Lab-It-Up

Welcome

2 February 20243 December 2024 nick Leave a comment

Welcome to Lab-It-Up.

Here you will find a range of virtual labs for use on both EVE-NG & GNS3.All the labs are provided free of charge and include all the commands to get the lab up and running. Also, lab templates will be provided for EVE-NG for you to import.

More labs will be added in due course so please check the site regularly for updates. In the meantime, happy labbing and good luck with your studies!

Juniper – SRv6 EVPN VPWS

25 January 202625 January 2026 nick Leave a comment

Yes it’s another EVPN VPWS lab but this time it’s with SRv6 so no MPLS involved. A couple of vjunos-router devices are running SRv6 and as usual, 2 Cisco devices are CEs.

https://www.juniper.net/documentation/us/en/software/junos/evpn/topics/concept/configuring-vpws-srv6.html

eve-ng_export-20260125-185511 Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family inet6 address fd2c:8b41:3e9a:1c4d::1/64
set interfaces ge-0/0/1 vlan-tagging
set interfaces ge-0/0/1 encapsulation flexible-ethernet-services
set interfaces ge-0/0/1 unit 12 encapsulation vlan-ccc
set interfaces ge-0/0/1 unit 12 vlan-id 12
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family inet6 address fd7e:9c21:ab04:77d1:8a2f:3c91:5e44:1baf/128
set policy-options policy-statement NHS then next-hop self
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id local 12
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id remote 21
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator LOC1
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator end-dx2-sid 4002:ac8:a1:2:101::
set routing-instances EVPN protocols evpn encapsulation srv6
set routing-instances EVPN interface ge-0/0/1.12
set routing-instances EVPN route-distinguisher 5.5.5.5:12
set routing-instances EVPN vrf-target target:65400:12
set routing-options source-packet-routing srv6 locator LOC1 4002:ac8:a1:2::/64
set routing-options resolution preserve-nexthop-hierarchy
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set routing-options ipv6-router-id fd00::1
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address fd7e:9c21:ab04:77d1:8a2f:3c91:5e44:1baf
set protocols bgp group EVPN family evpn signaling advertise-srv6-service
set protocols bgp group EVPN family evpn signaling accept-srv6-service
set protocols bgp group EVPN export NHS
set protocols bgp group EVPN neighbor fdc1:55aa:9e02:4b90:dead:beef:cafe:1234
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srv6 locator LOC1
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family inet6 address fd2c:8b41:3e9a:1c4d::10/64
set interfaces ge-0/0/1 vlan-tagging
set interfaces ge-0/0/1 encapsulation flexible-ethernet-services
set interfaces ge-0/0/1 unit 12 encapsulation vlan-ccc
set interfaces ge-0/0/1 unit 12 vlan-id 12
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family inet6 address fdc1:55aa:9e02:4b90:dead:beef:cafe:1234/128
set policy-options policy-statement NHS then next-hop self
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id local 21
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id remote 12
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator LOC1
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator end-dx2-sid 4002:ac8:a1:3:101::
set routing-instances EVPN protocols evpn encapsulation srv6
set routing-instances EVPN interface ge-0/0/1.12
set routing-instances EVPN route-distinguisher 6.6.6.6:12
set routing-instances EVPN vrf-target target:65400:12
set routing-options source-packet-routing srv6 locator LOC1 4002:ac8:a1:3::/64
set routing-options resolution preserve-nexthop-hierarchy
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set routing-options ipv6-router-id fd00::2
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address fdc1:55aa:9e02:4b90:dead:beef:cafe:1234
set protocols bgp group EVPN family evpn signaling advertise-srv6-service
set protocols bgp group EVPN family evpn signaling accept-srv6-service
set protocols bgp group EVPN export NHS
set protocols bgp group EVPN neighbor fd7e:9c21:ab04:77d1:8a2f:3c91:5e44:1baf
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srv6 locator LOC1
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only

OSPFv3 has been configured on the Cisco devices

Juniper – LDP Layer 2 Circuit

17 January 202617 January 2026 nick Leave a comment

This is a slight variation on a standard LDP Layer 2 circuit. Segment Routing is used for the transport labels and LDP is only running on the loopbacks of both PEs. vJunos-router is used for the lab.

https://www.juniper.net/documentation/us/en/software/junos/vpn-l2/topics/concept/vpn-layer-2-circuit-overview.html

eve-ng_export-20260115-210937 Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 vlan-tagging
set interfaces ge-0/0/0 encapsulation flexible-ethernet-services
set interfaces ge-0/0/0 unit 512 encapsulation vlan-ccc
set interfaces ge-0/0/0 unit 512 vlan-id 512
set interfaces ge-0/0/2 unit 0 family inet address 1.1.1.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.5555.5555.00
set interfaces lo0 unit 0 family mpls
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0 point-to-point
set protocols isis source-packet-routing srgb start-label 800000
set protocols isis source-packet-routing srgb index-range 9000
set protocols isis source-packet-routing node-segment ipv4-index 500
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols l2circuit neighbor 8.8.8.8 interface ge-0/0/0.512 virtual-circuit-id 3
set protocols ldp interface lo0.0
set protocols ldp neighbor 8.8.8.8
set protocols mpls interface ge-0/0/2.0
set protocols mpls interface lo0.0

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 2.2.2.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.6666.6666.00
set interfaces lo0 unit 0 family mpls
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface lo0.0 point-to-point
set protocols isis source-packet-routing srgb start-label 800000
set protocols isis source-packet-routing srgb index-range 9000
set protocols isis source-packet-routing node-segment ipv4-index 501
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface lo0.0
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 2.2.2.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 3.3.3.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 33.33.33.33/32
set interfaces lo0 unit 0 family iso address 49.0000.3333.3333.0000.00
set interfaces lo0 unit 0 family mpls
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface lo0.0 point-to-point
set protocols isis source-packet-routing srgb start-label 800000
set protocols isis source-packet-routing srgb index-range 9000
set protocols isis source-packet-routing node-segment ipv4-index 502
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 3.3.3.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.7777.7777.00
set interfaces lo0 unit 0 family mpls
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface lo0.0 point-to-point
set protocols isis source-packet-routing srgb start-label 800000
set protocols isis source-packet-routing srgb index-range 9000
set protocols isis source-packet-routing node-segment ipv4-index 503
set protocols isis level 2 wide-metrics-only
set protocols isis level 1 disable
set protocols mpls interface lo0.0
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 vlan-tagging
set interfaces ge-0/0/0 encapsulation flexible-ethernet-services
set interfaces ge-0/0/0 unit 512 encapsulation vlan-ccc
set interfaces ge-0/0/0 unit 512 vlan-id 512
set interfaces ge-0/0/2 unit 0 family inet address 4.4.4.2/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.8888.8888.00
set interfaces lo0 unit 0 family mpls
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0 point-to-point
set protocols isis source-packet-routing srgb start-label 800000
set protocols isis source-packet-routing srgb index-range 9000
set protocols isis source-packet-routing node-segment ipv4-index 504
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols l2circuit neighbor 5.5.5.5 interface ge-0/0/0.512 virtual-circuit-id 3
set protocols ldp interface lo0.0
set protocols ldp neighbor 5.5.5.5
set protocols mpls interface ge-0/0/2.0
set protocols mpls interface lo0.0

As usual, OSPF has been configured on the 2 Cisco CE devices

Juniper – OSPF Unnumbered Ethernet Interfaces

3 January 20263 January 2026 nick Leave a comment

We have already done a lab with IS-IS and Unnumbered Interfaces so with this lab we will do the same but with OSPF instead of IS-IS.

The lab is EVPN E-Tree on Junos Evolved. New York is the Head Office (root) and the other sites are satellites (leaves).

https://www.juniper.net/documentation/us/en/software/junos/evpn/topics/concept/evpn-etree-overview.html

eve-ng_export-20260101-213552 Download

PE1

set system host-name pe1
set interfaces et-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/2 unit 0 family mpls
set interfaces et-0/0/3 flexible-vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 202 encapsulation vlan-bridge
set interfaces et-0/0/3 unit 202 vlan-id 202
set interfaces et-0/0/3 unit 202 etree-ac-role root
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances NEWYORK instance-type mac-vrf
set routing-instances NEWYORK protocols evpn evpn-etree
set routing-instances NEWYORK service-type vlan-aware
set routing-instances NEWYORK interface et-0/0/3.202
set routing-instances NEWYORK route-distinguisher 5.5.5.5:202
set routing-instances NEWYORK vrf-target target:65400:202
set routing-instances NEWYORK vlans NY202 vlan-id 202
set routing-instances NEWYORK vlans NY202 interface et-0/0/3.202
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 5.5.5.5
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols ospf source-packet-routing node-segment ipv4-index 600
set protocols ospf source-packet-routing srgb start-label 70000
set protocols ospf source-packet-routing srgb index-range 1000
set protocols ospf area 0.0.0.0 interface et-0/0/1.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/0.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/2.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface lo0.0 passive

PE2

set system host-name pe2
set interfaces et-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/2 unit 0 family mpls
set interfaces et-0/0/3 flexible-vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 202 encapsulation vlan-bridge
set interfaces et-0/0/3 unit 202 vlan-id 202
set interfaces et-0/0/3 unit 202 etree-ac-role leaf
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances NEWYORK instance-type mac-vrf
set routing-instances NEWYORK protocols evpn evpn-etree
set routing-instances NEWYORK service-type vlan-aware
set routing-instances NEWYORK interface et-0/0/3.202
set routing-instances NEWYORK route-distinguisher 6.6.6.6:202
set routing-instances NEWYORK vrf-target target:65400:202
set routing-instances NEWYORK vlans NY202 vlan-id 202
set routing-instances NEWYORK vlans NY202 interface et-0/0/3.202
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 6.6.6.6
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols ospf source-packet-routing node-segment ipv4-index 601
set protocols ospf source-packet-routing srgb start-label 70000
set protocols ospf source-packet-routing srgb index-range 1000
set protocols ospf area 0.0.0.0 interface et-0/0/1.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/0.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/2.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface lo0.0 passive

PE3

set system host-name pe3
set interfaces et-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family inet6
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family inet6
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/2 unit 0 family inet6
set interfaces et-0/0/2 unit 0 family mpls
set interfaces et-0/0/3 flexible-vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 202 encapsulation vlan-bridge
set interfaces et-0/0/3 unit 202 vlan-id 202
set interfaces et-0/0/3 unit 202 etree-ac-role leaf
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances NEWYORK instance-type mac-vrf
set routing-instances NEWYORK protocols evpn evpn-etree
set routing-instances NEWYORK service-type vlan-aware
set routing-instances NEWYORK interface et-0/0/3.202
set routing-instances NEWYORK route-distinguisher 7.7.7.7:202
set routing-instances NEWYORK vrf-target target:65400:202
set routing-instances NEWYORK vlans NY202 vlan-id 202
set routing-instances NEWYORK vlans NY202 interface et-0/0/3.202
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 7.7.7.7
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols ospf source-packet-routing node-segment ipv4-index 602
set protocols ospf source-packet-routing srgb start-label 70000
set protocols ospf source-packet-routing srgb index-range 1000
set protocols ospf area 0.0.0.0 interface et-0/0/1.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/0.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/2.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface lo0.0 passive

PE4

set system host-name pe4
set interfaces et-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/2 unit 0 family mpls
set interfaces et-0/0/3 flexible-vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 202 encapsulation vlan-bridge
set interfaces et-0/0/3 unit 202 vlan-id 202
set interfaces et-0/0/3 unit 202 etree-ac-role leaf
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances NEWYORK instance-type mac-vrf
set routing-instances NEWYORK protocols evpn evpn-etree
set routing-instances NEWYORK service-type vlan-aware
set routing-instances NEWYORK interface et-0/0/3.202
set routing-instances NEWYORK route-distinguisher 8.8.8.8:202
set routing-instances NEWYORK vrf-target target:65400:202
set routing-instances NEWYORK vlans NY202 vlan-id 202
set routing-instances NEWYORK vlans NY202 interface et-0/0/3.202
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 8.8.8.8
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols ospf source-packet-routing node-segment ipv4-index 603
set protocols ospf source-packet-routing srgb start-label 70000
set protocols ospf source-packet-routing srgb index-range 1000
set protocols ospf area 0.0.0.0 interface et-0/0/0.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/1.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/2.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface lo0.0 passive

set system host-name rr
set interfaces et-0/0/0 unit 0 family inet
set interfaces et-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/2 unit 0 family mpls
set interfaces et-0/0/3 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/3 unit 0 family iso
set interfaces et-0/0/3 unit 0 family mpls
set interfaces et-0/0/4 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/4 unit 0 family iso
set interfaces et-0/0/4 unit 0 family mpls
set interfaces et-0/0/6 unit 0 family inet
set interfaces et-0/0/8 unit 0 family inet
set interfaces et-0/0/9 unit 0 family inet
set interfaces et-0/0/10 unit 0 family inet
set interfaces et-0/0/11 unit 0 family inet
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 9.9.9.9
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN cluster 9.9.9.9
set protocols bgp group EVPN neighbor 5.5.5.5
set protocols bgp group EVPN neighbor 7.7.7.7
set protocols bgp group EVPN neighbor 6.6.6.6
set protocols bgp group EVPN neighbor 8.8.8.8
set protocols ospf area 0.0.0.0 interface et-0/0/1.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/2.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/3.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/4.0 interface-type p2p

OSPF has been configured on all the CE devices and New York will have 3 neighbours. The other sites will only be neighbours with New York.

Arista – VXLAN/EVPN BGP Unnumbered

28 December 202528 December 2025 nick Leave a comment

Another Arista VXLAN/EVPN lab but for this we will use eBGP Unnumbered for the underlay rather than OSPF. BGP Unnumbered uses IPv6 link local addresses for IPv4 next hops and is detailed in RFC5549.

https://datatracker.ietf.org/doc/html/rfc5549

eve-ng_export-20251228-192314 Download

Spine1

hostname spine1
    
interface Ethernet1
no switchport
ipv6 enable
    
interface Ethernet2
no switchport
ipv6 enable

interface Ethernet3
no switchport
ipv6 enable

interface Loopback0
ip address 5.5.5.5/32

ip routing

ipv6 unicast-routing

router bgp 65400
router-id 5.5.5.5
no bgp default ipv4-unicast
neighbor LEAF peer group
neighbor LEAF local-as 65401 no-prepend replace-as
neighbor LEAF_OL peer group
neighbor LEAF_OL remote-as 65400
neighbor LEAF_OL update-source Loopback0
neighbor LEAF_OL route-reflector-client
neighbor LEAF_OL send-community extended
neighbor 7.7.7.7 peer group LEAF_OL
neighbor 8.8.8.8 peer group LEAF_OL
neighbor 9.9.9.9 peer group LEAF_OL
redistribute connected
neighbor interface Et1 peer-group LEAF remote-as 65403
neighbor interface Et2 peer-group LEAF remote-as 65404
neighbor interface Et3 peer-group LEAF remote-as 65405

address-family evpn
neighbor LEAF_OL activate

address-family ipv4
neighbor LEAF activate
neighbor LEAF next-hop address-family ipv6 originate

Spine2

hostname spine2

interface Ethernet1
switchport
ipv6 enable

interface Ethernet2
no switchport
ipv6 enable

interface Ethernet3
no switchport
ipv6 enable

interface Loopback0
ip address 6.6.6.6/32

ip routing

ipv6 unicast-routing
  
router bgp 65400
router-id 6.6.6.6
no bgp default ipv4-unicast
neighbor LEAF peer group
neighbor LEAF local-as 65402 no-prepend replace-as
neighbor LEAF_OL peer group
neighbor LEAF_OL remote-as 65400
neighbor LEAF_OL update-source Loopback0
neighbor LEAF_OL route-reflector-client
neighbor LEAF_OL send-community extended
neighbor 7.7.7.7 peer group LEAF_OL
neighbor 8.8.8.8 peer group LEAF_OL
neighbor 9.9.9.9 peer group LEAF_OL
redistribute connected
neighbor interface Et1 peer-group LEAF remote-as 65403
neighbor interface Et2 peer-group LEAF remote-as 65404
neighbor interface Et3 peer-group LEAF remote-as 65405

address-family evpn
neighbor LEAF_OL activate

address-family ipv4
neighbor LEAF activate
neighbor LEAF next-hop address-family ipv6 originate

Leaf1

hostname leaf1

vlan 1234
  
interface Ethernet1
no switchport
ipv6 enable
  
interface Ethernet2
no switchport
ipv6 enable
  
interface Ethernet3
switchport access vlan 1234
 
interface Loopback0
ip address 7.7.7.7/32

interface Vxlan1
vxlan source-interface Loopback0
vxlan udp-port 4789
vxlan vlan 1234 vni 1234
    
ip routing
    
ipv6 unicast-routing

router bgp 65400
router-id 7.7.7.7
no bgp default ipv4-unicast
neighbor SPINE peer group
neighbor SPINE local-as 65403 no-prepend replace-as
neighbor 5.5.5.5 remote-as 65400
neighbor 5.5.5.5 update-source Loopback0
neighbor 5.5.5.5 send-community extended
neighbor 6.6.6.6 remote-as 65400
neighbor 6.6.6.6 update-source Loopback0
neighbor 6.6.6.6 send-community extended
redistribute connected
neighbor interface Et1 peer-group SPINE remote-as 65401
neighbor interface Et2 peer-group SPINE remote-as 65402
!
vlan 1234
rd 8.8.8.8:1234
route-target both 65400:1234
redistribute learned
!
address-family evpn
neighbor 5.5.5.5 activate
neighbor 6.6.6.6 activate
!
address-family ipv4
neighbor SPINE activate
neighbor SPINE next-hop address-family ipv6 originate
no neighbor 5.5.5.5 activate
no neighbor 6.6.6.6 activate

Leaf2

hostname leaf2

vlan 1234,2468

interface Ethernet1
no switchport
ipv6 enable

interface Ethernet2
no switchport
ipv6 enable

interface Ethernet3
switchport access vlan 1234

interface Ethernet4
switchport access vlan 2468

interface Loopback0
ip address 8.8.8.8/32
 
interface Vxlan1
vxlan source-interface Loopback0
vxlan udp-port 4789
vxlan vlan 1234 vni 1234
vxlan vlan 2468 vni 2468

ip routing

ipv6 unicast-routing

router bgp 65400
router-id 8.8.8.8
no bgp default ipv4-unicast
neighbor SPINE peer group
neighbor SPINE local-as 65404 no-prepend replace-as
neighbor 5.5.5.5 remote-as 65400
neighbor 5.5.5.5 update-source Loopback0
neighbor 5.5.5.5 send-community extended
neighbor 6.6.6.6 remote-as 65400
neighbor 6.6.6.6 update-source Loopback0
neighbor 6.6.6.6 send-community extended
redistribute connected
neighbor interface Et1 peer-group SPINE remote-as 65401
neighbor interface Et2 peer-group SPINE remote-as 65402
    
vlan 1234
rd 8.8.8.8:1234
route-target both 65400:1234
redistribute learned

vlan 2468
rd 8.8.8.8:2468
route-target both 65400:2468
redistribute learned

address-family evpn
neighbor 5.5.5.5 activate
neighbor 6.6.6.6 activate

address-family ipv4
neighbor SPINE activate
neighbor SPINE next-hop address-family ipv6 originate
no neighbor 5.5.5.5 activate
no neighbor 6.6.6.6 activate

Leaf3

hostname leaf3

vlan 2468

interface Ethernet1
no switchport
ipv6 enable

interface Ethernet2
no switchport
ipv6 enable

interface Ethernet4
switchport access vlan 2468
  
interface Loopback0
ip address 9.9.9.9/32

interface Vxlan1
vxlan source-interface Loopback0
vxlan udp-port 4789
vxlan vlan 2468 vni 2468

ip routing

ipv6 unicast-routing
    
router bgp 65400
router-id 9.9.9.9
no bgp default ipv4-unicast
neighbor SPINE peer group
neighbor SPINE local-as 65405 no-prepend replace-as
neighbor 5.5.5.5 remote-as 65400
neighbor 5.5.5.5 update-source Loopback0
neighbor 5.5.5.5 send-community extended
neighbor 6.6.6.6 remote-as 65400
neighbor 6.6.6.6 update-source Loopback0
neighbor 6.6.6.6 send-community extended
redistribute connected
neighbor interface Et1 peer-group SPINE remote-as 65401
neighbor interface Et2 peer-group SPINE remote-as 65402

vlan 2468
rd 8.8.8.8:2468
route-target both 65400:2468
redistribute learned

address-family evpn
neighbor 5.5.5.5 activate
neighbor 6.6.6.6 activate

address-family ipv4
neighbor SPINE activate
neighbor SPINE next-hop address-family ipv6 originate
no neighbor 5.5.5.5 activate
no neighbor 6.6.6.6 activate

VPCs 6 & 8 have been configured with IP addresses in the range 10.1.1.0/24 & VPCs 7 & 9 have addresses with the range 10.2.2.0/24. Both are able to ping their relevant counterpart in the same subnet. Also, BGP shows the relevant routes/MAC addresses have been learnt.

Juniper – IS-IS Unnumbered Ethernet Interfaces

20 December 202520 December 2025 nick Leave a comment

It’s been a while since a new lab was posted so let’s get back to it.

This lab is Segment Routing EVPN VPWS with IS-IS as the IGP but with a slight twist. None of the physical interfaces have an IP address and they borrow their IP from the Loopback. The below article explains the concept in more detail.

IS-IS and Unnumbered Ethernet Interfaces in Junos

eve-ng_export-20251220-143756 Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 67 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 67 vlan-id 67
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface ge-0/0/3.67 vpws-service-id local 67
set routing-instances EVPN protocols evpn interface ge-0/0/3.67 vpws-service-id remote 76
set routing-instances EVPN interface ge-0/0/3.67
set routing-instances EVPN route-distinguisher 5.5.5.5:67
set routing-instances EVPN vrf-target target:65400:67
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 5.5.5.5
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 50
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface ge-0/0/2.0
set protocols mpls interface lo0.0

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 60
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface ge-0/0/2.0
set protocols mpls interface lo0.0

PE3

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 67 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 67 vlan-id 67
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface ge-0/0/3.67 vpws-service-id local 76
set routing-instances EVPN protocols evpn interface ge-0/0/3.67 vpws-service-id remote 67
set routing-instances EVPN interface ge-0/0/3.67
set routing-instances EVPN route-distinguisher 7.7.7.7:67
set routing-instances EVPN vrf-target target:65400:67
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 7.7.7.7
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 70
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

PE4

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 80
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

set chassis network-services enhanced-ip
set interfaces ge-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/3 unit 0 family iso
set interfaces ge-0/0/4 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/4 unit 0 family iso
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 9.9.9.9
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN cluster 9.9.9.9
set protocols bgp group EVPN neighbor 5.5.5.5
set protocols bgp group EVPN neighbor 7.7.7.7
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface ge-0/0/3.0 point-to-point
set protocols isis interface ge-0/0/4.0 point-to-point
set protocols isis interface lo0.0
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only

As usual, 2 Cisco devices have been used as CEs with OSPF configured on both.

Confirmation of VPWS instance.

Juniper – RSVP EVPN/VPWS

4 January 20254 January 2025 nick 2 Comments

Junos Evolved is used for this lab. Commands are pretty much identical to standard Junos.

LSPs have been created between PE1 & PE3. The PE1 LSP goes through PE4 & the PE3 LSP through PE2. IS-IS is the IGP and an out of data path Route Reflector is used to reflect the relevant routes.

https://community.juniper.net/blogs/suneesh-babu/2022/11/05/evpn-vpws-validation-on-acx7000

_Exports_eve-ng_export-20250104-111343 Download

PE1

set interfaces et-0/0/0 unit 0 family inet address 1.1.1.1/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 4.4.4.2/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.2.2.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/3 vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 3232 encapsulation vlan-ccc
set interfaces et-0/0/3 unit 3232 vlan-id 3232
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id local 32
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id remote 33
set routing-instances EVPN interface et-0/0/3.3232
set routing-instances EVPN route-distinguisher 5.5.5.5:3232
set routing-instances EVPN vrf-target target:65400:3232
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 5.5.5.5
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls label-switched-path PE3 to 7.7.7.7
set protocols mpls label-switched-path PE3 primary PE3
set protocols mpls path PE3 8.8.8.8 strict
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

PE2

set interfaces et-0/0/0 unit 0 family inet address 1.1.1.2/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 2.2.2.1/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.3.3.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

PE3

set interfaces et-0/0/0 unit 0 family inet address 2.2.2.2/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 3.3.3.1/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.4.4.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/3 vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 3232 encapsulation vlan-ccc
set interfaces et-0/0/3 unit 3232 vlan-id 3232
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id local 33
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id remote 32
set routing-instances EVPN interface et-0/0/3.3232
set routing-instances EVPN route-distinguisher 7.7.7.7:3232
set routing-instances EVPN vrf-target target:65400:3232
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 7.7.7.7
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls label-switched-path PE1 to 5.5.5.5
set protocols mpls label-switched-path PE1 primary PE1
set protocols mpls path PE1 6.6.6.6 strict
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

PE4

set interfaces et-0/0/0 unit 0 family inet address 3.3.3.2/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 4.4.4.1/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.5.5.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

set interfaces et-0/0/1 unit 0 family inet address 1.2.2.2/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/2 unit 0 family inet address 1.3.3.2/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/3 unit 0 family inet address 1.4.4.2/30
set interfaces et-0/0/3 unit 0 family iso
set interfaces et-0/0/4 unit 0 family inet address 1.5.5.2/30
set interfaces et-0/0/4 unit 0 family iso
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 9.9.9.9
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN cluster 9.9.9.9
set protocols bgp group EVPN neighbor 5.5.5.5
set protocols bgp group EVPN neighbor 7.7.7.7
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface et-0/0/3.0 point-to-point
set protocols isis interface et-0/0/4.0 point-to-point
set protocols isis interface lo0.0 passive

The VPWS instance will now be up.

OSPF configured on the 2 CE devices confirming the layer 2 circuit.

Juniper – Segment Routing Traffic Engineering

29 December 202429 December 2024 nick Leave a comment

Again we will use vjunos router for this lab. Aim of the lab is to direct traffic for the VPWS circuit over a certain path. Traffic from PE1 will go via PE4 and traffic from PE3 will go via PE2.

IS-IS is used as the IGP (could use OSPF if preferred) and an out of path route reflector reflects routes to the PE devices.

https://www.juniper.net/documentation/us/en/software/junos/mpls/topics/topic-map/segment-routing-lsp-configuration.html

_Exports_eve-ng_export-20241229-175412 Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.1/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.2/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.2.2.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances VPWS instance-type evpn-vpws
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id local 545
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id remote 546
set routing-instances VPWS interface ge-0/0/3.545
set routing-instances VPWS route-distinguisher 5.5.5.5:545
set routing-instances VPWS vrf-target target:65400:545
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group VPWS type internal
set protocols bgp group VPWS local-address 5.5.5.5
set protocols bgp group VPWS family evpn signaling
set protocols bgp group VPWS neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 50
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis traffic-engineering l3-unicast-topology
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols source-packet-routing segment-list PE3 hop1 label 80080
set protocols source-packet-routing source-routing-path PE3 to 7.7.7.7
set protocols source-packet-routing source-routing-path PE3 color 100
set protocols source-packet-routing source-routing-path PE3 primary PE3

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 2.2.2.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.3.3.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 2121 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 2121 vlan-id 2121
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 60
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

PE3

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 2.2.2.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 3.3.3.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.4.4.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances VPWS instance-type evpn-vpws
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id local 546
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id remote 545
set routing-instances VPWS interface ge-0/0/3.545
set routing-instances VPWS route-distinguisher 7.7.7.7:545
set routing-instances VPWS vrf-target target:65400:545
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group VPWS type internal
set protocols bgp group VPWS local-address 7.7.7.7
set protocols bgp group VPWS family evpn signaling
set protocols bgp group VPWS neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 70
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols source-packet-routing segment-list PE1 hop1 label 80060
set protocols source-packet-routing source-routing-path PE1 to 5.5.5.5
set protocols source-packet-routing source-routing-path PE1 color 100
set protocols source-packet-routing source-routing-path PE1 primary PE1

PE4

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 3.3.3.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.5.5.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 2121 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 2121 vlan-id 2121
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 80
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

set interfaces ge-0/0/1 unit 0 family inet address 1.2.2.2/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family inet address 1.3.3.2/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 unit 0 family inet address 1.4.4.2/30
set interfaces ge-0/0/3 unit 0 family iso
set interfaces ge-0/0/4 unit 0 family inet address 1.5.5.2/30
set interfaces ge-0/0/4 unit 0 family iso
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options rib inet.3
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group VPWS type internal
set protocols bgp group VPWS local-address 9.9.9.9
set protocols bgp group VPWS family evpn signaling
set protocols bgp group VPWS cluster 9.9.9.9
set protocols bgp group VPWS neighbor 5.5.5.5
set protocols bgp group VPWS neighbor 7.7.7.7
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface ge-0/0/3.0
set protocols isis interface ge-0/0/4.0
set protocols isis interface lo0.0 passive

If you check the routing table of either PE1 or PE3 you will find a new table called inetcolor.0 as a color has been applied to the traffic engineering.

OSPF has been configured on both CE devices confirming the VPWS circuit is up.

Juniper – Segment Routing EVPN E-Tree

22 December 202422 December 2024 nick Leave a comment

Rather than the vMX, vJunos router is used for this lab & a Route Reflector is thrown into the mix to make things a little more interesting. IS-IS used as the IGP. CE1 is root & CE2 & CE3 are configured as leaves so they are not able to forward traffic to each other.

https://www.juniper.net/documentation/us/en/software/junos/evpn/topics/example/example-etree-service-evpn-configuring.html

_Exports_eve-ng_export-20241222-131321 Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.1/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.2/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.2.2.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 flexible-vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-bridge
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces ge-0/0/3 unit 545 etree-ac-role root
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances ETREE instance-type evpn
set routing-instances ETREE protocols evpn interface ge-0/0/3.545
set routing-instances ETREE protocols evpn evpn-etree
set routing-instances ETREE vlan-id 545
set routing-instances ETREE interface ge-0/0/3.545
set routing-instances ETREE route-distinguisher 5.5.5.5:545
set routing-instances ETREE vrf-target target:65400:545
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group ETREE type internal
set protocols bgp group ETREE local-address 5.5.5.5
set protocols bgp group ETREE family evpn signaling
set protocols bgp group ETREE neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 50
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 2.2.2.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.3.3.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 60
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

PE3

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 2.2.2.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 3.3.3.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.4.4.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 flexible-vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-bridge
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces ge-0/0/3 unit 545 etree-ac-role leaf
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances ETREE instance-type evpn
set routing-instances ETREE protocols evpn interface ge-0/0/3.545
set routing-instances ETREE protocols evpn evpn-etree
set routing-instances ETREE vlan-id 545
set routing-instances ETREE interface ge-0/0/3.545
set routing-instances ETREE route-distinguisher 7.7.7.7:545
set routing-instances ETREE vrf-target target:65400:545
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group ETREE type internal
set protocols bgp group ETREE local-address 7.7.7.7
set protocols bgp group ETREE family evpn signaling
set protocols bgp group ETREE neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 70
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

PE4

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 3.3.3.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.5.5.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 flexible-vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-bridge
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces ge-0/0/3 unit 545 etree-ac-role leaf
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances ETREE instance-type evpn
set routing-instances ETREE protocols evpn interface ge-0/0/3.545
set routing-instances ETREE protocols evpn evpn-etree
set routing-instances ETREE vlan-id 545
set routing-instances ETREE interface ge-0/0/3.545
set routing-instances ETREE route-distinguisher 8.8.8.8:545
set routing-instances ETREE vrf-target target:65400:545
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols bgp group ETREE type internal
set protocols bgp group ETREE local-address 8.8.8.8
set protocols bgp group ETREE family evpn signaling
set protocols bgp group ETREE neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 80
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

set interfaces ge-0/0/1 unit 0 family inet address 1.2.2.2/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family inet address 1.3.3.2/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 unit 0 family inet address 1.4.4.2/30
set interfaces ge-0/0/3 unit 0 family iso
set interfaces ge-0/0/4 unit 0 family inet address 1.5.5.2/30
set interfaces ge-0/0/4 unit 0 family iso
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group ETREE type internal
set protocols bgp group ETREE local-address 9.9.9.9
set protocols bgp group ETREE family evpn signaling
set protocols bgp group ETREE cluster 9.9.9.9
set protocols bgp group ETREE neighbor 5.5.5.5
set protocols bgp group ETREE neighbor 7.7.7.7
set protocols bgp group ETREE neighbor 8.8.8.8
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface ge-0/0/3.0
set protocols isis interface ge-0/0/4.0
set protocols isis interface lo0.0 passive

The attachment circuits will now be up

OSPF has been configured on the CE devices. As root, CE1 will be neighbours with both CE2 & CE3

Leaves will only be neighbours with root. Output from CE2 confirms this.

Cisco IOS XE – RSVP L3VPN

3 December 20243 December 2024 nick Leave a comment

We have done a L2VPN on IOS XE so lets give a L3VPN a try. RSVP is used for signalling, IS-IS for the IGP and P1 acting as a route reflector. 2 Cisco CE devices with OSPF configured to the PEs. Will throw in an OSPF sham link for a bit of fun.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l3_vpns/configuration/xe-17/mp-l3-vpns-xe-17-book.html

_Exports_eve-ng_export-20241203-203029 Download

PE1

hostname pe1

ip vrf CE1
rd 5.5.5.5:100
route-target export 65200:100
route-target import 65200:100

mpls traffic-eng tunnels
  
interface Loopback0
ip address 5.5.5.5 255.255.255.255
ip router isis 1
isis circuit-type level-2-only

interface Loopback1
ip vrf forwarding CE1
ip address 22.22.22.22 255.255.255.255

interface Tunnel1
ip unnumbered Loopback0
tunnel mode mpls traffic-eng
tunnel destination 7.7.7.7
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng path-option 1 dynamic

interface GigabitEthernet1
ip address 1.1.1.1 255.255.255.252
ip router isis 1
mpls ip
mpls traffic-eng tunnels
isis circuit-type level-2-only
isis network point-to-point
ip rsvp bandwidth percent 50
ip rsvp signalling hello

interface GigabitEthernet2
ip vrf forwarding CE1
ip address 10.1.1.1 255.255.255.0
ip ospf 1 area 0
  
router ospf 1 vrf CE1
area 0 sham-link 22.22.22.22 33.33.33.33
redistribute bgp 65200

router isis 1
net 49.0000.5555.5555.5555.00
is-type level-2-only
metric-style wide
mpls traffic-eng router-id Loopback0
mpls traffic-eng level-2

router bgp 65200
bgp log-neighbor-changes
neighbor 6.6.6.6 remote-as 65200
neighbor 6.6.6.6 update-source Loopback0

address-family vpnv4
neighbor 6.6.6.6 activate
neighbor 6.6.6.6 send-community extended
exit-address-family

address-family ipv4 vrf CE1
network 22.22.22.22 mask 255.255.255.255
redistribute ospf 1
exit-address-family

hostname p1

mpls traffic-eng tunnels
  
interface Loopback0
ip address 6.6.6.6 255.255.255.255
ip router isis 1
isis circuit-type level-2-only

interface GigabitEthernet1
ip address 1.1.1.2 255.255.255.252
ip router isis 1
mpls ip
mpls traffic-eng tunnels
isis circuit-type level-2-only
isis network point-to-point
ip rsvp bandwidth percent 50
ip rsvp signalling hello

interface GigabitEthernet2
ip address 2.2.2.1 255.255.255.252
ip router isis 1
mpls ip
mpls traffic-eng tunnels
isis circuit-type level-2-only
isis network point-to-point
ip rsvp bandwidth percent 50
ip rsvp signalling hello

router isis 1
net 49.0000.6666.6666.6666.00
is-type level-2-only
metric-style wide
mpls traffic-eng router-id Loopback0
mpls traffic-eng level-2

router bgp 65200
bgp log-neighbor-changes
neighbor 5.5.5.5 remote-as 65200
neighbor 5.5.5.5 update-source Loopback0
neighbor 7.7.7.7 remote-as 65200
neighbor 7.7.7.7 update-source Loopback0

address-family vpnv4
neighbor 5.5.5.5 activate
neighbor 5.5.5.5 send-community extended
neighbor 5.5.5.5 route-reflector-client
neighbor 7.7.7.7 activate
neighbor 7.7.7.7 send-community extended
neighbor 7.7.7.7 route-reflector-client
exit-address-family

PE2

hostname pe2

ip vrf CE2
rd 7.7.7.7:100
route-target export 65200:100
route-target import 65200:100

mpls traffic-eng tunnels
  
interface Loopback0
ip address 7.7.7.7 255.255.255.255
ip router isis 1
isis circuit-type level-2-only
  
interface Loopback1
ip vrf forwarding CE2
ip address 33.33.33.33 255.255.255.255

interface Tunnel1
ip unnumbered Loopback0
tunnel mode mpls traffic-eng
tunnel destination 5.5.5.5
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng path-option 1 dynamic

interface GigabitEthernet1
ip address 2.2.2.2 255.255.255.252
ip router isis 1
mpls ip
mpls traffic-eng tunnels
isis circuit-type level-2-only
isis network point-to-point
ip rsvp bandwidth percent 50
ip rsvp signalling hello

interface GigabitEthernet2
ip vrf forwarding CE2
ip address 10.2.2.1 255.255.255.0
ip ospf 1 area 0
  
router ospf 1 vrf CE2
router-id 10.2.2.1
area 0 sham-link 33.33.33.33 22.22.22.22
redistribute bgp 65200

router isis 1
net 49.0000.7777.7777.7777.00
is-type level-2-only
metric-style wide
mpls traffic-eng router-id Loopback0
mpls traffic-eng level-2

router bgp 65200
bgp log-neighbor-changes
neighbor 6.6.6.6 remote-as 65200
neighbor 6.6.6.6 update-source Loopback0

address-family vpnv4
neighbor 6.6.6.6 activate
neighbor 6.6.6.6 send-community extended
exit-address-family

address-family ipv4 vrf CE2
network 33.33.33.33 mask 255.255.255.255
redistribute ospf 1
exit-address-family

The L3VPN will now be up and you can confirm by checking the routing tables of the CE devices. In this instance the sham links were configured with IP addresses of 22.22.22.22/32 & 33.33.33.33/32.

Cisco IOS XE – Segment Routing VPLS

27 November 202427 November 2024 nick Leave a comment

Instead of using LDP or RSVP, IS-IS Segment Routing is used. P1 acts as a route reflector. A simple lab with, as usual, 2 Cisco CE devices. EIGRP is used between them instead of OSPF.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/seg_routing/configuration/xe-17/segrt-xe-17-book/m_sr-ospf.html

_Exports_eve-ng_export-20241127-194614 Download

PE1

hostname pe1

l2 vfi VPLS autodiscovery
vpn id 444
bridge-domain 1
rd 5.5.5.5:444
route-target export 65200:444
route-target import 65200:444
  
interface Loopback0
ip address 5.5.5.5 255.255.255.255
ip router isis 1

interface GigabitEthernet1
ip address 1.1.1.1 255.255.255.252
ip router isis 1
negotiation auto
no mpls ldp igp autoconfig
no mop enabled
no mop sysid
isis circuit-type level-2-only
isis network point-to-point

interface GigabitEthernet2
no ip address
negotiation auto
no mop enabled
no mop sysid
service instance 1 ethernet
encapsulation dot1q 444
bridge-domain 1

segment-routing mpls
set-attributes
address-family ipv4
sr-label-preferred
exit-address-family

global-block 40000 45000

connected-prefix-sid-map
address-family ipv4
5.5.5.5/32 index 100 range 1
exit-address-family


router isis 1
net 49.0000.5555.5555.5555.00
is-type level-2-only
metric-style wide
segment-routing mpls

router bgp 65200
bgp log-neighbor-changes
neighbor 6.6.6.6 remote-as 65200
neighbor 6.6.6.6 update-source Loopback0

address-family ipv4
neighbor 6.6.6.6 activate
exit-address-family

address-family l2vpn vpls
neighbor 6.6.6.6 activate
neighbor 6.6.6.6 send-community extended
neighbor 6.6.6.6 next-hop-self

hostname p1
  
interface Loopback0
ip address 6.6.6.6 255.255.255.255
ip router isis 1

interface GigabitEthernet1
ip address 1.1.1.2 255.255.255.252
ip router isis 1
negotiation auto
no mpls ldp igp autoconfig
no mop enabled
no mop sysid
isis circuit-type level-2-only
isis network point-to-point

interface GigabitEthernet2
ip address 2.2.2.1 255.255.255.252
ip router isis 1
negotiation auto
no mpls ldp igp autoconfig
no mop enabled
no mop sysid
isis circuit-type level-2-only
isis network point-to-point
  
segment-routing mpls
set-attributes
address-family ipv4
sr-label-preferred
exit-address-family

global-block 40000 45000

connected-prefix-sid-map
address-family ipv4
6.6.6.6/32 index 200 range 1
exit-address-family


router isis 1
net 49.0000.6666.6666.6666.00
is-type level-2-only
metric-style wide
segment-routing mpls

router bgp 65200
bgp log-neighbor-changes
neighbor 5.5.5.5 remote-as 65200
neighbor 5.5.5.5 update-source Loopback0
neighbor 7.7.7.7 remote-as 65200
neighbor 7.7.7.7 update-source Loopback0

address-family ipv4
neighbor 5.5.5.5 activate
neighbor 7.7.7.7 activate
exit-address-family

address-family l2vpn vpls
neighbor 5.5.5.5 activate
neighbor 5.5.5.5 send-community extended
neighbor 5.5.5.5 route-reflector-client
neighbor 7.7.7.7 activate
neighbor 7.7.7.7 send-community extended
neighbor 7.7.7.7 route-reflector-client

PE2

hostname pe2

l2 vfi VPLS autodiscovery
vpn id 444
bridge-domain 1
rd 7.7.7.7:444
route-target export 65200:444
route-target import 65200:444
  
interface Loopback0
ip address 7.7.7.7 255.255.255.255
ip router isis 1

interface GigabitEthernet1
ip address 2.2.2.2 255.255.255.252
ip router isis 1
negotiation auto
no mpls ldp igp autoconfig
no mop enabled
no mop sysid
isis circuit-type level-2-only
isis network point-to-point

interface GigabitEthernet2
no ip address
negotiation auto
no mop enabled
no mop sysid
service instance 1 ethernet
encapsulation dot1q 444
bridge-domain 1
  
segment-routing mpls
set-attributes
address-family ipv4
sr-label-preferred
exit-address-family

global-block 40000 45000

connected-prefix-sid-map
address-family ipv4
7.7.7.7/32 index 300 range 1
exit-address-family

router isis 1
net 49.0000.7777.7777.7777.00
is-type level-2-only
metric-style wide
segment-routing mpls

router bgp 65200
bgp log-neighbor-changes
neighbor 6.6.6.6 remote-as 65200
neighbor 6.6.6.6 update-source Loopback0
  
address-family ipv4
neighbor 6.6.6.6 activate
exit-address-family

address-family l2vpn vpls
neighbor 6.6.6.6 activate
neighbor 6.6.6.6 send-community extended
neighbor 6.6.6.6 next-hop-self

EIGRP is now up between the 2 CE devices confirming VPLS is up and running