Routing

Hi All

I would like to set up a server's GW at remote router and route to internet.

As follow diagram, I have a server in HK and connect to local router. And wish the server cross this L2circuit into the remote router in KR, then go to internet.

Is there any suggestion or document to reach it ?

Hello,

I could think of 2 ways to do it:

1/ classic way : You establish L2circuit between HK and KR routers. On HK router, configure the server-facing interface as L2cuircuit UNI. On KR router, configure LDP VPLS instance with IRB, assign an IP/IPv6 address to that IRB and make sure the IRB subnet is advertised to the outside world.

2/ modern way: it assumes that application running on that server is virtualized/running inside a VM.

spin a VMX router instance on that server and configure a L2cuircuit between VMX and KR router.

Spin a vswitch instance on that server and include one of VMX interfaces & application VM' virtual interface into that vswitch.

On VMX, configure the vswitch-facing virtual interface as L2cuircuit UNI.

The KR router configuration is as above.

HTH

Thx
Alex

Hi Alex

I will prefer your first way, becasue I should know how to set up.

Let me try and give you a feedback.

Thanks 

Hi 

For option 1, I set VPLS in KR and added L2circuit in HK. but still not work as follow.

Would like someone give me some suggesstion.

> show l2circuit connections

Neighbor: 172.54.131.11
Interface Type St Time last up # Up trans
ae3.11(vc 10011) rmt OL

And how to advertise irb from VPLS to int.0. Seem that can't use rib-group.

Or need to creating L3VPN like VRF to advertise it ? 

Many thanks 

Cloud

----- KR -------------

instance-type vpls;
vlan-id 11;
routing-interface irb.11;
no-local-switching;
route-distinguisher 102.36.50.9:776;
vrf-target target:2024:776;
protocols {
vpls {
no-tunnel-services;
vpls-id 10011;
mtu 1600;
neighbor 173.198.146.6 {
encapsulation-type ethernet-vlan;
}

----- HK -------

> show configuration interfaces ae3

flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
aggregated-ether-options {
link-speed 10g;
lacp {
active;
periodic fast;
}
}

unit 11 {
encapsulation vlan-ccc;
vlan-id 11;

> show configuration protocols l2circuit

neighbor 172.54.131.11 {
interface ae3.11 {
virtual-circuit-id 10011;
control-word;
mtu 1600;
encapsulation-type ethernet-vlan;
ignore-mtu-mismatch;
pseudowire-status-tlv;
}
}

---

@aarseniev wrote:

Hello,

I could think of 2 ways to do it:

1/ classic way : You establish L2circuit between HK and KR routers. On HK router, configure the server-facing interface as L2cuircuit UNI. On KR router, configure LDP VPLS instance with IRB, assign an IP/IPv6 address to that IRB and make sure the IRB subnet is advertised to the outside world.

Hello there,

---

@Cloud wrote:

 

 

> show l2circuit connections

Neighbor: 182.54.131.11
Interface Type St Time last up # Up trans
ae3.11(vc 10011) rmt OL

 

 

---

1/ Do you have MPLS (LDP or RSVP) all the way through between HK and KR?

2/ Do You have "interface lo0.0" under "protocols ldp" on HK and KR?

HTH

Thx
Alex

Hi 

Yes, I have set up IS-IS and LDP with MPLS between these routers as follow:

That's why I don't understand. It should be working or display other alams.

Thus, I will need you all give me some suggestion. Maybe I got wrong configuration.

> show route 172.54.131.11

inet.0: 707619 destinations, 3933334 routes (704588 active, 36 holddown, 670303 hidden)
+ = Active Route, - = Last Active, * = Both

182.54.131.11/32 *[LDP/9] 5d 15:33:23, metric 27
> to 10.3.100.38 via ae8.1, Push 307344
   to 10.5.100.57 via xe-1/3/2.0, Push 310080
[IS-IS/18] 5d 15:33:24, metric 27
> to 10.3.100.38 via ae8.1
   to 10.5.100.57 via xe-1/3/2.0

Thanks

Cloud

Hello,

---

@Cloud wrote:

Maybe I got wrong configuration.

  

---

Then post both HR and KR _complete_ sanitized configurations here for us to examine.

"Complete" means including "protocols" and "interfaces" stanzas which You omitted.

HTH

Thx
Alex

Hi Alex

As the attachment is my configuration. Please refer to it.

Many thanks

Cloud

Attachment(s)

VPLS.rtf   8 KB 1 version

Hello,

Thank You for sharing the configurations.

Please add this line into Your KR configuration

set logical-systems CHINA routing-instances HKG-KR-VPLS protocols vpls connectivity-type permanent 

HTH

Thx

Alex

Hi Alex

Added, but is still same as before. 

Best regards,

Cloud 

Hello,

Please post the following printouts:

1/ from HK router

show route table inet.3 172.54.131.11 

2/ from KR router

show route logical-system CHINA 173.198.146.6  table inet.3

HTH

Thx
Alex

Hi Alex

As follow is what you would like have. Should have been tagged by LDP.

HK> show route table inet.3 172.54.131.11   

inet.3: 24 destinations, 24 routes (24 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

172.54.131.11/32   *[LDP/9] 6d 15:28:54, metric 27

                               > to 10.3.100.38 via ae8.1, Push 307344

                                  to 10.5.100.57 via xe-1/3/2.0, Push 310080

KR> show route logical-system CHINA 173.198.146.6 table inet.3 

inet.3: 24 destinations, 24 routes (24 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

173.198.146.6/32   *[LDP/9] 6d 15:29:26, metric 27

                                > to 10.24.100.97 via lt-1/2/0.1, Push 308032

                                   to 10.24.100.101 via lt-4/2/0.1, Push 308032

Best regards,

Cloud

Hi Alex

I found out my loopback's filter denying l2circuit connections. Now is up,but display Vlan ID mismatch.

Instance: HKG02-KMH05-VPLS
VPLS-id: 10011
Neighbor Type St Time last up # Up trans
173.198.146.6(vpls-id 10011) rmt VM
local PW status code: 0x00000001, Neighbor PW status code: 0x00000000

Best regards,

Cloud

Hello,

Two ways to deal with L2circuit "vlan-mismatch":

1/ add "ignore-vlan-mismatch" under neighbor on each side

2/ change encapsulation under neighbor on each side to "ethernet-ccc"

HTH

Thx

Alex

Hi Alex

I've tested these two way, but only have "ignore-encapsulation-mismatch" and "ethernet-vlan" under neighbor.

Thus, these two way are not working.

Best regards,

Cloud

Hi Alex

I've changed it as "ethernet-vlan" on both side and is working.

I add irb into VRF and my server will connect to Internet via KR.

Thanks for your support.

Best regards,

Cloud