EN ESTA PÁGINA
Ejemplo: Conservación del ancho de banda con supervisión IGMP en un entorno EVPN-VXLAN
En este ejemplo, se muestra cómo configurar la supervisión IGMP en dispositivos perimetrales de proveedor (PE) en una red VPN Ethernet (EVPN)-LAN virtual extensible (VXLAN). Cuando el tráfico de multidifusión llega al núcleo de VXLAN, un dispositivo PE configurado con EVPN reenvía el tráfico solo a las interfaces de acceso local en las que hay oyentes IGMP.
Requisitos
En este ejemplo, se utilizan los siguientes componentes:
-
Dos conmutadores QFX10000 configurados como dispositivos de PE multiconexión que están conectados a un dispositivo de borde de cliente (CE).
-
Un conmutador QFX10000 configurado como un dispositivo PE conectado a los PE multiconexión.
-
Un conmutador QFX5110 configurado como dispositivo CE.
Descripción general
La supervisión IGMP se utiliza para restringir el tráfico de multidifusión en un dominio de difusión a receptores y dispositivos de multidifusión interesados. En un entorno con tráfico de multidifusión significativo, la supervisión IGMP conserva el ancho de banda porque el tráfico de multidifusión solo se reenvía en aquellas interfaces en las que hay oyentes IGMP. IGMP está habilitado para administrar la pertenencia a grupos de multidifusión.
Cuando se habilita la supervisión IGMP en cada VLAN, el dispositivo anuncia rutas EVPN tipo 7 y tipo 8 (rutas de sincronización de unión y salida) para sincronizar los estados de unión y salida IGMP entre los dispositivos del mismo nivel de multiconexión en la instancia de EVPN. En el lado del acceso, los dispositivos solo reenvían tráfico de multidifusión a los oyentes suscritos. Sin embargo, el tráfico de multidifusión sigue inundado en el núcleo de EVPN incluso cuando no hay receptores remotos.
La configuración de la supervisión IGMP en un entorno EVPN-VXLAN requiere lo siguiente:
-
Multiconexión de dispositivos PE par en modo totalmente activo.
-
IGMP versión 2: multidifusión de cualquier fuente (ASM) para direcciones IPv4, o IGMP versión 3: multidifusión específica de la fuente para direcciones IPv4. (IGMP versión 1 no es compatible)
-
Supervisión IGMP configurada en modo proxy para que el PE se convierta en el solicitante IGMP para las interfaces de acceso local.
En este ejemplo, se configura la supervisión IGMP con IGMPv2. Sin embargo, en esta configuración también admitimos la supervisión IGMP con IGMPv3. Consulte Explorador de características para conocer las plataformas y versiones compatibles con la supervisión IGMP con IGMPv3. Consulte Descripción general del reenvío de multidifusión con supervisión IGMP o MLD Snooping en un entorno EVPN-VXLAN para obtener más información sobre las diferencias en la compatibilidad y los comportamientos de las versiones del protocolo de multidifusión compatibles en arquitecturas EVPN-VXLAN.
Esta característica admite tanto el reenvío de multidifusión intra-VLAN como inter-VLAN. Puede configurar un dispositivo de PE para que realice una o ambas cosas. En este ejemplo, para habilitar el reenvío entre VLAN, cada dispositivo PE se configura como un punto de encuentro (RP) de multidifusión independiente de protocolo (PIM) definido estáticamente para habilitar el reenvío de multidifusión. También configure la distributed-dr instrucción en el nivel de [edit protocols pim interface interface-name] jerarquía para cada interfaz IRB. Este modo permite al PIM reenviar el tráfico de multidifusión de manera más eficiente si deshabilita las funciones de PIM que no son necesarias en este caso. Cuando configure esta instrucción, PIM omite el estado de enrutador designado (DR) de la interfaz al procesar los informes IGMP recibidos en la interfaz. Cuando la interfaz recibe el informe IGMP, el dispositivo PE envía mensajes de unión PIM ascendente para extraer la secuencia de multidifusión y reenviarla a la interfaz, independientemente del estado de recuperación ante desastres de la interfaz.
Topología
La figura 1 ilustra un entorno de EVPN-VXLAN en el que dos dispositivos PE (PE1 y PE2) están conectados al dispositivo de borde del cliente (CE). Estos PE tienen doble conexión en modo activo-activo para proporcionar redundancia. Un tercer dispositivo PE reenvía el tráfico a los dispositivos PE que miran hacia la CE. IGMP está habilitado en interfaces de enrutamiento y puente integrados (IRB). El dispositivo CE aloja cinco VLAN; La supervisión IGMP está habilitada en todas las VLAN. Dado que esta implementación no admite el uso de un enrutador de multidifusión, cada VLAN del PE se habilita como un solicitante IGMP de capa 2. Los dispositivos de PE multiconexión reenvían el tráfico hacia el CE solo en aquellas interfaces en las que hay escuchas IGMP.
EVPN-VXLAN
Configuración
Para configurar la supervisión IGMP en un entorno EVPN-VXLAN, realice estas tareas:
- Configuración rápida de CLI
- Configuración de PE1
- Configuración de PE2
- Configuración del dispositivo CE
- Configuración de PE3
Configuración rápida de CLI
Para configurar rápidamente este ejemplo, copie los siguientes comandos, péguelos en un archivo de texto, elimine los saltos de línea, cambie los detalles necesarios para que coincidan con su configuración de red, copie y pegue los comandos en la CLI en el nivel de jerarquía y, luego, ingrese commit desde el [edit] modo de configuración.
Dispositivo PE1
set chassis aggregated-devices ethernet device-count 2 set interfaces xe-0/0/0:1 description “Connected to CE” set interfaces xe-0/0/0:2 ether-options 802.3ad ae1 set interfaces xe-0/0/1:0 enable set interfaces xe-0/0/1:0 unit 0 description “Connected to PE3” set interfaces xe-0/0/1:0 unit 0 family inet address 192.0.2.1/24 set interfaces ae0 enable set interfaces ae1 enable set interfaces lo0 unit 0 family inet address 192.168.1.1/32 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 00:00:00:00:00:01 set interfaces ae0 unit 0 description “Connected to CE” set interfaces ae1 esi 00:22:22:22:22:22:22:22:22:22 set interfaces ae1 esi all-active set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options periodic fast set interfaces ae1 aggregated-ether-options lacp system id 00:00:00:00:00:02 set interfaces ae1 unit 0 description “Connected to CE” set interfaces ae0 family ethernet-switching interface-mode trunk set interfaces ae0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces ae1 unit 0 family ethernet-switching interface-mode trunk set interfaces ae1 unit 0 family ethernet-switching vlan [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces irb unit 1 family inet address 10.1.1.1/24 virtual-gateway-address 10.1.1.10 set interfaces irb unit 2 family inet address 10.2.1.1/24 virtual-gateway-address 10.2.1.10 set interfaces irb unit 3 family inet address 10.3.1.1/24 virtual-gateway-address 10.3.1.10 set interfaces irb unit 4 family inet address 10.4.1.1/24 virtual-gateway-address 10.4.1.10 set interfaces irb unit 5 family inet address 10.5.1.1/24 virtual-gateway-address 10.5.1.10 set routing-options router-id 192.168.1.1 set routing-options autonomous-system 65536 set protocols ospf area 0.0.0.0 interface xe-0/0/1:0.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols bgp group INT type internal set protocols bgp group INT local-address 192.168.1.1 set protocols bgp group INT family evpn signaling set protocols bgp group INT local-as 65536 set protocols bgp group INT neighbor 172.16.1.1 set vlans VLAN vlan-id 1 set vlans VLAN1 l3-interface irb.1 set vlans VLAN1 vxlan vni 1 set vlans VLAN2 vlan-id 2 set vlans VLAN2 l3-interface irb.2 set vlans VLAN2 vxlan vni2 set vlans VLAN3 vlan-id 3 set vlans VLAN3 l3-interface irb.3 set vlans VLAN3 vxlan vni 3 set vlans VLAN4 vlan-id 4 set vlans VLAN4 l3-interface irb.4 set vlans VLAN4 vxlan vni 4 set vlans VLAN5 vlan-id 5 set vlans VLAN5 l3-interface irb.5 set vlans VLAN5 vxlan vni 5 set protocols evpn encapsulation vxlan set protocols evpn ingress-replication set protocols evpn extended-vni-list 1-5 set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set routing-options forwarding-table export evpn-pplb set switch-options vtep-source-interface lo0:0 set switch-options route distinguisher 192.168.1.1:1 set switch-options vrf-target target:1:1 set protocols igmp interface irb.1 set protocols igmp interface irb.2 set protocols igmp interface irb.3 set protocols igmp interface irb.4 set protocols igmp interface irb.5 set protocols igmp-snooping vlan VLAN1 l2-querier source-address 10.1.1.1 set protocols igmp-snooping vlan VLAN1 proxy set protocols igmp-snooping vlan VLAN2 l2-querier source-address 10.2.1.1 set protocols igmp-snooping vlan VLAN2 proxy set protocols igmp-snooping vlan VLAN3 l2-querier source-address 10.3.1.1 set protocols igmp-snooping vlan VLAN3 proxy set protocols igmp-snooping vlan VLAN4 l2-querier source-address 10.4.1.1 set protocols igmp-snooping vlan VLAN4 proxy set protocols igmp-snooping vlan VLAN4 l2-querier source-address 10.5.1.1 set protocols igmp-snooping vlan VLAN5 proxy set protocols pim rp static address 172.16.1.1 set protocols pim interface irb.1 distributed-dr set protocols pim interface irb.2 distributed-dr set protocols pim interface irb.3 distributed-dr set protocols pim interface irb.4 distributed-dr set protocols pim interface irb.5 distributed-dr
Dispositivo PE2
set chassis aggregated-devices ethernet device-count 2 set interfaces xe-0/0/0:0 ether-options 802.3ad ae1 set interfaces xe-0/0/0:1 description “Connected to CE” set interfaces xe-0/0/0:1 ether-options 802.3ad ae0 set interfaces xe-0/0/1:0 enable set interfaces xe-0/0/1:0 unit 0 description “Connected to PE3” set interfaces xe-0/0/1:0 family inet address 198.51.100.1/24 set interfaces ae0 enable set interfaces ae1 enable set interfaces lo0 unit 0 family inet address 192.168.2.1/32 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated ether-options lacp periodic fast set interfaces ae0 aggregated ether-options lacp system-id 00:00:00:00:00:01 set interfaces ae1 esi 00:22:22:22:22:22:22:22:22:22 set interfaces ae1 esi all-active set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options lacp periodic fast set interfaces ae1 aggregated-ether-options lacp system-id 00:00:00:00:00:02 set interfaces ae0 unit 0 description “Connected to CE” set interfaces ae0 unit family ethernet-switching interface-mode trunk set interfaces ae0 unit family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces ae1 unit 0 description “Connected to CE” set interfaces ae1 unit 0 family ethernet-switching interface-mode trunk set interfaces ae1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces irb unit 1 family inet address 10.1.1.2/24 virtual-gateway-address 10.1.1.10 set interfaces irb unit 2 family inet address 10.2.1.2/24 virtual-gateway-address 10.2.1.10 set interfaces irb unit 3 family inet address 10.3.1.2/24 virtual-gateway-address 10.3.1.10 set interfaces irb unit 4 family inet address 10.4.1.2/24 virtual-gateway-address 10.4.1.10 set interfaces irb unit 5 family inet address 10.5.1.2/24 virtual-gateway-address 10.5.1.10 set routing-options router-id 192.168.2.1 set routing-options autonomous-system 65536 set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols ospf area 0.0.0.0 interface xe-0/0/1:0.0 set protocols bgp group INT type internal set protocols bgp group INT local-address 192.168.2.1 set protocols bgp group INT family evpn signaling set protocols bgp group INT local-as 65536 set protocols bgp group INT neighbor 172.16.1.1 set vlans VLAN1 vlan-id 1 set vlans VLAN1 l3-interface irb.1 set vlans VLAN1 vxlan vni 1 set vlans VLAN2 vlan-id 2 set vlans VLAN2 l3-interface irb.2 set vlans VLAN2 vxlan vni 2 set vlans VLAN3 vlan-id 3 set vlans VLAN3 l3-interface irb.3 set vlans VLAN3 vxlan vni 3 set vlans VLAN4 vlan-id 4 set vlans VLAN4 l3-interface irb.4 set vlans VLAN4 vxlan vni 4 set vlans VLAN5 vlan-id 5 set vlans VLAN5 l3-interface irb.5 set vlans VLAN5 vxlan vni 3 set protocols evpn encapsulation vxlan set protocols evpn muticast-mode ingress-encapsulation set protocols evpn extended-vni-list 1-5 set policy-options policy statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set routing-options forwarding-table export evpn-pplb set switch-options vtep-source-interface lo0.0 set switch-options route-distinguisher 192.168.2.1:1 set switch-options vrf-target target:1:1 set protocols igmp interface irb.1 set protocols igmp interface irb.2 set protocols igmp interface irb.3 set protocols igmp interface irb.4 set protocols igmp interface irb.5 set protocols igmp-snooping vlan VLAN1 l2-querier source-address 10.1.1.2 set protocols igmp-snooping vlan VLAN1 proxy set protocols igmp-snooping vlan VLAN2 l2-querier source-address 10.2.1.2 set protocols igmp-snooping vlan VLAN2 proxy set protocols igmp-snooping vlan VLAN3 l2-querier source-address 10.3.1.2 set protocols igmp-snooping vlan VLAN3 proxy set protocols igmp-snooping vlan VLAN4 l2-querier source-address 10.4.1.2 set protocols igmp-snooping vlan VLAN4 proxy set protocols igmp-snooping vlan VLAN5 l2-querier source-address 10.5.1.2 set protocols igmp-snooping vlan VLAN5 proxy set protocols pim rp static address 172.16.1.1 set protocols pim interface irb.1 distributed-dr set protocols pim interface irb.2 distributed-dr set protocols pim interface irb.3 distributed-dr set protocols pim interface irb.4 distributed-dr set protocols pim interface irb.5 distributed-dr
CE
set chassis aggregated devices ethernet device-count 2
set interfaces xe-0/2/0 ether-options 802.3ad ae0
set interfaces xe-0/2/1 ether-options 802.3ad ae0
set interfaces xe-0/2/0 unit 0 family ethernet-switching interface-mode trunk
set interfaces xe-0/2/0 unit 0 family ethernet-switching vlan members 1-5
set interfaces xe-0/2/1 unit 0 family ethernet-switching interface-mode trunk
set interfaces xe-0/2/1 unit 0 family ethernet-switching vlan members 1-5
set interfaces ae0 aggregated-ether-options lacp active
set interfaces ae0 aggregated-ether-options lacp periodic fast
set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae0 unit 0 family ethernet-switching vlan members 1-5
set interfaces ae1 aggregated-ether-options lacp active
set interfaces ae1 aggregated-ether-options lacp periodic fast
set interfaces ae1 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae1 unit 0 family ethernet-switching vlan members 1-5
set vlans BD-1 vlan-id 1
set vlans BD-2 vlan-id 2
set vlans BD-3 vlan-id 3
set vlans BD-4 vlan-id 4
set vlans BD-5 vlan-id 5
PE3
set interfaces xe-0/0/0 enable set interfaces xe-/0/0/0 unit 0 description “Connected to PE1” set interfaces xe-0/0/0 unit 0 family inet 192.0.2.2/24 set interfaces xe-0/0/1 enable set interfaces xe-0/0/1 unit 0 description “Connected to PE2” set interfaces xe-0/0/1 unit 0 family inet 198.51.100.2/24 set interfaces lo0 unit 0 family inet address 172.16.1.1/32 set interfaces xe-0/0/0:1 enable set interfaces xe-0/0/0:1 unit 0 family ethernet-switching interface-mode trunk set interfaces xe-0/0/0:1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces xe-0/0/1:1 enable set interfaces xe-0/0/1:1 unit 0 family ethernet-switching interface-mode trunk set interfaces xe-0/0/1:1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] set interfaces irb unit 1 famly inet address 10.1.1.5/24 virtual-gateway address 10.1.1.10 set interfaces irb unit 2 family inet address 10.2.1.5/24 virtual-gateway address 10.2.1.10 set interfaces irb unit 3 family inet address 10.3.1.5/24 virtual-gateway address 10.3.1.10 set interfaces irb unit 4 family inet address 10.4.1.5/24 virtual-gateway address 10.4.1.10 set interrfaces irb unit 5 family inet address 10.5.1.5/24 virtual-gateway address 10.5.1.10 set routing-options router-id 172.16.1.1 se routing-options autonomous-system 65536 set ospf area 0.0.0.0 interface all set ospf area 0.0.0.0 fxp0.0 disable set protocols bgp group INT type internal set protocols bgp group INT local-address 172.16.1.1 set protocols bgp group INT family evpn signaling set protocols bgp group INT local-as 65536 set protocols bgp group INT neighbor 192.168.1.1 set protocols bgp group INT neighbor 192.168.2.1 set vlans VLAN1 vlan-id 1 set vlans VLAN1 l3-interface irb.1 set vlans VLAN1 vxlan vni 1 set vlans VLAN2 vlan-id 2 set vlans VLAN2 l3-interface irb.2 set vlans VLAN2 vxlan vni 2 set vlans VLAN3 vlan-id 3 set vlans VLAN3 l3-interface irb.3 set vlans VLAN3 vxlan vni 3 set vlans VLAN4 vlan-id 4 set vlans VLAN4 l3-interface irb.4 set vlans VLAN4 vxlan vni 4 set vlans VLAN5 vlan-id 5 set vlans VLAN5 l3-interface irb.5 set vlans VLAN5 vxlan vni 5 set protocols evpn encapsulation vxlan set protocols evpn multicast-mode ingress-replication set protocols evpn extended-vni-list 1-5 set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pbllb then load-balance per packet set routing-options forwarding-table export evpn-pplb set switch-options vtep-source-interface lo0 set switch-options route-distinguisher 172.16.1.1:1 set switch-option vrf-target target:1:1 set protocols igmp interface irb.1 set protocols igmp interface irb.2 set protocols igmp interface irb.3 set protocols igmp interface irb.4 set protocols igmp interface irb.5 set protocols igmp-snooping vlan VLAN1 l2-querier source-address 10.1.1.5 set protocols igmp-snooping vlan VLAN1 proxy set protocols igmp-snooping vlan VLAN2 l2-querier source-address 10.2.1.5 set protocols igmp-snooping vlan VLAN2 proxy set protocols igmp-snooping vlan VLAN3 l2-querier source-address 10.3.1.5 set protocols igmp-snooping vlan VLAN3 proxy set protocols igmp-snooping vlan VLAN4 l2-querier source-address 10.4.1.5 set protocols igmp-snooping vlan VLAN4 proxy set protocols igmp-snooping vlan VLAN5 l2-querier source-address 10.5.1.5 set protocols igmp-snooping vlan VLAN5 proxy set protocols pim rp local 172.16.1.1 set protocols pim interface irb.1 distributed-dr set protocols pim interface irb.2 distributed-dr set protocols pim interface irb.3 distributed-dr set protocols pim interface irb.4 distributed-dr set protocols pim interface irb.5 distributed-dr
Configuración de PE1
Procedimiento paso a paso
En el ejemplo siguiente, debe explorar por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración de la Guía del usuario de CLI.
Para configurar el dispositivo PE1:
-
Especifique el número de interfaces lógicas de Ethernet agregadas.
[edit chassis] user@PE1# set aggregated-devices ethernet device-count 2 -
Configure las interfaces.
[edit interfaces] user@PE1# set xe-0/0/0:1 description “Connected to CE” user@PE1# set xe-0/0/0:2 ether-options 802.3ad ae1 user@PE1# set xe-0/0/1:0 enable user@PE1# set xe-0/0/1:0 unit 0 description “Connected to PE3” user@PE1# set xe-0/0/1:0 unit 0 family inet address 192.0.2.1/24 user@PE1# set ae0 enable user@PE1# set ae1 enable user@PE2# set lo0 unit 0 family inet address 192.168.1.1/32
-
Configure la multiconexión activa-activa y habilite el protocolo de control de agregación de vínculos (LACP) en cada interfaz de Ethernet agregada.
[edit interfaces] user@PE1# set ae0 esi 00:11:11:11:11:11:11:11:11:11 user@PE1# set esi all-active user@PE1# set ae0 aggregated-ether-options lacp active user@PE1# set ae0 aggregated-ether-options lacp periodic-fast user@PE1# set ae0 aggregated-ether-options lacp system-id 00:00:00:00:00:01 user@PE1# set ae1 esi 00:22:22:22:22:22:22:22:22:22 user@PE1# set ae1 esi all-active user@PE1# set ae1 aggregated-ether-options lacp active user@PE1# set ae1 aggregated-ether-options lacp periodic-fast user@PE1# set ae0 aggregated-ether-options lacp system-id 00:00:00:00:00:02
-
Configure cada interfaz Ethernet agregada como un puerto de troncalización.
[edit interfaces] user@PE1# set ae0 unit 0 description “Connected to CE” user@PE1# set ae0 unit 0 family ethernet-switching interface-mode trunk user@PE1# set ae0 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] user@PE1# set ae1 unit 0 description “Connected to CE” user@PE1# set ae1 unit 0 family ethernet-switching interface-mode trunk user@PE1# set ae1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ]
-
Configure las interfaces IRB y las direcciones de puerta de enlace virtual.
[edit interfaces] user@PE1# set irb unit 1 family inet address 10.1.1.1/24 virtual-gateway-address 10.1.1.10 user@PE1# set irb unit 2 family inet address 10.2.1.1/24 virtual-gateway-address 10.2.1.10 user@PE1# set irb unit 3 family inet address 10.3.1.1/24 virtual-gateway-address 10.3.1.10 user@PE1# set irb unit 4 family inet address 10.4.1.1/24 virtual-gateway-address 10.4.1.10 user@PE1# set irb unit 5 family inet address 10.5.1.1/24 virtual-gateway-address 10.5.1.10
-
Configure el sistema autónomo.
[edit routing-options] user@PE1# set router-id 192.168.1.1 user@PE1# set autonomous-system 65536
-
Configure OSPF.
[edit protocols ospf] user@PE1# set area 0.0.0.0 interface xe-0/0/1:0.0 user@PE1# set area 0.0.0.0 interface lo0. passive
-
Configure el emparejamiento interno del BGP.
[edit protocols bgp] user@PE1# set group INT type internal user@PE1# set group INT local-address 192.168.1.1 user@PE1# set group INT family evpn signaling user@PE1# set group INT local-as 65536 user@PE1# set group INT neighbor 172.16.1.1
-
Configure las VLAN.
[set vlans] user@PE1# set VLAN1 vlan-id 1 user@PE1# set VLAN1 l3-interface irb.1 user@PE1# set VLAN1 vxlan vni 1 user@PE1# set VLAN2 vlan-id 2 user@PE1# set VLAN2 l3-interface irb.2 user@PE1# set VLAN2 vxlan vni 2 user@PE1# set VLAN3 vlan-id 3 user@PE1# set VLAN3 l3-interface irb.3 user@PE1# set VLAN3 vxlan vni 3 user@PE1# set VLAN4 vlan-id 4 user@PE1# set VLAN4 l3-interface irb.4 user@PE1# set VLAN4 vxlan vni 4 user@PE1# set VLAN5 vlan-id 5 user@PE1# set VLAN5 l3-interface irb.5 user@PE1# set VLAN2 vxlan vni 5
-
Active EVPN.
[edit protocols evpn] user@PE1# set encapsulation vxlan user@PE1# set multicast-mode ingress-replication user@PE1# set extended-vni-list 1-5
-
Configure una política de enrutamiento de exportación para equilibrar la carga del tráfico de EVPN.
[edit policy-options] user@PE1# set policy-statement evpn-pplb from protocol evpn user@PE1# set policy-statement evpn-pplb then load-balance per packet [edit routing-options] user@PE1# set forwarding-table export evpn-pplb
-
Configure la interfaz de origen para el túnel VXLAN.
[edit switch-options] user@PE1# set vtep-source-interface lo0.0 user@PE1# set route-distinguisher 192.168.1.1:1 user@PE1# set vrf-target target:1:1
-
Habilite IGMP en las interfaces IRB asociadas con las VLAN.
[edit protocols igmp] user@PE1# set interface irb.1 user@PE1# set interface irb.2 user@PE1# set interface irb.3 user@PE1# set interface irb.4 user@PE1# set interface irb.5
-
Habilite la supervisión IGMP en las VLAN.
[edit protocols igmp-snooping vlan] user@PE1# set VLAN1 l2-querier source-address 10.1.1.1 user@PE1# set VLAN1 proxy user@PE1# set VLAN2 l2-querier source-address 10.2.1.1 user@PE1# set VLAN2 proxy user@PE1# set VLAN3 l2-querier source address 10.3.1.1 user@PE1# set VLAN3 proxy user@PE1# set VLAN4 l2-querier source-address 10.4.1.1 user@PE1# set VLAN4 proxy user@PE1# set VLAN5 l2-querier source-address 10.5.1.1 user@PE1# set VLAN5 proxy
-
Configure PIM definiendo un punto de encuentro estático y habilitándolo en las interfaces IRB asociadas con las VLAN.
Nota:Este paso solo es necesario si desea configurar el reenvío entre VLAN. Si el dispositivo PE solo realiza reenvío intra-VLAN, omita este paso.
[edit protocols pim] user@PE1# set rp static address 172.16.1.1 user@PE1# set interface irb.1 distrbuted-dr user@PE1# set interface irb.2 distributed-dr user@PE1# set interface irb.3 distributed-dr user@PE1# set interface irb.4 distributed-dr user@PE1# set interface irb.5 distributed-dr
Resultados
En el modo de configuración, escriba los comandos , , show policy-optionsshow routing-optionsshow vlansshow protocols, y show switch-options para confirmar la show chassisshow interfacesconfiguración. Si el resultado no muestra la configuración deseada, repita las instrucciones de este ejemplo para corregirla.
user@PE1# show chassis
aggregated-devices {
ethernet {
device-count 2;
}
}
user@PE1# show
interfaces {
xe-0/0/0:1 {
description "Connected to CE";
ether-options {
802.3ad ae0;
}
}
xe-0/0/0:2 {
ether-options {
802.3ad ae1;
}
}
xe-0/0/1:0 {
enable;
unit 0 {
description "Connected to PE3";
family inet {
address 192.0.2.1/24;
}
}
}
xe-0/0/1:1 {
enable;
}
ae0 {
enable;
esi {
00:11:11:11:11:11:11:11:11:11;
all-active;
}
aggregated-ether-options {
lacp {
active;
periodic fast;
system-id 00:00:00:00:00:01;
}
}
unit 0 {
description "Connected to CE";
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
ae1 {
enable;
esi {
00:22:22:22:22:22:22:22:22:22;
all-active;
}
aggregated-ether-options {
lacp {
active;
periodic fast;
system-id 00:00:00:00:00:02;
}
}
unit 0 {
description "Connected to CE";
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
irb {
unit 1 {
family inet {
address 10.1.1.1/24 {
virtual-gateway-address 10.1.1.10;
}
}
}
unit 2 {
family inet {
address 10.2.1.1./24 {
virtual-gateway-address 10.2.1.10;
}
}
}
unit 3 {
family inet {
address 10.3.1.1./24 {
virtual-gateway-address 10.3.1.10;
}
}
}
unit 4 {
family inet {
address 10.4.1.1./24 {
virtual-gateway-address 10.4.1.10;
}
}
}
unit 5 {
family inet {
address 10.5.1.1./24 {
virtual-gateway-address 10.5.1.10;
}
}
}
}
lo0 {
unit 0 {
family inet {
address 192.168.1.1/32;
}
}
}
}
routing-options {
router-id 192.168.1.1;
autonomous-system 65536;
forwarding-table {
export evpn-pplb;
}
}
protocols {
igmp {
interface irb.1;
interface irb.2;
interface irb.3;
interface irb.4;
interface irb.5;
}
bgp {
group INT {
type internal;
local-address 192.168.1.1;
family evpn {
signaling;
}
local-as 65536;
neighbor 172.16.1.1;
}
}
ospf {
area 0.0.0.0 {
interface xe-0/0/1:0.0;
interface lo0.0 {
passive;
}
}
}
pim {
rp {
static {
address 172.16.1.1;
}
}
interface irb.1 {
distributed-dr;
}
interface irb.2 {
distributed-dr;
}
interface irb.3 {
distributed-dr;
}
interface irb.4 {
distributed-dr;
}
interface irb.5 {
distributed-dr;
}
}
evpn {
encapsulation vxlan;
multicast-mode ingress-replication;
extended-vni-list 1-5;
}
igmp-snooping {
vlan VLAN1 {
l2-querier {
source-address 10.1.1.1;
}
proxy;
}
vlan VLAN2 {
l2-querier {
source-address 10.2.1.1;
}
proxy;
}
vlan VLAN3 {
l2-querier {
source-address 10.3.1.1;
}
proxy;
}
vlan VLAN4 {
l2-querier {
source-address 10.4.1.1;
}
proxy;
}
vlan VLAN5 {
l2-querier {
source-address 10.5.1.1;
}
proxy;
}
}
}
policy-options {
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
}
switch-options {
vtep-source-interface lo0.0;
route-distinguisher 192.168.1.1:1;
vrf-target target:1:1;
}
vlans {
VLAN1 {
vlan-id 1;
l3-interface irb.1;
vxlan {
vni 1;
}
}
VLAN2 {
vlan-id 2;
l3-interface irb.2;
vxlan {
vni 2;
}
}
VLAN3 {
vlan-id 3;
l3-interface irb.3;
vxlan {
vni 3;
}
}
VLAN4 {
vlan-id 4;
l3-interface irb.4;
vxlan {
vni 4;
}
}
VLAN5 {
vlan-id 5;
l3-interface irb.5;
vxlan {
vni 5;
}
}
}
Configuración de PE2
Procedimiento paso a paso
En el ejemplo siguiente, debe explorar por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración de la Guía del usuario de CLI.
Para configurar el dispositivo PE2:
-
Especifique el número de interfaces lógicas de Ethernet agregadas.
[edit chassis] user@PE2# set aggregated-devices ethernet device-count 2
-
Configure las interfaces.
[edit interfaces] user@PE2# set xe-0/0/0:0 ether-options 802.3ad ae1 user@PE2# set xe-0/0/0:1 description “Connected to CE” user@PE2# set xe-0/0/1:0 enable user@PE2# set xe-0/0/1:0 unit 0 description “Connected to PE3” user@PE2# set xe-0/0/1:0 unit 0 family inet address 198.51.100.1/24 user@PE2# set ae0 enable user@PE2# set ae1 enable user@PE2# set lo0 unit 0 family inet address 192.168.2.1/32
-
Configure la multiconexión activa-activa y habilite el protocolo de control de agregación de vínculos (LACP) en cada interfaz de Ethernet agregada.
[edit interfaces] user@PE2# set ae0 esi 00:11:11:11:11:11:11:11:11:11 user@PE2# set esi all-active user@PE2# set ae0 aggregated-ether-options lacp active user@PE2# set ae0 aggregated-ether-options lacp periodic-fast user@PE2# set ae0 aggregated-ether-options lacp system-id 00:00:00:00:00:01 user@PE2# set ae1 esi 00:22:22:22:22:22:22:22:22:22 user@PE2# set ae1 esi all-active user@PE2# set ae1 aggregated-ether-options lacp active user@PE2# set ae1 aggregated-ether-options lacp periodic-fast user@PE2# set ae0 aggregated-ether-options lacp system-id 00:00:00:00:00:02
-
Configure cada interfaz Ethernet agregada como un puerto de troncalización.
[edit interfaces] user@PE2# set ae0 unit 0 description “Connected to CE” user@PE2# set ae0 unit 0 family ethernet-switching interface-mode trunk user@PE2# set ae0 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] user@PE2# set ae1 unit 0 description “Connected to CE” user@PE2# set ae1 unit 0 family ethernet-switching interface-mode trunk user@PE2# set ae1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ]
-
Configure las interfaces IRB y las direcciones de puerta de enlace virtual.
[edit interfaces] user@PE2# set irb unit 1 family inet address 10.1.1.2/24 virtual-gateway-address 10.1.1.10 user@PE2# set irb unit 2 family inet address 10.2.1.2/24 virtual-gateway-address 10.2.1.10 user@PE2# set irb unit 3 family inet address 10.3.1.2/24 virtual-gateway-address 10.3.1.10 user@PE2# set irb unit 4 family inet address 10.4.1.2/24 virtual-gateway-address 10.4.1.10 user@PE2# set irb unit 5 family inet address 10.5.1.2/24 virtual-gateway-address 10.5.1.10
-
Configure el sistema autónomo.
[edit routing-options] user@PE2# set router-id 192.168.2.1 user@PE2# set autonomous-system 65536
-
Configure OSPF.
[edit protocols ospf] user@PE2# set area 0.0.0.0 interface xe-0/0/1:0.0 user@PE2# set area 0.0.0.0 interface lo0. passive
-
Configure el emparejamiento interno del BGP.
[edit protocols bgp] user@PE2# set group INT type internal user@PE2# set group INT local-address 192.168.2.1 user@PE2# set group INT family evpn signaling user@PE2# set group INT local-as 65536 user@PE2# set group INT neighbor 172.16.1.1
-
Configure las VLAN.
[edit vlans] user@PE2# set VLAN1 vlan-id 1 user@PE2# set VLAN1 l3-interface irb.1 user@PE2# set VLAN1 vxlan vni 1 user@PE2# set VLAN2 vlan-id 2 user@PE2# set VLAN2 l3-interface irb.2 user@PE2# set VLAN2 vxlan vni 2 user@PE2# set VLAN3 vlan-id 3 user@PE2# set VLAN3 l3-interface irb.3 user@PE2# set VLAN3 vxlan vni 3 user@PE2# set VLAN4 vlan-id 4 user@PE2# set VLAN4 l3-interface irb.4 user@PE2# set VLAN4 vxlan vni 4 user@PE2# set VLAN5 vlan-id 5 user@PE2# set VLAN5 l3-interface irb.5 user@PE2# set VLAN2 vxlan vni 5
-
Active EVPN.
[edit protocols evpn] user@PE2# set encapsulation vxlan user@PE2# set multicast-mode ingress-replication user@PE2# set extended-vni-list 1-5
-
Configure una política de enrutamiento de exportación para equilibrar la carga del tráfico EVPN y aplicarlo a la tabla de reenvío.
[edit policy-options] user@PE2# set policy-statement evpn-pplb from protocol evpn user@PE2# set policy-statement evpn-pplb then load-balance per packet [edit routing-options] user@PE2# set forwarding-table export evpn-pplb
-
Configure la interfaz de origen para el túnel VXLAN.
[edit switch-options] user@PE2# set vtep-source-interface lo0.0 user@PE2# set route-distinguisher 192.168.2.1:1 user@PE2# set vrf-target target:1:1
-
Habilite IGMP en las interfaces IRB.
[edit protocols igmp] user@PE2# set interface irb.1 user@PE2# set interface irb.2 user@PE2# set interface irb.3 user@PE2# set interface irb.4 user@PE2# set interface irb.5
-
Habilite la supervisión IGMP en las interfaces IRB.
[edit protocols igmp-snooping vlan] user@PE2# set VLAN1 l2-querier source-address 10.1.1.2 user@PE2# set VLAN1 proxy user@PE2# set VLAN2 l2-querier source-address 10.2.1.2 user@PE2# set VLAN2 proxy user@PE2# set VLAN3 l2-querier source address 10.3.1.2 user@PE2# set VLAN3 proxy user@PE2# set VLAN4 l2-querier source-address 10.4.1.2 user@PE2# set VLAN4 proxy user@PE2# set VLAN5 l2-querier source-address 10.5.1.2 user@PE2# set VLAN5 proxy
-
Configure el PIM definiendo un punto de encuentro estático y habilitándolo en las interfaces IRB.
Nota:Este paso solo es necesario si desea configurar el reenvío entre VLAN. Si el dispositivo PE solo realiza reenvío intra-VLAN, omita este paso.
[edit protocols pim] user@PE2# set rp static address 172.16.1.1 user@PE2# set interface irb.1 distrbuted-dr user@PE2# set interface irb.2 distributed-dr user@PE2# set interface irb.3 distributed-dr user@PE2# set interface irb.4 distributed-dr user@PE2# set interface irb.5 distributed-dr
Resultados
En el modo de configuración, escriba los comandos , , show policy-optionsshow routing-optionsshow vlansshow protocols, y show switch-options para confirmar la show chassisshow interfacesconfiguración. Si el resultado no muestra la configuración deseada, repita las instrucciones de este ejemplo para corregirla.
user@PE2# show chassis
aggregated-devices {
ethernet {
device-count 2;
}
}
user@PE2# show
interfaces {
xe-0/0/0:0 {
ether-options {
802.3ad ae1;
}
}
xe-0/0/0:1 {
description "Connected to CE";
ether-options {
802.3ad ae0;
}
}
xe-0/0/1:0 {
enable;
unit 0 {
description "Connected to PE3";
family inet {
address 198.51.100.1/24;
}
}
}
ae0 {
esi {
00:11:11:11:11:11:11:11:11:11;
all-active;
}
aggregated-ether-options {
lacp {
active;
periodic fast;
system-id 00:00:00:00:00:01;
}
}
unit 0 {
description "Connected to CE";
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
ae1 {
enable;
esi {
00:22:22:22:22:22:22:22:22:22;
all-active;
}
aggregated-ether-options {
lacp {
active;
periodic fast;
system-id 00:00:00:00:00:02;
}
}
unit 0 {
description "CONNECTED TO CE";
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
irb {
unit 1 {
family inet {
address 10.1.1.2/24 {
virtual-gateway-address 10.1.1.10;
}
}
}
unit 2 {
family inet {
address 10.2.1.2/24 {
virtual-gateway-address 10.2.1.10;
}
}
}
unit 3 {
family inet {
address 10.3.1.2/24 {
virtual-gateway-address 10.3.1.10;
}
}
}
unit 4 {
family inet {
address 10.4.1.2/24 {
virtual-gateway-address 10.4.1.10;
}
}
}
unit 5 {
family inet {
address 10.5.1.2/24 {
virtual-gateway-address 10.5.1.10;
}
}
}
}
lo0 {
unit 0 {
family inet {
address 192.168.2.1/32;
}
}
}
}
routing-options {
router-id 192.168.2.1;
autonomous-system 65536;
forwarding-table {
export evpn-pplb;
}
}
protocols {
igmp {
interface irb.1;
interface irb.2;
interface irb.3;
interface irb.4;
interface irb.5;
}
bgp {
group INT {
type internal;
local-address 192.168.2.1;
family evpn {
signaling;
}
local-as 65536;
neighbor 172.16.1.1;
}
}
ospf {
area 0.0.0.0 {
interface lo0.0 {
passive;
}
interface xe-0/0/1:0.0;
}
}
pim {
rp {
static {
address 172.16.1.1;
}
}
interface irb.1 {
distributed-dr;
}
interface irb.2 {
distributed-dr;
}
interface irb.3 {
distributed-dr;
}
interface irb.4 {
distributed-dr;
}
interface irb.5 {
distributed-dr;
}
}
evpn {
encapsulation vxlan;
multicast-mode ingress-replication;
extended-vni-list 1-5;
}
igmp-snooping {
vlan VLAN1 {
l2-querier {
source-address 10.1.1.2;
}
proxy;
}
vlan VLAN2 {
l2-querier {
source-address 10.2.1.2;
}
proxy;
}
vlan VLAN3 {
l2-querier {
source-address 10.3.1.2;
}
proxy;
}
vlan VLAN4 {
l2-querier {
source-address 10.4.1.2;
}
proxy;
}
vlan VLAN5 {
l2-querier {
source-address 10.5.1.2;
}
proxy;
}
}
}
policy-options {
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
}
switch-options {
vtep-source-interface lo0.0;
route-distinguisher 192.168.2.1:1;
vrf-target target:1:1;
}
vlans {
VLAN1 {
vlan-id 2;
l3-interface irb.2;
vxlan {
vni 2;
}
}
VLAN2 {
vlan-id 1;
l3-interface irb.1;
vxlan {
vni 1;
}
}
VLAN3 {
vlan-id 3;
l3-interface irb.3;
vxlan {
vni 3;
}
}
VLAN4 {
vlan-id 4;
l3-interface irb.4;
vxlan {
vni 4;
}
}
VLAN5 {
vlan-id 5;
l3-interface irb.5;
vxlan {
vni 5;
}
}
}
Configuración del dispositivo CE
Procedimiento paso a paso
En el ejemplo siguiente, debe explorar por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración de la Guía del usuario de CLI.
Para configurar la CE del dispositivo:
-
Especifique el número de interfaces lógicas de Ethernet agregadas.
[edit chassis] user@CE# set aggregated-devices ethernet device-count 2
-
Configure las interfaces y habilite LACP en las interfaces Ethernet agregadas.
[edit interfaces] user@CE# set xe-0/2/0 ether-options 802.3ad ae0 user@CE# set xe-0/2/1 ether-options 802.3ad ae0 user@CE# set ae0 aggregated ether-options lacp active user@CE# set ae0 aggregated ether-options lacp periodic fast user@CE# set ae1 aggregated ether-options lacp active user@CE# set ae1 aggregated ether-options lacp periodic fast
-
Cree los dominios de puente de cliente de capa 2 y las VLAN asociadas con los dominios.
[edit] user@CE# set vlans BD-1 vlan-id 1 user@CE# set vlans BD-2 vlan-id 2 user@CE# set vlans BD-3 vlan-id 3 user@CE# set vlans BD-4 vlan-id 4 user@CE# set vlans BD-5 vlan-id 5
-
Configure cada interfaz para incluirla en el dominio CE como un puerto troncal para aceptar paquetes etiquetados con los identificadores VLAN especificados.
[edit interfaces] user@CE# set xe-0/2/0 unit 0 family ethernet-switching interface-mode trunk user@CE# set xe-0/2/0 unit 0 family ethernet-switching vlan members 1-5 user@CE# set xe-0/2/1 unit 0 family ethernet-switching interface-mode trunk user@CE# set xe-0/2/1 unit 0 family ethernet-switching vlan members 1-5 user@CE# set ae0 unit 0 family ethernet-switching interface-mode trunk user@CE# set ae0 unit 0 family ethernet-switching vlan members 1-5 user@CE# set ae1 unit 0 family ethernet-switching interface-mode trunk user@CE# set ae1 unit 0 family ethernet-switching vlan members 1-5
Resultados
Desde el modo de configuración, ingrese los comandos y show interfaces para confirmar la show chassis configuración. Si el resultado no muestra la configuración deseada, repita las instrucciones de este ejemplo para corregirla.
user@CE# show chassis
aggregated-devices {
ethernet {
device-count 2;
}
}
user@CE# show interfaces
xe-0/2/0 {
ether-options {
802.3ad ae0;
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members 1-5;
}
}
}
}
xe-0/2/1 {
ether-options {
802.3ad ae0;
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members 1-5;
}
}
}
}
ae0 {
aggregated-ether-options {
lacp {
active;
periodic fast;
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members 1-5;
}
}
}
}
ae1 {
aggregated-ether-options {
lacp {
active;
periodic fast;
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members 1-5;
}
}
}
}
user@CE# show vlans
BD-1 {
vlan-id 1;
domain-type bridge;
}
BD-2 {
vlan-id 2;
domain-type bridge;
}
BD-3 {
vlan-id 3;
domain-type bridge;
}
BD-3 {
vlan-id 3;
domain-type bridge;
}
BD-4 {
vlan-id 4;
domain-type bridge;
}
BD-5 {
vlan-id 5;
domain-type bridge;
}
Configuración de PE3
Procedimiento paso a paso
En el ejemplo siguiente, debe explorar por varios niveles en la jerarquía de configuración. Para obtener más información acerca de cómo navegar por la CLI, consulte Uso del editor de CLI en el modo de configuración de la Guía del usuario de CLI.
Para configurar el dispositivo PE3:
-
Configure las interfaces.
[edit interfaces] user@PE3# set xe-0/0/0 enable user@PE3# set xe-0/0/0 unit 0 description “Connected to PE1” user@PE3# set xe-0/0/0 unit 0 family inet 192.0.2.2/24 user@PE3# set xe-0/0/1 unit 0 description “Connected to PE2” user@PE3# set xe-0/0/1 198.51.100.2/24 user@PE3# set lo0 unit 0 family inet address 172.16.1.1/32
-
Configure cada interfaz Ethernet lógica como un puerto troncal para aceptar paquetes etiquetados con los identificadores VLAN especificados.
[edit interfaces] user@PE3# set xe-0/0/0:1 enable user@PE3# set xe-0/0/0:1 unit 0 family ethernet-switching interface-mode trunk user@PE3# set xe-0/0/0:1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ] user@PE3# set xe-0/0/1:1 enable user@PE3# set xe-0/0/1:1 unit 0 family ethernet-switching interface-mode trunk user@PE3# set xe-0/0/1:1 unit 0 family ethernet-switching vlan members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ]
-
Configure las interfaces IRB y las direcciones de puerta de enlace virtual.
[edit interfaces] user@PE3# set irb unit 1 family inet address 10.1.1.5/24 virtual-gateway-address 10.1.1.10 user@PE3# set irb unit 2 family inet address 10.2.1.5/24 virtual-gateway-address 10.2.1.10 user@PE3# set irb unit 3 family inet address 10.3.1.5/24 virtual-gateway-address 10.3.1.10 user@PE3# set irb unit 4 family inet address 10.4.1.5/24 virtual-gateway-address 10.4.1.10 user@PE3# set irb unit 5 family inet address 10.5.1.5/24 virtual-gateway-address 10.5.1.10
-
Configure el sistema autónomo.
[edit routing-options] user@PE3# set router-id 172.16.1.1 user@PE3# set autonomous-system 65536
-
Configurar OSPF
[edit protocols ospf] user@PE3# set area 0.0.0.0 interface all user@PE3# set ospf area 0.0.0.0 fxp0.0 disable
-
Configure el emparejamiento interno del BGP con PE1 y PE2.
[edit protocols bgp] user@PE3# set group INT type internal user@PE3# set group INT local-address 172.16.1.1 user@PE3# set group INT family evpn signaling user@PE3# set group INT local-as 65536 user@PE3# set group INT neighbor 192.168.1.1 user@PE3# set group INT neighbor 192.168.2.1
-
Configure las VLAN.
[edit vlans] user@PE3# set VLAN1 vlan-id 1 user@PE3# set VLAN1 l3-interface irb.1 user@PE3# set VLAN1 vxlan vni 1 user@PE3# set VLAN2 vlan-id 2 user@PE3# set VLAN2 l3-interface irb.2 user@PE3# set VLAN2 vxlan vni 2 user@PE3# set VLAN3 vlan-id 3 user@PE3# set VLAN3 l3-interface irb.3 user@PE3# set VLAN3 vxlan vni 3 user@PE3# set VLAN4 vlan-id 4 user@PE3# set VLAN4 l3-interface irb.4 user@PE3# set VLAN4 vxlan vni 4 user@PE3# set VLAN5 vlan-id 5 user@PE3# set VLAN5 l3-interface irb.5 user@PE3# set VLAN2 vxlan vni 5
-
Active EVPN.
[edit protocols evpn] user@PE3# set encapsulation vxlan user@PE3# set multicast-mode ingress-replication user@PE3# set extended-vni-list 1-5
-
Configure una política de enrutamiento de exportación para equilibrar la carga del tráfico de EVPN.
[edit policy-options] user@PE3# set policy-statement evpn-pplb from protocol evpn user@PE3# set policy-statement evpn-pplb then load-balance per packet [edit routing-options] user@PE3# set forwarding-table export evpn-pplb
-
Configure la interfaz de origen para el túnel VXLAN.
[edit switch-options] user@PE3# set vtep-source-interface lo0.0 user@PE3# set route-distinguisher 172.16.1.1:1 user@PE3# set vrf-target target:1:1
-
Habilite IGMP en las interfaces IRB.
[edit protocols igmp] user@PE1# set interface irb.1 user@PE1# set interface irb.2 user@PE1# set interface irb.3 user@PE1# set interface irb.4 user@PE1# set interface irb.5
-
Habilite la supervisión IGMP en las interfaces IRB.
[edit protocols igmp-snooping vlan] user@PE1# set VLAN1 l2-querier source-address 10.1.1.5 user@PE1# set VLAN1 proxy user@PE1# set VLAN2 l2-querier source-address 10.2.1.5 user@PE1# set VLAN2 proxy user@PE1# set VLAN3 l2-querier source address 10.3.1.5 user@PE1# set VLAN3 proxy user@PE1# set VLAN4 l2-querier source-address 10.4.1.5 user@PE1# set VLAN4 proxy user@PE1# set VLAN5 l2-querier source-address 10.5.1.5 user@PE1# set VLAN5 proxy
-
Configure PIM definiendo el punto de encuentro local y habilitándolo en las interfaces IRB.
Nota:Este paso solo es necesario si desea configurar el reenvío entre VLAN. Si el dispositivo PE solo realiza reenvío intra-VLAN, omita este paso.
[edit protocols pim] user@PE1# set rp local address 172.16.1:1 user@PE1# set interface irb.1 distrbuted-dr user@PE1# set interface irb.2 distributed-dr user@PE1# set interface irb.3 distributed-dr user@PE1# set interface irb.4 distributed-dr user@PE1# set interface irb.5 distributed-dr
Resultados
En el modo de configuración, escriba los comandos , , show policy-optionsshow routing-optionsshow vlansshow protocols, y show switch-options para confirmar la show chassisshow interfacesconfiguración. Si el resultado no muestra la configuración deseada, repita las instrucciones de este ejemplo para corregirla.
user@PE3# show
interfaces {
xe-0/0/0 {
enable;
unit 0 {
description "Connected to PE1";
family inet {
address 192.0.2.2/24;
}
}
}
xe-0/0/1 {
enable;
unit 0 {
description “Connected to PE2”;
family inet {
address 198.51.100.2/24
}
}
}
xe-0/0/0:1 {
enable;
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
xe-0/0/1:1 enable;
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members [ VLAN1 VLAN2 VLAN3 VLAN4 VLAN5 ];
}
}
}
}
irb {
unit 1 {
family inet {
address 10.1.1.5/24 {
virtual-gateway-address 10.1.1.10;
}
}
}
unit 2 {
family inet {
address 10.2.1.5/24 {
virtual-gateway-address 10.2.1.10;
}
}
}
unit 3 {
family inet {
address 10.3.1.5/24 {
virtual-gateway-address 10.3.1.10;
}
}
}
unit 4 {
family inet {
address 10.4.1.5/24 {
virtual-gateway-address 10.4.1.10;
}
}
}
unit 5 {
family inet {
address 10.5.1.5/24 {
virtual-gateway-address 10.5.1.10;
}
}
}
}
lo0 {
unit 0 {
family inet {
address 172.16.1.1/32;
}
}
}
}
routing-options {
router-id 172.16.1.1;
autonomous-system 65536
forwarding-table {
export evpn-pplb;
}
}
protocols {
igmp {
interface irb.1;
interface irb.2;
interface irb.3;
interface irb.4;
interface irb.5;
}
bgp {
group INT {
type internal;
local-address 172.16.1.1;
family evpn {
signaling;
}
local-as 65546;
neighbor 192.168.1.1;
neighbor 192.168.2.1;
}
}
ospf {
area 0.0.0.0 {
interface all ;
interface fxp0.0;
disable;
}
}
}
pim {
rp {
local {
address 172.16.1.1;
}
}
interface irb.1 {
distributed-dr;
}
interface irb.2 {
distributed-dr;
}
interface irb.3 {
distributed-dr;
}
interface irb.4 {
distributed-dr;
}
interface irb.5 {
distributed-dr;
}
}
evpn {
encapsulation vxlan;
multicast-mode ingress-replication;
extended-vni-list 1-5;
}
igmp-snooping {
vlan VLAN1 {
l2-querier {
source-address 10.1.1.5;
}
proxy;
}
vlan VLAN2 {
l2-querier {
source-address 10.2.1.5;
}
proxy;
}
vlan VLAN3 {
l2-querier {
source-address 10.3.1.5;
}
proxy;
}
vlan VLAN4 {
l2-querier {
source-address 10.4.1.5;
}
proxy;
}
vlan VLAN5 {
l2-querier {
source-address 10.5.1.5;
}
proxy;
}
}
}
policy-options {
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
}
switch-options {
vtep-source-interface lo0.0;
route-distinguisher 172.16.1.1:1;
vrf-target target:1:1;
}
vlans {
VLAN1 {
vlan-id 1;
l3-interface irb.1;
vxlan {
vni 1;
}
}
VLAN2 {
vlan-id 2;
l3-interface irb.2;
vxlan {
vni 2;
}
}
VLAN3 {
vlan-id 3;
l3-interface irb.3;
vxlan {
vni 3;
}
}
VLAN4 {
vlan-id 4;
l3-interface irb.4;
vxlan {
vni 4;
}
}
VLAN5 {
vlan-id 5;
l3-interface irb.5;
vxlan {
vni 5;
}
}
}
Verificación
Confirme que la configuración funcione correctamente.
- Comprobación de que los mensajes IGMP están sincronizados
- Verificar que se hayan aprendido las direcciones de origen y que se reenvíe el tráfico de multidifusión
Comprobación de que los mensajes IGMP están sincronizados
Propósito
Compruebe en cada PE que los mensajes de incorporación y salida de IGMP estén sincronizados.
Acción
Desde el modo operativo, ejecute el show evpn instance extensive comando.
user@PE1> show evpn instance extensive
Instance: default-switch
Route Distinguisher: 192.168.1.1:1
Encapsulation type: VXLAN
MAC database status Local Remote
MAC advertisements: 25 40
MAC+IP advertisements: 10 15
Default gateway MAC advertisements: 10 10
Number of local interfaces: 3 (3 up)
Interface name ESI Mode Status AC-Role
ae0.0 00:11:11:11:11:11:11:11:11:11 all-active Up Root
ae1.0 00:22:22:22:22:22:22:22:22:22 all-active Up Root
xe-0/0/1:1.0 00:00:00:00:00:00:00:00:00:00 single-homed Up Root
Number of IRB interfaces: 5 (5 up)
Interface name VLAN VNI Status L3 context
irb.1 1 Up master
irb.2 2 Up master
irb.3 3 Up master
irb.4 4 Up master
irb.5 5 Up master
Number of bridge domains: 5
VLAN Domain ID Intfs / up IRB intf Mode MAC sync IM route label SG sync IM core nexthop
1 1 3 3 irb.1 Extended Enabled 1 Enabled 2097159
2 2 3 3 irb.2 Extended Enabled 2 Enabled 2097161
3 3 3 3 irb.3 Extended Enabled 3 Enabled 2097162
4 4 3 3 irb.4 Extended Enabled 4 Enabled 2097163
5 5 3 3 irb.5 Extended Enabled 5 Enabled 2097164
Number of neighbors: 2
Address MAC MAC+IP AD IM ES Leaf-label
192.168.2.1 25 10 9 5 0
172.16.1.1 15 10 1 5 0
Number of ethernet segments: 7
ESI: 00:11:11:11:11:11:11:11:11:11
Status: Resolved by IFL ae0.0
Local interface: ae0.0, Status: Up/Forwarding
Number of remote PEs connected: 1
Remote PE MAC label Aliasing label Mode
192.168.2.1 5 0 all-active
DF Election Algorithm: MOD based
Designated forwarder: 192.168.2.1
Backup forwarder: 192.168.1.1
Last designated forwarder update: Jul 13 01:22:45
ESI: 00:22:22:22:22:22:22:22:22:22
Status: Resolved by IFL ae1.0
Local interface: ae1.0, Status: Up/Forwarding
Number of remote PEs connected: 1
Remote PE MAC label Aliasing label Mode
192.168.2.1 5 0 all-active
DF Election Algorithm: MOD based
Designated forwarder: 192.168.2.1
Backup forwarder: 192.168.1.1
Last designated forwarder update: Jul 13 21:02:47
ESI: 05:00:00:00:64:00:00:00:01:00
Local interface: irb.1, Status: Up/Forwarding
Number of remote PEs connected: 2
Remote PE MAC label Aliasing label Mode
192.168.2.1 1 0 all-active
172.16.1.1 1 0 single-homed
ESI: 05:00:00:00:64:00:00:00:02:00
Local interface: irb.2, Status: Up/Forwarding
Number of remote PEs connected: 2
Remote PE MAC label Aliasing label Mode
192.168.2.1 2 0 all-active
172.16.1.1 2 0 single-homed
ESI: 05:00:00:00:64:00:00:00:03:00
Local interface: irb.3, Status: Up/Forwarding
Number of remote PEs connected: 2
Remote PE MAC label Aliasing label Mode
192.168.2.1 3 0 all-active
172.16.1.1 3 0 single-homed
ESI: 05:00:00:00:64:00:00:00:04:00
Local interface: irb.4, Status: Up/Forwarding
Number of remote PEs connected: 2
Remote PE MAC label Aliasing label Mode
192.168.2.1 4 0 all-active
172.16.1.1 4 0 single-homed
ESI: 05:00:00:00:64:00:00:00:05:00
Local interface: irb.5, Status: Up/Forwarding
Number of remote PEs connected: 2
Remote PE MAC label Aliasing label Mode
172,168.1.1 5 0 all-active
192.168.2.1 5 0 all-active
Router-ID: 192.168.1.1
Significado
El SG Sync es Enabled y el IM Core next-hop campo muestra una ruta válida.
Verificar que se hayan aprendido las direcciones de origen y que se reenvíe el tráfico de multidifusión
Propósito
Compruebe en cada PE que los receptores de multidifusión han aprendido la interfaz de origen para el túnel VXLAN.
Acción
Desde el modo operativo, introduzca el show evpn igmp-snooping database extensive l2-domain-id 1 comando y los show igmp snooping evpn database vlan VLAN1 comandos.
Estos comandos muestran la salida para VLAN1. Puede usarlas para mostrar la salida de cada VLAN configurada
Desde el modo operativo, escriba el para comprobar que se ha aprendido la show evpn multicast-snooping next-hops interfaz descendente.
user@PE1> show evpn igmp-snooping database extensive
l2-domain-id 1
Instance: default-switch
VN Identifier: 1
Group IP: 225.1.1.1
Access OIF Count: 2
Interface ESI Local Remote
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
ae0.0 00:11:11:11:11:11:11:11:11:11 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.2
Access OIF Count: 2
Interface ESI Local Remote
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
ae0.0 00:11:11:11:11:11:11:11:11:11 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.3
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 1 0
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.4
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 1 0
ae1.0 00:22:22:22:22:22:22:22:22:22 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.5
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 1 0
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.6
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 0 1
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.7
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 0 1
ae1.0 00:22:22:22:22:22:22:22:22:22 1 0
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.8
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 1 0
ae1.0 00:22:22:22:22:22:22:22:22:22 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.9
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 1 0
ae1.0 00:22:22:22:22:22:22:22:22:22 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
Group IP: 225.1.1.10
Access OIF Count: 2
Interface ESI Local Remote
ae0.0 00:11:11:11:11:11:11:11:11:11 0 1
ae1.0 00:22:22:22:22:22:22:22:22:22 0 1
Remote OIF Count: 2, Core NH: 2097159
Interface Nbr
vtep.32770 192.168.2.1
vtep.32769 172.16.1.1
user@PE1> show igmp snooping evpn database vlan
VLAN1
Instance: default-switch
Bridge-Domain: VLAN1, VN Identifier: 1
Group IP: 225.1.1.1
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae0.0 0 1
xe-0/0/1:1.0 1 0
ae1.0 1 0
Group IP: 225.1.1.2
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae0.0 0 1
xe-0/0/1:1.0 1 0
ae1.0 1 0
Group IP: 225.1.1.3
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
xe-0/0/1:1.0 1 0
ae1.0 1 0
ae0.0 1 0
Group IP: 225.1.1.4
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae1.0 0 1
xe-0/0/1:1.0 1 0
ae0.0 1 0
Group IP: 225.1.1.5
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae1.0 1 0
xe-0/0/1:1.0 1 0
ae0.0 1 0
Group IP: 225.1.1.6
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae0.0 0 1
ae1.0 1 0
xe-0/0/1:1.0 1 0
Group IP: 225.1.1.7
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae0.0 0 1
ae1.0 1 0
xe-0/0/1:1.0 1 0
Group IP: 225.1.1.8
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae1.0 0 1
xe-0/0/1:1.0 1 0
ae0.0 1 0
Group IP: 225.1.1.9
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae1.0 0 1
xe-0/0/1:1.0 1 0
ae0.0 1 0
Group IP: 225.1.1.10
Core NH: 2097159
Access OIF Count: 3
Interface Local Remote
ae1.0 0 1
ae0.0 0 1
xe-0/0/1:1.0 1 0
user@PE1> show evpn multicast-snooping next-hops
Family: INET
ID Refcount KRefcount Downstream interface Addr
2097159 3 1 vtep.32769
vtep.32770
2097161 3 1 vtep.32769
vtep.32770
2097162 3 1 vtep.32769
vtep.32770
2097163 3 1 vtep.32769
vtep.32770
2097164 3 1 vtep.32769
vtep.32770