This topology is based on M7i router. I used multiple logical routers to simulate different topologies. This book is based on mini scenarios for individual technologies as well as integration of various technologies. You can practice different interfaces configuration using appropriate PIC and having back to back connection to interfaces. For large scenario I will be using LT (Logical Tunnel) interfaces to interconnect different logical routers. Interface section of workbook is based on different hardware PIC with back to back interface connections to practice different encapsulations and logical properties of interfaces. Routing protocol part of book is based on LT interfaces.
SONET Interface: Set up uses M7i router with 4X STM-1 SDH MM PIC. Port 0 and 1 of PIC are connected back to back. Port 0 is part of logical system SONETR1 and Port 1 is part of logical system SONETR2. We can use following command to swap the PIC:
SONET HDLC Encapsulation:
Interface Physical Properties:
lab@DEVANG-M7i# run show configuration interfaces so-0/0/0 | display set set interfaces so-0/0/0 keepalives interval 5 set interfaces so-0/0/0 hold-time up 20 set interfaces so-0/0/0 hold-time down 20 set interfaces so-0/0/0 encapsulation cisco-hdlc set interfaces so-0/0/0 sonet-options fcs 32 set interfaces so-0/0/0 sonet-options path-trace FOR_TESTING
lab@DEVANG-M7i# run show configuration interfaces so-0/0/1 | display set set interfaces so-0/0/1 keepalives interval 5 set interfaces so-0/0/1 hold-time up 20 set interfaces so-0/0/1 hold-time down 20 set interfaces so-0/0/1 encapsulation cisco-hdlc set interfaces so-0/0/1 sonet-options fcs 32 set interfaces so-0/0/1 sonet-options path-trace FOR_TEST
Interface Logical Properties: We can set MTU/Multiple IP as a part of logical properties. set logical-systems SONETR1 interfaces so-0/0/0 unit 0 family inet address 192.168.1.1/32 destination 192.168.2.2 set logical-systems SONETR2 interfaces so-0/0/1 unit 0 family inet address 192.168.2.2/32 destination 192.168.1.1
Show commands:
To verify interface status: If there is a mismatch in any encapsulation, framing or keepalive configuration or if you forgot to configure parameter on one end of the link, interface will not come up. lab@DEVANG-M7i# run show interfaces terse | match so so-0/0/0 up up so-0/0/0.0 up up inet 192.168.1.1 --> 192.168.2.2 so-0/0/1 up up so-0/0/1.0 up up inet 192.168.2.2 --> 192.168.1.1
lab@DEVANG-M7i# run show interfaces so-0/0/0 | match MTU Link-level type: Cisco-HDLC, MTU: 4474, Clocking: Internal, SDH mode, Speed: OC3, Loopback: None, Protocol inet, MTU: 4470
[edit logical-systems] lab@DEVANG-M7i# run show interfaces so-0/0/1 | match MTU Link-level type: Cisco-HDLC, MTU: 4474, Clocking: Internal, SDH mode, Speed: OC3, Loopback: None, Protocol inet, MTU: 4470
All other parameters including Hold time Down/UP, keep alive and errors can be verified using show interface so-x/x/x extensive command.
SONET PPP Encapsulation:
Interface Physical Properties:
lab@DEVANG-M7i# run show configuration interfaces so-0/0/0 | display set set interfaces so-0/0/0 keepalives interval 5 set interfaces so-0/0/0 hold-time up 20 set interfaces so-0/0/0 hold-time down 20 set interfaces so-0/0/0 encapsulation ppp set interfaces so-0/0/0 sonet-options fcs 32 set interfaces so-0/0/0 sonet-options path-trace FOR_TESTING
lab@DEVANG-M7i# run show configuration interfaces so-0/0/1 | display set set interfaces so-0/0/1 keepalives interval 5 set interfaces so-0/0/1 hold-time up 20 set interfaces so-0/0/1 hold-time down 20 set interfaces so-0/0/1 encapsulation ppp set interfaces so-0/0/1 sonet-options fcs 32 set interfaces so-0/0/1 sonet-options path-trace FOR_TEST
Interface Logical Properties: This configuration will remain same as Cisco HDLC configuration section.
Show commands:
lab@DEVANG-M7i# run show interfaces so-0/0/0 | match "NCP|LCP|CHAP" LCP state: Opened NCP state: inet: Opened, inet6: Not-configured, iso: Not-configured, mpls: Not-configured CHAP state: Closed
lab@DEVANG-M7i# run show interfaces so-0/0/1 | match "NCP|LCP|CHAP" LCP state: Opened NCP state: inet: Opened, inet6: Not-configured, iso: Not-configured, mpls: Not-configured CHAP state: Closed ß CHAP Authentication is not set. If password of CHAP or username is wrong then interface will be stuck in LCP.
lab@DEVANG-M7i# run show interfaces terse | match so so-0/0/0 up up so-0/0/0.0 up up inet 192.168.1.1 --> 192.168.2.2 so-0/0/1 up up so-0/0/1.0 up up inet 192.168.2.2 --> 192.168.1.1
lab@DEVANG-M7i# run show interfaces so-0/0/1 | match MTU Link-level type: PPP, MTU: 4474 (Physical interface MTU, you can change under physical property of interface), Clocking: Internal, SDH mode, Speed: OC3, Loopback: None, FCS: 32, Protocol inet, MTU: 1500 (IPv4 MTU, you can change under logical property of interface) Flags: Is-Primary, User-MTU
lab@DEVANG-M7i# run show interfaces so-0/0/1 | match MTU Link-level type: PPP, MTU: 1600 (Physical interface MTU, you can change under physical property of interface), Clocking: Internal, SDH mode, Speed: OC3, Loopback: None, FCS: 32, Protocol inet, MTU: 1500 (IPv4 MTU, you can change under logical property of interface) Flags: Is-Primary, User-MTU
lab@DEVANG-M7i# run show interfaces ge-0/3/1 | match MTU Link-level type: Ethernet, MTU: 1514, Speed: 1000mbps, BPDU Error: None, MAC-REWRITE Error: None, Protocol inet, MTU: 1500
Depends on the type of interface and Layer 2 technology, you will see the difference between Physical and IPv4 MTU. For ex SONET add 4 byte of Framing so there is only 4byte of difference between physical (4474) and logical (4470) MTU. Ethernet fame adds 14bytes of frame so the physical MTU (1514) and Logical MTU (1500) is different by 14 bytes.
PPP with CHAP Authentication:
On SONETR1: lab@DEVANG-M7i# run show configuration access | display set set access profile PPPAUTH client SONETR2 chap-secret <password>
lab@DEVANG-M7i# run show configuration interfaces so-0/0/0 | display set set interfaces so-0/0/0 keepalives interval 5 set interfaces so-0/0/0 hold-time up 20 set interfaces so-0/0/0 hold-time down 20 set interfaces so-0/0/0 encapsulation ppp set interfaces so-0/0/0 sonet-options fcs 32 set interfaces so-0/0/0 sonet-options path-trace FOR_TESTING set interfaces so-0/0/0 ppp-options chap access-profile PPPAUTH set interfaces so-0/0/0 ppp-options chap local-name SONETR1
On SONETR2: set access profile PPPAUTH1 client SONETR1 chap-secret <password>
lab@DEVANG-M7i# run show configuration interfaces so-0/0/1 | display set set interfaces so-0/0/1 keepalives interval 5 set interfaces so-0/0/1 hold-time up 20 set interfaces so-0/0/1 hold-time down 20 set interfaces so-0/0/1 encapsulation ppp set interfaces so-0/0/1 sonet-options fcs 32 set interfaces so-0/0/1 sonet-options path-trace FOR_TEST set interfaces so-0/0/1 ppp-options chap access-profile PPPAUTH1 set interfaces so-0/0/1 ppp-options chap local-name SONETR2
SONET Frame-Relay Encapsulation:
SONETR1: lab@DEVANG-M7i# run show configuration interfaces so-0/0/0 | display set set interfaces so-0/0/0 dce set interfaces so-0/0/0 encapsulation frame-relay set interfaces so-0/0/0 lmi lmi-type itu set interfaces so-0/0/0 sonet-options fcs 32 set interfaces so-0/0/0 sonet-options path-trace FOR_TESTING
set logical-systems SONETR1 interfaces so-0/0/0 unit 0 dlci 100 set logical-systems SONETR1 interfaces so-0/0/0 unit 0 family inet address 192.168.1.1/32 destination 192.168.2.2
SONETR2: lab@DEVANG-M7i# run show configuration interfaces so-0/0/1 | display set set interfaces so-0/0/1 dce set interfaces so-0/0/1 encapsulation frame-relay set interfaces so-0/0/1 lmi lmi-type itu set interfaces so-0/0/1 sonet-options fcs 32 set interfaces so-0/0/1 sonet-options path-trace FOR_TEST
lab@DEVANG-M7i# ...ow configuration logical-systems SONETR2 interfaces so-0/0/1 | display set set logical-systems SONETR2 interfaces so-0/0/1 unit 0 dlci 100 set logical-systems SONETR2 interfaces so-0/0/1 unit 0 family inet address 192.168.2.2/32 destination 192.168.1.1
t391 generate polls at every five second n391 request full status with every poll it should consider the link down if two errors (n392) occur in three monitored events (n393)
DCE t392 is poll expectation timer, it must be higher then DTE's t391 timer DTE t391 poll timer (if DCE T392 is 25 then keep DTEt391 25)
lab@DEVANG-M7i# run show interfaces so-0/0/0 Physical interface: so-0/0/0, Enabled, Physical link is Up Interface index: 149, SNMP ifIndex: 125 Link-level type: Frame-Relay, MTU: 4474, Clocking: Internal, SDH mode, Speed: OC3, Loopback: None, FCS: 32, Payload scrambler: Enabled Device flags : Present Running Interface flags: Point-To-Point SNMP-Traps Internal: 0x4000 Link flags : No-Keepalives DCE Q.933 Annex A LMI settings: n392dce 3, n393dce 4, t392dce 15 seconds LMI: Input: 0 (never), Output: 0 (never) =========================================================== Other type of LMI output will be: ANSI LMI settings: n391dte 6, n392dte 3, n393dte 4, t391dte 10 seconds LMI: Input: 10 (00:00:40 ago), Output: 13 (00:00:11 ago) =========================================================== DTE statistics: Enquiries sent : 0 Full enquiries sent : 0 Enquiry responses received : 0 Full enquiry responses received : 0 DCE statistics: Enquiries received : 0 Full enquiries received : 0 Enquiry responses sent : 0 Full enquiry responses sent : 0 Common statistics: Unknown messages received : 0 Asynchronous updates received : 0 Out-of-sequence packets received : 0 Keepalive responses timedout : 0 CoS queues : 4 supported, 4 maximum usable queues Last flapped : 2010-03-09 20:39:25 UTC (20:16:42 ago) Input rate : 0 bps (0 pps) Output rate : 0 bps (0 pps) SDH alarms : None SDH defects : None
Logical interface so-0/0/0.0 (Index 104) (SNMP ifIndex 129) Flags: Point-To-Point SNMP-Traps Encapsulation: FR-NLPID Input packets : 3 Output packets: 3 Protocol inet, MTU: 4470 Flags: Is-Primary Addresses, Flags: Is-Default Is-Preferred Is-Primary Destination: 192.168.2.2, Local: 192.168.1.1 DLCI 100 Flags: Active Total down time: 00:13:20 sec, Last down: 00:20:10 ago Input packets : 3 Output packets: 3 DLCI statistics: Active DLCI :1 Inactive DLCI :0
lab@DEVANG-M7i# run show interfaces terse | match so-* so-0/0/0 up up so-0/0/0.0 up up inet 192.168.1.1 --> 192.168.2.2 so-0/0/1 up up so-0/0/1.0 up up inet 192.168.2.2 --> 192.168.1.1
NOTE: 1. Back to back FR connection needs both ends to be DCE or atleast one end should be DCE. 2. Back to Back FR connection needs same DLCI at both end 3. Check for LMI mismatch: ANSI or ITU 4. By default JUNIPER interface type will be point to point for Frame Relay encapsulation.
For Point To multipoint: Need following changes on router interfaces:
Change interface type to multipoint: Set unit 0 multipoint
Configure the static mappings of remote end and DLCI: Set multipoint-destination 10.0.0.2 dlci 222 Set multipoint-destination 10.0.0.3 dlci 333
If you want dynamic mapping then use: Set unit 0 inverse-arp
AE & AS Interface:
By default you can not configure any AE or AS interface, to configure it you need to configure number of Aggregate devices support on router using following two chassis level commands:
lab@DEVANG-M7i# show | display set set chassis aggregated-devices ethernet device-count N set chassis aggregated-devices sonet device-count N
Aggregated Ethernet:
lab@DEVANG-M7i# show | display set set logical-systems AER1 interfaces ae0 unit 0 family inet address 100.100.100.1/24
lab@DEVANG-M7i# show | display set set logical-systems AER2 interfaces ae1 unit 0 family inet address 100.100.100.2/24
lab@DEVANG-M7i# run show configuration interfaces | match ge-0/3/* | display set set interfaces ge-0/3/0 gigether-options 802.3ad ae0 set interfaces ge-0/3/1 gigether-options 802.3ad ae0 set interfaces ge-0/3/2 gigether-options 802.3ad ae1 set interfaces ge-0/3/3 gigether-options 802.3ad ae1
lab@DEVANG-M7i# show chassis aggregated-devices | display set set chassis aggregated-devices ethernet device-count 3 set chassis aggregated-devices sonet device-count 3
lab@DEVANG-M7i# run show interfaces terse | match "ae|ge-0/3/*" ge-0/3/0 up up ge-0/3/0.0 up up aenet --> ae0.0 ge-0/3/1 up up ge-0/3/1.0 up up aenet --> ae0.0 ge-0/3/2 up up ge-0/3/2.0 up up aenet --> ae1.0 ge-0/3/3 up up ge-0/3/3.0 up up aenet --> ae1.0 ae0 up up ae0.0 up up inet 100.100.100.1/24 ae1 up up ae1.0 up up inet 100.100.100.2/24 ae2 up down
lab@DEVANG-M7i# run show interfaces ae0 extensive Physical interface: ae0, Enabled, Physical link is Up Interface index: 153, SNMP ifIndex: 145, Generation: 161 Link-level type: Ethernet, MTU: 1514, Speed: 2000mbps (I have two Gig links in bundle due to that here it showing aggregated speed), BPDU Error: None, MAC-REWRITE Error: None, Loopback: Disabled, Source filtering: Disabled, Flow control: Disabled, Minimum links needed: 1, Minimum bandwidth needed: 0 Device flags : Present Running Interface flags: SNMP-Traps Internal: 0x4000 Current address: 00:1b:c0:8f:c3:f0, Hardware address: 00:1b:c0:8f:c3:f0 Last flapped : 2010-03-12 15:51:07 UTC (00:14:47 ago) Statistics last cleared: Never Traffic statistics: Input bytes : 564 0 bps Output bytes : 686 0 bps Input packets: 7 0 pps ß Ping will increase this counter Output packets: 7 0 pps ß Ping will increase this counter IPv6 transit statistics: Input bytes : 0 Output bytes : 0 Input packets: 0 Output packets: 0 Input errors: Errors: 0, Drops: 0, Framing errors: 0, Runts: 0, Giants: 0, Policed discards: 0, Resource errors: 0 Output errors: Carrier transitions: 0, Errors: 0, Drops: 0, MTU errors: 0, Resource errors: 0 Ingress queues: 8 supported, 4 in use Queue counters: Queued packets Transmitted packets Dropped packets 0 best-effort 7 7 0 1 expedited-fo 0 0 0 2 assured-forw 0 0 0 3 network-cont 0 0 0 Egress queues: 8 supported, 4 in use Queue counters: Queued packets Transmitted packets Dropped packets 0 best-effort 7 7 0 1 expedited-fo 0 0 0 2 assured-forw 0 0 0 3 network-cont 0 0 0
Logical interface ae0.0 (Index 106) (SNMP ifIndex 151) (Generation 185) Flags: SNMP-Traps 0x4000 Encapsulation: ENET2 Statistics Packets pps Bytes bps Bundle: Input : 7 0 564 0 Output: 7 0 630 0 Link: ge-0/3/0.0 Input : 7 0 564 0 ß This is indicating the per source-destination load-balancing as counter on one interface is incrementing and on other interface its not. Output: 7 0 630 0 ge-0/3/1.0 Input : 0 0 0 0 Output: 0 0 0 0 Marker Statistics: Marker Rx Resp Tx Unknown Rx Illegal Rx ge-0/3/0.0 0 0 0 0 ge-0/3/1.0 0 0 0 0 Protocol inet, MTU: 1500, Generation: 226, Route table: 13 Flags: Is-Primary Addresses, Flags: Is-Default Is-Preferred Is-Primary Destination: 100.100.100/24, Local: 100.100.100.1, Broadcast: 100.100.100.255, Generation: 227
Unnumbered Interface: To configure any physical interface to use IP address of loopback interface we just need to configure physical interface with “family inet” only without any addressing configuration on it.
VPLS
[edit logical-systems] lab@DEVANG-M7i# show | display set set logical-systems CE1 interfaces ge-0/3/2 unit 101 vlan-id 101 set logical-systems CE1 interfaces ge-0/3/2 unit 101 family inet address 101.101.101.2/24 set logical-systems CE1 interfaces ge-0/3/2 unit 512 vlan-id 512 set logical-systems CE1 interfaces ge-0/3/2 unit 512 family inet address 102.102.102.1/24 set logical-systems CE1 interfaces lo0 unit 11 family inet address 11.11.11.11/32 set logical-systems CE1 protocols ospf area 0.0.0.1 interface lo0.11 set logical-systems CE1 protocols ospf area 0.0.0.1 interface ge-0/3/2.512
set logical-systems CE2 interfaces ge-0/3/3 unit 512 vlan-id 512 set logical-systems CE2 interfaces ge-0/3/3 unit 512 family inet address 102.102.102.2/24 set logical-systems CE2 interfaces lo0 unit 22 family inet address 22.22.22.22/32 set logical-systems CE2 protocols ospf area 0.0.0.1 interface lo0.22 set logical-systems CE2 protocols ospf area 0.0.0.1 interface ge-0/3/3.512
set logical-systems P interfaces so-0/0/1 unit 0 family inet address 12.12.12.2/24 set logical-systems P interfaces so-0/0/1 unit 0 family mpls set logical-systems P interfaces so-0/0/2 unit 0 family inet address 13.13.13.2/24 set logical-systems P interfaces so-0/0/2 unit 0 family mpls set logical-systems P interfaces lo0 unit 200 family inet address 192.168.2.2/32 set logical-systems P protocols mpls interface so-0/0/1.0 set logical-systems P protocols mpls interface so-0/0/2.0 set logical-systems P protocols ospf area 0.0.0.0 interface so-0/0/1.0 set logical-systems P protocols ospf area 0.0.0.0 interface so-0/0/2.0 set logical-systems P protocols ospf area 0.0.0.0 interface lo0.200 passive set logical-systems P protocols ldp interface so-0/0/1.0 set logical-systems P protocols ldp interface so-0/0/2.0
set logical-systems PE1 interfaces so-0/0/0 unit 0 family inet address 12.12.12.1/24 set logical-systems PE1 interfaces so-0/0/0 unit 0 family mpls set logical-systems PE1 interfaces ge-0/3/0 unit 101 vlan-id 101 set logical-systems PE1 interfaces ge-0/3/0 unit 101 family inet address 101.101.101.1/24 set logical-systems PE1 interfaces ge-0/3/0 unit 512 encapsulation vlan-vpls set logical-systems PE1 interfaces ge-0/3/0 unit 512 vlan-id 512 set logical-systems PE1 interfaces ge-0/3/0 unit 512 family vpls set logical-systems PE1 interfaces lo0 unit 100 family inet address 192.168.1.1/32 set logical-systems PE1 protocols mpls interface so-0/0/0.0 set logical-systems PE1 protocols bgp group VPLS type internal set logical-systems PE1 protocols bgp group VPLS local-address 192.168.1.1 set logical-systems PE1 protocols bgp group VPLS family inet unicast set logical-systems PE1 protocols bgp group VPLS family inet-vpn unicast set logical-systems PE1 protocols bgp group VPLS family l2vpn signaling set logical-systems PE1 protocols bgp group VPLS neighbor 192.168.3.3 set logical-systems PE1 protocols ospf area 0.0.0.0 interface all set logical-systems PE1 protocols ospf area 0.0.0.0 interface lo0.100 passive set logical-systems PE1 protocols ldp interface so-0/0/0.0 set logical-systems PE1 routing-instances VPLS1 instance-type vpls set logical-systems PE1 routing-instances VPLS1 interface ge-0/3/0.512 set logical-systems PE1 routing-instances VPLS1 route-distinguisher 192.168.1.1:100 set logical-systems PE1 routing-instances VPLS1 vrf-target target:100:100 set logical-systems PE1 routing-instances VPLS1 protocols vpls site CE1 site-identifier 512 set logical-systems PE1 routing-instances VPN1 instance-type vrf set logical-systems PE1 routing-instances VPN1 interface ge-0/3/0.101 set logical-systems PE1 routing-instances VPN1 route-distinguisher 192.168.1.1:111 set logical-systems PE1 routing-instances VPN1 vrf-target target:111:111 set logical-systems PE1 routing-instances VPN1 routing-options static route 21.21.21.0/24 next-hop 101.101.101.2 set logical-systems PE1 routing-options autonomous-system 100
set logical-systems PE2 interfaces so-0/0/3 unit 0 family inet address 13.13.13.3/24 set logical-systems PE2 interfaces so-0/0/3 unit 0 family mpls set logical-systems PE2 interfaces ge-0/3/1 unit 103 vlan-id 103 set logical-systems PE2 interfaces ge-0/3/1 unit 103 family inet address 103.103.103.3/24 set logical-systems PE2 interfaces ge-0/3/1 unit 512 encapsulation vlan-vpls set logical-systems PE2 interfaces ge-0/3/1 unit 512 vlan-id 512 set logical-systems PE2 interfaces ge-0/3/1 unit 512 family vpls set logical-systems PE2 interfaces lo0 unit 300 family inet address 192.168.3.3/32 set logical-systems PE2 protocols mpls interface so-0/0/3.0 set logical-systems PE2 protocols bgp group VPLS type internal set logical-systems PE2 protocols bgp group VPLS family inet unicast set logical-systems PE2 protocols bgp group VPLS family inet-vpn unicast set logical-systems PE2 protocols bgp group VPLS family l2vpn signaling set logical-systems PE2 protocols bgp group VPLS neighbor 192.168.1.1 local-address 192.168.3.3 set logical-systems PE2 protocols ospf area 0.0.0.0 interface so-0/0/3.0 set logical-systems PE2 protocols ospf area 0.0.0.0 interface lo0.300 passive set logical-systems PE2 protocols ldp interface so-0/0/3.0 set logical-systems PE2 routing-instances VPLS1 instance-type vpls set logical-systems PE2 routing-instances VPLS1 interface ge-0/3/1.512 set logical-systems PE2 routing-instances VPLS1 route-distinguisher 192.168.3.3:100 set logical-systems PE2 routing-instances VPLS1 vrf-target target:100:100 set logical-systems PE2 routing-instances VPLS1 protocols vpls site CE2 site-identifier 215 set logical-systems PE2 routing-instances VPN1 instance-type vrf set logical-systems PE2 routing-instances VPN1 interface ge-0/3/1.103 set logical-systems PE2 routing-instances VPN1 route-distinguisher 192.168.3.3:333 set logical-systems PE2 routing-instances VPN1 vrf-target import target:111:111 set logical-systems PE2 routing-instances VPN1 vrf-target export target:333:333 set logical-systems PE2 routing-instances VPN1 routing-options static route 31.31.31.0/24 next-hop 103.103.103.2 set logical-systems PE2 routing-options autonomous-system 100 set logical-systems logical-systems
[edit logical-systems] lab@DEVANG-M7i#
[edit logical-systems] lab@DEVANG-M7i# run show vpls connections logical-system PE1 Layer-2 VPN connections:
Legend for connection status (St) EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS EM -- encapsulation mismatch WE -- interface and instance encaps not same VC-Dn -- Virtual circuit down NP -- interface hardware not present CM -- control-word mismatch -> -- only outbound connection is up CN -- circuit not provisioned <- -- only inbound connection is up OR -- out of range Up -- operational OL -- no outgoing label Dn -- down LD -- local site signaled down CF -- call admission control failure RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label MM -- MTU mismatch MI -- Mesh-Group ID not availble BK -- Backup connection ST -- Standby connection PF -- Profile parse failure PB -- Profile busy
Legend for interface status Up -- operational Dn -- down
Instance: VPLS1 Local site: CE1 (512) connection-site Type St Time last up # Up trans 215 rmt Up Mar 19 20:53:39 2010 1 Remote PE: 192.168.3.3, Negotiated control-word: No Incoming label: 800030, Outgoing label: 800039 Local interface: vt-1/2/0.84935168, Status: Up, Encapsulation: VPLS Description: Intf - vpls VPLS1 local site 512 remote site 215
[edit logical-systems] lab@DEVANG-M7i# run show vpls connections logical-system PE2 Layer-2 VPN connections:
Legend for connection status (St) EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS EM -- encapsulation mismatch WE -- interface and instance encaps not same VC-Dn -- Virtual circuit down NP -- interface hardware not present CM -- control-word mismatch -> -- only outbound connection is up CN -- circuit not provisioned <- -- only inbound connection is up OR -- out of range Up -- operational OL -- no outgoing label Dn -- down LD -- local site signaled down CF -- call admission control failure RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label MM -- MTU mismatch MI -- Mesh-Group ID not availble BK -- Backup connection ST -- Standby connection PF -- Profile parse failure PB -- Profile busy
Legend for interface status Up -- operational Dn -- down
Instance: VPLS1 Local site: CE2 (215) connection-site Type St Time last up # Up trans 512 rmt Up Mar 19 20:53:39 2010 1 Remote PE: 192.168.1.1, Negotiated control-word: No Incoming label: 800039, Outgoing label: 800030 Local interface: vt-1/2/0.68157952, Status: Up, Encapsulation: VPLS Description: Intf - vpls VPLS1 local site 215 remote site 512
[edit logical-systems] lab@DEVANG-M7i#
[edit logical-systems] lab@DEVANG-M7i# run show vpls statistics logical-system PE1 VPLS statistics:
Instance: VPLS1 Local interface: ge-0/3/0.512, Index: 90 Multicast packets: 109062 Multicast bytes : 9373658 Flooded packets : 109071 Flooded bytes : 9374618 Current MAC count: 1 Local interface: vt-1/2/0.84935168, Index: 91 Remote PE: 192.168.3.3 Multicast packets: 107388 Multicast bytes : 9235640 Flooded packets : 107388 Flooded bytes : 9235640 Current MAC count: 1
[edit logical-systems] lab@DEVANG-M7i# run show vpls statistics logical-system PE2 VPLS statistics:
Instance: VPLS1 Local interface: ge-0/3/1.512, Index: 89 Multicast packets: 108997 Multicast bytes : 9373972 Flooded packets : 109005 Flooded bytes : 9374722 Current MAC count: 1 Local interface: vt-1/2/0.68157952, Index: 92 Remote PE: 192.168.1.1 Multicast packets: 107432 Multicast bytes : 9234298 Flooded packets : 107432 Flooded bytes : 9234298 Current MAC count: 1
[edit logical-systems] lab@DEVANG-M7i#
[edit logical-systems] lab@DEVANG-M7i# run show route table mpls.0 logical-system PE1
mpls.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both
0 *[MPLS/0] 1w4d 16:27:21, metric 1 Receive 1 *[MPLS/0] 1w4d 16:27:21, metric 1 Receive 2 *[MPLS/0] 1w4d 16:27:21, metric 1 Receive 299776 *[LDP/9] 1w4d 16:23:47, metric 1 > via so-0/0/0.0, Pop 299776(S=0) *[LDP/9] 1w4d 16:23:47, metric 1 > via so-0/0/0.0, Pop 299792 *[LDP/9] 1w4d 16:19:30, metric 1 > via so-0/0/0.0, Swap 299792 299808 *[VPN/170] 1w3d 17:25:40 > to 101.101.101.2 via ge-0/3/0.101, Pop 800030 *[VPLS/7] 1w3d 17:46:16 > via vt-1/2/0.84935168, Pop vt-1/2/0.84935168 *[VPLS/7] 1w3d 17:46:16, metric2 1 > via so-0/0/0.0, Push 800039, Push 299792(top)
[edit logical-systems] lab@DEVANG-M7i# run show route table mpls.0 logical-system P
mpls.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both
0 *[MPLS/0] 1w4d 16:24:32, metric 1 Receive 1 *[MPLS/0] 1w4d 16:24:32, metric 1 Receive 2 *[MPLS/0] 1w4d 16:24:32, metric 1 Receive 299776 *[LDP/9] 1w4d 16:23:53, metric 1 > via so-0/0/1.0, Pop 299776(S=0) *[LDP/9] 1w4d 16:23:53, metric 1 > via so-0/0/1.0, Pop 299792 *[LDP/9] 1w4d 16:19:36, metric 1 > via so-0/0/2.0, Pop 299792(S=0) *[LDP/9] 1w4d 16:19:36, metric 1 > via so-0/0/2.0, Pop
[edit logical-systems] lab@DEVANG-M7i# run show route table mpls.0 logical-system PE2
mpls.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both
0 *[MPLS/0] 1w4d 16:21:46, metric 1 Receive 1 *[MPLS/0] 1w4d 16:21:46, metric 1 Receive 2 *[MPLS/0] 1w4d 16:21:46, metric 1 Receive 299776 *[LDP/9] 1w4d 16:19:39, metric 1 > via so-0/0/3.0, Pop 299776(S=0) *[LDP/9] 1w4d 16:19:39, metric 1 > via so-0/0/3.0, Pop 299792 *[LDP/9] 1w4d 16:19:39, metric 1 > via so-0/0/3.0, Swap 299776 299808 *[VPN/170] 1w3d 17:13:13 > to 103.103.103.2 via ge-0/3/1.103, Pop 800039 *[VPLS/7] 1w3d 17:46:25 > via vt-1/2/0.68157952, Pop vt-1/2/0.68157952 *[VPLS/7] 1w3d 17:46:25, metric2 1 > via so-0/0/3.0, Push 800030, Push 299776(top)
[edit logical-systems] lab@DEVANG-M7i#
lab@DEVANG-M7i# run show interfaces terse | match vt-* vt-1/2/0 up up vt-1/2/0.68157952 up up vpls vt-1/2/0.84935168 up up vpls
[edit logical-systems] lab@DEVANG-M7i# run show route table inet.0 logical-system PE1
inet.0: 7 destinations, 8 routes (7 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both
12.12.12.0/24 *[Direct/0] 1w4d 16:53:36 > via so-0/0/0.0 [OSPF/10] 1w4d 16:31:01, metric 1 > via so-0/0/0.0 12.12.12.1/32 *[Local/0] 1w4d 16:53:36 Local via so-0/0/0.0 13.13.13.0/24 *[OSPF/10] 1w4d 16:26:21, metric 2 > via so-0/0/0.0 192.168.1.1/32 *[Direct/0] 1w4d 16:53:36 > via lo0.100 192.168.2.2/32 *[OSPF/10] 1w4d 16:26:21, metric 1 > via so-0/0/0.0 192.168.3.3/32 *[OSPF/10] 1w4d 16:23:30, metric 2 > via so-0/0/0.0 224.0.0.5/32 *[OSPF/10] 1w4d 16:31:06, metric 1 MultiRecv
[edit logical-systems] lab@DEVANG-M7i# run show route table inet.0 logical-system P
inet.0: 8 destinations, 10 routes (8 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both
12.12.12.0/24 *[Direct/0] 1w4d 16:53:47 > via so-0/0/1.0 [OSPF/10] 1w4d 16:26:37, metric 1 > via so-0/0/1.0 12.12.12.2/32 *[Local/0] 1w4d 16:53:47 Local via so-0/0/1.0 13.13.13.0/24 *[Direct/0] 1w4d 16:48:59 > via so-0/0/2.0 [OSPF/10] 1w4d 16:26:37, metric 1 > via so-0/0/2.0 13.13.13.2/32 *[Local/0] 1w4d 16:53:47 Local via so-0/0/2.0 192.168.1.1/32 *[OSPF/10] 1w4d 16:26:32, metric 1 > via so-0/0/1.0 192.168.2.2/32 *[Direct/0] 1w4d 16:53:47 > via lo0.200 192.168.3.3/32 *[OSPF/10] 1w4d 16:23:42, metric 1 > via so-0/0/2.0 224.0.0.5/32 *[OSPF/10] 1w4d 16:26:42, metric 1 MultiRecv
[edit logical-systems] lab@DEVANG-M7i# run show route table inet.0 logical-system PE2
inet.0: 7 destinations, 8 routes (7 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both
12.12.12.0/24 *[OSPF/10] 1w4d 16:23:48, metric 2 > via so-0/0/3.0 13.13.13.0/24 *[Direct/0] 1w4d 16:49:13 > via so-0/0/3.0 [OSPF/10] 1w4d 16:23:53, metric 1 > via so-0/0/3.0 13.13.13.3/32 *[Local/0] 1w4d 16:53:52 Local via so-0/0/3.0 192.168.1.1/32 *[OSPF/10] 1w4d 16:23:48, metric 2 > via so-0/0/3.0 192.168.2.2/32 *[OSPF/10] 1w4d 16:23:48, metric 1 > via so-0/0/3.0 192.168.3.3/32 *[Direct/0] 1w4d 16:53:52 > via lo0.300 224.0.0.5/32 *[OSPF/10] 1w4d 16:23:58, metric 1 MultiRecv
[edit logical-systems] lab@DEVANG-M7i# run show route table inet.3 logical-system PE1
inet.3: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both
192.168.2.2/32 *[LDP/9] 1w4d 16:26:16, metric 1 > via so-0/0/0.0 192.168.3.3/32 *[LDP/9] 1w4d 16:21:59, metric 1 > via so-0/0/0.0, Push 299792
[edit logical-systems] lab@DEVANG-M7i# run show route table inet.3 logical-system P
inet.3: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both
192.168.1.1/32 *[LDP/9] 1w4d 16:26:21, metric 1 > via so-0/0/1.0 192.168.3.3/32 *[LDP/9] 1w4d 16:22:04, metric 1 > via so-0/0/2.0
[edit logical-systems] lab@DEVANG-M7i# run show route table inet.3 logical-system PE2
inet.3: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both
192.168.1.1/32 *[LDP/9] 1w4d 16:22:20, metric 1 > via so-0/0/3.0, Push 299776 192.168.2.2/32 *[LDP/9] 1w4d 16:22:20, metric 1 > via so-0/0/3.0
[edit logical-systems] lab@DEVANG-M7i#
[edit logical-systems] lab@DEVANG-M7i# run show ospf neighbor logical-system CE1 Address Interface State ID Pri Dead 102.102.102.2 ge-0/3/2.512 Full 22.22.22.22 128 39
[edit logical-systems] lab@DEVANG-M7i# run show ospf neighbor logical-system CE2 Address Interface State ID Pri Dead 102.102.102.1 ge-0/3/3.512 Full 11.11.11.11 128 35
[edit logical-systems]
[edit logical-systems] lab@DEVANG-M7i# run ping 22.22.22.22 logical-system CE1 PING 22.22.22.22 (22.22.22.22): 56 data bytes 64 bytes from 22.22.22.22: icmp_seq=0 ttl=64 time=1.065 ms 64 bytes from 22.22.22.22: icmp_seq=1 ttl=64 time=1.015 ms 64 bytes from 22.22.22.22: icmp_seq=2 ttl=64 time=0.917 ms
GRES for RE:
lab@thunder-re0> show configuration chassis redundancy routing-engine 0 master; routing-engine 1 backup; failover { on-loss-of-keepalives; inactive: on-disk-failure; } /* Disable only for JUNOS upgrade */ graceful-switchover;
{master}
lab@thunder-re0> show chassis routing-engine Routing Engine status: Slot 0: Current state Master Election priority Master Temperature 36 degrees C / 96 degrees F CPU temperature 41 degrees C / 105 degrees F DRAM 3584 MB Memory utilization 14 percent CPU utilization: User 5 percent Background 0 percent Kernel 6 percent Interrupt 1 percent Idle 89 percent Model RE-S-2000 Serial ID 9009005660 Start time 2010-03-30 16:13:39 UTC Uptime 5 minutes, 56 seconds Last reboot reason panic:kdb_sysctl_panic Load averages: 1 minute 5 minute 15 minute 0.00 0.08 0.05 Routing Engine status: Slot 1: Current state Backup Election priority Backup Temperature 35 degrees C / 95 degrees F CPU temperature 37 degrees C / 98 degrees F DRAM 3584 MB Memory utilization 0 percent CPU utilization: User 1 percent Background 0 percent Kernel 3 percent Interrupt 0 percent Idle 96 percent Model RE-S-2000 Serial ID 9009005734 Start time 2010-03-30 15:58:13 UTC Uptime 21 minutes, 16 seconds Last reboot reason Router rebooted after a normal shutdown.
{master} lab@thunder-re0>
To fail over simulate the kernel panic by login into shell as root user and run this command: sysctl -w debug.kdb.panic=1
After failover:
{backup} lab@thunder-re0> show chassis routing-engine Routing Engine status: Slot 0: Current state Backup Election priority Master Temperature 37 degrees C / 98 degrees F CPU temperature 42 degrees C / 107 degrees F DRAM 3584 MB Memory utilization 12 percent CPU utilization: User 7 percent Background 0 percent Kernel 4 percent Interrupt 1 percent Idle 88 percent Model RE-S-2000 Serial ID 9009005660 Start time 2010-03-30 16:13:39 UTC Uptime 2 minutes, 6 seconds Last reboot reason panic:kdb_sysctl_panic Load averages: 1 minute 5 minute 15 minute 0.26 0.17 0.08 Routing Engine status: Slot 1: Current state Master Election priority Backup Temperature 34 degrees C / 93 degrees F CPU temperature 37 degrees C / 98 degrees F DRAM 3584 MB Memory utilization 15 percent CPU utilization: User 0 percent Background 0 percent Kernel 3 percent Interrupt 1 percent Idle 96 percent Model RE-S-2000 Serial ID 9009005734 Start time 2010-03-30 15:58:13 UTC Uptime 17 minutes, 36 seconds Last reboot reason Router rebooted after a normal shutdown.
{backup}
To verify the status of Graceful switch over you can login in to backup and run show system switchover command. You must have to run this command on backup RE not on Master RE. {backup} lab@thunder-re0> show system switchover Graceful switchover: On Configuration database: Ready Kernel database: Synchronizing Peer state: Steady State
{backup} Graceful Restart in BGP is negotiated using OPEN messages during neighbor buildup, in OSPF using LSA9 and in ISIS using TLV.
ISIS:
[edit logical-systems R1] lab@DEVANG-M7i# show | display set set logical-systems R1 interfaces lt-1/2/0 unit 112 encapsulation vlan set logical-systems R1 interfaces lt-1/2/0 unit 112 vlan-id 12 set logical-systems R1 interfaces lt-1/2/0 unit 112 peer-unit 121 set logical-systems R1 interfaces lt-1/2/0 unit 112 family inet address 10.0.4.5/30 set logical-systems R1 interfaces lt-1/2/0 unit 112 family iso set logical-systems R1 interfaces lt-1/2/0 unit 113 encapsulation vlan set logical-systems R1 interfaces lt-1/2/0 unit 113 vlan-id 13 set logical-systems R1 interfaces lt-1/2/0 unit 113 peer-unit 131 set logical-systems R1 interfaces lt-1/2/0 unit 113 family inet address 10.0.4.13/30 set logical-systems R1 interfaces lt-1/2/0 unit 113 family iso set logical-systems R1 interfaces lo0 unit 101 family inet address 192.168.1.1/32 set logical-systems R1 interfaces lo0 unit 101 family iso address 49.0001.0000.0000.0001.00 set logical-systems R1 protocols isis level 2 disable set logical-systems R1 protocols isis interface lt-1/2/0.112 point-to-point set logical-systems R1 protocols isis interface lt-1/2/0.112 level 2 disable set logical-systems R1 protocols isis interface lt-1/2/0.113 level 2 disable set logical-systems R1 protocols isis interface lo0.101 level 2 disable set logical-systems R1 protocols isis interface lo0.101 level 2 passive
[edit logical-systems R1] lab@DEVANG-M7i# [edit logical-systems R2] lab@DEVANG-M7i# show | display set set logical-systems R2 interfaces lt-1/2/0 unit 121 encapsulation vlan set logical-systems R2 interfaces lt-1/2/0 unit 121 vlan-id 12 set logical-systems R2 interfaces lt-1/2/0 unit 121 peer-unit 112 set logical-systems R2 interfaces lt-1/2/0 unit 121 family inet address 10.0.4.6/30 set logical-systems R2 interfaces lt-1/2/0 unit 121 family iso set logical-systems R2 interfaces lt-1/2/0 unit 123 encapsulation vlan set logical-systems R2 interfaces lt-1/2/0 unit 123 vlan-id 23 set logical-systems R2 interfaces lt-1/2/0 unit 123 peer-unit 132 set logical-systems R2 interfaces lt-1/2/0 unit 123 family inet address 10.0.4.1/30 set logical-systems R2 interfaces lt-1/2/0 unit 123 family iso set logical-systems R2 interfaces lt-1/2/0 unit 124 encapsulation vlan set logical-systems R2 interfaces lt-1/2/0 unit 124 vlan-id 24 set logical-systems R2 interfaces lt-1/2/0 unit 124 peer-unit 142 set logical-systems R2 interfaces lt-1/2/0 unit 124 family inet address 10.0.4.9/30 set logical-systems R2 interfaces lt-1/2/0 unit 124 family iso set logical-systems R2 interfaces lo0 unit 102 family inet address 192.168.1.2/32 set logical-systems R2 interfaces lo0 unit 102 family iso address 49.0001.0000.0000.0002.00 set logical-systems R2 protocols isis interface lt-1/2/0.121 point-to-point set logical-systems R2 protocols isis interface lt-1/2/0.121 level 2 disable set logical-systems R2 protocols isis interface lt-1/2/0.123 level 2 disable set logical-systems R2 protocols isis interface lt-1/2/0.124 level 2 disable set logical-systems R2 protocols isis interface lo0.102 level 2 disable set logical-systems R2 protocols isis interface lo0.102 level 2 passive
[edit logical-systems R2] lab@DEVANG-M7i#
[edit logical-systems R2] lab@DEVANG-M7i# run show isis adjacency logical-system R1 Interface System L State Hold (secs) SNPA lt-1/2/0.112 DEVANG-M7i-R2 1 Up 20
[edit logical-systems R2] lab@DEVANG-M7i# run show isis adjacency logical-system R2 Interface System L State Hold (secs) SNPA lt-1/2/0.121 DEVANG-M7i-R1 1 Up 20
[edit logical-systems R2] lab@DEVANG-M7i# run show isis database logical-system R1 IS-IS level 1 link-state database: LSP ID Sequence Checksum Lifetime Attributes DEVANG-M7i-R1.00-00 0x11 0x65ec 857 L1 DEVANG-M7i-R2.00-00 0xf 0xd17c 855 L1 L2 2 LSPs
IS-IS level 2 link-state database: 0 LSPs
[edit logical-systems R2] lab@DEVANG-M7i# run show isis database logical-system R2 IS-IS level 1 link-state database: LSP ID Sequence Checksum Lifetime Attributes DEVANG-M7i-R1.00-00 0x11 0x65ec 852 L1 DEVANG-M7i-R2.00-00 0xf 0xd17c 854 L1 L2 2 LSPs
IS-IS level 2 link-state database: LSP ID Sequence Checksum Lifetime Attributes DEVANG-M7i-R2.00-00 0xd 0x880b 854 L1 L2 1 LSPs
[edit logical-systems R2] lab@DEVANG-M7i# run show isis database logical-system R1 detail IS-IS level 1 link-state database:
DEVANG-M7i-R1.00-00 Sequence: 0x11, Checksum: 0x65ec, Lifetime: 852 secs IS neighbor: DEVANG-M7i-R2.00 Metric: 10 IP prefix: 10.0.4.4/30 Metric: 10 Internal Up IP prefix: 192.168.1.1/32 Metric: 0 Internal Up
DEVANG-M7i-R2.00-00 Sequence: 0xf, Checksum: 0xd17c, Lifetime: 850 secs IS neighbor: DEVANG-M7i-R1.00 Metric: 10 IP prefix: 10.0.4.4/30 Metric: 10 Internal Up IP prefix: 192.168.1.2/32 Metric: 0 Internal Up
IS-IS level 2 link-state database:
[edit logical-systems R2] lab@DEVANG-M7i# run show isis database logical-system R2 detail IS-IS level 1 link-state database:
DEVANG-M7i-R1.00-00 Sequence: 0x11, Checksum: 0x65ec, Lifetime: 845 secs IS neighbor: DEVANG-M7i-R2.00 Metric: 10 IP prefix: 10.0.4.4/30 Metric: 10 Internal Up IP prefix: 192.168.1.1/32 Metric: 0 Internal Up
DEVANG-M7i-R2.00-00 Sequence: 0xf, Checksum: 0xd17c, Lifetime: 847 secs IS neighbor: DEVANG-M7i-R1.00 Metric: 10 IP prefix: 10.0.4.4/30 Metric: 10 Internal Up IP prefix: 192.168.1.2/32 Metric: 0 Internal Up
IS-IS level 2 link-state database:
DEVANG-M7i-R2.00-00 Sequence: 0xd, Checksum: 0x880b, Lifetime: 847 secs IP prefix: 10.0.4.4/30 Metric: 10 Internal Up IP prefix: 192.168.1.1/32 Metric: 10 Internal Up IP prefix: 192.168.1.2/32 Metric: 0 Internal Up
[edit logical-systems R2] lab@DEVANG-M7i#
NOTES from Adv VPN training: Policy to apply route-target and site of origine:lab@Sydney-PE> show configuration policy-options policy-statement vpna-export { term 1 { from protocol [ direct bgp ]; then { community add vpna-target; community add vpna-origin; accept; } } term 2 { then reject; } } policy-statement vpna-import { term 1 { from { protocol bgp; community [ vpna-target vpnb-target ]; } then accept; } term 2 { then reject; } } community vpna-origin members origin:192.168.8.1:1; community vpna-target members target:65412:100; community vpnb-target members target:65412:300; lab@Sydney-PE> show configuration routing-instances vpn-a { instance-type vrf; interface fe-0/0/1.0; vrf-import vpna-import; vrf-export vpna-export; protocols { bgp { group ce-c1 { type external; peer-as 65002; as-override; neighbor 10.0.8.2; } } } } Family Route-target: lab@Sydney-PE# run show bgp summary type internal;
|