Routing

Expand all | Collapse all

L2vpn termination

Jump to Best Answer
  • 1.  L2vpn termination

    Posted 04-16-2018 04:05

    Hello everyone.

    I`m trying to terminate l2vpn on l3 interface in my lab.

    The lab diagram is quite simple:

    MX104------ACX2100---ACCESS SWITCH---Client

    I`ve got rsvp sessions up:

    On MX:
    show chassis
    fpc 0 {
    pic 0 {
    tunnel-services {
    bandwidth 1g;
    }
    }
    }
    network-services enhanced-ip;

    show interfaces lt-0/0/10 unit 1 { encapsulation vlan-ccc; vlan-id 500; peer-unit 2; family ccc; } unit 2 { encapsulation vlan; vlan-id 500; peer-unit 1; family inet { address 192.168.1.1/24; } } show protocols rsvp interface xe-2/0/0.1077 { link-protection; } interface xe-2/0/0.2341 { link-protection; } show protocols mpls label-switched-path MX2-ACX { to 2.2.2.2; link-protection; } interface xe-2/0/0.1077; interface xe-2/0/0.2341; show routing-instances L2VPN-TEST instance-type l2vpn; interface lt-0/0/10.1; route-distinguisher 1.1.1.1:100; vrf-import L2VPN-TEST-IMPORT; vrf-export L2VPN-TEST-EXPORT; protocols { l2vpn { encapsulation-type ethernet-vlan; interface lt-0/0/10.1; site SITE-1 { site-identifier 100; interface lt-0/0/10.1 { remote-site-id 1100; } } } } }
    On ACX side:
     show interfaces ge-1/0/0
    flexible-vlan-tagging;
    mtu 1518;
    encapsulation flexible-ethernet-services;
    unit 500 {
        encapsulation vlan-ccc;
        vlan-id 500;
        family ccc;
    }
    
    show protocols rsvp
    interface xe-1/3/0.1077 {
        link-protection;
    }
    interface xe-1/3/0.2341 {
        link-protection;
    }
    
    show protocols mpls
    label-switched-path ACX-MX {
        to 1.1.1.1;
        link-protection;
    }
    interface xe-1/3/0.1077;
    interface xe-1/3/0.2341;
    
     show routing-instances L2VPN-TEST
    instance-type l2vpn;
    interface ge-1/0/0.500;
    route-distinguisher 2.2.2.2:100;
    vrf-import L2VPN-TEST-IMPORT;
    vrf-export L2VPN-TEST-EXPORT;
    protocols {
        l2vpn {
            encapsulation-type ethernet-vlan;
            interface ge-1/0/0.500;
            site SITE-1 {
                site-identifier 1100;
                interface ge-1/0/0.500 {
                    remote-site-id 100;
                }
            }
            }
        }
    }
    

     

    L2VPN connection is up:

    Instance: L2VPN-TEST
    Edge protection: Not-Primary
      Local site: SITE-1 (100)
        connection-site           Type  St     Time last up          # Up trans
        SITE-2 (200)              loc   CN
        1100                      rmt   Up     Mar  9 09:14:36 2010           1
          Remote PE: 2.2.2.2, Negotiated control-word: Yes (Null)
          Incoming label: 17, Outgoing label: 800001
          Local interface: lt-0/0/10.1, Status: Up, Encapsulation: VLAN
          Flow Label Transmit: No, Flow Label Receive: No
        1200                      rmt   OR
    

    From ACX:

    Instance: L2VPN-TEST
    Edge protection: Not-Primary
      Local site: SITE-1 (1100)
        connection-site           Type  St     Time last up          # Up trans
        SITE-2 (1200)             loc   OR
        100                       rmt   Up     Jan  1 19:40:59 2010           1
          Remote PE: 1.1.1.1, Negotiated control-word: Yes (Null)
          Incoming label: 800001, Outgoing label: 17
          Local interface: ge-1/0/0.500, Status: Up, Encapsulation: VLAN
        200                       rmt   OR
    

    but from client side i cannot ping 192.168.1.1 on Mx`s lt interface.



  • 2.  RE: L2vpn termination
    Best Answer

    Posted 04-16-2018 10:26

    ok. your config looks to be correct.

     

    Can you share this output from the ACX box? also did you try rebooting the box by any chance?

     

    request pfe execute command "show pfe ifl" target feb0 

     



  • 3.  RE: L2vpn termination

    Posted 04-17-2018 02:30

    Hello.

    request pfe execute command "show pfe ifl" target feb0
    SENT: Ukern command: show pfe ifl
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: .local..0               Index: 0
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 0   Outer vlan: 0   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x0   Inner tpid: 0x0
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 1   IPv6 Enable: 1   MPLS Enable: 1
    GOT: L3 interface id: 3   SVLAN: 3002   RMAC entry index: 3
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 0   VC Label(W): 0
    GOT: UNI mpls port(W): 0   NNI mpls port(W): 0
    GOT: VPN id(P): 0   VC Label(P): 0
    GOT: UNI mpls port(P): 0   NNI mpls port(P): 0
    GOT: IFL TPID rewrite entry: 0
    GOT: IFL LACP link protection standby: 0
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: .local..1               Index: 1
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 0   Outer vlan: 0   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x0   Inner tpid: 0x0
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 0   IPv6 Enable: 0   MPLS Enable: 0
    GOT: L3 interface id: 0   SVLAN: 0   RMAC entry index: -1
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 0   VC Label(W): 0
    GOT: UNI mpls port(W): 0   NNI mpls port(W): 0
    GOT: VPN id(P): 0   VC Label(P): 0
    GOT: UNI mpls port(P): 0   NNI mpls port(P): 0
    GOT: IFL TPID rewrite entry: 0
    GOT: IFL LACP link protection standby: 0
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: .local..2               Index: 2
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 0   Outer vlan: 0   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x0   Inner tpid: 0x0
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 0   IPv6 Enable: 0   MPLS Enable: 0
    GOT: L3 interface id: 0   SVLAN: 0   RMAC entry index: -1
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 0   VC Label(W): 0
    GOT: UNI mpls port(W): 0   NNI mpls port(W): 0
    GOT: VPN id(P): 0   VC Label(P): 0
    GOT: UNI mpls port(P): 0   NNI mpls port(P): 0
    GOT: IFL TPID rewrite entry: 0
    GOT: IFL LACP link protection standby: 0
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: .local..4               Index: 324
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 0   Outer vlan: 0   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x0   Inner tpid: 0x0
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 1   IPv6 Enable: 1   MPLS Enable: 0
    GOT: L3 interface id: 4   SVLAN: 3003   RMAC entry index: 7
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 0   VC Label(W): 0
    GOT: UNI mpls port(W): 0   NNI mpls port(W): 0
    GOT: VPN id(P): 0   VC Label(P): 0
    GOT: UNI mpls port(P): 0   NNI mpls port(P): 0
    GOT: IFL TPID rewrite entry: 0
    GOT: IFL LACP link protection standby: 0
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: .local..36736           Index: 262017
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 0   Outer vlan: 0   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x0   Inner tpid: 0x0
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 0   IPv6 Enable: 0   MPLS Enable: 0
    GOT: L3 interface id: 0   SVLAN: 0   RMAC entry index: -1
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 0   VC Label(W): 0
    GOT: UNI mpls port(W): 0   NNI mpls port(W): 0
    GOT: VPN id(P): 0   VC Label(P): 0
    GOT: UNI mpls port(P): 0   NNI mpls port(P): 0
    GOT: IFL TPID rewrite entry: 0
    GOT: IFL LACP link protection standby: 0
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: ge-1/0/0.500            Index: 326
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 1   Outer vlan: 500   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x8100   Inner tpid: 0x8100
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 0   IPv6 Enable: 0   MPLS Enable: 0
    GOT: L3 interface id: -1   SVLAN: 0   RMAC entry index: 0
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 8192   VC Label(W): 800003
    GOT: UNI mpls port(W): 402653186   NNI mpls port(W): 402653185
    GOT: VPN id(P): 65535   VC Label(P): 0
    GOT: UNI mpls port(P): -1   NNI mpls port(P): -1
    GOT: IFL TPID rewrite entry: -1
    GOT: IFL LACP link protection standby: 0
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: ge-1/0/0.600            Index: 327
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 1   Outer vlan: 600   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x8100   Inner tpid: 0x8100
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 0   IPv6 Enable: 0   MPLS Enable: 0
    GOT: L3 interface id: -1   SVLAN: 0   RMAC entry index: 0
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 8193   VC Label(W): 0
    GOT: UNI mpls port(W): -1   NNI mpls port(W): -1
    GOT: VPN id(P): 65535   VC Label(P): 0
    GOT: UNI mpls port(P): -1   NNI mpls port(P): -1
    GOT: IFL TPID rewrite entry: -1
    GOT: IFL LACP link protection standby: 0
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: ge-1/0/0.32767          Index: 328
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 0   Outer vlan: 0   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x0   Inner tpid: 0x0
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 0   IPv6 Enable: 0   MPLS Enable: 0
    GOT: L3 interface id: -1   SVLAN: 0   RMAC entry index: 0
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 65535   VC Label(W): 0
    GOT: UNI mpls port(W): -1   NNI mpls port(W): -1
    GOT: VPN id(P): 65535   VC Label(P): 0
    GOT: UNI mpls port(P): -1   NNI mpls port(P): -1
    GOT: IFL TPID rewrite entry: -1
    GOT: IFL LACP link protection standby: 0
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: ge-1/0/1.0              Index: 329
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 0   Outer vlan: 0   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x0   Inner tpid: 0x0
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 0   IPv6 Enable: 0   MPLS Enable: 0
    GOT: L3 interface id: -1   SVLAN: 0   RMAC entry index: 0
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 8194   VC Label(W): 0
    GOT: UNI mpls port(W): -1   NNI mpls port(W): -1
    GOT: VPN id(P): 65535   VC Label(P): 0
    GOT: UNI mpls port(P): -1   NNI mpls port(P): -1
    GOT: IFL TPID rewrite entry: -1
    GOT: IFL LACP link protection standby: 0
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: xe-1/3/0.1077           Index: 330
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 1   Outer vlan: 1077   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x8100   Inner tpid: 0x8100
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 1   IPv6 Enable: 0   MPLS Enable: 1
    GOT: L3 interface id: 5   SVLAN: 3004   RMAC entry index: 0
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 65535   VC Label(W): 0
    GOT: UNI mpls port(W): -1   NNI mpls port(W): -1
    GOT: VPN id(P): 65535   VC Label(P): 0
    GOT: UNI mpls port(P): -1   NNI mpls port(P): -1
    GOT: IFL TPID rewrite entry: -1
    GOT: IFL LACP link protection standby: 0
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: xe-1/3/0.2341           Index: 331
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 1   Outer vlan: 2341   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x8100   Inner tpid: 0x8100
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 1   IPv6 Enable: 0   MPLS Enable: 1
    GOT: L3 interface id: 7   SVLAN: 3005   RMAC entry index: 0
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 65535   VC Label(W): 0
    GOT: UNI mpls port(W): -1   NNI mpls port(W): -1
    GOT: VPN id(P): 65535   VC Label(P): 0
    GOT: UNI mpls port(P): -1   NNI mpls port(P): -1
    GOT: IFL TPID rewrite entry: -1
    GOT: IFL LACP link protection standby: 0
    GOT:
    GOT: ==========================================================
    GOT: Logical Interface: xe-1/3/0.32767          Index: 332
    GOT:
    GOT: VLANs:
    GOT: No. of tags: 0   Outer vlan: 0   Inner vlan: 0
    GOT: Native outer vlan: 0   Native inner vlan: 0
    GOT: LT service vlan: 0   LT peer service vlan: 0
    GOT: Outer tpid: 0x0   Inner tpid: 0x0
    GOT:
    GOT: L3 Services:
    GOT: IPv4 Enable: 0   IPv6 Enable: 0   MPLS Enable: 0
    GOT: L3 interface id: -1   SVLAN: 0   RMAC entry index: 0
    GOT:
    GOT: Pseudowire:
    GOT: ATM/TDM PW context vlan: 0   ATM/TDM PW context label: 0
    GOT: VPN id(W): 65535   VC Label(W): 0
    GOT: UNI mpls port(W): -1   NNI mpls port(W): -1
    GOT: VPN id(P): 65535   VC Label(P): 0
    GOT: UNI mpls port(P): -1   NNI mpls port(P): -1
    GOT: IFL TPID rewrite entry: -1
    GOT: IFL LACP link protection standby: 0
    GOT:
    LOCAL: End of file
     

    If i replace lt interface with physical on MX and connect another client to it everything works fine - my clients can ping each other.

    So i think the problem is on mx side. 



  • 4.  RE: L2vpn termination

    Posted 04-17-2018 10:16

    I triend with encapsulation ethernet - and i could ping remote end.

    But why its not working with vlan-ccc?

    Ok, i`ve found issue.

    I`ve connected wrong port on access switch.



  • 5.  RE: L2vpn termination

    Posted 04-17-2018 20:22

    Where did you change the encapsulation?? on ACX or MX?

     

    Your config is working fine in my LAB boxes. 

     




    MX: root@mx480# run show l2vpn connections Layer-2 VPN connections: <Output omitted> Up -- operational Dn -- down Instance: L2VPN-TEST Edge protection: Not-Primary Local site: SITE-1 (100) connection-site Type St Time last up # Up trans 1100 rmt Up Apr 16 22:53:24 2018 1 Remote PE: 50.48.50.48, Negotiated control-word: Yes (Null) Incoming label: 29, Outgoing label: 32 Local interface: lt-3/0/10.1, Status: Up, Encapsulation: VLAN Flow Label Transmit: No, Flow Label Receive: No [edit] root@mx480#
    [edit]
    root@mx480# show interfaces lt-3/0/10
    unit 1 {
    encapsulation vlan-ccc;
    vlan-id 500;
    peer-unit 2;
    family ccc;
    }
    unit 2 {
    encapsulation vlan;
    vlan-id 500;
    peer-unit 1;
    family inet {
    address 192.168.1.1/24;
    }
    }
    ACX: root@acx5048# run show l2vpn connections <Output omitted> Up -- operational Dn -- down Instance: L2VPN-TEST Edge protection: Not-Primary Local site: SITE-1 (1100) connection-site Type St Time last up # Up trans 100 rmt Up Apr 17 12:34:26 2018 1 Remote PE: 48.48.48.48, Negotiated control-word: Yes (Null) Incoming label: 32, Outgoing label: 29 Local interface: ge-0/0/8.500, Status: Up, Encapsulation: VLAN Flow Label Transmit: No, Flow Label Receive: No {master:0}[edit] root@acx5048# Ping result from CE: root@acx2100> ping 192.168.1.1 PING 192.168.1.1 (192.168.1.1): 56 data bytes 64 bytes from 192.168.1.1: icmp_seq=0 ttl=64 time=1.520 ms 64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=1.133 ms 64 bytes from 192.168.1.1: icmp_seq=2 ttl=64 time=1.107 ms ^C --- 192.168.1.1 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 1.107/1.253/1.520/0.189 ms root@acx2100>

     

     

     



  • 6.  RE: L2vpn termination

    Posted 04-19-2018 05:27

    It`s really working fine - the problem was in access switch port wich was tagged with different vlan id.