Update:

First time ever I met Yakov Rekhter!!!

MTU made me cry :-)

JNCIE Preparation

JNCIE-M/T practice topology:


Good part about the topology is you can simulate whole topology using the logical routers and play with the various features or protocols. I am using my lab M7i router to simulate logical topology.

JUNIPER Certification book free PDF click here.

Topic you can cover with given topology:
1.   IGP
2.   MPLS
3.   BGP with RR
4.   MPLS VPN
5.   PE-CE: Static/OSPF/BGP
6.   Policy for SOO/VRF import export.
7.   Plain Multicast
8.   Internet connectivity with VRF & non-VRF interface
9.   MVPN with Draft Rosen.
10. IPv6

Routing instance used in topology: vpn-a

All routers loopback addresses start with 192.168.10X.X/32
X = router number

Primary and Backup LSPs:
Secondary Path will be established up front or not is depend on configuration. If secondary LSP is configured with the standby key word then it will be established before the primary LSP breaks. After primary path is recovered and primary LSP is established again, traffic will be automatically revert back to primary LSP and backup LSP will remain up for 60 seconds if it is not configured with the STANDBY keyword. To prevent traffic revert back, you can configure all LSP as a backup LSP as there is no mechanism of traffic revert back in case of the backup LSPs.

Adaptive keyword on secondary LSP trigger the sheared explicit behavior where primary LSP and backup LSP will share the same resources to establish the LSP.

Martini L2VPN Notes:
Do not for get to enable the LDP on interface. Draft Martini is based on LDP so when you use RSVP-TE then you will have to enable the ldp-tunneling, you will need RSVP-TE in both direction (Two tunnels) for bidirectional LDP communication and both tunnels will need ldp-tunneling. ldp-tunneling is targeted LDP sessions.

BGP between PEs:


Under BGP you will need inet unicast and inet-vpn address family.

lab@DEVANG-M7i# show protocols bgp
group ibgp {
    type internal;
    local-address 192.168.102.2;
    neighbor 192.168.104.4 {
        family inet {
            unicast;
        }
        family inet-vpn {
            unicast;
        }
    }
}

[edit logical-systems r2]


lab@LAB-M7i# show routing-instances vpn-a
instance-type vrf;
interface ge-0/3/1.12;
interface lo0.12;
route-distinguisher 1:1;
inactive: vrf-import vpna-import;
inactive: vrf-export ospf-to-bgp;
vrf-target target:1:1;
protocols {
    inactive: bgp {
        group ebgp {
            type external;
            import origin-import;
            export origin-export;
            as-override;
            neighbor 1.1.12.1 {
                peer-as 65001;
            }
        }
    }
    ospf {
        domain-id 192.168.102.2;
        export bgp-to-ospf;
        area 0.0.0.0 {
            interface ge-0/3/1.12;
            interface lo0.12;
        }
    }
    pim {
        vpn-group-address 239.3.3.3;
        rp {
            local {
                address 12.12.12.12;
            }
        }
        interface all {
            mode sparse;
        }
    }
}

[edit logical-systems r2]

[edit logical-systems r2]
lab@LAB-M7i# run show bgp summary
Groups: 1 Peers: 1 Down peers: 0
Table          Tot Paths  Act Paths Suppressed    History Damp State    Pending
inet.0                 1          1          0          0          0          0
inet6.0                0          0          0          0          0          0
Peer                     AS      InPkt     OutPkt    OutQ   Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
192.16.100.2            100       5411       5402       0       0 1d 16:32:34 Establ
  inet.0: 1/1/1/0
  inet6.0: 0/0/0/0

Draft Rosen verification:

Default MDT: All PE has group of multicast address configured under the VRF, each VRF has unique MDT address that can be used to join the group at P-RP. In case of default MDT, all the PE participating in any particular MVPN will receive the multicast data whether they have receiver or not. If you have high bit stream multicast data and wide spread receiver and among those receiver only few receivers are interested in receiving the multicast data then use the Data MDT.

Data MDT: You can configure the group of mutlicast addresses that can be used to initiate the Data MDT. Data MDT can be triggered with configured threshold and threshold can be zero so as soon as the multicast source start sending the data, PE can initiate the Data MDT tunnel. To let the receiver end aware of Data MDT, source PE send out Data MDT join to standard all PIM router address 224.0.0.13. Once all receiver end PE receive the Data MDT join messages, interested receiver end PEs will join the Data MDT group.

In both the case Default or Data MDT, it will use the GRE encapsulations. Source IP will be the PE's loopback IP and destination IP will be the Default or Data MDT group address.

You should see the both end PE routers as a neighbor via "mt" interface. You can have default/data mdt for MVPN. You will need one Router in provider core acting as a P-RP (in our case R3) and one router in customer network or PE can act as a C-RP (in my lab I used PE2 router as a C-RP by configuring static RP under routing-instance vpn-a).

[edit logical-systems r2]
lab@LAB-M7i# run show pim neighbors logical-system r2 instance vpn-a
Instance: PIM.vpn-a
B = Bidirectional Capable, G = Generation Identifier,
H = Hello Option Holdtime, L = Hello Option LAN Prune Delay,
P = Hello Option DR Priority

Interface           IP V Mode        Option      Uptime Neighbor addr
ge-0/3/1.12          4 2             HPLG      00:31:26 1.1.12.1      
mt-1/2/0.37888       4 2             HPLG      00:26:37 45.45.45.45   

[edit logical-systems r2]
lab@LAB-M7i#

P-RP:

[edit logical-systems r2]
lab@LAB-M7i# run show pim rps logical-system r3 extensive
Instance: PIM.master
Address family INET

RP: 192.168.103.3
Learned via: static configuration
Time Active: 00:41:12
Holdtime: 0
Device Index: 158
Subunit: 47105
Interface: pd-1/2/0.47105
Group Ranges:
        224.0.0.0/4
Register State for RP:
Group           Source          FirstHop        RP Address      State    Timeout
239.3.3.3       192.168.102.2   192.168.102.2   192.168.103.3   Receive      281            <--- Both PE are joining RP for group 239.3.3.3
239.3.3.3       192.168.104.4   192.168.104.4   192.168.103.3   Receive      281            <--- Both PE are joining RP for group 239.3.3.3

Address family INET6

[edit logical-systems r2]

C-RP:

[edit logical-systems r2]

lab@LAB-M7i# run show pim rps logical-system r2 instance vpn-a extensive
Instance: PIM.vpn-a
Address family INET

RP: 12.12.12.12
Learned via: static configuration
Time Active: 00:40:44
Holdtime: 0
Device Index: 158
Subunit: 43010
Interface: pd-1/2/0.43010
Group Ranges:
        224.0.0.0/4

Address family INET6

[edit logical-systems r2]

Associated MT interface on one of the PE router:

[edit logical-systems r2]
lab@LAB-M7i# run show interfaces mt-*             
Physical interface: mt-1/2/0, Enabled, Physical link is Up
  Interface index: 163, SNMP ifIndex: 137
  Type: Multicast-GRE, Link-level type: GRE, MTU: Unlimited, Speed: 800mbps
  Device flags   : Present Running
  Interface flags: SNMP-Traps
  Input rate     : 208 bps (0 pps)
  Output rate    : 0 bps (0 pps)

  Logical interface mt-1/2/0.33792 (Index 120) (SNMP ifIndex 261)
    Flags: Point-To-Point SNMP-Traps 0x4000 IP-Header 239.3.3.3:192.168.104.4:47:df:64:0000000800000000 Encapsulation: GRE-NULL
    Input packets : 0
    Output packets: 125
    Protocol inet, MTU: 1476
      Flags: None

  Logical interface mt-1/2/0.37888 (Index 116) (SNMP ifIndex 255)
    Flags: Point-To-Point SNMP-Traps 0x4000 IP-Header 239.3.3.3:192.168.102.2:47:df:64:0000000800000000 Encapsulation: GRE-NULL
    Input packets : 0
    Output packets: 131
    Protocol inet, MTU: 1476
      Flags: None

  Logical interface mt-1/2/0.50176 (Index 122) (SNMP ifIndex 262)
    Flags: Point-To-Point SNMP-Traps 0x6000 Encapsulation: GRE-NULL
    Input packets : 110
    Output packets: 0
    Protocol inet, MTU: Unlimited
      Flags: None

  Logical interface mt-1/2/0.54272 (Index 117) (SNMP ifIndex 256)
    Flags: Point-To-Point SNMP-Traps 0x6000 Encapsulation: GRE-NULL
    Input packets : 109
    Output packets: 0
    Protocol inet, MTU: Unlimited
      Flags: None

[edit logical-systems r2]

Forwarding table entries on PE routers for MDT group address:

Logical system: r2
Routing table: default.inet
Internet:
Destination        Type RtRef Next hop           Type Index NhRef Netif
224.0.0.0/4        user     0                    rslv   930     1
224.0.0.0/4        perm     0                    mdsc   692     2
239.3.3.3.192.168.102.2/64
                   user     1                    indr 262149     3
                                                 mcrt   935     1
239.3.3.3.192.168.104.4/64
                   user     0                    indr 262154     2
                                                 mcrt   962     1