Junos OS

 View Only
  • 1.  EVPN and MAC-VRF

    Posted 07-21-2025 19:46
    Edited by DENNIS ALLEN JR 07-22-2025 08:55

    Has anyone had any luck creating MAC-VRF type instances to implement EVPN on EX4650 switches?  I have had luck with EVPN on vMX using instancy type EVPN (to do E-LAN, not VxLAN) but trying on EX4650 eval hardware.   I get errors like this even though the option to even create a bridge domain exists from top level, in the instance, etc in JUNOS on this platform.  "bridge-domains" is not in the list of possible commands.

    [edit routing-instances BD100 instance-type]
      'instance-type mac-vrf'
        bridge-domains must be configured for mac-vrf instance
    [edit routing-instances BD100 instance-type]
      'instance-type mac-vrf'
        bridge-domains must be configured for mac-vrf instance



    ------------------------------
    DENNIS ALLEN JR.
    ------------------------------



  • 2.  RE: EVPN and MAC-VRF

    Posted 07-21-2025 19:50

    The bridge domain is configured in their own hierarchy at the top level of the configuration. 

    This will then include the vlans and interfaces assigned to the mac vrf.



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: EVPN and MAC-VRF

    Posted 07-22-2025 08:37

    It does not exist.


    {master:0}[edit]
    admin@EX4650-A# set ?
    Possible completions:
    > access               Network access configuration
    > access-profile       Access profile for this instance
    > accounting-options   Accounting data configuration
    > applications         Define applications by protocol characteristics
    + apply-groups         Groups from which to inherit configuration data
    > chassis              Chassis configuration
    > class-of-service     Class-of-service configuration



    ------------------------------
    DENNIS ALLEN JR.
    ------------------------------



  • 4.  RE: EVPN and MAC-VRF

    Posted 07-22-2025 14:46

    Checking on Feature Explorer it looks like the EX4650 does not support bridge domains.  Which is why the option is not showing up in the cli.

    https://apps.juniper.net/feature-explorer/feature/2009?fn=Bridge%20domains%20and%20virtual%20switching



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 5.  RE: EVPN and MAC-VRF
    Best Answer

    Posted 07-22-2025 15:00
    Edited by DENNIS ALLEN JR 07-22-2025 15:01

    So the answer is using instance type MAC-VRF to do MEF E-LAN EVPN is not possible on EX4650 because a required feature/command bridge-domains to configure the service does not exist.



    ------------------------------
    DENNIS ALLEN JR.
    ------------------------------



  • 6.  RE: EVPN and MAC-VRF

    Posted 07-23-2025 03:18

    Can you give it a try and configure a VLAN(s) inside the MAC-VRF?

    Bridge-domains are for MX routers and equivalent with VLANs.




  • 7.  RE: EVPN and MAC-VRF

    Posted 07-23-2025 08:28

    Yes, I am actually trying that now on ACX7024X.  I gave up on the 4650s for now.  Strangely, I was running into the same kind of commit errors on the ACX and needing "bridge-domains" configured.  You actually CAN configure them even though they are hidden from the list of possible commands like "set ?" or "set routing-instance yadda ?".  If you type them in correctly, it will take the comment, commit and show up in the config.  Working is another story.  I have been trying to follow the Juniper validated designs, but they only give the mac-vrf config, not the interfaced logical unit config, vlan config, etc.  So, I'm going it another shot today using VLANs.



    ------------------------------
    DENNIS ALLEN JR.
    ------------------------------



  • 8.  RE: EVPN and MAC-VRF

    Posted 07-25-2025 10:02

    Here's basically what I got working.

    ACX7024X-A
    set interfaces et-0/0/6 flexible-vlan-tagging
    set interfaces et-0/0/6 speed auto
    set interfaces et-0/0/6 encapsulation flexible-ethernet-services
    set interfaces et-0/0/6 ether-options auto-negotiation
    set interfaces et-0/0/6 unit 123 encapsulation vlan-bridge
    set interfaces et-0/0/6 unit 123 vlan-id 123
    set routing-instances customer2 instance-type mac-vrf
    set routing-instances customer2 protocols evpn (also works with encapsulation mpls which is in the JVD's)
    set routing-instances customer2 service-type vlan-based (also works with vlan-aware)
    set routing-instances customer2 interface et-0/0/6.123
    set routing-instances customer2 vrf-target target:64512:30000
    set routing-instances customer2 vlans vlan123 vlan-id 123
    set routing-instances customer2 vlans vlan123 interface et-0/0/6.123
    set routing-options route-distinguisher-id 172.30.1.5
    set vlans vlan123 vlan-id 123

    I spent a lot of time troubleshooting an EX4000 connection to an ACX7024X trying to trunk, or do tags, on a non-uplink port on the EX4000.  I haven't found a work around, but I knew something was up when I couldn't form LLDP neighbors.  I wonder if and how they locked that down on the "access" ports.



    ------------------------------
    DENNIS ALLEN JR.
    ------------------------------