Using Static, eBGP, PIM, and OSPF Protocols to Connect to Third-Party Network Devices

Step-by-Step Procedure

A routed virtual network is used to extend a fabric that is managed by Contrail Networking to a third-party device. By creating a routed virtual network, you create layer 3 links between border gateway devices and third-party devices. You can run eBGP, static, PIM, or OSPF routing protocols between these border gateway devices and third-party devices.

Contrail Networking Release 2003 supports creating a routed virtual network from the Overlay>Virtual Networks page of the Contrail Command UI.

You create two routed virtual networks, VN-BLUE and VN-GREEN, for this workflow. Follow these steps to create a routed virtual network:

1. Navigate to Overlay>Virtual Networks.

   The All Networks page is displayed.

2. Click Create to create a network.

   The Create Virtual Network page is displayed.

3. Enter VN-BLUE in the Name field.

4. Select Routed VN Fabric Type to create a routed virtual network.

   With Contrail Networking Release 2003, you select Routed from the VN Fabric Type field to create a routed virtual network. See Figure 2.

   Figure 2: Create Routed Virtual Network

5. In the Subnets section, click +Add to add a new subnet.

   Enter the CIDR for this routed virtual network in the CIDR field.

   You do not configure Allocation Pools, Gateway, DNS or DHCP for the subnet CIDR of a routed virtual network. These fields are greyed out by default.

   Note:

   Do not configure options such as Host Routes; Floating IP Pools; Fat Flows; Routing, Bridging, and Policies; and Advanced options for a routed virtual network. Fields with default values can be left as is.

6. Click Create to create the routed virtual network.

   The routed virtual network that you created is displayed on the Virtual Networks page.

Step-by-Step Procedure

A virtual port group (VPG) is a group of one or more physical interfaces attached to one or more virtual machine interfaces (VMI). Each VMI object corresponds to a VLAN ID and is attached to a Virtual Network. For more information, see Virtual Port Groups.

The VPG workflow provides a framework for you to configure the connection between the external device (PNF) and the border gateway devices of the fabric by using the EVPN ESI-LAG. The VPG is configured as a routed VPG and is associated with the routed virtual networks.

Contrail Networking Release 2003 supports creating a routed virtual port group from the Overlay>Virtual Port Group page of the Contrail Command UI. A routed VPG can only contain routed virtual networks.

Follow these steps to create a routed virtual network:

1. Navigate to Overlay>Virtual Port Group>Create Virtual Port Group.

   The Create Virtual Port Group page is displayed.

2. Enter a name for the virtual port group in the Virtual Port Group Name field.

3. Select Routed virtual port group type.

   With Contrail Networking Release 2003, you can create a routed virtual port group from the Contrail Command UI. Select the Routed option button to create a routed virtual port group. Select Layer 2 option button to create a virtual port group. See Figure 3.

   Figure 3: Create Routed Virtual Port Group

4. Select the fabric from the Fabric Name list.

   The available interfaces and physical routers in the selected fabric are listed in the Available Physical Interface box.

5. From the Available Physical Interface box, select the physical interfaces to be included in the virtual port group by clicking the arrow next each physical interface. The available physical interfaces are the interfaces available on TORs that are already onboarded. It also includes the associated physical router.

   The selected interfaces are displayed in the Assigned Physical Interface box.

   Figure 4: Assign Physical Interface

6. Enter the following information in the VLAN section.

   1. Select the routed virtual network from the Network list.

      For the blue network, select VN-BLUE. See Figure 5. For the green network, select VN-GREEN.

   2. Enter VLAN ID and the network to which the VLAN is associated.

      For VN-BLUE virtual network, enter 10. For VN-Green virtual network, enter 20.

   3. Enter the VPG name. If the Auto Display Name field is selected, this field is autogenerated from the virtual port group name.

   4. Select Auto Display Name if you want the VLAN name to be autogenerated from the virtual port group name.

   5. Select the Native/untagged check box to allow untagged virtual network. You cannot select the same virtual network more than once if the check box is not selected.

   Click +Add to add VN-GREEN routed virtual network information. Repeat steps provided in step 6.

   Figure 5: Select Network

7. Click Create.

   The newly created routed virtual port group is displayed on the Virtual Port Group page.

Step-by-Step Procedure

A logical router performs a set of tasks and replicates the functions that can be handled by a physical router. A logical router connects multiple virtual networks.

You create two logical routers, LR-BLUE and LR-Green, for this workflow. Follow these steps to create LR-Blue.

1. Navigate to Overlay>Logical Routers page.

   The Logical Routers page is displayed.

2. Click Create.

   The Create Logical Router page is displayed. See Figure 6.

3. Enter LR-Blue in the Name field.

4. Select Up from the Admin State list.

   This is the administrative state that you want the device to be in when the router is activated.

5. Select VXLAN Routing from the Logical Router Type list.

6. Select the fabric from the Choose Fabric list.

7. Select the networks you want to connect to this logical router from the Connected Networks list.

   When you want overlay tenant traffic to pass through a third-party device, select both tenant virtual networks and routed virtual network from the from the Connected Networks list.

   In this step, select VN-BLUE as the routed virtual network and select VLAN2-400 and VLAN2-401 as its two associated tenant virtual networks. See Figure 6.

   When you create the LR-Green logical router, you select VN-GREEN as the routed virtual network and select VLAN2-606 and VLAN2-880 as its two associated tenant virtual networks in this step.

   Figure 6: Create Logical Router

   Adding a Loopback Routed Virtual Network—Starting in Contrail Networking Release 2005, you can connect a loopback routed virtual network to a logical router. You can select a loopback routed virtual network from the Connected Networks list only if you have provided loopback subnet information during the fabric onboarding process. For more information, see Create a Fabric. Loopback subnet information can also be added after fabric onboarding from the Infrastructure>Fabric>Fabric Name>Namespaces page.

   Note:

   If you have not provided loopback subnet information during fabric onboarding, you will not be able to select a loopback routed virtual network from the Connected Networks list.

   When you select a routed virtual network from the Connected Networks list, the letter R is automatically added before the name to denote that the virtual network selected is a routed virtual network. See Figure 6.

   When you select a loopback routed virtual network from the Connected Networks list, the letter L is automatically added before the name to denote that the virtual network selected is a lookback routed virtual network. See Figure 7.

   When you select a routed virtual network, the Reconfigure Physical Routers link is enabled.

   Figure 7: Adding a Loopback Routed Virtual Network

8. Select the physical router(s) to which you want to extend virtual networks or routed virtual networks to, from the Extend to Physical Router list.

   A physical router provides routing capability to the logical router. You can extend the networks that you selected in step 7 to multiple physical routers.

9. After you extend the networks to the physical router, you can reconfigure the physical router by clicking Reconfigure Physical Router. See Figure 6.

   Step-by-Step Procedure

   After you click Reconfigure Physical Router, the Extend to Physical Routers setup page is displayed. See Figure 8.

   Enter the following information for each router.

   Figure 8: Extend to Physical Router

   Note:

   Loopback routed virtual network can only be configured with eBGP routing protocol.

   1. Select the VN-BLUE routed virtual network from the Routed Virtual Network list.

      If you select a loopback routed virtual network from the Routed Virtual Network list, the Routing Protocol list is disabled. The default protocol selected is eBGP. For example, see Figure 9.

      Starting in Contrail Networking Release 2005, you can configure BFD with eBGP, static Route, OSPF, and PIM protocols.

      Note:

      If you use an MX240, MX480, MX960, or MX10003 device as border gateway devices, you can only configure eBGP and static routing protocols on the border gateway devices.

   2. Enter IP address in the Routed Interface IP Address field.

      The routed IP address that you enter must be from the subnet that you provided while creating the routed virtual network.

      If you have selected a loopback routed virtual network from the Routed Virtual Network list, the Loopback IP Address field is displayed instead of the Routed Interface IP Address field. In this case, the loopback IP address that you enter must be from the loopback subnet that you provided during the fabric onboarding process.

      Figure 9: Selecting a Loopback Routed Virtual Network

   3. Select eBGP, Static Routes, OSPF, or PIM routing protocols from the Routing Protocol list.

      Note:

      If you use an MX240, MX480, MX960, or MX10003 device as border gateway devices, you can only configure eBGP and static routing protocols on the border gateway devices.

      • Step-by-Step Procedure

        Follow these steps if you have either selected eBGP as the routing protocol (Figure 8) or if you have selected a loopback routed virtual network from the Routed Virtual Network list (Figure 7):

        1. Enter Autonomous System (AS) number in the Local ASN field.

           This is the logical router (VRF routing instance) AS number. If you do not provide an AS number, the overlay iBGP AS number provided during fabric onboarding will be used.

        2. Enter peer AS number in the Peer ASN field.

           This is the AS number of the third-party device.

        3. Enter the IP address of the unmanaged third-party device in the Peer IP field.

           Note:

           The IP address that you enter must be from the subnet that you provided while creating the routed virtual network.

        4. Select import routing policies that you want to apply to this eBGP session from the Import Route Policies list.

           Note:

           You can add routing policies from the Overlay>Routing>Routing Policies page of the Contrail Command UI.

        5. Select export routing policies that you want to apply to this eBGP session from the Export Route Policies list.

        6. (Optional) Enter md5 authentication key in the md5 Authentication Key field.

           You can enter the key in plain text or in encrypted format that starts with $9.

        7. (Optional) Select BFD check box to enable bidirectional forward detection.

           After you enable BFD, provide detection time and multiplier information in the Interval (ms) and Multiplier fields respectively.

        8. If you have selected another physical router in step 8, click the next tab to enter information.

           Repeat steps 9.a through 9.c.

        9. Click Submit to submit configuration information.

      • Step-by-Step Procedure

        Enter the following information if you have selected Static Routes as the protocol:

        Note:

        In order to select Static Routes as the protocol, you must create an interface route table.

        Follow these steps to create an interface route table:

        • Navigate to Overlay>Routing>Interface Route Tables and click Add.

          The Create Interface Route Tables page is displayed.

        • Enter a name for the interface route table in the Name field.

        • Click Add to add Prefix and Community information.

        • (Optional) Click Add to define another prefix list.

        • Click Create to create the interface route table.

        1. Select the interface route table from the Routing Table list. See Figure 10.

           The interface route table lists the prefixes that can be used in the static route configuration.

        2. Enter next hop IP address in the Remote Next Hop Address field.

        3. Click Submit to submit configuration information.

           Figure 10: Static Route Routing Protocol

      • Step-by-Step Procedure

        Enter the following information if you have selected OSPF as the routing protocol:

        Note:

        You cannot configure OSPF routing protocol on the border gateway devices if you use MX240, MX480, MX960, or MX10003 devices as border gateway devices.

        1. Enter the area ID in the Area ID field. See Figure 11.

           The area ID is provided in x.x.x.x format.

        2. Select any one of the following area type.

           • NSSA Area—An NSSA Area or a not-so-stubby area allows external routes to be flooded within the area.

           • Regular Area—Regular areas are areas that are not backbone areas (Area ID: 0.0.0.0), Stub areas, or NSSA areas.

           • Stub Area—Stub areas are areas through which autonomous system (AS) external advertisements are not flooded.

           For more information, see Configuring OSPF Areas.

           Note:

           If the area ID that you enter is 0.0.0.0, the Area Type field is disabled.

        3. Enter hello interval in the Hello Interval [Seconds] field. The default value is 10 seconds.

        4. Enter dead interval in the Dead Interval [Seconds] field. The default value is 40 seconds.

        5. Select import routing policies that you want to apply to this OSPF session from the Import Route Policies list.

           Note:

           You can add routing policies from the Overlay>Routing>Routing Policies page of the Contrail Command UI.

        6. Select export routing policies that you want to apply to this OSPF session from the Export Route Policies list.

        7. (Optional) Enter md5 authentication key in the md5 Authentication Key field.

           You can enter the key in plain text or in encrypted format that starts with $9.

        8. (Optional) Select BFD check box to enable bidirectional forward detection.

           After you enable BFD, provide detection time and multiplier information in the Interval (ms) and Multiplier fields respectively.

        9. Select Redistribute Loopback to advertise loopback IP address in an area type.

           Redistribute loopback IP address can be selected only for one OSPF area type.

        10. Select Originate Summary LSA check box to flood link-state advertisement (LSA) summary in to the selected area type.

            This check box is disabled if

            • the area ID that you enter is 0.0.0.0.

            • you do not define an area type.

        11. Click Submit to submit configuration information.

            Figure 11: OSPF Routing Protocol

      • Step-by-Step Procedure

        Enter the following information if you have selected PIM as the routing protocol:

        Note:

        You cannot configure PIM routing protocol on the border gateway devices if you use MX240, MX480, MX960, or MX10003 devices as border gateway devices.

        1. Enter rendezvous point (RP) IP address in the RP IP Address field. See Figure 12.

           The RP IP address is the IP address of the router that receives multicast traffic. This IP address is autopopulated for every physical router. If the same physical router is allocated an RP IP address when configuring another router virtual network, this RP IP Address field is autopopulated with the same RP IP address.

        2. PIM Mode field is disabled. The default PIM mode is Sparse-dense.

        3. (Optional) Select BFD check box to enable bidirectional forward detection.

           After you enable BFD, provide detection time and multiplier information in the Interval (ms) and Multiplier fields respectively.

        4. Select Enable PIM on all interfaces check box to enable PIM on all IRB interfaces of the VRF.

        5. Click Submit to submit configuration information.

           Figure 12: PIM Routing Protocol

10. Enter the routed VXLAN ID in the VxLAN Network Identifier field,

11. Click Create to create the logical router.