VPWS Archives - Lab-It-Up

Juniper – SRv6 EVPN VPWS

25 January 202613 February 2026 nick Leave a comment

Yes it’s another EVPN VPWS lab but this time it’s with SRv6 so no MPLS involved. A couple of vjunos-router devices are running SRv6 and as usual, 2 Cisco devices are CEs.

https://www.juniper.net/documentation/us/en/software/junos/evpn/topics/concept/configuring-vpws-srv6.html

eve-ng_export-20260125-185511 Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family inet6 address fd2c:8b41:3e9a:1c4d::1/64
set interfaces ge-0/0/1 vlan-tagging
set interfaces ge-0/0/1 encapsulation flexible-ethernet-services
set interfaces ge-0/0/1 unit 12 encapsulation vlan-ccc
set interfaces ge-0/0/1 unit 12 vlan-id 12
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family inet6 address fd7e:9c21:ab04:77d1:8a2f:3c91:5e44:1baf/128
set policy-options policy-statement NHS then next-hop self
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id local 12
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id remote 21
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator LOC1
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator end-dx2-sid 4002:ac8:a1:2:101::
set routing-instances EVPN protocols evpn encapsulation srv6
set routing-instances EVPN interface ge-0/0/1.12
set routing-instances EVPN route-distinguisher 5.5.5.5:12
set routing-instances EVPN vrf-target target:65400:12
set routing-options source-packet-routing srv6 locator LOC1 4002:ac8:a1:2::/64
set routing-options resolution preserve-nexthop-hierarchy
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set routing-options ipv6-router-id fd00::1
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address fd7e:9c21:ab04:77d1:8a2f:3c91:5e44:1baf
set protocols bgp group EVPN family evpn signaling advertise-srv6-service
set protocols bgp group EVPN family evpn signaling accept-srv6-service
set protocols bgp group EVPN export NHS
set protocols bgp group EVPN neighbor fdc1:55aa:9e02:4b90:dead:beef:cafe:1234
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srv6 locator LOC1
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family inet6 address fd2c:8b41:3e9a:1c4d::10/64
set interfaces ge-0/0/1 vlan-tagging
set interfaces ge-0/0/1 encapsulation flexible-ethernet-services
set interfaces ge-0/0/1 unit 12 encapsulation vlan-ccc
set interfaces ge-0/0/1 unit 12 vlan-id 12
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family inet6 address fdc1:55aa:9e02:4b90:dead:beef:cafe:1234/128
set policy-options policy-statement NHS then next-hop self
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id local 21
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id remote 12
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator LOC1
set routing-instances EVPN protocols evpn interface ge-0/0/1.12 vpws-service-id source-packet-routing srv6 locator end-dx2-sid 4002:ac8:a1:3:101::
set routing-instances EVPN protocols evpn encapsulation srv6
set routing-instances EVPN interface ge-0/0/1.12
set routing-instances EVPN route-distinguisher 6.6.6.6:12
set routing-instances EVPN vrf-target target:65400:12
set routing-options source-packet-routing srv6 locator LOC1 4002:ac8:a1:3::/64
set routing-options resolution preserve-nexthop-hierarchy
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set routing-options ipv6-router-id fd00::2
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address fdc1:55aa:9e02:4b90:dead:beef:cafe:1234
set protocols bgp group EVPN family evpn signaling advertise-srv6-service
set protocols bgp group EVPN family evpn signaling accept-srv6-service
set protocols bgp group EVPN export NHS
set protocols bgp group EVPN neighbor fd7e:9c21:ab04:77d1:8a2f:3c91:5e44:1baf
set protocols isis interface ge-0/0/0.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srv6 locator LOC1
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only

OSPFv3 has been configured on the Cisco devices

Juniper – RSVP EVPN/VPWS

4 January 202513 February 2026 nick 2 Comments

Junos Evolved is used for this lab. Commands are pretty much identical to standard Junos.

LSPs have been created between PE1 & PE3. The PE1 LSP goes through PE4 & the PE3 LSP through PE2. IS-IS is the IGP and an out of data path Route Reflector is used to reflect the relevant routes.

https://community.juniper.net/blogs/suneesh-babu/2022/11/05/evpn-vpws-validation-on-acx7000

_Exports_eve-ng_export-20250104-111343 Download

PE1

set interfaces et-0/0/0 unit 0 family inet address 1.1.1.1/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 4.4.4.2/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.2.2.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/3 vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 3232 encapsulation vlan-ccc
set interfaces et-0/0/3 unit 3232 vlan-id 3232
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id local 32
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id remote 33
set routing-instances EVPN interface et-0/0/3.3232
set routing-instances EVPN route-distinguisher 5.5.5.5:3232
set routing-instances EVPN vrf-target target:65400:3232
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 5.5.5.5
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls label-switched-path PE3 to 7.7.7.7
set protocols mpls label-switched-path PE3 primary PE3
set protocols mpls path PE3 8.8.8.8 strict
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

PE2

set interfaces et-0/0/0 unit 0 family inet address 1.1.1.2/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 2.2.2.1/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.3.3.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

PE3

set interfaces et-0/0/0 unit 0 family inet address 2.2.2.2/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 3.3.3.1/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.4.4.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/3 vlan-tagging
set interfaces et-0/0/3 encapsulation flexible-ethernet-services
set interfaces et-0/0/3 unit 3232 encapsulation vlan-ccc
set interfaces et-0/0/3 unit 3232 vlan-id 3232
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances EVPN instance-type evpn-vpws
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id local 33
set routing-instances EVPN protocols evpn interface et-0/0/3.3232 vpws-service-id remote 32
set routing-instances EVPN interface et-0/0/3.3232
set routing-instances EVPN route-distinguisher 7.7.7.7:3232
set routing-instances EVPN vrf-target target:65400:3232
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 7.7.7.7
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN neighbor 9.9.9.9
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls label-switched-path PE1 to 5.5.5.5
set protocols mpls label-switched-path PE1 primary PE1
set protocols mpls path PE1 6.6.6.6 strict
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

PE4

set interfaces et-0/0/0 unit 0 family inet address 3.3.3.2/30
set interfaces et-0/0/0 unit 0 family iso
set interfaces et-0/0/0 unit 0 family mpls
set interfaces et-0/0/1 unit 0 family inet address 4.4.4.1/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/1 unit 0 family mpls
set interfaces et-0/0/2 unit 0 family inet address 1.5.5.1/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols isis interface et-0/0/0.0 point-to-point
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface lo0.0 passive
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface et-0/0/0.0
set protocols mpls interface et-0/0/1.0
set protocols mpls interface lo0.0
set protocols rsvp interface et-0/0/0.0
set protocols rsvp interface et-0/0/1.0
set protocols rsvp interface lo0.0

set interfaces et-0/0/1 unit 0 family inet address 1.2.2.2/30
set interfaces et-0/0/1 unit 0 family iso
set interfaces et-0/0/2 unit 0 family inet address 1.3.3.2/30
set interfaces et-0/0/2 unit 0 family iso
set interfaces et-0/0/3 unit 0 family inet address 1.4.4.2/30
set interfaces et-0/0/3 unit 0 family iso
set interfaces et-0/0/4 unit 0 family inet address 1.5.5.2/30
set interfaces et-0/0/4 unit 0 family iso
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group EVPN type internal
set protocols bgp group EVPN local-address 9.9.9.9
set protocols bgp group EVPN family evpn signaling
set protocols bgp group EVPN cluster 9.9.9.9
set protocols bgp group EVPN neighbor 5.5.5.5
set protocols bgp group EVPN neighbor 7.7.7.7
set protocols isis interface et-0/0/1.0 point-to-point
set protocols isis interface et-0/0/2.0 point-to-point
set protocols isis interface et-0/0/3.0 point-to-point
set protocols isis interface et-0/0/4.0 point-to-point
set protocols isis interface lo0.0 passive

The VPWS instance will now be up.

OSPF configured on the 2 CE devices confirming the layer 2 circuit.

Juniper – Segment Routing Traffic Engineering

29 December 202413 February 2026 nick Leave a comment

Again we will use vjunos router for this lab. Aim of the lab is to direct traffic for the VPWS circuit over a certain path. Traffic from PE1 will go via PE4 and traffic from PE3 will go via PE2.

IS-IS is used as the IGP (could use OSPF if preferred) and an out of path route reflector reflects routes to the PE devices.

https://www.juniper.net/documentation/us/en/software/junos/mpls/topics/topic-map/segment-routing-lsp-configuration.html

_Exports_eve-ng_export-20241229-175412 Download

PE1

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.1/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.2/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.2.2.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces lo0 unit 0 family inet address 5.5.5.5/32
set interfaces lo0 unit 0 family iso address 49.0000.5555.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances VPWS instance-type evpn-vpws
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id local 545
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id remote 546
set routing-instances VPWS interface ge-0/0/3.545
set routing-instances VPWS route-distinguisher 5.5.5.5:545
set routing-instances VPWS vrf-target target:65400:545
set routing-options router-id 5.5.5.5
set routing-options autonomous-system 65400
set protocols bgp group VPWS type internal
set protocols bgp group VPWS local-address 5.5.5.5
set protocols bgp group VPWS family evpn signaling
set protocols bgp group VPWS neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 50
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols isis traffic-engineering l3-unicast-topology
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols source-packet-routing segment-list PE3 hop1 label 80080
set protocols source-packet-routing source-routing-path PE3 to 7.7.7.7
set protocols source-packet-routing source-routing-path PE3 color 100
set protocols source-packet-routing source-routing-path PE3 primary PE3

PE2

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 1.1.1.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 2.2.2.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.3.3.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 2121 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 2121 vlan-id 2121
set interfaces lo0 unit 0 family inet address 6.6.6.6/32
set interfaces lo0 unit 0 family iso address 49.0000.6666.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 6.6.6.6
set routing-options autonomous-system 65400
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 60
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

PE3

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 2.2.2.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 3.3.3.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.4.4.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 545 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 545 vlan-id 545
set interfaces lo0 unit 0 family inet address 7.7.7.7/32
set interfaces lo0 unit 0 family iso address 49.0000.7777.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-instances VPWS instance-type evpn-vpws
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id local 546
set routing-instances VPWS protocols evpn interface ge-0/0/3.545 vpws-service-id remote 545
set routing-instances VPWS interface ge-0/0/3.545
set routing-instances VPWS route-distinguisher 7.7.7.7:545
set routing-instances VPWS vrf-target target:65400:545
set routing-options router-id 7.7.7.7
set routing-options autonomous-system 65400
set protocols bgp group VPWS type internal
set protocols bgp group VPWS local-address 7.7.7.7
set protocols bgp group VPWS family evpn signaling
set protocols bgp group VPWS neighbor 9.9.9.9
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 70
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0
set protocols source-packet-routing segment-list PE1 hop1 label 80060
set protocols source-packet-routing source-routing-path PE1 to 5.5.5.5
set protocols source-packet-routing source-routing-path PE1 color 100
set protocols source-packet-routing source-routing-path PE1 primary PE1

PE4

set chassis network-services enhanced-ip
set interfaces ge-0/0/0 unit 0 family inet address 3.3.3.2/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/0 unit 0 family mpls
set interfaces ge-0/0/1 unit 0 family inet address 4.4.4.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 unit 0 family inet address 1.5.5.1/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 vlan-tagging
set interfaces ge-0/0/3 encapsulation flexible-ethernet-services
set interfaces ge-0/0/3 unit 2121 encapsulation vlan-ccc
set interfaces ge-0/0/3 unit 2121 vlan-id 2121
set interfaces lo0 unit 0 family inet address 8.8.8.8/32
set interfaces lo0 unit 0 family iso address 49.0000.8888.0000.0000.00
set interfaces lo0 unit 0 family mpls
set routing-options router-id 8.8.8.8
set routing-options autonomous-system 65400
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface lo0.0 passive
set protocols isis source-packet-routing srgb start-label 80000
set protocols isis source-packet-routing srgb index-range 1000
set protocols isis source-packet-routing node-segment ipv4-index 80
set protocols isis level 1 disable
set protocols isis level 2 wide-metrics-only
set protocols mpls interface ge-0/0/0.0
set protocols mpls interface ge-0/0/1.0
set protocols mpls interface lo0.0

set interfaces ge-0/0/1 unit 0 family inet address 1.2.2.2/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/2 unit 0 family inet address 1.3.3.2/30
set interfaces ge-0/0/2 unit 0 family iso
set interfaces ge-0/0/3 unit 0 family inet address 1.4.4.2/30
set interfaces ge-0/0/3 unit 0 family iso
set interfaces ge-0/0/4 unit 0 family inet address 1.5.5.2/30
set interfaces ge-0/0/4 unit 0 family iso
set interfaces lo0 unit 0 family inet address 9.9.9.9/32
set interfaces lo0 unit 0 family iso address 49.0000.9999.0000.0000.00
set routing-options rib inet.3
set routing-options resolution rib bgp.evpn.0 resolution-ribs inet.0
set routing-options router-id 9.9.9.9
set routing-options autonomous-system 65400
set protocols bgp group VPWS type internal
set protocols bgp group VPWS local-address 9.9.9.9
set protocols bgp group VPWS family evpn signaling
set protocols bgp group VPWS cluster 9.9.9.9
set protocols bgp group VPWS neighbor 5.5.5.5
set protocols bgp group VPWS neighbor 7.7.7.7
set protocols isis interface ge-0/0/1.0
set protocols isis interface ge-0/0/2.0
set protocols isis interface ge-0/0/3.0
set protocols isis interface ge-0/0/4.0
set protocols isis interface lo0.0 passive

If you check the routing table of either PE1 or PE3 you will find a new table called inetcolor.0 as a color has been applied to the traffic engineering.

OSPF has been configured on both CE devices confirming the VPWS circuit is up.

Arista – EVPN VPWS

27 November 202413 February 2026 nick Leave a comment

LDP is used for signalling and IS-IS for the IGP with P1 acting as a route reflector. 2 Cisco CE devices with OSPF configured on each.

https://www.arista.com/en/um-eos/eos-configuring-evpn#xx1117976

_Exports_eve-ng_export-20241127-105106 Download

PE1

service routing protocols model multi-agent

hostname pe1

interface Ethernet1
no switchport
ip address 1.1.1.1/30
isis enable 1

interface Ethernet2
no switchport
interface Ethernet2.909
encapsulation dot1q vlan 909

interface Loopback0
ip address 5.5.5.5/32
isis enable 1

ip routing

mpls ip

mpls ldp
no shutdown

patch panel
patch VPWS
connector 1 interface Ethernet2.909
connector 2 pseudowire bgp vpws PE2 pseudowire VPWS

router bgp 65400
router-id 5.5.5.5
neighbor 6.6.6.6 remote-as 65400
neighbor 6.6.6.6 update-source Loopback0
neighbor 6.6.6.6 send-community

vpws PE2
rd 5.5.5.5:909
route-target import export evpn 65400:909
mpls control-word

pseudowire VPWS
evpn vpws id local 909 remote 910

address-family evpn
neighbor default encapsulation mpls next-hop-self source-interface Loopback0
neighbor 6.6.6.6 activate

router isis 1
net 49.0000.5555.5555.5555.00
is-type level-2
address-family ipv4 unicast

service routing protocols model multi-agent

hostname p1

interface Ethernet1
no switchport
ip address 1.1.1.2/30
isis enable 1

interface Ethernet2
no switchport
ip address 2.2.2.1/30
isis enable 1

interface Loopback0
ip address 6.6.6.6/32
isis enable 1

ip routing

mpls ip

mpls ldp
no shutdown

router bgp 65400
router-id 6.6.6.6
neighbor 5.5.5.5 remote-as 65400
neighbor 5.5.5.5 update-source Loopback0
neighbor 5.5.5.5 route-reflector-client
neighbor 5.5.5.5 send-community
neighbor 7.7.7.7 remote-as 65400
neighbor 7.7.7.7 update-source Loopback0
neighbor 7.7.7.7 route-reflector-client
neighbor 7.7.7.7 send-community

address-family evpn
neighbor default encapsulation mpls next-hop-self source-interface Loopback0
neighbor 5.5.5.5 activate
neighbor 7.7.7.7 activate

router isis 1
net 49.0000.6666.6666.6666.00
is-type level-2
address-family ipv4 unicast

PE2

service routing protocols model multi-agent

hostname pe2

interface Ethernet1
no switchport
ip address 2.2.2.2/30
isis enable 1

interface Ethernet2
no switchport
interface Ethernet2.909
encapsulation dot1q vlan 909

interface Loopback0
ip address 7.7.7.7/32
isis enable 1

ip routing

mpls ip

mpls ldp
no shutdown

patch panel
patch VPWS
connector 1 interface Ethernet2.909
connector 2 pseudowire bgp vpws PE2 pseudowire VPWS

router bgp 65400
neighbor 6.6.6.6 remote-as 65400
neighbor 6.6.6.6 update-source Loopback0
neighbor 6.6.6.6 send-community

vpws PE2
rd 7.7.7.7:909
route-target import export evpn 65400:909
mpls control-word

pseudowire VPWS
evpn vpws id local 910 remote 909

address-family evpn
neighbor default encapsulation mpls next-hop-self source-interface Loopback0
neighbor 6.6.6.6 activate

router isis 1
net 49.0000.7777.7777.7777.00
is-type level-2
address-family ipv4 unicast

OSPF is now up on the 2 Cisco CE devices, confirming layer 2 connectivity.

Cisco IOS-XE EVPN/VPWS

13 February 202413 February 2026 nick Leave a comment

Aim of this lab is to create a layer 2 circuit between switch6 & switch7 and form an OSPF adjacency. IS-IS is used for the underlay as it’s better (it really is!).

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l2_vpns/configuration/xe-3s/asr903/mp-l2-vpns-xe-3s-asr903-book/epvn_vpws_single_homed.html

Exports_eve-ng_export-20240213-194530 Download

CSR1

conf t
hostname csr1
mpls label protocol ldp
l2vpn evpn logging vc-state
l2vpn
router-id 5.5.5.5

interface Loopback0
ip address 5.5.5.5 255.255.255.255
ip router isis 1

interface GigabitEthernet1
ip address 1.1.1.1 255.255.255.252
ip router isis 1
mpls ip

interface GigabitEthernet2
no ip address
service instance 1 ethernet
encapsulation dot1q 1000
rewrite ingress tag pop 1 symmetric
  
router isis 1
net 49.0000.5555.5555.5555.00

router bgp 65200
bgp log-neighbor-changes
neighbor 6.6.6.6 remote-as 65200
neighbor 6.6.6.6 update-source Loopback0

address-family ipv4
neighbor 6.6.6.6 activate
exit-address-family

address-family l2vpn evpn
neighbor 6.6.6.6 activate
exit-address-family

l2vpn evpn instance 1 point-to-point

vpws context cust1
service target 1 source 2
member GigabitEthernet2 service-instance 1

CSR2

conf t
hostname csr2
mpls label protocol ldp
  
interface Loopback0
ip address 6.6.6.6 255.255.255.255
ip router isis 1
  
interface GigabitEthernet1
ip address 1.1.1.2 255.255.255.252
ip router isis 1
mpls ip

interface GigabitEthernet2
ip address 2.2.2.1 255.255.255.252
ip router isis 1
mpls ip
  
router isis 1
net 49.0000.6666.6666.6666.00

router bgp 65200
bgp log-neighbor-changes
neighbor 5.5.5.5 remote-as 65200
neighbor 5.5.5.5 update-source Loopback0
neighbor 7.7.7.7 remote-as 65200
neighbor 7.7.7.7 update-source Loopback0

address-family ipv4
neighbor 5.5.5.5 activate
neighbor 7.7.7.7 activate
exit-address-family

address-family l2vpn evpn
neighbor 5.5.5.5 activate
neighbor 5.5.5.5 route-reflector-client
neighbor 7.7.7.7 activate
exit-address-family

CSR3

conf t
hostname csr3
mpls label protocol ldp

interface Loopback0
ip address 7.7.7.7 255.255.255.255
ip router isis 1

interface GigabitEthernet1
ip address 2.2.2.2 255.255.255.252
ip router isis 1
mpls ip

interface GigabitEthernet2
ip address 3.3.3.1 255.255.255.252
ip router isis 1
mpls ip
  
router isis 1
net 49.0000.7777.7777.7777.00

router bgp 65200
bgp log-neighbor-changes
neighbor 6.6.6.6 remote-as 65200
neighbor 6.6.6.6 update-source Loopback0
neighbor 8.8.8.8 remote-as 65200
neighbor 8.8.8.8 update-source Loopback0

address-family ipv4
neighbor 6.6.6.6 activate
neighbor 8.8.8.8 activate
exit-address-family

address-family l2vpn evpn
neighbor 6.6.6.6 activate
neighbor 6.6.6.6 route-reflector-client
neighbor 8.8.8.8 activate
neighbor 8.8.8.8 route-reflector-client
exit-address-family

CSR4

conf t
hostname csr4
mpls label protocol ldp
  
interface Loopback0
ip address 8.8.8.8 255.255.255.255
ip router isis 1

interface GigabitEthernet1
ip address 3.3.3.2 255.255.255.252
ip router isis 1
mpls ip
 
interface GigabitEthernet2
ip address 4.4.4.1 255.255.255.252
ip router isis 1
mpls ip
  
router isis 1
net 49.0000.8888.8888.8888.00
  
router bgp 65200
bgp log-neighbor-changes
neighbor 7.7.7.7 remote-as 65200
neighbor 7.7.7.7 update-source Loopback0
neighbor 9.9.9.9 remote-as 65200
neighbor 9.9.9.9 update-source Loopback0

address-family ipv4
neighbor 7.7.7.7 activate
neighbor 9.9.9.9 activate
exit-address-family

address-family l2vpn evpn
neighbor 7.7.7.7 activate
neighbor 9.9.9.9 activate
neighbor 9.9.9.9 route-reflector-client
exit-address-family

CSR5

conf t
hostname csr5
mpls label protocol ldp
l2vpn
router-id 9.9.9.9
  
interface Loopback0
ip address 9.9.9.9 255.255.255.255
ip router isis 1

interface GigabitEthernet1
ip address 4.4.4.2 255.255.255.252
ip router isis 1
mpls ip
  
interface GigabitEthernet2
no ip address
service instance 1 ethernet
encapsulation dot1q 1000
rewrite ingress tag pop 1 symmetric

router isis 1
net 49.0000.9999.9999.9999.00

router bgp 65200
bgp log-neighbor-changes
neighbor 8.8.8.8 remote-as 65200
neighbor 8.8.8.8 update-source Loopback0

address-family ipv4
neighbor 8.8.8.8 activate
exit-address-family
 
address-family l2vpn evpn
neighbor 8.8.8.8 activate
exit-address-family

mpls ldp router-id Loopback0
l2vpn evpn instance 1 point-to-point

vpws context cust1
service target 2 source 1
member GigabitEthernet2 service-instance 1

Once all devices configured, run ‘show l2vpn evpn vc id 1‘ to confirm circuit is up and then configure OSPF on your CE devices (use whatever you prefer) and the adjacency will come up.