H3C S7500E Series Manual
Hide thumbs Also See for S7500E Series:

Advertisement

Quick Links

H3C S7500E Switch Series
Comware 7 EVI Configuration Guide
New H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: Release 7568
Document version: 6W101-20180802

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the S7500E Series and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for H3C S7500E Series

  • Page 1 H3C S7500E Switch Series Comware 7 EVI Configuration Guide New H3C Technologies Co., Ltd. http://www.h3c.com Software version: Release 7568 Document version: 6W101-20180802...
  • Page 2 The information in this document is subject to change without notice. All contents in this document, including statements, information, and recommendations, are believed to be accurate, but they are presented without warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions contained herein.
  • Page 3 Preface This configuration guide describes EVI fundamentals and configuration. It describes how to use MAC-in-IP technology Ethernet Virtual Interconnect (EVI) to provide Layer 2 connectivity between distant Layer 2 network sites across an IP routed network. EVI enables dynamic allocation and management of resources and transparent migration of virtual machines between network sites.
  • Page 4 Convention Description Multi-level menus are separated by angle brackets. For example, File > Create > > Folder. Symbols Convention Description An alert that calls attention to important information that if not understood or followed WARNING! can result in personal injury. An alert that calls attention to important information that if not understood or followed CAUTION: can result in data loss, data corruption, or damage to hardware or software.
  • Page 5 It is normal that the port numbers, sample output, screenshots, and other information in the examples differ from what you have on your device. Documentation feedback You can e-mail your comments about product documentation to info@h3c.com. We appreciate your comments.
  • Page 6: Table Of Contents

    Contents Configuring EVI ··············································································· 1     Overview ·································································································································· 1   Layer 2 connectivity extension issues ······················································································ 1   Network topologies ·············································································································· 2   Terminology ······················································································································· 3   Working mechanism ············································································································ 3   Placement of Layer 3 gateways ······························································································ 6  ...
  • Page 7: Configuring Evi

    Configuring EVI Overview Ethernet Virtual Interconnect (EVI) is a MAC-in-IP technology that provides Layer 2 connectivity between distant Layer 2 network sites across an IP routed network. It is used for connecting geographically dispersed sites of a virtualized large-scale data center that requires Layer 2 adjacency (see Figure EVI enables long-distance virtual machine workload mobility and data mobility, disaster recovery,...
  • Page 8: Network Topologies

    Network topologies As shown in Figure 2, an EVI network has one edge device at each site. These sites are connected through virtual links and run the EVI IS-IS protocol to advertise their MAC address entries to each other. EVI maintains MAC routing information on the edge devices without changing the forwarding or routing information within the sites or the transport network.
  • Page 9: Terminology

    Terminology Edge device An edge device performs typical Layer 2 learning and forwarding on the site-facing interfaces (internal interfaces) and performs tunneling and routing on the transport-facing interfaces. EVI network ID An edge device can belong to multiple EVI networks. Each EVI network is uniquely identified by a network ID.
  • Page 10 Forwards traffic based on MAC reachability information that has been received from other sites. This section describes this process in detail. Neighbor discovery An EVI network runs ENDP to discover all its edge devices and establishes adjacencies among the edge devices in the following process: ENDS is enabled on one edge device, and ENDC is enabled on all other edge devices.
  • Page 11 Figure 4 Layer 2 forwarding in a site Transport network MAC table VLAN Interface MAC1 GE1/0/1 MAC2 GE1/0/2 GE1/0/1 GE1/0/2 Host A Host B MAC1 MAC2 Site 1 Site 2 The following forwarding process (see Figure 5) takes place for unicast flows between sites: The source edge device learns the source MAC address of the incoming Ethernet frame, and looks up the destination MAC address in its MAC table for the outgoing interface.
  • Page 12: Placement Of Layer 3 Gateways

    Figure 5 Layer 2 forwarding between sites Multicast flow The EVI implementation of the device does not support multicast forwarding between sites based on the multicast forwarding table. By default, the device does not forward multicast traffic to remote sites. To forward traffic destined for a multicast MAC address to remote sites, you must enable selective flooding for the address.
  • Page 13: Arp Flood Suppression

    ARP flood suppression ARP flood suppression reduces ARP request broadcasts on the EVI network by enabling edge devices to reply to ARP requests on behalf of remote-site hosts. As shown in Figure 6, this feature snoops ARP packets on an EVI tunnel interface to populate the ARP flood suppression table with remote MAC addresses.
  • Page 14: Path Mtu

    For example, you must configure selective flooding for PIM hellos, IGMP general query packets, and Microsoft NLBS cluster traffic to be sent out of an EVI tunnel interface. Path MTU When encapsulating an Ethernet frame in EVI, the edge device does not modify the Ethernet frame, but it sets the DF bit in the IP header.
  • Page 15: Configuring Evi Basic Features

    Tasks at a glance Remarks Configuring EVI basic features: • (Optional.) Configuring a site ID • An EVI tunnel can provide services (Required.) Configuring an EVI tunnel: for only one EVI network. (Required.) Assigning a network ID to the EVI tunnel An extended VLAN can be (Required.) Specifying extended VLANs on the EVI tunnel...
  • Page 16: Configuring An Evi Tunnel

    Configuring an EVI tunnel Step Command Remarks Enter system view. system-view By default, no tunnel interface exists. Create an EVI The endpoints of a tunnel must use the same tunnel tunnel interface and interface tunnel mode. enter tunnel number mode evi For more information about this command, see interface view.
  • Page 17: Assigning A Network Id To The Evi Tunnel

    Assigning a network ID to the EVI tunnel Assign the same network ID to the EVI tunnels of all edge devices in an EVI network. On an edge device, the network ID assigned to an EVI tunnel must be unique. To assign a network ID to an EVI tunnel: Step Command...
  • Page 18: Enabling Evi On Transport-Facing Physical Interfaces

    • To improve security, enable ENDP authentication. Make sure all authentication-enabled ENDCs and ENDSs in an EVI network use the same authentication key. Configuring the edge device as an ENDS on the EVI tunnel Step Command Remarks Enter system view. system-view Enter EVI tunnel interface tunnel number...
  • Page 19: Tuning Evi Is-Is Parameters

    Step Command Remarks interface view or Layer 3 interface-number Ethernet interface view. By default, EVI is disabled on all Enable EVI on the interface. evi enable interfaces. Tuning EVI IS-IS parameters EVI IS-IS automatically runs on an EVI link immediately after the link is set up. You can tune EVI IS-IS parameters to optimize the protocol performance.
  • Page 20: Optimizing An Evi Is-Is Network

    The ID of an automatically created process is the same as the EVI tunnel interface number. Alternatively, you can use the evi-isis command to create an EVI IS-IS process manually. To delete a manually created EVI IS-IS process, you must use the undo evi-isis command. •...
  • Page 21 Configuring the hello multiplier for calculating the adjacency hold time Adjacency hold time is the amount of time that the remote edge devices can retain the adjacency with the local edge device before an adjacency update. • If Graceful Restart is disabled, the adjacency hold time equals the EVI IS-IS hello interval multiplied by the hello multiplier.
  • Page 22 Step Command Remarks evi ] Configure the CSNP transmit By default, a DED sends CSNP evi isis timer csnp seconds interval. packets every 10 seconds. Configuring the minimum LSP transmit interval and the maximum number of LSPs sent at each interval The edge device generates an LSP update when any LSDB content changes.
  • Page 23: Specifying A Routing Policy For An Evi Is-Is Process

    Step Command Remarks The minimum LSP transmit interval and the maximum number of LSPs sent at each interval can affect the actual LSP refresh interval. To avoid unnecessary age-outs, appropriately set the LSP refresh interval and the LSP lifetime. Associating an EVI tunnel interface with a track entry EVI IS-IS uses a hello mechanism to monitor the connectivity of each EVI link on an EVI tunnel.
  • Page 24: Enabling Adjacency Change Logging

    • VLAN list. For more information about configuring routing policies, see Layer 3—IP Routing Configuration Guide. To specify a routing policy for an EVI IS-IS process: Step Command Remarks Enter system view. system-view Enter EVI IS-IS process view. evi-isis process-id By default, an EVI IS-IS process is Specify a routing policy for filter-policy policy-name...
  • Page 25: Configuring Graceful Restart For An Evi Is-Is Process

    Step Command Remarks id-length-mismatch | link-disconnect | lsp-parse-error | lsp-size-exceeded | max-seq-exceeded | maxarea-mismatch | new-ded | own-lsp-purge | protocol-support | rejected-adjacency | skip-sequence-number | topology-change | version-skew ] * Enter EVI IS-IS process evi-isis process-id view. Configure an SNMP By default, no SNMP context context name for the EVI snmp context-name context-name...
  • Page 26: Enabling Evi Arp Flood Suppression

    Step Command Remarks Enter system view. system-view Enter EVI IS-IS evi-isis process-id process view. By default, no EVI IS-IS virtual systems exist. Create an EVI IS-IS IMPORTANT: virtual-system systemid virtual system. The virtual system ID must be unique in the EVI network.
  • Page 27: Enabling Selective Flooding For A Mac Address

    Step Command Remarks Enter system view. system-view Enter EVI tunnel interface interface tunnel number [ mode view. evi ] By default, EVI flooding is Enable EVI flooding. evi flooding enable disabled. Enabling selective flooding for a MAC address CAUTION: Do not configure selective flooding for local unicast MAC addresses. The setting might cause remote devices to drop packets destined for the MAC address.
  • Page 28 Task Command for an EVI tunnel. Display information about EVI-Link display interface [ evi-link [ interface-number ] ] [ brief interfaces. [ description | down ] ] Display brief EVI IS-IS process display evi isis brief [ process-id ] information. display evi isis local-mac { dynamic | static } [ interface tunnel interface-number [ vlan vlan-id ] [ filtered | passed ] [ count ] ]...
  • Page 29: Evi Configuration Examples

    EVI configuration examples Single-homed EVI network configuration example Network requirements As shown in Figure • Use EVI to extend VLANs 21 through 100 across site 1, site 2, and site 3 over an IPv4 network. • Use network ID 1 to identify the EVI network. •...
  • Page 30 [SwitchA-Tunnel1] evi network-id 1 # Specify the IP address of VLAN-interface 10 as the source IP of the EVI tunnel. [SwitchA-Tunnel1] source 1.1.1.1 # Set the tunnel keepalive interval to 20 seconds and the maximum number of transmissions to [SwitchA-Tunnel1] keepalive 20 2 # Specify extended VLANs on the EVI tunnel interface.
  • Page 31 [SwitchB-Tunnel1] evi neighbor-discovery client enable 1.1.1.1 [SwitchB-Tunnel1] quit # Enable EVI on GigabitEthernet 1/0/1. [SwitchB] interface gigabitethernet 1/0/1 [SwitchB-GigabitEthernet1/0/1] evi enable [SwitchB-GigabitEthernet1/0/1] quit Configure Switch C: # Configure the site ID. <SwitchC> system-view [SwitchC] evi site-id 3 # Configure the EVI tunnel source interface (VLAN-interface 10 in this example), and assign transport-facing physical interface GigabitEthernet 1/0/1 to the VLAN.
  • Page 32 Tunnel source 1.1.1.1 Tunnel keepalive enabled, Period(20 s), Retries(2) Network ID 1 Tunnel protocol/transport GRE_EVI/IP Output queue - Urgent queuing: Size/Length/Discards 0/100/0 Output queue - Protocol queuing: Size/Length/Discards 0/500/0 Output queue - FIFO queuing: Size/Length/Discards 0/75/0 Last clearing of counters: Never Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Input: 0 packets, 0 bytes, 0 drops...
  • Page 33 MAC address: 0001-0100-0002 (Filtered) MAC address: 0001-0100-0003 (Filtered) # Verify that Switch A has remote MAC addresses in VLAN 100. [SwitchA] display evi isis remote-mac Process ID: 0 Tunnel interface: Tunnel1 VLAN ID: 100 MAC address: 0002-0100-0001 Interface: EVI-Link0 Flags: 0x2 MAC address: 0002-0100-0002 Interface: EVI-Link0 Flags: 0x2...
  • Page 34 # Display neighbor entries that Switch B has learned. [SwitchB] display evi neighbor-discovery client member Interface: Tunnel1 Network ID: 1 Vpn-instance: [No Vrf] Local Address: 1.1.3.1 Server Address: 1.1.1.1 Neighbor System ID Created Time Expire Status 1.1.1.1 000F-0001-0001 2013/01/01 12:12:12 1.1.3.1 000F-0001-0003 2013/01/01 12:12:12...
  • Page 35: Multiple-Evi-Networks Configuration Example

    Interface Local Address Server Address Network ID Reg Auth Status Vpn-instance Tunnel1 1.1.3.1 1.1.1.1 disabled [No Vrf] # Display neighbor entries that Switch C has learned. [SwitchC] display evi neighbor-discovery client member Interface: Tunnel1 Network ID: 1 Vpn-instance: [No Vrf] Local Address: 1.1.3.1 Server Address: 1.1.1.1 Neighbor...
  • Page 36 Figure 8 Network diagram Site 2 GE1/0/1 Vlan-int10 172.16.2.1/24 Tunnel102 Tunnel101 Site 1 Tunnel102 EVI 1 Site 3 VLANs 100-101 Tunnel101 GE1/0/1 EVI 2 Vlan-int10 Tunnel103 VLAN 4000 172.16.1.1/24 GE1/0/1 Tunnel102 EVI 3 Vlan-int10 VLANs 50-80 172.16.3.1/24 Tunnel102 Tunnel101 Tunnel102 Tunnel103 GE1/0/1 GE1/0/1...
  • Page 37 [Site4] interface tunnel 103 mode evi [Site4-Tunnel103] source 172.16.4.1 [Site4-Tunnel103] evi network-id 3 [Site4-Tunnel103] evi extend-vlan 50 to 80 [Site4-Tunnel103] evi neighbor-discovery server enable [Site4-Tunnel103] quit # Enable EVI on GigabitEthernet 1/0/1. [Site4] interface gigabitethernet 1/0/1 [Site4-GigabitEthernet1/0/1] evi enable [Site4-GigabitEthernet1/0/1] quit Configure site 1: # Configure the site ID.
  • Page 38 Client Address System ID Expire Created Time 172.16.2.1 000F-0001-0002 2013/01/01 00:00:43 172.16.3.1 000F-0001-0003 2013/01/01 01:00:46 172.16.4.1 000F-0001-0004 2013/01/01 01:02:13 Interface: Tunnel102 Network ID: 2 Vpn-instance: [No Vrf] IP Address: 172.16.4.1 Client Address System ID Expire Created Time 172.16.1.1 000F-0001-0001 2013/01/01 00:19:31 172.16.2.1 000F-0001-0002 2013/01/01 00:00:43...
  • Page 39: Index

    Index EVI IS-IS LSP transmit interval, EVI IS-IS LSPs transmit max, adjacency EVI IS-IS process GR, EVI configuration, EVI IS-IS process LSP MAC entries max, EVI IS-IS adjacency change logging, EVI IS-IS SNMP context, EVI IS-IS hello multiplier for calculating EVI IS-IS SNMP notifications, adjacency hold time, EVI site ID,...
  • Page 40 EVI IS-IS LSP refresh interval, DED, EVI IS-IS process routing policy, display, EVI link, edge device, EVI neighbor, ENDC, EVI path MTU, ENDP, EVI selective flooding, ENDP configuration, EVI site ID configuration, ENDS, EVI tunnel edge device as ENDC, feature compatibility restrictions, EVI tunnel edge device as ENDS, flooding enable (destination-unknown frames), enabling...
  • Page 41 transport-facing physical interface enable, EVI multicast flow, tunnel, internal tunnel configuration, EVI internal interface, tunnel edge device as ENDC, interval tunnel edge device as ENDS, EVI IS-IS CSNP transmit interval, tunnel extended VLAN, EVI IS-IS hello interval, tunnel interface+Track entry association, EVI IS-IS LSP refresh interval, tunnel network ID assignment, IP routing...
  • Page 42 EVI MAC address learning, EVI ENDC, licensing EVI ENDP, EVI requirements, EVI ENDS, link EVI MAC address learning, EVI, network logging EVI ARP flood suppression, 7, 20 EVI IS-IS adjacency change logging, EVI basic configuration, LSDB EVI configuration (single-homed network), EVI DED, EVI DED, EVI IS-IS CSNP transmit interval,...
  • Page 43 EVI tunnel edge device as ENDS, configuring EVI IS-IS LSPs transmit max, EVI tunnel extended VLAN, configuring EVI IS-IS process GR, EVI tunnel interface+Track entry configuring EVI IS-IS process LSP MAC entries association, 17, 17 max, EVI tunnel network ID assignment, configuring EVI IS-IS SNMP context, EVI unicast flow, configuring EVI IS-IS SNMP notifications,...
  • Page 44 EVI IS-IS LSP lifetime max, EVI IS-IS LSP refresh interval, EVI IS-IS LSP transmit interval, EVI IS-IS LSPs transmit max, topology EVI configuration (multiple-EVI-networks), EVI configuration (single-homed network), EVI networks, EVI tunnel, Track EVI tunnel interface+Track entry association, trapping EVI IS-IS SNMP notification, tuning EVI IS-IS parameters, tunneling...

Table of Contents