How to terminate Layer 2 Circuits using H-VPLS
This article explains how to terminate Layer 2 Circuits using H-VPLS. On one side of the Layer 2 Circuit we have VLAN tagged interface towards CE and on the remote end side of the Layer 2 Circuit we have an untagged interface towards CE.
On ACX-4000:
=============
lab@ACX-4000-1# show interfaces lo0
unit 0 {
family inet {
address 192.168.14.42/32;
}
}
[edit]
lab@ACX-4000-1# show interfaces ge-1/0/0
description "Towards PE-r ge-1/0/2";
unit 0 {
family inet {
address 13.13.13.1/30;
}
family mpls;
}
[edit]
lab@ACX-4000-1# show interfaces ge-1/0/5
description "Towards CE2 ge-1/3/9";
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
unit 0 {
encapsulation vlan-ccc;
vlan-id 22;
input-vlan-map pop; >>>> To remove the outer VLAN tagging coming from CE2
output-vlan-map push;
family ccc;
}
[edit]
lab@ACX-4000-1# show protocols
mpls {
interface ge-1/0/0.0;
}
ospf {
area 0.0.0.15 {
interface ge-1/0/0.0;
interface lo0.0 {
passive;
}
}
}
ldp {
interface ge-1/0/0.0;
interface lo0.0;
}
l2circuit {
neighbor 192.168.14.1 {
interface ge-1/0/5.0 {
virtual-circuit-id 22;
encapsulation-type ethernet-vlan;
ignore-mtu-mismatch;
}
}
}
On Router PE-r:
================
lab@PE-r# show interfaces lo0
unit 0 {
family inet {
address 192.168.14.1/32;
}
}
[edit]
lab@PE-r# show interfaces ge-1/0/2
description " Link towards ACX4000-1 ge-1/0/0";
unit 0 {
family inet {
address 13.13.13.2/30;
}
family mpls;
}
[edit]
lab@PE-r# show interfaces ge-1/0/1
description "Towards R1 ge-1/0/3.10";
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
unit 10 {
vlan-id 10;
family inet {
address 22.0.0.1/30;
}
family mpls;
}
lab@PE-r# show protocols
mpls {
interface lo0.0;
interface ge-1/0/1.10;
interface ge-1/0/2.0;
}
ospf {
area 0.0.0.15 {
interface ge-1/0/2.0;
interface lo0.0 {
passive;
}
}
area 0.0.0.0 {
interface ge-1/0/1.10;
}
}
ldp {
interface ge-1/0/1.10;
interface ge-1/0/2.0;
interface lo0.0;
}
VPLS ID in the H-VPLS instance should be matching with the virtual-circuit-id of the Layer 2 circuit. In this scenario, VPLS ID is 22.
Use Local switching to terminate the virtual circuits on the local router.
lab@PE-r# show routing-instances
H-VPLS {
instance-type vpls;
protocols {
vpls {
vpls-id 22;
ignore-mtu-mismatch;
mesh-group 22-1 {
local-switching;
neighbor 192.168.14.2 {
encapsulation-type ethernet-vlan;
}
neighbor 192.168.14.42 {
encapsulation-type ethernet-vlan;
}
}
}
}
}
On Router R1:
===============
lab@PE-r:R1# show interfaces
ge-1/0/3 {
unit 10 {
vlan-id 10;
family inet {
address 22.0.0.2/30;
}
family mpls;
}
}
ge-1/0/8 {
unit 0 {
family ccc;
}
}
lo0 {
unit 2 {
family inet {
address 192.168.14.2/32;
}
}
}
lab@PE-r:R1# show protocols
mpls {
interface ge-1/0/3.10;
}
ospf {
area 0.0.0.0 {
interface lo0.2 {
passive;
}
interface ge-1/0/3.10;
}
}
ldp {
interface ge-1/0/3.10;
interface lo0.2;
}
l2circuit {
neighbor 192.168.14.1 {
interface ge-1/0/8.0 {
virtual-circuit-id 22;
encapsulation-type ethernet-vlan;
ignore-mtu-mismatch;
}
}
}
ON CE1:
lab@PE-r:CE1# show interfaces ge-1/1/4 unit 0
family inet {
address 50.0.0.1/24;
}
On CE2:
lab@PE-r:CE2# show interfaces ge-1/3/9 unit 22
vlan-id 22;
family inet {
address 50.0.0.2/24;
}
Verification:
=========== On ACX4000: lab@ACX-4000-1# run show l2circuit connections extensive Layer-2 Circuit Connections: Legend for connection status (St) EI -- encapsulation invalid NP -- interface h/w not present MM -- mtu mismatch Dn -- down EM -- encapsulation mismatch VC-Dn -- Virtual circuit Down CM -- control-word mismatch Up -- operational VM -- vlan id mismatch CF -- Call admission control failure OL -- no outgoing label IB -- TDM incompatible bitrate NC -- intf encaps not CCC/TCC TM -- TDM misconfiguration BK -- Backup Connection ST -- Standby Connection CB -- rcvd cell-bundle size bad SP -- Static Pseudowire LD -- local site signaled down RS -- remote site standby RD -- remote site signaled down XX -- unknown Legend for interface status Up -- operational Dn -- down Neighbor: 192.168.14.1 Interface Type St Time last up # Up trans ge-1/0/5.0(vc 22) rmt Up Dec 27 06:59:00 2014 1 Remote PE: 192.168.14.1, Negotiated control-word: No Incoming label: 299776, Outgoing label: 800007 Negotiated PW status TLV: No Local interface: ge-1/0/5.0, Status: Up, Encapsulation: VLAN Connection History: Dec 27 06:59:00 2014 status update timer Dec 27 06:59:00 2014 PE route changed Dec 27 06:59:00 2014 Out lbl Update 800007 Dec 27 06:59:00 2014 In lbl Update 299776 Dec 27 06:59:00 2014 loc intf up ge-1/0/5.0
On PE-r:
lab@PE-r# run show vpls connections extensive Layer-2 VPN connections: Legend for connection status (St) EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS EM -- encapsulation mismatch WE -- interface and instance encaps not same VC-Dn -- Virtual circuit down NP -- interface hardware not present CM -- control-word mismatch -> -- only outbound connection is up CN -- circuit not provisioned <- -- only inbound connection is up OR -- out of range Up -- operational OL -- no outgoing label Dn -- down LD -- local site signaled down CF -- call admission control failure RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label MM -- MTU mismatch MI -- Mesh-Group ID not available BK -- Backup connection ST -- Standby connection PF -- Profile parse failure PB -- Profile busy RS -- remote site standby SN -- Static Neighbor LB -- Local site not best-site RB -- Remote site not best-site VM -- VLAN ID mismatch Legend for interface status Up -- operational Dn -- down Instance: H-VPLS VPLS-id: 22 Number of local interfaces: 0 Number of local interfaces up: 0 Number of VE mesh-groups: 2 Number of VE mesh-groups up: 1 Mesh-group interfaces: 22-1 State: Up ID: 4 vt-1/0/0.1048838 Intf - vpls H-VPLS neighbor 192.168.14.2 vpls-id 22 vt-0/0/0.1048839 Intf - vpls H-VPLS neighbor 192.168.14.42 vpls-id 22 Mesh-group interfaces: __ves__ State: Dn ID: 0 Mesh-group connections: 22-1 Neighbor Type St Time last up # Up trans 192.168.14.2(vpls-id 22) rmt Up Dec 27 07:49:23 2014 1 Remote PE: 192.168.14.2, Negotiated control-word: No Incoming label: 800006, Outgoing label: 299776 Negotiated PW status TLV: No Local interface: vt-1/0/0.1048838, Status: Up, Encapsulation: VLAN Description: Intf - vpls H-VPLS neighbor 192.168.14.2 vpls-id 22 Connection History: Dec 27 07:49:23 2014 status update timer Dec 27 07:49:23 2014 PE route changed Dec 27 07:49:23 2014 Out lbl Update 299776 Dec 27 07:49:23 2014 In lbl Update 800006 Dec 27 07:49:23 2014 loc intf up vt-1/0/0.1048838 192.168.14.42(vpls-id 22) rmt Up Dec 27 07:49:23 2014 1 Remote PE: 192.168.14.42, Negotiated control-word: No Incoming label: 800007, Outgoing label: 299776 Negotiated PW status TLV: No Local interface: vt-0/0/0.1048839, Status: Up, Encapsulation: VLAN Description: Intf - vpls H-VPLS neighbor 192.168.14.42 vpls-id 22 Connection History: Dec 27 07:49:23 2014 status update timer Dec 27 07:49:23 2014 PE route changed Dec 27 07:49:23 2014 Out lbl Update 299776 Dec 27 07:49:23 2014 In lbl Update 800007 Dec 27 07:49:23 2014 loc intf up vt-0/0/0.1048839 [edit] lab@PE-r# run show vpls mac-table MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC) Routing instance : H-VPLS Bridging domain : __H-VPLS__, VLAN : NA MAC MAC Logical NH RTR address flags interface Index ID 5c:5e:ab:00:49:7c D vt-1/0/0.1048838 5c:5e:ab:00:49:b1 D vt-0/0/0.1048839
On R1:
lab@PE-r:R1# run show l2circuit connections extensive Layer-2 Circuit Connections: Legend for connection status (St) EI -- encapsulation invalid NP -- interface h/w not present MM -- mtu mismatch Dn -- down EM -- encapsulation mismatch VC-Dn -- Virtual circuit Down CM -- control-word mismatch Up -- operational VM -- vlan id mismatch CF -- Call admission control failure OL -- no outgoing label IB -- TDM incompatible bitrate NC -- intf encaps not CCC/TCC TM -- TDM misconfiguration BK -- Backup Connection ST -- Standby Connection CB -- rcvd cell-bundle size bad SP -- Static Pseudowire LD -- local site signaled down RS -- remote site standby RD -- remote site signaled down XX -- unknown Legend for interface status Up -- operational Dn -- down Neighbor: 192.168.14.1 Interface Type St Time last up # Up trans ge-1/0/8.0(vc 22) rmt Up Dec 27 07:19:48 2014 1 Remote PE: 192.168.14.1, Negotiated control-word: No Incoming label: 299776, Outgoing label: 800006 Negotiated PW status TLV: No Local interface: ge-1/0/8.0, Status: Up, Encapsulation: VLAN Connection History: Dec 27 07:19:48 2014 status update timer Dec 27 07:19:48 2014 PE route changed Dec 27 07:19:48 2014 Out lbl Update 800006 Dec 27 07:19:48 2014 In lbl Update 299776 Dec 27 07:19:48 2014 loc intf up ge-1/0/8.0
On CE1:
lab@PE-r:CE1# run ping 50.0.0.2 PING 50.0.0.2 (50.0.0.2): 56 data bytes 64 bytes from 50.0.0.2: icmp_seq=0 ttl=64 time=0.687 ms 64 bytes from 50.0.0.2: icmp_seq=1 ttl=64 time=0.628 ms 64 bytes from 50.0.0.2: icmp_seq=2 ttl=64 time=0.614 ms 64 bytes from 50.0.0.2: icmp_seq=3 ttl=64 time=0.581 ms ^C --- 50.0.0.2 ping statistics --- 4 packets transmitted, 4 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.581/0.627/0.687/0.038 ms # run show interfaces extensive ge-1/1/4 | match hard Current address: 5c:5e:ab:00:49:7c, Hardware address: 5c:5e:ab:00:49:7c
On CE2:
lab@PE-r:CE2# run ping 50.0.0.1 PING 50.0.0.1 (50.0.0.1): 56 data bytes 64 bytes from 50.0.0.1: icmp_seq=0 ttl=64 time=0.757 ms 64 bytes from 50.0.0.1: icmp_seq=1 ttl=64 time=0.769 ms 64 bytes from 50.0.0.1: icmp_seq=2 ttl=64 time=0.610 ms ^C --- 50.0.0.1 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.610/0.712/0.769/0.072 ms # run show interfaces extensive ge-1/3/9 | match hard Current address: 5c:5e:ab:00:49:b1, Hardware address: 5c:5e:ab:00:49:b1