APPENDIX: Junos Configuration from This Fabric
Campus Fabric Core-Distribution ERB Configurations
This section displays the configuration output from the Juniper Mist cloud for the IP Fabric underlay on the core and distribution switches using eBGP.
Mist provides the following options (default in parenthesis):
- BGP Local AS (65001)
- Loopback Pool (172.16.254.0/23)
- Subnet (10.255.240.0/20) – point to point interfaces between adjacent layers
Throughout the Campus Fabric between core and distribution layers, Mist enables per-packet (Junos OS defines this as per-flow) load-balancing using ECMP and fast convergence of BGP in the event of a link or node failure using BFD.
Core1 Configuration:
- Interconnects between the two distribution switches:
set interfaces xe-1/0/5 description evpn_downlink-to-d8539a646fc0 set interfaces xe-1/0/5 unit 0 family inet address 10.255.240.6/31 set interfaces xe-1/0/6 description evpn_downlink-to-d8539a64b5c0 set interfaces xe-1/0/6 unit 0 family inet address 10.255.240.8/31
- Loopback interface and router ID and AS:
set groups top interfaces lo0 unit 0 family inet address 172.16.254.2/32 set groups top routing-options router-id 172.16.254.2 set groups top routing-options autonomous-system 65002
- Per-packet load-balancing:
set groups top policy-options policy-statement ecmp_policy then load-balance per-packet set groups top policy-options policy-statement ecmp_policy then accept set groups top routing-options forwarding-table export ecmp_policy
- BGP underlay network between the two distribution switches:
set protocols bgp group evpn_underlay type external set protocols bgp group evpn_underlay log-updown set protocols bgp group evpn_underlay import evpn_underlay_import set protocols bgp group evpn_underlay family inet unicast set protocols bgp group evpn_underlay authentication-key "xyz" set protocols bgp group evpn_underlay export evpn_underlay_export set protocols bgp group evpn_underlay local-as 65002 set protocols bgp group evpn_underlay multipath multiple-as set protocols bgp group evpn_underlay bfd-liveness-detection minimum-interval 350 set protocols bgp group evpn_underlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_underlay neighbor 10.255.240.7 peer-as 65003 set protocols bgp group evpn_underlay neighbor 10.255.240.9 peer-as 65004 set protocols bgp graceful-restart
Core2 Configuration:
- Interconnects between the two distribution switches:
set interfaces xe-1/0/4 description evpn_downlink-to-d8539a646fc0 set interfaces xe-1/0/4 unit 0 family inet address 10.255.240.2/31 set interfaces xe-1/0/5 description evpn_downlink-to-d8539a64b5c0 set interfaces xe-1/0/5 unit 0 family inet address 10.255.240.4/31
- Loopback interface and router ID and AS:
set groups top interfaces lo0 unit 0 family inet address 172.16.254.1/32 set groups top routing-options router-id 172.16.254.1 set groups top routing-options autonomous-system 65001
- Per-packet load-balancing:
set groups top policy-options policy-statement ecmp_policy then load-balance per-packet set groups top policy-options policy-statement ecmp_policy then accept set groups top routing-options forwarding-table export ecmp_policy
- BGP underlay network between the two distribution switches:
set protocols bgp group evpn_underlay type external set protocols bgp group evpn_underlay log-updown set protocols bgp group evpn_underlay import evpn_underlay_import set protocols bgp group evpn_underlay family inet unicast set protocols bgp group evpn_underlay authentication-key "xyz" set protocols bgp group evpn_underlay export evpn_underlay_export set protocols bgp group evpn_underlay local-as 65001 set protocols bgp group evpn_underlay multipath multiple-as set protocols bgp group evpn_underlay bfd-liveness-detection minimum-interval 350 set protocols bgp group evpn_underlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_underlay neighbor 10.255.240.3 peer-as 65003 set protocols bgp group evpn_underlay neighbor 10.255.240.5 peer-as 65004 set protocols bgp graceful-restart
Dist1 Configuration:
- Interconnects between the two core switches:
# Core Interfaces: set interfaces xe-0/0/4 description evpn_uplink-to-f4b52ff3f400 set interfaces xe-0/0/4 unit 0 family inet address 10.255.240.3/31 set interfaces xe-0/0/5 description evpn_uplink-to-f4b52ff40400 set interfaces xe-0/0/5 unit 0 family inet address 10.255.240.7/31
- Loopback interface and router ID:
set groups top interfaces lo0 unit 0 family inet address 172.16.254.3/32 set groups top routing-options router-id 172.16.254.3 set groups top routing-options autonomous-system 65003
- Per-packet load-balancing:
set groups top policy-options policy-statement ecmp_policy then load-balance per-packet set groups top policy-options policy-statement ecmp_policy then accept set groups top routing-options forwarding-table export ecmp_policy
- BGP underlay network to the two core switches:
set protocols bgp group evpn_underlay type external set protocols bgp group evpn_underlay log-updown set protocols bgp group evpn_underlay import evpn_underlay_import set protocols bgp group evpn_underlay family inet unicast set protocols bgp group evpn_underlay authentication-key "xyz" set protocols bgp group evpn_underlay export evpn_underlay_export set protocols bgp group evpn_underlay local-as 65003 set protocols bgp group evpn_underlay multipath multiple-as set protocols bgp group evpn_underlay bfd-liveness-detection minimum-interval 350 set protocols bgp group evpn_underlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_underlay neighbor 10.255.240.2 peer-as 65001 set protocols bgp group evpn_underlay neighbor 10.255.240.6 peer-as 65002 set protocols bgp graceful-restart
Dist2 Configuration:
- Interconnects between the two core switches:
# Core Interfaces: set interfaces xe-0/0/5 description evpn_uplink-to-f4b52ff3f400 set interfaces xe-0/0/5 unit 0 family inet address 10.255.240.5/31 set interfaces xe-0/0/6 description evpn_uplink-to-f4b52ff40400 set interfaces xe-0/0/6 unit 0 family inet address 10.255.240.9/31
- Loopback interface and router ID:
set groups top interfaces lo0 unit 0 family inet address 172.16.254.4/32 set groups top routing-options router-id 172.16.254.4 set groups top routing-options autonomous-system 65004
- Per-packet load-balancing:
set groups top policy-options policy-statement ecmp_policy then load-balance per-packet set groups top policy-options policy-statement ecmp_policy then accept set groups top routing-options forwarding-table export ecmp_policy
- BGP underlay network to the two core switches:
set protocols bgp group evpn_underlay type external set protocols bgp group evpn_underlay log-updown set protocols bgp group evpn_underlay import evpn_underlay_import set protocols bgp group evpn_underlay family inet unicast set protocols bgp group evpn_underlay authentication-key "xyz" set protocols bgp group evpn_underlay export evpn_underlay_export set protocols bgp group evpn_underlay local-as 65004 set protocols bgp group evpn_underlay multipath multiple-as set protocols bgp group evpn_underlay bfd-liveness-detection minimum-interval 350 set protocols bgp group evpn_underlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_underlay neighbor 10.255.240.4 peer-as 65001 set protocols bgp group evpn_underlay neighbor 10.255.240.8 peer-as 65002 set protocols bgp graceful-restart
Configuration of the EVPN VXLAN Overlay and Virtual Networks
This section displays the Juniper Mist cloud configuration output for the EVPN VXLAN Overlay on the core and distribution switches using eBGP.
Mist enables load balancing across the overlay network and fast convergence of BGP in the event of a link or node failure using BFD between the core and distribution layers.
Mist provisions L3 IRB interfaces on the distribution layer.
Mist enables VXLAN tunnelling, VLAN to VXLAN mapping, and MP BGP configuration snippets such as vrf-targets on the distribution and core switches.
VRFs for traffic isolation are provisioned on the distribution switches.
Core1 Configuration:
- BGP overlay peering between the two distribution switches:
set protocols bgp group evpn_overlay type external set protocols bgp group evpn_overlay multihop ttl 1 set protocols bgp group evpn_overlay multihop no-nexthop-change set protocols bgp group evpn_overlay local-address 172.16.254.2 set protocols bgp group evpn_overlay log-updown set protocols bgp group evpn_overlay family evpn signaling loops 2 set protocols bgp group evpn_overlay authentication-key "xyz" set protocols bgp group evpn_overlay local-as 65002 set protocols bgp group evpn_overlay multipath multiple-as set protocols bgp group evpn_overlay bfd-liveness-detection minimum-interval 1000 set protocols bgp group evpn_overlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_overlay bfd-liveness-detection session-mode automatic set protocols bgp group evpn_overlay neighbor 172.16.254.3 peer-as 65003 set protocols bgp group evpn_overlay neighbor 172.16.254.4 peer-as 65004
- Switch options that define vrf-targets and the source loopback
interface used for VXLAN:
set groups top routing-instances evpn_vs vtep-source-interface lo0.0 set groups top routing-instances evpn_vs route-distinguisher 172.16.254.2:1 set groups top routing-instances evpn_vs vrf-target target:65000:1
- VXLAN encapsulation:
set groups top routing-instances evpn_vs protocols evpn encapsulation vxlan set groups top routing-instances evpn_vs protocols evpn default-gateway no-gateway-community set groups top routing-instances evpn_vs protocols evpn extended-vni-list all
- VLAN to VXLAN mapping:
set groups top routing-instances evpn_vs vlans vlan1033 vlan-id 1033 set groups top routing-instances evpn_vs vlans vlan1033 vxlan vni 11033 set groups top routing-instances evpn_vs vlans vlan1088 vlan-id 1088 set groups top routing-instances evpn_vs vlans vlan1088 vxlan vni 11088 set groups top routing-instances evpn_vs vlans vlan1099 vlan-id 1099 set groups top routing-instances evpn_vs vlans vlan1099 vxlan vni 11099
Core2 Configuration:
- BGP overlay peering between the two distribution switches:
set protocols bgp group evpn_overlay type external set protocols bgp group evpn_overlay multihop ttl 1 set protocols bgp group evpn_overlay multihop no-nexthop-change set protocols bgp group evpn_overlay local-address 172.16.254.1 set protocols bgp group evpn_overlay log-updown set protocols bgp group evpn_overlay family evpn signaling loops 2 set protocols bgp group evpn_overlay authentication-key "xyz" set protocols bgp group evpn_overlay local-as 65001 set protocols bgp group evpn_overlay multipath multiple-as set protocols bgp group evpn_overlay bfd-liveness-detection minimum-interval 1000 set protocols bgp group evpn_overlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_overlay bfd-liveness-detection session-mode automatic set protocols bgp group evpn_overlay neighbor 172.16.254.3 peer-as 65003 set protocols bgp group evpn_overlay neighbor 172.16.254.4 peer-as 65004
- Switch options that define vrf-targets and the source loopback
interface used for VXLAN:
set groups top routing-instances evpn_vs vtep-source-interface lo0.0 set groups top routing-instances evpn_vs route-distinguisher 172.16.254.1:1 set groups top routing-instances evpn_vs vrf-target target:65000:1
- VXLAN encapsulation:
set groups top routing-instances evpn_vs protocols evpn encapsulation vxlan set groups top routing-instances evpn_vs protocols evpn default-gateway no-gateway-community set groups top routing-instances evpn_vs protocols evpn extended-vni-list all
- VLAN to VXLAN mapping:
set groups top routing-instances evpn_vs vlans vlan1033 vlan-id 1033 set groups top routing-instances evpn_vs vlans vlan1033 vxlan vni 11033 set groups top routing-instances evpn_vs vlans vlan1088 vlan-id 1088 set groups top routing-instances evpn_vs vlans vlan1088 vxlan vni 11088 set groups top routing-instances evpn_vs vlans vlan1099 vlan-id 1099 set groups top routing-instances evpn_vs vlans vlan1099 vxlan vni 11099
Dist1 Configuration:
- BGP overlay peering between the two core switches:
set protocols bgp group evpn_overlay type external set protocols bgp group evpn_overlay multihop ttl 1 set protocols bgp group evpn_overlay multihop no-nexthop-change set protocols bgp group evpn_overlay local-address 172.16.254.3 set protocols bgp group evpn_overlay log-updown set protocols bgp group evpn_overlay family evpn signaling loops 2 set protocols bgp group evpn_overlay authentication-key "xyz" set protocols bgp group evpn_overlay local-as 65003 set protocols bgp group evpn_overlay multipath multiple-as set protocols bgp group evpn_overlay bfd-liveness-detection minimum-interval 1000 set protocols bgp group evpn_overlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_overlay bfd-liveness-detection session-mode automatic set protocols bgp group evpn_overlay neighbor 172.16.254.1 peer-as 65001 set protocols bgp group evpn_overlay neighbor 172.16.254.2 peer-as 65002
- Switch options that define vrf-targets and the source loopback
interface used for VXLAN:
set groups top switch-options vtep-source-interface lo0.0 set groups top switch-options route-distinguisher 172.16.254.3:1 set groups top switch-options vrf-target target:65000:1
- VXLAN encapsulation:
set groups top protocols evpn encapsulation vxlan set groups top protocols evpn default-gateway no-gateway-community set groups top protocols evpn extended-vni-list all
- VRFs that are used for traffic isolation:
set groups top routing-instances guest-wifi instance-type vrf set groups top routing-instances guest-wifi interface irb.1033 set groups top routing-instances guest-wifi routing-options static route 0.0.0.0/0 next-hop [ 10.33.33.254 ] set groups top routing-instances guest-wifi routing-options auto-export set groups top routing-instances guest-wifi routing-options multipath set groups top routing-instances guest-wifi route-distinguisher 172.16.254.3:103 set groups top routing-instances guest-wifi vrf-target target:65000:103 set groups top routing-instances guest-wifi vrf-table-label set groups top routing-instances guest-wifi interface lo0.3 set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes vni 15560868 set groups top routing-instances developers instance-type vrf set groups top routing-instances developers interface irb.1088 set groups top routing-instances developers routing-options static route 0.0.0.0/0 next-hop [ 10.88.88.254 ] set groups top routing-instances developers routing-options auto-export set groups top routing-instances developers routing-options multipath set groups top routing-instances developers route-distinguisher 172.16.254.3:102 set groups top routing-instances developers vrf-target target:65000:102 set groups top routing-instances developers vrf-table-label set groups top routing-instances developers interface lo0.2 set groups top routing-instances developers protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances developers protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances developers protocols evpn ip-prefix-routes vni 15600414 set groups top routing-instances corp-it instance-type vrf set groups top routing-instances corp-it interface irb.1099 set groups top routing-instances corp-it routing-options static route 0.0.0.0/0 next-hop [ 10.99.99.254 ] set groups top routing-instances corp-it routing-options auto-export set groups top routing-instances corp-it routing-options multipath set groups top routing-instances corp-it route-distinguisher 172.16.254.3:101 set groups top routing-instances corp-it vrf-target target:65000:101 set groups top routing-instances corp-it vrf-table-label set groups top routing-instances corp-it interface lo0.1 set groups top routing-instances corp-it protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances corp-it protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances corp-it protocols evpn ip-prefix-routes vni 11284517
- VLAN to VXLAN mapping:
set vlans vlan1033 vlan-id 1033 set vlans vlan1033 l3-interface irb.1033 set vlans vlan1033 vxlan vni 11033 set vlans vlan1088 vlan-id 1088 set vlans vlan1088 l3-interface irb.1088 set vlans vlan1088 vxlan vni 11088 set vlans vlan1099 vlan-id 1099 set vlans vlan1099 l3-interface irb.1099 set vlans vlan1099 vxlan vni 11099
- L3 IRB interface enablement with anycast addressing:
set interfaces irb unit 1033 description vlan1033 set interfaces irb unit 1033 family inet mtu 9000 set interfaces irb unit 1033 family inet address 10.33.33.1/24 set interfaces irb unit 1033 mac 00:00:5e:e4:31:57 set interfaces irb unit 1088 description vlan1088 set interfaces irb unit 1088 family inet mtu 9000 set interfaces irb unit 1088 family inet address 10.88.88.1/24 set interfaces irb unit 1088 mac 00:00:5e:e4:31:57 set interfaces irb unit 1099 description vlan1099 set interfaces irb unit 1099 family inet mtu 9000 set interfaces irb unit 1099 family inet address 10.99.99.1/24 set interfaces irb unit 1099 mac 00:00:5e:e4:31:57
Dist2 Configuration:
- BGP overlay peering between the two core switches:
set protocols bgp group evpn_overlay type external set protocols bgp group evpn_overlay local-address 172.16.254.4 set protocols bgp group evpn_overlay local-as 65004 set protocols bgp group evpn_overlay multipath multiple-as set protocols bgp group evpn_overlay authentication-key "Xyz" set protocols bgp group evpn_overlay family evpn signaling loops 2 set protocols bgp group evpn_overlay log-updown set protocols bgp group evpn_overlay bfd-liveness-detection minimum-interval 1000 set protocols bgp group evpn_overlay bfd-liveness-detection multiplier 3 set protocols bgp group evpn_overlay bfd-liveness-detection session-mode automatic set protocols bgp group evpn_overlay multihop ttl 1 set protocols bgp group evpn_overlay multihop no-nexthop-change set protocols bgp group evpn_overlay neighbor 172.16.254.1 peer-as 65001 set protocols bgp group evpn_overlay neighbor 172.16.254.2 peer-as 65002
- Switch options that define vrf-targets and the source loopback
interface used for VXLAN:
set groups top switch-options vtep-source-interface lo0.0 set groups top switch-options route-distinguisher 172.16.254.4:1 set groups top switch-options vrf-target target:65000:1
- VXLAN encapsulation:
set groups top protocols evpn encapsulation vxlan set groups top protocols evpn default-gateway no-gateway-community set groups top protocols evpn extended-vni-list all
- VRFs that are used for traffic isolation:
set groups top routing-instances guest-wifi instance-type vrf set groups top routing-instances guest-wifi interface irb.1033 set groups top routing-instances guest-wifi routing-options static route 0.0.0.0/0 next-hop [ 10.33.33.254 ] set groups top routing-instances guest-wifi routing-options auto-export set groups top routing-instances guest-wifi routing-options multipath set groups top routing-instances guest-wifi route-distinguisher 172.16.254.4:103 set groups top routing-instances guest-wifi vrf-target target:65000:103 set groups top routing-instances guest-wifi vrf-table-label set groups top routing-instances guest-wifi interface lo0.3 set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances guest-wifi protocols evpn ip-prefix-routes vni 15560868 set groups top routing-instances developers instance-type vrf set groups top routing-instances developers interface irb.1088 set groups top routing-instances developers routing-options static route 0.0.0.0/0 next-hop [ 10.88.88.254 ] set groups top routing-instances developers routing-options auto-export set groups top routing-instances developers routing-options multipath set groups top routing-instances developers route-distinguisher 172.16.254.4:102 set groups top routing-instances developers vrf-target target:65000:102 set groups top routing-instances developers vrf-table-label set groups top routing-instances developers interface lo0.2 set groups top routing-instances developers protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances developers protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances developers protocols evpn ip-prefix-routes vni 15600414 set groups top routing-instances corp-it instance-type vrf set groups top routing-instances corp-it interface irb.1099 set groups top routing-instances corp-it routing-options static route 0.0.0.0/0 next-hop [ 10.99.99.254 ] set groups top routing-instances corp-it routing-options auto-export set groups top routing-instances corp-it routing-options multipath set groups top routing-instances corp-it route-distinguisher 172.16.254.4:101 set groups top routing-instances corp-it vrf-target target:65000:101 set groups top routing-instances corp-it vrf-table-label set groups top routing-instances corp-it interface lo0.1 set groups top routing-instances corp-it protocols evpn ip-prefix-routes advertise direct-nexthop set groups top routing-instances corp-it protocols evpn ip-prefix-routes encapsulation vxlan set groups top routing-instances corp-it protocols evpn ip-prefix-routes vni 11284517
- VLAN to VXLAN mapping:
set vlans vlan1033 vlan-id 1033 set vlans vlan1033 l3-interface irb.1033 set vlans vlan1033 vxlan vni 11033 set vlans vlan1088 vlan-id 1088 set vlans vlan1088 l3-interface irb.1088 set vlans vlan1088 vxlan vni 11088 set vlans vlan1099 vlan-id 1099 set vlans vlan1099 l3-interface irb.1099 set vlans vlan1099 vxlan vni 11099
- L3 IRB interface enablement with anycast addressing:
set interfaces irb unit 1033 description vlan1033 set interfaces irb unit 1033 family inet mtu 9000 set interfaces irb unit 1033 family inet address 10.33.33.1/24 set interfaces irb unit 1033 mac 00:00:5e:e4:31:57 set interfaces irb unit 1088 description vlan1088 set interfaces irb unit 1088 family inet mtu 9000 set interfaces irb unit 1088 family inet address 10.88.88.1/24 set interfaces irb unit 1088 mac 00:00:5e:e4:31:57 set interfaces irb unit 1099 description vlan1099 set interfaces irb unit 1099 family inet mtu 9000 set interfaces irb unit 1099 family inet address 10.99.99.1/24 set interfaces irb unit 1099 mac 00:00:5e:e4:31:57
Configuration of the Layer 2 ESI-LAG Between the Distribution Switches and the Access Switches
This section displays the configuration output from the Juniper Mist cloud for the enablement of the Layer 2 ESI-LAGs between the distribution switches and access switches. This Mist profile enables all VLANs on the Ethernet bundle with requisite ESI and LACP configuration options. From the perspective of the access switches, the Ethernet bundle that is configured on the access layer views the ESI-LAG as a single MAC address with the same LACP system-ID. This enables load hashing between distribution and access layers without requiring L2 loop-free detection protocols such as RSTP.
Dist1 Configuration:
- Interface association with the newly created Ethernet bundle
that includes ESI and LACP configuration:
set interfaces ae11 apply-groups erb-lag set interfaces ae11 esi all-active set interfaces ae11 esi 00:11:00:00:00:01:00:01:03:0b set interfaces ae11 aggregated-ether-options lacp active set interfaces ae11 aggregated-ether-options lacp periodic fast set interfaces ae11 aggregated-ether-options lacp system-id 00:00:00:31:57:0b set interfaces ae11 aggregated-ether-options lacp admin-key 11 set interfaces ae12 apply-groups erb-lag set interfaces ae12 esi all-active set interfaces ae12 esi 00:11:00:00:00:01:00:01:03:0c set interfaces ae12 aggregated-ether-options lacp active set interfaces ae12 aggregated-ether-options lacp periodic fast set interfaces ae12 aggregated-ether-options lacp system-id 00:00:00:31:57:0c set interfaces ae12 aggregated-ether-options lacp admin-key 12 set groups erb-lag interfaces <*> unit 0 family ethernet-switching interface-mode trunk set groups erb-lag interfaces <*> unit 0 family ethernet-switching vlan members [ vlan1033 vlan1088 vlan1099 ] set groups erb-lag interfaces <*> mtu 9100 set interfaces ge-0/0/36 ether-options 802.3ad ae11 set interfaces ge-0/0/36 description esilag-to-00cc34f3cf00 set interfaces ge-0/0/36 hold-time up 120000 down 1 set interfaces ge-0/0/37 ether-options 802.3ad ae12 set interfaces ge-0/0/37 description esilag-to-00cc34f3cf00 set interfaces ge-0/0/37 hold-time up 120000 down 1
Dist2 Configuration:
- Interface association with the newly created Ethernet bundle
that includes ESI and LACP configuration:
set interfaces ae11 apply-groups erb-lag set interfaces ae11 esi all-active set interfaces ae11 esi 00:11:00:00:00:01:00:01:03:0b set interfaces ae11 aggregated-ether-options lacp active set interfaces ae11 aggregated-ether-options lacp periodic fast set interfaces ae11 aggregated-ether-options lacp system-id 00:00:00:31:57:0b set interfaces ae11 aggregated-ether-options lacp admin-key 11 set interfaces ae12 apply-groups erb-lag set interfaces ae12 esi all-active set interfaces ae12 esi 00:11:00:00:00:01:00:01:03:0c set interfaces ae12 aggregated-ether-options lacp active set interfaces ae12 aggregated-ether-options lacp periodic fast set interfaces ae12 aggregated-ether-options lacp system-id 00:00:00:31:57:0c set interfaces ae12 aggregated-ether-options lacp admin-key 12 set groups erb-lag interfaces <*> unit 0 family ethernet-switching interface-mode trunk set groups erb-lag interfaces <*> unit 0 family ethernet-switching vlan members [ vlan1033 vlan1088 vlan1099 ] set groups erb-lag interfaces <*> mtu 9100 set interfaces ge-0/0/36 description esilag-to-00cc34f3cf00 set interfaces ge-0/0/36 hold-time up 120000 set interfaces ge-0/0/36 hold-time down 1 set interfaces ge-0/0/36 ether-options 802.3ad ae12 set interfaces ge-0/0/37 description esilag-to-00cc34f3cf00 set interfaces ge-0/0/37 hold-time up 120000 set interfaces ge-0/0/37 hold-time down 1 set interfaces ge-0/0/37 ether-options 802.3ad ae11
Access Configuration:
- VLANs associated with the new LACP Ethernet bundle:
set groups erb-lag interfaces <*> unit 0 family ethernet-switching interface-mode trunk set groups erb-lag interfaces <*> unit 0 family ethernet-switching vlan members [ vlan1033 vlan1088 vlan1099 ] set groups erb-lag interfaces <*> mtu 9100 set interfaces ae11 apply-groups erb-lag set interfaces ae11 aggregated-ether-options lacp active set interfaces ge-0/0/36 ether-options 802.3ad ae11 set interfaces ge-0/0/37 ether-options 802.3ad ae11
Configuration of the Layer 2 ESI-LAG Between the Core Switches and the MX Router
This section displays the configuration output from the Juniper Mist cloud for the enablement of the Layer 2 ESI-LAGs between the core switches and the MX router. This Mist profile enables all VLANs on the Ethernet bundle with requisite ESI and LACP configuration options. From the perspective of the MX router, the Ethernet bundle that is configured on the MX router views the ESI-LAG as a single MAC address with the same LACP system-ID. This enables load hashing between the core and MX router without requiring L2 loop-free detection protocols such as RSTP.
Core 1 Configuration:
- Interface association with the newly created Ethernet bundle
that includes ESI and LACP configuration:
set interfaces xe-1/0/0 hold-time up 120000 set interfaces xe-1/0/0 hold-time down 1 set interfaces xe-1/0/0 ether-options 802.3ad ae0 set interfaces xe-1/0/0 unit 0 family ethernet-switching storm-control default set groups myesilag interfaces <*> mtu 9014 set groups myesilag interfaces <*> unit 0 family ethernet-switching interface-mode trunk set groups myesilag interfaces <*> unit 0 family ethernet-switching vlan members all set interfaces ae0 apply-groups myesilag set interfaces ae0 esi 00:11:00:00:00:01:00:01:02:00 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 00:00:00:31:57:00 set interfaces ae0 aggregated-ether-options lacp admin-key 0
Core 2 Configuration:
- Interface association with the newly created Ethernet bundle
that includes ESI and LACP configuration:
set interfaces xe-1/0/1 hold-time up 120000 set interfaces xe-1/0/1 hold-time down 1 set interfaces xe-1/0/1 ether-options 802.3ad ae0 set interfaces xe-1/0/1 unit 0 family ethernet-switching storm-control default set groups myesilag interfaces <*> mtu 9014 set groups myesilag interfaces <*> unit 0 family ethernet-switching interface-mode trunk set groups myesilag interfaces <*> unit 0 family ethernet-switching vlan members all set interfaces ae0 apply-groups myesilag set interfaces ae0 esi 00:11:00:00:00:01:00:01:02:00 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 00:00:00:31:57:00 set interfaces ae0 aggregated-ether-options lacp admin-key 0
MX Router Configuration:
- Interface association with newly created Ethernet bundle and
LACP configuration:
set interfaces xe-0/0/0 gigether-options 802.3ad ae0 set interfaces xe-0/0/1 gigether-options 802.3ad ae0 set chassis aggregated-devices ethernet device-count 1 set interfaces ae0 mtu 9014 set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1033 set interfaces ae0 unit 0 family bridge vlan-id-list 1088 set interfaces ae0 unit 0 family bridge vlan-id-list 1099 set interfaces irb unit 1033 family inet address 10.33.33.254/24 set interfaces irb unit 1088 family inet address 10.88.88.254/24 set interfaces irb unit 1099 family inet address 10.99.99.254/24 set bridge-domains vlan1033 vlan-id 1033 set bridge-domains vlan1033 routing-interface irb.1033 set bridge-domains vlan1088 vlan-id 1088 set bridge-domains vlan1088 routing-interface irb.1088 set bridge-domains vlan1099 vlan-id 1099 set bridge-domains vlan1099 routing-interface irb.1099