Data Center

 View Only
last person joined: 10 days ago 

Ask questions and share experiences about Data Center Architecture and approaches.
  • 1.  irb interface link down

    Posted 08-24-2021 05:28
    Edited by spuluka 08-24-2021 09:10
    Hi,
    I am trying to configure l3 gateway for VLAN 100 and vlan101 communication but irb interface is linked down, any idea?.


    root@MX3> show interfaces irb.100 terse
    Interface Admin Link Proto Local Remote
    irb.100 up down inet 10.200.100.252/24
    multiservice

    root@MX3# show routing-instances evpn
    vtep-source-interface lo0.0;
    instance-type virtual-switch;
    interface ge-0/0/0.0;
    vrf-target target:1:1;
    protocols {
    evpn {
    encapsulation vxlan;
    extended-vni-list [ 100 101 ];
    vni-options {
    vni 100 {
    vrf-target target:100:100;
    }
    vni 101 {
    vrf-target target:101:101;
    }
    }
    multicast-mode ingress-replication;
    }
    }
    bridge-domains {
    bd100 {
    domain-type bridge;
    vlan-id 100;
    routing-interface irb.100;
    vxlan {
    vni 100;
    ingress-node-replication;
    }
    }
    bd101 {
    domain-type bridge;
    vlan-id 101;
    routing-interface irb.101;
    vxlan {
    vni 101;
    }
    }
    }

     

    interfaces {

        ge-0/0/0 {

            unit 0 {

                family bridge {

                    interface-mode trunk;

                    vlan-id-list 100;

                }

            }

        }


    QFX working fine:


    root@VQFX3# show protocols evpn
    vni-options {
    vni 100 {
    vrf-target export target:100:100; ## Warning: 'export' is deprecated


    extended-vni-list [ 100 101 ];

    {master:0}[edit]
    root@VQFX3# show vlans
    vlan100 {
    vlan-id 100;
    l3-interface irb.100;
    vxlan {
    vni 100;
    }
    }
    }

    root@VQFX3# show interfaces
    xe-0/0/1 {
    unit 0 {
    family ethernet-switching {
    interface-mode trunk;
    vlan {
    members [ vlan100 vlan101 ];
    }
    }
    }
    }
    {master:0}[edit]
    root@VQFX3# run show interfaces irb terse
    Interface Admin Link Proto Local Remote
    irb up up
    irb.100 up up inet 10.200.200.5/24

    {master:0}[edit]
    root@VQFX3#
    ------------------------------
    Balamurugan Subramanian
    ------------------------------


  • 2.  RE: irb interface link down
    Best Answer

    Posted 08-24-2021 09:10
    IRB interfaces require that some other interface in the vlan exist and be link up before they will be link up.  What are the other interfaces in this vlan?

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: irb interface link down

    Posted 08-24-2021 09:11

    Thanks Steve for the response,this is for Vxlan L3 GW.Here is the config for vlan and interface.

     

     

     

    interfaces {

        ge-0/0/0 {

            unit 0 {

                family bridge {

                    interface-mode trunk;

                    vlan-id-list 100;

                }

            }

        }

       

           irb {

            unit 100 {

                family inet {

                    address 10.200.100.252/24 {

                        virtual-gateway-address 10.200.100.254;

                    }

                }

            }

            unit 101 {

                family inet {

                    address 10.200.101.252/24 {

                        virtual-gateway-address 10.200.101.254;

                    }

                }

            }

        }

     

    routing-instances {

        fabric {

            vtep-source-interface lo0.0;

            instance-type virtual-switch;

            vrf-target target:1:1;

            protocols {

                evpn {

                    encapsulation vxlan;

                    extended-vni-list [ 100 101 ];

                    vni-options {

                        vni 100 {

                            vrf-target target:100:100;

                        }

                        vni 101 {

                            vrf-target target:101:101;

                        }

                    }

                    multicast-mode ingress-replication;

                }

            }

            bridge-domains {

                bd100 {

                    domain-type bridge;

                    vlan-id 100;

                    routing-interface irb.100;

                    vxlan {

                        vni 100;

                        ingress-node-replication;

                    }

                }

    Thanks

    Bala

     


    Juniper Business Use Only






  • 4.  RE: irb interface link down

    Posted 08-24-2021 09:11
    You should have VLAN 100 allowed on the physical interface. Is interface ge-0/0/0with VLAN 100 in the list?

    Elvin


  • 5.  RE: irb interface link down

    Posted 08-24-2021 11:34
    Thanks, Elvin for the response, what is mean by allowed VLAN, do I need to configure the access port instead of the trunk. Below is the actual interface config towards CE.

    root@MX3# show interfaces ge-0/0/0
    unit 0 {
    family bridge {
    interface-mode trunk;
    vlan-id-list 100;
    }
    }

    [edit]
    root@MX3#

    ------------------------------
    Balamurugan Subramanian
    ------------------------------



  • 6.  RE: irb interface link down

    Posted 08-24-2021 22:55
    I think trunk is ok for this case. Dont related to access or trunk, as soon as allow vlan in up interface and int vlan will be coming up.

    ------------------------------
    DAO THAI BAO
    ------------------------------



  • 7.  RE: irb interface link down

    Posted 08-25-2021 05:44
    Friends,

    is there anything am I missing?   this final config on MX box running 19.1R.

    root@PE1# show routing-instances test
    vtep-source-interface lo0.0;
    instance-type virtual-switch;
    interface ge-0/0/4.0;
    route-distinguisher 100.100.100.101:1;
    vrf-target target:1:1;
    protocols {
    evpn {
    encapsulation vxlan;
    extended-vni-list 100;
    vni-options {
    vni 100 {
    vrf-target target:100:100;
    }
    }
    multicast-mode ingress-replication;
    default-gateway no-gateway-community;
    }
    }
    bridge-domains {
    bd100 {
    vlan-id 100;
    routing-interface irb.100;
    vxlan {
    vni 100;
    encapsulate-inner-vlan;
    decapsulate-accept-inner-vlan;
    ingress-node-replication;
    }
    }
    }

    [edit]
    root@PE1# show interfaces ge-0/0/4
    unit 0 {
    family bridge {
    interface-mode access;
    vlan-id 100;
    }
    }

    [edit]
    root@PE1# run show interfaces irb* terse
    Interface Admin Link Proto Local Remote
    irb up up
    irb.100 up up inet 10.10.0.101/24
    multiservice

    [edit]
    root@PE1#

    ------------------------------
    Balamurugan Subramanian
    ------------------------------



  • 8.  RE: irb interface link down

    Posted 08-25-2021 05:44
    Regardless of the port being set as trunk or access, it needs to have the VLAN allowed to actually carry traffic for it. The actual type of switchport would depend of the design.

    Elvin


  • 9.  RE: irb interface link down

    Posted 08-25-2021 08:38
    Thanks Elvin, yes you are correct, actually, the problem with the device,post-reboot it came fine.

    root@MX4> show interfaces irb terse
    Interface Admin Link Proto Local Remote
    irb up up
    irb.100 up up inet 10.200.200.10/24
    multiservice

    root@MX4>

    ------------------------------
    Balamurugan Subramanian
    ------------------------------



  • 10.  RE: irb interface link down

    Posted 08-25-2021 11:01
    Good to know!

    Glad it helped,

    Elvin