[j-nsp] evpn trouble

Baldur Norddahl baldur at gigabit.dk
Fri May 7 10:45:18 EDT 2021


Hello

I am deploying EVPN and while it works, we are having some issues. Here is
the first one:

An EVPN instance configured for testing on a MX204 and an ACX5448 both
running 21.1R1. The have the same exact configuration except for the IP
address of the IRB interface:

baldur at formervangen-core3# show interfaces irb.20
family inet {
    address 185.24.168.92/29;
}

[edit]
baldur at formervangen-core3# show routing-instances evpntest
instance-type evpn;
protocols {
    evpn;
}
vlan-id 20;
routing-interface irb.20;
interface xe-0/0/42.20;
vrf-target target:60876:20;

[edit]
baldur at formervangen-core3# show interfaces xe-0/0/42
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
unit 20 {
    encapsulation vlan-bridge;
    vlan-id 20;
}

Also irb.20 is in a layer 3 VRF called "internet".

On the MX204 the interface irb.20 comes online but on the ACX5448 the
irb.20 interface stays in the state hardware-down:

baldur at formervangen-core3# run show interfaces irb.20
  Logical interface irb.20 (Index 76) (SNMP ifIndex 563)
    Flags: Hardware-Down Up SNMP-Traps 0x4004000 Encapsulation: ENET2
    Bandwidth: 1Gbps
    Routing Instance: None Bridging Domain: None
    Input packets : 0
    Output packets: 0
    Protocol inet, MTU: 1514
    Max nh cache: 100000, New hold nh limit: 100000, Curr nh cnt: 0, Curr
new hold cnt: 0, NH drop cnt: 0
      Flags: Sendbcast-pkt-to-re, Is-Primary
      Addresses, Flags: Dest-route-down Is-Preferred Is-Primary
        Destination: 185.24.168.88/29, Local: 185.24.168.92, Broadcast:
185.24.168.95
    Protocol multiservice, MTU: Unlimited

In fact I can not get the irb interface to go up at all on the ACX5448
platform. Is IRB unsupported? Without it a lot of EVPN features are not
available.

In our production environment the mx204 routers do not have any servers
directly connected. The irb interface will therefore not come online. But
since the acx5448 switches refuse to have their own irb interfaces, I need
the mx204 to do the task. My solution right now is to add a dummy interface
to the evpn instance on the mx204. Is there a better way? Why did Juniper
not include a knop to bring irb up even without any physical interfaces
active in the vpn?

Thanks,

Baldur


More information about the juniper-nsp mailing list