VPLS configuration Junos (MX series)

14.02 2024 | by massimiliano

Architettura High Level Design VPLS PE1 (MX960) primary # routing-instances VPLS type VPLS-LAB {instance-type vpls;vlan-id all;interface ge-0/1/0.111;interface ge-0/1/0.113;interface ge-0/1/0.115;interface ge-0/1/0.116;route-distinguisher […]

Architettura High Level Design VPLS

PE1 (MX960) primary

# routing-instances VPLS type

VPLS-LAB {
instance-type vpls;
vlan-id all;
interface ge-0/1/0.111;
interface ge-0/1/0.113;
interface ge-0/1/0.115;
interface ge-0/1/0.116;
route-distinguisher 65512:65920;
vrf-target target:65512:65920;
protocols {
vpls {
site-range 10;
no-tunnel-services;
site datacenter-lab {
site-identifier 1;
multi-homing;
site-preference primary;
}

PE2 (MX960) backup

# routing-instances VPLS type

# interface

interfaces {
ge-0/1/0 {
description “servizio L2 data”;
vlan-tagging;
encapsulation flexible-ethernet-services;
unit 111 {
description “vlan DMZ-1”;
encapsulation vlan-vpls;
vlan-id 111;
}
unit 113 {
description “vlan-DMZ-2”;
encapsulation vlan-vpls;
vlan-id 113;
}
unit 115 {
description “vlan DMZ-3”;
encapsulation vlan-vpls;
vlan-id 115;
}
unit 116 {
description “vlan MGMT”;
encapsulation vlan-vpls;
vlan-id 116;
}

ae0 {
mtu 9192;
aggregated-ether-options {
link-speed 10g;
lacp {
active;
}
unit 0 {
family inet {
address 10.10.10.185/30;
}
family mpls {
filter {
input COLLECT-MPLS-FLOW;
output COLLECT-MPLS-FLOW;
}

xe-2/0/0 {
description “To MPLS-POP5”;
mtu 9192;
unit 0 {
family inet {
address 10.10.10.214/30;
}
family mpls;
}
}
xe-4/2/0 {
description “To MPLS-POP7”;
mtu 9192;
unit 0 {
family inet {
address 10.10.10.177/30;
}
family mpls;
}

xe-0/2/0 {
description BtB;
gigether-options {
802.3ad ae0;
}
}
xe-2/2/0 {
description BtB;
gigether-options {
802.3ad ae0;
}

Lo0 {
unit 0 {
family inet {
filter {
input RESTRICT_SSH_TELNET;
}
address 10.255.255.1/32;
}
}

# Routing-Option

routing-options {
nonstop-routing;
router-id 10.255.255.1;
autonomous-system 65512;
}
protocols {
rsvp {
interface ae0.0;
interface xe-4/2/0.0;
interface xe-2/0/0.0 {
link-protection;
}

mpls {
ipv6-tunneling;
icmp-tunneling;
optimize-timer 30;

label-switched-path LSP-PE5 {
to 10.255.255.5;
node-link-protection;
fast-reroute;
}
label-switched-path LSP-PE7 {
to 10.255.255.7;
node-link-protection;
fast-reroute;
}
label-switched-path LSP-PE2 {
to 10.255.255.2;
node-link-protection;
fast-reroute;
}

interface ae0.0;
interface xe-4/2/0.0;
interface xe-2/0/0.0;

ospf {
traffic-engineering;
reference-bandwidth 10g;
area 0.0.0.0 {
interface ae0.0;
interface lo0.0 {
passive;
}
interface xe-4/2/0.0;
interface xe-2/0/0.0;
}

bgp {
group Internal_BGP {
type internal;
local-address 10.255.255.1;
family inet {
unicast;
}
family inet-vpn {
unicast;
}
family l2vpn {
signaling;
}
neighbor 10.255.255.253; –> Router Reflector
neighbor 10.255.255.254; –> Router Reflector
}

# firewall filter

firewall {
family mpls {
filter COLLECT-MPLS-FLOW {
term collect-all {
then {
sample;
accept;
}