[j-nsp] EtherChannel/Aggregate link between Juniper M5 and Foundry BigIron 15000

[FAHAD ALI KHAN]

Dear All

I have to configure aggregate link (LACP) (also known as Etherchannel in
Cisco term and Trunk groups in Foundry) between Juniper M5 and Foundry
BigIron 15000 Fast Ethernet Interfaces. I have to loadbalance the traffic
between Juniper and BigIron. My scenario is like this,

UpStream --- Juniper M5 === BigIron 15000 ------ Connected to Other
PoPs/Clients/Servers on Fiber and Ethernet

The link between Juniper and BigIron 15000 is a L3 means it is L3 aggregate
link.

Foundry Ethernet Module is JetCore Copper E Module (48 Port FastEthernet)
and Router Flash Code. Juniper has 4 port FE PIC and JunOS 6.4R2.4

I have done following configuration,

 BigIron 15000

BigIron (config)# interface ethernet 4/1
BigIron (config-if-e100-4/1)# link-aggregate configure key 10000
BigIron (config-if-e100-4/1)# link-aggregate active
 BigIron (config)# interface ethernet 4/1
BigIron (config-if-e100-4/2)# link-aggregate configure key 10000
BigIron (config-if-e100-4/2)# link-aggregate active
BigIron (config)# vlan 10 name aggregate-link
BigIron (config-vlan-10)#untag eth 4/1 to eth 4/2
BigIron (config-vlan-10)#router-interface ve 10
BigIron (config)#interface ve 10
BigIron (config-vif-14)#ip address 192.168.0.1 255.255.255.252

M5

chassis
aggregated-devices {
    ethernet {
        device-count 2;
    }
}


[edit interfaces]
fe-0/0/0 {
  fastether-options {
      802.3ad ae0;
 }
}

fe-0/0/1{
  fastether-options {
      802.3ad ae0;
 }
}

ae0 {
   aggregated-ether-options {
       lacp {
           active;          // also check with passive state at
Juniper end (results same)
       }
   }
    unit 0 {
     family inet {
       address 192.168.0.2/30 {
      }
  }
}

routing-options {
    autonomous-system *abcde*;
    forwarding-table {
        export [ load-balance ];
    }
}
policy-options {
    policy-statement load-balance {

        then {
            load-balance per-packet;
        }
    }
}
forwarding-options {
    hash-key {
        family inet {
            layer-3;
            layer-4;
        }
    }

}
hash-key {
    family inet {
        layer-3 {
            destination-address;
            protocol;
            source-address;
        }
        layer-4 {
            destination-port;
            source-port;
            type-of-service;
        }
    }
}

After testing this setup, it is amazing that i can not be able to do
load balancing, and traffic pattern is quite amazing like this,

Juniper-M5-FE1-input = 2Mbps , Juniper-M5-FE1-output = 0
Juniper-M5-FE2-input = 0     , Juniper-M5-FE2-output = 2Mbps

i.e. Input on 1 interface and output on other..... :(

As far as i know, the load balancing is done on Source/Dest IP address
also Dource/Dest MAC Address, but it doesnt seem in this scenario. Can
any one check this configuration and tell me....am i doing some
mistake in configuration.


Regards

Fahad