Juniper-VPLS技术简介

Copyright©2003JuniperNetworks,Inc.ProprietaryandConfidential©2003JuniperNetworks,Inc.ProprietaryandConfidential–A1CE–B1CE–A3CE–A2CE–B2PVirtualPrivateLANServiceAprivateEthernetnetworkconstructedovera‘shared’infrastructurewhichmayspanseveralmetroareasMultipointtoMultipointEthernetconnectivitywheretheSPnetworklookslikeanEthernetbroadcastdomainComplimentsLayer32547andLayer2VPNsPE33Copyright©2003JuniperNetworks,Inc.ProprietaryandConfidentialTunnel(PEtoPE)•RSVP-TE,‘Normal’LDP,GRE,IPSec..•Maybeusedformanyservices:•IPv4VPN,IPv6VPN,L2VPN,6PE,VPLS..•MaybeprovisionedindependentofVPLSDemultiplexor,VirtualChannelIdentifier,VCLabel,InnerLabel•IdentifiestheVPLStowhichapacketbelongsto,aswellastheingressPEVPLSInstance:bridginginstanceresidingatthePEVPLSDomain:VPNSiteBPEPEAttachementCircuitProviderIPNetworkCPECPEEmulatedTunnelAttachementCircuitSiteAVPLSInstance4Copyright©2003JuniperNetworks,Inc.ProprietaryandConfidentialControlPlane•VPNDiscovery•DiscoverwhoarethePEmembersofagivenVPN•VPNSignaling•Setupandteardownofthepseudo-wiresbetweenVPLSinstancesthatconstitutetheVPLSDomainForwardingPlane•MACLearningandPacketForwarding•MACAging•MACFlushing5Copyright©2003JuniperNetworks,Inc.ProprietaryandConfidential:IhaveVPLSInstance3forVPLSdomainREDLocalPortsRxVCLabelW/TxVCLabelXforVPLSinstanceAif0VirtualRemotePortsif1if2RxVCLabelY/TxVCLabelZforVPLsinstanceBSignaling:UsetheseVCLabels(Rx)tosendtraffictomeVPLSREDinstance3PEAPEB6Copyright©2003JuniperNetworks,Inc.ProprietaryandConfidentialControlPlane•VPNAuto-Discovery•Auto-discoverycanbedonebyBGP•IETFproposalstoextendDNSorRADIUSforauto-discovery•VPNSignaling•Demultiplexorscanbesignaled–bytargetedLDP(draft-lasserre-vkompella-ppvpn-vpls)»O(N^2)LDPsessionsoperationalchallenge–byBGP(draft-kompella-ppvpn-vpls)•AsingleMP-BGPLNRIsupportsbothAuto-DiscoveryandSignaling•UsingtwodifferentprotocolsforAuto-discovery&Signaling•Morecomplextodebug•Morecomplexityandinter-protocolinteractions•Moreprotocolstateinthenetwork7Copyright©2003JuniperNetworks,Inc.ProprietaryandConfidentialIPVPNservices(akaRFC2547VPN)•RFC2547,draft-ietf-ppvnp-2547bisBGPforVPNauto-discovery•draft-ietf-ppvpn-bgpvpn-autoIPv6VPN•draft-ietf-ppvpn-bgp-ipv6-vpn-03.txt•ExtensionstoRFC2547bistosupportIPv6VPNsVirtualPrivateLANService(VPLS)•draft-kompella-ppvpn-vplsBGPisaproven,multi-vendorsolutiondeployedinproductionnetworkstoday8Copyright©2003JuniperNetworks,Inc.ProprietaryandConfidentialUsingBGPforVPNAuto-discoveryandSignalingprovidesthefollowingbenefits•AsingleMP-BGPNLRIformostefficientAuto-DiscoveryandSignaling•Nooverhead•Noneedforcomplexinter-protocolinteractions•SameframeworkasIP-VPNs(2547bis)•Takesadvantageofallthescalability,redundancyandoperationalsimplicityfeaturesavailableinBGP:•RouteReflectors,Refresh,etc…•SupportsMulti-AS/Multi-provideroperations9Copyright©2003JuniperNetworks,Inc.ProprietaryandConfidentialVPNConnectionTable(VCT)isconfiguredonthePEsperVPLSinstancewith:RD1234:5.6.7.8Layer2VPLSVEID3#sites20ImpRT1234:8765ExpRT1234:8765RouteDistinguisher:definesuniqueVCTLayer2encapsulationsettoVPLSVPLSEdgeIDOneperVPLSInstanceperPEirrespectiveofhowmanylocalportsbelongtothatVPLSEstimatedtotalnumberofPEswhichhavesitesbelongingtothatVPLSRouteTarget:determinesVPNtopologyVPLSmustbeafullmeshImportRTalwaysthesameasExportRTImpliesfull-meshofPE-PETunnels&Split-HorizonforwardingschemetoavoidSpanningTreeVPNConnectionTable(VCT)10Copyright©2003JuniperNetworks,Inc.ProprietaryandConfidential{//ConfigurationforVPNAinstance-typevpls;//vplsinterfacege-0/0/0.0;//multipointEthernetinterfaceroute-distinguisher1234:5.6.7.8;route-target1234:8765;//setRouteTargetto1234:8765protocols{//PE-CEprotocolvpls{site-range20;siteCE-A3{site-identifier3;}}}}11Copyright©2003JuniperNetworks,Inc.ProprietaryandConfidential{//ConfigurationforVPNAinstance-typevrf;//RFC2547VPNinterfacege-0/0/0.0;//sub-interfaceroute-distinguisher1234:5.6.7.8;route-target1234:8765;//setRouteTargetto1234:8765protocols{//PE-CEprotocolrip{version-2;//RIPv2groupto-CE-A3{exportdefault;interfaceso-0/0/0.0;//sub-interfaceforRIPv2}}}}12Copyright©2003JuniperNetworks,Inc.ProprietaryandConfidentialForVPLSDomainRED•PE-2isconfiguredwithSite2VCT•PE-3isconfiguredwithSite3VCTEachPEautomaticallyallocatesaVPNlabelblocktobeusedasdemultiplexorsSite2Site3PE-3CE-3PE-2CE-2VFTVFTVlan10Vlan10LSP640LSP320Site3VCTRouteTargetVEIDRED3Sites20LabelbaseRouteDist100:1.2.3.3Site2VCTRoute