在Juniper MX路由器上在基于LDP的VPLS实例中传输以太网端口

Question

我们目前正在使用基于LDP的第二层VPN服务(P2P PW)在Juniper MX.This中传输以太网端口，P2P LDP PW正在运行。以下是针对此的配置：-

set interfaces xe-0/0/1 mtu 9192
set interfaces xe-0/0/1 encapsulation ethernet-ccc
set interfaces xe-0/0/1 unit 0 family ccc
set protocols l2circuit neighbor 10.253.0.12 interface xe-0/0/1.0 virtual-circuit-id 70
set protocols l2circuit neighbor 10.253.0.12 interface xe-0/0/1.0 no-control-word
set protocols l2circuit neighbor 10.253.0.12 interface xe-0/0/1.0 mtu 9192
set protocols l2circuit neighbor 10.253.0.12 interface xe-0/0/1.0 ignore-mtu-mismatch
set routing-instances inter-msc-1 interface xe-0/0/1.0 

我们希望传输相同的以太网端口，但使用基于LDP的VPLS实例而不是l2circuit。

是否可以在Juniper路由器中使用基于LDP的第二层VPLS服务来传输以太网端口？如果为Juniper共享示例配置，那将是非常好的。

Answer 1

是的，LDP VPLS是一个相当标准的部署。它可能会引起混淆的地方是各种类型的PE-CE接口封装，这取决于您正在运行的服务类型。在你的简单以太网电路的情况下，这很容易。

下面是一个简单的例子。

拓扑

CE1 [ge-0/0/0] <=> [ge-0/0/1] PE1 [ge-0/0/0] <= LDP => [ge-0/0/0] PE2 [ge-0/0/1] <=> [ge-0/0/0] CE2

例如，CE1和CE2在同一个子网中有一个IP，并且不知道它们连接到VPLS。

CE1

set interfaces ge-0/0/0 unit 0 family inet address 192.168.1.10/24

CE2

set interfaces ge-0/0/0 unit 0 family inet address 192.168.1.20/24

对于PE，我将跳过LDP配置，只包括VPLS所需的内容。

PE1

set interfaces ge-0/0/1 description to-CE1
set interfaces ge-0/0/1 encapsulation ethernet-vpls
set interfaces ge-0/0/1 unit 0 family vpls

set interfaces lo0 unit 0 family inet address 1.1.1.1/32
set interfaces lo0 unit 0 family mpls
    
set routing-instances VPLS instance-type vpls
set routing-instances VPLS interface ge-0/0/1.0
set routing-instances VPLS protocols vpls no-control-word
set routing-instances VPLS protocols vpls no-tunnel-services
set routing-instances VPLS protocols vpls vpls-id 70
set routing-instances VPLS protocols vpls mtu 9192
set routing-instances VPLS protocols vpls ignore-mtu-mismatch
set routing-instances VPLS protocols vpls neighbor 2.2.2.2   # The loopback of the remote LDP neighbor (PE2)

PE2

set interfaces ge-0/0/1 description to-CE2
set interfaces ge-0/0/1 encapsulation ethernet-vpls
set interfaces ge-0/0/1 unit 0 family vpls

set interfaces lo0 unit 0 family inet address 2.2.2.2/32
set interfaces lo0 unit 0 family mpls

set routing-instances VPLS instance-type vpls
set routing-instances VPLS interface ge-0/0/1.0
set routing-instances VPLS protocols vpls no-control-word
set routing-instances VPLS protocols vpls no-tunnel-services
set routing-instances VPLS protocols vpls vpls-id 70
set routing-instances VPLS protocols vpls mtu 9192
set routing-instances VPLS protocols vpls ignore-mtu-mismatch
set routing-instances VPLS protocols vpls neighbor 1.1.1.1  # The loopback of the remote LDP neighbor (PE1)

Verification

让我们看看PE1的VPLS状态：

jhead@PE> show vpls connections
Layer-2 VPN connections:

Legend for connection status (St)
EI -- encapsulation invalid      NC -- interface encapsulation not CCC/TCC/VPLS
EM -- encapsulation mismatch     WE -- interface and instance encaps not same
VC-Dn -- Virtual circuit down    NP -- interface hardware not present
CM -- control-word mismatch      -> -- only outbound connection is up
CN -- circuit not provisioned    <- -- only inbound connection is up
OR -- out of range               Up -- operational
OL -- no outgoing label          Dn -- down
LD -- local site signaled down   CF -- call admission control failure
RD -- remote site signaled down  SC -- local and remote site ID collision
LN -- local site not designated  LM -- local site ID not minimum designated
RN -- remote site not designated RM -- remote site ID not minimum designated
XX -- unknown connection status  IL -- no incoming label
MM -- MTU mismatch               MI -- Mesh-Group ID not available
BK -- Backup connection          ST -- Standby connection
PF -- Profile parse failure      PB -- Profile busy
RS -- remote site standby    SN -- Static Neighbor
LB -- Local site not best-site   RB -- Remote site not best-site
VM -- VLAN ID mismatch

Legend for interface status
Up -- operational
Dn -- down

Instance: VPLS
  LDP-VPLS State
  VPLS-id: 70
  Mesh-group connections: __ves__
    Neighbor                  Type  St     Time last up          # Up trans
    2.2.2.2(vpls-id 70)       rmt   Up     Dec  3 21:07:21 2020           1
      Remote PE: 2.2.2.2, Negotiated control-word: No
      Incoming label: 262146, Outgoing label: 262146
      Negotiated PW status TLV: No
      Local interface: lsi.1048577, Status: Up, Encapsulation: ETHERNET
        Description: Intf - vpls VPLS neighbor 2.2.2.2 vpls-id 70
      Flow Label Transmit: No, Flow Label Receive: No

最后，我们可以看到，这两个CEs可以交流。

jhead@CE1> ping 192.168.1.20
PING 192.168.1.20 (192.168.1.20): 56 data bytes
64 bytes from 192.168.1.20: icmp_seq=0 ttl=64 time=8.838 ms
64 bytes from 192.168.1.20: icmp_seq=1 ttl=64 time=4.620 ms
64 bytes from 192.168.1.20: icmp_seq=2 ttl=64 time=5.639 ms
64 bytes from 192.168.1.20: icmp_seq=3 ttl=64 time=3.969 ms
64 bytes from 192.168.1.20: icmp_seq=4 ttl=64 time=5.594 ms