Today I will be discussing VPLS configuration (Virtual Private LAN Services) on Huawei switches in a multi-vendor environment. I will test VPLS between Huawei S6700, Extreme X670 and Juniper MX960.
Lab scheme:
We will use Martini VPLS with LDP signaling .
First, we need to configure IGP and LDP between all nodes on the network. Will use OSFP as IGP.
I will not post the PE3 config and redundant links related config, as it will take too long output.
IGP/LDP configuration of PE4 Huawei S6700:
# interface facing PE2 # interface Vlanif10 description PE4-PE2-igp ip address 10.10.100.1 255.255.255.252 ospf network-type p2p ospf ldp-sync ospf enable 1 area 0.0.0.0 mpls mpls te mpls ldp interface XGigabitEthernet0/0/48 description PE4-PE2 port link-type trunk undo port trunk allow-pass vlan 1 port trunk allow-pass vlan 10 # interface LoopBack0 ip address 10.10.10.33 255.255.255.255 ospf enable 1 area 0.0.0.0 # #OSPF # ospf 1 opaque-capability enable area 0.0.0.0 network 10.10.100.0 0.0.0.255 mpls-te enable # #MPLS # mpls lsr-id 10.10.10.33 mpls mpls te label advertise non-null mpls rsvp-te mpls te cspf # mpls l2vpn # mpls ldp
IGP/LDP configuration of PE2 Extreme X670:
#create Lo0 create vlan "Loopback0" enable loopback-mode vlan Loopback0 configure vlan Loopback0 ipaddress 10.10.10.32 255.255.255.255 enable ipforwarding vlan Loopback0 configure ip-mtu 9170 vlan Loopback0 #creating vlan for IGP between PE2 and PE4 create vlan "pe2-pe4-igp" configure vlan pe2-pe4-igp tag 10 configure vlan pe2-pe4-igp add ports 48 tagged configure vlan pe2-pe4-igp ipaddress 10.10.100.2 255.255.255.252 enable ipforwarding vlan pe2-pe4-igp configure ip-mtu 9170 vlan pe2-pe4-igp #OSFP configure ospf routerid 10.10.10.32 enable ospf configure ospf add vlan Loopback0 area 0.0.0.0 configure ospf vlan Loopback0 cost 1 configure ospf add vlan pe2-pe4-igp area 0.0.0.0 link-type point-to-point #MPLS configure mpls lsr-id 10.10.10.32 enable mpls enable mpls protocol ldp enable mpls protocol rsvp-te configure mpls add vlan "Loopback0" enable mpls vlan "Loopback0" enable mpls ldp vlan "Loopback0" configure mpls add vlan "pe2-pe4-igp" enable mpls vlan "pe2-pe4-igp" enable mpls rsvp-te vlan "pe2-pe4-igp" enable mpls ldp vlan "pe2-pe4-igp"
IGP/LDP configuration of PE1 Juniper MX960:
#interfaces config
lo0 {
description LOOPBACK;
unit 0 {
family inet {
address 10.10.10.1/32 {
primary;
}
}
}
}
#port facing PE2
xe-0/1/2 {
description "PE1-PE2";
flexible-vlan-tagging;
mtu 9192;
encapsulation flexible-ethernet-services;
unit 12 {
description "PE1-PE2-igp";
vlan-id 12;
family inet {
address 10.10.100.10/30;
}
}
}
#MPLS
mpls {
interface lo0.0;
interface xe-0/1/2.12;
}
#OSPF
ospf {
traffic-engineering;
area 0.0.0.0 {
interface all {
disable;
}
interface lo0.0 {
metric 1;
}
interface xe-0/1/2.12 {
interface-type p2p;
metric 1;
}
}
}
#LDP
ldp {
track-igp-metric;
interface xe-0/1/2.12;
interface lo0.0;
}
Now we need to check IGP and LDP neighborhood is established everywhere.
PE4:
PE4>display ospf peer
OSPF Process 1 with Router ID 10.10.10.33
Neighbors
Area 0.0.0.0 interface 10.10.100.1(Vlanif10)'s neighbors
Router ID: 10.10.10.32 Address: 10.10.100.2
State: Full Mode:Nbr is Slave Priority: 1
DR: None BDR: None MTU: 9170
Dead timer due in 33 sec
Retrans timer interval: 6
Neighbor is up for 00:04:35
Authentication Sequence: [ 0 ]
Neighbors
Area 0.0.0.0 interface 10.10.100.5(Vlanif11)'s neighbors
Router ID: 10.10.10.31 Address: 10.10.100.6
State: Full Mode:Nbr is Slave Priority: 1
DR: None BDR: None MTU: 9170
Dead timer due in 40 sec
Retrans timer interval: 7
Neighbor is up for 00:05:58
Authentication Sequence: [ 0 ]
PE4>dis mpls ldp peer
LDP Peer Information in Public network
A '*' before a peer means the peer is being deleted.
------------------------------------------------------------------------------
PeerID TransportAddress DiscoverySource
------------------------------------------------------------------------------
10.10.10.32:0 10.10.10.32 Vlanif10
10.10.10.31:0 10.10.10.31 Vlanif11
PE2:
PE2 # sh ospf neighbor
Neighbor ID Pri State Up/Dead Time Address Interface
==========================================================================================
10.10.10.33 128 FULL /DROTHER 00:00:07:53/00:00:00:07 10.10.100.1 pe2-pe4-igp
10.10.10.1 128 FULL /DROTHER 00:00:05:31/00:00:00:02 10.10.100.10 pe2-pe1-igp
PE2 # sh mpls ldp peer
IP Address LDP Peer State Uptime Adjacencies
10.10.10.32 10.10.10.33:0 Operational 0d:0h:7m:53s 1
10.10.10.32 10.10.10.1:0 Operational 0d:0h:5m:31s 1
PE1:
PE1> show ospf neighbor Address Interface State ID Pri Dead 10.10.100.9 xe-0/1/2.12 Full 10.10.10.32 128 35 10.10.100.18 xe-0/1/3.14 Full 10.10.10.31 128 33 rt1.msk> show ldp neighbor Address Interface Label space ID Hold time 10.10.10.31 xe-0/1/3.14 10.10.10.31:0 37 10.10.10.32 xe-0/1/2.12 10.10.10.32:0 40
So, all OSFP and LDP sessions are established, it’s time to move on to VPLS configuration.
Huawei S6700 only supports Vlan Based VPLS, so the service is bound to the Vlanif interface:
#config of VPLS1-BLUE #ldp peer config mpls ldp remote-peer 10.10.10.1 remote-ip 10.10.10.1 # vsi VPLS1-BLUE pwsignal ldp vsi-id 100 peer 10.10.10.1 mtu 9000 encapsulation ethernet vlan 100 description VPLS1-BLUE # interface Vlanif100 l2 binding vsi VPLS1-BLUE #interface facing CE3 interface XGigabitEthernet0/0/22 description VPLS1-BLUE-CE3 port link-type access port default vlan 100 stp disable stp bpdu-filter enable stp edged-port enable undo ntdp enable undo ndp enable port discard tagged-packet storm-control broadcast min-rate 200 max-rate 350 storm-control multicast min-rate 2000 max-rate 3500 storm-control interval 2 storm-control action block storm-control enable log #config of VPLS2-RED #ldp peer config mpls ldp remote-peer 10.10.10.32 remote-ip 10.10.10.32 # vsi VPLS2-RED pwsignal ldp vsi-id 200 peer 10.10.10.32 mtu 9000 encapsulation ethernet vlan 200 description VPLS2-RED # interface Vlanif200 l2 binding vsi VPLS2-RED #interface facing CE1 interface XGigabitEthernet0/0/21 description VPLS2-RED-CE1 port link-type access port default vlan 200 stp disable stp bpdu-filter enable stp edged-port enable undo ntdp enable undo ndp enable port discard tagged-packet storm-control broadcast min-rate 200 max-rate 350 storm-control multicast min-rate 2000 max-rate 3500 storm-control interval 2 storm-control action block storm-control enable log
PE2 config:
create vlan "CE1-CE4" configure vlan CE1-CE4 tag 200 configure vlan CE1-CE4 add ports 10 untagged disable igmp snooping vlan "CE1-CE4" disable igmp vlan "CE1-CE4" disable igmp proxy-query vlan "CE1-CE4" create l2vpn vpls vpls-pe2-pe4-CE1-CE4 fec-id-type pseudo-wire 200 configure l2vpn vpls vpls-pe2-pe4-CE1-CE4 add service vlan CE1-CE4 configure l2vpn vpls vpls-pe2-pe4-CE1-CE4 mtu 9170 configure l2vpn vpls vpls-pe2-pe4-CE1-CE4 add peer 10.10.10.33 core full-mesh
PE1 config:
routing-instances {
VPLS1-BLUE {
instance-type vpls;
interface ae13.100;
protocols {
vpls {
no-tunnel-services;
vpls-id 100;
mtu 9000;
neighbor 10.10.10.33 {
encapsulation-type ethernet;
}
}
}
}
}
xe-0/3/3 {
description "CE2";
unit 0 {
description "PE1-PE2-igp";
encapsulation vlan-vpls;
input-vlan-map pop;
output-vlan-map push;
family vpls;
}
}
Finally, the configuration stage is done, we can start testing and verification.
Checking PE4:
PE4>display vpls connection 2 total connections, connections: 2 up, 0 down, 2 ldp, 0 bgp, 0 bgpad VSI Name: VPLS1-BLUE Signaling: ldp VsiID EncapType PeerAddr InLabel OutLabel VCState 100 ethernet 10.10.10.1 1136 1168 up VSI Name: VPLS2-RED Signaling: ldp VsiID EncapType PeerAddr InLabel OutLabel VCState 200 ethernet 10.10.10.32 1095 1077 up
PE2:
PE2 # show vpls L2VPN Name VPN ID Flags Services Name Peer IP State Flags --------------- ------ ------- --------------- --------------- ----- ------- vpls-pe2-pe4-CE1-CE4 200 EAX--L- CE1-CE4 10.10.10.33 Up C---V-L
PE1:
PE1> show vpls connections
Layer-2 VPN connections:
Legend for interface status
Up -- operational
Dn -- down
Instance: VPLS1-BLUE
VPLS-id: 100
Neighbor Type St Time last up # Up trans
10.10.10.33(vpls-id 100) rmt Up Nov 19 14:45:53 2020 1
Remote PE: 10.10.10.33, Negotiated control-word: No
Incoming label: 262145, Outgoing label: 1089
Negotiated PW status TLV: No
Local interface: lsi.1049510, Status: Up, Encapsulation: ETHERNET
Description: Intf - vpls VPLS1-BLUE neighbor 10.10.10.33 vpls-id 100
Flow Label Transmit: No, Flow Label Receive: No
All instances are up, traffic between CEs is successfully transmitted.