close

keyboard_arrow_left

Table of Contents Expand all

play_arrow OVSDB and VXLAN
play_arrow VXLAN (Without a Controller)
- play_arrow Using VXLAN Without a Controller
- play_arrow VXLAN Monitoring Commands
play_arrow Configuration Statements and Operational Commands
- Junos CLI Reference Overview

list Table of Contents

English

Example: Manually Configuring VXLANs on MX Series Routers

date_range 30-Apr-24

arrow_backward

arrow_forward

Virtual Extensible Local Area Network (VXLAN) is a Layer 3 encapsulation protocol that enables MX Series routers to push Layer 2 or Layer 3 packets through a VXLAN tunnel to a virtualized data center or the Internet. Communication is established between two virtual tunnel endpoints (VTEPs). VTEPs encapsulate the virtual machine traffic into a VXLAN header and strip off the encapsulation.

This example shows how to configure VXLAN on MX Series routers using switch options in a default bridge domain.

Requirements

This example uses the following hardware and software components:

An MX Series router
A VXLAN capable peer router
Junos OS Release 14.1

Overview

In this example, VXLAN is configured to run on a default bridge domain. VTEP interfaces sources are configured to the loopback address, and VLAN groups are configured under bridge domains with VXLAN enabled. Interfaces are configured for VLAN tagging and encapsulation, and IRB is enabled. OSPF and PIM protocols are configured to facilitate unicast and multicast routing. The chassis is configured for GRES and enhanced IP services.

Note:

We support static VXLAN and OVSDB-VXLAN with an IPv4 underlay. You configure the VTEP source interface as the loopback interface with an IPv4 address. We support an IPv6 underlay (the VTEP source interface as the loopback interface with an IPv6 address) only with EVPN-VXLAN configurations.

Topology

Figure 1: VXLAN Topology

CLI Quick Configuration

To quickly configure this example, copy the following commands, paste them into a text file, remove any line breaks, change any details necessary to match your network configuration, and then copy and paste the commands into the CLI at the [edit] hierarchy level.

content_copy zoom_out_map
set switch-options vtep-source-interface lo0.0
set bridge-domains vlan-5 vxlan vni 100
set bridge-domains vlan-5 vxlan multicast-group 233.252.0.1
set bridge-domains vlan-5 vlan-id 100
set bridge-domains vlan-5 routing-interface irb.0
set bridge-domains vlan-5 interface xe-1/0/0.0
set bridge-domains vlan-6 vxlan vni 200
set bridge-domains vlan-6 vxlan multicast-group 233.252.0.1
set bridge-domains vlan-6 vlan-id 200
set bridge-domains vlan-6 routing-interface irb.1
set bridge-domains vlan-6 interface xe-2/0/0.0
set interfaces xe-1/0/0 vlan-tagging
set interfaces xe-1/0/0 encapsulation flexible-ethernet-services
set interfaces xe-1/0/0 unit 0 encapsulation vlan-bridge
set interfaces xe-1/0/0 unit 0 vlan-id 100
set interfaces xe-2/0/0 vlan-tagging
set interfaces xe-2/0/0 encapsulation flexible-ethernet-services
set interfaces xe-2/0/0 unit 0 encapsulation vlan-bridge
set interfaces xe-2/0/0 unit 0 vlan-id 200
set interface irb unit 0 family inet address 10.5.5.1/24
set interface irb unit 1 family inet address 10.6.6.1/24
set interfaces lo0 unit 0 family inet address 10.3.3.3/32
set protocols ospf area 0.0.0.0 interface ge-8/3/8.0
set protocols ospf area 0.0.0.0 interface lo0.0
set protocols ospf area 0.0.0.0 interface xe-0/1/3.0
set protocols ospf area 0.0.0.0 interface ge-8/3/2.0
set protocols pim rp static address 10.2.1.3
set protocols pim interface lo0.0 mode bidirectional-sparse
set protocols pim interface ge-8/3/8.0 mode bidirectional-sparse
set protocols pim interface xe-0/1/3.0 mode bidirectional-sparse
set protocols pim interface ge-8/3/2.0 mode bidirectional-sparse
set chassis redundancy graceful-switchover
set chassis aggregated-devices ethernet device-count 10
set chassis fpc 1 pic 0 tunnel-services bandwidth 10g
set chassis network-services enhanced-ip

Configuring VXLAN

Step-by-Step Procedure

The following example show how to set up a basic VXLAN configuration with default bridge domains and switch options. To configure VXLAN on an MX Series router, follow these steps:

Configure VTEP interface sources under switch-options for the default-switch.
```
[edit]
user@router# set switch-options vtep-source-interface lo0.0
```
Set up a VLAN group named vlan-5 and set its VXLAN Network Identifier (VNI) to 100.
```
[edit]
user@router# set bridge-domains vlan-5 vxlan vni 100
```
Configure the vlan-5 multicast group address for VXLAN.
```
[edit]
user@router# set bridge-domains vlan-5 vxlan multicast-group 233.252.0.1
```

Set the VLAN ID to 100 for vlan-5.

content_copy zoom_out_map
[edit]
user@router# set bridge-domains vlan-5 vlan-id 100

Configure integrated bridging and routing (IRB) for vlan-5.
```
[edit]
user@router# set bridge-domains vlan-5 routing-interface irb.0
```

Assign the xe-1/0/0.0 interface to vlan-5.

content_copy zoom_out_map
[edit]
user@router# set bridge-domains vlan-5 interface xe-1/0/0.0

Set up a VLAN group named vlan-6 and set its VXLAN Network Identifier (VNI) to 200.
```
[edit]
user@router# set bridge-domains vlan-6 vxlan vni 200
```

Configure the vlan-6 multicast group address for VXLAN.

content_copy zoom_out_map
[edit]
user@router# set bridge-domains vlan-6 vxlan multicast-group 233.252.0.1

Set the VLAN ID to 200 for vlan-6.

content_copy zoom_out_map
[edit]
user@router# set bridge-domains vlan-6 vlan-id 200

Configure IRB for vlan-6.

content_copy zoom_out_map
[edit]
user@router# set bridge-domains vlan-6 routing-interface irb.1

Assign the xe-2/0/0.0 interface to vlan-6.

content_copy zoom_out_map
[edit]
user@router# set bridge-domains vlan-6 interface xe-2/0/0.0

Set up VLAN tagging for xe-1/0/0.
```
[edit]
user@router# set interfaces xe-1/0/0 vlan-tagging
```
Configure flexible Ethernet service encapsulation on xe-1/0/0.
```
[edit]
user@router# set interfaces xe-1/0/0 encapsulation flexible-ethernet-services
```
Set up VLAN bridging encapsulation for xe-1/0/0 unit 0˙.
```
[edit]
user@router# set interfaces xe-1/0/0 unit 0 encapsulation vlan-bridge
```
Set the xe-1/0/0 unit 0 VLAN ID to 100.
```
[edit]
user@router# set interfaces xe-1/0/0 unit 0 vlan-id 100
```
Configure VLAN tagging for xe-2/0/0
```
[edit]
user@router# set interfaces xe-2/0/0 vlan-tagging
```

Set up flexible Ethernet service encapsulation on xe-2/0/0.

content_copy zoom_out_map
[edit]
user@router# set interfaces xe-2/0/0 encapsulation flexible-ethernet-services

Configure VLAN bridging encapsulation for xe-2/0/0 unit 0˙.
```
[edit]
user@router# set interfaces xe-2/0/0 unit 0 encapsulation vlan-bridge
```
Set the xe-2/0/0 unit 0 VLAN ID to 200.
```
[edit]
user@router# set interfaces xe-2/0/0 unit 0 vlan-id 200
```

Configure the IRB unit 0 family inet address.

content_copy zoom_out_map
[edit]
user@router# set interface irb unit 0 family inet address 10.5.5.1/24

Configure the IRB unit 1 family inet address.

content_copy zoom_out_map
[edit]
user@router# set interface irb unit 1 family inet address 10.6.6.1/24

Set the family inet address for the loopback unit 0.

content_copy zoom_out_map
[edit]
user@router# set interfaces lo0 unit 0 family inet address 10.3.3.3/32

Set up OSPF for the ge-8/3/8.0 interface.

content_copy zoom_out_map
[edit]
user@router# set protocols ospf area 0.0.0.0 interface ge-8/3/8.0

Configure OSPF for the loopback interface.

content_copy zoom_out_map
[edit]
user@router# set protocols ospf area 0.0.0.0 interface lo0.0

Set up OSPF for the xe-0/1/3.0 interface.

content_copy zoom_out_map
[edit]
user@router# set protocols ospf area 0.0.0.0 interface xe-0/1/3.0

Configure OSPF for the ge-8/3/2.0 interface.

content_copy zoom_out_map
[edit]
user@router# set protocols ospf area 0.0.0.0 interface ge-8/3/2.0

Set up the static address for the protocol independent multicast (PIM) rendezvous point (RP).
```
[edit]
user@router# set protocols pim rp static address 10.2.1.3
```
Configure the loopback interface to bidirectional sparse mode for the PIM protocol.
```
[edit]
user@router# set protocols pim interface lo0.0 mode bidirectional-sparse
```
Set the ge-8/3/8.0 interface to bidirectional sparse mode for the PIM protocol.
```
[edit]
user@router# set protocols pim interface ge-8/3/8.0 mode bidirectional-sparse
```
Configure the xe-0/1/3.0 interface to bidirectional sparse mode for the PIM protocol.
```
[edit]
user@router# set protocols pim interface xe-0/1/3.0 mode bidirectional-sparse
```
Set the ge-8/3/2.0 interface to bidirectional sparse mode for the PIM protocol.
```
[edit]
user@router# set protocols pim interface ge-8/3/2.0 mode bidirectional-sparse
```
Configure redundant graceful switchover on the chassis.
```
[edit]
user@router# set chassis redundancy graceful-switchover
```

Set the aggregated ethernet device count to 10.

content_copy zoom_out_map
[edit]
user@router# set chassis aggregated-devices ethernet device-count 10

Configure the tunnel services bandwidth for FPC 1/PIC 0.
```
[edit]
user@router# set chassis fpc 1 pic 0 tunnel-services bandwidth 10g
```
Enable enhanced IP for network services on the chassis.
```
[edit]
user@router# set chassis network-services enhanced-ip
```

Results

From configuration mode, confirm your configuration by entering the following commands. If the output does not display the intended configuration, repeat the instructions in this example to correct the configuration.

content_copy zoom_out_map
user@router# show switch-options

content_copy zoom_out_map
switch-options {
    vtep-source-interface lo0.0;
}

content_copy zoom_out_map
user@router# show bridge-domains

content_copy zoom_out_map
bridge-domains {
    vlan-5 {
        vxlan {
            vni              100;
            multicast-group      233.252.0.1;
        }
        vlan-id              100;
        routing-interface    irb.0;
        interface            xe-1/0/0.0;
    }
    vlan-6 {
        vxlan {
            vni              200;
            multicast-group      233.252.0.1;
        }
        vlan-id              200;
        routing-interface    irb.1;
        interface            xe-2/0/0.0;
    }
}

content_copy zoom_out_map
user@router# show interfaces

content_copy zoom_out_map
interfaces {
    xe-1/0/0 {
        vlan-tagging;
        encapsulation flexible-ethernet-services;
        unit 0 {
            encapsulation vlan-bridge;
            vlan-id 100;
        }
    }
    xe-2/0/0 {
        vlan-tagging;
        encapsulation flexible-ethernet-services;
        unit 0 {
            encapsulation vlan-bridge;
            vlan-id 200;
        }
    }
    irb {
        unit 0 {
            family inet {
                address 10.5.5.1/24;
            }
        }
        unit 1 {
            family inet {
                address 10.6.6.1/24;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 10.3.3.3/32;
            }
        }
    }
}

content_copy zoom_out_map
user@router# show protocols ospf

content_copy zoom_out_map
area 0.0.0.0 {
    interface ge-8/3/8.0;
    interface lo0.0;
    interface xe-0/1/3.0;
    interface ge-8/3/2.0;
}

content_copy zoom_out_map
user@router# show protocols pim

content_copy zoom_out_map
rp {
    static {
        address 10.2.1.3;
    }
}

content_copy zoom_out_map
user@router# show chassis

content_copy zoom_out_map
redundancy {
    graceful-switchover;
}
aggregated-devices {
    ethernet {
        device-count 10;
    }
}
fpc 1 {
    pic 0 {
        tunnel-services {
            bandwidth 10g;
        }
    }
}
network-services enhanced-ip;

Verification

Confirm that the configuration is working properly.

Verifying Reachability
Verifying VXLAN

Verifying Reachability

Purpose
Action
Meaning

Purpose

Verify that the network is up and running with the proper interfaces and routes installed.

Action

content_copy zoom_out_map
user@router> show interfaces terse irb
Interface               Admin Link Proto    Local                 Remote
irb                     up    up
irb.0                   up    up   inet     10.5.5.1/24      
                                   multiservice
irb.1                   up    up   inet     10.6.6.1/24      
                                   multiservice

user@router> ping 10.5.5.1/24
PING 10.5.5.1 (10.5.5.1): 56 data bytes
64 bytes from 10.5.5.1: icmp_seq=0 ttl=64 time=0.965 ms
64 bytes from 10.5.5.1: icmp_seq=1 ttl=64 time=0.960 ms
64 bytes from 10.5.5.1: icmp_seq=2 ttl=64 time=0.940 ms
^C
--- 10.1.1.1 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.940/0.955/0.965/0.011 ms

Meaning

Use the show interfaces terse irb command to verify that the IRB interface has been properly configured. The irb.0 and irb.1 interfaces should display the proper multiservice inet addresses.

Use the ping command to confirm that the network is connected to the IRB multiservice address.

Verifying VXLAN

Purpose
Action
Meaning

Purpose

Verify that VXLAN is working and the proper protocols are enabled.

Action

content_copy zoom_out_map
user@router> show interfaces vtep
Physical interface: vtep, Enabled, Physical link is Up
  Interface index: 133, SNMP ifIndex: 575
  Type: Software-Pseudo, Link-level type: VxLAN-Tunnel-Endpoint, MTU: 1600, Speed: Unlimited
  Device flags   : Present Running
  Interface flags: SNMP-Traps
  Link type      : Full-Duplex
  Link flags     : None
  Last flapped   : Never
    Input packets : 0
    Output packets: 0

  Logical interface vtep.32768 (Index 334) (SNMP ifIndex 607)
    Flags: Up SNMP-Traps Encapsulation: ENET2
    VXLAN Endpoint Type: Source, VXLAN Endpoint Address: 10.255.187.32, L2 Routing Instance: default-switch, L3 Routing Instance: default
    Input packets : 0
    Output packets: 0

content_copy zoom_out_map
user@router> show l2-learning vxlan-tunnel-end-point remote mac-table
MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
           SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)

Logical system   : <default>
Routing instance : default-switch
 Bridging domain : vlan-5+100, VLAN : 100, VNID : 100
 Bridging domain : vlan-6+200, VLAN : 200, VNID : 200

content_copy zoom_out_map
user@router> show l2-learning vxlan-tunnel-end-point source
Logical System Name       Id  SVTEP-IP         IFL   L3-Idx
<default>                 0   10.255.187.32    lo0.0    0  
    L2-RTT                   Bridge Domain              VNID     MC-Group-IP
    default-switch           vlan-5+100                 100      233.252.0.1      
    default-switch           vlan-6+200                 200      233.252.0.1  

Meaning

Use the show interface vtep command to displays information about VXLAN endpoint configuration. Make sure the routing instance is assigned to the default-switch..

Use the show l2-learning vxlan-tunnel-end-point remote mac-table command to confirm that the bridging domain VLAN groups were configured correctly.

Use the show l2-learning vxlan-tunnel-end-point source command to confirm the multicast IP addresses for bridging domain VLAN groups.

arrow_backward PREVIOUS PIM NSR and Unified ISSU Support for VXLAN Overview

NEXT arrow_forward Monitoring a Remote VTEP Interface

OVSDB and VXLAN User Guide for MX Series Routers and EX9200 Switches

ON THIS PAGE

Example: Manually Configuring VXLANs on MX Series Routers

Requirements

Overview

Topology

Configuring VXLAN on MX Series Routers

CLI Quick Configuration

Configuring VXLAN

Step-by-Step Procedure

Results

Verification

Verifying Reachability

Purpose

Action

Meaning

Verifying VXLAN

Purpose

Action

Meaning

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

OVSDB and VXLAN User Guide for MX Series Routers and EX9200 Switches

ON THIS PAGE

Example: Manually Configuring VXLANs on MX Series Routers

Requirements

Overview

Topology

Configuring VXLAN on MX Series Routers

CLI Quick Configuration

Configuring VXLAN

Step-by-Step Procedure

Results

Verification

Verifying Reachability

Purpose

Action

Meaning

Verifying VXLAN

Purpose

Action

Meaning

Related Documentation

Stay in touch