Difference between revisions of "Juniper ESI-LAG"

From ppwiki
Jump to navigation Jump to search
Line 57: Line 57:
 
==core switch 1 configuration==
 
==core switch 1 configuration==
  
−
  set system login user homer uid 2002
+
  set chassis aggregated-devices ethernet device-count 3
−
  set system login user homer class super-user
+
set interfaces xe-0/0/0 description link_leaf1_xe-0/0/0
−
  set system login user homer authentication ssh-rsa "ssh-rsa
+
  set interfaces xe-0/0/0 gigether-options 802.3ad ae1
−
  AAAAB3NzaC1yc2EAAAADAQABAAABAQC4xpjWJoQhCf176i77ni9//mcYO3bBWu7necWZwJNVkFsvvT6XuWfkKVMUFnTjTMr1erv8WRDze7le9Jl2a/xMIgo9Cf71SU9faPbd/ukvaLl5VUeGvHKFg9d+7GUGx1z9K1qKY2VOBO5EQCht8+4o4mMaizoXoxHvkNolswAa5Jv
+
  set interfaces xe-0/0/1 description link_leaf2_xe-0/0/0
−
  /EPwnfCeDyV7TsG+Se1k7/1h1VFOwW7Dbxno1aCnMDYbcfiBnzGnLSZQGjehok6cqYTjsNIIdAiZYSpH77pnAGglFhxNUSlqj0qRIJZdG3nhPlvIRPjn7fouq3BJEmiWPP8ru67H1J2mdSkix4xOxdUWfGB9eJlENfnobJjBr papaul@U18"
+
  set interfaces xe-0/0/1 gigether-options 802.3ad ae2
−
  set system login user ppaul uid 2003
+
set interfaces xe-0/0/10 gigether-options 802.3ad ae0
−
  set system login user ppaul class super-user
+
  set interfaces xe-0/0/11 gigether-options 802.3ad ae0
−
  set system login user ppaul authentication ssh-rsa "ssh-rsa
+
set interfaces ae0 description link_spine2
−
AAAAB3NzaC1yc2EAAAADAQABAAABAQDST4EbXJc9l/AdrVmOZEPl3sxi6qjGIZyPwkupthSdooFHxPxUIh/a5PC9bMk5go6KvRoChpc4L8XuMRsxLTd6Ro6DsWIZieGHFuO/AL9SRUtmevGiSC2q4ibR7ACosJBUvKPRVK8anYnMSL9YWd7lnmVLnW5mvOM3Alhd8aTNKE3/H9ogDt9UfndEJXmieMTLJzGvx65sw6riqa5hh6iOcw02qb3QQCKLSRJmUJQuToY4oo/ZdLl/prEDKQ0I9DSnOxRYIvZxvUsTzwoXVq9X9dWGkKAAMDw7f2DJfa/4uCNT2dKPydApeN0ea2/69VRL3fmTz47y0CC1RTEd8j1j U18pc "
+
set interfaces ae0 aggregated-ether-options lacp active
 +
set interfaces ae0 aggregated-ether-options lacp periodic fast
 +
set interfaces ae0 unit 0 family inet address 172.16.3.1/30
 +
set interfaces ae1 description leaf1_ae1
 +
set interfaces ae1 mtu 9192           
 +
set interfaces ae1 esi 00:00:00:ab:cd:00:01:00:00:01
 +
set interfaces ae1 esi all-active     
 +
set interfaces ae1 aggregated-ether-options lacp active
 +
set interfaces ae1 aggregated-ether-options lacp periodic fast
 +
  set interfaces ae1 aggregated-ether-options lacp system-id 00:11:00:00:00:01
 +
set interfaces ae1 unit 0 family ethernet-switching interface-mode trunk
 +
set interfaces ae1 unit 0 family ethernet-switching vlan members private1-a-dfw
 +
set interfaces ae1 unit 0 family ethernet-switching vlan members private1-b-dfw
 +
set interfaces ae1 unit 0 family ethernet-switching vlan members private1-c-dfw
 +
set interfaces ae1 unit 0 family ethernet-switching vlan members private1-d-dfw
 +
set interfaces ae2 mtu 9192           
 +
set interfaces ae2 esi 00:00:00:ab:cd:00:02:00:00:02
 +
set interfaces ae2 esi all-active     
 +
  set interfaces ae2 aggregated-ether-options lacp active
 +
set interfaces ae2 aggregated-ether-options lacp periodic fast
 +
set interfaces ae2 aggregated-ether-options lacp system-id 00:22:00:00:00:02
 +
set interfaces ae2 unit 0 family ethernet-switching interface-mode trunk
 +
set interfaces ae2 unit 0 family ethernet-switching vlan members private1-a-dfw
 +
set interfaces ae2 unit 0 family ethernet-switching vlan members private1-b-dfw
 +
set interfaces ae2 unit 0 family ethernet-switching vlan members private1-c-dfw
 +
  set interfaces ae2 unit 0 family ethernet-switching vlan members private1-d-dfw
 +
set interfaces em0 unit 0 family inet address 10.193.0.105/24
 +
set interfaces em1 unit 0 family inet address 169.254.0.2/24
 +
set interfaces irb unit 20 family inet address 10.192.144.3/22 virtual-gateway-address 10.192.144.1
 +
set interfaces irb unit 30 family inet address 10.192.160.3/22 virtual-gateway-address 10.192.160.1
 +
set interfaces irb unit 40 family inet address 10.192.176.3/22 virtual-gateway-address 10.192.176.1
 +
set interfaces irb unit 50 family inet address 10.192.192.3/22 virtual-gateway-address 10.192.192.1
 +
set interfaces lo0 unit 0 family inet address 10.179.1.1/32
 +
set snmp location dfw                 
 +
set snmp filter-interfaces interfaces "^.*\.0$"
 +
set snmp community changeme authorization read-only
 +
set snmp community changeme routing-instance mgmt_junos
 +
set snmp routing-instance-access           
 +
set forwarding-options storm-control-profiles default all
 +
set policy-options policy-statement EVPN-IMPORT term VNI5020 from community com30
 +
set policy-options policy-statement EVPN-IMPORT term VNI5020 from community com50
 +
set policy-options policy-statement EVPN-IMPORT term VNI5020 then accept
 +
set policy-options policy-statement EVPN-IMPORT30 term VNI5030 from community com20
 +
set policy-options policy-statement EVPN-IMPORT30 term VNI5030 then accept
 +
set policy-options policy-statement EVPN-IMPORT50 term VNI5050 from community com20
 +
set policy-options policy-statement EVPN-IMPORT50 term VNI5050 then accept
 +
set policy-options community com20 members target:64701:20
 +
set policy-options community com30 members target:64701:30
 +
set policy-options community com50 members target:64701:50
 +
set routing-instances mgmt_junos routing-options static route 0.0.0.0/0 next-hop 10.193.0.1
 +
set routing-instances vlan20 routing-options auto-export
 +
set routing-instances vlan20 instance-type vrf
 +
set routing-instances vlan20 interface irb.20
 +
set routing-instances vlan20 route-distinguisher 10.179.1.1:101
 +
set routing-instances vlan20 vrf-import EVPN-IMPORT
 +
set routing-instances vlan20 vrf-target target:64701:20
 +
set routing-instances vlan30 routing-options auto-export
 +
set routing-instances vlan30 instance-type vrf
 +
set routing-instances vlan30 interface irb.30
 +
set routing-instances vlan30 route-distinguisher 10.179.1.1:102
 +
set routing-instances vlan30 vrf-import EVPN-IMPORT30
 +
set routing-instances vlan30 vrf-target target:64701:30
 +
set routing-instances vlan40 routing-options auto-export
 +
set routing-instances vlan40 instance-type vrf
 +
set routing-instances vlan40 interface irb.40
 +
set routing-instances vlan40 route-distinguisher 10.179.1.1:103
 +
set routing-instances vlan40 vrf-target target:64701:40
 +
set routing-instances vlan50 routing-options auto-export
 +
set routing-instances vlan50 instance-type vrf
 +
set routing-instances vlan50 interface irb.50
 +
set routing-instances vlan50 route-distinguisher 10.179.1.1:104
 +
set routing-instances vlan50 vrf-import EVPN-IMPORT50
 +
set routing-instances vlan50 vrf-target target:64701:50
 +
set routing-options static route 0.0.0.0/0 next-hop 10.193.0.1
 +
set routing-options static route 0.0.0.0/0 no-readvertise
 +
set routing-options router-id 10.179.1.1
 +
set routing-options autonomous-system 64701
 +
set protocols ospf area 0.0.0.0 interface lo0.0 passive
 +
set protocols ospf area 0.0.0.0 interface ae0.0 interface-type p2p
 +
set protocols ospf reference-bandwidth 800g
 +
set protocols evpn encapsulation vxlan 
 +
set protocols evpn default-gateway no-gateway-community
 +
set protocols evpn extended-vni-list all
 +
set protocols bgp group RR-OVERLAY type internal
 +
set protocols bgp group RR-OVERLAY local-address 10.179.1.1
 +
set protocols bgp group RR-OVERLAY family inet any
 +
set protocols bgp group RR-OVERLAY family inet-vpn any
 +
set protocols bgp group RR-OVERLAY family evpn signaling
 +
set protocols bgp group RR-OVERLAY multipath
 +
set protocols bgp group RR-OVERLAY neighbor 10.179.1.2
 +
set protocols lldp port-id-subtype interface-name
 +
set protocols lldp interface all       
 +
set protocols igmp-snooping vlan default
 +
set protocols sflow agent-id 10.193.0.105
 +
set protocols sflow sample-rate ingress 1000
 +
set protocols sflow source-ip 10.193.0.105
 +
set protocols sflow collector 10.192.48.4 udp-port 6343
 +
set switch-options vtep-source-interface lo0.0
 +
set switch-options route-distinguisher 10.179.1.1:64701
 +
set switch-options vrf-target target:64701:9999
 +
set switch-options vrf-target auto     
 +
set vlans private1-a-dfw vlan-id 20   
 +
set vlans private1-a-dfw l3-interface irb.20
 +
set vlans private1-a-dfw vxlan vni 5020
 +
set vlans private1-b-dfw vlan-id 30   
 +
set vlans private1-b-dfw l3-interface irb.30
 +
set vlans private1-b-dfw vxlan vni 5030
 +
set vlans private1-c-dfw vlan-id 40   
 +
set vlans private1-c-dfw l3-interface irb.40
 +
set vlans private1-c-dfw vxlan vni 5040
 +
set vlans private1-d-dfw description Admin
 +
set vlans private1-d-dfw vlan-id 50   
 +
set vlans private1-d-dfw l3-interface irb.50
 +
set vlans private1-d-dfw vxlan vni 5050
  
 
==core switch 2 configuration==
 
==core switch 2 configuration==
 
==switch 1 configuration==
 
==switch 1 configuration==
 
==switch 2 configuration==
 
==switch 2 configuration==

Revision as of 02:07, 27 February 2023

Goal

In this tutorial we are going to to setup ESI-LAG (Ethernet Switch Identifier - Link Aggregation Group). According to Juniper: "ESI link aggregation groups (ESI-LAGs) enable one or more client devices to form a logical link aggregation group (LAG) interface with the peers".

Prerequisites

For this tutorial I will be using :

- EVE-NG 2.0.3-112

- VQFX model: vqfx-10000 running JUNOS 19.4R1.10 for spines and leaves

- Debian VM's servers

Diagram

Esi-lag.png

Setup and configuration

network info
Devices Role lo.0 IP ae0 IP mgmt AS
cc1 core swtich1 10.179.1.1/32 172.16.3.1/30 10.193.0.105/24 64701
cc2 core switch2 10.179.1.2/32 172.16.3.2/30 10.193.0.106/24 64701
sw1 switch 1 10.179.1.4/32 10.193.0.108/24
sw2 switch 2 10.179.1.3/32 10.193.0.107/24

core switch 1 configuration

set chassis aggregated-devices ethernet device-count 3
set interfaces xe-0/0/0 description link_leaf1_xe-0/0/0
set interfaces xe-0/0/0 gigether-options 802.3ad ae1
set interfaces xe-0/0/1 description link_leaf2_xe-0/0/0
set interfaces xe-0/0/1 gigether-options 802.3ad ae2
set interfaces xe-0/0/10 gigether-options 802.3ad ae0
set interfaces xe-0/0/11 gigether-options 802.3ad ae0
set interfaces ae0 description link_spine2
set interfaces ae0 aggregated-ether-options lacp active
set interfaces ae0 aggregated-ether-options lacp periodic fast
set interfaces ae0 unit 0 family inet address 172.16.3.1/30
set interfaces ae1 description leaf1_ae1
set interfaces ae1 mtu 9192             
set interfaces ae1 esi 00:00:00:ab:cd:00:01:00:00:01
set interfaces ae1 esi all-active       
set interfaces ae1 aggregated-ether-options lacp active
set interfaces ae1 aggregated-ether-options lacp periodic fast
set interfaces ae1 aggregated-ether-options lacp system-id 00:11:00:00:00:01
set interfaces ae1 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae1 unit 0 family ethernet-switching vlan members private1-a-dfw
set interfaces ae1 unit 0 family ethernet-switching vlan members private1-b-dfw
set interfaces ae1 unit 0 family ethernet-switching vlan members private1-c-dfw
set interfaces ae1 unit 0 family ethernet-switching vlan members private1-d-dfw
set interfaces ae2 mtu 9192             
set interfaces ae2 esi 00:00:00:ab:cd:00:02:00:00:02
set interfaces ae2 esi all-active       
set interfaces ae2 aggregated-ether-options lacp active
set interfaces ae2 aggregated-ether-options lacp periodic fast
set interfaces ae2 aggregated-ether-options lacp system-id 00:22:00:00:00:02
set interfaces ae2 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae2 unit 0 family ethernet-switching vlan members private1-a-dfw
set interfaces ae2 unit 0 family ethernet-switching vlan members private1-b-dfw
set interfaces ae2 unit 0 family ethernet-switching vlan members private1-c-dfw
set interfaces ae2 unit 0 family ethernet-switching vlan members private1-d-dfw
set interfaces em0 unit 0 family inet address 10.193.0.105/24
set interfaces em1 unit 0 family inet address 169.254.0.2/24
set interfaces irb unit 20 family inet address 10.192.144.3/22 virtual-gateway-address 10.192.144.1
set interfaces irb unit 30 family inet address 10.192.160.3/22 virtual-gateway-address 10.192.160.1
set interfaces irb unit 40 family inet address 10.192.176.3/22 virtual-gateway-address 10.192.176.1
set interfaces irb unit 50 family inet address 10.192.192.3/22 virtual-gateway-address 10.192.192.1
set interfaces lo0 unit 0 family inet address 10.179.1.1/32
set snmp location dfw                   
set snmp filter-interfaces interfaces "^.*\.0$"
set snmp community changeme authorization read-only
set snmp community changeme routing-instance mgmt_junos
set snmp routing-instance-access             
set forwarding-options storm-control-profiles default all
set policy-options policy-statement EVPN-IMPORT term VNI5020 from community com30
set policy-options policy-statement EVPN-IMPORT term VNI5020 from community com50
set policy-options policy-statement EVPN-IMPORT term VNI5020 then accept
set policy-options policy-statement EVPN-IMPORT30 term VNI5030 from community com20
set policy-options policy-statement EVPN-IMPORT30 term VNI5030 then accept
set policy-options policy-statement EVPN-IMPORT50 term VNI5050 from community com20
set policy-options policy-statement EVPN-IMPORT50 term VNI5050 then accept
set policy-options community com20 members target:64701:20
set policy-options community com30 members target:64701:30
set policy-options community com50 members target:64701:50
set routing-instances mgmt_junos routing-options static route 0.0.0.0/0 next-hop 10.193.0.1
set routing-instances vlan20 routing-options auto-export
set routing-instances vlan20 instance-type vrf
set routing-instances vlan20 interface irb.20
set routing-instances vlan20 route-distinguisher 10.179.1.1:101
set routing-instances vlan20 vrf-import EVPN-IMPORT
set routing-instances vlan20 vrf-target target:64701:20
set routing-instances vlan30 routing-options auto-export
set routing-instances vlan30 instance-type vrf
set routing-instances vlan30 interface irb.30
set routing-instances vlan30 route-distinguisher 10.179.1.1:102
set routing-instances vlan30 vrf-import EVPN-IMPORT30
set routing-instances vlan30 vrf-target target:64701:30
set routing-instances vlan40 routing-options auto-export
set routing-instances vlan40 instance-type vrf
set routing-instances vlan40 interface irb.40
set routing-instances vlan40 route-distinguisher 10.179.1.1:103
set routing-instances vlan40 vrf-target target:64701:40
set routing-instances vlan50 routing-options auto-export
set routing-instances vlan50 instance-type vrf
set routing-instances vlan50 interface irb.50
set routing-instances vlan50 route-distinguisher 10.179.1.1:104
set routing-instances vlan50 vrf-import EVPN-IMPORT50
set routing-instances vlan50 vrf-target target:64701:50
set routing-options static route 0.0.0.0/0 next-hop 10.193.0.1
set routing-options static route 0.0.0.0/0 no-readvertise
set routing-options router-id 10.179.1.1
set routing-options autonomous-system 64701
set protocols ospf area 0.0.0.0 interface lo0.0 passive
set protocols ospf area 0.0.0.0 interface ae0.0 interface-type p2p
set protocols ospf reference-bandwidth 800g
set protocols evpn encapsulation vxlan  
set protocols evpn default-gateway no-gateway-community
set protocols evpn extended-vni-list all
set protocols bgp group RR-OVERLAY type internal
set protocols bgp group RR-OVERLAY local-address 10.179.1.1
set protocols bgp group RR-OVERLAY family inet any
set protocols bgp group RR-OVERLAY family inet-vpn any
set protocols bgp group RR-OVERLAY family evpn signaling
set protocols bgp group RR-OVERLAY multipath
set protocols bgp group RR-OVERLAY neighbor 10.179.1.2
set protocols lldp port-id-subtype interface-name
set protocols lldp interface all        
set protocols igmp-snooping vlan default
set protocols sflow agent-id 10.193.0.105
set protocols sflow sample-rate ingress 1000
set protocols sflow source-ip 10.193.0.105
set protocols sflow collector 10.192.48.4 udp-port 6343
set switch-options vtep-source-interface lo0.0
set switch-options route-distinguisher 10.179.1.1:64701
set switch-options vrf-target target:64701:9999
set switch-options vrf-target auto      
set vlans private1-a-dfw vlan-id 20     
set vlans private1-a-dfw l3-interface irb.20
set vlans private1-a-dfw vxlan vni 5020 
set vlans private1-b-dfw vlan-id 30     
set vlans private1-b-dfw l3-interface irb.30
set vlans private1-b-dfw vxlan vni 5030 
set vlans private1-c-dfw vlan-id 40     
set vlans private1-c-dfw l3-interface irb.40
set vlans private1-c-dfw vxlan vni 5040 
set vlans private1-d-dfw description Admin
set vlans private1-d-dfw vlan-id 50     
set vlans private1-d-dfw l3-interface irb.50
set vlans private1-d-dfw vxlan vni 5050

core switch 2 configuration

switch 1 configuration

switch 2 configuration

Retrieved from "https://papaulgigitech.com/index.php?title=Juniper_ESI-LAG&oldid=3279"