Juniper vMX – Inter-AS BGP L2VPN Option B

Slight difference to Option A topology. Still running Segment Routing in AS65200 but AS65400 is now running RSVP. Great article linked below from Chris Parker who explains Option B in more detail (click on Network Fun Times link). OSPF configured on the 2 Cisco CE devices.

Network Fun Times Inter-AS Option B

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 vlan-tagging
set interfaces ge-0/0/0 encapsulation flexible-ethernet-services
set interfaces ge-0/0/0 unit 123 encapsulation vlan-ccc
set interfaces ge-0/0/0 unit 123 vlan-id 123
set interfaces ge-0/0/2 unit 0 family inet address 1.1.1.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.5555.5555.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65200
set protocols mpls interface ge-0/0/2.0
set protocols mpls interface lo0.0
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 5.5.5.5
set protocols bgp group INTERNAL family l2vpn signaling
set protocols bgp group INTERNAL export NHS
set protocols bgp group INTERNAL neighbor 6.6.6.6
set protocols isis source-packet-routing srgb start-label 33000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 20
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set policy-options policy-statement NHS term 1 from protocol bgp
set policy-options policy-statement NHS term 1 then next-hop self
set routing-instances L2VPN instance-type l2vpn
set routing-instances L2VPN interface ge-0/0/0.123
set routing-instances L2VPN route-distinguisher 5.5.5.5:123
set routing-instances L2VPN vrf-target target:65200:123
set routing-instances L2VPN protocols l2vpn encapsulation-type ethernet-vlan
set routing-instances L2VPN protocols l2vpn site L2VPN site-identifier 1
set routing-instances L2VPN protocols l2vpn site L2VPN interface ge-0/0/0.123

P1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 2.2.2.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.6666.6666.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65200
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 6.6.6.6
set protocols bgp group INTERNAL family l2vpn signaling
set protocols bgp group INTERNAL export NHS
set protocols bgp group INTERNAL cluster 6.6.6.6
set protocols bgp group INTERNAL neighbor 5.5.5.5
set protocols bgp group INTERNAL neighbor 33.33.33.33
set protocols isis source-packet-routing srgb start-label 33000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 25
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface lo0.0 passive
set policy-options policy-statement NHS term 1 from protocol bgp
set policy-options policy-statement NHS term 1 then next-hop self

ASBR1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 2.2.2.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 10.33.33.1/30
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 33.33.33.33/32
set interfaces lo0 unit 0 family iso address 49.0000.3333.3333.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 33.33.33.33
set routing-options autonomous-system 65200
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface lo0.0
set protocols mpls interface ge-0/0/1.0
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 33.33.33.33
set protocols bgp group INTERNAL family l2vpn signaling
set protocols bgp group INTERNAL export NHS
set protocols bgp group INTERNAL neighbor 6.6.6.6
set protocols bgp group AS65400 type external
set protocols bgp group AS65400 family l2vpn signaling
set protocols bgp group AS65400 peer-as 65400
set protocols bgp group AS65400 neighbor 10.33.33.2
set protocols isis source-packet-routing srgb start-label 33000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 30
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface lo0.0 passive
set policy-options policy-statement NHS term 1 from protocol bgp
set policy-options policy-statement NHS term 1 then next-hop self

ASBR2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 10.33.33.2/30
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.7777.7777.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set routing-options resolution
set protocols rsvp interface ge-0/0/1.0
set protocols rsvp interface lo0.0
set protocols mpls label-switched-path PE2 to 8.8.8.8
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols mpls interface ge-0/0/0.0
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 7.7.7.7
set protocols bgp group INTERNAL family l2vpn signaling
set protocols bgp group INTERNAL export NHS
set protocols bgp group INTERNAL neighbor 9.9.9.9
set protocols bgp group AS65200 type external
set protocols bgp group AS65200 family l2vpn signaling
set protocols bgp group AS65200 peer-as 65200
set protocols bgp group AS65200 neighbor 10.33.33.1
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface lo0.0 passive
set policy-options policy-statement NHS term 1 from protocol bgp
set policy-options policy-statement NHS term 1 then next-hop self

P2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 4.4.4.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 5.5.5.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces fxp0 unit 0 family inet dhcp vendor-id Juniper-vmx-VM67309BAAF3
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.9999.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set routing-options resolution rib bgp.l2vpn.0 resolution-ribs inet.0
set protocols rsvp interface ge-0/0/0.0
set protocols rsvp interface ge-0/0/1.0
set protocols rsvp interface lo0.0
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 9.9.9.9
set protocols bgp group INTERNAL family l2vpn signaling
set protocols bgp group INTERNAL cluster 9.9.9.9
set protocols bgp group INTERNAL neighbor 7.7.7.7
set protocols bgp group INTERNAL neighbor 8.8.8.8
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface lo0.0 passive

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 5.5.5.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 vlan-tagging
set interfaces ge-0/0/1 encapsulation flexible-ethernet-services
set interfaces ge-0/0/1 unit 123 encapsulation vlan-ccc
set interfaces ge-0/0/1 unit 123 vlan-id 123
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.8888.8888.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols rsvp interface ge-0/0/0.0
set protocols rsvp interface lo0.0
set protocols mpls label-switched-path ASBR2 to 7.7.7.7
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface lo0.0
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 8.8.8.8
set protocols bgp group INTERNAL family l2vpn signaling
set protocols bgp group INTERNAL export NHS
set protocols bgp group INTERNAL neighbor 9.9.9.9
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface lo0.0 passive
set policy-options policy-statement NHS term 1 from protocol bgp
set policy-options policy-statement NHS term 1 then next-hop self
set routing-instances L2VPN instance-type l2vpn
set routing-instances L2VPN interface ge-0/0/1.123
set routing-instances L2VPN route-distinguisher 8.8.8.8:123
set routing-instances L2VPN vrf-target target:65200:123
set routing-instances L2VPN protocols l2vpn encapsulation-type ethernet-vlan
set routing-instances L2VPN protocols l2vpn site L2VPN site-identifier 2
set routing-instances L2VPN protocols l2vpn site L2VPN interface ge-0/0/1.123

OSPF is now up on the 2 Cisco CE devices, confirming the layer 2 VPN is established.

Leave a Reply

Your email address will not be published. Required fields are marked *