Example for Configuring EVPN VPLS over SRv6 TE Policy (Manual Configuration)
This section provides an example for configuring an SRv6 TE Policy to carry EVPN E-LAN services.
Networking Requirements
On the network shown in Figure 1, PE1, the P, and PE2 are in the same AS and run IS-IS to implement IPv6 network connectivity. It is required that a bidirectional SRv6 TE Policy be deployed between PE1 and PE2 to carry EVPN E-LAN services.
Configuration Roadmap
The configuration roadmap is as follows:
Enable IPv6 forwarding and configure an IPv6 address for each interface on PE1, the P, and PE2.
Enable IS-IS, configure an IS-IS level, and specify a network entity title (NET) on PE1, the P, and PE2.
Configure an EVPN instance in BD mode on each PE and bind the EVPN instance to an access-side sub-interface.
Establish a BGP EVPN peer relationship between PEs.
- Configure SRv6 SIDs and enable IS-IS SRv6 on PE1, the P, and PE2. In addition, configure PE1 and PE2 to advertise VPN routes carrying SIDs.
Configure an SRv6 TE Policy on PE1 and PE2.
- Configure a tunnel policy on PE1 and PE2 to import VPN traffic.
Data Preparation
To complete the configuration, you need the following data:
EVPN instance name: evrf1
RD and RT values of the EVPN instance: 100:1 and 1:1
BD ID: 100
Names of locators on PE1: PE1_ARG and PE1; names of locators on PE2: PE2_ARG and PE2; dynamically generated opcodes for End.DT2U and End.DT2M SIDs
Length of the locators PE1_ARG and PE2_ARG: 10 (as specified in the args parameter)
Procedure
- Enable IPv6 forwarding and configure an IPv6 address for each interface.
# Configure PE1. The configurations of the P and PE2 are similar to the configuration of PE1. For configuration details, see Configuration Files in this section.
<HUAWEI> system-view [~HUAWEI] sysname PE1 [*HUAWEI] commit [~PE1] interface gigabitethernet 0/1/0 [~PE1-GigabitEthernet0/1/0] ipv6 enable [*PE1-GigabitEthernet0/1/0] ipv6 address 2001:DB8:10::1 64 [*PE1-GigabitEthernet0/1/0] quit [*PE1] interface LoopBack 1 [*PE1-LoopBack1] ip address 1.1.1.1 32 [*PE1-LoopBack1] ipv6 enable [*PE1-LoopBack1] ipv6 address 2001:DB8:1::1 128 [*PE1-LoopBack1] quit [*PE1] commit
Configure an IPv4 address for the loopback interface because the EVPN source address needs to be an IPv4 address.
- Configure IS-IS.
# Configure PE1.
[~PE1] isis 1 [*PE1-isis-1] is-level level-1 [*PE1-isis-1] cost-style wide [*PE1-isis-1] network-entity 10.0000.0000.0001.00 [*PE1-isis-1] ipv6 enable topology ipv6 [*PE1-isis-1] quit [*PE1] interface gigabitethernet 0/1/0 [*PE1-GigabitEthernet0/1/0] isis ipv6 enable 1 [*PE1-GigabitEthernet0/1/0] quit [*PE1] interface loopback1 [*PE1-LoopBack1] isis ipv6 enable 1 [*PE1-LoopBack1] commit [~PE1-LoopBack1] quit
# Configure the P.
[~P] isis 1 [*P-isis-1] is-level level-1 [*P-isis-1] cost-style wide [*P-isis-1] network-entity 10.0000.0000.0002.00 [*P-isis-1] ipv6 enable topology ipv6 [*P-isis-1] quit [*P] interface gigabitethernet 0/1/0 [*P-GigabitEthernet0/1/0] isis ipv6 enable 1 [*P-GigabitEthernet0/1/0] quit [*P] interface gigabitethernet 0/1/8 [*P-GigabitEthernet0/1/8] isis ipv6 enable 1 [*P-GigabitEthernet0/1/8] quit [*P] interface loopback1 [*P-LoopBack1] isis ipv6 enable 1 [*P-LoopBack1] commit [~P-LoopBack1] quit
# Configure PE2.
[~PE2] isis 1 [*PE2-isis-1] is-level level-1 [*PE2-isis-1] cost-style wide [*PE2-isis-1] network-entity 10.0000.0000.0003.00 [*PE2-isis-1] ipv6 enable topology ipv6 [*PE2-isis-1] quit [*PE2] interface gigabitethernet 0/1/0 [*PE2-GigabitEthernet0/1/0] isis ipv6 enable 1 [*PE2-GigabitEthernet0/1/0] quit [*PE2] interface loopback1 [*PE2-LoopBack1] isis ipv6 enable 1 [*PE2-LoopBack1] commit [~PE2-LoopBack1] quit
After the configuration is complete, perform the following operations to check whether IS-IS is successfully configured:
# Display IS-IS neighbor information. The following example uses the command output on PE1.
[~PE1] display isis peer Peer information for ISIS(1) System Id Interface Circuit Id State HoldTime Type PRI -------------------------------------------------------------------------------- 0000.0000.0002* GE0/1/0 0000.0000.0002.01 Up 8s L1 64 Total Peer(s): 1
# Display IS-IS routing table information. The following example uses the command output on PE1.
[~PE1] display isis route Route information for ISIS(1) ----------------------------- ISIS(1) Level-1 Forwarding Table -------------------------------- IPV6 Dest. ExitInterface NextHop Cost Flags -------------------------------------------------------------------------------- 2001:DB8:1::1/128 GE0/1/0 Direct 10 D/-/L/- 2001:DB8:2::2/128 GE0/1/0 FE80::3A5D:67FF:FE31:307 10 A/-/-/- 2001:DB8:3::3/128 GE0/1/0 FE80::3A5D:67FF:FE31:307 20 A/-/-/- 2001:DB8:10::/64 GE0/1/0 Direct 20 D/-/L/- 2001:DB8:20::/64 GE0/1/0 FE80::3A5D:67FF:FE31:307 20 A/-/-/- Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set, LP-Local Prefix-Sid Protect Type: L-Link Protect, N-Node Protect
- Configure an EVPN instance in BD mode on each PE and bind the EVPN instance to an access-side sub-interface.
# Configure PE1.
[~PE1] evpn source-address 1.1.1.1 [*PE1] evpn vpn-instance evrf1 bd-mode [*PE1-evpn-instance-evrf1] route-distinguisher 100:1 [*PE1-evpn-instance-evrf1] vpn-target 1:1 [*PE1-evpn-instance-evrf1] quit [*PE1] bridge-domain 100 [*PE1-bd100] evpn binding vpn-instance evrf1 [*PE1-bd100] quit [*PE1] interface gigabitethernet 0/1/8.1 mode l2 [*PE1-GigabitEthernet0/1/8.1] encapsulation dot1q vid 1 [*PE1-GigabitEthernet0/1/8.1] rewrite pop single [*PE1-GigabitEthernet0/1/8.1] bridge-domain 100 [*PE1-GigabitEthernet0/1/8.1] quit [*PE1] commit
# Configure PE2.
[~PE2] evpn source-address 3.3.3.3 [*PE2] evpn vpn-instance evrf1 bd-mode [*PE2-evpn-instance-evrf1] route-distinguisher 200:1 [*PE2-evpn-instance-evrf1] vpn-target 1:1 [*PE2-evpn-instance-evrf1] quit [*PE2] bridge-domain 100 [*PE2-bd100] evpn binding vpn-instance evrf1 [*PE2-bd100] quit [*PE2] interface gigabitethernet 0/1/8.1 mode l2 [*PE2-GigabitEthernet0/1/8.1] encapsulation dot1q vid 1 [*PE2-GigabitEthernet0/1/8.1] rewrite pop single [*PE2-GigabitEthernet0/1/8.1] bridge-domain 100 [*PE2-GigabitEthernet0/1/8.1] quit [*PE2] commit
- Establish a BGP EVPN peer relationship between PEs.
# Configure PE1.
[~PE1] bgp 100 [*PE1-bgp] router-id 1.1.1.1 [*PE1-bgp] peer 2001:DB8:3::3 as-number 100 [*PE1-bgp] peer 2001:DB8:3::3 connect-interface loopback 1 [*PE1-bgp] l2vpn-family evpn [*PE1-bgp-af-evpn] peer 2001:DB8:3::3 enable [*PE1-bgp-af-evpn] peer 2001:DB8:3::3 advertise encap-type srv6 [*PE1-bgp-af-evpn] quit [*PE1-bgp] quit [*PE1] commit
# Configure PE2.
[~PE2] bgp 100 [*PE2-bgp] router-id 3.3.3.3 [*PE2-bgp] peer 2001:DB8:1::1 as-number 100 [*PE2-bgp] peer 2001:DB8:1::1 connect-interface loopback 1 [*PE2-bgp] l2vpn-family evpn [*PE2-bgp-af-evpn] peer 2001:DB8:1::1 enable [*PE2-bgp-af-evpn] peer 2001:DB8:1::1 advertise encap-type srv6 [*PE2-bgp-af-evpn] quit [*PE2-bgp] quit [*PE2] commit
After the configuration is complete, run the display bgp evpn peer command on the PEs to check whether BGP EVPN peer relationships have been established between the PEs. If the Established state is displayed in the command output, the BGP EVPN peer relationships have been established successfully. The following example uses the command output on PE1.
[~PE1] display bgp evpn peer BGP local router ID : 1.1.1.1 Local AS number : 100 Total number of peers : 1 Peers in established state : 1 Peer V AS MsgRcvd MsgSent OutQ Up/Down State PrefRcv 2001:DB8:3::3 4 100 31 34 0 00:18:39 Established 1
- Configure SRv6 SIDs, and configure the PEs to carry SIDs in VPN routes.
# Configure PE1.
[~PE1] segment-routing ipv6 [*PE1-segment-routing-ipv6] encapsulation source-address 2001:DB8:1::1 [*PE1-segment-routing-ipv6] locator PE1 ipv6-prefix 2001:DB8:11:: 64 static 32 [*PE1-segment-routing-ipv6-locator] opcode ::10 end psp [*PE1-segment-routing-ipv6-locator] quit [*PE1-segment-routing-ipv6] locator PE1_ARG ipv6-prefix 2001:DB8:12:: 64 static 32 args 10 [*PE1-segment-routing-ipv6-locator] quit [*PE1-segment-routing-ipv6] quit [*PE1] isis 1 [*PE1-isis-1] segment-routing ipv6 locator PE1 auto-sid-disable [*PE1-isis-1] segment-routing ipv6 locator PE1_ARG auto-sid-disable [*PE1-isis-1] quit [*PE1] evpn vpn-instance evrf1 bd-mode [*PE1-evpn-instance-evrf1] segment-routing ipv6 locator PE1_ARG unicast-locator PE1 [*PE1-evpn-instance-evrf1] segment-routing ipv6 traffic-engineer best-effort [*PE1-evpn-instance-evrf1] quit [*PE1] commit
# Configure the P.
[~P] segment-routing ipv6 [*P-segment-routing-ipv6] encapsulation source-address 2001:DB8:2::2 [*P-segment-routing-ipv6] locator P ipv6-prefix 2001:DB8:120:: 64 static 32 [*P-segment-routing-ipv6-locator] opcode ::10 end psp [*P-segment-routing-ipv6-locator] quit [*P-segment-routing-ipv6] quit [*P] isis 1 [*P-isis-1] segment-routing ipv6 locator P auto-sid-disable [*P-isis-1] commit [~P-isis-1] quit
# Configure PE2.
[~PE2] segment-routing ipv6 [*PE2-segment-routing-ipv6] encapsulation source-address 2001:DB8:3::3 [*PE2-segment-routing-ipv6] locator PE2 ipv6-prefix 2001:DB8:21:: 64 static 32 [*PE2-segment-routing-ipv6-locator] opcode ::10 end psp [*PE2-segment-routing-ipv6-locator] quit [*PE2-segment-routing-ipv6] locator PE2_ARG ipv6-prefix 2001:DB8:22:: 64 static 32 args 10 [*PE2-segment-routing-ipv6-locator] quit [*PE2-segment-routing-ipv6] quit [*PE2] isis 1 [*PE2-isis-1] segment-routing ipv6 locator PE2 auto-sid-disable [*PE2-isis-1] segment-routing ipv6 locator PE2_ARG auto-sid-disable [*PE2-isis-1] quit [*PE2] evpn vpn-instance evrf1 bd-mode [*PE2-evpn-instance-evrf1] segment-routing ipv6 locator PE2_ARG unicast-locator PE2 [*PE2-evpn-instance-evrf1] segment-routing ipv6 traffic-engineer best-effort [*PE2-evpn-instance-evrf1] quit [*PE2] commit
Run the display segment-routing ipv6 local-sid end forwarding command to check information about the SRv6 local SID table.
[~PE1] display segment-routing ipv6 local-sid end forwarding My Local-SID End Forwarding Table --------------------------------- SID : 2001:DB8:11::10/128 FuncType : End Flavor : PSP LocatorName : PE1 LocatorID: 5 ProtocolType: STATIC ProcessID: -- UpdateTime : 2021-08-30 01:46:05.713 Total SID(s): 1 [~PE2] display segment-routing ipv6 local-sid end forwarding My Local-SID End Forwarding Table --------------------------------- SID : 2001:DB8:21::10/128 FuncType : End Flavor : PSP LocatorName : PE2 LocatorID: 1 ProtocolType: STATIC ProcessID: -- UpdateTime : 2021-08-30 01:47:26.426 Total SID(s): 1 [~P] display segment-routing ipv6 local-sid end forwarding My Local-SID End Forwarding Table --------------------------------- SID : 2001:DB8:120::10/128 FuncType : End Flavor : PSP LocatorName : P LocatorID: 1 ProtocolType: STATIC ProcessID: -- UpdateTime : 2021-08-30 01:49:44.292 Total SID(s): 1
- Configure an SRv6 TE Policy.
# Configure PE1.
[~PE1] segment-routing ipv6 [~PE1-segment-routing-ipv6] segment-list list1 [*PE1-segment-routing-ipv6-segment-list-list1] index 5 sid ipv6 2001:DB8:120::10 [*PE1-segment-routing-ipv6-segment-list-list1] index 10 sid ipv6 2001:DB8:21::10 [*PE1-segment-routing-ipv6-segment-list-list1] commit [~PE1-segment-routing-ipv6-segment-list-list1] quit [~PE1-segment-routing-ipv6] srv6-te-policy locator PE1 [*PE1-segment-routing-ipv6] srv6-te policy policy1 endpoint 2001:DB8:3::3 color 101 [*PE1-segment-routing-ipv6-policy-policy1] binding-sid 2001:DB8:11::450 [*PE1-segment-routing-ipv6-policy-policy1] candidate-path preference 100 [*PE1-segment-routing-ipv6-policy-policy1-path] segment-list list1 [*PE1-segment-routing-ipv6-policy-policy1-path] commit [~PE1-segment-routing-ipv6-policy-policy1-path] quit [~PE1-segment-routing-ipv6-policy-policy1] quit [~PE1-segment-routing-ipv6] quit
# Configure PE2.
[~PE2] segment-routing ipv6 [~PE2-segment-routing-ipv6] segment-list list1 [*PE2-segment-routing-ipv6-segment-list-list1] index 5 sid ipv6 2001:DB8:120::10 [*PE2-segment-routing-ipv6-segment-list-list1] index 10 sid ipv6 2001:DB8:11::10 [*PE2-segment-routing-ipv6-segment-list-list1] commit [~PE2-segment-routing-ipv6-segment-list-list1] quit [~PE2-segment-routing-ipv6] srv6-te-policy locator PE2 [*PE2-segment-routing-ipv6] srv6-te policy policy1 endpoint 2001:DB8:1::1 color 101 [*PE2-segment-routing-ipv6-policy-policy1] binding-sid 2001:DB8:21::350 [*PE2-segment-routing-ipv6-policy-policy1] candidate-path preference 100 [*PE2-segment-routing-ipv6-policy-policy1-path] segment-list list1 [*PE2-segment-routing-ipv6-policy-policy1-path] commit [~PE2-segment-routing-ipv6-policy-policy1-path] quit [~PE2-segment-routing-ipv6-policy-policy1] quit [~PE2-segment-routing-ipv6] quit
After the configuration is complete, run the display srv6-te policy command to check SRv6 TE Policy information.
The following example uses the command output on PE1.
[~PE1] display srv6-te policy PolicyName : policy1 Color : 101 Endpoint : 2001:DB8:3::3 TunnelId : 8193 Binding SID : 2001:DB8:11::450 TunnelType : SRv6-TE Policy DelayTimerRemain : - Policy State : Up State Change Time : 2019-12-30 11:50:30 Admin State : Up Traffic Statistics : Disable Backup Hot-Standby : Disable BFD : Disable Interface Index : - Interface Name : - Interface State : - Encapsulation Mode : Insert Candidate-path Count : 1 Candidate-path Preference : 100 Path State : Active Path Type : Primary Protocol-Origin : Configuration(30) Originator : 0, 0.0.0.0 Discriminator : 100 Binding SID : 2001:DB8:11::450 GroupId : 8193 Policy Name : policy1 Template ID : 0 DelayTimerRemain : - Segment-List Count : 1 Segment-List : list1 Path Verification : Disable Segment-List ID : 8194 XcIndex : 8194 List State : Up DelayTimerRemain : - Verification State : - SuppressTimeRemain : - PMTU : 9600 Active PMTU : 9600 Weight : 1 BFD State : - SID : 2001:DB8:120::10 2001:DB8:21::10 - Configure a tunnel policy to import VPN traffic.
# Configure PE1.
[~PE1] route-policy p1 permit node 10 [*PE1-route-policy] apply extcommunity color 0:101 [*PE1-route-policy] quit [*PE1] bgp 100 [*PE1-bgp] l2vpn-family evpn [*PE1-bgp-af-evpn] peer 2001:DB8:3::3 route-policy p1 import [*PE1-bgp-af-evpn] quit [*PE1-bgp] quit [*PE1] tunnel-policy p1 [*PE1-tunnel-policy-p1] tunnel select-seq ipv6 srv6-te-policy load-balance-number 1 [*PE1-tunnel-policy-p1] quit [*PE1] evpn vpn-instance evrf1 bd-mode [*PE1-evpn-instance-evrf] tnl-policy p1 [*PE1-evpn-instance-evrf] commit [~PE1-evpn-instance-evrf] quit
# Configure PE2.
[~PE2] route-policy p1 permit node 10 [*PE2-route-policy] apply extcommunity color 0:101 [*PE2-route-policy] quit [*PE2] bgp 100 [*PE2-bgp] l2vpn-family evpn [*PE2-bgp-af-evpn] peer 2001:DB8:1::1 route-policy p1 import [*PE2-bgp-af-evpn] quit [*PE2-bgp] quit [*PE2] tunnel-policy p1 [*PE2-tunnel-policy-p1] tunnel select-seq ipv6 srv6-te-policy load-balance-number 1 [*PE2-tunnel-policy-p1] quit [*PE2] evpn vpn-instance evrf1 bd-mode [*PE2-evpn-instance-evrf] tnl-policy p1 [*PE2-evpn-instance-evrf] commit [~PE2-evpn-instance-evrf] quit
- Configure CEs to access PEs.
# Configure CE1.
[~CE1] interface gigabitethernet0/1/0 [~CE1-GigabitEthernet0/1/0] undo shutdown [*CE1-GigabitEthernet0/1/0] quit [*CE1] interface gigabitethernet0/1/0.1 [*CE1-GigabitEthernet0/1/0.1] vlan-type dot1q 1 [*CE1-GigabitEthernet0/1/0.1] ip address 10.1.1.1 255.255.255.0 [*CE1-GigabitEthernet0/1/0.1] quit [*CE1] commit
# Configure CE2.
[~CE2] interface gigabitethernet0/1/0 [~CE2-GigabitEthernet0/1/0] undo shutdown [*CE2-GigabitEthernet0/1/0] quit [*CE2] interface gigabitethernet0/1/0.1 [*CE2-GigabitEthernet0/1/0.1] vlan-type dot1q 1 [*CE2-GigabitEthernet0/1/0.1] ip address 10.1.1.2 255.255.255.0 [*CE2-GigabitEthernet0/1/0.1] quit [*CE2] commit
- Verify the configuration.
Run the display segment-routing ipv6 local-sid { end-dt2u | end-dt2ul | end-dt2m } forwarding command on each PE to check information about the SRv6 local SID table. The following example uses the command output on PE1.
[~PE1] display segment-routing ipv6 local-sid end-dt2m forwarding My Local-SID End.DT2M Forwarding Table -------------------------------------- SID : 2001:DB8:12::400:0:0/118 FuncType : End.DT2M Bridge-domain ID: 100 LocatorName : PE1_ARG LocatorID: 6 Total SID(s): 1 [~PE1] display segment-routing ipv6 local-sid end-dt2u forwarding My Local-SID End.DT2U Forwarding Table -------------------------------------- SID : 2001:DB8:11::1:0:5C/128 FuncType : End.DT2U Bridge-domain ID: 100 LocatorName : PE1 LocatorID: 5 Total SID(s): 1
Run the display bgp evpn all routing-table command on each PE. The command output shows the EVPN routes sent from the peer end. The following example uses the command output on PE1.
[~PE1] display bgp evpn all routing-table Local AS number : 100 BGP Local router ID is 1.1.1.1 Status codes: * - valid, > - best, d - damped, x - best external, a - add path, h - history, i - internal, s - suppressed, S - Stale Origin : i - IGP, e - EGP, ? - incomplete EVPN address family: Number of Mac Routes: 2 Route Distinguisher: 100:1 Network(EthTagId/MacAddrLen/MacAddr/IpAddrLen/IpAddr) NextHop *>i 0:48:38c2-6721-0300:0:0.0.0.0 2001:DB8:3::3 *> 0:48:38c2-6761-0300:0:0.0.0.0 0.0.0.0 EVPN-Instance evrf1: Number of Mac Routes: 3 Network(EthTagId/MacAddrLen/MacAddr/IpAddrLen/IpAddr) NextHop *> 0:48:38c2-6721-0300:0:0.0.0.0 0.0.0.0 * i 2001:DB8:3::3 *> 0:48:38c2-6761-0300:0:0.0.0.0 0.0.0.0 EVPN address family: Number of Inclusive Multicast Routes: 2 Route Distinguisher: 100:1 Network(EthTagId/IpAddrLen/OriginalIp) NextHop *> 0:32:1.1.1.1 127.0.0.1 *>i 0:32:3.3.3.3 2001:DB8:3::3 EVPN-Instance evrf1: Number of Inclusive Multicast Routes: 2 Network(EthTagId/IpAddrLen/OriginalIp) NextHop *> 0:32:1.1.1.1 127.0.0.1 *>i 0:32:3.3.3.3 2001:DB8:3::3[~PE1] display bgp evpn all routing-table inclusive-route 0:32:3.3.3.3 BGP local router ID : 1.1.1.1 Local AS number : 100 Total routes of Route Distinguisher(200:1): 1 BGP routing table entry information of 0:32:3.3.3.3: Label information (Received/Applied): 3/NULL From: 2001:DB8:3::3 (3.3.3.3) Route Duration: 0d00h06m19s Relay IP Nexthop: FE80::3AC2:67FF:FE51:302 Relay IP Out-Interface:GigabitEthernet0/1/0 Relay Tunnel Out-Interface: Original nexthop: 2001:DB8:3::3 Qos information : 0x0 Ext-Community: RT <1 : 1>, Color <0 : 101> Prefix-sid: 2001:DB8:22::400:0:7800 AS-path Nil, origin incomplete, localpref 100, pref-val 0, valid, internal, best, select, pre 255, IGP cost 10 PMSI: Flags 0, Ingress Replication, Label 0:0:0(3), Tunnel Identifier:3.3.3.3 Route Type: 3 (Inclusive Multicast Route) Ethernet Tag ID: 0, Originator IP:3.3.3.3/32 Not advertised to any peer yet EVPN-Instance evrf1: Number of Inclusive Multicast Routes: 1 BGP routing table entry information of 0:32:3.3.3.3: Route Distinguisher: 200:1 Remote-Cross route Label information (Received/Applied): 3/NULL From: 2001:DB8:3::3 (3.3.3.3) Route Duration: 0d00h06m19s Relay IP Nexthop: FE80::3AC2:67FF:FE51:302 Relay IP Out-Interface:GigabitEthernet0/1/0 Relay Tunnel Out-Interface: policy1(srv6tepolicy) Original nexthop: 2001:DB8:3::3 Qos information : 0x0 Ext-Community: RT <1 : 1>, Color <0 : 101> Prefix-sid: 2001:DB8:22::400:0:7800 AS-path Nil, origin incomplete, localpref 100, pref-val 0, valid, internal, best, select, pre 255 PMSI: Flags 0, Ingress Replication, Label 0:0:0(3), Tunnel Identifier:3.3.3.3 Route Type: 3 (Inclusive Multicast Route) Ethernet Tag ID: 0, Originator IP:3.3.3.3/32 Not advertised to any peer yet
Run the ping command on the CEs. The command output shows that the CEs belonging to the same VPN instance can ping each other. For example:
[~CE1] ping 10.1.1.2 PING 10.1.1.2: 56 data bytes, press CTRL_C to break Reply from 10.1.1.2: bytes=56 Sequence=1 ttl=255 time=3 ms Reply from 10.1.1.2: bytes=56 Sequence=2 ttl=255 time=4 ms Reply from 10.1.1.2: bytes=56 Sequence=3 ttl=255 time=5 ms Reply from 10.1.1.2: bytes=56 Sequence=4 ttl=255 time=4 ms Reply from 10.1.1.2: bytes=56 Sequence=5 ttl=255 time=8 ms --- 10.1.1.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 3/4/8 ms
Configuration Files
CE1 configuration file
# sysname CE1 # interface GigabitEthernet0/1/0 undo shutdown # interface GigabitEthernet0/1/0.1 undo shutdown vlan-type dot1q 1 ip address 10.1.1.1 255.255.255.0 # return
PE1 configuration file
# sysname PE1 # evpn vpn-instance evrf1 bd-mode route-distinguisher 100:1 segment-routing ipv6 traffic-engineer best-effort segment-routing ipv6 locator PE1_ARG unicast-locator PE1 tnl-policy p1 vpn-target 1:1 export-extcommunity vpn-target 1:1 import-extcommunity # bridge-domain 100 evpn binding vpn-instance evrf1 # segment-routing ipv6 encapsulation source-address 2001:db8:1::1 locator PE1 ipv6-prefix 2001:DB8:11:: 64 static 32 opcode ::10 end psp locator PE1_ARG ipv6-prefix 2001:DB8:12:: 64 static 32 args 10 srv6-te-policy locator PE1 segment-list list1 index 5 sid ipv6 2001:DB8:120::10 index 10 sid ipv6 2001:DB8:21::10 srv6-te policy policy1 endpoint 2001:DB8:3::3 color 101 binding-sid 2001:DB8:11::450 candidate-path preference 100 segment-list list1 # isis 1 is-level level-1 cost-style wide network-entity 10.0000.0000.0001.00 # ipv6 enable topology ipv6 segment-routing ipv6 locator PE1 auto-sid-disable segment-routing ipv6 locator PE1_ARG auto-sid-disable # # interface GigabitEthernet0/1/0 undo shutdown ipv6 enable ipv6 address 2001:DB8:10::1/64 isis ipv6 enable 1 # interface GigabitEthernet0/1/8 undo shutdown # interface GigabitEthernet0/1/8.1 mode l2 encapsulation dot1q vid 1 rewrite pop single bridge-domain 100 # interface LoopBack1 ipv6 enable ip address 1.1.1.1 255.255.255.255 ipv6 address 2001:DB8:1::1/128 isis ipv6 enable 1 # bgp 100 router-id 1.1.1.1 peer 2001:DB8:3::3 as-number 100 peer 2001:DB8:3::3 connect-interface LoopBack1 # ipv4-family unicast undo synchronization # l2vpn-family evpn policy vpn-target peer 2001:DB8:3::3 enable peer 2001:DB8:3::3 route-policy p1 import peer 2001:DB8:3::3 advertise encap-type srv6 # route-policy p1 permit node 10 apply extcommunity color 0:101 # tunnel-policy p1 tunnel select-seq ipv6 srv6-te-policy load-balance-number 1 # evpn source-address 1.1.1.1 # return
- P configuration file
# sysname P # segment-routing ipv6 encapsulation source-address 2001:DB8:2::2 locator P ipv6-prefix 2001:DB8:120:: 64 static 32 opcode ::10 end psp # isis 1 is-level level-1 cost-style wide network-entity 10.0000.0000.0002.00 # ipv6 enable topology ipv6 segment-routing ipv6 locator P auto-sid-disable # # interface GigabitEthernet0/1/0 undo shutdown ipv6 enable ipv6 address 2001:DB8:10::2/64 isis ipv6 enable 1 # interface GigabitEthernet0/1/8 undo shutdown ipv6 enable ipv6 address 2001:DB8:20::1/64 isis ipv6 enable 1 # interface LoopBack1 ipv6 enable ip address 2.2.2.2 255.255.255.255 ipv6 address 2001:DB8:2::2/128 isis ipv6 enable 1 # return
PE2 configuration file
# sysname PE2 # evpn vpn-instance evrf1 bd-mode route-distinguisher 200:1 segment-routing ipv6 traffic-engineer best-effort segment-routing ipv6 locator PE2_ARG unicast-locator PE2 tnl-policy p1 vpn-target 1:1 export-extcommunity vpn-target 1:1 import-extcommunity # bridge-domain 100 evpn binding vpn-instance evrf1 # segment-routing ipv6 encapsulation source-address 2001:db8:3::3 locator PE2 ipv6-prefix 2001:DB8:21:: 64 static 32 opcode ::10 end psp locator PE2_ARG ipv6-prefix 2001:DB8:22:: 64 static 32 args 10 srv6-te-policy locator PE2 segment-list list1 index 5 sid ipv6 2001:DB8:120::10 index 10 sid ipv6 2001:DB8:11::10 srv6-te policy policy1 endpoint 2001:DB8:1::1 color 101 binding-sid 2001:DB8:21::350 candidate-path preference 100 segment-list list1 # isis 1 is-level level-1 cost-style wide network-entity 10.0000.0000.0003.00 # ipv6 enable topology ipv6 segment-routing ipv6 locator PE2 auto-sid-disable segment-routing ipv6 locator PE2_ARG auto-sid-disable # # interface GigabitEthernet0/1/0 undo shutdown ipv6 enable ipv6 address 2001:DB8:20::2/64 isis ipv6 enable 1 # interface GigabitEthernet0/1/8 undo shutdown # interface GigabitEthernet0/1/8.1 mode l2 encapsulation dot1q vid 1 rewrite pop single bridge-domain 100 # interface LoopBack1 ipv6 enable ip address 3.3.3.3 255.255.255.255 ipv6 address 2001:DB8:3::3/128 isis ipv6 enable 1 # bgp 100 router-id 3.3.3.3 peer 2001:DB8:1::1 as-number 100 peer 2001:DB8:1::1 connect-interface LoopBack1 # ipv4-family unicast undo synchronization # l2vpn-family evpn policy vpn-target peer 2001:DB8:1::1 enable peer 2001:DB8:1::1 route-policy p1 import peer 2001:DB8:1::1 advertise encap-type srv6 # route-policy p1 permit node 10 apply extcommunity color 0:101 # tunnel-policy p1 tunnel select-seq ipv6 srv6-te-policy load-balance-number 1 # evpn source-address 3.3.3.3 # return
CE2 configuration file
# sysname CE2 # interface GigabitEthernet0/1/0 undo shutdown # interface GigabitEthernet0/1/0.1 undo shutdown vlan-type dot1q 1 ip address 10.1.1.2 255.255.255.0 # return