EN ESTA PÁGINA
Ejemplo: Interconexión de redes del centro de datos EVPN-VXLAN a través de una WAN que ejecuta MPLS basado en EVPN
En este ejemplo, se muestra cómo interconectar las redes del centro de datos EVPN-VXLAN a través de una WAN que ejecuta EVPN-MPLS para aprovechar las ventajas de EVPN como solución de interconexión del centro de datos (DCI).
Requisitos
En este ejemplo, se utilizan los siguientes componentes de hardware y software:
Cuatro enrutadores de la serie MX de Juniper Networks que se configurarán como puertas de enlace de centro de datos y enrutadores de borde WAN.
Cuatro enrutadores de la serie MX de Juniper Networks que se configurarán como enrutadores de la parte superior del rack (ToR).
Seis dispositivos de borde de cliente (CE).
Seis dispositivos host conectados a cada dispositivo CE que tiene la capacidad de configurar varias VLAN.
Un enrutador de proveedor (P) forma parte de la red WAN EVPN-MPLS.
Junos OS versión 17.2 o posterior.
Visión general
Puede interconectar diferentes redes de centros de datos que ejecutan VPN Ethernet (EVPN) con encapsulación de LAN extensible virtual (VXLAN) a través de una WAN que ejecuta EVPN basado en MPLS mediante la interfaz de túnel lógico (lt-).
La Figura 1 ilustra la interconexión de redes de centros de datos que ejecutan EVPN con encapsulación VXLAN a través de una WAN que ejecuta EVPN basado en MPLS. A efectos de este ejemplo, los enrutadores serie MX que actúan como puertas de enlace de centro de datos y como enrutadores de borde WAN se denominan MX11, MX12, MX21 y MX22. Los enrutadores serie MX que actúan como enrutadores de la parte superior del rack (ToR) se denominan ToR11, ToR12, ToR21 y ToR22. Los dispositivos de borde del cliente (CE) conectados a la red del centro de datos 1 (DC1) se denominan CE1, CE2 y CE3. Los dispositivos de borde del cliente (CE) conectados a la red del centro de datos 2 (DC2) se denominan CE4, CE5 y CE6. Los dispositivos host conectados a cada dispositivo CE deberían poder configurar varias VLAN de host. El enrutador del proveedor de WAN se denomina P.
Los dispositivos CE forman parte del sistema lógico de los dispositivos ToR.

Para los enrutadores de la serie MX que actúan como puertas de enlace de centro de datos y enrutadores de borde WAN, configure la siguiente información:
Interfaces IRB, direcciones de puerta de enlace virtual e interfaces lógicas de circuito cerrado.
BGP externo multiprotocolo (MP-EBGP) subyacente conectividad entre puerta de enlace y enrutadores ToR, EVPN como protocolo de señalización.
Políticas de enrutamiento para permitir rutas específicas en las tablas de conmutadores virtuales.
Instancias de enrutamiento (VRF de capa 3) para cada red virtual, incluyendo un distinguidor de ruta único y un valor de destino vrf.
Instancias de conmutador virtual (MAC-VRF de capa 2) para cada red virtual, la interfaz de origen de VTEP (siempre lo0.0), el diferenciador de ruta y la política de importación de vrf.
Protocolo EVPN, método de encapsulación, lista VNI y método de reenvío de tráfico BUM para cada conmutador virtual.
Dominio de puente dentro de cada conmutador virtual que asigna VNI A IDENTIFICADORes de VLAN, una interfaz IRB (capa 3) y el método de reenvío BUM.
Para los enrutadores de la serie MX que actúan como enrutadores de la parte superior del bastidor (ToR), configure la siguiente información:
Interfaces orientadas al host con VLAN, IDs de VLAN e interfaces lógicas de circuito cerrado.
Grupo de agregación de vínculos habilitado para el Protocolo de control de agregación de vínculos (LACP), ID de segmento Ethernet (ESI) y modo totalmente activo.
El BGP externo multiprotocolo (MP-EBGP) se superpone entre los enrutadores ToR y puerta de enlace mediante el uso de EVPN como protocolo de señalización.
EVPN con VXLAN como método de encapsulación, lista vni extendida, modo de multidifusión y destinos de ruta para cada VNI.
Política de Vrf-imp, interfaz de origen vtep, diferenciador de ruta, e información de destino y de importación de vrf.
VLAN, con IDs de VLAN asignados a VNIs de importancia global.
Puede establecer la dirección de puerta de enlace virtual como la dirección de puerta de enlace IPv4 o IPv6 predeterminada para hosts finales (máquinas virtuales o servidores).
Configuración
- Configuración rápida de CLI
- Configuración de ToR11
- Configuración de ToR12
- Configuración de puerta de enlace del centro de datos y enrutador de borde WAN 1 (MX11)
- Configuración de puerta de enlace de centro de datos y enrutador de borde WAN 2 (MX12)
- Configuración de la puerta de enlace del centro de datos y el enrutador de borde 3 de WAN (MX21)
- Configuración de puerta de enlace de centro de datos y enrutador de borde WAN 4 (MX22)
- Configuración de ToR21
- Configuración de ToR22
Configuración rápida de CLI
Para configurar rápidamente este ejemplo, copie los siguientes comandos, péguelos en un archivo de texto, elimine los saltos de línea, cambie los detalles necesarios para que coincidan con su configuración de red y, luego, copie y pegue los comandos en la CLI en el [edit]
nivel de jerarquía.
ToR11
set system host-name ToR11 set logical-systems CE-2 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host-2" set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-2 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR11" set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-2 bridge-domains BD-1 domain-type bridge set logical-systems CE-2 bridge-domains BD-1 vlan-id 1 set logical-systems CE-2 bridge-domains BD-2 domain-type bridge set logical-systems CE-2 bridge-domains BD-2 vlan-id 2 set logical-systems CE-2 bridge-domains BD-3 domain-type bridge set logical-systems CE-2 bridge-domains BD-3 vlan-id 3 set logical-systems CE-2 bridge-domains BD-4 domain-type bridge set logical-systems CE-2 bridge-domains BD-4 vlan-id 4 set logical-systems CE-2 bridge-domains BD-5 domain-type bridge set logical-systems CE-2 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 1 set interfaces traceoptions file R0-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces ge-1/0/5 unit 0 description "CONNECTED TO MX–12" set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.1/24 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-2" set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/1/0 description "CONNECTED TO CE-1" set interfaces ge-1/1/0 gigether-options 802.3ad ae0 set interfaces ge-1/1/1 unit 0 description "CONNECTED TO MX–11" set interfaces ge-1/1/1 unit 0 family inet address 192.168.3.1/24 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR12" set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.1/24 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces lo0 unit 81 family inet address 192.0.2.11/32 set routing-options router-id 192.0.2.11 set routing-options autonomous-system 100 set routing-options forwarding-table export evpn-pplb set protocols bgp local-as 100 set protocols bgp group MX11 type external set protocols bgp group MX11 local-address 192.168.3.1 set protocols bgp group MX11 export LO set protocols bgp group MX11 export TEST set protocols bgp group MX11 peer-as 400 set protocols bgp group MX11 neighbor 192.168.3.2 family inet unicast set protocols bgp group MX12 type external set protocols bgp group MX12 local-address 192.168.4.1 set protocols bgp group MX12 export LO set protocols bgp group MX12 export TEST set protocols bgp group MX12 peer-as 500 set protocols bgp group MX12 neighbor 192.168.4.2 family inet unicast set protocols bgp group ToR12 type external set protocols bgp group ToR12 local-address 192.168.2.1 set protocols bgp group ToR12 export LO set protocols bgp group ToR12 export TEST set protocols bgp group ToR12 peer-as 200 set protocols bgp group ToR12 local-as 100 set protocols bgp group ToR12 neighbor 192.168.2.2 family inet unicast set protocols bgp group MX11-EVPN type external set protocols bgp group MX11-EVPN multihop ttl 2 set protocols bgp group MX11-EVPN multihop no-nexthop-change set protocols bgp group MX11-EVPN local-address 192.0.2.11 set protocols bgp group MX11-EVPN export TEST set protocols bgp group MX11-EVPN peer-as 400 set protocols bgp group MX11-EVPN local-as 100 set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling set protocols bgp group MX12-EVPN type external set protocols bgp group MX12-EVPN multihop ttl 2 set protocols bgp group MX12-EVPN multihop no-nexthop-change set protocols bgp group MX12-EVPN local-address 192.0.2.11 set protocols bgp group MX12-EVPN export TEST set protocols bgp group MX12-EVPN peer-as 500 set protocols bgp group MX12-EVPN local-as 100 set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling set protocols bgp group ToR12-EVPN type external set protocols bgp group ToR12-EVPN multihop ttl 2 set protocols bgp group ToR12-EVPN multihop no-nexthop-change set protocols bgp group ToR12-EVPN local-address 192.0.2.11 set protocols bgp group ToR12-EVPN export TEST set protocols bgp group ToR12-EVPN peer-as 200 set protocols bgp group ToR12-EVPN local-as 100 set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling set protocols l2-learning traceoptions file TOR11-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 192.0.2.11/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.81 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.11:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR11-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
ToR12
set system host-name ToR12 set logical-systems CE-1 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 1" set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-1 interfaces ae1 unit 0 description "CONNECTED TO ToR12" set logical-systems CE-1 interfaces ae1 unit 0 family bridge interface-mode trunk set logical-systems CE-1 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-1 bridge-domains BD-1 domain-type bridge set logical-systems CE-1 bridge-domains BD-1 vlan-id 1 set logical-systems CE-1 bridge-domains BD-2 domain-type bridge set logical-systems CE-1 bridge-domains BD-2 vlan-id 2 set logical-systems CE-1 bridge-domains BD-3 domain-type bridge set logical-systems CE-1 bridge-domains BD-3 vlan-id 3 set logical-systems CE-1 bridge-domains BD-4 domain-type bridge set logical-systems CE-1 bridge-domains BD-4 vlan-id 4 set logical-systems CE-1 bridge-domains BD-5 domain-type bridge set logical-systems CE-1 bridge-domains BD-5 vlan-id 5 set logical-systems CE-3 interfaces ge-1/1/7 unit 0 description "CONNECTED TO ToR12" set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge interface-mode trunk set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-3 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 3" set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-3 bridge-domains BD-1 domain-type bridge set logical-systems CE-3 bridge-domains BD-1 vlan-id 1 set logical-systems CE-3 bridge-domains BD-2 domain-type bridge set logical-systems CE-3 bridge-domains BD-2 vlan-id 2 set logical-systems CE-3 bridge-domains BD-3 domain-type bridge set logical-systems CE-3 bridge-domains BD-3 vlan-id 3 set logical-systems CE-3 bridge-domains BD-4 domain-type bridge set logical-systems CE-3 bridge-domains BD-4 vlan-id 4 set logical-systems CE-3 bridge-domains BD-5 domain-type bridge set logical-systems CE-3 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 2 set interfaces traceoptions file R1-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX–11" set interfaces ge-1/0/0 unit 0 family inet address 192.168.6.1/24 set interfaces ge-1/0/4 unit 0 description "CONNECTED TO MX12" set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.1/24 set interfaces ge-1/0/6 description "CONNECTED TO CE-1" set interfaces ge-1/0/6 gigether-options 802.3ad ae0 set interfaces ge-1/0/7 unit 0 description "CONNECTED TO CE-3" set interfaces ge-1/0/7 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/7 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/1/0 description "CONNECTED TO ToR11" set interfaces ge-1/1/0 gigether-options 802.3ad ae1 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR11" set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.2/24 set interfaces ge-1/1/6 description "CONNECTED TO ToR12" set interfaces ge-1/1/6 gigether-options 802.3ad ae1 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options lacp periodic fast set interfaces lo0 unit 82 family inet address 192.0.2.12/32 set routing-options router-id 192.0.2.12 set routing-options autonomous-system 200 set routing-options forwarding-table export evpn-pplb set protocols bgp local-as 200 set protocols bgp group MX11 type external set protocols bgp group MX11 local-address 192.168.6.1 set protocols bgp group MX11 export LO set protocols bgp group MX11 export TEST set protocols bgp group MX11 peer-as 400 set protocols bgp group MX11 local-as 200 set protocols bgp group MX11 neighbor 192.168.6.2 family inet unicast set protocols bgp group MX12 type external set protocols bgp group MX12 local-address 192.168.5.1 set protocols bgp group MX12 export LO set protocols bgp group MX12 export TEST set protocols bgp group MX12 peer-as 500 set protocols bgp group MX12 local-as 200 set protocols bgp group MX12 neighbor 192.168.5.2 family inet unicast set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.2.2 set protocols bgp group ToR11 export LO set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 peer-as 100 set protocols bgp group ToR11 local-as 200 set protocols bgp group ToR11 neighbor 192.168.2.1 family inet unicast set protocols bgp group MX11-EVPN type external set protocols bgp group MX11-EVPN multihop ttl 2 set protocols bgp group MX11-EVPN multihop no-nexthop-change set protocols bgp group MX11-EVPN local-address 192.0.2.12 set protocols bgp group MX11-EVPN export TEST set protocols bgp group MX11-EVPN peer-as 400 set protocols bgp group MX11-EVPN local-as 200 set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling set protocols bgp group MX12-EVPN type external set protocols bgp group MX12-EVPN multihop ttl 2 set protocols bgp group MX12-EVPN multihop no-nexthop-change set protocols bgp group MX12-EVPN local-address 192.0.2.12 set protocols bgp group MX12-EVPN export TEST set protocols bgp group MX12-EVPN peer-as 500 set protocols bgp group MX12-EVPN local-as 200 set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.12 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 100 set protocols bgp group ToR11-EVPN local-as 200 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN export TEST set protocols l2-learning traceoptions file TOR12-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 192.0.2.12/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.82 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/7.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.12:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR12-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Puerta de enlace de centro de datos y enrutador de borde WAN 1 (MX11)
set system host-name MX11 set interfaces ge-5/1/0 unit 0 description "CONNECTED TO MX21" set interfaces ge-5/1/0 unit 0 family inet address 192.168.7.1/24 set interfaces lt-5/1/0 esi 00:22:22:22:22:22:22:22:22:22 set interfaces lt-5/1/0 esi all-active set interfaces lt-5/1/0 unit 0 peer-unit 1 set interfaces lt-5/1/0 unit 0 family bridge interface-mode trunk set interfaces lt-5/1/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-5/1/0 unit 1 peer-unit 0 set interfaces lt-5/1/0 unit 1 family bridge interface-mode trunk set interfaces lt-5/1/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-5/1/1 unit 0 description "CONNECTED TO ToR11" set interfaces ge-5/1/1 unit 0 family inet address 192.168.3.2/24 set interfaces ge-5/1/8 unit 0 description "CONNECTED TO ToR12" set interfaces ge-5/1/8 unit 0 family inet address 192.168.6.2/24 set interfaces ge-5/1/9 unit 0 description "CONNECTED TO P" set interfaces ge-5/1/9 unit 0 family inet address 203.0.1.1/24 set interfaces ge-5/1/9 unit 0 family mpls set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.12/24 virtual-gateway-address 10.11.1.10 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.12/24 virtual-gateway-address 10.12.1.10 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.12/24 virtual-gateway-address 10.13.1.10 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.12/24 virtual-gateway-address 10.14.1.10 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.12/24 virtual-gateway-address 10.15.1.10 set interfaces lo0 unit 84 family inet address 192.0.2.21/32 set interfaces lo0 unit 84 family mpls set routing-options router-id 192.0.2.21 set routing-options autonomous-system 300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX11-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX11-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX11-TO-MX21 to 198.51.100.21 set protocols mpls label-switched-path MX11-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 192.0.2.21 set protocols bgp local-as 300 set protocols bgp group INT type internal set protocols bgp group INT local-address 192.0.2.21 set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.3.2 set protocols bgp group ToR11 import TEST set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 export LO set protocols bgp group ToR11 peer-as 100 set protocols bgp group ToR11 local-as 400 set protocols bgp group ToR11 neighbor 192.168.3.1 family inet unicast set protocols bgp group ToR12 type external set protocols bgp group ToR12 local-address 192.168.6.2 set protocols bgp group ToR12 export TEST set protocols bgp group ToR12 export LO set protocols bgp group ToR12 peer-as 200 set protocols bgp group ToR12 local-as 400 set protocols bgp group ToR12 neighbor 192.168.6.1 family inet unicast set protocols bgp group MX12 type external set protocols bgp group MX12 local-address 192.168.7.1 set protocols bgp group MX12 export TEST set protocols bgp group MX12 export LO set protocols bgp group MX12 peer-as 500 set protocols bgp group MX12 local-as 400 set protocols bgp group MX12 neighbor 192.168.7.2 family inet unicast set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.21 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 100 set protocols bgp group ToR11-EVPN local-as 400 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN type external set protocols bgp group ToR12-EVPN multihop ttl 2 set protocols bgp group ToR12-EVPN multihop no-nexthop-change set protocols bgp group ToR12-EVPN local-address 192.0.2.21 set protocols bgp group ToR12-EVPN export TEST set protocols bgp group ToR12-EVPN peer-as 200 set protocols bgp group ToR12-EVPN local-as 400 set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling set protocols bgp group MX12-EVPN type external set protocols bgp group MX12-EVPN multihop ttl 2 set protocols bgp group MX12-EVPN multihop no-nexthop-change set protocols bgp group MX12-EVPN local-address 192.0.2.21 set protocols bgp group MX12-EVPN export TEST set protocols bgp group MX12-EVPN peer-as 500 set protocols bgp group MX12-EVPN local-as 400 set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling set protocols bgp group MX11-EVPN export TEST set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-5/1/9.0 set protocols ospf area 0.0.0.0 interface lo0.84 passive set protocols l2-learning traceoptions file MX11-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 192.0.2.21/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 192.0.2.21/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-5/1/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.21:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX11-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.84 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-5/1/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.21:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX11-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
Puerta de enlace de centro de datos y enrutador de borde WAN 2 (MX12)
set system host-name MX12 set logical-systems P interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX21" set logical-systems P interfaces ge-1/0/0 unit 0 family inet address 203.0.4.2/24 set logical-systems P interfaces ge-1/0/0 unit 0 family mpls set logical-systems P interfaces ge-1/0/2 unit 0 description "CONNECTED TO MX22" set logical-systems P interfaces ge-1/0/2 unit 0 family inet address 203.0.3.2/24 set logical-systems P interfaces ge-1/0/2 unit 0 family mpls set logical-systems P interfaces ge-1/1/1 unit 0 description "CONNECTED TO MX11" set logical-systems P interfaces ge-1/1/1 unit 0 family inet address 203.0.1.2/24 set logical-systems P interfaces ge-1/1/1 unit 0 family mpls set logical-systems P interfaces ge-1/1/6 unit 0 description "CONNECTED TO MX12" set logical-systems P interfaces ge-1/1/6 unit 0 family inet address 203.0.2.2/24 set logical-systems P interfaces ge-1/1/6 unit 0 family mpls set logical-systems P interfaces lo0 unit 86 family inet address 203.0.113.1/32 set logical-systems P interfaces lo0 unit 86 family mpls set logical-systems P protocols rsvp interface all set logical-systems P protocols mpls label-switched-path P-TO-MX11 from 203.0.113.1 set logical-systems P protocols mpls label-switched-path P-TO-MX11 to 192.0.2.21 set logical-systems P protocols mpls label-switched-path P-TO-MX12 to 192.0.2.22 set logical-systems P protocols mpls label-switched-path P-TO-MX21 to 198.51.100.21 set logical-systems P protocols mpls label-switched-path P-TO-MX22 to 198.51.100.22 set logical-systems P protocols mpls interface all set logical-systems P protocols bgp local-address 203.0.113.1 set logical-systems P protocols bgp local-as 300 set logical-systems P protocols bgp group INT type internal set logical-systems P protocols bgp group INT import BLOCK-VXLAN-ROUTES-FROM-CORE set logical-systems P protocols bgp group INT family evpn signaling set logical-systems P protocols bgp group INT cluster 203.0.113.1 set logical-systems P protocols bgp group INT neighbor 192.0.2.21 set logical-systems P protocols bgp group INT neighbor 192.0.2.22 set logical-systems P protocols bgp group INT neighbor 198.51.100.21 set logical-systems P protocols bgp group INT neighbor 198.51.100.22 set logical-systems P protocols ospf traffic-engineering set logical-systems P protocols ospf area 0.0.0.0 interface all set logical-systems P protocols ospf area 0.0.0.0 interface lo0.86 set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from protocol bgp set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from community RT-CORE set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 then accept set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from protocol bgp set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from community RT-DC1 set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 then reject set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from protocol bgp set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from community RT-DC2 set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 then reject set logical-systems P policy-options community RT-CORE members target:1:2 set logical-systems P policy-options community RT-DC1 members target:1:1 set logical-systems P policy-options community RT-DC2 members target:1:3 set logical-systems P routing-options router-id 203.0.113.1 set logical-systems P routing-options autonomous-system 300 set chassis fpc 1 pic 0 tunnel-services set chassis network-services enhanced-ip set interfaces traceoptions file R3-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces lt-1/0/0 esi 00:22:22:22:22:22:22:22:22:22 set interfaces lt-1/0/0 esi all-active set interfaces lt-1/0/0 unit 0 peer-unit 1 set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-1/0/0 unit 1 peer-unit 0 set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-1/0/4 unit 0 description "CONNECTED TO ToR12" set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.2/24 set interfaces ge-1/0/5 unit 0 description "CONNECTED TO TOR11" set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.2/24 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO P" set interfaces ge-1/0/6 unit 0 family inet address 203.0.2.1/24 set interfaces ge-1/0/6 unit 0 family mpls set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX11" set interfaces ge-1/1/0 unit 0 family inet address 192.168.7.2/24 set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.13/24 virtual-gateway-address 10.11.1.10 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.13/24 virtual-gateway-address 10.12.1.10 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.13/24 virtual-gateway-address 10.13.1.10 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.13/24 virtual-gateway-address 10.14.1.10 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.13/24 virtual-gateway-address 10.15.1.10 set interfaces lo0 unit 85 family inet address 192.0.2.22/32 set interfaces lo0 unit 85 family mpls set routing-options router-id 192.0.2.22 set routing-options autonomous-system 300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX12-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX12-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX12-TO-MX21 to 198.51.100.21 set protocols mpls label-switched-path MX12-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 192.0.2.22 set protocols bgp local-as 300 set protocols bgp group INT type internal set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.4.2 set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 export LO set protocols bgp group ToR11 peer-as 100 set protocols bgp group ToR11 local-as 500 set protocols bgp group ToR11 neighbor 192.168.4.1 family inet unicast set protocols bgp group ToR12 type external set protocols bgp group ToR12 local-address 192.168.5.2 set protocols bgp group ToR12 export TEST set protocols bgp group ToR12 export LO set protocols bgp group ToR12 peer-as 200 set protocols bgp group ToR12 local-as 500 set protocols bgp group ToR12 neighbor 192.168.5.1 family inet unicast set protocols bgp group MX11 type external set protocols bgp group MX11 local-address 192.168.7.2 set protocols bgp group MX11 export TEST set protocols bgp group MX11 export LO set protocols bgp group MX11 peer-as 400 set protocols bgp group MX11 local-as 500 set protocols bgp group MX11 neighbor 192.168.7.1 family inet unicast set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.22 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 100 set protocols bgp group ToR11-EVPN local-as 500 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN type external set protocols bgp group ToR12-EVPN multihop ttl 2 set protocols bgp group ToR12-EVPN multihop no-nexthop-change set protocols bgp group ToR12-EVPN local-address 192.0.2.22 set protocols bgp group ToR12-EVPN export TEST set protocols bgp group ToR12-EVPN peer-as 200 set protocols bgp group ToR12-EVPN local-as 500 set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling set protocols bgp group MX11-EVPN type external set protocols bgp group MX11-EVPN multihop ttl 2 set protocols bgp group MX11-EVPN multihop no-nexthop-change set protocols bgp group MX11-EVPN local-address 192.0.2.22 set protocols bgp group MX11-EVPN export TEST set protocols bgp group MX11-EVPN peer-as 400 set protocols bgp group MX11-EVPN local-as 500 set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling set protocols bgp group MX12-EVPN export TEST set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-1/0/6.0 set protocols ospf area 0.0.0.0 interface lo0.85 passive set protocols l2-learning traceoptions file MX12-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 192.0.2.22/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 192.0.2.22/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST from protocol bgp set policy-options policy-statement TEST from protocol evpn set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.22:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX12-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.85 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.22:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX12-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-4 set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
Puerta de enlace del centro de datos y enrutador de borde 3 de WAN (MX21)
set system host-name MX21 set interfaces ge-3/0/0 unit 0 description "CONNECTED TO MX21" set interfaces ge-3/0/0 unit 0 family inet address 192.168.13.1/24 set interfaces ge-3/1/0 unit 0 description "CONNECTED TO ToR22" set interfaces ge-3/1/0 unit 0 family inet address 192.168.8.1/24 set interfaces ge-5/0/0 unit 0 description "CONNECTED TO P" set interfaces ge-5/0/0 unit 0 family inet address 203.0.4.1/24 set interfaces ge-5/0/0 unit 0 family mpls set interfaces lt-5/0/0 esi 00:33:33:33:33:33:33:33:33:33 set interfaces lt-5/0/0 esi all-active set interfaces lt-5/0/0 unit 0 peer-unit 1 set interfaces lt-5/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-5/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-5/0/0 unit 1 peer-unit 0 set interfaces lt-5/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-5/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-5/0/1 unit 0 description "CONNECTED TO ToR21" set interfaces ge-5/0/1 unit 0 family inet address 192.168.9.1/24 set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.14/24 virtual-gateway-address 10.11.1.11 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.14/24 virtual-gateway-address 10.12.1.11 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.14/24 virtual-gateway-address 10.13.1.11 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.14/24 virtual-gateway-address 10.14.1.11 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.14/24 virtual-gateway-address 10.15.1.11 set interfaces lo0 unit 87 family inet address 198.51.100.21/32 set interfaces lo0 unit 87 family mpls set routing-options router-id 198.51.100.21 set routing-options autonomous-system 300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX21-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX21-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX21-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX21-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 198.51.100.21 set protocols bgp export TEST set protocols bgp local-as 300 set protocols bgp group INT type internal set protocols bgp group INT local-address 198.51.100.21 set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST1 set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.9.1 set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 export LO set protocols bgp group ToR21 peer-as 600 set protocols bgp group ToR21 local-as 800 set protocols bgp group ToR21 neighbor 192.168.9.2 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 192.168.8.1 set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 export LO set protocols bgp group ToR22 peer-as 700 set protocols bgp group ToR22 local-as 800 set protocols bgp group ToR22 neighbor 192.168.8.2 family inet unicast set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 192.168.13.1 set protocols bgp group MX22 export TEST set protocols bgp group MX22 export LO set protocols bgp group MX22 peer-as 900 set protocols bgp group MX22 local-as 800 set protocols bgp group MX22 neighbor 10.115.15.2 family inet unicast set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.21 set protocols bgp group ToR21-EVPN peer-as 600 set protocols bgp group ToR21-EVPN local-as 800 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.21 set protocols bgp group ToR22-EVPN peer-as 700 set protocols bgp group ToR22-EVPN local-as 800 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.21 set protocols bgp group MX22-EVPN peer-as 900 set protocols bgp group MX22-EVPN local-as 800 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-5/0/0.0 set protocols ospf area 0.0.0.0 interface lo0.87 passive set protocols l2-learning traceoptions file MX21-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 198.51.100.21/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement TEST1 term 1 from protocol bgp set policy-options policy-statement TEST1 term 1 from external set policy-options policy-statement TEST1 term 1 then reject set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-5/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.21:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX21-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.87 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-5/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.21:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX21-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
Puerta de enlace de centro de datos y enrutador de borde WAN 4 (MX22)
set system host-name MX22 set interfaces xe-0/0/0 unit 0 description "CONNECTED TO ToR22" set interfaces xe-0/0/0 unit 0 family inet address 192.168.11.1/24 set interfaces xe-0/0/1 unit 0 description "CONNECTED TO ToR21" set interfaces xe-0/0/1 unit 0 family inet address 192.168.10.1/24 set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX21" set interfaces ge-1/0/0 unit 0 family inet address 10.115.15.2/24 set interfaces lt-1/0/0 esi 00:33:33:33:33:33:33:33:33:33 set interfaces lt-1/0/0 esi all-active set interfaces lt-1/0/0 unit 0 peer-unit 1 set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-1/0/0 unit 1 peer-unit 0 set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces ge-1/0/2 unit 0 description "CONNECTED TO P" set interfaces ge-1/0/2 unit 0 family inet address 203.0.3.1/24 set interfaces ge-1/0/2 unit 0 family mpls set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.15/24 virtual-gateway-address 10.11.1.11 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.15/24 virtual-gateway-address 10.12.1.11 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.15/24 virtual-gateway-address 10.13.1.11 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.15/24 virtual-gateway-address 10.14.1.11 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.15/24 virtual-gateway-address 10.15.1.11 set interfaces lo0 unit 88 family inet address 198.51.100.22/32 set routing-options router-id 198.51.100.22 set routing-options autonomous-system 300 set routing-options forwarding-table export evpn-pplb set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable set protocols mpls label-switched-path MX22-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX22-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX22-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX22-TO-MX21 to 198.51.100.21 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols bgp local-address 198.51.100.22 set protocols bgp export TEST set protocols bgp local-as 300 set protocols bgp group INT type internal set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST1 set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.10.1 set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 export LO set protocols bgp group ToR21 peer-as 600 set protocols bgp group ToR21 local-as 900 set protocols bgp group ToR21 neighbor 10.102.2.1 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 192.168.11.1 set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 export LO set protocols bgp group ToR22 peer-as 700 set protocols bgp group ToR22 local-as 900 set protocols bgp group ToR22 neighbor 192.168.11.2 family inet unicast set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 10.115.15.2 set protocols bgp group MX21 export TEST set protocols bgp group MX21 export LO set protocols bgp group MX21 peer-as 800 set protocols bgp group MX21 local-as 900 set protocols bgp group MX21 neighbor 192.168.13.1 family inet unicast set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.22 set protocols bgp group ToR21-EVPN peer-as 600 set protocols bgp group ToR21-EVPN local-as 900 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.22 set protocols bgp group ToR22-EVPN peer-as 700 set protocols bgp group ToR22-EVPN local-as 900 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.22 set protocols bgp group MX21-EVPN peer-as 800 set protocols bgp group MX21-EVPN local-as 900 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-1/0/2.0 set protocols ospf area 0.0.0.0 interface lo0.88 passive set protocols l2-learning traceoptions file MX22-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 198.51.100.22/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement TEST1 term 1 from protocol bgp set policy-options policy-statement TEST1 term 1 from external set policy-options policy-statement TEST1 term 1 then reject set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.22:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX22-EVPN-MPLS-1.log set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.88 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.22:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX22-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10
ToR–21
set system host-name ToR21 set logical-systems CE-4 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 4" set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-4 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR21" set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-4 bridge-domains BD-1 domain-type bridge set logical-systems CE-4 bridge-domains BD-1 vlan-id 1 set logical-systems CE-4 bridge-domains BD-2 domain-type bridge set logical-systems CE-4 bridge-domains BD-2 vlan-id 2 set logical-systems CE-4 bridge-domains BD-3 domain-type bridge set logical-systems CE-4 bridge-domains BD-3 vlan-id 3 set logical-systems CE-4 bridge-domains BD-4 domain-type bridge set logical-systems CE-4 bridge-domains BD-4 vlan-id 4 set logical-systems CE-4 bridge-domains BD-5 domain-type bridge set logical-systems CE-4 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 1 set interfaces traceoptions file R6-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces xe-0/0/0 unit 0 description "CONNECTED TO MX22" set interfaces xe-0/0/0 unit 0 family inet address 192.168.10.2/24 set interfaces ge-1/0/0 description "CONNECTED TO CE-5" set interfaces ge-1/0/0 gigether-options 802.3ad ae0 set interfaces ge-1/0/1 unit 0 description "CONNECTED TO MX21" set interfaces ge-1/0/1 unit 0 family inet address 192.168.101.1/24 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-4" set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR22" set interfaces ge-1/1/3 unit 0 family inet address 192.168.12.1/24 set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces lo0 unit 90 family inet address 198.51.100.11/32 set routing-options router-id 198.51.100.11 set routing-options autonomous-system 600 set routing-options forwarding-table export evpn-pplb set protocols bgp export TEST set protocols bgp local-as 600 set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 192.168.9.2 set protocols bgp group MX21 export LO set protocols bgp group MX21 export TEST set protocols bgp group MX21 peer-as 800 set protocols bgp group MX21 local-as 600 set protocols bgp group MX21 neighbor 192.168.9.1 family inet unicast set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 10.102.2.1 set protocols bgp group MX22 export LO set protocols bgp group MX22 export TEST set protocols bgp group MX22 peer-as 900 set protocols bgp group MX22 local-as 600 set protocols bgp group MX22 neighbor 192.168.10.1 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 10.105.5.1 set protocols bgp group ToR22 export LO set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 peer-as 700 set protocols bgp group ToR22 local-as 600 set protocols bgp group ToR22 neighbor 192.168.12.2 family inet unicast set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.11 set protocols bgp group MX21-EVPN peer-as 800 set protocols bgp group MX21-EVPN local-as 600 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.11 set protocols bgp group MX22-EVPN peer-as 900 set protocols bgp group MX22-EVPN local-as 600 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.11 set protocols bgp group ToR22-EVPN peer-as 700 set protocols bgp group ToR22-EVPN local-as 600 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols l2-learning traceoptions file TOR21-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 198.51.100.11/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.90 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.11:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR21-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
ToR–22
set system host-name ToR22 set logical-systems CE-5 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 5" set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-5 interfaces ae1 unit 0 description "CONNECTED TO ToR21" set logical-systems CE-5 interfaces ae1 unit 0 family bridge interface-mode trunk set logical-systems CE-5 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-5 bridge-domains BD-1 domain-type bridge set logical-systems CE-5 bridge-domains BD-1 vlan-id 1 set logical-systems CE-5 bridge-domains BD-2 domain-type bridge set logical-systems CE-5 bridge-domains BD-2 vlan-id 2 set logical-systems CE-5 bridge-domains BD-3 domain-type bridge set logical-systems CE-5 bridge-domains BD-3 vlan-id 3 set logical-systems CE-5 bridge-domains BD-4 domain-type bridge set logical-systems CE-5 bridge-domains BD-4 vlan-id 4 set logical-systems CE-5 bridge-domains BD-5 domain-type bridge set logical-systems CE-5 bridge-domains BD-5 vlan-id 5 set logical-systems CE-6 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR22" set logical-systems CE-6 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk set logical-systems CE-6 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-6 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 6" set logical-systems CE-6 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk set logical-systems CE-6 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 set logical-systems CE-6 bridge-domains BD-1 domain-type bridge set logical-systems CE-6 bridge-domains BD-1 vlan-id 1 set logical-systems CE-6 bridge-domains BD-2 domain-type bridge set logical-systems CE-6 bridge-domains BD-2 vlan-id 2 set logical-systems CE-6 bridge-domains BD-3 domain-type bridge set logical-systems CE-6 bridge-domains BD-3 vlan-id 3 set logical-systems CE-6 bridge-domains BD-4 domain-type bridge set logical-systems CE-6 bridge-domains BD-4 vlan-id 4 set logical-systems CE-6 bridge-domains BD-5 domain-type bridge set logical-systems CE-6 bridge-domains BD-5 vlan-id 5 set chassis aggregated-devices ethernet device-count 2 set interfaces traceoptions file R7-DCD.log set interfaces traceoptions file size 10m set interfaces traceoptions flag all set interfaces xe-0/0/0 unit 0 description "CONNECTED TO MX22" set interfaces xe-0/0/0 unit 0 family inet address 192.168.11.2/24 set interfaces ge-1/0/0 description "CONNECTED TO ToR21" set interfaces ge-1/0/0 gigether-options 802.3ad ae1 set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-6" set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-1/0/7 description "CONNECTED TO ToR22" set interfaces ge-1/0/7 gigether-options 802.3ad ae1 set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX21" set interfaces ge-1/1/0 unit 0 family inet address 192.168.8.2/24 set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR21" set interfaces ge-1/1/3 unit 0 family inet address 192.168.12.2/24 set interfaces ge-1/1/7 description "CONNECTED TO CE-5" set interfaces ge-1/1/7 gigether-options 802.3ad ae0 set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options lacp periodic fast set interfaces ae1 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces lo0 unit 92 family inet address 198.51.100.12/32 set routing-options router-id 198.51.100.12 set routing-options autonomous-system 700 set routing-options forwarding-table export evpn-pplb set protocols bgp export TEST set protocols bgp local-as 700 set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 192.168.8.2 set protocols bgp group MX21 export LO set protocols bgp group MX21 export TEST set protocols bgp group MX21 peer-as 800 set protocols bgp group MX21 local-as 700 set protocols bgp group MX21 neighbor 192.168.8.1 family inet unicast set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 192.168.11.2 set protocols bgp group MX22 export LO set protocols bgp group MX22 export TEST set protocols bgp group MX22 peer-as 900 set protocols bgp group MX22 local-as 700 set protocols bgp group MX22 neighbor 192.168.11.1 family inet unicast set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.12.2 set protocols bgp group ToR21 export LO set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 peer-as 600 set protocols bgp group ToR21 local-as 700 set protocols bgp group ToR21 neighbor 10.105.5.1 family inet unicast set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.12 set protocols bgp group MX21-EVPN peer-as 800 set protocols bgp group MX21-EVPN local-as 700 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.12 set protocols bgp group MX22-EVPN peer-as 900 set protocols bgp group MX22-EVPN local-as 700 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.12 set protocols bgp group ToR21-EVPN peer-as 600 set protocols bgp group ToR21-EVPN local-as 700 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols l2-learning traceoptions file TOR22-L2ALD.log set protocols l2-learning traceoptions file size 10m set protocols l2-learning traceoptions level all set protocols l2-learning traceoptions flag all set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 198.51.100.12/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.92 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.12:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR22-EVPN-VXLAN-1.log set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Configuración de ToR11
Procedimiento paso a paso
El siguiente ejemplo requiere que navegue por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración en la Guía del usuario de CLI.
Configure el enrutador MX como ToR11:
Establezca el nombre de host del sistema.
[edit] user@ToR11# set system host-name ToR11
Configure las interfaces y los dominios de puente en el dispositivo CE2 para habilitar la conectividad de capa 2.
[edit] user@ce2# set logical-systems CE-2 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 2" user@ce2# set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ce2# set logical-systems CE-2 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ce2# set logical-systems CE-2 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR11" user@ce2# set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk user@ce2# set logical-systems CE-2 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 user@ce2# set logical-systems CE-2 bridge-domains BD-1 domain-type bridge user@ce2# set logical-systems CE-2 bridge-domains BD-1 vlan-id 1 user@ce2# set logical-systems CE-2 bridge-domains BD-2 domain-type bridge user@ce2# set logical-systems CE-2 bridge-domains BD-2 vlan-id 2 user@ce2# set logical-systems CE-2 bridge-domains BD-3 domain-type bridge user@ce2# set logical-systems CE-2 bridge-domains BD-3 vlan-id 3 user@ce2# set logical-systems CE-2 bridge-domains BD-4 domain-type bridge user@ce2# set logical-systems CE-2 bridge-domains BD-4 vlan-id 4 user@ce2# set logical-systems CE-2 bridge-domains BD-5 domain-type bridge user@ce2# set logical-systems CE-2 bridge-domains BD-5 vlan-id 5
Configure las opciones de seguimiento para las interfaces para habilitar los registros de seguimiento.
[edit] user@ce2# set interfaces traceoptions file R0-DCD.log user@ce2# set interfaces traceoptions file size 10m user@ce2# set interfaces traceoptions flag all
Establezca el número de interfaces Ethernet agregadas.
[edit] user@ToR11# set chassis aggregated-devices ethernet device-count 1
Configure las interfaces en el dispositivo ToR11 para conectarse a los dispositivos MX12, CE-2, CE-1, ToR12 y MX11 para habilitar la conectividad subyacente.
[edit] user@ToR11# set interfaces ge-1/0/5 unit 0 description "CONNECTED TO MX12" user@ToR11# set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.1/24 user@ToR11# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-2" user@ToR11# set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk user@ToR11# set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 user@ToR11# set interfaces ge-1/1/0 description "CONNECTED TO CE-1" user@ToR11# set interfaces ge-1/1/0 gigether-options 802.3ad ae0 user@ToR11# set interfaces ge-1/1/1 unit 0 description "CONNECTED TO MX11" user@ToR11# set interfaces ge-1/1/1 unit 0 family inet address 192.168.3.1/24 user@ToR11# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR12" user@ToR11# set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.1/24
Configure una interfaz de grupo de agregación de vínculos (LACP) habilitada para el Protocolo de control de agregación de vínculos (LACP) hacia el dispositivo host final CE-1. El valor ESI es único a nivel mundial en todo el dominio de EVPN. La configuración totalmente activa permite que ToR11 y ToR12 reenvíen el tráfico hacia y desde los dispositivos CE, de modo que todos los vínculos CE se utilicen activamente.
[edit] user@ToR11# set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 user@ToR11# set interfaces ae0 esi all-active user@ToR11# set interfaces ae0 aggregated-ether-options lacp active user@ToR11# set interfaces ae0 aggregated-ether-options lacp periodic fast user@ToR11# set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 user@ToR11# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR11# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5
Configure las opciones de enrutamiento y dirección de interfaz de circuito cerrado.
[edit] user@ToR11# set interfaces lo0 unit 81 family inet address 192.0.2.11/32 user@ToR11# set routing-options router-id 192.0.2.11 user@ToR11# set routing-options autonomous-system 100
Configure el equilibrio de carga en ToR11.
[edit] user@ToR11# set routing-options forwarding-table export evpn-pplb
Configure una conectividad subyacente de BGP externo multiprotocolo (MP-EBGP) entre los enrutadores ToR (ToR11 y ToR12) y puerta de enlace (MX11 y MX12).
[edit] user@ToR11# set protocols bgp local-as 100 user@ToR11# set protocols bgp group MX11 type external user@ToR11# set protocols bgp group MX11 local-address 192.168.3.1 user@ToR11# set protocols bgp group MX11 export LO user@ToR11# set protocols bgp group MX11 export TEST user@ToR11# set protocols bgp group MX11 peer-as 400 user@ToR11# set protocols bgp group MX11 neighbor 192.168.3.2 family inet unicast user@ToR11# set protocols bgp group MX12 type external user@ToR11# set protocols bgp group MX12 local-address 192.168.4.1 user@ToR11# set protocols bgp group MX12 export LO user@ToR11# set protocols bgp group MX12 export TEST user@ToR11# set protocols bgp group MX12 peer-as 500 user@ToR11# set protocols bgp group MX12 neighbor 192.168.4.2 family inet unicast user@ToR11# set protocols bgp group ToR12 type external user@ToR11# set protocols bgp group ToR12 local-address 192.168.2.1 user@ToR11# set protocols bgp group ToR12 export LO user@ToR11# set protocols bgp group ToR12 export TEST user@ToR11# set protocols bgp group ToR12 peer-as 200 user@ToR11# set protocols bgp group ToR12 local-as 100 user@ToR11# set protocols bgp group ToR12 neighbor 192.168.2.2 family inet unicast
Configure una superposición de BGP externa multiprotocolo (MP-EBGP) entre los enrutadores ToR (ToR11 y ToR12) y puerta de enlace (MX11 y MX12), y establezca EVPN como protocolo de señalización.
Procedimiento paso a paso
Configure una superposición MP-EBGP para conectarse entre ToR11 y MX11 mediante la señalización de EVPN.
[edit] user@ToR11# set protocols bgp group MX11-EVPN type external user@ToR11# set protocols bgp group MX11-EVPN multihop ttl 2 user@ToR11# set protocols bgp group MX11-EVPN multihop no-nexthop-change user@ToR11# set protocols bgp group MX11-EVPN local-address 192.0.2.11 user@ToR11# set protocols bgp group MX11-EVPN export TEST user@ToR11# set protocols bgp group MX11-EVPN peer-as 400 user@ToR11# set protocols bgp group MX11-EVPN local-as 100 user@ToR11# set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling
Configure una superposición MP-EBGP para conectarse entre ToR11 y MX12 mediante la señalización de EVPN.
[edit] user@ToR11# set protocols bgp group MX12-EVPN type external user@ToR11# set protocols bgp group MX12-EVPN multihop ttl 2 user@ToR11# set protocols bgp group MX12-EVPN multihop no-nexthop-change user@ToR11# set protocols bgp group MX12-EVPN local-address 192.0.2.11 user@ToR11# set protocols bgp group MX12-EVPN export TEST user@ToR11# set protocols bgp group MX12-EVPN peer-as 500 user@ToR11# set protocols bgp group MX12-EVPN local-as 100 user@ToR11# set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling
Configure una superposición MP-EBGP para conectarse entre ToR11 y ToR12 mediante la señalización EVPN.
[edit] user@ToR11# set protocols bgp group ToR12-EVPN type external user@ToR11# set protocols bgp group ToR12-EVPN multihop ttl 2 user@ToR11# set protocols bgp group ToR12-EVPN multihop no-nexthop-change user@ToR11# set protocols bgp group ToR12-EVPN local-address 192.0.2.11 user@ToR11# set protocols bgp group ToR12-EVPN export TEST user@ToR11# set protocols bgp group ToR12-EVPN peer-as 200 user@ToR11# set protocols bgp group ToR12-EVPN local-as 100 user@ToR11# set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling
Configure las operaciones de seguimiento para rastrear todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@ToR11# set protocols l2-learning traceoptions file TOR11-L2ALD.log user@ToR11# set protocols l2-learning traceoptions file size 10m user@ToR11# set protocols l2-learning traceoptions level all user@ToR11# set protocols l2-learning traceoptions flag all
Configure las políticas de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
[edit] user@ToR11# set policy-options policy-statement LO term 1 from protocol direct user@ToR11# set policy-options policy-statement LO term 1 from route-filter 192.0.2.11/32 exact user@ToR11# set policy-options policy-statement LO term 1 then accept
Configure las opciones de política de comunidad.
[edit] user@ToR11# set policy-options community NO-EXPORT members no-advertise user@ToR11# set policy-options community NO-EXPORT members no-export user@ToR11# set policy-options community NO-EXPORT members no-export-subconfed
Aplique el equilibrio de carga.
[edit] user@ToR11# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR11# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR11# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure instancias de enrutamiento EVPN para cada red virtual. Defina la interfaz de origen de VTEP, el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNIDs a ID de VLAN e identifique el método de reenvío BUM.
[edit] user@ToR11# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.81 user@ToR11# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR11# set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 user@ToR11# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR11# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.11:1 user@ToR11# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR11-EVPN-VXLAN-1.log user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Configuración de ToR12
Procedimiento paso a paso
El siguiente ejemplo requiere que navegue por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración en la Guía del usuario de CLI.
Configure el enrutador MX ToR12:
Establezca el nombre de host del sistema.
[edit] user@ToR12# set system host-name ToR12
Configure las interfaces y los dominios de puente en el dispositivo CE-1 para habilitar la conectividad de capa 2.
[edit] user@ce1# set logical-systems CE-1 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 1" user@ce1# set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ce1# set logical-systems CE-1 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ce1# set logical-systems CE-1 interfaces ae1 unit 0 description "CONNECTED TO ToR12" user@ce1# set logical-systems CE-1 interfaces ae1 unit 0 family bridge interface-mode trunk user@ce1# set logical-systems CE-1 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 user@ce1# set logical-systems CE-1 bridge-domains BD-1 domain-type bridge user@ce1# set logical-systems CE-1 bridge-domains BD-1 vlan-id 1 user@ce1# set logical-systems CE-1 bridge-domains BD-2 domain-type bridge user@ce1# set logical-systems CE-1 bridge-domains BD-2 vlan-id 2 user@ce1# set logical-systems CE-1 bridge-domains BD-3 domain-type bridge user@ce1# set logical-systems CE-1 bridge-domains BD-3 vlan-id 3 user@ce1# set logical-systems CE-1 bridge-domains BD-4 domain-type bridge user@ce1# set logical-systems CE-1 bridge-domains BD-4 vlan-id 4 user@ce1# set logical-systems CE-1 bridge-domains BD-5 domain-type bridge user@ce1# set logical-systems CE-1 bridge-domains BD-5 vlan-id 5
Configure las interfaces y los dominios de puente en el dispositivo CE-3 para habilitar la conectividad de capa 2.
[edit] user@ce3# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 description "CONNECTED TO ToR12" user@ce3# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge interface-mode trunk user@ce3# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge vlan-id-list 1-5 user@ce3# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 3" user@ce3# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk user@ce3# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 user@ce3# set logical-systems CE-3 bridge-domains BD-1 domain-type bridge user@ce3# set logical-systems CE-3 bridge-domains BD-1 vlan-id 1 user@ce3# set logical-systems CE-3 bridge-domains BD-2 domain-type bridge user@ce3# set logical-systems CE-3 bridge-domains BD-2 vlan-id 2 user@ce3# set logical-systems CE-3 bridge-domains BD-3 domain-type bridge user@ce3# set logical-systems CE-3 bridge-domains BD-3 vlan-id 3 user@ce3# set logical-systems CE-3 bridge-domains BD-4 domain-type bridge user@ce3# set logical-systems CE-3 bridge-domains BD-4 vlan-id 4 user@ce3# set logical-systems CE-3 bridge-domains BD-5 domain-type bridge user@ce3# set logical-systems CE-3 bridge-domains BD-5 vlan-id 5
Configure las opciones de seguimiento para las interfaces para habilitar los registros de seguimiento.
[edit] user@ce3# set interfaces traceoptions file R1-DCD.log user@ce3# set interfaces traceoptions file size 10m user@ce3# set interfaces traceoptions flag all
Establezca el número de interfaces Ethernet agregadas.
[edit] user@ToR12# set chassis aggregated-devices ethernet device-count 2
Configure las interfaces en el dispositivo ToR12 para conectarse a los dispositivos MX12, CE-2, CE-3, ToR11 y MX11 para habilitar la conectividad subyacente.
[edit] user@ToR12# set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX11" user@ToR12# set interfaces ge-1/0/0 unit 0 family inet address 192.168.6.1/24 user@ToR12# set interfaces ge-1/0/4 unit 0 description "CONNECTED TO MX12" user@ToR12# set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.1/24 user@ToR12# set interfaces ge-1/0/6 description "CONNECTED TO CE-1" user@ToR12# set interfaces ge-1/0/6 gigether-options 802.3ad ae0 user@ToR12# set interfaces ge-1/0/7 unit 0 description "CONNECTED TO CE-3" user@ToR12# set interfaces ge-1/0/7 unit 0 family bridge interface-mode trunk user@ToR12# set interfaces ge-1/0/7 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set interfaces ge-1/1/0 description "CONNECTED TO ToR11" user@ToR12# set interfaces ge-1/1/0 gigether-options 802.3ad ae1 user@ToR12# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR11" user@ToR12# set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.2/24 user@ToR12# set interfaces ge-1/1/6 description "CONNECTED TO ToR12" user@ToR12# set interfaces ge-1/1/6 gigether-options 802.3ad ae1
Configure una interfaz de grupo de agregación de vínculos (LACP) habilitada para el Protocolo de control de agregación de vínculos (LACP) hacia el dispositivo host final CE-1. El valor ESI es único a nivel mundial en todo el dominio de EVPN. La configuración totalmente activa permite que ToR11 y ToR12 reenvíen el tráfico hacia y desde los dispositivos CE, de modo que todos los vínculos CE se utilicen activamente.
[edit] user@ToR12# set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 user@ToR12# set interfaces ae0 esi all-active user@ToR12# set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 user@ToR12# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR12# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set interfaces ae1 aggregated-ether-options lacp active user@ToR12# set interfaces ae1 aggregated-ether-options lacp periodic fast
Configure las opciones de enrutamiento y dirección de interfaz de circuito cerrado.
[edit] user@ToR12# set interfaces lo0 unit 82 family inet address 192.0.2.12/32 user@ToR12# set routing-options router-id 192.0.2.12 user@ToR12# set routing-options autonomous-system 200
Configure el equilibrio de carga en ToR12.
[edit] user@ToR12# set routing-options forwarding-table export evpn-pplb
Configure una conectividad subyacente de BGP externo multiprotocolo (MP-EBGP) entre los enrutadores ToR (ToR12 y ToR11) y puerta de enlace (MX11 y MX12).
[edit] user@ToR12# set protocols bgp local-as 200 user@ToR12# set protocols bgp group MX11 type external user@ToR12# set protocols bgp group MX11 local-address 192.168.6.1 user@ToR12# set protocols bgp group MX11 export LO user@ToR12# set protocols bgp group MX11 export TEST user@ToR12# set protocols bgp group MX11 peer-as 400 user@ToR12# set protocols bgp group MX11 local-as 200 user@ToR12# set protocols bgp group MX11 neighbor 192.168.6.2 family inet unicast user@ToR12# set protocols bgp group MX12 type external user@ToR12# set protocols bgp group MX12 local-address 192.168.5.1 user@ToR12# set protocols bgp group MX12 export LO user@ToR12# set protocols bgp group MX12 export TEST user@ToR12# set protocols bgp group MX12 peer-as 500 user@ToR12# set protocols bgp group MX12 local-as 200 user@ToR12# set protocols bgp group MX12 neighbor 192.168.5.2 family inet unicast user@ToR12# set protocols bgp group ToR11 type external user@ToR12# set protocols bgp group ToR11 local-address 192.168.2.2 user@ToR12# set protocols bgp group ToR11 export LO user@ToR12# set protocols bgp group ToR11 export TEST user@ToR12# set protocols bgp group ToR11 peer-as 100 user@ToR12# set protocols bgp group ToR11 local-as 200 user@ToR12# set protocols bgp group ToR11 neighbor 192.168.2.1 family inet unicast
Configure una superposición externa de BGP multiprotocolo (MP-EBGP) entre los enrutadores ToR (ToR12 y ToR11) y puerta de enlace (MX11 y MX12) y establezca EVPN como protocolo de señalización.
Procedimiento paso a paso
Configure una superposición MP-EBGP para conectarse entre ToR12 y MX11 mediante la señalización de EVPN.
[edit] user@ToR12# set protocols bgp group MX11-EVPN type external user@ToR12# set protocols bgp group MX11-EVPN multihop ttl 2 user@ToR12# set protocols bgp group MX11-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group MX11-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group MX11-EVPN export TEST user@ToR12# set protocols bgp group MX11-EVPN peer-as 400 user@ToR12# set protocols bgp group MX11-EVPN local-as 200 user@ToR12# set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling
Configure una superposición MP-EBGP para conectarse entre ToR12 y MX12 mediante la señalización de EVPN.
[edit] user@ToR12# set protocols bgp group MX12-EVPN type external user@ToR12# set protocols bgp group MX12-EVPN multihop ttl 2 user@ToR12# set protocols bgp group MX12-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group MX12-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group MX12-EVPN export TEST user@ToR12# set protocols bgp group MX12-EVPN peer-as 500 user@ToR12# set protocols bgp group MX12-EVPN local-as 200 user@ToR12# set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling
Configure una superposición MP-EBGP para conectarse entre ToR12 y ToR11 mediante la señalización EVPN.
[edit] user@ToR12# set protocols bgp group ToR11-EVPN type external user@ToR12# set protocols bgp group ToR11-EVPN multihop ttl 2 user@ToR12# set protocols bgp group ToR11-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group ToR11-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group ToR11-EVPN export TEST user@ToR12# set protocols bgp group ToR11-EVPN peer-as 100 user@ToR12# set protocols bgp group ToR11-EVPN local-as 200 user@ToR12# set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling user@ToR12# set protocols bgp group ToR12-EVPN export TEST
Configure las operaciones de seguimiento para rastrear todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@ToR12# set protocols l2-learning traceoptions file TOR12-L2ALD.log user@ToR12# set protocols l2-learning traceoptions file size 10m user@ToR12# set protocols l2-learning traceoptions level all user@ToR12# set protocols l2-learning traceoptions flag all
Configure las políticas de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
[edit] user@ToR12# set policy-options policy-statement LO term 1 from protocol direct user@ToR12# set policy-options policy-statement LO term 1 from route-filter 192.0.2.12/32 exact user@ToR12# set policy-options policy-statement LO term 1 then accept
Configure las opciones de política de comunidad.
[edit] user@ToR12# set policy-options community NO-EXPORT members no-advertise user@ToR12# set policy-options community NO-EXPORT members no-export user@ToR12# set policy-options community NO-EXPORT members no-export-subconfed
Aplique el equilibrio de carga.
[edit] user@ToR12# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR12# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR12# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure instancias de enrutamiento EVPN para cada red virtual. Defina la interfaz de origen de VTEP, el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNIDs a ID de VLAN e identifique el método de reenvío BUM.
[edit] user@ToR12# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.82 user@ToR12# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR12# set routing-instances EVPN-VXLAN-1 interface ge-1/0/7.0 user@ToR12# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR12# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.12:1 user@ToR12# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR12-EVPN-VXLAN-1.log user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Configuración de puerta de enlace del centro de datos y enrutador de borde WAN 1 (MX11)
Procedimiento paso a paso
El siguiente ejemplo requiere que navegue por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración en la Guía del usuario de CLI.
Configure un enrutador de la serie MX como puerta de enlace de centro de datos y enrutador de borde WAN, y nombrólo como MX11:
Establezca el nombre de host del sistema.
[edit] user@MX11# set system host-name MX11
Configure las interfaces en el enrutador MX11 (DC GW/WAN Edge1) para habilitar la conectividad subyacente con los dispositivos MX12, ToR11, ToR12 y P, que es la parte EVPN-VXLAN de la red DC1.
[edit] user@MX11# set interfaces ge-5/1/0 unit 0 description "CONNECTED TO MX12" user@MX11# set interfaces ge-5/1/0 unit 0 family inet address 192.168.7.1/24 user@MX11# set interfaces ge-5/1/1 unit 0 description "CONNECTED TO ToR11" user@MX11# set interfaces ge-5/1/1 unit 0 family inet address 192.168.3.2/24 user@MX11# set interfaces ge-5/1/8 unit 0 description "CONNECTED TO ToR12" user@MX11# set interfaces ge-5/1/8 unit 0 family inet address 192.168.6.2/24 user@MX11# set interfaces ge-5/1/9 unit 0 description "CONNECTED TO P" user@MX11# set interfaces ge-5/1/9 unit 0 family inet address 203.0.1.1/24 user@MX11# set interfaces ge-5/1/9 unit 0 family mpls
Configure una conectividad subyacente de BGP externo multiprotocolo (MP-EBGP) entre los enrutadores de puerta de enlace (MX11 y MX12) y ToR (ToR11 y ToR12).
[edit] user@MX11# set protocols bgp group ToR11 type external user@MX11# set protocols bgp group ToR11 local-address 192.168.3.2 user@MX11# set protocols bgp group ToR11 import TEST user@MX11# set protocols bgp group ToR11 export TEST user@MX11# set protocols bgp group ToR11 export LO user@MX11# set protocols bgp group ToR11 peer-as 100 user@MX11# set protocols bgp group ToR11 local-as 400 user@MX11# set protocols bgp group ToR11 neighbor 192.168.3.1 family inet unicast user@MX11# set protocols bgp group ToR12 type external user@MX11# set protocols bgp group ToR12 local-address 192.168.6.2 user@MX11# set protocols bgp group ToR12 export TEST user@MX11# set protocols bgp group ToR12 export LO user@MX11# set protocols bgp group ToR12 peer-as 200 user@MX11# set protocols bgp group ToR12 local-as 400 user@MX11# set protocols bgp group ToR12 neighbor 192.168.6.1 family inet unicast user@MX11# set protocols bgp group MX12 type external user@MX11# set protocols bgp group MX12 local-address 192.168.7.1 user@MX11# set protocols bgp group MX12 export TEST user@MX11# set protocols bgp group MX12 export LO user@MX11# set protocols bgp group MX12 peer-as 500 user@MX11# set protocols bgp group MX12 local-as 400 user@MX11# set protocols bgp group MX12 neighbor 192.168.7.2 family inet unicast
Configure una conectividad superpuesta de BGP externo multiprotocolo (MP-EBGP) entre los enrutadores de puerta de enlace (MX11 y MX12) y ToR (ToR11 y ToR12) y establezca EVPN como protocolo de señalización.
[edit] user@MX11# set protocols bgp group ToR11-EVPN type external user@MX11# set protocols bgp group ToR11-EVPN multihop ttl 2 user@MX11# set protocols bgp group ToR11-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group ToR11-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group ToR11-EVPN export TEST user@MX11# set protocols bgp group ToR11-EVPN peer-as 100 user@MX11# set protocols bgp group ToR11-EVPN local-as 400 user@MX11# set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling user@MX11# set protocols bgp group ToR12-EVPN type external user@MX11# set protocols bgp group ToR12-EVPN multihop ttl 2 user@MX11# set protocols bgp group ToR12-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group ToR12-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group ToR12-EVPN export TEST user@MX11# set protocols bgp group ToR12-EVPN peer-as 200 user@MX11# set protocols bgp group ToR12-EVPN local-as 400 user@MX11# set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling user@MX11# set protocols bgp group MX12-EVPN type external user@MX11# set protocols bgp group MX12-EVPN multihop ttl 2 user@MX11# set protocols bgp group MX12-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group MX12-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group MX12-EVPN export TEST user@MX11# set protocols bgp group MX12-EVPN peer-as 500 user@MX11# set protocols bgp group MX12-EVPN local-as 400 user@MX11# set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling
Configure interfaces de enrutamiento y puentes integrados (IRB) que anuncien las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
Procedimiento paso a paso
La siguiente es la configuración de puerta de enlace IRB para la VLAN-1 en host (que es la parte de host de VLAN-1):
[edit] user@MX11# set interfaces irb unit 1 proxy-macip-advertisement user@MX11# set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa user@MX11# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 1 family inet address 10.11.1.12/24 virtual-gateway-address 10.11.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-2 en host (que es la parte de host de VLAN-2):
[edit] user@MX11# set interfaces irb unit 2 proxy-macip-advertisement user@MX11# set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb user@MX11# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 2 family inet address 10.12.1.12/24 virtual-gateway-address 10.12.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-3 en host (que es la parte de host de VLAN-3):
[edit] user@MX11# set interfaces irb unit 3 proxy-macip-advertisement user@MX11# set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc user@MX11# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 3 family inet address 10.13.1.12/24 virtual-gateway-address 10.13.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-4 en host (que es la parte de host de VLAN-4):
[edit] user@MX11# set interfaces irb unit 4 proxy-macip-advertisement user@MX11# set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd user@MX11# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 4 family inet address 10.14.1.12/24 virtual-gateway-address 10.14.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-5 en host (que es la parte de host de VLAN-5):
[edit] user@MX11# set interfaces irb unit 5 proxy-macip-advertisement user@MX11# set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee user@MX11# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 5 family inet address 10.15.1.12/24 virtual-gateway-address 10.15.1.10
Configure las operaciones de seguimiento para rastrear todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@MX11# set protocols l2-learning traceoptions file MX11-L2ALD.log user@MX11# set protocols l2-learning traceoptions file size 10m user@MX11# set protocols l2-learning traceoptions level all user@MX11# set protocols l2-learning traceoptions flag all
Configure las políticas de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
[edit] user@MX11# set policy-options policy-statement LO term 1 from protocol direct user@MX11# set policy-options policy-statement LO term 1 from route-filter 192.0.2.21/32 exact user@MX11# set policy-options policy-statement LO term 1 then accept user@MX11# set policy-options policy-statement LO from protocol direct user@MX11# set policy-options policy-statement LO from route-filter 192.0.2.21/32 exact user@MX11# set policy-options policy-statement LO then accept
Configure las opciones de política de comunidad.
[edit] user@MX11# set policy-options community NO-EXPORT members no-advertise user@MX11# set policy-options community NO-EXPORT members no-export user@MX11# set policy-options community NO-EXPORT members no-export-subconfed
Aplique el equilibrio de carga.
[edit] user@MX11# set policy-options policy-statement TEST then community add NO-EXPORT user@MX11# set policy-options policy-statement evpn-pplb from protocol evpn user@MX11# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure un valor ESI en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN/puerta de enlace en la red DC1.
[edit] user@MX11# set interfaces lt-5/1/0 esi 00:22:22:22:22:22:22:22:22:22
Configure la multiconexión activo-activo en la interfaz de túnel lógico incluyendo la instrucción all-active.
[edit] user@MX11# set interfaces lt-5/1/0 esi all-active
Configure un par de interfaz de túnel lógico (lt-) en el enrutador de puerta de enlace MX11 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN de la WAN basada en MPLS. Una interfaz de túnel lógico (lt-) se configura como la interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como la interfaz de acceso para EVPN basado en MPLS.
[edit] user@MX11# set interfaces lt-5/1/0 unit 0 peer-unit 1 user@MX11# set interfaces lt-5/1/0 unit 0 family bridge interface-mode trunk user@MX11# set interfaces lt-5/1/0 unit 0 family bridge vlan-id-list 1-5 user@MX11# set interfaces lt-5/1/0 unit 1 peer-unit 0 user@MX11# set interfaces lt-5/1/0 unit 1 family bridge interface-mode trunk user@MX11# set interfaces lt-5/1/0 unit 1 family bridge vlan-id-list 1-5
Configure las opciones de enrutamiento y dirección de interfaz de circuito cerrado.
[edit] user@MX11# set interfaces lo0 unit 84 family inet address 192.0.2.21/32 user@MX11# set interfaces lo0 unit 84 family mpls user@MX11# set routing-options router-id 192.0.2.21 user@MX11# set routing-options autonomous-system 300
Configure el equilibrio de carga en MX11.
[edit] user@MX11# set routing-options forwarding-table export evpn-pplb
Habilite los protocolos RSVP, MPLS, BGP y OSPF en las interfaces de núcleo. Cree LSP MPLS y especifique la dirección de los otros enrutadores de borde wan y puerta de enlace (MX12, P, MX21, MX22).
[edit] user@MX11# set protocols rsvp interface all user@MX11# set protocols rsvp interface fxp0.0 disable user@MX11# set protocols mpls label-switched-path MX11-TO-MX12 to 192.0.2.22 user@MX11# set protocols mpls label-switched-path MX11-TO-P to 203.0.113.1 user@MX11# set protocols mpls label-switched-path MX11-TO-MX21 to 198.51.100.21 user@MX11# set protocols mpls label-switched-path MX11-TO-MX22 to 198.51.100.22 user@MX11# set protocols mpls interface all user@MX11# set protocols mpls interface fxp0.0 disable user@MX11# set protocols bgp local-address 192.0.2.21 user@MX11# set protocols bgp local-as 300 user@MX11# set protocols bgp group INT type internal user@MX11# set protocols bgp group INT local-address 192.0.2.21 user@MX11# set protocols bgp group INT family evpn signaling user@MX11# set protocols bgp group INT export TEST user@MX11# set protocols bgp group INT neighbor 203.0.113.1 user@MX11# set protocols ospf traffic-engineering user@MX11# set protocols ospf area 0.0.0.0 interface ge-5/1/9.0 user@MX11# set protocols ospf area 0.0.0.0 interface lo0.84 passive
Configure instancias de enrutamiento MPLS basadas en EVPN en el enrutador MX11 para cada red virtual. Defina el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN-MPLS) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure un dominio de puente para cada enrutador virtual que asigne identificadores de VLAN.
[edit] user@MX11# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX11# set routing-instances EVPN-MPLS-1 interface lt-5/1/0.0 user@MX11# set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.21:100 user@MX11# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX11-EVPN-MPLS-1.log user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
Configure las instancias de enrutamiento de EVPN-VXLAN en el enrutador MX11 para cada red virtual. Defina la interfaz de origen de VTEP, el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNIDs a ID de VLAN e identifique el método de reenvío BUM.
[edit] user@MX11# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.84 user@MX11# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX11# set routing-instances EVPN-VXLAN-1 interface lt-5/1/0.1 user@MX11# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.21:1 user@MX11# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX11-EVPN-VXLAN-1.log user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX11# set routing-instances VRF instance-type vrf user@MX11# set routing-instances VRF interface irb.1 user@MX11# set routing-instances VRF interface irb.2 user@MX11# set routing-instances VRF interface irb.3 user@MX11# set routing-instances VRF interface irb.4 user@MX11# set routing-instances VRF interface irb.5 user@MX11# set routing-instances VRF route-distinguisher 1:1 user@MX11# set routing-instances VRF vrf-target target:10:10
Configuración de puerta de enlace de centro de datos y enrutador de borde WAN 2 (MX12)
Procedimiento paso a paso
El siguiente ejemplo requiere que navegue por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración en la Guía del usuario de CLI.
Configure un enrutador de la serie MX como puerta de enlace de centro de datos y enrutador de borde WAN, y nombrólo como MX12:
Establezca el nombre de host del sistema.
[edit] user@MX12# set system host-name MX12
Configure el dispositivo P como el sistema lógico de la puerta de enlace del centro de datos MX12 y el enrutador de borde WAN.
Procedimiento paso a paso
Configure el dispositivo P para que funcione en el modo de ip mejorada, ya que la funcionalidad activa-activa de EVPN se admite solo en enrutadores con MPC e interfaces MIC. Es necesario reiniciar el sistema para confirmar esta configuración.
[edit chassis] user@P# set network-services enhanced-ip
Configure las interfaces del dispositivo P.
[edit] user@P# set interfaces ge-1/0/4 unit 0 description "CONNECTED TO ToR12" user@P# set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.2/24 user@P# set interfaces ge-1/0/5 unit 0 description "CONNECTED TO TOR11" user@P# set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.2/24 user@P# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO P" user@P# set interfaces ge-1/0/6 unit 0 family inet address 203.0.2.1/24 user@P# set interfaces ge-1/0/6 unit 0 family mpls user@P# set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX11" user@P# set interfaces ge-1/1/0 unit 0 family inet address 192.168.7.2/24
Habilite los protocolos RSVP, MPLS, BGP y OSPF en las interfaces de núcleo del dispositivo P. Cree LSP MPLS y especifique la dirección de los otros enrutadores de borde wan y puerta de enlace (MX11, MX12, MX21, MX22).
[edit] user@P# set logical-systems P protocols rsvp interface all user@P# set logical-systems P protocols mpls label-switched-path P-TO-MX11 from 203.0.113.1 user@P# set logical-systems P protocols mpls label-switched-path P-TO-MX11 to 192.0.2.21 user@P# set logical-systems P protocols mpls label-switched-path P-TO-MX12 to 192.0.2.22 user@P# set logical-systems P protocols mpls label-switched-path P-TO-MX21 to 198.51.100.21 user@P# set logical-systems P protocols mpls label-switched-path P-TO-MX22 to 198.51.100.22 user@P# set logical-systems P protocols mpls interface all user@P# set logical-systems P protocols bgp local-address 203.0.113.1 user@P# set logical-systems P protocols bgp local-as 300 user@P# set logical-systems P protocols bgp group INT type internal user@P# set logical-systems P protocols bgp group INT import BLOCK-VXLAN-ROUTES-FROM-CORE user@P# set logical-systems P protocols bgp group INT family evpn signaling user@P# set logical-systems P protocols bgp group INT cluster 203.0.113.1 user@P# set logical-systems P protocols bgp group INT neighbor 192.0.2.21 user@P# set logical-systems P protocols bgp group INT neighbor 192.0.2.22 user@P# set logical-systems P protocols bgp group INT neighbor 198.51.100.21 user@P# set logical-systems P protocols bgp group INT neighbor 198.51.100.22 user@P# set logical-systems P protocols ospf traffic-engineering user@P# set logical-systems P protocols ospf area 0.0.0.0 interface all user@P# set logical-systems P protocols ospf area 0.0.0.0 interface lo0.86
Configure las opciones de enrutamiento y dirección de interfaz de circuito cerrado.
[edit] user@P# set logical-systems P interfaces lo0 unit 86 family inet address 203.0.113.1/32 user@P# set logical-systems P interfaces lo0 unit 86 family mpls user@P# set logical-systems P routing-options router-id 203.0.113.1 user@P# set logical-systems P routing-options autonomous-system 300
Configure las políticas de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
[edit] user@P# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from protocol bgp user@P# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from community RT-CORE user@P# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 then accept user@P# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from protocol bgp user@P# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from community RT-DC1 user@P# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 then reject user@P# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from protocol bgp user@P# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from community RT-DC2 user@P# set logical-systems P policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 then reject
Configure las opciones de política de comunidad.
[edit] user@P# set logical-systems P policy-options community RT-CORE members target:1:2 user@P# set logical-systems P policy-options community RT-DC1 members target:1:1 user@P# set logical-systems P policy-options community RT-DC2 members target:1:3
Configure las opciones de seguimiento para las interfaces para habilitar los registros de seguimiento.
[edit] user@P# set interfaces traceoptions file R3-DCD.log user@P# set interfaces traceoptions file size 10m user@P# set interfaces traceoptions flag all
Configure las interfaces en el enrutador MX12 (DC GW/WAN Edge 2) para habilitar la conectividad subyacente con los dispositivos MX11, ToR12, ToR11 y P, que es la parte EVPN-VXLAN de la red DC1.
[edit] user@MX12# set interfaces ge-1/0/4 unit 0 description "CONNECTED TO ToR12" user@MX12# set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.2/24 user@MX12# set interfaces ge-1/0/5 unit 0 description "CONNECTED TO TOR11" user@MX12# set interfaces ge-1/0/5 unit 0 family inet address 192.168.4.2/24 user@MX12# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO P" user@MX12# set interfaces ge-1/0/6 unit 0 family inet address 203.0.2.1/24 user@MX12# set interfaces ge-1/0/6 unit 0 family mpls user@MX12# set interfaces ge-1/1/0 unit 0 description "CONNECTED TO MX11" user@MX12# set interfaces ge-1/1/0 unit 0 family inet address 192.168.7.2/24
Configure una conectividad subyacente de BGP externo multiprotocolo (MP-EBGP) entre los enrutadores de puerta de enlace (MX11 y MX12) y ToR (ToR11 y ToR12).
[edit] user@MX12# set protocols bgp group ToR11 type external user@MX12# set protocols bgp group ToR11 local-address 192.168.4.2 user@MX12# set protocols bgp group ToR11 export TEST user@MX12# set protocols bgp group ToR11 export LO user@MX12# set protocols bgp group ToR11 peer-as 100 user@MX12# set protocols bgp group ToR11 local-as 500 user@MX12# set protocols bgp group ToR11 neighbor 192.168.4.1 family inet unicast user@MX12# set protocols bgp group ToR12 type external user@MX12# set protocols bgp group ToR12 local-address 192.168.5.2 user@MX12# set protocols bgp group ToR12 export TEST user@MX12# set protocols bgp group ToR12 export LO user@MX12# set protocols bgp group ToR12 peer-as 200 user@MX12# set protocols bgp group ToR12 local-as 500 user@MX12# set protocols bgp group ToR12 neighbor 192.168.5.1 family inet unicast user@MX12# set protocols bgp group MX11 type external user@MX12# set protocols bgp group MX11 local-address 192.168.7.2 user@MX12# set protocols bgp group MX11 export TEST user@MX12# set protocols bgp group MX11 export LO user@MX12# set protocols bgp group MX11 peer-as 400 user@MX12# set protocols bgp group MX11 local-as 500 user@MX12# set protocols bgp group MX11 neighbor 192.168.7.1 family inet unicast
Configure una conectividad superpuesta de BGP externo multiprotocolo (MP-EBGP) entre los enrutadores de puerta de enlace (MX11 y MX12) y ToR (ToR11 y ToR12) y establezca EVPN como protocolo de señalización.
[edit] user@MX12# set protocols bgp group ToR11-EVPN type external user@MX12# set protocols bgp group ToR11-EVPN multihop ttl 2 user@MX12# set protocols bgp group ToR11-EVPN multihop no-nexthop-change user@MX12# set protocols bgp group ToR11-EVPN local-address 192.0.2.22 user@MX12# set protocols bgp group ToR11-EVPN export TEST user@MX12# set protocols bgp group ToR11-EVPN peer-as 100 user@MX12# set protocols bgp group ToR11-EVPN local-as 500 user@MX12# set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling user@MX12# set protocols bgp group ToR12-EVPN type external user@MX12# set protocols bgp group ToR12-EVPN multihop ttl 2 user@MX12# set protocols bgp group ToR12-EVPN multihop no-nexthop-change user@MX12# set protocols bgp group ToR12-EVPN local-address 192.0.2.22 user@MX12# set protocols bgp group ToR12-EVPN export TEST user@MX12# set protocols bgp group ToR12-EVPN peer-as 200 user@MX12# set protocols bgp group ToR12-EVPN local-as 500 user@MX12# set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling user@MX12# set protocols bgp group MX11-EVPN type external user@MX12# set protocols bgp group MX11-EVPN multihop ttl 2 user@MX12# set protocols bgp group MX11-EVPN multihop no-nexthop-change user@MX12# set protocols bgp group MX11-EVPN local-address 192.0.2.22 user@MX12# set protocols bgp group MX11-EVPN export TEST user@MX12# set protocols bgp group MX11-EVPN peer-as 400 user@MX12# set protocols bgp group MX11-EVPN local-as 500 user@MX12# set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling user@MX12# set protocols bgp group MX12-EVPN export TEST
Configure interfaces de enrutamiento y puentes integrados (IRB) que anuncien las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
Procedimiento paso a paso
La siguiente es la configuración de puerta de enlace IRB para la VLAN-1 en host (que es la parte de host de VLAN-1):
[edit] user@MX12# set interfaces irb unit 1 proxy-macip-advertisement user@MX12# set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa user@MX12# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 1 family inet address 10.11.1.13/24 virtual-gateway-address 10.11.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-2 en host (que es la parte de host de VLAN-2):
[edit] user@MX12# set interfaces irb unit 2 proxy-macip-advertisement user@MX12# set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb user@MX12# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 2 family inet address 10.12.1.13/24 virtual-gateway-address 10.12.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-3 en host (que es la parte de host de VLAN-3):
[edit] user@MX12# set interfaces irb unit 3 proxy-macip-advertisement user@MX12# set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc user@MX12# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 3 family inet address 10.13.1.13/24 virtual-gateway-address 10.13.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-4 en host (que es la parte de host de VLAN-4):
[edit] user@MX12# set interfaces irb unit 4 proxy-macip-advertisement user@MX12# set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd user@MX12# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 4 family inet address 10.14.1.13/24 virtual-gateway-address 10.14.1.10
La siguiente es la configuración de puerta de enlace IRB para la VLAN-5 en host (que es la parte de host de VLAN-5):
[edit] user@MX12# set interfaces irb unit 5 proxy-macip-advertisement user@MX12# set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee user@MX12# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX12# set interfaces irb unit 5 family inet address 10.15.1.13/24 virtual-gateway-address 10.15.1.10
Configure las operaciones de seguimiento para rastrear todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@MX12# set protocols l2-learning traceoptions file MX12-L2ALD.log user@MX12# set protocols l2-learning traceoptions file size 10m user@MX12# set protocols l2-learning traceoptions level all user@MX12# set protocols l2-learning traceoptions flag all
Configure las políticas de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
[edit] user@MX12# set policy-options policy-statement LO from protocol direct user@MX12# set policy-options policy-statement LO from route-filter 192.0.2.22/32 exact user@MX12# set policy-options policy-statement LO then accept user@MX12# set policy-options policy-statement LO term 1 from protocol direct user@MX12# set policy-options policy-statement LO term 1 from route-filter 192.0.2.22/32 exact user@MX12# set policy-options policy-statement LO term 1 then accept user@MX12# set policy-options policy-statement TEST from protocol bgp user@MX12# set policy-options policy-statement TEST from protocol evpn
Configure las opciones de política de comunidad.
[edit] user@MX12# set policy-options community NO-EXPORT members no-advertise user@MX12# set policy-options community NO-EXPORT members no-export user@MX12# set policy-options community NO-EXPORT members no-export-subconfed
Aplique el equilibrio de carga.
[edit] user@MX12# set policy-options policy-statement TEST then community add NO-EXPORT user@MX12# set policy-options policy-statement evpn-pplb from protocol evpn user@MX12# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure un valor ESI en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN/puerta de enlace en la red DC1.
[edit] user@MX12# set interfaces lt-1/0/0 esi 00:22:22:22:22:22:22:22:22:22
Configure la multiconexión activo-activo en la interfaz de túnel lógico incluyendo la instrucción all-active.
[edit] user@MX12# set interfaces lt-1/0/0 esi all-active
Configure un par de interfaz de túnel lógico (lt-) en el enrutador de puerta de enlace MX12 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN de la WAN basada en MPLS. Una interfaz de túnel lógico (lt-) se configura como la interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como la interfaz de acceso para EVPN basado en MPLS.
[edit] user@MX12# set interfaces lt-1/0/0 unit 0 peer-unit 1 user@MX12# set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk user@MX12# set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 user@MX12# set interfaces lt-1/0/0 unit 1 peer-unit 0 user@MX12# set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk user@MX12# set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5
Configure las opciones de enrutamiento y dirección de interfaz de circuito cerrado.
[edit] user@MX12# set interfaces lo0 unit 85 family inet address 192.0.2.22/32 user@MX12# set interfaces lo0 unit 85 family mpls user@MX12# set routing-options router-id 192.0.2.22 user@MX12# set routing-options autonomous-system 300
Configure el equilibrio de carga en MX12.
[edit] user@MX12# set routing-options forwarding-table export evpn-pplb
Habilite los protocolos RSVP, MPLS, BGP y OSPF en las interfaces de núcleo. Cree LSP MPLS y especifique la dirección de los otros enrutadores de borde wan y puerta de enlace (MX11, MX21, P, MX22).
[edit] user@MX12# set protocols rsvp interface all user@MX12# set protocols rsvp interface fxp0.0 disable user@MX12# set protocols mpls label-switched-path MX12-TO-MX11 to 192.0.2.21 user@MX12# set protocols mpls label-switched-path MX12-TO-P to 203.0.113.1 user@MX12# set protocols mpls label-switched-path MX12-TO-MX21 to 198.51.100.21 user@MX12# set protocols mpls label-switched-path MX12-TO-MX22 to 198.51.100.22 user@MX12# set protocols mpls interface all user@MX12# set protocols mpls interface fxp0.0 disable user@MX12# set protocols bgp local-address 192.0.2.22 user@MX12# set protocols bgp local-as 300 user@MX12# set protocols bgp group INT type internal user@MX12# set protocols bgp group INT family evpn signaling user@MX12# set protocols bgp group INT export TEST user@MX12# set protocols bgp group INT neighbor 203.0.113.1 user@MX12# set protocols ospf traffic-engineering user@MX12# set protocols ospf area 0.0.0.0 interface ge-1/0/6.0 user@MX12# set protocols ospf area 0.0.0.0 interface lo0.85 passive
Configure instancias de enrutamiento MPLS basadas en EVPN en el enrutador MX12 para cada red virtual. Defina el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN-MPLS) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure un dominio de puente para cada enrutador virtual que asigne identificadores de VLAN.
[edit] user@MX12# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX12# set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 user@MX12# set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.22:100 user@MX12# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX12-EVPN-MPLS-1.log user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX12# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX12# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
Configure las instancias de enrutamiento EVPN-VXLAN en el enrutador MX12 para cada red virtual. Defina la interfaz de origen de VTEP, el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNIDs a ID de VLAN e identifique el método de reenvío BUM.
[edit] user@MX12# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.85 user@MX12# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX12# set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 user@MX12# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.22:1 user@MX12# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX12-EVPN-VXLAN-1.log user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-4 user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 5 user@MX12# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX12# set routing-instances VRF instance-type vrf user@MX12# set routing-instances VRF interface irb.1 user@MX12# set routing-instances VRF interface irb.2 user@MX12# set routing-instances VRF interface irb.3 user@MX12# set routing-instances VRF interface irb.4 user@MX12# set routing-instances VRF interface irb.5 user@MX12# set routing-instances VRF route-distinguisher 1:1 user@MX12# set routing-instances VRF vrf-target target:10:10
Configuración de la puerta de enlace del centro de datos y el enrutador de borde 3 de WAN (MX21)
Procedimiento paso a paso
El siguiente ejemplo requiere que navegue por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración en la Guía del usuario de CLI.
Configure un enrutador de la serie MX como puerta de enlace de centro de datos y enrutador de borde WAN, y pónónlo como MX21:
Establezca el nombre de host del sistema.
[edit] user@MX21# set system host-name MX21
Configure las interfaces en el enrutador MX21 (DC GW/WAN Edge 3) para habilitar la conectividad subyacente con los dispositivos MX22, ToR22, ToR21 y P, que es la parte EVPN-VXLAN de la red DC2.
[edit] user@MX21# set interfaces ge-3/0/0 unit 0 description "CONNECTED TO MX22" user@MX21# set interfaces ge-3/0/0 unit 0 family inet address 192.168.13.1/24 user@MX21# set interfaces ge-3/1/0 unit 0 description "CONNECTED TO ToR22" user@MX21# set interfaces ge-3/1/0 unit 0 family inet address 192.168.8.1/24 user@MX21# set interfaces ge-5/0/0 unit 0 description "CONNECTED TO P" user@MX21# set interfaces ge-5/0/0 unit 0 family inet address 203.0.4.1/24 user@MX21# set interfaces ge-5/0/0 unit 0 family mpls user@MX21# set interfaces ge-5/0/1 unit 0 description "CONNECTED TO ToR21" user@MX21# set interfaces ge-5/0/1 unit 0 family inet address 192.168.9.1/24
Configure una conectividad subyacente de BGP externo multiprotocolo (MP-EBGP) entre los enrutadores de puerta de enlace (MX21 y MX22) y ToR (ToR21 y ToR22).
[edit] user@MX21# set protocols bgp group ToR21 type external user@MX21# set protocols bgp group ToR21 local-address 192.168.9.1 user@MX21# set protocols bgp group ToR21 export TEST user@MX21# set protocols bgp group ToR21 export LO user@MX21# set protocols bgp group ToR21 peer-as 600 user@MX21# set protocols bgp group ToR21 local-as 800 user@MX21# set protocols bgp group ToR21 neighbor 192.168.9.2 family inet unicast user@MX21# set protocols bgp group ToR22 type external user@MX21# set protocols bgp group ToR22 local-address 192.168.8.1 user@MX21# set protocols bgp group ToR22 export TEST user@MX21# set protocols bgp group ToR22 export LO user@MX21# set protocols bgp group ToR22 peer-as 700 user@MX21# set protocols bgp group ToR22 local-as 800 user@MX21# set protocols bgp group ToR22 neighbor 192.168.8.2 family inet unicast user@MX21# set protocols bgp group MX22 type external user@MX21# set protocols bgp group MX22 local-address 192.168.13.1 user@MX21# set protocols bgp group MX22 export TEST user@MX21# set protocols bgp group MX22 export LO user@MX21# set protocols bgp group MX22 peer-as 900 user@MX21# set protocols bgp group MX22 local-as 800 user@MX21# set protocols bgp group MX22 neighbor 10.115.15.2 family inet unicast
Configure una conectividad superpuesta de BGP externa multiprotocolo (MP-EBGP) entre los enrutadores de puerta de enlace (MX21 y MX22) y ToR (ToR21 y ToR22) y establezca EVPN como protocolo de señalización.
[edit] user@MX21# set protocols bgp group ToR21-EVPN type external user@MX21# set protocols bgp group ToR21-EVPN multihop ttl 2 user@MX21# set protocols bgp group ToR21-EVPN multihop no-nexthop-change user@MX21# set protocols bgp group ToR21-EVPN local-address 198.51.100.21 user@MX21# set protocols bgp group ToR21-EVPN peer-as 600 user@MX21# set protocols bgp group ToR21-EVPN local-as 800 user@MX21# set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling user@MX21# set protocols bgp group ToR22-EVPN type external user@MX21# set protocols bgp group ToR22-EVPN multihop ttl 2 user@MX21# set protocols bgp group ToR22-EVPN multihop no-nexthop-change user@MX21# set protocols bgp group ToR22-EVPN local-address 198.51.100.21 user@MX21# set protocols bgp group ToR22-EVPN peer-as 700 user@MX21# set protocols bgp group ToR22-EVPN local-as 800 user@MX21# set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling user@MX21# set protocols bgp group MX22-EVPN type external user@MX21# set protocols bgp group MX22-EVPN multihop ttl 2 user@MX21# set protocols bgp group MX22-EVPN multihop no-nexthop-change user@MX21# set protocols bgp group MX22-EVPN local-address 198.51.100.21 user@MX21# set protocols bgp group MX22-EVPN peer-as 900 user@MX21# set protocols bgp group MX22-EVPN local-as 800 user@MX21# set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling
Configure interfaces de enrutamiento y puentes integrados (IRB) que anuncien las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
Procedimiento paso a paso
La siguiente es la configuración de puerta de enlace IRB para la VLAN-1 en host (que es la parte de host de VLAN-1):
[edit] user@MX21# set interfaces irb unit 1 proxy-macip-advertisement user@MX21# set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa user@MX21# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 1 family inet address 10.11.1.14/24 virtual-gateway-address 10.11.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-2 en host (que es la parte de host de VLAN-2):
[edit] user@MX21# set interfaces irb unit 2 proxy-macip-advertisement user@MX21# set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb user@MX21# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 2 family inet address 10.12.1.14/24 virtual-gateway-address 10.12.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-3 en host (que es la parte de host de VLAN-3):
[edit] user@MX21# set interfaces irb unit 3 proxy-macip-advertisement user@MX21# set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc user@MX21# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 3 family inet address 10.13.1.14/24 virtual-gateway-address 10.13.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-4 en host (que es la parte de host de VLAN-4):
[edit] user@MX21# set interfaces irb unit 4 proxy-macip-advertisement user@MX21# set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd user@MX21# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 4 family inet address 10.14.1.14/24 virtual-gateway-address 10.14.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-5 en host (que es la parte de host de VLAN-5):
[edit] user@MX21# set interfaces irb unit 5 proxy-macip-advertisement user@MX21# set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee user@MX21# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX21# set interfaces irb unit 5 family inet address 10.15.1.14/24 virtual-gateway-address 10.15.1.11
Configure las operaciones de seguimiento para rastrear todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@MX21# set protocols l2-learning traceoptions file MX21-L2ALD.log user@MX21# set protocols l2-learning traceoptions file size 10m user@MX21# set protocols l2-learning traceoptions level all user@MX21# set protocols l2-learning traceoptions flag all
Configure las políticas de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
[edit] user@MX21# set policy-options policy-statement LO from protocol direct user@MX21# set policy-options policy-statement LO from route-filter 198.51.100.21/32 exact user@MX21# set policy-options policy-statement LO then accept user@MX21# set policy-options policy-statement TEST1 term 1 from protocol bgp user@MX21# set policy-options policy-statement TEST1 term 1 from external user@MX21# set policy-options policy-statement TEST1 term 1 then reject
Configure las opciones de política de comunidad.
[edit] user@MX21# set policy-options community NO-EXPORT members no-advertise user@MX21# set policy-options community NO-EXPORT members no-export user@MX21# set policy-options community NO-EXPORT members no-export-subconfed
Aplique el equilibrio de carga.
[edit] user@MX21# set policy-options policy-statement TEST then community add NO-EXPORT user@MX21# set policy-options policy-statement evpn-pplb from protocol evpn user@MX21# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure un valor ESI en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN/puerta de enlace en la red DC2.
[edit] user@MX21# set interfaces lt-5/0/0 esi 00:33:33:33:33:33:33:33:33:33
Configure la multiconexión activo-activo en la interfaz de túnel lógico incluyendo la instrucción all-active.
[edit] user@MX21# set interfaces lt-5/0/0 esi all-active
Configure un par de interfaz de túnel lógico (lt-) en el enrutador de puerta de enlace MX21 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) se configura como la interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como la interfaz de acceso para EVPN basado en MPLS.
[edit] user@MX21# set interfaces lt-5/0/0 unit 0 peer-unit 1 user@MX21# set interfaces lt-5/0/0 unit 0 family bridge interface-mode trunk user@MX21# set interfaces lt-5/0/0 unit 0 family bridge vlan-id-list 1-5 user@MX21# set interfaces lt-5/0/0 unit 1 peer-unit 0 user@MX21# set interfaces lt-5/0/0 unit 1 family bridge interface-mode trunk user@MX21# set interfaces lt-5/0/0 unit 1 family bridge vlan-id-list 1-5
Configure las opciones de enrutamiento y dirección de interfaz de circuito cerrado.
[edit] user@MX21# set interfaces lo0 unit 87 family inet address 198.51.100.21/32 user@MX21# set interfaces lo0 unit 87 family mpls user@MX21# set routing-options router-id 198.51.100.21 user@MX21# set routing-options autonomous-system 300
Configure el equilibrio de carga en MX21.
[edit] user@MX21# set routing-options forwarding-table export evpn-pplb
Habilite los protocolos RSVP, MPLS, BGP y OSPF en las interfaces de núcleo. Cree LSP de MPLS y especifique la dirección de los otros enrutadores de borde wan y puerta de enlace (MX11, MX12, P, MX22).
[edit] user@MX21# set protocols rsvp interface all user@MX21# set protocols rsvp interface fxp0.0 disable user@MX21# set protocols mpls label-switched-path MX21-TO-MX11 to 192.0.2.21 user@MX21# set protocols mpls label-switched-path MX21-TO-MX12 to 192.0.2.22 user@MX21# set protocols mpls label-switched-path MX21-TO-P to 203.0.113.1 user@MX21# set protocols mpls label-switched-path MX21-TO-MX22 to 198.51.100.22 user@MX21# set protocols mpls interface all user@MX21# set protocols mpls interface fxp0.0 disable user@MX21# set protocols bgp local-address 198.51.100.21 user@MX21# set protocols bgp export TEST user@MX21# set protocols bgp local-as 300 user@MX21# set protocols bgp group INT type internal user@MX21# set protocols bgp group INT local-address 198.51.100.21 user@MX21# set protocols bgp group INT family evpn signaling user@MX21# set protocols bgp group INT export TEST1 user@MX21# set protocols bgp group INT neighbor 203.0.113.1 user@MX21# set protocols ospf traffic-engineering user@MX21# set protocols ospf area 0.0.0.0 interface ge-5/0/0.0 user@MX21# set protocols ospf area 0.0.0.0 interface lo0.87 passive
Configure instancias de enrutamiento MPLS basadas en EVPN en el enrutador MX21 para cada red virtual. Defina el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN-MPLS) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure un dominio de puente para cada enrutador virtual que asigne identificadores de VLAN.
[edit] user@MX21# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX21# set routing-instances EVPN-MPLS-1 interface lt-5/0/0.0 user@MX21# set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.21:100 user@MX21# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX21-EVPN-MPLS-1.log user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX21# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX21# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
Configure las instancias de enrutamiento EVPN-VXLAN en el enrutador MX21 para cada red virtual. Defina la interfaz de origen de VTEP, el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNIDs a ID de VLAN e identifique el método de reenvío BUM.
[edit] user@MX21# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.87 user@MX21# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX21# set routing-instances EVPN-VXLAN-1 interface lt-5/0/0.1 user@MX21# set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.21:1 user@MX21# set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX21-EVPN-VXLAN-1.log user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX21# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX21# set routing-instances VRF instance-type vrf user@MX21# set routing-instances VRF interface irb.1 user@MX21# set routing-instances VRF interface irb.2 user@MX21# set routing-instances VRF interface irb.3 user@MX21# set routing-instances VRF interface irb.4 user@MX21# set routing-instances VRF interface irb.5 user@MX21# set routing-instances VRF route-distinguisher 1:1 user@MX21# set routing-instances VRF vrf-target target:10:10
Configuración de puerta de enlace de centro de datos y enrutador de borde WAN 4 (MX22)
Procedimiento paso a paso
El siguiente ejemplo requiere que navegue por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración en la Guía del usuario de CLI.
Configure un enrutador de la serie MX como puerta de enlace de centro de datos y enrutador de borde WAN, y nombrólo como MX22:
Establezca el nombre de host del sistema.
[edit] user@MX22# set system host-name MX22
Configure las interfaces en el enrutador MX22 (borde de DC GW/WAN 4) para habilitar la conectividad subyacente con los dispositivos MX22, ToR21, MX21 y P, que es la parte EVPN-VXLAN de la red DC2.
[edit] user@MX22# set interfaces xe-0/0/0 unit 0 description "CONNECTED TO ToR22" user@MX22# set interfaces xe-0/0/0 unit 0 family inet address 192.168.11.1/24 user@MX22# set interfaces xe-0/0/1 unit 0 description "CONNECTED TO ToR21" user@MX22# set interfaces xe-0/0/1 unit 0 family inet address 192.168.10.1/24 user@MX22# set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX21" user@MX22# set interfaces ge-1/0/0 unit 0 family inet address 10.115.15.2/24 user@MX22# set interfaces ge-1/0/2 unit 0 description "CONNECTED TO P" user@MX22# set interfaces ge-1/0/2 unit 0 family inet address 203.0.3.1/24 user@MX22# set interfaces ge-1/0/2 unit 0 family mpls
Configure una conectividad subyacente de BGP externo multiprotocolo (MP-EBGP) entre los enrutadores de puerta de enlace (MX21 y MX22) y ToR (ToR21 y ToR22).
[edit] user@MX22# set protocols bgp group ToR21 type external user@MX22# set protocols bgp group ToR21 local-address 192.168.10.1 user@MX22# set protocols bgp group ToR21 export TEST user@MX22# set protocols bgp group ToR21 export LO user@MX22# set protocols bgp group ToR21 peer-as 600 user@MX22# set protocols bgp group ToR21 local-as 900 user@MX22# set protocols bgp group ToR21 neighbor 10.102.2.1 family inet unicast user@MX22# set protocols bgp group ToR22 type external user@MX22# set protocols bgp group ToR22 local-address 192.168.11.1 user@MX22# set protocols bgp group ToR22 export TEST user@MX22# set protocols bgp group ToR22 export LO user@MX22# set protocols bgp group ToR22 peer-as 700 user@MX22# set protocols bgp group ToR22 local-as 900 user@MX22# set protocols bgp group ToR22 neighbor 192.168.11.2 family inet unicast user@MX22# set protocols bgp group MX21 type external user@MX22# set protocols bgp group MX21 local-address 10.115.15.2 user@MX22# set protocols bgp group MX21 export TEST user@MX22# set protocols bgp group MX21 export LO user@MX22# set protocols bgp group MX21 peer-as 800 user@MX22# set protocols bgp group MX21 local-as 900 user@MX22# set protocols bgp group MX21 neighbor 192.168.13.1 family inet unicast
Configure una conectividad superpuesta de BGP externa multiprotocolo (MP-EBGP) entre los enrutadores de puerta de enlace (MX21 y MX22) y ToR (ToR21 y ToR22) y establezca EVPN como protocolo de señalización.
[edit] user@MX22# set protocols bgp group ToR21-EVPN type external user@MX22# set protocols bgp group ToR21-EVPN multihop ttl 2 user@MX22# set protocols bgp group ToR21-EVPN multihop no-nexthop-change user@MX22# set protocols bgp group ToR21-EVPN local-address 198.51.100.22 user@MX22# set protocols bgp group ToR21-EVPN peer-as 600 user@MX22# set protocols bgp group ToR21-EVPN local-as 900 user@MX22# set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling user@MX22# set protocols bgp group ToR22-EVPN type external user@MX22# set protocols bgp group ToR22-EVPN multihop ttl 2 user@MX22# set protocols bgp group ToR22-EVPN multihop no-nexthop-change user@MX22# set protocols bgp group ToR22-EVPN local-address 198.51.100.22 user@MX22# set protocols bgp group ToR22-EVPN peer-as 700 user@MX22# set protocols bgp group ToR22-EVPN local-as 900 user@MX22# set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling user@MX22# set protocols bgp group MX21-EVPN type external user@MX22# set protocols bgp group MX21-EVPN multihop ttl 2 user@MX22# set protocols bgp group MX21-EVPN multihop no-nexthop-change user@MX22# set protocols bgp group MX21-EVPN local-address 198.51.100.22 user@MX22# set protocols bgp group MX21-EVPN peer-as 800 user@MX22# set protocols bgp group MX21-EVPN local-as 900 user@MX22# set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling
Configure interfaces de enrutamiento y puentes integrados (IRB) que anuncien las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
Procedimiento paso a paso
La siguiente es la configuración de puerta de enlace IRB para la VLAN-1 en host (que es la parte de host de VLAN-1):
[edit] user@MX22# set interfaces irb unit 1 proxy-macip-advertisement user@MX22# set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa user@MX22# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 1 family inet address 10.11.1.15/24 virtual-gateway-address 10.11.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-2 en host (que es la parte de host de VLAN-2):
[edit] user@MX22# set interfaces irb unit 2 proxy-macip-advertisement user@MX22# set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb user@MX22# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 2 family inet address 10.12.1.15/24 virtual-gateway-address 10.12.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-3 en host (que es la parte de host de VLAN-3):
[edit] user@MX22# set interfaces irb unit 3 proxy-macip-advertisement user@MX22# set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc user@MX22# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 3 family inet address 10.13.1.15/24 virtual-gateway-address 10.13.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-4 en host (que es la parte de host de VLAN-4):
[edit] user@MX22# set interfaces irb unit 4 proxy-macip-advertisement user@MX22# set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd user@MX22# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 4 family inet address 10.14.1.15/24 virtual-gateway-address 10.14.1.11
La siguiente es la configuración de puerta de enlace IRB para la VLAN-5 en host (que es la parte de host de VLAN-5):
[edit] user@MX22# set interfaces irb unit 5 proxy-macip-advertisement user@MX22# set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee user@MX22# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX22# set interfaces irb unit 5 family inet address 10.15.1.15/24 virtual-gateway-address 10.15.1.11
Configure las operaciones de seguimiento para rastrear todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@MX22# set protocols l2-learning traceoptions file MX22-L2ALD.log user@MX22# set protocols l2-learning traceoptions file size 10m user@MX22# set protocols l2-learning traceoptions level all user@MX22# set protocols l2-learning traceoptions flag all
Configure las políticas de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
[edit] user@MX22# set policy-options policy-statement LO from protocol direct user@MX22# set policy-options policy-statement LO from route-filter 198.51.100.22/32 exact user@MX22# set policy-options policy-statement LO then accept user@MX22# set policy-options policy-statement TEST1 term 1 from protocol bgp user@MX22# set policy-options policy-statement TEST1 term 1 from external user@MX22# set policy-options policy-statement TEST1 term 1 then reject
Configure las opciones de política de comunidad.
[edit] user@MX22# set policy-options community NO-EXPORT members no-advertise user@MX22# set policy-options community NO-EXPORT members no-export user@MX22# set policy-options community NO-EXPORT members no-export-subconfed
Aplique el equilibrio de carga.
[edit] user@MX22# set policy-options policy-statement TEST then community add NO-EXPORT user@MX22# set policy-options policy-statement evpn-pplb from protocol evpn user@MX22# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure un valor ESI en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN/puerta de enlace en la red DC2.
[edit] user@MX22# set interfaces lt-1/0/0 esi 00:33:33:33:33:33:33:33:33:33
Configure la multiconexión activo-activo en la interfaz de túnel lógico incluyendo la instrucción all-active.
[edit] user@MX22# set interfaces lt-1/0/0 esi all-active
Configure un par de interfaz de túnel lógico (lt-) en el enrutador de puerta de enlace MX22 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) se configura como la interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como la interfaz de acceso para EVPN basado en MPLS.
[edit] user@MX22# set interfaces lt-1/0/0 unit 0 peer-unit 1 user@MX22# set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk user@MX22# set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 user@MX22# set interfaces lt-1/0/0 unit 1 peer-unit 0 user@MX22# set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk user@MX22# set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5
Configure las opciones de enrutamiento y dirección de interfaz de circuito cerrado.
[edit] user@MX22# set interfaces lo0 unit 88 family inet address 198.51.100.22/32 user@MX22# set routing-options router-id 198.51.100.22 user@MX22# set routing-options autonomous-system 300
Configure el equilibrio de carga en MX22.
[edit] user@MX22# set routing-options forwarding-table export evpn-pplb
Habilite los protocolos RSVP, MPLS, BGP y OSPF en las interfaces de núcleo. Cree LSP MPLS y especifique la dirección de los otros enrutadores de borde wan y puerta de enlace (MX11, MX12, P, MX21).
[edit] user@MX22# set protocols rsvp interface all user@MX22# set protocols rsvp interface fxp0.0 disable user@MX22# set protocols mpls label-switched-path MX22-TO-MX11 to 192.0.2.21 user@MX22# set protocols mpls label-switched-path MX22-TO-MX12 to 192.0.2.22 user@MX22# set protocols mpls label-switched-path MX22-TO-P to 203.0.113.1 user@MX22# set protocols mpls label-switched-path MX22-TO-MX21 to 198.51.100.21 user@MX22# set protocols mpls interface all user@MX22# set protocols mpls interface fxp0.0 disable user@MX22# set protocols bgp local-address 198.51.100.22 user@MX22# set protocols bgp export TEST user@MX22# set protocols bgp local-as 300 user@MX22# set protocols bgp group INT type internal user@MX22# set protocols bgp group INT family evpn signaling user@MX22# set protocols bgp group INT export TEST1 user@MX22# set protocols bgp group INT neighbor 203.0.113.1 user@MX22# set protocols ospf traffic-engineering user@MX22# set protocols ospf area 0.0.0.0 interface ge-1/0/2.0 user@MX22# set protocols ospf area 0.0.0.0 interface lo0.88 passive
Configure instancias de enrutamiento MPLS basadas en EVPN en el enrutador MX22 para cada red virtual. Defina el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN-MPLS) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure un dominio de puente para cada enrutador virtual que asigne identificadores de VLAN.
[edit] user@MX22# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX22# set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 user@MX22# set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.22:100 user@MX22# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file MX22-EVPN-MPLS-1.log user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions file size 10m user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn traceoptions flag all user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX22# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX22# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
Configure las instancias de enrutamiento de EVPN-VXLAN en el enrutador MX22 para cada red virtual. Defina la interfaz de origen de VTEP, el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNIDs a ID de VLAN e identifique el método de reenvío BUM.
[edit] user@MX22# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.88 user@MX22# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX22# set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 user@MX22# set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.22:1 user@MX22# set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX22-EVPN-VXLAN-1.log user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX22# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX22# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX22# set routing-instances VRF instance-type vrf user@MX22# set routing-instances VRF interface irb.1 user@MX22# set routing-instances VRF interface irb.2 user@MX22# set routing-instances VRF interface irb.3 user@MX22# set routing-instances VRF interface irb.4 user@MX22# set routing-instances VRF interface irb.5 user@MX22# set routing-instances VRF route-distinguisher 1:1 user@MX22# set routing-instances VRF vrf-target target:10:10
Configuración de ToR21
Procedimiento paso a paso
El siguiente ejemplo requiere que navegue por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración en la Guía del usuario de CLI.
Configure el enrutador MX como ToR21:
Establezca el nombre de host del sistema.
[edit] user@ToR21# set system host-name ToR21
Configure las interfaces y los dominios de puente en el dispositivo CE4 para habilitar la conectividad de capa 2.
[edit] user@ce4# set logical-systems CE-4 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 4" user@ce4# set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ce4# set logical-systems CE-4 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ce4# set logical-systems CE-4 interfaces ge-1/1/6 unit 0 description "CONNECTED TO ToR21" user@ce4# set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge interface-mode trunk user@ce4# set logical-systems CE-4 interfaces ge-1/1/6 unit 0 family bridge vlan-id-list 1-5 user@ce4# set logical-systems CE-4 bridge-domains BD-1 domain-type bridge user@ce4# set logical-systems CE-4 bridge-domains BD-1 vlan-id 1 user@ce4# set logical-systems CE-4 bridge-domains BD-2 domain-type bridge user@ce4# set logical-systems CE-4 bridge-domains BD-2 vlan-id 2 user@ce4# set logical-systems CE-4 bridge-domains BD-3 domain-type bridge user@ce4# set logical-systems CE-4 bridge-domains BD-3 vlan-id 3 user@ce4# set logical-systems CE-4 bridge-domains BD-4 domain-type bridge user@ce4# set logical-systems CE-4 bridge-domains BD-4 vlan-id 4 user@ce4# set logical-systems CE-4 bridge-domains BD-5 domain-type bridge user@ce4# set logical-systems CE-4 bridge-domains BD-5 vlan-id 5
Configure las opciones de seguimiento para las interfaces para habilitar los registros de seguimiento.
[edit] user@ce4# set interfaces traceoptions file R6-DCD.log user@ce4# set interfaces traceoptions file size 10m user@ce4# set interfaces traceoptions flag all
Establezca el número de interfaces Ethernet agregadas.
[edit] user@ToR21# set chassis aggregated-devices ethernet device-count 1
Configure las interfaces en el dispositivo ToR21 para conectarse a los dispositivos MX22, CE-5, CE-4, ToR22 y MX21 para habilitar la conectividad subyacente.
[edit] user@ToR21# set interfaces xe-0/0/0 unit 0 description "CONNECTED TO MX22" user@ToR21# set interfaces xe-0/0/0 unit 0 family inet address 192.168.10.2/24 user@ToR21# set interfaces ge-1/0/0 description "CONNECTED TO CE-5" user@ToR21# set interfaces ge-1/0/0 gigether-options 802.3ad ae0 user@ToR21# set interfaces ge-1/0/1 unit 0 description "CONNECTED TO MX21" user@ToR21# set interfaces ge-1/0/1 unit 0 family inet address 192.168.101.1/24 user@ToR21# set interfaces ge-1/0/6 unit 0 description "CONNECTED TO CE-4" user@ToR21# set interfaces ge-1/0/6 unit 0 family bridge interface-mode trunk user@ToR21# set interfaces ge-1/0/6 unit 0 family bridge vlan-id-list 1-5 user@ToR21# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR22" user@ToR21# set interfaces ge-1/1/3 unit 0 family inet address 192.168.12.1/24
Configure una interfaz de grupo de agregación de vínculos (LACP) habilitada para el Protocolo de control de agregación de vínculos (LACP) hacia el dispositivo host final CE-5. El valor ESI es único a nivel mundial en todo el dominio de EVPN. La configuración totalmente activa permite que ToR21 y ToR22 reenvíen el tráfico hacia y desde los dispositivos CE, de modo que todos los vínculos CE se utilicen activamente.
[edit] user@ToR21# set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 user@ToR21# set interfaces ae0 esi all-active user@ToR21# set interfaces ae0 aggregated-ether-options lacp active user@ToR21# set interfaces ae0 aggregated-ether-options lacp periodic fast user@ToR21# set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 user@ToR21# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR21# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5
Configure las opciones de enrutamiento y dirección de interfaz de circuito cerrado.
[edit] user@ToR21# set interfaces lo0 unit 90 family inet address 198.51.100.11/32 user@ToR21# set routing-options router-id 198.51.100.11 user@ToR21# set routing-options autonomous-system 600
Configure el equilibrio de carga en ToR21.
[edit] user@ToR21# set routing-options forwarding-table export evpn-pplb
Configure una conectividad subyacente de BGP externo multiprotocolo (MP-EBGP) entre los enrutadores ToR (ToR21 y ToR22) y puerta de enlace (MX21 y MX22).
[edit] user@ToR21# set protocols bgp export TEST user@ToR21# set protocols bgp local-as 600 user@ToR21# set protocols bgp group MX21 type external user@ToR21# set protocols bgp group MX21 local-address 192.168.9.2 user@ToR21# set protocols bgp group MX21 export LO user@ToR21# set protocols bgp group MX21 export TEST user@ToR21# set protocols bgp group MX21 peer-as 800 user@ToR21# set protocols bgp group MX21 local-as 600 user@ToR21# set protocols bgp group MX21 neighbor 192.168.9.1 family inet unicast user@ToR21# set protocols bgp group MX22 type external user@ToR21# set protocols bgp group MX22 local-address 10.102.2.1 user@ToR21# set protocols bgp group MX22 export LO user@ToR21# set protocols bgp group MX22 export TEST user@ToR21# set protocols bgp group MX22 peer-as 900 user@ToR21# set protocols bgp group MX22 local-as 600 user@ToR21# set protocols bgp group MX22 neighbor 192.168.10.1 family inet unicast user@ToR21# set protocols bgp group ToR22 type external user@ToR21# set protocols bgp group ToR22 local-address 10.105.5.1 user@ToR21# set protocols bgp group ToR22 export LO user@ToR21# set protocols bgp group ToR22 export TEST user@ToR21# set protocols bgp group ToR22 peer-as 700 user@ToR21# set protocols bgp group ToR22 local-as 600 user@ToR21# set protocols bgp group ToR22 neighbor 192.168.12.2 family inet unicast
Configure una superposición de BGP externa multiprotocolo (MP-EBGP) entre los enrutadores ToR (ToR21 y ToR22) y puerta de enlace (MX21 y MX22) y establezca EVPN como protocolo de señalización.
Procedimiento paso a paso
Configure una superposición MP-EBGP para conectarse entre ToR21 y MX21 mediante la señalización de EVPN.
[edit] user@ToR21# set protocols bgp group MX21-EVPN type external user@ToR21# set protocols bgp group MX21-EVPN multihop ttl 2 user@ToR21# set protocols bgp group MX21-EVPN multihop no-nexthop-change user@ToR21# set protocols bgp group MX21-EVPN local-address 198.51.100.11 user@ToR21# set protocols bgp group MX21-EVPN peer-as 800 user@ToR21# set protocols bgp group MX21-EVPN local-as 600 user@ToR21# set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling
Configure una superposición MP-EBGP para conectarse entre ToR21 y MX22 mediante la señalización de EVPN.
[edit] user@ToR21# set protocols bgp group MX22-EVPN type external user@ToR21# set protocols bgp group MX22-EVPN multihop ttl 2 user@ToR21# set protocols bgp group MX22-EVPN multihop no-nexthop-change user@ToR21# set protocols bgp group MX22-EVPN local-address 198.51.100.11 user@ToR21# set protocols bgp group MX22-EVPN peer-as 900 user@ToR21# set protocols bgp group MX22-EVPN local-as 600 user@ToR21# set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling
Configure una superposición MP-EBGP para conectarse entre ToR21 y ToR22 mediante la señalización de EVPN.
[edit] user@ToR21# set protocols bgp group ToR22-EVPN type external user@ToR21# set protocols bgp group ToR22-EVPN multihop ttl 2 user@ToR21# set protocols bgp group ToR22-EVPN multihop no-nexthop-change user@ToR21# set protocols bgp group ToR22-EVPN local-address 198.51.100.11 user@ToR21# set protocols bgp group ToR22-EVPN peer-as 700 user@ToR21# set protocols bgp group ToR22-EVPN local-as 600 user@ToR21# set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling
Configure las operaciones de seguimiento para rastrear todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@ToR21# set protocols l2-learning traceoptions file TOR21-L2ALD.log user@ToR21# set protocols l2-learning traceoptions file size 10m user@ToR21# set protocols l2-learning traceoptions level all user@ToR21# set protocols l2-learning traceoptions flag all
Configure las políticas de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
[edit] user@ToR21# set policy-options policy-statement LO term 1 from protocol direct user@ToR21# set policy-options policy-statement LO term 1 from route-filter 198.51.100.11/32 exact user@ToR21# set policy-options policy-statement LO term 1 then accept
Configure las opciones de política de comunidad.
[edit] user@ToR21# set policy-options community NO-EXPORT members no-advertise user@ToR21# set policy-options community NO-EXPORT members no-export user@ToR21# set policy-options community NO-EXPORT members no-export-subconfed
Aplique el equilibrio de carga.
[edit] user@ToR21# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR21# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR21# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure instancias de enrutamiento EVPN para cada red virtual. Defina la interfaz de origen de VTEP, el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNIDs a ID de VLAN e identifique el método de reenvío BUM.
[edit] user@ToR21# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.90 user@ToR21# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR21# set routing-instances EVPN-VXLAN-1 interface ge-1/0/6.0 user@ToR21# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR21# set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.11:1 user@ToR21# set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR21-EVPN-VXLAN-1.log user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR21# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR21# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Configuración de ToR22
Procedimiento paso a paso
El siguiente ejemplo requiere que navegue por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración en la Guía del usuario de CLI.
Configure el enrutador MX ToR22:
Establezca el nombre de host del sistema.
[edit] user@ToR22# set system host-name ToR22
Configure las interfaces y los dominios de puente en el dispositivo CE-5 para habilitar la conectividad de capa 2.
[edit] user@ce5# set logical-systems CE-5 interfaces ge-1/0/9 unit 0 description "CONNECTED TO Host 5" user@ce5# set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge interface-mode trunk user@ce5# set logical-systems CE-5 interfaces ge-1/0/9 unit 0 family bridge vlan-id-list 1-5 user@ce5# set logical-systems CE-5 interfaces ae1 unit 0 description "CONNECTED TO ToR21" user@ce5# set logical-systems CE-5 interfaces ae1 unit 0 family bridge interface-mode trunk user@ce5# set logical-systems CE-5 interfaces ae1 unit 0 family bridge vlan-id-list 1-5 user@ce5# set logical-systems CE-5 bridge-domains BD-1 domain-type bridge user@ce5# set logical-systems CE-5 bridge-domains BD-1 vlan-id 1 user@ce5# set logical-systems CE-5 bridge-domains BD-2 domain-type bridge user@ce5# set logical-systems CE-5 bridge-domains BD-2 vlan-id 2 user@ce5# set logical-systems CE-5 bridge-domains BD-3 domain-type bridge user@ce5# set logical-systems CE-5 bridge-domains BD-3 vlan-id 3 user@ce5# set logical-systems CE-5 bridge-domains BD-4 domain-type bridge user@ce5# set logical-systems CE-5 bridge-domains BD-4 vlan-id 4 user@ce5# set logical-systems CE-5 bridge-domains BD-5 domain-type bridge user@ce5# set logical-systems CE-5 bridge-domains BD-5 vlan-id 5
Configure las interfaces y los dominios de puente en el dispositivo CE-3 para habilitar la conectividad de capa 2.
[edit] user@ce3# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 description "CONNECTED TO ToR12" user@ce3# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge interface-mode trunk user@ce3# set logical-systems CE-3 interfaces ge-1/1/7 unit 0 family bridge vlan-id-list 1-5 user@ce3# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 description "CONNECTED TO Host 3" user@ce3# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge interface-mode trunk user@ce3# set logical-systems CE-3 interfaces ge-1/1/9 unit 0 family bridge vlan-id-list 1-5 user@ce3# set logical-systems CE-3 bridge-domains BD-1 domain-type bridge user@ce3# set logical-systems CE-3 bridge-domains BD-1 vlan-id 1 user@ce3# set logical-systems CE-3 bridge-domains BD-2 domain-type bridge user@ce3# set logical-systems CE-3 bridge-domains BD-2 vlan-id 2 user@ce3# set logical-systems CE-3 bridge-domains BD-3 domain-type bridge user@ce3# set logical-systems CE-3 bridge-domains BD-3 vlan-id 3 user@ce3# set logical-systems CE-3 bridge-domains BD-4 domain-type bridge user@ce3# set logical-systems CE-3 bridge-domains BD-4 vlan-id 4 user@ce3# set logical-systems CE-3 bridge-domains BD-5 domain-type bridge user@ce3# set logical-systems CE-3 bridge-domains BD-5 vlan-id 5
Configure las opciones de seguimiento para las interfaces para habilitar los registros de seguimiento.
[edit] user@ce3# set interfaces traceoptions file R1-DCD.log user@ce3# set interfaces traceoptions file size 10m user@ce3# set interfaces traceoptions flag all
Establezca el número de interfaces Ethernet agregadas.
[edit] user@ToR12# set chassis aggregated-devices ethernet device-count 2
Configure las interfaces en el dispositivo ToR12 para conectarse a los dispositivos MX12, CE-2, CE-3, ToR11 y MX11 para habilitar la conectividad subyacente.
[edit] user@ToR12# set interfaces ge-1/0/0 unit 0 description "CONNECTED TO MX11" user@ToR12# set interfaces ge-1/0/0 unit 0 family inet address 192.168.6.1/24 user@ToR12# set interfaces ge-1/0/4 unit 0 description "CONNECTED TO MX12" user@ToR12# set interfaces ge-1/0/4 unit 0 family inet address 192.168.5.1/24 user@ToR12# set interfaces ge-1/0/6 description "CONNECTED TO CE-1" user@ToR12# set interfaces ge-1/0/6 gigether-options 802.3ad ae0 user@ToR12# set interfaces ge-1/0/7 unit 0 description "CONNECTED TO CE-3" user@ToR12# set interfaces ge-1/0/7 unit 0 family bridge interface-mode trunk user@ToR12# set interfaces ge-1/0/7 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set interfaces ge-1/1/0 description "CONNECTED TO ToR11" user@ToR12# set interfaces ge-1/1/0 gigether-options 802.3ad ae1 user@ToR12# set interfaces ge-1/1/3 unit 0 description "CONNECTED TO ToR11" user@ToR12# set interfaces ge-1/1/3 unit 0 family inet address 192.168.2.2/24 user@ToR12# set interfaces ge-1/1/6 description "CONNECTED TO ToR12" user@ToR12# set interfaces ge-1/1/6 gigether-options 802.3ad ae1
Configure una interfaz de grupo de agregación de vínculos (LACP) habilitada para el Protocolo de control de agregación de vínculos (LACP) hacia el dispositivo host final CE-1. El valor ESI es único a nivel mundial en todo el dominio de EVPN. La configuración totalmente activa permite que ToR11 y ToR12 reenvíen el tráfico hacia y desde los dispositivos CE, de modo que todos los vínculos CE se utilicen activamente.
[edit] user@ToR12# set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 user@ToR12# set interfaces ae0 esi all-active user@ToR12# set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 user@ToR12# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR12# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 user@ToR12# set interfaces ae1 aggregated-ether-options lacp active user@ToR12# set interfaces ae1 aggregated-ether-options lacp periodic fast
Configure las opciones de enrutamiento y dirección de interfaz de circuito cerrado.
[edit] user@ToR12# set interfaces lo0 unit 82 family inet address 192.0.2.12/32 user@ToR12# set routing-options router-id 192.0.2.12 user@ToR12# set routing-options autonomous-system 200
Configure el equilibrio de carga en ToR12.
[edit] user@ToR12# set routing-options forwarding-table export evpn-pplb
Configure una conectividad subyacente de BGP externo multiprotocolo (MP-EBGP) entre los enrutadores ToR (ToR12 y ToR11) y puerta de enlace (MX11 y MX12).
[edit] user@ToR12# set protocols bgp local-as 200 user@ToR12# set protocols bgp group MX11 type external user@ToR12# set protocols bgp group MX11 local-address 192.168.6.1 user@ToR12# set protocols bgp group MX11 export LO user@ToR12# set protocols bgp group MX11 export TEST user@ToR12# set protocols bgp group MX11 peer-as 400 user@ToR12# set protocols bgp group MX11 local-as 200 user@ToR12# set protocols bgp group MX11 neighbor 192.168.6.2 family inet unicast user@ToR12# set protocols bgp group MX12 type external user@ToR12# set protocols bgp group MX12 local-address 192.168.5.1 user@ToR12# set protocols bgp group MX12 export LO user@ToR12# set protocols bgp group MX12 export TEST user@ToR12# set protocols bgp group MX12 peer-as 500 user@ToR12# set protocols bgp group MX12 local-as 200 user@ToR12# set protocols bgp group MX12 neighbor 192.168.5.2 family inet unicast user@ToR12# set protocols bgp group ToR11 type external user@ToR12# set protocols bgp group ToR11 local-address 192.168.2.2 user@ToR12# set protocols bgp group ToR11 export LO user@ToR12# set protocols bgp group ToR11 export TEST user@ToR12# set protocols bgp group ToR11 peer-as 100 user@ToR12# set protocols bgp group ToR11 local-as 200 user@ToR12# set protocols bgp group ToR11 neighbor 192.168.2.1 family inet unicast
Configure una superposición externa de BGP multiprotocolo (MP-EBGP) entre los enrutadores ToR (ToR12 y ToR11) y puerta de enlace (MX11 y MX12) y establezca EVPN como protocolo de señalización.
Procedimiento paso a paso
Configure una superposición MP-EBGP para conectarse entre ToR12 y MX11 mediante la señalización de EVPN.
[edit] user@ToR12# set protocols bgp group MX11-EVPN type external user@ToR12# set protocols bgp group MX11-EVPN multihop ttl 2 user@ToR12# set protocols bgp group MX11-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group MX11-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group MX11-EVPN export TEST user@ToR12# set protocols bgp group MX11-EVPN peer-as 400 user@ToR12# set protocols bgp group MX11-EVPN local-as 200 user@ToR12# set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling
Configure una superposición MP-EBGP para conectarse entre ToR12 y MX12 mediante la señalización de EVPN.
[edit] user@ToR12# set protocols bgp group MX12-EVPN type external user@ToR12# set protocols bgp group MX12-EVPN multihop ttl 2 user@ToR12# set protocols bgp group MX12-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group MX12-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group MX12-EVPN export TEST user@ToR12# set protocols bgp group MX12-EVPN peer-as 500 user@ToR12# set protocols bgp group MX12-EVPN local-as 200 user@ToR12# set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling
Configure una superposición MP-EBGP para conectarse entre ToR12 y ToR11 mediante la señalización EVPN.
[edit] user@ToR12# set protocols bgp group ToR11-EVPN type external user@ToR12# set protocols bgp group ToR11-EVPN multihop ttl 2 user@ToR12# set protocols bgp group ToR11-EVPN multihop no-nexthop-change user@ToR12# set protocols bgp group ToR11-EVPN local-address 192.0.2.12 user@ToR12# set protocols bgp group ToR11-EVPN export TEST user@ToR12# set protocols bgp group ToR11-EVPN peer-as 100 user@ToR12# set protocols bgp group ToR11-EVPN local-as 200 user@ToR12# set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling user@ToR12# set protocols bgp group ToR12-EVPN export TEST
Configure las operaciones de seguimiento para rastrear todas las propiedades de aprendizaje y reenvío de direcciones de capa 2.
[edit] user@ToR12# set protocols l2-learning traceoptions file TOR12-L2ALD.log user@ToR12# set protocols l2-learning traceoptions file size 10m user@ToR12# set protocols l2-learning traceoptions level all user@ToR12# set protocols l2-learning traceoptions flag all
Configure las políticas de enrutamiento para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
[edit] user@ToR12# set policy-options policy-statement LO term 1 from protocol direct user@ToR12# set policy-options policy-statement LO term 1 from route-filter 192.0.2.12/32 exact user@ToR12# set policy-options policy-statement LO term 1 then accept
Configure las opciones de política de comunidad.
[edit] user@ToR12# set policy-options community NO-EXPORT members no-advertise user@ToR12# set policy-options community NO-EXPORT members no-export user@ToR12# set policy-options community NO-EXPORT members no-export-subconfed
Aplique el equilibrio de carga.
[edit] user@ToR12# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR12# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR12# set policy-options policy-statement evpn-pplb then load-balance per-packet
Configure instancias de enrutamiento EVPN para cada red virtual. Defina la interfaz de origen de VTEP, el distinguidor de ruta (utilizado para identificar y anunciar rutas de EVPN) y el vrf-target (exporta y etiqueta todas las rutas para ese VRF local mediante el destino de ruta definido). Configure el protocolo EVPN, el método de encapsulación, la lista VNI y el método de reenvío de tráfico BUM. Por último, configure un dominio de puente para cada enrutador virtual que asigne VNIDs a ID de VLAN e identifique el método de reenvío BUM.
[edit] user@ToR12# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.82 user@ToR12# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR12# set routing-instances EVPN-VXLAN-1 interface ge-1/0/7.0 user@ToR12# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR12# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.12:1 user@ToR12# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file TOR12-EVPN-VXLAN-1.log user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR12# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR12# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5
Verificación
Después de configurar tanto la capa subyacente como la superposición EVPN, recomendamos que verifique que las configuraciones funcionen como estaba previsto.
- Verificar la configuración de ToR11
- Verificar la configuración de ToR12
- Verificar la configuración del enrutador de borde 1 de WAN (MX11)
- Verificar la configuración del enrutador de borde 2 de WAN (MX12)
- Verificar la configuración del enrutador de borde 3 de WAN (MX21)
- Verificación de la configuración del enrutador de borde 4 (MX22) de la puerta de enlace del centro de datos y del enrutador de borde WAN 4
- Verificar la configuración de ToR21
- Verificar la configuración de ToR22
Verificar la configuración de ToR11
Propósito
Compruebe que El ToR11 está correctamente configurado.
Acción
Verifique que las interfaces lógicas del sistema y los dominios de puente en el dispositivo CE2 estén correctamente configurados para habilitar la conectividad de capa 2.
user@ce2> show configuration logical-systems CE-2 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host 2"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/6 { unit 0 { description "CONNECTED TO ToR11"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
Verifique que las interfaces y las opciones de seguimiento en ToR11 estén configuradas correctamente para habilitar la conectividad subyacente a otros dispositivos de borde WAN y toR y puerta de enlace.
user@ToR11>show configuration interfaces traceoptions { file R0-DCD.log size 10m; flag all; } ge-1/0/5 { unit 0 { description "CONNECTED TO MX12"; family inet { address 192.168.4.1/24; } } } ge-1/0/6 { unit 0 { description "CONNECTED TO CE-2"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/0 { description "CONNECTED TO CE-1"; gigether-options { 802.3ad ae0; } } ge-1/1/1 { unit 0 { description "CONNECTED TO MX11"; family inet { address 192.168.3.1/24; } } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR12"; family inet { address 192.168.2.1/24; } } } ae0 { esi { 00:11:11:11:11:11:11:11:11:11; all-active; } aggregated-ether-options { lacp { active; periodic fast; system-id 11:11:11:11:11:11; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } lo0 { unit 81 { family inet { address 192.0.2.11/32; } } }
Compruebe que las opciones de enrutamiento y equilibrio de carga estén correctamente configuradas.
user@ToR11> show configuration routing-options router-id 192.0.2.11; autonomous-system 100; forwarding-table { export evpn-pplb; }
Verifique que el BGP externo multiprotocolo (MP-EBGP) subyacente y superpuesto protocolos y las propiedades de aprendizaje y reenvío de direcciones de capa 2 estén correctamente configurados.
user@ToR11> show configuration protocols bgp { local-as 100; group MX11 { type external; local-address 192.168.3.1; export [ LO TEST ]; peer-as 400; neighbor 192.168.3.2 { family inet { unicast; } } } group MX12 { type external; local-address 192.168.4.1; export [ LO TEST ]; peer-as 500; neighbor 192.168.4.2 { family inet { unicast; } } } group ToR12 { type external; local-address 192.168.2.1; export [ LO TEST ]; peer-as 200; local-as 100; neighbor 192.168.2.2 { family inet { unicast; } } } group MX11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.11; export TEST; peer-as 400; local-as 100; neighbor 192.0.2.21 { family evpn { signaling; } } } group MX12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.11; export TEST; peer-as 500; local-as 100; neighbor 192.0.2.22 { family evpn { signaling; } } } group ToR12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.11; export TEST; peer-as 200; local-as 100; neighbor 192.0.2.12 { family evpn { signaling; } } } } l2-learning { traceoptions { file TOR11-L2ALD.log size 10m; level all; flag all; } }
Verifique que las políticas de enrutamiento, las opciones de política de comunidad y el equilibrio de carga estén correctamente configuradas para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
user@ToR11> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 192.0.2.11/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Verifique que las instancias de enrutamiento EVPN-VXLAN para cada red virtual estén correctamente configuradas.
user@ToR11> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.81; instance-type virtual-switch; interface ge-1/0/6.0; interface ae0.0; route-distinguisher 192.0.2.11:1; vrf-target target:1:1; protocols { evpn { traceoptions { file TOR11-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }
Verificar la configuración de ToR12
Propósito
Compruebe que El ToR12 está correctamente configurado.
Acción
Verifique que las interfaces del sistema lógico y los dominios de puente en los dispositivos CE1 y CE3 estén correctamente configurados para habilitar la conectividad de capa 2.
user@ce1> show configuration logical-systems CE-1 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host 1"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { unit 0 { description "CONNECTED TO ToR12"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } user@ce3> show configuration logical-systems CE-3 { interfaces { ge-1/1/7 { unit 0 { description "CONNECTED TO ToR12"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/9 { unit 0 { description "CONNECTED TO Host 3"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
Verifique que las interfaces y las opciones de seguimiento de ToR12 estén configuradas correctamente para habilitar la conectividad subyacente a otros dispositivos de borde WAN y toR y puerta de enlace.
user@ToR12>show configuration interfaces traceoptions { file R1-DCD.log size 10m; flag all; } ge-1/0/0 { unit 0 { description "CONNECTED TO MX11"; family inet { address 192.168.6.1/24; } } } ge-1/0/4 { unit 0 { description "CONNECTED TO MX12"; family inet { address 192.168.5.1/24; } } } ge-1/0/6 { description "CONNECTED TO CE-1"; gigether-options { 802.3ad ae0; } } ge-1/0/7 { unit 0 { description "CONNECTED TO CE-3"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/0 { description "CONNECTED TO ToR11"; gigether-options { 802.3ad ae1; } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR11"; family inet { address 192.168.2.2/24; } } } ge-1/1/6 { description "CONNECTED TO ToR12"; gigether-options { 802.3ad ae1; } } ae0 { esi { 00:11:11:11:11:11:11:11:11:11; all-active; } aggregated-ether-options { lacp { system-id 11:11:11:11:11:11; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { aggregated-ether-options { lacp { active; periodic fast; } } } lo0 { unit 82 { family inet { address 192.0.2.12/32; } } }
Compruebe que las opciones de enrutamiento y equilibrio de carga estén correctamente configuradas.
user@ToR12> show configuration routing-options router-id 192.0.2.12; autonomous-system 200; forwarding-table { export evpn-pplb; }
Verifique que el BGP externo multiprotocolo (MP-EBGP) subyacente y superpuesto protocolos y las propiedades de aprendizaje y reenvío de direcciones de capa 2 estén correctamente configurados.
user@ToR12> show configuration protocols bgp { local-as 200; group MX11 { type external; local-address 192.168.6.1; export [ LO TEST ]; peer-as 400; local-as 200; neighbor 192.168.6.2 { family inet { unicast; } } } group MX12 { type external; local-address 192.168.5.1; export [ LO TEST ]; peer-as 500; local-as 200; neighbor 192.168.5.2 { family inet { unicast; } } } group ToR11 { type external; local-address 192.168.2.2; export [ LO TEST ]; peer-as 100; local-as 200; neighbor 192.168.2.1 { family inet { unicast; } } } group MX11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.12; export TEST; peer-as 400; local-as 200; neighbor 192.0.2.21 { family evpn { signaling; } } } group MX12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.12; export TEST; peer-as 500; local-as 200; neighbor 192.0.2.22 { family evpn { signaling; } } } group ToR11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.12; export TEST; peer-as 100; local-as 200; neighbor 192.0.2.11 { family evpn { signaling; } } } group ToR12-EVPN { export TEST; } } l2-learning { traceoptions { file TOR12-L2ALD.log size 10m; level all; flag all; } }
Verifique que las políticas de enrutamiento, las opciones de política de comunidad y el equilibrio de carga estén correctamente configuradas para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
user@ToR12> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 192.0.2.12/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Verifique que las instancias de enrutamiento EVPN-VXLAN para cada red virtual estén correctamente configuradas.
user@ToR12> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.82; instance-type virtual-switch; interface ge-1/0/7.0; interface ae0.0; route-distinguisher 192.0.2.12:1; vrf-target target:1:1; protocols { evpn { traceoptions { file TOR12-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }
Verificar la configuración del enrutador de borde 1 de WAN (MX11)
Propósito
Compruebe que MX11 está correctamente configurado.
Acción
Compruebe que las interfaces del enrutador MX11 (DC GW/WAN Edge1) estén configuradas para lo siguiente:
Conectividad subyacente a los dispositivos MX12, ToR11, ToR12 y P, que es la parte EVPN-VXLAN de la red DC1.
user@MX11> show configuration interfaces traceoptions { file R2-DCD.log size 10m; flag all; } ge-5/1/0 { unit 0 { description "CONNECTED TO MX-21"; family inet { address 192.168.7.1/24; } } } ge-5/1/1 { unit 0 { description "CONNECTED TO TOR-11"; family inet { address 192.168.3.2/24; } } } ge-5/1/8 { unit 0 { description "CONNECTED TO TOR-12"; family inet { address 192.168.6.2/24; } } } ge-5/1/9 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.1.1/24; } family mpls; } }
Interfaces de enrutamiento y puentes integrados (IRB) que anuncian las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
user@MX11> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.12/24 { virtual-gateway-address 10.11.1.10; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.12/24 { virtual-gateway-address 10.12.1.10; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.12/24 { virtual-gateway-address 10.13.1.10; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.12/24 { virtual-gateway-address 10.14.1.10; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.12/24 { virtual-gateway-address 10.15.1.10; } } } }
Un valor ESI y multiconexión activo-activo en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN/puerta de enlace en la red DC1.
user@MX11> show configuration interfaces lt-5/1/0 { esi { 00:22:22:22:22:22:22:22:22:22; all-active; } }
Un par de interfaz de túnel lógico (lt-) en el enrutador de puerta de enlace MX11 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) se configura como la interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como la interfaz de acceso para EVPN basado en MPLS.
user@MX11> show configuration interfaces lt-5/1/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
Dirección de interfaz de circuito cerrado.
user@MX11> show configuration interfaces lo0 { unit 84 { family inet { address 192.0.2.21/32; } family mpls; } }
Verifique que las opciones de enrutamiento y el equilibrio de carga estén correctamente configurados.
user@MX11> show configuration routing-options router-id 192.0.2.21; autonomous-system 300; forwarding-table { export evpn-pplb; }
Verifique que los protocolos subyacentes y superpuestos de BGP externos (MP-EBGP) multiprotocolo y los protocolos RSVP, MPLS, BGP y OSPF estén correctamente configurados.
user@MX11> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX11-TO-MX12 { to 192.0.2.22; } label-switched-path MX11-TO-P { to 203.0.113.1; } label-switched-path MX11-TO-MX21 { to 198.51.100.21; } label-switched-path MX11-TO-MX22 { to 198.51.100.22; } interface all; interface fxp0.0 { disable; } } bgp { local-address 192.0.2.21; local-as 300; group INT { type internal; local-address 192.0.2.21; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group TOR-11 { type external; local-address 192.168.3.2; import TEST; export [ TEST LO ]; peer-as 100; local-as 400; neighbor 192.168.3.1 { family inet { unicast; } } } group TOR-12 { type external; local-address 192.168.6.2; export [ TEST LO ]; peer-as 200; local-as 400; neighbor 192.168.6.1 { family inet { unicast; } } } group MX-12 { type external; local-address 192.168.7.1; export [ TEST LO ]; peer-as 500; local-as 400; neighbor 192.168.7.2 { family inet { unicast; } } } group TOR-11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 100; local-as 400; neighbor 192.0.2.11 { family evpn { signaling; } } } group TOR-12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 200; local-as 400; neighbor 192.0.2.12 { family evpn { signaling; } } } group MX-12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 500; local-as 400; neighbor 192.0.2.22 { family evpn { signaling; } } } group MX-11-EVPN { export TEST; } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-5/1/9.0; interface lo0.84 { passive; } } } l2-learning { traceoptions { file MX11-L2ALD.log size 10m; level all; flag all; } }
Verifique que las políticas de enrutamiento, las opciones de política de comunidad y el equilibrio de carga estén correctamente configuradas para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
user@MX11> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 192.0.2.21/32 exact; } then accept; } from { protocol direct; route-filter 192.0.2.21/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Verifique que las instancias de enrutamiento de MPLS basadas en EVPN y las instancias de enrutamiento de EVPN-VXLAN estén correctamente configuradas.
user@MX11> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-5/1/0.0; route-distinguisher 192.0.2.21:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX11-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.84; instance-type virtual-switch; interface lt-5/1/0.1; route-distinguisher 192.0.2.21:1; vrf-target target:1:1; protocols { evpn { traceoptions { file MX11-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
Verificar la configuración del enrutador de borde 2 de WAN (MX12)
Propósito
Compruebe que MX12 está correctamente configurado.
Acción
Compruebe que las interfaces del enrutador MX11 (DC GW/WAN Edge1) estén configuradas para lo siguiente:
Conectividad subyacente a los dispositivos MX12, ToR11, ToR12 y P, que es la parte EVPN-VXLAN de la red DC1.
user@MX11> show configuration interfaces traceoptions { file R2-DCD.log size 10m; flag all; } ge-5/1/0 { unit 0 { description "CONNECTED TO MX-21"; family inet { address 192.168.7.1/24; } } } ge-5/1/1 { unit 0 { description "CONNECTED TO TOR-11"; family inet { address 192.168.3.2/24; } } } ge-5/1/8 { unit 0 { description "CONNECTED TO TOR-12"; family inet { address 192.168.6.2/24; } } } ge-5/1/9 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.1.1/24; } family mpls; } }
Interfaces de enrutamiento y puentes integrados (IRB) que anuncian las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
user@MX11> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.12/24 { virtual-gateway-address 10.11.1.10; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.12/24 { virtual-gateway-address 10.12.1.10; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.12/24 { virtual-gateway-address 10.13.1.10; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.12/24 { virtual-gateway-address 10.14.1.10; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.12/24 { virtual-gateway-address 10.15.1.10; } } } }
Un valor ESI y multiconexión activo-activo en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN/puerta de enlace en la red DC1.
user@MX11> show configuration interfaces lt-5/1/0 { esi { 00:22:22:22:22:22:22:22:22:22; all-active; } }
Un par de interfaz de túnel lógico (lt-) en el enrutador de puerta de enlace MX11 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) se configura como la interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como la interfaz de acceso para EVPN basado en MPLS.
user@MX11> show configuration interfaces lt-5/1/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
Dirección de interfaz de circuito cerrado.
user@MX11> show configuration interfaces lo0 { unit 84 { family inet { address 192.0.2.21/32; } family mpls; } }
Verifique que las opciones de enrutamiento y el equilibrio de carga estén correctamente configurados.
user@MX11> show configuration routing-options router-id 192.0.2.21; autonomous-system 300; forwarding-table { export evpn-pplb; }
Verifique que los protocolos subyacentes y superpuestos de BGP externos (MP-EBGP) multiprotocolo y los protocolos RSVP, MPLS, BGP y OSPF estén correctamente configurados.
user@MX11> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX11-TO-MX12 { to 192.0.2.22; } label-switched-path MX11-TO-P { to 203.0.113.1; } label-switched-path MX11-TO-MX21 { to 198.51.100.21; } label-switched-path MX11-TO-MX22 { to 198.51.100.22; } interface all; interface fxp0.0 { disable; } } bgp { local-address 192.0.2.21; local-as 300; group INT { type internal; local-address 192.0.2.21; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group TOR-11 { type external; local-address 192.168.3.2; import TEST; export [ TEST LO ]; peer-as 100; local-as 400; neighbor 192.168.3.1 { family inet { unicast; } } } group TOR-12 { type external; local-address 192.168.6.2; export [ TEST LO ]; peer-as 200; local-as 400; neighbor 192.168.6.1 { family inet { unicast; } } } group MX-12 { type external; local-address 192.168.7.1; export [ TEST LO ]; peer-as 500; local-as 400; neighbor 192.168.7.2 { family inet { unicast; } } } group TOR-11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 100; local-as 400; neighbor 192.0.2.11 { family evpn { signaling; } } } group TOR-12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 200; local-as 400; neighbor 192.0.2.12 { family evpn { signaling; } } } group MX-12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 500; local-as 400; neighbor 192.0.2.22 { family evpn { signaling; } } } group MX-11-EVPN { export TEST; } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-5/1/9.0; interface lo0.84 { passive; } } } l2-learning { traceoptions { file MX11-L2ALD.log size 10m; level all; flag all; } }
Verifique que las políticas de enrutamiento, las opciones de política de comunidad y el equilibrio de carga estén correctamente configuradas para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
user@MX11> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 192.0.2.21/32 exact; } then accept; } from { protocol direct; route-filter 192.0.2.21/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Verifique que las instancias de enrutamiento de MPLS basadas en EVPN y las instancias de enrutamiento de EVPN-VXLAN estén correctamente configuradas.
user@MX11> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-5/1/0.0; route-distinguisher 192.0.2.21:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX11-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.84; instance-type virtual-switch; interface lt-5/1/0.1; route-distinguisher 192.0.2.21:1; vrf-target target:1:1; protocols { evpn { traceoptions { file MX11-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
Verificar la configuración del enrutador de borde 3 de WAN (MX21)
Propósito
Compruebe que MX21 está correctamente configurado.
Acción
Compruebe que las interfaces del enrutador MX11 (DC GW/WAN Edge1) estén configuradas para lo siguiente:
Conectividad subyacente a los dispositivos MX12, ToR11, ToR12 y P, que es la parte EVPN-VXLAN de la red DC1.
user@MX11> show configuration interfaces traceoptions { file R2-DCD.log size 10m; flag all; } ge-5/1/0 { unit 0 { description "CONNECTED TO MX-21"; family inet { address 192.168.7.1/24; } } } ge-5/1/1 { unit 0 { description "CONNECTED TO TOR-11"; family inet { address 192.168.3.2/24; } } } ge-5/1/8 { unit 0 { description "CONNECTED TO TOR-12"; family inet { address 192.168.6.2/24; } } } ge-5/1/9 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.1.1/24; } family mpls; } }
Interfaces de enrutamiento y puentes integrados (IRB) que anuncian las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
user@MX11> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.12/24 { virtual-gateway-address 10.11.1.10; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.12/24 { virtual-gateway-address 10.12.1.10; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.12/24 { virtual-gateway-address 10.13.1.10; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.12/24 { virtual-gateway-address 10.14.1.10; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.12/24 { virtual-gateway-address 10.15.1.10; } } } }
Un valor ESI y multiconexión activo-activo en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN/puerta de enlace en la red DC1.
user@MX11> show configuration interfaces lt-5/1/0 { esi { 00:22:22:22:22:22:22:22:22:22; all-active; } }
Un par de interfaz de túnel lógico (lt-) en el enrutador de puerta de enlace MX11 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) se configura como la interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como la interfaz de acceso para EVPN basado en MPLS.
user@MX11> show configuration interfaces lt-5/1/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
Dirección de interfaz de circuito cerrado.
user@MX11> show configuration interfaces lo0 { unit 84 { family inet { address 192.0.2.21/32; } family mpls; } }
Verifique que las opciones de enrutamiento y el equilibrio de carga estén correctamente configurados.
user@MX11> show configuration routing-options router-id 192.0.2.21; autonomous-system 300; forwarding-table { export evpn-pplb; }
Verifique que los protocolos subyacentes y superpuestos de BGP externos (MP-EBGP) multiprotocolo y los protocolos RSVP, MPLS, BGP y OSPF estén correctamente configurados.
user@MX11> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX11-TO-MX12 { to 192.0.2.22; } label-switched-path MX11-TO-P { to 203.0.113.1; } label-switched-path MX11-TO-MX21 { to 198.51.100.21; } label-switched-path MX11-TO-MX22 { to 198.51.100.22; } interface all; interface fxp0.0 { disable; } } bgp { local-address 192.0.2.21; local-as 300; group INT { type internal; local-address 192.0.2.21; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group TOR-11 { type external; local-address 192.168.3.2; import TEST; export [ TEST LO ]; peer-as 100; local-as 400; neighbor 192.168.3.1 { family inet { unicast; } } } group TOR-12 { type external; local-address 192.168.6.2; export [ TEST LO ]; peer-as 200; local-as 400; neighbor 192.168.6.1 { family inet { unicast; } } } group MX-12 { type external; local-address 192.168.7.1; export [ TEST LO ]; peer-as 500; local-as 400; neighbor 192.168.7.2 { family inet { unicast; } } } group TOR-11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 100; local-as 400; neighbor 192.0.2.11 { family evpn { signaling; } } } group TOR-12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 200; local-as 400; neighbor 192.0.2.12 { family evpn { signaling; } } } group MX-12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 500; local-as 400; neighbor 192.0.2.22 { family evpn { signaling; } } } group MX-11-EVPN { export TEST; } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-5/1/9.0; interface lo0.84 { passive; } } } l2-learning { traceoptions { file MX11-L2ALD.log size 10m; level all; flag all; } }
Verifique que las políticas de enrutamiento, las opciones de política de comunidad y el equilibrio de carga estén correctamente configuradas para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
user@MX11> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 192.0.2.21/32 exact; } then accept; } from { protocol direct; route-filter 192.0.2.21/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Verifique que las instancias de enrutamiento de MPLS basadas en EVPN y las instancias de enrutamiento de EVPN-VXLAN estén correctamente configuradas.
user@MX11> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-5/1/0.0; route-distinguisher 192.0.2.21:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX11-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.84; instance-type virtual-switch; interface lt-5/1/0.1; route-distinguisher 192.0.2.21:1; vrf-target target:1:1; protocols { evpn { traceoptions { file MX11-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
Verificación de la configuración del enrutador de borde 4 (MX22) de la puerta de enlace del centro de datos y del enrutador de borde WAN 4
Propósito
Compruebe que MX22 está correctamente configurado.
Acción
Compruebe que las interfaces del enrutador MX11 (DC GW/WAN Edge1) estén configuradas para lo siguiente:
Conectividad subyacente a los dispositivos MX12, ToR11, ToR12 y P, que es la parte EVPN-VXLAN de la red DC1.
user@MX11> show configuration interfaces traceoptions { file R2-DCD.log size 10m; flag all; } ge-5/1/0 { unit 0 { description "CONNECTED TO MX-21"; family inet { address 192.168.7.1/24; } } } ge-5/1/1 { unit 0 { description "CONNECTED TO TOR-11"; family inet { address 192.168.3.2/24; } } } ge-5/1/8 { unit 0 { description "CONNECTED TO TOR-12"; family inet { address 192.168.6.2/24; } } } ge-5/1/9 { unit 0 { description "CONNECTED TO P"; family inet { address 203.0.1.1/24; } family mpls; } }
Interfaces de enrutamiento y puentes integrados (IRB) que anuncian las rutas MAC e IP (rutas MAC+IP tipo 2) para hosts en la topología. La configuración IRB es la puerta de enlace para las VLAN en los hosts.
user@MX11> show configuration interfaces irb { unit 1 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:aa:aa:aa:aa:aa:aa:aa:aa; all-active; } family inet { address 10.11.1.12/24 { virtual-gateway-address 10.11.1.10; } } } unit 2 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:bb:bb:bb:bb:bb:bb:bb:bb; all-active; } family inet { address 10.12.1.12/24 { virtual-gateway-address 10.12.1.10; } } } unit 3 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:cc:cc:cc:cc:cc:cc:cc:cc; all-active; } family inet { address 10.13.1.12/24 { virtual-gateway-address 10.13.1.10; } } } unit 4 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:dd:dd:dd:dd:dd:dd:dd:dd; all-active; } family inet { address 10.14.1.12/24 { virtual-gateway-address 10.14.1.10; } } } unit 5 { proxy-macip-advertisement; virtual-gateway-esi { 00:11:ee:ee:ee:ee:ee:ee:ee:ee; all-active; } family inet { address 10.15.1.12/24 { virtual-gateway-address 10.15.1.10; } } } }
Un valor ESI y multiconexión activo-activo en la interfaz de túnel lógico. Utilice el mismo valor ESI en todos los demás enrutadores de borde WAN/puerta de enlace en la red DC1.
user@MX11> show configuration interfaces lt-5/1/0 { esi { 00:22:22:22:22:22:22:22:22:22; all-active; } }
Un par de interfaz de túnel lógico (lt-) en el enrutador de puerta de enlace MX11 para interconectar la instancia de EVPN-VXLAN de la red del centro de datos con la instancia de EVPN basada en MPLS de la WAN. Una interfaz de túnel lógico (lt-) se configura como la interfaz de acceso para EVPN-VXLAN y la otra interfaz de túnel lógico (lt-) está configurada como la interfaz de acceso para EVPN basado en MPLS.
user@MX11> show configuration interfaces lt-5/1/0 { unit 0 { peer-unit 1; family bridge { interface-mode trunk; vlan-id-list 1-5; } } unit 1 { peer-unit 0; family bridge { interface-mode trunk; vlan-id-list 1-5; } } }
Dirección de interfaz de circuito cerrado.
user@MX11> show configuration interfaces lo0 { unit 84 { family inet { address 192.0.2.21/32; } family mpls; } }
Verifique que las opciones de enrutamiento y el equilibrio de carga estén correctamente configurados.
user@MX11> show configuration routing-options router-id 192.0.2.21; autonomous-system 300; forwarding-table { export evpn-pplb; }
Verifique que los protocolos subyacentes y superpuestos de BGP externos (MP-EBGP) multiprotocolo y los protocolos RSVP, MPLS, BGP y OSPF estén correctamente configurados.
user@MX11> show configuration protocols rsvp { interface all; interface fxp0.0 { disable; } } mpls { label-switched-path MX11-TO-MX12 { to 192.0.2.22; } label-switched-path MX11-TO-P { to 203.0.113.1; } label-switched-path MX11-TO-MX21 { to 198.51.100.21; } label-switched-path MX11-TO-MX22 { to 198.51.100.22; } interface all; interface fxp0.0 { disable; } } bgp { local-address 192.0.2.21; local-as 300; group INT { type internal; local-address 192.0.2.21; family evpn { signaling; } export TEST; neighbor 203.0.113.1; } group TOR-11 { type external; local-address 192.168.3.2; import TEST; export [ TEST LO ]; peer-as 100; local-as 400; neighbor 192.168.3.1 { family inet { unicast; } } } group TOR-12 { type external; local-address 192.168.6.2; export [ TEST LO ]; peer-as 200; local-as 400; neighbor 192.168.6.1 { family inet { unicast; } } } group MX-12 { type external; local-address 192.168.7.1; export [ TEST LO ]; peer-as 500; local-as 400; neighbor 192.168.7.2 { family inet { unicast; } } } group TOR-11-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 100; local-as 400; neighbor 192.0.2.11 { family evpn { signaling; } } } group TOR-12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 200; local-as 400; neighbor 192.0.2.12 { family evpn { signaling; } } } group MX-12-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 192.0.2.21; export TEST; peer-as 500; local-as 400; neighbor 192.0.2.22 { family evpn { signaling; } } } group MX-11-EVPN { export TEST; } } ospf { traffic-engineering; area 0.0.0.0 { interface ge-5/1/9.0; interface lo0.84 { passive; } } } l2-learning { traceoptions { file MX11-L2ALD.log size 10m; level all; flag all; } }
Verifique que las políticas de enrutamiento, las opciones de política de comunidad y el equilibrio de carga estén correctamente configuradas para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
user@MX11> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 192.0.2.21/32 exact; } then accept; } from { protocol direct; route-filter 192.0.2.21/32 exact; } then accept; } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Verifique que las instancias de enrutamiento de MPLS basadas en EVPN y las instancias de enrutamiento de EVPN-VXLAN estén correctamente configuradas.
user@MX11> show configuration routing-instances EVPN-MPLS-1 { instance-type virtual-switch; interface lt-5/1/0.0; route-distinguisher 192.0.2.21:100; vrf-target target:1:2; protocols { evpn { traceoptions { file MX11-EVPN-MPLS-1.log size 10m; flag all; } extended-vlan-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } EVPN-VXLAN-1 { vtep-source-interface lo0.84; instance-type virtual-switch; interface lt-5/1/0.1; route-distinguisher 192.0.2.21:1; vrf-target target:1:1; protocols { evpn { traceoptions { file MX11-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; default-gateway no-gateway-community; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; routing-interface irb.1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; routing-interface irb.2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; routing-interface irb.3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; routing-interface irb.4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; routing-interface irb.5; vxlan { vni 5; } } } } VRF { instance-type vrf; interface irb.1; interface irb.2; interface irb.3; interface irb.4; interface irb.5; route-distinguisher 1:1; vrf-target target:10:10; }
Verificar la configuración de ToR21
Propósito
Compruebe que ToR21 está correctamente configurado.
Acción
Verifique que las interfaces lógicas del sistema y los dominios de puente en el dispositivo CE4 estén correctamente configurados para habilitar la conectividad de capa 2 y manejar el tráfico inter-VXLAN.
user@ce4> show configuration logical-systems CE-4 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host 4"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/6 { unit 0 { description "CONNECTED TO ToR21"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
Verifique que las interfaces y las opciones de seguimiento de ToR21 estén configuradas correctamente para habilitar la conectividad subyacente con otros dispositivos de borde WAN y toR y puerta de enlace.
user@ToR21>show configuration interfaces traceoptions { file R6-DCD.log size 10m; flag all; } xe-0/0/0 { unit 0 { description "CONNECTED TO MX22"; family inet { address 192.168.10.2/24; } } } ge-1/0/0 { description "CONNECTED TO CE-5"; gigether-options { 802.3ad ae0; } } ge-1/0/1 { unit 0 { description "CONNECTED TO MX21"; family inet { address 192.168.101.1/24; } } } ge-1/0/6 { unit 0 { description "CONNECTED TO CE-4"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR22"; family inet { address 192.168.12.1/24; } } } ae0 { esi { 00:44:44:44:44:44:44:44:44:44; all-active; } aggregated-ether-options { lacp { active; periodic fast; system-id 22:22:22:22:22:22; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } lo0 { unit 90 { family inet { address 198.51.100.11/32; } } }
Compruebe que las opciones de enrutamiento y equilibrio de carga estén correctamente configuradas.
user@ToR21> show configuration routing-options router-id 198.51.100.11; autonomous-system 600; forwarding-table { export evpn-pplb; }
Verifique que el BGP externo multiprotocolo (MP-EBGP) subyacente y superpuesto protocolos y las propiedades de aprendizaje y reenvío de direcciones de capa 2 estén correctamente configurados.
user@ToR21> show configuration protocols bgp { export TEST; local-as 600; group MX21 { type external; local-address 192.168.9.2; export [ LO TEST ]; peer-as 800; local-as 600; neighbor 192.168.9.1 { family inet { unicast; } } } group MX22 { type external; local-address 10.102.2.1; export [ LO TEST ]; peer-as 900; local-as 600; neighbor 192.168.10.1 { family inet { unicast; } } } group ToR22 { type external; local-address 10.105.5.1; export [ LO TEST ]; peer-as 700; local-as 600; neighbor 192.168.12.2 { family inet { unicast; } } } group MX21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.11; peer-as 800; local-as 600; neighbor 198.51.100.21 { family evpn { signaling; } } } group MX22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.11; peer-as 900; local-as 600; neighbor 198.51.100.22 { family evpn { signaling; } } } group ToR22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.11; peer-as 700; local-as 600; neighbor 198.51.100.12 { family evpn { signaling; } } } } l2-learning { traceoptions { file TOR21-L2ALD.log size 10m; level all; flag all; } }
Verifique que las políticas de enrutamiento, las opciones de política de comunidad y el equilibrio de carga estén correctamente configuradas para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
user@ToR21> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 198.51.100.11/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Verifique que las instancias de enrutamiento EVPN-VXLAN para cada red virtual estén correctamente configuradas.
user@ToR21> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.90; instance-type virtual-switch; interface ge-1/0/6.0; interface ae0.0; route-distinguisher 198.51.100.11:1; vrf-target target:1:3; protocols { evpn { traceoptions { file TOR21-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }
Verificar la configuración de ToR22
Propósito
Compruebe que ToR22 está correctamente configurado.
Acción
Verifique que las interfaces del sistema lógico y los dominios de puente en los dispositivos CE5 y CE6 estén correctamente configurados para habilitar la conectividad de capa 2 y manejar el tráfico inter-VXLAN.
user@ce5> show configuration logical-systems CE-5 { interfaces { ge-1/0/9 { unit 0 { description "CONNECTED TO Host 5"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { unit 0 { description "CONNECTED TO ToR21"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } } user@ce6> show configuration logical-systems CE-6 { interfaces { ge-1/1/6 { unit 0 { description "CONNECTED TO ToR22"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/1/9 { unit 0 { description "CONNECTED TO Host 6"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; } BD-2 { domain-type bridge; vlan-id 2; } BD-3 { domain-type bridge; vlan-id 3; } BD-4 { domain-type bridge; vlan-id 4; } BD-5 { domain-type bridge; vlan-id 5; } } }
Verifique que las interfaces y las opciones de seguimiento en ToR22 estén configuradas correctamente para habilitar la conectividad subyacente con otros dispositivos de borde WAN y toR y puerta de enlace.
user@ToR22>show configuration interfaces traceoptions { file R7-DCD.log size 10m; flag all; } xe-0/0/0 { unit 0 { description "CONNECTED TO MX22"; family inet { address 192.168.11.2/24; } } } ge-1/0/0 { description "CONNECTED TO ToR21"; gigether-options { 802.3ad ae1; } } ge-1/0/6 { unit 0 { description "CONNECTED TO CE-6"; family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ge-1/0/7 { description "CONNECTED TO ToR22"; gigether-options { 802.3ad ae1; } } ge-1/1/0 { unit 0 { description "CONNECTED TO MX21"; family inet { address 192.168.8.2/24; } } } ge-1/1/3 { unit 0 { description "CONNECTED TO ToR21"; family inet { address 192.168.12.2/24; } } } ge-1/1/7 { description "CONNECTED TO CE-5"; gigether-options { 802.3ad ae0; } } ae0 { esi { 00:44:44:44:44:44:44:44:44:44; all-active; } aggregated-ether-options { lacp { active; periodic fast; system-id 22:22:22:22:22:22; } } unit 0 { family bridge { interface-mode trunk; vlan-id-list 1-5; } } } ae1 { aggregated-ether-options { lacp { active; periodic fast; system-id 22:22:22:22:22:22; } } } lo0 { unit 92 { family inet { address 198.51.100.12/32; } } }
Compruebe que las opciones de enrutamiento y equilibrio de carga estén correctamente configuradas.
user@ToR22> show configuration routing-options router-id 198.51.100.12; autonomous-system 700; forwarding-table { export evpn-pplb; }
Verifique que el BGP externo multiprotocolo (MP-EBGP) subyacente y superpuesto protocolos y las propiedades de aprendizaje y reenvío de direcciones de capa 2 estén correctamente configurados.
user@ToR22> show configuration protocols bgp { export TEST; local-as 700; group MX21 { type external; local-address 192.168.8.2; export [ LO TEST ]; peer-as 800; local-as 700; neighbor 192.168.8.1 { family inet { unicast; } } } group MX22 { type external; local-address 192.168.11.2; export [ LO TEST ]; peer-as 900; local-as 700; neighbor 192.168.11.1 { family inet { unicast; } } } group ToR21 { type external; local-address 192.168.12.2; export [ LO TEST ]; peer-as 600; local-as 700; neighbor 10.105.5.1 { family inet { unicast; } } } group MX21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.12; peer-as 800; local-as 700; neighbor 198.51.100.21 { family evpn { signaling; } } } group MX22-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.12; peer-as 900; local-as 700; neighbor 198.51.100.22 { family evpn { signaling; } } } group ToR21-EVPN { type external; multihop { ttl 2; no-nexthop-change; } local-address 198.51.100.12; peer-as 600; local-as 700; neighbor 198.51.100.11 { family evpn { signaling; } } } } l2-learning { traceoptions { file TOR22-L2ALD.log size 10m; level all; flag all; } }
Verifique que las políticas de enrutamiento, las opciones de política de comunidad y el equilibrio de carga estén correctamente configuradas para aceptar la ruta de dirección de circuito cerrado directo y redirigirla al BGP.
user@ToR22> show configuration policy-options policy-statement LO { term 1 { from { protocol direct; route-filter 198.51.100.12/32 exact; } then accept; } } policy-statement TEST { then { community add NO-EXPORT; } } policy-statement evpn-pplb { from protocol evpn; then { load-balance per-packet; } } community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
Verifique que las instancias de enrutamiento EVPN-VXLAN para cada red virtual estén correctamente configuradas.
user@ToR22> show configuration routing-instances EVPN-VXLAN-1 { vtep-source-interface lo0.92; instance-type virtual-switch; interface ge-1/0/6.0; interface ae0.0; route-distinguisher 198.51.100.12:1; vrf-target target:1:3; protocols { evpn { traceoptions { file TOR22-EVPN-VXLAN-1.log size 10m; flag all; } encapsulation vxlan; extended-vni-list 1-5; } } bridge-domains { BD-1 { domain-type bridge; vlan-id 1; vxlan { vni 1; } } BD-2 { domain-type bridge; vlan-id 2; vxlan { vni 2; } } BD-3 { domain-type bridge; vlan-id 3; vxlan { vni 3; } } BD-4 { domain-type bridge; vlan-id 4; vxlan { vni 4; } } BD-5 { domain-type bridge; vlan-id 5; vxlan { vni 5; } } } }