Example for Configuring EVPN L3VPNv4 over SRv6 BE Network Slicing

This section provides an example for configuring network slicing in an EVPN L3VPNv4 over SRv6 BE scenario.

Networking Requirements

On the network shown in Figure 1, PE1, the P, and PE2 are in the same AS. IS-IS must be configured on these devices to achieve IPv6 network connectivity, and a bidirectional SRv6 BE path must be deployed between PE1 and PE2 to carry EVPN L3VPNv4 services. In addition, to guarantee the SLA of the VPN instance vpn1 between CE1 and CE2, create network slice 20 on the public network to carry vpn1's services; to guarantee the SLA of the VPN instance vpn2 between CE3 and CE4, create network slice 30 on the public network to carry vpn2's services.

Figure 1 Networking diagram for configuring network slicing in an EVPN L3VPNv4 over SRv6 BE scenario

Interface1, interface2, and interface3 in this example represent GE0/1/0, GE0/1/8, and GE0/1/16, respectively.


Precautions

To implement color-based SRv6 BE traffic steering into network slices, you need to configure the color attribute using an import or export route-policy.

Configuration Roadmap

The configuration roadmap is as follows:

  1. Enable IPv6 forwarding and configure an IPv6 address for each interface on PE1, the P, and PE2.

  2. Enable IS-IS, configure an IS-IS level, and specify a network entity title (NET) on PE1, the P, and PE2.

  3. Create network slice instances on PE1, the P, and PE2, specify basic interfaces, and create network slice interfaces.

  4. Configure an IPv4 L3VPN instance on each PE and bind the IPv4 L3VPN instance to an access-side interface.

  5. Establish an EBGP peer relationship between each PE and its connected CE.

  6. Establish a BGP EVPN peer relationship between the PEs.

  7. Configure SRv6 BE on the PEs and enable IS-IS SRv6.

  8. Configure route-policies on PE1 and PE2 to implement VPN route coloring.

  9. Configure the mapping between the SRv6 BE route color and slice ID.

Data Preparation

To complete the configuration, you need the following data:

  • IPv6 address of each interface on PE1, the P, and PE2

  • IS-IS process ID of PE1, the P, and PE2

  • IS-IS level of PE1, the P, and PE2

  • VPN instance names, RDs, and RTs on PE1 and PE2

Procedure

  1. Enable IPv6 forwarding and configure an IPv6 address for each interface.

    # Configure PE1. The configurations of the P and PE2 are similar to the configuration of PE1. For configuration details, see Configuration Files in this section.

    <HUAWEI> system-view
[~HUAWEI] sysname PE1
[*HUAWEI] commit
[~PE1] interface gigabitethernet 0/1/0
[~PE1-GigabitEthernet0/1/0] ipv6 enable
[*PE1-GigabitEthernet0/1/0] ipv6 address 2001:DB8:10::1 64
[*PE1-GigabitEthernet0/1/0] quit
[*PE1] interface LoopBack 1
[*PE1-LoopBack1] ipv6 enable
[*PE1-LoopBack1] ipv6 address 2001:DB8:1::1 128
[*PE1-LoopBack1] quit
[*PE1] commit

  2. Configure IS-IS.

    # Configure PE1.

    [~PE1] isis 1
[*PE1-isis-1] is-level level-1
[*PE1-isis-1] cost-style wide
[*PE1-isis-1] network-entity 10.0000.0000.0001.00
[*PE1-isis-1] ipv6 enable topology ipv6
[*PE1-isis-1] quit
[*PE1] interface gigabitethernet 0/1/0
[*PE1-GigabitEthernet0/1/0] isis ipv6 enable 1
[*PE1-GigabitEthernet0/1/0] quit
[*PE1] interface loopback1
[*PE1-LoopBack1] isis ipv6 enable 1
[*PE1-LoopBack1] quit
[*PE1] commit

    # Configure the P.

    [~P] isis 1 
[*P-isis-1] is-level level-1
[*P-isis-1] cost-style wide
[*P-isis-1] network-entity 10.0000.0000.0002.00
[*P-isis-1] ipv6 enable topology ipv6
[*P-isis-1] quit
[*P] interface gigabitethernet 0/1/0
[*P-GigabitEthernet0/1/0] isis ipv6 enable 1
[*P-GigabitEthernet0/1/0] quit
[*P] interface gigabitethernet 0/1/8
[*P-GigabitEthernet0/1/8] isis ipv6 enable 1
[*P-GigabitEthernet0/1/8] quit
[*P] commit

    # Configure PE2.

    [~PE2] isis 1
[*PE2-isis-1] is-level level-1
[*PE2-isis-1] cost-style wide
[*PE2-isis-1] network-entity 10.0000.0000.0003.00
[*PE2-isis-1] ipv6 enable topology ipv6
[*PE2-isis-1] quit
[*PE2] interface gigabitethernet 0/1/0
[*PE2-GigabitEthernet0/1/0] isis ipv6 enable 1
[*PE2-GigabitEthernet0/1/0] quit
[*PE2] interface loopback1
[*PE2-LoopBack1] isis ipv6 enable 1
[*PE2-LoopBack1] quit
[*PE2] commit

    After the configuration is complete, perform the following operations to check whether IS-IS is successfully configured.

    # Display IS-IS neighbor information. The following example uses the command output on PE1.

    [~PE1] display isis peer
                          Peer information for ISIS(1)
                         
  System Id     Interface         Circuit Id        State HoldTime Type     PRI
--------------------------------------------------------------------------------
0000.0000.0002* GE0/1/0           0000.0000.0002.01  Up   8s       L1       64 

Total Peer(s): 1

  3. Create network slice instances on PE1, the P, and PE2, specify basic interfaces, and create network slice interfaces.

    # Configure PE1.

    [~PE1] network-slice instance 10
[*PE1-network-slice-instance-10] description Basic
[*PE1-network-slice-instance-10] quit
[*PE1] network-slice instance 20
[*PE1-network-slice-instance-20] description vpn1
[*PE1-network-slice-instance-20] quit
[*PE1] network-slice instance 30
[*PE1-network-slice-instance-30] description vpn2
[*PE1-network-slice-instance-30] quit
[*PE1] interface gigabitethernet 0/1/0
[*PE1-GigabitEthernet0/1/0] network-slice 10 data-plane
[*PE1-GigabitEthernet0/1/0] quit
[*PE1] interface gigabitethernet 0/1/0.1
[*PE1-GigabitEthernet0/1/0.1] vlan-type dot1q 11
[*PE1-GigabitEthernet0/1/0.1] ipv6 enable
[*PE1-GigabitEthernet0/1/0.1] ipv6 address auto link-local
[*PE1-GigabitEthernet0/1/0.1] mode channel enable 
[*PE1-GigabitEthernet0/1/0.1] mode channel bandwidth 500 
[*PE1-GigabitEthernet0/1/0.1] basic-slice 10 
[*PE1-GigabitEthernet0/1/0.1] network-slice 20 data-plane 
[*PE1-GigabitEthernet0/1/0.1] quit
[*PE1] interface gigabitethernet 0/1/0.2
[*PE1-GigabitEthernet0/1/0.2] vlan-type dot1q 22
[*PE1-GigabitEthernet0/1/0.2] ipv6 enable
[*PE1-GigabitEthernet0/1/0.2] ipv6 address auto link-local
[*PE1-GigabitEthernet0/1/0.2] mode channel enable 
[*PE1-GigabitEthernet0/1/0.2] mode channel bandwidth 500 
[*PE1-GigabitEthernet0/1/0.2] basic-slice 10 
[*PE1-GigabitEthernet0/1/0.2] network-slice 30 data-plane 
[*PE1-GigabitEthernet0/1/0.2] quit
[*PE1] commit

    # Configure the P.

    [~P] network-slice instance 10
[*P-network-slice-instance-10] description Basic
[*P-network-slice-instance-10] quit
[*P] network-slice instance 20
[*P-network-slice-instance-20] description vpn1
[*P-network-slice-instance-20] quit
[*P] network-slice instance 30
[*P-network-slice-instance-30] description vpn2
[*P-network-slice-instance-30] quit
[*P] interface gigabitethernet 0/1/0
[*P-GigabitEthernet0/1/0] network-slice 10 data-plane
[*P-GigabitEthernet0/1/0] quit
[*P] interface gigabitethernet 0/1/0.1
[*P-GigabitEthernet0/1/0.1] vlan-type dot1q 11
[*P-GigabitEthernet0/1/0.1] ipv6 enable
[*P-GigabitEthernet0/1/0.1] ipv6 address auto link-local
[*P-GigabitEthernet0/1/0.1] mode channel enable 
[*P-GigabitEthernet0/1/0.1] mode channel bandwidth 500 
[*P-GigabitEthernet0/1/0.1] basic-slice 10 
[*P-GigabitEthernet0/1/0.1] network-slice 20 data-plane 
[*P-GigabitEthernet0/1/0.1] quit
[*P] interface gigabitethernet 0/1/0.2
[*P-GigabitEthernet0/1/0.2] vlan-type dot1q 22
[*P-GigabitEthernet0/1/0.2] ipv6 enable
[*P-GigabitEthernet0/1/0.2] ipv6 address auto link-local
[*P-GigabitEthernet0/1/0.2] mode channel enable 
[*P-GigabitEthernet0/1/0.2] mode channel bandwidth 500 
[*P-GigabitEthernet0/1/0.2] basic-slice 10 
[*P-GigabitEthernet0/1/0.2] network-slice 30 data-plane 
[*P-GigabitEthernet0/1/0.2] quit
[*P] interface gigabitethernet 0/1/8
[*P-GigabitEthernet0/1/8] network-slice 10 data-plane
[*P-GigabitEthernet0/1/8] quit
[*P] interface gigabitethernet 0/1/8.1
[*P-GigabitEthernet0/1/8.1] vlan-type dot1q 11
[*P-GigabitEthernet0/1/8.1] ipv6 enable
[*P-GigabitEthernet0/1/8.1] ipv6 address auto link-local
[*P-GigabitEthernet0/1/8.1] mode channel enable 
[*P-GigabitEthernet0/1/8.1] mode channel bandwidth 500 
[*P-GigabitEthernet0/1/8.1] basic-slice 10 
[*P-GigabitEthernet0/1/8.1] network-slice 20 data-plane 
[*P-GigabitEthernet0/1/8.1] quit
[*P] interface gigabitethernet 0/1/8.2
[*P-GigabitEthernet0/1/8.2] vlan-type dot1q 22
[*P-GigabitEthernet0/1/8.2] ipv6 enable
[*P-GigabitEthernet0/1/8.2] ipv6 address auto link-local
[*P-GigabitEthernet0/1/8.1] mode channel enable 
[*P-GigabitEthernet0/1/8.1] mode channel bandwidth 500 
[*P-GigabitEthernet0/1/8.2] basic-slice 10 
[*P-GigabitEthernet0/1/8.2] network-slice 30 data-plane 
[*P-GigabitEthernet0/1/8.2] quit
[*P] commit

    # Configure PE2.

    [~PE2] network-slice instance 10
[*PE2-network-slice-instance-10] description Basic
[*PE2-network-slice-instance-10] quit
[*PE2] network-slice instance 20
[*PE2-network-slice-instance-20] description vpn1
[*PE2-network-slice-instance-20] quit
[*PE2] network-slice instance 30
[*PE2-network-slice-instance-30] description vpn2
[*PE2-network-slice-instance-30] quit
[*PE2] interface gigabitethernet 0/1/0
[*PE2-GigabitEthernet0/1/0] network-slice 10 data-plane
[*PE2-GigabitEthernet0/1/0] quit
[*PE2] interface gigabitethernet 0/1/0.1
[*PE2-GigabitEthernet0/1/0.1] vlan-type dot1q 11
[*PE2-GigabitEthernet0/1/0.1] ipv6 enable
[*PE2-GigabitEthernet0/1/0.1] ipv6 address auto link-local
[*PE2-GigabitEthernet0/1/0.1] mode channel enable 
[*PE2-GigabitEthernet0/1/0.1] mode channel bandwidth 500
[*PE2-GigabitEthernet0/1/0.1] basic-slice 10 
[*PE2-GigabitEthernet0/1/0.1] network-slice 20 data-plane 
[*PE2-GigabitEthernet0/1/0.1] quit
[*PE2] interface gigabitethernet 0/1/0.2
[*PE2-GigabitEthernet0/1/0.2] vlan-type dot1q 22
[*PE2-GigabitEthernet0/1/0.2] ipv6 enable
[*PE2-GigabitEthernet0/1/0.2] ipv6 address auto link-local
[*PE2-GigabitEthernet0/1/0.2] mode channel enable 
[*PE2-GigabitEthernet0/1/0.2] mode channel bandwidth 500
[*PE2-GigabitEthernet0/1/0.2] basic-slice 10 
[*PE2-GigabitEthernet0/1/0.2] network-slice 30 data-plane 
[*PE2-GigabitEthernet0/1/0.2] quit
[*PE2] commit

    After the configuration is complete, perform the following operations to check the bindings between the basic and slice interfaces in slice instances. The following example uses the command output on PE1.

    [~PE1] display network-slice 10 binding-list 
        Slice-ID            Basic-Interface          Slicing-Interface 
        10                  GigabitEthernet0/1/0     GigabitEthernet0/1/0.1
                                                     GigabitEthernet0/1/0.2

  4. Configure an IPv4 L3VPN instance on each PE and bind the IPv4 L3VPN instance to an access-side interface.

    # Configure PE1.

    [~PE1] ip vpn-instance vpn1
[*PE1-vpn-instance-vpn1] ipv4-family
[*PE1-vpn-instance-vpn1-af-ipv4] route-distinguisher 100:1
[*PE1-vpn-instance-vpn1-af-ipv4] vpn-target 1:1 evpn
[*PE1-vpn-instance-vpn1-af-ipv4] quit
[*PE1-vpn-instance-vpn1] quit
[*PE1] interface gigabitethernet0/1/8
[*PE1-GigabitEthernet0/1/8] ip binding vpn-instance vpn1
[*PE1-GigabitEthernet0/1/8] ip address 10.11.1.1 24
[*PE1-GigabitEthernet0/1/8] quit
[*PE1] ip vpn-instance vpn2
[*PE1-vpn-instance-vpn2] ipv4-family
[*PE1-vpn-instance-vpn2-af-ipv4] route-distinguisher 100:2
[*PE1-vpn-instance-vpn2-af-ipv4] vpn-target 2:2 evpn
[*PE1-vpn-instance-vpn2-af-ipv4] quit
[*PE1-vpn-instance-vpn2] quit
[*PE1] interface gigabitethernet0/1/16
[*PE1-GigabitEthernet0/1/16] ip binding vpn-instance vpn2
[*PE1-GigabitEthernet0/1/16] ip address 10.33.1.1 24
[*PE1-GigabitEthernet0/1/16] quit
[*PE1] commit

    # Configure PE2.

    [~PE2] ip vpn-instance vpn1
[*PE2-vpn-instance-vpn1] ipv4-family
[*PE2-vpn-instance-vpn1-af-ipv4] route-distinguisher 200:1
[*PE2-vpn-instance-vpn1-af-ipv4] vpn-target 1:1 evpn
[*PE2-vpn-instance-vpn1-af-ipv4] quit
[*PE2-vpn-instance-vpn1] quit
[*PE2] interface gigabitethernet0/1/8
[*PE2-GigabitEthernet0/1/8] ip binding vpn-instance vpn1
[*PE2-GigabitEthernet0/1/8] ip address 10.22.1.1 24
[*PE2-GigabitEthernet0/1/8] quit
[*PE2] ip vpn-instance vpn2
[*PE2-vpn-instance-vpn2] ipv4-family
[*PE2-vpn-instance-vpn2-af-ipv4] route-distinguisher 200:2
[*PE2-vpn-instance-vpn2-af-ipv4] vpn-target 2:2 evpn
[*PE2-vpn-instance-vpn2-af-ipv4] quit
[*PE2-vpn-instance-vpn2] quit
[*PE2] interface gigabitethernet0/1/16
[*PE2-GigabitEthernet0/1/16] ip binding vpn-instance vpn2
[*PE2-GigabitEthernet0/1/16] ip address 10.44.1.1 24
[*PE2-GigabitEthernet0/1/16] quit
[*PE2] commit

  5. Establish an EBGP peer relationship between each PE and its connected CE.

    # Configure CE1.

    [~CE1] interface loopback 1
[*CE1-LoopBack1] ip address 11.1.1.1 32
[*CE1-LoopBack1] quit
[*CE1] bgp 65410
[*CE1-bgp] router-id 11.1.1.1
[*CE1-bgp] peer 10.11.1.1 as-number 100
[*CE1-bgp] import-route direct
[*CE1-bgp] quit
[*CE1] commit

    # Configure CE3.

    [~CE3] interface loopback 1
[*CE3-LoopBack1] ip address 33.3.3.3 32
[*CE3-LoopBack1] quit
[*CE3] bgp 65430
[*CE3-bgp] router-id 33.3.3.3
[*CE3-bgp] peer 10.33.1.1 as-number 100
[*CE3-bgp] import-route direct
[*CE3-bgp] quit
[*CE3] commit

    # Configure PE1.

    [~PE1] bgp 100
[~PE1-bgp] router-id 1.1.1.1
[*PE1-bgp] ipv4-family vpn-instance vpn1
[*PE1-bgp-vpn1] peer 10.11.1.2 as-number 65410
[*PE1-bgp-vpn1] import-route direct
[*PE1-bgp-vpn1] advertise l2vpn evpn
[*PE1-bgp-vpn1] quit
[*PE1-bgp] ipv4-family vpn-instance vpn2
[*PE1-bgp-vpn2] peer 10.33.1.2 as-number 65430
[*PE1-bgp-vpn2] import-route direct
[*PE1-bgp-vpn2] advertise l2vpn evpn
[*PE1-bgp-vpn2] quit
[*PE1-bgp] quit
[*PE1] commit

    # Configure CE2.

    [~CE2] interface loopback 1
[*CE2-LoopBack1] ip address 22.2.2.2 32
[*CE2-LoopBack1] quit
[*CE2] bgp 65420
[*CE2-bgp] router-id 22.2.2.2
[*CE2-bgp] peer 10.22.1.1 as-number 100
[*CE2-bgp] import-route direct
[*CE2-bgp] quit
[*CE2] commit

    # Configure CE4.

    [~CE4] interface loopback 1
[*CE4-LoopBack1] ip address 44.4.4.4 32
[*CE4-LoopBack1] quit
[*CE4] bgp 65440
[*CE4-bgp] router-id 44.4.4.4
[*CE4-bgp] peer 10.44.1.1 as-number 100
[*CE4-bgp] import-route direct
[*CE4-bgp] quit
[*CE4] commit

    # Configure PE2.

    [~PE2] bgp 100
[~PE2-bgp] router-id 3.3.3.3
[*PE2-bgp] ipv4-family vpn-instance vpn1
[*PE2-bgp-vpn1] peer 10.22.1.2 as-number 65420
[*PE2-bgp-vpn1] import-route direct
[*PE2-bgp-vpn1] advertise l2vpn evpn
[*PE2-bgp-vpn1] quit
[*PE2-bgp] ipv4-family vpn-instance vpn2
[*PE2-bgp-vpn2] peer 10.44.1.2 as-number 65440
[*PE2-bgp-vpn2] import-route direct
[*PE2-bgp-vpn2] advertise l2vpn evpn
[*PE2-bgp-vpn2] quit
[*PE2-bgp] quit
[*PE2] commit

    After the configuration is complete, run the display bgp vpnv4 vpn-instance peer command on each PE to check whether a BGP peer relationship has been established between the PE and its connected CE. If the Established state is displayed in the command output, the BGP peer relationship has been established successfully.

    Use the BGP peer relationship between PE1 and CE1 as an example.

    [~PE1] display bgp vpnv4 vpn-instance vpn1 peer

 BGP local router ID : 1.1.1.1                               
 Local AS number : 100                             

 VPN-Instance vpn1, Router ID 1.1.1.1:                       
 Total number of peers : 1                 Peers in established state : 1                   

  Peer                             V          AS  MsgRcvd  MsgSent  OutQ  Up/Down       State  PrefRcv 
  10.11.1.2                        4       65410       16       19     0 00:10:44 Established        2

  6. Establish a BGP EVPN peer relationship between the PEs.

    # Configure PE1.

    [~PE1] bgp 100
[~PE1-bgp] peer 2001:DB8:3::3 as-number 100
[*PE1-bgp] peer 2001:DB8:3::3 connect-interface loopback 1
[*PE1-bgp] l2vpn-family evpn
[*PE1-bgp-af-evpn] peer 2001:DB8:3::3 enable
[*PE1-bgp-af-evpn] quit
[*PE1-bgp] quit
[*PE1] commit

    # Configure PE2.

    [~PE2] bgp 100
[~PE2-bgp] peer 2001:DB8:1::1 as-number 100
[*PE2-bgp] peer 2001:DB8:1::1 connect-interface loopback 1
[*PE2-bgp] l2vpn-family evpn
[*PE2-bgp-af-evpn] peer 2001:DB8:1::1 enable
[*PE2-bgp-af-evpn] quit
[*PE2-bgp] quit
[*PE2] commit

    After the configuration is complete, run the display bgp evpn peer command on a PE to check whether a BGP EVPN peer relationship has been established between the PEs. If the Established state is displayed in the command output, the BGP EVPN peer relationship has been established successfully.

    The following example uses the command output on PE1.

    [~PE1] display bgp evpn peer

 BGP local router ID : 1.1.1.1
 Local AS number : 100
 Total number of peers : 1                 Peers in established state : 1

  Peer                             V          AS  MsgRcvd  MsgSent  OutQ  Up/Down       State  PrefRcv
  2001:DB8:3::3                    4         100       49       49     0 00:30:41 Established        2

  7. Establish an SRv6 BE path between the PEs.

    An End.DT4 SID can be either dynamically allocated through BGP or manually configured. If a dynamically allocated SID and a manually configured SID both exist, the latter takes effect. If dynamic End.DT4 SID allocation through BGP has been enabled using the segment-routing ipv6 locator locator-name command, you do not need to run the opcode func-opcode end-dt4 vpn-instance vpn-instance-name command to configure a static SID opcode.

    In this example, dynamic allocation through BGP is used.

    # Configure PE1.

    [~PE1] segment-routing ipv6
[*PE1-segment-routing-ipv6] encapsulation source-address 2001:DB8:1::1
[*PE1-segment-routing-ipv6] locator PE1 ipv6-prefix 2001:DB8:100:: 64 static 32
[*PE1-segment-routing-ipv6-locator] quit
[*PE1-segment-routing-ipv6] quit
[*PE1] bgp 100
[*PE1-bgp] l2vpn-family evpn
[*PE1-bgp-af-evpn] peer 2001:DB8:3::3 advertise encap-type srv6
[*PE1-bgp-af-evpn] quit
[*PE1-bgp] ipv4-family vpn-instance vpn1
[*PE1-bgp-vpn1] segment-routing ipv6 best-effort evpn
[*PE1-bgp-vpn1] segment-routing ipv6 locator PE1 evpn
[*PE1-bgp-vpn1] quit
[*PE1-bgp] ipv4-family vpn-instance vpn2
[*PE1-bgp-vpn2] segment-routing ipv6 best-effort evpn
[*PE1-bgp-vpn2] segment-routing ipv6 locator PE1 evpn
[*PE1-bgp-vpn2] quit
[*PE1-bgp] quit
[*PE1] isis 1
[*PE1-isis-1] segment-routing ipv6 locator PE1 auto-sid-disable
[*PE1-isis-1] commit
[~PE1-isis-1] quit

    # Configure PE2.

    [~PE2] segment-routing ipv6
[*PE2-segment-routing-ipv6] encapsulation source-address 2001:DB8:3::3
[*PE2-segment-routing-ipv6] locator PE2 ipv6-prefix 2001:DB8:130:: 64 static 32
[*PE2-segment-routing-ipv6-locator] quit
[*PE2-segment-routing-ipv6] quit
[*PE2] bgp 100
[*PE2-bgp] l2vpn-family evpn
[*PE2-bgp-af-evpn] peer 2001:DB8:1::1 advertise encap-type srv6
[*PE2-bgp-af-evpn] quit
[*PE2-bgp] ipv4-family vpn-instance vpn1
[*PE2-bgp-vpn1] segment-routing ipv6 best-effort evpn
[*PE2-bgp-vpn1] segment-routing ipv6 locator PE2 evpn
[*PE2-bgp-vpn1] quit
[*PE2-bgp] ipv4-family vpn-instance vpn2
[*PE2-bgp-vpn2] segment-routing ipv6 best-effort evpn
[*PE2-bgp-vpn2] segment-routing ipv6 locator PE2 evpn
[*PE2-bgp-vpn2] quit
[*PE2-bgp] quit
[*PE2] isis 1
[*PE2-isis-1] segment-routing ipv6 locator PE2 auto-sid-disable
[*PE2-isis-1] commit
[~PE2-isis-1] quit

  8. Configure route-policies for VPN route coloring.

    # Configure PE1.

    [~PE1] route-policy rp11 permit node 10
[*PE1-route-policy] apply extcommunity color 0:101
[*PE1-route-policy] quit
[*PE1] route-policy rp22 permit node 10
[*PE1-route-policy] apply extcommunity color 0:202
[*PE1-route-policy] quit
[*PE1] ip vpn-instance vpn1
[*PE1-vpn-instance-vpn1] ipv4-family
[*PE1-vpn-instance-vpn1-af-ipv4] import route-policy rp11
[*PE1-vpn-instance-vpn1-af-ipv4] quit
[*PE1-vpn-instance-vpn1] quit
[*PE1] ip vpn-instance vpn2
[*PE1-vpn-instance-vpn2] ipv4-family
[*PE1-vpn-instance-vpn2-af-ipv4] import route-policy rp22
[*PE1-vpn-instance-vpn2-af-ipv4] quit
[*PE1-vpn-instance-vpn2] quit
[*PE1] commit

    # Configure PE2.

    [~PE2] route-policy rp11 permit node 10
[*PE2-route-policy] apply extcommunity color 0:101
[*PE2-route-policy] quit
[*PE2] route-policy rp22 permit node 10
[*PE2-route-policy] apply extcommunity color 0:202
[*PE2-route-policy] quit
[*PE2] ip vpn-instance vpn1
[*PE2-vpn-instance-vpn1] ipv4-family
[*PE2-vpn-instance-vpn1-af-ipv4] import route-policy rp11
[*PE2-vpn-instance-vpn1-af-ipv4] quit
[*PE2-vpn-instance-vpn1] quit
[*PE2] ip vpn-instance vpn2
[*PE2-vpn-instance-vpn2] ipv4-family
[*PE2-vpn-instance-vpn2-af-ipv4] import route-policy rp22
[*PE2-vpn-instance-vpn2-af-ipv4] quit
[*PE2-vpn-instance-vpn2] quit
[*PE2] commit

  9. Configure the mapping between the SRv6 BE route color and slice ID.

    # Configure PE1.

    [~PE1] network-slice color-mapping
[*PE1-network-slice-color-mapping] color 101 network-slice 20
[*PE1-network-slice-color-mapping] color 202 network-slice 30
[*PE1-network-slice-color-mapping] quit
[*PE1-route-policy] commit

    # Configure PE2.

    [~PE2] network-slice color-mapping
[*PE2-network-slice-color-mapping] color 101 network-slice 20
[*PE2-network-slice-color-mapping] color 202 network-slice 30
[*PE2-network-slice-color-mapping] quit
[*PE2-route-policy] commit

  10. Verify the configuration.

    Check that CEs belonging to the same VPN instance can ping each other. For example:

    [~CE1] ping -a 11.1.1.1 22.2.2.2                                                 
  PING 22.2.2.2: 56  data bytes, press CTRL_C to break                          
    Reply from 22.2.2.2: bytes=56 Sequence=1 ttl=253 time=7 ms                       
    Reply from 22.2.2.2: bytes=56 Sequence=2 ttl=253 time=4 ms                     
    Reply from 22.2.2.2: bytes=56 Sequence=3 ttl=253 time=3 ms                       
    Reply from 22.2.2.2: bytes=56 Sequence=4 ttl=253 time=4 ms                    
    Reply from 22.2.2.2: bytes=56 Sequence=5 ttl=253 time=3 ms                    

  --- 22.2.2.2 ping statistics ---                                        
    5 packet(s) transmitted                                                 
    5 packet(s) received                                                  
    0.00% packet loss                                            
    round-trip min/avg/max = 3/4/7 ms
[~CE3] ping -a 33.3.3.3 44.4.4.4                                                 
  PING 44.4.4.4: 56  data bytes, press CTRL_C to break                          
    Reply from 44.4.4.4: bytes=56 Sequence=1 ttl=253 time=9 ms                       
    Reply from 44.4.4.4: bytes=56 Sequence=2 ttl=253 time=5 ms                     
    Reply from 44.4.4.4: bytes=56 Sequence=3 ttl=253 time=4 ms                       
    Reply from 44.4.4.4: bytes=56 Sequence=4 ttl=253 time=5 ms                    
    Reply from 44.4.4.4: bytes=56 Sequence=5 ttl=253 time=4 ms                    

  --- 44.4.4.4 ping statistics ---                                        
    5 packet(s) transmitted                                                 
    5 packet(s) received                                                  
    0.00% packet loss                                            
    round-trip min/avg/max = 4/5/9 ms

Configuration Files

  • PE1 configuration file

    #
sysname PE1
#
ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 100:1
  import route-policy rp11
  vpn-target 1:1 export-extcommunity evpn
  vpn-target 1:1 import-extcommunity evpn
#
ip vpn-instance vpn2
 ipv4-family
  route-distinguisher 100:2
  import route-policy rp22
  vpn-target 2:2 export-extcommunity evpn
  vpn-target 2:2 import-extcommunity evpn      
# 
network-slice instance 10
 description Basic                                         
#                                                    
network-slice instance 20
 description vpn1 
#                                                    
network-slice instance 30
 description vpn2
#               
segment-routing ipv6
 encapsulation source-address 2001:DB8:1::1
 locator PE1 ipv6-prefix 2001:DB8:100:: 64 static 32
#               
isis 1          
 is-level level-1
 cost-style wide
 network-entity 10.0000.0000.0001.00
 #              
 ipv6 enable topology ipv6
 segment-routing ipv6 locator PE1 auto-sid-disable
 #              
#               
interface GigabitEthernet0/1/0
 undo shutdown  
 ipv6 enable    
 ipv6 address 2001:DB8:10::1/64
 isis ipv6 enable 1 
 network-slice 10 data-plane
#               
interface GigabitEthernet0/1/0.1 
 vlan-type dot1q 11
 ipv6 enable    
 ipv6 address auto link-local
 mode channel enable 
 mode channel bandwidth 500
 basic-slice 10 
 network-slice 20 data-plane
#               
interface GigabitEthernet0/1/0.2 
 vlan-type dot1q 22
 ipv6 enable    
 ipv6 address auto link-local
 mode channel enable 
 mode channel bandwidth 500
 basic-slice 10 
 network-slice 30 data-plane
#
network-slice color-mapping
 color 101 network-slice 20
 color 202 network-slice 30
#               
interface GigabitEthernet0/1/8
 undo shutdown  
 ip binding vpn-instance vpn1
 ip address 10.11.1.1 255.255.255.0
#               
interface GigabitEthernet0/1/16
 undo shutdown  
 ip binding vpn-instance vpn2
 ip address 10.33.1.1 255.255.255.0
#               
interface LoopBack1
 ipv6 enable    
 ipv6 address 2001:DB8:1::1/128
 isis ipv6 enable 1
#               
bgp 100         
 router-id 1.1.1.1
 peer 2001:DB8:3::3 as-number 100
 peer 2001:DB8:3::3 connect-interface LoopBack1
 #              
 ipv4-family unicast
  undo synchronization
 #              
 ipv4-family vpn-instance vpn1
  import-route direct
  advertise l2vpn evpn
  segment-routing ipv6 locator PE1 evpn
  segment-routing ipv6 best-effort evpn
  peer 10.11.1.2 as-number 65410
 #              
 ipv4-family vpn-instance vpn2
  import-route direct
  advertise l2vpn evpn
  segment-routing ipv6 locator PE1 evpn
  segment-routing ipv6 best-effort evpn
  peer 10.33.1.2 as-number 65430
 #              
 l2vpn-family evpn
  policy vpn-target
  peer 2001:DB8:3::3 enable
  peer 2001:DB8:3::3 advertise encap-type srv6
#               
route-policy rp11 permit node 10                                                        
 apply extcommunity color 0:101                                                                             
#               
route-policy rp22 permit node 10                                                        
 apply extcommunity color 0:202
#               
return

  • P configuration file

    #
sysname P
# 
network-slice instance 10
 description Basic 
#                                                    
network-slice instance 20
 description vpn1
#                                                    
network-slice instance 30
 description vpn2
#               
isis 1          
 is-level level-1
 cost-style wide
 network-entity 10.0000.0000.0002.00
 #              
 ipv6 enable topology ipv6
 #              
#               
interface GigabitEthernet0/1/0
 undo shutdown  
 ipv6 enable    
 ipv6 address 2001:DB8:10::2/64
 isis ipv6 enable 1
 network-slice 10 data-plane
#               
interface GigabitEthernet0/1/0.1 
 vlan-type dot1q 11
 ipv6 enable    
 ipv6 address auto link-local
 mode channel enable 
 mode channel bandwidth 500
 basic-slice 10 
 network-slice 20 data-plane
#               
interface GigabitEthernet0/1/0.2 
 vlan-type dot1q 22
 ipv6 enable    
 ipv6 address auto link-local
 mode channel enable 
 mode channel bandwidth 500
 basic-slice 10 
 network-slice 30 data-plane
#               
interface GigabitEthernet0/1/8
 undo shutdown  
 ipv6 enable    
 ipv6 address 2001:DB8:20::1/64
 isis ipv6 enable 1
 network-slice 10 data-plane
#               
interface GigabitEthernet0/1/8.1
 vlan-type dot1q 11 
 ipv6 enable    
 ipv6 address auto link-local
 mode channel enable 
 mode channel bandwidth 500
 basic-slice 10 
 network-slice 20 data-plane
#               
interface GigabitEthernet0/1/8.2 
 vlan-type dot1q 22
 ipv6 enable    
 ipv6 address auto link-local
 mode channel enable 
 mode channel bandwidth 500
 basic-slice 10 
 network-slice 30 data-plane
#               
return

  • PE2 configuration file

    #
sysname PE2
#
ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 200:1
  import route-policy rp11
  vpn-target 1:1 export-extcommunity evpn
  vpn-target 1:1 import-extcommunity evpn
#
ip vpn-instance vpn2
 ipv4-family
  route-distinguisher 200:2
  import route-policy rp22
  vpn-target 2:2 export-extcommunity evpn
  vpn-target 2:2 import-extcommunity evpn        
# 
network-slice instance 10
 description Basic 
#                                                    
network-slice instance 20
 description vpn1
#                                                    
network-slice instance 30
 description vpn2
#               
segment-routing ipv6
 encapsulation source-address 2001:DB8:3::3
 locator PE2 ipv6-prefix 2001:DB8:130:: 64 static 32
#               
isis 1          
 is-level level-1
 cost-style wide
 network-entity 10.0000.0000.0003.00
 #              
 ipv6 enable topology ipv6
 segment-routing ipv6 locator PE2 auto-sid-disable
 #              
#               
interface GigabitEthernet0/1/0
 undo shutdown  
 ipv6 enable    
 ipv6 address 2001:DB8:20::2/64
 isis ipv6 enable 1 
 network-slice 10 data-plane
#               
interface GigabitEthernet0/1/0.1 
 vlan-type dot1q 11
 ipv6 enable    
 ipv6 address auto link-local
 mode channel enable 
 mode channel bandwidth 500
 basic-slice 10 
 network-slice 20 data-plane
#               
interface GigabitEthernet0/1/0.2 
 vlan-type dot1q 22
 ipv6 enable    
 ipv6 address auto link-local
 mode channel enable 
 mode channel bandwidth 500
 basic-slice 10 
 network-slice 30 data-plane
#
network-slice color-mapping
 color 101 network-slice 20
 color 202 network-slice 30
#               
interface GigabitEthernet0/1/8
 undo shutdown  
 ip binding vpn-instance vpn1
 ip address 10.22.1.1 255.255.255.0 
#               
interface GigabitEthernet0/1/16
 undo shutdown  
 ip binding vpn-instance vpn2
 ip address 10.44.1.1 255.255.255.0
#               
interface LoopBack1
 ipv6 enable    
 ipv6 address 2001:DB8:3::3/128
 isis ipv6 enable 1
#               
bgp 100         
 router-id 3.3.3.3
 peer 2001:DB8:1::1 as-number 100
 peer 2001:DB8:1::1 connect-interface LoopBack1
 #              
 ipv4-family unicast
  undo synchronization
 #              
 ipv4-family vpn-instance vpn1
  import-route direct
  advertise l2vpn evpn
  segment-routing ipv6 locator PE2 evpn
  segment-routing ipv6 best-effort evpn
  peer 10.22.1.2 as-number 65420
 #              
 ipv4-family vpn-instance vpn2
  import-route direct
  advertise l2vpn evpn
  segment-routing ipv6 locator PE2 evpn
  segment-routing ipv6 best-effort evpn
  peer 10.44.1.2 as-number 65440
 #              
 l2vpn-family evpn
  policy vpn-target
  peer 2001:DB8:1::1 enable
  peer 2001:DB8:1::1 advertise encap-type srv6
#                             
route-policy rp11 permit node 10                                                        
 apply extcommunity color 0:101                                                                             
#               
route-policy rp22 permit node 10                                                        
 apply extcommunity color 0:202
#               
return

  • CE1 configuration file

    #
sysname CE1
#               
interface GigabitEthernet0/1/0
 undo shutdown  
 ip address 10.11.1.2 255.255.255.0
#               
interface LoopBack1
 ip address 11.1.1.1 32
#               
bgp 65410       
 router-id 11.1.1.1
 peer 10.11.1.1 as-number 100
 #              
 ipv4-family unicast
  undo synchronization
  import-route direct
  peer 10.11.1.1 enable
#  
return

  • CE2 configuration file

    #
sysname CE2
#               
interface GigabitEthernet0/1/0
 undo shutdown  
 ip address 10.22.1.2 255.255.255.0
#               
interface LoopBack1
 ip address 22.2.2.2 32
#               
bgp 65420       
 router-id 22.2.2.2
 peer 10.22.1.1 as-number 100
 #              
 ipv4-family unicast
  undo synchronization
  import-route direct
  peer 10.22.1.1 enable
#
return

  • CE3 configuration file

    #
sysname CE3
#               
interface GigabitEthernet0/1/0
 undo shutdown  
 ip address 10.33.1.2 255.255.255.0
#               
interface LoopBack1
 ip address 33.3.3.3 32
#               
bgp 65430       
 router-id 33.3.3.3
 peer 10.33.1.1 as-number 100
 #              
 ipv4-family unicast
  undo synchronization
  import-route direct
  peer 10.33.1.1 enable
#  
return

  • CE4 configuration file

    #
sysname CE4
#               
interface GigabitEthernet0/1/0
 undo shutdown  
 ip address 10.44.1.2 255.255.255.0
#               
interface LoopBack1
 ip address 44.4.4.4 32
#               
bgp 65440       
 router-id 44.4.4.4
 peer 10.44.1.1 as-number 100
 #              
 ipv4-family unicast
  undo synchronization
  import-route direct
  peer 10.44.1.1 enable
#
return
Parent Topic: Configuration Examples for SRv6 BE
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >