EVPN MPLS Configuration
This chapter includes step-by-step configurations for EVPN MPLS for Single Homing and Multi Homing.
Overview
Ethernet VPN (EVPN) solution provides Ethernet multipoint services over MPLS networks. EVPN operates in contrast to the existing Virtual Private LAN Service (VPLS) by enabling control-plane based MAC learning. PEs participating in the EVPN instances learn customer MAC routes in control-plane using MP-BGP protocol. Control-plane MAC learning brings a number of benefits that allow EVPN to address the VPLS shortcomings, including support for multi-homing with per-flow load balancing.
In EVPN, PEs advertise the MAC addresses learned from the CEs that are connected to them, along with an MPLS label, to other PEs in the control plane using Multiprotocol BGP (MP-BGP). Control-plane learning enables load balancing of traffic to and from CEs that are multihomed to multiple PEs. This is in addition to load balancing across the MPLS core via multiple LSPs between the same pair of PEs. It also improves convergence times in the event of certain network failures.
Note: The EVPN will supported over static LSP, LDP,BGP-LU transports.
VPN Terminology
MAC-VRF: A virtual routing and forwarding table for storing MACs on a PE for specific bridge domain.
CE: Customer Edge device, e.g., a host, router, or switch.
PE: Provider edge device
EVI: An EVPN instance spanning the Provider Edge (PE) devices participating in that EVPN.
Note: Ethernet Segment (ES): Set of Ethernet links connected between CE and PE. Single CE can be connected to multiple PEs.
Ethernet Segment Identifier (ESI): A unique non-zero identifier that identifies an Ethernet segment is called an ESI
Ethernet Tag: An Ethernet tag identifies a particular broadcast domain, e.g., a VLAN. An EVPN instance consists of one or more broadcast domains.
Benefits
The EVPN control-plane MAC learning has the following benefits:
• Eliminate flood and learn mechanism as hosts are learned over control plane.
• OcNOS supports both dynamically learned hosts and statically configured hosts, which are advertised/learned over the EVPN control plane.
• Fast-reroute, resiliency, and faster convergence in case of multihoming
• Load balancing of traffic to and from CEs that are multihomed to multiple PE's.
The following EVPN types are supported:
• Single-homed CE: One CE is connected to One PE device.
• Multihomed CE: One CE is connected to Multiple PE devices. OcNOS supports dual-homed CEs with all- active multi homing mode.
Route Types
These EVPN route types are supported:
• Route Type 1: Ethernet Auto-Discovery (AD) Route
The Ethernet (AD) routes are advertised on per EVI and per ESI basis. These routes are sent per ES. They carry the list of EVIs that belong to the ES.
This route is advertised when multihomed CEs already exist.
• Route Type 2: MAC/IP Advertisement Route
The host's IP and MAC addresses are advertised to the peers within NLRI. The control plane learning of MAC addresses reduces unknown unicast flooding.
• Route Type 3: Inclusive Multicast Ethernet Tag Route
This route establishes the connection for broadcast, unknown unicast, and multicast (BUM) traffic from a source PE to a remote PE.
This route is advertised on per VLAN and per ESI basis.
• Route Type 4: Ethernet Segment Route
Ethernet segment routes enable to connect a CE device to two or PE devices.
Ethernet segment routes enable the discovery of connected PE devices that are connected to the same Ethernet segment.
EVPN auto route target will be supported under MAC VRF.
In EVPN-VPWS the auto-discovery of peer PE nodes is done with the pair of Ethernet A-D routes. Inclusive Multicast route does not have participation on auto-discovery unlike ELAN-EVPN VPLS. Since there is no mac-advertisement, MAC-IP route is not applicable
Note: Only Sub-interface supported as Access-port for EVPN-MPLS.
EVPN MPLS Single Homing
Topology
Figure 24-1 depicts the Single Homed topology for the EVPN MPLS configuration examples for both ELINE and ELAN service with LDP as underlay MPLS path.
EVPN MPLS Single Homing configuration
PE1: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.1/32 secondary | Configure IP address on loopback interface. |
(config-if)#commit | Commit the transaction. |
(config-if)#exit | Exit interface mode |
PE1: Global EVPN MPLS Command
#configure terminal | Enter configuration mode. |
(config)#evpn mpls enable | Enable EVPN MPLS |
(config)#evpn mpls vtep-ip-global 10.143.73.1 | Configuring VTEP global IP to loopback IP |
(config)#commit | Commit candidate configuration to be running configuration Note: Reload is required after Enabling/Disabling EVPN MPLS Feature. |
PE1: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.1 | Set the router ID to IP address 10.143.73.1 |
(config-router)#transport-address ipv4 10.143.73.1 | Configure the transport address for IPV4 (for IPV6 use ipv6) to be used for a TCP session over which LDP will run. Note: It is preferable to use the loopback address as the transport address. |
(config-router)#targeted-peer ipv4 10.143.73.3 | Configure targeted peer. |
(config-router-targeted-peer)#exit | Exit-targeted-peer-mode |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit the transaction. |
PE1: Interface Configuration Network Side
(config)#interface xe3 | Enter the Interface mode for eth2. |
(config-if)#ip address 10.255.128.8/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
Note: For RSVP Configuration refer RSVP-TE Configuration
PE1: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.1 | Router-ID configurations |
(config-router)#network 10.143.73.1/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.8/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit the transaction. |
PE1: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config-router)#neighbor 10.143.73.3 remote-as 65010 | Configuring PE3 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.3 update-source lo | Source of routing updates as loopback |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.3 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#exit | Exiting of Address family mode |
(config-router)#commit | Commit the transaction. |
PE1: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.1:2 | Configuring Route-Distinguisher value 10.143.73.1:2 |
(config-vrf)#route-target both 2:2 | Configuring import and export value as 2:2 |
(config-vrf)#exit | Exiting VRF Mode |
PE1: MAC VRF Configuration with Auto route target
(config)#mac vrf vpls1001 | Enter VRF mode |
(config-vrf)#rd 10.143.73.1:1001 | Configuring Route-Distinguisher value 10.143.73.1:1001 |
(config-vrf)#route-target both evpn-auto-rt | Configuring import and export value as evpn-auto-rt. Route target will be derived automatically. Support: route-target export route-target import |
(config-vrf)#exit | Exiting VRF Mode |
(config)#commit | Commit the transaction. |
PE1: EVPN and MAC VRF Mapping
(config)#evpn mpls id 2 xconnect target-mpls-id 252 | Configure the EVPN-VPWS identifier with source identifier 2 and target identifier 252 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "vrf2" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 1001 | Configure the EVPN-VPLS identifier with identifier 1001 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit the transaction. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE1: Access Port Configuration
(config)#interface xe6 | Enter the Interface mode for xe6. |
(config-if)#interface xe6.2 switchport | Creating L2 sub interface of physical interface xe6 |
(config-if)#encapsulation dot1q 2 | Setting Encapsulation to dot1q with VLAN ID 2 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 2 | Map vpn-id 2 to interface xe6.2 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#interface xe6.1001 switchport | Creating L2 sub interface of physical interface xe6 |
(config-if)#encapsulation dot1q 1001 | Setting Encapsulation to dot1q with VLAN ID 1001 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 1001 | Map vpn-id 1001 to interface xe6.1001 (VPLS) |
OcNOS(config-access-if)#commit | Commit candidate configuration to be running configuration |
P: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.6/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
P: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.255.128.25 | Set the router ID to IP address 10.255.128.25 |
(config-router)#transport-address ipv4 10.255.128.25 | Configure the transport address for IPV4 (for IPV6 use ipv6) to be used for a TCP session over which LDP will run. Note: It is preferable to use the loopback address as the transport address. |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit the transaction. |
P: Interface Configuration
(config)#interface xe3 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.9/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#interface xe5 | Enter the Interface mode for xe5 |
(config-if)#ip address 10.255.128.25/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
P: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.6 | Setting the Router ID as Loopback IP |
(config-router)#network 10.143.73.6/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.8/31 area 0.0.0.0 | Advertise network address in OSPF that comes under same subnet. |
(config-router)#network 10.255.128.24/31 area 0.0.0.0 | Advertise xe5 network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.3/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
PE2: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.3 | Set the router ID to IP address 10.143.73.3 |
(config-router)#transport-address ipv4 10.143.73.3 | Configure the transport address for IPV4 (for IPV6 use ipv6) to be used for a TCP session over which LDP will run. Note: It is preferable to use the loopback address as the transport address. |
(config-router)#targeted-peer ipv4 10.143.73.1 | Configure targeted peer. |
(config-router-targeted-peer)#exit | Exit router mode |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit the transaction. |
PE2: Global EVPN MPLS Command
(config)#evpn mpls enable | Enable EVPN MPLS |
(config)#commit | Commit candidate configuration to be running configuration Note: Reload is required after Enabling/Disabling EVPN MPLS Feature |
(config)#evpn mpls vtep-ip-global 10.143.73.3 | Configuring VTEP global IP to loopback IP |
(config)#commit | Commit the transaction. |
Interface Configuration Network Side:
(config)#interface xe3 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.24/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
PE2: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.3 | Router-ID configurations |
(config-router)#network 10.143.73.3/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.24/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit the transaction. |
PE2: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config-router)#neighbor 10.143.73.1 remote-as 65010 | Configuring PE1 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.1 update-source lo | Source of routing updates as loopback |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.1 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#exit | Exiting of Address family mode |
(config)#commit | Commit the transaction. |
PE2: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.3:2 | Configuring Route-Distinguisher value 10.143.73.3:2 |
(config-vrf)#route-target both 2:2 | Configuring import and export value as 2:2 Support: route-target export route-target import |
(config-vrf)#exit | Exiting VRF Mode |
PE2: MAC VRF Configuration with Auto route target
(config)#mac vrf vpls1001 | Enter VRF mode |
(config-vrf)#rd 10.143.73.1:1001 | Configuring Route-Distinguisher value 10.143.73.1:1001 |
(config-vrf)#route-target both evpn-auto-rt | Configuring import and export value as evpn-auto-rt. Route target will be derived automatically. |
(config-vrf)#exit | Exiting VRF Mode |
(config)#commit | Commit the transaction. |
PE2: EVPN and VRF Mapping
(config)#evpn mpls id 252 xconnect target-mpls-id 2 | Configure the EVPN-ELINE identifier with source identifier 252 and target identifier 2 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "vrf2" to EVPN-ELINE identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 1001 | Configure the EVPN-ELAN identifier with identifier 1001 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-ELAN identifier |
(config-evpn-mpls)#commit | Commit the transaction. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE2: Access Port Configuration
(config)#interface xe2 | Enter the Interface mode for xe2. |
(config-if)#description access-side-int | Giving Interface Description |
(config-if)#interface xe2.2 switchport | Creating L2 sub interface of physical interface xe2 |
(config-if)#encapsulation dot1q 2 | Setting Encapsulation to dot1q with VLAN ID 2 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 2 | Map vpn-id 252 to interface xe2.2 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#interface xe2.1001 switchport | Creating L2 sub interface of physical interface xe2 |
(config-if)#encapsulation dot1q 1001 | Setting Encapsulation to dot1q with VLAN ID 1001 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 1001 | Map vpn-id 1001 to interface xe2.1001 (VPLS) |
(config)#commit | Commit candidate configuration to be running configuration |
Validation
PE1: E-LAN
PE1#sh mac vrf vpls1001
VRF vpls1001, FIB ID 4098
Router ID is not set
Interfaces:
VRF vpls1001; default RD 10.143.73.3:1001
Evpn Auto RT:100:1073742025
Import VPN route-target communities
Evpn Auto RT:100:1073742025
No import route-map
No export route-map
VPNv4 label allocation mode: per-vrf
VPNv6 label allocation mode: per-vrf
import-vnid: 1001
export-vnid: 1001
PE1#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update evpn-id
===================================================================================
10.143.73.1 10.143.73.3 Installed 00:01:03 00:01:03 1001
Total number of entries are 1
PE1#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
Local Remote
Destination Status evpn-id Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
===================================================================================================================
10.143.73.3 Installed 1001 xe3 24320 640 17 640 17
Total number of entries are 1
PE1#show evpn mpls id 1001
EVPN-MPLS Information
=================
Codes: NW - Network Port
AC - Access Port
(u) - Untagged
VPN-ID EVI-Name EVI-Type Type Interface ESI VLAN DF-Status Src-Addr Dst-Addr
_______________________________________________________________________________________________________________________________
1001 vpls1001 L2 NW ---- ---- ---- ---- 10.143.73.1 10.143.73.3
1001 vpls1001 -- AC xe6.1001 --- Single Homed Port --- ---- ---- ---- ----
Total number of entries are 2
PE1#show evpn mpls mac-table
============================================================================================================================
EVPN MPLS MAC Entries
============================================================================================================================
VNID Interface VlanId Inner-VlanId Mac-Addr VTEP-Ip/ESI Type Status AccessPortDesc
____________________________________________________________________________________________________________________________
1001 ---- ---- ---- 00ff.2300.0000 10.143.73.3 Dynamic Remote ------- -------
1001 ---- ---- ---- 0023.1001.0001 10.143.73.3 Dynamic Remote ------- -------
1001 xe6.1001 ---- ---- 0045.1001.0001 10.143.73.1 Dynamic Local ------- -------
1001 xe6.1001 ---- ---- 0071.1001.0001 10.143.73.1 Dynamic Local ------- -------
PE1: E-LINE or VPWS
PE1#show evpn mpls xconnect
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
2 ---- 1500 252 xe6.2 --- Single Homed Port --- 10.143.73.3 1500 AC-NW NW-SET
Total number of entries are 1
PE1#show evpn mpls xconnect tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update local-evpn-id remote-evpn-id
======================================================================================================
10.143.73.1 10.143.73.3 Installed 00:01:10 00:01:10 2 252
Total number of entries are 1
PE1#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
Local Remote Local Remote
Destination Status VPWS-ID VPWS-ID Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
====================================================================================================================
10.143.73.3 Installed 2 252 xe3 24320 -- 16 -- 16
Total number of entries are 1
PE1#show evpn mpls xconnect id 2
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
2 ---- 1500 252 xe6.2 --- Single Homed Port --- 10.143.73.3 1500 AC-NW NW-SET
Total number of entries are 1
PE2: ELAN
PE2#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update evpn-id
===================================================================================
10.143.73.3 10.143.73.1 Installed 00:04:03 00:04:03 1001
Total number of entries are 1
PE2#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
Local Remote
Destination Status evpn-id Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
===================================================================================================================
10.143.73.1 Installed 1001 xe5 24321 640 17 640 --
Total number of entries are 1
PE2#show evpn mpls id 1001
EVPN-MPLS Information
=================
Codes: NW - Network Port
AC - Access Port
(u) - Untagged
VPN-ID EVI-Name EVI-Type Type Interface ESI VLAN DF-Status Src-Addr Dst-Addr
_______________________________________________________________________________________________________________________________
1001 vpls1001 L2 NW ---- ---- ---- ---- 10.143.73.3 10.143.73.1
1001 vpls1001 -- AC xe2.1001 --- Single Homed Port --- ---- ---- ---- ----
Total number of entries are 2
PE2#show evpn mpls mac-table
==========================================================================================================================================
EVPN MPLS MAC Entries
==========================================================================================================================================
VNID Interface VlanId Inner-VlanId Mac-Addr VTEP-Ip/ESI Type Status AccessPortDesc
__________________________________________________________________________________________________________________________________________
1001 ---- ---- ---- 0045.1001.0001 10.143.73.1 Dynamic Remote ------- -------
1001 ---- ---- ---- 0071.1001.0001 10.143.73.1 Dynamic Remote ------- -------
1001 xe2.1001 ---- ---- 00ff.2300.0000 10.143.73.3 Dynamic Local ------- -------
1001 xe2.1001 ---- ---- 0023.1001.0001 10.143.73.3 Dynamic Local ------- -------
PE2: ELINE or VPWS
PE2#show evpn mpls xconnect
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
252 ---- 1500 2 xe2.2 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
PE2#show evpn mpls xconnect tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update local-evpn-id remote-evpn-id
========================================================================================================
10.143.73.3 10.143.73.1 Installed 00:04:10 00:04:10 252 2
Total number of entries are 1
PE2#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
Local Remote Local Remote
Destination Status VPWS-ID VPWS-ID Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
============================================================================================================================
10.143.73.1 Installed 252 2 xe5 24321 -- 16 -- 16
Total number of entries are 1
PE2#show evpn mpls xconnect id 252
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
252 ---- 1500 2 xe2.2 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
EVPN MPLS Single Homing Over BGP-LU
Topology
depicts the Single Homed topology for the EVPN MPLS configuration examples for both ELINE and ELAN service with BGP-LU as underlay MPLS path which in turn over another underlay of LDP/RSVP/SR MPLS paths.
EVPN MPLS Single Homing over LU configuration
Configuration
PE1: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.1/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE1: Global EVPN MPLS Command
#configure terminal | Enter configuration mode. |
(config)#evpn mpls enable | Enable EVPN MPLS |
(config)#evpn mpls vtep-ip-global 10.143.73.1 | Configuring VTEP global IP to loopback IP |
(config)#commit | Commit candidate configuration to be running configuration |
PE1: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.1 | Set the router ID to IP address 10.143.73.1 |
(config-router)# transport-address ipv4 10.143.73.1 | Configure transport address at LDP mode |
(config-router)#targeted-peer ipv4 10.143.73.5 | Configure targeted peer. |
(config-router-targeted-peer)#exit | Exit-targeted-peer-mode |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE1: Interface Configuration Network Side
(config)#interface xe3 | Enter the Interface mode for eth2. |
(config-if)#ip address 10.255.128.8/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
Note: For RSVP Configuration refer RSVP-TE Configuration.
PE1: OSPF Configuration
(config)#router ospf 1 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.1 | Router-ID configurations |
(config-router)#network 10.143.73.1/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.8/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config-router)#commit | Commit the transaction. |
PE1: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config)#allocate-label all | Configure allocate all under router bgp |
(config-router)#neighbor 10.143.73.5 remote-as 65010 | Configuring PE2 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.2 remote-as 65010 | Configuring ABR1 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.5 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.2 update-source lo | Source of routing updates as loopback |
(config-router)# address-family ipv4 unicast | Entering into address family ipv4 unicast |
(config-router-af)# network 10.143.73.1/32 | Advertise 10.143.73.1/31 network |
(config-router-af)# exit-address-family | Exit from ipv4 address family |
(config-router)# address-family ipv4 labeled-unicast | Entering into address family ipv4 labeled-unicast |
(config-router-af)#neighbor 10.143.73.2 activate | Activate the ipv4 labeled-unicast neighbor |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.5 activate | Enabling EVPN Address family for neighbor |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE1: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.1:2 | Configuring Route-Distinguisher value 10.143.73.1:2 |
(config-vrf)#route-target both 2:2 | Configuring import and export value as 2:2 Support: route-target export route-target import |
(config-vrf)#exit | Exiting VRF Mode |
(config)#mac vrf vpls1001 | Enter VRF mode |
(config-vrf)#rd 10.143.73.1:1001 | Configuring Route-Distinguisher value 10.143.73.1:1001 |
(config-vrf)#route-target both 1001:1001 | Configuring import and export value as 1001:1001 Support: route-target export Support: route-target export |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE1: EVPN and MAC VRF Mapping
(config)#evpn mpls id 2 xconnect target-mpls-id 252 | Configure the EVPN-VPWS identifier with source identifier 2 and target identifier 252 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "vrf2" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 1001 | Configure the EVPN-VPLS identifier with identifier 1001 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit candidate configuration to be running configuration |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE1: Access Port Configuration
(config)#interface xe6 | Enter the Interface mode for xe6. |
(config-if)#description access-side-int | Giving Interface Description |
(config-if)#interface xe6.2 switchport | Creating L2 sub interface of physical interface xe6 |
(config-if)#encapsulation dot1q 2 | Setting Encapsulation to dot1q with VLAN ID 2 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 2 | Map vpn-id 2 to interface xe6.2 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#interface xe6.1001 switchport | Creating L2 sub interface of physical interface xe6 |
(config-if)#encapsulation dot1q 1001 | Setting Encapsulation to dot1q with VLAN ID 1001 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 1001 | Map vpn-id 1001 to interface xe6.1001 (VPLS) |
(config-access-if)#commit | Commit candidate configuration to be running configuration |
ABR1: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.2/32 secondary | Configure IP address on loopback interface. |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
ABR1: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#transport-address ipv4 10.143.73.2 | Configure transport address under router ldp |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
ABR1: Interface Configuration
(config)#interface xe3 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.9/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#interface xe5 | Enter the Interface mode for xe5 |
(config-if)#ip address 10.255.128.25/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
ABR1: OSPF Configuration
(config)#enable ext-ospf-multi-inst | Enable multiple-instance capabilit |
(config)#router ospf 1 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.2 | Setting the Router ID as Loopback IP |
(config-router)#network 10.143.73.2/32 area 0.0.0.0 instance-id 100 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.25/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#network 10.143.73.2/32 area 0.0.0.0 instance-id 1 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.9/31 area 0.0.0.0 | Advertise network address in OSPF that comes under same subnet. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
ABR1: BGP-LU Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config)#allocate-label all | Configure allocate all under router bgp |
(config-router)#neighbor 10.143.73.1 remote-as 65010 | Configuring PE1 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.4 remote-as 65010 | Configuring ABR2 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.1 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.4 update-source lo | Source of routing updates as loopback |
(config-router)# address-family ipv4 unicast | Entering into address family ipv4 unicast |
(config-router-af)# network 10.143.73.2/32 | Advertise the network |
(config-router-af)# exit-address-family | Exit from ipv4 address family |
(config-router)# address-family ipv4 labeled-unicast | Entering into address family ipv4 labeled-unicast |
(config-router-af)#neighbor 10.143.73.4 activate | Activate the ipv4 labeled-unicast neighbor |
(config-router-af)#neighbor 10.143.73.4 next-hop-self | Configure next-hopself for the ipv4 labeled-unicast neighbor |
config-router-af)#neighbor 10.143.73.4 route-reflector-client | Configure neighbor as route reflector client |
(config-router-af)#neighbor 10.143.73.1 activate | Activate the ipv4 labeled-unicast neighbor |
config-router-af)#neighbor 10.143.73.1 route-reflector-client | Configure neighbor as route reflector client |
(config-router-af)#neighbor 10.143.73.1 next-hop-self | Configure next-hopself for the ipv4 labeled-unicast neighbor |
(config)#commit | Commit candidate configuration to be running configuration |
P2: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.3/32 secondary | Configure IP address on loopback interface. |
(config-f)#commit | Commit the transaction. |
P2: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#commit | Commit the transaction. |
P2: Interface Configuration
(config)#interface xe5 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.24/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#interface xe6 | Enter the Interface mode for xe5 |
(config-if)#ip address 10.255.128.35/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#commit | Commit the transaction. |
P2: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.3 | Setting the Router ID as Loopback IP |
(config-router)#network 10.143.73.3/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.24/31 area 0.0.0.0 | Advertise network address in OSPF that comes under same subnet. |
(config-router)#network 10.255.128.35/31 area 0.0.0.0 | Advertise xe5 network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
ABR2: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.4/32 secondary | Configure IP address on loopback interface. |
(config-if)#commit | Commit the transaction. |
ABR2: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#transport-address ipv4 10.143.73.4 | Configure transport address under router ldp |
(config)#commit | Commit the transaction. |
ABR2: Interface Configuration
(config)#interface xe6 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.34/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#interface xe3 | Enter the Interface mode for xe5 |
(config-if)#ip address 10.255.128.45/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#commit | Commit the transaction. |
ABR2: OSPF Configuration
(config)#enable ext-ospf-multi-inst | Enable multiple-instance capabilit |
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.4 | Setting the Router ID as Loopback IP |
(config-router)#network 10.143.73.4/32 area 0.0.0.0 instance-id 200 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.34/31 area 0.0.0.0 | Advertise network address in OSPF that comes under same subnet. |
(config)#router ospf 200 | Enter the Router OSPF mode. |
(config-router)#network 10.255.128.45/31 area 0.0.0.0 instance-id 100 | Advertise xe5 network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
ABR2: BGP-LU Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config)#allocate-label all | Configure allocate all under router bgp |
(config-router)#neighbor 10.143.73.2 remote-as 65010 | Configuring ABR1 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.5 remote-as 65010 | Configuring PE2 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.2 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.5 update-source lo | Source of routing updates as loopback |
(config-router)# address-family ipv4 unicast | Entering into address family ipv4 unicast |
(config-router-af)# network 10.143.73.4/32 | Advertise the network |
(config-router-af)# exit-address-family | Exit from ipv4 address family |
(config-router)# address-family ipv4 labeled-unicast | Entering into address family ipv4 labeled-unicast |
(config-router-af)#neighbor 10.143.73.2 activate | Activate the ipv4 labeled-unicast neighbor |
(config-router-af)#neighbor 10.143.73.2 next-hop-self | Configure next-hop-self for the ipv4 labeled-unicast neighbor |
config-router-af)#neighbor 10.143.73.2 route-reflector-client | Configure neighbor as route reflector client |
(config-router-af)#neighbor 10.143.73.5 activate | Activate the ipv4 labeled-unicast neighbor |
config-router-af)#neighbor 10.143.73.5 route-reflector-client | Configure neighbor as route reflector client |
(config-router-af)#neighbor 10.143.73.5 next-hop-self | Configure next-hop-self for the ipv4 labeled-unicast neighbor |
(config-router-af)#commit | Commit the transaction. |
PE2: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.5/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
PE2: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.5 | Set the router ID to IP address 10.143.73.5 |
(config-router)#transport-address ipv4 10.143.73.5 | Configure transport address under router ldp |
(config-router)#targeted-peer ipv4 10.143.73.3 | Configure targeted peer. |
(config-router-targeted-peer)#exit | Exit-targeted-peer-mode |
(config-router)#commit | Commit the transaction. |
PE2: Global EVPN MPLS Command
(config)#evpn mpls enable | Enable EVPN MPLS |
(config)#commit | Commit candidate configuration to be running configuration Note: Reload is required after Enabling/Disabling EVPN MPLS Feature |
(config)#evpn mpls vtep-ip-global 10.143.73.5 | Configuring VTEP global IP to loopback IP |
(config)#commit | Commit the transaction. |
PE2: Interface Configuration Network Side
(config)#interface xe3 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.44/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-router)#commit | Commit the transaction. |
PE2: OSPF Configuration
(config)#router ospf 200 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.5 | Router-ID configurations |
(config-router)#network 10.143.73.5/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.44/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config-router)#commit | Commit the transaction. |
PE2: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config)#allocate-label all | Configure allocate all under router bgp |
(config-router)#neighbor 10.143.73.1 remote-as 65010 | Configuring PE1 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.4 remote-as 65010 | Configuring ABR2 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.1 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.4 update-source lo | Source of routing updates as loopback |
(config-router)# address-family ipv4 unicast | Entering into address family ipv4 unicast |
(config-router-af)# network 10.143.73.5/32 | Advertise the network |
(config-router-af)# exit-address-family | Exit from ipv4 address family |
(config-router)# address-family ipv4 labeled-unicast | Entering into address family ipv4 labeled-unicast |
(config-router-af)#neighbor 10.143.73.4 activate | Activate the ipv4 labeled-unicast neighbor |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.1 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#exit | Exiting of Address family mode |
(config-router)#commit | Commit the transaction. |
PE2: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.5:2 | Configuring Route-Distinguisher value 10.143.73.3:2 |
(config-vrf)#route-target both 2:2 | Configuring import and export value as 2:2 Support: route-target export route-target import |
(config-vrf)#exit | Exiting VRF Mode |
(config)#mac vrf vpls1001 | Enter VRF mode |
(config-vrf)#rd 10.143.73.5:1001 | Configuring Route-Distinguisher value 10.143.73.3:1001 |
(config-vrf)#route-target both 1001:1001 | Configuring import and export value as 1001:1001 |
(config-vrf)#commit | Commit the transaction. |
PE2: EVPN and VRF Mapping
(config)#evpn mpls id 252 xconnect target-mpls-id 2 | Configure the EVPN-ELINE identifier with source identifier 252 and target identifier 2 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "vrf2" to EVPN-ELINE identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 1001 | Configure the EVPN-ELAN identifier with identifier 1001 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-ELAN identifier |
(config-evpn-mpls)#commit | Commit the transaction. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE2: Access Port Configuration
(config)#interface xe2 | Enter the Interface mode for xe2. |
(config-if)#description access-side-int | Giving Interface Description |
(config-if)#interface xe2.2 switchport | Creating L2 sub interface of physical interface xe2 |
(config-if)#encapsulation dot1q 2 | Setting Encapsulation to dot1q with VLAN ID 2 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 252 | Map vpn-id 252 to interface xe2.2 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#interface xe2.1001 switchport | Creating L2 sub interface of physical interface xe2 |
(config-if)#encapsulation dot1q 1001 | Setting Encapsulation to dot1q with VLAN ID 1001 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 1001 | Map vpn-id 1001 to interface xe2.1001 (VPLS) |
(config)#commit | Commit candidate configuration to be running configuration |
Validation
PE1: E-LAN
PE1#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update evpn-id
===================================================================================
10.143.73.1 10.143.73.5 Installed 00:01:03 00:01:03 1001
Total number of entries are 1
PE1#sh evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
(*) in Policy - tunnel-policy inherited from mac-vrf
================+===========+=========+===============+=========+=========+=========+=========+============+=========+============+========
Local Remote RSVP-Multipath Underlay
Destination Status VPN-ID Policy MC-Label UC-Label MC-Label UC-Label Grp-Name NHLFE-ix NW-Intf NW-Label
================+===========+=========+===============+=========+=========+=========+=========+============+=========+============+========
10.143.73.5 Installed 1001 -- 640 17 640 -- -- -- xe3 24325
Total number of entries are 1
PE1#show evpn mpls id 1001
EVPN-MPLS Information
=================
Codes: NW - Network Port
AC - Access Port
(u) - Untagged
VPN-ID EVI-Name EVI-Type Type Interface ESI VLAN DF-Status Src-Addr Dst-Addr
_______________________________________________________________________________________________________________________________
1001 vpls1001 L2 NW ---- ---- ---- ---- 10.143.73.1 10.143.73.5
1001 vpls1001 -- AC xe6.1001 --- Single Homed Port --- ---- ---- ---- ----
Total number of entries are 2
PE1#sh mpls forwarding-table | inc 10.143.73.5
B> 10.143.73.5/32 6 10 - - LSP_DEFAULT 24960 xe3 No 10.143.73.2
PE1#sh ip bgp labeled-unicast
Status codes: s suppressed, d damped, h history, a add-path, * valid, > best, i - internal, S - stale
Network Next Hop In Label Out Label
*> 10.143.73.1/32 0.0.0.0 24320 -
*>i 10.143.73.2/32 10.143.73.2 24322 24961
*>i 10.143.73.4/32 10.143.73.2 24323 24963
*>i 10.143.73.5/32 10.143.73.2 24321 24960
PE1#
PE1#show evpn mpls mac-table
============================================================================================================================
EVPN MPLS MAC Entries
============================================================================================================================
VNID Interface VlanId Inner-VlanId Mac-Addr VTEP-Ip/ESI Type Status AccessPortDesc
____________________________________________________________________________________________________________________________
1001 ---- ---- ---- 00ff.2300.0000 10.143.73.5 Dynamic Remote ------- -------
1001 ---- ---- ---- 0023.1001.0001 10.143.73.5 Dynamic Remote ------- -------
1001 xe6.1001 ---- ---- 0045.1001.0001 10.143.73.1 Dynamic Local ------- -------
1001 xe6.1001 ---- ---- 0071.1001.0001 10.143.73.1 Dynamic Local ------- -------
PE1: E-LINE or VPWS
PE1#show evpn mpls xconnect
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
2 ---- 1500 252 xe6.2 --- Single Homed Port --- 10.143.73.5 1500 AC-NW NW-SET
Total number of entries are 1
PE1#show evpn mpls xconnect tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update local-evpn-id remote-evpn-id
======================================================================================================
10.143.73.1 10.143.73.5 Installed 00:01:10 00:01:10 2 252
Total number of entries are 1
PE1#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
(*) in Policy - tunnel-policy inherited from mac-vrf
================+===========+=========+=========+===============+=========+=========+============+=========+============+=========
Local Remote Local Remote RSVP-Multipath Underlay
Destination Status VPWS-ID VPWS-ID Policy UC-Label UC-Label Grp-Name NHLFE-ix NW-Intf NW-Label
================+===========+=========+=========+===============+=========+=========+============+=========+============+=========
10.143.73.5 Installed 2 252 -- 16 16 -- -- xe3 24325
Total number of entries are 1
PE1#sh mpls forwarding-table | inc 10.143.73.5
B> 10.143.73.5/32 6 10 - - LSP_DEFAULT 24960 xe3 No 10.143.73.2
PE1#sh ip bgp labeled-unicast
Status codes: s suppressed, d damped, h history, a add-path, * valid, > best, i - internal, S - stale
Network Next Hop In Label Out Label
*> 10.143.73.1/32 0.0.0.0 24320 -
*>i 10.143.73.2/32 10.143.73.2 24322 24961
*>i 10.143.73.4/32 10.143.73.2 24323 24963
*>i 10.143.73.5/32 10.143.73.2 24321 24960
PE1#show evpn mpls xconnect id 2
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
2 ---- 1500 252 xe6.2 --- Single Homed Port --- 10.143.73.5 1500 AC-NW NW-SET
Total number of entries are 1
PE2: ELAN
PE2#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update evpn-id
===================================================================================
10.143.73.5 10.143.73.1 Installed 00:04:03 00:04:03 1001
Total number of entries are 1
PE2#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
(*) in Policy - tunnel-policy inherited from mac-vrf
================+===========+=========+===============+=========+=========+=========+=========+============+=========+============+========
Local Remote RSVP-Multipath Underlay
Destination Status VPN-ID Policy MC-Label UC-Label MC-Label UC-Label Grp-Name NHLFE-ix NW-Intf NW-Label
================+===========+=========+===============+=========+=========+=========+=========+============+=========+============+========
10.143.73.1 Installed 1001 -- 640 17 640 -- -- -- xe3 24321
Total number of entries are 1
PE2#
PE2#sh mpls forwarding-table | include 10.143.73.1/32
B> 10.143.73.1/32 1 1 - - LSP_DEFAULT 24961 xe5 No 10.143.73.4
PE2#sh ip bgp labeled-unicast
Status codes: s suppressed, d damped, h history, a add-path, * valid, > best, i - internal, S - stale
Network Next Hop In Label Out Label
*>i 10.143.73.1/32 10.143.73.4 24321 24961
*>i 10.143.73.2/32 10.143.73.4 24323 24963
*>i 10.143.73.4/32 10.143.73.4 24322 24960
*> 10.143.73.5/32 0.0.0.0 24320 -
PE2#show evpn mpls id 1001
EVPN-MPLS Information
=================
Codes: NW - Network Port
AC - Access Port
(u) - Untagged
VPN-ID EVI-Name EVI-Type Type Interface ESI VLAN DF-Status Src-Addr Dst-Addr
_______________________________________________________________________________________________________________________________
1001 vpls1001 L2 NW ---- ---- ---- ---- 10.143.73.5 10.143.73.1
1001 vpls1001 -- AC xe2.1001 --- Single Homed Port --- ---- ---- ---- ----
Total number of entries are 2
PE2#show evpn mpls mac-table
==========================================================================================================================================
EVPN MPLS MAC Entries
==========================================================================================================================================
VNID Interface VlanId Inner-VlanId Mac-Addr VTEP-Ip/ESI Type Status AccessPortDesc
__________________________________________________________________________________________________________________________________________
1001 ---- ---- ---- 0045.1001.0001 10.143.73.1 Dynamic Remote ------- -------
1001 ---- ---- ---- 0071.1001.0001 10.143.73.1 Dynamic Remote ------- -------
1001 xe2.1001 ---- ---- 00ff.2300.0000 10.143.73.5 Dynamic Local ------- -------
1001 xe2.1001 ---- ---- 0023.1001.0001 10.143.73.5 Dynamic Local ------- -------
PE2: ELINE or VPWS
PE2#show evpn mpls xconnect
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
252 ---- 1500 2 xe2.2 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
PE2#show evpn mpls xconnect tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update local-evpn-id remote-evpn-id
========================================================================================================
10.143.73.5 10.143.73.1 Installed 00:04:10 00:04:10 252 2
Total number of entries are 1
PE2#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
Local Remote Local Remote
Destination Status VPWS-ID VPWS-ID Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
============================================================================================================================
10.143.73.1 Installed 252 2 xe5 24321 -- 16 -- 16
Total number of entries are 1
PE2#sh mpls forwarding-table | include 10.143.73.1/32
B> 10.143.73.1/32 1 1 - - LSP_DEFAULT 24961 xe5 No 10.143.73.4
PE2#sh ip bgp labeled-unicast
Status codes: s suppressed, d damped, h history, a add-path, * valid, > best, i - internal, S - stale
Network Next Hop In Label Out Label
*>i 10.143.73.1/32 10.143.73.4 24321 24961
*>i 10.143.73.2/32 10.143.73.4 24323 24963
*>i 10.143.73.4/32 10.143.73.4 24322 24960
*> 10.143.73.5/32 0.0.0.0 24320 -
PE2#show evpn mpls xconnect id 252
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
252 ---- 1500 2 xe2.2 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
EVPN MPLS Multihoming
Topology
The diagram depicts the Multi Homed topology for the EVPN MPLS configuration examples that follow.
MPLS EVPN multi-homing configuration
PE1: Loopback Interface
#configure terminal | Enter configure mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.1/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config-if)#commit | Commit the transaction. |
PE1: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.1 | Set the router ID to IP address 10.143.73.1 |
(config-router)#transport-address ipv4 10.143.73.1 | Configure the transport address for IPV4 (for IPV6 use ipv6) to be used for a TCP session over which LDP will run. Note: It is preferable to use the loopback address as the transport address. |
(config-router)#targeted-peer ipv4 10.143.73.3 | Configure targeted peer. |
(config-router)#targeted-peer ipv4 10.143.73.4 | Configure targeted peer. |
(config-router-targeted-peer)#exit | Exit-targeted-peer-mode |
(config-router)#exit | Exit from router target peer and LDP mode |
(config-router)#commit | Commit the transaction. |
PE1: Global EVPN MPLS Command
(config)#evpn mpls enable | Enable EVPN MPLS |
(config)#commit | Commit candidate configuration to be running configuration |
(config)#evpn mpls vtep-ip-global 10.143.73.1 | Configuring VTEP global IP to loopback IP |
(config)#hardware-profile filter evpn-mpls-mh enable | Enable hardware-profile filter EVPN-MPLS-MH |
(config)#evpn mpls multihoming enable | Enable Multihoming |
(config)#commit | Commit the transaction. |
PE1: Interface Configuration Network Side
(config)#interface xe3 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.8/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config-if)#commit | Commit the transaction. |
Note: For RSVP Configuration refer RSVP-TE Configuration
PE1: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.1 | Router-ID configurations |
(config-router)#network 10.143.73.1/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.8/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit the transaction. |
PE1: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config-router)#neighbor 10.143.73.3 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.3 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.4 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.4 update-source lo | Source of routing updates as loopback |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.3 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#neighbor 10.143.73.4 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#exit | Exiting of Address family mode |
(config-router)#commit | Commit the transaction. |
PE1: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.1:1700 | Configuring Route-Distinguisher value 10.143.73.1:1700 |
(config-vrf)#route-target both 1700:1700 | Configuring import and export value as 1700:1700 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#mac vrf vpls1001 | Enter VRF mode |
(config-vrf)#rd 10.143.73.1:1001 | Configuring Route-Distinguisher value 10.143.73.1:1001 |
(config-vrf)#route-target both 1001:1001 | Configuring import and export value as 1001:1001 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#commit | Commit the transaction. |
PE1: EVPN and VRF Mapping
(config)#evpn mpls id 1700 xconnect target-mpls-id 1800 | Configure the EVPN-VPWS identifier with source identifier 1700 and target identifier 1800 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "vrf2" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 3000 | Configure the EVPN-VPLS identifier with identifier 3000 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit the transaction. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE1: Access Port Configuration
(config)#interface xe6 | Enter the Interface mode for xe6. |
(config-if)#interface xe6.1700 switchport | Creating L2 sub interface of physical interface xe6 |
(config-if)#description access-side-int | Giving Interface Description |
(config-if)#encapsulation dot1q 1700 | Setting Encapsulation to dot1q with VLAN ID 1700 |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 1700 | Map vpn-id 1700 to interface xe6.1700 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#interface xe6.300 switchport | Creating L2 sub interface of physical interface xe6 |
(config-if)#encapsulation dot1q 3000 | Setting Encapsulation to dot1q with VLAN ID 3000 |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 3000 | Map vpn-id 3000 to interface xe6.3000 (VPLS) |
(config-access-if)#commit | Commit candidate configuration to be running configuration |
P: Loopback Interface
#configure terminal | Enter configure mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.6/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config-if)#commit | Commit the transaction. |
P: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.6 | Set the router ID to IP address 10.143.73.6 |
(config-router)#transport-address ipv4 10.143.73.6 | Configure the transport address for IPV4 (for IPV6 use ipv6) to be used for a TCP session over which LDP will run. Note: It is preferable to use the loopback address as the transport address. |
(config-router)#exit | Exit from router target peer and LDP mode |
(config-router)#commit | Commit the transaction. |
P: Interface Configuration
(config)#interface xe3 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.9/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#interface xe5 | Enter the Interface mode for xe5 |
(config-if)#ip address 10.255.128.25/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#interface po92 | Enter the Interface mode for po92 |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#interface xe7 | Enter the Interface mode for xe7 |
(config-if)#channel-group 92 mode active | Moving interface to Dynamic LAG 92 |
(config-if)#interface xe8 | Enter the Interface mode for xe8 |
(config-if)#channel-group 92 mode active | Moving interface to Dynamic LAG 92 |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
P: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.6 | Setting the Router ID as Loopback IP |
(config-router)#network 10.143.73.6/32 area 0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.8/31 area 0.0.0.0 | Advertise xe3 network address in OSPF that comes under same subnet |
(config-router)#network 10.255.128.24/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config-router)#network 10.255.128.36/31 area 0.0.0.0 | Advertise po92 network address in OSPF that comes under same subnet |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
OcNOS(config)#commit | Commit candidate configuration to be running configuration |
PE2: Loopback Interface
#configure terminal | Enter configure mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.3/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
PE2: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.3 | Set the router ID to IP address 10.143.73.3 |
(config-router)#transport-address ipv4 10.143.73.3 | Configure the transport address for IPV4 (for IPV6 use ipv6) to be used for a TCP session over which LDP will run. Note: It is preferable to use the loopback address as the transport address. |
(config-router)#targeted-peer ipv4 10.143.73.1 | Configure targeted peer. |
(config-router-targeted-peer)# targeted-peer ipv4 10.143.73.4 | Configure targeted peer |
(config-router-targeted-peer)#exit | Exit-targeted-peer-mode |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit the transaction. |
PE2: Global EVPN MPLS Command
(config)#evpn mpls enable | Enable EVPN MPLS Note: Reload is required after Enabling/Disabling EVPN MPLS Feature |
(config)#commit | Commit candidate configuration to be running configuration |
(config)#evpn mpls vtep-ip-global 10.143.73.3 | Configuring VTEP global IP to loopback IP |
(config)#hardware-profile filter evpn-mpls-mh enable | Enable hardware-profile filter EVPN-MPLS-MH |
(config)#evpn mpls multihoming enable | Enable Multihoming |
(config)#evpn esi hold-time 60 | Delay timer for ESI to come up before enabling evpn |
(config)#commit | Commit the transaction. |
PE2: Interface Configuration Network Side
(config)#interface xe3 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.24/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config-if)#commit | Commit the transaction. |
Note: For RSVP Configuration refer RSVP-TE Configuration
PE2: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.3 | Router-ID configurations |
(config-router)#network 10.143.73.3/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.24/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
OcNOS(config)#commit | Commit candidate configuration to be running configuration |
PE2: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config-router)#neighbor 10.143.73.1 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.1 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.4 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.4 update-source lo | Source of routing updates as loopback |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.1 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#neighbor 10.143.73.4 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#exit | Exiting of Address family mode |
(config-router)#commit | Commit the transaction. |
PE2: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.3:1700 | Configuring Route-Distinguisher value 10.143.73.3:1700 |
(config-vrf)#route-target both 1700:1700 | Configuring import and export value as 1700:1700 Support: route-target export route-target import |
(config-vrf)#exit | Exiting VRF Mode |
(config)#mac vrf vpls1001 | Enter VRF mode |
(config-vrf)#rd 10.143.73.3:1001 | Configuring Route-Distinguisher value 10.143.73.3:1001 |
(config-vrf)#route-target both 1001:1001 | Configuring import and export value as 1001:1001 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#commit | Commit the transaction. |
PE2: EVPN and MAC VRF Mapping
(config)#evpn mpls id 1800 xconnect target-mpls-id 1700 | Configure the EVPN-VPWS identifier with source identifier 1800 and target identifier 1700 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "test" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 3000 | Configure the EVPN-VPLS identifier with identifier 3000 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit the transaction. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE2: Access Port Configuration
(config)#interface po90 | Enter the Interface mode for po90. |
(config-if)#load-interval 30 | Load interval setting |
(config-if)#evpn multi-homed system-mac 0000.aaaa.bbbc | Configure ESI on a link on which Multi homed CE is connected |
(config-if)#interface po90.1700 switchport | Creating L2 sub interface of Dynamic LAG po90 |
(config-if)#encapsulation dot1q 1700 | Setting Encapsulation to dot1q with VLAN ID 1700 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 1800 | Map vpn-id 2 to interface xe2.2 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#interface po90.300 switchport | Creating L2 sub interface of Dynamic LAG po90 |
(config-if)#encapsulation dot1q 3000 | Setting Encapsulation to dot1q with VLAN ID 3000 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 3000 | Map vpn-id 3000 to interface po90.300 (VPLS) |
(config-access-if)#exit | Exiting out of Access if mode |
(config-if)#interface xe2 | Enter the Interface mode for xe2 |
(config-if)#channel-group 90 mode active | Putting interface xe2 in Dynamic LAG po90 |
(config)#commit | Commit candidate configuration to be running configuration |
PE3: Loopback Interface
#configure terminal | Enter configure mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.4/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
PE3: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.4 | Set the router ID to IP address 10.143.73.4 |
(config-router)#transport-address ipv4 10.143.73.4 | Configure the transport address for IPV4 (for IPV6 use ipv6) to be used for a TCP session over which LDP will run. Note: It is preferable to use the loopback address as the transport address. |
(config-router)#targeted-peer ipv4 10.143.73.1 | Configure targeted peer. |
(config-router-targeted-peer)# targeted-peer ipv4 10.143.73.3 | Configure targeted peer. |
(config-router-targeted-peer)#exit | Exit-targeted-peer-mode |
(config-router)#exit | Exit from router LDP mode |
(config-router)#commit | Commit the transaction. |
PE3: Global EVPN MPLS Command
(config)#evpn mpls enable | Enable EVPN MPLS |
(config)#commit | Commit candidate configuration to be running configuration |
(config)#evpn mpls vtep-ip-global 10.143.73.4 | Configuring VTEP global IP to loopback IP |
(config)#hardware-profile filter evpn-mpls-mh enable | Enable hardware-profile filter EVPN-MPLS-MH |
(config)#evpn mpls multihoming enable | Enable Multihoming |
(config)#evpn esi hold-time 60 | Delay timer for ESI to come up before enabling evpn |
(config)#commit | Commit the transaction. |
PE3: Interface Configuration Network Side
(config)#interface xe3 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.36/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config-if)#interface xe7 | Enter the Interface mode for xe7 |
(config-if)#channel-group 92 mode active | Moving interface to Dynamic LAG 92 |
(config-if)#interface xe8 | Enter the Interface mode for xe8 |
(config-if)#channel-group 92 mode active | Moving interface to Dynamic LAG 92 |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
Note: For RSVP Configuration refer RSVP-TE Configuration
PE3: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.4 | Router-ID configurations |
(config-router)#network 10.143.73.4/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.36/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit the transaction. |
PE3: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config-router)#neighbor 10.143.73.1 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.1 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.3 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.3 update-source lo | Source of routing updates as loopback |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.1 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#neighbor 10.143.73.3 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#exit | Exiting of Address family mode |
(config-router)#commit | Commit the transaction. |
PE3: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.4:1700 | Configuring Route-Distinguisher value 10.143.73.4:1700 |
(config-vrf)#route-target both 1700:1700 | Configuring import and export value as 1700:1700 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#mac vrf vpls1001 | Enter VRF mode |
(config-vrf)#rd 10.143.73.4:1001 | Configuring Route-Distinguisher value 10.143.73.4:1001 |
(config-vrf)#route-target both 1001:1001 | Configuring import and export value as 1001:1001 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#commit | Commit the transaction. |
PE3: EVPN and MAC VRF Mapping
(config)#evpn mpls id 1800 xconnect target-mpls-id 1700 | Configure the EVPN-VPWS identifier with source identifier 1800 and target identifier 1800 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "test" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 3000 | Configure the EVPN-VPLS identifier with identifier 3000 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit the transaction. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE3: Access Port Configuration
(config)#interface po90 | Enter the Interface mode for po90. |
(config-if)#load-interval 30 | Load interval setting |
(config-if)#evpn multi-homed system-mac 0000.aaaa.bbbc | Configure ESI on a link on which Multi homed CE is connected |
(config-if)#interface po90.1700 switchport | Creating L2 sub interface of Dynamic LAG po90 |
(config-if)#encapsulation dot1q 1700 | Setting Encapsulation to dot1q with VLAN ID 1700 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 1800 | Map vpn-id 1800 to Dynamic LAG sub interface po90.1700 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#interface po90.300 switchport | Creating L2 sub interface of Dynamic LAG po90 |
(config-if)#encapsulation dot1q 3000 | Setting Encapsulation to dot1q with VLAN ID 3000 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 3000 | Map vpn-id 3000 to interface po90.3000 (VPLS) |
(config-access-if)#exit | Exiting out of Access if mode |
(config-if)#interface xe2 | Enter the Interface mode for xe2 |
(config-if)#channel-group 90 mode active | Putting interface xe2 in Dynamic LAG po90 |
(config-if)#commit | Commit candidate configuration to be running configuration |
Validation
PE1: ELAN
PE1#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update evpn-id
===================================================================================
10.143.73.1 10.143.73.4 Installed 00:13:32 00:13:32 3000
10.143.73.1 10.143.73.3 Installed 00:13:33 00:13:33 3000
Total number of entries are 2
PE1#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
Local Remote
Destination Status evpn-id Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
===================================================================================================================
10.143.73.4 Installed 3000 xe3 25601 753 403 654 53
10.143.73.3 Installed 3000 xe3 25600 753 403 753 402
Total number of entries are 2
PE1#show evpn mpls id 3000
EVPN-MPLS Information
=================
Codes: NW - Network Port
AC - Access Port
(u) - Untagged
VPN-ID EVI-Name EVI-Type Type Interface ESI VLAN DF-Status Src-Addr Dst-Addr
_______________________________________________________________________________________________________________________________
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.1 10.143.73.4
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.1 10.143.73.3
3000 ---- -- AC xe6.300 --- Single Homed Port --- ---- ---- ---- ----
PE1#show evpn mpls mac-table
============================================================================================================================
EVPN MPLS MAC Entries
============================================================================================================================
VNID Interface VlanId Inner-VlanId Mac-Addr VTEP-Ip/ESI Type Status AccessPortDesc
__________________________________________________________________________________________________________________________________________
3000 xe6.300 ---- ---- 0211.2000.03e8 10.143.73.1 Dynamic Local ------- -------
3000 xe6.300 ---- ---- b86a.97cd.6a3d 10.143.73.1 Dynamic Local ------- -------
3000 ---- ---- ---- 0224.2000.03e8 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Remote ------- -------
3000 ---- ---- ---- b86a.97d2.53bb 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Remote ------- -------
PE1: ELINE or VPWS
PE1#show evpn mpls xconnect
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1700 ---- 1500 1800 xe6.1700 00:00:00:aa:aa:bb:bc:00:00:00 10.143.73.4 1500 AC-NW NW-SET
Total number of entries are 1
PE1#show evpn mpls xconnect tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update local-evpn-id remote-evpn-id
================================================================================================
10.143.73.1 10.143.73.4 Installed 00:16:50 00:16:50 1700 1800
10.143.73.1 10.143.73.3 Installed 00:16:50 00:16:50 1700 1800
Total number of entries are 2
PE1#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
Local Remote Local Remote
Destination Status VPWS-ID VPWS-ID Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
==============================================================================================================================
10.143.73.4 Installed 1700 1800 xe3 25601 -- 402 -- 52
10.143.73.3 Installed 1700 1800 xe3 25600 -- 402 -- 401
Total number of entries are 2
PE1#show evpn mpls xconnect id 1700
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1700 ---- 1500 1800 xe6.1700 00:00:00:aa:aa:bb:bc:00:00:00 10.143.73.3 1500 AC-NW NW-SET
10.143.73.4 1500 ---- ----
Total number of entries are 1
PE2: VPLS
PE2#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update evpn-id
===================================================================================
10.143.73.3 10.143.73.4 Installed 00:24:41 00:24:41 3000
10.143.73.3 10.143.73.1 Installed 00:24:38 00:24:38 3000
Total number of entries are 2
PE2#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
Local Remote
Destination Status evpn-id Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
============================================================================================================
10.143.73.4 Installed 3000 xe5 24965 753 402 654 53
10.143.73.1 Installed 3000 xe5 25604 753 402 753 403
Total number of entries are 2
PE2#show evpn mpls id 3000
EVPN-MPLS Information
=================
Codes: NW - Network Port
AC - Access Port
(u) - Untagged
VPN-ID EVI-Name EVI-Type Type Interface ESI VLAN DF-Status Src-Addr Dst-Addr
____________________________________________________________________________________________________________________________
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.3 10.143.73.4
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.3 10.143.73.1
3000 ---- -- AC po90.300 00:00:00:aa:aa:bb:bc:00:00:00 ---- DF ---- ----
Total number of entries are 3
PE2#show evpn mpls mac-table
============================================================================================================================
EVPN MPLS MAC Entries
============================================================================================================================
VNID Interface VlanId Inner-VlanId Mac-Addr VTEP-Ip/ESI Type Status AccessPortDesc
____________________________________________________________________________________________________________________________
3000 ---- ---- ---- 0211.2000.03e8 10.143.73.1 Dynamic Remote ------- -------
3000 ---- ---- ---- b86a.97cd.6a3d 10.143.73.1 Dynamic Remote ------- -------
3000 ---- ---- ---- 0224.2000.03e8 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Remote ------- -------
3000 po90.300 ---- ---- b86a.97d2.53bb 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Local ------- -------
PE2: VPWS
PE2#show evpn mpls xconnect id 1800
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1800 ---- 1500 1700 po90.1700 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
PE2#show evpn mpls xconnect tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update local-evpn-id remote-evpn-id
=======================================================================================
10.143.73.3 10.143.73.1 Installed 00:50:18 00:50:18 1800 1700
Total number of entries are 1
PE2#show evpn mpls xconnect
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1800 ---- 1500 1700 po90.1700 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
PE2#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
Local Remote Local Remote
Destination Status VPWS-ID VPWS-ID Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
============================================================================================================================
10.143.73.1 Installed 1800 1700 xe5 25604 -- 401 -- 402
Total number of entries are 1
PE3: VPLS
PE3#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update evpn-id
================================================================================
10.143.73.4 10.143.73.3 Installed 00:22:11 00:22:11 3000
10.143.73.4 10.143.73.1 Installed 00:22:11 00:22:11 3000
Total number of entries are 2
PE3#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
Local Remote
Destination Status evpn-id Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
============================================================================================================
10.143.73.3 Installed 3000 po92 24962 654 53 753 402
10.143.73.1 Installed 3000 po92 24964 654 53 753 403
Total number of entries are 2
PE3#show evpn mpls id 3000
EVPN-MPLS Information
=================
Codes: NW - Network Port
AC - Access Port
(u) - Untagged
VPN-ID EVI-Name EVI-Type Type Interface ESI VLAN DF-Status Src-Addr Dst-Addr
_______________________________________________________________________________________________________________________________
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.4 10.143.73.3
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.4 10.143.73.1
3000 ---- -- AC po90.300 00:00:00:aa:aa:bb:bc:00:00:00 ---- NON-DF ---- ----
Total number of entries are 3
PE3#show evpn mpls mac-table
============================================================================================================================
EVPN MPLS MAC Entries
============================================================================================================================
VNID Interface VlanId Inner-VlanId Mac-Addr VTEP-Ip/ESI Type Status AccessPortDesc
__________________________________________________________________________________________________________________________________________
3000 ---- ---- ---- 0211.2000.03e8 10.143.73.1 Dynamic Remote ------- -------
3000 ---- ---- ---- b86a.97cd.6a3d 10.143.73.1 Dynamic Remote ------- -------
3000 ---- ---- ---- 0224.2000.03e8 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Remote ------- -------
3000 po90.300 ---- ---- b86a.97d2.53bb 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Local ------- -------
PE3: VPWS
PE3#show evpn mpls xconnect id 1800
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1800 ---- 1500 1700 po90.1700 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
PE3#show evpn mpls xconnect tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update local-evpn-id remote-evpn-id
========================================================================================================
10.143.73.4 10.143.73.1 Installed 00:23:18 00:23:18 1800 1700
Total number of entries are 1
PE3#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
Local Remote Local Remote
Destination Status VPWS-ID VPWS-ID Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
==============================================================================================================================
10.143.73.1 Installed 1800 1700 po92 24964 -- 52 -- 402
Total number of entries are 1
PE3#show evpn mpls xconnect
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1800 ---- 1500 1700 po90.1700 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
EVPN MPLS Multhoming over BGP-LU
Topology
The diagram depicts the Multi Homed topology for the EVPN MPLS configuration and examples for both ELINE and ELAN service with BGP-LU as underlay MPLS path.
MPLS EVPN multi-homing over LU configuration
Configuration
PE1: Loopback Interface
#configure terminal | Enter configure mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.1/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
PE1: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.1 | Set the router ID to IP address 10.143.73.1 |
(config-router)#transport-address ipv4 10.143.73.1 | Configure the transport address for IPV4 (for IPV6 use ipv6) to be used for a TCP session over which LDP will run. Note: It is preferable to use the loopback address as the transport address. |
(config-router-targeted-peer)# targeted-peer ipv4 10.143.73.6 | Configure targeted peer. |
(config-router-targeted-peer)#exit | Exit-targeted-peer-mode |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit the transaction. |
PE1: Global EVPN MPLS Command
(config)#evpn mpls enable | Enable EVPN MPLS |
(config)#commit | Commit candidate configuration to be running configuration |
(config)#evpn mpls vtep-ip-global 10.143.73.1 | Configuring VTEP global IP to loopback IP |
(config)#hardware-profile filter evpn-mpls-mh enable | Enable hardware-profile filter EVPN-MPLS-MH |
(config)#evpn mpls multihoming enable | Enable Multihoming |
(config)#commit | Commit the transaction. |
PE1: Interface Configuration Network Side
(config)#interface xe3 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.8/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
Note: For RSVP Configuration refer RSVP-TE Configuration.
PE1: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.1 | Router-ID configurations |
(config-router)#network 10.143.73.1/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.8/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit the transaction. |
PE1: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config-router)#neighbor 10.143.73.5 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.5 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.6 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.6 update-source lo | Source of routing updates as loopback |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.5 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#neighbor 10.143.73.6 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#exit | Exiting of Address family mode |
(config-router)#commit | Commit the transaction. |
PE1: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.1:1700 | Configuring Route-Distinguisher value 10.143.73.1:1700 |
(config-vrf)#route-target both 1700:1700 | Configuring import and export value as 1700:1700 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#mac vrf vpls1001 | Enter VRF mode |
(config-vrf)#rd 10.143.73.1:1001 | Configuring Route-Distinguisher value 10.143.73.1:1001 |
(config-vrf)#route-target both 1001:1001 | Configuring import and export value as 1001:1001 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#commit | Commit the transaction. |
PE1: EVPN and VRF Mapping
(config)#evpn mpls id 1700 xconnect target-mpls-id 1800 | Configure the EVPN-VPWS identifier with source identifier 1700 and target identifier 1800 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "vrf2" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 3000 | Configure the EVPN-VPLS identifier with identifier 3000 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit candidate configuration to be running configuration |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE1: Access Port Configuration
(config)#interface xe6 | Enter the Interface mode for xe6. |
(config-if)#interface xe6.1700 switchport | Creating L2 sub interface of physical interface xe6 |
(config-if)#description access-side-int | Giving Interface Description |
(config-if)#encapsulation dot1q 1700 | Setting Encapsulation to dot1q with VLAN ID 1700 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 1700 | Map vpn-id 1700 to interface xe6.1700 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#interface xe6.300 switchport | Creating L2 sub interface of physical interface xe6 |
(config-if)#encapsulation dot1q 3000 | Setting Encapsulation to dot1q with VLAN ID 3000 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 3000 | Map vpn-id 3000 to interface xe6.3000 (VPLS) |
(config-access-if)#commit | Commit candidate configuration to be running configuration |
ABR1: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.2/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
ABR1: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.2 | Set the router ID to IP address 10.143.73.2 |
(config-router)#transport-address ipv4 10.143.73.2 | Configure transport address under router ldp |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit the transaction. |
ABR1: Interface Configuration
(config)#interface xe3 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.9/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#interface xe5 | Enter the Interface mode for xe5 |
(config-if)#ip address 10.255.128.25/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
ABR1: OSPF Configuration
(config)#enable ext-ospf-multi-inst | Enable multiple-instance capabilit |
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.2 | Setting the Router ID as Loopback IP |
(config-router)#network 10.143.73.2/32 area 0.0.0.0 instance-id 200 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.25/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config)#router ospf 200 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.2 | Setting the Router ID as Loopback IP |
(config-router)#network 10.143.73.2/32 area 0.0.0.0 instance-id 100 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.9/31 area 0.0.0.0 | Advertise network address in OSPF that comes under same subnet. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
ABR1: BGP-LU Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config)#allocate-label all | Configure allocate all under router bgp |
(config-router)#neighbor 10.143.73.1 remote-as 65010 | Configuring PE1 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.4 remote-as 65010 | Configuring ABR2 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.1 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.4 update-source lo | Source of routing updates as loopback |
(config-router)# address-family ipv4 unicast | Entering into address family ipv4 unicast |
(config-router-af)# network 10.143.73.2/32 | Advertise the network |
(config-router-af)# exit-address-family | Exit from ipv4 address family |
(config-router)# address-family ipv4 labeled-unicast | Entering into address family ipv4 labeled-unicast |
(config-router-af)#neighbor 10.143.73.4 activate | Activate the ipv4 labeled-unicast neighbor |
(config-router-af)#neighbor 10.143.73.4 next-hop-self | Configure next-hopself for the ipv4 labeled-unicast neighbor |
config-router-af)#neighbor 10.143.73.4 route-reflector-client | Configure neighbor as route reflector client |
(config-router-af)#neighbor 10.143.73.1 activate | Activate the ipv4 labeled-unicast neighbor |
config-router-af)#neighbor 10.143.73.1 route-reflector-client | Configure neighbor as route reflector client |
(config-router-af)#neighbor 10.143.73.1 next-hop-self | Configure next-hopself for the ipv4 labeled-unicast neighbor |
(config-router-af)#commit | Commit the transaction. |
P2: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.3/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
P2: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.3 | Set the router ID to IP address 10.143.73.3 |
(config-router)#transport-address ipv4 10.143.73.3 | Configure transport address under router LDP |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
P2: Interface Configuration
(config)#interface xe5 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.24/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#interface xe6 | Enter the Interface mode for xe5 |
(config-if)#ip address 10.255.128.35/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
P2: OSPF Configuration
(config)#router ospf 200 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.3 | Setting the Router ID as Loopback IP |
(config-router)#network 10.143.73.3/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.24/31 area 0.0.0.0 | Advertise network address in OSPF that comes under same subnet. |
(config-router)#network 10.255.128.35/31 area 0.0.0.0 | Advertise xe5 network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
ABR2: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.4/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit the transaction. |
ABR2: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.4 | Set the router ID to IP address 10.143.73.4 |
(config-router)#transport-address ipv4 10.143.73.4 | Configure transport address under router ldp |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit the transaction. |
ABR2: Interface Configuration
(config)#interface xe6 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.34/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#interface xe5 | Enter the Interface mode for xe5 |
(config-if)#ip address 10.255.128.45/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#interface po92 | Enter the Interface mode for po92 |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#ip address 10.255.128.55/31 | Configure IP address on the interface. |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#interface xe7 | Enter the Interface mode for xe7 |
(config-if)#channel-group 92 mode active | Moving interface to Dynamic LAG 92 |
(config-if)#interface xe8 | Enter the Interface mode for xe8 |
(config-if)#channel-group 92 mode active | Moving interface to Dynamic LAG 92 |
(config-if)#commit | Commit the transaction. |
ABR2: OSPF Configuration
(config)#enable ext-ospf-multi-inst | Enable multiple-instance capabilit |
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.4 | Setting the Router ID as Loopback IP |
(config-router)#network 10.143.73.4/32 area 0.0.0.0 instance-id 300 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.34/31 area 0.0.0.0 | Advertise network address in OSPF that comes under same subnet. |
(config)#router ospf 300 | Enter the Router OSPF mode. |
(config-router)#network 10.143.73.4/32 area 0.0.0.0 instance-id 200 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.45/31 area 0.0.0.0 | Advertise xe5 network address in OSPF. |
(config-router)#network 10.255.128.55/31 area 0.0.0.0 | Advertise po network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
ABR2: BGP-LU Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config)#allocate-label all | Configure allocate all under router bgp |
(config-router)#neighbor 10.143.73.2 remote-as 65010 | Configuring ABR1 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.5 remote-as 65010 | Configuring PE2 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.6 remote-as 65010 | Configuring PE3 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.2 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.5 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.6 update-source lo | Source of routing updates as loopback |
(config-router)# address-family ipv4 unicast | Entering into address family ipv4 unicast |
(config-router-af)# network 10.143.73.4/32 | Advertise the network |
(config-router-af)# exit-address-family | Exit from ipv4 address family |
(config-router)# address-family ipv4 labeled-unicast | Entering into address family ipv4 labeled-unicast |
(config-router-af)#neighbor 10.143.73.2 activate | Activate the ipv4 labeled-unicast neighbor |
(config-router-af)#neighbor 10.143.73.2 next-hop-self | Configure next-hop-self for the ipv4 labeled-unicast neighbor |
config-router-af)#neighbor 10.143.73.2 route-reflector-client | Configure neighbor as route reflector client |
(config-router-af)#neighbor 10.143.73.5 activate | Activate the ipv4 labeled-unicast neighbor |
config-router-af)#neighbor 10.143.73.5 route-reflector-client | Configure neighbor as route reflector client |
(config-router-af)#neighbor 10.143.73.5 next-hop-self | Configure next-hop-self for the ipv4 labeled-unicast neighbor |
(config-router-af)#neighbor 10.143.73.6 activate | Activate the ipv4 labeled-unicast neighbor |
config-router-af)#neighbor 10.143.73.6 route-reflector-client | Configure neighbor as route reflector client |
(config-router-af)#neighbor 10.143.73.6 next-hop-self | Configure next-hop-self for the ipv4 labeled-unicast neighbor |
(config-router-af)#commit | Commit candidate configuration to be running configuration |
PE2: Loopback Interface
#configure terminal | Enter configure mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.5/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.5 | Set the router ID to IP address 10.143.73.5 |
(config-router)#transport-address ipv4 10.143.73.5 | Configure transport address under router ldp |
(config-router)#targeted-peer ipv4 10.143.73.1 | Configure targeted peer. |
(config-router-targeted-peer)# targeted-peer ipv4 10.143.73.6 | Configure targeted peer. |
(config-router-targeted-peer)#exit | Exit-targeted-peer-mode |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: Global EVPN MPLS Command
(config)#evpn mpls enable | Enable EVPN MPLS Note: Reload is required after Enabling/Disabling EVPN MPLS Feature |
OcNOS(config)#commit | Commit candidate configuration to be running configuration |
(config)#evpn mpls vtep-ip-global 10.143.73.5 | Configuring VTEP global IP to loopback IP |
(config)#hardware-profile filter evpn-mpls-mh enable | Enable hardware-profile filter EVPN-MPLS-MH |
(config)#evpn mpls multihoming enable | Enable Multihoming |
(config)#evpn esi hold-time 60 | Delay timer for ESI to come up before enabling evpn |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: Interface Configuration Network Side
(config)#interface xe5 | Enter the Interface mode for xe5. |
(config-if)#ip address 10.255.128.44/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
Note: For RSVP Configuration refer RSVP-TE Configuration.
PE2: OSPF Configuration
(config)#router ospf 300 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.5 | Router-ID configurations |
(config-router)#network 10.143.73.5/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.44/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config-router)#neighbor 10.143.73.1 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.1 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.4 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.4 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.6 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.6 update-source lo | Source of routing updates as loopback |
(config-router)# address-family ipv4 labeled-unicast | Entering into address family ipv4 labeled-unicast |
(config-router-af)#neighbor 10.143.73.4 activate | Activate the ipv4 labeled-unicast neighbor |
(config-router-af)#neighbor 10.143.73.4 next-hop-self | Configure next-hop-self for the ipv4 labeled-unicast neighbor |
(config-router-af)#exit-address-family | Exit the address family |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.1 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#neighbor 10.143.73.6 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#exit | Exiting of Address family mode |
(config-router)#commit | Commit candidate configuration to be running configuration |
PE2: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.5:1700 | Configuring Route-Distinguisher value 10.143.75.3:1700 |
(config-vrf)#route-target both 1700:1700 | Configuring import and export value as 1700:1700 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#mac vrf vpls1001 | Enter VRF mode |
(config-vrf)#rd 10.143.73.5:1001 | Configuring Route-Distinguisher value 10.143.73.5:1001 |
(config-vrf)#route-target both 1001:1001 | Configuring import and export value as 1001:1001 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: EVPN and MAC VRF Mapping
(config)#evpn mpls id 1800 xconnect target-mpls-id 1700 | Configure the EVPN-VPWS identifier with source identifier 1800 and target identifier 1700 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "test" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 3000 | Configure the EVPN-VPLS identifier with identifier 3000 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit candidate configuration to be running configuration |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE2: Access Port Configuration
(config)#interface po90 | Enter the Interface mode for po90. |
(config-if)#load-interval 30 | Load interval setting |
(config-if)#evpn multi-homed system-mac 0000.aaaa.bbbc | Configure ESI on a link on which Multi homed CE is connected |
(config-if)#interface po90.1700 switchport | Creating L2 sub interface of Dynamic LAG po90 |
(config-if)#encapsulation dot1q 1700 | Setting Encapsulation to dot1q with VLAN ID 1700 |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 1800 | Map vpn-id 2 to interface ce49.2 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#interface po90.300 switchport | Creating L2 sub interface of Dynamic LAG po90 |
(config-if)#encapsulation dot1q 3000 | Setting Encapsulation to dot1q with VLAN ID 3000 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 3000 | Map vpn-id 3000 to interface po90.300 (VPLS) |
(config-access-if)#exit | Exiting out of Access if mode |
(config-if)#interface ce52 | Enter the Interface mode for ce52 |
(config-if)#channel-group 90 mode active | Putting interface ce50 in Dynamic LAG po90 |
(config)#commit | Commit candidate configuration to be running configuration |
PE3: Loopback Interface
#configure terminal | Enter configure mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.6/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE3: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
(config-router)#router-id 10.143.73.6 | Set the router ID to IP address 10.143.73.5 |
(config-router)#transport-address ipv4 10.143.73.6 | Configure transport address under router ldp |
(config-router)#targeted-peer ipv4 10.143.73.1 | Configure targeted peer. |
(config-router-targeted-peer)# targeted-peer ipv4 10.143.73.5 | Configure targeted peer. |
(config-router-targeted-peer)#exit | Exit-targeted-peer-mode |
(config-router)#exit | Exit from router LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE3: Global EVPN MPLS Command
(config)#evpn mpls enable | Enable EVPN MPLS |
(config)#commit | Commit candidate configuration to be running configuration |
(config)#evpn mpls vtep-ip-global 10.143.73.6 | Configuring VTEP global IP to loopback IP |
(config)#hardware-profile filter evpn-mpls-mh enable | Enable hardware-profile filter EVPN-MPLS-MH |
(config)#evpn mpls multihoming enable | Enable Multihoming |
(config)#evpn esi hold-time 60 | Delay timer for ESI to come up before enabling evpn |
(config)#commit | Commit candidate configuration to be running configuration |
PE3: Interface Configuration Network Side
(config)#interface po92 | Enter the Interface mode for xe3. |
(config-if)#ip address 10.255.128.54/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config-if)#interface xe7 | Enter the Interface mode for xe7 |
(config-if)#channel-group 92 mode active | Moving interface to Dynamic LAG 92 |
(config-if)#interface xe8 | Enter the Interface mode for xe8 |
(config-if)#channel-group 92 mode active | Moving interface to Dynamic LAG 92 |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE3: OSPF Configuration
(config)#router ospf 300 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.6 | Router-ID configurations |
(config-router)#network 10.143.73.6/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.54/31 area 0.0.0.0 | Advertise network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
PE3: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config-router)#neighbor 10.143.73.1 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.1 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.4 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.4 update-source lo | Source of routing updates as loopback |
(config-router)#neighbor 10.143.73.5 remote-as 65010 | Configuring Neighbor as iBGP neighbor |
(config-router)#neighbor 10.143.73.5 update-source lo | Source of routing updates as loopback |
(config-router)# address-family ipv4 labeled-unicast | Entering into address family ipv4 labeled-unicast |
(config-router-af)#neighbor 10.143.73.4 activate | Activate the ipv4 labeled-unicast neighbor |
(config-router-af)#neighbor 10.143.73.4 next-hop-self | Configure next-hop-self for the ipv4 labeled-unicast neighbor |
(config-router-af)#exit-address-family | Exit the address family |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.1 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#neighbor 10.143.73.5 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#exit | Exiting of Address family mode |
(config-router)#commit | Commit candidate configuration to be running configuration |
PE3: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.6:1700 | Configuring Route-Distinguisher value 10.143.73.6:1700 |
(config-vrf)#route-target both 1700:1700 | Configuring import and export value as 1700:1700 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#mac vrf vpls1001 | Enter VRF mode |
(config-vrf)#rd 10.143.73.6:1001 | Configuring Route-Distinguisher value 10.143.73.6:1001 |
(config-vrf)#route-target both 1001:1001 | Configuring import and export value as 1001:1001 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE3: EVPN and MAC VRF Mapping
(config)#evpn mpls id 1800 xconnect target-mpls-id 1700 | Configure the EVPN-VPWS identifier with source identifier 1800 and target identifier 1800 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "test" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 3000 | Configure the EVPN-VPLS identifier with identifier 3000 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit candidate configuration to be running configuration |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE3: Access Port Configuration
(config)#interface po90 | Enter the Interface mode for po90. |
(config-if)#load-interval 30 | Load interval setting |
(config-if)#evpn multi-homed system-mac 0000.aaaa.bbbc | Configure ESI on a link on which Multi homed CE is connected |
(config-if)#interface po90.1700 switchport | Creating L2 sub interface of Dynamic LAG po90 |
(config-if)#encapsulation dot1q 1700 | Setting Encapsulation to dot1q with VLAN ID 1700 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 1800 | Map vpn-id 1800 to Dynamic LAG sub interface po90.1700 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#interface po90.300 switchport | Creating L2 sub interface of Dynamic LAG po90 |
(config-if)#encapsulation dot1q 3000 | Setting Encapsulation to dot1q with VLAN ID 3000 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 3000 | Map vpn-id 3000 to interface po90.3000 (VPLS) |
(config-access-if)#exit | Exiting out of Access if mode |
(config-if)#interface ce50 | Enter the Interface mode for ce50 |
(config-if)#channel-group 90 mode active | Putting interface ce50 in Dynamic LAG po90 |
(config)#commit | Commit candidate configuration to be running configuration |
Validation
PE1: ELAN
PE1#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update evpn-id
===================================================================================
10.143.73.1 10.143.73.5 Installed 00:13:32 00:13:32 3000
10.143.73.1 10.143.73.6 Installed 00:13:33 00:13:33 3000
Total number of entries are 2
PE1#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
Local Remote
Destination Status evpn-id Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
===================================================================================================================
10.143.73.5 Installed 3000 xe3 25601 753 403 654 53
10.143.73.6 Installed 3000 xe3 25600 753 403 753 402
Total number of entries are 2
PE1#sh mpls forwarding-table | inc 10.143.73.5
B> 10.143.73.5/32 6 10 - - LSP_DEFAULT 25601 xe3 No 10.143.73.2
PE1#sh mpls forwarding-table | inc 10.143.73.6
B> 10.143.73.6/32 6 10 - - LSP_DEFAULT 25660 xe3 No 10.143.73.2
PE1#sh ip bgp labeled-unicast
Status codes: s suppressed, d damped, h history, a add-path, * valid, > best, i - internal, S - stale
Network Next Hop In Label Out Label
*> 10.143.73.1/32 0.0.0.0 24320 -
*>i 10.143.73.2/32 10.143.73.2 24322 25603
*>i 10.143.73.4/32 10.143.73.2 24323 25602
*>i 10.143.73.5/32 10.143.73.2 24321 25601
*>i 10.143.73.6/32 10.143.73.2 24324 25600
PE1#show evpn mpls id 3000
EVPN-MPLS Information
=================
Codes: NW - Network Port
AC - Access Port
(u) - Untagged
VPN-ID EVI-Name EVI-Type Type Interface ESI VLAN DF-Status Src-Addr Dst-Addr
_______________________________________________________________________________________________________________________________
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.1 10.143.73.5
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.1 10.143.73.6
3000 ---- -- AC xe6.300 --- Single Homed Port --- ---- ---- ---- ----
PE1#show evpn mpls mac-table
============================================================================================================================
EVPN MPLS MAC Entries
============================================================================================================================
VNID Interface VlanId Inner-VlanId Mac-Addr VTEP-Ip/ESI Type Status AccessPortDesc
__________________________________________________________________________________________________________________________________________
3000 xe6.300 ---- ---- 0211.2000.03e8 10.143.73.1 Dynamic Local ------- -------
3000 xe6.300 ---- ---- b86a.97cd.6a3d 10.143.73.1 Dynamic Local ------- -------
3000 ---- ---- ---- 0224.2000.03e8 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Remote ------- -------
3000 ---- ---- ---- b86a.97d2.53bb 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Remote ------- -------
PE1: ELINE or VPWS
PE1#show evpn mpls xconnect
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1700 ---- 1500 1800 xe6.1700 00:00:00:aa:aa:bb:bc:00:00:00 10.143.73.5 1500 AC-NW NW-SET
Total number of entries are 1
PE1#show evpn mpls xconnect tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update local-evpn-id remote-evpn-id
================================================================================================
10.143.73.1 10.143.73.5 Installed 00:16:50 00:16:50 1700 1800
10.143.73.1 10.143.73.6 Installed 00:16:50 00:16:50 1700 1800
Total number of entries are 2
PE1#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
Local Remote Local Remote
Destination Status VPWS-ID VPWS-ID Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
==============================================================================================================================
10.143.73.5 Installed 1700 1800 xe3 25601 -- 402 -- 52
10.143.73.6 Installed 1700 1800 xe3 25600 -- 402 -- 401
Total number of entries are 2
PE1#show evpn mpls xconnect id 1700
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1700 ---- 1500 1800 xe6.1700 00:00:00:aa:aa:bb:bc:00:00:00 10.143.73.5 1500 AC-NW NW-SET
10.143.73.6 1500 ---- ----
Total number of entries are 1
PE2: VPLS
PE2#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update evpn-id
===================================================================================
10.143.73.5 10.143.73.6 Installed 00:24:41 00:24:41 3000
10.143.73.5 10.143.73.1 Installed 00:24:38 00:24:38 3000
Total number of entries are 2
PE2#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
Local Remote
Destination Status evpn-id Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
============================================================================================================
10.143.73.6 Installed 3000 xe5 24965 753 402 654 53
10.143.73.1 Installed 3000 xe5 25604 753 402 753 403
Total number of entries are 2
PE2#show evpn mpls id 3000
EVPN-MPLS Information
=================
Codes: NW - Network Port
AC - Access Port
(u) - Untagged
VPN-ID EVI-Name EVI-Type Type Interface ESI VLAN DF-Status Src-Addr Dst-Addr
____________________________________________________________________________________________________________________________
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.5 10.143.73.6
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.5 10.143.73.1
3000 ---- -- AC po90.300 00:00:00:aa:aa:bb:bc:00:00:00 ---- DF ---- ----
Total number of entries are 3
PE2#show evpn mpls mac-table
============================================================================================================================
EVPN MPLS MAC Entries
============================================================================================================================
VNID Interface VlanId Inner-VlanId Mac-Addr VTEP-Ip/ESI Type Status AccessPortDesc
____________________________________________________________________________________________________________________________
3000 ---- ---- ---- 0211.2000.03e8 10.143.73.1 Dynamic Remote ------- -------
3000 ---- ---- ---- b86a.97cd.6a3d 10.143.73.1 Dynamic Remote ------- -------
3000 ---- ---- ---- 0224.2000.03e8 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Remote ------- -------
3000 po90.300 ---- ---- b86a.97d2.53bb 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Local ------- -------
PE2: VPWS
PE2#show evpn mpls xconnect id 1800
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1800 ---- 1500 1700 po90.1700 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
PE2#show evpn mpls xconnect tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update local-evpn-id remote-evpn-id
=======================================================================================
10.143.73.5 10.143.73.1 Installed 00:50:18 00:50:18 1800 1700
Total number of entries are 1
PE2#show evpn mpls xconnect
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1800 ---- 1500 1700 po90.1700 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
PE2#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
Local Remote Local Remote
Destination Status VPWS-ID VPWS-ID Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
============================================================================================================================
10.143.73.1 Installed 1800 1700 xe5 25604 -- 401 -- 402
Total number of entries are 1
PE3: VPLS:
PE3#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update evpn-id
================================================================================
10.143.73.6 10.143.73.5 Installed 00:22:11 00:22:11 3000
10.143.73.6 10.143.73.1 Installed 00:22:11 00:22:11 3000
Total number of entries are 2
PE3#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
Local Remote
Destination Status evpn-id Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
============================================================================================================
10.143.73.5 Installed 3000 po92 24962 654 53 753 402
10.143.73.1 Installed 3000 po92 24964 654 53 753 403
Total number of entries are 2
PE3#show evpn mpls id 3000
EVPN-MPLS Information
=================
Codes: NW - Network Port
AC - Access Port
(u) - Untagged
VPN-ID EVI-Name EVI-Type Type Interface ESI VLAN DF-Status Src-Addr Dst-Addr
_______________________________________________________________________________________________________________________________
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.5 10.143.73.6
3000 ---- L2 NW ---- ---- ---- ---- 10.143.73.5 10.143.73.1
3000 ---- -- AC po90.300 00:00:00:aa:aa:bb:bc:00:00:00 ---- NON-DF ---- ----
Total number of entries are 3
PE3#show evpn mpls mac-table
============================================================================================================================
EVPN MPLS MAC Entries
============================================================================================================================
VNID Interface VlanId Inner-VlanId Mac-Addr VTEP-Ip/ESI Type Status AccessPortDesc
__________________________________________________________________________________________________________________________________________
3000 ---- ---- ---- 0211.2000.03e8 10.143.73.1 Dynamic Remote ------- -------
3000 ---- ---- ---- b86a.97cd.6a3d 10.143.73.1 Dynamic Remote ------- -------
3000 ---- ---- ---- 0224.2000.03e8 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Remote ------- -------
3000 po90.300 ---- ---- b86a.97d2.53bb 00:00:00:aa:aa:bb:bc:00:00:00 Dynamic Local ------- -------
PE3: VPWS
PE3#show evpn mpls xconnect id 1800
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1800 ---- 1500 1700 po90.1700 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
PE3#show evpn mpls xconnect tunnel
EVPN-MPLS Network tunnel Entries
Source Destination Status Up/Down Update local-evpn-id remote-evpn-id
========================================================================================================
10.143.73.6 10.143.73.1 Installed 00:23:18 00:23:18 1800 1700
Total number of entries are 1
PE3#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
Local Remote Local Remote
Destination Status VPWS-ID VPWS-ID Network-Intf Tunnel-Label MC-Label UC-Label MC-Label UC-Label
==============================================================================================================================
10.143.73.1 Installed 1800 1700 po92 24964 -- 52 -- 402
Total number of entries are 1
PE3#show evpn mpls xconnect
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
1800 ---- 1500 1700 po90.1700 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
EVPN-MPLS L2CP Tunneling
EVPN-MPLS services shall support transparent L2 control plane protocol tunneling via network tunnels between CE's, via Sub-ifp framework support. The protocols which are tunneled are controlled by configuration at parent Interface (of A/C ports).The below list of L2 control plane BPDU shall be transparently tunneled across EVPN-MPLS networks based on egress tunnels when Tunnel action is configured.
• dot1x
• efm
• elmi
• lldp
• xSTP
• lacp
In case of action "DISCARD" and "PEER" appropriate behavior should see.
• PEER - the corresponding L2 control packet shall be uplifted to the CPU/control plane for processing.
• DISCARD - the corresponding L2 control packets are dropped at node.
Default behavior is PEER.
Topology
See Figure 24-1 and Figure 24-3.
Note: L2CP should be enabled in all PEs access interface to have end to end traffic.
L2CP Configurations
(config)#in xe1 | Entering into interface level of access side interface |
(config-if)#l2protocol <protocol> tunnel | Enabling tunnel for the L2CP protocol |
(config-if)#l2protocol <protocol> peer | Enabling peer for the L2CP protocol |
(config-if)#l2protocol <protocol> discard | Enabling discard for the L2CP protocol |
Validation
PE2#show l2protocol processing interface <interface>
Bridge Interface Name Protocol Processing Status Hardware Status
====== ============== ======== ================= ===============
- xe8 stp Tunnel Peer
- xe8 lacp Tunnel Peer
- xe8 dot1x Peer Peer
- xe8 lldp Peer Peer
- xe8 efm Discard Discard
- xe8 elmi Discard Discard
- xe8 synce Discard Discard
PE3#show l2protocol interface po1 counters
Interface po1
Peer : lacp : 94
Peer : stp : 298
Peer : elmi : 172
Peer : dot1x : 172
Discard : stp : 6558
Discard : elmi : 8326
Discard : dot1x : 9839
Note: Tunnel counter won't get incremented as per design.
PE4#show interface counters queue-stats
E - Egress, I - Ingress, Q-Size is in bytes
* indicates monitor is active
+-------------+--------------------+--------+-----------------+-------------------+-----------------+-------------------+
| Interface | Queue/Class-map | Q-Size | Tx pkts | Tx bytes | Dropped pkts | Dropped bytes |
+-------------+--------------------+--------+-----------------+-------------------+-----------------+-------------------+
cpu reserved-mc (E) 2097152 6 522 0 0
cpu bgp (E) 1048576 2 145 0 0
cpu rsvp-ldp (E) 1048576 7 1060 0 0
cpu bpdu (E) 1048576 6481 4830520 5126 3815132
ge6 q0 (E) 1253376 350 258691 0 0
ge6 q6 (E) 1253376 114 10338 0 0
ge7 q0 (E) 1253376 6 2708 0 0
ge7 q6 (E) 1253376 2 186 0 0
ge8 q0 (E) 1253376 5177 3859861 0 0
xe12 q6 (E) 12517376 6 517 0 0
xe15 q0 (E) 12517376 2 1281 0 0
xe16 q0 (E) 12517376 2253 1694682 0 0
Note: CPU drop counters will increment for both peer and discard as per design.
EVPN-MPLS MAC Statistics
MAC Statistics feature provides statistics based on number of MAC's routes learned during ELAN and ETREE EVPN-MPLS service. Generic show command supported for both MH and SH services.
"show evpn mpls route-count" is used by admin to fetch all the three route type count (MAC-Only, MAC-IPV4, MAC-IPV6) for per VPN-ID of an EVPN MPLS service and/or route-type.
The details of routes can be fetched via "show evpn mpls nd-cache", "show evpn mpls arp-cache" and "show evpn mpls mac table".
MAC Statistics functionality is "Not Applicable" for EVPN E-LINE service as its point-2-point and does not have MAC advertisements functionality.
Topology
See Figure 24-1 and Figure 24-3.
Configurations
Refer to above configurations to bring up the EVPN service for both SH andMH. No specific configuration needed to get the show command output. Based on the installed service and traffic below route count will be fetched.
Validation
PE1#show evpn mpls route-count
EVPN-MPLS Active route count information
====================================
Max route count : 32768
Active route count: 51
---------------------------------------------
VNID Total MACONLY MACIPv4 MACIPv6
---------------------------------------------
602 17 7 5 5
601 17 7 5 5
801 17 7 5 5
802 0 0 0 0
Total number of entries are 4
EVPN-MPLS Control-Word Support
A control-word is 4-byte optional field inserted between MPLS label stack & MPLS payload in data traffic as demarcation between MPLS labels & payload to distinguish a PW payload from an IP payload carried over the MPLS LSP, so that LSR or transit node which does deep packet inspection should not treat PW payload as IP payload and result in incorrect ECMP/load-sharing.
Some of salient points for support provided in OcNOS:
• control-word is applicable for both L2-EVPN (E-LAN, E-LINE etc) service data traffics and not applicable for L3-EVPN (IRB) traffic.
• control-word is based on static-CLI configurable along with any EVPN instance creation.
hardware-profile filter evpn-mpls-cw enable CLI must be configured for Control-word Support.
System requires reboot once after hardware profile filter control-word enabled.
Topology
See Figure 24-1 and Figure 24-3.
Note: Control-word should be symmetrically enabled/disabled across all PE nodes to have end to end non-malformed traffic handling.
EVPN-MPLS Control-Word Configurations
Refer to EVPN MPLS Single Homing configurations to bring up the EVPN service for SH.
PE1: EVPN and MAC VRF Mapping
(config)#hardware-profile filter evpn-mpls-cw enable | Enable hardware profile filter evpn-mpls-cw for Control-word support |
(config)#evpn mpls id 2 xconnect target-mpls-id 252 control-word | Configure the EVPN-VPWS identifier with source identifier 2 and target identifier 252 along with control-word |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "vrf2" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 1001 control-word | Configure the EVPN-VPLS identifier with identifier 1001 along with control-word |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit the transaction. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE2: EVPN and VRF Mapping
(config)#hardware-profile filter evpn-mpls-cw enable | Enable hardware profile filter evpn-mpls-cw for Control-word support |
(config)#evpn mpls id 252 xconnect target-mpls-id 2 control-word | Configure the EVPN-ELINE identifier with source identifier 252 and target identifier 2 along with control-word |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "vrf2" to EVPN-ELINE identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 1001 control-word | Configure the EVPN-ELAN identifier with identifier 1001 along with control-word |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-ELAN identifier |
(config-evpn-mpls)#commit | Commit the transaction. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
Refer to EVPN MPLS Multihoming configurations to bring up the EVPN service for MH.
PE1: EVPN and VRF Mapping
(config)#hardware-profile filter evpn-mpls-cw enable | Enable hardware profile filter evpn-mpls-cw for Control-word support |
(config)#evpn mpls id 1700 xconnect target-mpls-id 1800 control-word | Configure the EVPN-VPWS identifier with source identifier 1700 and target identifier 1800 along with control-word |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "vrf2" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 3000 control-word | Configure the EVPN-VPLS identifier with identifier 3000 along with control-word |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit the transaction. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE2: EVPN and MAC VRF Mapping
(config)#hardware-profile filter evpn-mpls-cw enable | Enable hardware profile filter evpn-mpls-cw for Control-word support |
(config)#evpn mpls id 1800 xconnect target-mpls-id 1700 control-word | Configure the EVPN-VPWS identifier with source identifier 1800 and target identifier 1700 along with control-word |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "test" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 3000 control-word | Configure the EVPN-VPLS identifier with identifier 3000 along with control-word |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit the transaction. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE3: EVPN and MAC VRF Mapping
(config)#hardware-profile filter evpn-mpls-cw enable | Enable hardware profile filter evpn-mpls-cw for Control-word support |
(config)#evpn mpls id 1800 xconnect target-mpls-id 1700 control-word | Configure the EVPN-VPWS identifier with source identifier 1800 and target identifier 1800 along with control-word |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "test" to EVPN-VPWS identifier |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
(config)#evpn mpls id 3000 control-word | Configure the EVPN-VPLS identifier with identifier 3000 along with control-word |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001 | Mapping vrf "vpls1001" to EVPN-VPLS identifier |
(config-evpn-mpls)#commit | Commit the transaction. |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
Validation
show running-config evpn mpls should display control-word configuration along EVI instance. Traffic validations are performed using packet capture to observe 4-byte control word present in data traffic.
EVPN-MPLS RSVP Multipath
EVPN-MPLS services with RSVP multipath as a transport provides, Multiple RSVP tunnels which are grouped in ECMP/Multipath group to do load sharing for better optimized and efficient usages of multiple RSVP trunks towards the same Destination.
At ingress node the traffic is load-balanced based on the configured hash (L3 src/dest IP/port, L2 src/dst mac, or in-label if intermediate Autonomous segments). Each LSP path within multipath group can provide individual protection for each path (facility, 1-to-1, secondary).
Each tunnel path in multipath group cost may vary (can have different hop, with consideration for load-balancing the traffic).
Unicast traffic is load shared across all the available multipath member (but not mandatory always) where as in case of BUM only the Active member carries traffic. Addition/deletion should not have impact in traffic in case of unicast, and switchover time is not guaranteed <50ms in case of BUM traffic.
This feature supports across all EVPN service as both SH and MH modes and only BUM Traffic not supported for ELINE service alone as per RFC standard.
Topology
Multi Path Configurations
See the previous configurations to bring up the EVPN service for both SH and MH. Transport alone we need to change it from LDP/RSVP to RSVP Multipath as per below configurations.
(config)#router rsvp | Creation of RSVP |
(config-router)#int xe1 | Entering into interface level |
(config-if)#enable-rsvp | Associate the configured RSVP to the exit interface. |
(config-router)#int xe2 | Creation into interface level |
(config-if)#enable-rsvp | Associate the configured RSVP to the exit interface. |
(Config)#rsvp-multipath MP1 | Create an RSVP multipath group 1 |
(config-multipath)#description To-PE3-SH-ELINE-ELAN-ETREE | RSVP multipath specific description |
(config-multipath)#to 7.7.7.7 | RSVP multipath destination prefix |
(config)# rsvp-path P1_PE3 | Path for Resource Reservation Protocol (RSVP) with Name |
(config-path)# 10.1.24.2 loose | Configure this explicit route path as a loose or strict hop |
(config-path)#exit | Exit Path mode. |
(config)# rsvp-path P2_PE3 | Path for Resource Reservation Protocol (RSVP) with Name |
(config-path)# 10.1.34.2 loose | Configure this explicit route path as a loose or strict hop |
(config-path)#exit | Exit Path mode. |
(config)#rsvp-trunk T1_PE3 | Create an RSVP trunk T1 and enter the Trunk mode. |
(config-trunk)#primary path P1_PE3 | Specify an RSVP path to be used |
(config-trunk)#to 7.7.7.7 | Specify the IPv4 egress (destination point) for the LSP |
(config-trunk)#multipath-group MP1 | Associating the MP member to the RSVP trunk |
(config)#rsvp-trunk T2_PE3 | Create an RSVP trunk T1 and enter the Trunk mode. |
(config-trunk)#primary path P2_PE3 | Specify an RSVP path to be used |
(config-trunk)#to 7.7.7.7 | Specify the IPv4 egress (destination point) for the LSP |
(config-trunk)#multipath-group MP1 | Associating the MP member to the RSVP trunk |
(config-trunk)#exit | Exit trunk mode. |
(config)#commit | Commit candidate configuration to be running configuration |
Validation
Below command shows RSVP multipath group info per VPN-ID/destination.
PE3#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
(*) in Policy - tunnel-policy inherited from mac-vrf
================+===========+=========+===============+=========+=========+=========+=========+============+=========+============+========
Local Remote RSVP-Multipath Underlay
Destination Status VPN-ID Policy MC-Label UC-Label MC-Label UC-Label Grp-Name NHLFE-ix NW-Intf NW-Label
================+===========+=========+===============+=========+=========+=========+=========+============+=========+============+========
7.7.7.7 Installed 1601 -- 642 20 642 19 MP2 10 NA NA
7.7.7.7 Installed 601 -- 640 17 640 17 MP2 10 NA NA
7.7.7.7 Installed 1801 -- 643 21 643 20 MP2 10 NA NA
7.7.7.7 Installed 801 -- 641 18 641 18 MP2 10 NA NA
7.7.7.7 Installed 1601 -- 642 20 18 643 MP2 19 NA NA
7.7.7.7 Installed 601 -- 640 17 16 640 MP2 19 NA NA
7.7.7.7 Installed 1801 -- 643 21 19 644 MP1 19 NA NA
7.7.7.7 Installed 1601 -- 642 20 640 17 MP1 12 NA NA
7.7.7.7 Installed 1801 -- 643 21 641 18 MP1 12 NA NA
Total number of entries are 9
PE3#show evpn mpls xc tunnel label
EVPN-MPLS Network tunnel labels
(*) in Policy - tunnel-policy inherited from mac-vrf
================+===========+=========+=========+===============+=========+=========+============+=========+============+=========
Local Remote Local Remote RSVP-Multipath Underlay
Destination Status VPWS-ID VPWS-ID Policy UC-Label UC-Label Grp-Name NHLFE-ix NW-Intf NW-Label
================+===========+=========+=========+===============+=========+=========+============+=========+============+=========
7.7.7.7 Installed 501 1 -- 16 16 MP2 13 NA NA
7.7.7.7 Installed 1501 1001 -- 19 16 MP1 2 NA NA
Total number of entries are 2
Below show command gives info about which MP member carries traffic.
PE3#show mpls counters rsvp multipath-name MP2
Tunnel-id 5008 Extended Tunnel-ID 3.3.3.3Egress 7.7.7.7
lsp-name : T1_PE3-Primary [Ingress]
lsp-ingress : 3.3.3.3 lsp-id : 2208
Rx pkts : n/a Rx bytes : n/a
Tx pkts : 17210 Tx bytes : 80077843
Tunnel-id 5009 Extended Tunnel-ID 7.7.7.7 Egress 3.3.3.3
lsp-name : T2_PE3-Primary [Ingress]
lsp-ingress : 3.3.3.3 lsp-id : 2209
Rx pkts : n/a Rx bytes : n/a
Tx pkts : 16904 Tx bytes : 78376789
Below commend gives ingress and egress evpn mpls counters during bi-directional traffic for BUM and unicast traffic per VPN id.
PE3#show evpn mpls counters network ingress
+----------+-----------+-----------+
| VPN-ID | BUM | Unicast |
| | RX (pkts) | RX (pkts) |
+----------+-----------+-----------+
501 0 0
601 0 0
801 0 0
1501 0 0
1601 131654 0
1801 131682 0
PE3#
PE3#
PE3#show evpn mpls counters network egress
+----------+---------------+-----------+-----------+
| VPN-ID | DESTINATION | BUM | Unicast |
| | PEER | TX (pkts) | TX (pkts) |
+----------+---------------+-----------+-----------+
1601 3.3.3.3 264177 0
501 3.3.3.3 0 0
601 3.3.3.3 0 0
1801 3.3.3.3 264312 0
801 3.3.3.3 0 0
1601 8.8.8.8 264439 0
601 8.8.8.8 0 0
1801 8.8.8.8 264440 0
1601 4.4.4.4 264503 0
1501 4.4.4.4 0 0
1801 4.4.4.4 264530 0
EVPN-ELINE CFM Single Homing
CFM (as per IEEE 802.1ag 2007) provides capabilities useful for detecting, verifying and isolating connectivity failures in Virtual Bridged Local Area Networks through Continuity Check, Loop Back and Link Trace protocols. These capabilities can be used in networks operated by multiple independent organizations, each with restricted access to each other's equipment.
The network administrator is generally informed about the failure in the connection based on the reception of Continuity Check Messages or by the user. The administrator can then initiate Loop Back or Link Trace accordingly to quickly determine and then isolate the fault condition.
The CFM information is conveyed in Protocol frames called CFM Protocol Data Units (CFM PDUs). The CFM PDUs contain the appropriate control and status information used to detect, verify and isolate faults. It also contains information for path discovery in CFM-enabled links.
Currently, supported only for EVPN-ELINE Single home and up MEP service on both Q1 and Q2 platforms.
Topology
The diagram depicts the Single Homed topology for the EVPN MPLS configuration examples that follow.
EVPN MPLS Single Homing configuration
Prerequisite
Configure below hardware-profile commands related to CFM in configuration mode and reboot the nodes.
hardware-profile filter cfm-domain-name-str enable
hardware-profile statistics cfm-ccm enable
PE1: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.1/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE1: Global EVPN MPLS Command
#configure terminal | Enter configuration mode. |
(config)#evpn mpls enable | Enable EVPN MPLS |
(config)#commit | Commit candidate configuration to be running configuration Note: Reload is required after Enabling/Disabling EVPN MPLS Feature |
(config)#evpn mpls vtep-ip-global 10.143.73.1 | Configuring VTEP global IP to loopback IP |
PE1: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
PE1(config-router)#router-id 10.143.73.1 | Set the router ID to IP address 10.143.73.1 |
PE1(config-router)#transport-address ipv4 10.143.73.1 0 | Configure the transport address for IPV4 (for IPV6 use ipv6) to be used for a TCP session over which LDP will run. Note: It is preferable to use the loopback address as the transport address |
PE1(config-router)#targeted-peer ipv4 10.143.73.3 | Configure targeted peer. |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE1: Interface Configuration Network Side
(config)#interface xe3 | Enter the Interface mode for xe3 |
(config-if)#ip address 10.255.128.2/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
Note: For RSVP Configuration refer RSVP-TE Configuration.
PE1: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.1 | Router-ID configurations |
(config-router)#network 10.143.73.1/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.2/31 area 0.0.0.0 | Advertise xe3 network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
PE1: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config-router)#neighbor 10.143.73.3 remote-as 65010 | Configuring PE2 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.3 update-source lo | Source of routing updates as loopback |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.3 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#exit | Exiting of Address family mode |
(config-router)#commit | Commit candidate configuration to be running configuration |
PE1: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.1:2 | Configuring Route-Distinguisher value 10.143.73.1:2 |
(config-vrf)#route-target both 2:2 | Configuring import and export value as 2:2 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE1: EVPN and VRF Mapping
(config)#evpn mpls id 2 xconnect target-mpls-id 252 | Configure the EVPN-VPWS identifier with source identifier 2 and target identifier 252 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "vrf2" to EVPN-VPWS identifier |
(config-evpn-mpls)#commit | Commit candidate configuration to be running configuration |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE1: Access Port Configuration
(config)#interface xe6 | Enter the Interface mode for xe6. |
(config-if)#description access-side-int | Giving Interface Description |
(config-if)#interface xe6.2 switchport | Creating L2 sub interface of physical interface xe6 |
(config-if)#encapsulation dot1q 2 | Setting Encapsulation to dot1q with VLAN ID 2 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 2 | Map vpn-id 252 to interface xe2.2 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#commit | Commit candidate configuration to be running configuration |
PE1: CFM Configuration
(config)#hardware-profile filter cfm-domain-name-str enable | Configure cfm-domain-name-str profile to enable cfm |
(config)#ethernet cfm domain-type character-string domain-name MD-01 level 2 mip-creation none | Create CFM domain for Evpn ELine with type as character string and set mip creation to none |
(config-ether-cfm-mpls-md)#service ma-type string ma-name S1 | Create ma type with string and set mip creation to none |
(config-ether-cfm-mpls-ma)# evpn 2 | Configure evpn <Evpn-id> |
(config-ether-cfm-mpls-ma)#ethernet cfm mep up mpid 8191 active true evpn 2 | Create up-mep for local evpn id 2 |
(config-ether-cfm-mpls-ma-mep)#cc multicast state enable | Enable cc multicast |
(config-ether-cfm-mpls-ma-mep)#exit-ether-ma-mep-mode | Exit Ethernet ma-mep-mode |
(config-ether-cfm-mpls-ma)#mep crosscheck mpid 8000 | Configure cross check to remote mep for vlan 2 |
(config-ether-cfm-mpls-ma)#cc interval 2 | Enable cc interval with value 2 i.e 10 milliseconds |
(config-ether-cfm-mpls-ma)#exit-ether-ma-mode | Exit ethernnet ma mode |
(config-ether-cfm-mpls-md)#exit | Exit Ethernet cfm mode |
(config)#exit | Exit from config mode |
(config)#commit | Commit candidate configuration to be running configuration |
P: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.2/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
P: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
PE1(config-router)#router-id 10.143.73.2 | Set the router ID to IP address 10.143.73.2 |
PE1(config-router)#transport-address ipv4 10.143.73.2 0 | Configure the transport address for IPV4 (for IPV6 use ipv6) to be used for a TCP session over which LDP will run. Note: It is preferable to use the loopback address as the transport address. |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
P: Interface Configuration
(config)#interface xe3 | Enter the Interface mode for xe3 |
(config-if)#ip address 10.255.128.3/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#interface xe5 | Enter the Interface mode for xe5 |
(config-if)#ip address 10.255.128.22/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
P: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.2 | Setting the Router ID as Loopback IP |
(config-router)#network 10.143.73.2/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.22/31 area 0.0.0.0 | Advertise xe5 network address in OSPF |
(config-router)#network 10.255.128.3/31 area 0.0.0.0 | Advertise xe3 network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: Loopback Interface
#configure terminal | Enter configuration mode. |
(config)#interface lo | Enter the Interface mode for the loopback interface. |
(config-if)#ip address 10.143.73.3/32 secondary | Configure IP address on loopback interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: Global LDP
(config)#router ldp | Enter the Router LDP mode. |
PE1(config-router)#router-id 10.143.73.3 | Set the router ID to IP address 10.143.73.3 |
PE1(config-router)#transport-address ipv4 10.143.73.3 0 | Configure the transport address for IPV4 (for IPV6 use ipv6) to be used for a TCP session over which LDP will run. Note: It is preferable to use the loopback address as the transport address. |
PE1(config-router)#targeted-peer ipv4 10.143.73.1 | Configure targeted peer. |
(config-router)#exit | Exit from router target peer and LDP mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: Global EVPN MPLS Command
(config)#evpn mpls enable | Enable EVPN MPLS |
OcNOS(config)#commit | Commit candidate configuration to be running configuration Note: Reload is required after Enabling/Disabling EVPN MPLS Feature. |
(config)#evpn mpls vtep-ip-global 10.143.73.3 | Configuring VTEP global IP to loopback IP |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: Interface Configuration Network Side
(config)#interface xe5 | Enter the Interface mode for xe5 |
(config-if)#ip address 10.255.128.23/31 | Configure IP address on the interface. |
(config-if)#enable-ldp ipv4 | Enable LDP on the physical interface |
(config-if)#label-switching | Enable label switching on the interface. |
(config-if)#exit | Exit interface mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: OSPF Configuration
(config)#router ospf 100 | Enter the Router OSPF mode. |
(config-router)#ospf router-id 10.143.73.3 | Router-ID configurations |
(config-router)#network 10.143.73.3/32 area 0.0.0.0 | Advertise loopback address in OSPF. |
(config-router)#network 10.255.128.23/31 area 0.0.0.0 | Advertise xe5 network address in OSPF. |
(config-router)#exit | Exit Router OSPF mode and return to Configure mode. |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: BGP Configuration
(config)#router bgp 65010 | Enter the Router BGP mode, ASN: 65010 |
(config-router)#neighbor 10.143.73.1 remote-as 65010 | Configuring PE1 as iBGP neighbor using it's loopback IP |
(config-router)#neighbor 10.143.73.1 update-source lo | Source of routing updates as loopback |
(config-router)#address-family l2vpn evpn | Entering into address family mode as EVPN |
(config-router-af)#neighbor 10.143.73.1 activate | Enabling EVPN Address family for neighbor |
(config-router-af)#exit | Exiting of Address family mode |
(config-router)#commit | Commit candidate configuration to be running configuration |
PE2: MAC VRF Configuration
(config)#mac vrf vrf2 | Enter VRF mode |
(config-vrf)#rd 10.143.73.3:2 | Configuring Route-Distinguisher value 10.143.73.3:2 |
(config-vrf)#route-target both 2:2 | Configuring import and export value as 2:2 |
(config-vrf)#exit | Exiting VRF Mode |
(config)#commit | Commit candidate configuration to be running configuration |
PE2: EVPN and VRF Mapping
(config)#evpn mpls id 252 xconnect target-mpls-id 2 | Configure the EVPN-ELINE identifier with source identifier 252 and target identifier 2 |
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2 | Mapping vrf "vrf2" to EVPN-ELINE identifier |
(config-evpn-mpls)#commit | Commit candidate configuration to be running configuration |
(config-evpn-mpls)#exit | Exit the EVPN MPLS mode and return to the configure mode. |
PE2: Access Port Configuration:
(config)#interface xe2 | Enter the Interface mode for xe2. |
(config-if)#description access-side-int | Giving Interface Description |
(config-if)#interface xe2.2 switchport | Creating L2 sub interface of physical interface xe2 |
(config-if)#encapsulation dot1q 2 | Setting Encapsulation to dot1q with VLAN ID 2 Supported Encapsulation: dot1ad, dot1q, untagged, default |
(config-if)#access-if-evpn | Entering Access mode for EVPN MPLS ID configuration |
(config-access-if)#map vpn-id 252 | Map vpn-id 252 to interface xe2.2 (VPWS) |
(config-access-if)#exit | Exiting out of access interface mode |
(config-if)#commit | Commit candidate configuration to be running configuration |
PE2: CFM Configuration
(config)#hardware-profile filter cfm-domain-name-str enable | Configure cfm-domain-name-str profile to enable cfm |
(config)#ethernet cfm domain-type character-string domain-name MD-01 level 2 mip-creation none | Create CFM domain for Evpn ELine with type as character string and set mip creation to none |
(config-ether-cfm-mpls-md)#service ma-type string ma-name S1 | Create ma type with string and set mip creation to none |
(config-ether-cfm-mpls-ma)# evpn 252 | Configure evpn <Evpn-id> |
(config-ether-cfm-mpls-ma)#ethernet cfm mep up mpid 8000 active true evpn 252 | Create up-mep for local evpn id 252 |
(config-ether-cfm-mpls-ma-mep)#cc multicast state enable | Enable cc multicast |
(config-ether-cfm-mpls-ma-mep)#exit-ether-ma-mep-mode | Exit Ethernet ma-mep-mode |
(config-ether-cfm-mpls-ma)#mep crosscheck mpid 8191 | Configure cross check to remote mep for vlan 2 |
(config-ether-cfm-mpls-ma)#cc interval 2 | Enable cc interval with value 2 i.e 10 milliseconds |
(config-ether-cfm-mpls-ma)#exit-ether-ma-mode | Exit ethernnet ma mode |
(config-ether-cfm-mpls)#exit | Exit Ethernet cfm mode |
(config)#exit | Exit from config mode |
(config)#commit | Commit candidate configuration to be running configuration |
Validation
PE1
PE1#show evpn mpls xconnect id 2
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
2 ---- 1500 252 xe6.2 --- Single Homed Port --- 10.143.73.3 1500 AC-NW NW-SET
Total number of entries are 1
PE1#show ethernet cfm errors domain MD-01
Domain Name Level MEPID Defects
-----------------------------------------------
MD-01 2 8191 .....
1. defRDICCM 2. defMACstatus 3. defRemoteCCM
4. defErrorCCM 5. defXconCCM
PE1#show ethernet cfm ma status domain MD-01 ma-name S1
MA NAME STATUS
-------------------------------
S1 Active
PE1#show ethernet cfm maintenance-points local mep domain MD-01 ma-name S1
MPID Dir Lvl CC-Stat HW-Status CC-Intvl MAC-Address Def Port MD Name
---------------------------------------------------------------------------
8191 Up 2 Enable Installed 10 ms e8c5.7a78.7124 F xe6.2 MD-01
PE1#show ethernet cfm maintenance-points remote domain MD-01 ma-name S1
MEPID RMEPID LEVEL Rx CCM RDI PEER-MAC TYPE
----------------------------------------------------------------------
8191 8000 2 Yes False b86a.97cb.6c6e Configured
PE1#show ethernet cfm maintenance-points remote mpid 8191 domain MD-01 ma-name S1
MEPID RMEPID LEVEL Rx CCM RDI PEER-MAC TYPE
----------------------------------------------------------------------
8191 8000 2 Yes False b86a.97cb.6c6e Configured
PE1#ping ethernet mac b86a.97cb.6c6e unicast source 8191 domain MD-01 ma-name S1
success rate is 100 (5/5)
PE1#traceroute ethernet b86a.97cb.6c6e mepid 8191 domain MD-01 ma-name S1
MP Mac Hops Relay-action Ingress/Egress Ingress/Egress action
b86a.97cb.6c6e 1 RlyHit Ingress IngOK
PE1#show ethernet cfm statistics mep 8191 domain MD-01
CFM Statistics for MEP 8191 of MD MD-01
=====================================
Continuity Check Messages
CCM Sent : CCM Stats Profile Disabled
CCM Received : CCM Stats Profile Disabled
Loop Back Messages
LBM Sent : 5
LBR Received(Valid) : 5
LBR Received(Bad msdu) : 0
LBR Received(Out-of-Seq): 0
Link Trace Messages
LTM Sent : 1
LTR Sent : 0
LTR Received(Valid) : 1
LTR Received(unexpected): 0
PE2
PE2#show evpn mpls xconnect id 252
EVPN-MPLS Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
252 ---- 1500 2 xe2.2 --- Single Homed Port --- 10.143.73.1 1500 AC-NW NW-SET
Total number of entries are 1
PE2#show ethernet cfm errors domain MD-01
Domain Name Level MEPID Defects
-----------------------------------------------
MD-01 2 8000 .....
1. defRDICCM 2. defMACstatus 3. defRemoteCCM
4. defErrorCCM 5. defXconCCM
PE3#show ethernet cfm ma status domain MD-01 ma-name S1
ma-name S1
MA NAME STATUS
-------------------------------
S1 Active
PE2#show ethernet cfm maintenance-points local mep domain MD-01 ma-name S1
MPID Dir Lvl CC-Stat HW-Status CC-Intvl MAC-Address Def Port MD Name
---------------------------------------------------------------------------
8000 Up 2 Enable Installed 10 ms b86a.97cb.6c6e F xe2.2 MD-01
PE3#show ethernet cfm maintenance-points remote domain MD-01 ma-name S1
MEPID RMEPID LEVEL Rx CCM RDI PEER-MAC TYPE
----------------------------------------------------------------------
8000 8191 2 Yes False e8c5.7a78.7124 Configured
PE2#show ethernet cfm maintenance-points remote mpid 8000 domain MD-01 ma-name S1
MEPID RMEPID LEVEL Rx CCM RDI PEER-MAC TYPE
----------------------------------------------------------------------
8000 8191 2 Yes False e8c5.7a78.7124 Configured
PE2#traceroute ethernet e8c5.7a78.7124 mepid 8000 domain MD-01 ma-name S1
MP Mac Hops Relay-action Ingress/Egress Ingress/Egress action
e8c5.7a78.7124 1 RlyHit Ingress IngOK
PE2#show ethernet cfm statistics mep 8000 domain MD-01 ma-name S1
CFM Statistics for MEP 8000 of MD MD-01
=====================================
Continuity Check Messages
CCM Sent : CCM Stats Profile Disabled
CCM Received : CCM Stats Profile Disabled
Loop Back Messages
LBM Sent : 5
LBR Received(Valid) : 5
LBR Received(Bad msdu) : 0
LBR Received(Out-of-Seq): 0
Link Trace Messages
LTM Sent : 1
LTR Sent : 1
LTR Received(Valid) : 1
LTR Received(unexpected): 0