Avaya 8800 Technical Configuration Manual
Avaya 8800 Technical Configuration Manual

Avaya 8800 Technical Configuration Manual

Vrf-lite for ethernet routing switch

Advertisement

Ethernet Routing Switch
8600 / 8800
Engineering
VRF-Lite for Ethernet Routing Switch
8600 / 8800 Technical Configuration
Guide
Avaya Data Solutions
Document Date: April 2011
Document Number: NN48500-570
Document Version: 2.0

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 8800 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Avaya 8800

  • Page 1 Ethernet Routing Switch 8600 / 8800 Engineering VRF-Lite for Ethernet Routing Switch 8600 / 8800 Technical Configuration Guide Avaya Data Solutions Document Date: April 2011 Document Number: NN48500-570 Document Version: 2.0...
  • Page 2 Avaya Support Web site: http://www.avaya.com/support Please note that if you acquired the product from an authorized reseller, the warranty is provided to you by said reseller and not by Avaya. Licenses THE SOFTWARE LICENSE TERMS AVAILABLE ON THE AVAYA WEBSITE, HTTP://SUPPORT.AVAYA.COM/LICENSEINFO/...
  • Page 3 : Autonomous System : Enterprise Device Manager : Global Route Table IPVPN : IP Virtual Private Network : Inter Switch Trunk (Avaya SMLT Clustering) : Java Device Manager LACP : Link Aggregation Control Protocol LLDP : Link Layer Discovery Protocol; IEEE 802.1AB...
  • Page 4 Revision Control Date Version Revised by Remarks 1/23/2008 Initial release 7/4/2008 Updates 4/28/2011 PRMGT Updates VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide April 2011...
  • Page 5: Table Of Contents

    Getting technical documentation ....................53 Getting product training ....................... 53 Getting help from a distributor or reseller ..................53 Getting technical support from the Avaya Web site ..............53 VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide April 2011...
  • Page 6: Figures

    Figures Figure 1: VRF-Lite Overview ......................... 8 Figure 2: IP-VPN VRF between Switches ....................11 Figure 3: VRRP and VRF in SMLT topology ....................11 Figure 4: Router Redundacy for multiple routing instances (RSMLT) ............12 Figure 5: MPLS IP-VPN PE Combined with IP-VRF .................. 12 Figure 6: IP-VPN VRF-Lite Interactions ......................
  • Page 7: Document Updates

    Italic text in a Courier New font indicates text the user must enter or select in a menu item, button or command: ERS8600:5# show config Output examples from Avaya devices are displayed in a Lucida Console font: ERS8600:5# show config Preparing to Display Configuration...
  • Page 8: Overview: Vrf-Lite

    Figure 1: VRF-Lite Overview VRF-light provides multiple independent IPv4 routing and forwarding instances within the Ethernet Routing Switch 8600/8800. In addition to the global routing table (VRF0), up to 255 virtual route forwarding (VRF) instances are supported. Each VRF-Lite instance supports the following features: ...
  • Page 9 IP-VPN‟s can be connected together in several ways across a core network using any of the following methods:  Multiple VRF instances are used between ERS 8600/8800 switches as shown in figure 2, 3, and 4 below showing VRF support between switches, VRRP, RSMLT, and SMLT support...
  • Page 10  All VRFs that share the same I-SID can participate in the same VSN Please refer to Technical Configuration Guide titled “ Shortest Path Bridging (802.1aq) for ERS 8600 / 8800 Technical Configuration Guide” for more details  Multicast Multicast virtualization for VRF-Lite is supported and shown in figure 8 below in addition...
  • Page 11: Figure 2: Ip-Vpn Vrf Between Switches

    Figure 2: IP-VPN VRF between Switches Figure 3: VRRP and VRF in SMLT topology VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide April 2011...
  • Page 12: Figure 4: Router Redundacy For Multiple Routing Instances (Rsmlt)

    Figure 4: Router Redundacy for multiple routing instances (RSMLT) Figure 5: MPLS IP-VPN PE Combined with IP-VRF VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide April 2011...
  • Page 13: Figure 6: Ip-Vpn Vrf-Lite Interactions

    VLAN IP VPN-Lite VLAN SMLT/RSMLT/VRRP/ SMLT/RSMLT/VRRP/ RIP/OSPF/Static DHCP relay DHCP relay VRF-Lite (CE) VRF-Lite (CE) Figure 6: IP-VPN VRF-Lite Interactions Figure 7: SPBM L3 VSN VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide April 2011...
  • Page 14: Figure 8: Internal Multicast Virtualization For Vrf-Lite

    Figure 8: Internal Multicast Virtualization for VRF-Lite VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide April 2011...
  • Page 15: Figure 9: Mvr For Vrf-Lite

    Figure 9: MVR for VRF-Lite VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide April 2011...
  • Page 16: Base Scenario

    If using software level 7.1 or higher, after loggin in via the global user credentials, you can select the VRF context available via the left navigation plane VRF Context view c. Please see section titled EDM: VRF-Lite http Access for ERS 8800 software release 7.x for more details 7.
  • Page 17: Basic Vrf-Lite Configuration Steps

    CLI, JDM (5.x), and EDM (≥7.0) . 2.3.1 Initial VRF Configuration 2.3.1.1 Logon to the ERS 8600/8800 switch using ether CLI, Java Device Manger (5.x), or EDM (7.0 or higher) You can use either CLI, JDM, or EDM to configure the ERS 8600/8800 for VRF-Light.
  • Page 18 JDM (release 5.x) Step 1 – Create VRF instance. To to IP -> VRF -> Insert and select the routing protocol(s) and maximum routes (optional) EDM (release ≥ 7.0) Step 1 – Create VRF instance. To to IP -> VRF -> Insert and select the routing...
  • Page 19 2.3.1.3 Create VLANs  Create VLAN(s) and add port members  Once you have create the VLAN(s), you can add the VRF instance to the corresponding VLAN CLI Step 1 – Assign VRF instance to VLAN ERS8000-1:5# config vlan <1..4094> vrf <vrf name>...
  • Page 20 EDM (release ≥ 7.0) Step 1 – Create VRF instance. After you have created the VLAN(s), via Configuration ->VLAN -> VLANs -> Basic (go to the corresponding VLAN id, click on Vrfid and enter the VRF ID you wish to use for this VLAN 2.3.2 VRF Context –...
  • Page 21 Java Device Manager (JDM), go to IP -> VRF, select the VRF instance, and then click on Set Current VRF as shown below. From now on, only the fields pertaining to this VRF will be displayed. ERS8600/8800 – VRF instance selection using Super User VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide...
  • Page 22 EDM - Using EDM for software release 7.0 ERS8600/8800 – Via the main EDM login page, after entering the WEB server global user name and password, enter the VRF context name you wish to work on via the VRF Name: window...
  • Page 23 EDM – Using EDM for software release ≥ 7.1 2.3.3.2 ERS8600/8800 – Go to Configuration -> Set VRF Context view -> select VRF to switch context to - > Launch VRF Context view A new tab will be opened in...
  • Page 24 2.3.4 VRF Configuration – Adding IP Related Parameters 2.3.4.1 If using SNMP only via JDM (release 5.x), either select VRF instance via Super User or log-in via a valid VRF user for the corresponding VRF instance At this point, you can need to select the VRF instance where you wish to configure the IP related parameters.
  • Page 25 2.3.4.2 Add IP Address and Routing Protocol CLI Step 1 –Add IP address to VRF VLAN ERS8000-1:5# config vlan <1..4094> ip create <ipaddr/mask> ERS8000-1:5# config vlan <1..4094> ip <ospf|rip> enable ACLI ERS8000-1:5(config)# interface vlan <1..4094> ERS8000-1:5(config-if)# ip address <ipaddr> <mask>...
  • Page 26 EDM (release ≥ 7.0) Step 1 – Go to Configuration -> VLAN -> VLANs -> (click on corresponding VLAN id. Click on the IP icon and and via the IP Address tab, click on Insert and add IP address and mask.
  • Page 27: Vrf-Lite Configuration Example

    3. VRF-Lite Configuration Example Figure 10: VF-Lite Configuration Example For this configuration example, two IP-VRF instances will be added, VRF1 using a name of vrfone and VRF2 using a name of vrftwo. RSMLT will be enabled on both VRF instances along with the SLT ID, IP address and IGP protocols as shown in figure 5 above.
  • Page 28: Configuration - Adding Vrf Instance

    3.1 Configuration – Adding VRF Instance For this configuration example, we will configure ERS8000-1 using ACLI and ERS8000-2 using CLI. 3.1.1 Optional SNMP Configuration – Software release 5.x Only complete this section if ERS8000-1 and 8600-2 have software level 5.x and only if you wish to use JDM to limit access to a specific VRF instance.
  • Page 29 ERS8000-1 Step 3 – Add SNMP-v3 VRF1 user. For this example, we will add user ‘vrfone’ to USM group named ‘vrf1_group’ and context name vrf1 ERS8000-1:5(config)# snmp-server user vrfone md5 vrf1user aes vrf1priv ERS8000-1:5(config)# snmp-server user vrf1user group vrf1_group...
  • Page 30 3.1.2 IST Configuration 3.1.2.1 Create IST ERS8000-1: Step 1 – Create VLAN 1900 ERS8000-1:5(config)# vlan create 1900 name IST type port 1 ERS8000-2: Step 1 – Create VLAN 1900 ERS8000-2:5# config vlan 1900 create byport 1 name IST ERS8000-1: Step 2 – Create MLT 1 for IST...
  • Page 31 ERS8000-2: Step 3 – Enable VLACP ERS8000-2:5# ethernet 1/1,2/1 vlacp macaddress 01:80:c2:00:00:0f ERS8000-2:5# ethernet 1/1,2/1 vlacp enable ERS8000-2:5# config vlacp enable 3.1.3 VRF Instances – Initial Configuration 3.1.3.1 Create VRF Instances ERS8000-1 Step 1 – Create VRF instances 1 and 2. Set maximum routes for VRF 1 to 1000 and maximum route to 500 for VRF 2.
  • Page 32 3.1.3.2 Create VLANs for VRF ERS8000-1 Step 1 – Create VLAN 601 for vrf1 and VLAN 700 for vrf2 ERS8000-1:5(config)# vlan create 601 name vrf1_two type port 1 ERS8000-1:5(config)# vlan members add 601 4/26 ERS8000-1:5(config)# interface vlan 601 ERS8000-1:5(config-if)# vrf vrfone...
  • Page 33 ERS8000-1 Step 2 – Enable OSPF globally for VRF 1 ERS8000-1:5(config)# router vrf vrfone ERS8000-1:5(router-vrf)# ip ospf admin-state ERS8000-1:5(router-vrf)# exit ERS8000-2 Step 1 – Logon using JDM using the password credentials created above for vrf1 If Super User, via JDM go to IP -> VRF -> VRF and select VRF 1...
  • Page 34 ERS8000-2 Step 2 – Once logged on, you should only see the VLAN and VLAN port members activated for vrf1.  Please notice, as shown in the above Java Device Manager (JDM) snap-shot, only the VLAN and VLAN members as configured by the Super User are visible.
  • Page 35 ERS8000-2 Step 4 – Enable OSPF globally for VRF 1. Via JDM, go to IP -> OSPF – vrfone (vrf 1) -> General VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide April 2011...
  • Page 36 3.1.5 VRF2 Configuration 3.1.5.1 Add IP Address, Routing Protocol, and enable RSMLT for VRF 2 For the rest of this example, we will configure ERS8000-1 using CLI and configure ERS8000-2 using JDM. For ERS8000-2, proceed to the following steps using JDM.
  • Page 37 ERS8000-2 Step 1 – Logon using JDM using the password credentials created above for vrf2 If Super User, via JDM go to IP -> VRF -> VRF and select VRF 1 Via VRF 2 user, enter the correct SNMP-v3 credentials...
  • Page 38 ERS8000-1 Step 2 – Add IP address for VLAN 700. Via JDM, go to VLAN -> VLANs -> Id 700 -> IP -> Insert and then go to the RIP tab and enable RIP VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide...
  • Page 39 ERS8000-1 Step 2 – Enable RIP. Via JDM, go to VLAN -> VLANs -> Id 700 -> IP -> RIP and enable VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide April 2011...
  • Page 40: Verification

    3.2 Verification  With using the show command to view various VRF parameters, you can ether use the VRF name or VRF ID. 3.2.1 VRF: 3.2.1.1 Verify VRF IP information: Interfaces, Routes and ARP Entries Step 1 –Verify the IP addresses using CLI, i.e. for VRF 1...
  • Page 41 Step 2 –Verify the IP ARP table using CLI, i.e. for VRF 1 ERS8000-1:5# show ip arp vrf vrfone ERS8000-1:5# show ip arp vrfids 1 Result: ===================================================================== IP Arp - VRF vrfone ===================================================================== IP_ADDRESS MAC_ADDRESS VLAN PORT TYPE TTL(10 Sec) --------------------------------------------------------------------- 10.1.10.1...
  • Page 42 Step 3 –Verify the IP route table using CLI, i.e. for VRF 1 ERS8000-1:5# show ip route vrf vrfone ERS8000-1:5# show ip route vrfids 1 Result: ================================================================================ IP Route - VRF vrfone ================================================================================ INTER MASK NEXT COST FACE PROT AGE TYPE PRF -------------------------------------------------------------------------------- 10.1.10.0...
  • Page 43 Step 3 – Verify the IP route table using JDM, i.e. assuming Super User for VRF 1, Go to: 1. IP -> VRF -> Id 1 (vrfone) -> Set Currect VRF 2. IP -> IP – vrfone (vrf 1) -> Routes...
  • Page 44 3.2.2 SNMP: 3.2.2.1 Verify SNMP Users Step 1 –Verify the SNMP-v3 users ERS8000-1:5# show snmp-server user Result: Engine ID = 80:00:08:E0:03:00:01:81:28:84:00 ================================================================================ USM Configuration ================================================================================ User/Security Name Engine Id Protocol -------------------------------------------------------------------------------- vrfone 0x80:00:08:E0:03:00:01:81:28:84:00 HMAC_MD5, PRIVACY, vrftwo 0x80:00:08:E0:03:00:01:81:28:84:00 HMAC_MD5, PRIVACY,...
  • Page 45 3.2.2.2 Verify SNMP Group Member and Group Access Step 1 –Verify the SNMP-v3 group-member ERS8000-1:5# show snmp-server group Result: ================================================================== VACM Group Membership Configuration ================================================================== Sec Model Security Name Group Name ------------------------------------------------------------------ snmpv1 readview readgrp snmpv1 sBladeUser sBladeGrp snmpv1...
  • Page 46 Step 2 –Verify the SNMP-v3 group access ERS8000-1:5# show snmp-server group Result: ================================================================================ VACM Group Access Configuration ================================================================================ Group Prefix Model Level ReadV WriteV NotifyV -------------------------------------------------------------------------------- vrf1_group vrf1 authPriv vrf2_group vrf2 authPriv Step 2 – Verify the SNMP-v3 users using JDM via Super User: Go to: 1.
  • Page 47: Routing Between Vrf's

     Only re-distribute network 172.1.25.0/24 from VRF2 to VRF1  Only re-distribute network 192.33.34.0/24 from VRF1 to VRF2 4.1.1 ERS 8600/8800 Configuration 4.1.1.1 Enable ASBR In order to re-distribute static routes, you must enable OSPF ASBR on vrf 1. ERS8000-1 Step 1 – Enable OSPF ASBR for vrf 1...
  • Page 48 ERS8000-1 Step 2 – Create Static route for vrf 2 ERS8000-1:5(config)# router vrf vrftwo ERS8000-1:5(router-vrf)# ip route 192.33.34.0 255.255.255.0 10.1.11.3 weight 1 next- hop-vrf vrfone ERS8000-1:5(router-vrf)# exit ERS8000-2 Step 2 – Create Static route for vrf 2 ERS8000-2:5# config ip vrf vrftwo static-route create 192.33.34.0/24 next-hop 10.1.11.3 cost 1 next-hop-vrf vrfone...
  • Page 49 ERS8000-1 Step 2 – For vrf 2, enable RIP re-distribution of static routes from VRF source of vrf 1 ERS8000-1:5(config)# router vrf vrftwo ERS8000-1:5(router-vrf)# ip rip redistribute static vrf-src vrfone ERS8000-1:5(router-vrf)# ip rip redistribute static enable vrf-src vrfone ERS8000-1:5(router-vrf)# ip rip redistribute direct vrf-src vrfone...
  • Page 50 4.1.2 Verification 4.1.2.1 Verify Static Routes Step 1 –Verify the OSPF route redistribution configuration ERS8000-1:5# show ip route static vrf vrfone ERS8000-1:5# show ip route static vrfids 1 Result: ================================================================================ IP Static Route - VRF vrfone ================================================================================ DEST MASK...
  • Page 51 4.1.2.3 Verify Route table Step 1 –Verify the OSPF route redistribution configuration ERS8000-1:5# show ip route vrf vrfone ERS8000-1:5# show ip route vrfids 1 Result: ================================================================================ IP Route - VRF vrfone ================================================================================ INTER MASK NEXT COST FACE PROT AGE TYPE PRF -------------------------------------------------------------------------------- 10.1.11.0...
  • Page 52: Software Baseline

    5. Software Baseline: Software level used for this guide is based on 5.x or higher. 6. Reference Documentation: Document Title Publication Number Description IP VPN-Lite for Ethernet NN48500-562 Routing Switch 8600 Technical Configuration Guide Configuration – IP VPN NN46205-520...
  • Page 53: Customer Service

    7. Customer service Visit the Avaya Web site to access the complete range of services and support that Avaya provides. Go www.avaya.com or go to one of the pages listed in the following sections. 7.1 Getting technical documentation To download and print selected technical publications and release notes directly from the Internet,go to www.avaya.com/support.

This manual is also suitable for:

8600

Table of Contents