ON THIS PAGE
EVPN E-LAN over SRv6
This article shows the necessary steps to configure segment routing over IPv6 (SRv6), using an Ethernet VPN (EVPN) Ethernet LAN (E-LAN) network.
Overview
EVPN E-LAN serves as a framework for delivering multipoint-to-multipoint VPN service using EVPN signaling mechanisms. The egress provider edge (PE) device signals an SRv6 segment identifier (SID) with the VPN route. The ingress PE encapsulates the SRv6 SID in the VPN packet using an outer IPv6 header. The destination address is the SRv6 SID advertised by the egress PE, and is routable in the IPv6 underlay. The nodes between the PEs only need to support plain IPv6 forwarding. We support SRv6 micro-SID (uSID) and segment routing header (SRH) based control planes. Different endpoint behaviors are defined for SRv6 services on the egress node. See RFC8986 for information regarding the various endpoint behaviors.
Configure EVPN E-LAN
You can configure your EVPN routing instance following the steps below. You'll need to provide details specific to your implementation.
-
Configure a MAC-VRF routing instance with the name of your choice.
set routing-instances <instance-name> instance-type mac-vrf
-
Configure the E-LAN service. Here we're using
vlan-based, however you can also usevlan-awareorvlan-bundle. If you require more than one VLAN, thenvlan-basedwon't work.set routing-instances <instance-name> service-type vlan-based
-
Configure one or more VLAN IDs to fit your implementation.
set routing-instances <instance-name> vlan-id vlan
-
Configure one or more VLANs to fit your implementation. You may configure more than one interface per VLAN, depending on your needs.
set routing-instances <instance-name> vlans <vlan-name> vlan-id <vlan> set routing-instances <instance-name> vlans <vlan-name> interface <interface>
-
Configure a unique RD and VRF target.
set routing-instances <instance-name> route-distinguisher <value> set routing-instances <instance-name> vrf-target <target:x:x>
Configure SRv6
-
Configure SRv6 encapsulation in EVPN.
set routing-instances <instance-name> protocols evpn encapsulation srv6
-
Configure the SRv6 locator type in EVPN. You can choose either SRH (end-dt2-sid) or uSID (micro-dt2-sid).
set routing-instances <instance-name> protocols evpn source-packet-routing srv6 locator <locator-name> (end-dt2-sid | micro-dt2-sid)
-
Configure one or more locator blocks of various sizes. Juniper recommends a prefix length of 64. A format example, using private addressing, would look like
fd33:7ce6:27bc:168b::/64.set routing-options source-packet-routing srv6 locator <locator-name> <locator-block>
-
Depending on the devices in your configuration, you should keep the following in mind:
-
(ACX Series) Only a 32-bit block size and a 16-bit uSID size are supported.
-
(ACX Series) The same locator configured under
[edit protocols isis source-packet-routing srv6 locator locator-name micro-node-sid], and under[edit routing-instances instance-name mac-vrf protocols evpn source-packet-routing srv6 locator locator-name]is not supported.
-
-
Configure additional supporting statements for SRv6.
set chassis network-services enhanced-ip; set interfaces lo0.0 family inet6 address <ipv6-address>; set routing-options resolution preserve-nexthop-hierarchy;
-
Check and commit your configuration.