HPE FlexNetwork VSR1000 Evi Configuration Manual
HPE FlexNetwork VSR1000 Evi Configuration Manual

HPE FlexNetwork VSR1000 Evi Configuration Manual

Virtual services router
Hide thumbs Also See for FlexNetwork VSR1000:

Advertisement

HPE FlexNetwork VSR1000
Virtual Services Router
EVI Configuration Guide
Part number: 5998-8309R
Software version: VSR1000_HPE-CMW710-E0321P01-X64
Document version: 5W101-20151202

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the FlexNetwork VSR1000 and is the answer not in the manual?

Questions and answers

Summary of Contents for HPE FlexNetwork VSR1000

  • Page 1 HPE FlexNetwork VSR1000 Virtual Services Router EVI Configuration Guide Part number: 5998-8309R Software version: VSR1000_HPE-CMW710-E0321P01-X64 Document version: 5W101-20151202...
  • Page 2 © Copyright 2015 Hewlett Packard Enterprise Development LP The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
  • Page 3: Table Of Contents

    Contents Configuring EVI ······························································································· 1     Overview ···························································································································································· 1   Layer 2 connectivity extension issues ········································································································ 1   Network topologies ····································································································································· 2   Terminology ··············································································································································· 3   Working mechanism ··································································································································· 4   Placement of Layer 3 gateways ················································································································· 7  ...
  • Page 4: Configuring Evi

    Configuring EVI Overview Ethernet Virtual Interconnect (EVI) is a MAC-in-IP technology that provides Layer 2 connectivity between distant Layer 2 network sites across an IP routed network. It is used for connecting geographically dispersed sites of a virtualized large-scale data center that requires Layer 2 adjacency (see Figure EVI enables long-distance virtual machine workload mobility and data mobility, disaster recovery,...
  • Page 5: Network Topologies

    • Easy management and maintenance—EVI requires deployment only on edge devices and does not introduce any topology change or configuration within sites or the transport network. Network topologies As shown in Figure 2, an EVI network has one or multiple edge devices at each site. These sites are connected through virtual links and run the EVI IS-IS protocol to advertise their MAC address entries to each other.
  • Page 6: Terminology

    Figure 3 Multiple EVI networks Site 2 Site 1 EVI 1 VLANs 100-101 Site 3 EVI 2 VLAN 4000 EVI 3 VLANs 50-80 Site 4 Site 5 Terminology Edge device An edge device performs typical Layer 2 learning and forwarding on the site-facing interfaces (internal interfaces) and performs tunneling and routing on the transport-facing interfaces.
  • Page 7: Working Mechanism

    ENDC An EVI neighbor discovery client works with an ENDS to learn neighbor information and triggers EVI link setup between neighbors. EVI IS-IS EVI IS-IS establishes adjacencies and advertises MAC reachability information among edge devices at different sites in an EVI network. It also maps VLANs to redundant edge devices at a multihomed site to avoid loops and balance traffic.
  • Page 8 • MAC entries learned through EVI IS-IS—After completing neighbor discovery, the edge devices run EVI IS-IS in the control plane to establish adjacencies and advertise MAC reachability information that has been learned or configured in the data plane to each other over EVI links.
  • Page 9 Figure 5 Layer 2 forwarding between sites Transport network MAC Table MAC Table VLAN Interface VLAN Interface MAC1 GE1/0/1 MAC1 EVI-Link0 MAC2 GE1/0/2 MAC2 EVI-Link0 MAC3 GE1/0/1 MAC3 EVI-Link0 Device A Device B GE1/0/1 Host A Host B Host C MAC2 MAC1 MAC3...
  • Page 10: Placement Of Layer 3 Gateways

    Figure 6 Multicast data frame forwarding process (2) Replicate & encapsulate (4) Decapsulate & replicate (3) Unicast EVI-Link1 (1) Multicast stream EVI-Link1 (5) Multicast stream GE1/0/1 GE1/0/1 (3) Unicast EVI-Link2 VLAN R-port H-port VLAN R-port H-port GE1/0/1 EVI-Link1 EVI-Link1 GE1/0/1 (4) Decapsulate EVI-Link2 EVI-Link1...
  • Page 11: Selective Flood

    Site B's edge device de-encapsulates the ARP request and broadcasts the request. IP2 sends an ARP reply back to site A's edge device over the EVI link. Site A's edge device creates an ARP cache entry for the remote MAC address and forwards the reply to the requesting host.
  • Page 12 devices have a user-configurable DED priority. The one with the highest DED priority is elected as the DED. The DED uses the following rules to assign active VLANs: If an extended VLAN is configured only on one edge device, the edge device is the appointed edge forwarder for the VLAN.
  • Page 13 Figure 9 Edge devices in an IRF fabric Transport network Site 1 Site 2 Figure 10 Active VLAN on an edge device...
  • Page 14: Path Mtu

    Path MTU When encapsulating an Ethernet frame in EVI, the edge device does not modify the Ethernet frame, but it sets the DF bit in the IP header. For an Ethernet transport network, the total size of an EVI protocol packet increases by 46 bytes, and the total size of a data packet increases by 38 bytes. Because EVI does not support path MTU discovery, your EVI deployment must make sure the path MTU of the transport network is higher than the maximum size of EVI tunneled frames.
  • Page 15: Configuring A Site Id

    Configuring a site ID A site ID uniquely identifies a site in an EVI network. Edge devices at the same site must use the same site ID, and edge devices at different sites must use different site IDs. A site ID conflict occurs in the following situations: •...
  • Page 16: Assigning A Network Id To The Evi Tunnel

    Step Command Remarks By default, no source IP address or source interface is specified for any tunnel. The source interface can be a Layer 3 Ethernet interface, Layer 3 aggregate interface, VLAN interface, or Layer 3 loopback interface. For more information about the source command, see tunneling commands in Layer 3—IP Services Command Reference.
  • Page 17: Specifying Extended Vlans On The Evi Tunnel

    On an edge device, the network ID assigned to an EVI tunnel must be unique. To assign a network ID to an EVI tunnel: Step Command Remarks Enter system view. system-view interface tunnel number Enter tunnel interface view. [ mode evi ] Specify a network ID.
  • Page 18: Tuning Evi Is-Is Parameters

    If authentication is disabled on an ENDS, all ENDCs, including authentication-enabled ENDCs, can register with the ENDS without authentication. If authentication is enabled on an ENDS, only authentication-enabled ENDCs that use the same authentication key as the ENDS can register with the ENDS. Configuring the edge device as an ENDS on the EVI tunnel Step Command...
  • Page 19: Evi Is-Is Configuration Task List

    EVI IS-IS configuration task list All EVI IS-IS configuration tasks are optional. Tasks at a glance Remarks Creating an EVI IS-IS process The redundant edge devices at a site use the designated site VLAN to exchange EVI IS-IS Changing the designated site VLAN hello packets for DED election and extended-VLAN assignment.
  • Page 20: Changing The Designated Site Vlan

    • If no EVI IS-IS settings exist on the EVI tunnel interface, the undo evi-isis command deletes both the EVI IS-IS process and all settings configured in EVI IS-IS process view. An automatically created EVI IS-IS process is automatically deleted when you delete all EVI IS-IS settings from the EVI tunnel interface.
  • Page 21 Step Command Remarks Enter system view. system-view Enter EVI tunnel interface interface tunnel number [ mode view. evi ] The default hello interval is 10 seconds. Configure the EVI IS-IS evi isis timer hello seconds If the edge device is a DED, its hello hello interval.
  • Page 22 Step Command Remarks interface tunnel number Enter EVI tunnel interface view. [ mode evi ] Configure the DED priority. evi isis ded-priority value The default DED priority is 64. Configuring the CSNP packet transmit interval This configuration takes effect only on DEDs. The DEDs in an EVI network regularly send CSNP packets to advertise LSP summaries for LSDB synchronization.
  • Page 23 Step Command Remarks Enter EVI IS-IS process view. evi-isis process-id Configure the maximum LSP timer lsp-max-age The default maximum LSP lifetime. seconds lifetime is 1200 seconds. Configuring the LSP refresh interval The edge device sends LSP updates at the refresh interval to update MAC reachability information. To change the LSP refresh interval: Step Command...
  • Page 24: Specifying A Routing Policy For An Evi Is-Is Process

    Step Command Remarks Enter system view. system-view Enter EVI tunnel interface interface tunnel number [ mode view. evi ] By default, an EVI tunnel interface is not associated with any track Associate a track entry with evi isis track entry. the tunnel interface.
  • Page 25: Enabling Adjacency Change Logging

    Step Command Remarks Enter system view. system-view Enter EVI IS-IS process view. evi-isis process-id By default, an EVI IS-IS process is Specify a routing policy for the EVI filter-policy policy-name not associated with any routing IS-IS process. policy. Enabling adjacency change logging Adjacency change logging enables an EVI IS-IS process to send a log message to the information center when an adjacency change occurs.
  • Page 26: Configuring Graceful Restart For An Evi Is-Is Process

    Step Command Remarks snmp-agent trap enable evi-isis [ adjacency-state-change | area-mismatch | buffsize-mismatch | id-length-mismatch | link-disconnect | lsp-parse-error | lsp-size-exceeded | Enable EVI IS-IS By default, all EVI IS-IS max-seq-exceeded | notifications. notifications are enabled. maxarea-mismatch | new-ded | own-lsp-purge | protocol-support | rejected-adjacency | skip-sequence-number |...
  • Page 27: Configuring Vlan Mappings

    To increase this number to accommodate all local MAC address entries, create virtual systems. Each virtual system represents an increase of 55 x 2 MAC address entries. If n virtual systems are created, the maximum number of MAC address entries in an LSP is (n+1) x 55 x 2 To configure EVI IS-IS virtual system: Step Command...
  • Page 28: Enabling Evi Flooding For All Destination-Unknown Frames

    Step Command Remarks To avoid traffic blackholes, make sure the MAC aging Verify that the MAC aging timer is longer than the EVI timer is longer than the EVI display mac-address aging-time ARP entry aging timer (fixed ARP entry aging timer. at 15 minutes) on all edge devices.
  • Page 29: Displaying And Maintaining Evi

    If an application uses a special multicast address that requires flooding across sites and cannot be added to a multicast forwarding table by IGMP snooping, enable selective flood for the multicast address. To enable selective flood for a MAC address: Step Command Remarks...
  • Page 30: Evi Configuration Examples

    Task Command Display EVI IS-IS information for a display evi isis tunnel [ tunnel-number ] tunnel interface. display evi isis graceful-restart status [ process-id ] Display EVI IS-IS GR state. display evi mac-address interface tunnel interface-number [ vlan vlan-id ] [ count ] Display remote MAC addresses (in standalone mode).
  • Page 31 Figure 11 Network diagram Device A Device B GE1/0/1 GE1/0/1 1.1.1.1/24 1.1.2.1/24 Tunnel0 Tunnel0 IP network GE1/0/1 Tunnel0 1.1.3.1/24 Device C Configuration procedure Configure routes for the sites to reach each other. (Details not shown.) Configure Device A: # Configure the site ID. <DeviceA>...
  • Page 32 [DeviceA-route-policy-EVI-Filter-10] quit # Assign the policy to EVI IS-IS process 0. [DeviceA] evi-isis 0 [DeviceA-evi-isis-0] filter-policy EVI-Filter [DeviceA-evi-isis-0] quit Configure Device B: # Configure the site ID. <DeviceB> system-view [DeviceB] evi site-id 2 # Assign an IP address to the transport-facing interface GigabitEthernet 1/0/1. [DeviceB] interface gigabitethernet 1/0/1 [DeviceB-GigabitEthernet1/0/1] ip address 1.1.2.1 24 [DeviceB-GigabitEthernet1/0/1] quit...
  • Page 33 [DeviceC-Tunnel0] evi extend-vlan 21 to 100 # Configure Device C as an ENDC of Device A. [DeviceC-Tunnel0] evi neighbor-discovery client enable 1.1.1.1 [DeviceC-Tunnel0] quit Verifying the configuration Verify the configuration on Device A: # Display information about the EVI tunnel interface. [DeviceA] display interface tunnel 0 Tunnel0 Current state: UP...
  • Page 34 1.1.2.1 000F-0001-0002 2013/01/01 01:00:46 1.1.3.1 000F-0001-0003 2013/01/01 01:02:13 # Display neighbor entries that Device A has learned. [DeviceA] display evi neighbor-discovery client member Interface: Tunnel0 Network ID: 1 Vpn-instance: [No Vrf] Local Address: 1.1.1.1 Server Address: 1.1.1.1 Neighbor System ID Created Time Expire Status...
  • Page 35 Flags: 0x2 MAC address: 0002-0100-0003 Interface: EVI-Link0 Flags: 0x2 The output shows that Device A has received MAC addresses in VLAN 100 from Device B because Device B does not filter VLAN 100. The MAC addresses received from Device B in VLAN 21 have been added to VLAN 80.
  • Page 36 [DeviceB] display evi vlan-mapping VLAN mappings for EVI IS-IS(0) Local-VID Peer-ID Remote-VID Interface Remote-site 000F.0001.0001 EVI-Link0 # Verify that MAC addresses in VLAN 100 are not filtered. [DeviceB] display evi isis local-mac dynamic Process ID: 0 Tunnel interface: Tunnel0 VLAN ID: 100 MAC address: 0002-0100-0001 MAC address: 0002-0100-0002 MAC address: 0002-0100-0003...
  • Page 37 Output queue - Urgent queuing: Size/Length/Discards 0/100/0 Output queue - Protocol queuing: Size/Length/Discards 0/500/0 Output queue - FIFO queuing: Size/Length/Discards 0/75/0 Last clearing of counters: Never Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Input: 0 packets, 0 bytes, 0 drops Output: 0 packets, 0 bytes, 0 drops # Display information about EVI-Link interfaces on Device C.
  • Page 38: Multiple-Evi-Networks Configuration Example

    MAC address: 0001-0080-0003 Interface: EVI-Link0 Flags: 0x0 VLAN ID: 100 MAC address: 0002-0100-0001 Interface: EVI-Link1 Flags: 0x2 MAC address: 0002-0100-0002 Interface: EVI-Link1 Flags: 0x2 MAC address: 0002-0100-0003 Interface: EVI-Link1 Flags: 0x2 The output shows that Device C can receive MAC addresses in VLAN 100 from Device B but not from Device A, because only Device A filters VLAN 100.
  • Page 39 Figure 12 Network diagram Site 2 GE1/0/1 172.16.2.1/24 Tunnel102 Tunnel101 Site 1 Tunnel102 EVI 1 Site 3 VLANs 100-101 Tunnel101 GE1/0/1 EVI 2 Tunnel103 172.16.1.1/24 VLAN 4000 Tunnel102 GE1/0/1 EVI 3 172.16.3.1/24 VLANs 50-80 Tunnel102 Tunnel101 Tunnel102 Tunnel103 GE1/0/1 GE1/0/1 172.16.5.1/24 172.16.4.1/24 Site 5...
  • Page 40 [Site4-Tunnel103] evi neighbor-discovery server enable [Site4-Tunnel103] quit Configure site 1: # Configure the site ID. <Site1> system-view [Site1] evi site-id 1 # Assign an IP address to the transport-facing interface GigabitEthernet 1/0/1. [Site1] interface gigabitethernet 1/0/1 [Site1-GigabitEthernet1/0/1] ip address 172.16.1.1 16 [Site1-GigabitEthernet1/0/1] quit # Configure the network management EVI network.
  • Page 41 Client Address System ID Expire Created Time 172.16.1.1 000F-0001-0001 2013/01/01 00:19:31 172.16.4.1 000F-0001-0004 2013/01/01 01:02:13...
  • Page 42: Document Conventions And Icons

    Document conventions and icons Conventions This section describes the conventions used in the documentation. Port numbering in examples The port numbers in this document are for illustration only and might be unavailable on your device. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown.
  • Page 43: Network Topology Icons

    Network topology icons Convention Description Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
  • Page 44: Support And Other Resources

    Support and other resources Accessing Hewlett Packard Enterprise Support • For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website: www.hpe.com/assistance • To access documentation and support services, go to the Hewlett Packard Enterprise Support Center website: www.hpe.com/support/hpesc Information to collect •...
  • Page 45: Websites

    For more information and device support details, go to the following website: www.hpe.com/info/insightremotesupport/docs Documentation feedback Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (docsfeedback@hpe.com). When submitting your feedback, include the document title,...
  • Page 46 part number, edition, and publication date located on the front cover of the document. For online help content, include the product name, product version, help edition, and publication date located on the legal notices page.
  • Page 47: Index

    Index EVI IS-IS LSP transmit interval, 19 EVI IS-IS LSPs transmit max, 19 adjacency EVI IS-IS process GR, 23 EVI configuration, 1 EVI IS-IS process LSP MAC entries max, 23 EVI IS-IS adjacency change logging, 22 EVI IS-IS SNMP context, 22 EVI IS-IS hello multiplier for calculating EVI IS-IS SNMP notifications, 22 adjacency hold time, 18...
  • Page 48 EVI flooding flow, 7 appointed edge forwarder, 4 EVI IS-IS, 4 ARP flood suppression, 7, 24 EVI IS-IS DED priority, 18 basic configuration, 11 EVI IS-IS hello multiplier, 18 broadcast frame, 7 EVI IS-IS LSP refresh interval, 20 configuration, 1, 11, 27 EVI IS-IS process routing policy, 21 configuration (multiple-EVI-networks), 35 EVI link, 3...
  • Page 49 neighbor discovery client. Use EVI IS-IS process GR configuration, 23 neighbor discovery protocol. Use ENDPENDC neighbor discovery server. Use ENDS EVI tunnel, 3 network ID, 3 network topologies, 2 hello path MTU, 11 EVI IS-IS hello interval, 17 preferred VLAN, 21 EVI IS-IS process GR configuration, 23 selective flood, 8 selective flood (MAC address), 25...
  • Page 50 EVI IS-IS process creation, 16 EVI configuration (multiple-EVI-networks), 35 EVI IS-IS process GR configuration, 23 EVI configuration (single-homed network), 27 EVI IS-IS process LSP MAC entries max, 23 EVI flooding (destination-unknown frames), 25 EVI IS-IS SNMP notifications, 22 EVI IS-IS, 4 EVI multihomed sites, 8 EVI IS-IS parameter tuning, 15 EVI selective flood, 8...
  • Page 51 EVI IS-IS LSP lifetime max, 19 EVI multicast flow, 6 EVI IS-IS LSP refresh interval, 20 policy EVI IS-IS LSP transmit interval, 19 EVI IS-IS process routing policy, 21 EVI IS-IS LSPs transmit max, 19 preferred VLAN (EVI), 21 EVI IS-IS optimization, 17 priority EVI IS-IS process creation, 16 EVI IS-IS DED priority, 18...
  • Page 52 refresh EVI tunnel interface+Track entry association, 20 EVI IS-IS LSP refresh interval, 20 EVI tunnel network ID assignment, 13 selective flood unicast EVI selective flood, 8 EVI unicast flow, 5 EVI selective flood (MAC address), 25 server VLAN EVI ENDS, 3 EVI appointed edge forwarder, 4 single-homed EVI network, 27 EVI broadcast frame, 7...

Table of Contents