Routing

Expand all | Collapse all

How to establish a remote GW via L2circuit

Jump to Best Answer
  • 1.  How to establish a remote GW via L2circuit

    Posted 07-22-2018 23:10

    Hi All

     

    I would like to set up a server's GW at remote router and route to internet.

    As follow diagram, I have a server in HK and connect to local router. And wish the server cross this L2circuit into the remote router in KR, then go to internet.

     

    Is there any suggestion or document to reach it ?

     

    螢幕快照 2018-07-23 下午2.05.50.png


    #l2circuit


  • 2.  RE: How to establish a remote GW via L2circuit
    Best Answer

    Posted 07-23-2018 01:53

    Hello,

    I could think of 2 ways to do it:

    1/ classic way : You establish L2circuit between HK and KR routers. On HK router, configure the server-facing interface as L2cuircuit UNI. On KR router, configure LDP VPLS instance with IRB, assign an IP/IPv6 address to that IRB and make sure the IRB subnet is advertised to the outside world.

    2/ modern way: it assumes that application running on that server is virtualized/running inside a VM.

    spin a VMX router instance on that server and configure a L2cuircuit between VMX and KR router.

    Spin a vswitch instance on that server and include one of VMX interfaces & application VM' virtual interface into that vswitch.

    On VMX, configure the vswitch-facing virtual interface as L2cuircuit UNI.

    The KR router configuration is as above.

    HTH

    Thx
    Alex

     



  • 3.  RE: How to establish a remote GW via L2circuit

    Posted 07-23-2018 03:22

    Hi Alex

     

    I will prefer your first way, becasue I should know how to set up.

    Let me try and give you a feedback.

     

    Thanks 



  • 4.  RE: How to establish a remote GW via L2circuit

    Posted 07-27-2018 01:40

    Hi 

     

    For option 1, I set VPLS in KR and added L2circuit in HK. but still not work as follow.

    Would like someone give me some suggesstion.

     

    > show l2circuit connections

    Neighbor: 172.54.131.11
    Interface Type St Time last up # Up trans
    ae3.11(vc 10011) rmt OL

     

    And how to advertise irb from VPLS to int.0. Seem that can't use rib-group.

    Or need to creating L3VPN like VRF to advertise it ? 

     

    Many thanks 

    Cloud

     

    ----- KR -------------

    instance-type vpls;
    vlan-id 11;
    routing-interface irb.11;
    no-local-switching;
    route-distinguisher 102.36.50.9:776;
    vrf-target target:2024:776;
    protocols {
    vpls {
    no-tunnel-services;
    vpls-id 10011;
    mtu 1600;
    neighbor 173.198.146.6 {
    encapsulation-type ethernet-vlan;
    }

     

    ----- HK -------

    > show configuration interfaces ae3

    flexible-vlan-tagging;
    encapsulation flexible-ethernet-services;
    aggregated-ether-options {
    link-speed 10g;
    lacp {
    active;
    periodic fast;
    }
    }

    unit 11 {
    encapsulation vlan-ccc;
    vlan-id 11;

     

    > show configuration protocols l2circuit

    neighbor 172.54.131.11 {
    interface ae3.11 {
    virtual-circuit-id 10011;
    control-word;
    mtu 1600;
    encapsulation-type ethernet-vlan;
    ignore-mtu-mismatch;
    pseudowire-status-tlv;
    }
    }

     

     


    @aarseniev wrote:

    Hello,

    I could think of 2 ways to do it:

    1/ classic way : You establish L2circuit between HK and KR routers. On HK router, configure the server-facing interface as L2cuircuit UNI. On KR router, configure LDP VPLS instance with IRB, assign an IP/IPv6 address to that IRB and make sure the IRB subnet is advertised to the outside world.





  • 5.  RE: How to establish a remote GW via L2circuit

    Posted 07-27-2018 09:33

    Hello there,


    @Cloud wrote:

     

     

    > show l2circuit connections

    Neighbor: 182.54.131.11
    Interface Type St Time last up # Up trans
    ae3.11(vc 10011) rmt OL

     

     


    1/ Do you have MPLS (LDP or RSVP) all the way through between HK and KR?

    2/ Do You have "interface lo0.0" under "protocols ldp" on HK and KR?

    HTH

    Thx
    Alex



  • 6.  RE: How to establish a remote GW via L2circuit

    Posted 07-29-2018 18:57

    Hi 

     

    Yes, I have set up IS-IS and LDP with MPLS between these routers as follow:

    That's why I don't understand. It should be working or display other alams.

    Thus, I will need you all give me some suggestion. Maybe I got wrong configuration.

     

    > show route 172.54.131.11

     

    inet.0: 707619 destinations, 3933334 routes (704588 active, 36 holddown, 670303 hidden)
    + = Active Route, - = Last Active, * = Both

    182.54.131.11/32 *[LDP/9] 5d 15:33:23, metric 27
    > to 10.3.100.38 via ae8.1, Push 307344
       to 10.5.100.57 via xe-1/3/2.0, Push 310080
    [IS-IS/18] 5d 15:33:24, metric 27
    > to 10.3.100.38 via ae8.1
       to 10.5.100.57 via xe-1/3/2.0

     

    Thanks

    Cloud



  • 7.  RE: How to establish a remote GW via L2circuit

    Posted 07-29-2018 22:40

    Hello,


    @Cloud wrote:

    Maybe I got wrong configuration.

      


    Then post both HR and KR _complete_ sanitized configurations here for us to examine.

    "Complete" means including "protocols" and "interfaces" stanzas which You omitted.

    HTH

    Thx
    Alex



  • 8.  RE: How to establish a remote GW via L2circuit

    Posted 07-30-2018 00:14
      |   view attached

    Hi Alex

     

    As the attachment is my configuration. Please refer to it.

     

    Many thanks

    Cloud

    Attachment(s)

    rtf
    VPLS.rtf   8K 1 version


  • 9.  RE: How to establish a remote GW via L2circuit

    Posted 07-30-2018 00:42

    Hello,

    Thank You for sharing the configurations.

    Please add this line into Your KR configuration

     

    set logical-systems CHINA routing-instances HKG-KR-VPLS protocols vpls connectivity-type permanent 

    HTH

    Thx

    Alex



  • 10.  RE: How to establish a remote GW via L2circuit

    Posted 07-30-2018 01:04

    Hi Alex

     

    Added, but is still same as before. 

     

    Best regards,

    Cloud 



  • 11.  RE: How to establish a remote GW via L2circuit

    Posted 07-30-2018 07:41

    Hello,

    Please post the following printouts:

    1/ from HK router

    show route table inet.3 172.54.131.11 

    2/ from KR router

    show route logical-system CHINA 173.198.146.6  table inet.3

    HTH

    Thx
    Alex



  • 12.  RE: How to establish a remote GW via L2circuit

    Posted 07-30-2018 18:53

    Hi Alex

     

    As follow is what you would like have. Should have been tagged by LDP.

     

    HK> show route table inet.3 172.54.131.11   

     

    inet.3: 24 destinations, 24 routes (24 active, 0 holddown, 0 hidden)

    + = Active Route, - = Last Active, * = Both

     

    172.54.131.11/32   *[LDP/9] 6d 15:28:54, metric 27

                                   > to 10.3.100.38 via ae8.1, Push 307344

                                      to 10.5.100.57 via xe-1/3/2.0, Push 310080

     

    KR> show route logical-system CHINA 173.198.146.6 table inet.3 

     

    inet.3: 24 destinations, 24 routes (24 active, 0 holddown, 0 hidden)

    + = Active Route, - = Last Active, * = Both

     

    173.198.146.6/32   *[LDP/9] 6d 15:29:26, metric 27

                                    > to 10.24.100.97 via lt-1/2/0.1, Push 308032

                                       to 10.24.100.101 via lt-4/2/0.1, Push 308032

     

    Best regards,

    Cloud



  • 13.  RE: How to establish a remote GW via L2circuit

    Posted 07-30-2018 19:34

    Hi Alex

     

    I found out my loopback's filter denying l2circuit connections. Now is up,but display Vlan ID mismatch.

     

    Instance: HKG02-KMH05-VPLS
    VPLS-id: 10011
    Neighbor Type St Time last up # Up trans
    173.198.146.6(vpls-id 10011) rmt VM
    local PW status code: 0x00000001, Neighbor PW status code: 0x00000000

     

    Best regards,

    Cloud



  • 14.  RE: How to establish a remote GW via L2circuit

    Posted 07-30-2018 23:12

    Hello,

    Two ways to deal with L2circuit "vlan-mismatch":

    1/ add "ignore-vlan-mismatch" under neighbor on each side

    2/ change encapsulation under neighbor on each side to "ethernet-ccc"

    HTH

    Thx

    Alex



  • 15.  RE: How to establish a remote GW via L2circuit

    Posted 07-31-2018 00:01

    Hi Alex

     

    I've tested these two way, but only have "ignore-encapsulation-mismatch" and "ethernet-vlan" under neighbor.

    Thus, these two way are not working.

     

    Best regards,

    Cloud



  • 16.  RE: How to establish a remote GW via L2circuit

    Posted 07-31-2018 20:43

    Hi Alex

     

    I've changed it as "ethernet-vlan" on both side and is working.

    I add irb into VRF and my server will connect to Internet via KR.

     

    Thanks for your support.

     

    Best regards,

    Cloud