Sunday, December 21, 2014

PEB Tunnel All C-VLAN  "New Style"

Hi all today we are going to simulate Layer 2 Service Provider using "New Style" Command Line Interface with Junos 12.3R1.7 remember that OK

Here is the sample Topology that we are going to simulate:





========================================================================

Here is the configuration in each router :

lab@mxA-2> show configuration | no-more     
## Last commit: 2014-12-22 02:34:53 UTC by lab
version 12.3R1.7;
system {
    host-name mxA-2;
    root-authentication {
        encrypted-password "$1$KI99zGk6$MbYFuBbpLffu9tn2.sI7l1"; ## SECRET-DATA
    }
    login {
        user lab {
            uid 2000;
            class super-user;
            authentication {
                encrypted-password "$1$84J5Maes$cni5Hrazbd/IEHr/50oY30"; ## SECRET-DATA
            }
        }
    }
    services {
        ftp;
        ssh;
        telnet;
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
}
interfaces {
    ge-1/1/0 {
        vlan-tagging;
        unit 0 {
            vlan-id 100;
            family inet {
                address 1.1.1.1/24;
            }
        }
        unit 1 {
            vlan-id 222;
            family inet {
                address 2.2.2.1/24;
            }
        }
    }
    fxp0 {
        description "MGMT INTERFACE - DO NOT DELETE";
        unit 0 {
            family inet {
                address 10.210.14.2/24;
            }
        }
    }
}

==============================================================

lab@mxA-1> show configuration 
## Last commit: 2014-12-22 02:34:42 UTC by lab
version 12.3R1.7;
system {
    host-name mxA-1;
    root-authentication {
        encrypted-password "$1$KI99zGk6$MbYFuBbpLffu9tn2.sI7l1"; ## SECRET-DATA
    }
    login {
        user lab {
            uid 2000;
            class super-user;
            authentication {
                encrypted-password "$1$84J5Maes$cni5Hrazbd/IEHr/50oY30"; ## SECRET-DATA
            }
        }
    }
    services {
        ftp;
        ssh;
        telnet;
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
}
interfaces {
    ge-1/1/0 {
        unit 0 {
            family bridge {
                interface-mode access;
                vlan-id 200;
            }
        }
    }
    ge-1/1/1 {
        unit 0 {
            family bridge {
                interface-mode trunk;
                vlan-id-list 200;       
            }
        }
    }
    fxp0 {
        description "MGMT INTERFACE - DO NOT DELETE";
        unit 0 {
            family inet {
                address 10.210.14.1/24;
            }
        }
    }
}
bridge-domains {
    test {
        vlan-id 200;
    }
}

====================================================================

lab@mxB-2> show configuration 
## Last commit: 2014-12-22 02:35:48 UTC by lab
version 12.3R1.7;
system {
    host-name mxB-2;
    root-authentication {
        encrypted-password "$1$KI99zGk6$MbYFuBbpLffu9tn2.sI7l1"; ## SECRET-DATA
    }
    login {
        user lab {
            uid 2000;
            class super-user;
            authentication {
                encrypted-password "$1$84J5Maes$cni5Hrazbd/IEHr/50oY30"; ## SECRET-DATA
            }
        }
    }
    services {
        ftp;
        ssh;
        telnet;
    }
    syslog {
        user * {
            any emergency;              
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
}
interfaces {
    ge-1/1/0 {
        flexible-vlan-tagging;
        encapsulation flexible-ethernet-services;
        unit 0 {
            family bridge {
                interface-mode trunk;
                vlan-id-list 200;
            }
        }
    }
    ge-1/1/1 {
        flexible-vlan-tagging;
        encapsulation flexible-ethernet-services;
        unit 0 {
            family bridge {
                interface-mode trunk;
                vlan-id-list 200;
            }
        }
    }
    fxp0 {
        description "MGMT INTERFACE - DO NOT DELETE";
        unit 0 {
            family inet {
                address 10.210.14.4/24;
            }
        }
    }
}
bridge-domains {
    test {
        vlan-id 200;
    }

}

================================================================================


[edit]
lab@mxC-1# show 
## Last changed: 2014-12-22 04:42:12 UTC
version 12.3R1.7;
system {
    host-name mxC-1;
    root-authentication {
        encrypted-password "$1$KI99zGk6$MbYFuBbpLffu9tn2.sI7l1"; ## SECRET-DATA
    }
    login {
        user lab {
            uid 2000;
            class super-user;
            authentication {
                encrypted-password "$1$84J5Maes$cni5Hrazbd/IEHr/50oY30"; ## SECRET-DATA
            }
        }
    }
    services {
        ftp;
        ssh;
        telnet;
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
}
interfaces {
    ge-1/1/0 {
        flexible-vlan-tagging;
        encapsulation flexible-ethernet-services;
        unit 0 {
            family bridge {
                interface-mode trunk;
                vlan-id-list 200;
            }
        }
    }
    ge-1/1/3 {
        unit 0 {
            family bridge {             
                interface-mode access;
                vlan-id 200;
            }
        }
    }
    fxp0 {
        description "MGMT INTERFACE - DO NOT DELETE";
        unit 0 {
            family inet {
                address 10.210.14.5/24;
            }
        }
    }
}
bridge-domains {
    test {
        vlan-id 200;
    }



===========================================================================

lab@mxC-2> show configuration 
## Last commit: 2014-12-22 02:36:54 UTC by lab
version 12.3R1.7;
system {
    host-name mxC-2;
    root-authentication {
        encrypted-password "$1$KI99zGk6$MbYFuBbpLffu9tn2.sI7l1"; ## SECRET-DATA
    }
    login {
        user lab {
            uid 2000;
            class super-user;
            authentication {
                encrypted-password "$1$84J5Maes$cni5Hrazbd/IEHr/50oY30"; ## SECRET-DATA
            }
        }
    }
    services {
        ftp;
        ssh;
        telnet;
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
}
interfaces {
    ge-1/1/3 {
        vlan-tagging;
        unit 0 {
            vlan-id 100;
            family inet {
                address 1.1.1.2/24;
            }
        }
        unit 1 {
            vlan-id 222;
            family inet {
                address 2.2.2.2/24;
            }                           
        }
    }
    fxp0 {
        description "MGMT INTERFACE - DO NOT DELETE";
        unit 0 {
            family inet {
                address 10.210.14.6/24;
            }
        }
    }

}


================================================================

Test Connections

interfaces {
    ge-1/1/0 {
        vlan-tagging;
        unit 0 {
            vlan-id 100;
            family inet {
                address 1.1.1.1/24;
            }
        }
        unit 1 {
            vlan-id 222;
            family inet {
                address 2.2.2.1/24;
            }                           
        }
    }
    fxp0 {
        description "MGMT INTERFACE - DO NOT DELETE";
        unit 0 {
            family inet {
                address 10.210.14.2/24;
            }
        }
    }
}

lab@mxA-2> ping 1.1.1.2 rapid count 100 
PING 1.1.1.2 (1.1.1.2): 56 data bytes
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
--- 1.1.1.2 ping statistics ---
100 packets transmitted, 100 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.523/0.603/4.442/0.432 ms

lab@mxA-2> ping 2.2.2.2 rapid count 100    
PING 2.2.2.2 (2.2.2.2): 56 data bytes
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
--- 2.2.2.2 ping statistics ---
100 packets transmitted, 100 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.521/0.544/0.846/0.042 ms


lab@mxA-1> show bridge mac-table 

MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
           SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)

Routing instance : default-switch
 Bridging domain : test, VLAN : 200
   MAC                 MAC      Logical          NH     RTR
   address             flags    interface        Index  ID
   cc:e1:7f:7c:b2:78   D        ge-1/1/0.0      
   cc:e1:7f:7c:d1:7b   D        ge-1/1/1.0      


lab@mxB-2> show bridge mac-table 

MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
           SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)

Routing instance : default-switch
 Bridging domain : test, VLAN : 200
   MAC                 MAC      Logical          NH     RTR
   address             flags    interface        Index  ID
   cc:e1:7f:7c:b2:78   D        ge-1/1/1.0      
   cc:e1:7f:7c:d1:7b   D        ge-1/1/0.0      


lab@mxC-1> show bridge mac-table 

MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
           SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)

Routing instance : default-switch
 Bridging domain : test, VLAN : 200
   MAC                 MAC      Logical          NH     RTR
   address             flags    interface        Index  ID
   cc:e1:7f:7c:b2:78   D        ge-1/1/0.0      
   cc:e1:7f:7c:d1:7b   D        ge-1/1/3.0      


interfaces {
    ge-1/1/3 {
        vlan-tagging;
        unit 0 {
            vlan-id 100;
            family inet {
                address 1.1.1.2/24;
            }
        }
        unit 1 {
            vlan-id 222;
            family inet {
                address 2.2.2.2/24;
            }                           
        }
    }
    fxp0 {
        description "MGMT INTERFACE - DO NOT DELETE";
        unit 0 {
            family inet {
                address 10.210.14.6/24;
            }
        }
    }
}


lab@mxC-2> traceroute 2.2.2.1 
traceroute to 2.2.2.1 (2.2.2.1), 30 hops max, 40 byte packets
 1  2.2.2.1 (2.2.2.1)  0.852 ms  0.623 ms  0.552 ms

lab@mxC-2> traceroute 1.1.1.1    
traceroute to 1.1.1.1 (1.1.1.1), 30 hops max, 40 byte packets
 1  1.1.1.1 (1.1.1.1)  0.948 ms  0.584 ms  0.536 ms

lab@mxC-2> ping 1.1.1.1 rapid count 100  
PING 1.1.1.1 (1.1.1.1): 56 data bytes
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
--- 1.1.1.1 ping statistics ---
100 packets transmitted, 100 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.525/0.573/1.529/0.130 ms

lab@mxC-2> ping 2.2.2.1 rapid count 100    
PING 2.2.2.1 (2.2.2.1): 56 data bytes
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
--- 2.2.2.1 ping statistics ---
100 packets transmitted, 100 packets received, 0% packet loss

round-trip min/avg/max/stddev = 0.522/0.556/0.947/0.060 ms




Please see the "interface mode: to customer facing using "access", so the provider tunnel all Customer Vlans