EVPN-MPLS Control-Word Support

OcNOS-SP : Multi-Protocol Label Switching Guide : Multi-Protocol Label Switching Configuration Guide : EVPN MPLS Configuration : EVPN-MPLS Control-Word Support

A control-word is 4-byte optional field inserted between MPLS label stack & MPLS payload in data traffic as demarcation between MPLS labels & payload to distinguish a PW payload from an IP payload carried over the MPLS LSP, so that LSR or transit node which does deep packet inspection should not treat PW payload as IP payload and result in incorrect ECMP/load-sharing.

Some of salient points for support provided in OcNOS:

• control-word is applicable for both L2-EVPN (E-LAN, E-LINE etc) service data traffics and not applicable for L3-EVPN (IRB) traffic.

• control-word is based on static-CLI configurable along with any EVPN instance creation.

hardware-profile filter evpn-mpls-cw enable CLI must be configured for Control-word Support.

System requires reboot once after hardware profile filter control-word enabled.

Topology

See Figure 24-1 and Figure 24-3.

Note: Control-word should be symmetrically enabled/disabled across all PE nodes to have end to end non-malformed traffic handling.

EVPN-MPLS Control-Word Configurations

Refer to EVPN MPLS Single Homing configurations to bring up the EVPN service for SH.

PE1: EVPN and MAC VRF Mapping

(config)#hardware-profile filter evpn-mpls-cw enable	Enable hardware profile filter evpn-mpls-cw for Control-word support
(config)#evpn mpls id 2 xconnect target-mpls-id 252 control-word	Configure the EVPN-VPWS identifier with source identifier 2 and target identifier 252 along with control-word
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2	Mapping vrf "vrf2" to EVPN-VPWS identifier
(config)#evpn mpls id 1001 control-word	Configure the EVPN-VPLS identifier with identifier 1001 along with control-word
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001	Mapping vrf "vpls1001" to EVPN-VPLS identifier
(config-evpn-mpls)#commit	Commit the transaction.

PE2: EVPN and VRF Mapping

(config)#hardware-profile filter evpn-mpls-cw enable	Enable hardware profile filter evpn-mpls-cw for Control-word support
(config)#evpn mpls id 252 xconnect target-mpls-id 2 control-word	Configure the EVPN-ELINE identifier with source identifier 252 and target identifier 2 along with control-word
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2	Mapping vrf "vrf2" to EVPN-ELINE identifier
(config)#evpn mpls id 1001 control-word	Configure the EVPN-ELAN identifier with identifier 1001 along with control-word
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001	Mapping vrf "vpls1001" to EVPN-ELAN identifier
(config-evpn-mpls)#commit	Commit the transaction.

Refer to EVPN MPLS Multihoming configurations to bring up the EVPN service for MH.

PE1: EVPN and VRF Mapping

(config)#hardware-profile filter evpn-mpls-cw enable	Enable hardware profile filter evpn-mpls-cw for Control-word support
(config)#evpn mpls id 1700 xconnect target-mpls-id 1800 control-word	Configure the EVPN-VPWS identifier with source identifier 1700 and target identifier 1800 along with control-word
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2	Mapping vrf "vrf2" to EVPN-VPWS identifier
(config)#evpn mpls id 3000 control-word	Configure the EVPN-VPLS identifier with identifier 3000 along with control-word
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001	Mapping vrf "vpls1001" to EVPN-VPLS identifier
(config-evpn-mpls)#commit	Commit the transaction.

PE2: EVPN and MAC VRF Mapping

(config)#hardware-profile filter evpn-mpls-cw enable	Enable hardware profile filter evpn-mpls-cw for Control-word support
(config)#evpn mpls id 1800 xconnect target-mpls-id 1700 control-word	Configure the EVPN-VPWS identifier with source identifier 1800 and target identifier 1700 along with control-word
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2	Mapping vrf "test" to EVPN-VPWS identifier
(config)#evpn mpls id 3000 control-word	Configure the EVPN-VPLS identifier with identifier 3000 along with control-word
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001	Mapping vrf "vpls1001" to EVPN-VPLS identifier
(config-evpn-mpls)#commit	Commit the transaction.

PE3: EVPN and MAC VRF Mapping

(config)#hardware-profile filter evpn-mpls-cw enable	Enable hardware profile filter evpn-mpls-cw for Control-word support
(config)#evpn mpls id 1800 xconnect target-mpls-id 1700 control-word	Configure the EVPN-VPWS identifier with source identifier 1800 and target identifier 1800 along with control-word
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2	Mapping vrf "test" to EVPN-VPWS identifier
(config)#evpn mpls id 3000 control-word	Configure the EVPN-VPLS identifier with identifier 3000 along with control-word
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vpls1001	Mapping vrf "vpls1001" to EVPN-VPLS identifier
(config-evpn-mpls)#commit	Commit the transaction.

Validation

show running-config evpn mpls should display control-word configuration along EVI instance. Traffic validations are performed using packet capture to observe 4-byte control word present in data traffic.

Last modified date: 10/17/2023