[j-nsp] EX4600 Vs QFX 5100 VS ACX 5048

Aaron aaron1 at gvtc.com
Fri May 6 13:17:00 EDT 2016


As I recall, vpls bgp ad w/ldp sig worked interop between all these....

 Cisco ASR9K
 Cisco ASR920 (2 flavors as I recall)
 Cisco ASR903
 Cisco ME3600
 Juniper MX104
 Juniper ACX5048

... all those in same vpls elan

Currently i'm seeing an occasional issue with ACX5048 and ASR9k.  what I'm
seeing is sometimes, not all the time, the asr9k of the elan pw side will be
down. clear mpls ldp neighbor (x.x.x.x ip of acx) seconds later vpls starts
working and stays good.  This occurs when I make a change on the acx.
...like reconfig of acx vpls construct.  Jtac didn't know why. (I owe them
the var log files from traces) Cisco tac says upgrade my 4.1.2 to 4.3.4 or
5.1.3 but I see bugs with vpls in 5.1.3 anyway... so dunno
...this vpls test is going between about 25 live pe's right now... the acx
is a test pe in that 25-PE elan.  About (4) ARE 9k's and about (20) others
are me3600's.  the 3600's do not have this down'd pw issue towards acx....
only the (4) 9k's do.

I know what to do when it happens so I'm moving forward with the acx5048 and
going live with a couple of them

My l3vpn mpls vrf (routing-instance) on ACX is working fine... i learned
that it's different than cisco whereas static and direct connect routes are
automagically advertised into the vpl .... so I wonder if this is what you
mean by auto-export.  If so, yes it's working. (I'm fairly new to Juniper,
and been doing cisco for several years and am accustomed to cisco mpls l3vpn
requiring redistribution of static and connected routes explicitly
configured)
... what do you mean by "worked on tagged link?"  if you mean am I tagging
the PE-CE handoff then the answer is yes... I get tagged frames on PE-CE, I
put those into a vlan, I put irb on top of vlan and I vrf (routing-instance)
the irb. Done.  Works.  I also added ip-helper (cisco speak for dhcp relay)
also into that RI... which caused me to learn about access/access-internal
routes... wow, /32's for every host advertised throughout the vpn !
"......route-suppression access-internal" fixed that.

I did a quick ELINE EVPL (mef-speak for vlan- based pw) which I think is
what you mean by ldp-based l2circuit... ( I did set protocols l2circuit
neighbor 1.1.1.1 interface ge-0/0/38.0 virtual-circuit-id 999 , ge-0/0/38.0
has encap vlan-ccc vlan-id 17 and family ccc) and did this to the other side
which was a cisco me3600 ( I need to test 9k soon and will ) ...me3600 was a
interface with service instance encap dot1q 17 rewrite sym pop thing and
xconnect 1.1.1.2 999 encap mpls)  .... works... done.

I want/need to test mef eline epl (port based l2circuit to carry all vlans)

I want/need to test mef etree eptree/evptree since I support some of that
too in my network, but not as much as eline and elan

Acx label stack ?  dunno.... did I read 3 somewhere ?  don't recall....

Snmp counter on vlan or subint ?  dunno yet  but will probably soon find out
as solarwinds is watching a couple of my deployed acx's...  check back
later.

- Aaron




More information about the juniper-nsp mailing list