Configuring EVPN Routing Instances
To configure an EVPN routing instance, complete the following configuration on the PE router (or on the MPLS edge switch or QFX Series switch) within the EVPN service provider’s network:
- Configure the EVPN routing instance name using the
routing-instances
statement at the[edit]
hierarchy level:routing-instances routing-instance-name {...}
Configure the
evpn
option for theinstance-type
statement at the[edit routing-instances routing-instance-name]
hierarchy level:instance-type evpn;
Note:For MX Series devices, EX Series, and QFX Series switches, you can include multiple IFLs of an Ethernet segment identifier (ESI) across different bridge-domains or VLANs of an EVPN routing instance in all-active mode. However, you cannot include multiple IFLs of the same ESI within the same bridge-domain or VLAN.
- Configure the interfaces for handling EVPN traffic between
the MES or PEs and the CE device using the
interface
statement at the[edit routing-instances routing-instance-name]
hierarchy level:interface interface-name;
- Configure
a VLAN identifier for the EVPN routing instance using the
vlan-id
statement at the[edit routing-instances routing-instance-name]
hierarchy level:Note:For QFX Series, set the VLAN ID to
none
.vlan-id (vlan-id | all | none);
- Configure a route distinguisher on a PE router by including
the
route-distinguisher
statement:route-distinguisher (as-number:number | ip-address:number);
Each routing instance that you configure on a PE router must have a unique route distinguisher associated with it. VPN routing instances need a route distinguisher to help BGP to distinguish between potentially identical network layer reachability information (NLRI) messages received from different VPNs. If you configure different VPN routing instances with the same route distinguisher, the commit fails.
For a list of the hierarchy levels at which you can include this statement, see the statement summary for this statement.
The route distinguisher is a 6-byte value that you can specify in one of the following formats:
as-number
:number
, whereas-number
is an autonomous system (AS) number (a 2-byte value) andnumber
is any 4-byte value. The AS number can be in the range 1 through 65,535. We recommend that you use an Internet Assigned Numbers Authority (IANA)-assigned, nonprivate AS number, preferably the Internet service provider’s (ISP’s) own or the customer’s own AS number.Note:The automatic derivation of the BGP route target (auto-RT) for advertised prefixes is supported on a 2-byte AS number only.
ip-address
:number
, whereip-address
is an IP address (a 4-byte value) andnumber
is any 2-byte value. The IP address can be any globally unique unicast address. We recommend that you use the address that you configure in therouter-id
statement, which is a nonprivate address in your assigned prefix range.
- Configure either import and export policies for the EVPN
routing table, or configure the default policies using the
vrf-target
statement configured at the[edit routing-instances routing-instance-name]
hierarchy level. - Configure
each EVPN interface for the EVPN routing instance:
Configure each interface using the interface statement at the
[edit routing-instances routing-instance-name protocols evpn]
hierarchy level.Configure interface encapsulation for the CE facing interfaces at the
[edit interfaces interface-name encapsulation]
hierarchy level. Supported encapsulations, except for EX9200 switches and QFX Series switches, are:(ethernet-bridge | vlan-bridge | extended-vlan-bridge)
. Supported encapsulations for EX9200 switches are:(extended-vlan-bridge | flexible-ethernet-services)
. Supported encapsulation for QFX Series switches isvxlan
.(Optional) Allow the EVPN to establish a connection to the CE device even if the CE device interface encapsulation and the EVPN interface encapsulations do not match by including the ignore-encapsulation-mismatch statement at the
[edit routing-instances routing-instance-name protocols evpn interface interface-name]
hierarchy level.(Optional) (Not available on EX9200 switches) Specify a static MAC address for a logical interface in a bridge domain using the static-mac statement at the
[edit routing-instances routing-instance-name protocols evpn interface interface-name]
hierarchy level.
- Specify
the maximum number of media access control (MAC) addresses that can
be learned by the EVPN routing instance by including the interface-mac-limit statement.
You can configure the same limit for all interfaces configured for a routing instance by including this statement at the
[edit routing-instances routing-instance-name protocols evpn]
hierarchy level. You can also configure a limit for a specific interface by including this statement at the[edit routing-instances routing-instance-name protocols evpn interface interface-name]
hierarchy level.By default, packets with new source MAC addresses are forwarded after the MAC address limit is reached. You can alter this behavior by including the
packet-action drop
statement at either the[edit routing-instances routing-instance-name protocols evpn interface-mac-limit]
or the[edit routing-instances routing-instance-name protocols evpn interface interface-name]
hierarchy level. If you configure this statement, packets from new source MAC addresses are dropped once the configured MAC address limit is reached. - Specify
the MPLS label allocation setting for the EVPN by including the label-allocation statement with the
per-instance
option at the[edit routing-instances routing-instance-name protocols evpn]
hierarchy level.If you configure this statement, one MPLS label is allocated for the specified EVPN routing instance.
- Enable
MAC accounting for the EVPN by including the mac-statistics statement at the
[edit routing-instances routing-instance-name protocols evpn]
hierarchy level. - Specify
the number of addresses that can be stored in the MAC routing table
using the mac-table-size statement at the
[edit routing-instances routing-instance-name protocols evpn]
hierarchy level.You can optionally configure the packet-action
drop
option to specify that packets for new source MAC addresses be dropped once the MAC address limit is reached. If you do not configure this option, packets for new source MAC addresses are forwarded. - Disable
MAC learning by including the no-mac-learning statement at either the
[edit routing-instances routing-instance-name protocols evpn]
hierarchy level to apply this behavior to all of the devices configured for an EVPN routing instance or at the[edit routing-instances routing-instance-name protocols evpn interface interface-name]
hierarchy level to apply this behavior to just one of the CE devices.