Description

This article provides example router configurations and the verification output for a l2backhaul-vpn instance with a minimum configuration using MX Series devices.

Symptoms

This example illustrates ISP retailers sharing access to a wholesaler network. The wholesaler network contains a Layer 2 Network access router and a Virtual Private LAN Service (VPLS) network-to-network interface (NNI) router.

The router configurations provided below is for a Layer 2 Wholesale Network with the fully static (all interfaces, VLANs, and routing instances are configured statically) configuration option.

Notes:
  • Layer 2 Wholesale Network with only stacked (or dual) VLAN tagging is supported.
  • Single VLAN tagging is currently not supported. 

Solution

Topology:

alt

As explained in the technical documentation for instance-role , the following explains which router is the access router and NMI router in our topology:

instance-role access : Instance role access refers to Layer 2 Wholesale network as an access routing instance. While using dynamic VLAN configuration options, when the first packet is received from a given client, authentication for the client initiates with an external entity (for example, RADIUS). If authentication is successful, a logical interface is created with the appropriate outer and inner VLAN tags for that client. In our example, R1 is acting as Access router, using Fully Static configuration option.

instance-role nni : Instance role access refers to Layer 2 Wholesale network a network to network interface (NNI) routing instance. When defined for this role, only outer VLAN tags are learned. In addition, when the NNI routing instance receives a response from the ISP, the packets are forwarded to the appropriate client, provided the packet has the same two tags that were verified during authentication. In our example, R2 is acting as NNI router, using Fully Static configuration option.


Configurations:

Access router (R1): 

set chassis fpc 1 pic 0 tunnel-services bandwidth 1g
set interfaces xe-0/0/1 unit 0 family inet address 192.168.100.1/30
set interfaces xe-0/0/1 unit 0 family mpls
set interfaces xe-4/0/0 flexible-vlan-tagging
set interfaces xe-4/0/0 encapsulation flexible-ethernet-services
set interfaces xe-4/0/0 unit 7001 encapsulation vlan-vpls
set interfaces xe-4/0/0 unit 7001 vlan-id 1937
set interfaces xe-4/0/0 unit 7001 input-vlan-map swap-push
set interfaces xe-4/0/0 unit 7001 input-vlan-map tag-protocol-id 0x8100
set interfaces xe-4/0/0 unit 7001 input-vlan-map inner-tag-protocol-id 0x8100
set interfaces xe-4/0/0 unit 7001 input-vlan-map vlan-id 3171
set interfaces xe-4/0/0 unit 7001 input-vlan-map inner-vlan-id 3002
set interfaces xe-4/0/0 unit 7001 output-vlan-map pop-swap
set interfaces xe-4/0/0 unit 7001 output-vlan-map inner-tag-protocol-id 0x8100
set interfaces xe-4/0/0 unit 7001 family vpls
set protocols mpls interface xe-0/0/1.0
set protocols bgp group core type internal
set protocols bgp group core local-address 1.1.1.1
set protocols bgp group core family l2vpn signaling
set protocols bgp group core neighbor 2.2.2.2
set protocols ospf area 0.0.0.0 interface xe-0/0/1.0
set protocols ospf area 0.0.0.0 interface lo0.0
set protocols ldp interface xe-0/0/1.0
set protocols ldp interface lo0.0
set routing-instances vpls-access vlan-model one-to-one
set routing-instances vpls-access instance-role access
set routing-instances vpls-access instance-type l2backhaul-vpn
set routing-instances vpls-access interface xe-4/0/0.7001
set routing-instances vpls-access no-local-switching
set routing-instances vpls-access route-distinguisher 100:100
set routing-instances vpls-access vrf-target target:100:100
set routing-instances vpls-access protocols vpls site-range 20
set routing-instances vpls-access protocols vpls mac-table-size 1048575
set routing-instances vpls-access protocols vpls no-tunnel-services
set routing-instances vpls-access protocols vpls site Site2 site-identifier 2
set routing-instances vpls-access protocols vpls site Site2 interface xe-4/0/0.7001

NNI router (R2): 

set chassis aggregated-devices ethernet device-count 5
set chassis fpc 1 pic 0 tunnel-services bandwidth 1g
set interfaces xe-0/0/1 unit 0 family inet address 192.168.100.2/30
set interfaces xe-0/0/1 unit 0 family mpls
set interfaces xe-1/3/1 gigether-options 802.3ad ae0
set interfaces ae0 flexible-vlan-tagging
set interfaces ae0 encapsulation flexible-ethernet-services
set interfaces ae0 aggregated-ether-options lacp active
set interfaces ae0 unit 7000 encapsulation vlan-vpls
set interfaces ae0 unit 7000 vlan-tags outer 3171
set interfaces ae0 unit 7000 vlan-tags inner 3002
set interfaces lo0 unit 0 family inet address 2.2.2.2/32
set routing-options static route 0.0.0.0/0 next-hop 10.219.34.193
set routing-options router-id 2.2.2.2
set routing-options route-distinguisher-id 2.2.2.2
set routing-options autonomous-system 100
set protocols mpls interface xe-0/0/1.0
set protocols bgp group core type internal
set protocols bgp group core local-address 2.2.2.2
set protocols bgp group core family l2vpn signaling
set protocols bgp group core neighbor 1.1.1.1
set protocols ospf area 0.0.0.0 interface lo0.0
set protocols ospf area 0.0.0.0 interface xe-0/0/1.0
set protocols ldp interface xe-0/0/1.0
set protocols ldp interface lo0.0
set routing-instances vpls-nni vlan-model one-to-one
set routing-instances vpls-nni instance-role nni
set routing-instances vpls-nni instance-type l2backhaul-vpn
set routing-instances vpls-nni interface ae0.7000
set routing-instances vpls-nni no-local-switching
set routing-instances vpls-nni route-distinguisher 100:100
set routing-instances vpls-nni vrf-target target:100:100
set routing-instances vpls-nni protocols vpls site-range 20
set routing-instances vpls-nni protocols vpls mac-table-size 1048575
set routing-instances vpls-nni protocols vpls no-tunnel-services
set routing-instances vpls-nni protocols vpls site Site1 site-identifier 1
set routing-instances vpls-nni protocols vpls site Site1 interface ae0.7000
set routing-instances vpls-nni protocols vpls connectivity-type permanent

(Customer Edge device) R3: 

set interfaces xe-0/0/3 vlan-tagging
set interfaces xe-0/0/3 unit 0 vlan-id 1937
set interfaces xe-0/0/3 unit 0 family inet address 192.168.2.1/30

R4: 

set interfaces ge-0/0/2 unit 0 family inet address 192.168.2.2/30

SW1: 

set ethernet-switching-options dot1q-tunneling ether-type 0x8100
set chassis aggregated-devices ethernet device-count 5
set interfaces xe-0/0/1 ether-options 802.3ad ae1
set interfaces ge-0/0/2 unit 0 family ethernet-switching vlan members v3171
set interfaces ae1 aggregated-ether-options lacp active
set interfaces ae1 unit 0 family ethernet-switching port-mode trunk
set interfaces ae1 unit 0 family ethernet-switching vlan members all
set vlans v3171 vlan-id 3171
set vlans v3171 interface ge-0/0/2.0
set vlans v3171 dot1q-tunneling customer-vlans 3002

SW2: 

set interfaces ge-0/0/3 unit 0 family ethernet-switching port-mode trunk
set interfaces ge-0/0/3 unit 0 family ethernet-switching vlan members all
set interfaces ge-0/0/17 unit 0 family ethernet-switching port-mode access
set interfaces ge-0/0/17 unit 0 family ethernet-switching vlan members v3002
set vlans v3002 vlan-id 3002

Verification:

labroot@R1 # run show vpls connections |no-more
Layer-2 VPN connections:

Legend for connection status (St)
EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS
EM -- encapsulation mismatch WE -- interface and instance encaps not same
VC-Dn -- Virtual circuit down NP -- interface hardware not present
CM -- control-word mismatch -> -- only outbound connection is up
CN -- circuit not provisioned <- -- only inbound connection is up
OR -- out of range Up -- operational
OL -- no outgoing label Dn -- down
LD -- local site signaled down CF -- call admission control failure
RD -- remote site signaled down SC -- local and remote site ID collision
LN -- local site not designated LM -- local site ID not minimum designated
RN -- remote site not designated RM -- remote site ID not minimum designated
XX -- unknown connection status IL -- no incoming label
MM -- MTU mismatch MI -- Mesh-Group ID not available
BK -- Backup connection ST -- Standby connection
PF -- Profile parse failure PB -- Profile busy
RS -- remote site standby SN -- Static Neighbor
LB -- Local site not best-site RB -- Remote site not best-site
VM -- VLAN ID mismatch

Legend for interface status
Up -- operational
Dn -- down

Instance: vpls-access
Local site: Site2 (2)
connection-site Type St Time last up # Up trans
1 rmt Up Mar 7 08:52:58 2016 1
Remote PE: 2.2.2.2, Negotiated control-word: No
Incoming label: 262193, Outgoing label: 262186
Local interface: lsi.1052673, Status: Up, Encapsulation: VPLS
Description: Intf - vpls vpls-access local site 2 remote site 1


labroot@R3 # run ping 192.168.2.2 rapid count 10
Mar 07 05:12:27
PING 192.168.2.2 (192.168.2.2): 56 data bytes
!!!!!!!!!!
--- 192.168.2.2 ping statistics ---
10 packets transmitted, 10 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.675/1.077/3.855/0.934 ms


labroot@R1 # run show vpls mac-table
MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)

Routing instance : vpls-access
Bridging domain : __vpls-access__-bh, VLAN : NA
MAC MAC Logical NH RTR
address flags interface Index ID
00:00:0c:63:0b:ba D xe-4/0/0.7001
00:00:0c:63:10:00 D lsi.1052673

The l2backhaul-vpn instance-type does not perform L2 forwarding based on MAC addresses. Instead it forwards based on VLAN IDs. The source address table maintained by VPLS will be populated with VLAN IDs associated with a next-hop interface.


labroot@R1 # run show vpls mac-table extensive

MAC address: 00:00:0c:63:0b:ba
Routing instance: vpls-access
Bridging domain: __vpls-access__-bh, VLAN : NA
Learning interface: xe-4/0/0.7001
Base learning interface: xe-4/0/0.7001
Layer 2 flags: in_hash,in_ifd,in_ifl,in_vlan,in_rtt,kernel,in_ifbd
Epoch: 5 Sequence number: 1
Learning mask: 0x00000010

MAC address: 00:00:0c:63:10:00
Routing instance: vpls-access
Bridging domain: __vpls-access__-bh, VLAN : NA
Learning interface: lsi.1052673
Base learning interface: lsi.1052673
Layer 2 flags: in_hash,in_ifd,in_ifl,in_vlan,in_rtt,kernel,in_ifbd
Epoch: 0 Sequence number: 0
Learning mask: 0x00000001


labroot@R1 # run show vpls statistics
VPLS statistics:

Instance: vpls-access
Local interface: xe-4/0/0.7001, Index: 348
Broadcast packets: 1
Broadcast bytes : 60
Multicast packets: 0
Multicast bytes : 0
Flooded packets : 77
Flooded bytes : 7854
Unicast packets : 759
Unicast bytes : 77418
Current MAC count: 1
Local interface: lsi.1052673, Index: 350
Remote PE: 2.2.2.2
Broadcast packets: 0
Broadcast bytes : 0
Multicast packets: 0
Multicast bytes : 0
Flooded packets : 0
Flooded bytes : 0
Unicast packets : 400
Unicast bytes : 42362
Current MAC count: 1


labroot@R2 # run show vpls connections | no-more
Layer-2 VPN connections:

Legend for connection status (St)
EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS
EM -- encapsulation mismatch WE -- interface and instance encaps not same
VC-Dn -- Virtual circuit down NP -- interface hardware not present
CM -- control-word mismatch -> -- only outbound connection is up
CN -- circuit not provisioned <- -- only inbound connection is up
OR -- out of range Up -- operational
OL -- no outgoing label Dn -- down
LD -- local site signaled down CF -- call admission control failure
RD -- remote site signaled down SC -- local and remote site ID collision
LN -- local site not designated LM -- local site ID not minimum designated
RN -- remote site not designated RM -- remote site ID not minimum designated
XX -- unknown connection status IL -- no incoming label
MM -- MTU mismatch MI -- Mesh-Group ID not available
BK -- Backup connection ST -- Standby connection
PF -- Profile parse failure PB -- Profile busy
RS -- remote site standby SN -- Static Neighbor
LB -- Local site not best-site RB -- Remote site not best-site
VM -- VLAN ID mismatch

Legend for interface status
Up -- operational
Dn -- down

Instance: vpls-nni
Local site: Site1 (1)
connection-site Type St Time last up # Up trans
2 rmt Up Mar 7 04:20:24 2016 1
Remote PE: 1.1.1.1, Negotiated control-word: No
Incoming label: 262186, Outgoing label: 262193
Local interface: lsi.1052673, Status: Up, Encapsulation: VPLS
Description: Intf - vpls vpls-nni local site 1 remote site 2


labroot@R2 # run show vpls mac-table

MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)

Routing instance : vpls-nni
Bridging domain : __vpls-nni__-bh, VLAN : NA
MAC MAC Logical NH RTR
address flags interface Index ID
00:00:0c:63:0b:b0 D lsi.1052673
00:00:0c:63:10:00 D ae0.7000


labroot#R2   run show vpls statistics
VPLS statistics:

Instance: vpls-nni
Local interface: lsi.1052673, Index: 329
Remote PE: 1.1.1.1
Broadcast packets: 1
Broadcast bytes : 64
Multicast packets: 0
Multicast bytes : 0
Flooded packets : 1
Flooded bytes : 106
Unicast packets : 399
Unicast bytes : 42294
Current MAC count: 1
Local interface: ae0.7000, Index: 346
Broadcast packets: 1841
Broadcast bytes : 125188
Multicast packets: 0
Multicast bytes : 0
Flooded packets : 0
Flooded bytes : 0
Unicast packets : 4823
Unicast bytes : 483992
Current MAC count: 1



Related Information