en todo el dominio EVPN. La
all-active
configuración permite que ToR11 y ToR12 reenvíen tráfico hacia y desde los dispositivos CE, de modo que todos los vínculos CE se utilicen activamente.[edit] user@ToR12# set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 user@ToR12# set interfaces ae0 esi all-active user@ToR12# set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 user@ToR12# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR12# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set interfaces ae1 aggregated-ether-options lacp active user@ToR12# set interfaces ae1 aggregated-ether-options lacp periodic fast
Configure la dirección de interfaz de circuito cerrado y las opciones de enrutamiento.
[edit] user@ToR12# set interfaces lo0 unit 82 family inet address 192.0.2.12/32 user@ToR12# set routing-options router-id 192.0.2.12 user@ToR12# set routing-options autonomous-system 65200
Aplique la directiva de equilibrio de carga a la tabla de reenvío.
[edit] user@ToR12# set routing-options forwarding-table export evpn-pplb
Configure la conectividad subyacente BGP externa (EBGP) entre el ToR (ToR12 y ToR11) y los enrutadores de puerta de enlace (MX11 y MX12).
[edit] user@ToR12# set protocols bgp local-as 65200 user@ToR12# set protocols bgp group MX11 type external user@ToR12# set protocols bgp group MX11 local-address 192.168.6.1 user@ToR12# set protocols bgp group MX11 export LO user@ToR12# set protocols bgp group MX11 export TEST user@ToR12# set protocols bgp group MX11 peer-as 65400 user@ToR12# set protocols bgp group MX11 local-as 65200 user@ToR12# set protocols bgp group MX11 neighbor 192.168.6.2 family inet unicast user@ToR12# set protocols bgp group MX12 type external user@ToR12# set protocols bgp group MX12 local-address 192.168.5.1 user@ToR12# set protocols bgp group MX12 export LO user@ToR12# set protocols bgp group MX12 export TEST user@ToR12# set protocols bgp group MX12 peer-as 65500 user@ToR12# set protocols bgp group MX12 local-as 65200 user@ToR12# set protocols bgp group MX12 neighbor 192.168.5.2 family inet unicast user@ToR12# set protocols bgp group ToR11 type external user@ToR12# set protocols bgp group ToR11 local-address 192.168.2.2 user@ToR12# set protocols bgp group ToR11 export LO user@ToR12# set protocols bgp group ToR11 export TEST user@ToR12# set protocols bgp group ToR11 peer-as 65100 user@ToR12# set protocols bgp group ToR11 local-as 65200 user@ToR12# set protocols bgp group ToR11 neighbor 192.168.2.1 family inet unicast
Configure una superposición de BGP externo multiprotocolo (MP-EBGP) entre el ToR (ToR12 y ToR11) y los enrutadores de puerta de enlace (MX11 y MX12) y establezca EVPN como protocolo de señalización.
Procedimiento paso a paso
Configure una superposición MP-EBGP para conectar entre ToR12 y MX11 mediante la señalización EVPN.
[edit] user@ToR12# set protocols bgp group MX11-EVPN type external user@ToR12# set protocols bgp group MX11-EVPN multihop ttl 2 user@ToR12# set protocols bgp group MX11-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group MX11-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group MX11-EVPN export TEST user@ToR12# set protocols bgp group MX11-EVPN peer-as 65400 user@ToR12# set protocols bgp group MX11-EVPN local-as 65200 user@ToR12# set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling
Configure una superposición MP-EBGP para conectar entre ToR12 y MX12 mediante la señalización EVPN.
[edit] user@ToR12# set protocols bgp group MX12-EVPN type external user@ToR12# set protocols bgp group MX12-EVPN multihop ttl 2 user@ToR12# set protocols bgp group MX12-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group MX12-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group MX12-EVPN export TEST user@ToR12# set protocols bgp group MX12-EVPN peer-as 65500 user@ToR12# set protocols bgp group MX12-EVPN local-as 65200 user@ToR12# set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling
Configure una superposición MP-EBGP para conectar entre ToR12 y ToR11 mediante la señalización EVPN.
[edit] user@ToR12# set protocols bgp group ToR11-EVPN type external user@ToR12# set protocols bgp group ToR11-EVPN multihop ttl 2 user@ToR12# set protocols bgp group ToR11-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group ToR11-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group ToR11-EVPN export TEST user@ToR12# set protocols bgp group ToR11-EVPN peer-as 65100 user@ToR12# set protocols bgp group ToR11-EVPN local-as 65200 user@ToR12# set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling user@ToR12# set protocols bgp group ToR12-EVPN export TEST
Configure operaciones de seguimiento para realizar un seguimiento de todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@ToR12# set protocols l2-learning traceoptions file TOR12-L2ALD.log user@ToR12# set protocols l2-learning traceoptions file size 10m user@ToR12# set protocols l2-learning traceoptions level all user@ToR12# set protocols l2-learning traceoptions flag all
Configure la directiva de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo.
[edit] user@ToR12# set policy-options policy-statement LO term 1 from protocol direct user@ToR12# set policy-options policy-statement LO term 1 from route-filter 192.0.2.12/32 exact user@ToR12# set policy-options policy-statement LO term 1 then accept
Configure la comunidad NO-EXPORT.
[edit] user@ToR12# set policy-options community NO-EXPORT members no-advertise user@ToR12# set policy-options community NO-EXPORT members no-export user@ToR12# set policy-options community NO-EXPORT members no-export-subconfed
Configure las políticas de equilibrio de carga y TEST.
[edit] user@ToR12# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR12# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR12# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure instancias de enrutamiento EVPN para cada red virtual. Defina la interfaz de origen de VTEP, el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN) y
vrf-target
(exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNID a ID de VLAN e identifique el método de reenvío de BUM.[edit] user@ToR12# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.82 user@ToR12# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR12# set routing-instances EVPN-VXLAN-1 interface ge-1/0/7.0 user@ToR12# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR12# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.12:1 user@ToR12# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR12-EVPN-VXLAN-1.log user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 1 (MX11)
Procedimiento paso a paso
En el ejemplo siguiente es necesario navegar por varios niveles en la jerarquía de configuración. Para obtener información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en modo de configuración en la Guía del usuario de CLI.
Configure un enrutador de la serie MX como puerta de enlace del centro de datos y enrutador de borde WAN y asígnele el nombre MX11:
Establezca el nombre de host del sistema.
[edit] user@MX11# set system host-name MX11
Configure las interfaces en el enrutador MX11 (DC GW/WAN Edge1) para habilitar la conectividad subyacente a los dispositivos MX12, ToR11, ToR12 y P, que es la parte EVPN-VXLAN de la red DC1.
[edit] user@MX11# set interfaces ge-1/1/1 unit 0 description "CONNECTED TO ToR11" user@MX11# set interfaces ge-1/1/1 unit 0 family inet address 192.168.3.2/24 user@MX11# set interfaces ge-5/1/0 unit 0 description "CONNECTED TO MX12" user@MX11# set interfaces ge-5/1/0 unit 0 family inet address 192.168.7.1/24 user@MX11# set interfaces ge-5/1/8 unit 0 description "CONNECTED TO ToR12" user@MX11# set interfaces ge-5/1/8 unit 0 family inet address 192.168.6.2/24 user@MX11# set interfaces ge-5/1/9 unit 0 description "CONNECTED TO P" user@MX11# set interfaces ge-5/1/9 unit 0 family inet address 203.0.1.1/24 user@MX11# set interfaces ge-5/1/9 unit 0 family mpls
Configure la conectividad subyacente de BGP externo (EBGP) entre los enrutadores de puerta de enlace (MX11 y MX12) y ToR (ToR11 y ToR12).
[edit] user@MX11# set protocols bgp group MX12 type external user@MX11# set protocols bgp group MX12 local-address 192.168.7.1 user@MX11# set protocols bgp group MX12 export TEST user@MX11# set protocols bgp group MX12 export LO user@MX11# set protocols bgp group MX12 peer-as 65500 user@MX11# set protocols bgp group MX12 local-as 65400 user@MX11# set protocols bgp group MX12 neighbor 192.168.7.2 family inet unicast user@MX11# set protocols bgp group ToR11 type external user@MX11# set protocols bgp group ToR11 local-address 192.168.3.2 user@MX11# set protocols bgp group ToR11 import TEST user@MX11# set protocols bgp group ToR11 export TEST user@MX11# set protocols bgp group ToR11 export LO user@MX11# set protocols bgp group ToR11 peer-as 65100 user@MX11# set protocols bgp group ToR11 local-as 65400 user@MX11# set protocols bgp group ToR11 neighbor 192.168.3.1 family inet unicast user@MX11# set protocols bgp group ToR12 type external user@MX11# set protocols bgp group ToR12 local-address 192.168.6.2 user@MX11# set protocols bgp group ToR12 export TEST user@MX11# set protocols bgp group ToR12 export LO user@MX11# set protocols bgp group ToR12 peer-as 65200 user@MX11# set protocols bgp group ToR12 local-as 65400 user@MX11# set protocols bgp group ToR12 neighbor 192.168.6.1 family inet unicast
Configure una conectividad superpuesta de BGP externa (MP-EBGP) multiprotocolo entre los enrutadores de puerta de enlace (MX11 y MX12) y ToR (ToR11 y ToR12) y establezca EVPN como protocolo de señalización.
[edit] user@MX11# set protocols bgp group MX12-EVPN type external user@MX11# set protocols bgp group MX12-EVPN multihop ttl 2 user@MX11# set protocols bgp group MX12-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group MX12-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group MX12-EVPN export TEST user@MX11# set protocols bgp group MX12-EVPN peer-as 65500 user@MX11# set protocols bgp group MX12-EVPN local-as 65400 user@MX11# set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling user@MX11# set protocols bgp group ToR11-EVPN type external user@MX11# set protocols bgp group ToR11-EVPN multihop ttl 2 user@MX11# set protocols bgp group ToR11-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group ToR11-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group ToR11-EVPN export TEST user@MX11# set protocols bgp group ToR11-EVPN peer-as 65100 user@MX11# set protocols bgp group ToR11-EVPN local-as 65400 user@MX11# set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling user@MX11# set protocols bgp group ToR12-EVPN type external user@MX11# set protocols bgp group ToR12-EVPN multihop ttl 2 user@MX11# set protocols bgp group ToR12-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group ToR12-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group ToR12-EVPN export TEST user@MX11# set protocols bgp group ToR12-EVPN peer-as 65200 user@MX11# set protocols bgp group ToR12-EVPN local-as 65400 user@MX11# set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling
Configure interfaces de enrutamiento y puente integrados (IRB) que anuncien las rutas MAC e IP (rutas MAC+IP tipo 2) para los hosts de la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
Procedimiento paso a paso
La siguiente es la configuración de puerta de enlace IRB para la VLAN-1 en MX11 (que es la parte de host de VLAN-1):
[edit] user@MX11# set interfaces irb unit 1 proxy-macip-advertisement user@MX11# set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa user@MX11# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 1 family inet address 10.11.1.12/24 virtual-gateway-address 10.11.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-2 en MX11 (que es la parte de host de VLAN-2):
[edit] user@MX11# set interfaces irb unit 2 proxy-macip-advertisement user@MX11# set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb user@MX11# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 2 family inet address 10.12.1.12/24 virtual-gateway-address 10.12.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-3 en MX11 (que es la parte host de VLAN-3):
[edit] user@MX11# set interfaces irb unit 3 proxy-macip-advertisement user@MX11# set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc user@MX11# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 3 family inet address 10.13.1.12/24 virtual-gateway-address 10.13.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-4 en MX11 (que es la parte de host de VLAN-4):
[edit] user@MX11# set interfaces irb unit 4 proxy-macip-advertisement user@MX11# set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd user@MX11# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 4 family inet address 10.14.1.12/24 virtual-gateway-address 10.14.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-5 en MX11 (que es la parte host de VLAN-5):
[edit] user@MX11# set interfaces irb unit 5 proxy-macip-advertisement user@MX11# set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee user@MX11# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 5 family inet address 10.15.1.12/24 virtual-gateway-address 10.15.1.10
Configure operaciones de seguimiento para realizar un seguimiento de todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@MX11# set protocols l2-learning traceoptions file MX11-L2ALD.log user@MX11# set protocols l2-learning traceoptions file size 10m user@MX11# set protocols l2-learning traceoptions level all user@MX11# set protocols l2-learning traceoptions flag all
Configure la directiva de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo.
[edit] user@MX11# set policy-options policy-statement LO from protocol direct user@MX11# set policy-options policy-statement LO from route-filter 192.0.2.21/32 exact user@MX11# set policy-options policy-statement LO then accept
Configure la comunidad NO-EXPORT.
[edit] user@MX11# set policy-options community NO-EXPORT members no-advertise user@MX11# set policy-options community NO-EXPORT members no-export user@MX11# set policy-options community NO-EXPORT members no-export-subconfed
Configure las políticas de equilibrio de carga y TEST.
[edit] user@MX11# set policy-options policy-statement TEST then community add NO-EXPORT user@MX11# set policy-options policy-statement evpn-pplb from protocol evpn user@MX11# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure un valor ESI en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN o puerta de enlace de la red DC1.
[edit] user@MX11# set interfaces lt-5/1/0 esi 00:22:22:22:22:22:22:22:22:22
Configure la multiconexión activo-activo en la interfaz de túnel lógico incluyendo la
all-active
instrucción.[edit] user@MX11# set interfaces lt-5/1/0 esi all-active
Configure un par de interfaces de túnel lógico (lt-) en el enrutador de puerta de enlace MX11 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN basada en MPLS.
[edit] user@MX11# set interfaces lt-5/1/0 unit 0 peer-unit 1 user@MX11# set interfaces lt-5/1/0 unit 0 family bridge interface-mode trunk user@MX11# set interfaces lt-5/1/0 unit 0 family bridge vlan-id-list 1-5 user@MX11# set interfaces lt-5/1/0 unit 1 peer-unit 0 user@MX11# set interfaces lt-5/1/0 unit 1 family bridge interface-mode trunk user@MX11# set interfaces lt-5/1/0 unit 1 family bridge vlan-id-list 1-5
Configure la dirección de interfaz de circuito cerrado y las opciones de enrutamiento.
[edit] user@MX11# set interfaces lo0 unit 84 family inet address 192.0.2.21/32 user@MX11# set interfaces lo0 unit 84 family mpls user@MX11# set routing-options router-id 192.0.2.21 user@MX11# set routing-options autonomous-system 65300
Aplique la directiva de equilibrio de carga a la tabla de reenvío.
[edit] user@MX11# set routing-options forwarding-table export evpn-pplb
Habilite los protocolos RSVP, MPLS, BGP y OSPF en las interfaces principales. Cree LSP MPLS y especifique la dirección de los otros enrutadores de puerta de enlace y de borde WAN (MX12, P, MX21, MX22).
[edit] user@MX11# set protocols rsvp interface all user@MX11# set protocols rsvp interface fxp0.0 disable user@MX11# set protocols mpls label-switched-path MX11-TO-MX12 to 192.0.2.22 user@MX11# set protocols mpls label-switched-path MX11-TO-P to 203.0.113.1 user@MX11# set protocols mpls label-switched-path MX11-TO-MX21 to 198.51.100.21 user@MX11# set protocols mpls label-switched-path MX11-TO-MX22 to 198.51.100.22 user@MX11# set protocols mpls interface all user@MX11# set protocols mpls interface fxp0.0 disable user@MX11# set protocols bgp local-address 192.0.2.21 user@MX11# set protocols bgp local-as 65300 user@MX11# set protocols bgp group INT type internal user@MX11# set protocols bgp group INT local-address 192.0.2.21 user@MX11# set protocols bgp group INT family evpn signaling user@MX11# set protocols bgp group INT export TEST user@MX11# set protocols bgp group INT neighbor 203.0.113.1 user@MX11# set protocols ospf traffic-engineering user@MX11# set protocols ospf area 0.0.0.0 interface ge-5/1/9.0 user@MX11# set protocols ospf area 0.0.0.0 interface lo0.84 passive
Configure instancias de enrutamiento MPLS basadas en EVPN en el enrutador MX11 para cada red virtual. Defina el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN-MPLS) y
vrf-target
(exporte y etiquete todas las rutas para ese VRF local utilizando el destino de ruta definido). Configure un dominio de puente para cada enrutador virtual que asigne ID de VLAN.[edit] user@MX11# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX11# set routing-instances EVPN-MPLS-1 interface lt-5/1/0.0 user@MX11# set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.21:100 user@MX11# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX11-EVPN-MPLS-1.log user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
Configure instancias de enrutamiento EVPN-VXLAN en el enrutador MX11 para cada red virtual. Defina la interfaz de origen de VTEP, el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN) y
vrf-target
(exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNID a ID de VLAN e identifique el método de reenvío de BUM.[edit] user@MX11# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.84 user@MX11# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX11# set routing-instances EVPN-VXLAN-1 interface lt-5/1/0.1 user@MX11# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.21:1 user@MX11# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX11-EVPN-VXLAN-1.log user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX11# set routing-instances VRF instance-type vrf user@MX11# set routing-instances VRF interface irb.1 user@MX11# set routing-instances VRF interface irb.2 user@MX11# set routing-instances VRF interface irb.3 user@MX11# set routing-instances VRF interface irb.4 user@MX11# set routing-instances VRF interface irb.5 user@MX11# set routing-instances VRF route-distinguisher 1:1 user@MX11# set routing-instances VRF vrf-target target:10:10
Configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 2 (MX12)
Procedimiento paso a paso
En el ejemplo siguiente es necesario navegar por varios niveles en la jerarquía de configuración. Para obtener información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en modo de configuración en la Guía del usuario de CLI.
Configure un enrutador de la serie MX como puerta de enlace del centro de datos y enrutador de borde WAN y asígnele el nombre MX12:
Establezca el nombre de host del sistema.
[edit] user@MX12# set system host-name MX12
Configure el dispositivo P como el sistema lógico de la puerta de enlace del centro de datos MX12 y del enrutador de borde WAN.
Procedimiento paso a paso
Configure las interfaces del dispositivo P.
[edit] user@MX12# set logical-systems P interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX21" user@MX12# set logical-systems P interfaces ge-1/0/0 unit 0 family inet address 203.0.113.32/24 user@MX12# set logical-systems P interfaces ge-1/0/0 unit 0 family mpls user@MX12# set logical-systems P interfaces ge-1/0/2 unit 0 description "CONNECTED TO MX22" user@MX12# set logical-systems P interfaces ge-1/0/2 unit 0 family inet address 203.0.113.52/24 user@MX12# set logical-systems P interfaces ge-1/0/2 unit 0 family mpls user@MX12# set logical-systems P interfaces ge-1/1/1 unit 0 description "CONNECTED TO MX11" user@MX12# set logical-systems P interfaces ge-1/1/1 unit 0 family inet address 203.0.113.42/24 user@MX12# set logical-systems P interfaces ge-1/1/1 unit 0 family mpls user@MX12# set logical-systems P interfaces ge-1/1/6 unit 0 description "CONNECTED TO MX12" user@MX12# set logical-systems P interfaces ge-1/1/6 unit 0 family inet address 203.0.113.12/24 user@MX12# set logical-systems P interfaces ge-1/1/6 unit 0 family mpls
Habilite los protocolos RSVP, MPLS, BGP y OSPF en las interfaces principales del dispositivo P. Cree LSP MPLS y especifique la dirección de los otros enrutadores de puerta de enlace y de borde WAN (MX11, MX12, MX21, MX22).
[edit] user@MX12# set logical-systems P protocols rsvp interface all user@MX12# set logical-systems P protocols mpls label-switched-path P-TO-MX11 from 203.0.113.1 user@MX12# set logical-systems P protocols mpls label-switched-path P-TO-MX11 to 192.0.2.21 user@MX12# set logical-systems P protocols mpls label-switched-path P-TO-MX12 to 192.0.2.22 user@MX12# set logical-systems P protocols mpls label-switched-path P-TO-MX21 to 198.51.100.21 user@MX12# set logical-systems P protocols mpls label-switched-path P-TO-MX22 to 198.51.100.22 user@MX12# set logical-systems P protocols mpls interface all user@MX12# set logical-systems P protocols bgp local-address 203.0.113.1 user@MX12# set logical-systems P protocols bgp local-as 65300 user@MX12# set logical-systems P protocols bgp group INT type internal user@MX12# set logical-systems P protocols bgp group INT import BLOCK-VXLAN-ROUTES-FROM-CORE user@MX12# set logical-systems P protocols bgp group INT family evpn signaling user@MX12# set logical-systems P protocols bgp group INT cluster 203.0.113.1 user@MX12# set logical-systems P protocols bgp group INT neighbor 192.0.2.21 user@MX12# set logical-systems P protocols bgp group INT neighbor 192.0.2.22 user@MX12# set logical-systems P protocols bgp group INT neighbor 198.51.100.21 user@MX12# set logical-systems P protocols bgp group INT neighbor 198.51.100.22 user@MX12# set logical-systems P protocols ospf traffic-engineering user@MX12# set logical-systems P protocols ospf area 0.0.0.0 interface all user@MX12# set logical-systems P protocols ospf area 0.0.0.0 interface lo0.86
Configure la dirección de interfaz de circuito cerrado y las opciones de enrutamiento.
[edit] user@MX12# set logical-systems P interfaces lo0 unit 86 family inet address 203.0.113.1/32 user@MX12# set logical-systems P interfaces lo0 unit 86 family mpls user@MX12# set logical-systems P routing-options router-id 203.0.113.1 user@MX12# set logical-systems P routing-options autonomous-system 65300
Configure la directiva de enrutamiento BLOCK-VXLAN-ROUTES-FROM-CORE.
[edit] user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from protocol bgp user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from community RT-CORE user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 then accept user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from protocol bgp user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from community RT-DC1 user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 then reject user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from protocol bgp user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from community RT-DC2 user@MX12# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 then reject
Configure las comunidades RT-CORE, RT-DC1 y RT-DC2.
[edit] user@MX12# set logical-systems P policy-options community RT-CORE members target:1:2 user@MX12# set logical-systems P policy-options community RT-DC1 members target:1:1 user@MX12# set logical-systems P policy-options community RT-DC2 members target:1:3
Configure las opciones de seguimiento de las interfaces para habilitar los registros de seguimiento.
[edit] user@MX12# set interfaces traceoptions file MX12-DCD.log user@MX12# set interfaces traceoptions file size 10m user@MX12# set interfaces traceoptions flag all
Configure las interfaces en el enrutador MX12 (DC GW/WAN Edge 2) para habilitar la conectividad subyacente con los dispositivos MX11, ToR12, ToR11 y P, que es la parte EVPN-VXLAN de la red DC1.
[edit] user@MX12# set interfaces ge-1/0/4 unit 0 description "CONNECTED TO ToR12" user@MX12# set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.2/24 user@MX12# set interfaces ge-1/0/5 unit 0 description "CONNECTED TO TOR11" user@MX12# set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.2/24 user@MX12# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO P" user@MX12# set interfaces ge-1/0/6 unit 0 family inet address 203.0.113.11/24 user@MX12# set interfaces ge-1/0/6 unit 0 family mpls user@MX12# set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX11" user@MX12# set interfaces ge-1/1/0 unit 0 family inet address 192.168.7.2/24
Configure la conectividad subyacente de BGP externo (EBGP) entre los enrutadores de puerta de enlace (MX11 y MX12) y ToR (ToR11 y ToR12).
[edit] user@MX12# set protocols bgp group MX11 type external user@MX12# set protocols bgp group MX11 local-address 192.168.7.2 user@MX12# set protocols bgp group MX11 export TEST user@MX12# set protocols bgp group MX11 export LO user@MX12# set protocols bgp group MX11 peer-as 65400 user@MX12# set protocols bgp group MX11 local-as 65500 user@MX12# set protocols bgp group MX11 neighbor 192.168.7.1 family inet unicast user@MX12# set protocols bgp group ToR11 type external user@MX12# set protocols bgp group ToR11 local-address 192.168.4.2 user@MX12# set protocols bgp group ToR11 export TEST user@MX12# set protocols bgp group ToR11 export LO user@MX12# set protocols bgp group ToR11 peer-as 65100 user@MX12# set protocols bgp group ToR11 local-as 65500 user@MX12# set protocols bgp group ToR11 neighbor 192.168.4.1 family inet unicast user@MX12# set protocols bgp group ToR12 type external user@MX12# set protocols bgp group ToR12 local-address 192.168.5.2 user@MX12# set protocols bgp group ToR12 export TEST user@MX12# set protocols bgp group ToR12 export LO user@MX12# set protocols bgp group ToR12 peer-as 65200 user@MX12# set protocols bgp group ToR12 local-as 65500 user@MX12# set protocols bgp group ToR12 neighbor 192.168.5.1 family inet unicast
Configure una conectividad superpuesta de BGP externa (MP-EBGP) multiprotocolo entre los enrutadores de puerta de enlace (MX11 y MX12) y ToR (ToR11 y ToR12) y establezca EVPN como protocolo de señalización.
[edit] user@MX12# set protocols bgp group MX11-EVPN type external user@MX12# set protocols bgp group MX11-EVPN multihop ttl 2 user@MX12# set protocols bgp group MX11-EVPN multihop no-nexthop-change user@MX12# set protocols bgp group MX11-EVPN local-address 192.0.2.22 user@MX12# set protocols bgp group MX11-EVPN export TEST user@MX12# set protocols bgp group MX11-EVPN peer-as 65400 user@MX12# set protocols bgp group MX11-EVPN local-as 65500 user@MX12# set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling user@MX12# set protocols bgp group ToR11-EVPN type external user@MX12# set protocols bgp group ToR11-EVPN multihop ttl 2 user@MX12# set protocols bgp group ToR11-EVPN multihop no-nexthop-change user@MX12# set protocols bgp group ToR11-EVPN local-address 192.0.2.22 user@MX12# set protocols bgp group ToR11-EVPN export TEST user@MX12# set protocols bgp group ToR11-EVPN peer-as 65100 user@MX12# set protocols bgp group ToR11-EVPN local-as 65500 user@MX12# set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling user@MX12# set protocols bgp group ToR12-EVPN type external user@MX12# set protocols bgp group ToR12-EVPN multihop ttl 2 user@MX12# set protocols bgp group ToR12-EVPN multihop no-nexthop-change user@MX12# set protocols bgp group ToR12-EVPN local-address 192.0.2.22 user@MX12# set protocols bgp group ToR12-EVPN export TEST user@MX12# set protocols bgp group ToR12-EVPN peer-as 65200 user@MX12# set protocols bgp group ToR12-EVPN local-as 65500 user@MX12# set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling
Configure interfaces de enrutamiento y puente integrados (IRB) que anuncien las rutas MAC e IP (rutas MAC+IP tipo 2) para los hosts de la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
Procedimiento paso a paso
La siguiente es la configuración de puerta de enlace IRB para la VLAN-1 en MX12 (que es la parte host de VLAN-1):
[edit] user@MX12# set interfaces irb unit 1 proxy-macip-advertisement user@MX12# set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa user@MX12# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 1 family inet address 10.11.1.13/24 virtual-gateway-address 10.11.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-2 en MX12 (que es la parte de host de VLAN-2):
[edit] user@MX12# set interfaces irb unit 2 proxy-macip-advertisement user@MX12# set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb user@MX12# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 2 family inet address 10.12.1.13/24 virtual-gateway-address 10.12.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-3 en MX12 (que es la parte host de VLAN-3):
[edit] user@MX12# set interfaces irb unit 3 proxy-macip-advertisement user@MX12# set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc user@MX12# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 3 family inet address 10.13.1.13/24 virtual-gateway-address 10.13.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-4 en MX12 (que es la parte de host de VLAN-4):
[edit] user@MX12# set interfaces irb unit 4 proxy-macip-advertisement user@MX12# set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd user@MX12# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 4 family inet address 10.14.1.13/24 virtual-gateway-address 10.14.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-5 en MX12 (que es la parte host de VLAN-5):
[edit] user@MX12# set interfaces irb unit 5 proxy-macip-advertisement user@MX12# set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee user@MX12# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 5 family inet address 10.15.1.13/24 virtual-gateway-address 10.15.1.10
Configure operaciones de seguimiento para realizar un seguimiento de todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@MX12# set protocols l2-learning traceoptions file MX12-L2ALD.log user@MX12# set protocols l2-learning traceoptions file size 10m user@MX12# set protocols l2-learning traceoptions level all user@MX12# set protocols l2-learning traceoptions flag all
Configure la directiva de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo.
[edit] user@MX12# set policy-options policy-statement LO from protocol direct user@MX12# set policy-options policy-statement LO from route-filter 192.0.2.22/32 exact user@MX12# set policy-options policy-statement LO then accept
Configure la comunidad NO-EXPORT.
[edit] user@MX12# set policy-options community NO-EXPORT members no-advertise user@MX12# set policy-options community NO-EXPORT members no-export user@MX12# set policy-options community NO-EXPORT members no-export-subconfed
Configure las políticas de equilibrio de carga y TEST.
[edit] user@MX12# set policy-options policy-statement TEST then community add NO-EXPORT user@MX12# set policy-options policy-statement evpn-pplb from protocol evpn user@MX12# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure un valor ESI en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN o puerta de enlace de la red DC1.
[edit] user@MX12# set interfaces lt-1/0/0 esi 00:22:22:22:22:22:22:22:22:22
Configure la multiconexión activo-activo en la interfaz de túnel lógico incluyendo la
all-active
instrucción.[edit] user@MX12# set interfaces lt-1/0/0 esi all-active
Configure un par de interfaces de túnel lógico (lt-) en el enrutador de puerta de enlace MX12 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN basada en MPLS.
[edit] user@MX12# set interfaces lt-1/0/0 unit 0 peer-unit 1 user@MX12# set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk user@MX12# set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 user@MX12# set interfaces lt-1/0/0 unit 1 peer-unit 0 user@MX12# set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk user@MX12# set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5
Configure la dirección de interfaz de circuito cerrado y las opciones de enrutamiento.
[edit] user@MX12# set interfaces lo0 unit 85 family inet address 192.0.2.22/32 user@MX12# set interfaces lo0 unit 85 family mpls user@MX12# set routing-options router-id 192.0.2.22 user@MX12# set routing-options autonomous-system 65300
Aplique la directiva de equilibrio de carga a la tabla de reenvío.
[edit] user@MX12# set routing-options forwarding-table export evpn-pplb
Habilite los protocolos RSVP, MPLS, BGP y OSPF en las interfaces principales. Cree LSP MPLS y especifique la dirección de los otros enrutadores de puerta de enlace y de borde WAN (MX11, MX21, P, MX22).
[edit] user@MX12# set protocols rsvp interface all user@MX12# set protocols rsvp interface fxp0.0 disable user@MX12# set protocols mpls label-switched-path MX12-TO-MX11 to 192.0.2.21 user@MX12# set protocols mpls label-switched-path MX12-TO-P to 203.0.113.1 user@MX12# set protocols mpls label-switched-path MX12-TO-MX21 to 198.51.100.21 user@MX12# set protocols mpls label-switched-path MX12-TO-MX22 to 198.51.100.22 user@MX12# set protocols mpls interface all user@MX12# set protocols mpls interface fxp0.0 disable user@MX12# set protocols bgp local-address 192.0.2.22 user@MX12# set protocols bgp local-as 65300 user@MX12# set protocols bgp group INT type internal user@MX12# set protocols bgp group INT family evpn signaling user@MX12# set protocols bgp group INT export TEST user@MX12# set protocols bgp group INT neighbor 203.0.113.1 user@MX12# set protocols ospf traffic-engineering user@MX12# set protocols ospf area 0.0.0.0 interface ge-1/0/6.0 user@MX12# set protocols ospf area 0.0.0.0 interface lo0.85 passive
Configure instancias de enrutamiento MPLS basadas en EVPN en el enrutador MX12 para cada red virtual. Defina el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN-MPLS) y
vrf-target
(exporte y etiquete todas las rutas para ese VRF local utilizando el destino de ruta definido). Configure un dominio de puente para cada enrutador virtual que asigne ID de VLAN.[edit] user@MX12# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX12# set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 user@MX12# set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.22:100 user@MX12# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX12-EVPN-MPLS-1.log user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
Configure instancias de enrutamiento EVPN-VXLAN en el enrutador MX12 para cada red virtual. Defina la interfaz de origen de VTEP, el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN) y
vrf-target
(exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNID a ID de VLAN e identifique el método de reenvío de BUM.[edit] user@MX12# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.85 user@MX12# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX12# set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 user@MX12# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.22:1 user@MX12# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX12-EVPN-VXLAN-1.log user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX12# set routing-instances VRF instance-type vrf user@MX12# set routing-instances VRF interface irb.1 user@MX12# set routing-instances VRF interface irb.2 user@MX12# set routing-instances VRF interface irb.3 user@MX12# set routing-instances VRF interface irb.4 user@MX12# set routing-instances VRF interface irb.5 user@MX12# set routing-instances VRF route-distinguisher 1:1 user@MX12# set routing-instances VRF vrf-target target:10:10
Configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 3 (MX21)
Procedimiento paso a paso
En el ejemplo siguiente es necesario navegar por varios niveles en la jerarquía de configuración. Para obtener información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en modo de configuración en la Guía del usuario de CLI.
Configure un enrutador de la serie MX como puerta de enlace del centro de datos y enrutador de borde WAN y asígnele el nombre MX21:
Establezca el nombre de host del sistema.
[edit] user@MX21# set system host-name MX21
Configure las interfaces en el enrutador MX21 (DC GW/WAN Edge 3) para habilitar la conectividad subyacente a los dispositivos MX22, ToR22, ToR21 y P, que es la parte EVPN-VXLAN de la red DC2.
[edit] user@MX21# set interfaces ge-3/0/0 unit 0 description "CONNECTED TO MX22" user@MX21# set interfaces ge-3/0/0 unit 0 family inet address 192.168.13.1/24 user@MX21# set interfaces ge-3/1/0 unit 0 description "CONNECTED TO ToR22" user@MX21# set interfaces ge-3/1/0 unit 0 family inet address 192.168.8.1/24 user@MX21# set interfaces ge-5/0/0 unit 0 description "CONNECTED TO P" user@MX21# set interfaces ge-5/0/0 unit 0 family inet address 203.0.113.31/24 user@MX21# set interfaces ge-5/0/0 unit 0 family mpls user@MX21# set interfaces ge-5/0/1 unit 0 description "CONNECTED TO ToR21" user@MX21# set interfaces ge-5/0/1 unit 0 family inet address 192.168.9.1/24
Configure la conectividad subyacente BGP externa (EBGP) entre los enrutadores de puerta de enlace (MX21 y MX22) y ToR (ToR21 y ToR22).
[edit] user@MX21# set protocols bgp group MX22 type external user@MX21# set protocols bgp group MX22 local-address 192.168.13.1 user@MX21# set protocols bgp group MX22 export TEST user@MX21# set protocols bgp group MX22 export LO user@MX21# set protocols bgp group MX22 peer-as 64900 user@MX21# set protocols bgp group MX22 local-as 64800 user@MX21# set protocols bgp group MX22 neighbor 192.168.13.2 family inet unicast user@MX21# set protocols bgp group ToR21 type external user@MX21# set protocols bgp group ToR21 local-address 192.168.9.1 user@MX21# set protocols bgp group ToR21 export TEST user@MX21# set protocols bgp group ToR21 export LO user@MX21# set protocols bgp group ToR21 peer-as 64600 user@MX21# set protocols bgp group ToR21 local-as 64800 user@MX21# set protocols bgp group ToR21 neighbor 192.168.9.2 family inet unicast user@MX21# set protocols bgp group ToR22 type external user@MX21# set protocols bgp group ToR22 local-address 192.168.8.1 user@MX21# set protocols bgp group ToR22 export TEST user@MX21# set protocols bgp group ToR22 export LO user@MX21# set protocols bgp group ToR22 peer-as 64700 user@MX21# set protocols bgp group ToR22 local-as 64800 user@MX21# set protocols bgp group ToR22 neighbor 192.168.8.2 family inet unicast
Configure una conectividad superpuesta de BGP externa (MP-EBGP) multiprotocolo entre los enrutadores de puerta de enlace (MX21 y MX22) y ToR (ToR21 y ToR22) y establezca EVPN como protocolo de señalización.
[edit] user@MX21# set protocols bgp group MX22-EVPN type external user@MX21# set protocols bgp group MX22-EVPN multihop ttl 2 user@MX21# set protocols bgp group MX22-EVPN multihop no-nexthop-change user@MX21# set protocols bgp group MX22-EVPN local-address 198.51.100.21 user@MX21# set protocols bgp group MX22-EVPN peer-as 64900 user@MX21# set protocols bgp group MX22-EVPN local-as 64800 user@MX21# set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling user@MX21# set protocols bgp group ToR21-EVPN type external user@MX21# set protocols bgp group ToR21-EVPN multihop ttl 2 user@MX21# set protocols bgp group ToR21-EVPN multihop no-nexthop-change user@MX21# set protocols bgp group ToR21-EVPN local-address 198.51.100.21 user@MX21# set protocols bgp group ToR21-EVPN peer-as 64600 user@MX21# set protocols bgp group ToR21-EVPN local-as 64800 user@MX21# set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling user@MX21# set protocols bgp group ToR22-EVPN type external user@MX21# set protocols bgp group ToR22-EVPN multihop ttl 2 user@MX21# set protocols bgp group ToR22-EVPN multihop no-nexthop-change user@MX21# set protocols bgp group ToR22-EVPN local-address 198.51.100.21 user@MX21# set protocols bgp group ToR22-EVPN peer-as 64700 user@MX21# set protocols bgp group ToR22-EVPN local-as 64800 user@MX21# set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling
Configure interfaces de enrutamiento y puente integrados (IRB) que anuncien las rutas MAC e IP (rutas MAC+IP tipo 2) para los hosts de la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
Procedimiento paso a paso
La siguiente es la configuración de puerta de enlace IRB para la VLAN-1 en MX21 (que es la parte de host de VLAN-1):
[edit] user@MX21# set interfaces irb unit 1 proxy-macip-advertisement user@MX21# set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa user@MX21# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 1 family inet address 10.11.1.14/24 virtual-gateway-address 10.11.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-2 en MX21 (que es la parte de host de VLAN-2):
[edit] user@MX21# set interfaces irb unit 2 proxy-macip-advertisement user@MX21# set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb user@MX21# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 2 family inet address 10.12.1.14/24 virtual-gateway-address 10.12.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-3 en MX21 (que es la parte host de VLAN-3):
[edit] user@MX21# set interfaces irb unit 3 proxy-macip-advertisement user@MX21# set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc user@MX21# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 3 family inet address 10.13.1.14/24 virtual-gateway-address 10.13.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-4 en MX21 (que es la parte de host de VLAN-4):
[edit] user@MX21# set interfaces irb unit 4 proxy-macip-advertisement user@MX21# set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd user@MX21# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 4 family inet address 10.14.1.14/24 virtual-gateway-address 10.14.1.11
La siguiente es la configuración de puerta de enlace IRB para VLAN-5 en MX21 (que es la parte de host de VLAN-5):
[edit] user@MX21# set interfaces irb unit 5 proxy-macip-advertisement user@MX21# set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee user@MX21# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 5 family inet address 10.15.1.14/24 virtual-gateway-address 10.15.1.11
Configure operaciones de seguimiento para realizar un seguimiento de todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@MX21# set protocols l2-learning traceoptions file MX21-L2ALD.log user@MX21# set protocols l2-learning traceoptions file size 10m user@MX21# set protocols l2-learning traceoptions level all user@MX21# set protocols l2-learning traceoptions flag all
Configure la directiva de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo.
[edit] user@MX21# set policy-options policy-statement LO from protocol direct user@MX21# set policy-options policy-statement LO from route-filter 198.51.100.21/32 exact user@MX21# set policy-options policy-statement LO then accept
Configure la comunidad NO-EXPORT.
[edit] user@MX21# set policy-options community NO-EXPORT members no-advertise user@MX21# set policy-options community NO-EXPORT members no-export user@MX21# set policy-options community NO-EXPORT members no-export-subconfed
Configure las políticas de equilibrio de carga y TEST.
[edit] user@MX21# set policy-options policy-statement TEST then community add NO-EXPORT user@MX21# set policy-options policy-statement evpn-pplb from protocol evpn user@MX21# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure un valor ESI en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN o puerta de enlace de la red DC2.
[edit] user@MX21# set interfaces lt-5/0/0 esi 00:33:33:33:33:33:33:33:33:33
Configure la multiconexión activo-activo en la interfaz de túnel lógico incluyendo la
all-active
instrucción.[edit] user@MX21# set interfaces lt-5/0/0 esi all-active
Configure un par de interfaces de túnel lógico (lt-) en el enrutador de puerta de enlace MX21 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN basada en MPLS.
[edit] user@MX21# set interfaces lt-5/0/0 unit 0 peer-unit 1 user@MX21# set interfaces lt-5/0/0 unit 0 family bridge interface-mode trunk user@MX21# set interfaces lt-5/0/0 unit 0 family bridge vlan-id-list 1-5 user@MX21# set interfaces lt-5/0/0 unit 1 peer-unit 0 user@MX21# set interfaces lt-5/0/0 unit 1 family bridge interface-mode trunk user@MX21# set interfaces lt-5/0/0 unit 1 family bridge vlan-id-list 1-5
Configure la dirección de interfaz de circuito cerrado y las opciones de enrutamiento.
[edit] user@MX21# set interfaces lo0 unit 87 family inet address 198.51.100.21/32 user@MX21# set interfaces lo0 unit 87 family mpls user@MX21# set routing-options router-id 198.51.100.21 user@MX21# set routing-options autonomous-system 65300
Aplique la directiva de equilibrio de carga a la tabla de reenvío.
[edit] user@MX21# set routing-options forwarding-table export evpn-pplb
Habilite los protocolos RSVP, MPLS, BGP y OSPF en las interfaces principales. Cree LSP MPLS y especifique la dirección de los otros enrutadores de puerta de enlace y de borde WAN (MX11, MX12, P, MX22).
[edit] user@MX21# set protocols rsvp interface all user@MX21# set protocols rsvp interface fxp0.0 disable user@MX21# set protocols mpls label-switched-path MX21-TO-MX11 to 192.0.2.21 user@MX21# set protocols mpls label-switched-path MX21-TO-MX12 to 192.0.2.22 user@MX21# set protocols mpls label-switched-path MX21-TO-P to 203.0.113.1 user@MX21# set protocols mpls label-switched-path MX21-TO-MX22 to 198.51.100.22 user@MX21# set protocols mpls interface all user@MX21# set protocols mpls interface fxp0.0 disable user@MX21# set protocols bgp local-address 198.51.100.21 user@MX21# set protocols bgp export TEST user@MX21# set protocols bgp local-as 65300 user@MX21# set protocols bgp group INT type internal user@MX21# set protocols bgp group INT local-address 198.51.100.21 user@MX21# set protocols bgp group INT family evpn signaling user@MX21# set protocols bgp group INT export TEST user@MX21# set protocols bgp group INT neighbor 203.0.113.1 user@MX21# set protocols ospf traffic-engineering user@MX21# set protocols ospf area 0.0.0.0 interface ge-5/0/0.0 user@MX21# set protocols ospf area 0.0.0.0 interface lo0.87 passive
Configure instancias de enrutamiento MPLS basadas en EVPN en el enrutador MX21 para cada red virtual. Defina el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN-MPLS) y
vrf-target
(exporte y etiquete todas las rutas para ese VRF local utilizando el destino de ruta definido). Configure un dominio de puente para cada enrutador virtual que asigne ID de VLAN.[edit] user@MX21# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX21# set routing-instances EVPN-MPLS-1 interface lt-5/0/0.0 user@MX21# set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.21:100 user@MX21# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX21-EVPN-MPLS-1.log user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
Configure instancias de enrutamiento EVPN-VXLAN en el enrutador MX21 para cada red virtual. Defina la interfaz de origen de VTEP, el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN) y
vrf-target
(exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNID a ID de VLAN e identifique el método de reenvío de BUM.[edit] user@MX21# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.87 user@MX21# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX21# set routing-instances EVPN-VXLAN-1 interface lt-5/0/0.1 user@MX21# set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.21:1 user@MX21# set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX21-EVPN-VXLAN-1.log user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX21# set routing-instances VRF instance-type vrf user@MX21# set routing-instances VRF interface irb.1 user@MX21# set routing-instances VRF interface irb.2 user@MX21# set routing-instances VRF interface irb.3 user@MX21# set routing-instances VRF interface irb.4 user@MX21# set routing-instances VRF interface irb.5 user@MX21# set routing-instances VRF route-distinguisher 1:1 user@MX21# set routing-instances VRF vrf-target target:10:10
Configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 4 (MX22)
Procedimiento paso a paso
En el ejemplo siguiente es necesario navegar por varios niveles en la jerarquía de configuración. Para obtener información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en modo de configuración en la Guía del usuario de CLI.
Configure un enrutador de la serie MX como puerta de enlace del centro de datos y enrutador de borde WAN y asígnele el nombre MX22:
Establezca el nombre de host del sistema.
[edit] user@MX22# set system host-name MX22
Configure las interfaces en el enrutador MX22 (DC GW/WAN Edge 4) para habilitar la conectividad subyacente a los dispositivos MX22, ToR21, MX21 y P, que es la parte EVPN-VXLAN de la red DC2.
[edit] user@MX22# set interfaces xe-0/0/0 unit 0 description "CONNECTED TO ToR22" user@MX22# set interfaces xe-0/0/0 unit 0 family inet address 192.168.11.1/24 user@MX22# set interfaces xe-0/0/1 unit 0 description "CONNECTED TO ToR21" user@MX22# set interfaces xe-0/0/1 unit 0 family inet address 192.168.10.1/24 user@MX22# set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX21" user@MX22# set interfaces ge-1/0/0 unit 0 family inet address 192.168.13.2/24 user@MX22# set interfaces ge-1/0/2 unit 0 description "CONNECTED TO P" user@MX22# set interfaces ge-1/0/2 unit 0 family inet address 203.0.113.51/24 user@MX22# set interfaces ge-1/0/2 unit 0 family mpls
Configure la conectividad subyacente BGP externa (EBGP) entre los enrutadores de puerta de enlace (MX21 y MX22) y ToR (ToR21 y ToR22).
[edit] user@MX22# set protocols bgp group MX21 type external user@MX22# set protocols bgp group MX21 local-address 192.168.13.2 user@MX22# set protocols bgp group MX21 export TEST user@MX22# set protocols bgp group MX21 export LO user@MX22# set protocols bgp group MX21 peer-as 64800 user@MX22# set protocols bgp group MX21 local-as 64900 user@MX22# set protocols bgp group MX21 neighbor 192.168.13.1 family inet unicast user@MX22# set protocols bgp group ToR21 type external user@MX22# set protocols bgp group ToR21 local-address 192.168.10.1 user@MX22# set protocols bgp group ToR21 export TEST user@MX22# set protocols bgp group ToR21 export LO user@MX22# set protocols bgp group ToR21 peer-as 64600 user@MX22# set protocols bgp group ToR21 local-as 64900 user@MX22# set protocols bgp group ToR21 neighbor 192.168.10.2 family inet unicast user@MX22# set protocols bgp group ToR22 type external user@MX22# set protocols bgp group ToR22 local-address 192.168.11.1 user@MX22# set protocols bgp group ToR22 export TEST user@MX22# set protocols bgp group ToR22 export LO user@MX22# set protocols bgp group ToR22 peer-as 64700 user@MX22# set protocols bgp group ToR22 local-as 64900 user@MX22# set protocols bgp group ToR22 neighbor 192.168.11.2 family inet unicast
Configure una conectividad superpuesta de BGP externa (MP-EBGP) multiprotocolo entre los enrutadores de puerta de enlace (MX21 y MX22) y ToR (ToR21 y ToR22) y establezca EVPN como protocolo de señalización.
[edit] user@MX22# set protocols bgp group MX21-EVPN type external user@MX22# set protocols bgp group MX21-EVPN multihop ttl 2 user@MX22# set protocols bgp group MX21-EVPN multihop no-nexthop-change user@MX22# set protocols bgp group MX21-EVPN local-address 198.51.100.22 user@MX22# set protocols bgp group MX21-EVPN peer-as 64800 user@MX22# set protocols bgp group MX21-EVPN local-as 64900 user@MX22# set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling user@MX22# set protocols bgp group ToR21-EVPN type external user@MX22# set protocols bgp group ToR21-EVPN multihop ttl 2 user@MX22# set protocols bgp group ToR21-EVPN multihop no-nexthop-change user@MX22# set protocols bgp group ToR21-EVPN local-address 198.51.100.22 user@MX22# set protocols bgp group ToR21-EVPN peer-as 64600 user@MX22# set protocols bgp group ToR21-EVPN local-as 64900 user@MX22# set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling user@MX22# set protocols bgp group ToR22-EVPN type external user@MX22# set protocols bgp group ToR22-EVPN multihop ttl 2 user@MX22# set protocols bgp group ToR22-EVPN multihop no-nexthop-change user@MX22# set protocols bgp group ToR22-EVPN local-address 198.51.100.22 user@MX22# set protocols bgp group ToR22-EVPN peer-as 64700 user@MX22# set protocols bgp group ToR22-EVPN local-as 64900 user@MX22# set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling
Configure interfaces de enrutamiento y puente integrados (IRB) que anuncien las rutas MAC e IP (rutas MAC+IP tipo 2) para los hosts de la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
Procedimiento paso a paso
La siguiente es la configuración de puerta de enlace IRB para la VLAN-1 en MX22 (que es la parte de host de VLAN-1):
[edit] user@MX22# set interfaces irb unit 1 proxy-macip-advertisement user@MX22# set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa user@MX22# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 1 family inet address 10.11.1.15/24 virtual-gateway-address 10.11.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-2 en MX22 (que es la parte host de VLAN-2):
[edit] user@MX22# set interfaces irb unit 2 proxy-macip-advertisement user@MX22# set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb user@MX22# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 2 family inet address 10.12.1.15/24 virtual-gateway-address 10.12.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-3 en MX22 (que es la parte de host de VLAN-3):
[edit] user@MX22# set interfaces irb unit 3 proxy-macip-advertisement user@MX22# set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc user@MX22# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 3 family inet address 10.13.1.15/24 virtual-gateway-address 10.13.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-4 en MX22 (que es la parte de host de VLAN-4):
[edit] user@MX22# set interfaces irb unit 4 proxy-macip-advertisement user@MX22# set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd user@MX22# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 4 family inet address 10.14.1.15/24 virtual-gateway-address 10.14.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-5 en MX22 (que es la parte host de VLAN-5):
[edit] user@MX22# set interfaces irb unit 5 proxy-macip-advertisement user@MX22# set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee user@MX22# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 5 family inet address 10.15.1.15/24 virtual-gateway-address 10.15.1.11
Configure operaciones de seguimiento para realizar un seguimiento de todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@MX22# set protocols l2-learning traceoptions file MX22-L2ALD.log user@MX22# set protocols l2-learning traceoptions file size 10m user@MX22# set protocols l2-learning traceoptions level all user@MX22# set protocols l2-learning traceoptions flag all
Configure la directiva de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo.
[edit] user@MX22# set policy-options policy-statement LO from protocol direct user@MX22# set policy-options policy-statement LO from route-filter 198.51.100.22/32 exact user@MX22# set policy-options policy-statement LO then accept
Configure la comunidad NO-EXPORT.
[edit] user@MX22# set policy-options community NO-EXPORT members no-advertise user@MX22# set policy-options community NO-EXPORT members no-export user@MX22# set policy-options community NO-EXPORT members no-export-subconfed
Configure las políticas de equilibrio de carga y TEST.
[edit] user@MX22# set policy-options policy-statement TEST then community add NO-EXPORT user@MX22# set policy-options policy-statement evpn-pplb from protocol evpn user@MX22# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure un valor ESI en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN o puerta de enlace de la red DC2.
[edit] user@MX22# set interfaces lt-1/0/0 esi 00:33:33:33:33:33:33:33:33:33
Configure la multiconexión activo-activo en la interfaz de túnel lógico incluyendo la
all-active
instrucción.[edit] user@MX22# set interfaces lt-1/0/0 esi all-active
Configure un par de interfaces de túnel lógico (lt-) en el enrutador de puerta de enlace MX22 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN basada en MPLS.
[edit] user@MX22# set interfaces lt-1/0/0 unit 0 peer-unit 1 user@MX22# set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk user@MX22# set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 user@MX22# set interfaces lt-1/0/0 unit 1 peer-unit 0 user@MX22# set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk user@MX22# set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5
Configure la dirección de interfaz de circuito cerrado y las opciones de enrutamiento.
[edit] user@MX22# set interfaces lo0 unit 88 family inet address 198.51.100.22/32 user@MX22# set routing-options router-id 198.51.100.22 user@MX22# set routing-options autonomous-system 65300
Aplique la directiva de equilibrio de carga a la tabla de reenvío.
[edit] user@MX22# set routing-options forwarding-table export evpn-pplb
Habilite los protocolos RSVP, MPLS, BGP y OSPF en las interfaces principales. Cree LSP MPLS y especifique la dirección de los otros enrutadores de puerta de enlace y borde WAN (MX11, MX12, P, MX21).
[edit] user@MX22# set protocols rsvp interface all user@MX22# set protocols rsvp interface fxp0.0 disable user@MX22# set protocols mpls label-switched-path MX22-TO-MX11 to 192.0.2.21 user@MX22# set protocols mpls label-switched-path MX22-TO-MX12 to 192.0.2.22 user@MX22# set protocols mpls label-switched-path MX22-TO-P to 203.0.113.1 user@MX22# set protocols mpls label-switched-path MX22-TO-MX21 to 198.51.100.21 user@MX22# set protocols mpls interface all user@MX22# set protocols mpls interface fxp0.0 disable user@MX22# set protocols bgp local-address 198.51.100.22 user@MX22# set protocols bgp export TEST user@MX22# set protocols bgp local-as 65300 user@MX22# set protocols bgp group INT type internal user@MX22# set protocols bgp group INT family evpn signaling user@MX22# set protocols bgp group INT export TEST user@MX22# set protocols bgp group INT neighbor 203.0.113.1 user@MX22# set protocols ospf traffic-engineering user@MX22# set protocols ospf area 0.0.0.0 interface ge-1/0/2.0 user@MX22# set protocols ospf area 0.0.0.0 interface lo0.88 passive
Configure instancias de enrutamiento MPLS basadas en EVPN en el enrutador MX22 para cada red virtual. Defina el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN-MPLS) y
vrf-target
(exporte y etiquete todas las rutas para ese VRF local utilizando el destino de ruta definido). Configure un dominio de puente para cada enrutador virtual que asigne ID de VLAN.[edit] user@MX22# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX22# set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 user@MX22# set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.22:100 user@MX22# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX22-EVPN-MPLS-1.log user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
Configure instancias de enrutamiento EVPN-VXLAN en el enrutador MX22 para cada red virtual. Defina la interfaz de origen de VTEP, el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN) y
vrf-target
(exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNID a ID de VLAN e identifique el método de reenvío de BUM.[edit] user@MX22# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.88 user@MX22# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX22# set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 user@MX22# set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.22:1 user@MX22# set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX22-EVPN-VXLAN-1.log user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX22# set routing-instances VRF instance-type vrf user@MX22# set routing-instances VRF interface irb.1 user@MX22# set routing-instances VRF interface irb.2 user@MX22# set routing-instances VRF interface irb.3 user@MX22# set routing-instances VRF interface irb.4 user@MX22# set routing-instances VRF interface irb.5 user@MX22# set routing-instances VRF route-distinguisher 1:1 user@MX22# set routing-instances VRF vrf-target target:10:10
Configuración de ToR21
Procedimiento paso a paso
En el ejemplo siguiente es necesario navegar por varios niveles en la jerarquía de configuración. Para obtener información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en modo de configuración en la Guía del usuario de CLI.
Configure el enrutador MX como ToR21:
Establezca el nombre de host del sistema.
[edit] user@ToR21# set system host-name ToR21
Configure las interfaces y los dominios de puente en el dispositivo CE4 para habilitar la conectividad de capa 2.
[edit] user@ToR21# set logical-systems CE-4 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 4" user@ToR21# set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ToR21# set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ToR21# set logical-systems CE-4 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR21" user@ToR21# set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk user@ToR21# set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 user@ToR21# set logical-systems CE-4 bridge-domains BD-1 domain-type bridge user@ToR21# set logical-systems CE-4 bridge-domains BD-1 vlan-id 1 user@ToR21# set logical-systems CE-4 bridge-domains BD-2 domain-type bridge user@ToR21# set logical-systems CE-4 bridge-domains BD-2 vlan-id 2 user@ToR21# set logical-systems CE-4 bridge-domains BD-3 domain-type bridge user@ToR21# set logical-systems CE-4 bridge-domains BD-3 vlan-id 3 user@ToR21# set logical-systems CE-4 bridge-domains BD-4 domain-type bridge user@ToR21# set logical-systems CE-4 bridge-domains BD-4 vlan-id 4 user@ToR21# set logical-systems CE-4 bridge-domains BD-5 domain-type bridge user@ToR21# set logical-systems CE-4 bridge-domains BD-5 vlan-id 5
Configure las opciones de seguimiento de las interfaces para habilitar los registros de seguimiento.
[edit] user@ToR21# set interfaces traceoptions file ToR21-DCD.log user@ToR21# set interfaces traceoptions file size 10m user@ToR21# set interfaces traceoptions flag all
Establezca el número de interfaces Ethernet agregadas.
[edit] user@ToR21# set chassis aggregated-devices ethernet device-count 1
Configure las interfaces en el dispositivo ToR21 para conectarse a los dispositivos MX22, CE-5, CE-4, ToR22 y MX21 para habilitar la conectividad subyacente.
[edit] user@ToR21# set interfaces xe-0/0/0 unit 0 description "CONNECTED TO MX22" user@ToR21# set interfaces xe-0/0/0 unit 0 family inet address 192.168.10.2/24 user@ToR21# set interfaces ge-1/0/0 description "CONNECTED TO CE-5" user@ToR21# set interfaces ge-1/0/0 gigether-options 802.3ad ae0 user@ToR21# set interfaces ge-1/0/1 unit 0 description "CONNECTED TO MX21" user@ToR21# set interfaces ge-1/0/1 unit 0 family inet address 192.168.9.2/24 user@ToR21# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-4" user@ToR21# set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk user@ToR21# set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 user@ToR21# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR22" user@ToR21# set interfaces ge-1/1/3 unit 0 family inet address 192.168.12.1/24
Configure una interfaz de grupo de agregación de vínculos (LAG) habilitada para el Protocolo de control de agregación de vínculos (LACP) hacia el dispositivo host final CE-5. El valor ESI es único globalmente en todo el dominio EVPN. La
all-active
configuración permite que ToR21 y ToR22 reenvíen tráfico hacia y desde los dispositivos CE, de modo que todos los vínculos CE se utilicen activamente.[edit] user@ToR21# set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 user@ToR21# set interfaces ae0 esi all-active user@ToR21# set interfaces ae0 aggregated-ether-options lacp active user@ToR21# set interfaces ae0 aggregated-ether-options lacp periodic fast user@ToR21# set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 user@ToR21# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR21# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5
Configure la dirección de interfaz de circuito cerrado y las opciones de enrutamiento.
[edit] user@ToR21# set interfaces lo0 unit 90 family inet address 198.51.100.11/32 user@ToR21# set routing-options router-id 198.51.100.11 user@ToR21# set routing-options autonomous-system 64600
Aplique la directiva de equilibrio de carga a la tabla de reenvío.
[edit] user@ToR21# set routing-options forwarding-table export evpn-pplb
Configure la conectividad subyacente de BGP externo (EBGP) entre el ToR (ToR21 y ToR22) y los enrutadores de puerta de enlace (MX21 y MX22).
[edit] user@ToR21# set protocols bgp export TEST user@ToR21# set protocols bgp local-as 64600 user@ToR21# set protocols bgp group MX21 type external user@ToR21# set protocols bgp group MX21 local-address 192.168.9.2 user@ToR21# set protocols bgp group MX21 export LO user@ToR21# set protocols bgp group MX21 export TEST user@ToR21# set protocols bgp group MX21 peer-as 64800 user@ToR21# set protocols bgp group MX21 local-as 64600 user@ToR21# set protocols bgp group MX21 neighbor 192.168.9.1 family inet unicast user@ToR21# set protocols bgp group MX22 type external user@ToR21# set protocols bgp group MX22 local-address 192.168.10.2 user@ToR21# set protocols bgp group MX22 export LO user@ToR21# set protocols bgp group MX22 export TEST user@ToR21# set protocols bgp group MX22 peer-as 64900 user@ToR21# set protocols bgp group MX22 local-as 64600 user@ToR21# set protocols bgp group MX22 neighbor 192.168.10.1 family inet unicast user@ToR21# set protocols bgp group ToR22 type external user@ToR21# set protocols bgp group ToR22 local-address 192.168.12.1 user@ToR21# set protocols bgp group ToR22 export LO user@ToR21# set protocols bgp group ToR22 export TEST user@ToR21# set protocols bgp group ToR22 peer-as 64700 user@ToR21# set protocols bgp group ToR22 local-as 64600 user@ToR21# set protocols bgp group ToR22 neighbor 192.168.12.2 family inet unicast
Configure una superposición de BGP externo multiprotocolo (MP-EBGP) entre el ToR (ToR21 y ToR22) y los enrutadores de puerta de enlace (MX21 y MX22) y establezca EVPN como protocolo de señalización.
Procedimiento paso a paso
Configure una superposición MP-EBGP para conectar entre ToR21 y MX21 mediante la señalización EVPN.
[edit] user@ToR21# set protocols bgp group MX21-EVPN type external user@ToR21# set protocols bgp group MX21-EVPN multihop ttl 2 user@ToR21# set protocols bgp group MX21-EVPN multihop no-nexthop-change user@ToR21# set protocols bgp group MX21-EVPN local-address 198.51.100.11 user@ToR21# set protocols bgp group MX21-EVPN peer-as 64800 user@ToR21# set protocols bgp group MX21-EVPN local-as 64600 user@ToR21# set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling
Configure una superposición MP-EBGP para conectar entre ToR21 y MX22 mediante la señalización EVPN.
[edit] user@ToR21# set protocols bgp group MX22-EVPN type external user@ToR21# set protocols bgp group MX22-EVPN multihop ttl 2 user@ToR21# set protocols bgp group MX22-EVPN multihop no-nexthop-change user@ToR21# set protocols bgp group MX22-EVPN local-address 198.51.100.11 user@ToR21# set protocols bgp group MX22-EVPN peer-as 64900 user@ToR21# set protocols bgp group MX22-EVPN local-as 64600 user@ToR21# set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling
Configure una superposición MP-EBGP para conectar entre ToR21 y ToR22 mediante la señalización EVPN.
[edit] user@ToR21# set protocols bgp group ToR22-EVPN type external user@ToR21# set protocols bgp group ToR22-EVPN multihop ttl 2 user@ToR21# set protocols bgp group ToR22-EVPN multihop no-nexthop-change user@ToR21# set protocols bgp group ToR22-EVPN local-address 198.51.100.11 user@ToR21# set protocols bgp group ToR22-EVPN peer-as 64700 user@ToR21# set protocols bgp group ToR22-EVPN local-as 64600 user@ToR21# set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling
Configure operaciones de seguimiento para realizar un seguimiento de todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@ToR21# set protocols l2-learning traceoptions file TOR21-L2ALD.log user@ToR21# set protocols l2-learning traceoptions file size 10m user@ToR21# set protocols l2-learning traceoptions level all user@ToR21# set protocols l2-learning traceoptions flag all
Configure la directiva de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo.
[edit] user@ToR21# set policy-options policy-statement LO term 1 from protocol direct user@ToR21# set policy-options policy-statement LO term 1 from route-filter 198.51.100.11/32 exact user@ToR21# set policy-options policy-statement LO term 1 then accept
Configure la comunidad NO-EXPORT.
[edit] user@ToR21# set policy-options community NO-EXPORT members no-advertise user@ToR21# set policy-options community NO-EXPORT members no-export user@ToR21# set policy-options community NO-EXPORT members no-export-subconfed
Configure las políticas de equilibrio de carga y TEST.
[edit] user@ToR21# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR21# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR21# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure instancias de enrutamiento EVPN para cada red virtual. Defina la interfaz de origen de VTEP, el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN) y
vrf-target
(exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNID a ID de VLAN e identifique el método de reenvío de BUM.[edit] user@ToR21# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.90 user@ToR21# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR21# set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 user@ToR21# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR21# set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.11:1 user@ToR21# set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR21-EVPN-VXLAN-1.log user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Configuración de ToR22
Procedimiento paso a paso
En el ejemplo siguiente es necesario navegar por varios niveles en la jerarquía de configuración. Para obtener información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en modo de configuración en la Guía del usuario de CLI.
Configure el enrutador MX ToR22:
Establezca el nombre de host del sistema.
[edit] user@ToR22# set system host-name ToR22
Configure las interfaces y los dominios de puente en el dispositivo CE-5 para habilitar la conectividad de capa 2.
[edit] user@ToR22# set logical-systems CE-5 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 5" user@ToR22# set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ToR22# set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set logical-systems CE-5 interfaces ae1 unit 0 description "CONNECTED TO ToR21" user@ToR22# set logical-systems CE-5 interfaces ae1 unit 0 family bridge interface-mode trunk user@ToR22# set logical-systems CE-5 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set logical-systems CE-5 bridge-domains BD-1 domain-type bridge user@ToR22# set logical-systems CE-5 bridge-domains BD-1 vlan-id 1 user@ToR22# set logical-systems CE-5 bridge-domains BD-2 domain-type bridge user@ToR22# set logical-systems CE-5 bridge-domains BD-2 vlan-id 2 user@ToR22# set logical-systems CE-5 bridge-domains BD-3 domain-type bridge user@ToR22# set logical-systems CE-5 bridge-domains BD-3 vlan-id 3 user@ToR22# set logical-systems CE-5 bridge-domains BD-4 domain-type bridge user@ToR22# set logical-systems CE-5 bridge-domains BD-4 vlan-id 4 user@ToR22# set logical-systems CE-5 bridge-domains BD-5 domain-type bridge user@ToR22# set logical-systems CE-5 bridge-domains BD-5 vlan-id 5
Configure las interfaces y los dominios de puente en el dispositivo CE-6 para habilitar la conectividad de capa 2.
[edit] user@ToR22# set logical-systems CE-6 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR22" user@ToR22# set logical-systems CE-6 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk user@ToR22# set logical-systems CE-6 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set logical-systems CE-6 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 6" user@ToR22# set logical-systems CE-6 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk user@ToR22# set logical-systems CE-6 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set logical-systems CE-6 bridge-domains BD-1 domain-type bridge user@ToR22# set logical-systems CE-6 bridge-domains BD-1 vlan-id 1 user@ToR22# set logical-systems CE-6 bridge-domains BD-2 domain-type bridge user@ToR22# set logical-systems CE-6 bridge-domains BD-2 vlan-id 2 user@ToR22# set logical-systems CE-6 bridge-domains BD-3 domain-type bridge user@ToR22# set logical-systems CE-6 bridge-domains BD-3 vlan-id 3 user@ToR22# set logical-systems CE-6 bridge-domains BD-4 domain-type bridge user@ToR22# set logical-systems CE-6 bridge-domains BD-4 vlan-id 4 user@ToR22# set logical-systems CE-6 bridge-domains BD-5 domain-type bridge user@ToR22# set logical-systems CE-6 bridge-domains BD-5 vlan-id 5
Configure las opciones de seguimiento de las interfaces para habilitar los registros de seguimiento.
[edit] user@ToR22# set interfaces traceoptions file R7-DCD.log user@ToR22# set interfaces traceoptions file size 10m user@ToR22# set interfaces traceoptions flag all
Establezca el número de interfaces Ethernet agregadas.
[edit] user@ToR22# set chassis aggregated-devices ethernet device-count 2
Configure las interfaces en el dispositivo ToR22 para conectarse a los dispositivos MX22, CE-5, CE-6, ToR21 y MX21 para habilitar la conectividad subyacente.
[edit] user@ToR22# set interfaces xe-0/0/0 unit 0 description "CONNECTED TO MX22" user@ToR22# set interfaces xe-0/0/0 unit 0 family inet address 192.168.11.2/24 user@ToR22# set interfaces ge-1/0/0 description "CONNECTED TO ToR21" user@ToR22# set interfaces ge-1/0/0 gigether-options 802.3ad ae1 user@ToR22# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-6" user@ToR22# set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk user@ToR22# set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set interfaces ge-1/0/7 description "CONNECTED TO ToR22" user@ToR22# set interfaces ge-1/0/7 gigether-options 802.3ad ae1 user@ToR22# set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX21" user@ToR22# set interfaces ge-1/1/0 unit 0 family inet address 192.168.8.2/24 user@ToR22# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR21" user@ToR22# set interfaces ge-1/1/3 unit 0 family inet address 192.168.12.2/24 user@ToR22# set interfaces ge-1/1/7 description "CONNECTED TO CE-5" user@ToR22# set interfaces ge-1/1/7 gigether-options 802.3ad ae0
Configure una interfaz de grupo de agregación de vínculos (LAG) habilitada para el Protocolo de control de agregación de vínculos (LACP) hacia el dispositivo host final CE-5. El valor ESI es único globalmente en todo el dominio EVPN. La
all-active
configuración permite que ToR21 y ToR22 reenvíen tráfico hacia y desde los dispositivos CE, de modo que todos los vínculos CE se utilicen activamente.[edit] user@ToR22# set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 user@ToR22# set interfaces ae0 esi all-active user@ToR22# set interfaces ae0 aggregated-ether-options lacp active user@ToR22# set interfaces ae0 aggregated-ether-options lacp periodic fast user@ToR22# set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 user@ToR22# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR22# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 user@ToR22# set interfaces ae1 aggregated-ether-options lacp active user@ToR22# set interfaces ae1 aggregated-ether-options lacp periodic fast user@ToR22# set interfaces ae1 aggregated-ether-options lacp system-id 22:22:22:22:22:22
Configure la dirección de interfaz de circuito cerrado y las opciones de enrutamiento.
[edit] user@ToR22# set interfaces lo0 unit 92 family inet address 198.51.100.12/32 user@ToR22# set routing-options router-id 198.51.100.12 user@ToR22# set routing-options autonomous-system 64700
Aplique la directiva de equilibrio de carga a la tabla de reenvío.
[edit] user@ToR22# set routing-options forwarding-table export evpn-pplb
Configure la conectividad subyacente de BGP externo (EBGP) entre el ToR (ToR22 y ToR21) y los enrutadores de puerta de enlace (MX21 y MX22).
[edit] user@ToR22# set protocols bgp local-as 64700 user@ToR22# set protocols bgp group MX21 type external user@ToR22# set protocols bgp group MX21 local-address 192.168.8.2 user@ToR22# set protocols bgp group MX21 export LO user@ToR22# set protocols bgp group MX21 export TEST user@ToR22# set protocols bgp group MX21 peer-as 64800 user@ToR22# set protocols bgp group MX21 local-as 64700 user@ToR22# set protocols bgp group MX21 neighbor 192.168.8.1 family inet unicast user@ToR22# set protocols bgp group MX22 type external user@ToR22# set protocols bgp group MX22 local-address 192.168.11.2 user@ToR22# set protocols bgp group MX22 export LO user@ToR22# set protocols bgp group MX22 export TEST user@ToR22# set protocols bgp group MX22 peer-as 64900 user@ToR22# set protocols bgp group MX22 local-as 64700 user@ToR22# set protocols bgp group MX22 neighbor 192.168.11.1 family inet unicast user@ToR22# set protocols bgp group ToR21 type external user@ToR22# set protocols bgp group ToR21 local-address 192.168.12.2 user@ToR22# set protocols bgp group ToR21 export LO user@ToR22# set protocols bgp group ToR21 export TEST user@ToR22# set protocols bgp group ToR21 peer-as 64600 user@ToR22# set protocols bgp group ToR21 local-as 64700 user@ToR22# set protocols bgp group ToR21 neighbor 192.168.12.1 family inet unicast
Configure una superposición de BGP externo multiprotocolo (MP-EBGP) entre el ToR (ToR22 y ToR21) y los enrutadores de puerta de enlace (MX21 y MX22) y establezca EVPN como protocolo de señalización.
Procedimiento paso a paso
Configure una superposición MP-EBGP para conectar entre ToR22 y MX21 mediante la señalización EVPN.
[edit] user@ToR22# set protocols bgp group MX21-EVPN type external user@ToR22# set protocols bgp group MX21-EVPN multihop ttl 2 user@ToR22# set protocols bgp group MX21-EVPN multihop no-nexthop-change user@ToR22# set protocols bgp group MX21-EVPN local-address 198.51.100.12 user@ToR22# set protocols bgp group MX21-EVPN peer-as 64800 user@ToR22# set protocols bgp group MX21-EVPN local-as 64700 user@ToR22# set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling
Configure una superposición MP-EBGP para conectar entre ToR22 y MX22 mediante la señalización EVPN.
[edit] user@ToR22# set protocols bgp group MX22-EVPN type external user@ToR22# set protocols bgp group MX22-EVPN multihop ttl 2 user@ToR22# set protocols bgp group MX22-EVPN multihop no-nexthop-change user@ToR22# set protocols bgp group MX22-EVPN local-address 198.51.100.12 user@ToR22# set protocols bgp group MX22-EVPN peer-as 64900 user@ToR22# set protocols bgp group MX22-EVPN local-as 64700 user@ToR22# set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling
Configure una superposición MP-EBGP para conectar entre ToR22 y ToR21 mediante la señalización EVPN.
[edit] user@ToR22# set protocols bgp group ToR21-EVPN type external user@ToR22# set protocols bgp group ToR21-EVPN multihop ttl 2 user@ToR22# set protocols bgp group ToR21-EVPN multihop no-nexthop-change user@ToR22# set protocols bgp group ToR21-EVPN local-address 198.51.100.12 user@ToR22# set protocols bgp group ToR21-EVPN peer-as 64600 user@ToR22# set protocols bgp group ToR21-EVPN local-as 64700 user@ToR22# set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling
Configure operaciones de seguimiento para realizar un seguimiento de todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@ToR22# set protocols l2-learning traceoptions file TOR22-L2ALD.log user@ToR22# set protocols l2-learning traceoptions file size 10m user@ToR22# set protocols l2-learning traceoptions level all user@ToR22# set protocols l2-learning traceoptions flag all
Configure la directiva de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo.
[edit] user@ToR22# set policy-options policy-statement LO term 1 from protocol direct user@ToR22# set policy-options policy-statement LO term 1 from route-filter 198.51.100.12/32 exact user@ToR22# set policy-options policy-statement LO term 1 then accept
Configure la comunidad NO-EXPORT.
[edit] user@ToR22# set policy-options community NO-EXPORT members no-advertise user@ToR22# set policy-options community NO-EXPORT members no-export user@ToR22# set policy-options community NO-EXPORT members no-export-subconfed
Configure las políticas de equilibrio de carga y TEST.
[edit] user@ToR22# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR22# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR22# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure instancias de enrutamiento EVPN para cada red virtual. Defina la interfaz de origen de VTEP, el diferenciador de ruta (utilizado para identificar y anunciar rutas EVPN) y
vrf-target
(exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNID a ID de VLAN e identifique el método de reenvío de BUM.[edit] user@ToR22# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.92 user@ToR22# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR22# set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 user@ToR22# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR22# set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.12:1 user@ToR22# set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 user@ToR22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR22-EVPN-VXLAN-1.log user@ToR22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR22# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR22# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Verificación
Después de configurar tanto la capa subyacente como la superposición EVPN, le recomendamos que compruebe que las configuraciones funcionan según lo previsto.
- Verificación de la configuración de ToR11
- Verificación de la configuración de ToR12
- Verificación de la configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 1 (MX11)
- Verificación de la configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 2 (MX12)
- Verificación de la configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 3 (MX21)
- Verificación de la configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 4 (MX22)
- Verificación de la configuración de ToR21
- Verificación de la configuración de ToR22
Verificación de la configuración de ToR11
Propósito
Compruebe que ToR11 esté configurado correctamente.
Acción
Compruebe que las interfaces lógicas del sistema y los dominios de puente del dispositivo CE2 estén configurados correctamente para habilitar la conectividad de capa 2.
user@ToR11> show configuration logical-systems CE-2 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host-2"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/6 { unit 0 { description "CONNECTED TO ToR11"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
Compruebe que las interfaces y las opciones de seguimiento de ToR11 estén configuradas correctamente para habilitar la conectividad subyacente con otros dispositivos de borde WAN y de puerta de enlace y ToR.
user@ToR11> show configuration interfaces traceoptions { file ToR11-DCD.log size 10m; flag all; } ge-1/0/0 { description "CONNECTED TO CE-1"; gigether-options { 802.3ad ae0; } } ge-1/0/5 { unit 0 { description "CONNECTED TO MX12"; family inet { address 192.168.4.1/24; } } } ge-1/0/6 { unit 0 { description "CONNECTED TO CE-2"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/1 { unit 0 { description "CONNECTED TO MX11"; family inet { address 192.168.3.1/24; } } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR12"; family inet { address 192.168.2.1/24; } } } ae0 { esi { 00:11:11:11:11:11:11:11:11:11; all-active; } aggregated-ether-options { lacp { active; periodic fast; system-id 11:11:11:11:11:11; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } lo0 { unit 81 { family inet { address 192.0.2.11/32; } } }
Compruebe que las opciones de enrutamiento y equilibrio de carga estén configuradas correctamente.
user@ToR11> show configuration routing-options router-id 192.0.2.11; autonomous-system 65100; forwarding-table { export evpn-pplb; }
Compruebe que los protocolos de superposición y subyacente BGP externo (EBGP) y las propiedades de aprendizaje y reenvío de direcciones de capa 2 estén configurados correctamente.
user@ToR11> show configuration protocols bgp { local-as 65100; group MX11 { type external; local-address 192.168.3.1; export [ LO TEST ]; peer-as 65400; neighbor 192.168.3.2 { family inet { unicast; } } } group MX12 { type external; local-address 192.168.4.1; export [ LO TEST ]; peer-as 65500; neighbor 192.168.4.2 { family inet { unicast; } } } group ToR12 { type external; local-address 192.168.2.1; export [ LO TEST ]; peer-as 65200; local-as 65100; neighbor 192.168.2.2 { family inet { unicast; } } } group MX11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.11; export TEST; peer-as 65400; local-as 65100; neighbor 192.0.2.21 { family evpn { signaling; } } } group MX12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.11; export TEST; peer-as 65500; local-as 65100; neighbor 192.0.2.22 { family evpn { signaling; } } } group ToR12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.11; export TEST; peer-as 65200; local-as 65100; neighbor 192.0.2.12 { family evpn { signaling; } } } } l2-learning { traceoptions { file TOR11-L2ALD.log size 10m; level all; flag all; } }
Compruebe que las directivas de enrutamiento para la dirección de circuito cerrado, el equilibrio de carga y las directivas TEST y las opciones de directiva de la comunidad estén configuradas correctamente.
user@ToR11> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 192.0.2.11/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Compruebe que las instancias de enrutamiento EVPN-VXLAN para cada red virtual estén configuradas correctamente.
user@ToR11> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.81; instance-type virtual-switch; interface ge-1/0/6.0; interface ae0.0; route-distinguisher 192.0.2.11:1; vrf-target target:1:1; protocols { evpn { traceoptions { file TOR11-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }
Verificación de la configuración de ToR12
Propósito
Compruebe que ToR12 esté configurado correctamente.
Acción
Compruebe que las interfaces lógicas del sistema y los dominios de puente de los dispositivos CE1 y CE3 estén configurados correctamente para habilitar la conectividad de capa 2.
user@ToR12> show configuration logical-systems CE-1 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host 1"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { unit 0 { description "CONNECTED TO ToR12"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } user@ToR12> show configuration logical-systems CE-3 { interfaces { ge-1/1/7 { unit 0 { description "CONNECTED TO ToR12"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/9 { unit 0 { description "CONNECTED TO Host 3"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
Compruebe que las interfaces y las opciones de seguimiento en ToR12 estén configuradas correctamente para habilitar la conectividad subyacente a otros ToR y dispositivos de puerta de enlace y de borde WAN.
user@ToR12>show configuration interfaces traceoptions { file ToR12-DCD.log size 10m; flag all; } ge-1/0/0 { unit 0 { description "CONNECTED TO MX11"; family inet { address 192.168.6.1/24; } } } ge-1/0/4 { unit 0 { description "CONNECTED TO MX12"; family inet { address 192.168.5.1/24; } } } ge-1/0/6 { description "CONNECTED TO CE-1"; gigether-options { 802.3ad ae0; } } ge-1/0/7 { unit 0 { description "CONNECTED TO CE-3"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/0 { description "CONNECTED TO ToR11"; gigether-options { 802.3ad ae1; } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR11"; family inet { address 192.168.2.2/24; } } } ge-1/1/6 { description "CONNECTED TO ToR12"; gigether-options { 802.3ad ae1; } } ae0 { esi { 00:11:11:11:11:11:11:11:11:11; all-active; } aggregated-ether-options { lacp { system-id 11:11:11:11:11:11; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { aggregated-ether-options { lacp { active; periodic fast; } } } lo0 { unit 82 { family inet { address 192.0.2.12/32; } } }
Compruebe que las opciones de enrutamiento y equilibrio de carga estén configuradas correctamente.
user@ToR12> show configuration routing-options router-id 192.0.2.12; autonomous-system 65200; forwarding-table { export evpn-pplb; }
Compruebe que los protocolos de superposición y subyacente de BGP externo (EBGP) y las propiedades de aprendizaje y reenvío de direcciones de capa 2 estén configurados correctamente.
user@ToR12> show configuration protocols bgp { local-as 65200; group MX11 { type external; local-address 192.168.6.1; export [ LO TEST ]; peer-as 65400; local-as 65200; neighbor 192.168.6.2 { family inet { unicast; } } } group MX12 { type external; local-address 192.168.5.1; export [ LO TEST ]; peer-as 65500; local-as 65200; neighbor 192.168.5.2 { family inet { unicast; } } } group ToR11 { type external; local-address 192.168.2.2; export [ LO TEST ]; peer-as 65100; local-as 65200; neighbor 192.168.2.1 { family inet { unicast; } } } group MX11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.12; export TEST; peer-as 65400; local-as 65200; neighbor 192.0.2.21 { family evpn { signaling; } } } group MX12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.12; export TEST; peer-as 65500; local-as 65200; neighbor 192.0.2.22 { family evpn { signaling; } } } group ToR11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.12; export TEST; peer-as 65100; local-as 65200; neighbor 192.0.2.11 { family evpn { signaling; } } } group ToR12-EVPN { export TEST; } } l2-learning { traceoptions { file TOR12-L2ALD.log size 10m; level all; flag all; } }
Compruebe que las directivas de enrutamiento para la dirección de circuito cerrado, el equilibrio de carga y las directivas TEST y las opciones de directiva de la comunidad estén configuradas correctamente.
user@ToR12> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 192.0.2.12/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Compruebe que las instancias de enrutamiento EVPN-VXLAN para cada red virtual estén configuradas correctamente.
user@ToR12> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.82; instance-type virtual-switch; interface ge-1/0/7.0; interface ae0.0; route-distinguisher 192.0.2.12:1; vrf-target target:1:1; protocols { evpn { traceoptions { file TOR12-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }
Verificación de la configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 1 (MX11)
Propósito
Verifique que MX11 esté configurado correctamente.
Acción
Verifique que las interfaces del enrutador MX11 (DC GW/WAN Edge1) estén configuradas para lo siguiente:
Conectividad subyacente a los dispositivos MX12, ToR11, ToR12 y P, que es la parte EVPN-VXLAN de la red DC1.
user@MX11> show configuration interfaces traceoptions { file MX11-DCD.log size 10m; flag all; } ge-1/1/1 { unit 0 { description "CONNECTED TO ToR11"; family inet { address 192.168.3.2/24; } } } ge-5/1/0 { unit 0 { description "CONNECTED TO MX12"; family inet { address 192.168.7.1/24; } } } ge-5/1/8 { unit 0 { description "CONNECTED TO ToR12"; family inet { address 192.168.6.2/24; } } } ge-5/1/9 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.1.1/24; } family mpls; } }
Interfaces de enrutamiento y puente integrados (IRB) que anuncian las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
user@MX11> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.12/24 { virtual-gateway-address 10.11.1.10; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.12/24 { virtual-gateway-address 10.12.1.10; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.12/24 { virtual-gateway-address 10.13.1.10; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.12/24 { virtual-gateway-address 10.14.1.10; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.12/24 { virtual-gateway-address 10.15.1.10; } } } }
Un valor ESI y multiconexión activa-activa en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN o puerta de enlace de la red DC1.
user@MX11> show configuration interfaces lt-5/1/0 { esi { 00:22:22:22:22:22:22:22:22:22; all-active; } }
Un par de interfaces de túnel lógico (lt-) en el enrutador de puerta de enlace MX11 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN basada en MPLS.
user@MX11> show configuration interfaces lt-5/1/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
Dirección de interfaz de circuito cerrado.
user@MX11> show configuration interfaces lo0 { unit 84 { family inet { address 192.0.2.21/32; } family mpls; } }
Compruebe que las opciones de enrutamiento y el equilibrio de carga estén configurados correctamente.
user@MX11> show configuration routing-options router-id 192.0.2.21; autonomous-system 65300; forwarding-table { export evpn-pplb; }
Compruebe que los protocolos de superposición y subyacentes BGP externos (EBGP) y los protocolos RSVP, MPLS, BGP y OSPF estén configurados correctamente.
user@MX11> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX11-TO-MX12 { to 192.0.2.22; } label-switched-path MX11-TO-P { to 203.0.113.1; } label-switched-path MX11-TO-MX21 { to 198.51.100.21; } label-switched-path MX11-TO-MX22 { to 198.51.100.22; } interface all; interface fxp0.0 { disable; } } bgp { local-address 192.0.2.21; local-as 65300; group INT { type internal; local-address 192.0.2.21; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group MX12 { type external; local-address 192.168.7.1; export [ TEST LO ]; peer-as 65500; local-as 65400; neighbor 192.168.7.2 { family inet { unicast; } } } group ToR11 { type external; local-address 192.168.3.2; import TEST; export [ TEST LO ]; peer-as 65100; local-as 65400; neighbor 192.168.3.1 { family inet { unicast; } } } group ToR12 { type external; local-address 192.168.6.2; export [ TEST LO ]; peer-as 65200; local-as 65400; neighbor 192.168.6.1 { family inet { unicast; } } } group MX12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 65500; local-as 65400; neighbor 192.0.2.22 { family evpn { signaling; } } } group ToR11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 65100; local-as 65400; neighbor 192.0.2.11 { family evpn { signaling; } } } group ToR12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 65200; local-as 65400; neighbor 192.0.2.12 { family evpn { signaling; } } } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-5/1/9.0; interface lo0.84 { passive; } } } l2-learning { traceoptions { file MX11-L2ALD.log size 10m; level all; flag all; } }
Compruebe que las directivas de enrutamiento para la dirección de circuito cerrado, el equilibrio de carga y las directivas TEST y las opciones de directiva de la comunidad estén configuradas correctamente.
user@MX11> show configuration policy-options policy-statement LO { from { protocol direct; route-filter 192.0.2.21/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Compruebe que las instancias de enrutamiento MPLS basadas en EVPN y las instancias de enrutamiento EVPN-VXLAN estén configuradas correctamente.
user@MX11> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-5/1/0.0; route-distinguisher 192.0.2.21:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX11-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.84; instance-type virtual-switch; interface lt-5/1/0.1; route-distinguisher 192.0.2.21:1; vrf-target target:1:1; protocols { evpn { traceoptions { file MX11-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
Verificación de la configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 2 (MX12)
Propósito
Verifique que MX12 esté configurado correctamente.
Acción
Verifique que las interfaces del enrutador MX12 (DC GW/WAN Edge2) estén configuradas para lo siguiente:
Conectividad subyacente a los dispositivos MX11, ToR11, ToR12 y P, que es la parte EVPN-VXLAN de la red DC1.
user@MX12> show configuration interfaces traceoptions { file MX12-DCD.log size 10m; flag all; } ge-1/0/4 { unit 0 { description "CONNECTED TO ToR12"; family inet { address 192.168.5.2/24; } } } ge-1/0/5 { unit 0 { description "CONNECTED TO ToR11"; family inet { address 192.168.4.2/24; } } } ge-1/0/6 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.113.11/24; } family mpls; } } ge-1/1/0 { unit 0 { description "CONNECTED TO MX11"; family inet { address 192.168.7.2/24; } } }
Interfaces de enrutamiento y puente integrados (IRB) que anuncian las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
user@MX12> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.13/24 { virtual-gateway-address 10.11.1.10; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.13/24 { virtual-gateway-address 10.12.1.10; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.13/24 { virtual-gateway-address 10.13.1.10; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.13/24 { virtual-gateway-address 10.14.1.10; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.13/24 { virtual-gateway-address 10.15.1.10; } } } }
Un valor ESI y multiconexión activa-activa en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN o puerta de enlace de la red DC1.
user@MX12> show configuration interfaces lt-1/0/0 { esi { 00:22:22:22:22:22:22:22:22:22; all-active; } }
Un par de interfaces de túnel lógico (lt-) en el enrutador de puerta de enlace MX12 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN basada en MPLS.
user@MX12> show configuration interfaces lt-1/0/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
Dirección de interfaz de circuito cerrado.
user@MX12> show configuration interfaces lo0 { unit 85 { family inet { address 192.0.2.22/32; } family mpls; } } }
Compruebe que las opciones de enrutamiento y el equilibrio de carga estén configurados correctamente.
user@MX12> show configuration routing-options router-id 192.0.2.22; autonomous-system 65300; forwarding-table { export evpn-pplb; }
Compruebe que los protocolos de superposición y subyacentes BGP externos (EBGP) y los protocolos RSVP, MPLS, BGP y OSPF estén configurados correctamente.
user@MX12> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX12-TO-MX11 { to 192.0.2.21; } label-switched-path MX12-TO-P { to 203.0.113.1; } label-switched-path MX12-TO-MX21 { to 198.51.100.21; } label-switched-path MX12-TO-MX22 { to 198.51.100.22; } interface all; interface fxp0.0 { disable; } } bgp { local-address 192.0.2.22; local-as 65300; group INT { type internal; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group MX11 { type external; local-address 192.168.7.2; export [ TEST LO ]; peer-as 65400; local-as 65500; neighbor 192.168.7.1 { family inet { unicast; } } } group ToR11 { type external; local-address 192.168.4.2; export [ TEST LO ]; peer-as 65100; local-as 65500; neighbor 192.168.4.1 { family inet { unicast; } } } group ToR12 { type external; local-address 192.168.5.2; export [ TEST LO ]; peer-as 65200; local-as 65500; neighbor 192.168.5.1 { family inet { unicast; } } } group MX11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.22; export TEST; peer-as 65400; local-as 65500; neighbor 192.0.2.21 { family evpn { signaling; } } } group ToR11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.22; export TEST; peer-as 65100; local-as 65500; neighbor 192.0.2.11 { family evpn { signaling; } } } group ToR12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.22; export TEST; peer-as 65200; local-as 65500; neighbor 192.0.2.12 { family evpn { signaling; } } } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-1/0/6.0; interface lo0.85 { passive; } } } l2-learning { traceoptions { file MX12-L2ALD.log size 10m; level all; flag all; } }
Compruebe que las directivas de enrutamiento para la dirección de circuito cerrado, el equilibrio de carga y las directivas TEST y las opciones de directiva de la comunidad estén configuradas correctamente.
user@MX12> show configuration policy-options policy-statement LO { from { protocol direct; route-filter 192.0.2.22/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Compruebe que las instancias de enrutamiento MPLS basadas en EVPN y las instancias de enrutamiento EVPN-VXLAN estén configuradas correctamente.
user@MX12> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-1/0/0.0; route-distinguisher 192.0.2.22:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX12-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.85; instance-type virtual-switch; interface lt-1/0/0.1; route-distinguisher 192.0.2.22:1; vrf-target target:1:1; protocols { evpn { traceoptions { file MX12-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
Verificación de la configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 3 (MX21)
Propósito
Verifique que MX21 esté configurado correctamente.
Acción
Verifique que las interfaces del enrutador MX21 (DC GW/WAN Edge3) estén configuradas para lo siguiente:
Conectividad subyacente a los dispositivos MX22, ToR21, ToR22 y P, que es la parte EVPN-VXLAN de la red DC1.
user@MX21> show configuration interfaces ge-3/0/0 { unit 0 { description "CONNECTED TO MX22"; family inet { address 192.168.13.1/24; } } } ge-3/1/0 { unit 0 { description "CONNECTED TO ToR22"; family inet { address 192.168.8.1/24; } } } ge-5/0/0 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.113.31/24; } family mpls; } } ge-5/0/1 { unit 0 { description "CONNECTED TO ToR21"; family inet { address 192.168.9.1/24; } } }
Interfaces de enrutamiento y puente integrados (IRB) que anuncian las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
user@MX21> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.14/24 { virtual-gateway-address 10.11.1.11; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.14/24 { virtual-gateway-address 10.12.1.11; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.14/24 { virtual-gateway-address 10.13.1.11; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.14/24 { virtual-gateway-address 10.14.1.11; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.14/24 { virtual-gateway-address 10.15.1.11; } } } }
Un valor ESI y multiconexión activa-activa en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN o puerta de enlace de la red DC1.
user@MX21> show configuration interfaces lt-5/0/0 { esi { 00:33:33:33:33:33:33:33:33:33; all-active; } }
Un par de interfaces de túnel lógico (lt-) en el enrutador de puerta de enlace MX21 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN basada en MPLS.
user@MX21> show configuration interfaces lt-5/0/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
Dirección de interfaz de circuito cerrado.
user@MX21> show configuration interfaces lo0 { unit 87 { family inet { address 198.51.100.21/32; } family mpls; } }
Compruebe que las opciones de enrutamiento y el equilibrio de carga estén configurados correctamente.
user@MX21> show configuration routing-options router-id 198.51.100.21; autonomous-system 65300; forwarding-table { export evpn-pplb; }
Compruebe que los protocolos de superposición y subyacentes BGP externos (EBGP) y los protocolos RSVP, MPLS, BGP y OSPF estén configurados correctamente.
user@MX21> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX21-TO-MX11 { to 192.0.2.21; } label-switched-path MX21-TO-MX12 { to 192.0.2.22; } label-switched-path MX21-TO-MX22 { to 198.51.100.22; } label-switched-path MX21-TO-P { to 203.0.113.1; } interface all; interface fxp0.0 { disable; } } bgp { local-address 198.52.100.21; local-as 65300; group INT { type internal; local-address 198.51.100.21; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group MX22 { type external; local-address 192.168.13.1; export [ TEST LO ]; peer-as 64900; local-as 64800; neighbor 192.168.13.2 { family inet { unicast; } } } group ToR21 { type external; local-address 192.168.9.1; export [ TEST LO ]; peer-as 64600; local-as 64800; neighbor 192.168.9.2 { family inet { unicast; } } } group ToR22 { type external; local-address 192.168.8.1; export [ TEST LO ]; peer-as 64700; local-as 64800; neighbor 192.168.8.2 { family inet { unicast; } } } group MX22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.21; peer-as 64900; local-as 64800; neighbor 198.51.100.22 { family evpn { signaling; } } } group ToR21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.21; peer-as 64600; local-as 64800; neighbor 198.51.100.11 { family evpn { signaling; } } } group ToR22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.21; peer-as 64700; local-as 64800; neighbor 198.51.100.12 { family evpn { signaling; } } } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-5/0/0.0; interface lo0.87 { passive; } } } l2-learning { traceoptions { file MX21-L2ALD.log size 10m; level all; flag all; } }
Compruebe que las directivas de enrutamiento para la dirección de circuito cerrado, el equilibrio de carga y las directivas TEST y las opciones de directiva de la comunidad estén configuradas correctamente.
user@MX21> show configuration policy-options policy-statement LO { from { protocol direct; route-filter 198.51.100.21/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Compruebe que las instancias de enrutamiento MPLS basadas en EVPN y las instancias de enrutamiento EVPN-VXLAN estén configuradas correctamente.
user@MX21> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-5/0/0.0; route-distinguisher 198.51.100.21:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX21-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.87; instance-type virtual-switch; interface lt-5/0/0.1; route-distinguisher 198.51.100.21:1; vrf-target target:1:3; protocols { evpn { traceoptions { file MX21-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
Verificación de la configuración de la puerta de enlace del centro de datos y del enrutador WAN Edge 4 (MX22)
Propósito
Verifique que MX22 esté configurado correctamente.
Acción
Verifique que las interfaces del enrutador MX22 (DC GW/WAN Edge4) estén configuradas para lo siguiente:
Conectividad subyacente a los dispositivos MX21, ToR21, ToR22 y P, que es la parte EVPN-VXLAN de la red DC1.
user@MX22> show configuration interfaces xe-0/0/0 { unit 0 { description "CONNECTED TO ToR22"; family inet { address 192.168.11.1/24; } } } xe-0/0/1 { unit 0 { description "CONNECTED TO ToR21"; family inet { address 192.168.10.1/24; } } } ge-1/0/0 { unit 0 { description "CONNECTED TO MX21"; family inet { address 192.168.13.2/24; } } } ge-1/0/2 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.113.51/24; } family mpls; } }
Interfaces de enrutamiento y puente integrados (IRB) que anuncian las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
user@MX22> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.15/24 { virtual-gateway-address 10.11.1.11; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.15/24 { virtual-gateway-address 10.12.1.11; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.15/24 { virtual-gateway-address 10.13.1.11; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.15/24 { virtual-gateway-address 10.14.1.11; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:22:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.15/24 { virtual-gateway-address 10.15.1.11; } } } }
Un valor ESI y multiconexión activa-activa en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN o puerta de enlace de la red DC1.
user@MX22> show configuration interfaces lt-1/0/0 { esi { 00:33:33:33:33:33:33:33:33:33; all-active; } }
Un par de interfaces de túnel lógico (lt-) en el enrutador de puerta de enlace MX22 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como interfaz de acceso para EVPN basada en MPLS.
user@MX22> show configuration interfaces lt-1/0/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
Dirección de interfaz de circuito cerrado.
user@MX22> show configuration interfaces lo0 { unit 88 { family inet { address 198.51.100.22/32; } family mpls; } }
Compruebe que las opciones de enrutamiento y el equilibrio de carga estén configurados correctamente.
user@MX22> show configuration routing-options router-id 198.51.100.22; autonomous-system 65300; forwarding-table { export evpn-pplb; }
Compruebe que los protocolos de superposición y subyacentes BGP externos (EBGP) y los protocolos RSVP, MPLS, BGP y OSPF estén configurados correctamente.
user@MX22> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX22-TO-MX11 { to 192.0.2.21; } label-switched-path MX22-TO-MX12 { to 192.0.2.22; } label-switched-path MX22-TO-MX21 { to 198.51.100.21; } label-switched-path MX22-TO-P { to 203.0.113.1; } interface all; interface fxp0.0 { disable; } } bgp { local-address 198.51.100.22; local-as 65300; group INT { type internal; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group MX21 { type external; local-address 192.168.13.2; export [ TEST LO ]; peer-as 64800; local-as 64900; neighbor 192.168.13.1 { family inet { unicast; } } } group ToR21 { type external; local-address 192.168.10.1; export [ TEST LO ]; peer-as 64600; local-as 64900; neighbor 192.168.10.2 { family inet { unicast; } } } group ToR22 { type external; local-address 192.168.11.1; export [ TEST LO ]; peer-as 64700; local-as 64900; neighbor 192.168.11.2 { family inet { unicast; } } } group MX21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.22; peer-as 64800; local-as 64900; neighbor 198.51.100.21 { family evpn { signaling; } } } } group ToR21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.22; peer-as 64600; local-as 64900; neighbor 198.51.100.11 { family evpn { signaling; } } } group ToR22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.22; peer-as 64700; local-as 64900; neighbor 198.51.100.12 { family evpn { signaling; } } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-1/0/2.0; interface lo0.88 { passive; } } } l2-learning { traceoptions { file MX22-L2ALD.log size 10m; level all; flag all; } }
Compruebe que las directivas de enrutamiento para la dirección de circuito cerrado, el equilibrio de carga y las directivas TEST y las opciones de directiva de la comunidad estén configuradas correctamente.
user@MX22> show configuration policy-options policy-statement LO { from { protocol direct; route-filter 198.51.100.22/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Compruebe que las instancias de enrutamiento MPLS basadas en EVPN y las instancias de enrutamiento EVPN-VXLAN estén configuradas correctamente.
user@MX22> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-1/0/0.0; route-distinguisher 198.51.100.22:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX22-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.88; instance-type virtual-switch; interface lt-1/0/0.1; route-distinguisher 198.51.100.22:1; vrf-target target:1:3; protocols { evpn { traceoptions { file MX22-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
Verificación de la configuración de ToR21
Propósito
Compruebe que ToR21 esté configurado correctamente.
Acción
Verifique que las interfaces del sistema lógico y los dominios de puente en el dispositivo CE4 estén configurados correctamente para habilitar la conectividad de capa 2 y manejar el tráfico entre VXLAN.
user@ToR21> show configuration logical-systems CE-4 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host 4"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/6 { unit 0 { description "CONNECTED TO ToR21"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
Compruebe que las interfaces y las opciones de seguimiento de ToR21 estén configuradas correctamente para habilitar la conectividad subyacente con otros dispositivos de borde WAN y ToR.
user@ToR21>show configuration interfaces traceoptions { file ToR21-DCD.log size 10m; flag all; } xe-0/0/0 { unit 0 { description "CONNECTED TO MX22"; family inet { address 192.168.10.2/24; } } } ge-1/0/0 { description "CONNECTED TO CE-5"; gigether-options { 802.3ad ae0; } } ge-1/0/1 { unit 0 { description "CONNECTED TO MX21"; family inet { address 192.168.9.2/24; } } } ge-1/0/6 { unit 0 { description "CONNECTED TO CE-4"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR22"; family inet { address 192.168.12.1/24; } } } ae0 { esi { 00:44:44:44:44:44:44:44:44:44; all-active; } aggregated-ether-options { lacp { active; periodic fast; system-id 22:22:22:22:22:22; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } lo0 { unit 90 { family inet { address 198.51.100.11/32; } } }
Compruebe que las opciones de enrutamiento y equilibrio de carga estén configuradas correctamente.
user@ToR21> show configuration routing-options router-id 198.51.100.11; autonomous-system 64600; forwarding-table { export evpn-pplb; }
Compruebe que los protocolos de superposición y subyacente de BGP externo (EBGP) y las propiedades de aprendizaje y reenvío de direcciones de capa 2 estén configurados correctamente.
user@ToR21> show configuration protocols bgp { export TEST; local-as 64600; group MX21 { type external; local-address 192.168.9.2; export [ LO TEST ]; peer-as 64800; local-as 64600; neighbor 192.168.9.1 { family inet { unicast; } } } group MX22 { type external; local-address 192.168.10.2; export [ LO TEST ]; peer-as 64900; local-as 64600; neighbor 192.168.10.1 { family inet { unicast; } } } group ToR22 { type external; local-address 192.168.12.1; export [ LO TEST ]; peer-as 64700; local-as 64600; neighbor 192.168.12.2 { family inet { unicast; } } } group MX21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.11; peer-as 64800; local-as 64600; neighbor 198.51.100.21 { family evpn { signaling; } } } group MX22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.11; peer-as 64900; local-as 64600; neighbor 198.51.100.22 { family evpn { signaling; } } } group ToR22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.11; peer-as 64700; local-as 64600; neighbor 198.51.100.12 { family evpn { signaling; } } } } l2-learning { traceoptions { file TOR21-L2ALD.log size 10m; level all; flag all; } }
Compruebe que las directivas de enrutamiento para la dirección de circuito cerrado, el equilibrio de carga y las directivas TEST y las opciones de directiva de la comunidad estén configuradas correctamente.
user@ToR21> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 198.51.100.11/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Compruebe que las instancias de enrutamiento EVPN-VXLAN para cada red virtual estén configuradas correctamente.
user@ToR21> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.90; instance-type virtual-switch; interface ge-1/0/6.0; interface ae0.0; route-distinguisher 198.51.100.11:1; vrf-target target:1:3; protocols { evpn { traceoptions { file TOR21-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }
Verificación de la configuración de ToR22
Propósito
Compruebe que ToR22 esté configurado correctamente.
Acción
Verifique que las interfaces del sistema lógico y los dominios de puente en los dispositivos CE5 y CE6 estén configurados correctamente para habilitar la conectividad de capa 2 y controlar el tráfico entre VXLAN.
user@ToR22> show configuration logical-systems CE-5 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host 5"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { unit 0 { description "CONNECTED TO ToR21"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } user@ToR22> show configuration logical-systems CE-6 { interfaces { ge-1/1/6 { unit 0 { description "CONNECTED TO ToR22"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/9 { unit 0 { description "CONNECTED TO Host 6"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
Compruebe que las interfaces y las opciones de rastreo en ToR22 estén configuradas correctamente para habilitar la conectividad subyacente con otros ToR y dispositivos de puerta de enlace y borde WAN.
user@ToR22>show configuration interfaces traceoptions { file ToR22-DCD.log size 10m; flag all; } xe-0/0/0 { unit 0 { description "CONNECTED TO MX22"; family inet { address 192.168.11.2/24; } } } ge-1/0/0 { description "CONNECTED TO ToR21"; gigether-options { 802.3ad ae1; } } ge-1/0/6 { unit 0 { description "CONNECTED TO CE-6"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/0/7 { description "CONNECTED TO ToR22"; gigether-options { 802.3ad ae1; } } ge-1/1/0 { unit 0 { description "CONNECTED TO MX21"; family inet { address 192.168.8.2/24; } } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR21"; family inet { address 192.168.12.2/24; } } } ge-1/1/7 { description "CONNECTED TO CE-5"; gigether-options { 802.3ad ae0; } } ae0 { esi { 00:44:44:44:44:44:44:44:44:44; all-active; } aggregated-ether-options { lacp { active; periodic fast; system-id 22:22:22:22:22:22; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { aggregated-ether-options { lacp { active; periodic fast; system-id 22:22:22:22:22:22; } } } lo0 { unit 92 { family inet { address 198.51.100.12/32; } } }
Compruebe que las opciones de enrutamiento y equilibrio de carga estén configuradas correctamente.
user@ToR22> show configuration routing-options router-id 198.51.100.12; autonomous-system 64700; forwarding-table { export evpn-pplb; }
Compruebe que los protocolos de superposición y subyacente de BGP externo (EBGP) y las propiedades de aprendizaje y reenvío de direcciones de capa 2 estén configurados correctamente.
user@ToR22> show configuration protocols bgp { export TEST; local-as 64700; group MX21 { type external; local-address 192.168.8.2; export [ LO TEST ]; peer-as 64800; local-as 64700; neighbor 192.168.8.1 { family inet { unicast; } } } group MX22 { type external; local-address 192.168.11.2; export [ LO TEST ]; peer-as 64900; local-as 64700; neighbor 192.168.11.1 { family inet { unicast; } } } group ToR21 { type external; local-address 192.168.12.2; export [ LO TEST ]; peer-as 64600; local-as 64700; neighbor 192.168.12.1 { family inet { unicast; } } } group MX21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.12; peer-as 64800; local-as 64700; neighbor 198.51.100.21 { family evpn { signaling; } } } group MX22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.12; peer-as 64900; local-as 64700; neighbor 198.51.100.22 { family evpn { signaling; } } } group ToR21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.12; peer-as 64600; local-as 64700; neighbor 198.51.100.11 { family evpn { signaling; } } } } l2-learning { traceoptions { file TOR22-L2ALD.log size 10m; level all; flag all; } }
Compruebe que las directivas de enrutamiento para la dirección de circuito cerrado, el equilibrio de carga y las directivas TEST y las opciones de directiva de la comunidad estén configuradas correctamente.
user@ToR22> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 198.51.100.12/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Compruebe que las instancias de enrutamiento EVPN-VXLAN para cada red virtual estén configuradas correctamente.
user@ToR22> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.92; instance-type virtual-switch; interface ge-1/0/6.0; interface ae0.0; route-distinguisher 198.51.100.12:1; vrf-target target:1:3; protocols { evpn { traceoptions { file TOR22-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }