美文网首页
Juniper vMX 实现EVPN

Juniper vMX 实现EVPN

作者: 伤脑筋0_0 | 来源:发表于2017-04-16 04:04 被阅读0次

    实验topo


    EVPN-TOPO.png

    说明：

    版本：
juniper@vMX-1# run show version 
Hostname: vMX-1
Model: vmx
Junos: 14.1R1.10
......

vMX网卡对应关系
网卡1     RE
网卡2     RE
网卡3     ge-0/0/0
网卡4     ge-0/0/1
.
.
.
网卡10    ge-0/0/7

    logical-system不支持EVPN（也就是只能在全局路由器下的routing-instance 才能用EVPN），所以这里跑了两台vMX,两台的ge-0/0/3桥接在一起（也就是两台vmx的第6块网卡桥接到一个VMnet上）。分别把两台的ge-0/0/1.100放入evpn instance 里面（全局路由器ge-0/0/1使用vlan-tagging），在这之前需要把各自vMX的ge-0/0/1和ge-0/0/2桥接在一起（把vMX1的ge-0/0/1和ge-0/0/2桥接在VMnetA，vMX2的ge-0/0/1和ge-0/0/2桥接在VMnetB）。两台vMX分别分出一个logical-system，放入接口ge-0/0/1.100来模拟用户。

    vMX1的配置

    logical-systems {
    r1 {
        interfaces {
            ge-0/0/2 {
                unit 100 {
                    vlan-id 100;
                    family inet {
                        address 192.168.14.1/24;
                    }
                }
            }
        }
  }
interfaces {
    ge-0/0/1 {
        flexible-vlan-tagging;
        encapsulation flexible-ethernet-services;
        unit 100 {
            encapsulation vlan-bridge;
            vlan-id 100;
        }
    }
    ge-0/0/2 {
        vlan-tagging;
    }
    ge-0/0/3 {
        unit 0 {
            family inet {
                address 192.168.23.2/24;
            }
            family mpls;
        }
    }
    ge-0/0/7 {
        unit 0 {
            family inet {
                address 172.16.33.100/24;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 2.2.2.2/32;
            }
        }
    }
}
routing-options {
    autonomous-system 65000;
}
protocols {
    mpls {
        interface ge-0/0/3.0;
    }
    bgp {
        group internal {
            type internal;
            local-address 2.2.2.2;
            family inet-vpn {
                unicast;
            }
            family evpn {
                signaling;
            }
            neighbor 3.3.3.3;
        }
    }
    ospf {
        area 0.0.0.0 {
            interface lo0.0 {
                passive;
            }
            interface ge-0/0/3.0;
        }
    }
    ldp {
        interface ge-0/0/3.0;
    }
}
routing-instances {
    EVPN100 {
        instance-type evpn;
        vlan-id 100;
        interface ge-0/0/1.100;
        route-distinguisher 2.2.2.2:1;
        vrf-target target:1:1;
        protocols {
            evpn;
        }
    }
}

    vMX2的配置

    logical-systems {
    r4 {
        interfaces {
            ge-0/0/2 {
                unit 100 {
                    vlan-id 100;
                    family inet {
                        address 192.168.14.4/24;
                    }
                }
            }
        }
    }
interfaces {
    ge-0/0/1 {
        flexible-vlan-tagging;
        encapsulation flexible-ethernet-services;
        unit 100 {
            encapsulation vlan-bridge;
            vlan-id 100;
        }
    }
    ge-0/0/2 {
        vlan-tagging;
    }
    ge-0/0/3 {
        unit 0 {
            family inet {
                address 192.168.23.3/24;
            }
            family mpls;
        }
    }
    ge-0/0/7 {
        unit 0 {
            family inet {
                address 172.16.33.200/24;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 3.3.3.3/32;
            }
        }
    }
}
routing-options {
    autonomous-system 65000;
}
protocols {
    mpls {
        interface ge-0/0/3.0;
    }
    bgp {
        group internal {
            type internal;
            local-address 3.3.3.3;
            family inet-vpn {
                unicast;
            }
            family evpn {
                signaling;
            }
            neighbor 2.2.2.2;
        }
    }
    ospf {
        area 0.0.0.0 {
            interface lo0.0 {
                passive;
            }
            interface ge-0/0/3.0;
        }
    }
    ldp {
        interface ge-0/0/3.0;
    }
}
routing-instances {
    EVPN100 {
        instance-type evpn;
        vlan-id 100;
        interface ge-0/0/1.100;
        route-distinguisher 2.2.2.2:1;
        vrf-target target:1:1;
        protocols {
            evpn;
        }
    }
}

    查看路由表vMX1

    juniper@vMX-1> show route table EVPN100.evpn.0 

EVPN100.evpn.0: 4 destinations, 4 routes (4 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

2:2.2.2.2:1::100::00:05:86:71:05:02/304               
                   *[EVPN/170] 00:06:45
                      Indirect
2:2.2.2.2:1::100::00:05:86:71:b2:02/304               
                   *[BGP/170] 00:05:27, localpref 100, from 3.3.3.3
                      AS path: I, validation-state: unverified
                    > to 192.168.23.3 via ge-0/0/3.0
3:2.2.2.2:1::100::2.2.2.2/304               
                   *[EVPN/170] 00:06:53
                      Indirect
3:2.2.2.2:1::100::3.3.3.3/304               
                   *[BGP/170] 00:05:27, localpref 100, from 3.3.3.3
                      AS path: I, validation-state: unverified
                    > to 192.168.23.3 via ge-0/0/3.0
##########
juniper@vMX-1> show route table bgp.evpn.0 

bgp.evpn.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

2:2.2.2.2:1::100::00:05:86:71:b2:02/304               
                   *[BGP/170] 00:06:59, localpref 100, from 3.3.3.3
                      AS path: I, validation-state: unverified
                    > to 192.168.23.3 via ge-0/0/3.0
3:2.2.2.2:1::100::3.3.3.3/304               
                   *[BGP/170] 00:06:59, localpref 100, from 3.3.3.3
                      AS path: I, validation-state: unverified
                    > to 192.168.23.3 via ge-0/0/3.0

    在vrf EVPN100中junos会默认导入两条策略

    juniper@vMX-1> show route instance EVPN100 extensive 
EVPN100:
  Router ID: 0.0.0.0
                          State: Active        
  Interfaces:
    ge-0/0/1.100
  Route-distinguisher: 2.2.2.2:1
  Vrf-import: [ __vrf-import-EVPN100-internal__ ]
  Vrf-export: [ __vrf-export-EVPN100-internal__ ]
  Vrf-import-target: [ target:1:1 ]
  Vrf-export-target: [ target:1:1 ]
  Fast-reroute-priority: low
  Tables:
    EVPN100.evpn.0         : 0 routes (0 active, 0 holddown, 0 hidden)
    EVPN100.evpn.0         : 4 routes (4 active, 0 holddown, 0 hidden)
###########
juniper@vMX-1> show policy ?           
Possible completions:
  <[Enter]>            Execute this command
  <policy>             Name of policy
  __vrf-export-EVPN100-internal__  
  __vrf-import-EVPN100-internal__  
  conditions           Show conditions used by policy
  damping              Show state of route flap damping
  fabric               Internal fabric state
  logical-system       Name of logical system, or 'all'
  |                    Pipe through a command

############
juniper@vMX-1> show policy __vrf-export-EVPN100-internal__ 
Policy __vrf-export-EVPN100-internal__:
    Term unnamed:
        then community + __vrf-community-EVPN100-common-internal__ [target:1:1 ] accept

############
juniper@vMX-1> show policy __vrf-import-EVPN100-internal__ 
Policy __vrf-import-EVPN100-internal__:
    Term unnamed:
        from community __vrf-community-EVPN100-common-internal__ [target:1:1 ]
        then accept
    Term unnamed:
        then reject

    连通性测试

    juniper@vMX-1# run ping 192.168.14.4 logical-system r1 source 192.168.14.1 rapid 
PING 192.168.14.4 (192.168.14.4): 56 data bytes
!!!!!
--- 192.168.14.4 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/stddev = 3.391/5.797/8.227/1.836 ms

###########
juniper@vMX-1# run show arp logical-system r1 no-resolve 
MAC Address       Address         Interface     Flags
00:05:86:71:b2:02 192.168.14.4    ge-0/0/2.100         none

###########
juniper@vMX-1# run show evpn instance EVPN100 extensive 
Instance: EVPN100
  Route Distinguisher: 2.2.2.2:1
  VLAN ID: 100
  Per-instance MAC route label: 299776
  Per-instance multicast route label: 299792
  MAC database status                Local  Remote
    Total MAC addresses:                 1       1
    Default gateway MAC addresses:       0       0
  Number of local interfaces: 1 (1 up)
    Interface name  ESI                            Mode             SH label
    ge-0/0/1.100    00:00:00:00:00:00:00:00:00:00  single-homed   
  Number of IRB interfaces: 0 (0 up)
  Number of neighbors: 1
    3.3.3.3
      Received routes
        MAC address advertisement:              1
        MAC+IP address advertisement:           0
        Inclusive multicast:                    1
        Ethernet auto-discovery:                0
  Number of ethernet segments: 0

    vMX1的ge-0/0/3.0 接口抓包
    Fution和VMware workstations上对应的VMnet接口其实就是一个HUB，想要对ge-0/0/3.0接口的包，只需要抓ge-0/0/3桥接的虚拟接口。
    抓包截图如下：


    EVPN-pac.png

    vMX 各接口MAC地址：

    juniper@vMX-1# run show interfaces ge-0/0/1 | match "Current address" 
  Current address: 00:05:86:71:05:01, Hardware address: 00:05:86:71:05:01

[edit]
juniper@vMX-1# run show interfaces ge-0/0/2 | match "Current address"    
  Current address: 00:05:86:71:05:02, Hardware address: 00:05:86:71:05:02

[edit]
juniper@vMX-1# run show interfaces ge-0/0/3 | match "Current address"    
  Current address: 00:05:86:71:05:03, Hardware address: 00:05:86:71:05:03

[edit]

vMX2各接口MAC地址：
juniper@vMX-2# run show interfaces ge-0/0/1 | match "Current address" 
  Current address: 00:05:86:71:b2:01, Hardware address: 00:05:86:71:b2:01

[edit]
juniper@vMX-2# run show interfaces ge-0/0/2 | match "Current address"    
  Current address: 00:05:86:71:b2:02, Hardware address: 00:05:86:71:b2:02

[edit]
juniper@vMX-2# run show interfaces ge-0/0/3 | match "Current address"    
  Current address: 00:05:86:71:b2:03, Hardware address: 00:05:86:71:b2:03

[edit]

    相关文章

      网友评论

          本文标题：Juniper vMX 实现EVPN

          本文链接：https://www.haomeiwen.com/subject/mkooattx.html

          延伸阅读

          深度阅读

          • 您也可以注册成为美文阅读网的作者，发表您的原创作品、分享您的心情！

          栏目导航

          热点阅读

          关于我们|服务条款|联系我们|Juniper vMX 实现EVPN|投稿指南|网站地图|RSS订阅|排版工具|手机版

          提供经典美文摘抄,优美散文欣赏,现代诗歌精选,短篇小说,心情随笔,表白情书范文,故事会在线阅读欣赏

          Copyright © 2014-2023 Haomeiwen.com All Rights Reserved. 好美文阅读网 版权所有

          备案信息：桂公网安备 45052102000051号 · 桂ICP备13007215号-3

          本站所收录作品、热点评论等信息部分来源互联网，目的只是为了系统归纳学习和传递资讯

          所有作品版权归原创作者所有，与本站立场无关，如不慎侵犯了你的权益，请联系我们告知，我们将做删除处理！