[j-nsp] QFX 5100 can you mix vlan-ccc + vlan-bridge on the same interface with 14.1X53-D43.7

[Alain Hebert]

     Well problem[S],

     That why I'm looking to see if our lab is working out of luck, 
because we're mixing vlan-bridge and vlan-ccc units on the same ae0 and 
xe-*, and everything is fine for over a month of burn testing.

     Thanks for your time.


-----


The context,

     Our 17.x lab of QFX with a MX240 and vMX is working fine.

     We got a pretty good MPLS alphabet soup recipe ready for 
production.  MPLS+ISIS+BGP Underlay, aeX + vlan-bridge + ccc mixing 
together, EVPN+VXLAN on their own port, VRFs, without any data plane 
drama, etc.

     So taking from that success...


The problem,

     We're running some QFX5100 in VCF in production, with 14.x, and 
added a VLAN-CCC on a port with other unit's in VLAN-BRIDGE which pretty 
much made the data plane hate us about 10h later, when we tried to 
figure out why there was no data thru that circuit.

     And by hating, I mean spewing ~300k/pps of unknowned traffic badly 
encapsulated.

     ( The fix was delete the port configuration, commit, rollback 2, 
commit )

     Jeff pretty much pointed us to a PR mentioning that type of 
behavior on 14.x train...


The solution,

     Was to hairpin 2 ports on the QFX5100/VCF stack.  1 port being only 
the 2 vlan-ccc and the other being the 2 vlan-bridge of the VLANs we 
wanted to CCC out of that aeX.

-----
Alain Hebert                                ahebert at pubnix.net
PubNIX Inc.
50 boul. St-Charles
P.O. Box 26770     Beaconsfield, Quebec     H9W 6G7
Tel: 514-990-5911  http://www.pubnix.net    Fax: 514-990-9443

On 09/28/17 12:47, Pavel Lunin wrote:
> I really doubt that it's supported on QFX5100. Not 100% sure though.
>
> But what's your problem? It does not work in this combination or does 
> not work at all?
>
> IIRC, ex4600/qfx5100 do not support control word on pseudowires as 
> well (like ex4500/4550). So if you have something like an MX on the 
> other side, Martini signaling comes up but you see no traffic, try 
> no-control-word.
>
> Kind regards,
> Pavel
>
> 28 сент. 2017 г. 4:12 ПП пользователь "Alain Hebert" 
> <ahebert at pubnix.net <mailto:ahebert at pubnix.net>> написал:
>
>     Been crashing hard on google this morning...  Cannot find any hint
>     of limitations on the QFX platform for this case.
>
>         Sample config
>
>     flexible-vlan-tagging;
>     mtu 9216;
>     encapsulation flexible-ethernet-services;
>     unit 111 {
>         encapsulation vlan-ccc;
>         vlan-id 111;
>         input-vlan-map pop;
>         output-vlan-map push;
>
>     }
>     unit 222 {
>         encapsulation vlan-ccc;
>         vlan-id 222;
>         input-vlan-map pop;
>         output-vlan-map push;
>
>     }
>     unit 333 {
>         encapsulation vlan-bridge
>         vlan-id 333;
>     }
>
>         Just no input / output with:
>
>             Model: qfx5100-48s-6q
>             Junos: 14.1X53-D43.7
>
>         But it works in our lab
>
>             Model: qfx5100-48s-6q
>             Junos: 17.2R1.13
>
>     -- 
>     -----
>     Alain Hebert ahebert at pubnix.net <mailto:ahebert at pubnix.net>
>     PubNIX Inc.
>     50 boul. St-Charles
>     <https://maps.google.com/?q=50+boul.+St-Charles&entry=gmail&source=g>
>     P.O. Box 26770     Beaconsfield, Quebec     H9W 6G7
>     Tel: 514-990-5911 <tel:514-990-5911> http://www.pubnix.net   Fax:
>     514-990-9443 <tel:514-990-9443>
>
>     _______________________________________________
>     juniper-nsp mailing list juniper-nsp at puck.nether.net
>     <mailto:juniper-nsp at puck.nether.net>
>     https://puck.nether.net/mailman/listinfo/juniper-nsp
>     <https://puck.nether.net/mailman/listinfo/juniper-nsp>
>