Routing

 View Only
last person joined: 2 days ago 

Ask questions and share experiences about ACX Series, CTP Series, MX Series, PTX Series, SSR Series, JRR Series, and all things routing, including portfolios and protocols.

Cannot install mac of remote CE to EVPN MAC table

  • 1.  Cannot install mac of remote CE to EVPN MAC table

    Posted 11-02-2022 06:42
    Hi guys,
    I tried to configure EVPN multi-home CE model. 

    Configure on each PE:
    PE2:
    [edit]
    juniper@PE2# show routing-instances EVPN 
    Nov 02 10:23:00
    protocols {
        evpn {
            interface ge-0/0/3.100;
        }
    }
    instance-type evpn;
    vlan-id 100;
    routing-interface irb.100;
    interface ge-0/0/3.100;
    route-distinguisher 172.30.0.2:5;
    vrf-target target:65000:5;
    
    PE7:
    [edit]
    juniper@PE7# show routing-instances EVPN 
    Nov 02 17:23:23
    protocols {
        evpn {
            interface ae0.100;
            duplicate-mac-detection {
                detection-threshold 10;
                detection-window 120;
                auto-recovery-time 5;
            }
        }
    }
    instance-type evpn;
    vlan-id 100;
    routing-interface irb.100;
    interface ae0.100;
    route-distinguisher 172.30.0.7:5;
    vrf-target target:65000:5;
    
    PE9:
    [edit]
    juniper@PE9# show routing-instances EVPN 
    Nov 02 17:23:49
    protocols {
        evpn {
            interface ae0.100;
            duplicate-mac-detection {
                detection-threshold 10;
                detection-window 120;
                auto-recovery-time 5;
            }
        }
    }
    instance-type evpn;
    vlan-id 100;
    routing-interface irb.100;
    interface ae0.100;
    route-distinguisher 172.30.0.9:5;
    vrf-target target:65000:5;​

    PE2:
    [edit]
    juniper@PE2# show routing-instances EVPN 
    Nov 02 10:23:00
    protocols {
        evpn {
            interface ge-0/0/3.100;
        }
    }
    instance-type evpn;
    vlan-id 100;
    routing-interface irb.100;
    interface ge-0/0/3.100;
    route-distinguisher 172.30.0.2:5;
    vrf-target target:65000:5;
    
    PE7:
    [edit]
    juniper@PE7# show routing-instances EVPN 
    Nov 02 17:23:23
    protocols {
        evpn {
            interface ae0.100;
            duplicate-mac-detection {
                detection-threshold 10;
                detection-window 120;
                auto-recovery-time 5;
            }
        }
    }
    instance-type evpn;
    vlan-id 100;
    routing-interface irb.100;
    interface ae0.100;
    route-distinguisher 172.30.0.7:5;
    vrf-target target:65000:5;
    
    PE9:
    [edit]
    juniper@PE9# show routing-instances EVPN 
    Nov 02 17:23:49
    protocols {
        evpn {
            interface ae0.100;
            duplicate-mac-detection {
                detection-threshold 10;
                detection-window 120;
                auto-recovery-time 5;
            }
        }
    }
    instance-type evpn;
    vlan-id 100;
    routing-interface irb.100;
    interface ae0.100;
    route-distinguisher 172.30.0.9:5;
    vrf-target target:65000:5;​
    
    
    [edit]
    juniper@PE2# show interfaces ge-0/0/3  
    Nov 02 10:24:21
    flexible-vlan-tagging;
    native-vlan-id 100;
    encapsulation flexible-ethernet-services;
    unit 100 {
        description TO_EVPN1;
        encapsulation vlan-bridge;
        vlan-id 100;
    }
    
    [edit]
    juniper@PE7# show interfaces ae0 
    Nov 02 17:26:30
    flexible-vlan-tagging;
    native-vlan-id 100;
    encapsulation flexible-ethernet-services;
    esi {
        00:00:00:00:00:00:00:00:00:79;
        all-active;
        df-election-type {
            preference {
                value 300;
            }
        }
    }
    aggregated-ether-options {
        lacp {
            active;
            system-id 00:00:00:00:00:79;
        }
    }
    unit 100 {
        encapsulation vlan-bridge;
        vlan-id 100;
    }
    
    [edit]
    juniper@PE9# show interfaces ae0 
    Nov 02 17:26:49
    flexible-vlan-tagging;
    native-vlan-id 100;
    encapsulation flexible-ethernet-services;
    esi {
        00:00:00:00:00:00:00:00:00:79;
        all-active;
        df-election-type {
            preference {
                value 200;
            }
        }
    }
    aggregated-ether-options {
        lacp {
            active;
            system-id 00:00:00:00:00:79;
        }
    }
    unit 100 {
        encapsulation vlan-bridge;
        vlan-id 100;
    }​

    I can see route evpn in EVPN.evpn.0 on each PE but seem these routes could not be installed in EVPN MAC table.

    juniper@PE2> show route table EVPN.evpn.0 
    Nov 02 10:36:41
    
    EVPN.evpn.0: 23 destinations, 41 routes (23 active, 0 holddown, 0 hidden)
    + = Active Route, - = Last Active, * = Both
    
    1:172.30.0.7:0::79::FFFF:FFFF/192 AD/ESI        
                       *[BGP/170] 15:18:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    1:172.30.0.7:5::79::0/192 AD/EVI        
                       *[BGP/170] 15:18:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    1:172.30.0.9:0::79::FFFF:FFFF/192 AD/ESI        
                       *[BGP/170] 15:18:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:42, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    1:172.30.0.9:5::79::0/192 AD/EVI        
                       *[BGP/170] 15:18:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:42, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.2:5::100::2c:6b:f5:5a:e0:f0/304 MAC/IP        
                       *[EVPN/170] 15:28:57
                           Indirect
    2:172.30.0.2:5::100::50:03:0a:06:60:04/304 MAC/IP        
                       *[EVPN/170] 15:28:57
                           Indirect
    2:172.30.0.7:5::100::2c:6b:f5:c2:24:c0/304 MAC/IP        
                       *[BGP/170] 15:14:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.7:5::100::2c:6b:f5:ff:ec:f0/304 MAC/IP        
                       *[BGP/170] 15:18:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.9:5::100::2c:6b:f5:0c:f6:f0/304 MAC/IP        
                       *[BGP/170] 15:18:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:42, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.2:5::100::2c:6b:f5:5a:e0:f0::192.168.10.254/304 MAC/IP        
                       *[EVPN/170] 15:28:57
                           Indirect
    2:172.30.0.2:5::100::50:03:0a:06:60:04::192.168.10.1/304 MAC/IP        
                       *[EVPN/170] 15:14:17
                           Indirect
    2:172.30.0.7:5::100::2c:6b:f5:c2:24:c0::192.168.10.2/304 MAC/IP        
                       *[BGP/170] 15:14:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.7:5::100::2c:6b:f5:c2:24:c0::192.168.10.15/304 MAC/IP        
                       *[BGP/170] 06:28:01, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.7:5::100::2c:6b:f5:c2:24:c0::192.168.10.16/304 MAC/IP        
                       *[BGP/170] 06:28:01, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.7:5::100::2c:6b:f5:c2:24:c0::192.168.10.17/304 MAC/IP        
                       *[BGP/170] 06:28:01, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.7:5::100::2c:6b:f5:c2:24:c0::192.168.10.18/304 MAC/IP        
                       *[BGP/170] 06:28:01, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.7:5::100::2c:6b:f5:c2:24:c0::192.168.10.19/304 MAC/IP        
                       *[BGP/170] 06:28:01, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.7:5::100::2c:6b:f5:c2:24:c0::192.168.10.20/304 MAC/IP        
                       *[BGP/170] 06:28:01, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.7:5::100::2c:6b:f5:ff:ec:f0::192.168.10.254/304 MAC/IP        
                       *[BGP/170] 15:18:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    2:172.30.0.9:5::100::2c:6b:f5:0c:f6:f0::192.168.10.254/304 MAC/IP        
                       *[BGP/170] 15:18:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:42, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    3:172.30.0.2:5::100::172.30.0.2/248 IM            
                       *[EVPN/170] 15:28:56
                           Indirect
    3:172.30.0.7:5::100::172.30.0.7/248 IM            
                       *[BGP/170] 15:18:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:26, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    3:172.30.0.9:5::100::172.30.0.9/248 IM            
                       *[BGP/170] 15:18:17, localpref 100, from 172.30.0.15
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
                        [BGP/170] 06:27:42, localpref 100, from 172.30.0.16
                          AS path: I, validation-state: unverified
                        >  to 172.31.23.3 via ge-0/0/4.23, label-switched-path pe2-pe7
    
    juniper@PE2> 

    No corresponding mac-entry in the mac-table:

    juniper@PE2> show evpn mac-table 
    Nov 02 10:38:25
    
    MAC flags       (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
        O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC, P -Pinned MAC)
    
    Routing instance : EVPN
     Bridging domain : __EVPN__, VLAN : 100
       MAC                 MAC      Logical          NH     MAC         active
       address             flags    interface        Index  property    source
       2c:6b:f5:0c:f6:f0   DC                        1048581            172.30.0.9                    
       2c:6b:f5:ff:ec:f0   DC                        1048586            172.30.0.7                    
       50:03:0a:06:60:04   D        ge-0/0/3.100    
    
    juniper@PE2> 

    Did anyone face the same issue? 
    And pls correct me if I am wrong at any point.
    Thanks.







    ------------------------------
    Harry
    ------------------------------