...
https://www.inetzero.com/qfxmxevpn/
1- interface ( ethernet- )
2- routing option: RID, AS#,
3- BGP protocol + group + policies
4- EVPN protocols and policies
5- Switching options and policies
7- VlanÂ
8- Access interfaces
| Code Block |
|---|
| title | vqfx1 IP, OSPF. BGP, MPLS and LDP |
|---|
| set system host-name vqfx1
delete interfaces xe-0/0/0.0 family inet dhcp
set interfaces xe-0/0/0 unit 0 family inet address 10.11.12.11/24
set interfaces xe-0/0/0 unit 0 family mpls
set protocols lldp interface all
set interfaces lo0.0 family inet address 11.11.11.11/32
#OSPF IGP Configuration
set protocols ospf area 0 interface xe-0/0/0
set protocols ospf area 0 interface lo0
set routing-options autonomous-system 65100
set routing-options router-id 11.11.11.11
set routing-options autonomous-system 65100
set routing-options forwarding-table export pfe-ecmp
set forwarding-options storm-control-profiles default all
set protocols bgp group iBGP local-address 11.11.11.11
set protocols bgp group iBGP type internal
set protocols bgp group iBGP neighbor 12.12.12.12
set protocols bgp group iBGP family evpn signaling
set protocols ldp interface xe-0/0/0.0
commit and-quit
|
|
| Code Block |
|---|
| set system host-name vqfx2
delete interfaces xe-0/0/0.0 family inet dhcp
set interfaces xe-0/0/0.0 family inet address 10.11.12.12/24
set interfaces lo0.0 family inet address 12.12.12.12/32
set protocols ospf area 0 interface xe-0/0/0
set protocols ospf area 0 interface lo0
set routing-options autonomous-system 65100
set protocols bgp group iBGP local-address 12.12.12.12
set protocols bgp group iBGP type internal
set protocols bgp group iBGP neighbor 11.11.11.11
set protocols bgp group iBGP family evpn signaling
commit and-quit
|
|
|---|
...
| Code Block |
|---|
| vagrant@vqfx1> show configuration | display set | except Juniper-qfx
set interfaces xe-0/0/1 unit 0 family ethernet-switching
# BGP and policy
set protocols bgp group iBGP type internal
set protocols bgp group iBGP local-address 11.11.11.11
set protocols bgp group iBGP import OVERLAY-IN
set protocols bgp group iBGP family evpn signaling
set protocols bgp group iBGP bfd-liveness-detection minimum-interval 350
set protocols bgp group iBGP bfd-liveness-detection multiplier 3
set protocols bgp group iBGP bfd-liveness-detection session-mode automatic
set protocols bgp group iBGP multipath
set protocols bgp group iBGP neighbor 12.12.12.12
set protocols evpn vnipolicy-options vni 9105 vrf-target export target:1:9105
set protocols evpn encapsulation vxlan
set protocols evpn multicast-mode ingress-replication
set protocols evpn extended-vni-list 9105
policy-statement OVERLAY-IN term reject-remote-gw from family evpn
set policy-options policy-statement OVERLAY-IN term reject-remote-gw from next-hop 12.12.12.12
set policy-options policy-statement LEAFOVERLAY-IN term import_leaf_esireject-remote-gw from community comm-leaf_esinlri-route-type 1
set policy-options policy-statement LEAFOVERLAY-IN term import_leaf_esi then acceptreject-remote-gw from nlri-route-type 2
set policy-options policy-statement LEAFOVERLAY-IN term import_vni9105 from community com9105reject-remote-gw then reject
set policy-options policy-statement LEAFOVERLAY-IN term import_vni9105accept-all then accept
# EVPN
set protocols evpn policyvni-options vni policy-statement LEAF-IN term default then reject
set policy-options policy-statement OVERLAY-IN term reject-remote-gw from family evpn
set policy-options policy-statement OVERLAY-IN term reject-remote-gw from next-hop 12.12.12.129105 vrf-target export target:1:9105
set protocols evpn encapsulation vxlan
set protocols evpn multicast-mode ingress-replication
set protocols evpn extended-vni-list 9105
# RT/RD for default brideg
set switch-options vtep-source-interface lo0.0
set switch-options route-distinguisher 11.11.11.11:1
set switch-options vrf-import LEAF-IN
set switch-options vrf-target target:9999:9999
set policy-options policy-statement OVERLAYLEAF-IN term reject-remote-gwimport_leaf_esi from nlri-route-type 1community comm-leaf_esi
set policy-options policy-statement OVERLAYLEAF-IN term reject-remote-gw from nlri-route-type 2import_leaf_esi then accept
set policy-options policy-statement OVERLAYLEAF-IN term reject-remote-gw then reject import_vni9105 from community com9105
set policy-options policy-statement OVERLAYLEAF-IN term accept-allimport_vni9105 then accept
set policy-options policy-statement pfe-ecmpLEAF-IN term default then load-balance per-packetreject
set policy-options community com9105 members target:1:9105
set policy-options community comm-leaf_esi members target:9999:9999
set switchpolicy-options vteppolicy-source-interface lo0.0
set switch-options route-distinguisher 11.11.11.11:1
set switch-options vrf-import LEAF-IN
set switch-options vrf-target target:9999:9999
statement pfe-ecmp then load-balance per-packet
#vlan
set vlans bd9105 interface xe-0/0/1.0
set vlans bd9105 vxlan vni 9105
set vlans bd9105 vxlan ingress-node-replication
set vlans default vlan-id 1
set protocols igmp-snooping vlan default ??????
|
|
|
|---|
...