Appendix: IPv6 Overlay and Underlay eBGP Peering Towards Unmanaged SRX
Note:
We were not able to resolve the issue where vJunos-switch VMs fail to forward default traffic when using a VXLAN IPv6 underlay. As a result, this type of lab should be built entirely with physical devices!
An IPv4/IPv6 dual-stack fabric requires significantly more route resources on the global fabric route table distributed via EVPN. Since each client may use an IPv4 address, an IPv6 local address, and an IPv6 global address, you should plan for up to three times the number of route resources per client.
The use of SLAAC-based IPv6 dynamic address assignment should be avoided in this type of fabric. Clients may request multiple IPv6 addresses, potentially one per application, which further increases route resource consumption, as each address requires both local and global entries. If dynamic IPv6 address assignment is needed for clients using the EVPN fabric, plan to use DHCPv6 relay within the fabric along with a customer-provided DHCPv6 server.
When creating a new campus fabric and there is a possibility of using IPv6 as overlay transport in the future, ensure that IPv6 is also enabled for the underlay during initial setup. This approach provides the advantage of having the necessary GUI configuration options available from the start.
When you enable an IPv6 underlay, several configuration changes occur compared to the IPv4 underlay setting.
- Instead of using the usual global routing instance called
default-switch, the port interfaces configured for the EVPN fabric are moved into a mac-vrf instance calledevpn_vs. From there, they may use VTEP communication for Layer 2 forwarding or VRF for Layer 3, depending on the EVPN fabric design. The difference is highlighted below:root@access1> show vlans . Routing instance VLAN name Tag Interfaces default-switch default 1 mge-0/0/0.0 mge-0/0/1.0 . . evpn_vs VLAN1091 1091 mge-0/0/23.0 vtep-11.32769* evpn_vs VLAN1099 1099 mge-0/0/11.0* mge-0/0/14.0* mge-0/0/16.0* mge-0/0/23.0 vtep-11.32769* . root@access1> show configuration | display set | match evpn_vs set groups top routing-instances evpn_vs instance-type mac-vrf set groups top routing-instances evpn_vs protocols evpn encapsulation vxlan set groups top routing-instances evpn_vs protocols evpn default-gateway do-not-advertise set groups top routing-instances evpn_vs protocols evpn extended-vni-list all set groups top routing-instances evpn_vs vtep-source-interface lo0.0 set groups top routing-instances evpn_vs vtep-source-interface inet6 set groups top routing-instances evpn_vs service-type vlan-aware set groups top routing-instances evpn_vs interface mge-0/0/11.0 set groups top routing-instances evpn_vs interface mge-0/0/13.0 set groups top routing-instances evpn_vs interface mge-0/0/14.0 set groups top routing-instances evpn_vs interface mge-0/0/16.0 set groups top routing-instances evpn_vs route-distinguisher 172.16.254.8:1 set groups top routing-instances evpn_vs vrf-target target:65000:1 set groups top routing-instances evpn_vs vlans VLAN1099 vlan-id 1099 set groups top routing-instances evpn_vs vlans VLAN1099 l3-interface irb.1099 set groups top routing-instances evpn_vs vlans VLAN1099 vxlan vni 11099 set groups top routing-instances evpn_vs vlans VLAN1091 vlan-id 1091 set groups top routing-instances evpn_vs vlans VLAN1091 l3-interface irb.1091 set groups top routing-instances evpn_vs vlans VLAN1091 vxlan vni 11091 - The system configures both IPv4 and IPv6 for the underlay loopback IP address on the lo0.0 interface, but all BGP signaling and VXLAN data traffic are exchanged using the configured IPv6 lo0.0 address. The IPv4 loopback address can therefore be ignored.
- You will notice minor configuration changes where additional IPv6 statements are included in the fabric configuration.
Note:
If you plan to use additional features such as multicast through additional Junos CLI configuration, it is preferable to use an IPv6 underlay, as these features may also require mac-vrf binding.
When exchanging routes with the WAN router through BGP, it is best practice to separate the peering configuration by IP version. For each EVPN fabric VRF, this means having one configuration with an IPv4-based neighbor and another with an IPv6-based neighbor. Although the Juniper EVPN fabric internally exchanges all IPv4 information over IPv6, not all WAN router vendors support this behavior. For this reason, the examples intentionally show separate IPv4 and IPv6 BGP peering configurations, even though a Juniper WAN router could operate with a more simplified, combined setup.
The configuration examples in this chapter are based on the following design principles:
- Two redundant SRX devices are used with chassis clustering enabled.
- Since WAN Edge for SRX does not currently provide full IPv6 support, the WAN router devices are unmanaged, and the Junos configuration is created and applied manually.
- Depending on your preference, you can choose between two
peering approaches:
- Active/active BGP peering across all four uplink interfaces, similar to the approach described in Appendix: Layer 3 Exit With eBGP Routing Protocol (Full Active/Active Peering). In this case, AS path prepending is applied on the second WAN router node to make it less preferred.
- Active/passive BGP peering using a LAG interface configuration, similar to the approach described in Appendix: WAN Edge SSR or SRX Juniper Mist Cloud-managed eBGP Peering via Active/Passive LAG. For the SRX chassis cluster, this requires the use of reth interfaces along with ESI-LAG configuration on the EVPN fabric side.
Lab and Fabric Creation and Preparation
Note:
At this time, it is not possible to build a virtual lab because the vJunos-switch VM (observed in releases 24.4R1 and 25.2R1) has issues forwarding default traffic over VXLAN to the VRF on the service block function. For now, use a fully physical lab environment for testing until this issue is resolved.
The topology shown below was used for this example lab and is entirely based on physical devices.
Figure 1: The WAN routers consisted of a pair of SRX1500 devices
running Junos 23.4R2-S5.5. The fabric switch models and their Junos
versions can be found in the image below. Figure : IPv6 Lab
devices
In this lab, the DHCPv4 and DHCPv6 server was located outside the fabric and was reachable through the WAN interface of the SRX1500. For lab purposes, the WAN interfaces operated at 1 Gbit/s, which is not representative of a production design.
Figure 2: IPv6 Lab Topology
Below is a switch template with IPv4 and IPv6 dual stack configuration.
{
"additional_config_cmds": [],
"networks": {
"VLAN1031": {
"vlan_id": "1031",
"subnet": "10.31.31.0/24",
"subnet6": "fd00:1234:5678:1031::/64"
},
"VLAN1033": {
"vlan_id": "1033",
"subnet": "10.33.33.0/24",
"subnet6": "fd00:1234:5678:1033::/64"
},
"VLAN1088": {
"vlan_id": "1088",
"subnet": "10.88.88.0/24",
"subnet6": "fd00:1234:5678:1088::/64"
},
"VLAN1099": {
"vlan_id": "1099",
"subnet": "10.99.99.0/24",
"subnet6": "fd00:1234:5678:1099::/64"
},
"VLAN1081": {
"vlan_id": "1081",
"subnet": "10.81.81.0/24",
"subnet6": "fd00:1234:5678:1081::/64"
},
"VLAN1091": {
"vlan_id": "1091",
"subnet": "10.91.91.0/24",
"subnet6": "fd00:1234:5678:1091::/64"
},
"trans1": {
"vlan_id": "101",
"subnet": "",
"subnet6": ""
},
"trans2": {
"vlan_id": "102",
"subnet": "",
"subnet6": ""
},
"trans3": {
"vlan_id": "103",
"subnet": "",
"subnet6": ""
}
},
"port_usages": {
"vlan1099-no-auth": {
"mode": "access",
"disabled": false,
"port_network": "VLAN1099",
"voip_network": null,
"stp_edge": false,
"port_auth": null,
"allow_multiple_supplicants": null,
"enable_mac_auth": null,
"mac_auth_only": null,
"guest_network": null,
"bypass_auth_when_server_down": null,
"dynamic_vlan_networks": null,
"stp_p2p": false,
"stp_no_root_port": false,
"mac_auth_protocol": null,
"reauth_interval": null,
"all_networks": false,
"networks": null,
"speed": "auto",
"duplex": "auto",
"mac_limit": 0,
"persist_mac": false,
"poe_disabled": false,
"enable_qos": false,
"storm_control": {},
"mtu": null,
"description": "",
"disable_autoneg": false
},
"vlan1088-no-auth": {
"disabled": false,
"mode": "access",
"port_network": "VLAN1088",
"voip_network": null,
"stp_edge": false,
"port_auth": null,
"allow_multiple_supplicants": null,
"enable_mac_auth": null,
"mac_auth_only": null,
"guest_network": null,
"bypass_auth_when_server_down": null,
"dynamic_vlan_networks": null,
"stp_p2p": false,
"stp_no_root_port": false,
"mac_auth_protocol": null,
"reauth_interval": null,
"all_networks": false,
"networks": null,
"speed": "auto",
"duplex": "auto",
"mac_limit": 0,
"persist_mac": false,
"poe_disabled": false,
"enable_qos": false,
"storm_control": {},
"mtu": null,
"description": "",
"disable_autoneg": false
},
"vlan1099-eap-auth": {
"mode": "access",
"disabled": false,
"port_network": "VLAN1099",
"voip_network": null,
"stp_edge": false,
"port_auth": "dot1x",
"allow_multiple_supplicants": false,
"enable_mac_auth": false,
"mac_auth_only": false,
"guest_network": null,
"bypass_auth_when_server_down": false,
"dynamic_vlan_networks": null,
"stp_p2p": false,
"stp_no_root_port": false,
"mac_auth_protocol": null,
"reauth_interval": "65000",
"all_networks": false,
"networks": null,
"speed": "auto",
"duplex": "auto",
"mac_limit": 0,
"persist_mac": false,
"poe_disabled": false,
"enable_qos": false,
"storm_control": {},
"mtu": null,
"description": "",
"disable_autoneg": false
},
"dynamic": {
"mode": "dynamic",
"rules": []
},
"vlan1088-eap-auth": {
"disabled": false,
"mode": "access",
"port_network": "VLAN1088",
"voip_network": null,
"stp_edge": false,
"port_auth": "dot1x",
"allow_multiple_supplicants": false,
"enable_mac_auth": false,
"mac_auth_only": false,
"guest_network": null,
"bypass_auth_when_server_down": false,
"dynamic_vlan_networks": null,
"stp_p2p": false,
"stp_no_root_port": false,
"mac_auth_protocol": null,
"reauth_interval": "65000",
"all_networks": false,
"networks": null,
"speed": "auto",
"duplex": "auto",
"mac_limit": 0,
"persist_mac": false,
"poe_disabled": false,
"enable_qos": false,
"storm_control": {},
"mtu": null,
"description": "",
"disable_autoneg": false
},
"vlan1099-mab-auth": {
"mode": "access",
"disabled": false,
"port_network": "VLAN1099",
"voip_network": null,
"stp_edge": false,
"port_auth": "dot1x",
"allow_multiple_supplicants": true,
"enable_mac_auth": true,
"mac_auth_only": true,
"guest_network": null,
"bypass_auth_when_server_down": false,
"dynamic_vlan_networks": null,
"stp_p2p": false,
"stp_no_root_port": false,
"mac_auth_protocol": "pap",
"reauth_interval": "65000",
"all_networks": false,
"networks": null,
"speed": "auto",
"duplex": "auto",
"mac_limit": 0,
"persist_mac": false,
"poe_disabled": false,
"enable_qos": false,
"storm_control": {},
"mtu": null,
"description": "",
"disable_autoneg": false
},
"vlan1088-mab-auth": {
"disabled": false,
"mode": "access",
"port_network": "VLAN1088",
"voip_network": null,
"stp_edge": false,
"port_auth": "dot1x",
"allow_multiple_supplicants": true,
"enable_mac_auth": true,
"mac_auth_only": true,
"guest_network": null,
"bypass_auth_when_server_down": false,
"dynamic_vlan_networks": null,
"stp_p2p": false,
"stp_no_root_port": false,
"mac_auth_protocol": "pap",
"reauth_interval": "65000",
"all_networks": false,
"networks": null,
"speed": "auto",
"duplex": "auto",
"mac_limit": 0,
"persist_mac": false,
"poe_disabled": false,
"enable_qos": false,
"storm_control": {},
"mtu": null,
"description": "",
"disable_autoneg": false
},
"vlan1033-noauth": {
"disabled": false,
"mode": "access",
"port_network": "VLAN1033",
"voip_network": null,
"stp_edge": false,
"use_vstp": false,
"port_auth": null,
"allow_multiple_supplicants": null,
"enable_mac_auth": null,
"mac_auth_only": null,
"guest_network": null,
"bypass_auth_when_server_down": null,
"dynamic_vlan_networks": null,
"stp_p2p": false,
"stp_no_root_port": false,
"server_reject_network": null,
"server_fail_network": null,
"mac_auth_protocol": null,
"reauth_interval": null,
"all_networks": false,
"networks": null,
"speed": "auto",
"duplex": "auto",
"mac_limit": 0,
"persist_mac": false,
"poe_disabled": false,
"enable_qos": false,
"storm_control": {},
"mtu": null,
"description": "",
"disable_autoneg": false
},
"access-point": {
"mode": "trunk",
"disabled": false,
"port_network": "VLAN1033",
"voip_network": null,
"stp_edge": false,
"port_auth": null,
"allow_multiple_supplicants": null,
"enable_mac_auth": null,
"mac_auth_only": null,
"guest_network": null,
"bypass_auth_when_server_down": null,
"dynamic_vlan_networks": null,
"stp_p2p": false,
"stp_no_root_port": false,
"mac_auth_protocol": null,
"reauth_interval": null,
"all_networks": false,
"networks": [
"VLAN1088",
"VLAN1099"
],
"speed": "auto",
"duplex": "auto",
"mac_limit": 0,
"persist_mac": false,
"poe_disabled": false,
"enable_qos": false,
"storm_control": {},
"mtu": null,
"description": "",
"disable_autoneg": false,
"use_vstp": false,
"server_reject_network": null,
"server_fail_network": null
}
},
"disabled_system_defined_port_usages": [],
"extra_routes": {},
"extra_routes6": {},
"switch_mgmt": {
"config_revert_timer": 10,
"root_password": "",
"local_accounts": {},
"protect_re": {
"enabled": false
},
"tacacs": {
"enabled": false
},
"dhcp_option_fqdn": false
},
"mist_nac": {
"enabled": true,
"network": null
},
"radius_config": {
"auth_servers": [],
"acct_servers": [],
"auth_servers_timeout": 5,
"auth_servers_retries": 3,
"fast_dot1x_timers": false,
"acct_interim_interval": 0,
"auth_server_selection": "ordered",
"coa_enabled": false,
"coa_port": ""
},
"vrf_config": {
"enabled": false
},
"remote_syslog": {
"enabled": false
},
"snmp_config": {
"enabled": false
},
"dhcp_snooping": {
"enabled": false
},
"bgp_config": null,
"routing_policies": {},
"dns_servers": [
"8.8.8.8",
"9.9.9.9"
],
"dns_suffix": [],
"ntp_servers": [
"192.168.10.1"
],
"acl_policies": [],
"port_mirroring": {},
"switch_matching": {
"enable": true,
"rules": []
},
"name": "dc82-ip-clos-dualstack"
}The installation of a Kea DHCPv4 service is described in this JVDE, so it is assumed that this step has already been completed. This section only covers the additional configuration required to enable the DHCPv6 server. Make sure the Kea version is 2.0 or later, as earlier versions do not support listening on an IPv6 socket interface, and the fabric operates solely as a DHCP relay.
First, add IPv6 interface configuration to the DHCP server VM
using Netplan, as shown in the example below. Additional
adjustments may be required for a production deployment, since the
IP addresses 192.168.10.99 and
fd00:1234:5678:0010::99 are bound only to WAN router
node0 for debugging purposes.
cat /etc/netplan/01-netcfg.yaml
network:
version: 2
renderer: networkd
ethernets:
ens3:
dhcp4: false
dhcp6: false
addresses:
- 192.168.10.11/24
- fd00:1234:5678:0010::11/64
routes:
- to: default
via: 192.168.10.1
- to: 10.0.0.0/8
via: 192.168.10.99
- to: 172.16.192.0/19
via: 192.168.10.99
- to: "::/0"
via: fd00:1234:5678:0010::99
nameservers:
addresses:
- 8.8.8.8
- 9.9.9.9
- 2001:4860:4860::8888
- 2001:4860:4860::8844Below is the additional IPv6 configuration for the Kea DHCP server, to be added to the existing DHCPv4 setup for three VLANs in the EVPN fabric, along with basic testing steps. The configuration is relatively straightforward.
# https://kb.isc.org/docs/kea-configuration-for-small-office-or-home-use
.
cp /etc/kea/kea-dhcp6.conf /etc/kea/kea-dhcp6.conf.orig
.
cat <<EOF >/etc/kea/kea-dhcp6.conf
{
"Dhcp6": {
"interfaces-config": {
"interfaces": [ "ens3/fd00:1234:5678:0010::11" ]
},
"control-socket": {
"socket-type": "unix",
"socket-name": "/tmp/kea6-ctrl-socket"
},
"lease-database": {
"type": "memfile",
"lfc-interval": 3600
},
"expired-leases-processing": {
"reclaim-timer-wait-time": 10,
"flush-reclaimed-timer-wait-time": 25,
"hold-reclaimed-time": 3600,
"max-reclaim-leases": 100,
"max-reclaim-time": 250,
"unwarned-reclaim-cycles": 5
},
"renew-timer": 900,
"rebind-timer": 1800,
"valid-lifetime": 3600,
"option-data": [
{
"name": "dns-servers",
"data": "2001:4860:4860::8888, 2001:4860:4860::8844"
}
],
"subnet6": [
{
"id": 1,
"subnet": "fd00:1234:5678:1099::/64",
"pools": [
{
"pool": "fd00:1234:5678:1099::0a - fd00:1234:5678:1099::f8"
}
]
},
{
"id": 2,
"subnet": "fd00:1234:5678:1088::/64",
"pools": [
{
"pool": "fd00:1234:5678:1088::0a - fd00:1234:5678:1088::f8"
}
]
},
{
"id": 3,
"subnet": "fd00:1234:5678:1033::/64",
"pools": [
{
"pool": "fd00:1234:5678:1033::0a - fd00:1234:5678:1033::f8"
}
]
}
],
"loggers": [
{
"name": "kea-dhcp6",
"output_options": [
{
"output": "syslog"
}
],
"severity": "DEBUG",
"debuglevel": 0
}
]
}
}
EOF
.
systemctl restart kea-dhcp6-server
.
tail -f /var/log/syslog
.
netstat -tunap | grep udp6
udp6 0 0 fd00:1234:5678:10:::547 :::* 1200/kea-dhcp6
udp6 0 0 fe80::5054:ff:fe6a::547 :::* 1200/kea-dhcp6
udp6 0 0 ff02::1:2:547 :::* 1200/kea-dhcp6
.
# ask for DHCP-Lease on a linux desktop client
root@desktop1:~# dhclient -6 -v ens5
.
# reviewing the DHCPv6-lease hand out on the DHCP-Server VM
root@kea1:~# tcpdump -vvv -eni ens3 port 547
tcpdump: listening on ens3, link-type EN10MB (Ethernet), snapshot length 262144 bytes
18:13:11.082663 d0:07:ca:71:06:00 > 52:54:00:6a:89:63, ethertype IPv6 (0x86dd), length 219: (hlim 62, next-header UDP (17) payload length: 165) fd00:1234:5678:1099::1.547 > fd00:1234:5678:10::11.547: [udp sum ok] dhcp6 relay-fwd (linkaddr=fd00:1234:5678:1099::1 peeraddr=fe80::5054:ff:fe7e:f9b1 (relay-message (dhcp6 confirm (xid=c01fdb (client-ID hwaddr/time type 1 time 794077869 5254007ef9b1) (option-request DNS-server DNS-search-list Client-FQDN SNTP-servers) (elapsed-time 0) (IA_NA IAID:8321457 T1:0 T2:0 (IA_ADDR fd00:1234:5678:1099::10 pltime:0 vltime:0)))) (opt_53))
18:13:11.083616 52:54:00:6a:89:63 > d0:07:ca:71:06:00, ethertype IPv6 (0x86dd), length 207: (flowlabel 0xc2a62, hlim 64, next-header UDP (17) payload length: 153) fd00:1234:5678:10::11.547 > fd00:1234:5678:1099::1.547: [bad udp cksum 0xdcbf -> 0x3418!] dhcp6 relay-reply (linkaddr=fd00:1234:5678:1099::1 peeraddr=fe80::5054:ff:fe7e:f9b1 (relay-message (dhcp6 reply (xid=c01fdb (client-ID hwaddr/time type 1 time 794077869 5254007ef9b1) (server-ID hwaddr/time type 1 time 770110804 525400a5db3b) (status-code Success) (DNS-server 2001:4860:4860::8888 2001:4860:4860::8844))))As mentioned earlier, using an IPv6 underlay configuration is mandatory if you plan to use IPv6 for overlay traffic. The relevant configuration option is shown in the next image.
If this has not been configured, you will need to schedule a maintenance window for the entire EVPN fabric to transition from an IPv4 to an IPv6 underlay, validate the new IPv6 underlay, and then return the fabric to production. If the fabric was previously using an IPv4 underlay, some of the new fields may appear empty. In that case, refer to the image below and reuse the values shown there to populate those fields.
Figure 3: Required IPv6 underlay
configuration
On the surface, the setup for VLANs and VRFs looks the same as the previous IPv4-only configuration..
Figure 4: Fabric Networks configuration
Page
When reviewing the Other IP Configuration for the listed switches, as shown in the example below, you should now see additional IPv6 anycast or static IPv6 VGA IP settings. It is important to verify that this configuration has been applied correctly.
Figure 5: Added IPv6 Gateway configuration
Naturally, you also need to add IPv6 DHCP server IP addresses as in the lab example shown below.
Figure 6: Added IPv6 DHCP-Relay
configuration
With this complete, your lab should be ready to support an IPv4 and IPv6 dual-stack configuration. The next step is to choose, based on your preference or the capabilities of the WAN router, the approach for connecting the WAN router to the fabric. The recommended method is to use eBGP peering.
We have documented two eBGP peering approaches:
- In the section All Links Peering eBGP Scenario .
- In the section Active/Passive LAG eBGP Scenario .
Please select one of the two for your EVPN fabric.
All Links Peering eBGP Scenario Implementation
The approach used in this section is fully described in the Juniper SRX Series Firewall as WAN Router section. As before, AS path prepending is applied to the second WAN router node to make it less preferred. For the full configuration example, refer to that section; here, only the additional IPv6-related configuration elements are shown to keep the focus on the differences.
The table below provides the complete configuration between the service1 and service2 switches in the service block function and the two SRX WAN routers. The IPv6-related configuration items are highlighted for clarity.
| Switch | Switch AS | VRF | Service P2P IP | Service IF | WAN Router | WAN Router P2P IP | WAN Router AS | WAN Router IF | VLAN ID |
|---|---|---|---|---|---|---|---|---|---|
| service1 | 64911 | customera |
10.255.224.1/31 fd00:1234:5678:224::1/127 |
xe-0/0/36.1091 | node0 |
10.255.224.0/31 fd00:1234:5678:224::/127 |
64901 | xe-0/0/16.1091 | 1091 |
| service1 | 64911 | customerb |
10.255.224.3/31 fd00:1234:5678:224::3/127 |
xe-0/0/36.1081 | node0 |
10.255.224.2/31 fd00:1234:5678:224::2/127 |
64901 | xe-0/0/16.1081 | 1081 |
| service1 | 64911 | devices |
10.255.224.5/31 fd00:1234:5678:224::5/127 |
xe-0/0/36.1031 | node0 |
10.255.224.4/31 fd00:1234:5678:224::4/127 |
64901 | xe-0/0/16.1031 | 1031 |
| service1 | 64911 | customera |
10.255.225.1/31 fd00:1234:5678:224::101/127 |
xe-0/0/37.1099 | node1 |
10.255.225.0/31 fd00:1234:5678:224::100/127 |
64901 | xe-7/0/16.1099 | 1099 |
| service1 | 64911 | customerb |
10.255.225.3/31 fd00:1234:5678:224::103/127 |
xe-0/0/37.1088 | node1 |
10.255.225.2/31 fd00:1234:5678:224::102/127 |
64901 | xe-7/0/16.1088 | 1088 |
| service1 | 64911 | devices |
10.255.225.5/31 fd00:1234:5678:224::105/127 |
xe-0/0/37.1033 | node1 |
10.255.225.4/31 fd00:1234:5678:224::104/127 |
64901 | xe-7/0/16.1033 | 1033 |
| service2 | 64911 | customera |
10.255.226.1/31 fd00:1234:5678:224::201/127 |
xe-0/0/36.1091 | node0 |
10.255.226.0/31 fd00:1234:5678:224::200/127 |
64901 | xe-0/0/17.1091 | 1091 |
| service2 | 64911 | customerb |
10.255.226.3/31 fd00:1234:5678:224::203/127 |
xe-0/0/36.1081 | node0 |
10.255.226.2/31 fd00:1234:5678:224::202/127 |
64901 | xe-0/0/17.1081 | 1081 |
| service2 | 64911 | devices |
10.255.226.5/31 fd00:1234:5678:224::205/127 |
xe-0/0/36.1031 | node0 |
10.255.226.4/31 fd00:1234:5678:224::204/127 |
64901 | xe-0/0/17.1031 | 1031 |
| service2 | 64911 | customera |
10.255.227.1/31 fd00:1234:5678:224::301/127 |
xe-0/0/37.1099 | node1 |
10.255.227.0/31 fd00:1234:5678:224::300/127 |
64901 | xe-7/0/17.1099 | 1099 |
| service2 | 64911 | customerb |
10.255.227.3/31 fd00:1234:5678:224::303/127 |
xe-0/0/37.1088 | node1 |
10.255.227.2/31 fd00:1234:5678:224::302/127 |
64901 | xe-7/0/17.1088 | 1088 |
| service2 | 64911 | devices |
10.255.227.5/31 fd00:1234:5678:224::305/127 |
xe-0/0/37.1033 | node1 |
10.255.227.4/31 fd00:1234:5678:224::304/127 |
64901 | xe-7/0/17.1033 | 1033 |
As in the previous sections, the following provides a description of the configuration that needs to be applied on the service1 switch toward the WAN router.
# # This is for Device: service1 # # configure the Additional IP-Subnetv4 10.255.224.1/31 and IP-Subnetv6 fd00:1234:5678:224::1/127 to Network/VLAN:VLAN1091 # configure the Additional IP-Subnetv4 10.255.224.3/31 and IP-Subnetv6 fd00:1234:5678:224::3/127 to Network/VLAN:VLAN1081 # configure the Additional IP-Subnetv4 10.255.224.5/31 and IP-Subnetv6 fd00:1234:5678:224::5/127 to Network/VLAN:VLAN1031 # Then bind these 3 Network/VLANs to Port Interface xe-0/0/36 as L3-Sub-Interfaces with MTU=9018 # # configure the Additional IP-Subnetv4 10.255.225.1/31 and IP-Subnetv6 fd00:1234:5678:224::101/127 to Network/VLAN:VLAN1099 # configure the Additional IP-Subnetv4 10.255.225.3/31 and IP-Subnetv6 fd00:1234:5678:224::103/127 to Network/VLAN:VLAN1088 # configure the Additional IP-Subnetv4 10.255.225.5/31 and IP-Subnetv6 fd00:1234:5678:224::105/127 to Network/VLAN:VLAN1033 # Then bind these 3 Network/VLANs to Port Interface xe-0/0/37 as L3-Sub-Interfaces with MTU=9018 # # Enable BGP # Create an Export policy called ‘export-vrfs0’ # Add to this export Policy the following Networks as: # - Add Term w. Name=fabric-all-no-hosts Prefix=0.0.0.0/0-30 Protocol=None Then=Accept # - Add Term w. Name=overlaylo0 Prefix=172.16.192.0/24-32 Protocol=None Then=Accept # - Add Term w. Name=fabric-all-no-hosts-ipv6 Prefix=0::0/0-126 Protocol=None Then=Accept # - Add Term w. Name=overlaylo0-ipv6 Prefix=fd33:ab00:2::/64-128 Protocol=None Then=Accept # # Create an Export policy called ‘export-vrfs1’ # Add to this export Policy the following Networks as: # - Add Term w. Name=fabric-all-no-hosts Prefix=0.0.0.0/0-30 Protocol=None Then=Accept Add Action->Prepend AS Path=’64998 64998’ # - Add Term w. Name=overlaylo0 Prefix=172.16.192.0/24-32 Protocol=None Then=Accept Add Action->Prepend AS Path=’64998 64998’ # - Add Term w. Name=fabric-all-no-hosts-ipv6 Prefix=0::0/0-126 Protocol=None Then=Accept Add Action->Prepend AS Path=’64998 64998’ # - Add Term w. Name=overlaylo0-ipv6 Prefix=fd33:ab00:2::/64-128 Protocol=None Then=Accept Add Action->Prepend AS Path=’64998 64998’ # # Create an Export policy called ‘import-default’ # - Name=default Prefix=0.0.0.0/0 Protocol=BGP Action=Accept # - Name=default-ipv6 Prefix=0::0/0 Protocol=BGP Action=Accept # # Create a BGP Group with: # - Name=customera0-IPv4 # - Type=External # - Network (VLAN)=VLAN1091 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.224.0 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customera0-Ipv6 # - Type=External # - Network (VLAN)=VLAN1091 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224:: Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customerb0-Ipv4 # - Type=External # - Network (VLAN)=VLAN1081 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.224.2 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customerb0-Ipv6 # - Type=External # - Network (VLAN)=VLAN1081 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224::2 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=devices0-Ipv4 # - Type=External # - Network (VLAN)=VLAN1031 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.224.4 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=devices0-Ipv6 # - Type=External # - Network (VLAN)=VLAN1031 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224::4 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customera1-Ipv4 # - Type=External # - Network (VLAN)=VLAN1099 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.225.0 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customera1-Ipv6 # - Type=External # - Network (VLAN)=VLAN1099 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224::100 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customerb1-Ipv4 # - Type=External # - Network (VLAN)=VLAN1088 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.225.2 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customerb1-Ipv6 # - Type=External # - Network (VLAN)=VLAN1088 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224::102 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=devices1-Ipv4 # - Type=External # - Network (VLAN)=VLAN1033 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.225.4 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=devices1-Ipv6 # - Type=External # - Network (VLAN)=VLAN1033 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224::104 Neighbor_AS=64901 Hold-Time=90
After completing the configuration on the service1 switch, the following provides a description of what needs to be configured on the service2 switch toward the WAN router.
# # This is for Device: service2 # # configure the Additional IP-Subnetv4 10.255.226.1/31 and IP-Subnetv6 fd00:1234:5678:224::201/127 to Network/VLAN:VLAN1091 # configure the Additional IP-Subnetv4 10.255.226.3/31 and IP-Subnetv6 fd00:1234:5678:224::203/127 to Network/VLAN:VLAN1081 # configure the Additional IP-Subnetv4 10.255.226.5/31 and IP-Subnetv6 fd00:1234:5678:224::205/127 to Network/VLAN:VLAN1031 # Then bind these 3 Network/VLANs to Port Interface xe-0/0/36 as L3-Sub-Interfaces with MTU=9018 # # configure the Additional IP-Subnetv4 10.255.227.1/31 and IP-Subnetv6 fd00:1234:5678:224::301/127 to Network/VLAN:VLAN1099 # configure the Additional IP-Subnetv4 10.255.227.3/31 and IP-Subnetv6 fd00:1234:5678:224::303/127 to Network/VLAN:VLAN1088 # configure the Additional IP-Subnetv4 10.255.227.5/31 and IP-Subnetv6 fd00:1234:5678:224::305/127 to Network/VLAN:VLAN1033 # Then bind these 3 Network/VLANs to Port Interface xe-0/0/37 as L3-Sub-Interfaces with MTU=9018 # # Enable BGP # Create an Export policy called ‘export-vrfs0’ # Add to this export Policy the following Networks as: # - Add Term w. Name=fabric-all-no-hosts Prefix=0.0.0.0/0-30 Protocol=None Then=Accept # - Add Term w. Name=overlaylo0 Prefix=172.16.192.0/24-32 Protocol=None Then=Accept # - Add Term w. Name=fabric-all-no-hosts-ipv6 Prefix=0::0/0-126 Protocol=None Then=Accept # - Add Term w. Name=overlaylo0-ipv6 Prefix=fd33:ab00:2::/64-128 Protocol=None Then=Accept # # Create an Export policy called ‘export-vrfs1’ # Add to this export Policy the following Networks as: # - Add Term w. Name=fabric-all-no-hosts Prefix=0.0.0.0/0-30 Protocol=None Then=Accept Add Action->Prepend AS Path=’64998 64998’ # - Add Term w. Name=overlaylo0 Prefix=172.16.192.0/24-32 Protocol=None Then=Accept Add Action->Prepend AS Path=’64998 64998’ # - Add Term w. Name=fabric-all-no-hosts-ipv6 Prefix=0::0/0-126 Protocol=None Then=Accept Add Action->Prepend AS Path=’64998 64998’ # - Add Term w. Name=overlaylo0-ipv6 Prefix=fd33:ab00:2::/64-128 Protocol=None Then=Accept Add Action->Prepend AS Path=’64998 64998’ # # Create an Export policy called ‘import-default’ # - Name=default Prefix=0.0.0.0/0 Protocol=BGP Action=Accept # - Name=default-ipv6 Prefix=0::0/0 Protocol=BGP Action=Accept # # Create a BGP Group with: # - Name=customera0-Ipv4 # - Type=External # - Network (VLAN)=VLAN1091 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.226.0 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customera0-Ipv6 # - Type=External # - Network (VLAN)=VLAN1091 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224::200 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customerb0-Ipv4 # - Type=External # - Network (VLAN)=VLAN1081 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.226.2 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customerb0-Ipv6 # - Type=External # - Network (VLAN)=VLAN1081 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224::202 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=devices0-Ipv4 # - Type=External # - Network (VLAN)=VLAN1031 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.226.4 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=devices0-Ipv6 # - Type=External # - Network (VLAN)=VLAN1031 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs0 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224::204 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customera1-Ipv4 # - Type=External # - Network (VLAN)=VLAN1099 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.227.0 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customera1-Ipv6 # - Type=External # - Network (VLAN)=VLAN1099 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224::300 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customerb1-Ipv4 # - Type=External # - Network (VLAN)=VLAN1088 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.227.2 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=customerb1-Ipv6 # - Type=External # - Network (VLAN)=VLAN1088 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224::302 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=devices1-Ipv4 # - Type=External # - Network (VLAN)=VLAN1033 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=10.255.227.4 Neighbor_AS=64901 Hold-Time=90 # # Create a BGP Group with: # - Name=devices1-Ipv6 # - Type=External # - Network (VLAN)=VLAN1033 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs1 and Import=import-default # Add also the following Neighbor # - IP_Address=fd00:1234:5678:224::304 Neighbor_AS=64901 Hold-Time=90
After the changes on the two EVPN fabric switches are made, take a moment to review the changes. You should now see configuration similar to the image below.
The additional IP configuration now has IPv4 and IPv6 addresses.
Figure 7: IPv4 and IPv6 Additional IP
Configuration
There are no significant differences in the uplink port configuration, so the focus shifts to the BGP peering groups. With three VRFs, each service block function in the fabric peers with two redundant WAN routers. When the BGP peering is separated into IPv4 and IPv6, as recommended, this results in a total of twelve BGP peer groups, as shown below.
Figure 8: BGP-Peering configuration
Each of the three BGP routing policies now have added IPv6 configuration statements for simplification.
Figure 9: Added BGP Policy
For instance, the export-vrf0 policy now includes
two final statements to maintain consistency with the IPv6
setup.
Figure 10: Example of added IPv6 policy
statements
The following example illustrates the WAN router configuration to be applied to the SRX chassis cluster.
set groups node0 system host-name srx1_node0
set groups node1 system host-name srx2_node1
set apply-groups "${node}"
set chassis aggregated-devices ethernet device-count 10
set chassis cluster control-link-recovery
set chassis cluster reth-count 5
set chassis cluster initial-hold 60
set chassis cluster redundancy-group 1 node 0 priority 200
set chassis cluster redundancy-group 1 node 1 priority 100
set chassis cluster redundancy-group 1 gratuitous-arp-count 4
set interfaces fab0 fabric-options member-interfaces ge-0/0/1
set interfaces fab1 fabric-options member-interfaces ge-7/0/1
.
# rebuild trust zone to clear old interfaces bound
delete security zones security-zone trust
set security zones security-zone trust tcp-rst
set security zones security-zone trust host-inbound-traffic system-services all
set security zones security-zone trust host-inbound-traffic protocols all
.
delete interfaces xe-0/0/16
set interfaces xe-0/0/16 flexible-vlan-tagging
set interfaces xe-0/0/16 mtu 9018
set interfaces xe-0/0/16 unit 1091 description vlan1091
set interfaces xe-0/0/16 unit 1091 vlan-id 1091
set interfaces xe-0/0/16 unit 1091 family inet address 10.255.224.0/31
set interfaces xe-0/0/16 unit 1091 family inet6 address fd00:1234:5678:224::/127
set security zones security-zone trust interfaces xe-0/0/16.1091 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-0/0/16.1091 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-0/0/16.1091 host-inbound-traffic system-services ping
set interfaces xe-0/0/16 unit 1081 description vlan1081
set interfaces xe-0/0/16 unit 1081 vlan-id 1081
set interfaces xe-0/0/16 unit 1081 family inet address 10.255.224.2/31
set interfaces xe-0/0/16 unit 1081 family inet6 address fd00:1234:5678:224::2/127
set security zones security-zone trust interfaces xe-0/0/16.1081 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-0/0/16.1081 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-0/0/16.1081 host-inbound-traffic system-services ping
set interfaces xe-0/0/16 unit 1031 description vlan1031
set interfaces xe-0/0/16 unit 1031 vlan-id 1031
set interfaces xe-0/0/16 unit 1031 family inet address 10.255.224.4/31
set interfaces xe-0/0/16 unit 1031 family inet6 address fd00:1234:5678:224::4/127
set security zones security-zone trust interfaces xe-0/0/16.1031 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-0/0/16.1031 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-0/0/16.1031 host-inbound-traffic system-services ping
.
delete interfaces xe-0/0/17
set interfaces xe-0/0/17 flexible-vlan-tagging
set interfaces xe-0/0/17 mtu 9018
set interfaces xe-0/0/17 unit 1091 description vlan1091
set interfaces xe-0/0/17 unit 1091 vlan-id 1091
set interfaces xe-0/0/17 unit 1091 family inet address 10.255.226.0/31
set interfaces xe-0/0/17 unit 1091 family inet6 address fd00:1234:5678:224::200/127
set security zones security-zone trust interfaces xe-0/0/17.1091 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-0/0/17.1091 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-0/0/17.1091 host-inbound-traffic system-services ping
set interfaces xe-0/0/17 unit 1081 description vlan1081
set interfaces xe-0/0/17 unit 1081 vlan-id 1081
set interfaces xe-0/0/17 unit 1081 family inet address 10.255.226.2/31
set interfaces xe-0/0/17 unit 1081 family inet6 address fd00:1234:5678:224::202/127
set security zones security-zone trust interfaces xe-0/0/17.1081 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-0/0/17.1081 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-0/0/17.1081 host-inbound-traffic system-services ping
set interfaces xe-0/0/17 unit 1031 description vlan1031
set interfaces xe-0/0/17 unit 1031 vlan-id 1031
set interfaces xe-0/0/17 unit 1031 family inet address 10.255.226.4/31
set interfaces xe-0/0/17 unit 1031 family inet6 address fd00:1234:5678:224::204/127
set security zones security-zone trust interfaces xe-0/0/17.1031 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-0/0/17.1031 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-0/0/17.1031 host-inbound-traffic system-services ping
.
delete interfaces xe-7/0/16
set interfaces xe-7/0/16 flexible-vlan-tagging
set interfaces xe-7/0/16 mtu 9018
set interfaces xe-7/0/16 unit 1099 description vlan1099
set interfaces xe-7/0/16 unit 1099 vlan-id 1099
set interfaces xe-7/0/16 unit 1099 family inet address 10.255.225.0/31
set interfaces xe-7/0/16 unit 1099 family inet6 address fd00:1234:5678:224::100/127
set security zones security-zone trust interfaces xe-7/0/16.1099 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-7/0/16.1099 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-7/0/16.1099 host-inbound-traffic system-services ping
set interfaces xe-7/0/16 unit 1088 description vlan1088
set interfaces xe-7/0/16 unit 1088 vlan-id 1088
set interfaces xe-7/0/16 unit 1088 family inet address 10.255.225.2/31
set interfaces xe-7/0/16 unit 1088 family inet6 address fd00:1234:5678:224::102/127
set security zones security-zone trust interfaces xe-7/0/16.1088 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-7/0/16.1088 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-7/0/16.1088 host-inbound-traffic system-services ping
set interfaces xe-7/0/16 unit 1033 description vlan1033
set interfaces xe-7/0/16 unit 1033 vlan-id 1033
set interfaces xe-7/0/16 unit 1033 family inet address 10.255.225.4/31
set interfaces xe-7/0/16 unit 1033 family inet6 address fd00:1234:5678:224::104/127
set security zones security-zone trust interfaces xe-7/0/16.1033 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-7/0/16.1033 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-7/0/16.1033 host-inbound-traffic system-services ping
.
delete interfaces xe-7/0/17
set interfaces xe-7/0/17 flexible-vlan-tagging
set interfaces xe-7/0/17 mtu 9018
set interfaces xe-7/0/17 unit 1099 description vlan1099
set interfaces xe-7/0/17 unit 1099 vlan-id 1099
set interfaces xe-7/0/17 unit 1099 family inet address 10.255.227.0/31
set interfaces xe-7/0/17 unit 1099 family inet6 address fd00:1234:5678:224::300/127
set security zones security-zone trust interfaces xe-7/0/17.1099 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-7/0/17.1099 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-7/0/17.1099 host-inbound-traffic system-services ping
set interfaces xe-7/0/17 unit 1088 description vlan1088
set interfaces xe-7/0/17 unit 1088 vlan-id 1088
set interfaces xe-7/0/17 unit 1088 family inet address 10.255.227.2/31
set interfaces xe-7/0/17 unit 1088 family inet6 address fd00:1234:5678:224::302/127
set security zones security-zone trust interfaces xe-7/0/17.1088 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-7/0/17.1088 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-7/0/17.1088 host-inbound-traffic system-services ping
set interfaces xe-7/0/17 unit 1033 description vlan1033
set interfaces xe-7/0/17 unit 1033 vlan-id 1033
set interfaces xe-7/0/17 unit 1033 family inet address 10.255.227.4/31
set interfaces xe-7/0/17 unit 1033 family inet6 address fd00:1234:5678:224::304/127
set security zones security-zone trust interfaces xe-7/0/17.1033 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces xe-7/0/17.1033 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces xe-7/0/17.1033 host-inbound-traffic system-services ping
.
# needed in and export policy
delete policy-options
set policy-options policy-statement fabric term 1 from protocol bgp
set policy-options policy-statement fabric term 1 from route-filter 0.0.0.0/0 orlonger
set policy-options policy-statement fabric term 1 then accept
set policy-options policy-statement fabric term 2 from protocol bgp
set policy-options policy-statement fabric term 2 from route-filter 0::0/0 orlonger
set policy-options policy-statement fabric term 2 then accept
set policy-options policy-statement fabric term 3 then reject
set policy-options policy-statement internet0 term 1 from protocol static
set policy-options policy-statement internet0 term 1 from route-filter 0.0.0.0/0 exact
set policy-options policy-statement internet0 term 1 then accept
set policy-options policy-statement internet0 term 2 from protocol static
set policy-options policy-statement internet0 term 2 from route-filter 0::0/0 exact
set policy-options policy-statement internet0 term 2 then accept
set policy-options policy-statement internet0 term 3 then reject
set policy-options policy-statement internet1 term 1 from protocol static
set policy-options policy-statement internet1 term 1 from route-filter 0.0.0.0/0 exact
set policy-options policy-statement internet1 term 1 then as-path-prepend "64999 64999"
set policy-options policy-statement internet1 term 1 then accept
set policy-options policy-statement internet1 term 2 from protocol static
set policy-options policy-statement internet1 term 2 from route-filter 0::0/0 exact
set policy-options policy-statement internet1 term 2 then as-path-prepend "64999 64999"
set policy-options policy-statement internet1 term 2 then accept
set policy-options policy-statement internet1 term 3 then reject
.
delete routing-instances public-int
set routing-instances public-int instance-type virtual-router
set routing-instances public-int interface xe-0/0/16.1091
set routing-instances public-int interface xe-0/0/16.1081
set routing-instances public-int interface xe-0/0/16.1031
set routing-instances public-int interface xe-0/0/17.1091
set routing-instances public-int interface xe-0/0/17.1081
set routing-instances public-int interface xe-0/0/17.1031
set routing-instances public-int interface xe-7/0/16.1099
set routing-instances public-int interface xe-7/0/16.1088
set routing-instances public-int interface xe-7/0/16.1033
set routing-instances public-int interface xe-7/0/17.1099
set routing-instances public-int interface xe-7/0/17.1088
set routing-instances public-int interface xe-7/0/17.1033
.
delete routing-instances public-int protocols bgp group customera
delete routing-instances public-int protocols bgp group customera0-IPv4
set routing-instances public-int protocols bgp group customera0-IPv4 type external
set routing-instances public-int protocols bgp group customera0-IPv4 family inet unicast
set routing-instances public-int protocols bgp group customera0-IPv4 multipath multiple-as
set routing-instances public-int protocols bgp group customera0-IPv4 local-as 64901
set routing-instances public-int protocols bgp group customera0-IPv4 hold-time 90
set routing-instances public-int protocols bgp group customera0-IPv4 import fabric
set routing-instances public-int protocols bgp group customera0-IPv4 export internet0
set routing-instances public-int protocols bgp group customera0-IPv4 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customera0-IPv4 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customera0-IPv4 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customera0-IPv4 neighbor 10.255.224.1 peer-as 64911
set routing-instances public-int protocols bgp group customera0-IPv4 neighbor 10.255.226.1 peer-as 64911
.
delete routing-instances public-int protocols bgp group customera0-IPv6
set routing-instances public-int protocols bgp group customera0-IPv6 type external
set routing-instances public-int protocols bgp group customera0-IPv6 family inet6 unicast
set routing-instances public-int protocols bgp group customera0-IPv6 multipath multiple-as
set routing-instances public-int protocols bgp group customera0-IPv6 local-as 64901
set routing-instances public-int protocols bgp group customera0-IPv6 hold-time 90
set routing-instances public-int protocols bgp group customera0-IPv6 import fabric
set routing-instances public-int protocols bgp group customera0-IPv6 export internet0
set routing-instances public-int protocols bgp group customera0-IPv6 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customera0-IPv6 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customera0-IPv6 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customera0-IPv6 neighbor fd00:1234:5678:224::1 peer-as 64911
set routing-instances public-int protocols bgp group customera0-IPv6 neighbor fd00:1234:5678:224::201 peer-as 64911
.
delete routing-instances public-int protocols bgp group customera1-IPv4
set routing-instances public-int protocols bgp group customera1-IPv4 type external
set routing-instances public-int protocols bgp group customera1-IPv4 family inet unicast
set routing-instances public-int protocols bgp group customera1-IPv4 multipath multiple-as
set routing-instances public-int protocols bgp group customera1-IPv4 local-as 64901
set routing-instances public-int protocols bgp group customera1-IPv4 hold-time 90
set routing-instances public-int protocols bgp group customera1-IPv4 import fabric
set routing-instances public-int protocols bgp group customera1-IPv4 export internet1
set routing-instances public-int protocols bgp group customera1-IPv4 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customera1-IPv4 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customera1-IPv4 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customera1-IPv4 neighbor 10.255.225.1 peer-as 64911
set routing-instances public-int protocols bgp group customera1-IPv4 neighbor 10.255.227.1 peer-as 64911
delete routing-instances public-int protocols bgp group customera1-IPv6
set routing-instances public-int protocols bgp group customera1-IPv6 type external
set routing-instances public-int protocols bgp group customera1-IPv6 family inet6 unicast
set routing-instances public-int protocols bgp group customera1-IPv6 multipath multiple-as
set routing-instances public-int protocols bgp group customera1-IPv6 local-as 64901
set routing-instances public-int protocols bgp group customera1-IPv6 hold-time 90
set routing-instances public-int protocols bgp group customera1-IPv6 import fabric
set routing-instances public-int protocols bgp group customera1-IPv6 export internet1
set routing-instances public-int protocols bgp group customera1-IPv6 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customera1-IPv6 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customera1-IPv6 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customera1-IPv6 neighbor fd00:1234:5678:224::101 peer-as 64911
set routing-instances public-int protocols bgp group customera1-IPv6 neighbor fd00:1234:5678:224::301 peer-as 64911
.
delete routing-instances public-int protocols bgp group customerb
delete routing-instances public-int protocols bgp group customerb0-IPv4
set routing-instances public-int protocols bgp group customerb0-IPv4 type external
set routing-instances public-int protocols bgp group customerb0-IPv4 family inet unicast
set routing-instances public-int protocols bgp group customerb0-IPv4 multipath multiple-as
set routing-instances public-int protocols bgp group customerb0-IPv4 local-as 64901
set routing-instances public-int protocols bgp group customerb0-IPv4 hold-time 90
set routing-instances public-int protocols bgp group customerb0-IPv4 import fabric
set routing-instances public-int protocols bgp group customerb0-IPv4 export internet0
set routing-instances public-int protocols bgp group customerb0-IPv4 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customerb0-IPv4 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customerb0-IPv4 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customerb0-IPv4 neighbor 10.255.224.3 peer-as 64911
set routing-instances public-int protocols bgp group customerb0-IPv4 neighbor 10.255.226.3 peer-as 64911
.
delete routing-instances public-int protocols bgp group customerb0-IPv6
set routing-instances public-int protocols bgp group customerb0-IPv6 type external
set routing-instances public-int protocols bgp group customerb0-IPv6 family inet6 unicast
set routing-instances public-int protocols bgp group customerb0-IPv6 multipath multiple-as
set routing-instances public-int protocols bgp group customerb0-IPv6 local-as 64901
set routing-instances public-int protocols bgp group customerb0-IPv6 hold-time 90
set routing-instances public-int protocols bgp group customerb0-IPv6 import fabric
set routing-instances public-int protocols bgp group customerb0-IPv6 export internet0
set routing-instances public-int protocols bgp group customerb0-IPv6 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customerb0-IPv6 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customerb0-IPv6 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customerb0-IPv6 neighbor fd00:1234:5678:224::3 peer-as 64911
set routing-instances public-int protocols bgp group customerb0-IPv6 neighbor fd00:1234:5678:224::203 peer-as 64911
.
delete routing-instances public-int protocols bgp group customerb1-IPv4
set routing-instances public-int protocols bgp group customerb1-IPv4 type external
set routing-instances public-int protocols bgp group customerb1-IPv4 family inet unicast
set routing-instances public-int protocols bgp group customerb1-IPv4 multipath multiple-as
set routing-instances public-int protocols bgp group customerb1-IPv4 local-as 64901
set routing-instances public-int protocols bgp group customerb1-IPv4 hold-time 90
set routing-instances public-int protocols bgp group customerb1-IPv4 import fabric
set routing-instances public-int protocols bgp group customerb1-IPv4 export internet1
set routing-instances public-int protocols bgp group customerb1-IPv4 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customerb1-IPv4 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customerb1-IPv4 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customerb1-IPv4 neighbor 10.255.225.3 peer-as 64911
set routing-instances public-int protocols bgp group customerb1-IPv4 neighbor 10.255.227.3 peer-as 64911
.
delete routing-instances public-int protocols bgp group customerb1-IPv6
set routing-instances public-int protocols bgp group customerb1-IPv6 type external
set routing-instances public-int protocols bgp group customerb1-IPv6 family inet6 unicast
set routing-instances public-int protocols bgp group customerb1-IPv6 multipath multiple-as
set routing-instances public-int protocols bgp group customerb1-IPv6 local-as 64901
set routing-instances public-int protocols bgp group customerb1-IPv6 hold-time 90
set routing-instances public-int protocols bgp group customerb1-IPv6 import fabric
set routing-instances public-int protocols bgp group customerb1-IPv6 export internet1
set routing-instances public-int protocols bgp group customerb1-IPv6 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customerb1-IPv6 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customerb1-IPv6 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customerb1-IPv6 neighbor fd00:1234:5678:224::103 peer-as 64911
set routing-instances public-int protocols bgp group customerb1-IPv6 neighbor fd00:1234:5678:224::303 peer-as 64911
.
delete routing-instances public-int protocols bgp group devices
delete routing-instances public-int protocols bgp group devices0-IPv4
set routing-instances public-int protocols bgp group devices0-IPv4 type external
set routing-instances public-int protocols bgp group devices0-IPv4 family inet unicast
set routing-instances public-int protocols bgp group devices0-IPv4 multipath multiple-as
set routing-instances public-int protocols bgp group devices0-IPv4 local-as 64901
set routing-instances public-int protocols bgp group devices0-IPv4 hold-time 90
set routing-instances public-int protocols bgp group devices0-IPv4 import fabric
set routing-instances public-int protocols bgp group devices0-IPv4 export internet0
set routing-instances public-int protocols bgp group devices0-IPv4 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group devices0-IPv4 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group devices0-IPv4 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group devices0-IPv4 neighbor 10.255.224.5 peer-as 64911
set routing-instances public-int protocols bgp group devices0-IPv4 neighbor 10.255.226.5 peer-as 64911
.
delete routing-instances public-int protocols bgp group devices0-IPv6
set routing-instances public-int protocols bgp group devices0-IPv6 type external
set routing-instances public-int protocols bgp group devices0-IPv6 family inet6 unicast
set routing-instances public-int protocols bgp group devices0-IPv6 multipath multiple-as
set routing-instances public-int protocols bgp group devices0-IPv6 local-as 64901
set routing-instances public-int protocols bgp group devices0-IPv6 hold-time 90
set routing-instances public-int protocols bgp group devices0-IPv6 import fabric
set routing-instances public-int protocols bgp group devices0-IPv6 export internet0
set routing-instances public-int protocols bgp group devices0-IPv6 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group devices0-IPv6 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group devices0-IPv6 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group devices0-IPv6 neighbor fd00:1234:5678:224::5 peer-as 64911
set routing-instances public-int protocols bgp group devices0-IPv6 neighbor fd00:1234:5678:224::205 peer-as 64911
.
delete routing-instances public-int protocols bgp group devices1-IPv4
set routing-instances public-int protocols bgp group devices1-IPv4 type external
set routing-instances public-int protocols bgp group devices1-IPv4 family inet unicast
set routing-instances public-int protocols bgp group devices1-IPv4 multipath multiple-as
set routing-instances public-int protocols bgp group devices1-IPv4 local-as 64901
set routing-instances public-int protocols bgp group devices1-IPv4 hold-time 90
set routing-instances public-int protocols bgp group devices1-IPv4 import fabric
set routing-instances public-int protocols bgp group devices1-IPv4 export internet1
set routing-instances public-int protocols bgp group devices1-IPv4 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group devices1-IPv4 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group devices1-IPv4 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group devices1-IPv4 neighbor 10.255.225.5 peer-as 64911
set routing-instances public-int protocols bgp group devices1-IPv4 neighbor 10.255.227.5 peer-as 64911
.
delete routing-instances public-int protocols bgp group devices1-IPv6
set routing-instances public-int protocols bgp group devices1-IPv6 type external
set routing-instances public-int protocols bgp group devices1-IPv6 family inet6 unicast
set routing-instances public-int protocols bgp group devices1-IPv6 multipath multiple-as
set routing-instances public-int protocols bgp group devices1-IPv6 local-as 64901
set routing-instances public-int protocols bgp group devices1-IPv6 hold-time 90
set routing-instances public-int protocols bgp group devices1-IPv6 import fabric
set routing-instances public-int protocols bgp group devices1-IPv6 export internet1
set routing-instances public-int protocols bgp group devices1-IPv6 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group devices1-IPv6 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group devices1-IPv6 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group devices1-IPv6 neighbor fd00:1234:5678:224::105 peer-as 64911
set routing-instances public-int protocols bgp group devices1-IPv6 neighbor fd00:1234:5678:224::305 peer-as 64911
.
#
# Do not do SNAT on prefix for WAN-Interface (where the external DHCP-Server may be for Lab)
#
delete security nat source rule-set trust-to-untrust
set security nat source rule-set trust-to-untrust from zone trust
set security nat source rule-set trust-to-untrust to zone untrust
set security nat source rule-set trust-to-untrust rule source-nat-rule1 match destination-address 192.168.10.0/24
set security nat source rule-set trust-to-untrust rule source-nat-rule1 then source-nat off
set security nat source rule-set trust-to-untrust rule source-nat-rule2 match source-address 0.0.0.0/0
set security nat source rule-set trust-to-untrust rule source-nat-rule2 then source-nat interface
.
#
# WAN-Interfaces are hardcoded in this example
#
delete interfaces ge-0/0/0
delete interfaces ge-7/0/0
set interfaces ge-0/0/0 unit 0 family inet address 192.168.10.99/24
set interfaces ge-7/0/0 unit 0 family inet address 192.168.10.98/24
.
delete security zones security-zone untrust interfaces ge-0/0/0.0
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic protocols all
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services all
.
delete security zones security-zone untrust interfaces ge-7/0/0.0
set security zones security-zone untrust interfaces ge-7/0/0.0 host-inbound-traffic protocols all
set security zones security-zone untrust interfaces ge-7/0/0.0 host-inbound-traffic system-services all
.
delete routing-instances public-int interface ge-0/0/0.0
delete routing-instances public-int interface ge-7/0/0.0
set routing-instances public-int interface ge-0/0/0.0
set routing-instances public-int interface ge-7/0/0.0
set routing-instances public-int routing-options static route 0.0.0.0/0 next-hop 192.168.10.1
.
set interfaces ge-0/0/0 unit 0 family inet6 address fd00:1234:5678:0010::99/64
set interfaces ge-7/0/0 unit 0 family inet6 address fd00:1234:5678:0010::98/64
.
set routing-instances public-int routing-options rib public-int.inet6.0 static route ::/0 next-hop fd00:1234:5678:0010::1Testing Your WAN Router EVPN Fabric Integration
The required configuration on both the EVPN fabric and the WAN router has been completed, and testing of the IPv4 and IPv6 dual-stack setup can now begin. The process starts by examining the first service block function, the service1 switch.
root@service1> show interfaces terse
Interface Admin Link Proto Local Remote
.
xe-0/0/36 up up
xe-0/0/36.1031 up up inet 10.255.224.5/31
inet6 fd00:1234:5678:224::5/127
fe80::76e7:9804:706:d128/64
xe-0/0/36.1081 up up inet 10.255.224.3/31
inet6 fd00:1234:5678:224::3/127
fe80::76e7:9804:3906:d128/64
xe-0/0/36.1091 up up inet 10.255.224.1/31
inet6 fd00:1234:5678:224::1/127
fe80::76e7:9804:4306:d128/64
xe-0/0/36.32767 up up
xe-0/0/37 up up
xe-0/0/37.1033 up up inet 10.255.225.5/31
inet6 fd00:1234:5678:224::105/127
fe80::76e7:9804:906:d129/64
xe-0/0/37.1088 up up inet 10.255.225.3/31
inet6 fd00:1234:5678:224::103/127
fe80::76e7:9804:4006:d129/64
xe-0/0/37.1099 up up inet 10.255.225.1/31
inet6 fd00:1234:5678:224::101/127
fe80::76e7:9804:4b06:d129/64
xe-0/0/37.32767 up up
.
et-0/0/52 up up
et-0/0/52.0 up up inet6 2001::2/127
fe80::76e7:98ff:fe06:d145/64
et-0/0/53 up up
et-0/0/53.0 up up inet6 2001::4/127
fe80::76e7:98ff:fe06:d149/64
.
lo0 up up
lo0.0 up up inet 172.16.254.1 --> 0/0
inet6 fd31:db8::74e7:9806:d100
fe80::76e7:980f:fc06:d100
lo0.1 up up inet 172.16.192.4 --> 0/0
inet6 fd33:ab00:2::4
fe80::76e7:980f:fc06:d100
lo0.2 up up inet 172.16.192.5 --> 0/0
inet6 fd33:ab00:2::5
fe80::76e7:980f:fc06:d100
lo0.3 up up inet 172.16.192.6 --> 0/0
inet6 fd33:ab00:2::6
fe80::76e7:980f:fc06:d100
.
root@service1> show bgp summary
.
Threading mode: BGP I/O
Default eBGP mode: advertise - accept, receive - accept
Groups: 14 Peers: 16 Down peers: 0
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0
11 11 0 0 0 0
inet6.0
11 11 0 0 0 0
bgp.evpn.0
211 111 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
10.255.224.0 64901 3545 3456 0 2 1d 3:39:21 Establ
customera.inet.0: 1/1/1/0
10.255.224.2 64901 3545 3455 0 2 1d 3:39:24 Establ
customerb.inet.0: 1/1/1/0
10.255.224.4 64901 3545 3455 0 2 1d 3:39:28 Establ
devices.inet.0: 1/1/1/0
10.255.225.0 64901 3545 3455 0 1 1d 3:39:28 Establ
customera.inet.0: 0/1/1/0
10.255.225.2 64901 3545 3454 0 1 1d 3:39:20 Establ
customerb.inet.0: 0/1/1/0
10.255.225.4 64901 3544 3454 0 1 1d 3:39:12 Establ
devices.inet.0: 0/1/1/0
2001::3 65003 62662 63238 0 2 3w0d 1:45:58 Establ
inet.0: 6/6/6/0
inet6.0: 6/6/6/0
2001::5 65004 62910 63251 0 2 3w0d 1:45:58 Establ
inet.0: 5/5/5/0
inet6.0: 5/5/5/0
fd00:1234:5678:224:: 64901 3544 3453 0 2 1d 3:38:54 Establ
customera.inet6.0: 1/1/1/0
fd00:1234:5678:224::2 64901 3544 3456 0 2 1d 3:38:58 Establ
customerb.inet6.0: 1/1/1/0
fd00:1234:5678:224::4 64901 3544 3454 0 2 1d 3:39:02 Establ
devices.inet6.0: 1/1/1/0
fd00:1234:5678:224::100 64901 3544 3453 0 1 1d 3:39:10 Establ
customera.inet6.0: 0/1/1/0
fd00:1234:5678:224::102 64901 3544 3453 0 1 1d 3:39:18 Establ
customerb.inet6.0: 0/1/1/0
fd00:1234:5678:224::104 64901 3540 3450 0 1 1d 3:37:19 Establ
devices.inet6.0: 0/1/1/0
fd31:db8::182a:d301:e1d0 65003 12748346 10082657 0 2 3w0d 1:45:54 Establ
bgp.evpn.0: 81/110/110/0
devices.evpn.0: 17/22/22/0
customerb.evpn.0: 20/23/23/0
customera.evpn.0: 22/26/26/0
evpn_vs.evpn.0: 22/39/39/0
__default_evpn__.evpn.0: 0/0/0/0
fd31:db8::384f:49f3:3ffc 65004 13699012 7713350 0 2 3w0d 1:45:56 Establ
bgp.evpn.0: 30/101/101/0
devices.evpn.0: 5/19/19/0
customerb.evpn.0: 3/20/20/0
customera.evpn.0: 4/23/23/0
evpn_vs.evpn.0: 18/39/39/0
__default_evpn__.evpn.0: 0/0/0/0
.
root@service1> show bfd session
. Detect Transmit
Address State Interface Time Interval Multiplier
10.255.224.0 Up xe-0/0/36.1091 3.000 1.000 3
10.255.224.2 Up xe-0/0/36.1081 3.000 1.000 3
10.255.224.4 Up xe-0/0/36.1031 3.000 1.000 3
10.255.225.0 Up xe-0/0/37.1099 3.000 1.000 3
10.255.225.2 Up xe-0/0/37.1088 3.000 1.000 3
10.255.225.4 Up xe-0/0/37.1033 3.000 1.000 3
2001::3 Up et-0/0/52.0 3.000 1.000 3
2001::5 Up et-0/0/53.0 3.000 1.000 3
fd00:1234:5678:224:: Up xe-0/0/36.1091 3.000 1.000 3
fd00:1234:5678:224::2 Up xe-0/0/36.1081 3.000 1.000 3
fd00:1234:5678:224::4 Up xe-0/0/36.1031 3.000 1.000 3
fd00:1234:5678:224::100 Up xe-0/0/37.1099 3.000 1.000 3
fd00:1234:5678:224::102 Up xe-0/0/37.1088 3.000 1.000 3
fd00:1234:5678:224::104 Up xe-0/0/37.1033 3.000 1.000 3
fd31:db8::182a:d301:e1d0 Up 3.000 1.000 3
fd31:db8::384f:49f3:3ffc Up 3.000 1.000 3
.
16 sessions, 16 clients
Cumulative transmit rate 16.0 pps, cumulative receive rate 16.0 pps
.
root@service1> show route table customera.inet.0
.
customera.inet.0: 16 destinations, 22 routes (16 active, 0 holddown, 0 hidden)
@ = Routing Use Only, # = Forwarding Use Only
+ = Active Route, - = Last Active, * = Both
.
0.0.0.0/0 *[BGP/170] 1d 03:39:50, localpref 100
AS path: 64901 I, validation-state: unverified
> to 10.255.224.0 via xe-0/0/36.1091
[BGP/170] 1d 03:39:58, localpref 100
AS path: 64999 64999 64901 I, validation-state: unverified
> to 10.255.225.0 via xe-0/0/37.1099
[EVPN/170] 1d 03:39:50
> to 2001::3 via et-0/0/52.0
10.91.91.0/24 @[EVPN/170] 2w6d 22:35:09
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
[EVPN/170] 2w6d 22:35:08
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
#[Multipath/255] 2w6d 22:35:08, metric2 0
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
10.99.99.0/24 @[EVPN/170] 3w0d 01:46:03
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
[EVPN/170] 3w0d 01:45:59
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
#[Multipath/255] 3w0d 01:45:59, metric2 0
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
.
root@service1> show route table customera.inet6.0
.
customera.inet6.0: 20 destinations, 24 routes (20 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
.
::/0 *[BGP/170] 1d 03:39:34, localpref 100
AS path: 64901 I, validation-state: unverified
> to fd00:1234:5678:224:: via xe-0/0/36.1091
[BGP/170] 1d 03:39:50, localpref 100
AS path: 64999 64999 64901 I, validation-state: unverified
> to fd00:1234:5678:224::100 via xe-0/0/37.1099
[EVPN/170] 1d 03:39:38
> to 2001::3 via et-0/0/52.0
.
fd00:1234:5678:1091::/64
*[EVPN/170] 2w6d 22:35:09
> to 2001::3 via et-0/0/52.0
to 2001::5 via et-0/0/53.0
[EVPN/170] 2w6d 22:35:06
> to 2001::3 via et-0/0/52.0
to 2001::5 via et-0/0/53.0
fd00:1234:5678:1099::/64
*[EVPN/170] 3w0d 01:46:13
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
[EVPN/170] 3w0d 01:46:09
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
.
root@service1> show ethernet-switching table
.
MAC flags (S - static MAC, D - dynamic MAC, L - locally learned, P - Persistent static, C - Control MAC
SE - statistics enabled, NM - non configured MAC, R - remote PE MAC, O - ovsdb MAC,
B - Blocked MAC)
.
Ethernet switching table : 8 entries, 8 learned
Routing instance : evpn_vs
Vlan MAC MAC GBP Logical SVLBNH/ Active
name address flags tag interface VENH Index source
VLAN1033 5c:5b:35:be:84:08 DR vtep-11.32771 fd31:db8::f8c1:1641:5c00
VLAN1033 5c:5b:35:be:84:12 DR vtep-11.32770 fd31:db8::bc0f:fe15:7080
VLAN1088 52:54:00:63:75:34 DR vtep-11.32771 fd31:db8::f8c1:1641:5c00
VLAN1088 52:54:00:8b:4b:8b DR vtep-11.32770 fd31:db8::bc0f:fe15:7080
VLAN1099 3c:fd:fe:d1:65:60 DR vtep-11.32771 fd31:db8::f8c1:1641:5c00
VLAN1099 52:54:00:4c:e8:c8 DR vtep-11.32771 fd31:db8::f8c1:1641:5c00
VLAN1099 52:54:00:86:67:76 DR vtep-11.32771 fd31:db8::f8c1:1641:5c00
VLAN1099 52:54:00:d7:75:b4 DR vtep-11.32770 fd31:db8::bc0f:fe15:7080
.
root@service1> show evpn database
Instance: evpn_vs
VLAN DomainId MAC address Active source Timestamp IP address
11033 5c:5b:35:be:84:08 fd31:db8::f8c1:1641:5c00 Aug 06 02:02:49 10.33.33.237
11033 5c:5b:35:be:84:12 fd31:db8::bc0f:fe15:7080 Aug 01 12:23:03 10.33.33.236
11088 52:54:00:63:75:34 fd31:db8::f8c1:1641:5c00 Jul 31 12:27:19 10.88.88.23
11088 52:54:00:8b:4b:8b fd31:db8::bc0f:fe15:7080 Jul 31 12:27:15 10.88.88.88
fd00:1234:5678:1088::88
fe80::5054:ff:fe8b:4b8b
11099 3c:fd:fe:d1:65:60 fd31:db8::f8c1:1641:5c00 Aug 21 14:13:55 fd00:1234:5678:1099::b6
fe80::30cb:47ff:fe7b:3a06
fe80::9c89:35ff:fe0f:b8f7
11099 52:54:00:4c:e8:c8 fd31:db8::f8c1:1641:5c00 Aug 01 12:56:20 10.99.99.99
fd00:1234:5678:1099::b8
fe80::5054:ff:fe4c:e8c8
11099 52:54:00:86:67:76 fd31:db8::f8c1:1641:5c00 Aug 14 11:08:02 10.99.99.23
fd00:1234:5678:1099::b7
fe80::5054:ff:fe86:6776
11099 52:54:00:d7:75:b4 fd31:db8::bc0f:fe15:7080 Aug 14 11:08:07 10.99.99.42
fe80::5054:ff:fed7:75b4Now we look at the SRX chassis cluster WAN router side:
root@srx1_node0> show interfaces terse
Interface Admin Link Proto Local Remote
ge-0/0/0 up up
ge-0/0/0.0 up up inet 192.168.10.99/24
inet6 fd00:1234:5678:10::99/64
fe80::d207:caff:fe71:600/64
.
ge-0/0/1 up up
ge-0/0/1.0 up up aenet --> fab0.0
.
xe-0/0/16 up up
xe-0/0/16.1031 up up inet 10.255.224.4/31
inet6 fd00:1234:5678:224::4/127
fe80::d207:ca04:771:610/64
xe-0/0/16.1081 up up inet 10.255.224.2/31
inet6 fd00:1234:5678:224::2/127
fe80::d207:ca04:3971:610/64
xe-0/0/16.1091 up up inet 10.255.224.0/31
inet6 fd00:1234:5678:224::/127
fe80::d207:ca04:4371:610/64
xe-0/0/16.32767 up up
xe-0/0/17 up up
xe-0/0/17.1031 up up inet 10.255.226.4/31
inet6 fd00:1234:5678:224::204/127
fe80::d207:ca04:771:611/64
xe-0/0/17.1081 up up inet 10.255.226.2/31
inet6 fd00:1234:5678:224::202/127
fe80::d207:ca04:3971:611/64
xe-0/0/17.1091 up up inet 10.255.226.0/31
inet6 fd00:1234:5678:224::200/127
fe80::d207:ca04:4371:611/64
xe-0/0/17.32767 up up
.
ge-7/0/0 up up
ge-7/0/0.0 up up inet 192.168.10.98/24
inet6 fd00:1234:5678:10::98/64
fe80::231:46ff:fe98:6100/64
ge-7/0/1 up up
ge-7/0/1.0 up up aenet --> fab1.0
.
xe-7/0/16 up up
xe-7/0/16.1033 up up inet 10.255.225.4/31
inet6 fd00:1234:5678:224::104/127
fe80::231:4604:998:6110/64
xe-7/0/16.1088 up up inet 10.255.225.2/31
inet6 fd00:1234:5678:224::102/127
fe80::231:4604:4098:6110/64
xe-7/0/16.1099 up up inet 10.255.225.0/31
inet6 fd00:1234:5678:224::100/127
fe80::231:4604:4b98:6110/64
xe-7/0/16.32767 up up
xe-7/0/17 up up
xe-7/0/17.1033 up up inet 10.255.227.4/31
inet6 fd00:1234:5678:224::304/127
fe80::231:4604:998:6111/64
xe-7/0/17.1088 up up inet 10.255.227.2/31
inet6 fd00:1234:5678:224::302/127
fe80::231:4604:4098:6111/64
xe-7/0/17.1099 up up inet 10.255.227.0/31
inet6 fd00:1234:5678:224::300/127
fe80::231:4604:4b98:6111/64
xe-7/0/17.32767 up up
.
em0 up up
em0.0 up up inet 129.16.0.1/2
143.16.0.1/2
tnp 0x1100001
em1 up up
em1.32768 up up inet 192.168.1.2/24
em2 up up
fab0 up up
fab0.0 up up inet 30.17.0.200/24
fab1 up up
fab1.0 up up inet 30.18.0.200/24
fti0 up up
fxp0 up up
.
root@srx1_node0> show bgp summary
Threading mode: BGP I/O
Default eBGP mode: advertise - accept, receive - accept
Groups: 12 Peers: 24 Down peers: 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
10.255.224.1 64911 3486 3572 0 0 1d 3:52:51 Establ
public-int.inet.0: 5/6/6/0
10.255.224.3 64911 3484 3572 0 0 1d 3:52:55 Establ
public-int.inet.0: 5/6/6/0
10.255.224.5 64911 3484 3573 0 0 1d 3:52:59 Establ
public-int.inet.0: 5/6/6/0
10.255.225.1 64911 3484 3572 0 0 1d 3:52:58 Establ
public-int.inet.0: 0/6/6/0
10.255.225.3 64911 3484 3572 0 0 1d 3:52:50 Establ
public-int.inet.0: 0/6/6/0
10.255.225.5 64911 3483 3571 0 0 1d 3:52:43 Establ
public-int.inet.0: 0/6/6/0
10.255.226.1 64911 3616 3571 0 0 1d 3:52:50 Establ
public-int.inet.0: 5/6/6/0
10.255.226.3 64911 3616 3571 0 0 1d 3:52:43 Establ
public-int.inet.0: 5/6/6/0
10.255.226.5 64911 3616 3572 0 0 1d 3:52:39 Establ
public-int.inet.0: 5/6/6/0
10.255.227.1 64911 3616 3571 0 0 1d 3:52:54 Establ
public-int.inet.0: 0/6/6/0
10.255.227.3 64911 3616 3571 0 0 1d 3:52:46 Establ
public-int.inet.0: 0/6/6/0
10.255.227.5 64911 3616 3572 0 0 1d 3:52:39 Establ
public-int.inet.0: 0/6/6/0
fd00:1234:5678:224::1 64911 3483 3571 0 0 1d 3:52:25 Establ
public-int.inet6.0: 5/6/6/0
fd00:1234:5678:224::3 64911 3485 3571 0 0 1d 3:52:29 Establ
public-int.inet6.0: 5/6/6/0
fd00:1234:5678:224::5 64911 3483 3571 0 0 1d 3:52:33 Establ
public-int.inet6.0: 5/6/6/0
fd00:1234:5678:224::101 64911 3483 3571 0 0 1d 3:52:40 Establ
public-int.inet6.0: 0/6/6/0
fd00:1234:5678:224::103 64911 3484 3572 0 0 1d 3:52:49 Establ
public-int.inet6.0: 0/6/6/0
fd00:1234:5678:224::105 64911 3479 3567 0 0 1d 3:50:50 Establ
public-int.inet6.0: 0/6/6/0
fd00:1234:5678:224::201 64911 3616 3571 0 0 1d 3:52:29 Establ
public-int.inet6.0: 5/6/6/0
fd00:1234:5678:224::203 64911 3617 3572 0 0 1d 3:52:33 Establ
public-int.inet6.0: 5/6/6/0
fd00:1234:5678:224::205 64911 3617 3571 0 0 1d 3:52:45 Establ
public-int.inet6.0: 5/6/6/0
fd00:1234:5678:224::301 64911 3614 3571 0 0 1d 3:52:28 Establ
public-int.inet6.0: 0/6/6/0
fd00:1234:5678:224::303 64911 3617 3572 0 0 1d 3:52:33 Establ
public-int.inet6.0: 0/6/6/0
fd00:1234:5678:224::305 64911 3615 3571 0 0 1d 3:52:49 Establ
public-int.inet6.0: 0/6/6/0
.
root@srx1_node0> show bfd session
Detect Transmit
Address State Interface Time Interval Multiplier
10.255.224.1 Up xe-0/0/16.1091 3.000 1.000 3
10.255.224.3 Up xe-0/0/16.1081 3.000 1.000 3
10.255.224.5 Up xe-0/0/16.1031 3.000 1.000 3
10.255.225.1 Up xe-7/0/16.1099 3.000 1.000 3
10.255.225.3 Up xe-7/0/16.1088 3.000 1.000 3
10.255.225.5 Up xe-7/0/16.1033 3.000 1.000 3
10.255.226.1 Up xe-0/0/17.1091 3.000 1.000 3
10.255.226.3 Up xe-0/0/17.1081 3.000 1.000 3
10.255.226.5 Up xe-0/0/17.1031 3.000 1.000 3
10.255.227.1 Up xe-7/0/17.1099 3.000 1.000 3
10.255.227.3 Up xe-7/0/17.1088 3.000 1.000 3
10.255.227.5 Up xe-7/0/17.1033 3.000 1.000 3
fd00:1234:5678:224::1 Up xe-0/0/16.1091 3.000 1.000 3
fd00:1234:5678:224::3 Up xe-0/0/16.1081 3.000 1.000 3
fd00:1234:5678:224::5 Up xe-0/0/16.1031 3.000 1.000 3
fd00:1234:5678:224::101 Up xe-7/0/16.1099 3.000 1.000 3
fd00:1234:5678:224::103 Up xe-7/0/16.1088 3.000 1.000 3
fd00:1234:5678:224::105 Up xe-7/0/16.1033 3.000 1.000 3
fd00:1234:5678:224::201 Up xe-0/0/17.1091 3.000 1.000 3
fd00:1234:5678:224::203 Up xe-0/0/17.1081 3.000 1.000 3
fd00:1234:5678:224::205 Up xe-0/0/17.1031 3.000 1.000 3
fd00:1234:5678:224::301 Up xe-7/0/17.1099 3.000 1.000 3
fd00:1234:5678:224::303 Up xe-7/0/17.1088 3.000 1.000 3
fd00:1234:5678:224::305 Up xe-7/0/17.1033 3.000 1.000 3
.
24 sessions, 24 clients
Cumulative transmit rate 24.0 pps, cumulative receive rate 24.0 pps
.
root@srx1_node0> show route table public-int.inet.0
.
public-int.inet.0: 46 destinations, 101 routes (46 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
.
0.0.0.0/0 *[Static/5] 1d 03:53:47
> to 192.168.10.1 via ge-0/0/0.0
.
10.99.99.0/24 *[BGP/170] 1d 01:01:33, localpref 100, from 10.255.224.1
AS path: 64911 65001 65003 65006 65007 I, validation-state: unverified
to 10.255.224.1 via xe-0/0/16.1091
> to 10.255.226.1 via xe-0/0/17.1091
[BGP/170] 1d 03:53:35, localpref 100
AS path: 64911 65002 65003 65006 65007 I, validation-state: unverified
> to 10.255.226.1 via xe-0/0/17.1091
[BGP/170] 1d 03:53:39, localpref 100
AS path: 64998 64998 64911 65002 65003 65006 65007 I, validation-state: unverified
> to 10.255.227.1 via xe-7/0/17.1099
[BGP/170] 1d 03:53:36, localpref 100
AS path: 64998 64998 64911 65001 65003 65006 65007 I, validation-state: unverified
> to 10.255.225.1 via xe-7/0/16.1099
.
172.16.192.1/32 *[BGP/170] 1d 03:53:35, localpref 100
AS path: 64911 I, validation-state: unverified
> to 10.255.226.1 via xe-0/0/17.1091
[BGP/170] 1d 03:53:39, localpref 100
AS path: 64998 64998 64911 I, validation-state: unverified
> to 10.255.227.1 via xe-7/0/17.1099
[BGP/170] 1d 03:53:36, localpref 100
AS path: 64911 65001 65003 65002 I, validation-state: unverified
> to 10.255.224.1 via xe-0/0/16.1091
[BGP/170] 1d 03:53:43, localpref 100
AS path: 64998 64998 64911 65001 65003 65002 I, validation-state: unverified
> to 10.255.225.1 via xe-7/0/16.1099
.
root@srx1_node0> show route table public-int.inet6.0
.
public-int.inet6.0: 61 destinations, 116 routes (61 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
.
::/0 *[Static/5] 1d 03:54:04
> to fd00:1234:5678:10::1 via ge-0/0/0.0
.
fd00:1234:5678:1099::/64
*[BGP/170] 1d 01:02:02, localpref 100
AS path: 64911 65002 65003 65006 65007 I, validation-state: unverified
to fd00:1234:5678:224::1 via xe-0/0/16.1091
> to fd00:1234:5678:224::201 via xe-0/0/17.1091
[BGP/170] 1d 03:53:38, localpref 100
AS path: 64911 65001 65003 65006 65007 I, validation-state: unverified
> to fd00:1234:5678:224::1 via xe-0/0/16.1091
[BGP/170] 1d 03:53:42, localpref 100
AS path: 64998 64998 64911 65002 65003 65006 65007 I, validation-state: unverified
> to fd00:1234:5678:224::301 via xe-7/0/17.1099
[BGP/170] 1d 03:53:54, localpref 100
AS path: 64998 64998 64911 65001 65003 65006 65007 I, validation-state: unverified
> to fd00:1234:5678:224::101 via xe-7/0/16.1099
fd33:ab00:2::1/128 *[BGP/170] 1d 03:53:43, localpref 100
AS path: 64911 I, validation-state: unverified
> to fd00:1234:5678:224::201 via xe-0/0/17.1091
[BGP/170] 1d 03:53:42, localpref 100
AS path: 64998 64998 64911 I, validation-state: unverified
> to fd00:1234:5678:224::301 via xe-7/0/17.1099
[BGP/170] 1d 03:53:38, localpref 100
AS path: 64911 65001 65003 65002 I, validation-state: unverified
> to fd00:1234:5678:224::1 via xe-0/0/16.1091
[BGP/170] 1d 03:53:54, localpref 100
AS path: 64998 64998 64911 65001 65003 65002 I, validation-state: unverified
> to fd00:1234:5678:224::101 via xe-7/0/16.1099
.
root@srx1_node0> show security zones
node0:
--------------------------------------------------------------------------
.
Security zone: trust
Zone ID: 7
Send reset for non-SYN session TCP packets: On
Policy configurable: Yes
Interfaces bound: 12
Interfaces:
xe-0/0/16.1031
xe-0/0/16.1081
xe-0/0/16.1091
xe-0/0/17.1031
xe-0/0/17.1081
xe-0/0/17.1091
xe-7/0/16.1033
xe-7/0/16.1088
xe-7/0/16.1099
xe-7/0/17.1033
xe-7/0/17.1088
xe-7/0/17.1099
Advanced-connection-tracking timeout: 1800
Unidirectional-session-refreshing: No
.
Security zone: untrust
Zone ID: 8
Send reset for non-SYN session TCP packets: Off
Policy configurable: Yes
Screen: untrust-screen
Interfaces bound: 2
Interfaces:
ge-0/0/0.0
ge-7/0/0.0
Advanced-connection-tracking timeout: 1800
Unidirectional-session-refreshing: No
.
Security zone: junos-host
Zone ID: 2
Send reset for non-SYN session TCP packets: Off
Policy configurable: Yes
Interfaces bound: 0
Interfaces:
Advanced-connection-tracking timeout: 1800
Unidirectional-session-refreshing: No
.
root@srx1_node0> show chassis cluster statistics
Control link statistics:
Control link 0:
Heartbeat packets sent: NA
Heartbeat packets received: NA
Heartbeat packet errors: NA
Control link offloaded HA heartbeat statistics:
Control link 0:
Connection Status: UP
Heartbeat sent: 102598
Heartbeat received: 102427
Heartbeat sent jitter: 0 ms
Heartbeat received jitter: 0 ms
Fabric link statistics:
Child link 0
Probes sent: 203071
Probes received: 203071
Child link 1
Probes sent: 0
Probes received: 0
Services Synchronized:
Service name RTOs sent RTOs received
Translation context 0 0
Incoming NAT 0 0
Resource manager 0 0
DS-LITE create 0 0
Session create 10277 26
IPv6 session create 1046 24
IPv4/6 session RTO ACK 0 0
Session close 4991 2
IPv6 session close 1029 12
Session change 54 0
IPv6 session change 1 12
ALG Support Library 0 0
.After verifying the route exchanges, the next step is to test client traffic both within the network and through the WAN router. This begins with a Linux desktop client VM configured with static IPv4 and IPv6 addresses.
root@desktop1:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
.
# IPv4 and IPv6 static interface configuration
4: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:4c:e8:c8 brd ff:ff:ff:ff:ff:ff
inet 10.99.99.99/24 brd 10.99.99.255 scope global ens5
valid_lft forever preferred_lft forever
inet6 fd00:1234:5678:1099::99/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::5054:ff:fe4c:e8c8/64 scope link
valid_lft forever preferred_lft forever
.
# IPv4 static routes
root@desktop1:~# ip r
default via 10.99.99.1 dev ens5 proto static
10.99.99.0/24 dev ens5 proto kernel scope link src 10.99.99.99
192.168.10.0/24 dev ens3 proto kernel scope link src 192.168.10.61
.
# IPv6 static routes
root@desktop1:~# ip -6 r
::1 dev lo proto kernel metric 256 pref medium
fd00:1234:5678:1099::/64 dev ens5 proto kernel metric 256 pref medium
fd00:1234:5678:1099::/64 dev ens5 proto ra metric 1024 expires 2591901sec pref medium
fe80::/64 dev ens5 proto kernel metric 256 pref medium
.
default proto static metric 1024
nexthop via fd00:1234:5678:1099::1 dev ens5 weight 1
nexthop via fe80::fac1:1604:4b41:5c00 dev ens5 weight 1 pref medium
.
# Ping Anycast GW of IPv4 VLAN
root@desktop1:~# ping -c3 10.99.99.1
PING 10.99.99.1 (10.99.99.1) 56(84) bytes of data.
64 bytes from 10.99.99.1: icmp_seq=1 ttl=64 time=9.47 ms
64 bytes from 10.99.99.1: icmp_seq=2 ttl=64 time=2.50 ms
64 bytes from 10.99.99.1: icmp_seq=3 ttl=64 time=2.03 ms
.
# Ping a another desktop VM in the same VLAN/VNI
root@desktop1:~# ping -c3 10.99.99.23
PING 10.99.99.23 (10.99.99.23) 56(84) bytes of data.
64 bytes from 10.99.99.23: icmp_seq=1 ttl=64 time=14.1 ms
64 bytes from 10.99.99.23: icmp_seq=2 ttl=64 time=0.444 ms
64 bytes from 10.99.99.23: icmp_seq=3 ttl=64 time=0.393 ms
.
# Ping a desktop VM in another VRF
root@desktop1:~# ping -c3 10.88.88.88
PING 10.88.88.88 (10.88.88.88) 56(84) bytes of data.
64 bytes from 10.88.88.88: icmp_seq=1 ttl=59 time=0.824 ms
64 bytes from 10.88.88.88: icmp_seq=2 ttl=59 time=0.657 ms
64 bytes from 10.88.88.88: icmp_seq=3 ttl=59 time=0.705 ms
.
# Ping an IPv4 address in the internet leaving the Lab
root@desktop1:~# ping -c3 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=110 time=2.98 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=110 time=3.04 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=110 time=3.04 ms
.
# review ARP entries
root@desktop1:~# arp -an
? (10.99.99.23) at 52:54:00:86:67:76 [ether] on ens5
? (10.99.99.1) at 00:00:5e:e4:31:57 [ether] on ens5
.
# Ping Anycast GW of IPv6 VLAN
root@desktop1:~# ping -c3 fd00:1234:5678:1099::1
PING fd00:1234:5678:1099::1(fd00:1234:5678:1099::1) 56 data bytes
64 bytes from fd00:1234:5678:1099::1: icmp_seq=1 ttl=64 time=1.39 ms
64 bytes from fd00:1234:5678:1099::1: icmp_seq=2 ttl=64 time=1.96 ms
64 bytes from fd00:1234:5678:1099::1: icmp_seq=3 ttl=64 time=2.04 ms
.
# Ping a desktop VM in another VRF
root@desktop1:~# ping -c3 fd00:1234:5678:1088::88
PING fd00:1234:5678:1088::88(fd00:1234:5678:1088::88) 56 data bytes
64 bytes from fd00:1234:5678:1088::88: icmp_seq=1 ttl=59 time=0.886 ms
64 bytes from fd00:1234:5678:1088::88: icmp_seq=2 ttl=59 time=0.741 ms
64 bytes from fd00:1234:5678:1088::88: icmp_seq=3 ttl=59 time=0.628 ms
.
# Ping a VM attached to WAN-Interface which simulates IPv6 internet access
root@desktop1:~# ping -c3 fd00:1234:5678:10::11
PING fd00:1234:5678:10::11(fd00:1234:5678:10::11) 56 data bytes
64 bytes from fd00:1234:5678:10::11: icmp_seq=1 ttl=61 time=0.775 ms
64 bytes from fd00:1234:5678:10::11: icmp_seq=2 ttl=61 time=0.675 ms
64 bytes from fd00:1234:5678:10::11: icmp_seq=3 ttl=61 time=0.714 msThe next test uses a Linux-based desktop client VM that initially has no assigned IP addresses, aside from the local IPv6 address, and must obtain IPv4 and IPv6 addresses dynamically through DHCP.
# no IPv4/IPv6 intial configuration
root@desktop1:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
.
4: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:4c:e8:c8 brd ff:ff:ff:ff:ff:ff
inet6 fe80::5054:ff:fe4c:e8c8/64 scope link
valid_lft forever preferred_lft forever
.
# no IPv4 routes
root@desktop1:~# ip r
.
# IPv6 local routes only and one through Router Advertisement of EVPN Fabric
root@desktop1:~# ip -6 r
::1 dev lo proto kernel metric 256 pref medium
fd00:1234:5678:1099::/64 dev ens5 proto ra metric 1024 expires 2591958sec pref medium
fe80::/64 dev ens5 proto kernel metric 256 pref medium
default via fe80::fac1:1604:4b41:5c00 dev ens5 proto ra metric 1024 expires 1758sec pref medium
.
# obtain an IPv4 DHCP-Lease
root@desktop1:~# dhclient -v ens5
Internet Systems Consortium DHCP Client 4.4.1
Copyright 2004-2018 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/
.
Listening on LPF/ens5/52:54:00:4c:e8:c8
Sending on LPF/ens5/52:54:00:4c:e8:c8
Sending on Socket/fallback
DHCPDISCOVER on ens5 to 255.255.255.255 port 67 interval 3 (xid=0x73599215)
DHCPOFFER of 10.99.99.36 from 172.16.192.9
DHCPREQUEST for 10.99.99.36 on ens5 to 255.255.255.255 port 67 (xid=0x15925973)
DHCPACK of 10.99.99.36 from 172.16.192.9 (xid=0x73599215)
bound to 10.99.99.36 -- renewal in 754 seconds.
.
# obtain an IPv6 DHCP-Lease
root@desktop1:~# dhclient -6 -v ens5
Internet Systems Consortium DHCP Client 4.4.1
Copyright 2004-2018 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/
.
Listening on Socket/ens5
Sending on Socket/ens5
PRC: Previous lease is devoid of active addresses.
PRC: Soliciting for leases (INIT).
XMT: Forming Solicit, 0 ms elapsed.
XMT: X-- IA_NA 00:4c:e8:c8
XMT: | X-- Request renew in +3600
XMT: | X-- Request rebind in +5400
XMT: Solicit on ens5, interval 1090ms.
RCV: Advertise message on ens5 from fe80::fac1:1604:4b41:5c00.
RCV: X-- IA_NA 00:4c:e8:c8
RCV: | X-- starts 1755792004
RCV: | X-- t1 - renew +900
RCV: | X-- t2 - rebind +1800
RCV: | X-- [Options]
RCV: | | X-- IAADDR fd00:1234:5678:1099::b8
RCV: | | | X-- Preferred lifetime 3600.
RCV: | | | X-- Max lifetime 3600.
RCV: X-- Server ID: 00:01:00:01:2d:e6:f5:54:52:54:00:a5:db:3b
RCV: Advertisement recorded.
PRC: Selecting best advertised lease.
PRC: Considering best lease.
PRC: X-- Initial candidate 00:01:00:01:2d:e6:f5:54:52:54:00:a5:db:3b (s: 10104, p: 0).
XMT: Forming Request, 0 ms elapsed.
XMT: X-- IA_NA 00:4c:e8:c8
XMT: | X-- Requested renew +3600
XMT: | X-- Requested rebind +5400
XMT: | | X-- IAADDR fd00:1234:5678:1099::b8
XMT: | | | X-- Preferred lifetime +7200
XMT: | | | X-- Max lifetime +7500
XMT: V IA_NA appended.
XMT: Request on ens5, interval 960ms.
RCV: Reply message on ens5 from fe80::fac1:1604:4b41:5c00.
RCV: X-- IA_NA 00:4c:e8:c8
RCV: | X-- starts 1755792005
RCV: | X-- t1 - renew +900
RCV: | X-- t2 - rebind +1800
RCV: | X-- [Options]
RCV: | | X-- IAADDR fd00:1234:5678:1099::b8
RCV: | | | X-- Preferred lifetime 3600.
RCV: | | | X-- Max lifetime 3600.
RCV: X-- Server ID: 00:01:00:01:2d:e6:f5:54:52:54:00:a5:db:3b
PRC: Bound to lease 00:01:00:01:2d:e6:f5:54:52:54:00:a5:db:3b.
.
# review updated IPv4/IPv6 interface configuration
root@desktop1:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
.
valid_lft forever preferred_lft forever
4: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:4c:e8:c8 brd ff:ff:ff:ff:ff:ff
inet 10.99.99.36/24 brd 10.99.99.255 scope global dynamic ens5
valid_lft 3518sec preferred_lft 3518sec
inet6 fd00:1234:5678:1099::b8/128 scope global
valid_lft forever preferred_lft forever
inet6 fe80::5054:ff:fe4c:e8c8/64 scope link
valid_lft forever preferred_lft forever
.
# review updated IPv4 routes
root@desktop1:~# ip r
default via 10.99.99.1 dev ens5
10.99.99.0/24 dev ens5 proto kernel scope link src 10.99.99.36
.
# review updated IPv6 routes
root@desktop1:~# ip -6 r
::1 dev lo proto kernel metric 256 pref medium
fd00:1234:5678:1099::b8 dev ens5 proto kernel metric 256 pref medium
fd00:1234:5678:1099::/64 dev ens5 proto ra metric 1024 expires 2591806sec pref medium
fe80::/64 dev ens5 proto kernel metric 256 pref medium
default via fe80::fac1:1604:4b41:5c00 dev ens5 proto ra metric 1024 expires 1606sec pref medium
.
# at this point you can repeat the ping tests similar to the static clientActive/Passive LAG eBGP Scenario Implementation
The approach used in this section is already described in Appendix: WAN Edge SSR or SRX Juniper Mist Cloud-managed eBGP Peering via Active/Passive LAG. On the SRX chassis cluster, this requires the use of reth interfaces along with ESI-LAG configuration on the EVPN fabric side. We recommend reviewing the referenced chapter for the complete configuration example; here, only the additional IPv6-related configuration elements are shown to focus on the differences.
The table below shows the full configuration between service1 and service2 in the service block function and the two SRX WAN routers. The IPv6-related configuration items are highlighted for clarity.
| Switch | Switch AS | VRF | Service P2P IP | Service IF | WAN Router | WAN Router P2P IP | WAN Router AS | WAN Router IF | VLAN ID |
|---|---|---|---|---|---|---|---|---|---|
| service1 | 64911 | customera |
10.255.224.5/29 fd00:1234:5678:224::5/125 |
irb.101 xe-0/0/36 ae10.0 |
srx-node0 |
10.255.224.1/29 fd00:1234:5678:224::1/125 |
64901 |
reth3.101 xe-0/0/16 |
101 |
| service1 | 64911 | customerb |
10.255.224.13/29 fd00:1234:5678:224::d/125 |
irb.102 xe-0/0/36 ae10.0 |
srx-node0 |
10.255.224.9/29 fd00:1234:5678:224::9/125 |
64901 |
reth3.102 xe-0/0/16 |
102 |
| service1 | 64911 | devices |
10.255.224.21/29 fd00:1234:5678:224::15/125 |
irb.103 xe-0/0/36 ae10.0 |
srx-node0 |
10.255.224.17/29 fd00:1234:5678:224::11/125 |
64901 |
reth3.103 xe-0/0/16 |
103 |
| service1 | 64911 | customera |
10.255.224.5/29 fd00:1234:5678:224::5/125 |
irb.101 xe-0/0/37 ae11.0 |
srx-node1 |
10.255.224.1/29 fd00:1234:5678:224::1/125 |
64901 |
reth3.101 xe-7/0/16 |
101 |
| service1 | 64911 | customerb |
10.255.224.13/29 fd00:1234:5678:224::d/125 |
irb.102 xe-0/0/37 ae11.0 |
srx-node1 |
10.255.224.9/29 fd00:1234:5678:224::9/125 |
64901 |
reth3.102 xe-7/0/16 |
102 |
| service1 | 64911 | devices |
10.255.224.21/29 fd00:1234:5678:224::15/125 |
irb.103 xe-0/0/37 ae11.0 |
srx-node1 |
10.255.224.17/29 fd00:1234:5678:224::11/125 |
64901 |
reth3.103 xe-7/0/16 |
103 |
| service2 | 64911 | customera |
10.255.224.6/29 fd00:1234:5678:224::6/125 |
irb.101 xe-0/0/36 ae10.0 |
srx-node0 |
10.255.224.1/29 fd00:1234:5678:224::1/125 |
64901 |
reth3.101 xe-0/0/17 |
101 |
| service2 | 64911 | customerb |
10.255.224.14/29 fd00:1234:5678:224::e/125 |
irb.102 xe-0/0/36 ae10.0 |
srx-node0 |
10.255.224.9/29 fd00:1234:5678:224::9/125 |
64901 |
reth3.102 xe-0/0/17 |
102 |
| service2 | 64911 | devices |
10.255.224.22/29 fd00:1234:5678:224::16/125 |
irb.103 xe-0/0/36 ae10.0 |
srx-node0 |
10.255.224.17/29 fd00:1234:5678:224::11/125 |
64901 |
reth3.103 xe-0/0/17 |
103 |
| service2 | 64911 | customera |
10.255.224.6/29 fd00:1234:5678:224::6/125 |
irb.101 xe-0/0/37 ae11.0 |
srx-node1 |
10.255.224.1/29 fd00:1234:5678:224::1/125 |
64901 |
reth3.101 xe-7/0/17 |
101 |
| service2 | 64911 | customerb |
10.255.224.14/29 fd00:1234:5678:224::e/125 |
irb.102 xe-0/0/37 ae11.0 |
srx-node1 |
10.255.224.9/29 fd00:1234:5678:224::9/125 |
64901 |
reth3.102 xe-7/0/17 |
102 |
| service2 | 64911 | devices |
10.255.224.22/29 fd00:1234:5678:224::16/125 |
irb.103 xe-0/0/37 ae11.0 |
srx-node1 |
10.255.224.17/29 fd00:1234:5678:224::11/125 |
64901 |
reth3.103 xe-7/0/17 |
103 |
As in the previous sections, the following provides a description of the configuration that needs to be applied on the service1 switch toward the WAN router.
# # This is for Device: service1 # # Here: On the Switch-Template for this Site configure (if not already done): # # configure additional Network Name=trans1 VLAN-ID=101 # configure additional Network Name=trans2 VLAN-ID=102 # configure additional Network Name=trans3 VLAN-ID=103 # # # Here: Continue on the Switch configuration itself # # configure a Port-Profile: # - Name=peering-uplinks # - Mode=Tunk # - Port Network=None # - Trunk Networks: # --- Trunk Network=trans1 # --- Trunk Network=trans2 # --- Trunk Network=trans3 # - Enable MTU=Checked MTU=9018 # # configure the Additional IP-Subnet 10.255.224.5/29 and IP-Subnetv6 fd00:1234:5678:224::5/125 to Network=trans1 # configure the Additional IP-Subnet 10.255.224.13/29 and IP-Subnetv6 fd00:1234:5678:224::d/125 to Network=trans2 # configure the Additional IP-Subnet 10.255.224.21/29 and IP-Subnetv6 fd00:1234:5678:224::15/125 to Network=trans3 # # Configure an Uplink Port to WAN-Router: # - Port ID=xe-0/0/36 # - Configuration Profile=peering-uplinks # - Port Aggregation: # --- Enabled=Checked # --- LACP=Enabled # --- LACP Force-UP=Disabled # --- LACP Periodic Slow=Disabled # --- AE Index=10 # --- ESI-LAG=Checked/Enabled # # Configure an Uplink Port to WAN-Router: # - Port ID=xe-0/0/37 # - Configuration Profile=peering-uplinks # - Port Aggregation: # --- Enabled=Checked # --- LACP=Enabled # --- LACP Force-UP=Disabled # --- LACP Periodic Slow=Disabled # --- AE Index=11 # --- ESI-LAG=Checked/Enabled # # # VRF Configuration # - Override Site/Template Settings=Checked/Enabled # - Enabled=Checked # - Instance=customera # --- Override Template Defined VRF Instance=Checked/Enabled # --- add to exiting Networks=trans1 # - Instance=customerb # --- Override Template Defined VRF Instance=Checked/Enabled # --- add to exiting Networks=trans2 # - Instance=devices # --- Override Template Defined VRF Instance=Checked/Enabled # --- add to exiting Networks=trans3 # # Enable BGP # Create an Export policy called 'export-vrfs' # Add to this export Policy the following Networks as: # - Add Term w. Name=fabric-all-no-hosts Prefix=0.0.0.0/0-30 Protocol=None Then=Accept # - Add Term w. Name=overlaylo0 Prefix=172.16.192.0/24-32 Protocol=None Then=Accept # - Add Term w. Name=fabric-all-no-hosts-ipv6 Prefix=0::0/0-126 Protocol=None Then=Accept # - Add Term w. Name=overlaylo0-ipv6 Prefix=fd33:ab00:2::/64-128 Protocol=None Then=Accept # # Create an Export policy called 'import-default' # - Name=default Prefix=0.0.0.0/0 Protocol=BGP Action=Accept # - Name=default-ipv6 Prefix=0::0/0 Protocol=BGP Action=Accept # # Create a BGP Group with: # - Name=customera-IPv4 # - Type=External # - Network (VLAN)=trans1 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=10.255.224.1 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Create a BGP Group with: # - Name=customera-IPv6 # - Type=External # - Network (VLAN)=trans1 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=fd00:1234:5678:224::1 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Create a BGP Group with: # - Name=customerb-IPv4 # - Type=External # - Network (VLAN)=trans2 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=10.255.224.9 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Create a BGP Group with: # - Name=customerb-IPv6 # - Type=External # - Network (VLAN)=trans2 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=fd00:1234:5678:224::9 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Create a BGP Group with: # - Name=devices-IPv4 # - Type=External # - Network (VLAN)=trans3 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=10.255.224.17 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Create a BGP Group with: # - Name=devices-IPv6 # - Type=External # - Network (VLAN)=trans3 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=fd00:1234:5678:224::11 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Additional Junos CLI needed # # ERB+IP-Clos Fabric: on all non-EX92xx switches change to below delete groups top protocols evpn default-gateway do-not-advertise set groups top protocols evpn default-gateway no-gateway-community
After completing the configuration on the service1 switch, the following provides a description of what needs to be configured on the service2 switch toward the WAN router.
# # This is for Device: service2 # # Here: On the Switch-Template for this Site configure (if not already done): # # configure additional Network Name=trans1 VLAN-ID=101 # configure additional Network Name=trans2 VLAN-ID=102 # configure additional Network Name=trans3 VLAN-ID=103 # # # Here: Continue on the Switch configuration itself # # configure a Port-Profile: # - Name=peering-uplinks # - Mode=Tunk # - Port Network=None # - Trunk Networks: # --- Trunk Network=trans1 # --- Trunk Network=trans2 # --- Trunk Network=trans3 # - Enable MTU=Checked MTU=9018 # # configure the Additional IP-Subnetv4 10.255.224.6/29 and IP-Subnetv6 fd00:1234:5678:224::6/125 to Network=trans1 # configure the Additional IP-Subnetv4 10.255.224.14/29 and IP-Subnetv6 fd00:1234:5678:224::e/125 to Network=trans2 # configure the Additional IP-Subnetv4 10.255.224.22/29 and IP-Subnetv6 fd00:1234:5678:224::16/125 to Network=trans3 # # Configure an Uplink Port to WAN-Router: # - Port ID=xe-0/0/36 # - Configuration Profile=peering-uplinks # - Port Aggregation: # --- Enabled=Checked # --- LACP=Enabled # --- LACP Force-UP=Disabled # --- LACP Periodic Slow=Disabled # --- AE Index=10 # --- ESI-LAG=Checked/Enabled # # Configure an Uplink Port to WAN-Router: # - Port ID=xe-0/0/37 # - Configuration Profile=peering-uplinks # - Port Aggregation: # --- Enabled=Checked # --- LACP=Enabled # --- LACP Force-UP=Disabled # --- LACP Periodic Slow=Disabled # --- AE Index=11 # --- ESI-LAG=Checked/Enabled # # # VRF Configuration # - Override Site/Template Settings=Checked/Enabled # - Enabled=Checked # - Instance=customera # --- Override Template Defined VRF Instance=Checked/Enabled # --- add to exiting Networks=trans1 # - Instance=customerb # --- Override Template Defined VRF Instance=Checked/Enabled # --- add to exiting Networks=trans2 # - Instance=devices # --- Override Template Defined VRF Instance=Checked/Enabled # --- add to exiting Networks=trans3 # # Enable BGP # Create an Export policy called 'export-vrfs' # Add to this export Policy the following Networks as: # - Add Term w. Name=fabric-all-no-hosts Prefix=0.0.0.0/0-30 Protocol=None Then=Accept # - Add Term w. Name=overlaylo0 Prefix=172.16.192.0/24-32 Protocol=None Then=Accept # - Add Term w. Name=fabric-all-no-hosts-ipv6 Prefix=0::0/0-126 Protocol=None Then=Accept # - Add Term w. Name=overlaylo0-ipv6 Prefix=fd33:ab00:2::/64-128 Protocol=None Then=Accept # # Create an Export policy called 'import-default' # - Name=default Prefix=0.0.0.0/0 Protocol=BGP Action=Accept # - Name=default-ipv6 Prefix=0::0/0 Protocol=BGP Action=Accept # # Create a BGP Group with: # - Name=customera-IPv4 # - Type=External # - Network (VLAN)=trans1 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=10.255.224.1 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Create a BGP Group with: # - Name=customera-IPv6 # - Type=External # - Network (VLAN)=trans1 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=fd00:1234:5678:224::1 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Create a BGP Group with: # - Name=customerb-IPv4 # - Type=External # - Network (VLAN)=trans2 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=10.255.224.9 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Create a BGP Group with: # - Name=customerb-IPv6 # - Type=External # - Network (VLAN)=trans2 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=fd00:1234:5678:224::9 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Create a BGP Group with: # - Name=devices-IPv4 # - Type=External # - Network (VLAN)=trans3 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=10.255.224.17 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Create a BGP Group with: # - Name=devices-IPv6 # - Type=External # - Network (VLAN)=trans3 # - BFD interval=1000 # - Local AS=64911 # - Hold Time=90 # - Set Export=export-vrfs # - Set Import=import-default # Add also the following Neighbor # --- IP_Address=fd00:1234:5678:224::11 # --- Neighbor_AS=64901 # --- Hold-Time=90 # # Additional Junos CLI needed # # ERB+IP-Clos Fabric: on all non-EX92xx switches change to below delete groups top protocols evpn default-gateway do-not-advertise set groups top protocols evpn default-gateway no-gateway-community
After the changes on the two EVPN fabric switches are made, take a moment to review the changes. You should now see configuration similar to the image below.
The additional IP configuration now has IPv4 and IPv6 addresses.
Figure 11: IPv4 and IPv6 Additional IP
Configuration
There are no significant differences in the uplink port ESI-LAG configuration, so the focus shifts to the BGP peering groups. With three VRFs and, following the recommendation to separate BGP peering into IPv4 and IPv6, the result is a total of six BGP peer groups, as shown below.
Figure 12: BGP-Peering configuration
Each of the two BGP routing policies now have IPv6 configuration statements added for simplification.
Figure 13: Added BGP Policy
For instance, the export-vrfs policy now includes
two final statements to maintain consistency with the IPv6
setup.
Figure 14: Example of added IPv6 policy
statements
The following example illustrates the WAN router configuration to be applied to the SRX chassis cluster.
set groups node0 system host-name srx1_node0
set groups node1 system host-name srx2_node1
set apply-groups "${node}"
set chassis aggregated-devices ethernet device-count 10
set chassis cluster control-link-recovery
set chassis cluster reth-count 5
set chassis cluster initial-hold 60
set chassis cluster redundancy-group 1 node 0 priority 200
set chassis cluster redundancy-group 1 node 1 priority 100
set chassis cluster redundancy-group 1 gratuitous-arp-count 4
set interfaces fab0 fabric-options member-interfaces ge-0/0/1
set interfaces fab1 fabric-options member-interfaces ge-7/0/1
#
delete chassis cluster redundancy-group 3
set chassis cluster redundancy-group 3 node 0 priority 100
set chassis cluster redundancy-group 3 node 1 priority 1
set chassis cluster redundancy-group 3 preempt
set chassis cluster redundancy-group 3 hold-down-interval 10
# Interface monitoring turned OFF for vSRX
#set chassis cluster redundancy-group 3 interface-monitor xe-0/0/16 weight 128
#set chassis cluster redundancy-group 3 interface-monitor xe-0/0/17 weight 128
#set chassis cluster redundancy-group 3 interface-monitor xe-7/0/16 weight 128
#set chassis cluster redundancy-group 3 interface-monitor xe-7/0/17 weight 128
#
# rebuild trust zone to clear old interfaces bound
delete security zones security-zone trust
set security zones security-zone trust tcp-rst
set security zones security-zone trust host-inbound-traffic system-services all
set security zones security-zone trust host-inbound-traffic protocols all
set security zones security-zone trust interfaces reth3.101
set security zones security-zone trust interfaces reth3.101 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces reth3.101 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces reth3.101 host-inbound-traffic system-services ping
set security zones security-zone trust interfaces reth3.102
set security zones security-zone trust interfaces reth3.102 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces reth3.102 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces reth3.102 host-inbound-traffic system-services ping
set security zones security-zone trust interfaces reth3.103
set security zones security-zone trust interfaces reth3.103 host-inbound-traffic protocols bgp
set security zones security-zone trust interfaces reth3.103 host-inbound-traffic protocols bfd
set security zones security-zone trust interfaces reth3.103 host-inbound-traffic system-services ping
#
delete interfaces reth3
set interfaces reth3 redundant-ether-options redundancy-group 3
set interfaces reth3 redundant-ether-options lacp active
set interfaces reth3 flexible-vlan-tagging
set interfaces reth3 mtu 9018
set interfaces reth3 unit 101 family inet address 10.255.224.1/29
set interfaces reth3 unit 101 family inet6 address fd00:1234:5678:224::1/125
set interfaces reth3 unit 101 vlan-id 101
set interfaces reth3 unit 102 family inet address 10.255.224.9/29
set interfaces reth3 unit 102 family inet6 address fd00:1234:5678:224::9/125
set interfaces reth3 unit 102 vlan-id 102
set interfaces reth3 unit 103 family inet address 10.255.224.17/29
set interfaces reth3 unit 103 family inet6 address fd00:1234:5678:224::11/125
set interfaces reth3 unit 103 vlan-id 103
set interfaces xe-0/0/16 ether-options redundant-parent reth3
set interfaces xe-0/0/17 ether-options redundant-parent reth3
set interfaces xe-7/0/16 ether-options redundant-parent reth3
set interfaces xe-7/0/17 ether-options redundant-parent reth3
#
# needed in and export policy
delete policy-options
set policy-options policy-statement fabric term 1 from protocol bgp
set policy-options policy-statement fabric term 1 from route-filter 0.0.0.0/0 orlonger
set policy-options policy-statement fabric term 1 then accept
set policy-options policy-statement fabric term 2 from protocol bgp
set policy-options policy-statement fabric term 2 from route-filter 0::0/0 orlonger
set policy-options policy-statement fabric term 2 then accept
set policy-options policy-statement fabric term 3 then reject
set policy-options policy-statement internet term 1 from protocol static
set policy-options policy-statement internet term 1 from route-filter 0.0.0.0/0 exact
set policy-options policy-statement internet term 1 then accept
set policy-options policy-statement internet term 2 from protocol static
set policy-options policy-statement internet term 2 from route-filter 0::0/0 exact
set policy-options policy-statement internet term 2 then accept
set policy-options policy-statement internet term 3 then reject
#
delete routing-instances public-int
set routing-instances public-int instance-type virtual-router
set routing-instances public-int interface reth3.101
set routing-instances public-int interface reth3.102
set routing-instances public-int interface reth3.103
#
delete routing-instances public-int protocols bgp group customera-IPv4
set routing-instances public-int protocols bgp group customera-IPv4 type external
set routing-instances public-int protocols bgp group customera-IPv4 family inet unicast
set routing-instances public-int protocols bgp group customera-IPv4 multipath multiple-as
set routing-instances public-int protocols bgp group customera-IPv4 local-as 64901
set routing-instances public-int protocols bgp group customera-IPv4 hold-time 90
set routing-instances public-int protocols bgp group customera-IPv4 import fabric
set routing-instances public-int protocols bgp group customera-IPv4 export internet
set routing-instances public-int protocols bgp group customera-IPv4 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customera-IPv4 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customera-IPv4 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customera-IPv4 neighbor 10.255.224.5 peer-as 64911
set routing-instances public-int protocols bgp group customera-IPv4 neighbor 10.255.224.6 peer-as 64911
#
delete routing-instances public-int protocols bgp group customera-IPv6
set routing-instances public-int protocols bgp group customera-IPv6 type external
set routing-instances public-int protocols bgp group customera-IPv6 family inet6 unicast
set routing-instances public-int protocols bgp group customera-IPv6 multipath multiple-as
set routing-instances public-int protocols bgp group customera-IPv6 local-as 64901
set routing-instances public-int protocols bgp group customera-IPv6 hold-time 90
set routing-instances public-int protocols bgp group customera-IPv6 import fabric
set routing-instances public-int protocols bgp group customera-IPv6 export internet
set routing-instances public-int protocols bgp group customera-IPv6 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customera-IPv6 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customera-IPv6 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customera-IPv6 neighbor fd00:1234:5678:224::5 peer-as 64911
set routing-instances public-int protocols bgp group customera-IPv6 neighbor fd00:1234:5678:224::6 peer-as 64911
#
delete routing-instances public-int protocols bgp group customerb-IPv4
set routing-instances public-int protocols bgp group customerb-IPv4 type external
set routing-instances public-int protocols bgp group customerb-IPv4 family inet unicast
set routing-instances public-int protocols bgp group customerb-IPv4 multipath multiple-as
set routing-instances public-int protocols bgp group customerb-IPv4 local-as 64901
set routing-instances public-int protocols bgp group customerb-IPv4 hold-time 90
set routing-instances public-int protocols bgp group customerb-IPv4 import fabric
set routing-instances public-int protocols bgp group customerb-IPv4 export internet
set routing-instances public-int protocols bgp group customerb-IPv4 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customerb-IPv4 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customerb-IPv4 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customerb-IPv4 neighbor 10.255.224.13 peer-as 64911
set routing-instances public-int protocols bgp group customerb-IPv4 neighbor 10.255.224.14 peer-as 64911
#
delete routing-instances public-int protocols bgp group customerb-IPv6
set routing-instances public-int protocols bgp group customerb-IPv6 type external
set routing-instances public-int protocols bgp group customerb-IPv6 family inet6 unicast
set routing-instances public-int protocols bgp group customerb-IPv6 multipath multiple-as
set routing-instances public-int protocols bgp group customerb-IPv6 local-as 64901
set routing-instances public-int protocols bgp group customerb-IPv6 hold-time 90
set routing-instances public-int protocols bgp group customerb-IPv6 import fabric
set routing-instances public-int protocols bgp group customerb-IPv6 export internet
set routing-instances public-int protocols bgp group customerb-IPv6 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group customerb-IPv6 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group customerb-IPv6 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group customerb-IPv6 neighbor fd00:1234:5678:224::d peer-as 64911
set routing-instances public-int protocols bgp group customerb-IPv6 neighbor fd00:1234:5678:224::e peer-as 64911
#
delete routing-instances public-int protocols bgp group devices-IPv4
set routing-instances public-int protocols bgp group devices-IPv4 type external
set routing-instances public-int protocols bgp group devices-IPv4 family inet unicast
set routing-instances public-int protocols bgp group devices-IPv4 multipath multiple-as
set routing-instances public-int protocols bgp group devices-IPv4 local-as 64901
set routing-instances public-int protocols bgp group devices-IPv4 hold-time 90
set routing-instances public-int protocols bgp group devices-IPv4 import fabric
set routing-instances public-int protocols bgp group devices-IPv4 export internet
set routing-instances public-int protocols bgp group devices-IPv4 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group devices-IPv4 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group devices-IPv4 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group devices-IPv4 neighbor 10.255.224.21 peer-as 64911
set routing-instances public-int protocols bgp group devices-IPv4 neighbor 10.255.224.22 peer-as 64911
#
delete routing-instances public-int protocols bgp group devices-IPv6
set routing-instances public-int protocols bgp group devices-IPv6 type external
set routing-instances public-int protocols bgp group devices-IPv6 family inet6 unicast
set routing-instances public-int protocols bgp group devices-IPv6 multipath multiple-as
set routing-instances public-int protocols bgp group devices-IPv6 local-as 64901
set routing-instances public-int protocols bgp group devices-IPv6 hold-time 90
set routing-instances public-int protocols bgp group devices-IPv6 import fabric
set routing-instances public-int protocols bgp group devices-IPv6 export internet
set routing-instances public-int protocols bgp group devices-IPv6 bfd-liveness-detection minimum-interval 1000
set routing-instances public-int protocols bgp group devices-IPv6 bfd-liveness-detection multiplier 3
set routing-instances public-int protocols bgp group devices-IPv6 bfd-liveness-detection session-mode automatic
set routing-instances public-int protocols bgp group devices-IPv6 neighbor fd00:1234:5678:224::15 peer-as 64911
set routing-instances public-int protocols bgp group devices-IPv6 neighbor fd00:1234:5678:224::16 peer-as 64911
#
# Do not do SNAT on prefix for WAN-Interface (where the external DHCP-Server may be for Lab)
#
delete security nat source rule-set trust-to-untrust
set security nat source rule-set trust-to-untrust from zone trust
set security nat source rule-set trust-to-untrust to zone untrust
set security nat source rule-set trust-to-untrust rule source-nat-rule1 match destination-address 192.168.10.0/24
set security nat source rule-set trust-to-untrust rule source-nat-rule1 then source-nat off
set security nat source rule-set trust-to-untrust rule source-nat-rule2 match source-address 0.0.0.0/0
set security nat source rule-set trust-to-untrust rule source-nat-rule2 then source-nat interface
#
# WAN-Interfaces are hardcoded in this example
#
delete interfaces ge-0/0/0
delete interfaces ge-7/0/0
set interfaces ge-0/0/0 unit 0 family inet address 192.168.10.99/24
set interfaces ge-7/0/0 unit 0 family inet address 192.168.10.98/24
#
delete security zones security-zone untrust interfaces ge-0/0/0.0
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic protocols all
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services all
delete security zones security-zone untrust interfaces ge-7/0/0.0
set security zones security-zone untrust interfaces ge-7/0/0.0 host-inbound-traffic protocols all
set security zones security-zone untrust interfaces ge-7/0/0.0 host-inbound-traffic system-services all
#
delete routing-instances public-int interface ge-0/0/0.0
delete routing-instances public-int interface ge-7/0/0.0
set routing-instances public-int interface ge-0/0/0.0
set routing-instances public-int interface ge-7/0/0.0
set routing-instances public-int routing-options static route 0.0.0.0/0 next-hop 192.168.10.1
#
set interfaces ge-0/0/0 unit 0 family inet6 address fd00:1234:5678:0010::99/64
set interfaces ge-7/0/0 unit 0 family inet6 address fd00:1234:5678:0010::98/64
#
set routing-instances public-int routing-options rib public-int.inet6.0 static route ::/0 next-hop fd00:1234:5678:0010::1Testing Your WAN Router EVPN Fabric Integration
The required configuration on both the EVPN fabric and the WAN router has been completed, and testing of the IPv4 and IPv6 dual-stack setup can now begin. The process starts by examining the first service block function, the service1 switch.
root@service1> show interfaces terse
Interface Admin Link Proto Local Remote
.
xe-0/0/36 up up
xe-0/0/36.0 up up aenet --> ae10.0
xe-0/0/37 up up
xe-0/0/37.0 up up aenet --> ae11.0
xe-0/0/38 up up
xe-0/0/38.0 up up eth-switch
et-0/0/52 up up
et-0/0/52.0 up up inet6 2001::2/127
fe80::76e7:98ff:fe06:d145/64
et-0/0/53 up up
et-0/0/53.0 up up inet6 2001::4/127
fe80::76e7:98ff:fe06:d149/64
ae10 up up
ae10.0 up up eth-switch
ae11 up up
ae11.0 up up eth-switch
.
irb up up
irb.0 up up inet
irb.101 up up inet 10.255.224.5/29
inet6 fd00:1234:5678:224::5/125
fe80::76e7:9800:6506:d100/64
irb.102 up up inet 10.255.224.13/29
inet6 fd00:1234:5678:224::d/125
fe80::76e7:9800:6606:d100/64
irb.103 up up inet 10.255.224.21/29
inet6 fd00:1234:5678:224::15/125
fe80::76e7:9800:6706:d100/64
.
lo0 up up
lo0.0 up up inet 172.16.254.1 --> 0/0
inet6 fd31:db8::74e7:9806:d100
fe80::76e7:980f:fc06:d100
lo0.1 up up inet 172.16.192.7 --> 0/0
inet6 fd33:ab00:2::7
fe80::76e7:980f:fc06:d100
lo0.2 up up inet 172.16.192.8 --> 0/0
inet6 fd33:ab00:2::8
fe80::76e7:980f:fc06:d100
lo0.3 up up inet 172.16.192.9 --> 0/0
inet6 fd33:ab00:2::9
fe80::76e7:980f:fc06:d100
lo0.16384 up up inet 127.0.0.1 --> 0/0
lo0.16385 up up inet
.
vtep up up
vtep.32768 up up
vtep.32769 up up eth-switch
vtep.32770 up up eth-switch
vtep.32771 up up eth-switch
.
root@service1> show lacp interfaces
Aggregated interface: ae10
LACP state: Role Exp Def Dist Col Syn Aggr Timeout Activity
xe-0/0/36 Actor No No Yes Yes Yes Yes Fast Active
xe-0/0/36 Partner No No Yes Yes Yes Yes Fast Active
LACP protocol: Receive State Transmit State Mux State
xe-0/0/36 Current Fast periodic Collecting distributing
.
Aggregated interface: ae11
LACP state: Role Exp Def Dist Col Syn Aggr Timeout Activity
xe-0/0/37 Actor No No Yes Yes Yes Yes Fast Active
xe-0/0/37 Partner No No Yes Yes Yes Yes Fast Active
LACP protocol: Receive State Transmit State Mux State
xe-0/0/37 Current Fast periodic Collecting distributing
.
root@service1> show bgp summary
.
Threading mode: BGP I/O
Default eBGP mode: advertise - accept, receive - accept
Groups: 8 Peers: 10 Down peers: 0
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0
14 11 0 0 0 0
inet6.0
14 11 0 0 0 0
bgp.evpn.0
256 129 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
10.255.224.1 64901 75 79 0 0 33:16 Establ
customera.inet.0: 1/1/1/0
10.255.224.9 64901 76 77 0 0 33:16 Establ
customerb.inet.0: 1/1/1/0
10.255.224.17 64901 75 76 0 0 33:16 Establ
devices.inet.0: 1/1/1/0
2001::3 65003 176 176 0 3 1:06:32 Establ
inet.0: 6/7/7/0
inet6.0: 6/7/7/0
2001::5 65004 177 157 0 3 1:06:53 Establ
inet.0: 5/7/7/0
inet6.0: 5/7/7/0
fd00:1234:5678:224::1 64901 75 77 0 0 33:01 Establ
customera.inet6.0: 1/1/1/0
fd00:1234:5678:224::9 64901 75 76 0 0 32:49 Establ
customerb.inet6.0: 1/1/1/0
fd00:1234:5678:224::11 64901 75 76 0 0 33:05 Establ
devices.inet6.0: 1/1/1/0
fd31:db8::182a:d301:e1d0 65003 16043 12951 0 3 1:06:21 Establ
bgp.evpn.0: 62/129/129/0
customera.evpn.0: 24/24/24/0
customerb.evpn.0: 23/23/23/0
devices.evpn.0: 21/22/22/0
evpn_vs.evpn.0: 23/58/58/0
__default_evpn__.evpn.0: 2/2/2/0
fd31:db8::384f:49f3:3ffc 65004 16971 9843 0 3 1:06:50 Establ
bgp.evpn.0: 67/127/127/0
customera.evpn.0: 0/24/24/0
customerb.evpn.0: 0/22/22/0
devices.evpn.0: 1/21/21/0
evpn_vs.evpn.0: 35/58/58/0
__default_evpn__.evpn.0: 0/2/2/0
.
root@service1> show bfd session
Detect Transmit
Address State Interface Time Interval Multiplier
10.255.224.1 Up irb.101 3.000 1.000 3
10.255.224.9 Up irb.102 3.000 1.000 3
10.255.224.17 Up irb.103 3.000 1.000 3
2001::3 Up et-0/0/52.0 3.000 1.000 3
2001::5 Up et-0/0/53.0 3.000 1.000 3
fd00:1234:5678:224::1 Up irb.101 3.000 1.000 3
fd00:1234:5678:224::9 Up irb.102 3.000 1.000 3
fd00:1234:5678:224::11 Up irb.103 3.000 1.000 3
fd31:db8::182a:d301:e1d0 Up 3.000 1.000 3
fd31:db8::384f:49f3:3ffc Up 3.000 1.000 3
.
10 sessions, 10 clients
Cumulative transmit rate 10.0 pps, cumulative receive rate 10.0 pps
.
root@service1> show route table customera.inet.0
.
customera.inet.0: 13 destinations, 20 routes (13 active, 0 holddown, 0 hidden)
@ = Routing Use Only, # = Forwarding Use Only
+ = Active Route, - = Last Active, * = Both
.
0.0.0.0/0 *[BGP/170] 00:33:36, localpref 100
AS path: 64901 I, validation-state: unverified
> to 10.255.224.1 via irb.101
[EVPN/170] 00:14:59
> to 2001::3 via et-0/0/52.0
10.91.91.0/24 @[EVPN/170] 00:53:22
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
[EVPN/170] 00:53:22
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
#[Multipath/255] 00:53:22, metric2 0
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
10.99.99.0/24 @[EVPN/170] 00:53:22
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
[EVPN/170] 00:53:22
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
#[Multipath/255] 00:53:22, metric2 0
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
.
root@service1> show route table customera.inet6.0
.
customera.inet6.0: 16 destinations, 20 routes (16 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
.
::/0 *[BGP/170] 00:33:32, localpref 100
AS path: 64901 I, validation-state: unverified
> to fd00:1234:5678:224::1 via irb.101
fd00:1234:5678:1099::/64
*[EVPN/170] 00:53:33
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
[EVPN/170] 00:53:33
to 2001::3 via et-0/0/52.0
> to 2001::5 via et-0/0/53.0
.
fd33:ab00:2::1/128 *[EVPN/170] 00:53:33
> to 2001::3 via et-0/0/52.0
to 2001::5 via et-0/0/53.0
.
root@service1> show ethernet-switching table
.
MAC flags (S - static MAC, D - dynamic MAC, L - locally learned, P - Persistent static, C - Control MAC
SE - statistics enabled, NM - non configured MAC, R - remote PE MAC, O - ovsdb MAC,
B - Blocked MAC)
.
Ethernet switching table : 3 entries, 3 learned
Routing instance : evpn_vs
Vlan MAC MAC GBP Logical SVLBNH/ Active
name address flags tag interface VENH Index source
trans1 00:10:db:ff:10:03 DLR ae10.0
trans2 00:10:db:ff:10:03 DLR ae10.0
trans3 00:10:db:ff:10:03 DLR ae10.0
.
root@service1> show evpn database
Instance: evpn_vs
VLAN DomainId MAC address Active source Timestamp IP address
10101 00:10:db:ff:10:03 00:11:00:00:00:01:00:01:01:0a Aug 25 09:15:41 10.255.224.1
fd00:1234:5678:224::1
fe80::210:db00:65ff:1003
10101 74:e7:98:06:d1:00 irb.101 Aug 25 08:37:22 10.255.224.5
fd00:1234:5678:224::5
fe80::76e7:9800:6506:d100
10102 00:10:db:ff:10:03 00:11:00:00:00:01:00:01:01:0a Aug 25 09:15:41 10.255.224.9
fd00:1234:5678:224::9
fe80::210:db00:66ff:1003
10102 74:e7:98:06:d1:00 irb.102 Aug 25 08:37:22 10.255.224.13
fd00:1234:5678:224::d
fe80::76e7:9800:6606:d100
10103 00:10:db:ff:10:03 00:11:00:00:00:01:00:01:01:0a Aug 25 09:15:41 10.255.224.17
fd00:1234:5678:224::11
fe80::210:db00:67ff:1003
10103 74:e7:98:06:d1:00 irb.103 Aug 25 08:37:22 10.255.224.21
fd00:1234:5678:224::15
fe80::76e7:9800:6706:d100
11033 5c:5b:35:be:84:08 fd31:db8::f8c1:1641:5c00 Aug 25 08:57:19 10.33.33.237
11033 5c:5b:35:be:84:12 fd31:db8::bc0f:fe15:7080 Aug 25 08:57:20 10.33.33.236
11088 52:54:00:63:75:34 fd31:db8::f8c1:1641:5c00 Aug 25 08:23:55 10.88.88.23
11088 52:54:00:8b:4b:8b fd31:db8::bc0f:fe15:7080 Aug 25 08:24:01 10.88.88.88
fd00:1234:5678:1088::88
fe80::5054:ff:fe8b:4b8b
11099 3c:fd:fe:d1:65:60 fd31:db8::f8c1:1641:5c00 Aug 25 09:31:13 fe80::30cb:47ff:fe7b:3a06
fe80::9c89:35ff:fe0f:b8f7
11099 52:54:00:4c:e8:c8 fd31:db8::f8c1:1641:5c00 Aug 25 08:23:55 10.99.99.99
fd00:1234:5678:1099::99
fe80::5054:ff:fe4c:e8c8
11099 52:54:00:86:67:76 fd31:db8::f8c1:1641:5c00 Aug 25 08:57:48 10.99.99.23
fd00:1234:5678:1099::b7
fe80::5054:ff:fe86:6776
11099 52:54:00:d7:75:b4 fd31:db8::bc0f:fe15:7080 Aug 25 08:24:01 10.99.99.42
fe80::5054:ff:fed7:75b4Now we look at the WAN router side:
root@srx1_node0> show interfaces terse
Interface Admin Link Proto Local Remote
ge-0/0/0 up up
ge-0/0/0.0 up up inet 192.168.10.99/24
inet6 fd00:1234:5678:10::99/64
fe80::d207:caff:fe71:600/64
ge-0/0/1 up up
ge-0/0/1.0 up up aenet --> fab0.0
.
xe-0/0/16 up up
xe-0/0/16.101 up up aenet --> reth3.101
xe-0/0/16.102 up up aenet --> reth3.102
xe-0/0/16.103 up up aenet --> reth3.103
xe-0/0/16.32767 up up aenet --> reth3.32767
xe-0/0/17 up up
xe-0/0/17.101 up up aenet --> reth3.101
xe-0/0/17.102 up up aenet --> reth3.102
xe-0/0/17.103 up up aenet --> reth3.103
xe-0/0/17.32767 up up aenet --> reth3.32767
.
ge-7/0/0 up up
ge-7/0/0.0 up up inet 192.168.10.98/24
inet6 fd00:1234:5678:10::98/64
fe80::231:46ff:fe98:6100/64
ge-7/0/1 up up
ge-7/0/1.0 up up aenet --> fab1.0
.
xe-7/0/16 up up
xe-7/0/16.101 up up aenet --> reth3.101
xe-7/0/16.102 up up aenet --> reth3.102
xe-7/0/16.103 up up aenet --> reth3.103
xe-7/0/16.32767 up up aenet --> reth3.32767
xe-7/0/17 up up
xe-7/0/17.101 up up aenet --> reth3.101
xe-7/0/17.102 up up aenet --> reth3.102
xe-7/0/17.103 up up aenet --> reth3.103
xe-7/0/17.32767 up up aenet --> reth3.32767
.
em0 up up
em0.0 up up inet 129.16.0.1/2
143.16.0.1/2
tnp 0x1100001
em1 up up
em1.32768 up up inet 192.168.1.2/24
em2 up up
fab0 up up
fab0.0 up up inet 30.17.0.200/24
fab1 up up
fab1.0 up up inet 30.18.0.200/24
fti0 up up
fxp0 up up
.
reth3 up up
reth3.101 up up inet 10.255.224.1/29
inet6 fd00:1234:5678:224::1/125
fe80::210:db00:65ff:1003/64
reth3.102 up up inet 10.255.224.9/29
inet6 fd00:1234:5678:224::9/125
fe80::210:db00:66ff:1003/64
reth3.103 up up inet 10.255.224.17/29
inet6 fd00:1234:5678:224::11/125
fe80::210:db00:67ff:1003/64
reth3.32767 up up
.
root@srx1_node0> show lacp interfaces
Aggregated interface: reth3
LACP state: Role Exp Def Dist Col Syn Aggr Timeout Activity
xe-0/0/16 Actor No No Yes Yes Yes Yes Fast Active
xe-0/0/16 Partner No No Yes Yes Yes Yes Fast Active
xe-0/0/17 Actor No Yes No No No Yes Fast Active
xe-0/0/17 Partner No Yes No No No Yes Fast Passive
xe-7/0/16 Actor No No Yes Yes Yes Yes Fast Active
xe-7/0/16 Partner No No Yes Yes Yes Yes Fast Active
xe-7/0/17 Actor No Yes No No No Yes Fast Active
xe-7/0/17 Partner No Yes No No No Yes Fast Passive
LACP protocol: Receive State Transmit State Mux State
xe-0/0/16 Current Fast periodic Collecting distributing
xe-0/0/17 Defaulted Fast periodic Detached
xe-7/0/16 Current Fast periodic Collecting distributing
xe-7/0/17 Defaulted Fast periodic Detached
.
root@srx1_node0> show bgp summary
Threading mode: BGP I/O
Default eBGP mode: advertise - accept, receive - accept
Groups: 6 Peers: 12 Down peers: 1
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
10.255.224.5 64911 115 108 0 0 48:38 Establ
public-int.inet.0: 5/7/7/0
10.255.224.6 64911 13 5 0 2 1:26 Establ
public-int.inet.0: 5/7/7/0
10.255.224.13 64911 112 108 0 0 48:39 Establ
public-int.inet.0: 5/7/7/0
10.255.224.14 64911 13 5 0 2 1:22 Establ
public-int.inet.0: 5/7/7/0
10.255.224.21 64911 112 108 0 0 48:39 Establ
public-int.inet.0: 5/7/7/0
10.255.224.22 64911 13 5 0 2 1:18 Establ
public-int.inet.0: 5/7/7/0
fd00:1234:5678:224::5 64911 113 108 0 0 48:24 Establ
public-int.inet6.0: 5/7/7/0
fd00:1234:5678:224::6 64911 12 4 0 2 1:11 Establ
public-int.inet6.0: 5/7/7/0
fd00:1234:5678:224::d 64911 111 107 0 0 48:11 Establ
public-int.inet6.0: 6/7/7/0
fd00:1234:5678:224::e 64911 111 107 0 0 48:11 Establ
fd00:1234:5678:224::15 64911 112 108 0 0 48:28 Establ
public-int.inet6.0: 5/7/7/0
fd00:1234:5678:224::16 64911 12 4 0 2 1:09 Establ
public-int.inet6.0: 5/7/7/0
.
root@srx1_node0> show bfd session
Detect Transmit
Address State Interface Time Interval Multiplier
10.255.224.5 Up reth3.101 3.000 1.000 3
10.255.224.6 Up reth3.101 3.000 1.000 3
10.255.224.13 Up reth3.102 3.000 1.000 3
10.255.224.14 Up reth3.102 3.000 1.000 3
10.255.224.21 Up reth3.103 3.000 1.000 3
10.255.224.22 Up reth3.103 3.000 1.000 3
fd00:1234:5678:224::5 Up reth3.101 3.000 1.000 3
fd00:1234:5678:224::6 Up reth3.101 3.000 1.000 3
fd00:1234:5678:224::d Up reth3.102 3.000 1.000 3
fd00:1234:5678:224::e Up reth3.102 3.000 1.000 3
fd00:1234:5678:224::15 Up reth3.103 3.000 1.000 3
fd00:1234:5678:224::16 Up reth3.103 3.000 1.000 3
.
12 sessions, 12 clients
Cumulative transmit rate 11.5 pps, cumulative receive rate 11.5 pps
.
root@srx1_node0> show route table public-int.inet.0
.
public-int.inet.0: 28 destinations, 53 routes (28 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
.
0.0.0.0/0 *[Static/5] 4d 23:12:49
> to 192.168.10.1 via ge-0/0/0.0
.
10.99.99.0/24 *[BGP/170] 00:01:52, localpref 100, from 10.255.224.5
AS path: 64911 65001 65003 65006 65007 I, validation-state: unverified
to 10.255.224.5 via reth3.101
> to 10.255.224.6 via reth3.101
[BGP/170] 00:01:52, localpref 100
AS path: 64911 65002 65003 65006 65007 I, validation-state: unverified
> to 10.255.224.6 via reth3.101
.
172.16.192.1/32 *[BGP/170] 00:01:52, localpref 100, from 10.255.224.5
AS path: 64911 65001 65003 65005 65007 I, validation-state: unverified
to 10.255.224.5 via reth3.101
> to 10.255.224.6 via reth3.101
[BGP/170] 00:01:52, localpref 100
AS path: 64911 65002 65003 65005 65007 I, validation-state: unverified
> to 10.255.224.6 via reth3.101
.
root@srx1_node0> show route table public-int.inet6.0
.
public-int.inet6.0: 34 destinations, 59 routes (34 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
.
::/0 *[Static/5] 4d 23:12:49
> to fd00:1234:5678:10::1 via ge-0/0/0.0
.
fd00:1234:5678:1099::/64
*[BGP/170] 00:01:49, localpref 100, from fd00:1234:5678:224::5
AS path: 64911 65001 65003 65006 65007 I, validation-state: unverified
to fd00:1234:5678:224::5 via reth3.101
> to fd00:1234:5678:224::6 via reth3.101
[BGP/170] 00:01:49, localpref 100
AS path: 64911 65002 65003 65006 65007 I, validation-state: unverified
> to fd00:1234:5678:224::6 via reth3.101
fd33:ab00:2::1/128 *[BGP/170] 00:01:49, localpref 100
AS path: 64911 65001 65003 65005 65007 I, validation-state: unverified
> to fd00:1234:5678:224::5 via reth3.101
to fd00:1234:5678:224::6 via reth3.101
[BGP/170] 00:01:49, localpref 100
AS path: 64911 65002 65003 65005 65007 I, validation-state: unverified
> to fd00:1234:5678:224::6 via reth3.101
.
root@srx1_node0> show security zones
node0:
--------------------------------------------------------------------------
.
Security zone: trust
Zone ID: 7
Send reset for non-SYN session TCP packets: On
Policy configurable: Yes
Interfaces bound: 3
Interfaces:
reth3.101
reth3.102
reth3.103
Advanced-connection-tracking timeout: 1800
Unidirectional-session-refreshing: No
.
Security zone: untrust
Zone ID: 8
Send reset for non-SYN session TCP packets: Off
Policy configurable: Yes
Screen: untrust-screen
Interfaces bound: 2
Interfaces:
ge-0/0/0.0
ge-7/0/0.0
Advanced-connection-tracking timeout: 1800
Unidirectional-session-refreshing: No
.
Security zone: junos-host
Zone ID: 2
Send reset for non-SYN session TCP packets: Off
Policy configurable: Yes
Interfaces bound: 0
Interfaces:
Advanced-connection-tracking timeout: 1800
Unidirectional-session-refreshing: No
.
root@srx1_node0> show chassis cluster statistics
Control link statistics:
Control link 0:
Heartbeat packets sent: NA
Heartbeat packets received: NA
Heartbeat packet errors: NA
Control link offloaded HA heartbeat statistics:
Control link 0:
Connection Status: UP
Heartbeat sent: 431254
Heartbeat received: 431093
Heartbeat sent jitter: 0 ms
Heartbeat received jitter: 0 ms
Fabric link statistics:
Child link 0
Probes sent: 860521
Probes received: 860525
Child link 1
Probes sent: 0
Probes received: 0
Services Synchronized:
Service name RTOs sent RTOs received
Translation context 0 0
Incoming NAT 0 0
Resource manager 0 0
DS-LITE create 0 0
Session create 43480 26
IPv6 session create 3120 24
IPv4/6 session RTO ACK 0 0
Session close 22554 2
IPv6 session close 3080 12After verifying the route exchanges, the next step is to test client traffic both within the network and through the WAN router. This begins with a Linux desktop client VM configured with static IPv4 and IPv6 addresses.
root@desktop1:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
.
# IPv4 and IPv6 static interface configuration
4: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:4c:e8:c8 brd ff:ff:ff:ff:ff:ff
inet 10.99.99.99/24 brd 10.99.99.255 scope global ens5
valid_lft forever preferred_lft forever
inet6 fd00:1234:5678:1099::99/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::5054:ff:fe4c:e8c8/64 scope link
valid_lft forever preferred_lft forever
.
# IPv4 static routes
root@desktop1:~# ip r
default via 10.99.99.1 dev ens5 proto static
10.99.99.0/24 dev ens5 proto kernel scope link src 10.99.99.99
192.168.10.0/24 dev ens3 proto kernel scope link src 192.168.10.61
.
# IPv6 static routes
root@desktop1:~# ip -6 r
::1 dev lo proto kernel metric 256 pref medium
fd00:1234:5678:1099::/64 dev ens5 proto kernel metric 256 pref medium
fd00:1234:5678:1099::/64 dev ens5 proto ra metric 1024 expires 2591901sec pref medium
fe80::/64 dev ens5 proto kernel metric 256 pref medium
.
default proto static metric 1024
nexthop via fd00:1234:5678:1099::1 dev ens5 weight 1
nexthop via fe80::fac1:1604:4b41:5c00 dev ens5 weight 1 pref medium
.
# Ping Anycast GW of IPv4 VLAN
root@desktop1:~# ping -c3 10.99.99.1
PING 10.99.99.1 (10.99.99.1) 56(84) bytes of data.
64 bytes from 10.99.99.1: icmp_seq=1 ttl=64 time=9.47 ms
64 bytes from 10.99.99.1: icmp_seq=2 ttl=64 time=2.50 ms
64 bytes from 10.99.99.1: icmp_seq=3 ttl=64 time=2.03 ms
.
# Ping a another desktop VM in the same VLAN/VNI
root@desktop1:~# ping -c3 10.99.99.23
PING 10.99.99.23 (10.99.99.23) 56(84) bytes of data.
64 bytes from 10.99.99.23: icmp_seq=1 ttl=64 time=14.1 ms
64 bytes from 10.99.99.23: icmp_seq=2 ttl=64 time=0.444 ms
64 bytes from 10.99.99.23: icmp_seq=3 ttl=64 time=0.393 ms
.
# Ping a desktop VM in another VRF
root@desktop1:~# ping -c3 10.88.88.88
PING 10.88.88.88 (10.88.88.88) 56(84) bytes of data.
64 bytes from 10.88.88.88: icmp_seq=1 ttl=59 time=0.824 ms
64 bytes from 10.88.88.88: icmp_seq=2 ttl=59 time=0.657 ms
64 bytes from 10.88.88.88: icmp_seq=3 ttl=59 time=0.705 ms
.
# Ping an IPv4 address in the internet leaving the Lab
root@desktop1:~# ping -c3 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=110 time=2.98 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=110 time=3.04 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=110 time=3.04 ms
.
# review ARP entries
root@desktop1:~# arp -an
? (10.99.99.23) at 52:54:00:86:67:76 [ether] on ens5
? (10.99.99.1) at 00:00:5e:e4:31:57 [ether] on ens5
.
# Ping Anycast GW of IPv6 VLAN
root@desktop1:~# ping -c3 fd00:1234:5678:1099::1
PING fd00:1234:5678:1099::1(fd00:1234:5678:1099::1) 56 data bytes
64 bytes from fd00:1234:5678:1099::1: icmp_seq=1 ttl=64 time=1.39 ms
64 bytes from fd00:1234:5678:1099::1: icmp_seq=2 ttl=64 time=1.96 ms
64 bytes from fd00:1234:5678:1099::1: icmp_seq=3 ttl=64 time=2.04 ms
.
# Ping a desktop VM in another VRF
root@desktop1:~# ping -c3 fd00:1234:5678:1088::88
PING fd00:1234:5678:1088::88(fd00:1234:5678:1088::88) 56 data bytes
64 bytes from fd00:1234:5678:1088::88: icmp_seq=1 ttl=59 time=0.886 ms
64 bytes from fd00:1234:5678:1088::88: icmp_seq=2 ttl=59 time=0.741 ms
64 bytes from fd00:1234:5678:1088::88: icmp_seq=3 ttl=59 time=0.628 ms
.
# Ping a VM attached to WAN-Interface which simulates IPv6 internet access
root@desktop1:~# ping -c3 fd00:1234:5678:10::11
PING fd00:1234:5678:10::11(fd00:1234:5678:10::11) 56 data bytes
64 bytes from fd00:1234:5678:10::11: icmp_seq=1 ttl=61 time=0.775 ms
64 bytes from fd00:1234:5678:10::11: icmp_seq=2 ttl=61 time=0.675 ms
64 bytes from fd00:1234:5678:10::11: icmp_seq=3 ttl=61 time=0.714 msThe next test uses a Linux-based desktop client VM that initially has no assigned IP addresses, aside from the local IPv6 address, and must obtain IPv4 and IPv6 addresses dynamically through DHCP.
# no IPv4/IPv6 intial configuration
root@desktop1:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
.
4: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:4c:e8:c8 brd ff:ff:ff:ff:ff:ff
inet6 fe80::5054:ff:fe4c:e8c8/64 scope link
valid_lft forever preferred_lft forever
.
# no IPv4 routes
root@desktop1:~# ip r
.
# IPv6 local routes only and one through Router Advertisement of EVPN Fabric
root@desktop1:~# ip -6 r
::1 dev lo proto kernel metric 256 pref medium
fd00:1234:5678:1099::/64 dev ens5 proto ra metric 1024 expires 2591958sec pref medium
fe80::/64 dev ens5 proto kernel metric 256 pref medium
default via fe80::fac1:1604:4b41:5c00 dev ens5 proto ra metric 1024 expires 1758sec pref medium
.
# obtain an IPv4 DHCP-Lease
root@desktop1:~# dhclient -v ens5
Internet Systems Consortium DHCP Client 4.4.1
Copyright 2004-2018 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/
.
Listening on LPF/ens5/52:54:00:4c:e8:c8
Sending on LPF/ens5/52:54:00:4c:e8:c8
Sending on Socket/fallback
DHCPDISCOVER on ens5 to 255.255.255.255 port 67 interval 3 (xid=0x73599215)
DHCPOFFER of 10.99.99.36 from 172.16.192.9
DHCPREQUEST for 10.99.99.36 on ens5 to 255.255.255.255 port 67 (xid=0x15925973)
DHCPACK of 10.99.99.36 from 172.16.192.9 (xid=0x73599215)
bound to 10.99.99.36 -- renewal in 754 seconds.
.
# obtain an IPv6 DHCP-Lease
root@desktop1:~# dhclient -6 -v ens5
Internet Systems Consortium DHCP Client 4.4.1
Copyright 2004-2018 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/
.
Listening on Socket/ens5
Sending on Socket/ens5
PRC: Previous lease is devoid of active addresses.
PRC: Soliciting for leases (INIT).
XMT: Forming Solicit, 0 ms elapsed.
XMT: X-- IA_NA 00:4c:e8:c8
XMT: | X-- Request renew in +3600
XMT: | X-- Request rebind in +5400
XMT: Solicit on ens5, interval 1090ms.
RCV: Advertise message on ens5 from fe80::fac1:1604:4b41:5c00.
RCV: X-- IA_NA 00:4c:e8:c8
RCV: | X-- starts 1755792004
RCV: | X-- t1 - renew +900
RCV: | X-- t2 - rebind +1800
RCV: | X-- [Options]
RCV: | | X-- IAADDR fd00:1234:5678:1099::b8
RCV: | | | X-- Preferred lifetime 3600.
RCV: | | | X-- Max lifetime 3600.
RCV: X-- Server ID: 00:01:00:01:2d:e6:f5:54:52:54:00:a5:db:3b
RCV: Advertisement recorded.
PRC: Selecting best advertised lease.
PRC: Considering best lease.
PRC: X-- Initial candidate 00:01:00:01:2d:e6:f5:54:52:54:00:a5:db:3b (s: 10104, p: 0).
XMT: Forming Request, 0 ms elapsed.
XMT: X-- IA_NA 00:4c:e8:c8
XMT: | X-- Requested renew +3600
XMT: | X-- Requested rebind +5400
XMT: | | X-- IAADDR fd00:1234:5678:1099::b8
XMT: | | | X-- Preferred lifetime +7200
XMT: | | | X-- Max lifetime +7500
XMT: V IA_NA appended.
XMT: Request on ens5, interval 960ms.
RCV: Reply message on ens5 from fe80::fac1:1604:4b41:5c00.
RCV: X-- IA_NA 00:4c:e8:c8
RCV: | X-- starts 1755792005
RCV: | X-- t1 - renew +900
RCV: | X-- t2 - rebind +1800
RCV: | X-- [Options]
RCV: | | X-- IAADDR fd00:1234:5678:1099::b8
RCV: | | | X-- Preferred lifetime 3600.
RCV: | | | X-- Max lifetime 3600.
RCV: X-- Server ID: 00:01:00:01:2d:e6:f5:54:52:54:00:a5:db:3b
PRC: Bound to lease 00:01:00:01:2d:e6:f5:54:52:54:00:a5:db:3b.
.
# review updated IPv4/IPv6 interface configuration
root@desktop1:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
.
valid_lft forever preferred_lft forever
4: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:4c:e8:c8 brd ff:ff:ff:ff:ff:ff
inet 10.99.99.36/24 brd 10.99.99.255 scope global dynamic ens5
valid_lft 3518sec preferred_lft 3518sec
inet6 fd00:1234:5678:1099::b8/128 scope global
valid_lft forever preferred_lft forever
inet6 fe80::5054:ff:fe4c:e8c8/64 scope link
valid_lft forever preferred_lft forever
.
# review updated IPv4 routes
root@desktop1:~# ip r
default via 10.99.99.1 dev ens5
10.99.99.0/24 dev ens5 proto kernel scope link src 10.99.99.36
.
# review updated IPv6 routes
root@desktop1:~# ip -6 r
::1 dev lo proto kernel metric 256 pref medium
fd00:1234:5678:1099::b8 dev ens5 proto kernel metric 256 pref medium
fd00:1234:5678:1099::/64 dev ens5 proto ra metric 1024 expires 2591806sec pref medium
fe80::/64 dev ens5 proto kernel metric 256 pref medium
default via fe80::fac1:1604:4b41:5c00 dev ens5 proto ra metric 1024 expires 1606sec pref medium
.
# at this point you can repeat the ping tests similar to the static client