[j-nsp] migration from cisco VRF+Vrrp to the juniper ACX

[A. Camci]

does anyone have an idea why it does not work on Acx( vrf+ vrrp).

Br ap


Op di 24 apr. 2018 om 10:20 schreef A. Camci <avciguzeli at gmail.com>

>
> Hi Guys,
>>
>> we are migration the Cisco CISCO7606-S to the  acx5096.
>> But we have 1 customer with VRF and VRRP on the same port.
>>
>> after migration to the ACX has customer no connection from the VRF.
>> if we switch back to cisco, everything works fine.
>>
>> this is a full redundant vrf.
>> other side is still cisco and all locations are now running on the backup
>> vrf.
>>
>> if we lower the priotry of the vrrp on the backup vrf we see that the
>> primary location becomes master. so the vrrp does work.  after switching
>> the vrrp has customer still one way traffic from the acx.  maybe vrf+vrrp
>> doesnt work on a ACX.
>>
>> see below for the config.
>>
>> CISCO config
>>
>> vlan 3021
>> mtu 1600
>> !
>> interface Vlan3021
>>  mtu 1600
>>  ip vrf forwarding CUST_APPIE
>>  ip address 172.21.1.251 255.255.255.0
>>  vrrp 1 description CUST_APPIE-DC-centraal-pri
>>  vrrp 1 ip 172.21.1.250
>>  vrrp 1 preempt delay minimum 10
>>  vrrp 1 priority 110
>> !
>>
>> interface Te3/4
>> switchport trunk allowed vlan add 3021
>>
>> ip vrf CUST_APPIE
>>  rd 10.31.0.61:10006
>>  route-target export 65001:10006
>>  route-target import 65001:10006
>>
>>
>>  router bgp 65001
>>  address-family ipv4 vrf CUST_APPIE
>>  no synchronization
>>  redistribute static
>>  redistribute connected
>>  default-information originate
>>  exit-address-family
>>
>> ip route vrf CUST_APPIE 0.0.0.0 0.0.0.0 172.21.1.1
>>
>>
>> JUNIPER CONFIG
>> ACX Model: acx5096_ Junos: 15.1X54-D61.6
>>
>> set interfaces xe-0/0/88 description "*** CUST_APPIE***"
>> set interfaces xe-0/0/88 flexible-vlan-tagging
>> set interfaces xe-0/0/88 speed 10g
>> set interfaces xe-0/0/88 mtu 1622
>> set interfaces xe-0/0/88 encapsulation flexible-ethernet-services
>> set interfaces xe-0/0/88 ether-options no-auto-negotiation
>>
>> set interfaces xe-0/0/88 unit 3021 vlan-id 3021
>> set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24
>> vrrp-group 1 virtual-address 172.21.1.250
>> set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24
>> vrrp-group 1 priority 110
>> set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24
>> vrrp-group 1 preempt hold-time 10
>> set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24
>> vrrp-group 1 accept-data
>>
>> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-export term 1
>> from protocol direct
>> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-export term 1
>> from protocol static
>> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-export term 1
>> then accept
>> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1
>> from protocol bgp
>> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1
>> from route-filter 0.0.0.0/0 exact
>> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1
>> then local-preference 150
>> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1
>> then accept
>> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 2
>> from protocol direct
>> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 2
>> then accept
>>
>> set routing-instances CUST_APPIE instance-type vrf
>> set routing-instances CUST_APPIE interface xe-0/0/88.3021
>> set routing-instances CUST_APPIE route-distinguisher 10.32.0.43:10006
>> set routing-instances CUST_APPIE vrf-target import target:65001:10006
>> set routing-instances CUST_APPIE vrf-target export target:65001:10006
>> set routing-instances CUST_APPIE vrf-table-label
>>
>> set routing-instances CUST_APPIE routing-options static route 0.0.0.0/0
>> next-hop 172.21.1.1
>>
>> set routing-instances CUST_APPIE forwarding-options dhcp-relay
>> server-group CUST_APPIE 172.21.1.1
>> set routing-instances CUST_APPIE forwarding-options dhcp-relay
>> active-server-group CUST_APPIE
>> set routing-instances CUST_APPIE forwarding-options dhcp-relay group
>> CUST_APPIE interface xe-0/0/88.3021
>> set routing-instances CUST_APPIE protocols bgp group ebgp-CUST_APPIE
>> import ipvpn-CUST_APPIE-ebgp-import
>> set routing-instances CUST_APPIE protocols bgp group ebgp-CUST_APPIE
>> export ipvpn-CUST_APPIE-ebgp-export
>>
>> set firewall family inet filter re-protect-v4 term accept-customer-vrrp
>> from protocol vrrp
>> set firewall family inet filter re-protect-v4 term accept-customer-vrrp
>> then count accept-vrrp-customer
>> set firewall family inet filter re-protect-v4 term accept-customer-vrrp
>> then accept
>> set firewall family inet filter routing-engine-traffic term mark-vrrp
>> from protocol vrrp
>> set firewall family inet filter routing-engine-traffic term mark-vrrp
>> then count mark-vrrp
>> set firewall family inet filter routing-engine-traffic term mark-vrrp
>> then forwarding-class NC1
>> set firewall family inet filter routing-engine-traffic term mark-vrrp
>> then accept
>>
>> i would really appreciate any help
>>
>> regards
>>
>> abdullah
>>
>>