Example for Configuring the IPv6 NFVI Distributed Gateway Function (BGP EVPN over E2E SR Tunnels)

This section provides an example for configuring the IPv6 NFVI distributed gateway function to carry service traffic over BGP EVPN over E2E SR tunnels.

Networking Requirements

The NFVI telco cloud solution uses the DCI+DCN networking. A large amount of IPv6 mobile phone traffic is sent to vUGWs and vMSEs on the DCN. After being processed by the vUGWs and vMSEs, the mobile phone traffic is forwarded over the DCN to destination devices on the Internet. The destination devices send traffic to mobile phones in similar ways. To achieve these functions and ensure traffic load balancing on the DCN, you need to deploy the NFVI distributed gateway function.

Figure 1 shows the networking of an NFVI distributed gateway (BGP EVPN over E2E SR tunnels). DC-GWs, which are the border gateways of the DCN, exchange Internet routes with external devices over PEs. L2GW/L3GW1 and L2GW/L3GW2 are connected to VNFs. VNF1 and VNF2 that function as virtualized NEs are deployed to implement the vUGW functions and vMSE functions, respectively. VNF1 and VNF2 are each connected to L2GW/L3GW1 and L2GW/L3GW2 through IPUs. BGP EVPN peer relationships are established between PEs and L2GW/L3GWs and between DC-GWs and L2GW/L3GWs, and DC-GWs are deployed as EVPN RRs. E2E SR tunnels are established between PEs and L2GW/L3GWs to carry IPv6 service traffic.

Figure 1 Networking of configuring the IPv6 NFVI distributed gateway function (BGP EVPN over E2E SR tunnels)

Interfaces 1 through 6 in this example represent GE 0/1/1, GE 0/1/2, GE 0/1/3, GE 0/1/4, GE 0/1/5, and GE 0/1/6, respectively.



Table 1 IP address planning

Device

Interface

IP Address

PE1

GigabitEthernet 0/1/1

10.6.7.1/24

GigabitEthernet 0/1/2

10.6.5.2/24

GigabitEthernet 0/1/3

2001:DB8:7::1/64

LoopBack1

7.7.7.7

PE2

GigabitEthernet 0/1/1

10.6.7.2/24

GigabitEthernet 0/1/2

10.6.6.2/24

GigabitEthernet 0/1/3

2001:DB8:8::1/64

LoopBack1

8.8.8.8

DCGW1

GigabitEthernet 0/1/1

10.6.1.1/24

GigabitEthernet 0/1/2

10.6.2.1/24

GigabitEthernet 0/1/3

10.6.5.1/24

LoopBack1

3.3.3.3/32

LoopBack2

2001:DB8:33::33/128

DCGW2

GigabitEthernet 0/1/1

10.6.1.2/24

GigabitEthernet 0/1/2

10.6.3.1/24

GigabitEthernet 0/1/3

10.6.6.1/24

LoopBack1

4.4.4.4/32

LoopBack2

2001:DB8:44::44/32

L2GW/L3GW1

GigabitEthernet 0/1/1

10.6.4.1/24

GigabitEthernet 0/1/2

10.6.2.2/24

GigabitEthernet 0/1/3

-

GigabitEthernet 0/1/4

-

GigabitEthernet0/1/5

-

GigabitEthernet0/1/6

-

LoopBack1

1.1.1.1/32

L2GW/L3GW2

GigabitEthernet 0/1/1

10.6.4.2/24

GigabitEthernet 0/1/2

10.6.3.2/24

GigabitEthernet 0/1/3

-

GigabitEthernet 0/1/4

-

GigabitEthernet0/1/5

-

GigabitEthernet0/1/6

-

LoopBack1

2.2.2.2/32

Configuration Roadmap

The configuration roadmap is as follows:

  1. Configure a routing protocol between PEs, DC-GWs, and L2GW/L3GWs to ensure Layer 3 interworking between ASs.
  2. Establish EBGP peer relationships between PEs and DC-GWs and IBGP peer relationships between DC-GWs and L2GW/L3GWs.
  3. Configure SR-MPLS TE tunnels between PEs and L2GW/L3GWs and between DC-GWs and L2GW/L3GWs.
  4. Configure EVPN instances on L2GW/L3GWs and bind the EVPN instances to BDs.
  5. Configure L3VPN instances on PEs, DC-GWs, and L2GW/L3GWs and bind the L3VPN instances on L2GW/L3GWs to VBDIF interfaces.
  6. Configure a tunnel policy on PEs, DC-GWs, and L2GW/L3GWs.
  7. Configure the BGP EVPN function on DC-GWs and L2GW/L3GWs and configure DC-GWs as RRs.
  8. Configure the Eth-Trunk Layer 2 sub-interfaces connecting L2GW/L3GWs to VNFs and the static VPN routes destined for VNFs.
  9. Configure L2GW/L3GWs to import static VPN routes through BGP EVPN. Configure and apply a route-policy to L3VPN instances so that the static VPN routes can retain the original next hops.
  10. Configure and apply a route-policy to L3VPN instances on PEs so that PEs can delete the GWIP attribute carried in the VNF routes received by EVPN peers.
  11. On DC-GWs, configure the loopback addresses used to establish BGP VPN peer relationships with VNFs. Configure and apply a route-policy to L3VPN instances so that DC-GWs can only advertise VPN loopback routes through BGP EVPN and delete the GWIP attribute from the routes received from EVPN peers.
  12. Establish BGP VPN peer relationships between DC-GWs and VNFs and configure DC-GWs to function as RRs.
  13. Configure the load balancing function on PEs, DC-GWs, and L2GW/L3GWs.

Procedure

  1. Configure IP addresses for all interfaces, including loopback interfaces, on PEs, DC-GWs, and L2GW/L3GWs.

    For configuration details, see Configuration Files in this section.

  2. Configure a routing protocol between PEs, DC-GWs, and L2GW/L3GWs to ensure Layer 3 interworking between ASs.

    For configuration details, see Configuration Files in this section.

  3. Establish EBGP peer relationships between PEs and DC-GWs and IBGP peer relationships between DC-GWs and L2GW/L3GWs.

    For configuration details, see Configuration Files in this section.

  4. Configure SR-MPLS TE tunnels between PEs and DC-GWs and between DC-GWs and L2GW/L3GWs.

    For configuration details, see Configuration Files in this section.

  5. Configure EVPN instances on L2GW/L3GWs and bind the EVPN instances to BDs.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] evpn vpn-instance evrf1 bd-mode
[*L2GW/L3GW1-evpn-instance-evrf1] route-distinguisher 1:1
[*L2GW/L3GW1-evpn-instance-evrf1] vpn-target 1:1
[*L2GW/L3GW1-evpn-instance-evrf1] quit
[*L2GW/L3GW1] evpn vpn-instance evrf2 bd-mode
[*L2GW/L3GW1-evpn-instance-evrf2] route-distinguisher 2:2
[*L2GW/L3GW1-evpn-instance-evrf2] vpn-target 2:2
[*L2GW/L3GW1-evpn-instance-evrf2] quit
[*L2GW/L3GW1] evpn vpn-instance evrf3 bd-mode
[*L2GW/L3GW1-evpn-instance-evrf3] route-distinguisher 3:3
[*L2GW/L3GW1-evpn-instance-evrf3] vpn-target 3:3
[*L2GW/L3GW1-evpn-instance-evrf3] quit
[*L2GW/L3GW1] evpn vpn-instance evrf4 bd-mode
[*L2GW/L3GW1-evpn-instance-evrf4] route-distinguisher 4:4
[*L2GW/L3GW1-evpn-instance-evrf4] vpn-target 4:4
[*L2GW/L3GW1-evpn-instance-evrf4] quit
[*L2GW/L3GW1] bridge-domain 10
[*L2GW/L3GW1-bd10] evpn binding vpn-instance evrf1
[*L2GW/L3GW1-bd10] quit
[*L2GW/L3GW1] bridge-domain 20
[*L2GW/L3GW1-bd20] evpn binding vpn-instance evrf2
[*L2GW/L3GW1-bd20] quit
[*L2GW/L3GW1] bridge-domain 30
[*L2GW/L3GW1-bd30] evpn binding vpn-instance evrf3
[*L2GW/L3GW1-bd30] quit
[*L2GW/L3GW1] bridge-domain 40
[*L2GW/L3GW1-bd40] evpn binding vpn-instance evrf4
[*L2GW/L3GW1-bd40] quit
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  6. Configure L3VPN instances on PEs, DC-GWs, and L2GW/L3GWs and bind the L3VPN instances on L2GW/L3GWs to VBDIF interfaces.

    # Configure PE1.

    [~PE1] ip vpn-instance vpn1
[*PE1-vpn-instance-vpn1] ipv6-family
[*PE1-vpn-instance-vpn1-af-ipv6] route-distinguisher 77:77
[*PE1-vpn-instance-vpn1-af-ipv6] vpn-target 11:1 evpn
[*PE1-vpn-instance-vpn1-af-ipv6] evpn mpls routing-enable
[*PE1-vpn-instance-vpn1-af-ipv6] quit
[*PE1-vpn-instance-vpn1] quit
[*PE1] interface GigabitEthernet0/1/3
[*PE1-GigabitEthernet0/1/3] ip binding vpn-instance vpn1
[*PE1-GigabitEthernet0/1/3] ipv6 enable
[*PE1-GigabitEthernet0/1/3] ipv6 address 2001:DB8:7::1 64
[*PE1-GigabitEthernet0/1/3] quit
[*PE1] commit

    Repeat this step for PE2. For configuration details, see Configuration Files in this section.

    # Configure DC-GW1.

    [~DCGW1] ip vpn-instance vpn1
[*DCGW1-vpn-instance-vpn1] ipv6-family
[*DCGW1-vpn-instance-vpn1-af-ipv6] route-distinguisher 33:33
[*DCGW1-vpn-instance-vpn1-af-ipv6] vpn-target 11:1 evpn
[*DCGW1-vpn-instance-vpn1-af-ipv6] evpn mpls routing-enable
[*DCGW1-vpn-instance-vpn1-af-ipv6] quit
[*DCGW1-vpn-instance-vpn1] quit
[*DCGW1] commit

    Repeat this step for DC-GW2. For configuration details, see Configuration Files in this section.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] ip vpn-instance vpn1
[*L2GW/L3GW1-vpn-instance-vpn1] ipv6-family
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv6] route-distinguisher 11:11
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv6] vpn-target 11:1 evpn
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv6] evpn mpls routing-enable
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv6] quit
[*L2GW/L3GW1-vpn-instance-vpn1] quit
[*L2GW/L3GW1] interface vbdif10
[*L2GW/L3GW1-Vbdif10] ip binding vpn-instance vpn1
[*L2GW/L3GW1-Vbdif10] ipv6 enable
[*L2GW/L3GW1-Vbdif10] ipv6 address 2001:db8:1::1 64
[*L2GW/L3GW1-Vbdif10] ipv6 nd generate-rd-table enable
[*L2GW/L3GW1-Vbdif10] anycast-gateway enable
[*L2GW/L3GW1-Vbdif10] mac-address 00e0-fc00-0003
[*L2GW/L3GW1-Vbdif10] ipv6 nd collect host enable
[*L2GW/L3GW1-Vbdif10] ipv6 nd dad attempts 0
[*L2GW/L3GW1-Vbdif10] quit
[*L2GW/L3GW1] interface vbdif20
[*L2GW/L3GW1-Vbdif20] ip binding vpn-instance vpn1
[*L2GW/L3GW1-Vbdif20] ipv6 enable
[*L2GW/L3GW1-Vbdif20] ipv6 address 2001:db8:2::1 64
[*L2GW/L3GW1-Vbdif20] ipv6 nd generate-rd-table enable
[*L2GW/L3GW1-Vbdif20] anycast-gateway enable
[*L2GW/L3GW1-Vbdif20] mac-address 00e0-fc00-0004
[*L2GW/L3GW1-Vbdif20] ipv6 nd collect host enable
[*L2GW/L3GW1-Vbdif20] ipv6 nd dad attempts 0
[*L2GW/L3GW1-Vbdif20] quit
[*L2GW/L3GW1] interface vbdif30
[*L2GW/L3GW1-Vbdif30] ip binding vpn-instance vpn1
[*L2GW/L3GW1-Vbdif30] ipv6 enable
[*L2GW/L3GW1-Vbdif30] ipv6 address 2001:db8:3::1 64
[*L2GW/L3GW1-Vbdif30] ipv6 nd generate-rd-table enable
[*L2GW/L3GW1-Vbdif30] anycast-gateway enable
[*L2GW/L3GW1-Vbdif30] mac-address 00e0-fc00-0001
[*L2GW/L3GW1-Vbdif30] ipv6 nd collect host enable
[*L2GW/L3GW1-Vbdif30] ipv6 nd dad attempts 0
[*L2GW/L3GW1-Vbdif30] quit
[*L2GW/L3GW1] interface vbdif40
[*L2GW/L3GW1-Vbdif40] ip binding vpn-instance vpn1
[*L2GW/L3GW1-Vbdif40] ipv6 enable
[*L2GW/L3GW1-Vbdif40] ipv6 address 2001:db8:4::1 64
[*L2GW/L3GW1-Vbdif40] ipv6 nd generate-rd-table enable
[*L2GW/L3GW1-Vbdif40] anycast-gateway enable
[*L2GW/L3GW1-Vbdif40] mac-address 00e0-fc00-0005
[*L2GW/L3GW1-Vbdif40] ipv6 nd collect host enable
[*L2GW/L3GW1-Vbdif40] ipv6 nd dad attempts 0
[*L2GW/L3GW1-Vbdif40] quit
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  7. Configure a tunnel policy on PEs, DC-GWs, and L2GW/L3GWs.

    # Configure PE1.

    [~PE1] tunnel-policy srte
[*PE1-tunnel-policy-srte] tunnel select-seq sr-te load-balance-number 3
[*PE1-tunnel-policy-srte] quit
[*PE1] ip vpn-instance vpn1
[*PE1-vpn-instance-vpn1] ipv6-family
[*PE1-vpn-instance-vpn1-af-ipv6] tnl-policy srte evpn
[*PE1-vpn-instance-vpn1-af-ipv6] quit
[*PE1-vpn-instance-vpn1] quit
[*PE1] commit

    Repeat this step for PE2. For configuration details, see Configuration Files in this section.

    # Configure DC-GW1.

    [~DCGW1] tunnel-policy srte
[*DCGW1-tunnel-policy-srte] tunnel select-seq sr-te load-balance-number 3
[*DCGW1-tunnel-policy-srte] quit
[*DCGW1] ip vpn-instance vpn1
[*DCGW1-vpn-instance-vpn1] ipv6-family
[*DCGW1-vpn-instance-vpn1-af-ipv6] tnl-policy srte evpn
[*DCGW1-vpn-instance-vpn1-af-ipv6] quit
[*DCGW1-vpn-instance-vpn1] quit
[*DCGW1] commit

    Repeat this step for DC-GW2. For configuration details, see Configuration Files in this section.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] tunnel-policy srte
[*L2GW/L3GW1-tunnel-policy-srte] tunnel select-seq sr-te load-balance-number 3
[*L2GW/L3GW1-tunnel-policy-srte] quit
[*L2GW/L3GW1] ip vpn-instance vpn1
[*L2GW/L3GW1-vpn-instance-vpn1] ipv6-family
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv6] tnl-policy srte evpn
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv6] quit
[*L2GW/L3GW1-vpn-instance-vpn1] quit
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  8. Configure the BGP EVPN function on DC-GWs and L2GW/L3GWs and configure DC-GWs as RRs.

    # Configure PE1.

    [~PE1] ipv6 route-static vpn-instance vpn1 :: 0 NULL0 tag 2000
[*PE1] bgp 200
[*PE1-bgp] peer 1.1.1.1 as-number 200
[*PE1-bgp] peer 1.1.1.1 ebgp-max-hop 255
[*PE1-bgp] peer 1.1.1.1 connect-interface LoopBack1
[*PE1-bgp] peer 2.2.2.2 as-number 200
[*PE1-bgp] peer 2.2.2.2 ebgp-max-hop 255
[*PE1-bgp] peer 2.2.2.2 connect-interface LoopBack1
[*PE1-bgp] l2vpn-family evpn
[*PE1-bgp-af-evpn] peer 1.1.1.1 enable
[*PE1-bgp-af-evpn] peer 2.2.2.2 enable
[*PE1-bgp-af-evpn] quit
[*PE1-bgp] ipv6-family vpn-instance vpn1
[*PE1-bgp-6-vpn1] import-route static
[*PE1-bgp-6-vpn1] import-route direct
[*PE1-bgp-6-vpn1] advertise l2vpn evpn
[*PE1-bgp-6-vpn1] quit
[*PE1-bgp] quit
[*PE1] commit

    Repeat this step for PE2. For configuration details, see Configuration Files in this section.

    # Configure DC-GW1.

    [~DCGW1] ip ipv6-prefix uIPv6 index 10 permit 2001:db8:10::10 128
[*DCGW1] route-policy stopuIP deny node 10
[*DCGW1-route-policy] if-match ipv6 address prefix-list uIPv6
[*DCGW1-route-policy] quit
[*DCGW1] route-policy stopuIP permit node 20
[*DCGW1-route-policy] quit
[*DCGW1] bgp 100
[*DCGW1-bgp] l2vpn-family evpn
[*DCGW1-bgp-af-evpn] peer 1.1.1.1 enable
[*DCGW1-bgp-af-evpn] peer 1.1.1.1 reflect-client
[*DCGW1-bgp-af-evpn] peer 2.2.2.2 enable
[*DCGW1-bgp-af-evpn] peer 2.2.2.2 reflect-client
[*DCGW1-bgp-af-evpn] peer 4.4.4.4 enable
[*DCGW1-bgp-af-evpn] peer 4.4.4.4 reflect-client
[*DCGW1-bgp-af-evpn] quit
[*DCGW1-bgp] quit
[*DCGW1] commit

    Repeat this step for DC-GW2. For configuration details, see Configuration Files in this section.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] bgp 100
[*L2GW/L3GW1-bgp] peer 7.7.7.7 as-number 200
[*L2GW/L3GW1-bgp] peer 7.7.7.7 ebgp-max-hop 255
[*L2GW/L3GW1-bgp] peer 7.7.7.7 connect-interface LoopBack1
[*L2GW/L3GW1-bgp] peer 8.8.8.8 as-number 200
[*L2GW/L3GW1-bgp] peer 8.8.8.8 ebgp-max-hop 255
[*L2GW/L3GW1-bgp] peer 8.8.8.8 connect-interface LoopBack1
[*L2GW/L3GW1-bgp] l2vpn-family evpn
[*L2GW/L3GW1-bgp-af-evpn] peer 3.3.3.3 enable
[*L2GW/L3GW1-bgp-af-evpn] peer 3.3.3.3 reflect-client
[*L2GW/L3GW1-bgp-af-evpn] peer 4.4.4.4 enable
[*L2GW/L3GW1-bgp-af-evpn] peer 4.4.4.4 reflect-client
[*L2GW/L3GW1-bgp-af-evpn] peer 7.7.7.7 enable
[*L2GW/L3GW1-bgp-af-evpn] peer 8.8.8.8 enable
[*L2GW/L3GW1-bgp-af-evpn] quit
[*L2GW/L3GW1-bgp] quit
[*L2GW/L3GW1] evpn soure-address 1.1.1.1
[*L2GW/L3GW1] evpn
[*L2GW/L3GW1-evpn] vlan-extend private enable
[*L2GW/L3GW1-evpn] vlan-extend redirect enable
[*L2GW/L3GW1-evpn] local-remote frr enable
[*L2GW/L3GW1-evpn] quit
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  9. Configure the Eth-Trunk Layer 2 sub-interfaces connecting L2GW/L3GWs to VNFs and the static VPN routes destined for VNFs.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] lacp e-trunk system-id 00e0-fc00-0002
[*L2GW/L3GW1] lacp e-trunk priority 1
[*L2GW/L3GW1] e-trunk 1
[*L2GW/L3GW1-e-trunk-1] peer-address 2.2.2.2 source-address 1.1.1.1
[*L2GW/L3GW1-e-trunk-1] priority 5
[*L2GW/L3GW1-e-trunk-1] quit
[*L2GW/L3GW1] interface Eth-Trunk 10
[*L2GW/L3GW1-Eth-Trunk10] mode lacp-static
[*L2GW/L3GW1-Eth-Trunk10] e-trunk 1
[*L2GW/L3GW1-Eth-Trunk10] e-trunk mode force-master
[*L2GW/L3GW1-Eth-Trunk10] esi 0000.1111.1111.1111.1111
[*L2GW/L3GW1-Eth-Trunk10] quit
[*L2GW/L3GW1] interface Eth-Trunk 20
[*L2GW/L3GW1-Eth-Trunk20] mode lacp-static
[*L2GW/L3GW1-Eth-Trunk20] e-trunk 1
[*L2GW/L3GW1-Eth-Trunk20] e-trunk mode force-master
[*L2GW/L3GW1-Eth-Trunk20] esi 0000.2222.2222.2222.2222
[*L2GW/L3GW1-Eth-Trunk20] quit
[*L2GW/L3GW1] interface Eth-Trunk 30
[*L2GW/L3GW1-Eth-Trunk30] mode lacp-static
[*L2GW/L3GW1-Eth-Trunk30] e-trunk 1
[*L2GW/L3GW1-Eth-Trunk30] e-trunk mode force-master
[*L2GW/L3GW1-Eth-Trunk30] esi 0000.3333.3333.3333.3333
[*L2GW/L3GW1-Eth-Trunk30] quit
[*L2GW/L3GW1] interface Eth-Trunk 40
[*L2GW/L3GW1-Eth-Trunk40] mode lacp-static
[*L2GW/L3GW1-Eth-Trunk40] e-trunk 1
[*L2GW/L3GW1-Eth-Trunk40] e-trunk mode force-master
[*L2GW/L3GW1-Eth-Trunk40] esi 0000.4444.4444.4444.4444
[*L2GW/L3GW1-Eth-Trunk40] quit
[*L2GW/L3GW1] interface Eth-Trunk 10.1 mode l2
[*L2GW/L3GW1-Eth-Trunk10.1] encapsulation dot1q vid 10
[*L2GW/L3GW1-Eth-Trunk10.1] rewrite pop single
[*L2GW/L3GW1-Eth-Trunk10.1] bridge-domain 10
[*L2GW/L3GW1-Eth-Trunk10.1] quit
[*L2GW/L3GW1] interface Eth-Trunk 20.1 mode l2
[*L2GW/L3GW1-Eth-Trunk20.1] encapsulation dot1q vid 20
[*L2GW/L3GW1-Eth-Trunk20.1] rewrite pop single
[*L2GW/L3GW1-Eth-Trunk20.1] bridge-domain 20
[*L2GW/L3GW1-Eth-Trunk20.1] quit
[*L2GW/L3GW1] interface Eth-Trunk 30.1 mode l2
[*L2GW/L3GW1-Eth-Trunk30.1] encapsulation dot1q vid 30
[*L2GW/L3GW1-Eth-Trunk30.1] rewrite pop single
[*L2GW/L3GW1-Eth-Trunk30.1] bridge-domain 30
[*L2GW/L3GW1-Eth-Trunk30.1] quit
[*L2GW/L3GW1] interface Eth-Trunk 40.1 mode l2
[*L2GW/L3GW1-Eth-Trunk40.1] encapsulation dot1q vid 40
[*L2GW/L3GW1-Eth-Trunk40.1] rewrite pop single
[*L2GW/L3GW1-Eth-Trunk40.1] bridge-domain 40
[*L2GW/L3GW1-Eth-Trunk40.1] quit
[~L2GW/L3GW1] interface GigabitEthernet0/1/3
[*L2GW/L3GW1-GigabitEthernet0/1/3] eth-trunk 10
[*L2GW/L3GW1-GigabitEthernet0/1/3] quit
[*L2GW/L3GW1] interface GigabitEthernet0/1/4
[*L2GW/L3GW1-GigabitEthernet0/1/4] eth-trunk 20
[*L2GW/L3GW1-GigabitEthernet0/1/4] quit
[~L2GW/L3GW1] interface GigabitEthernet0/1/5
[*L2GW/L3GW1-GigabitEthernet0/1/5] eth-trunk 30
[*L2GW/L3GW1-GigabitEthernet0/1/5] quit
[*L2GW/L3GW1] interface GigabitEthernet0/1/6
[*L2GW/L3GW1-GigabitEthernet0/1/6] eth-trunk 40
[*L2GW/L3GW1-GigabitEthernet0/1/6] quit
[*L2GW/L3GW1] ipv6 route-static vpn-instance vpn1 2001:db8:5::5 128 2001:db8:1::2 preference 255 tag 1000 inter-protocol-ecmp
[*L2GW/L3GW1] ipv6 route-static vpn-instance vpn1 2001:db8:5::5 128 2001:db8:2::2 preference 255 tag 1000 inter-protocol-ecmp
[*L2GW/L3GW1] ipv6 route-static vpn-instance vpn1 2001:db8:6::6 128 2001:db8:3::2 preference 255 tag 1000 inter-protocol-ecmp
[*L2GW/L3GW1] ipv6 route-static vpn-instance vpn1 2001:db8:6::6 128 2001:db8:4::2 preference 255 tag 1000 inter-protocol-ecmp
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  10. Configure L2GW/L3GWs to import static VPN routes through BGP EVPN. Configure and apply a route-policy to L3VPN instances so that the static VPN routes can retain the original next hops.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] bgp 100
[*L2GW/L3GW1-bgp] ipv6-family vpn-instance vpn1
[*L2GW/L3GW1-bgp-6-vpn1] import-route static
[*L2GW/L3GW1-bgp-6-vpn1] import-route direct
[*L2GW/L3GW1-bgp-6-vpn1] advertise l2vpn evpn import-route-multipath
[*L2GW/L3GW1-bgp-6-vpn1] quit
[*L2GW/L3GW1-bgp] quit
[*L2GW/L3GW1] route-policy spv6 permit node 10
[*L2GW/L3GW1-route-policy] if-match tag 1000
[*L2GW/L3GW1-route-policy] apply ipv6 gateway-ip origin-nexthop
[*L2GW/L3GW1-route-policy] quit
[*L2GW/L3GW1] ip vpn-instance vpn1
[*L2GW/L3GW1-vpn-instance-vpn1] ipv6-family
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv6] export route-policy spv6 evpn
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv6] quit
[*L2GW/L3GW1-vpn-instance-vpn1] quit
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  11. Configure and apply a route-policy to L3VPN instances on PEs so that PEs can delete the GWIP attribute carried in the VNF routes received by EVPN peers.

    # Configure PE1.

    [~PE1] route-policy delGWIPv6 permit node 10
[*PE1-route-policy] apply ipv6 gateway-ip none
[*PE1-route-policy] quit
[*PE1] ip vpn-instance vpn1
[*PE1-vpn-instance-vpn1] ipv6-family
[*PE1-vpn-instance-vpn1-af-ipv6] import route-policy delGWIPv6 evpn
[*PE1-vpn-instance-vpn1-af-ipv6] quit
[*PE1-vpn-instance-vpn1] quit
[*PE1] commit

    Repeat this step for PE2. For configuration details, see Configuration Files in this section.

  12. On DC-GWs, configure the loopback addresses used to establish BGP VPN peer relationships with VNFs. Configure and apply a route-policy to L3VPN instances so that DC-GWs can only advertise VPN loopback routes and mobile phone routes (in this example, the destination IP address of mobile phone routes destined for a VNF is 2001:DB8:10::10) through BGP EVPN and the GWIP attribute is added to mobile phone routes and deleted from the routes received by EVPN peers.

    # Configure DC-GW1.

    [~DCGW1] interface LoopBack2
[*DCGW1-LoopBack2] ip binding vpn-instance vpn1
[*DCGW1-LoopBack2] ipv6 enable
[*DCGW1-LoopBack2] ipv6 address 2001:db8:33::33 128
[*DCGW1-LoopBack2] quit
[*DCGW1] bgp 100
[*DCGW1-bgp] ipv6-family vpn-instance vpn1
[*DCGW1-bgp-6-vpn1] advertise l2vpn evpn
[*DCGW1-bgp-6-vpn1] import-route direct
[*DCGW1-bgp-6-vpn1] quit
[*DCGW1-bgp] quit
[*DCGW1] ip ipv6-prefix lpv6 index 10 permit 2001:db8:33::33 128
[*DCGW1] route-policy dpv6 permit node 5
[*DCGW1-route-policy] if-match ipv6 address prefix-list uIPv6
[*DCGW1-route-policy] apply ipv6 gateway-ip origin-nexthop
[*DCGW1-route-policy] quit
[*DCGW1] route-policy dpv6 permit node 15
[*DCGW1-route-policy] if-match ipv6 address prefix-list lpv6
[*DCGW1-route-policy] quit
[*DCGW1] route-policy delGWIPv6 permit node 10
[*DCGW1-route-policy] apply ipv6 gateway-ip none
[*DCGW1-route-policy] quit
[*DCGW1] ip vpn-instance vpn1
[*DCGW1-vpn-instance-vpn1] ipv6-family
[*DCGW1-vpn-instance-vpn1-af-ipv6] export route-policy dpv6 evpn
[*DCGW1-vpn-instance-vpn1-af-ipv6] import route-policy delGWIPv6 evpn
[*DCGW1-vpn-instance-vpn1-af-ipv6] quit
[*DCGW1-vpn-instance-vpn1] quit
[*DCGW1] commit

    Repeat this step for DC-GW2. For configuration details, see Configuration Files in this section.

  13. Establish BGP VPN peer relationships between DC-GWs and VNFs and configure DC-GWs to function as RRs.

    # Configure DC-GW1.

    [~DCGW1] route-policy p1 deny node 10
[*DCGW1-route-policy] quit
[*DCGW1] bgp 100
[*DCGW1-bgp] ipv6-family vpn-instance vpn1
[*DCGW1-bgp-6-vpn1] peer 2001:db8:5::5 as-number 100
[*DCGW1-bgp-6-vpn1] peer 2001:db8:5::5 connect-interface LoopBack2
[*DCGW1-bgp-6-vpn1] peer 2001:db8:5::5 route-policy p1 export
[*DCGW1-bgp-6-vpn1] peer 2001:db8:5::5 reflect-client
[*DCGW1-bgp-6-vpn1] peer 2001:db8:6::6 as-number 100
[*DCGW1-bgp-6-vpn1] peer 2001:db8:6::6 connect-interface LoopBack2
[*DCGW1-bgp-6-vpn1] peer 2001:db8:6::6 route-policy p1 export
[*DCGW1-bgp-6-vpn1] peer 2001:db8:6::6 reflect-client
[*DCGW1-bgp-6-vpn1] quit
[*DCGW1-bgp] quit
[*DCGW1] commit

    # Configure DC-GW2.

    [~DCGW2] route-policy p1 deny node 10
[*DCGW2-route-policy] quit
[*DCGW2] bgp 100
[*DCGW2-bgp] ipv6-family vpn-instance vpn1
[*DCGW2-bgp-6-vpn1] peer 2001:db8:5::5 as-number 100
[*DCGW2-bgp-6-vpn1] peer 2001:db8:5::5 connect-interface LoopBack2
[*DCGW2-bgp-6-vpn1] peer 2001:db8:5::5 route-policy p1 export
[*DCGW2-bgp-6-vpn1] peer 2001:db8:5::5 reflect-client
[*DCGW2-bgp-6-vpn1] peer 2001:db8:6::6 as-number 100
[*DCGW2-bgp-6-vpn1] peer 2001:db8:6::6 connect-interface LoopBack2
[*DCGW2-bgp-6-vpn1] peer 2001:db8:6::6 route-policy p1 export
[*DCGW2-bgp-6-vpn1] peer 2001:db8:6::6 reflect-client
[*DCGW2-bgp-6-vpn1] quit
[*DCGW2-bgp] quit
[*DCGW2] commit

  14. Configure the load balancing function on PEs, DC-GWs, and L2GW/L3GWs.

    # Configure PE1.

    [~PE1] bgp 100
[*PE1-bgp] ipv6-family vpn-instance vpn1
[*PE1-bgp-6-vpn1] maximum load-balancing 16
[*PE1-bgp-6-vpn1] quit
[*PE1-bgp] l2vpn-family evpn
[*PE1-bgp-af-evpn] peer 1.1.1.1 capability-advertise add-path both
[*PE1-bgp-af-evpn] peer 2.2.2.2 capability-advertise add-path both
[*PE1-bgp-af-evpn] quit
[*PE1-bgp] quit
[*PE1] commit

    Repeat this step for PE2. For configuration details, see Configuration Files in this section.

    # Configure DC-GW1.

    [~DCGW1] bgp 100
[*DCGW1-bgp] ipv6-family vpn-instance vpn1
[*DCGW1-bgp-6-vpn1] maximum load-balancing 16
[*DCGW1-bgp-6-vpn1] quit
[*DCGW1-bgp] l2vpn-family evpn
[*DCGW1-bgp-af-evpn] peer 1.1.1.1 capability-advertise add-path both
[*DCGW1-bgp-af-evpn] peer 1.1.1.1 advertise add-path path-number 16
[*DCGW1-bgp-af-evpn] peer 2.2.2.2 capability-advertise add-path both
[*DCGW1-bgp-af-evpn] peer 2.2.2.2 advertise add-path path-number 16
[*DCGW1-bgp-af-evpn] quit
[*DCGW1-bgp] quit
[*DCGW1] commit

    Repeat this step for DC-GW2. For configuration details, see Configuration Files in this section.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] bgp 100
[*L2GW/L3GW1-bgp] ipv6-family vpn-instance vpn1
[*L2GW/L3GW1-bgp-6-vpn1] maximum load-balancing 16
[*L2GW/L3GW1-bgp-6-vpn1] quit
[*L2GW/L3GW1-bgp] l2vpn-family evpn
[*L2GW/L3GW1-bgp-af-evpn] bestroute add-path path-number 16
[*L2GW/L3GW1-bgp-af-evpn] peer 3.3.3.3 capability-advertise add-path both
[*L2GW/L3GW1-bgp-af-evpn] peer 3.3.3.3 advertise add-path path-number 16
[*L2GW/L3GW1-bgp-af-evpn] peer 4.4.4.4 capability-advertise add-path both
[*L2GW/L3GW1-bgp-af-evpn] peer 4.4.4.4 advertise add-path path-number 16
[*L2GW/L3GW1-bgp-af-evpn] peer 7.7.7.7 capability-advertise add-path both
[*L2GW/L3GW1-bgp-af-evpn] peer 7.7.7.7 advertise add-path path-number 16
[*L2GW/L3GW1-bgp-af-evpn] peer 8.8.8.8 capability-advertise add-path both
[*L2GW/L3GW1-bgp-af-evpn] peer 8.8.8.8 advertise add-path path-number 16
[*L2GW/L3GW1-bgp-af-evpn] quit
[*L2GW/L3GW1-bgp] quit
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  15. Verify the configuration.

    After completing the configurations, run the display ipv6 routing-table vpn-instance vpn1 command on PEs to view the mobile phone route information and VNF route information in VPN routing tables. The following example uses the command output on PE1.

    [~PE1] display ipv6 routing-table vpn-instance vpn1
Routing Table : vpn1
         Destinations : 10       Routes : 14         

Destination  : ::                                      PrefixLength : 0
NextHop      : ::                                      Preference   : 60
Cost         : 0                                       Protocol     : Static
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : NULL0                                   Flags        : DB

Destination  : 2001:DB8:5::5                           PrefixLength : 128
NextHop      : ::FFFF:1.1.1.1                          Preference   : 255
Cost         : 0                                       Protocol     : EBGP
RelayNextHop : ::FFFF:0.0.0.0                          TunnelID     : 0x000000000300000001
Interface    : Tunnel1                                 Flags        : RD

Destination  : 2001:DB8:5::5                           PrefixLength : 128
NextHop      : ::FFFF:2.2.2.2                          Preference   : 255
Cost         : 0                                       Protocol     : EBGP
RelayNextHop : ::FFFF:0.0.0.0                          TunnelID     : 0x000000000300000002
Interface    : Tunnel2                                 Flags        : RD

Destination  : 2001:DB8:6::6                           PrefixLength : 128
NextHop      : ::FFFF:1.1.1.1                          Preference   : 255
Cost         : 0                                       Protocol     : EBGP
RelayNextHop : ::FFFF:0.0.0.0                          TunnelID     : 0x000000000300000001
Interface    : Tunnel1                                 Flags        : RD

Destination  : 2001:DB8:6::6                           PrefixLength : 128
NextHop      : ::FFFF:2.2.2.2                          Preference   : 255
Cost         : 0                                       Protocol     : EBGP
RelayNextHop : ::FFFF:0.0.0.0                          TunnelID     : 0x000000000300000002
Interface    : Tunnel2                                 Flags        : RD

Destination  : 2001:DB8:7::                            PrefixLength : 64
NextHop      : 2001:DB8:7::1                           Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : GigabitEthernet0/1/3                    Flags        : D

Destination  : 2001:DB8:7::1                           PrefixLength : 128
NextHop      : ::1                                     Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : GigabitEthernet0/1/3                    Flags        : D

Destination  : 2001:DB8:10::10                         PrefixLength : 128
NextHop      : ::FFFF:1.1.1.1                          Preference   : 255
Cost         : 0                                       Protocol     : EBGP
RelayNextHop : ::FFFF:0.0.0.0                          TunnelID     : 0x000000000300000001
Interface    : Tunnel1                                 Flags        : RD

Destination  : 2001:DB8:10::10                         PrefixLength : 128
NextHop      : ::FFFF:2.2.2.2                          Preference   : 255
Cost         : 0                                       Protocol     : EBGP
RelayNextHop : ::FFFF:0.0.0.0                          TunnelID     : 0x000000000300000002
Interface    : Tunnel2                                 Flags        : RD

Destination  : 2001:DB8:33::33                         PrefixLength : 128
NextHop      : ::FFFF:1.1.1.1                          Preference   : 255
Cost         : 0                                       Protocol     : EBGP
RelayNextHop : ::FFFF:0.0.0.0                          TunnelID     : 0x000000000300000001
Interface    : Tunnel1                                 Flags        : RD


Destination  : 2001:DB8:33::33                         PrefixLength : 128
NextHop      : ::FFFF:2.2.2.2                          Preference   : 255
Cost         : 0                                       Protocol     : EBGP
RelayNextHop : ::FFFF:0.0.0.0                          TunnelID     : 0x000000000300000002
Interface    : Tunnel2                                 Flags        : RD

Destination  : 2001:DB8:44::44                         PrefixLength : 128
NextHop      : ::FFFF:4.4.4.4                          Preference   : 255
Cost         : 0                                       Protocol     : EBGP
RelayNextHop : ::FFFF:0.0.0.0                          TunnelID     : 0x000000000300000001
Interface    : Tunnel1                                 Flags        : RD

Destination  : 2001:DB8:44::44                         PrefixLength : 128
NextHop      : ::FFFF:4.4.4.4                          Preference   : 255
Cost         : 0                                       Protocol     : EBGP
RelayNextHop : ::FFFF:0.0.0.0                          TunnelID     : 0x000000000300000002
Interface    : Tunnel2                                 Flags        : RD

Destination  : FE80::                                  PrefixLength : 10
NextHop      : ::                                      Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : NULL0                                   Flags        : DB

Configuration Files

  • PE1 configuration file

    #
sysname PE1
#
ip vpn-instance vpn1
 ipv6-family
  route-distinguisher 77:77
  apply-label per-instance
  import route-policy delGWIPv6 evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
  tnl-policy srte evpn
  evpn mpls routing-enable
#
mpls lsr-id 7.7.7.7
#
mpls            
 mpls te
#
explicit-path PtoL71
 next sid label 48090 type adjacency
 next sid label 1000 type binding-sid
#
explicit-path PtoL72
 next sid label 1000 type binding-sid
 next sid label 48091 type adjacency
 next sid label 2000 type binding-sid
#
explicit-path PtoP12
 next sid label 48092 type adjacency
#
segment-routing
#
isis 1
 is-level level-2
 cost-style wide
 network-entity 10.0000.0000.0007.00
 traffic-eng level-2
 segment-routing mpls
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.7.1 255.255.255.0
 isis enable 1
 mpls
 mpls te
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.5.2 255.255.255.0
 mpls
 mpls te
#
interface GigabitEthernet0/1/3
 undo shutdown
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:7::1/64
#               
interface LoopBack1
 ip address 7.7.7.7 255.255.255.255
isis enable 1
 isis prefix-sid absolute 16100 
#
interface Tunnel1
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 1.1.1.1
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 100
 mpls te path explicit-path PtoL71  
#
interface Tunnel2
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 2.2.2.2
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 200
 mpls te path explicit-path PtoL72  
#
interface Tunnel3
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 8.8.8.8
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 300
 mpls te path explicit-path PtoP12  
 mpls te binding-sid label 1000
#
bgp 200
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 ebgp-max-hop 255
 peer 1.1.1.1 connect-interface LoopBack1
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 ebgp-max-hop 255
 peer 2.2.2.2 connect-interface LoopBack1
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 ebgp-max-hop 255
 peer 3.3.3.3 connect-interface LoopBack1
 peer 3.3.3.3 egress-engineering
 peer 4.4.4.4 as-number 100
 peer 4.4.4.4 ebgp-max-hop 255
 peer 4.4.4.4 connect-interface LoopBack1
 peer 4.4.4.4 egress-engineering
 #
 ipv4-family unicast
  undo synchronization
  network 7.7.7.7 255.255.255.255
  network 10.6.5.0 255.255.255.0
  network 10.6.7.0 255.255.255.0
  import-route direct
  peer 1.1.1.1 enable
  peer 2.2.2.2 enable
  peer 3.3.3.3 enable
  peer 4.4.4.4 enable
 #
 link-state-family unicast
 #
 ipv6-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn
 #
 l2vpn-family evpn
  undo policy vpn-target
  peer 1.1.1.1 enable
  peer 1.1.1.1 capability-advertise add-path both
  peer 2.2.2.2 enable
  peer 2.2.2.2 capability-advertise add-path both
#               
route-policy delGWIPv6 permit node 10
 apply ipv6 gateway-ip none
#
ip route-static 3.3.3.3 255.255.255.255 10.6.5.1
ip route-static 4.4.4.4 255.255.255.255 10.6.7.2
ip route-static 8.8.8.8 255.255.255.255 10.6.7.2
#
ipv6 route-static vpn-instance vpn1 :: 0 NULL0 tag 2000
#
tunnel-policy srte
 tunnel select-seq sr-te load-balance-number 3
#
return

  • PE2 configuration file

    #
sysname PE2
#
ip vpn-instance vpn1
 ipv6-family
  route-distinguisher 88:88
  apply-label per-instance
  import route-policy delGWIPv6 evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
  tnl-policy srte evpn
  evpn mpls routing-enable
#
mpls lsr-id 8.8.8.8
#
mpls            
 mpls te
#
explicit-path PtoL81
 next sid label 1000 type binding-sid
 next sid label 48090 type adjacency
 next sid label 1000 type binding-sid
#
explicit-path PtoL82
 next sid label 48091 type adjacency
 next sid label 2000 type binding-sid
#
explicit-path PtoP21
 next sid label 48092 type adjacency
#
segment-routing
#
isis 1
 is-level level-2
 cost-style wide
 network-entity 10.0000.0000.0008.00
 traffic-eng level-2
 segment-routing mpls
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.7.2 255.255.255.0
 isis enable 1
 mpls
 mpls te
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.6.2 255.255.255.0
 mpls
 mpls te
#
interface GigabitEthernet0/1/3
 undo shutdown
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:8::1/64
#               
interface LoopBack1
 ip address 8.8.8.8 255.255.255.255
 isis enable 1
 isis prefix-sid absolute 16200 
#
interface Tunnel1
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 1.1.1.1
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 100
 mpls te path explicit-path PtoL81  
#
interface Tunnel2
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 2.2.2.2
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 200
 mpls te path explicit-path PtoL82  
#
interface Tunnel3
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 7.7.7.7
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 300
 mpls te path explicit-path PtoP21  
 mpls te binding-sid label 1000
#
bgp 200
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 ebgp-max-hop 255
 peer 1.1.1.1 connect-interface LoopBack1
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 ebgp-max-hop 255
 peer 2.2.2.2 connect-interface LoopBack1
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 ebgp-max-hop 255
 peer 3.3.3.3 connect-interface LoopBack1
 peer 3.3.3.3 egress-engineering
 peer 4.4.4.4 as-number 100
 peer 4.4.4.4 ebgp-max-hop 255
 peer 4.4.4.4 connect-interface LoopBack1
 peer 4.4.4.4 egress-engineering
 #
 ipv4-family unicast
  undo synchronization
  network 8.8.8.8 255.255.255.255
  network 10.6.6.0 255.255.255.0
  network 10.6.7.0 255.255.255.0
  import-route direct
  peer 1.1.1.1 enable
  peer 2.2.2.2 enable
  peer 3.3.3.3 enable
  peer 4.4.4.4 enable
 #
 link-state-family unicast
 #
 ipv6-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn
 #
 l2vpn-family evpn
  undo policy vpn-target
  peer 1.1.1.1 enable
  peer 1.1.1.1 capability-advertise add-path both
  peer 2.2.2.2 enable
  peer 2.2.2.2 capability-advertise add-path both
#
route-policy delGWIPv6 permit node 10
 apply ipv6 gateway-ip none
#
ip route-static 3.3.3.3 255.255.255.255 10.6.7.1
ip route-static 4.4.4.4 255.255.255.255 10.6.6.1
ip route-static 7.7.7.7 255.255.255.255 10.6.7.1
#
ipv6 route-static vpn-instance vpn1 :: 0 NULL0 tag 2000
#
tunnel-policy srte
 tunnel select-seq sr-te load-balance-number 3
#
return

  • DC-GW1 configuration file

    #
sysname DCGW1
#
ip vpn-instance vpn1
 ipv6-family
  route-distinguisher 33:33
  apply-label per-instance
  import route-policy delGWIP evpn
  export route-policy dp evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
  tnl-policy srte evpn
  evpn mpls routing-enable
#
mpls lsr-id 3.3.3.3
#               
mpls
 mpls te
#
explicit-path DtoL31
 next sid label 48003 type adjacency
#
explicit-path DtoL32
 next sid label 48002 type adjacency
 next sid label 48003 type adjacency
#
segment-routing
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.1.1 255.255.255.0
 mpls
 mpls te
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.2.1 255.255.255.0
 mpls
 mpls te
#
interface GigabitEthernet0/1/3
 undo shutdown
 ip address 10.6.5.1 255.255.255.0
 mpls
 mpls te
#
interface LoopBack1
 ip address 3.3.3.3 255.255.255.255
 ospf prefix-sid index 30
#
interface LoopBack2
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:33::33/128
#
interface Tunnel1
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 1.1.1.1
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 1
 mpls te path explicit-path DtoL31  
 mpls te binding-sid label 1000
#
interface Tunnel2
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 2.2.2.2
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 2
 mpls te path explicit-path DtoL32  
 mpls te binding-sid label 2000
#
bgp 100
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 connect-interface LoopBack1
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 connect-interface LoopBack1
 peer 4.4.4.4 as-number 100
 peer 4.4.4.4 connect-interface LoopBack1
 peer 7.7.7.7 as-number 200
 peer 7.7.7.7 ebgp-max-hop 255
 peer 7.7.7.7 connect-interface LoopBack1
 peer 7.7.7.7 egress-engineering
 peer 8.8.8.8 as-number 200
 peer 8.8.8.8 ebgp-max-hop 255
 peer 8.8.8.8 connect-interface LoopBack1
 peer 8.8.8.8 egress-engineering
 #
 ipv4-family unicast
  undo synchronization
  network 10.6.1.0 255.255.255.0
  network 10.6.5.0 255.255.255.0
  import-route static
  import-route ospf 100
  peer 1.1.1.1 enable
  peer 2.2.2.2 enable
  peer 4.4.4.4 enable
  peer 7.7.7.7 enable
  peer 8.8.8.8 enable
 #
 link-state-family unicast
 #
 ipv6-family vpn-instance vpn1
  import-route direct
  maximum load-balancing 16  
  advertise l2vpn evpn
  peer 2001:DB8:5::5 as-number 100
  peer 2001:DB8:5::5 connect-interface LoopBack2
  peer 2001:DB8:5::5 route-policy p1 export
  peer 2001:DB8:5::5 reflect-client
  peer 2001:DB8:6::6 as-number 100
  peer 2001:DB8:6::6 connect-interface LoopBack2
  peer 2001:DB8:6::6 route-policy p1 export
  peer 2001:DB8:6::6 reflect-client
 #
 l2vpn-family evpn
  undo policy vpn-target
  peer 1.1.1.1 enable
  peer 1.1.1.1 reflect-client
  peer 1.1.1.1 capability-advertise add-path both
  peer 1.1.1.1 advertise add-path path-number 16
  peer 2.2.2.2 enable
  peer 2.2.2.2 reflect-client
  peer 2.2.2.2 capability-advertise add-path both
  peer 2.2.2.2 advertise add-path path-number 16
  peer 4.4.4.4 enable
  peer 4.4.4.4 reflect-client
  peer 4.4.4.4 route-policy stopuIP export
#
ospf 100
 opaque-capability enable
 segment-routing mpls
 segment-routing global-block 160000 161000
 area 0.0.0.0
  network 3.3.3.3 0.0.0.0
  network 10.6.1.0 0.0.0.255
  network 10.6.2.0 0.0.0.255
  mpls-te enable
#
route-policy delGWIPv6 permit node 10
 apply ipv6 gateway-ip none
#
route-policy dpv6 permit node 5
 if-match ipv6 address prefix-list uIPv6
 apply ipv6 gateway-ip origin-nexthop
#
route-policy dpv6 permit node 15
 if-match ipv6 address prefix-list lpv6
#
route-policy p1 deny node 10
#
route-policy stopuIP deny node 10
 if-match ipv6 address prefix-list uIPv6
#
route-policy stopuIP permit node 20
#
ip route-static 7.7.7.7 255.255.255.255 10.6.5.2
ip route-static 8.8.8.8 255.255.255.255 10.6.1.2
#
ip ipv6-prefix lpv6 index 10 permit 2001:DB8:33::33 128
ip ipv6-prefix uIPv6 index 10 permit 2001:DB8:10::10 128
#
tunnel-policy srte
 tunnel select-seq sr-te load-balance-number 3
#
evpn source-address 3.3.3.3
#
return

  • DC-GW2 configuration file

    #
sysname DCGW2
#
ip vpn-instance vpn1
 ipv6-family
  route-distinguisher 44:44
  apply-label per-instance
  import route-policy delGWIPv6 evpn
  export route-policy dp evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
  tnl-policy srte evpn
  evpn mpls routing-enable
#
mpls lsr-id 4.4.4.4
#               
mpls
 mpls te
#
explicit-path DtoL42
 next sid label 48003 type adjacency
#
explicit-path DtoL41
 next sid label 48002 type adjacency
 next sid label 48003 type adjacency
#
segment-routing
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.1.2 255.255.255.0
 mpls
 mpls te
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.3.1 255.255.255.0
 mpls
 mpls te
#
interface GigabitEthernet0/1/3
 undo shutdown
 ip address 10.6.6.1 255.255.255.0
 mpls
 mpls te
#
interface LoopBack1
 ip address 4.4.4.4 255.255.255.255
 ospf prefix-sid index 40
#
interface LoopBack2
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:44::44/128
#
interface Tunnel1
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 1.1.1.1
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 1
 mpls te path explicit-path DtoL41  
 mpls te binding-sid label 1000
#
interface Tunnel2
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 2.2.2.2
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 2
 mpls te path explicit-path DtoL42  
 mpls te binding-sid label 2000
#
bgp 100
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 connect-interface LoopBack1
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 connect-interface LoopBack1
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 connect-interface LoopBack1
 peer 7.7.7.7 as-number 200
 peer 7.7.7.7 ebgp-max-hop 255
 peer 7.7.7.7 connect-interface LoopBack1
 peer 7.7.7.7 egress-engineering
 peer 8.8.8.8 as-number 200
 peer 8.8.8.8 ebgp-max-hop 255
 peer 8.8.8.8 connect-interface LoopBack1
 peer 8.8.8.8 egress-engineering
 #
 ipv4-family unicast
  undo synchronization
  network 10.6.1.0 255.255.255.0
  network 10.6.6.0 255.255.255.0
  import-route static
  import-route ospf 100
  peer 1.1.1.1 enable
  peer 2.2.2.2 enable
  peer 3.3.3.3 enable
  peer 7.7.7.7 enable
  peer 8.8.8.8 enable
 #
 link-state-family unicast
 #
 ipv6-family vpn-instance vpn1
  import-route direct
  maximum load-balancing 16  
  advertise l2vpn evpn
  peer 2001:DB8:5::5 as-number 100
  peer 2001:DB8:5::5 connect-interface LoopBack2
  peer 2001:DB8:5::5 route-policy p1 export
  peer 2001:DB8:5::5 reflect-client
  peer 2001:DB8:6::6 as-number 100
  peer 2001:DB8:6::6 connect-interface LoopBack2
  peer 2001:DB8:6::6 route-policy p1 export
  peer 2001:DB8:6::6 reflect-client
 #
 l2vpn-family evpn
  undo policy vpn-target
  peer 1.1.1.1 enable
  peer 1.1.1.1 reflect-client
  peer 1.1.1.1 capability-advertise add-path both
  peer 1.1.1.1 advertise add-path path-number 16
  peer 2.2.2.2 enable
  peer 2.2.2.2 reflect-client
  peer 2.2.2.2 capability-advertise add-path both
  peer 2.2.2.2 advertise add-path path-number 16
  peer 3.3.3.3 enable
  peer 3.3.3.3 reflect-client
  peer 3.3.3.3 route-policy stopuIP export
#
ospf 100
 opaque-capability enable
 segment-routing mpls
 segment-routing global-block 160000 161000
 area 0.0.0.0
  network 4.4.4.4 0.0.0.0
  network 10.6.1.0 0.0.0.255
  network 10.6.3.0 0.0.0.255
  mpls-te enable
#
route-policy delGWIPv6 permit node 10
 apply ipv6 gateway-ip none
#               
route-policy dpv6 permit node 5
 if-match ipv6 address prefix-list uIPv6
 apply ipv6 gateway-ip origin-nexthop
#
route-policy dpv6 permit node 15
 if-match ipv6 address prefix-list lpv6
#
route-policy p1 deny node 10
#
route-policy stopuIP deny node 10
 if-match ipv6 address prefix-list uIPv6
#
route-policy stopuIP permit node 20
#
ip route-static 7.7.7.7 255.255.255.255 10.6.1.1
ip route-static 8.8.8.8 255.255.255.255 10.6.6.2
#
ip ipv6-prefix lpv6 index 10 permit 2001:DB8:44::44 128
ip ipv6-prefix uIPv6 index 10 permit 2001:DB8:10::10 128
#
tunnel-policy srte
 tunnel select-seq sr-te load-balance-number 3
#
evpn source-address 4.4.4.4
#
return

  • L2GW/L3GW1 configuration file

    #
sysname L2GW/L3GW1
#
lacp e-trunk system-id 00e0-fc00-0002
lacp e-trunk priority 1
#
evpn
 vlan-extend private enable
 vlan-extend redirect enable
 local-remote frr enable
 #
 mac-duplication
#
evpn vpn-instance evrf1 bd-mode
 route-distinguisher 1:1
 vpn-target 1:1 export-extcommunity
 vpn-target 1:1 import-extcommunity
#
evpn vpn-instance evrf2 bd-mode
 route-distinguisher 2:2
 vpn-target 2:2 export-extcommunity
 vpn-target 2:2 import-extcommunity
#
evpn vpn-instance evrf3 bd-mode
 route-distinguisher 3:3
 vpn-target 3:3 export-extcommunity
 vpn-target 3:3 import-extcommunity
#
evpn vpn-instance evrf4 bd-mode
 route-distinguisher 4:4
 vpn-target 4:4 export-extcommunity
 vpn-target 4:4 import-extcommunity
#
ip vpn-instance vpn1
 ipv6-family
  route-distinguisher 11:11
  apply-label per-instance
  export route-policy spv6 evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
  tnl-policy srte evpn
  evpn mpls routing-enable
#
mpls lsr-id 1.1.1.1
#
mpls            
 mpls te
#
bridge-domain 10
 evpn binding vpn-instance evrf1
#
bridge-domain 20
 evpn binding vpn-instance evrf2
#
bridge-domain 30
 evpn binding vpn-instance evrf3
#
bridge-domain 40
 evpn binding vpn-instance evrf4
#
explicit-path LtoD13
 next sid label 48002 type adjacency
#
explicit-path LtoD14
 next sid label 48003 type adjacency
 next sid label 48003 type adjacency
#
explicit-path LtoP17
 next sid label 3000 type binding-sid
 next sid label 48121 type adjacency
#
explicit-path LtoP18
 next sid label 4000 type binding-sid
 next sid label 48121 type adjacency
#
explicit-path LtoL
 next sid label 48003 type adjacency
#
e-trunk 1
 priority 5
 peer-address 2.2.2.2 source-address 1.1.1.1
#
segment-routing
#
interface Vbdif10
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:1::1/64
 mac-address 00e0-fc00-0003
 ipv6 nd dad attempts 0
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 anycast-gateway enable
#
interface Vbdif20
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:2::1/64
 mac-address 00e0-fc00-0004
 ipv6 nd dad attempts 0
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 anycast-gateway enable
#
interface Vbdif30
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:3::1/64
 mac-address 00e0-fc00-0001
 ipv6 nd dad attempts 0
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 anycast-gateway enable
#
interface Vbdif40
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:4::1/64
 mac-address 00e0-fc00-0005
 ipv6 nd dad attempts 0
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 anycast-gateway enable
#
interface Eth-Trunk10
 mode lacp-static
 e-trunk 1
 e-trunk mode force-master
 esi 0000.1111.1111.1111.1111
#
interface Eth-Trunk10.1 mode l2
 encapsulation dot1q vid 10
 rewrite pop single
 bridge-domain 10
#
interface Eth-Trunk20
 mode lacp-static
 e-trunk 1
 e-trunk mode force-master
 esi 0000.2222.2222.2222.2222
#
interface Eth-Trunk20.1 mode l2
 encapsulation dot1q vid 20
 rewrite pop single
 bridge-domain 20
#
interface Eth-Trunk30
 mode lacp-static
 e-trunk 1      
 e-trunk mode force-master
 esi 0000.3333.3333.3333.3333
#
interface Eth-Trunk30.1 mode l2
 encapsulation dot1q vid 30
 rewrite pop single
 bridge-domain 30
#
interface Eth-Trunk40
 mode lacp-static
 e-trunk 1
 e-trunk mode force-master
 esi 0000.4444.4444.4444.4444
#
interface Eth-Trunk40.1 mode l2
 encapsulation dot1q vid 40
 rewrite pop single
 bridge-domain 40
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.4.1 255.255.255.0
 mpls
 mpls te
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.2.2 255.255.255.0
 mpls
 mpls te
#
interface GigabitEthernet0/1/3
 undo shutdown
 eth-trunk 10
#               
interface GigabitEthernet0/1/4
 undo shutdown
 eth-trunk 20
#
interface GigabitEthernet0/1/5
 undo shutdown
 eth-trunk 30
#
interface GigabitEthernet0/1/6
 undo shutdown
 eth-trunk 40
#
interface LoopBack1
 ip address 1.1.1.1 255.255.255.255
 ospf prefix-sid index 10
#
interface Tunnel1
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 3.3.3.3
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 1
 mpls te path explicit-path LtoD13  
 mpls te binding-sid label 3000
#
interface Tunnel2
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 4.4.4.4
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 2
 mpls te path explicit-path LtoD14  
 mpls te binding-sid label 4000
#
interface Tunnel3
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 2.2.2.2
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 3
 mpls te path explicit-path LtoL
#
interface Tunnel7
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 7.7.7.7
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 100
 mpls te path explicit-path LtoP17  
#
interface Tunnel8
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 8.8.8.8
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 200
 mpls te path explicit-path LtoP18  
#
bgp 100
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 connect-interface LoopBack1
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 connect-interface LoopBack1
 peer 4.4.4.4 as-number 100
 peer 4.4.4.4 connect-interface LoopBack1
 peer 7.7.7.7 as-number 200
 peer 7.7.7.7 ebgp-max-hop 255
 peer 7.7.7.7 connect-interface LoopBack1
 peer 8.8.8.8 as-number 200
 peer 8.8.8.8 ebgp-max-hop 255
 peer 8.8.8.8 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 2.2.2.2 enable
  peer 3.3.3.3 enable
  peer 4.4.4.4 enable
  peer 7.7.7.7 enable
  peer 8.8.8.8 enable
 #
 ipv6-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn import-route-multipath
 #
 l2vpn-family evpn
  undo policy vpn-target
  bestroute add-path path-number 16
  peer 3.3.3.3 enable
  peer 3.3.3.3 reflect-client
  peer 3.3.3.3 capability-advertise add-path both
  peer 3.3.3.3 advertise add-path path-number 16
  peer 4.4.4.4 enable
  peer 4.4.4.4 reflect-client
  peer 4.4.4.4 capability-advertise add-path both
  peer 4.4.4.4 advertise add-path path-number 16
  peer 7.7.7.7 enable
  peer 7.7.7.7 capability-advertise add-path both
  peer 7.7.7.7 advertise add-path path-number 16
  peer 8.8.8.8 enable
  peer 8.8.8.8 capability-advertise add-path both
  peer 8.8.8.8 advertise add-path path-number 16
#
ospf 100
 opaque-capability enable
 segment-routing mpls
 segment-routing global-block 160000 161000
 area 0.0.0.0
  network 1.1.1.1 0.0.0.0
  network 10.6.2.0 0.0.0.255
  network 10.6.4.0 0.0.0.255
  mpls-te enable
#
route-policy spv6 permit node 10
 if-match tag 1000
 apply ipv6 gateway-ip origin-nexthop
#
ipv6 route-static vpn-instance vpn1 2001:DB8:5::5 128 2001:DB8:1::2 preference 255 tag 1000 inter-protocol-ecmp
ipv6 route-static vpn-instance vpn1 2001:DB8:5::5 128 2001:DB8:2::2 preference 255 tag 1000 inter-protocol-ecmp
ipv6 route-static vpn-instance vpn1 2001:DB8:6::6 128 2001:DB8:3::2 preference 255 tag 1000 inter-protocol-ecmp
ipv6 route-static vpn-instance vpn1 2001:DB8:6::6 128 2001:DB8:4::2 preference 255 tag 1000 inter-protocol-ecmp
#
tunnel-policy srte
 tunnel select-seq sr-te load-balance-number 3
#
evpn source-address 1.1.1.1
#
return

  • L2GW/L3GW2 configuration file

    #
sysname L2GW/L3GW2
#
lacp e-trunk system-id 00e0-fc00-0002
lacp e-trunk priority 1
#
evpn
 vlan-extend private enable
 vlan-extend redirect enable
 local-remote frr enable
 #
 mac-duplication
#
evpn vpn-instance evrf1 bd-mode
 route-distinguisher 1:1
 vpn-target 1:1 export-extcommunity
 vpn-target 1:1 import-extcommunity
#
evpn vpn-instance evrf2 bd-mode
 route-distinguisher 2:2
 vpn-target 2:2 export-extcommunity
 vpn-target 2:2 import-extcommunity
#
evpn vpn-instance evrf3 bd-mode
 route-distinguisher 3:3
 vpn-target 3:3 export-extcommunity
 vpn-target 3:3 import-extcommunity
#
evpn vpn-instance evrf4 bd-mode
 route-distinguisher 4:4
 vpn-target 4:4 export-extcommunity
 vpn-target 4:4 import-extcommunity
#
ip vpn-instance vpn1
 ipv6-family
  route-distinguisher 22:22
  apply-label per-instance
  export route-policy spv6 evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
  tnl-policy srte evpn
  evpn mpls routing-enable
#
mpls lsr-id 2.2.2.2
#
mpls            
 mpls te
#
bridge-domain 10
 evpn binding vpn-instance evrf1
#
bridge-domain 20
 evpn binding vpn-instance evrf2
#
bridge-domain 30
 evpn binding vpn-instance evrf3
#
bridge-domain 40
 evpn binding vpn-instance evrf4
#
explicit-path LtoD23
 next sid label 48004 type adjacency
 next sid label 48002 type adjacency
#
explicit-path LtoD24
 next sid label 48003 type adjacency
#
explicit-path LtoP27
 next sid label 3000 type binding-sid
 next sid label 48121 type adjacency
#
explicit-path LtoP28
 next sid label 4000 type binding-sid
 next sid label 48121 type adjacency
#
explicit-path LtoL
 next sid label 48004 type adjacency
#
e-trunk 1
 priority 5
 peer-address 1.1.1.1 source-address 2.2.2.2
#
segment-routing
#
interface Vbdif10
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:1::1/64
 mac-address 00e0-fc00-0003
 ipv6 nd dad attempts 0
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 anycast-gateway enable
#
interface Vbdif20
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:2::1/64
 mac-address 00e0-fc00-0004
 ipv6 nd dad attempts 0
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 anycast-gateway enable
#
interface Vbdif30
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:3::1/64
 mac-address 00e0-fc00-0001
 ipv6 nd dad attempts 0
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 anycast-gateway enable
#
interface Vbdif40
 ip binding vpn-instance vpn1
 ipv6 enable
 ipv6 address 2001:DB8:4::1/64
 mac-address 00e0-fc00-0005
 ipv6 nd dad attempts 0
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 anycast-gateway enable
#
interface Eth-Trunk10
 mode lacp-static
 e-trunk 1
 e-trunk mode force-master
 esi 0000.1111.1111.1111.1111
#
interface Eth-Trunk10.1 mode l2
 encapsulation dot1q vid 10
 rewrite pop single
 bridge-domain 10
#
interface Eth-Trunk20
 mode lacp-static
 e-trunk 1
 e-trunk mode force-master
 esi 0000.2222.2222.2222.2222
#
interface Eth-Trunk20.1 mode l2
 encapsulation dot1q vid 20
 rewrite pop single
 bridge-domain 20
#
interface Eth-Trunk30
 mode lacp-static
 e-trunk 1
 e-trunk mode force-master
 esi 0000.3333.3333.3333.3333
#
interface Eth-Trunk30.1 mode l2
 encapsulation dot1q vid 30
 rewrite pop single
 bridge-domain 30
#
interface Eth-Trunk40
 mode lacp-static
 e-trunk 1
 e-trunk mode force-master
 esi 0000.4444.4444.4444.4444
#
interface Eth-Trunk40.1 mode l2
 encapsulation dot1q vid 40
 rewrite pop single
 bridge-domain 40
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.4.2 255.255.255.0
 mpls
 mpls te
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.3.2 255.255.255.0
 mpls
 mpls te
#
interface GigabitEthernet0/1/3
 undo shutdown
 eth-trunk 10
#               
interface GigabitEthernet0/1/4
 undo shutdown
 eth-trunk 20
#
interface GigabitEthernet0/1/5
 undo shutdown
 eth-trunk 30
#
interface GigabitEthernet0/1/6
 undo shutdown
 eth-trunk 40
#
interface LoopBack1
 ip address 2.2.2.2 255.255.255.255
 ospf prefix-sid index 20
#
interface Tunnel1
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 3.3.3.3
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 1
 mpls te path explicit-path LtoD23  
 mpls te binding-sid label 3000
#
interface Tunnel2
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 4.4.4.4
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 2
 mpls te path explicit-path LtoD24  
 mpls te binding-sid label 4000
#
interface Tunnel3
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 1.1.1.1
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 3
 mpls te path explicit-path LtoL
#
interface Tunnel7
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 7.7.7.7
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 100
 mpls te path explicit-path LtoP27  
#
interface Tunnel8
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 8.8.8.8
 mpls te signal-protocol segment-routing
 mpls te tunnel-id 200
 mpls te path explicit-path LtoP28  
#
bgp 100
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 connect-interface LoopBack1
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 connect-interface LoopBack1
 peer 4.4.4.4 as-number 100
 peer 4.4.4.4 connect-interface LoopBack1
 peer 7.7.7.7 as-number 200
 peer 7.7.7.7 ebgp-max-hop 255
 peer 7.7.7.7 connect-interface LoopBack1
 peer 8.8.8.8 as-number 200
 peer 8.8.8.8 ebgp-max-hop 255
 peer 8.8.8.8 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
  peer 3.3.3.3 enable
  peer 4.4.4.4 enable
  peer 7.7.7.7 enable
  peer 8.8.8.8 enable
 #
 ipv6-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn import-route-multipath
 #
 l2vpn-family evpn
  undo policy vpn-target
  peer 3.3.3.3 enable
  peer 3.3.3.3 reflect-client
  peer 3.3.3.3 capability-advertise add-path both
  peer 3.3.3.3 advertise add-path path-number 16
  peer 4.4.4.4 enable
  peer 4.4.4.4 reflect-client
  peer 4.4.4.4 capability-advertise add-path both
  peer 4.4.4.4 advertise add-path path-number 16
  peer 7.7.7.7 enable
  peer 7.7.7.7 capability-advertise add-path both
  peer 7.7.7.7 advertise add-path path-number 16
  peer 8.8.8.8 enable
  peer 8.8.8.8 capability-advertise add-path both
  peer 8.8.8.8 advertise add-path path-number 16
#
ospf 100
 opaque-capability enable
 segment-routing mpls
 segment-routing global-block 160000 161000
 area 0.0.0.0
  network 2.2.2.2 0.0.0.0
  network 10.6.3.0 0.0.0.255
  network 10.6.4.0 0.0.0.255
  mpls-te enable
#
route-policy spv6 permit node 10
 if-match tag 1000
 apply ipv6 gateway-ip origin-nexthop
#
ipv6 route-static vpn-instance vpn1 2001:DB8:5::5 128 2001:DB8:1::2 preference 255 tag 1000 inter-protocol-ecmp
ipv6 route-static vpn-instance vpn1 2001:DB8:5::5 128 2001:DB8:2::2 preference 255 tag 1000 inter-protocol-ecmp
ipv6 route-static vpn-instance vpn1 2001:DB8:6::6 128 2001:DB8:3::2 preference 255 tag 1000 inter-protocol-ecmp
ipv6 route-static vpn-instance vpn1 2001:DB8:6::6 128 2001:DB8:4::2 preference 255 tag 1000 inter-protocol-ecmp
#
tunnel-policy srte
 tunnel select-seq sr-te load-balance-number 3
#
evpn source-address 2.2.2.2
#
return

  • VNF1 configuration file

    For details, see the configuration file of the corresponding product.

  • VNF2 configuration file

    For details, see the configuration file of the corresponding product.

Parent Topic: Configuration Examples for EVPN
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >