close

keyboard_arrow_left

Table of Contents Expand all

play_arrow Introduction
- play_arrow Overview
- play_arrow Access and Manage Paragon Automation Account
play_arrow Administration
- play_arrow Introduction
  - Administration Overview
  - Administration Workflow
- play_arrow Organization Management
- play_arrow Site Management
- play_arrow User Management
- play_arrow Inventory Management
  - About the Inventory Page
  - Assign a Device to a Site
- play_arrow Audit Logs
  - Audit Logs Overview
  - About the Audit Logs Page
- play_arrow Tags
  - About the Tags Page
  - Manage Tags
play_arrow Device Life Cycle Management
- play_arrow Introduction
- play_arrow Day-Wise Activities for Device Life Cycle Management
- play_arrow Field Technician User Interface
  - Field Technician UI Overview
  - Working with Field Technician UI Pages
- play_arrow Onboarding Profiles
- play_arrow Plan Device Onboarding
- play_arrow View Device Onboarding
- play_arrow Device Management
play_arrow Observability
- play_arrow Introduction
  - Observability Overview
- play_arrow Health Dashboard
- play_arrow Troubleshoot Devices
- play_arrow View Network Topology
play_arrow Trust and Compliance
- play_arrow Introduction
  - Trust and Compliance Overview
  - Perform Compliance Scan and Manage Checklists
- play_arrow Manage Trust Settings and Trust Scores
- play_arrow Manage Compliance Scans
- play_arrow Manage Vulnerabilities
- play_arrow Monitor Integrity
play_arrow Service Orchestration
- play_arrow Introduction
  - Service Orchestration Overview
  - Service Provisioning Workflow
- play_arrow View Service Design Catalog
- play_arrow Manage Customers
- play_arrow Add Resources for Network Services
- play_arrow Manage Service Instances
- play_arrow Provision VPN Services
- play_arrow Monitor Service Order Execution Workflows
play_arrow Active Assurance
- play_arrow Introduction
- play_arrow Test Agents
- play_arrow Tests and Monitors
- play_arrow Test Templates
  - About the Test Templates Page
  - Create a Test Template
play_arrow Paragon Shell CLI Reference

list Table of Contents

English

Add EVPN Service Site Details

date_range 27-Aug-24

arrow_backward

arrow_forward

An EVPN service is provisioned on a collection of sites to exchange network traffic over a shared infrastructure with a common layer 2 technology such as Ethernet. Use the Site Settings section of the Add L2 VPN Service page to enter details of sites that you want to connect to the EVPN.

Note:

Ethernet VPN (EVPN) is the only L2VPN service supported in this release.

You configure the following in the Site Settings section:

General details (site ID, site VPN flavor, location, devices, and MAC loop prevention parameters) about the site. See Add EVPN Site.
Parameters for site network access (connection with the service provider network). See Add EVPN Site Network Access Parameters.

Add EVPN Site

Prerequisite

Before adding the EVPN service site details, you must create a new EVPN service instance and enter general details about the service. Follow steps 1 to 4 of the Add an EVPN Service Instance procedure to create a new instance and add EVPN service general details.

An EVPN site refers to the geographical area where the VPN service spans. To add an EVPN service site in the Site Settings section:

Click the add (+) icon on the top-right corner of the Sites section.
The Add Site page appears.
Enter site details by referring to Table 1.
Do any of the following:
- Click Cancel to exit the Add Site page without saving the changes you made.
- Click OK to save the site details you added.
  
  The site you added is listed in the Sites table.
You can view the configured site properties by expanding site-ID > Properties.

Configure the network access parameters. See Add EVPN Site Network Access Parameters.

Table 1: Fields on the Add Site Page (L2VPN)
Field	Description
Site ID	Enter a unique site ID to identify the site in the network. The site ID can be a set of alphanumeric characters, space, and special character hyphen (-). The maximum number of characters allowed is 64.
Site VPN Flavor	Define how you want to connect the site to the VPN. For example, a site can connect to a single VPN or multiple VPNs. Only single site VPN flavor (site-vpn-flavor-single) is supported in this release. In the single site VPN flavor, the site is connected to only one VPN.
Locations
Location ID	Enter a unique ID for a location in the site. For example, MAN for Manhattan and BRO for Brooklyn in the New York site.
Address	Enter the address (number and street) of the location in a site.
City	Enter the city where the site is located.
Country Code	Enter the ISO alpha-2 code of the country where the site is located. For example, ZA for South Africa and CH for Switzerland.
Postal Code	Enter the postal code of the location in the site.
State	Enter the state or region (in countries where there are no states) where the site is located.
Devices
Devices	Enter or select the CE devices to be used for the EVPN service at the site. This parameter allows the customer to request for devices from the service provider to be installed at the site.
MAC Loop Prevention
Frequency	Enter the number of times that MAC address duplication is to be detected in a default time interval of 180 seconds or 3 minutes. When a MAC address is detected as duplicate, it is added to a list of duplicate MAC addresses. The default frequency is 5.
Retry Timer	Set the retry interval (in seconds) for a duplicate MAC address. Enter a value in the range 60 to 21600. After the retry timer expires, the duplicate MAC address is removed from the MAC-VRF table (Virtual Routing and Forwarding table for MAC addresses) on PE devices.

Add EVPN Site Network Access Parameters

Prerequisite:

Add EVPN Site.

After you add a site for the EVPN service, you must configure the parameters for site network access (connection) between the site and the service provider network. An L2VPN site network access refers to a logical Ethernet connection from a site to the L2VPN service in the provider network.

To set site network access parameters:

Select and expand the site name in the Sites table.
Expand Site Network Access and click the add (+) icon above the Site Network Access table.
The Add Connection page appears.

Enter the network access ID and device reference values by referring to the following table:

Table 2: Network Access ID and Device Reference Parameters (L2VPN)
Field	Description
Network Access ID	Enter a unique ID for the connection between the site and the service provider network.
Device Reference	Click the drop-down list to select a CE device for the connection. The drop-down list displays the devices that you specified on the Add Sites page.

Expand Access Diversity and add the access diversity parameters. See Add Access Diversity Parameters for EVPN Site Network Access.

Expand Bearer and add the bearer parameters by referring to the following table:

Table 3: Bearer Parameters (L2VPN)
Field	Description
Strict	Set to True if the requested access type is a strict requirement. If the requested access type is a strict requirement, the service provider cannot connect the site using any other media. The default setting is False.
Type	Specify the access media type that the customer prefers to use. Ethernet is the only supported media type in this release.

Expand Connection and add the connection parameters. See Add Connection Parameters for EVPN Site Network Access.

Expand Availability and enter the values by referring to the following table:

Table 4: Availability Parameters (L2VPN)
Field	Description
Access Priority	Enter a value for site network access priority. Enter a value in the range 0 through 4,294,967,295. The default value is 100. The access priority parameter defines the preference for the site network access (connection) for load balancing and configuring primary or backup site connections. The higher the access priority value, the higher is the preference for the connection.
Redundancy Mode	Select the redundancy mode from the following options: all-active—In this mode, all nodes can forward traffic to and from the Ethernet segment. single-active—In this mode, only one node forwards traffic to and from the Ethernet segment.

Add service parameters for the site network access:

Expand Service > Service Bandwidth and click the add (+) icon above the Bandwidth table.
The Bandwidth page appears.

Enter the values by referring to the following table:

Table 5: Service Parameters (L2VPN)
Field	Description
Direction	Select the direction of service bandwidth: input-bw—Bandwidth download direction from the service provider network to the site. output-bw—Bandwidth upload direction from the site to the service provider network.
CBS	Enter the Committed Burst Size (CBS) in bytes per second. When network traffic does not utilize the configured Committed Information Rate (CIR), the unused bandwidth is accumulated up to a maximum limit defined by the CBS.
CIR	Enter the CIR or the maximum number of bits per second (bps) that an interface can send or receive. The service provider provides the CIR as the guaranteed bandwidth for network traffic that an interface can send or receive in one second, under normal line conditions.

Click OK.
The bandwidth values are listed in the Bandwidth table.
(Optional) Click the edit or delete icons above the Bandwidth table to edit or delete the entries.

Expand MAC address limit and enter the values by referring to the following table:

Table 6: MAC Address Limit Parameters (L2VPN)
Field	Description
Action	Specify the action to be taken when the upper limit for customer MAC addresses is exceeded. The service provider specifies a maximum number of MAC addresses that can be learned from a customer for a single service instance. Drop is the only action supported in this release. This action drops the packet when the maximum limit for MAC addresses is exceeded.
Limit Number	Specify the maximum number of MAC addresses that can be obtained from a customer for a single service instance. Enter a value in the range 0 and 4,294,967,295. The default MAC address limit number is 2.

Do any of the following:
- Click Cancel to exit the Add Connection page without saving the changes you made.
- Click OK to save the connection details you added.
  
  You are returned to the Add L2 VPN Service page and the connection you added is listed in the Site Network Access table.
(Optional) Click the edit or delete icons above the Site Network Access table to edit or delete the entries.
Go to step 6 of the Add an EVPN Service Instance procedure to proceed with the EVPN service instance creation or modification.

Add Access Diversity Parameters for EVPN Site Network Access

Prerequisite:

Complete steps 1 to 3 of the Add EVPN Site Network Access Parameters procedure.

A network administrator can group the connections from a site to the service provider network, assign group ID to each connection group, and apply certain constraints to all the connections included in a group. You can assign one or more group IDs for a connection, specify constraint types, and select the target group ID that the constraint must be applied to, in the Access Diversity section.

To assign group IDs to a connection and apply constraints to target group IDs:

Expand Access Diversity on the Add Connection page.
Add IDs of groups that the connection is to be a part of:
1. Expand Groups and click the add (+) icon.
  The Group page appears.
2. Enter one or more IDs of the groups to which the connection must be assigned and click OK.
  The group ID entries are listed in the Group ID table.
3. (Optional) Use the edit or delete options above the Group table to edit or delete the entries.
Expand Constraints and click the add (+) icon above the Constraint table.
The Constraint page appears.
Add the following parameters on the Constraints page:
1. Click the Constraint Type drop-down and select constraint type from the following supported options:
  - pe-diverse—The site network access (connection) must not be connected to the same PE router as the connections in the target group.
  - pop-diverse—The site network access must not use the same point-of-presence (POP) as the connections in the target group.
  - same-pe—The site network access must be connected to the same PE router as the connections in the target group.
2. Expand Target and click the add (+) icon above the Group ID table.
  The Group page appears.
3. Click the Group ID drop-down to select the group to which you want to apply the constraint and click OK.
  The ID you enter is displayed in the Group ID table.
  
  You can add multiple group IDs as target groups to apply the access constraint.
4. Click OK on the Constraint page.
  The constraint types and target group IDs are listed in the Constraint table.
5. (Optional) Click the edit or delete icons above the Constraints table to edit or delete the entries.
Go to step 5 of the Add EVPN Site Network Access Parameters procedure to add the remaining site network access parameters.

Add Connection Parameters for EVPN Site Network Access

Prerequisite:

Complete steps 1 to 5 of the Add EVPN Site Network Access Parameters procedure.

To add connection parameters:

Expand Connection on the Add Connection page.
Click the Ethernet interface type drop-down and select the interface type from the following options:
- Tagged—A tagged interface receives and sends Ethernet frames with VLAN tags.
- Untagged—An untagged interface receives and sends Ethernet frames without VLAN tags.

Expand Lag Interfaces and enter the lag interface configurations:

Click the add (+) icon above the Lag Interface table.
The Lag Interface page appears.
In the Index field, enter a unique ID to identify the Link Aggregation Group (LAG) in the network.
The customer can aggregate multiple links from physical interfaces on a CE device into a single, logical LAG interface to connect to the service provider network.

Expand LACP and enter the values by referring to the following table:

Table 7: LACP Parameters (L2VPN)
Field	Description
Enabled	Switch the Enabled toggle on to set it to True if you want to enable the Link Aggregation Control Protocol (LACP) between CE and PE devices to dynamically manage adding or deleting LAG member links. The default setting is False.
LLDP	Switch the LLDP toggle on to set it to True if you want to enable Link Layer Discovery Protocol (LLDP). The default setting is False.
Minimum number of links	Enter the minimum number of links that must be active to use the LAG link to connect to the network. Enter a value in the range 1 to 64.

Expand Member Links and click the add (+) icon above the Member Link table.
The Member Link page appears.

Enter the member link values by referring to the following table:

Table 8: LACP Member Link Parameters (L2VPN)
Field	Description
Index	Enter a name for the member link or physical interface that is to be part of the LAG. For example, ge-0/0/1.
Speed	Enter the speed (in Mbps) of the physical interface or member link that is to be part of the LAG. Enter a value in the range 0 through 4,294,967,295. For example, 10 Mbps.

Expand OAM 802.3ah Link.
Switch the Enabled toggle on to set it to True, if you want to enable IEEE 802.3ah Operation, Administration, and Management (OAM) link.
The default setting is False.
Click OK on the Member Link page.
The member link configurations are listed in the Member Link table.

Alternatively, click Cancel to exit the Member Link page without saving the changes you made.
(Optional) Click the edit or delete icons above the Member Link table to edit or delete the entries.
Click OK on the Lag Interface page.
Alternatively, click Cancel to exit the Lag Interface page without saving the changes you made.
(Optional) Click the edit or delete icons above the Lag Interface table to edit or delete the entries.

(For tagged interface type only) Expand Tagged Interface and enter the interface parameters:

Click the Type drop-down and select dot1q to define the type of tagged interface.
Only the Dot1q tagged interface type is supported in this release. A Dot1q tagged interface transmits and receives Ethernet frames with virtual LAN (VLAN) tags. VLAN tags are added to the frames based on guidelines defined by the IEEE 802.1Q standard. In the Dot1q method, the service provider tags packets between CE and PE devices with one or more customer VLAN (CVLAN) IDs.

Expand Dot1q VLAN Tagged and enter the values by referring to the following table:

Table 9: Dot1q VLAN Tagged Parameters (L2VPN)
Field	Description
CVLAN ID	Enter a unique identifier for the CVLAN. Enter a value from 0 to 65,535.
Tag type	Specify the type of VLAN tag. Click the Tag type drop-down and select c-vlan. c-vlan is the only VLAN tag type supported in this release.

Expand Physical Interface Properties and enter the values by referring to the following table:

Table 10: Physical Interface Properties (L2VPN)
Field	Description
LLDP	Switch the toggle on to set LLDP to True if you want to enable LLDP. The default setting is False.
Speed	Enter the speed (in Mbps) of the untagged physical interface. The default value is 10 Mbps.
Connection > Physical Interface Properties > OAM 802.3ah Link
Enabled	Switch the Enabled toggle on to set it to True, if you want to enable IEEE 802.3ah OAM link. The default setting is False.

Go to step 7 of the Add EVPN Site Network Access Parameters procedure to add the remaining site network access parameters.

arrow_backward PREVIOUS Add an EVPN Service Instance

NEXT arrow_forward Add an L2 Circuit Service Instance

Juniper Paragon Automation User Guide

ON THIS PAGE

Add EVPN Service Site Details

Add EVPN Site

Add EVPN Site Network Access Parameters

Add Access Diversity Parameters for EVPN Site Network Access

Add Connection Parameters for EVPN Site Network Access

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Juniper Paragon Automation User Guide

ON THIS PAGE

Add EVPN Service Site Details

Add EVPN Site

Add EVPN Site Network Access Parameters

Add Access Diversity Parameters for EVPN Site Network Access

Add Connection Parameters for EVPN Site Network Access

See Also

Stay in touch