Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Add EVPN Service Site Details

An EVPN service is provisioned on a collection of sites to exchange network traffic over a shared infrastructure with a common layer 2 technology such as Ethernet. Use the Site Settings section of the Add L2 VPN Service page to enter details of sites that you want to connect to the EVPN.

Note:

Ethernet VPN (EVPN) is the only L2VPN service that is supported in this release.

You configure the following in the Site Settings section:

  • General details (site ID, site VPN flavor, location, devices, and MAC loop prevention parameters) about the site. See Add EVPN Site.

  • Parameters for site network access (connection with the service provider network). See Add EVPN Site Network Access Parameters.

Add EVPN Site

Prerequisite

Before adding the EVPN service site details, you must create a new EVPN service instance and enter general details about the service. Follow steps 1 to 4 of the Add an EVPN Service Instance procedure to create a new instance and add EVPN service general details.

An EVPN site refers to the geographical area where the VPN service spans. To add an EVPN service site in the Site Settings section:

  1. Click the add (+) icon on the top-right corner of the Sites section.

    The Add Site page appears.

  2. Enter site details by referring to Table 1.
  3. Do any of the following:
    • Click Cancel to exit the Add Site page without saving the changes you made.

    • Click OK to save the site details you added.

      The site you added is listed in the Sites table.

    You can view the configured site properties by expanding site-ID > Properties.

Configure the network access parameters. See Add EVPN Site Network Access Parameters.

Table 1: Fields on the Add Site Page (L2VPN)

Field

Description

Site ID

Enter a unique site ID to identify the site in the network.

The site ID can be a set of alphanumeric characters, space, and special character hyphen (-). The maximum number of characters allowed is 64.

Site VPN Flavor

Define how you want to connect the site to the VPN. For example, a site can connect to a single VPN or multiple VPNs.

Only single site VPN flavor (site-vpn-flavor-single) is supported in this release. In the single site VPN flavor, the site is connected to only one VPN.

Locations

Location ID

Enter a unique ID for a location in the site. For example, MAN for Manhattan and BRO for Brooklyn in the New York site.

Address

Enter the address (number and street) of the location in a site.

City

Enter the city where the site is located.

Country Code

Enter the ISO alpha-2 code of the country where the site is located, for example, ZA for South Africa and CH for Switzerland.

Postal Code

Enter the postal code of the location in the site.

State

Enter the state in which the site is located. If the country doesn't have states, enter the region in which the site is located.

Devices

Devices

Enter or select the CE devices to be used for the EVPN service at the site.

This parameter allows the customer to request for devices from the service provider to be installed at the site.

MAC Loop Prevention

Frequency

Enter the number of times that MAC address duplication is to be detected in a default time interval of 180 seconds or 3 minutes. When a MAC address is detected as duplicate, it is added to a list of duplicate MAC addresses.

The default frequency is 5.

Retry Timer

Set the retry interval (in seconds) for a duplicate MAC address.

Enter a value in the range 60 to 21600.

After the retry timer expires, the duplicate MAC address is removed from the MAC-VRF table (virtual routing and forwarding table for MAC addresses) on PE devices.

Add EVPN Site Network Access Parameters

Prerequisite:

Add EVPN Site.

After you add a site for the EVPN service, you must configure the parameters for site network access (connection) between the site and the service provider network. An L2VPN site network access refers to a logical Ethernet connection from a site to the L2VPN service in the provider network.

To set site network access parameters:

  1. Select and expand the site name in the Sites table.
  2. Expand Site Network Access and click the add (+) icon above the Site Network Access table.
    The Add Connection page appears.
  3. Enter the network access ID and device reference values by referring to the following table:
    Table 2: Network Access ID and Device Reference Parameters (L2VPN)

    Field

    Description

    Network Access ID

    Enter a unique ID for the connection between the site and the service provider network.

    Device Reference

    Click the drop-down list to select a CE device for the connection.

    The drop-down list displays the devices that you specified on the Add Sites page.

  4. Expand Access Diversity and add the access diversity parameters. See Add Access Diversity Parameters for EVPN Site Network Access.
  5. Expand Bearer and add the bearer parameters by referring to the following table:
    Table 3: Bearer Parameters (L2VPN)

    Field

    Description

    Strict

    Set to True if the requested access type is a strict requirement.

    If the requested access type is a strict requirement, the service provider cannot connect the site using any other media. The default setting is False.

    Type

    Specify the access media type that the customer prefers to use. Ethernet is the only supported media type in this release.

  6. Expand Connection and add the connection parameters. See Add Connection Parameters for EVPN Site Network Access.
  7. Expand Availability and enter the values by referring to the following table:
    Table 4: Availability Parameters (L2VPN)

    Field

    Description

    Access Priority

    Enter a value for site network access priority.

    Enter a value in the range 0 through 4,294,967,295. The default value is 100.

    The access priority parameter defines the preference for the site network access (connection) for load balancing and configuring primary or backup site connections. The higher the access priority value, the higher is the preference for the connection.

    Redundancy Mode

    Select the redundancy mode from the following options:

    • all-active—In this mode, all nodes can forward traffic to and from the Ethernet segment.

    • single-active—In this mode, only one node forwards traffic to and from the Ethernet segment.

  8. Add service parameters for the site network access:
    1. Expand Service > Service Bandwidth and click the add (+) icon above the Bandwidth table.
      The Bandwidth page appears.
    2. Enter the values by referring to the following table:
      Table 5: Service Parameters (L2VPN)

      Field

      Description

      Direction

      Select the direction of service bandwidth:

      • input-bw—Bandwidth download direction from the service provider network to the site.

      • output-bw—Bandwidth upload direction from the site to the service provider network.

      CBS

      Enter the Committed Burst Size (CBS) in bytes per second.

      When network traffic does not utilize the configured Committed Information Rate (CIR), the unused bandwidth is accumulated up to a maximum limit defined by the CBS.

      CIR

      Enter the CIR or the maximum number of bits per second (bps) that an interface can send or receive.

      The service provider provides the CIR as the guaranteed bandwidth for network traffic that an interface can send or receive in one second, under normal line conditions.

    3. Click OK.

      The bandwidth values are listed in the Bandwidth table.

    4. (Optional) Click the edit or delete icons above the Bandwidth table to edit or delete the entries.
  9. Expand MAC address limit and enter the values by referring to the following table:
    Table 6: MAC Address Limit Parameters (L2VPN)

    Field

    Description

    Action

    Specify the action to be taken when the upper limit for customer MAC addresses is exceeded. The service provider specifies a maximum number of MAC addresses that can be learned from a customer for a single service instance.

    Drop is the only action supported in this release. This action drops the packet when the maximum limit for MAC addresses is exceeded.

    Limit Number

    Specify the maximum number of MAC addresses that can be obtained from a customer for a single service instance.

    Enter a value in the range 0 and 4,294,967,295.

    The default MAC address limit number is 2.

  10. Configure placement parameters for the service instance:
    1. Click the Update Placements button on top of the page and click Yes when prompted to confirm.
      The service instance is saved to the Paragon Automation database. The saved instance is listed in the Service Instances table on the Service Instances page.

      Service orchestration automatically assigns possible placement options such as PE devices and interfaces, CE devices, and VLANs for the service instance. After placement options are assigned, you see a message that placement was successfully updated.

    2. To configure the placement parameters, select the service-instance-name on the Service Instances page and click the edit icon.
      The Modify Service-Instance-Name page appears.
    3. Proceed to the Site Settings section, select the site network access for which you want to configure placement, and click the edit icon.
      The Edit Connection page appears and the Placement option is displayed on the page.
    4. Expand Placement and configure the placement parameters by referring to the following table:
      Table 7: Placement Parameters

      Field

      Description

      CE Node

      Click the CE Node drop-down and select the CE device that you want to connect to the PE device for the VPN service.

      PE Node

      Click the PE Node drop-down and select the PE device that you want to allocate for the VPN service.

      PE Interface

      Click the PE Interface drop-down and select the PE interface name that you want to assign for the VPN service.

      VLAN

      Click the VLAN drop-down and select the VLAN ID to which you want to assign the VPN service.

      Note:

      Update Placements is a beta feature in this release.

  11. Do any of the following:
    • Click Cancel to exit the Add Connection page without saving the changes you made.

    • Click OK to save the connection details you added.

      You are returned to the Add L2 VPN Service page. The connection you added is listed in the Site Network Access table.

  12. (Optional) Click the edit or delete icons above the Site Network Access table to edit or delete the entries.
  13. Go to step 6 of the Add an EVPN Service Instance procedure to proceed with the EVPN service instance creation or modification.

Add Access Diversity Parameters for EVPN Site Network Access

Prerequisite:

Complete steps 1 to 3 of the Add EVPN Site Network Access Parameters procedure.

A network administrator can group the connections from a site to the service provider network, assign group ID to each connection group, and apply certain constraints to all the connections included in a group. You can assign one or more group IDs for a connection, specify constraint types, and select the target group ID that the constraint must be applied to, in the Access Diversity section.

To assign group IDs to a connection and apply constraints to target group IDs:

  1. Expand Access Diversity on the Add Connection page.
  2. Add IDs of groups that the connection is to be a part of:
    1. Expand Groups and click the add (+) icon.
      The Group page appears.
    2. Enter one or more IDs of the groups to which the connection must be assigned and click OK.
      The group ID entries are listed in the Group ID table.
    3. (Optional) Use the edit or delete options above the Group table to edit or delete the entries.
  3. Expand Constraints and click the add (+) icon above the Constraint table.
    The Constraint page appears.
  4. Add the following parameters on the Constraints page:
    1. Click the Constraint Type drop-down and select constraint type from the following supported options:
      • pe-diverse—The site network access (connection) must not be connected to the same PE router as the connections in the target group.

      • pop-diverse—The site network access must not use the same point-of-presence (POP) as the connections in the target group.

      • same-pe—The site network access must be connected to the same PE router as the connections in the target group.

    2. Expand Target and click the add (+) icon above the Group ID table.
      The Group page appears.
    3. Click the Group ID drop-down to select the group to which you want to apply the constraint and click OK.

      The ID you enter is displayed in the Group ID table.

      You can add multiple group IDs as target groups to apply the access constraint.

    4. Click OK on the Constraint page.
      The constraint types and target group IDs are listed in the Constraint table.
    5. (Optional) Click the edit or delete icons above the Constraints table to edit or delete the entries.
  5. Go to step 5 of the Add EVPN Site Network Access Parameters procedure to add the remaining site network access parameters.

Add Connection Parameters for EVPN Site Network Access

Prerequisite:

Complete steps 1 to 5 of the Add EVPN Site Network Access Parameters procedure.

To add connection parameters:

  1. Expand Connection on the Add Connection page.
  2. Click the Ethernet interface type drop-down and select the interface type from the following options:
    • Tagged—A tagged interface receives and sends Ethernet frames with VLAN tags.

    • Untagged—An untagged interface receives and sends Ethernet frames without VLAN tags.

  3. Expand Lag Interfaces and enter the lag interface configurations:
    1. Click the add (+) icon above the Lag Interface table.

      The Lag Interface page appears.

    2. In the Index field, enter a unique ID to identify the Link Aggregation Group (LAG) in the network.

      The customer can aggregate multiple links from physical interfaces on a CE device into a single, logical LAG interface to connect to the service provider network.

    3. Expand LACP and enter the values by referring to the following table:
      Table 8: LACP Parameters (L2VPN)

      Field

      Description

      Enabled

      Switch the Enabled toggle on to set it to True if you want to enable the Link Aggregation Control Protocol (LACP) between CE and PE devices to dynamically manage adding or deleting LAG member links.

      The default setting is False.

      LLDP

      Switch the LLDP toggle on to set it to True if you want to enable Link Layer Discovery Protocol (LLDP).

      The default setting is False.

      Minimum number of links

      Enter the minimum number of links that must be active to use the LAG link to connect to the network.

      Enter a value in the range 1 to 64.

    4. Expand Member Links and click the add (+) icon above the Member Link table.
      The Member Link page appears.
    5. Enter the member link values by referring to the following table:
      Table 9: LACP Member Link Parameters (L2VPN)

      Field

      Description

      Index

      Enter a name for the member link or physical interface that is to be part of the LAG, for example, ge-0/0/1.

      Speed

      Enter the speed (in Mbps) of the physical interface or member link that is to be part of the LAG.

      Enter a value in the range 0 through 4,294,967,295, for example, 10 Mbps.

    6. Expand OAM 802.3ah Link.
    7. Switch the Enabled toggle on to set it to True, if you want to enable IEEE 802.3ah Operation, Administration, and Management (OAM) link.

      The default setting is False.

    8. Click OK on the Member Link page.

      The member link configurations are listed in the Member Link table.

      Alternatively, click Cancel to exit the Member Link page without saving the changes you made.

    9. (Optional) Click the edit or delete icons above the Member Link table to edit or delete the entries.
    10. Click OK on the Lag Interface page.

      Alternatively, click Cancel to exit the Lag Interface page without saving the changes you made.

    11. (Optional) Click the edit or delete icons above the Lag Interface table to edit or delete the entries.
  4. (For tagged interface type only) Expand Tagged Interface and enter the interface parameters:
    1. Click the Type drop-down and select dot1q to define the type of tagged interface.

      Only the Dot1q tagged interface type is supported in this release. A Dot1q tagged interface transmits and receives Ethernet frames with virtual LAN (VLAN) tags. VLAN tags are added to the frames based on guidelines defined by the IEEE 802.1Q standard. In the Dot1q method, the service provider tags packets between CE and PE devices with one or more customer VLAN (CVLAN) IDs.

    2. Expand Dot1q VLAN Tagged and enter the values by referring to the following table:
      Table 10: Dot1q VLAN Tagged Parameters (L2VPN)

      Field

      Description

      CVLAN ID

      Enter a unique identifier for the CVLAN.

      Enter a value from 0 to 4094.

      Tag type

      Specify the type of VLAN tag.

      Click the Tag type drop-down and select c-vlan. c-vlan is the only VLAN tag type supported in this release.

  5. Expand Physical Interface Properties and enter the values by referring to the following table:
    Table 11: Physical Interface Properties (L2VPN)

    Field

    Description

    LLDP

    Switch the toggle on to set LLDP to True if you want to enable LLDP.

    The default setting is False.

    Speed

    Enter the speed (in Mbps) of the untagged physical interface.

    The default value is 10 Mbps.

    Connection > Physical Interface Properties > OAM 802.3ah Link

    Enabled

    Switch the Enabled toggle on to set it to True, if you want to enable IEEE 802.3ah OAM link.

    The default setting is False.

  6. Go to step 7 of the Add EVPN Site Network Access Parameters procedure to add the remaining site network access parameters.