实践EVPN-VXLAN over MPLS L3VPN

CE1-EVPN-RR:gobgp充当vxlan overlay网的EVPN路由反射器

VMX-PE1,VMX-PE2,VMX-PE3充当MPLS骨干

VQFX-RE-CE2和VQFX-RE-CE3充当VTEP节点

VMX-PE1的配置

set version 14.1R4.8

set system host-name PE1

set system root-authentication encrypted-password "$1$UE.2fi.U$/povrlX3IQtZQNxUoH3zf1"

set interfaces ge-0/0/1 unit 0 family inet address 192.168.1.254/24

set interfaces ge-0/0/2 unit 0 family inet address 12.12.12.1/24

set interfaces ge-0/0/2 unit 0 family mpls

set interfaces ge-0/0/3 unit 0 family inet address 13.13.13.1/24

set interfaces ge-0/0/3 unit 0 family mpls

set interfaces lo0 unit 0 family inet address 1.1.1.1/32

set routing-options router-id 1.1.1.1

set routing-options autonomous-system 64512

set protocols mpls interface ge-0/0/2.0

set protocols mpls interface ge-0/0/3.0

set protocols bgp group PE-PE type internal

set protocols bgp group PE-PE local-address 1.1.1.1

set protocols bgp group PE-PE family inet-vpn unicast

set protocols bgp group PE-PE neighbor 2.2.2.2

set protocols bgp group PE-PE neighbor 3.3.3.3

set protocols ospf area 0.0.0.0 interface ge-0/0/2.0

set protocols ospf area 0.0.0.0 interface ge-0/0/3.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ldp interface ge-0/0/2.0

set protocols ldp interface ge-0/0/3.0

set routing-instances VRF instance-type vrf

set routing-instances VRF interface ge-0/0/1.0

set routing-instances VRF route-distinguisher 1.1.1.1:1

set routing-instances VRF vrf-target target:64512:1

set routing-instances VRF protocols bgp group PE-CE type external

set routing-instances VRF protocols bgp group PE-CE local-address 192.168.1.254

set routing-instances VRF protocols bgp group PE-CE neighbor 192.168.1.1 peer-as 65001


VMX-PE2的配置

set version 14.1R4.8

set system host-name PE2

set system root-authentication encrypted-password "$1$LKKUx3fj$DIltr23hxUShkxoghtYoV0"

set interfaces ge-0/0/0 unit 0 family inet address 23.23.23.2/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/2 unit 0 family inet address 12.12.12.2/24

set interfaces ge-0/0/2 unit 0 family mpls

set interfaces ge-0/0/3 unit 0 family inet address 192.168.2.254/24

set interfaces lo0 unit 0 family inet address 2.2.2.2/32

set routing-options router-id 2.2.2.2

set routing-options autonomous-system 64512

set protocols mpls interface ge-0/0/0.0

set protocols mpls interface ge-0/0/2.0

set protocols bgp group PE-PE type internal

set protocols bgp group PE-PE local-address 2.2.2.2

set protocols bgp group PE-PE family inet-vpn unicast

set protocols bgp group PE-PE neighbor 1.1.1.1

set protocols bgp group PE-PE neighbor 3.3.3.3

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

set protocols ospf area 0.0.0.0 interface ge-0/0/2.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ldp interface ge-0/0/0.0

set protocols ldp interface ge-0/0/2.0

set routing-instances VRF instance-type vrf

set routing-instances VRF interface ge-0/0/3.0

set routing-instances VRF route-distinguisher 2.2.2.2:1

set routing-instances VRF vrf-target target:64512:1

set routing-instances VRF protocols bgp group PE-CE type external

set routing-instances VRF protocols bgp group PE-CE local-address 192.168.2.254

set routing-instances VRF protocols bgp group PE-CE neighbor 192.168.2.1 peer-as 65002


VMX-PE3的配置

set version 14.1R4.8

set system host-name PE3

set system root-authentication encrypted-password "$1$EGgnDiro$WwLuBYMuwFUWDHoJvFXrl/"

set interfaces ge-0/0/0 unit 0 family inet address 23.23.23.3/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/1 unit 0 family inet address 192.168.3.254/24

set interfaces ge-0/0/3 unit 0 family inet address 13.13.13.3/24

set interfaces ge-0/0/3 unit 0 family mpls

set interfaces lo0 unit 0 family inet address 3.3.3.3/32

set routing-options router-id 3.3.3.3

set routing-options autonomous-system 64512

set protocols mpls interface ge-0/0/0.0

set protocols mpls interface ge-0/0/3.0

set protocols bgp group PE-PE type internal

set protocols bgp group PE-PE local-address 3.3.3.3

set protocols bgp group PE-PE family inet-vpn unicast

set protocols bgp group PE-PE neighbor 1.1.1.1

set protocols bgp group PE-PE neighbor 2.2.2.2

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

set protocols ospf area 0.0.0.0 interface ge-0/0/3.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ldp interface ge-0/0/0.0

set protocols ldp interface ge-0/0/3.0

set routing-instances VRF instance-type vrf

set routing-instances VRF interface ge-0/0/1.0

set routing-instances VRF route-distinguisher 3.3.3.3:1

set routing-instances VRF vrf-target target:64512:1

set routing-instances VRF protocols bgp group PE-CE type external

set routing-instances VRF protocols bgp group PE-CE local-address 192.168.3.254

set routing-instances VRF protocols bgp group PE-CE neighbor 192.168.3.1 peer-as 65003


VQFX-RE-CE2的配置

set version 15.1X53-D63.9

set system host-name VQFX-RE-CE2

set system root-authentication encrypted-password "$1$QrPRwg3K$9RYSpnMY8K/7E3AplgzE8/"

set system services ssh root-login allow

set interfaces xe-0/0/0 unit 0 family inet address 192.168.2.1/24

set interfaces xe-0/0/1 description DEV=TOR-SW

set interfaces xe-0/0/1 unit 0 family ethernet-switching interface-mode trunk

set interfaces xe-0/0/1 unit 0 family ethernet-switching vlan members all

set interfaces em0 unit 0 family inet dhcp

set interfaces em1 unit 0 family inet address 169.254.0.2/24

set interfaces lo0 unit 0 family inet address 22.22.22.22/32

set forwarding-options storm-control-profiles default all

set routing-options router-id 22.22.22.22

set routing-options autonomous-system 65002

set protocols bgp group CE-PE type external

set protocols bgp group CE-PE local-address 192.168.2.1

set protocols bgp group CE-PE export POLICY_EXPORT_LO0

set protocols bgp group CE-PE neighbor 192.168.2.254 peer-as 64512

set protocols bgp group overlay type internal

set protocols bgp group overlay local-address 22.22.22.22

set protocols bgp group overlay family evpn signaling

set protocols bgp group overlay local-as 65000

set protocols bgp group overlay neighbor 11.11.11.11

set protocols evpn encapsulation vxlan

set protocols evpn extended-vni-list 100

set protocols evpn multicast-mode ingress-replication

set protocols evpn vni-options vni 100 vrf-target export target:65000:100

set protocols igmp-snooping vlan default

set policy-options policy-statement POLICY_EXPORT_LO0 from family inet

set policy-options policy-statement POLICY_EXPORT_LO0 from protocol direct

set policy-options policy-statement POLICY_EXPORT_LO0 from route-filter 0.0.0.0/0 prefix-length-range /32-/32

set policy-options policy-statement POLICY_EXPORT_LO0 then accept

set policy-options policy-statement POLICY_VRF_IMPORT term T_100 from community COM_100

set policy-options policy-statement POLICY_VRF_IMPORT term T_100 then accept

set policy-options policy-statement POLICY_VRF_IMPORT term T_999 then reject

set policy-options community COM_100 members target:65000:100

set switch-options service-id 1

set switch-options vtep-source-interface lo0.0

set switch-options route-distinguisher 22.22.22.22:1

set switch-options vrf-import POLICY_VRF_IMPORT

set switch-options vrf-target target:65000:1

set switch-options vrf-target auto

set vlans default vlan-id 1

set vlans v100 vlan-id 100

set vlans v100 vxlan vni 100

set vlans v100 vxlan ingress-node-replication


VQFX-RE-CE3的配置

set version 15.1X53-D63.9

set system host-name VQFX-RE-CE3

set system root-authentication encrypted-password "$1$OnzdOoaM$3sCh1drLuHUZ0O3Il75h/."

set system services ssh root-login allow

set interfaces xe-0/0/0 unit 0 family inet address 192.168.3.1/24

set interfaces xe-0/0/1 description DEV=TOR-SW

set interfaces xe-0/0/1 unit 0 family ethernet-switching interface-mode trunk

set interfaces xe-0/0/1 unit 0 family ethernet-switching vlan members all

set interfaces em0 unit 0 family inet dhcp

set interfaces em1 unit 0 family inet address 169.254.0.2/24

set interfaces lo0 unit 0 family inet address 33.33.33.33/32

set forwarding-options storm-control-profiles default all

set routing-options router-id 33.33.33.33

set routing-options autonomous-system 65003

set protocols bgp group CE-PE type external

set protocols bgp group CE-PE local-address 192.168.3.1

set protocols bgp group CE-PE export POLICY_EXPORT_LO0

set protocols bgp group CE-PE neighbor 192.168.3.254 peer-as 64512

set protocols bgp group overlay type internal

set protocols bgp group overlay local-address 33.33.33.33

set protocols bgp group overlay family evpn signaling

set protocols bgp group overlay local-as 65000

set protocols bgp group overlay neighbor 11.11.11.11

set protocols evpn encapsulation vxlan

set protocols evpn extended-vni-list 100

set protocols evpn multicast-mode ingress-replication

set protocols evpn vni-options vni 100 vrf-target export target:65000:100

set protocols igmp-snooping vlan default

set policy-options policy-statement POLICY_EXPORT_LO0 from family inet

set policy-options policy-statement POLICY_EXPORT_LO0 from protocol direct

set policy-options policy-statement POLICY_EXPORT_LO0 from route-filter 0.0.0.0/0 prefix-length-range /32-/32

set policy-options policy-statement POLICY_EXPORT_LO0 then accept

set policy-options policy-statement POLICY_VRF_IMPORT term T_100 from community COM_100

set policy-options policy-statement POLICY_VRF_IMPORT term T_100 then accept

set policy-options policy-statement POLICY_VRF_IMPORT term T_999 then reject

set policy-options community COM_100 members target:65000:100

set switch-options service-id 1

set switch-options vtep-source-interface lo0.0

set switch-options route-distinguisher 33.33.33.33:1

set switch-options vrf-import POLICY_VRF_IMPORT

set switch-options vrf-target target:65000:1

set switch-options vrf-target auto

set vlans default vlan-id 1

set vlans v100 vlan-id 100

set vlans v100 vxlan vni 100

set vlans v100 vxlan ingress-node-replication


GOBGP CE1机器的设置

root@gobgp:~# cat /etc/gobgp/gobgpd.conf

[global]

[global.config]

as = 65000

router-id = "192.168.1.1"

[[neighbors]]

[neighbors.config]

peer-type = "external"

neighbor-address = "192.168.1.254"

peer-as = 64512

local-as = 65001

[[neighbors.afi-safis]]

[neighbors.afi-safis.config]

afi-safi-name = "ipv4-unicast"

[[neighbors]]

[neighbors.config]

neighbor-address = "22.22.22.22"

peer-as = 65000

[neighbors.route-reflector.config]

route-reflector-client = true

route-reflector-cluster-id = "11.11.11.11"

[[neighbors.afi-safis]]

[neighbors.afi-safis.config]

afi-safi-name = "l2vpn-evpn"

[[neighbors]]

[neighbors.config]

neighbor-address = "33.33.33.33"

peer-as = 65000

[neighbors.route-reflector.config]

route-reflector-client = true

route-reflector-cluster-id = "11.11.11.11"

[[neighbors.afi-safis]]

[neighbors.afi-safis.config]

afi-safi-name = "l2vpn-evpn"


两台TOR交换机的设置

hostname TOR-SW1

spanning-tree mode mstp

vlan 100

interface Ethernet1

switchport mode trunk

interface Ethernet2

switchport access vlan 100

hostname TOR-SW2

spanning-tree mode mstp

vlan 100

interface Ethernet1

switchport mode trunk

interface Ethernet2

switchport access vlan 100

GOBGP机器的启动(执行test.sh)

root@gobgp:~# cat test.sh

ip add add 11.11.11.11/32 dev lo

ip add add 192.168.1.1/24 dev ens4

ip link set ens4 up;

gobgpd -f /etc/gobgp/gobgpd.conf &

gobgp global rib add 11.11.11.11/32 -a ipv4

ip route add 22.22.22.22/32 via 192.168.1.254

ip route add 33.33.33.33/32 via 192.168.1.254

CUST-Linux1和CUST-Linux2的网卡ip及mac设置

验证

gobgp global rib -a ipv4

gobgp global rib -a evpn

gobgp neighbor  x.x.x.x

gobgp参考:

https://github.com/osrg/gobgp/blob/master/docs/sources/cli-command-syntax.md#global

©著作权归作者所有,转载或内容合作请联系作者
  • 人面猴
    序言：七十年代末，一起剥皮案震惊了整个滨河市，随后出现的几起案子，更是在滨河造成了极大的恐慌，老刑警刘岩，带你破解...
    沈念sama阅读 194,319评论 5赞 459
  • 死咒
    序言：滨河连续发生了三起死亡事件，死亡现场离奇诡异，居然都是意外死亡，警方通过查阅死者的电脑和手机，发现死者居然都...
    沈念sama阅读 81,801评论 2赞 371
  • 救了他两次的神仙让他今天三更去死
    文/潘晓璐 我一进店门，熙熙楼的掌柜王于贵愁眉苦脸地迎上来，“玉大人，你说我怎么就摊上这事。” “怎么了？”我有些...
    开封第一讲书人阅读 141,567评论 0赞 319
  • 道士缉凶录：失踪的卖姜人
    文/不坏的土叔 我叫张陵，是天一观的道长。 经常有香客问我，道长，这世上最难降的妖魔是什么？ 我笑而不...
    开封第一讲书人阅读 52,156评论 1赞 263
  • 港岛之恋（遗憾婚礼）
    正文 为了忘掉前任，我火速办了婚礼，结果婚礼上，老公的妹妹穿的比我还像新娘。我一直安慰自己，他们只是感情好，可当我...
    茶点故事阅读 61,019评论 4赞 355
  • 恶毒庶女顶嫁案：这布局不是一般人想出来的
    文/花漫 我一把揭开白布。 她就那样静静地躺着，像睡着了一般。 火红的嫁衣衬着肌肤如雪。 梳的纹丝不乱的头发上，一...
    开封第一讲书人阅读 46,090评论 1赞 272
  • 城市分裂传说
    那天，我揣着相机与录音，去河边找鬼。 笑死，一个胖子当着我的面吹牛，可吹牛的内容都是我干的。 我是一名探鬼主播，决...
    沈念sama阅读 36,500评论 3赞 381
  • 双鸳鸯连环套：你想象不到人心有多黑
    文/苍兰香墨 我猛地睁开眼，长吁一口气：“原来是场噩梦啊……” “哼！你这毒妇竟也来了？” 一声冷哼从身侧响起，我...
    开封第一讲书人阅读 35,192评论 0赞 253
  • 万荣杀人案实录
    序言：老挝万荣一对情侣失踪，失踪者是张志新（化名）和其女友刘颖，没想到半个月后，有当地人在树林里发现了一具尸体，经...
    沈念sama阅读 39,474评论 1赞 290
  • 护林员之死
    正文 独居荒郊野岭守林人离奇死亡，尸身上长有42处带血的脓包…… 初始之章·张勋 以下内容为张勋视角 年9月15日...
    茶点故事阅读 34,566评论 2赞 309
  • 白月光启示录
    正文 我和宋清朗相恋三年，在试婚纱的时候发现自己被绿了。 大学时的朋友给我发了我未婚夫和他白月光在一起吃饭的照片。...
    茶点故事阅读 36,338评论 1赞 326
  • 活死人
    序言：一个原本活蹦乱跳的男人离奇死亡，死状恐怖，灵堂内的尸体忽然破棺而出，到底是诈尸还是另有隐情，我是刑警宁泽，带...
    沈念sama阅读 32,212评论 3赞 312
  • 日本核电站爆炸内幕
    正文 年R本政府宣布，位于F岛的核电站，受9级特大地震影响，放射性物质发生泄漏。R本人自食恶果不足惜，却给世界环境...
    茶点故事阅读 37,572评论 3赞 298
  • 男人毒药：我在死后第九天来索命
    文/蒙蒙 一、第九天 我趴在偏房一处隐蔽的房顶上张望。 院中可真热闹，春花似锦、人声如沸。这庄子的主人今日做“春日...
    开封第一讲书人阅读 28,890评论 0赞 17
  • 一桩弑父案，背后竟有这般阴谋
    文/苍兰香墨 我抬头看了看天上的太阳。三九已至，却和暖如春，着一层夹袄步出监牢的瞬间，已是汗流浃背。 一阵脚步声响...
    开封第一讲书人阅读 30,169评论 1赞 250
  • 情欲美人皮
    我被黑心中介骗来泰国打工， 没想到刚下飞机就差点儿被人妖公主榨干…… 1. 我叫王不留，地道东北人。 一个月前我还...
    沈念sama阅读 41,478评论 2赞 341
  • 代替公主和亲
    正文 我出身青楼，却偏偏与公主长得像，于是被迫代替她去往敌国和亲。 传闻我的和亲对象是个残疾皇子，可洞房花烛夜当晚...
    茶点故事阅读 40,661评论 2赞 335

推荐阅读更多精彩内容