Category: EVPN

Juniper – PBB (Provider Backbone Bridging) EVPN

nick Leave a comment

A smaller lab and something a bit different. vjunos-router is used along with 2 Cisco CE devices. Segment Routing is used for MPLS signalling but you could use LDP or RSVP if you prefer.

Provider Backbone Bridging (PBB) expands Layer 2 Ethernet switching to support better scalability, improved quality of service (QoS), and carrier-grade reliability. When PBB is combined with EVPN, the network no longer shares customer MAC (C-MAC) addresses in the control plane. Instead, it distributes backbone MAC (B-MAC) addresses across the EVPN core. This reduces control-plane complexity and makes it easier for the network to carry a very large number of Layer 2 services, such as data center connectivity. The below link explains PBB in more detail.

https://www.juniper.net/documentation/us/en/software/junos/evpn/topics/concept/pbb-evpn-integration-for-dci-overview.html#provider-backbone-bridging-pbb-and-evpn-integration-overview__d18675e1029

eve-ng_export-20260207-105608Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 encapsulation ethernet-bridge
set interfaces ge-0/0/0 unit 0 family bridge
set interfaces ge-0/0/1 flexible-vlan-tagging
set interfaces ge-0/0/1 encapsulation flexible-ethernet-services
set interfaces ge-0/0/1 unit 0 encapsulation vlan-bridge
set interfaces ge-0/0/1 unit 0 vlan-id 3636
set interfaces cbp0 unit 0 family bridge interface-mode trunk
set interfaces cbp0 unit 0 family bridge bridge-domain-type bvlan
set interfaces cbp0 unit 0 family bridge isid-list all
set interfaces irb unit 0 family inet address 1.1.1.1/30
set interfaces irb unit 0 family iso
set interfaces irb unit 0 family mpls
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces pip0 unit 0 family bridge interface-mode trunk
set interfaces pip0 unit 0 family bridge bridge-domain-type svlan
set interfaces pip0 unit 0 family bridge isid-list all-service-groups
set routing-instances CUST1_PBB instance-type virtual-switch
set routing-instances CUST1_PBB protocols evpn extended-isid-list 103636
set routing-instances CUST1_PBB protocols evpn pbb-evpn-core
set routing-instances CUST1_PBB bridge-domains CUST1 vlan-id 3636
set routing-instances CUST1_PBB bridge-domains CUST1 isid-list 103636
set routing-instances CUST1_PBB bridge-domains CUST1 vlan-id-scope-local
set routing-instances CUST1_PBB interface cbp0.0
set routing-instances CUST1_PBB route-distinguisher 5.5.5.5:100
set routing-instances CUST1_PBB vrf-target target:65400:100
set routing-instances PBB instance-type virtual-switch
set routing-instances PBB bridge-domains EVPN domain-type bridge
set routing-instances PBB bridge-domains EVPN vlan-id 3636
set routing-instances PBB bridge-domains EVPN interface ge-0/0/1.0
set routing-instances PBB pbb-options peer-instance CUST1_PBB
set routing-instances PBB service-groups GROUP_A service-type elan
set routing-instances PBB service-groups GROUP_A pbb-service-options isid 103636 vlan-id-list 3636
set routing-instances PBB service-groups GROUP_A pbb-service-options source-bmac 00:50:50:50:50:50
set routing-instances PBB interface pip0.0
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group ibgp type internal
set protocols bgp group ibgp local-address 5.5.5.5
set protocols bgp group ibgp family evpn signaling
set protocols bgp group ibgp neighbor 6.6.6.6
set protocols isis interface irb.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 800000
set protocols isis source-packet-routing srgb index-range 9000
set protocols isis source-packet-routing node-segment ipv4-index 500
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface irb.0
set bridge-domains PBB vlan-id none
set bridge-domains PBB interface ge-0/0/0.0
set bridge-domains PBB routing-interface irb.0

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 encapsulation ethernet-bridge
set interfaces ge-0/0/0 unit 0 family bridge
set interfaces ge-0/0/1 flexible-vlan-tagging
set interfaces ge-0/0/1 encapsulation flexible-ethernet-services
set interfaces ge-0/0/1 unit 0 encapsulation vlan-bridge
set interfaces ge-0/0/1 unit 0 vlan-id 3636
set interfaces cbp0 unit 0 family bridge interface-mode trunk
set interfaces cbp0 unit 0 family bridge bridge-domain-type bvlan
set interfaces cbp0 unit 0 family bridge isid-list all
set interfaces irb unit 0 family inet address 1.1.1.2/30
set interfaces irb unit 0 family iso
set interfaces irb unit 0 family mpls
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces pip0 unit 0 family bridge interface-mode trunk
set interfaces pip0 unit 0 family bridge bridge-domain-type svlan
set interfaces pip0 unit 0 family bridge isid-list all-service-groups
set routing-instances CUST1_PBB instance-type virtual-switch
set routing-instances CUST1_PBB protocols evpn extended-isid-list 103636
set routing-instances CUST1_PBB protocols evpn pbb-evpn-core
set routing-instances CUST1_PBB bridge-domains CUST1 vlan-id 3636
set routing-instances CUST1_PBB bridge-domains CUST1 isid-list 103636
set routing-instances CUST1_PBB bridge-domains CUST1 vlan-id-scope-local
set routing-instances CUST1_PBB interface cbp0.0
set routing-instances CUST1_PBB route-distinguisher 6.6.6.6:100
set routing-instances CUST1_PBB vrf-target target:65400:100
set routing-instances PBB instance-type virtual-switch
set routing-instances PBB bridge-domains EVPN domain-type bridge
set routing-instances PBB bridge-domains EVPN vlan-id 3636
set routing-instances PBB bridge-domains EVPN interface ge-0/0/1.0
set routing-instances PBB pbb-options peer-instance CUST1_PBB
set routing-instances PBB service-groups GROUP_A service-type elan
set routing-instances PBB service-groups GROUP_A pbb-service-options isid 103636 vlan-id-list 3636
set routing-instances PBB service-groups GROUP_A pbb-service-options source-bmac 00:51:52:50:50:50
set routing-instances PBB interface pip0.0
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols bgp group ibgp type internal
set protocols bgp group ibgp local-address 6.6.6.6
set protocols bgp group ibgp family evpn signaling
set protocols bgp group ibgp neighbor 5.5.5.5
set protocols isis interface irb.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 800000
set protocols isis source-packet-routing srgb index-range 9000
set protocols isis source-packet-routing node-segment ipv4-index 600
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface irb.0
set bridge-domains PBB vlan-id none
set bridge-domains PBB interface ge-0/0/0.0
set bridge-domains PBB routing-interface irb.0

OSPF has been configured on the 2 Cisco devices to confirm the end to end connectivity.

Juniper – SRv6 EVPN VPWS

nick Leave a comment

Yes it’s another EVPN VPWS lab but this time it’s with SRv6 so no MPLS involved. A couple of vjunos-router devices are running SRv6 and as usual, 2 Cisco devices are CEs.

https://www.juniper.net/documentation/us/en/software/junos/evpn/topics/concept/configuring-vpws-srv6.html

eve-ng_export-20260125-185511Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family inet6 address fd2c:8b41:3e9a:1c4d::1/64
set interfaces ge-0/0/1 vlan-tagging
set interfaces ge-0/0/1 encapsulation flexible-ethernet-services
set interfaces ge-0/0/1 unit 12 encapsulation vlan-ccc
set interfaces ge-0/0/1 unit 12 vlan-id 12
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family inet6 address fd7e:9c21:ab04:77d1:8a2f:3c91:5e44:1baf/128
set policy-options policy-statement NHS then next-hop self
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id local 12
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id remote 21
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator LOC1
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator end-dx2-sid 4002:ac8:a1:2:101::
set routing-instances EVPN protocols evpn encapsulation srv6
set routing-instances EVPN interface ge-0/0/1.12
set routing-instances EVPN route-distinguisher 5.5.5.5:12
set routing-instances EVPN vrf-target target:65400:12
set routing-options source-packet-routing srv6 locator LOC1 4002:ac8:a1:2::/64
set routing-options resolution preserve-nexthop-hierarchy
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set routing-options ipv6-router-id fd00::1
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address fd7e:9c21:ab04:77d1:8a2f:3c91:5e44:1baf
set protocols bgp group EVPN family evpn signaling advertise-srv6-service
set protocols bgp group EVPN family evpn signaling accept-srv6-service
set protocols bgp group EVPN export NHS
set protocols bgp group EVPN neighbor fdc1:55aa:9e02:4b90:dead:beef:cafe:1234
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srv6 locator LOC1
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family inet6 address fd2c:8b41:3e9a:1c4d::10/64
set interfaces ge-0/0/1 vlan-tagging
set interfaces ge-0/0/1 encapsulation flexible-ethernet-services
set interfaces ge-0/0/1 unit 12 encapsulation vlan-ccc
set interfaces ge-0/0/1 unit 12 vlan-id 12
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family inet6 address fdc1:55aa:9e02:4b90:dead:beef:cafe:1234/128
set policy-options policy-statement NHS then next-hop self
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id local 21
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id remote 12
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator LOC1
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator end-dx2-sid 4002:ac8:a1:3:101::
set routing-instances EVPN protocols evpn encapsulation srv6
set routing-instances EVPN interface ge-0/0/1.12
set routing-instances EVPN route-distinguisher 6.6.6.6:12
set routing-instances EVPN vrf-target target:65400:12
set routing-options source-packet-routing srv6 locator LOC1 4002:ac8:a1:3::/64
set routing-options resolution preserve-nexthop-hierarchy
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set routing-options ipv6-router-id fd00::2
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address fdc1:55aa:9e02:4b90:dead:beef:cafe:1234
set protocols bgp group EVPN family evpn signaling advertise-srv6-service
set protocols bgp group EVPN family evpn signaling accept-srv6-service
set protocols bgp group EVPN export NHS
set protocols bgp group EVPN neighbor fd7e:9c21:ab04:77d1:8a2f:3c91:5e44:1baf
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srv6 locator LOC1
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only

OSPFv3 has been configured on the Cisco devices

Juniper – OSPF Unnumbered Ethernet Interfaces

nick Leave a comment

We have already done a lab with IS-IS and Unnumbered Interfaces so with this lab we will do the same but with OSPF instead of IS-IS.

The lab is EVPN E-Tree on Junos Evolved. New York is the Head Office (root) and the other sites are satellites (leaves).

https://www.juniper.net/documentation/us/en/software/junos/evpn/topics/concept/evpn-etree-overview.html

eve-ng_export-20260101-213552Download

PE1

set system host-name pe1
set interfaces et-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/2 unit 0 family mpls
set interfaces et-0/0/3 flexible-vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 202 encapsulation vlan-bridge
set interfaces et-0/0/3 unit 202 vlan-id 202
set interfaces et-0/0/3 unit 202 etree-ac-role root
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances NEWYORK instance-type mac-vrf
set routing-instances NEWYORK protocols evpn evpn-etree
set routing-instances NEWYORK service-type vlan-aware
set routing-instances NEWYORK interface et-0/0/3.202
set routing-instances NEWYORK route-distinguisher 5.5.5.5:202
set routing-instances NEWYORK vrf-target target:65400:202
set routing-instances NEWYORK vlans NY202 vlan-id 202
set routing-instances NEWYORK vlans NY202 interface et-0/0/3.202
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 5.5.5.5
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols ospf source-packet-routing node-segment ipv4-index 600
set protocols ospf source-packet-routing srgb start-label 70000
set protocols ospf source-packet-routing srgb index-range 1000
set protocols ospf area 0.0.0.0 interface et-0/0/1.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/0.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/2.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface lo0.0 passive

PE2

set system host-name pe2
set interfaces et-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/2 unit 0 family mpls
set interfaces et-0/0/3 flexible-vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 202 encapsulation vlan-bridge
set interfaces et-0/0/3 unit 202 vlan-id 202
set interfaces et-0/0/3 unit 202 etree-ac-role leaf
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances NEWYORK instance-type mac-vrf
set routing-instances NEWYORK protocols evpn evpn-etree
set routing-instances NEWYORK service-type vlan-aware
set routing-instances NEWYORK interface et-0/0/3.202
set routing-instances NEWYORK route-distinguisher 6.6.6.6:202
set routing-instances NEWYORK vrf-target target:65400:202
set routing-instances NEWYORK vlans NY202 vlan-id 202
set routing-instances NEWYORK vlans NY202 interface et-0/0/3.202
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 6.6.6.6
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols ospf source-packet-routing node-segment ipv4-index 601
set protocols ospf source-packet-routing srgb start-label 70000
set protocols ospf source-packet-routing srgb index-range 1000
set protocols ospf area 0.0.0.0 interface et-0/0/1.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/0.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/2.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface lo0.0 passive

PE3

set system host-name pe3
set interfaces et-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family inet6
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family inet6
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/2 unit 0 family inet6
set interfaces et-0/0/2 unit 0 family mpls
set interfaces et-0/0/3 flexible-vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 202 encapsulation vlan-bridge
set interfaces et-0/0/3 unit 202 vlan-id 202
set interfaces et-0/0/3 unit 202 etree-ac-role leaf
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances NEWYORK instance-type mac-vrf
set routing-instances NEWYORK protocols evpn evpn-etree
set routing-instances NEWYORK service-type vlan-aware
set routing-instances NEWYORK interface et-0/0/3.202
set routing-instances NEWYORK route-distinguisher 7.7.7.7:202
set routing-instances NEWYORK vrf-target target:65400:202
set routing-instances NEWYORK vlans NY202 vlan-id 202
set routing-instances NEWYORK vlans NY202 interface et-0/0/3.202
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 7.7.7.7
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols ospf source-packet-routing node-segment ipv4-index 602
set protocols ospf source-packet-routing srgb start-label 70000
set protocols ospf source-packet-routing srgb index-range 1000
set protocols ospf area 0.0.0.0 interface et-0/0/1.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/0.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/2.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface lo0.0 passive

PE4

set system host-name pe4
set interfaces et-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/2 unit 0 family mpls
set interfaces et-0/0/3 flexible-vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 202 encapsulation vlan-bridge
set interfaces et-0/0/3 unit 202 vlan-id 202
set interfaces et-0/0/3 unit 202 etree-ac-role leaf
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances NEWYORK instance-type mac-vrf
set routing-instances NEWYORK protocols evpn evpn-etree
set routing-instances NEWYORK service-type vlan-aware
set routing-instances NEWYORK interface et-0/0/3.202
set routing-instances NEWYORK route-distinguisher 8.8.8.8:202
set routing-instances NEWYORK vrf-target target:65400:202
set routing-instances NEWYORK vlans NY202 vlan-id 202
set routing-instances NEWYORK vlans NY202 interface et-0/0/3.202
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 8.8.8.8
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols ospf source-packet-routing node-segment ipv4-index 603
set protocols ospf source-packet-routing srgb start-label 70000
set protocols ospf source-packet-routing srgb index-range 1000
set protocols ospf area 0.0.0.0 interface et-0/0/0.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/1.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/2.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface lo0.0 passive

RR

set system host-name rr
set interfaces et-0/0/0 unit 0 family inet
set interfaces et-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/2 unit 0 family mpls
set interfaces et-0/0/3 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/3 unit 0 family iso
set interfaces et-0/0/3 unit 0 family mpls
set interfaces et-0/0/4 unit 0 family inet unnumbered-address lo0.0
set interfaces et-0/0/4 unit 0 family iso
set interfaces et-0/0/4 unit 0 family mpls
set interfaces et-0/0/6 unit 0 family inet
set interfaces et-0/0/8 unit 0 family inet
set interfaces et-0/0/9 unit 0 family inet
set interfaces et-0/0/10 unit 0 family inet
set interfaces et-0/0/11 unit 0 family inet
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 9.9.9.9
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN cluster 9.9.9.9
set protocols bgp group EVPN neighbor 5.5.5.5
set protocols bgp group EVPN neighbor 7.7.7.7
set protocols bgp group EVPN neighbor 6.6.6.6
set protocols bgp group EVPN neighbor 8.8.8.8
set protocols ospf area 0.0.0.0 interface et-0/0/1.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/2.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/3.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface et-0/0/4.0 interface-type p2p

OSPF has been configured on all the CE devices and New York will have 3 neighbours. The other sites will only be neighbours with New York.

Arista – VXLAN/EVPN BGP Unnumbered

nick Leave a comment

Another Arista VXLAN/EVPN lab but for this we will use eBGP Unnumbered for the underlay rather than OSPF. BGP Unnumbered uses IPv6 link local addresses for IPv4 next hops and is detailed in RFC5549.

https://datatracker.ietf.org/doc/html/rfc5549

eve-ng_export-20251228-192314Download

Spine1

hostname spine1
    
interface Ethernet1
no switchport
ipv6 enable
    
interface Ethernet2
no switchport
ipv6 enable

interface Ethernet3
no switchport
ipv6 enable

interface Loopback0
ip address 5.5.5.5/32

ip routing

ipv6 unicast-routing

router bgp 65400
router-id 5.5.5.5
no bgp default ipv4-unicast
neighbor LEAF peer group
neighbor LEAF local-as 65401 no-prepend replace-as
neighbor LEAF_OL peer group
neighbor LEAF_OL remote-as 65400
neighbor LEAF_OL update-source Loopback0
neighbor LEAF_OL route-reflector-client
neighbor LEAF_OL send-community extended
neighbor 7.7.7.7 peer group LEAF_OL
neighbor 8.8.8.8 peer group LEAF_OL
neighbor 9.9.9.9 peer group LEAF_OL
redistribute connected
neighbor interface Et1 peer-group LEAF remote-as 65403
neighbor interface Et2 peer-group LEAF remote-as 65404
neighbor interface Et3 peer-group LEAF remote-as 65405

address-family evpn
neighbor LEAF_OL activate

address-family ipv4
neighbor LEAF activate
neighbor LEAF next-hop address-family ipv6 originate

Spine2

hostname spine2

interface Ethernet1
switchport
ipv6 enable

interface Ethernet2
no switchport
ipv6 enable

interface Ethernet3
no switchport
ipv6 enable

interface Loopback0
ip address 6.6.6.6/32

ip routing

ipv6 unicast-routing
  
router bgp 65400
router-id 6.6.6.6
no bgp default ipv4-unicast
neighbor LEAF peer group
neighbor LEAF local-as 65402 no-prepend replace-as
neighbor LEAF_OL peer group
neighbor LEAF_OL remote-as 65400
neighbor LEAF_OL update-source Loopback0
neighbor LEAF_OL route-reflector-client
neighbor LEAF_OL send-community extended
neighbor 7.7.7.7 peer group LEAF_OL
neighbor 8.8.8.8 peer group LEAF_OL
neighbor 9.9.9.9 peer group LEAF_OL
redistribute connected
neighbor interface Et1 peer-group LEAF remote-as 65403
neighbor interface Et2 peer-group LEAF remote-as 65404
neighbor interface Et3 peer-group LEAF remote-as 65405

address-family evpn
neighbor LEAF_OL activate

address-family ipv4
neighbor LEAF activate
neighbor LEAF next-hop address-family ipv6 originate

Leaf1

hostname leaf1

vlan 1234
  
interface Ethernet1
no switchport
ipv6 enable
  
interface Ethernet2
no switchport
ipv6 enable
  
interface Ethernet3
switchport access vlan 1234
 
interface Loopback0
ip address 7.7.7.7/32

interface Vxlan1
vxlan source-interface Loopback0
vxlan udp-port 4789
vxlan vlan 1234 vni 1234
    
ip routing
    
ipv6 unicast-routing

router bgp 65400
router-id 7.7.7.7
no bgp default ipv4-unicast
neighbor SPINE peer group
neighbor SPINE local-as 65403 no-prepend replace-as
neighbor 5.5.5.5 remote-as 65400
neighbor 5.5.5.5 update-source Loopback0
neighbor 5.5.5.5 send-community extended
neighbor 6.6.6.6 remote-as 65400
neighbor 6.6.6.6 update-source Loopback0
neighbor 6.6.6.6 send-community extended
redistribute connected
neighbor interface Et1 peer-group SPINE remote-as 65401
neighbor interface Et2 peer-group SPINE remote-as 65402
!
vlan 1234
rd 8.8.8.8:1234
route-target both 65400:1234
redistribute learned
!
address-family evpn
neighbor 5.5.5.5 activate
neighbor 6.6.6.6 activate
!
address-family ipv4
neighbor SPINE activate
neighbor SPINE next-hop address-family ipv6 originate
no neighbor 5.5.5.5 activate
no neighbor 6.6.6.6 activate

Leaf2

hostname leaf2

vlan 1234,2468

interface Ethernet1
no switchport
ipv6 enable

interface Ethernet2
no switchport
ipv6 enable

interface Ethernet3
switchport access vlan 1234

interface Ethernet4
switchport access vlan 2468

interface Loopback0
ip address 8.8.8.8/32
 
interface Vxlan1
vxlan source-interface Loopback0
vxlan udp-port 4789
vxlan vlan 1234 vni 1234
vxlan vlan 2468 vni 2468

ip routing

ipv6 unicast-routing

router bgp 65400
router-id 8.8.8.8
no bgp default ipv4-unicast
neighbor SPINE peer group
neighbor SPINE local-as 65404 no-prepend replace-as
neighbor 5.5.5.5 remote-as 65400
neighbor 5.5.5.5 update-source Loopback0
neighbor 5.5.5.5 send-community extended
neighbor 6.6.6.6 remote-as 65400
neighbor 6.6.6.6 update-source Loopback0
neighbor 6.6.6.6 send-community extended
redistribute connected
neighbor interface Et1 peer-group SPINE remote-as 65401
neighbor interface Et2 peer-group SPINE remote-as 65402
    
vlan 1234
rd 8.8.8.8:1234
route-target both 65400:1234
redistribute learned

vlan 2468
rd 8.8.8.8:2468
route-target both 65400:2468
redistribute learned

address-family evpn
neighbor 5.5.5.5 activate
neighbor 6.6.6.6 activate

address-family ipv4
neighbor SPINE activate
neighbor SPINE next-hop address-family ipv6 originate
no neighbor 5.5.5.5 activate
no neighbor 6.6.6.6 activate

Leaf3

hostname leaf3

vlan 2468

interface Ethernet1
no switchport
ipv6 enable

interface Ethernet2
no switchport
ipv6 enable

interface Ethernet4
switchport access vlan 2468
  
interface Loopback0
ip address 9.9.9.9/32

interface Vxlan1
vxlan source-interface Loopback0
vxlan udp-port 4789
vxlan vlan 2468 vni 2468

ip routing

ipv6 unicast-routing
    
router bgp 65400
router-id 9.9.9.9
no bgp default ipv4-unicast
neighbor SPINE peer group
neighbor SPINE local-as 65405 no-prepend replace-as
neighbor 5.5.5.5 remote-as 65400
neighbor 5.5.5.5 update-source Loopback0
neighbor 5.5.5.5 send-community extended
neighbor 6.6.6.6 remote-as 65400
neighbor 6.6.6.6 update-source Loopback0
neighbor 6.6.6.6 send-community extended
redistribute connected
neighbor interface Et1 peer-group SPINE remote-as 65401
neighbor interface Et2 peer-group SPINE remote-as 65402

vlan 2468
rd 8.8.8.8:2468
route-target both 65400:2468
redistribute learned

address-family evpn
neighbor 5.5.5.5 activate
neighbor 6.6.6.6 activate

address-family ipv4
neighbor SPINE activate
neighbor SPINE next-hop address-family ipv6 originate
no neighbor 5.5.5.5 activate
no neighbor 6.6.6.6 activate

VPCs 6 & 8 have been configured with IP addresses in the range 10.1.1.0/24 & VPCs 7 & 9 have addresses with the range 10.2.2.0/24. Both are able to ping their relevant counterpart in the same subnet. Also, BGP shows the relevant routes/MAC addresses have been learnt.

Juniper – IS-IS Unnumbered Ethernet Interfaces

nick Leave a comment

It’s been a while since a new lab was posted so let’s get back to it.

This lab is Segment Routing EVPN VPWS with IS-IS as the IGP but with a slight twist. None of the physical interfaces have an IP address and they borrow their IP from the Loopback. The below article explains the concept in more detail.

IS-IS and Unnumbered Ethernet Interfaces in Junos

eve-ng_export-20251220-143756Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 67 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 67 vlan-id 67
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface ge-0/0/3.67 vpws-service-id local 67
set routing-instances EVPN protocols evpn interface ge-0/0/3.67 vpws-service-id remote 76
set routing-instances EVPN interface ge-0/0/3.67
set routing-instances EVPN route-distinguisher 5.5.5.5:67
set routing-instances EVPN vrf-target target:65400:67
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 5.5.5.5
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 50
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface ge-0/0/2.0
set protocols mpls interface lo0.0

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 60
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface ge-0/0/2.0
set protocols mpls interface lo0.0

PE3

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 67 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 67 vlan-id 67
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface ge-0/0/3.67 vpws-service-id local 76
set routing-instances EVPN protocols evpn interface ge-0/0/3.67 vpws-service-id remote 67
set routing-instances EVPN interface ge-0/0/3.67
set routing-instances EVPN route-distinguisher 7.7.7.7:67
set routing-instances EVPN vrf-target target:65400:67
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 7.7.7.7
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 70
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

PE4

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 80
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

RR

set chassis network-services enhanced-ip
set interfaces ge-0/0/1 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/3 unit 0 family iso
set interfaces ge-0/0/4 unit 0 family inet unnumbered-address lo0.0
set interfaces ge-0/0/4 unit 0 family iso
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 9.9.9.9
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN cluster 9.9.9.9
set protocols bgp group EVPN neighbor 5.5.5.5
set protocols bgp group EVPN neighbor 7.7.7.7
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface ge-0/0/3.0 point-to-point
set protocols isis interface ge-0/0/4.0 point-to-point
set protocols isis interface lo0.0
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only

As usual, 2 Cisco devices have been used as CEs with OSPF configured on both.

Confirmation of VPWS instance.

Juniper – RSVP EVPN/VPWS

nick 2 Comments

Junos Evolved is used for this lab. Commands are pretty much identical to standard Junos.

LSPs have been created between PE1 & PE3. The PE1 LSP goes through PE4 & the PE3 LSP through PE2. IS-IS is the IGP and an out of data path Route Reflector is used to reflect the relevant routes.

https://community.juniper.net/blogs/suneesh-babu/2022/11/05/evpn-vpws-validation-on-acx7000

_Exports_eve-ng_export-20250104-111343Download

PE1

set interfaces et-0/0/0 unit 0 family inet address 1.1.1.1/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 4.4.4.2/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.2.2.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/3 vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 3232 encapsulation vlan-ccc
set interfaces et-0/0/3 unit 3232 vlan-id 3232
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id local 32
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id remote 33
set routing-instances EVPN interface et-0/0/3.3232
set routing-instances EVPN route-distinguisher 5.5.5.5:3232
set routing-instances EVPN vrf-target target:65400:3232
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 5.5.5.5
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls label-switched-path PE3 to 7.7.7.7
set protocols mpls label-switched-path PE3 primary PE3
set protocols mpls path PE3 8.8.8.8 strict
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

PE2

set interfaces et-0/0/0 unit 0 family inet address 1.1.1.2/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 2.2.2.1/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.3.3.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

PE3

set interfaces et-0/0/0 unit 0 family inet address 2.2.2.2/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 3.3.3.1/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.4.4.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/3 vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 3232 encapsulation vlan-ccc
set interfaces et-0/0/3 unit 3232 vlan-id 3232
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id local 33
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id remote 32
set routing-instances EVPN interface et-0/0/3.3232
set routing-instances EVPN route-distinguisher 7.7.7.7:3232
set routing-instances EVPN vrf-target target:65400:3232
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 7.7.7.7
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls label-switched-path PE1 to 5.5.5.5
set protocols mpls label-switched-path PE1 primary PE1
set protocols mpls path PE1 6.6.6.6 strict
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

PE4

set interfaces et-0/0/0 unit 0 family inet address 3.3.3.2/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 4.4.4.1/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.5.5.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

RR

set interfaces et-0/0/1 unit 0 family inet address 1.2.2.2/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/2 unit 0 family inet address 1.3.3.2/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/3 unit 0 family inet address 1.4.4.2/30
set interfaces et-0/0/3 unit 0 family iso
set interfaces et-0/0/4 unit 0 family inet address 1.5.5.2/30
set interfaces et-0/0/4 unit 0 family iso
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 9.9.9.9
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN cluster 9.9.9.9
set protocols bgp group EVPN neighbor 5.5.5.5
set protocols bgp group EVPN neighbor 7.7.7.7
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface et-0/0/3.0 point-to-point
set protocols isis interface et-0/0/4.0 point-to-point
set protocols isis interface lo0.0 passive

The VPWS instance will now be up.

OSPF configured on the 2 CE devices confirming the layer 2 circuit.

Juniper – Segment Routing Traffic Engineering

nick Leave a comment

Again we will use vjunos router for this lab. Aim of the lab is to direct traffic for the VPWS circuit over a certain path. Traffic from PE1 will go via PE4 and traffic from PE3 will go via PE2.

IS-IS is used as the IGP (could use OSPF if preferred) and an out of path route reflector reflects routes to the PE devices.

https://www.juniper.net/documentation/us/en/software/junos/mpls/topics/topic-map/segment-routing-lsp-configuration.html

_Exports_eve-ng_export-20241229-175412Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.1/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.2/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.2.2.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances VPWS instance-type evpn-vpws
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id local 545
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id remote 546
set routing-instances VPWS interface ge-0/0/3.545
set routing-instances VPWS route-distinguisher 5.5.5.5:545
set routing-instances VPWS vrf-target target:65400:545
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group VPWS type internal
set protocols bgp group VPWS local-address 5.5.5.5
set protocols bgp group VPWS family evpn signaling
set protocols bgp group VPWS neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 50
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis traffic-engineering l3-unicast-topology
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols source-packet-routing segment-list PE3 hop1 label 80080
set protocols source-packet-routing source-routing-path PE3 to 7.7.7.7
set protocols source-packet-routing source-routing-path PE3 color 100
set protocols source-packet-routing source-routing-path PE3 primary PE3

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 2.2.2.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.3.3.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 2121 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 2121 vlan-id 2121
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 60
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

PE3

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 2.2.2.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 3.3.3.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.4.4.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances VPWS instance-type evpn-vpws
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id local 546
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id remote 545
set routing-instances VPWS interface ge-0/0/3.545
set routing-instances VPWS route-distinguisher 7.7.7.7:545
set routing-instances VPWS vrf-target target:65400:545
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group VPWS type internal
set protocols bgp group VPWS local-address 7.7.7.7
set protocols bgp group VPWS family evpn signaling
set protocols bgp group VPWS neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 70
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols source-packet-routing segment-list PE1 hop1 label 80060
set protocols source-packet-routing source-routing-path PE1 to 5.5.5.5
set protocols source-packet-routing source-routing-path PE1 color 100
set protocols source-packet-routing source-routing-path PE1 primary PE1

PE4

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 3.3.3.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.5.5.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 2121 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 2121 vlan-id 2121
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 80
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

RR

set interfaces ge-0/0/1 unit 0 family inet address 1.2.2.2/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family inet address 1.3.3.2/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 unit 0 family inet address 1.4.4.2/30
set interfaces ge-0/0/3 unit 0 family iso
set interfaces ge-0/0/4 unit 0 family inet address 1.5.5.2/30
set interfaces ge-0/0/4 unit 0 family iso
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options rib inet.3
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group VPWS type internal
set protocols bgp group VPWS local-address 9.9.9.9
set protocols bgp group VPWS family evpn signaling
set protocols bgp group VPWS cluster 9.9.9.9
set protocols bgp group VPWS neighbor 5.5.5.5
set protocols bgp group VPWS neighbor 7.7.7.7
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface ge-0/0/3.0
set protocols isis interface ge-0/0/4.0
set protocols isis interface lo0.0 passive

If you check the routing table of either PE1 or PE3 you will find a new table called inetcolor.0 as a color has been applied to the traffic engineering.

OSPF has been configured on both CE devices confirming the VPWS circuit is up.

Juniper – Segment Routing EVPN E-Tree

nick Leave a comment

Rather than the vMX, vJunos router is used for this lab & a Route Reflector is thrown into the mix to make things a little more interesting. IS-IS used as the IGP. CE1 is root & CE2 & CE3 are configured as leaves so they are not able to forward traffic to each other.

https://www.juniper.net/documentation/us/en/software/junos/evpn/topics/example/example-etree-service-evpn-configuring.html

_Exports_eve-ng_export-20241222-131321Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.1/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.2/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.2.2.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 flexible-vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-bridge
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces ge-0/0/3 unit 545 etree-ac-role root
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances ETREE instance-type evpn
set routing-instances ETREE protocols evpn interface ge-0/0/3.545
set routing-instances ETREE protocols evpn evpn-etree
set routing-instances ETREE vlan-id 545
set routing-instances ETREE interface ge-0/0/3.545
set routing-instances ETREE route-distinguisher 5.5.5.5:545
set routing-instances ETREE vrf-target target:65400:545
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group ETREE type internal
set protocols bgp group ETREE local-address 5.5.5.5
set protocols bgp group ETREE family evpn signaling
set protocols bgp group ETREE neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 50
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 2.2.2.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.3.3.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 60
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

PE3

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 2.2.2.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 3.3.3.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.4.4.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 flexible-vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-bridge
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces ge-0/0/3 unit 545 etree-ac-role leaf
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances ETREE instance-type evpn
set routing-instances ETREE protocols evpn interface ge-0/0/3.545
set routing-instances ETREE protocols evpn evpn-etree
set routing-instances ETREE vlan-id 545
set routing-instances ETREE interface ge-0/0/3.545
set routing-instances ETREE route-distinguisher 7.7.7.7:545
set routing-instances ETREE vrf-target target:65400:545
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group ETREE type internal
set protocols bgp group ETREE local-address 7.7.7.7
set protocols bgp group ETREE family evpn signaling
set protocols bgp group ETREE neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 70
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

PE4

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 3.3.3.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.5.5.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 flexible-vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-bridge
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces ge-0/0/3 unit 545 etree-ac-role leaf
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances ETREE instance-type evpn
set routing-instances ETREE protocols evpn interface ge-0/0/3.545
set routing-instances ETREE protocols evpn evpn-etree
set routing-instances ETREE vlan-id 545
set routing-instances ETREE interface ge-0/0/3.545
set routing-instances ETREE route-distinguisher 8.8.8.8:545
set routing-instances ETREE vrf-target target:65400:545
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols bgp group ETREE type internal
set protocols bgp group ETREE local-address 8.8.8.8
set protocols bgp group ETREE family evpn signaling
set protocols bgp group ETREE neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 80
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

RR

set interfaces ge-0/0/1 unit 0 family inet address 1.2.2.2/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family inet address 1.3.3.2/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 unit 0 family inet address 1.4.4.2/30
set interfaces ge-0/0/3 unit 0 family iso
set interfaces ge-0/0/4 unit 0 family inet address 1.5.5.2/30
set interfaces ge-0/0/4 unit 0 family iso
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group ETREE type internal
set protocols bgp group ETREE local-address 9.9.9.9
set protocols bgp group ETREE family evpn signaling
set protocols bgp group ETREE cluster 9.9.9.9
set protocols bgp group ETREE neighbor 5.5.5.5
set protocols bgp group ETREE neighbor 7.7.7.7
set protocols bgp group ETREE neighbor 8.8.8.8
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface ge-0/0/3.0
set protocols isis interface ge-0/0/4.0
set protocols isis interface lo0.0 passive

The attachment circuits will now be up

OSPF has been configured on the CE devices. As root, CE1 will be neighbours with both CE2 & CE3

Leaves will only be neighbours with root. Output from CE2 confirms this.

Arista – EVPN VPWS

nick Leave a comment

LDP is used for signalling and IS-IS for the IGP with P1 acting as a route reflector. 2 Cisco CE devices with OSPF configured on each.

https://www.arista.com/en/um-eos/eos-configuring-evpn#xx1117976

_Exports_eve-ng_export-20241127-105106Download

PE1

service routing protocols model multi-agent

hostname pe1

interface Ethernet1
no switchport
ip address 1.1.1.1/30
isis enable 1

interface Ethernet2
no switchport
interface Ethernet2.909
encapsulation dot1q vlan 909

interface Loopback0
ip address 5.5.5.5/32
isis enable 1

ip routing

mpls ip

mpls ldp
no shutdown

patch panel
patch VPWS
connector 1 interface Ethernet2.909
connector 2 pseudowire bgp vpws PE2 pseudowire VPWS

router bgp 65400
router-id 5.5.5.5
neighbor 6.6.6.6 remote-as 65400
neighbor 6.6.6.6 update-source Loopback0
neighbor 6.6.6.6 send-community

vpws PE2
rd 5.5.5.5:909
route-target import export evpn 65400:909
mpls control-word

pseudowire VPWS
evpn vpws id local 909 remote 910

address-family evpn
neighbor default encapsulation mpls next-hop-self source-interface Loopback0
neighbor 6.6.6.6 activate

router isis 1
net 49.0000.5555.5555.5555.00
is-type level-2
address-family ipv4 unicast

P1

service routing protocols model multi-agent

hostname p1

interface Ethernet1
no switchport
ip address 1.1.1.2/30
isis enable 1

interface Ethernet2
no switchport
ip address 2.2.2.1/30
isis enable 1

interface Loopback0
ip address 6.6.6.6/32
isis enable 1

ip routing

mpls ip

mpls ldp
no shutdown

router bgp 65400
router-id 6.6.6.6
neighbor 5.5.5.5 remote-as 65400
neighbor 5.5.5.5 update-source Loopback0
neighbor 5.5.5.5 route-reflector-client
neighbor 5.5.5.5 send-community
neighbor 7.7.7.7 remote-as 65400
neighbor 7.7.7.7 update-source Loopback0
neighbor 7.7.7.7 route-reflector-client
neighbor 7.7.7.7 send-community

address-family evpn
neighbor default encapsulation mpls next-hop-self source-interface Loopback0
neighbor 5.5.5.5 activate
neighbor 7.7.7.7 activate

router isis 1
net 49.0000.6666.6666.6666.00
is-type level-2
address-family ipv4 unicast

PE2

service routing protocols model multi-agent

hostname pe2

interface Ethernet1
no switchport
ip address 2.2.2.2/30
isis enable 1

interface Ethernet2
no switchport
interface Ethernet2.909
encapsulation dot1q vlan 909

interface Loopback0
ip address 7.7.7.7/32
isis enable 1

ip routing

mpls ip

mpls ldp
no shutdown

patch panel
patch VPWS
connector 1 interface Ethernet2.909
connector 2 pseudowire bgp vpws PE2 pseudowire VPWS

router bgp 65400
neighbor 6.6.6.6 remote-as 65400
neighbor 6.6.6.6 update-source Loopback0
neighbor 6.6.6.6 send-community

vpws PE2
rd 7.7.7.7:909
route-target import export evpn 65400:909
mpls control-word

pseudowire VPWS
evpn vpws id local 910 remote 909

address-family evpn
neighbor default encapsulation mpls next-hop-self source-interface Loopback0
neighbor 6.6.6.6 activate

router isis 1
net 49.0000.7777.7777.7777.00
is-type level-2
address-family ipv4 unicast

OSPF is now up on the 2 Cisco CE devices, confirming layer 2 connectivity.

Juniper vMX – Carrier of Carriers EVPN VPLS

nick Leave a comment

This lab is slightly different to the other Carrier of Carrier lab where LDP was used in each AS. In this lab, AS65200 is using LDP, AS65400 RSVP & AS65600 Segment Routing. 2 Cisco vIOS devices used as CE devices

https://www.juniper.net/documentation/us/en/software/junos/vpn-l3/topics/topic-map/l3-vpns-carrier-carrier.html

_Exports_eve-ng_export-20241109-101638Download

PE1

set interfaces ge-0/0/0 vlan-tagging
set interfaces ge-0/0/0 encapsulation vlan-vpls
set interfaces ge-0/0/0 unit 909 encapsulation vlan-vpls
set interfaces ge-0/0/0 unit 909 vlan-id 909
set interfaces ge-0/0/0 unit 909 family vpls
set interfaces ge-0/0/2 unit 0 family inet address 1.1.1.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.5555.5555.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65200
set protocols mpls interface ge-0/0/2.0
set protocols mpls interface lo0.0
set protocols bgp group AS65600 type external
set protocols bgp group AS65600 multihop
set protocols bgp group AS65600 local-address 5.5.5.5
set protocols bgp group AS65600 family evpn signaling
set protocols bgp group AS65600 peer-as 65600
set protocols bgp group AS65600 neighbor 11.11.11.11
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 5.5.5.5
set protocols bgp group INTERNAL family inet labeled-unicast resolve-vpn
set protocols bgp group INTERNAL neighbor 6.6.6.6
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis interface ge-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols ldp interface ge-0/0/2.0
set protocols ldp interface lo0.0
set routing-instances vpls instance-type evpn
set routing-instances vpls interface ge-0/0/0.909
set routing-instances vpls route-distinguisher 5.5.5.5:909
set routing-instances vpls vrf-target target:65200:909
set routing-instances vpls protocols vpls site-range 1000
set routing-instances vpls protocols vpls no-tunnel-services
set routing-instances vpls protocols vpls site vpls-1 site-identifier 1
set routing-instances vpls protocols vpls site vpls-1 interface ge-0/0/0.909
set routing-instances vpls protocols evpn interface ge-0/0/0.909

ASBR1

set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 2.2.2.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.6666.6666.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65200
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface lo0.0
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 6.6.6.6
set protocols bgp group INTERNAL family inet labeled-unicast
set protocols bgp group INTERNAL neighbor 5.5.5.5
set protocols bgp group AS65400 type external
set protocols bgp group AS65400 family inet labeled-unicast
set protocols bgp group AS65400 export PE1_LOOPBACK
set protocols bgp group AS65400 peer-as 65400
set protocols bgp group AS65400 neighbor 2.2.2.2
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols ldp interface ge-0/0/0.0
set protocols ldp interface lo0.0
set policy-options policy-statement PE1_LOOPBACK from route-filter 5.5.5.5/32 exact
set policy-options policy-statement PE1_LOOPBACK then accept

CoC ASBR1

set interfaces ge-0/0/0 unit 0 family inet address 2.2.2.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 3.3.3.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.7777.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols rsvp interface ge-0/0/1.0
set protocols rsvp interface lo0.0
set protocols mpls label-switched-path ASBR2 to 9.9.9.9
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols bgp group AS65200 type external
set protocols bgp group AS65200 family inet labeled-unicast
set protocols bgp group AS65200 peer-as 65200
set protocols bgp group AS65200 neighbor 2.2.2.1
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 7.7.7.7
set protocols bgp group INTERNAL family inet labeled-unicast
set protocols bgp group INTERNAL neighbor 8.8.8.8
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface lo0.0 passive

CoC Core

set interfaces ge-0/0/0 unit 0 family inet address 3.3.3.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.8888.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols rsvp interface ge-0/0/0.0
set protocols rsvp interface ge-0/0/1.0
set protocols rsvp interface lo0.0
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 8.8.8.8
set protocols bgp group INTERNAL family inet labeled-unicast
set protocols bgp group INTERNAL cluster 8.8.8.8
set protocols bgp group INTERNAL neighbor 9.9.9.9
set protocols bgp group INTERNAL neighbor 7.7.7.7
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface lo0.0 passive

CoC ASBR2

set interfaces ge-0/0/0 unit 0 family inet address 4.4.4.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 5.5.5.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.9999.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols rsvp interface ge-0/0/0.0
set protocols rsvp interface lo0.0
set protocols mpls label-switched-path ASBR1 to 7.7.7.7
set protocols mpls interface ge-0/0/0.0
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 9.9.9.9
set protocols bgp group INTERNAL family inet labeled-unicast
set protocols bgp group INTERNAL neighbor 8.8.8.8
set protocols bgp group AS65600 type external
set protocols bgp group AS65600 family inet labeled-unicast
set protocols bgp group AS65600 peer-as 65600
set protocols bgp group AS65600 neighbor 5.5.5.2
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface lo0.0 passive

ASBR2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 5.5.5.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 6.6.6.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 10.10.10.10/32
set interfaces lo0 unit 0 family iso address 49.0000.1010.1010.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 10.10.10.10
set routing-options autonomous-system 65600
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 10.10.10.10
set protocols bgp group INTERNAL family inet labeled-unicast
set protocols bgp group INTERNAL neighbor 11.11.11.11
set protocols bgp group AS65400 type external
set protocols bgp group AS65400 family inet labeled-unicast
set protocols bgp group AS65400 export PE2_LOOPBACK
set protocols bgp group AS65400 peer-as 65400
set protocols bgp group AS65400 neighbor 5.5.5.1
set protocols isis source-packet-routing srgb start-label 55000
set protocols isis source-packet-routing srgb index-range 10000
set protocols isis source-packet-routing node-segment ipv4-index 1000
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis interface ge-0/0/1.0 point-to-point
set protocols isis interface lo0.0 passive
set policy-options policy-statement PE2_LOOPBACK from route-filter 11.11.11.11/32 exact
set policy-options policy-statement PE2_LOOPBACK then accept

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 6.6.6.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 vlan-tagging
set interfaces ge-0/0/1 encapsulation vlan-vpls
set interfaces ge-0/0/1 unit 909 encapsulation vlan-vpls
set interfaces ge-0/0/1 unit 909 vlan-id 909
set interfaces ge-0/0/1 unit 909 family vpls
set interfaces lo0 unit 0 family inet address 11.11.11.11/32
set interfaces lo0 unit 0 family iso address 49.0000.1111.1111.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 11.11.11.11
set routing-options autonomous-system 65600
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface lo0.0
set protocols bgp group INTERNAL type internal
set protocols bgp group INTERNAL local-address 11.11.11.11
set protocols bgp group INTERNAL family inet labeled-unicast resolve-vpn
set protocols bgp group INTERNAL neighbor 10.10.10.10
set protocols bgp group AS65200 multihop
set protocols bgp group AS65200 local-address 11.11.11.11
set protocols bgp group AS65200 family evpn signaling
set protocols bgp group AS65200 peer-as 65200
set protocols bgp group AS65200 neighbor 5.5.5.5
set protocols isis source-packet-routing srgb start-label 55000
set protocols isis source-packet-routing srgb index-range 10000
set protocols isis source-packet-routing node-segment ipv4-index 1100
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface lo0.0 passive
set routing-instances vpls instance-type evpn
set routing-instances vpls interface ge-0/0/1.909
set routing-instances vpls route-distinguisher 11.11.11.11:909
set routing-instances vpls vrf-target target:65200:909
set routing-instances vpls protocols vpls site-range 1000
set routing-instances vpls protocols vpls no-tunnel-services
set routing-instances vpls protocols vpls site vpls-1 site-identifier 1
set routing-instances vpls protocols vpls site vpls-1 interface ge-0/0/1.909
set routing-instances vpls protocols evpn interface ge-0/0/1.909

The VPLS circuit will now be up and OSPF has been configured to the 2 Cisco CE devices to confirm this.