ON THIS PAGE
EVPN
Learn about EVPN configurations on the ACX7000 family of routers. The ACX7000 family of routers includes ACX7020, ACX7024, ACX7024X, ACX7100, ACX7332, ACX7348, and ACX7509 routers.
EVPN provides scalable Layer 2 and Layer 3 VPN services over MPLS or VXLAN networks.
EVPN-MPLS
You configure EVPN-MPLS on provider edge (PE) routers, not on customer edge (CE) or core
provider (P) routers. Use mac-vrf as the instance type to configure
EVPN-MPLS.
Prerequisites
-
MPLS backbone (MPLS underlay) is fully operational, including:
-
IGP (OSPF or IS-IS) is configured and stable to handle routing between core P and PE routers.
-
LDP or RSVP is enabled to create LSPs between PE routers.
-
Multiprotocol BGP (MP‑BGP) is configured between PE routers.
-
-
Loopback interfaces and router IDs are configured.
-
VLANs and CE‑facing interfaces are defined.
Here is a sample EVPN-MPLS routing instance configuration on an ACX7000 family of routers
using the vlan-based service. You might alternatively use the
vlan-bundle service or vlan-aware service for this
configuration.
set routing-instances evpn instance-type mac-vrf set routing-instances evpn protocols evpn set routing-instances evpn service-type vlan-based set routing-instances evpn vrf-target target:62525:2001 set routing-instances evpn route-distinguisher 62525:2000 set routing-instances evpn vlans VLAN100 vlan-id 100 set routing-instances evpn vlans VLAN100 interface et-0/0/5.100
The following table shows EVPN-MPLS configurations based on service type:
| Service Type | MAC-VRF Configuration Example |
|---|---|
vlan-based |
set routing-instances evpn instance-type mac-vrf set routing-instances evpn protocols evpn set routing-instances evpn protocols evpn normalization set routing-instances evpn service-type vlan-based set routing-instances evpn vrf-target target:62525:2001 set routing-instances evpn route-distinguisher 62525:2000 set routing-instances evpn vlans v100 vlan-id 100 set routing-instances evpn vlans v100 interface ae0.100 set routing-instances evpn vlans v100 l3-interface irb.100 |
vlan-bundle |
set routing-instances evpn-bundle instance-type mac-vrf set routing-instances evpn-bundle protocols evpn no-control-word set routing-instances evpn-bundle service-type vlan-bundle set routing-instances evpn-bundle interface ae0.100 set routing-instances evpn-bundle vrf-target target:62525:2001 set routing-instances evpn-bundle route-distinguisher 62525:2000 set routing-instances evpn-bundle vlans v100 interface ae0.100 |
vlan-aware |
set routing-instances evpn-aware instance-type mac-vrf set routing-instances evpn-aware protocols evpn no-control-word set routing-instances evpn-aware service-type vlan-aware set routing-instances evpn-aware vrf-target target:62525:2001 set routing-instances evpn-aware route-distinguisher 62525:2000 set routing-instances evpn-aware vlans v100 vlan-id 100 set routing-instances evpn-aware vlans v100 interface ae0.100 set routing-instances evpn-aware vlans v200 vlan-id 200 set routing-instances evpn-aware vlans v200 interface ae0.200 |
Here is a sample load-balancing configuration:
set policy-options policy-statement Load_Balance term Load-Bal then load-balance per-packet set policy-options policy-statement Load_Balance term Load-Bal then accept set routing-options forwarding-table export Load_Balance
For additional information, see Overview of VLAN Services for EVPN about these service types.
EVPN-VPWS
You configure an Ethernet VPN-virtual private wire service (EVPN-VPWS) on the provider edge
(PE) routers, not on customer edge (CE) or core provider (P) routers. Use
evpn-vpws as the instance type to configure EVPN-VPWS.
Here is a sample EVPN-VPWS configuration on an ACX7000 family of routers to create point-to-point Layer-2 circuit (E-Line service).
EVPN-VPWS routing instance configuration on a PE router:
set routing-instances evpn-vpws-1001 instance-type evpn-vpws set routing-instances evpn-vpws-1001 route-distinguisher 10.255.1.1:1001 set routing-instances evpn-vpws-1001 vrf-target target:65000:1001 set routing-instances evpn-vpws-1001 protocols evpn flexible-cross-connect-vlan-aware set routing-instances evpn-vpws-1001 protocols evpn interface ae0.1001 vpws-service-id local 1 set routing-instances evpn-vpws-1001 protocols evpn interface ae0.1001 vpws-service-id remote 2 set routing-instances evpn-vpws-1001 interface ae0.1001
CE-facing interface (ae0.1001) configuration on a PE router:
set interfaces ae0 flexible-vlan-tagging set interfaces ae0 encapsulation flexible-ethernet-services set interfaces ae0 unit 1001 encapsulation vlan-ccc set interfaces ae0 unit 1001 vlan-id 1001 set interfaces ae0 unit 1001 family ccc set interfaces ae0 unit 1001 esi 00:11:22:33:44:55:66:77:88:99 set interfaces ae0 unit 1001 esi all-active
EVPN-VXLAN
You configure an EVPN-VXLAN routing instance on the provider edge (PE) routers, not on
customer edge (CE) or core provider (P) routers. Use mac-vrf as the
instance type and evpn as the protocol with vxlan
encapsulation.
Prerequisites:
-
A stable IP underlay is configured with an interior gateway protocol (IGP)—OSPF or IS-IS with external BGP (EBGP) and provides full PE‑to‑PE reachability.
-
Loopback interfaces (lo0) are configured and reachable.
lo0 is used as the virtual tunnel endpoint (VTEP) source.
-
Multiprotocol BGP (MP‑BGP) with EVPN address family (evpn signaling) is operational between PE devices.
-
VLAN and VXLAN network identifier (VNI) mapping is defined.
-
CE‑facing interfaces are configured with flexible VLAN tagging and flexible Ethernet services.
-
For multihoming, aggregated Ethernet (ae) interfaces, Link Aggregation Control Protocol (LACP), and Ethernet segment identifier (ESI) values are pre‑configured.
-
The device runs a Junos OS Evolved version that supports EVPN‑VXLAN on the target platform.
Here are some sample EVPN-VXLAN single-homed and multihomed configurations on an ACX7000 family of router.
Single Homing
EVPN-VXLAN single-homed configuration on a PE router:
set routing-instances evpn-vxlan instance-type mac-vrf set routing-instances evpn-vxlan protocols evpn encapsulation vxlan set routing-instances evpn-vxlan vtep-source-interface lo0.0 set routing-instances evpn-vxlan service-type vlan-based set routing-instances evpn-vxlan vrf-target target:100:100 set routing-instances evpn-vxlan vlans v300 vlan-id 300 set routing-instances evpn-vxlan vlans v300 interface et-0/0/2.300 set routing-instances evpn-vxlan vlans v300 vxlan vni 10300
Single-homed CE-facing interface configuration on a PE router:
set interfaces et-0/0/2 flexible-vlan-tagging set interfaces et-0/0/2 encapsulation flexible-ethernet-services set interfaces et-0/0/2 unit 300 encapsulation vlan-bridge set interfaces et-0/0/2 unit 300 vlan-id 300
Multihoming
EVPN-VXLAN multi-homed configuration on a PE router:
set routing-instances evpn-vxlan instance-type mac-vrf set routing-instances evpn-vxlan protocols evpn encapsulation vxlan set routing-instances evpn-vxlan vtep-source-interface lo0.0 set routing-instances evpn-vxlan service-type vlan-based set routing-instances evpn-vxlan vrf-target target:100:100 set routing-instances evpn-vxlan vlans v300 vlan-id 300 set routing-instances evpn-vxlan vlans v300 interface ae10.300 set routing-instances evpn-vxlan vlans v300 vxlan vni 10300
Multihomed CE-facing interface configuration on a PE router:
set interfaces ae10 flexible-vlan-tagging set interfaces ae10 encapsulation flexible-ethernet-services set interfaces ae10 aggregated-ether-options lacp active set interfaces ae10 aggregated-ether-options lacp system-id 01:02:03:04:05:00 set interfaces ae10 unit 300 encapsulation vlan-bridge set interfaces ae10 unit 300 vlan-id 300 set interfaces ae10 unit 300 esi 00:11:00:00:00:00:01:00:00:01 set interfaces ae10 unit 300 esi all-active
Here is a sample load-balancing configuration.
set policy-options policy-statement Load_Balance term Load-Bal then load-balance per-packet set policy-options policy-statement Load_Balance term Load-Bal then accept set routing-options forwarding-table export Load_Balance