Juniper EVPN-VXLAN configuration

From ppwiki
Jump to navigation Jump to search

Goal

In this tutorial we will setup a spine/leaf topology with 2 spines and 4 leaves. The goal is to configure EVPN-VXLAN

Prerequisites

For this tutorial I am using :

- EVE-NG 2.0.3-112

- VQFX model: vqfx-10000 running JUNOS 19.4R1.10

- spine1: ASN:65030

- spine2: ASN:65031

- leaf1: ASN:65032 in row A using 10.192.80.0/22 network

- leaf2: ASN:65033 in row B using 10.192.96.0/22 network

- leaf3: ASN:65034 in row C using 10.192.112.0/22 network

- leaf4: ASN:65035 in row D using 10.192.128.0/22 network

- 4 servers one in each row for testing communication

Diagram

Juniper evpn-vxlan.png

Setup and Configuration

Spine1 configuration

##basic configuration 
set system host-name spine1
## Edit policy-options
set policy-options policy-statement export-lo term lo0 from protocol direct
set policy-options policy-statement export-lo term lo0 from route-filter 10.0.1.13/32 exact
set policy-options policy-statement export-lo term lo0 then accept
set policy-options policy-statement lbpp term lb then load-balance per-packet
## #Setting the underlay network###
set protocols bgp group underlay authentication-key password1
set protocols bgp group underlay export export-lo
set protocols bgp group underlay multipath multiple-as
set protocols bgp group underlay neighbor 172.16.1.2 peer-as 65032 description lsw1
set protocols bgp group underlay neighbor 172.16.1.10 peer-as 65033 description lsw2
set protocols bgp group underlay neighbor 172.16.1.18 peer-as 65034 description lsw3
set protocols bgp group underlay neighbor 172.16.1.26 peer-as 65035 description lsw4
##  edit routing-options 
set routing-options forwarding-table export lbpp
set routing-options router-id 10.0.1.13
set routing-options autonomous-system 65030
## Edit interface lo0
set interfaces lo0 unit 0 family inet address 10.0.1.13/32
## INTERFACE CONFIGURATION
delete interfaces xe-0/0/0 unit 0 family inet dhcp
delete interfaces xe-0/0/1 unit 0 family inet dhcp
delete interfaces xe-0/0/2 unit 0 family inet dhcp
delete interfaces xe-0/0/3 unit 0 family inet dhcp
set interfaces xe-0/0/0 unit 0 family inet address 172.16.1.1/30
set interfaces xe-0/0/0 description link_to_leaf1_xe-0/0/0
set interfaces xe-0/0/1 unit 0 family inet address 172.16.1.9/30
set interfaces xe-0/0/1 description link_to_leaf2_xe-0/0/0
set interfaces xe-0/0/2 unit 0 family inet address 172.16.1.17/30
set interfaces xe-0/0/2 description link_to_leaf3_xe-0/0/0
set interfaces xe-0/0/3 unit 0 family inet address 172.16.1.25/30
set interfaces xe-0/0/3 description link_to_asw-d1_xe-0/0/0

Spine2 configuration

## basic configuration 
set system host-name spine2
## Edit policy-options
set policy-options policy-statement export-lo term lo0 from protocol direct
set policy-options policy-statement export-lo term lo0 from route-filter 10.0.1.14/32 exact
set policy-options policy-statement export-lo term lo0 then accept
set policy-options policy-statement lbpp term lb then load-balance per-packet
## Setting the underlay network###
set protocols bgp group underlay authentication-key password1
set protocols bgp group underlay export export-lo
set protocols bgp group underlay multipath multiple-as
set protocols bgp group underlay neighbor 172.16.1.6 peer-as 65032 description lsw1
set protocols bgp group underlay neighbor 172.16.1.14 peer-as 65033 description lsw2
set protocols bgp group underlay neighbor 172.16.1.22 peer-as 65034 description lsw3
set protocols bgp group underlay neighbor 172.16.1.30 peer-as 65035 description lsw4
##  edit routing-options 
set routing-options forwarding-table export lbpp
set routing-options router-id 10.0.1.14
set routing-options autonomous-system 65031
## Edit interface lo0
set interfaces lo0 unit 0 family inet address 10.0.1.14/32
delete interfaces xe-0/0/0 unit 0 family inet dhcp
delete interfaces xe-0/0/1 unit 0 family inet dhcp
delete interfaces xe-0/0/2 unit 0 family inet dhcp
delete interfaces xe-0/0/3 unit 0 family inet dhcp
set interfaces xe-0/0/0 unit 0 family inet address 172.16.1.5/30
set interfaces xe-0/0/0 description link_to_leaf1_xe-0/0/1
set interfaces xe-0/0/1 unit 0 family inet address 172.16.1.13/30
set interfaces xe-0/0/1 description link_to_leaf2_xe-0/0/1
set interfaces xe-0/0/2 unit 0 family inet address 172.16.1.21/30
set interfaces xe-0/0/2 description link_to_leaf3_xe-0/0/1
set interfaces xe-0/0/3 unit 0 family inet address 172.16.1.29/30
set interfaces xe-0/0/3 description link_to_asw-d1_xe-0/0/1


leaf1 configuration

##basic configuration 
set system host-name lsw1
## Edit policy
set policy-options policy-statement export-lo term lo0 from protocol direct
set policy-options policy-statement export-lo term lo0 from route-filter 10.0.1.24/32 exact
set policy-options policy-statement export-lo term lo0 then accept
set policy-options policy-statement lbpp term lb then load-balance per-packet
## Setting the underlay network###
set protocols bgp group underlay authentication-key password1
set protocols bgp group underlay export export-lo
set protocols bgp group underlay multipath multiple-as
set protocols bgp group underlay neighbor 172.16.1.1 peer-as 65030
set protocols bgp group underlay neighbor 172.16.1.5 peer-as 65031
##  edit routing-options 
set routing-options forwarding-table export lbpp
set routing-options router-id 10.0.1.24
set routing-options autonomous-system 65032
## Edit interface lo0
set interfaces lo0 unit 0 family inet address 10.0.1.24/32
## INTERFACE CONFIGURATION
delete interfaces xe-0/0/0 unit 0 family inet dhcp
delete interfaces xe-0/0/1 unit 0 family inet dhcp
set interfaces xe-0/0/0 unit 0 family inet address 172.16.1.2/30
set interfaces xe-0/0/0 description link_to_spine1_xe-0/0/0
set interfaces xe-0/0/1 unit 0 family inet address 172.16.1.6/30
set interfaces xe-0/0/1 description link_to_spine2_xe-0/0/0
##EVPN-VXLAN setup ###
set protocols evpn encapsulation vxlan
set protocols evpn multicast-mode ingress-replication
set protocols evpn extended-vni-list 10200
set protocols evpn extended-vni-list 10300
set protocols evpn extended-vni-list 10400
set protocols evpn extended-vni-list 10500
set switch-options vtep-source-interface lo0.0
set switch-options route-distinguisher 10.0.1.24:1
set switch-options vrf-target target:65400:1
##Setup VLANS
set vlans private1-a vlan-id 200 vxlan vni 10200
set vlans private1-b vlan-id 300 vxlan vni 10300
set vlans private1-c vlan-id 400 vxlan vni 10400
set vlans private1-d vlan-id 500 vxlan vni 10500
##Set interface to access mode for the servers
delete interfaces xe-0/0/2 unit 0
set interfaces xe-0/0/2 unit 0 family ethernet-switching interface-mode access
set interfaces xe-0/0/2 unit 0 family ethernet-switching vlan members private1-a
# Overlay network on leaf 1###
set protocols bgp group overlay type internal
set protocols bgp group overlay local-address 10.0.1.24
set protocols bgp group overlay family evpn signaling
set protocols bgp group overlay local-as 65400
set protocols bgp group overlay authentication-key password1
set protocols bgp group overlay multipath
set protocols bgp group overlay neighbor 10.0.1.25 description lsw2
set protocols bgp group overlay neighbor 10.0.1.26 description lsw3
set protocols bgp group overlay neighbor 10.0.1.27 description lsw4
# irb interfaces setup
set interface irb unit 200 family inet address 10.192.80.1/22 virtual-gateway-address 10.192.80.254
set interfaces irb unit 200 virtual-gateway-accept-data
set interface irb unit 300 family inet address 10.192.96.1/22 virtual-gateway-address 10.192.96.254
set interfaces irb unit 300 virtual-gateway-accept-data
set interface irb unit 400 family inet address 10.192.112.1/22 virtual-gateway-address 10.192.112.254
set interfaces irb unit 400 virtual-gateway-accept-data
set interface irb unit 500 family inet address 10.192.128.1/22 virtual-gateway-address 10.192.128.254
set interfaces irb unit 500 virtual-gateway-accept-data
#add irb interface for each vlan
set vlans private1-a l3-interface irb.200
set vlans private1-b l3-interface irb.300
set vlans private1-c l3-interface irb.400
set vlans private1-d l3-interface irb.500

leaf2 configuration

#basic configuration 
set system host-name lsw2
## Edit policy-options
set policy-options policy-statement export-lo term lo0 from protocol direct
set policy-options policy-statement export-lo term lo0 from route-filter 10.0.1.25/32 exact
set policy-options policy-statement export-lo term lo0 then accept
set policy-options policy-statement lbpp term lb then load-balance per-packet
#Setting the underlay network###
set protocols bgp group underlay authentication-key password1
set protocols bgp group underlay export export-lo
set protocols bgp group underlay multipath multiple-as
set protocols bgp group underlay neighbor 172.16.1.9 peer-as 65030
set protocols bgp group underlay neighbor 172.16.1.13 peer-as 65031
##  edit routing-options 
set routing-options forwarding-table export lbpp
set routing-options router-id 10.0.1.25
set routing-options autonomous-system 65033
## Edit interface lo0
set interfaces lo0 unit 0 family inet address 10.0.1.25/32
## INTERFACE CONFIGURATION
delete interfaces xe-0/0/0 unit 0 family inet dhcp
delete interfaces xe-0/0/1 unit 0 family inet dhcp
set interfaces xe-0/0/0 unit 0 family inet address 172.16.1.10/30
set interfaces xe-0/0/0 description link_to_spine1_xe-0/0/1
set interfaces xe-0/0/1 unit 0 family inet address 172.16.1.14/30
set interfaces xe-0/0/1 description link_to_spine2_xe-0/0/1
##EVPN-VXLAN setup ###
set protocols evpn encapsulation vxlan
set protocols evpn multicast-mode ingress-replication
set protocols evpn extended-vni-list 10200
set protocols evpn extended-vni-list 10300
set protocols evpn extended-vni-list 10400
set protocols evpn extended-vni-list 10500
set switch-options vtep-source-interface lo0.0
set switch-options route-distinguisher 10.0.1.25:1
set switch-options vrf-target target:65400:1
##Setup VLANS
set vlans private1-a vlan-id 200 vxlan vni 10200
set vlans private1-b vlan-id 300 vxlan vni 10300
set vlans private1-c vlan-id 400 vxlan vni 10400
set vlans private1-d vlan-id 500 vxlan vni 10500
##Set interface to access mode for the servers
delete interfaces xe-0/0/2 unit 0
set interfaces xe-0/0/2 unit 0 family ethernet-switching interface-mode access
set interfaces xe-0/0/2 unit 0 family ethernet-switching vlan members private1-b
# Overlay network on leaf 2###
set protocols bgp group overlay type internal
set protocols bgp group overlay local-address 10.0.1.25
set protocols bgp group overlay family evpn signaling
set protocols bgp group overlay local-as 65400
set protocols bgp group overlay authentication-key password1
set protocols bgp group overlay multipath
set protocols bgp group overlay neighbor 10.0.1.24 description lsw1
set protocols bgp group overlay neighbor 10.0.1.26 descripion lsw3
set protocols bgp group overlay neighbor 10.0.1.27 description lsw4
# irb interfaces setup
set interface irb unit 200 family inet address 10.192.80.1/22 virtual-gateway-address 10.192.80.254
set interfaces irb unit 200 virtual-gateway-accept-data
set interface irb unit 300 family inet address 10.192.96.1/22 virtual-gateway-address 10.192.96.254
set interfaces irb unit 300 virtual-gateway-accept-data
set interface irb unit 400 family inet address 10.192.112.1/22 virtual-gateway-address 10.192.112.254
set interfaces irb unit 400 virtual-gateway-accept-data
set interface irb unit 500 family inet address 10.192.128.1/22 virtual-gateway-address 10.192.128.254
set interfaces irb unit 500 virtual-gateway-accept-data
#add irb interface for each vlan
set vlans private1-a l3-interface irb.200
set vlans private1-b l3-interface irb.300
set vlans private1-c l3-interface irb.400
set vlans private1-d l3-interface irb.500

leaf3

leaf4

Retrieved from "https://papaulgigitech.com/index.php?title=Juniper_EVPN-VXLAN_configuration&oldid=3060"