サービス プロバイダ スタイルのインターフェイス設定を使用した VXLAN レイヤー 3 ゲートウェイ
PaaS(Platform-as-a-Service)とIaaS(Infrastructure-as-a-Service)の導入では、カスタマークラウドとプライベートクラウドプロバイダが、VXLANコアネットワーク上でネットワークトラフィックを転送するために、同じリーフデバイスを使用することがよくあります。カスタマークラウドおよびプライベートクラウドプロバイダは、サービスプロバイダスタイルのインターフェイス設定CLIを使用して、リーフデバイスをレイヤー3ゲートウェイとして動作するように設定できるようになりました。また、サービスプロバイダスタイルのCLIを使用して、同じリーフデバイス上の同じVLANにマッピングされる複数のインターフェイスを設定することもできます。
サービス プロバイダ スタイルの CLI は、次のデバイスで使用できます。
-
EX4650、QFX5110、QFX5120-32C、QFX5120-48T、QFX5120-48Y、QFX5120-48YM:Junos OSリリース22.2R1以降
サービス プロバイダ スタイルの CLI を使用して、次のタスクを実行できます。
-
1 つの物理インターフェイスに複数の論理インターフェイスを設定します。
-
リーフデバイスを、エッジルーティングされたブリッジング(ERB)と中央ルーティングされたブリッジング(CRB)のオーバーレイでレイヤー3ゲートウェイとして設定します。
-
IRB(統合型ルーティングおよびブリッジング)インターフェイスを仮想ネットワーク識別子(VNI)にマッピングします。
-
VXLANルーティングを実行します。
-
ERB オーバーレイを設定します。
-
CRB オーバーレイを設定します。
-
VLAN ID を設定します。
-
VLAN ID を「なし」に設定します。
-
VLAN 対応バンドル サービスを設定します。
-
仮想ゲートウェイのアドレスを構成します。
-
IRB インターフェイスを 1 つの VLAN に、または複数の IRB インターフェイスを複数の VLAN にマッピングします。
- VLAN ID と同じ VLAN ID を持つ IRB インターフェイスに VLAN ID を割り当てるか、別の VLAN ID を割り当てます。
利点
-
サービスプロバイダスタイルのインターフェイススタイルを使用して、リーフデバイスがレイヤー3ゲートウェイとして機能するよう設定できます。
-
また、サービスプロバイダスタイルのインターフェイス設定を使用して、1台のリーフデバイスに複数のインターフェイスを設定し、それらを同じVLANにマッピングすることもできます。
サービスプロバイダスタイルのインターフェイス設定を使用したERBオーバーレイのレイヤー3ゲートウェイ
リーフ1
set chassis aggregated-devices ethernet device-count 20 set interfaces et-2/0/5 description "To PORT-1 --> 1/13" set interfaces et-2/0/5 flexible-vlan-tagging set interfaces et-2/0/5 encapsulation extended-vlan-bridge set interfaces et-2/0/5 unit 100 vlan-id 100 set interfaces et-2/0/5 unit 200 vlan-id 200 set interfaces et-2/0/8 description "To Spine-1 in ae31" set interfaces et-2/0/8 ether-options 802.3ad ae31 set interfaces et-2/0/11 description "To Spine-1 in ae31" set interfaces et-2/0/11 ether-options 802.3ad ae31 set interfaces ae31 description "To Spine-1" set interfaces ae31 aggregated-ether-options lacp active set interfaces ae31 aggregated-ether-options lacp periodic fast set interfaces ae31 aggregated-ether-options lacp system-id 11:11:11:11:11:11 set interfaces ae31 unit 0 family inet address 10.40.1.2/24 set interfaces et-2/0/9 description "To spine-2" set interfaces et-2/0/9 unit 0 family inet address 10.50.1.2/24 set interfaces et-2/0/12:0 description "To CE-1 in ae12" set interfaces et-2/0/12:0 ether-options 802.3ad ae12 set interfaces ae12 description "To CE-1" set interfaces ae12 flexible-vlan-tagging set interfaces ae12 encapsulation extended-vlan-bridge set interfaces ae12 esi 00:12:12:12:12:12:12:12:12:12 set interfaces ae12 esi all-active set interfaces ae12 aggregated-ether-options lacp active set interfaces ae12 aggregated-ether-options lacp periodic fast set interfaces ae12 aggregated-ether-options lacp system-id 12:12:12:12:12:12 set interfaces ae12 unit 100 vlan-id 100 set interfaces ae12 unit 200 vlan-id 200 set interfaces lo0 unit 0 family inet address 10.10.10.10/24 primary set interfaces irb unit 100 virtual-gateway-accept-data set interfaces irb unit 100 family inet address 10.100.1.1/24 preferred set interfaces irb unit 100 family inet address 10.100.1.1/24 virtual-gateway-address 10.100.1.254 set interfaces irb unit 100 family inet6 address abcd::0010:0100:0001:0001/96 preferred set interfaces irb unit 100 family inet6 address abcd::abcd::0010:0100:0001:0001/96 virtual-gateway-address abcd::0192:0100:0001:0254 set interfaces irb unit 100 virtual-gateway-v4-mac 00:10:01:00:01:fe set interfaces irb unit 100 virtual-gateway-v6-mac 00:10:01:00:02:fe set interfaces irb unit 200 virtual-gateway-accept-data set interfaces irb unit 200 family inet address 10.200.1.1/24 preferred set interfaces irb unit 200 family inet address 10.200.1.1/24 virtual-gateway-address 10.200.1.254 set interfaces irb unit 200 family inet6 address abcd::abcd::0010:0200:0001:0001/24 preferred set interfaces irb unit 200 family inet6 address abcd::abcd::0010:0200:0001:0001/24 virtual-gateway-address abcd::0010:0200:0001:0254 set interfaces irb unit 200 virtual-gateway-v4-mac 00:10:01:00:01:fe set interfaces irb unit 200 virtual-gateway-v6-mac 00:10:01:00:00:01:fe set routing-instances evpn_vlan_aware instance-type mac-vrf set routing-instances evpn_vlan_aware protocols evpn encapsulation vxlan set routing-instances evpn_vlan_aware protocols evpn default-gateway no-gateway-community set routing-instances evpn_vlan_aware vtep-source-interface lo0.0 set routing-instances evpn_vlan_aware service-type vlan-aware set routing-instances evpn_vlan_aware route-distinguisher 1010:100200 set routing-instances evpn_vlan_aware vrf-target target:666:100200 set routing-instances evpn_vlan_aware vlans V100 vlan-id 100 set routing-instances evpn_vlan_aware vlans V100 interface et-2/0/5.100 set routing-instances evpn_vlan_aware vlans V100 interface ae12.100 set routing-instances evpn_vlan_aware vlans V100 l3-interface irb.100 set routing-instances evpn_vlan_aware vlans V100 vxlan vni 1100 set routing-instances evpn_vlan_aware vlans V200 vlan-id 200 set routing-instances evpn_vlan_aware vlans V200 interface et-2/0/5.200 set routing-instances evpn_vlan_aware vlans V200 interface ae12.200 set routing-instances evpn_vlan_aware vlans V200 l3-interface irb.200 set routing-instances evpn_vlan_aware vlans V200 vxlan vni 1200 set routing-options router-id 10.10.10.10 set routing-options autonomous-system 666 set protocols bgp group vteps type internal set protocols bgp group vteps local-address 10.10.10.10 set protocols bgp group vteps family evpn signaling set protocols bgp group vteps neighbor 10.30.30.30 set protocols bgp group vteps neighbor 10.20.20.20 set protocols ospf area 0.0.0.0 interface et-2/0/9.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols ospf area 0.0.0.0 interface ae31.0
スパイン1
set chassis aggregated-devices ethernet device-count 20 set interfaces et-0/0/10 description "To Leaf-1 in ae31" set interfaces et-0/0/10 ether-options 802.3ad ae31 set interfaces et-0/0/13 description "To Leaf-1 in ae31" set interfaces et-0/0/13 ether-options 802.3ad ae31 set interfaces ae31 description "To Leaf-1" set interfaces ae31 aggregated-ether-options lacp active set interfaces ae31 aggregated-ether-options lacp periodic fast set interfaces ae31 aggregated-ether-options lacp system-id 30:30:30:30:30:30 set interfaces ae31 unit 0 family inet address 10.40.1.1/24 set interfaces et-0/0/1 description "To Leaf-2" set interfaces et-0/0/1 unit 0 family inet address 10.30.1.1/24 set interfaces et-0/0/16 description "To Leaf-3" set interfaces et-0/0/16 unit 0 family inet address 10.40.1.1/24 set interfaces lo0 unit 0 family inet address 10.50.40.1/24 primary set protocols ospf area 0.0.0.0 interface et-0/0/1.0 set protocols ospf area 0.0.0.0 interface et-0/0/16.0 set protocols ospf area 0.0.0.0 interface ae31.0
サービスプロバイダースタイルのインターフェイス設定を使用したCRBオーバーレイ構成のレイヤー3ゲートウェイ
このサンプル設定では、サービスプロバイダスタイルのインターフェイス設定を使用して、レイヤ3ゲートウェイ、CRBオーバーレイ、仮想ゲートウェイアドレス、MAC-VRFインスタンス、VLAN IDを持つVLANを作成します。簡潔にするために、ここでは1台のリーフデバイスと1台のスパイン用の設定のみを提供しています。
リーフ1
set chassis aggregated-devices ethernet device-count 20 set interfaces et-2/0/5 description "To PORT-1 --> 1/13" set interfaces et-2/0/5 flexible-vlan-tagging set interfaces et-2/0/5 encapsulation extended-vlan-bridge set interfaces et-2/0/5 unit 100 vlan-id 100 set interfaces et-2/0/5 unit 200 vlan-id 200 set interfaces et-2/0/8 description "To Spine-1 in ae31" set interfaces et-2/0/8 ether-options 802.3ad ae31 set interfaces et-2/0/11 description "To Spine-1 in ae31" set interfaces et-2/0/11 ether-options 802.3ad ae31 set interfaces ae31 description "To Spine-1" set interfaces ae31 aggregated-ether-options lacp active set interfaces ae31 aggregated-ether-options lacp periodic fast set interfaces ae31 aggregated-ether-options lacp system-id 11:11:11:11:11:11 set interfaces ae31 unit 0 family inet address 10.4.1.2/24 set interfaces et-2/0/9 description "To spine-2" set interfaces et-2/0/9 unit 0 family inet address 10.5.1.2/24 set interfaces et-2/0/12:0 description "To CE-1 in ae12" set interfaces et-2/0/12:0 ether-options 802.3ad ae12 set interfaces ae12 description "To CE-1" set interfaces ae12 flexible-vlan-tagging set interfaces ae12 encapsulation extended-vlan-bridge set interfaces ae12 esi 00:12:12:12:12:12:12:12:12:12 set interfaces ae12 esi all-active set interfaces ae12 aggregated-ether-options lacp active set interfaces ae12 aggregated-ether-options lacp periodic fast set interfaces ae12 aggregated-ether-options lacp system-id 12:12:12:12:12:12 set interfaces ae12 unit 100 vlan-id 100 set interfaces ae12 unit 200 vlan-id 200 set interfaces lo0 unit 0 family inet address 10.10.10.10/24 primary set routing-instances evpn_vlan_aware instance-type mac-vrf set routing-instances evpn_vlan_aware protocols evpn encapsulation vxlan set routing-instances evpn_vlan_aware vtep-source-interface lo0.0 set routing-instances evpn_vlan_aware service-type vlan-aware set routing-instances evpn_vlan_aware route-distinguisher 1010:100200 set routing-instances evpn_vlan_aware vrf-target target:666:100200 set routing-instances evpn_vlan_aware vlans V100 interface et-2/0/5.100 set routing-instances evpn_vlan_aware vlans V100 interface ae12.100 set routing-instances evpn_vlan_aware vlans V100 vxlan vni 1100 set routing-instances evpn_vlan_aware vlans V200 interface et-2/0/5.200 set routing-instances evpn_vlan_aware vlans V200 interface ae12.200 set routing-instances evpn_vlan_aware vlans V200 vxlan vni 1200 set routing-options router-id 10.10.10.10 set routing-options autonomous-system 666 set protocols bgp group vteps type internal set protocols bgp group vteps local-address 10.10.10.10 set protocols bgp group vteps family evpn signaling set protocols bgp group vteps neighbor 10.1.1.30 set protocols bgp group vteps neighbor 10.5.5.50 set protocols bgp group vteps neighbor 10.4.4.40 set protocols bgp group vteps neighbor 10.2.2.20 set protocols ospf area 0.0.0.0 interface et-2/0/9.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols ospf area 0.0.0.0 interface ae31.0
スパイン1
set chassis aggregated-devices ethernet device-count 20 set interfaces et-0/0/0 description "To CE-3 in ae34" set interfaces et-0/0/0 ether-options 802.3ad ae34 set interfaces ae34 description "To CE-1" set interfaces ae34 flexible-vlan-tagging set interfaces ae34 encapsulation extended-vlan-bridge set interfaces ae34 esi 00:34:34:34:34:34:34:34:34:34 set interfaces ae34 esi all-active set interfaces ae34 aggregated-ether-options lacp active set interfaces ae34 aggregated-ether-options lacp periodic fast set interfaces ae34 aggregated-ether-options lacp system-id 34:34:34:34:34:34 set interfaces ae34 unit 100 vlan-id 100 set interfaces ae34 unit 200 vlan-id 200 set interfaces et-0/0/10 description "To Leaf-1 in ae31" set interfaces et-0/0/10 ether-options 802.3ad ae31 set interfaces ae31 description "To Leaf-1" set interfaces ae31 aggregated-ether-options lacp active set interfaces ae31 aggregated-ether-options lacp periodic fast set interfaces ae31 aggregated-ether-options lacp system-id 30:30:30:30:30:30 set interfaces ae31 unit 0 family inet address 10.40.1.1/24 set interfaces et-0/0/11 description "To PORT-5 --> 1/1" set interfaces et-0/0/11 flexible-vlan-tagging set interfaces et-0/0/11 speed 40g set interfaces et-0/0/11 encapsulation extended-vlan-bridge set interfaces et-0/0/11 unit 100 vlan-id 100 set interfaces et-0/0/11 unit 200 vlan-id 200 set interfaces et-0/0/12 description "To PORT- --> 1/5" set interfaces et-0/0/12 flexible-vlan-tagging set interfaces et-0/0/12 encapsulation extended-vlan-bridge set interfaces et-0/0/12 unit 100 vlan-id 100 set interfaces et-0/0/12 unit 200 vlan-id 200 set interfaces et-0/0/13 description "To Leaf-1 in ae31" set interfaces et-0/0/13 ether-options 802.3ad ae31 set interfaces et-0/0/1 description "To Leaf-2" set interfaces et-0/0/1 unit 0 family inet address 10.40.1.1/24 set interfaces et-0/0/16 description "To Leaf-3" set interfaces et-0/0/16 unit 0 family inet address 10.30.1.1/24 set interfaces irb unit 100 virtual-gateway-accept-data set interfaces irb unit 100 family inet address 10.100.1.1/16 preferred set interfaces irb unit 100 family inet address 10.100.1.1/16 virtual-gateway-address 10.100.1.254 set interfaces irb unit 100 family inet6 address abcd::0010:0100:0001:0001/16 preferred set interfaces irb unit 100 family inet6 address abcd::0010:0100:0001:0001/96 virtual-gateway-address abcd::0010:0100:0001:0254 set interfaces irb unit 100 virtual-gateway-v4-mac 00:10:01:00:01:fe set interfaces irb unit 100 virtual-gateway-v6-mac 00:10:01:00:02:fe set interfaces irb unit 200 virtual-gateway-accept-data set interfaces irb unit 200 family inet address 10.200.1.1/16 preferred set interfaces irb unit 200 family inet address 10.200.1.1/16 virtual-gateway-address 10.200.1.254 set interfaces irb unit 200 family inet6 address abcd::0010:0200:0001:0001/96 preferred set interfaces irb unit 200 family inet6 address abcd::0010:0200:0001:0001/96 virtual-gateway-address abcd::0010:0200:0001:0254 set interfaces irb unit 200 virtual-gateway-v4-mac 00:20:02:00:01:fe set interfaces irb unit 200 virtual-gateway-v6-mac 00:20:02:00:02:fe set interfaces lo0 unit 0 family inet address 10.300.40.40/32 primary set routing-instances evpn_vlan_aware instance-type mac-vrf set routing-instances evpn_vlan_aware protocols evpn encapsulation vxlan set routing-instances evpn_vlan_aware vtep-source-interface lo0.0 set routing-instances evpn_vlan_aware service-type vlan-aware set routing-instances evpn_vlan_aware route-distinguisher 4040:100200 set routing-instances evpn_vlan_aware vrf-target target:666:100200 set routing-instances evpn_vlan_aware vlans V100 vlan-id 100 set routing-instances evpn_vlan_aware vlans V100 interface et-0/0/11.100 set routing-instances evpn_vlan_aware vlans V100 interface et-0/0/12.100 set routing-instances evpn_vlan_aware vlans V100 interface ae34.100 set routing-instances evpn_vlan_aware vlans V100 l3-interface irb.100 set routing-instances evpn_vlan_aware vlans V100 vxlan vni 1100 set routing-instances evpn_vlan_aware vlans V200 vlan-id 200 set routing-instances evpn_vlan_aware vlans V200 interface et-0/0/11.200 set routing-instances evpn_vlan_aware vlans V200 interface et-0/0/12.200 set routing-instances evpn_vlan_aware vlans V200 interface ae34.200 set routing-instances evpn_vlan_aware vlans V200 l3-interface irb.200 set routing-instances evpn_vlan_aware vlans V200 vxlan vni 1200 set routing-options router-id 40.40.40.40 set routing-options autonomous-system 666 set protocols bgp group vteps type internal set protocols bgp group vteps local-address 10.10.10.10 set protocols bgp group vteps family evpn signaling set protocols bgp group vteps neighbor 10.20.30.30 set protocols bgp group vteps neighbor 10.30.50.50 set protocols bgp group vteps neighbor 10.40.10.10 set protocols bgp group vteps neighbor 10.50.20.20 set protocols ospf area 0.0.0.0 interface et-0/0/1.0 set protocols ospf area 0.0.0.0 interface et-0/0/16.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols ospf area 0.0.0.0 interface ae31.0