このページの内容
例:EVPNベースのMPLSを実行するWANを介してEVPN-VXLANデータセンターネットワークを相互接続
この例では、EVPN-MPLSを実行するWANを介してEVPN-VXLANデータセンターネットワークを相互接続し、データセンターの相互接続(DCI)ソリューションとしてのEVPNのメリットを活用する方法を示します。
要件
この例では、以下のハードウェアおよびソフトウェアコンポーネントを使用しています。
-
データセンターゲートウェイおよびWANエッジルーターとして構成するジュニパーネットワークスMXシリーズルーター4台。
-
トップオブラック(ToR)ルーターとして構成するジュニパーネットワークス MXシリーズ ルーター 4 台。
-
6 台のカスタマー エッジ(CE)デバイス。
-
複数のVLANを設定する機能を備えた各CEデバイスに接続された6台のホストデバイス。
-
EVPN-MPLS WANネットワークの一部である1つのプロバイダ(P)ルーター。
-
Junos OSリリース17.2以降。
概要
イーサネットVPN(EVPN)を実行している異なるデータセンターネットワークを、論理トンネル(lt-)インターフェイスを使用して、MPLSベースのEVPNを実行するWANを介して、仮想拡張LAN(VXLAN)カプセル化と相互接続できます。
図1 は、MPLSベースのEVPNを実行するWANを介した、VXLANカプセル化を備えたEVPNを実行するデータセンターネットワークの相互接続を示しています。この例では、データセンターゲートウェイおよびWANエッジルーターとして機能するMXシリーズルーターの名前はMX11、MX12、MX21、MX22です。トップオブラック(ToR)ルーターとして機能するMXシリーズルーターの名前は、ToR11、ToR12、ToR21、およびToR22です。データセンターネットワーク1(DC1)に接続されたカスタマーエッジ(CE)デバイスの名前は、CE1、CE2、CE3です。データセンターネットワーク2(DC2)に接続されたカスタマーエッジ(CE)デバイスの名前は、CE4、CE5、CE6です。各CEデバイスに接続されたホストデバイスは、複数のホストVLANを設定できる必要があります。WANプロバイダルーターの名前はPです。
注:
CEデバイスは、ToRデバイスの論理システムの一部です。
図1:EVPN-MPLS
を実行するWANによるEVPN-VXLANデータセンターの相互接続
を実行するWANによるEVPN-VXLANデータセンターの相互接続
データセンターゲートウェイおよびWANエッジルーターとして機能するMXシリーズルーターの場合、以下の情報を設定します。
-
IRB インターフェイス、仮想ゲートウェイ アドレス、およびループバック論理インターフェイス。
-
ゲートウェイとToRルーター間の外部BGP(EBGP)アンダーレイ接続、シグナリングプロトコルとしてのEVPNです。
-
仮想スイッチテーブルへの特定のルートを許可するルーティングポリシー。
-
一意の ルート識別子と vrf ターゲット 値を含む、各仮想ネットワークのルーティング インスタンス(レイヤー 3 VRF)。
-
各仮想ネットワークの仮想スイッチインスタンス(レイヤー2 MAC-VRF)、VTEP送信元インターフェイス(常にlo0.0)、ルート識別子、 vrf-import ポリシー
-
各仮想スイッチのEVPNプロトコル、カプセル化方式、VNIリスト、BUMトラフィック転送方式
-
VNIDをVLAN ID、IRB(レイヤー3)インターフェイス、およびBUM転送方法にマッピングする各仮想スイッチ内のブリッジドメイン。
トップオブラック(ToR)ルーターとして機能するMXシリーズルーターの場合、以下の情報を設定します。
-
VLAN、VLAN ID、ループバック論理インターフェイスを持つホスト向けインターフェイス。
-
LACP(Link Aggregation Control Protocol)が有効なLAG(リンクアグリゲーショングループ)、ESI(イーサネットセグメントID)、および
all-activeモード。 -
EVPNをシグナリングプロトコルとして使用したToRとゲートウェイルーター間のマルチプロトコル外部BGP(MP-EBGP)オーバーレイ。
-
カプセル化方法として VXLAN を使用した EVPN、 extended-vni-list、マルチキャスト モード、および各 VNI のルート ターゲット。
-
VRFインポートポリシー、 vtep-source-interface、
route-distinguisher、およびvrfインポートとターゲット情報。 -
VLAN IDが世界的に重要なVNIにマッピングされたVLAN。
注:
仮想ゲートウェイアドレスを、エンドホスト(仮想マシンまたはサーバー)のデフォルトのIPv4またはIPv6ゲートウェイアドレスとして設定できます。
設定
ToR11の設定
ステップバイステップの手順
次の例では、設定階層のさまざまなレベルに移動する必要があります。CLIのナビゲーションについては、『CLIユーザーガイド』の「設定モードでのCLIエディターの使用」を参照してください。
MXルーターをToR11として設定します。
注:ToR12、ToR21、ToR22についても同様の手順を実行します。インターフェイス名、IPアドレス、接続については、図1を参照してください。
-
システムホスト名を設定します。
[edit] user@ToR11# set system host-name ToR11
-
集合型イーサネットインターフェイスの数を設定します。
[edit] user@ToR11# set chassis aggregated-devices ethernet device-count 1
-
ToR11デバイス上のインターフェイスをMX12、CE-2、CE-1、ToR12、MX11デバイスに接続するように設定し、アンダーレイ接続を有効にします。
[edit] user@ToR11# set interfaces ge-0/0/0 unit 0 description "CONNECTED TO CE-2" user@ToR11# set interfaces ge-0/0/0 unit 0 family bridge interface-mode trunk user@ToR11# set interfaces ge-0/0/0 unit 0 family bridge vlan-id-list 1-5 user@ToR11# set interfaces ge-0/0/2 description "CONNECTED TO CE-1" user@ToR11# set interfaces ge-0/0/2 gigether-options 802.3ad ae0 user@ToR11# set interfaces ge-0/0/3 unit 0 description "CONNECTED TO ToR12" user@ToR11# set interfaces ge-0/0/3 unit 0 family inet address 192.168.2.1/24 user@ToR11# set interfaces ge-0/0/4 unit 0 description "CONNECTED TO MX–11" user@ToR11# set interfaces ge-0/0/4 unit 0 family inet address 192.168.3.1/24 user@ToR11# set interfaces ge-0/0/5 unit 0 description "CONNECTED TO MX–12" user@ToR11# set interfaces ge-0/0/5 unit 0 family inet address 192.168.4.1/24
-
CE-1エンドホストデバイスに向けて、リンクアグリゲーション制御プロトコル(LACP)対応のリンクアグリゲーショングループ(LAG)インターフェイスを設定します。ESI値は、EVPNドメイン全体でグローバルに一意です。
all-active設定により、ToR11およびToR12は、すべてのCEリンクがアクティブに使用されるように、CEデバイスとの間でトラフィックを転送できます。[edit] user@ToR11# set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 user@ToR11# set interfaces ae0 esi all-active user@ToR11# set interfaces ae0 aggregated-ether-options lacp active user@ToR11# set interfaces ae0 aggregated-ether-options lacp periodic fast user@ToR11# set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 user@ToR11# set interfaces ae0 unit 0 family bridge interface-mode trunk user@ToR11# set interfaces ae0 unit 0 family bridge vlan-id-list 1-5
-
ループバック インターフェイス アドレスとルーティング オプションを設定します。
[edit] user@ToR11# set interfaces lo0 unit 0 family inet address 192.0.2.11/32 user@ToR11# set routing-options router-id 192.0.2.11 user@ToR11# set routing-options autonomous-system 65100
-
ロードバランシングポリシーを転送テーブルに適用します。
[edit] user@ToR11# set routing-options forwarding-table export evpn-pplb
-
ダイレクトループバックアドレスルートを受け入れるようにルーティングポリシーを設定します。
[edit] user@ToR11# set policy-options policy-statement LO term 1 from protocol direct user@ToR11# set policy-options policy-statement LO term 1 from route-filter 192.0.2.11/32 exact user@ToR11# set policy-options policy-statement LO term 1 then accept
-
NO-EXPORTコミュニティを設定します。
[edit] user@ToR11# set policy-options community NO-EXPORT members no-advertise user@ToR11# set policy-options community NO-EXPORT members no-export user@ToR11# set policy-options community NO-EXPORT members no-export-subconfed
-
ロードバランシングとTESTポリシーを設定します。
[edit] user@ToR11# set policy-options policy-statement TEST then community add NO-EXPORT user@ToR11# set policy-options policy-statement evpn-pplb from protocol evpn user@ToR11# set policy-options policy-statement evpn-pplb then load-balance per-packet
-
仮想ネットワークごとにEVPNルーティングインスタンスを設定します。VTEPソースインターフェイス、ルート識別子(EVPNルートの識別とアドバタイズに使用)、
vrf-target(定義されたルートターゲットを使用してそのローカルVRFのすべてのルートをエクスポートし、タグ付け)を定義します。EVPNプロトコル、カプセル化方法、VNIリスト、BUMトラフィック転送方法を設定します。最後に、VNIDをVLAN IDにマッピングする各仮想ルーターのブリッジドメインを設定し、BUMの転送方法を特定します。[edit] user@ToR11# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@ToR11# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@ToR11# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.0 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@ToR11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@ToR11# set routing-instances EVPN-VXLAN-1 interface ge-0/0/0.0 user@ToR11# set routing-instances EVPN-VXLAN-1 interface ae0.0 user@ToR11# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.21:1 user@ToR11# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@ToR11# set routing-instances VRF instance-type vrf user@ToR11# set routing-instances VRF interface irb.1 user@ToR11# set routing-instances VRF interface irb.2 user@ToR11# set routing-instances VRF interface irb.3 user@ToR11# set routing-instances VRF interface irb.4 user@ToR11# set routing-instances VRF interface irb.5 user@ToR11# set routing-instances VRF route-distinguisher 1:1 user@ToR11# set routing-instances VRF vrf-target target:10:10
データセンターゲートウェイとWANエッジ1ルーター(MX11)の設定
ステップバイステップの手順
次の例では、設定階層のさまざまなレベルに移動する必要があります。CLIのナビゲーションについては、『CLIユーザーガイド』の「設定モードでのCLIエディターの使用」を参照してください。
MXシリーズルーターをデータセンターゲートウェイおよびWANエッジルーターとして設定し、MX11という名前を付けます。
注:MX12、MX21、MX22についても同様の手順を実行します。インターフェイス名、IPアドレス、接続については、図1を参照してください。
-
システムホスト名を設定します。
[edit] user@MX11# set system host-name MX11
-
MX11 ルーター(DC GW/WAN Edge1)上のインターフェイスを設定して、DC1 ネットワークの EVPN-VXLAN 部分である MX12、ToR11、ToR12、P デバイスへのアンダーレイ接続を有効にします。
[edit] user@MX11# set interfaces ge-0/0/0 unit 0 description "CONNECTED TO ToR11" user@MX11# set interfaces ge-0/0/0 unit 0 family inet address 192.168.3.2/24 user@MX11# set interfaces ge-0/0/1 unit 0 description "CONNECTED TO ToR12" user@MX11# set interfaces ge-0/0/1 unit 0 family inet address 192.168.6.2/24 user@MX11# set interfaces ge-0/0/2 unit 0 description "CONNECTED TO MX12" user@MX11# set interfaces ge-0/0/2 unit 0 family inet address 192.168.7.1/24 user@MX11# set interfaces ge-0/0/3 unit 0 description "CONNECTED TO P" user@MX11# set interfaces ge-0/0/3 unit 0 family inet address 203.0.113.41/24 user@MX11# set interfaces ge-0/0/3 unit 0 family mpls
-
ゲートウェイルーター(MX11およびMX12)とToR(ToR11およびToR12)間の外部BGP(EBGP)アンダーレイ接続を設定します。
[edit] user@MX11# set protocols bgp group MX12 type external user@MX11# set protocols bgp group MX12 local-address 192.168.7.1 user@MX11# set protocols bgp group MX12 export TEST user@MX11# set protocols bgp group MX12 export LO user@MX11# set protocols bgp group MX12 peer-as 65500 user@MX11# set protocols bgp group MX12 local-as 65400 user@MX11# set protocols bgp group MX12 neighbor 192.168.7.2 family inet unicast user@MX11# set protocols bgp group ToR11 type external user@MX11# set protocols bgp group ToR11 local-address 192.168.3.2 user@MX11# set protocols bgp group ToR11 import TEST user@MX11# set protocols bgp group ToR11 export TEST user@MX11# set protocols bgp group ToR11 export LO user@MX11# set protocols bgp group ToR11 peer-as 65100 user@MX11# set protocols bgp group ToR11 local-as 65400 user@MX11# set protocols bgp group ToR11 neighbor 192.168.3.1 family inet unicast user@MX11# set protocols bgp group ToR12 type external user@MX11# set protocols bgp group ToR12 local-address 192.168.6.2 user@MX11# set protocols bgp group ToR12 export TEST user@MX11# set protocols bgp group ToR12 export LO user@MX11# set protocols bgp group ToR12 peer-as 65200 user@MX11# set protocols bgp group ToR12 local-as 65400 user@MX11# set protocols bgp group ToR12 neighbor 192.168.6.1 family inet unicast
-
ゲートウェイルーター(MX11およびMX12)とToR(ToR11およびToR12)の間にマルチプロトコル外部BGP(MP-EBGP)オーバーレイ接続を設定し、EVPNをシグナリングプロトコルとして設定します。
[edit] user@MX11# set protocols bgp group MX12-EVPN type external user@MX11# set protocols bgp group MX12-EVPN multihop ttl 2 user@MX11# set protocols bgp group MX12-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group MX12-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group MX12-EVPN export TEST user@MX11# set protocols bgp group MX12-EVPN peer-as 65500 user@MX11# set protocols bgp group MX12-EVPN local-as 65400 user@MX11# set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling user@MX11# set protocols bgp group ToR11-EVPN type external user@MX11# set protocols bgp group ToR11-EVPN multihop ttl 2 user@MX11# set protocols bgp group ToR11-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group ToR11-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group ToR11-EVPN export TEST user@MX11# set protocols bgp group ToR11-EVPN peer-as 65100 user@MX11# set protocols bgp group ToR11-EVPN local-as 65400 user@MX11# set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling user@MX11# set protocols bgp group ToR12-EVPN type external user@MX11# set protocols bgp group ToR12-EVPN multihop ttl 2 user@MX11# set protocols bgp group ToR12-EVPN multihop no-nexthop-change user@MX11# set protocols bgp group ToR12-EVPN local-address 192.0.2.21 user@MX11# set protocols bgp group ToR12-EVPN export TEST user@MX11# set protocols bgp group ToR12-EVPN peer-as 65200 user@MX11# set protocols bgp group ToR12-EVPN local-as 65400 user@MX11# set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling
-
トポロジー内のホストのMACおよびIPルート(MAC+IPタイプ2ルート)をアドバタイズするIRB(統合型ルーティングおよびブリッジング)インターフェイスを設定します。IRB 設定は、ホスト上の VLAN のゲートウェイです。
ステップバイステップの手順
-
MX11上のVLAN-1(VLAN-1のホスト部分)のIRBゲートウェイ設定を以下に示します。
[edit] user@MX11# set interfaces irb unit 1 proxy-macip-advertisement user@MX11# set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa user@MX11# set interfaces irb unit 1 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 1 family inet address 10.11.1.12/24 virtual-gateway-address 10.11.1.10
-
MX11上のVLAN-2(VLAN-2のホスト部分)のIRBゲートウェイ設定を以下に示します。
[edit] user@MX11# set interfaces irb unit 2 proxy-macip-advertisement user@MX11# set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb user@MX11# set interfaces irb unit 2 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 2 family inet address 10.12.1.12/24 virtual-gateway-address 10.12.1.10
-
MX11上のVLAN-3(VLAN-3のホスト部分)のIRBゲートウェイ設定を以下に示します。
[edit] user@MX11# set interfaces irb unit 3 proxy-macip-advertisement user@MX11# set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc user@MX11# set interfaces irb unit 3 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 3 family inet address 10.13.1.12/24 virtual-gateway-address 10.13.1.10
-
MX11上のVLAN-4(VLAN-4のホスト部分)のIRBゲートウェイ設定を以下に示します。
[edit] user@MX11# set interfaces irb unit 4 proxy-macip-advertisement user@MX11# set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd user@MX11# set interfaces irb unit 4 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 4 family inet address 10.14.1.12/24 virtual-gateway-address 10.14.1.10
-
MX11(VLAN-5のホスト部分)上のVLAN-5のIRBゲートウェイ設定を以下に示します。
[edit] user@MX11# set interfaces irb unit 5 proxy-macip-advertisement user@MX11# set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee user@MX11# set interfaces irb unit 5 virtual-gateway-esi all-active user@MX11# set interfaces irb unit 5 family inet address 10.15.1.12/24 virtual-gateway-address 10.15.1.10
-
-
ダイレクトループバックアドレスルートを受け入れるようにルーティングポリシーを設定します。
[edit] user@MX11# set policy-options policy-statement LO from protocol direct user@MX11# set policy-options policy-statement LO from route-filter 192.0.2.21/32 exact user@MX11# set policy-options policy-statement LO then accept
-
NO-EXPORTコミュニティを設定します。
[edit] user@MX11# set policy-options community NO-EXPORT members no-advertise user@MX11# set policy-options community NO-EXPORT members no-export user@MX11# set policy-options community NO-EXPORT members no-export-subconfed
-
ロードバランシングとTESTポリシーを設定します。
[edit] user@MX11# set policy-options policy-statement TEST then community add NO-EXPORT user@MX11# set policy-options policy-statement evpn-pplb from protocol evpn user@MX11# set policy-options policy-statement evpn-pplb then load-balance per-packet
-
論理トンネルインターフェイスでESI値を設定します。DC1ネットワークの他のすべてのゲートウェイ/WANエッジルーターで同じESI値を使用します。
[edit] user@MX11# set interfaces lt-5/1/0 esi 00:22:22:22:22:22:22:22:22:22
-
all-activeステートメントを含めて、論理トンネルインターフェイス上でアクティブ-アクティブマルチホーミングを設定します。[edit] user@MX11# set interfaces lt-5/1/0 esi all-active
-
MX11ゲートウェイルーターで論理トンネル(lt-)インターフェイスのペアを設定して、データセンターネットワークのEVPN-VXLANインスタンスとWANのMPLSベースEVPNインスタンスを相互接続します。1 つの論理トンネル(lt-)インターフェイスは EVPN-VXLAN のアクセス インターフェイスとして設定され、もう 1 つの論理トンネル(lt-)インターフェイスは MPLS ベースの EVPN のアクセス インターフェイスとして設定されます。
[edit] user@MX11# set interfaces lt-5/1/0 unit 0 description TO-EVPN-VXLAN user@MX11# set interfaces lt-5/1/0 unit 0 encapsulation ethernet-bridge user@MX11# set interfaces lt-5/1/0 unit 0 peer-unit 1 user@MX11# set interfaces lt-5/1/0 unit 0 family bridge interface-mode trunk user@MX11# set interfaces lt-5/1/0 unit 0 family bridge vlan-id-list 1-5 user@MX11# set interfaces lt-5/1/0 unit 1 description TO-EVPN-MPLS user@MX11# set interfaces lt-5/1/0 unit 1 encapsulation ethernet-bridge user@MX11# set interfaces lt-5/1/0 unit 1 peer-unit 0 user@MX11# set interfaces lt-5/1/0 unit 1 family bridge interface-mode trunk user@MX11# set interfaces lt-5/1/0 unit 1 family bridge vlan-id-list 1-5
-
ループバック インターフェイス アドレスとルーティング オプションを設定します。
[edit] user@MX11# set interfaces lo0 unit 0 family inet address 192.0.2.21/32 user@MX11# set interfaces lo0 unit 0 family mpls user@MX11# set routing-options router-id 192.0.2.21 user@MX11# set routing-options autonomous-system 65300
-
ロードバランシングポリシーを転送テーブルに適用します。
[edit] user@MX11# set routing-options forwarding-table export evpn-pplb
-
コア インターフェイスで MPLS、BGP、OSPF プロトコルを有効にします。MPLS LSPを作成し、他のゲートウェイとWANエッジルーター(MX12、P、MX21、MX22)のアドレスを指定します。
[edit] user@MX11# set protocols mpls label-switched-path MX11-TO-MX12 to 192.0.2.22 user@MX11# set protocols mpls label-switched-path MX11-TO-P to 203.0.113.1 user@MX11# set protocols mpls label-switched-path MX11-TO-MX21 to 198.51.100.21 user@MX11# set protocols mpls label-switched-path MX11-TO-MX22 to 198.51.100.22 user@MX11# set protocols mpls interface all user@MX11# set protocols mpls interface fxp0.0 disable user@MX11# set protocols bgp local-address 192.0.2.21 user@MX11# set protocols bgp local-as 65300 user@MX11# set protocols bgp group INT type internal user@MX11# set protocols bgp group INT local-address 192.0.2.21 user@MX11# set protocols bgp group INT family evpn signaling user@MX11# set protocols bgp group INT export TEST user@MX11# set protocols bgp group INT neighbor 203.0.113.1 user@MX11# set protocols ospf traffic-engineering user@MX11# set protocols ospf area 0.0.0.0 interface ge-0/0/3.0 user@MX11# set protocols ospf area 0.0.0.0 interface lo0.0 passive
-
仮想ネットワークごとに、MX11 ルーター上で EVPN ベースの MPLS ルーティングインスタンスを設定します。ルート識別子(EVPN-MPLSルートの識別とアドバタイズに使用)と
vrf-target(定義されたルートターゲットを使用してそのローカルVRFのすべてのルートをエクスポートし、タグ付け)を定義します。VLAN IDをマッピングする各仮想ルーターのブリッジドメインを設定します。[edit] user@MX11# set routing-instances EVPN-MPLS-1 instance-type virtual-switch user@MX11# set routing-instances EVPN-MPLS-1 interface lt-5/1/0.0 user@MX11# set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.21:100 user@MX11# set routing-instances EVPN-MPLS-1 vrf-target target:1:2 user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 user@MX11# set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge user@MX11# set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5
-
仮想ネットワークごとに、MX11 ルーター上の EVPN-VXLAN ルーティングインスタンスを設定します。VTEPソースインターフェイス、ルート識別子(EVPNルートの識別とアドバタイズに使用)、および
vrf-target(定義されたルートターゲットを使用してそのローカルVRFのすべてのルートをエクスポートし、タグ付け)を定義します。EVPNプロトコル、カプセル化方法、VNIリスト、BUMトラフィック転送方法を設定します。最後に、VNIDをVLAN IDにマッピングする各仮想ルーターのブリッジドメインを設定し、BUMの転送方法を特定します。[edit] user@MX11# set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.0 user@MX11# set routing-instances EVPN-VXLAN-1 instance-type virtual-switch user@MX11# set routing-instances EVPN-VXLAN-1 interface lt-5/1/0.1 user@MX11# set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.21:1 user@MX11# set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file MX11-EVPN-VXLAN-1.log user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions file size 10m user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn traceoptions flag all user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 user@MX11# set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 user@MX11# set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 user@MX11# set routing-instances VRF instance-type vrf user@MX11# set routing-instances VRF interface irb.1 user@MX11# set routing-instances VRF interface irb.2 user@MX11# set routing-instances VRF interface irb.3 user@MX11# set routing-instances VRF interface
WANルーターの設定(P)
ステップバイステップの手順
次の例では、設定階層のさまざまなレベルに移動する必要があります。CLIのナビゲーションについては、『CLIユーザーガイド』の「設定モードでのCLIエディターの使用」を参照してください。
MXシリーズルーターをWANエッジルーターとして設定し、Pという名前を付けます。
-
システムホスト名を設定します。
[edit] user@P# set system host-name P
-
Pルーター(WAN)のインターフェイスを設定し、MPLSベースのEVPNを実行するWANを介して、仮想拡張可能なLAN(VXLAN)カプセル化でイーサネットVPN(EVPN)を実行している異なるデータセンターネットワークを相互接続します。
[edit] user@P# set interfaces ge-0/0/3 unit 0 description "CONNECTED TO MX11" user@P# set interfaces ge-0/0/3 unit 0 family inet address 203.0.113.42/24 user@P# set interfaces ge-0/0/3 unit 0 family mpls user@P# set interfaces ge-0/0/5 unit 0 description "CONNECTED TO MX12" user@P# set interfaces ge-0/0/5 unit 0 family inet address 203.0.113.12/24 user@P# set interfaces ge-0/0/5 unit 0 family mpls user@P# set interfaces ge-0/0/6 unit 0 description "CONNECTED TO MX21" user@P# set interfaces ge-0/0/6 unit 0 family inet address 203.0.113.32/24 user@P# set interfaces ge-0/0/6 unit 0 family mpls user@P# set interfaces ge-0/0/7 unit 0 description "CONNECTED TO MX22" user@P# set interfaces ge-0/0/7 unit 0 family inet address 203.0.113.52/24 user@P# set interfaces ge-0/0/7 unit 0 family mpls
-
コミュニティを設定します。
[edit] user@P# set policy-options community RT-CORE members target:1:2 user@P# set policy-options community RT-DC1 members target:1:1 user@P# set policy-options community RT-DC2 members target:1:3
-
ポリシーを設定します。
[edit] user@P# set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from protocol bgp user@P# set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from community RT-CORE user@P# set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 then accept user@P# set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from protocol bgp user@P# set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from community RT-DC1 user@P# set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 then reject user@P# set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from protocol bgp user@P# set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from community RT-DC2 user@P# set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 then reject
-
ループバック インターフェイス アドレスとルーティング オプションを設定します。
[edit] user@P# interfaces lo0 unit 86 family inet address 203.0.113.1/32 user@P# interfaces lo0 unit 86 family mpls user@P# routing-options router-id 203.0.113.1 user@P# routing-options autonomous-system 65300
-
コア インターフェイスで MPLS、BGP、OSPF プロトコルを有効にします。Pと他のゲートウェイおよびWANエッジルーター(MX11、MX12、P、MX22)との間にMPLS LSPを作成します。
[edit] user@P# set protocols mpls label-switched-path P-TO-MX11 from 203.0.113.1 user@P# set protocols mpls label-switched-path P-TO-MX11 to 192.0.2.21 user@P# set protocols mpls label-switched-path P-TO-MX12 to 192.0.2.22 user@P# set protocols mpls label-switched-path P-TO-MX21 to 198.51.100.21 user@P# set protocols mpls label-switched-path P-TO-MX22 to 198.51.100.22 user@P# set protocols mpls interface all user@P# set protocols bgp group INT type internal user@P# set protocols bgp group INT import BLOCK-VXLAN-ROUTES-FROM-CORE user@P# set protocols bgp group INT family evpn signaling user@P# set protocols bgp group INT cluster 203.0.113.1 user@P# set protocols bgp group INT neighbor 192.0.2.21 user@P# set protocols bgp group INT neighbor 192.0.2.22 user@P# set protocols bgp group INT neighbor 198.51.100.21 user@P# set protocols bgp group INT neighbor 198.51.100.22 user@P# set protocols bgp local-address 203.0.113.1 user@P# set protocols bgp local-as 65300 user@P# set protocols ospf traffic-engineering user@P# set protocols ospf area 0.0.0.0 interface all user@P# set protocols ospf area 0.0.0.0 interface lo0.86
CE1の設定
ステップバイステップの手順
次の例では、設定階層のさまざまなレベルに移動する必要があります。CLIのナビゲーションについては、『CLIユーザーガイド』の「設定モードでのCLIエディターの使用」を参照してください。
MXルーターCE1を設定します。
注:CE2、CE3、CE4、CE5、およびCE6についても同様の手順に従います。インターフェイス名、IPアドレス、接続については、図1を参照してください。
-
システムホスト名を設定します。
[edit] user@CE1# set system host-name CE1
-
CE1デバイス上のインターフェイスを設定して、ホストとTOR12に接続します。ホストとTOR12間のトラフィック転送を有効にします。
[edit] user@CE1# set interfaces ge-0/0/8 unit 0 description "CONNECTED TO Host 1" user@CE1# set interfaces ge-0/0/8 unit 0 family bridge interface-mode trunk user@CE1# set interfaces ge-0/0/8 unit 0 family bridge vlan-id-list 1-5 user@CE1# set interfaces ae1 unit 0 description "CONNECTED TO ToR12" user@CE1# set interfaces ae1 unit 0 family bridge interface-mode trunk user@CE1# set interfaces ae1 unit 0 family bridge vlan-id-list 1-5
-
ブリッジドメインを定義し、VLAN IDに関連付けます。
[edit] user@CE1# set bridge-domains BD-1 domain-type bridge user@CE1# set bridge-domains BD-1 vlan-id 1 user@CE1# set bridge-domains BD-2 domain-type bridge user@CE1# set bridge-domains BD-2 vlan-id 2 user@CE1# set bridge-domains BD-3 domain-type bridge user@CE1# set bridge-domains BD-3 vlan-id 3 user@CE1# set bridge-domains BD-4 domain-type bridge user@CE1# set bridge-domains BD-4 vlan-id 4 user@CE1# set bridge-domains BD-5 domain-type bridge user@CE1# set bridge-domains BD-5 vlan-id 5
検証
アンダーレイとEVPNオーバーレイの両方を設定した後、設定が意図したとおりに動作することを確認することをお勧めします。
論理トンネルインターフェイスを使用したEVPN-VXLANおよびEVPN-MPLS EVIステッチの検証
目的
EVPN-VXLAN および EVPN-MPLS EVPN インスタンス(EVI)が、論理トンネル インターフェイスを使用したステッチ用に設定されていることを確認します。
アクション
任意のゲートウェイデバイスで、 show routing-instances evpn-vxlan-instance および show routing-instances evpn-mpls-instance コマンドを発行して、それぞれのEVIに割り当てられている論理トンネルインターフェイスを確認します。show interfaces lt-interface コマンドを発行して、割り当てられたLTインターフェイスを使用してEVIがステッチされていることを確認します。
注:簡潔にするために出力は切り捨てられています
user@MX11> show routing-instances EVPN-VXLAN-1 … interface lt-5/1/0.1; route-distinguisher 192.0.2.21:1; vrf-target target:1:1;
user@MX11> show routing-instances EVPN-MPLS-1 … interface lt-5/1/0.0; route-distinguisher 192.0.2.21:100; vrf-target target:1:2;
user@MX11> show interfaces lt-5/1/0
esi {
00:22:22:22:22:22:22:22:22:22;
all-active;
}
unit 0 {
description TO-EVPN-VXLAN;
encapsulation ethernet-bridge;
peer-unit 1;
family bridge {
interface-mode trunk;
vlan-id-list 1-5;
}
}
unit 1 {
description TO-EVPN-MPLS;
encapsulation ethernet-bridge;
peer-unit 0;
family bridge {
interface-mode trunk;
vlan-id-list 1-5;
}
}
意味
EVPN-VXLAN-1とEVPN-MPLS-1 EVIは、lt-5/1/0インターフェイスを使用してステッチされます。
ブリッジ ドメインのフラッディングの検証
目的
任意のゲートウェイデバイスのEVPN-MPLSおよびEVPN-VXLANインスタンスの両方のブリッジドメインフラッド情報を検証します。
アクション
任意のゲートウェイデバイス(MX11)で、 show bridge flood extensive instance instance-name コマンドを発行します。
注:簡潔にするために出力は切り捨てられています
user@MX11> show bridge flood extensive instance EVPN-MPLS-1
Name: EVPN-MPLS-1
CEs: 1
VEs: 15
Bridging domain: BD-1
EVPN extended: Yes
Flood route prefix: 0x3001a/51
Flood route type: FLOOD_GRP_COMP_NH
Flood route owner: __ves__
Flood group name: __ves__
Flood group index: 0
Nexthop type: comp
Nexthop index: 779
Flooding to:
Name Type NhType Index
__all_ces__ Group comp 759
Composition: split-horizon
Flooding to:
Name Type NhType Index
lt-5/1/0.0 MH-CE ucst 736
ESI: 00:22:22:22:22:22:22:22:22:22
Flood route prefix: 0x30010/51
Flood route type: FLOOD_GRP_COMP_NH
Flood route owner: __all_ces__
Flood group name: __all_ces__
Flood group index: 1
Nexthop type: comp
Nexthop index: 812
Flooding to:
Name Type NhType Index
__all_ces__ Group comp 759
Composition: split-horizon
Flooding to:
Name Type NhType Index
lt-5/1/0.0 MH-CE ucst 736
ESI: 00:22:22:22:22:22:22:22:22:22
Flooding to:
Name Type NhType Index
__ves__ Group comp 763
Composition: flood-to-all
Component flood-nh(s) (for flooding to EVPN core):
Index Peer NH-Type
891 192.0.2.22 comp (IM/SH)
892 198.51.100.21 comp (IM/SH)
746 198.51.100.22 comp (IM/SH)
user@MX11> show bridge flood extensive instance EVPN-VXLAN-1Name: EVPN-VXLAN-1
Name: EVPN-VXLAN-1
CEs: 1
VEs: 3
Bridging domain: BD-1
Flood route prefix: 0x3000f/51
Flood route type: FLOOD_GRP_COMP_NH
Flood route owner: __ves__
Flood group name: __ves__
Flood group index: 0
Nexthop type: comp
Nexthop index: 845
Flooding to:
Name Type NhType Index
__all_ces__ Group comp 797
Composition: split-horizon
Flooding to:
Name Type NhType Index
lt-5/1/0.0 CE ucst 751
Flood route prefix: 0x30015/51
Flood route type: FLOOD_GRP_COMP_NH
Flood route owner: __all_ces__
Flood group name: __all_ces__
Flood group index: 1
Nexthop type: comp
Nexthop index: 842
Flooding to:
Name Type NhType Index
__all_ces__ Group comp 797
Composition: split-horizon
Flooding to:
Name Type NhType Index
lt-5/1/0.0 CE ucst 751
Flooding to:
Name Type NhType Index
__ves__ Group comp 700
Composition: flood-to-all
Flooding to:
Name Type NhType Index RVTEP-IP
vtep.32769 CORE_FACING venh 687 192.0.2.11
vtep.32770 CORE_FACING venh 729 192.0.2.12
vtep.32771 CORE_FACING venh 748 192.0.2.22
意味
出力は、EVPN-MPLS-1が、関連するブリッジドメインのBUMトラフィックフラッディングに積極的に参加していることを示しています。複合ネクストホップグループを使用して、MPLSコア内の他のゲートウェイデバイスであるMX12(192.0.2.22)、MX21(198.51.100.21)、およびMX22(198.51.100.22)にトラフィックをフラッディングします。一方、EVPN-MPLSインスタンスEVPN-MPLS-1には、隣接するゲートウェイデバイスへのアクティブなエンドポイントを持つEVPN拡張用に設定されたブリッジドメインがあります。
MAC学習の検証
目的
ゲートウェイデバイス間のMAC学習を検証します。
アクション
任意のリーフデバイス(TOR11)で、 show evpn database instance routing-instance-name l2-domain-id 1 コマンドを発行して、学習したMACアドレスを検証します。
user@TOR11> show evpn database instance EVPN-VXLAN-1 l2-domain-id 1
Instance: EVPN-VXLAN-1
VLAN DomainId MAC address Active source Timestamp IP address
1 00:00:5e:00:01:01 00:11:aa:aa:aa:aa:aa:aa:aa:aa Jul 30 01:02:11 10.11.1.10
1 2c:6b:f5:c2:ff:f0 DRP vtep.32769 Jul 30 01:02:11 192.0.2.21
意味
ホストMAC/IPバインディングは、リモートVTEP(MX11である192.0.2.21)から学習され、EVPNファブリックへのアクティブなホスト参加を示しています。
MACアドレス転送テーブルの検証
目的
ブリッジング環境でのMAC学習とフラッディング動作を検証します。
アクション
任意のゲートウェイデバイスで、 show bridge mac-table mac-address instance evpn-instanceを発行します。
user@MX11> show bridge mac-table 2c:6b:f5:c2:ff:f0 instance EVPN-VXLAN-1
MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC, P -Pinned MAC)
Routing instance : EVPN-VXLAN-1
Bridging domain : BD-1, VLAN : 1
MAC MAC GBP Logical Active
address flags TAG interface source
2c:6b:f5:c2:ff:f0 DR lt-5/1/0.1 192.0.2.22
user@MX11> show bridge mac-table 2c:6b:f5:c2:ff:f0 instance EVPN-MPLS-1
MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC, P -Pinned MAC)
Routing instance : EVPN-MPLS-1
Bridging domain : BD-1, VLAN : 1
MAC MAC GBP Logical NH RTR
address flags TAG interface Index ID
2c:6b:f5:c2:ff:f0 DC 1048581 1048581
意味
EVPN-VXLAN-1インスタンスでは、MACアドレス2c:6b:f5:c2:ff:f0が動的に学習され(Dフラグ)、EVPNインスタンスEVPN-VXLAN-1のブリッジドメインBD-1(VLAN 1)に関連付けられます。これは、リモートソースIP192.0.2.22(MX12)のlt-5/1/0.1論理トンネルインターフェイスから学習されたもので、このMACがEVPNファブリック内のリモートデバイスに接続されたホストに属していることを示しています。
EVPN-MPLS-1インスタンスの場合、MACアドレス 2c:6b:f5:c2:ff:f0 は、EVPNインスタンスEVPN-MPLS-1の下のブリッジドメイン BD-1(VLAN 1) に存在します。フラグ D(動的に学習) と C(制御MAC)のマークが付けられており、データプレーンスヌーピングではなく、EVPNコントロールプレーンを介して学習されたことを示しています。MACは、リモートルーターにマッピングされるネクストホップインデックス 1048581に関連付けられており、このMACがリモートサイトからEVPN/MPLSを介して到達可能なホストに属していることを確認します。
付録1:すべてのデバイスでコマンドを設定する
すべてのデバイスでコマンド出力を設定します。
この例をすばやく設定するには、以下のコマンドをコピーしてテキストファイルに貼り付け、改行を削除して、ネットワーク構成に合わせて必要な詳細を変更してから、コマンドを [edit] 階層レベルのCLIにコピー&ペーストします。
ToR11
set system host-name ToR11 set chassis aggregated-devices ethernet device-count 1 set interfaces ge-0/0/0 unit 0 description "CONNECTED TO CE-2" set interfaces ge-0/0/0 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-0/0/2 description "CONNECTED TO CE-1" set interfaces ge-0/0/2 gigether-options 802.3ad ae0 set interfaces ge-0/0/3 unit 0 description "CONNECTED TO ToR12" set interfaces ge-0/0/3 unit 0 family inet address 192.168.2.1/24 set interfaces ge-0/0/4 unit 0 description "CONNECTED TO MX–11" set interfaces ge-0/0/4 unit 0 family inet address 192.168.3.1/24 set interfaces ge-0/0/5 unit 0 description "CONNECTED TO MX–12" set interfaces ge-0/0/5 unit 0 family inet address 192.168.4.1/24 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces lo0 unit 0 family inet address 192.0.2.11/32 set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 192.0.2.11/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.0 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances EVPN-VXLAN-1 interface ge-0/0/0.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.21:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10 set routing-options router-id 192.0.2.11 set routing-options autonomous-system 65100 set routing-options forwarding-table export evpn-pplb
ToR12
set system host-name ToR12 set chassis aggregated-devices ethernet device-count 2 set interfaces ge-0/0/0 description "CONNECTED TO ToR11" set interfaces ge-0/0/0 gigether-options 802.3ad ae1 set interfaces ge-0/0/1 unit 0 description "CONNECTED TO ToR11" set interfaces ge-0/0/1 unit 0 family inet address 192.168.2.2/24 set interfaces ge-0/0/2 description "CONNECTED TO CE-1" set interfaces ge-0/0/2 gigether-options 802.3ad ae0 set interfaces ge-0/0/3 description "CONNECTED TO ToR12" set interfaces ge-0/0/3 gigether-options 802.3ad ae1 set interfaces ge-0/0/4 unit 0 description "CONNECTED TO CE-3" set interfaces ge-0/0/4 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/4 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-0/0/6 unit 0 description "CONNECTED TO MX11" set interfaces ge-0/0/6 unit 0 family inet address 192.168.6.1/24 set interfaces ge-0/0/7 unit 0 description "CONNECTED TO MX12" set interfaces ge-0/0/7 unit 0 family inet address 192.168.5.1/24 set interfaces ae0 esi 00:11:11:11:11:11:11:11:11:11 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp system-id 11:11:11:11:11:11 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options lacp periodic fast set interfaces lo0 unit 0 family inet address 192.0.2.12/32 set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 192.0.2.12/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.0 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances EVPN-VXLAN-1 interface ge-0/0/4.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.12:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-options router-id 192.0.2.12 set routing-options autonomous-system 65200 set routing-options forwarding-table export evpn-pplb set protocols bgp group MX11 type external set protocols bgp group MX11 local-address 192.168.6.1 set protocols bgp group MX11 export LO set protocols bgp group MX11 export TEST set protocols bgp group MX11 peer-as 65400 set protocols bgp group MX11 local-as 65200 set protocols bgp group MX11 neighbor 192.168.6.2 family inet unicast set protocols bgp group MX12 type external set protocols bgp group MX12 local-address 192.168.5.1 set protocols bgp group MX12 export LO set protocols bgp group MX12 export TEST set protocols bgp group MX12 peer-as 65500 set protocols bgp group MX12 local-as 65200 set protocols bgp group MX12 neighbor 192.168.5.2 family inet unicast set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.2.2 set protocols bgp group ToR11 export LO set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 peer-as 65100 set protocols bgp group ToR11 local-as 65200 set protocols bgp group ToR11 neighbor 192.168.2.1 family inet unicast set protocols bgp group MX11-EVPN type external set protocols bgp group MX11-EVPN multihop ttl 2 set protocols bgp group MX11-EVPN multihop no-nexthop-change set protocols bgp group MX11-EVPN local-address 192.0.2.12 set protocols bgp group MX11-EVPN export TEST set protocols bgp group MX11-EVPN peer-as 65400 set protocols bgp group MX11-EVPN local-as 65200 set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling set protocols bgp group MX12-EVPN type external set protocols bgp group MX12-EVPN multihop ttl 2 set protocols bgp group MX12-EVPN multihop no-nexthop-change set protocols bgp group MX12-EVPN local-address 192.0.2.12 set protocols bgp group MX12-EVPN export TEST set protocols bgp group MX12-EVPN peer-as 65500 set protocols bgp group MX12-EVPN local-as 65200 set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.12 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 65100 set protocols bgp group ToR11-EVPN local-as 65200 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN export TEST set protocols bgp local-as 65200
データセンターゲートウェイとWANエッジ1ルーター(MX11)
set system host-name MX11 set interfaces ge-0/0/0 unit 0 description "CONNECTED TO ToR11" set interfaces ge-0/0/0 unit 0 family inet address 192.168.3.2/24 set interfaces ge-0/0/1 unit 0 description "CONNECTED TO ToR12" set interfaces ge-0/0/1 unit 0 family inet address 192.168.6.2/24 set interfaces ge-0/0/2 unit 0 description "CONNECTED TO MX12" set interfaces ge-0/0/2 unit 0 family inet address 192.168.7.1/24 set interfaces ge-0/0/3 unit 0 description "CONNECTED TO P" set interfaces ge-0/0/3 unit 0 family inet address 203.0.113.41/24 set interfaces ge-0/0/3 unit 0 family mpls set interfaces lt-5/1/0 esi 00:22:22:22:22:22:22:22:22:22 set interfaces lt-5/1/0 esi 00:22:22:22:22:22:22:22:22:22 set interfaces lt-5/1/0 esi all-active set interfaces lt-5/1/0 unit 0 description TO-EVPN-VXLAN set interfaces lt-5/1/0 unit 0 encapsulation ethernet-bridge set interfaces lt-5/1/0 unit 0 peer-unit 1 set interfaces lt-5/1/0 unit 0 family bridge interface-mode trunk set interfaces lt-5/1/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-5/1/0 unit 1 description TO-EVPN-MPLS set interfaces lt-5/1/0 unit 1 encapsulation ethernet-bridge set interfaces lt-5/1/0 unit 1 peer-unit 0 set interfaces lt-5/1/0 unit 1 family bridge interface-mode trunk set interfaces lt-5/1/0 unit 1 family bridge vlan-id-list 1-5set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.12/24 virtual-gateway-address 10.11.1.10 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.12/24 virtual-gateway-address 10.12.1.10 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.12/24 virtual-gateway-address 10.13.1.10 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.12/24 virtual-gateway-address 10.14.1.10 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.12/24 virtual-gateway-address 10.15.1.10 set interfaces lo0 unit 0 family inet address 192.0.2.21/32 set interfaces lo0 unit 0 family mpls set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 192.0.2.21/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-MPLS-1 interface lt-5/1/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.21:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.0 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances EVPN-VXLAN-1 interface lt-5/1/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.21:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface set protocols bgp group INT type internal set protocols bgp group INT local-address 192.0.2.21 set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX12 type external set protocols bgp group MX12 local-address 192.168.7.1 set protocols bgp group MX12 export TEST set protocols bgp group MX12 export LO set protocols bgp group MX12 peer-as 65500 set protocols bgp group MX12 local-as 65400 set protocols bgp group MX12 neighbor 192.168.7.2 family inet unicast set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.3.2 set protocols bgp group ToR11 import TEST set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 export LO set protocols bgp group ToR11 peer-as 65100 set protocols bgp group ToR11 local-as 65400 set protocols bgp group ToR11 neighbor 192.168.3.1 family inet unicast set protocols bgp group ToR12 type external set protocols bgp group ToR12 local-address 192.168.6.2 set protocols bgp group ToR12 export TEST set protocols bgp group ToR12 export LO set protocols bgp group ToR12 peer-as 65200 set protocols bgp group ToR12 local-as 65400 set protocols bgp group ToR12 neighbor 192.168.6.1 family inet unicast set protocols bgp group MX12-EVPN type external set protocols bgp group MX12-EVPN multihop ttl 2 set protocols bgp group MX12-EVPN multihop no-nexthop-change set protocols bgp group MX12-EVPN local-address 192.0.2.21 set protocols bgp group MX12-EVPN export TEST set protocols bgp group MX12-EVPN peer-as 65500 set protocols bgp group MX12-EVPN local-as 65400 set protocols bgp group MX12-EVPN neighbor 192.0.2.22 family evpn signaling set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.21 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 65100 set protocols bgp group ToR11-EVPN local-as 65400 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN type external set protocols bgp group ToR12-EVPN multihop ttl 2 set protocols bgp group ToR12-EVPN multihop no-nexthop-change set protocols bgp group ToR12-EVPN local-address 192.0.2.21 set protocols bgp group ToR12-EVPN export TEST set protocols bgp group ToR12-EVPN peer-as 65200 set protocols bgp group ToR12-EVPN local-as 65400 set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling set protocols bgp local-address 192.0.2.21 set protocols bgp local-as 65300 set protocols mpls label-switched-path MX11-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX11-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX11-TO-MX21 to 198.51.100.21 set protocols mpls label-switched-path MX11-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-0/0/3.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable
データセンターゲートウェイとWANエッジ2ルーター(MX12)
set system host-name MX12 set chassis fpc 1 pic 0 tunnel-services set interfaces ge-0/0/0 unit 0 description "CONNECTED TO ToR11" set interfaces ge-0/0/0 unit 0 family inet address 192.168.4.2/24 set interfaces ge-0/0/1 unit 0 description "CONNECTED TO ToR12" set interfaces ge-0/0/1 unit 0 family inet address 192.168.5.2/24 set interfaces ge-0/0/2 unit 0 description "CONNECTED TO MX11" set interfaces ge-0/0/2 unit 0 family inet address 192.168.7.2/24 set interfaces ge-0/0/4 unit 0 description "CONNECTED TO P" set interfaces ge-0/0/4 unit 0 family inet address 203.0.113.11/24 set interfaces ge-0/0/4 unit 0 family mpls set interfaces lt-1/0/0 esi 00:22:22:22:22:22:22:22:22:22 set interfaces lt-1/0/0 esi all-active set interfaces lt-1/0/0 unit 0 description TO-EVPN-VXLAN set interfaces lt-1/0/0 unit 0 encapsulation ethernet-bridge set interfaces lt-1/0/0 unit 0 peer-unit 1 set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-1/0/0 unit 1 description TO-EVPN-MPLS set interfaces lt-1/0/0 unit 1 encapsulation ethernet-bridge set interfaces lt-1/0/0 unit 1 peer-unit 0 set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:11:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.13/24 virtual-gateway-address 10.11.1.10 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:11:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.13/24 virtual-gateway-address 10.12.1.10 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:11:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.13/24 virtual-gateway-address 10.13.1.10 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:11:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.13/24 virtual-gateway-address 10.14.1.10 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:11:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.13/24 virtual-gateway-address 10.15.1.10 set interfaces lo0 unit 0 family inet address 192.0.2.22/32 set interfaces lo0 unit 0 family mpls set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 192.0.2.22/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST from protocol bgp set policy-options policy-statement TEST set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 192.0.2.22:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.0 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 192.0.2.22:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:1 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10 set routing-options router-id 192.0.2.22 set routing-options autonomous-system 65300 set routing-options forwarding-table export evpn-pplb set protocols bgp group INT type internal set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX11 type external set protocols bgp group MX11 local-address 192.168.7.2 set protocols bgp group MX11 export TEST set protocols bgp group MX11 export LO set protocols bgp group MX11 peer-as 65400 set protocols bgp group MX11 local-as 65500 set protocols bgp group MX11 neighbor 192.168.7.1 family inet unicast set protocols bgp group ToR11 type external set protocols bgp group ToR11 local-address 192.168.4.2 set protocols bgp group ToR11 export TEST set protocols bgp group ToR11 export LO set protocols bgp group ToR11 peer-as 65100 set protocols bgp group ToR11 local-as 65500 set protocols bgp group ToR11 neighbor 192.168.4.1 family inet unicast set protocols bgp group ToR12 type external set protocols bgp group ToR12 local-address 192.168.5.2 set protocols bgp group ToR12 export TEST set protocols bgp group ToR12 export LO set protocols bgp group ToR12 peer-as 65200 set protocols bgp group ToR12 local-as 65500 set protocols bgp group ToR12 neighbor 192.168.5.1 family inet unicast set protocols bgp group MX11-EVPN type external set protocols bgp group MX11-EVPN multihop ttl 2 set protocols bgp group MX11-EVPN multihop no-nexthop-change set protocols bgp group MX11-EVPN local-address 192.0.2.22 set protocols bgp group MX11-EVPN export TEST set protocols bgp group MX11-EVPN peer-as 65400 set protocols bgp group MX11-EVPN local-as 65500 set protocols bgp group MX11-EVPN neighbor 192.0.2.21 family evpn signaling set protocols bgp group ToR11-EVPN type external set protocols bgp group ToR11-EVPN multihop ttl 2 set protocols bgp group ToR11-EVPN multihop no-nexthop-change set protocols bgp group ToR11-EVPN local-address 192.0.2.22 set protocols bgp group ToR11-EVPN export TEST set protocols bgp group ToR11-EVPN peer-as 65100 set protocols bgp group ToR11-EVPN local-as 65500 set protocols bgp group ToR11-EVPN neighbor 192.0.2.11 family evpn signaling set protocols bgp group ToR12-EVPN type external set protocols bgp group ToR12-EVPN multihop ttl 2 set protocols bgp group ToR12-EVPN multihop no-nexthop-change set protocols bgp group ToR12-EVPN local-address 192.0.2.22 set protocols bgp group ToR12-EVPN export TEST set protocols bgp group ToR12-EVPN peer-as 65200 set protocols bgp group ToR12-EVPN local-as 65500 set protocols bgp group ToR12-EVPN neighbor 192.0.2.12 family evpn signaling set protocols bgp local-address 192.0.2.22 set protocols bgp local-as 65300 set protocols mpls label-switched-path MX12-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX12-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX12-TO-MX21 to 198.51.100.21 set protocols mpls label-switched-path MX12-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface ge-0
データセンターゲートウェイおよびWANエッジ3ルーター(MX21)
set system host-name MX21 set interfaces ge-0/0/0 unit 0 description "CONNECTED TO P" set interfaces ge-0/0/0 unit 0 family inet address 203.0.113.31/24 set interfaces ge-0/0/0 unit 0 family mpls set interfaces ge-0/0/1 unit 0 description "CONNECTED TO MX22" set interfaces ge-0/0/1 unit 0 family inet address 192.168.13.1/24 set interfaces ge-0/0/2 unit 0 description "CONNECTED TO ToR21" set interfaces ge-0/0/2 unit 0 family inet address 192.168.9.1/24 set interfaces ge-0/0/3 unit 0 description "CONNECTED TO ToR22" set interfaces ge-0/0/3 unit 0 family inet address 192.168.8.1/24 set interfaces lt-5/0/0 esi 00:33:33:33:33:33:33:33:33:33 set interfaces lt-5/0/0 esi all-active set interfaces lt-5/0/0 unit 0 description TO-EVPN-VXLAN set interfaces lt-5/0/0 unit 0 encapsulation ethernet-bridge set interfaces lt-5/0/0 unit 0 peer-unit 1 set interfaces lt-5/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-5/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-5/0/0 unit 1 description TO-EVPN-MPLS set interfaces lt-5/0/0 unit 1 encapsulation ethernet-bridge set interfaces lt-5/0/0 unit 1 peer-unit 0 set interfaces lt-5/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-5/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.14/24 virtual-gateway-address 10.11.1.11 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.14/24 virtual-gateway-address 10.12.1.11 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.14/24 virtual-gateway-address 10.13.1.11 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.14/24 virtual-gateway-address 10.14.1.11 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.14/24 virtual-gateway-address 10.15.1.11 set interfaces lo0 unit 0 family inet address 198.51.100.21/32 set interfaces lo0 unit 0 family mpls set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 198.51.100.21/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-MPLS-1 interface lt-5/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.21:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.0 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances EVPN-VXLAN-1 interface lt-5/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.21:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10 set routing-options router-id 198.51.100.21 set routing-options autonomous-system 65300 set routing-options forwarding-table export evpn-pplb set protocols bgp group INT type internal set protocols bgp group INT local-address 198.51.100.21 set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 192.168.13.1 set protocols bgp group MX22 export TEST set protocols bgp group MX22 export LO set protocols bgp group MX22 peer-as 64900 set protocols bgp group MX22 local-as 64800 set protocols bgp group MX22 neighbor 192.168.13.2 family inet unicast set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.9.1 set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 export LO set protocols bgp group ToR21 peer-as 64600 set protocols bgp group ToR21 local-as 64800 set protocols bgp group ToR21 neighbor 192.168.9.2 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 192.168.8.1 set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 export LO set protocols bgp group ToR22 peer-as 64700 set protocols bgp group ToR22 local-as 64800 set protocols bgp group ToR22 neighbor 192.168.8.2 family inet unicast set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.21 set protocols bgp group MX22-EVPN peer-as 64900 set protocols bgp group MX22-EVPN local-as 64800 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.21 set protocols bgp group ToR21-EVPN peer-as 64600 set protocols bgp group ToR21-EVPN local-as 64800 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.21 set protocols bgp group ToR22-EVPN peer-as 64700 set protocols bgp group ToR22-EVPN local-as 64800 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols bgp local-address 198.51.100.21 set protocols bgp export TEST set protocols bgp local-as 65300 set protocols mpls label-switched-path MX21-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX21-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX21-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX21-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols ospf area 0.0.0
データセンターゲートウェイとWANエッジ4ルーター(MX22)
set system host-name MX22 set interfaces ge-0/0/0 unit 0 description "CONNECTED TO P" set interfaces ge-0/0/0 unit 0 family inet address 203.0.113.51/24 set interfaces ge-0/0/0 unit 0 family mpls set interfaces ge-0/0/1 unit 0 description "CONNECTED TO MX21" set interfaces ge-0/0/1 unit 0 family inet address 192.168.13.2/24 set interfaces ge-0/0/2 unit 0 description "CONNECTED TO ToR21" set interfaces ge-0/0/2 unit 0 family inet address 192.168.10.1/24 set interfaces ge-0/0/3 unit 0 description "CONNECTED TO ToR22" set interfaces ge-0/0/3 unit 0 family inet address 192.168.11.1/24 set interfaces lt-1/0/0 esi 00:33:33:33:33:33:33:33:33:33 set interfaces lt-1/0/0 esi all-active set interfaces lt-1/0/0 unit 0 description TO-EVPN-VXLAN set interfaces lt-1/0/0 unit 0 encapsulation ethernet-bridge set interfaces lt-1/0/0 unit 0 peer-unit 1 set interfaces lt-1/0/0 unit 0 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 0 family bridge vlan-id-list 1-5 set interfaces lt-1/0/0 unit 1 description TO-EVPN-MPLS set interfaces lt-1/0/0 unit 1 encapsulation ethernet-bridge set interfaces lt-1/0/0 unit 1 peer-unit 0 set interfaces lt-1/0/0 unit 1 family bridge interface-mode trunk set interfaces lt-1/0/0 unit 1 family bridge vlan-id-list 1-5 set interfaces irb unit 1 proxy-macip-advertisement set interfaces irb unit 1 virtual-gateway-esi 00:22:aa:aa:aa:aa:aa:aa:aa:aa set interfaces irb unit 1 virtual-gateway-esi all-active set interfaces irb unit 1 family inet address 10.11.1.15/24 virtual-gateway-address 10.11.1.11 set interfaces irb unit 2 proxy-macip-advertisement set interfaces irb unit 2 virtual-gateway-esi 00:22:bb:bb:bb:bb:bb:bb:bb:bb set interfaces irb unit 2 virtual-gateway-esi all-active set interfaces irb unit 2 family inet address 10.12.1.15/24 virtual-gateway-address 10.12.1.11 set interfaces irb unit 3 proxy-macip-advertisement set interfaces irb unit 3 virtual-gateway-esi 00:22:cc:cc:cc:cc:cc:cc:cc:cc set interfaces irb unit 3 virtual-gateway-esi all-active set interfaces irb unit 3 family inet address 10.13.1.15/24 virtual-gateway-address 10.13.1.11 set interfaces irb unit 4 proxy-macip-advertisement set interfaces irb unit 4 virtual-gateway-esi 00:22:dd:dd:dd:dd:dd:dd:dd:dd set interfaces irb unit 4 virtual-gateway-esi all-active set interfaces irb unit 4 family inet address 10.14.1.15/24 virtual-gateway-address 10.14.1.11 set interfaces irb unit 5 proxy-macip-advertisement set interfaces irb unit 5 virtual-gateway-esi 00:22:ee:ee:ee:ee:ee:ee:ee:ee set interfaces irb unit 5 virtual-gateway-esi all-active set interfaces irb unit 5 family inet address 10.15.1.15/24 virtual-gateway-address 10.15.1.11 set interfaces lo0 unit 0 family inet address 198.51.100.22/32 set interfaces lo0 unit 0 family mpls set policy-options policy-statement LO from protocol direct set policy-options policy-statement LO from route-filter 198.51.100.22/32 exact set policy-options policy-statement LO then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-MPLS-1 instance-type virtual-switch set routing-instances EVPN-MPLS-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-MPLS-1 protocols evpn extended-vlan-list 1-5 set routing-instances EVPN-MPLS-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-MPLS-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-MPLS-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-MPLS-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-MPLS-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-MPLS-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-MPLS-1 interface lt-1/0/0.0 set routing-instances EVPN-MPLS-1 route-distinguisher 198.51.100.22:100 set routing-instances EVPN-MPLS-1 vrf-target target:1:2 set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn default-gateway no-gateway-community set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.0 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 routing-interface irb.1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 routing-interface irb.2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 routing-interface irb.3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 routing-interface irb.4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 routing-interface irb.5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances EVPN-VXLAN-1 interface lt-1/0/0.1 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.22:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-instances VRF instance-type vrf set routing-instances VRF interface irb.1 set routing-instances VRF interface irb.2 set routing-instances VRF interface irb.3 set routing-instances VRF interface irb.4 set routing-instances VRF interface irb.5 set routing-instances VRF route-distinguisher 1:1 set routing-instances VRF vrf-target target:10:10 set routing-options router-id 198.51.100.22 set routing-options autonomous-system 65300 set routing-options forwarding-table export evpn-pplb set protocols bgp group INT type internal set protocols bgp group INT family evpn signaling set protocols bgp group INT export TEST set protocols bgp group INT neighbor 203.0.113.1 set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 192.168.13.2 set protocols bgp group MX21 export TEST set protocols bgp group MX21 export LO set protocols bgp group MX21 peer-as 64800 set protocols bgp group MX21 local-as 64900 set protocols bgp group MX21 neighbor 192.168.13.1 family inet unicast set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.10.1 set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 export LO set protocols bgp group ToR21 peer-as 64600 set protocols bgp group ToR21 local-as 64900 set protocols bgp group ToR21 neighbor 192.168.10.2 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 192.168.11.1 set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 export LO set protocols bgp group ToR22 peer-as 64700 set protocols bgp group ToR22 local-as 64900 set protocols bgp group ToR22 neighbor 192.168.11.2 family inet unicast set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.22 set protocols bgp group MX21-EVPN peer-as 64800 set protocols bgp group MX21-EVPN local-as 64900 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.22 set protocols bgp group ToR21-EVPN peer-as 64600 set protocols bgp group ToR21-EVPN local-as 64900 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.22 set protocols bgp group ToR22-EVPN peer-as 64700 set protocols bgp group ToR22-EVPN local-as 64900 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols bgp local-address 198.51.100.22 set protocols bgp export TEST set protocols bgp local-as 65300 set protocols mpls label-switched-path MX22-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path MX22-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path MX22-TO-P to 203.0.113.1 set protocols mpls label-switched-path MX22-TO-MX21 to 198.51.100.21 set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 set protocols rsvp interface all set protocols rsvp interface fxp0.0 disable
ToR21
set system host-name ToR21 set chassis aggregated-devices ethernet device-count 1 set interfaces ge-0/0/0 unit 0 description "CONNECTED TO MX21" set interfaces ge-0/0/0 unit 0 family inet address 192.168.9.2/24 set interfaces ge-0/0/1 unit 0 description "CONNECTED TO MX22" set interfaces ge-0/0/1 unit 0 family inet address 192.168.10.2/24 set interfaces ge-0/0/2 unit 0 description "CONNECTED TO ToR22" set interfaces ge-0/0/2 unit 0 family inet address 192.168.12.1/24 set interfaces ge-0/0/3 description "CONNECTED TO CE-5" set interfaces ge-0/0/3 gigether-options 802.3ad ae0 set interfaces ge-0/0/4 unit 0 description "CONNECTED TO CE-4" set interfaces ge-0/0/4 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/4 unit 0 family bridge vlan-id-list 1-5 set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces lo0 unit 0 family inet address 198.51.100.11/32 set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 198.51.100.11/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.0 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances EVPN-VXLAN-1 interface ge-0/0/4.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.11:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-options router-id 198.51.100.11 set routing-options autonomous-system 64600 set routing-options forwarding-table export evpn-pplb set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 192.168.9.2 set protocols bgp group MX21 export LO set protocols bgp group MX21 export TEST set protocols bgp group MX21 peer-as 64800 set protocols bgp group MX21 local-as 64600 set protocols bgp group MX21 neighbor 192.168.9.1 family inet unicast set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 192.168.10.2 set protocols bgp group MX22 export LO set protocols bgp group MX22 export TEST set protocols bgp group MX22 peer-as 64900 set protocols bgp group MX22 local-as 64600 set protocols bgp group MX22 neighbor 192.168.10.1 family inet unicast set protocols bgp group ToR22 type external set protocols bgp group ToR22 local-address 192.168.12.1 set protocols bgp group ToR22 export LO set protocols bgp group ToR22 export TEST set protocols bgp group ToR22 peer-as 64700 set protocols bgp group ToR22 local-as 64600 set protocols bgp group ToR22 neighbor 192.168.12.2 family inet unicast set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.11 set protocols bgp group MX21-EVPN peer-as 64800 set protocols bgp group MX21-EVPN local-as 64600 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.11 set protocols bgp group MX22-EVPN peer-as 64900 set protocols bgp group MX22-EVPN local-as 64600 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols bgp group ToR22-EVPN type external set protocols bgp group ToR22-EVPN multihop ttl 2 set protocols bgp group ToR22-EVPN multihop no-nexthop-change set protocols bgp group ToR22-EVPN local-address 198.51.100.11 set protocols bgp group ToR22-EVPN peer-as 64700 set protocols bgp group ToR22-EVPN local-as 64600 set protocols bgp group ToR22-EVPN neighbor 198.51.100.12 family evpn signaling set protocols bgp export TEST set protocols bgp local-as 64600
ToR22
set system host-name ToR22 set chassis aggregated-devices ethernet device-count 2 set interfaces ge-0/0/0 unit 0 description "CONNECTED TO MX21" set interfaces ge-0/0/0 unit 0 family inet address 192.168.8.2/24 set interfaces ge-0/0/1 unit 0 description "CONNECTED TO MX22" set interfaces ge-0/0/1 unit 0 family inet address 192.168.11.2/24 set interfaces ge-0/0/2 unit 0 description "CONNECTED TO ToR21" set interfaces ge-0/0/2 unit 0 family inet address 192.168.12.2/24 set interfaces ge-0/0/3 description "CONNECTED TO ToR21" set interfaces ge-0/0/3 gigether-options 802.3ad ae1 set interfaces ge-0/0/4 description "CONNECTED TO CE-5" set interfaces ge-0/0/4 gigether-options 802.3ad ae0 set interfaces ge-0/0/5 description "CONNECTED TO ToR22" set interfaces ge-0/0/5 gigether-options 802.3ad ae1 set interfaces ge-0/0/6 unit 0 description "CONNECTED TO CE-6" set interfaces ge-0/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/6 unit 0 family bridge vlan-id-list 1-5 set interfaces ae0 esi 00:44:44:44:44:44:44:44:44:44 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces ae0 unit 0 family bridge interface-mode trunk set interfaces ae0 unit 0 family bridge vlan-id-list 1-5 set interfaces ae1 aggregated-ether-options lacp active set interfaces ae1 aggregated-ether-options lacp periodic fast set interfaces ae1 aggregated-ether-options lacp system-id 22:22:22:22:22:22 set interfaces lo0 unit 0 family inet address 198.51.100.12/32 set policy-options policy-statement LO term 1 from protocol direct set policy-options policy-statement LO term 1 from route-filter 198.51.100.12/32 exact set policy-options policy-statement LO term 1 then accept set policy-options policy-statement TEST then community add NO-EXPORT set policy-options policy-statement evpn-pplb from protocol evpn set policy-options policy-statement evpn-pplb then load-balance per-packet set policy-options community NO-EXPORT members no-advertise set policy-options community NO-EXPORT members no-export set policy-options community NO-EXPORT members no-export-subconfed set routing-instances EVPN-VXLAN-1 instance-type virtual-switch set routing-instances EVPN-VXLAN-1 protocols evpn encapsulation vxlan set routing-instances EVPN-VXLAN-1 protocols evpn extended-vni-list 1-5 set routing-instances EVPN-VXLAN-1 vtep-source-interface lo0.0 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vlan-id 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-1 vxlan vni 1 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vlan-id 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-2 vxlan vni 2 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vlan-id 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-3 vxlan vni 3 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vlan-id 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-4 vxlan vni 4 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 domain-type bridge set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vlan-id 5 set routing-instances EVPN-VXLAN-1 bridge-domains BD-5 vxlan vni 5 set routing-instances EVPN-VXLAN-1 interface ge-0/0/6.0 set routing-instances EVPN-VXLAN-1 interface ae0.0 set routing-instances EVPN-VXLAN-1 route-distinguisher 198.51.100.12:1 set routing-instances EVPN-VXLAN-1 vrf-target target:1:3 set routing-options router-id 198.51.100.12 set routing-options autonomous-system 64700 set routing-options forwarding-table export evpn-pplb set protocols bgp group MX21 type external set protocols bgp group MX21 local-address 192.168.8.2 set protocols bgp group MX21 export LO set protocols bgp group MX21 export TEST set protocols bgp group MX21 peer-as 64800 set protocols bgp group MX21 local-as 64700 set protocols bgp group MX21 neighbor 192.168.8.1 family inet unicast set protocols bgp group MX22 type external set protocols bgp group MX22 local-address 192.168.11.2 set protocols bgp group MX22 export LO set protocols bgp group MX22 export TEST set protocols bgp group MX22 peer-as 64900 set protocols bgp group MX22 local-as 64700 set protocols bgp group MX22 neighbor 192.168.11.1 family inet unicast set protocols bgp group ToR21 type external set protocols bgp group ToR21 local-address 192.168.12.2 set protocols bgp group ToR21 export LO set protocols bgp group ToR21 export TEST set protocols bgp group ToR21 peer-as 64600 set protocols bgp group ToR21 local-as 64700 set protocols bgp group ToR21 neighbor 192.168.12.1 family inet unicast set protocols bgp group MX21-EVPN type external set protocols bgp group MX21-EVPN multihop ttl 2 set protocols bgp group MX21-EVPN multihop no-nexthop-change set protocols bgp group MX21-EVPN local-address 198.51.100.12 set protocols bgp group MX21-EVPN peer-as 64800 set protocols bgp group MX21-EVPN local-as 64700 set protocols bgp group MX21-EVPN neighbor 198.51.100.21 family evpn signaling set protocols bgp group MX22-EVPN type external set protocols bgp group MX22-EVPN multihop ttl 2 set protocols bgp group MX22-EVPN multihop no-nexthop-change set protocols bgp group MX22-EVPN local-address 198.51.100.12 set protocols bgp group MX22-EVPN peer-as 64900 set protocols bgp group MX22-EVPN local-as 64700 set protocols bgp group MX22-EVPN neighbor 198.51.100.22 family evpn signaling set protocols bgp group ToR21-EVPN type external set protocols bgp group ToR21-EVPN multihop ttl 2 set protocols bgp group ToR21-EVPN multihop no-nexthop-change set protocols bgp group ToR21-EVPN local-address 198.51.100.12 set protocols bgp group ToR21-EVPN peer-as 64600 set protocols bgp group ToR21-EVPN local-as 64700 set protocols bgp group ToR21-EVPN neighbor 198.51.100.11 family evpn signaling set protocols bgp export TEST set protocols bgp local-as 64700
P
set interfaces ge-0/0/3 unit 0 description "CONNECTED TO MX11" set interfaces ge-0/0/3 unit 0 family inet address 203.0.113.42/24 set interfaces ge-0/0/3 unit 0 family mpls set interfaces ge-0/0/5 unit 0 description "CONNECTED TO MX12" set interfaces ge-0/0/5 unit 0 family inet address 203.0.113.12/24 set interfaces ge-0/0/5 unit 0 family mpls set interfaces ge-0/0/6 unit 0 description "CONNECTED TO MX21" set interfaces ge-0/0/6 unit 0 family inet address 203.0.113.32/24 set interfaces ge-0/0/6 unit 0 family mpls set interfaces ge-0/0/7 unit 0 description "CONNECTED TO MX22" set interfaces ge-0/0/7 unit 0 family inet address 203.0.113.52/24 set interfaces ge-0/0/7 unit 0 family mpls set interfaces lo0 unit 86 family inet address 203.0.113.1/32 set interfaces lo0 unit 86 family mpls set protocols bgp group INT type internal set protocols bgp group INT import BLOCK-VXLAN-ROUTES-FROM-CORE set protocols bgp group INT family evpn signaling set protocols bgp group INT cluster 203.0.113.1 set protocols bgp group INT neighbor 192.0.2.21 set protocols bgp group INT neighbor 192.0.2.22 set protocols bgp group INT neighbor 198.51.100.21 set protocols bgp group INT neighbor 198.51.100.22 set protocols bgp local-address 203.0.113.1 set protocols bgp local-as 65300 set protocols mpls label-switched-path P-TO-MX11 from 203.0.113.1 set protocols mpls label-switched-path P-TO-MX11 to 192.0.2.21 set protocols mpls label-switched-path P-TO-MX12 to 192.0.2.22 set protocols mpls label-switched-path P-TO-MX21 to 198.51.100.21 set protocols mpls label-switched-path P-TO-MX22 to 198.51.100.22 set protocols mpls interface all set protocols ospf traffic-engineering set protocols ospf area 0.0.0.0 interface all set protocols ospf area 0.0.0.0 interface lo0.86 set protocols rsvp interface all set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from protocol bgp set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 from community RT-CORE set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 1 then accept set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from protocol bgp set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 from community RT-DC1 set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 2 then reject set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from protocol bgp set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 from community RT-DC2 set policy-options policy-statement BLOCK-VXLAN-ROUTES-FROM-CORE term 3 then reject set policy-options community RT-CORE members target:1:2 set policy-options community RT-DC1 members target:1:1 set policy-options community RT-DC2 members target:1:3 set routing-options router-id 203.0.113.1 set routing-options autonomous-system 65300
CE1
set system host-name CE1 set interfaces ge-0/0/8 unit 0 description "CONNECTED TO Host 1" set interfaces ge-0/0/8 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/8 unit 0 family bridge vlan-id-list 1-5 set interfaces ae1 unit 0 description "CONNECTED TO ToR12" set interfaces ae1 unit 0 family bridge interface-mode trunk set interfaces ae1 unit 0 family bridge vlan-id-list 1-5 set bridge-domains BD-1 domain-type bridge set bridge-domains BD-1 vlan-id 1 set bridge-domains BD-2 domain-type bridge set bridge-domains BD-2 vlan-id 2 set bridge-domains BD-3 domain-type bridge set bridge-domains BD-3 vlan-id 3 set bridge-domains BD-4 domain-type bridge set bridge-domains BD-4 vlan-id 4 set bridge-domains BD-5 domain-type bridge set bridge-domains BD-5 vlan-id 5
CE2
set system host-name CE2 set interfaces ge-0/0/1 unit 0 description "CONNECTED TO ToR11" set interfaces ge-0/0/1 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/1 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-0/0/6 unit 0 description "CONNECTED TO Host-2" set interfaces ge-0/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/6 unit 0 family bridge vlan-id-list 1-5 set bridge-domains BD-1 domain-type bridge set bridge-domains BD-1 vlan-id 1 set bridge-domains BD-2 domain-type bridge set bridge-domains BD-2 vlan-id 2 set bridge-domains BD-3 domain-type bridge set bridge-domains BD-3 vlan-id 3 set bridge-domains BD-4 domain-type bridge set bridge-domains BD-4 vlan-id 4 set bridge-domains BD-5 domain-type bridge set bridge-domains BD-5 vlan-id 5
CE3
set system host-name CE3 set interfaces ge-0/0/5 unit 0 description "CONNECTED TO ToR12" set interfaces ge-0/0/5 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/5 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-0/0/9 unit 0 description "CONNECTED TO Host 3" set interfaces ge-0/0/9 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/9 unit 0 family bridge vlan-id-list 1-5 set bridge-domains BD-1 domain-type bridge set bridge-domains BD-1 vlan-id 1 set bridge-domains BD-2 domain-type bridge set bridge-domains BD-2 vlan-id 2 set bridge-domains BD-3 domain-type bridge set bridge-domains BD-3 vlan-id 3 set bridge-domains BD-4 domain-type bridge set bridge-domains BD-4 vlan-id 4 set bridge-domains BD-5 domain-type bridge set bridge-domains BD-5 vlan-id 5
CE4
set system host-name CE4 set interfaces ge-0/0/5 unit 0 description "CONNECTED TO ToR21" set interfaces ge-0/0/5 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/5 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-0/0/6 unit 0 description "CONNECTED TO Host 4" set interfaces ge-0/0/6 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/6 unit 0 family bridge vlan-id-list 1-5 set bridge-domains BD-1 domain-type bridge set bridge-domains BD-1 vlan-id 1 set bridge-domains BD-2 domain-type bridge set bridge-domains BD-2 vlan-id 2 set bridge-domains BD-3 domain-type bridge set bridge-domains BD-3 vlan-id 3 set bridge-domains BD-4 domain-type bridge set bridge-domains BD-4 vlan-id 4 set bridge-domains BD-5 domain-type bridge set bridge-domains BD-5 vlan-id 5
CE5
set system host-name CE5 set interfaces ge-0/0/8 unit 0 description "CONNECTED TO Host 5" set interfaces ge-0/0/8 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/8 unit 0 family bridge vlan-id-list 1-5 set interfaces ae1 unit 0 description "CONNECTED TO ToR21" set interfaces ae1 unit 0 family bridge interface-mode trunk set interfaces ae1 unit 0 family bridge vlan-id-list 1-5 set bridge-domains BD-1 domain-type bridge set bridge-domains BD-1 vlan-id 1 set bridge-domains BD-2 domain-type bridge set bridge-domains BD-2 vlan-id 2 set bridge-domains BD-3 domain-type bridge set bridge-domains BD-3 vlan-id 3 set bridge-domains BD-4 domain-type bridge set bridge-domains BD-4 vlan-id 4 set bridge-domains BD-5 domain-type bridge set bridge-domains BD-5 vlan-id 5
CE6
set system host-name CE6 set interfaces ge-0/0/7 unit 0 description "CONNECTED TO ToR22" set interfaces ge-0/0/7 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/7 unit 0 family bridge vlan-id-list 1-5 set interfaces ge-0/0/9 unit 0 description "CONNECTED TO Host 6" set interfaces ge-0/0/9 unit 0 family bridge interface-mode trunk set interfaces ge-0/0/9 unit 0 family bridge vlan-id-list 1-5 set bridge-domains BD-1 domain-type bridge set bridge-domains BD-1 vlan-id 1 set bridge-domains BD-2 domain-type bridge set bridge-domains BD-2 vlan-id 2 set bridge-domains BD-3 domain-type bridge set bridge-domains BD-3 vlan-id 3 set bridge-domains BD-4 domain-type bridge set bridge-domains BD-4 vlan-id 4 set bridge-domains BD-5 domain-type bridge set bridge-domains BD-5 vlan-id 5
付録2:DUTで設定出力を表示する
DUTのshowコマンド出力(MX11およびToR11)
設定モードから、 show configuration コマンドを入力して設定を確認します。出力に意図した設定が表示されない場合は、この例の手順を繰り返して設定を修正します。
MX11
user@MX11#show configurationinterfaces {
ge-0/0/0 {
unit 0 {
description "CONNECTED TO ToR11";
family inet {
address 192.168.3.2/24;
}
}
}
ge-0/0/1 {
unit 0 {
description "CONNECTED TO ToR12";
family inet {
address 192.168.6.2/24;
}
}
}
ge-0/0/2 {
unit 0 {
description "CONNECTED TO MX12";
family inet {
address 192.168.7.1/24;
}
}
}
ge-0/0/3 {
unit 0 {
description "CONNECTED TO P";
family inet {
address 203.0.113.41/24;
}
family mpls;
}
}
lt-5/1/0 {
esi {
00:22:22:22:22:22:22:22:22:22;
all-active;
}
unit 0 {
description TO-EVPN-VXLAN;
encapsulation ethernet-bridge;
peer-unit 1;
family bridge {
interface-mode trunk;
vlan-id-list 1-5;
}
}
unit 1 {
description TO-EVPN-MPLS;
encapsulation ethernet-bridge;
peer-unit 0;
family bridge {
interface-mode trunk;
vlan-id-list 1-5;
}
}
}
irb {
unit 1 {
proxy-macip-advertisement;
virtual-gateway-esi {
00:11:aa:aa:aa:aa:aa:aa:aa:aa;
all-active;
}
family inet {
address 10.11.1.12/24 {
virtual-gateway-address 10.11.1.10;
}
}
}
unit 2 {
proxy-macip-advertisement;
virtual-gateway-esi {
00:11:bb:bb:bb:bb:bb:bb:bb:bb;
all-active;
}
family inet {
address 10.12.1.12/24 {
virtual-gateway-address 10.12.1.10;
}
}
}
unit 3 {
proxy-macip-advertisement;
virtual-gateway-esi {
00:11:cc:cc:cc:cc:cc:cc:cc:cc;
all-active;
}
family inet {
address 10.13.1.12/24 {
virtual-gateway-address 10.13.1.10;
}
}
}
unit 4 {
proxy-macip-advertisement;
virtual-gateway-esi {
00:11:dd:dd:dd:dd:dd:dd:dd:dd;
all-active;
}
family inet {
address 10.14.1.12/24 {
virtual-gateway-address 10.14.1.10;
}
}
}
unit 5 {
proxy-macip-advertisement;
virtual-gateway-esi {
00:11:ee:ee:ee:ee:ee:ee:ee:ee;
all-active;
}
family inet {
address 10.15.1.12/24 {
virtual-gateway-address 10.15.1.10;
}
}
}
}
lo0 {
unit 0 {
family inet {
address 192.0.2.21/32;
}
family mpls;
}
}
}
policy-options {
policy-statement LO {
from {
protocol direct;
route-filter 192.0.2.21/32 exact;
}
then accept;
}
policy-statement TEST {
then {
community add NO-EXPORT;
}
}
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
}
routing-instances {
EVPN-MPLS-1 {
instance-type virtual-switch;
protocols {
evpn {
default-gateway no-gateway-community;
extended-vlan-list 1-5;
}
}
bridge-domains {
BD-1 {
domain-type bridge;
vlan-id 1;
}
BD-2 {
domain-type bridge;
vlan-id 2;
}
BD-3 {
domain-type bridge;
vlan-id 3;
}
BD-4 {
domain-type bridge;
vlan-id 4;
}
BD-5 {
domain-type bridge;
vlan-id 5;
}
}
interface lt-5/1/0.0;
route-distinguisher 192.0.2.21:100;
vrf-target target:1:2;
}
EVPN-VXLAN-1 {
instance-type virtual-switch;
protocols {
evpn {
encapsulation vxlan;
default-gateway no-gateway-community;
extended-vni-list 1-5;
}
}
vtep-source-interface lo0.0;
bridge-domains {
BD-1 {
domain-type bridge;
vlan-id 1;
routing-interface irb.1;
vxlan {
vni 1;
}
}
BD-2 {
domain-type bridge;
vlan-id 2;
routing-interface irb.2;
vxlan {
vni 2;
}
}
BD-3 {
domain-type bridge;
vlan-id 3;
routing-interface irb.3;
vxlan {
vni 3;
}
}
BD-4 {
domain-type bridge;
vlan-id 4;
routing-interface irb.4;
vxlan {
vni 4;
}
}
BD-5 {
domain-type bridge;
vlan-id 5;
routing-interface irb.5;
vxlan {
vni 5;
}
}
}
interface lt-5/1/0.1;
route-distinguisher 192.0.2.21:1;
vrf-target target:1:1;
}
VRF {
instance-type vrf;
interface irb.1;
interface irb.2;
interface irb.3;
interface irb.4;
interface irb.5;
route-distinguisher 1:1;
vrf-target target:10:10;
}
}
routing-options {
router-id 192.0.2.21;
autonomous-system 65300;
forwarding-table {
export evpn-pplb;
}
}
protocols {
bgp {
group INT {
type internal;
local-address 192.0.2.21;
family evpn {
signaling;
}
export TEST;
neighbor 203.0.113.1;
}
group MX12 {
type external;
local-address 192.168.7.1;
export [ TEST LO ];
peer-as 65500;
local-as 65400;
neighbor 192.168.7.2 {
family inet {
unicast;
}
}
}
group ToR11 {
type external;
local-address 192.168.3.2;
import TEST;
export [ TEST LO ];
peer-as 65100;
local-as 65400;
neighbor 192.168.3.1 {
family inet {
unicast;
}
}
}
group ToR12 {
type external;
local-address 192.168.6.2;
export [ TEST LO ];
peer-as 65200;
local-as 65400;
neighbor 192.168.6.1 {
family inet {
unicast;
}
}
}
group MX12-EVPN {
type external;
multihop {
ttl 2;
no-nexthop-change;
}
local-address 192.0.2.21;
export TEST;
peer-as 65500;
local-as 65400;
neighbor 192.0.2.22 {
family evpn {
signaling;
}
}
}
group ToR11-EVPN {
type external;
multihop {
ttl 2;
no-nexthop-change;
}
local-address 192.0.2.21;
export TEST;
peer-as 65100;
local-as 65400;
neighbor 192.0.2.11 {
family evpn {
signaling;
}
}
}
group ToR12-EVPN {
type external;
multihop {
ttl 2;
no-nexthop-change;
}
local-address 192.0.2.21;
export TEST;
peer-as 65200;
local-as 65400;
neighbor 192.0.2.12 {
family evpn {
signaling;
}
}
}
local-address 192.0.2.21;
local-as 65300;
}
mpls {
label-switched-path MX11-TO-MX12 {
to 192.0.2.22;
}
label-switched-path MX11-TO-P {
to 203.0.113.1;
}
label-switched-path MX11-TO-MX21 {
to 198.51.100.21;
no-cspf;
}
label-switched-path MX11-TO-MX22 {
to 198.51.100.22;
no-cspf;
}
interface all;
interface fxp0.0 {
disable;
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface ge-0/0/3.0;
interface lo0.0 {
passive;
}
}
}
rsvp {
interface all;
interface fxp0.0 {
disable;
}
}
}
ToR11
user@ToR11#show configuration
interfaces {
ge-0/0/0 {
unit 0 {
description "CONNECTED TO CE-2";
family bridge {
interface-mode trunk;
vlan-id-list 1-5;
}
}
}
ge-0/0/2 {
description "CONNECTED TO CE-1";
gigether-options {
802.3ad ae0;
}
}
ge-0/0/3 {
unit 0 {
description "CONNECTED TO ToR12";
family inet {
address 192.168.2.1/24;
}
}
}
ge-0/0/4 {
unit 0 {
description "CONNECTED TO MX–11";
family inet {
address 192.168.3.1/24;
}
}
}
ge-0/0/5 {
unit 0 {
description "CONNECTED TO MX–12";
family inet {
address 192.168.4.1/24;
}
}
}
ae0 {
esi {
00:11:11:11:11:11:11:11:11:11;
all-active;
}
aggregated-ether-options {
lacp {
active;
periodic fast;
system-id 11:11:11:11:11:11;
}
}
unit 0 {
family bridge {
interface-mode trunk;
vlan-id-list 1-5;
}
}
}
lo0 {
unit 0 {
family inet {
address 192.0.2.11/32;
}
}
}
}
policy-options {
policy-statement LO {
term 1 {
from {
protocol direct;
route-filter 192.0.2.11/32 exact;
}
then accept;
}
}
policy-statement TEST {
then {
community add NO-EXPORT;
}
}
policy-statement evpn-pplb {
from protocol evpn;
then {
load-balance per-packet;
}
}
community NO-EXPORT members [ no-advertise no-export no-export-subconfed ];
}
routing-instances {
EVPN-VXLAN-1 {
instance-type virtual-switch;
protocols {
evpn {
encapsulation vxlan;
default-gateway no-gateway-community;
extended-vni-list 1-5;
}
}
vtep-source-interface lo0.0;
bridge-domains {
BD-1 {
domain-type bridge;
vlan-id 1;
routing-interface irb.1;
vxlan {
vni 1;
}
}
BD-2 {
domain-type bridge;
vlan-id 2;
routing-interface irb.2;
vxlan {
vni 2;
}
}
BD-3 {
domain-type bridge;
vlan-id 3;
routing-interface irb.3;
vxlan {
vni 3;
}
}
BD-4 {
domain-type bridge;
vlan-id 4;
routing-interface irb.4;
vxlan {
vni 4;
}
}
BD-5 {
domain-type bridge;
vlan-id 5;
routing-interface irb.5;
vxlan {
vni 5;
}
}
}
interface ge-0/0/0.0;
interface ae0.0;
route-distinguisher 192.0.2.21:1;
vrf-target target:1:1;
}
VRF {
instance-type vrf;
interface irb.1; ## 'irb.1' is not defined
interface irb.2; ## 'irb.2' is not defined
interface irb.3; ## 'irb.3' is not defined
interface irb.4; ## 'irb.4' is not defined
interface irb.5; ## 'irb.5' is not defined
route-distinguisher 1:1;
vrf-target target:10:10;
}
}
routing-options {
router-id 192.0.2.11;
autonomous-system 65100;
forwarding-table {
export evpn-pplb;
}
}
protocols {
bgp {
group MX11 {
type external;
local-address 192.168.3.1;
export [ LO TEST ];
peer-as 65400;
neighbor 192.168.3.2 {
family inet {
unicast;
}
}
}
group MX12 {
type external;
local-address 192.168.4.1;
export [ LO TEST ];
peer-as 65500;
neighbor 192.168.4.2 {
family inet {
unicast;
}
}
}
group ToR12 {
type external;
local-address 192.168.2.1;
export [ LO TEST ];
peer-as 65200;
local-as 65100;
neighbor 192.168.2.2 {
family inet {
unicast;
}
}
}
group MX11-EVPN {
type external;
multihop {
ttl 2;
no-nexthop-change;
}
local-address 192.0.2.11;
export TEST;
peer-as 65400;
local-as 65100;
neighbor 192.0.2.21 {
family evpn {
signaling;
}
}
}
group MX12-EVPN {
type external;
multihop {
ttl 2;
no-nexthop-change;
}
local-address 192.0.2.11;
export TEST;
peer-as 65500;
local-as 65100;
neighbor 192.0.2.22 {
family evpn {
signaling;
}
}
}
group ToR12-EVPN {
type external;
multihop {
ttl 2;
no-nexthop-change;
}
local-address 192.0.2.11;
export TEST;
peer-as 65200;
local-as 65100;
neighbor 192.0.2.12 {
family evpn {
signaling;
}
}
}
local-as 65100;
}
}