用juniper VMX17.1R1.8实践PBB-EVPN

PBB-EVPN用于超大规模的MAC寻址(10万条目以上,用于减轻EVPN控制平面管理大规模mac时的负担)

SW2 SW3的配置与SW1的配置相同

ubuntu14.04-1  192.168.10.1  00:31:cc:fa:84:01

ubuntu14.04-2  192.168.10.2  00:31:cc:55:cb:01

ubuntu14.04-3  192.168.10.3  00:31:cc:62:99:01

ubuntu14.04-4  192.168.10.4  00:31:cc:85:d0:01

ubuntu14.04-5    192.168.10.5  00:31:cc:d8:6e:01

ubuntu14.04-6    192.168.10.6  00:31:cc:f2:2f:01

三台MX PE路由器需要开启enhanced-ip模式

root@PE1> show configuration | display set

set version 17.1R1.8

set system host-name PE1

set system root-authentication encrypted-password "$6$9zE1EkvG$F2aC5EyiX/QzcUykYqha69I8SNz96B/C4LGyUJ/RWOr5mye9.U4DSSkCjwJlU21aVLbxo6HBSD9X.qhniR6UB/"

set system services ssh protocol-version v2

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set chassis network-services enhanced-ip

set interfaces ge-0/0/0 flexible-vlan-tagging

set interfaces ge-0/0/0 encapsulation flexible-ethernet-services

set interfaces ge-0/0/0 unit 100 encapsulation vlan-bridge

set interfaces ge-0/0/0 unit 100 vlan-id 100

set interfaces ge-0/0/8 unit 0 family inet address 10.0.13.1/24

set interfaces ge-0/0/8 unit 0 family mpls

set interfaces ge-0/0/9 unit 0 family inet address 10.0.12.1/24

set interfaces ge-0/0/9 unit 0 family mpls

set interfaces cbp0 unit 1000 family bridge interface-mode trunk

set interfaces cbp0 unit 1000 family bridge bridge-domain-type bvlan

set interfaces cbp0 unit 1000 family bridge isid-list all

set interfaces fxp0 unit 0 family inet address 10.8.17.106/24

set interfaces lo0 unit 0 family inet address 1.1.1.1/32

set interfaces pip0 unit 1000 family bridge interface-mode trunk

set interfaces pip0 unit 1000 family bridge bridge-domain-type svlan

set interfaces pip0 unit 1000 family bridge isid-list all-service-groups

set routing-options static route 10.8.0.0/16 next-hop 10.8.17.254

set routing-options router-id 1.1.1.1

set routing-options autonomous-system 65000

set protocols mpls interface ge-0/0/9.0

set protocols mpls interface ge-0/0/8.0

set protocols bgp group mesh type internal

set protocols bgp group mesh local-address 1.1.1.1

set protocols bgp group mesh family evpn signaling

set protocols bgp group mesh neighbor 2.2.2.2

set protocols bgp group mesh neighbor 3.3.3.3

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/9.0

set protocols ospf area 0.0.0.0 interface ge-0/0/8.0

set protocols ldp interface ge-0/0/8.0

set protocols ldp interface ge-0/0/9.0

set routing-instances PBB-EVPN-B-COMP instance-type virtual-switch

set routing-instances PBB-EVPN-B-COMP interface cbp0.1000

set routing-instances PBB-EVPN-B-COMP route-distinguisher 1.1.1.1:100

set routing-instances PBB-EVPN-B-COMP vrf-target target:100:100

set routing-instances PBB-EVPN-B-COMP protocols evpn control-word

set routing-instances PBB-EVPN-B-COMP protocols evpn pbb-evpn-core

set routing-instances PBB-EVPN-B-COMP protocols evpn extended-isid-list 100100

set routing-instances PBB-EVPN-B-COMP bridge-domains BR-B-100100 vlan-id 999

set routing-instances PBB-EVPN-B-COMP bridge-domains BR-B-100100 isid-list 100100

set routing-instances PBB-EVPN-B-COMP bridge-domains BR-B-100100 vlan-id-scope-local

set routing-instances PBB-EVPN-I-COMP instance-type virtual-switch

set routing-instances PBB-EVPN-I-COMP interface pip0.1000

set routing-instances PBB-EVPN-I-COMP bridge-domains BR-I-100 vlan-id 100

set routing-instances PBB-EVPN-I-COMP bridge-domains BR-I-100 interface ge-0/0/0.100

set routing-instances PBB-EVPN-I-COMP pbb-options peer-instance PBB-EVPN-B-COMP

set routing-instances PBB-EVPN-I-COMP service-groups CUST1 service-type elan

set routing-instances PBB-EVPN-I-COMP service-groups CUST1 pbb-service-options isid 100100 vlan-id-list 100

root@PE2> show configuration | display set

set version 17.1R1.8

set system host-name PE2

set system root-authentication encrypted-password "$6$BxZVN8w8$1doNHsXrG1ao8eAE9mvD8ovgAQsVej4VDjBrt46Ys1/6XVSe5X5tMcx9TLC67APHl56xPm8prIJUKbN.d4U/F0"

set system services ssh protocol-version v2

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set chassis network-services enhanced-ip

set interfaces ge-0/0/0 flexible-vlan-tagging

set interfaces ge-0/0/0 encapsulation flexible-ethernet-services

set interfaces ge-0/0/0 unit 100 encapsulation vlan-bridge

set interfaces ge-0/0/0 unit 100 vlan-id 100

set interfaces ge-0/0/7 unit 0 family inet address 10.0.23.2/24

set interfaces ge-0/0/7 unit 0 family mpls

set interfaces ge-0/0/9 unit 0 family inet address 10.0.12.2/24

set interfaces ge-0/0/9 unit 0 family mpls

set interfaces cbp0 unit 1000 family bridge interface-mode trunk

set interfaces cbp0 unit 1000 family bridge bridge-domain-type bvlan

set interfaces cbp0 unit 1000 family bridge isid-list all

set interfaces fxp0 unit 0 family inet address 10.8.17.107/24

set interfaces lo0 unit 0 family inet address 2.2.2.2/32

set interfaces pip0 unit 1000 family bridge interface-mode trunk

set interfaces pip0 unit 1000 family bridge bridge-domain-type svlan

set interfaces pip0 unit 1000 family bridge isid-list all-service-groups

set routing-options static route 10.8.0.0/16 next-hop 10.8.17.254

set routing-options router-id 2.2.2.2

set routing-options autonomous-system 65000

set protocols mpls interface ge-0/0/9.0

set protocols mpls interface ge-0/0/7.0

set protocols bgp group mesh type internal

set protocols bgp group mesh local-address 2.2.2.2

set protocols bgp group mesh family evpn signaling

set protocols bgp group mesh neighbor 1.1.1.1

set protocols bgp group mesh neighbor 3.3.3.3

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/9.0

set protocols ospf area 0.0.0.0 interface ge-0/0/7.0

set protocols ldp interface ge-0/0/7.0

set protocols ldp interface ge-0/0/9.0

set routing-instances PBB-EVPN-B-COMP instance-type virtual-switch

set routing-instances PBB-EVPN-B-COMP interface cbp0.1000

set routing-instances PBB-EVPN-B-COMP route-distinguisher 2.2.2.2:100

set routing-instances PBB-EVPN-B-COMP vrf-target target:100:100

set routing-instances PBB-EVPN-B-COMP protocols evpn control-word

set routing-instances PBB-EVPN-B-COMP protocols evpn pbb-evpn-core

set routing-instances PBB-EVPN-B-COMP protocols evpn extended-isid-list 100100

set routing-instances PBB-EVPN-B-COMP bridge-domains BR-B-100100 vlan-id 999

set routing-instances PBB-EVPN-B-COMP bridge-domains BR-B-100100 isid-list 100100

set routing-instances PBB-EVPN-B-COMP bridge-domains BR-B-100100 vlan-id-scope-local

set routing-instances PBB-EVPN-I-COMP instance-type virtual-switch

set routing-instances PBB-EVPN-I-COMP interface pip0.1000

set routing-instances PBB-EVPN-I-COMP bridge-domains BR-I-100 vlan-id 100

set routing-instances PBB-EVPN-I-COMP bridge-domains BR-I-100 interface ge-0/0/0.100

set routing-instances PBB-EVPN-I-COMP pbb-options peer-instance PBB-EVPN-B-COMP

set routing-instances PBB-EVPN-I-COMP service-groups CUST1 service-type elan

set routing-instances PBB-EVPN-I-COMP service-groups CUST1 pbb-service-options isid 100100 vlan-id-list 100

root@PE3> show configuration | display set

set version 17.1R1.8

set system host-name PE3

set system root-authentication encrypted-password "$6$WAuusfiq$tGR4ZbqvX1Lm67cmGCdjbAq98jMhw3Keqg/MWImRc00X7SFLkpo7xRbM8MdlHEUPK7K1mIInzixF1rMHThlV8."

set system services ssh protocol-version v2

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set chassis network-services enhanced-ip

set interfaces ge-0/0/0 flexible-vlan-tagging

set interfaces ge-0/0/0 encapsulation flexible-ethernet-services

set interfaces ge-0/0/0 unit 100 encapsulation vlan-bridge

set interfaces ge-0/0/0 unit 100 vlan-id 100

set interfaces ge-0/0/7 unit 0 family inet address 10.0.23.3/24

set interfaces ge-0/0/7 unit 0 family mpls

set interfaces ge-0/0/8 unit 0 family inet address 10.0.13.3/24

set interfaces ge-0/0/8 unit 0 family mpls

set interfaces cbp0 unit 1000 family bridge interface-mode trunk

set interfaces cbp0 unit 1000 family bridge bridge-domain-type bvlan

set interfaces cbp0 unit 1000 family bridge isid-list all

set interfaces fxp0 unit 0 family inet address 10.8.17.108/24

set interfaces lo0 unit 0 family inet address 3.3.3.3/32

set interfaces pip0 unit 1000 family bridge interface-mode trunk

set interfaces pip0 unit 1000 family bridge bridge-domain-type svlan

set interfaces pip0 unit 1000 family bridge isid-list all-service-groups

set routing-options static route 10.8.0.0/16 next-hop 10.8.17.254

set routing-options router-id 3.3.3.3

set routing-options autonomous-system 65000

set protocols mpls interface ge-0/0/8.0

set protocols mpls interface ge-0/0/7.0

set protocols bgp group mesh type internal

set protocols bgp group mesh local-address 3.3.3.3

set protocols bgp group mesh family evpn signaling

set protocols bgp group mesh neighbor 2.2.2.2

set protocols bgp group mesh neighbor 1.1.1.1

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/8.0

set protocols ospf area 0.0.0.0 interface ge-0/0/7.0

set protocols ldp interface ge-0/0/7.0

set protocols ldp interface ge-0/0/8.0

set routing-instances PBB-EVPN-B-COMP instance-type virtual-switch

set routing-instances PBB-EVPN-B-COMP interface cbp0.1000

set routing-instances PBB-EVPN-B-COMP route-distinguisher 3.3.3.3:100

set routing-instances PBB-EVPN-B-COMP vrf-target target:100:100

set routing-instances PBB-EVPN-B-COMP protocols evpn control-word

set routing-instances PBB-EVPN-B-COMP protocols evpn pbb-evpn-core

set routing-instances PBB-EVPN-B-COMP protocols evpn extended-isid-list 100100

set routing-instances PBB-EVPN-B-COMP bridge-domains BR-B-100100 vlan-id 999

set routing-instances PBB-EVPN-B-COMP bridge-domains BR-B-100100 isid-list 100100

set routing-instances PBB-EVPN-B-COMP bridge-domains BR-B-100100 vlan-id-scope-local

set routing-instances PBB-EVPN-I-COMP instance-type virtual-switch

set routing-instances PBB-EVPN-I-COMP interface pip0.1000

set routing-instances PBB-EVPN-I-COMP bridge-domains BR-I-100 vlan-id 100

set routing-instances PBB-EVPN-I-COMP bridge-domains BR-I-100 interface ge-0/0/0.100

set routing-instances PBB-EVPN-I-COMP pbb-options peer-instance PBB-EVPN-B-COMP

set routing-instances PBB-EVPN-I-COMP service-groups CUST1 service-type elan

set routing-instances PBB-EVPN-I-COMP service-groups CUST1 pbb-service-options isid 100100 vlan-id-list 100




MAC IN MAC实现了

验证

root@PE1> show bgp summary

Groups: 1 Peers: 2 Down peers: 0

Table          Tot Paths  Act Paths Suppressed    History Damp State    Pending

bgp.evpn.0

4          4          0          0          0          0

Peer                     AS      InPkt     OutPkt    OutQ   Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...

2.2.2.2               65000         65         64       0       1       27:19 Establ

bgp.evpn.0: 2/2/2/0

PBB-EVPN-B-COMP.evpn.0: 2/2/2/0

__default_evpn__.evpn.0: 0/0/0/0

3.3.3.3               65000         64         63       0       1       26:58 Establ

bgp.evpn.0: 2/2/2/0

PBB-EVPN-B-COMP.evpn.0: 2/2/2/0

__default_evpn__.evpn.0: 0/0/0/0

root@PE1> show route protocol bgp table PBB-EVPN-B-COMP.evpn.0

PBB-EVPN-B-COMP.evpn.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

2:2.2.2.2:100::100100::00:05:86:db:82:b0/304 MAC/IP

*[BGP/170] 00:27:49, localpref 100, from 2.2.2.2

AS path: I, validation-state: unverified

> to 10.0.12.2 via ge-0/0/9.0

2:3.3.3.3:100::100100::00:05:86:e8:94:b0/304 MAC/IP

*[BGP/170] 00:27:29, localpref 100, from 3.3.3.3

AS path: I, validation-state: unverified

> to 10.0.13.3 via ge-0/0/8.0

3:2.2.2.2:100::100100::2.2.2.2/304 IM

*[BGP/170] 00:27:49, localpref 100, from 2.2.2.2

AS path: I, validation-state: unverified

> to 10.0.12.2 via ge-0/0/9.0

3:3.3.3.3:100::100100::3.3.3.3/304 IM

*[BGP/170] 00:27:29, localpref 100, from 3.3.3.3

AS path: I, validation-state: unverified

> to 10.0.13.3 via ge-0/0/8.0

root@PE2> show route protocol bgp table PBB-EVPN-B-COMP.evpn.0

PBB-EVPN-B-COMP.evpn.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

2:1.1.1.1:100::100100::00:05:86:2d:80:b0/304 MAC/IP

*[BGP/170] 00:29:06, localpref 100, from 1.1.1.1

AS path: I, validation-state: unverified

> to 10.0.12.1 via ge-0/0/9.0

2:3.3.3.3:100::100100::00:05:86:e8:94:b0/304 MAC/IP

*[BGP/170] 00:28:46, localpref 100, from 3.3.3.3

AS path: I, validation-state: unverified

> to 10.0.23.3 via ge-0/0/7.0

3:1.1.1.1:100::100100::1.1.1.1/304 IM

*[BGP/170] 00:29:06, localpref 100, from 1.1.1.1

AS path: I, validation-state: unverified

> to 10.0.12.1 via ge-0/0/9.0

3:3.3.3.3:100::100100::3.3.3.3/304 IM

*[BGP/170] 00:28:46, localpref 100, from 3.3.3.3

AS path: I, validation-state: unverified

> to 10.0.23.3 via ge-0/0/7.0

root@PE3> show route protocol bgp table PBB-EVPN-B-COMP.evpn.0

PBB-EVPN-B-COMP.evpn.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

2:1.1.1.1:100::100100::00:05:86:2d:80:b0/304 MAC/IP

*[BGP/170] 00:29:17, localpref 100, from 1.1.1.1

AS path: I, validation-state: unverified

> to 10.0.13.1 via ge-0/0/8.0

2:2.2.2.2:100::100100::00:05:86:db:82:b0/304 MAC/IP

*[BGP/170] 00:29:18, localpref 100, from 2.2.2.2

AS path: I, validation-state: unverified

> to 10.0.23.2 via ge-0/0/7.0

3:1.1.1.1:100::100100::1.1.1.1/304 IM

*[BGP/170] 00:29:17, localpref 100, from 1.1.1.1

AS path: I, validation-state: unverified

> to 10.0.13.1 via ge-0/0/8.0

3:2.2.2.2:100::100100::2.2.2.2/304 IM

*[BGP/170] 00:29:18, localpref 100, from 2.2.2.2

AS path: I, validation-state: unverified

> to 10.0.23.2 via ge-0/0/7.0

root@PE1> show bridge mac-table

MAC flags       (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC

O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC, P -Pinned MAC)

Routing instance : PBB-EVPN-B-COMP

Bridging domain : BR-B-100100, VLAN : 999

MAC                 MAC      Logical          NH     MAC

address             flags    interface        Index  property

00:05:86:db:82:b0   DC                        1048575

00:05:86:e8:94:b0   DC                        1048578

01:1e:83:01:87:04   DC                        1048576

MAC flags (S -static MAC, D -dynamic MAC,

SE -Statistics enabled, NM -Non configured MAC)

Routing instance : PBB-EVPN-I-COMP

Bridging domain : BR-I-100, ISID : 100100, VLAN : 100

MAC                 MAC      Logical                 Remote

address             flags    interface               BEB address

00:31:cc:55:cb:01   D        ge-0/0/0.100

00:31:cc:62:99:01   D        rbeb.32768              00:05:86:db:82:b0

00:31:cc:85:d0:01   D        rbeb.32768              00:05:86:db:82:b0

00:31:cc:d8:6e:01   D        rbeb.32769              00:05:86:e8:94:b0

00:31:cc:f2:2f:01   D        rbeb.32769              00:05:86:e8:94:b0

00:31:cc:fa:84:01   D        ge-0/0/0.100


REF:

https://tgregory.org/2016/11/15/evpn-vs-pbb-evpn-and-massive-scale/

https://tgregory.org/2016/06/04/evpn-in-action-1/

最后编辑于 ：
©著作权归作者所有,转载或内容合作请联系作者
  • 人面猴
    序言：七十年代末，一起剥皮案震惊了整个滨河市，随后出现的几起案子，更是在滨河造成了极大的恐慌，老刑警刘岩，带你破解...
    沈念sama阅读 211,194评论 6赞 490
  • 死咒
    序言：滨河连续发生了三起死亡事件，死亡现场离奇诡异，居然都是意外死亡，警方通过查阅死者的电脑和手机，发现死者居然都...
    沈念sama阅读 90,058评论 2赞 385
  • 救了他两次的神仙让他今天三更去死
    文/潘晓璐 我一进店门，熙熙楼的掌柜王于贵愁眉苦脸地迎上来，“玉大人，你说我怎么就摊上这事。” “怎么了？”我有些...
    开封第一讲书人阅读 156,780评论 0赞 346
  • 道士缉凶录：失踪的卖姜人
    文/不坏的土叔 我叫张陵，是天一观的道长。 经常有香客问我，道长，这世上最难降的妖魔是什么？ 我笑而不...
    开封第一讲书人阅读 56,388评论 1赞 283
  • 港岛之恋（遗憾婚礼）
    正文 为了忘掉前任，我火速办了婚礼，结果婚礼上，老公的妹妹穿的比我还像新娘。我一直安慰自己，他们只是感情好，可当我...
    茶点故事阅读 65,430评论 5赞 384
  • 恶毒庶女顶嫁案：这布局不是一般人想出来的
    文/花漫 我一把揭开白布。 她就那样静静地躺着，像睡着了一般。 火红的嫁衣衬着肌肤如雪。 梳的纹丝不乱的头发上，一...
    开封第一讲书人阅读 49,764评论 1赞 290
  • 城市分裂传说
    那天，我揣着相机与录音，去河边找鬼。 笑死，一个胖子当着我的面吹牛，可吹牛的内容都是我干的。 我是一名探鬼主播，决...
    沈念sama阅读 38,907评论 3赞 406
  • 双鸳鸯连环套：你想象不到人心有多黑
    文/苍兰香墨 我猛地睁开眼，长吁一口气：“原来是场噩梦啊……” “哼！你这毒妇竟也来了？” 一声冷哼从身侧响起，我...
    开封第一讲书人阅读 37,679评论 0赞 266
  • 万荣杀人案实录
    序言：老挝万荣一对情侣失踪，失踪者是张志新（化名）和其女友刘颖，没想到半个月后，有当地人在树林里发现了一具尸体，经...
    沈念sama阅读 44,122评论 1赞 303
  • 护林员之死
    正文 独居荒郊野岭守林人离奇死亡，尸身上长有42处带血的脓包…… 初始之章·张勋 以下内容为张勋视角 年9月15日...
    茶点故事阅读 36,459评论 2赞 325
  • 白月光启示录
    正文 我和宋清朗相恋三年，在试婚纱的时候发现自己被绿了。 大学时的朋友给我发了我未婚夫和他白月光在一起吃饭的照片。...
    茶点故事阅读 38,605评论 1赞 340
  • 活死人
    序言：一个原本活蹦乱跳的男人离奇死亡，死状恐怖，灵堂内的尸体忽然破棺而出，到底是诈尸还是另有隐情，我是刑警宁泽，带...
    沈念sama阅读 34,270评论 4赞 329
  • 日本核电站爆炸内幕
    正文 年R本政府宣布，位于F岛的核电站，受9级特大地震影响，放射性物质发生泄漏。R本人自食恶果不足惜，却给世界环境...
    茶点故事阅读 39,867评论 3赞 312
  • 男人毒药：我在死后第九天来索命
    文/蒙蒙 一、第九天 我趴在偏房一处隐蔽的房顶上张望。 院中可真热闹，春花似锦、人声如沸。这庄子的主人今日做“春日...
    开封第一讲书人阅读 30,734评论 0赞 21
  • 一桩弑父案，背后竟有这般阴谋
    文/苍兰香墨 我抬头看了看天上的太阳。三九已至，却和暖如春，着一层夹袄步出监牢的瞬间，已是汗流浃背。 一阵脚步声响...
    开封第一讲书人阅读 31,961评论 1赞 265
  • 情欲美人皮
    我被黑心中介骗来泰国打工， 没想到刚下飞机就差点儿被人妖公主榨干…… 1. 我叫王不留，地道东北人。 一个月前我还...
    沈念sama阅读 46,297评论 2赞 360
  • 代替公主和亲
    正文 我出身青楼，却偏偏与公主长得像，于是被迫代替她去往敌国和亲。 传闻我的和亲对象是个残疾皇子，可洞房花烛夜当晚...
    茶点故事阅读 43,472评论 2赞 348

推荐阅读更多精彩内容