In a VPLS multihoming scenario, customers may observe different behavior for the primary and backup sites on MX routers that run different Junos OS versions.
In Junos OS release 16.1 and later, when the primary and backup link is configured for VPLS multihoming, both links will be up simultaneously.
In Junos OS release 15.1 and earlier, the backup link shows as being down, whereas the primary link shows as being up.
This article explains that this is only a matter of change in display status and that there is no service impact in Junos OS release 15.1 and earlier as demonstrated with an example.
The IFL display status for the backup PE in the VPLS multihoming scenario is "down" in Junos OS release 15.1 and earlier. In MX routers that run Junos OS 16.1 and later, on the other hand, both primary and backup links are shown to be up.
In Junos OS releases 12.3R9, 13.2R6, 13.3R5, 14.1R3, 14.2R2, and 15.1R1, there has been a change in IFL display status for the backup PE in the VPLS multihoming scenario. With this change, the IFL status shows as being "down" on the backup PE although there is no functionality impact associated with this status. The IFL comes up fine when the backup site takes over after the primary site goes down, as demonstrated below.
Although there is no operational impact, it can create confusion when customers perform a Junos OS upgrade on any of the above specified versions (12.3R9, 13.2R6, 13.3R5, 14.1R3, 14.2R2, and 15.1R1). It may be assumed that VPLS multihoming is broken when that is not the case.
This is a cosmetic issue and can be ignored because there is no service impact as demonstrated below.
On MX devices that run Junos OS release 15.1 and earlier, when you configure VPLS multihoming with BGP as the signaling protocol, the backup site will show as being down. However, there should not be any service impact on the network due to this, because the backup site will take over when the primary site goes down.
On devices that run Junos OS release 16.1 and later, the backup site will always show as being up and will take over when the primary site is down.
Scenario 1 : When using Junos OS release 16.1 and later (both primary and backup link are up)
Below is a sample configuration:
CE1: ge-1/0/2.0=10.0.0.1/24 lo0.1=1.1.1.1/32 PE1: ge-1/0/3.0=23.0.0.2/24 (towards P1) lo0.1=1.1.1.1/32 ge-1/1/2.0 (towards CE1) P1: ge-1/1/3.0=23.0.0.3/24 (towards PE1) ge-1/0/4.0=34.0.0.3/24 (towards PE2) ge-1/0/6.0=37.0.0.3/24 (towards PE3) lo0.2 = 2.2.2.2/32 PE2: ge-1/1/4.0= 34.0.0.4/24 (towards P1) ge-1/0/5.0 (towards CE2) lo0.4= 4.4.4.4/32 PE3:ge-1/0/7.0 (towards CE2) ge-1/1/6.0 = 37.0.0.7/24 (towards P1) lo0.7= 5.5.5.5/32 CE2: ge-1/1/5.0 = 10.0.0.2/24 (towards PE2) ge-1/1/7.0 = 10.0.0.3/24 (towards PE3) lo0.6 = 6.6.6.6/32
user@PE1> show version Hostname: PE1 Model: mx240 Junos: 18.2R1.9 JUNOS OS Kernel 64-bit [20180614.6c3f819_builder_stable_11] JUNOS OS libs [20180614.6c3f819_builder_stable_11] JUNOS OS runtime [20180614.6c3f819_builder_stable_11] JUNOS OS time zone information [20180614.6c3f819_builder_stable_11]
user@PE2> show version Hostname: PE2 Model: mx240 Junos: 18.2R1.9 JUNOS OS Kernel 64-bit [20180614.6c3f819_builder_stable_11] JUNOS OS libs [20180614.6c3f819_builder_stable_11] JUNOS OS runtime [20180614.6c3f819_builder_stable_11] JUNOS OS time zone information [20180614.6c3f819_builder_stable_11]
user@PE3> show version Hostname: PE3 Model: mx240 Junos: 18.2R1.9 JUNOS OS Kernel 64-bit [20180614.6c3f819_builder_stable_11] JUNOS OS libs [20180614.6c3f819_builder_stable_11] JUNOS OS runtime [20180614.6c3f819_builder_stable_11] JUNOS OS time zone information [20180614.6c3f819_builder_stable_11] user@PE1> show configuration | display set set interfaces ge-1/0/3 unit 0 family inet address 23.0.0.2/24 set interfaces ge-1/0/3 unit 0 family mpls set interfaces ge-1/1/2 encapsulation ethernet-vpls set interfaces ge-1/1/2 unit 0 family vpls set interfaces lo0 unit 2 family inet address 2.2.2.2/32 set interfaces lo0 unit 2 family mpls set protocols mpls interface ge-1/0/3.0 set protocols mpls interface lo0.2 set protocols bgp group IBGP type internal set protocols bgp group IBGP family inet unicast set protocols bgp group IBGP family l2vpn signaling set protocols bgp group IBGP neighbor 4.4.4.4 local-address 2.2.2.2 set protocols bgp group IBGP neighbor 5.5.5.5 local-address 2.2.2.2 set protocols ospf area 0.0.0.0 interface ge-1/0/3.0 set protocols ospf area 0.0.0.0 interface lo0.2 set protocols ldp interface ge-1/0/3.0 set protocols ldp interface lo0.2 set routing-instances VPLS100 instance-type vpls set routing-instances VPLS100 interface ge-1/1/2.0 set routing-instances VPLS100 route-distinguisher 1:1 set routing-instances VPLS100 vrf-target target:100:100 set routing-instances VPLS100 protocols vpls interface ge-1/1/2.0 set routing-instances VPLS100 protocols vpls no-tunnel-services set routing-instances VPLS100 protocols vpls site ABC site-identifier 10 set routing-options autonomous-system 100
user@P1> show version Hostname: P1 Model: mx240 Junos: 18.2R1.9 JUNOS OS Kernel 64-bit [20180614.6c3f819_builder_stable_11] JUNOS OS libs [20180614.6c3f819_builder_stable_11] JUNOS OS runtime [20180614.6c3f819_builder_stable_11] JUNOS OS time zone information [20180614.6c3f819_builder_stable_11]
user@PE2> show configuration | display set set interfaces ge-1/0/5 encapsulation ethernet-vpls set interfaces ge-1/0/5 unit 0 family vpls set interfaces ge-1/1/4 unit 0 family inet address 34.0.0.4/24 set interfaces ge-1/1/4 unit 0 family mpls set interfaces lo0 unit 4 family inet address 4.4.4.4/32 set interfaces lo0 unit 4 family mpls set protocols mpls interface ge-1/1/4.0 set protocols mpls interface lo0.4 set protocols bgp group IBGP type internal set protocols bgp group IBGP family inet unicast set protocols bgp group IBGP family l2vpn signaling set protocols bgp group IBGP neighbor 2.2.2.2 local-address 4.4.4.4 set protocols ospf area 0.0.0.0 interface ge-1/1/4.0 set protocols ospf area 0.0.0.0 interface lo0.4 set protocols ldp interface ge-1/1/4.0 set protocols ldp interface lo0.4 set routing-instances VPLS100 instance-type vpls set routing-instances VPLS100 interface ge-1/0/5.0 set routing-instances VPLS100 route-distinguisher 1:1 set routing-instances VPLS100 vrf-target target:100:100 set routing-instances VPLS100 protocols vpls mac-table-size 1024 set routing-instances VPLS100 protocols vpls mac-statistics set routing-instances VPLS100 protocols vpls no-tunnel-services set routing-instances VPLS100 protocols vpls site DEF site-identifier 20 set routing-instances VPLS100 protocols vpls site DEF multi-homing set routing-instances VPLS100 protocols vpls site DEF site-preference primary set routing-options autonomous-system 100 user@PE3> show configuration | display set set interfaces ge-1/0/7 encapsulation ethernet-vpls set interfaces ge-1/0/7 unit 0 family vpls set interfaces ge-1/1/6 unit 0 family inet address 37.0.0.7/24 set interfaces ge-1/1/6 unit 0 family mpls set interfaces lo0 unit 7 family inet address 5.5.5.5/32 set interfaces lo0 unit 7 family mpls set protocols mpls interface ge-1/1/6.0 set protocols mpls interface lo0.7 set protocols bgp group IBGP type internal set protocols bgp group IBGP local-address 5.5.5.5 set protocols bgp group IBGP family inet unicast set protocols bgp group IBGP family l2vpn signaling set protocols bgp group IBGP neighbor 2.2.2.2 local-address 5.5.5.5 set protocols ospf area 0.0.0.0 interface ge-1/1/6.0 set protocols ospf area 0.0.0.0 interface lo0.7 set protocols ldp interface ge-1/1/6.0 set protocols ldp interface lo0.7 set routing-instances VPLS100 instance-type vpls set routing-instances VPLS100 interface ge-1/0/7.0 set routing-instances VPLS100 route-distinguisher 1:1 set routing-instances VPLS100 vrf-target target:100:100 set routing-instances VPLS100 protocols vpls mac-table-size 1024 set routing-instances VPLS100 protocols vpls mac-statistics set routing-instances VPLS100 protocols vpls no-tunnel-services set routing-instances VPLS100 protocols vpls site DEF site-identifier 20 set routing-instances VPLS100 protocols vpls site DEF multi-homing set routing-instances VPLS100 protocols vpls site DEF site-preference backup <========= set routing-options autonomous-system 100 user@P1> show configuration | display set set interfaces ge-1/0/4 unit 0 family inet address 34.0.0.3/24 set interfaces ge-1/0/4 unit 0 family mpls set interfaces ge-1/0/6 unit 0 family inet address 37.0.0.3/24 set interfaces ge-1/0/6 unit 0 family mpls set interfaces ge-1/1/3 unit 0 family inet address 23.0.0.3/24 set interfaces ge-1/1/3 unit 0 family mpls set interfaces lo0 unit 3 family inet address 3.3.3.3/32 set interfaces lo0 unit 3 family mpls set protocols mpls interface ge-1/1/3.0 set protocols mpls interface lo0.3 set protocols mpls interface ge-1/0/4.0 set protocols mpls interface ge-1/0/6.0 set protocols ospf area 0.0.0.0 interface all set protocols ldp interface ge-1/0/4.0 set protocols ldp interface ge-1/0/6.0 set protocols ldp interface ge-1/1/3.0 set protocols ldp interface lo0.3 user@CE1> show configuration | display set set interfaces ge-1/0/2 unit 0 family inet address 10.0.0.1/24 set interfaces lo0 unit 1 family inet address 1.1.1.1/32 user@CE2> show configuration | display set set interfaces ge-1/1/5 unit 0 family inet address 10.0.0.2/24 set interfaces ge-1/1/7 unit 0 family inet address 10.0.0.3/24 set interfaces lo0 unit 6 family inet address 6.6.6.6/32 user@PE1> show vpls connections Layer-2 VPN connections: Legend for connection status (St) EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS EM -- encapsulation mismatch WE -- interface and instance encaps not same VC-Dn -- Virtual circuit down NP -- interface hardware not present CM -- control-word mismatch -> -- only outbound connection is up CN -- circuit not provisioned <- -- only inbound connection is up OR -- out of range Up -- operational OL -- no outgoing label Dn -- down LD -- local site signaled down CF -- call admission control failure RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label MM -- MTU mismatch MI -- Mesh-Group ID not available BK -- Backup connection ST -- Standby connection PF -- Profile parse failure PB -- Profile busy RS -- remote site standby SN -- Static Neighbor LB -- Local site not best-site RB -- Remote site not best-site VM -- VLAN ID mismatch HS -- Hot-standby Connection Legend for interface status Up -- operational Dn -- down Instance: VPLS100 Edge protection: Not-Primary Local site: ABC (10) connection-site Type St Time last up # Up trans 20 rmt Up Mar 13 20:42:06 2019 1 Remote PE: 4.4.4.4, Negotiated control-word: No Incoming label: 262156, Outgoing label: 262154 Local interface: lsi.101711872, Status: Up, Encapsulation: VPLS Description: Intf - vpls VPLS100 local site 10 remote site 20 Flow Label Transmit: No, Flow Label Receive: No user@PE2> show vpls connections Layer-2 VPN connections: Legend for connection status (St) EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS EM -- encapsulation mismatch WE -- interface and instance encaps not same VC-Dn -- Virtual circuit down NP -- interface hardware not present CM -- control-word mismatch -> -- only outbound connection is up CN -- circuit not provisioned <- -- only inbound connection is up OR -- out of range Up -- operational OL -- no outgoing label Dn -- down LD -- local site signaled down CF -- call admission control failure RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label MM -- MTU mismatch MI -- Mesh-Group ID not available BK -- Backup connection ST -- Standby connection PF -- Profile parse failure PB -- Profile busy RS -- remote site standby SN -- Static Neighbor LB -- Local site not best-site RB -- Remote site not best-site VM -- VLAN ID mismatch HS -- Hot-standby Connection Legend for interface status Up -- operational Dn -- down Instance: VPLS100 Edge protection: Not-Primary Local site: DEF (20) connection-site Type St Time last up # Up trans 10 rmt Up Mar 13 20:42:06 2019 1 Remote PE: 2.2.2.2, Negotiated control-word: No Incoming label: 262154, Outgoing label: 262156 Local interface: lsi.17825792, Status: Up, Encapsulation: VPLS Description: Intf - vpls VPLS100 local site 20 remote site 10 Flow Label Transmit: No, Flow Label Receive: No user@PE3> show vpls connections Layer-2 VPN connections: Legend for connection status (St) EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS EM -- encapsulation mismatch WE -- interface and instance encaps not same VC-Dn -- Virtual circuit down NP -- interface hardware not present CM -- control-word mismatch -> -- only outbound connection is up CN -- circuit not provisioned <- -- only inbound connection is up OR -- out of range Up -- operational OL -- no outgoing label Dn -- down LD -- local site signaled down CF -- call admission control failure RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label MM -- MTU mismatch MI -- Mesh-Group ID not available BK -- Backup connection ST -- Standby connection PF -- Profile parse failure PB -- Profile busy RS -- remote site standby SN -- Static Neighbor LB -- Local site not best-site RB -- Remote site not best-site VM -- VLAN ID mismatch HS -- Hot-standby Connection Legend for interface status Up -- operational Dn -- down Instance: VPLS100 Edge protection: Not-Primary Local site: DEF (20) connection-site Type St Time last up # Up trans 10 rmt Up Mar 15 00:09:52 2019 1 Remote PE: 2.2.2.2, Negotiated control-word: No Incoming label: 262154, Outgoing label: 262156 Local interface: lsi.51380480, Status: Up, Encapsulation: VPLS Description: Intf - vpls VPLS100 local site 20 remote site 10 Flow Label Transmit: No, Flow Label Receive: No user@PE1# run show interfaces terse | match ge-1/1/2 ge-1/1/2 up up ge-1/1/2.0 up up vpls user@PE3# run show interfaces terse | match ge-1/0/7 ge-1/0/7 up up ge-1/0/7.0 up up vpls user@PE2# run show interfaces terse | match ge-1/0/5 ge-1/0/5 up up ge-1/0/5.0 up up vpls user@CE1> ping 10.0.0.2 PING 10.0.0.2 (10.0.0.2): 56 data bytes 64 bytes from 10.0.0.2: icmp_seq=0 ttl=64 time=1.085 ms 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.880 ms 64 bytes from 10.0.0.2: icmp_seq=2 ttl=64 time=0.958 ms 64 bytes from 10.0.0.2: icmp_seq=3 ttl=64 time=0.951 ms ^C --- 10.0.0.2 ping statistics --- 4 packets transmitted, 4 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.880/0.969/1.085/0.074 ms
Scenario 2: When using Junos OS release prior to release 15.1 (primary is up and backup is down)
Below is the sample configuration:
+---------+ | PE1 | +-------------------> +------------------+ | | | v | +---------+ +---+----+ +--------+ | | | |PE3 | | | P +------------> | +------+ | | | | | +---^----+ +----+---+ | | | | | CE1 | +---------+ | | +--+---+ | PE2 | | | | | | | | +----------------->+ +-------------------+ +----v----+ +---------+ | | | CE2 | +---------+
From the above topology, CE1 will connect to PE1 as the primary link and PE2 as the backup link.
PE2
user@PE2> show version Hostname: PE2 Model: mx240 Junos: 14.2R6.5 JUNOS Base OS Software Suite [14.2R6.5] JUNOS Base OS boot [14.2R6.5] user@PE2> show configuration groups vpls-ce1 | display set set groups vpls-ce1 interfaces ae0 unit 541 description to-CE1 set groups vpls-ce1 interfaces ae0 unit 541 encapsulation vlan-vpls set groups vpls-ce1 interfaces ae0 unit 541 vlan-id 541 set groups vpls-ce1 interfaces ae0 unit 541 family vpls policer input vpls-100m set groups vpls-ce1 interfaces ae0 unit 541 family vpls policer output vpls-100m set groups vpls-ce1 firewall policer vpls-100m if-exceeding bandwidth-limit 100m set groups vpls-ce1 firewall policer vpls-100m if-exceeding burst-size-limit 1m set groups vpls-ce1 firewall policer vpls-100m then discard set groups vpls-ce1 routing-instances VPLS-CE1 instance-type vpls set groups vpls-ce1 routing-instances VPLS-CE1 interface ae0.541 set groups vpls-ce1 routing-instances VPLS-CE1 route-distinguisher 2.2.2.2:100 set groups vpls-ce1 routing-instances VPLS-CE1 vrf-target target:15533:100 set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls mac-table-size 1024 set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls mac-statistics set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls no-tunnel-services set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls site vpls-1 site-identifier 1 set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls site vpls-1 multi-homing set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls site vpls-1 site-preference backup set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls site vpls-1 interface ae0.541 user@PE2> show mpls interface Interface State Administrative groups (x: extended) ae1.0 Up <none> user@PE2> show vpls connections Layer-2 VPN connections: Legend for connection status (St) EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS EM -- encapsulation mismatch WE -- interface and instance encaps not same VC-Dn -- Virtual circuit down NP -- interface hardware not present CM -- control-word mismatch -> -- only outbound connection is up CN -- circuit not provisioned <- -- only inbound connection is up OR -- out of range Up -- operational OL -- no outgoing label Dn -- down LD -- local site signaled down CF -- call admission control failure RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label MM -- MTU mismatch MI -- Mesh-Group ID not available BK -- Backup connection ST -- Standby connection PF -- Profile parse failure PB -- Profile busy RS -- remote site standby SN -- Static Neighbor LB -- Local site not best-site RB -- Remote site not best-site VM -- VLAN ID mismatch Legend for interface status Up -- operational Dn -- down Instance: VPLS-CE1 Edge protection: Not-Primary Local site: vpls-1 (1) connection-site Type St Time last up # Up trans 1 rmt LN 2 rmt LN >>>>>>>>>> Will not form connectivity with any other sites user@PE2> show interfaces terse | match ae0 ge-0/0/2.541 up up aenet --> ae0.541 ge-0/0/2.32767 up up aenet --> ae0.32767 ge-0/0/3.541 up up aenet --> ae0.541 ge-0/0/3.32767 up up aenet --> ae0.32767 ae0 up up ae0.541 up down vpls >>>>>>>>>>> intf will show as down. ae0.32767 up up multiservice
PE1
user@PE1> show version Hostname: PE1 Model: mx240 Junos: 14.2R6.5 JUNOS Base OS Software Suite [14.2R6.5] JUNOS Base OS boot [14.2R6.5] user@PE1> show configuration groups vpls-ce1 | display set set groups vpls-ce1 interfaces ae0 unit 541 description to-CE1 set groups vpls-ce1 interfaces ae0 unit 541 encapsulation vlan-vpls set groups vpls-ce1 interfaces ae0 unit 541 vlan-id 541 set groups vpls-ce1 interfaces ae0 unit 541 family vpls policer input vpls-100m set groups vpls-ce1 interfaces ae0 unit 541 family vpls policer output vpls-100m set groups vpls-ce1 firewall policer vpls-100m if-exceeding bandwidth-limit 100m set groups vpls-ce1 firewall policer vpls-100m if-exceeding burst-size-limit 1m set groups vpls-ce1 firewall policer vpls-100m then discard set groups vpls-ce1 routing-instances VPLS-CE1 instance-type vpls set groups vpls-ce1 routing-instances VPLS-CE1 interface ae0.541 set groups vpls-ce1 routing-instances VPLS-CE1 route-distinguisher 3.3.3.3:100 set groups vpls-ce1 routing-instances VPLS-CE1 vrf-target target:15533:100 set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls mac-table-size 1024 set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls mac-statistics set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls no-tunnel-services set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls site vpls-1 site-identifier 1 set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls site vpls-1 multi-homing set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls site vpls-1 site-preference primary set groups vpls-ce1 routing-instances VPLS-CE1 protocols vpls site vpls-1 interface ae0.541 user@PE1> show mpls interface Interface State Administrative groups (x: extended) ae1.0 Up <none> user@PE1> show vpls connections Layer-2 VPN connections: Legend for connection status (St) EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS EM -- encapsulation mismatch WE -- interface and instance encaps not same VC-Dn -- Virtual circuit down NP -- interface hardware not present CM -- control-word mismatch -> -- only outbound connection is up CN -- circuit not provisioned <- -- only inbound connection is up OR -- out of range Up -- operational OL -- no outgoing label Dn -- down LD -- local site signaled down CF -- call admission control failure RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label MM -- MTU mismatch MI -- Mesh-Group ID not available BK -- Backup connection ST -- Standby connection PF -- Profile parse failure PB -- Profile busy RS -- remote site standby SN -- Static Neighbor LB -- Local site not best-site RB -- Remote site not best-site VM -- VLAN ID mismatch Legend for interface status Up -- operational Dn -- down Instance: VPLS-CE1 Edge protection: Not-Primary Local site: vpls-1 (1) connection-site Type St Time last up # Up trans 1 rmt RN 2 rmt Up Mar 27 23:57:07 2019 1 Remote PE: 4.4.4.4, Negotiated control-word: No Incoming label: 262146, Outgoing label: 262145 Local interface: lsi.1048576, Status: Up, Encapsulation: VPLS Description: Intf - vpls VPLS-CE1 local site 1 remote site 2 user@PE1> show interfaces terse | match ae0 ge-0/0/0.541 up up aenet --> ae0.541 ge-0/0/0.32767 up up aenet --> ae0.32767 ge-0/0/1.541 up up aenet --> ae0.541 ge-0/0/1.32767 up up aenet --> ae0.32767 ae0 up up ae0.541 up up vpls ae0.32767 up up multiservice
PE3
user@PE3> show version Hostname: PE3 Model: mx240 Junos: 14.2R6.5 JUNOS Base OS Software Suite [14.2R6.5] JUNOS Base OS boot [14.2R6.5] user@PE3> show configuration groups vpls-ce2 | display set set groups vpls-ce2 interfaces ae0 unit 541 description to-CE1 set groups vpls-ce2 interfaces ae0 unit 541 encapsulation vlan-vpls set groups vpls-ce2 interfaces ae0 unit 541 vlan-id 541 set groups vpls-ce2 interfaces ae0 unit 541 family vpls policer input vpls-100m set groups vpls-ce2 interfaces ae0 unit 541 family vpls policer output vpls-100m set groups vpls-ce2 firewall policer vpls-100m if-exceeding bandwidth-limit 100m set groups vpls-ce2 firewall policer vpls-100m if-exceeding burst-size-limit 1m set groups vpls-ce2 firewall policer vpls-100m then discard set groups vpls-ce2 routing-instances vpls-ce2 instance-type vpls set groups vpls-ce2 routing-instances vpls-ce2 interface ae0.541 set groups vpls-ce2 routing-instances vpls-ce2 route-distinguisher 4.4.4.4:100 set groups vpls-ce2 routing-instances vpls-ce2 vrf-target target:15533:100 set groups vpls-ce2 routing-instances vpls-ce2 protocols vpls mac-table-size 1024 set groups vpls-ce2 routing-instances vpls-ce2 protocols vpls mac-statistics set groups vpls-ce2 routing-instances vpls-ce2 protocols vpls no-tunnel-services set groups vpls-ce2 routing-instances vpls-ce2 protocols vpls site vpls-2 site-identifier 2 set groups vpls-ce2 routing-instances vpls-ce2 protocols vpls site vpls-2 interface ae0.541 user@PE3> show vpls connections Layer-2 VPN connections: Legend for connection status (St) EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS EM -- encapsulation mismatch WE -- interface and instance encaps not same VC-Dn -- Virtual circuit down NP -- interface hardware not present CM -- control-word mismatch -> -- only outbound connection is up CN -- circuit not provisioned <- -- only inbound connection is up OR -- out of range Up -- operational OL -- no outgoing label Dn -- down LD -- local site signaled down CF -- call admission control failure RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label MM -- MTU mismatch MI -- Mesh-Group ID not available BK -- Backup connection ST -- Standby connection PF -- Profile parse failure PB -- Profile busy RS -- remote site standby SN -- Static Neighbor LB -- Local site not best-site RB -- Remote site not best-site VM -- VLAN ID mismatch Legend for interface status Up -- operational Dn -- down Instance: vpls-ce2 Edge protection: Not-Primary Local site: vpls-2 (2) connection-site Type St Time last up # Up trans 1 rmt Up Mar 27 23:57:07 2019 1 Remote PE: 3.3.3.3, Negotiated control-word: No Incoming label: 262145, Outgoing label: 262146 Local interface: lsi.1048576, Status: Up, Encapsulation: VPLS Description: Intf - vpls vpls-ce2 local site 2 remote site 1 user@PE3> show interfaces terse | match ae0 ge-0/1/4.541 up up aenet --> ae0.541 ge-0/1/4.32767 up up aenet --> ae0.32767 ge-0/1/5.541 up up aenet --> ae0.541 ge-0/1/5.32767 up up aenet --> ae0.32767 ae0 up up ae0.541 up up vpls ae0.32767 up up multiservice
When the primary link goes down, the backup link will come up as seen below:
Note: MPLS connectivity on the primary is disabled here:
user@PE1> edit Mar 28 00:23:02 Entering configuration mode [edit] user@PE1# set interfaces ae1.0 disable Mar 28 00:23:14 [edit] user@PE1# commit Mar 28 00:23:16 commit complete [edit] user@PE1# run show vpls connections Mar 28 00:23:21 Layer-2 VPN connections: Legend for connection status (St) EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS EM -- encapsulation mismatch WE -- interface and instance encaps not same VC-Dn -- Virtual circuit down NP -- interface hardware not present CM -- control-word mismatch -> -- only outbound connection is up CN -- circuit not provisioned <- -- only inbound connection is up OR -- out of range Up -- operational OL -- no outgoing label Dn -- down LD -- local site signaled down CF -- call admission control failure RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label MM -- MTU mismatch MI -- Mesh-Group ID not available BK -- Backup connection ST -- Standby connection PF -- Profile parse failure PB -- Profile busy RS -- remote site standby SN -- Static Neighbor LB -- Local site not best-site RB -- Remote site not best-site VM -- VLAN ID mismatch Legend for interface status Up -- operational Dn -- down Instance: VPLS-CE1 Edge protection: Not-Primary Local site: vpls-1 (1) No connections found.
Backup PE2 router took over connectivity >>>>>>>>>
user@PE2 show vpls connections Mar 28 00:24:01 Layer-2 VPN connections: Legend for connection status (St) EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS EM -- encapsulation mismatch WE -- interface and instance encaps not same VC-Dn -- Virtual circuit down NP -- interface hardware not present CM -- control-word mismatch -> -- only outbound connection is up CN -- circuit not provisioned <- -- only inbound connection is up OR -- out of range Up -- operational OL -- no outgoing label Dn -- down LD -- local site signaled down CF -- call admission control failure RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label MM -- MTU mismatch MI -- Mesh-Group ID not available BK -- Backup connection ST -- Standby connection PF -- Profile parse failure PB -- Profile busy RS -- remote site standby SN -- Static Neighbor LB -- Local site not best-site RB -- Remote site not best-site VM -- VLAN ID mismatch Legend for interface status Up -- operational Dn -- down Instance: VPLS-CE1 Edge protection: Not-Primary Local site: vpls-1 (1) connection-site Type St Time last up # Up trans 2 rmt Up Mar 28 00:23:52 2019 1 Remote PE: 4.4.4.4, Negotiated control-word: No Incoming label: 262146, Outgoing label: 262145 Local interface: lsi.1048576, Status: Up, Encapsulation: VPLS Description: Intf - vpls VPLS-CE1 local site 1 remote site 2 user@PE2> show interfaces terse | match ae0 Mar 28 00:24:27 ge-0/0/2.541 up up aenet --> ae0.541 ge-0/0/2.32767 up up aenet --> ae0.32767 ge-0/0/3.541 up up aenet --> ae0.541 ge-0/0/3.32767 up up aenet --> ae0.32767 ae0 up up ae0.541 up up vpls ae0.32767 up up multiservice
2020-02-24: minor non-technical edits