示例：为 LAN-WAN 路由配置服务链
此示例说明如何为 LAN-WAN 路由配置服务链。
要求
此示例使用以下硬件和软件组件：
-
运行 Junos OS 18.1R1 版的 NFX150
概述
此示例说明如何配置设备的各个层，以使来自 LAN 网络的流量能够进入设备，流经 OVS，退出设备并进入 WAN 网络。
配置
映射接口
分步过程
-
将 heth-0-0 物理端口映射到 FPC0 接口。
user@host# set vmhost virtualization-options interfaces ge-0/0/0 mapping interface heth-0-0 -
将 FPC1 接口 ge-1/0/2 映射到物理端口 heth-0-4。
user@host# set vmhost virtualization-options interfaces ge-1/0/2 mapping interface heth-0-4
配置第 2 层数据路径
分步过程
-
为 LAN 端接口配置 VLAN。
user@host# set vlans vlan100 vlan-id 100 -
配置 LAN 端前面板端口并将其添加到 LAN 端 VLAN。
user@host# set interfaces ge-0/0/0 unit 0 family ethernet-switching interface-mode trunk user@host# set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members vlan100 -
将面向内部的接口配置为中继端口，并将其添加到 LAN 端 VLAN。面向内部的接口通常是中继端口，因为它们必须支持来自多个前面板端口和 VLAN 的流量。
user@host# set interfaces sxe-0/0/0 unit 0 family ethernet-switching interface-mode trunk user@host# set interfaces sxe-0/0/0 unit 0 family ethernet-switching vlan members vlan100
配置第 3 层数据路径
分步过程
-
在 ge-1/0/0 上配置 VLAN 标记：
user@host# set interfaces ge-1/0/0 vlan-tagging user@host# set interfaces ge-1/0/0 unit 0 vlan-id 100 user@host# set interfaces ge-1/0/0 unit 0 family inet address 192.0.3.1/24 -
在 ge-1/0/2 上配置 VLAN 标记：
user@host# set interfaces ge-1/0/2 vlan-tagging user@host# set interfaces ge-1/0/2 unit 0 vlan-id 200 user@host# set interfaces ge-1/0/2 unit 0 family inet address 203.0.113.2/30
验证
验证接口的状态
目的
验证第 2 层和第 3 层接口的状态。
行动
要验证接口的状态，请执行以下作：
-
验证物理端口的状态。
user@host> show interfaces heth-0-0 statistics Physical interface: heth-0-0, Enabled, Physical link is Up Link-level type: Ethernet, Media type: Copper, MTU: 9192, Speed: 1Gbps, Duplex: Full-duplex, Auto-negotiation: Enabled Device flags : Present Running Current address: 00:00:5e:00:53:8d, Hardware address: 00:00:5e:00:53:8d Input packets : 272469 Output packets: 674 MAC statistics: Input bytes: 17438016, Input packets: 272469, Output bytes: 48658, Output packets: 674 VF statistics: VF Number: 0, PCI Address: 0000:02:10:1, Mapped to: ge-0/0/0 Input bytes: 17433984, Input packets: 272406, Output bytes: 48658, Output packets: 674, Multicast packets: 272406 VF Number: 1, PCI Address: 0000:02:10:5, Mapped to: ge-0/0/0 Input bytes: 0, Input packets: 0, Output bytes: 0, Output packets: 0, Multicast packets: 0 VF Number: 2, PCI Address: 0000:02:11:1, Mapped to: ge-0/0/0 Input bytes: 0, Input packets: 0, Output bytes: 0, Output packets: 0, Multicast packets: 0 VF Number: 3, PCI Address: 0000:02:11:5, Mapped to: ge-0/0/0 Input bytes: 0, Input packets: 0, Output bytes: 0, Output packets: 0, Multicast packets: 0 -
验证第 2 层 （ge-0/0/x） 和第 3 层 （ge-1/0/x） 接口的状态。
user@host > show interfaces interface-name statistics例如：
user@host > show interfaces ge-0/0/0 statistics Physical interface: ge-0/0/0, Enabled, Physical link is Up Interface index: 144, SNMP ifIndex: 518 Link-level type: Ethernet, MTU: 9192, LAN-PHY mode, Speed: 1000mbps, BPDU Error: None, Loop Detect PDU Error: None, Ethernet-Switching Error: None, MAC-REWRITE Error: None, Loopback: Disabled, Source filtering: Disabled, Flow control: Enabled Device flags : Present Running Interface flags: SNMP-Traps Internal: 0x4000 Link flags : None CoS queues : 8 supported, 8 maximum usable queues Current address: 00:00:5e:00:53:43, Hardware address: 00:00:5e:00:53:43 Last flapped : 2018-04-18 05:38:22 UTC (2d 10:07 ago) Statistics last cleared: Never Input rate : 0 bps (0 pps) Output rate : 0 bps (0 pps) Input errors: 0, Output errors: 0 Active alarms : None Active defects : None PCS statistics Seconds Bit errors 0 Errored blocks 0 Ethernet FEC statistics Errors FEC Corrected Errors 0 FEC Uncorrected Errors 0 FEC Corrected Errors Rate 0 FEC Uncorrected Errors Rate 0 PRBS Statistics : Disabled Interface transmit statistics: Disabled Logical interface ge-0/0/0.0 (Index 333) (SNMP ifIndex 524) Flags: Up SNMP-Traps 0x24024000 Encapsulation: Ethernet-Bridge Input packets : 147888 Output packets: 22 Protocol eth-switch, MTU: 9192 Flags: Is-Primary