Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Announcement: Try the Ask AI chatbot for answers to your technical questions about Juniper products and solutions.

close
header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
EVPN User Guide
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Configuring Control Word for EVPN-MPLS

date_range 20-Dec-24

Transit devices in an EVPN-MPLS network are not aware of the type of payload it carries. While parsing an MPLS encapsulated packet for hashing, a transit device can incorrectly calculate an Ethernet payload as an IPv4 or IPv6 payload if the first nibble of the destination address MAC is 0x4 or 0x6, respectively, causing out-of-order packet delivery. To identify the payload as an Ethernet payload, we can insert a control word with a value of 0 in the first four bits between the label stack and the L2 header of the packet. This ensures that the packet is not identified as an IPv4 or IPv6 packet.

Note:

You do not need to enable control word on the devices in your transit network when the transit devices consist of Juniper Networks EX 9200 switches, MX series routers, or PTX Series routers. These Juniper devices correctly identify the Ethernet payload as an IPv4/IPv6 payloads, even when the Ethernet destination MAC address starts with 0x4 or 0x6 nibble. The Juniper devices perform hashing based on the IP header fields inside the Ethernet frame and will not send out-of-order packets. In this case, we recommend not using control word as there are no benefits..

To enable control word, set control-word for the evpn protocol for a specified routing instance. The following output shows a sample multihomed routing instance with control word configured

content_copy zoom_out_map
user@router1# show routing-instances
routing-instances EVPN-green
vlan-id 200;
interface ae0.1;
route-distinguisher 10.255.255.1:200;
vrf-target target:100:200;
protocols {
    evpn {
        control-word; 
        }        
}

To view routes where control word is supported, use the show route table mpls.0 protocol evpn operational command. Egress routes display an offset of 252.

content_copy zoom_out_map
show route table mpls.0 protocol evpn
303744             *[EVPN/7] 00:00:13, remote-pe 10.255.255.2, routing-instance blue, route-type Egress-MAC
312	                    > to 5.0.0.1 via ge-0/0/2.0, Push 299984 Offset: 252
313	303760             *[EVPN/7] 00:00:13, remote-pe 10.255.255.2, routing-instance blue, route-type Egress-MAC
314	                    > to 5.0.0.1 via ge-0/0/2.0, Push 299888 Offset: 252
315	303776             *[EVPN/7] 00:00:13, remote-pe 10.255.255.2, routing-instance blue, route-type Egress-MAC
316	                    > to 5.0.0.1 via ge-0/0/2.0, Push 300032 Offset: 252
317	303792             *[EVPN/7] 00:00:13, remote-pe 10.255.255.2, routing-instance blue, route-type Egress-IM, vlan-id 4
318	                    > to 5.0.0.1 via ge-0/0/2.0, Push 302000 Offset: 252
319	303808             *[EVPN/7] 00:00:13, remote-pe 10.255.255.2, routing-instance blue, route-type Egress-IM, vlan-id 5
320	                    > to 5.0.0.1 via ge-0/0/2.0, Push 302016 Offset: 252
321	303824             *[EVPN/7] 00:00:13, remote-pe 10.255.255.2, routing-instance blue, route-type Egress-IM, vlan-id 6
322	                    > to 5.0.0.1 via ge-0/0/2.0, Push 302032 Offset: 252
footer-navigation