Page 2
END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at http://www.juniper.net/support/eula.html.
Page 4
VPLS Feature Guide for EX9200 Switches Configuring Inter-AS VPLS with MAC Processing at the ASBR ... . 18 Inter-AS VPLS with MAC Operations Configuration Summary ..18 Configuring the ASBRs for Inter-AS VPLS .
® To obtain the most current version of all Juniper Networks technical documentation, see the product documentation page on the Juniper Networks website at http://www.juniper.net/techpubs/ If the information in the latest release notes differs from the information in the documentation, follow the product Release Notes.
VPLS Feature Guide for EX9200 Switches If the example configuration does not start at the top level of the hierarchy, the example is a snippet. In this case, use the command. These procedures are load merge relative described in the following sections.
Page 16
VPLS Feature Guide for EX9200 Switches Table 2: Text and Syntax Conventions (continued) Convention Description Examples Fixed-width text like this Represents output that appears on the user@host> show chassis alarms terminal screen. No alarms currently active Italic text like this...
We encourage you to provide feedback, comments, and suggestions so that we can improve the documentation. You can provide feedback by using either of the following methods: Online feedback rating system—On any page of the Juniper Networks TechLibrary site , simply click the stars to rate the content, http://www.juniper.net/techpubs/index.html and use the pop-up form to provide us with information about your experience.
Download the latest versions of software and review release notes: http://www.juniper.net/customers/csc/software/ Search technical bulletins for relevant hardware and software notifications: http://kb.juniper.net/InfoCenter/ Join and participate in the Juniper Networks Community Forum: http://www.juniper.net/company/communities/ Open a case online in the CSC Case Management tool: http://www.juniper.net/cm/...
VPLS Feature Guide for EX9200 Switches Supported VPLS Standards Junos OS substantially supports the following Internet RFCs and draft, which define standards for virtual private LAN service (VPLS). RFC 4761, Virtual Private LAN Service (VPLS) Using BGP for Auto-Discovery and Signaling...
Layer 2 connections, such as those configured with Layer 2 VPNs, Layer 2 circuits, and VPLS instances. However, CE Ethernet switches that generate proprietary BPDU frames might not be able to run STP across Juniper Networks routing platforms configured for these emulated Layer 2 connections.
Layer 2 connections, such as those configured with Layer 2 VPNs, Layer 2 circuits, and VPLS routing instances. However, CE Ethernet switches that generate proprietary BPDU frames might not be able to run STP across Juniper Networks routing platforms configured for these emulated Layer 2 connections.
VPLS Feature Guide for EX9200 Switches Interoperability Between BGP Signaling and LDP Signaling in VPLS You can configure a VPLS routing instance where some of the PE routers use BGP for signaling and some use LDP for signaling. NOTE: In the VPLS documentation, the word router in terms such as PE router is used to refer to any device that provides routing functions.
VPLS Feature Guide for EX9200 Switches Flooding Unknown Packets Across Mesh Groups Broadcast, multicast, and unicast packets of unknown origin received from a PE router are flooded to all local CE routers. They are also flooded to all of the PE routers in the VPLS routing instance except the PE routers that are a part of the originating PE router mesh group.
Configuring Integrated Routing and Bridging Support for LDP BGP Interworking with VPLS on page 18 Configuring Inter-AS VPLS with MAC Processing at the ASBR on page 18 LDP BGP Interworking Platform Support LDP BGP interworking is supported on the following Juniper Networks routers and routing platforms: M10i M40e...
VPLS Feature Guide for EX9200 Switches [edit logical-systems logical-system-name routing-instances routing-instance-name protocols vpls mesh-group mesh-group-name] Configuring Integrated Routing and Bridging Support for LDP BGP Interworking with VPLS Beginning with Junos OS Release 9.4, you can configure an integrated routing and bridging (IRB) interface on a router that functions as an autonomous system border router (ASBR) in an inter-AS VPLS environment between BGP-signaled VPLS and LDP-signaled VPLS.
Page 40
VPLS Feature Guide for EX9200 Switches site-identifier identifier; site-preference preference-value { backup; primary; site-range number; traceoptions { file filename <files number> <size size> <world-readable | no-world-readable>; flag flag <flag-modifier> <disable>; tunnel-services devices device-names; primary primary-device-name; vpls-id vpls-id; You can include this statement at the following hierarchy levels:...
VPLS Feature Guide for EX9200 Switches You can include these statements at the following hierarchy levels: [edit routing-instances routing-instance-name protocols vpls] [edit logical-systems logical-system-name routing-instances routing-instance-name protocols vpls] Configuring Automatic Site Identifiers for VPLS When you enable automatic site identifiers, the Junos OS automatically assigns site identifiers to VPLS sites.
VPLS Feature Guide for EX9200 Switches Configuring LDP Signaling for VPLS You can configure LDP as the signaling protocol for a VPLS routing instance. This functionality is described in RFC 4762, Virtual Private LAN Service (VPLS) Using Label Distribution Protocol (LDP) Signaling.
Be aware of the following behavior with regard to TLVs when configuring LDP-signaled VPLS in a network with equipment from other vendors: When a Juniper Network’s device receives a TLV with an empty address, LDP accepts the TLV. When a MAC address is withdrawn, LDP specifies a zero address (0.0.0.0) for the AddressList.
VPLS Feature Guide for EX9200 Switches You can include this statement at the following hierarchy levels: [edit routing-instances routing-instance-name protocols vpls] [edit logical-systems logical-system-name routing-instances routing-instance-name protocols vpls] NOTE: ACX Series routers do not support the hierarchy. [edit logical-systems] To configure the VPLS routing instance to use LDP signaling, you also must include the...
VPLS Feature Guide for EX9200 Switches To specify an encapsulation type for the VPLS routing instance, include the statement: encapsulation-type encapsulation-type (ethernet | ethernet-vlan); You can include this statement at the following hierarchy levels: [edit routing-instances routing-instance-name protocols vpls] [edit logical-systems logical-system-name routing-instances routing-instance-name...
VPLS Feature Guide for EX9200 Switches [edit logical-systems logical-system-name routing-instances routing-instance-name protocols vpls] NOTE: ACX Series routers do not support the hierarchy. [edit logical-systems] When you include the statement, the affected interfaces include all mac-table-size interfaces within the VPLS routing instance, including the local interfaces, the LSI interfaces, and the VT interfaces.
VPLS Feature Guide for EX9200 Switches To clear dynamically learned MAC addresses globally across all devices participating in the routing instance, you can include the statement at the following hierarchy levels: [edit logical-systems logical-system-name routing-instances routing-instance-name protocols vpls] [edit routing-instances routing-instance-name protocols vpls]...
VPLS Feature Guide for EX9200 Switches Specifying the VT Interfaces Used by VPLS Routing Instances By default, the Junos OS automatically selects one of the virtual tunnel (VT) interfaces available to the router for de-encapsulating traffic from a remote site. The Junos OS cycles through the currently available VT interfaces, regularly updating the list of available VT interfaces as new remote sites are discovered and new connections are brought up.
VPLS Feature Guide for EX9200 Switches VPLS Label Blocks Operation A virtual private LAN service (VPLS) is a Layer 2 (L2) service that emulates a local area network (LAN) across a wide area network (WAN). VPLS labels are defined and exchanged in the Border Gateway Protocol (BGP) control plane.
VPLS Feature Guide for EX9200 Switches In this manner, each receiving PE gets a unique label for PE-A for that VPLS. This simple method is enhanced by using a VE block offset (VBO). A label block is defined as: <Label Base (LB), VE block offset (VBO), VE block size (VBS)>...
VPLS Feature Guide for EX9200 Switches Configuring the Label Block Size for VPLS VPLS MPLS packets have a two-label stack. The outer label is used for normal MPLS forwarding in the service provider’s network. If BGP is used to establish VPLS, the inner label is allocated by a PE router as part of a label block.
VPLS Feature Guide for EX9200 Switches The following sections provide enough information to enable you to configure interfaces for VPLS routing. Configuring the VPLS Interface Name on page 48 Configuring VPLS Interface Encapsulation on page 48 Enabling VLAN Tagging on page 51...
Page 68
VPLS Feature Guide for EX9200 Switches TX PIC and the 1-port, 2-port, and 4-port, 4-slot Gigabit Ethernet PICs can use the Ethernet VPLS encapsulation type. To configure the encapsulation type for logical interfaces, include the encapsulation statement: encapsulation (ether-vpls-over-atm-llc | vlan-vpls);...
VPLS Feature Guide for EX9200 Switches You can also configure a logical interface to forward packets and learn MAC addresses within each VPLS routing instance configured with a VLAN ID that matches a VLAN ID specified in a list using the vlan-id-list statement.
VPLS Feature Guide for EX9200 Switches Interface ae0.0 represents the aggregated Ethernet interface in the routing instance configuration. The VPLS routing instance configuration is otherwise standard. VPLS and Aggregated Ethernet Interfaces You can configure aggregated Ethernet interfaces between CE devices and PE routers for VPLS routing instances.
Page 76
VPLS Feature Guide for EX9200 Switches If the router IDs are the same, the routes are from the same PE router and the advertisement is considered to be an update. The router ID corresponds to the value of the originator ID for the BGP attribute (if present). Otherwise, the IP address for the remote BGP peer is used.
Page 78
VPLS Feature Guide for EX9200 Switches For a list of hierarchy levels at which you can include the statement, see the static statement summary section for this statement. To enable static VPLS on a router, you need to either configure a virtual tunnel interface (requires the router to have a tunnel services PIC) or you can configure a label switching interface (LSI).
Page 80
VPLS Feature Guide for EX9200 Switches Figure 5 on page 61 illustrates how a CE device could be multihomed to two PE routers. Device CE1 is multihomed to Routers PE1 and PE2. Device CE2 has two potential paths to reach Device CE1, but only one path is active at any one time. If Router PE1 were the designated VPLS edge (VE) device (also called a designated forwarder), BGP would signal a pseudowire from Router PE3 to Router PE1.
VPLS Feature Guide for EX9200 Switches Alternatively, the remote PE routers could discover that the BGP next hop, represented by the failed multihomed PE router, is unreachable. For this case, the remote PE routers mark the Layer 2 routes advertised by the multihomed PE router as unreachable. The remote PE routers each run the BGP and VPLS path selection procedures again and reroute their pseudowires to the backup multihomed PE router.
VPLS Feature Guide for EX9200 Switches routers in the VPLS network. When the remote customer site is also multihomed, the designated VE device triggers the creation of pseudowires to and from only the designated VE device for the remote site.
VPLS Feature Guide for EX9200 Switches Specifying an Interface as the Active Interface You need to specify one of the interfaces for the multihomed site as the primary interface. If there are multiple interfaces, the remaining interfaces are activated only when the primary interface goes down.
Page 90
VPLS Feature Guide for EX9200 Switches NOTE: In the VPLS documentation, the word router in terms such as PE router is used to refer to any device that provides routing functions. The point-to-multipoint LSP used for VPLS flooding can be either static or dynamic. In either case, for each VPLS routing instance, the PE router creates a dedicated point-to-multipoint LSP.
VPLS Feature Guide for EX9200 Switches point-to-multipoint LSP is also generated automatically and is based on the following model: id:vpls:router-id:routing-instance-name The following command output for illustrates how a show show mpls lsp p2mp point-to-multipoint flood LSP name could appear if you configure the...
Page 94
VPLS Feature Guide for EX9200 Switches Include the statement to apply the policy to the forwarding table: export vpls-priority export vpls-priority; You can include this statement at the following hierarchy levels: [edit routing-options forwarding-table] [edit logical-systems logical-system-name routing-options forwarding-table] For more information about how to configure routing policies, see the Routing Policies, Firewall Filters, and Traffic Policers Feature Guide.
PE router could receive two or more separate but apparently valid paths to the same CE device. By default, Juniper Networks routers use just the designated forwarder path selection algorithm to select the best path to reach each Layer 2 VPN or VPLS routing instance destination (for more information, see “VPLS Path Selection Process for PE Routers”...
Page 100
VPLS Feature Guide for EX9200 Switches layer-3-only; layer-4; source-mac; symetric-hash { complement; You can configure one or more of the following options to load-balance using the specified packet information: —Include the destination-address MAC information in the hash key destination-mac for Layer 2 load balancing.
VPLS Feature Guide for EX9200 Switches the filter. Policers allow you to limit the amount of traffic that passes into or out of an interface. VPLS filters and policers act on a Layer 2 frame that includes the media access control (MAC) header (after any VLAN rewrite or other rules are applied), but does not include the cyclical redundancy check (CRC) field.
VPLS Feature Guide for EX9200 Switches filter input filter-name; Changing Precedence for Spanning-Tree BPDU Packets Spanning tree BPDU packets are automatically set to a high precedence. The queue number on these packets is set to 3. On M Series routers (except the M320 router) by default, a queue value of 3 indicates high precedence.
VPLS Feature Guide for EX9200 Switches policer policer-name { bandwidth-limit limit; burst-size-limit limit; then action; To apply a VPLS policer to an interface, include the statement: policer policer { input input-policer-name; output output-policer-name; You can include this statement at the following hierarchy levels:...
Page 110
VPLS Feature Guide for EX9200 Switches Table 5: Firewall Filter Match Conditions for VPLS Traffic (continued) Match Condition Description (MX Series routers and EX Series switches only) Match the Differentiated Services code point dscp number (DSCP). The DiffServ protocol uses the type-of-service (ToS) byte in the IP header. The most significant 6 bits of this byte form the DSCP.
Page 112
VPLS Feature Guide for EX9200 Switches Table 5: Firewall Filter Match Conditions for VPLS Traffic (continued) Match Condition Description Match the ICMP message code field. icmp-code message-code If you configure this match condition, we recommend that you also configure the next-header match condition in the same term.
Page 114
VPLS Feature Guide for EX9200 Switches Table 5: Firewall Filter Match Conditions for VPLS Traffic (continued) Match Condition Description (MX Series only) Match the IPv6 destination addresses in a named-list. ipv6-destination-prefix-list named-list protocol (MX Series only) Match IPv6 next header protocol type.
Page 116
VPLS Feature Guide for EX9200 Switches Table 5: Firewall Filter Match Conditions for VPLS Traffic (continued) Match Condition Description number (MX Series only) Differentiated Services code point (DSCP). The DiffServ protocol uses the ipv6-traffic-class type-of-service (ToS) byte in the IP header. The most significant 6 bits of this byte form the DSCP.
Page 118
VPLS Feature Guide for EX9200 Switches Table 5: Firewall Filter Match Conditions for VPLS Traffic (continued) Match Condition Description (MX Series routers and EX Series switches only) Match the source prefixes in the specified prefix source-prefix-list name list. Specify a prefix list name defined at the...
Page 126
VPLS Feature Guide for EX9200 Switches peer-as (VPLS) on page 147 ping-interval on page 148 preference (Interface-Level Preference for VPLS Multihoming for FEC 129) on page 149 preference (Site-Level Preference for VPLS Multihoming for FEC 129) on page 150 primary (VPLS Multihoming) on page 151...
VPLS Feature Guide for EX9200 Switches Required Privilege routing—To view this statement in the configuration. Level routing-control—To add this statement to the configuration. Related Configuring Automatic Site Identifiers for VPLS on page 24 Documentation best-site Syntax best-site; Hierarchy Level [edit logical-systems logical-system-name routing-instances routing-instance-name protocols...
Page 134
VPLS Feature Guide for EX9200 Switches —Use Cisco-compatible HDLC framing on TCC circuits for connecting cisco-hdlc-tcc different media. ethernet-bridge —Use Ethernet bridge encapsulation on Ethernet interfaces that have bridging enabled and that must accept all packets. —Use Ethernet CCC encapsulation on Ethernet interfaces that must accept ethernet-ccc packets carrying standard Tag Protocol ID (TPID) values.
Page 136
VPLS Feature Guide for EX9200 Switches —For IQ interfaces only, use flexible Frame Relay encapsulation when flexible-frame-relay you want to configure multiple per-unit Frame Relay encapsulations. This encapsulation type allows you to configure any combination of TCC, CCC, and standard Frame Relay encapsulations on a single physical port. Also, each logical interface can have any DLCI value from 1 through 1022.
Page 142
VPLS Feature Guide for EX9200 Switches (MX Series, M120, and M320 routers only)—Include the packet’s IP payload in payload the hash key. (MX Series, M120, and M320 routers only)—Include the IP address of the IPv4 or IPv6 payload in the hash key.
Page 162
VPLS Feature Guide for EX9200 Switches Description Specify each of the PE routers participating in the VPLS domain. Configuring this statement enables LDP for signaling VPLS. NOTE: In the VPLS documentation, the word router in terms such as PE router is used to refer to any device that provides routing functions.
For Fast Ethernet and Gigabit Ethernet interfaces, aggregated Ethernet interfaces configured for VPLS, and pseudowire subscriber interfaces, enable the reception and transmission of 802.1Q VLAN-tagged frames on the interface. NOTE: On EX Series switches except for EX4300 and EX9200 switches, the statements cannot be configured vlan-tagging family ethernet-switching on the same interface.
VPLS Feature Guide for EX9200 Switches —Display the current configuration and information about interfaces, routing show protocols, routing tables, routing policy filters, system alarms, and the chassis. test —Test the configuration and application of policy filters and autonomous system (AS) path regular expressions.
VPLS Feature Guide for EX9200 Switches Example: Running Operational Mode Commands on Logical Systems This example shows how to set the CLI to a specified logical system view, run operational-mode commands for the logical system, and then return to the main router view.
Page 192
VPLS Feature Guide for EX9200 Switches Overview Logical systems have their individual directory structure created in the directory. It contains the following /var/logical-systems/logical-system-name subdirectories: /config —Contains the active configuration specific to the logical system. —Contains system log and tracing files specific to the logical system.
VPLS Feature Guide for EX9200 Switches Results From configuration mode, confirm your configuration by entering the show logical-systems A protocols bgp group internal-peers command. If the output does not display the intended configuration, repeat the instructions in this example to correct the configuration.
Page 198
VPLS Feature Guide for EX9200 Switches If you are done configuring the device, commit the configuration. [edit] user@host# commit user@host# exit Results From configuration mode, confirm your configuration by entering the show logical-systems command. If the output does not display the intended configuration, repeat the instructions in this example to correct the configuration.
Need help?
Do you have a question about the EX9200 and is the answer not in the manual?
Questions and answers