Re: Juniper MPLS VPN issue **

You have the same RD on both pe1 and pe2.

Also juniper nsp forum is pretty active. Try techexams juniper section very good people out there.

And we would love to help John Chambers with some Juniper stuff

Juniper is never complicated, once you get a hang of it, you would love it.

- Hoogen
Sent from IPhone

On Oct 12, 2010, at 1:43 PM, "Sharifi, Reza" <Reza.Sharifi_at_gdit.com> wrote:

> John,
>
> Can you first enable family inet unicast on all PE routers (set protocols bgp group int family inet unicast)
> And then family inet-vpn unicast and test again?
>
> HTH
> Reza
>
> -----Original Message-----
> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of John Chambers
> Sent: Tuesday, October 12, 2010 3:52 PM
> To: Cisco certification
> Subject: OT: Juniper MPLS VPN issue **
>
> hi guys, this may not be the right forum but Juniper forums suck bigtime,
> just like their documentation. I'm trying my luck here.
>
> i cant run a simple MPLS VPN on Juniper! ...and i dont see (or i dont know
> yet) enough tools to troubleshoot mpls vpn data plane. it'll take not more
> than 5 mins for me on Cisco but Juniper...:(
>
> Any help will be appreciated.
>
> I hve a simple CE1-PE1-P-PE2-CE2 topology.
>
> Traffic between CE1 and CE2 isnt flowing. Control plane is fine. CE1 can see
> CE2 routes and vice versa.
>
> Configs-
>
> PE1:
> interfaces {
>
> em1 {
> unit 0 {
> description TO-CE1;
> family inet {
> address 10.1.1.2/30;
> }
> family mpls;
> }
> }
> em2 {
> unit 0 {
> description TO-P;
> family inet {
> address 192.168.12.1/24;
> }
> family mpls;
> }
> }
> lo0 {
> unit 0 {
> family inet {
> address 1.1.1.1/32;
> }
> }
> }
> }
> protocols {
> mpls {
> interface em2.0;
> interface lo0.0;
> interface all;
> }
> bgp {
> group MP-IBGP {
> type internal;
> local-address 1.1.1.1;
> family inet-vpn {
> unicast;
> }
> local-as 100;
> neighbor 3.3.3.3;
> }
> }
> ospf {
> area 0.0.0.0 {
> interface em2.0;
> interface lo0.0;
> }
> }
> ldp {
> interface em2.0;
> interface lo0.0;
> }
> }
> policy-options {
> policy-statement MPBGP->OSPF {
> term 1 {
> from protocol bgp;
> then accept;
> }
> }
> }
> routing-instances {
> VPN-A {
> instance-type vrf;
> interface em1.0;
> route-distinguisher 1:1;
> vrf-target target:1:1;
> protocols {
> ospf {
> export MPBGP->OSPF;
> area 0.0.0.0 {
> interface em1.0 {
> interface-type p2p;
> }
> }
> }
> }
> }
> }
>
>
> @JUN1-PE1# run show route
>
> inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 1.1.1.1/32 *[Direct/0] 02:45:42
>> via lo0.0
> 2.2.2.2/32 *[OSPF/10] 02:41:25, metric 1
>> to 192.168.12.2 via em2.0
> 3.3.3.3/32 *[OSPF/10] 00:59:27, metric 2
>> to 192.168.12.2 via em2.0
> 192.168.12.0/24 *[Direct/0] 02:45:42
>> via em2.0
> 192.168.12.1/32 *[Local/0] 02:45:42
> Local via em2.0
> 192.168.23.0/24 *[OSPF/10] 02:41:25, metric 2
>> to 192.168.12.2 via em2.0
> 192.168.59.0/24 *[Direct/0] 21:32:21
>> via em0.0
> 192.168.59.10/32 *[Local/0] 21:32:21
> Local via em0.0
> 224.0.0.5/32 *[OSPF/10] 02:41:35, metric 1
> MultiRecv
>
> inet.3: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 2.2.2.2/32 *[LDP/9] 02:41:24, metric 1
>> to 192.168.12.2 via em2.0
> 3.3.3.3/32 *[LDP/9] 00:59:27, metric 1
>> to 192.168.12.2 via em2.0, Push 300096
>
> VPN-A.inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 10.1.1.0/30 *[Direct/0] 02:28:53
>> via em1.0
> 10.1.1.2/32 *[Local/0] 02:28:53
> Local via em1.0
> 10.10.10.10/32 *[OSPF/10] 01:20:16, metric 2
>> to 10.1.1.1 via em1.0
> 20.1.1.0/30 *[BGP/170] 00:03:19, localpref 100, from 3.3.3.3
> AS path: I
>> to 192.168.12.2 via em2.0, Push 299808, Push 300096(top)
> 20.20.20.20/32 *[BGP/170] 00:03:19, MED 2, localpref 100, from 3.3.3.3
> AS path: I
>> to 192.168.12.2 via em2.0, Push 299808, Push 300096(top)
> 224.0.0.5/32 *[OSPF/10] 02:28:54, metric 1
> MultiRecv
>
> mpls.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 0 *[MPLS/0] 02:41:35, metric 1
> Receive
> 1 *[MPLS/0] 02:41:35, metric 1
> Receive
> 2 *[MPLS/0] 02:41:35, metric 1
> Receive
> 300560 *[LDP/9] 02:41:24, metric 1
>> to 192.168.12.2 via em2.0, Pop
> 300560(S=0) *[LDP/9] 02:41:24, metric 1
>> to 192.168.12.2 via em2.0, Pop
> 300608 *[LDP/9] 00:59:27, metric 1
>> to 192.168.12.2 via em2.0, 300096
> 300624 *[VPN/170] 00:53:40
>> to 10.1.1.1 via em1.0, Pop
>
> bgp.l3vpn.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 1:1:20.1.1.0/30
> *[BGP/170] 00:53:40, localpref 100, from 3.3.3.3
> AS path: I
>> to 192.168.12.2 via em2.0, Push 299808, Push 300096(top)
> 1:1:20.20.20.20/32
> *[BGP/170] 00:53:40, MED 2, localpref 100, from 3.3.3.3
> AS path: I
>> to 192.168.12.2 via em2.0, Push 299808, Push 300096(top)
>
> [edit interfaces em2 unit 0]
> @JUN1-PE1# run show ldp database
> Input label database, 1.1.1.1:0--2.2.2.2:0
> Label Prefix
> 300064 1.1.1.1/32
> 3 2.2.2.2/32
> 300096 3.3.3.3/32
>
> Output label database, 1.1.1.1:0--2.2.2.2:0
> Label Prefix
> 3 1.1.1.1/32
> 300560 2.2.2.2/32
> 300608 3.3.3.3/32
> -----------------------------------------------------------------------------------------------------------------
> P:
>
> interfaces {
>
> em1 {
> unit 0 {
> description TO-PE1;
> family inet {
> address 192.168.12.2/24;
> }
> family mpls;
> }
> }
> em2 {
> unit 0 {
> description TO-PE2;
> family inet {
> address 192.168.23.2/24;
> }
> family mpls;
> }
> }
> lo0 {
> unit 0 {
> family inet {
> address 2.2.2.2/32;
> }
> }
> }
> }
> protocols {
> mpls {
> interface em1.0;
> interface em2.0;
> interface lo0.0;
> }
> ospf {
> area 0.0.0.0 {
> interface em1.0;
> interface em2.0;
> interface lo0.0;
> }
> }
> ldp {
> interface em1.0;
> interface em2.0;
> interface lo0.0;
> }
> }
>
>
> @JUN2-P# run show route
>
> inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 1.1.1.1/32 *[OSPF/10] 02:43:05, metric 1
>> to 192.168.12.1 via em1.0
> 2.2.2.2/32 *[Direct/0] 02:48:53
>> via lo0.0
> 3.3.3.3/32 *[OSPF/10] 01:01:18, metric 1
>> to 192.168.23.3 via em2.0
> 192.168.12.0/24 *[Direct/0] 02:48:53
>> via em1.0
> 192.168.12.2/32 *[Local/0] 02:48:53
> Local via em1.0
> 192.168.23.0/24 *[Direct/0] 02:48:53
>> via em2.0
> 192.168.23.2/32 *[Local/0] 02:48:53
> Local via em2.0
> 192.168.59.0/24 *[Direct/0] 21:13:38
>> via em0.0
> 192.168.59.11/32 *[Local/0] 21:13:38
> Local via em0.0
> 224.0.0.5/32 *[OSPF/10] 02:45:33, metric 1
> MultiRecv
>
> inet.3: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 1.1.1.1/32 *[LDP/9] 01:01:17, metric 1
>> to 192.168.12.1 via em1.0
> 3.3.3.3/32 *[LDP/9] 01:01:18, metric 1
>> to 192.168.23.3 via em2.0
>
> mpls.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 0 *[MPLS/0] 02:44:56, metric 1
> Receive
> 1 *[MPLS/0] 02:44:56, metric 1
> Receive
> 2 *[MPLS/0] 02:44:56, metric 1
> Receive
> 300064 *[LDP/9] 01:01:17, metric 1
>> to 192.168.12.1 via em1.0, Pop
> 300064(S=0) *[LDP/9] 01:01:17, metric 1
>> to 192.168.12.1 via em1.0, Pop
> 300096 *[LDP/9] 01:01:18, metric 1
>> to 192.168.23.3 via em2.0, Pop
> 300096(S=0) *[LDP/9] 01:01:18, metric 1
>> to 192.168.23.3 via em2.0, Pop
>
> [edit protocols]
> @JUN2-P# run show ldp database
> Input label database, 2.2.2.2:0--1.1.1.1:0
> Label Prefix
> 3 1.1.1.1/32
> 300560 2.2.2.2/32
> 300608 3.3.3.3/32
>
> Output label database, 2.2.2.2:0--1.1.1.1:0
> Label Prefix
> 300064 1.1.1.1/32
> 3 2.2.2.2/32
> 300096 3.3.3.3/32
>
> Input label database, 2.2.2.2:0--3.3.3.3:0
> Label Prefix
> 299792 1.1.1.1/32
> 299776 2.2.2.2/32
> 3 3.3.3.3/32
>
> Output label database, 2.2.2.2:0--3.3.3.3:0
> Label Prefix
> 300064 1.1.1.1/32
> 3 2.2.2.2/32
> 300096 3.3.3.3/32
> --------------------------------------------------------------------------------------------------
>
> PE2
>
> interfaces {
>
> em1 {
> unit 0 {
> description TO-P;
> family inet {
> address 192.168.23.3/24;
> }
> family mpls;
> }
> }
> em2 {
> unit 0 {
> description TO-CE2;
> family inet {
> address 20.1.1.2/30;
> }
> family mpls;
> }
> }
> lo0 {
> unit 0 {
> family inet {
> address 3.3.3.3/32;
> }
> }
> }
> }
> protocols {
> mpls {
> interface em1.0;
> interface lo0.0;
> interface all;
> }
> bgp {
> group MP-IBGP {
> type internal;
> local-address 3.3.3.3;
> family inet-vpn {
> unicast;
> }
> local-as 100;
> neighbor 1.1.1.1;
> }
> }
> ospf {
> area 0.0.0.0 {
> interface em1.0;
> interface lo0.0;
> }
> }
> ldp {
> interface em1.0;
> interface lo0.0;
> }
> }
> policy-options {
> policy-statement MPBGP->OSPF {
> term 1 {
> from protocol bgp;
> then accept;
> }
> }
> }
> routing-instances {
> VPN-A {
> instance-type vrf;
> interface em2.0;
> route-distinguisher 1:1;
> vrf-target target:1:1;
> protocols {
> ospf {
> export MPBGP->OSPF;
> area 0.0.0.0 {
> interface em2.0 {
> interface-type p2p;
> }
> }
> }
> }
> }
> }
>
> [edit interfaces em2 unit 0]
> @JUN3-PE2# run show route
>
> inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 1.1.1.1/32 *[OSPF/10] 01:02:58, metric 2
>> to 192.168.23.2 via em1.0
> 2.2.2.2/32 *[OSPF/10] 01:02:58, metric 1
>> to 192.168.23.2 via em1.0
> 3.3.3.3/32 *[Direct/0] 01:03:48
>> via lo0.0
> 192.168.12.0/24 *[OSPF/10] 01:02:58, metric 2
>> to 192.168.23.2 via em1.0
> 192.168.23.0/24 *[Direct/0] 01:03:48
>> via em1.0
> 192.168.23.3/32 *[Local/0] 01:03:48
> Local via em1.0
> 192.168.59.0/24 *[Direct/0] 01:03:48
>> via em0.0
> 192.168.59.12/32 *[Local/0] 01:03:48
> Local via em0.0
> 224.0.0.5/32 *[OSPF/10] 01:03:51, metric 1
> MultiRecv
>
> inet.3: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 1.1.1.1/32 *[LDP/9] 01:02:58, metric 1
>> to 192.168.23.2 via em1.0, Push 300064
> 2.2.2.2/32 *[LDP/9] 01:02:58, metric 1
>> to 192.168.23.2 via em1.0
>
> VPN-A.inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 10.1.1.0/30 *[BGP/170] 00:05:34, localpref 100, from 1.1.1.1
> AS path: I
>> to 192.168.23.2 via em1.0, Push 300624, Push 300064(top)
> 10.10.10.10/32 *[BGP/170] 00:05:34, MED 2, localpref 100, from 1.1.1.1
> AS path: I
>> to 192.168.23.2 via em1.0, Push 300624, Push 300064(top)
> 20.1.1.0/30 *[Direct/0] 01:01:16
>> via em2.0
> 20.1.1.2/32 *[Local/0] 01:01:16
> Local via em2.0
> 20.20.20.20/32 *[OSPF/10] 01:01:11, metric 2
>> to 20.1.1.1 via em2.0
> 224.0.0.5/32 *[OSPF/10] 01:01:16, metric 1
> MultiRecv
>
> mpls.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 0 *[MPLS/0] 01:03:51, metric 1
> Receive
> 1 *[MPLS/0] 01:03:51, metric 1
> Receive
> 2 *[MPLS/0] 01:03:51, metric 1
> Receive
> 299776 *[LDP/9] 01:02:58, metric 1
>> to 192.168.23.2 via em1.0, Pop
> 299776(S=0) *[LDP/9] 01:02:58, metric 1
>> to 192.168.23.2 via em1.0, Pop
> 299792 *[LDP/9] 01:02:58, metric 1
>> to 192.168.23.2 via em1.0, 300064
> 299808 *[VPN/170] 00:57:08
>> to 20.1.1.1 via em2.0, Pop
>
> bgp.l3vpn.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 1:1:10.1.1.0/30
> *[BGP/170] 00:57:08, localpref 100, from 1.1.1.1
> AS path: I
>> to 192.168.23.2 via em1.0, Push 300624, Push 300064(top)
> 1:1:10.10.10.10/32
> *[BGP/170] 00:57:08, MED 2, localpref 100, from 1.1.1.1
> AS path: I
>> to 192.168.23.2 via em1.0, Push 300624, Push 300064(top)
>
> [edit interfaces em2 unit 0]
> @JUN3-PE2# run show ldp database
> Input label database, 3.3.3.3:0--2.2.2.2:0
> Label Prefix
> 300064 1.1.1.1/32
> 3 2.2.2.2/32
> 300096 3.3.3.3/32
>
> Output label database, 3.3.3.3:0--2.2.2.2:0
> Label Prefix
> 299792 1.1.1.1/32
> 299776 2.2.2.2/32
> 3 3.3.3.3/32
>
> @JUN3-PE2# run traceroute routing-instance VPN-A 10.10.10.10 source 20.1.1.2
>
> traceroute to 10.10.10.10 (10.10.10.10) from 20.1.1.2, 30 hops max, 40 byte
> packets
> 1 * *^^x
>
>
> @JUN3-PE2# run traceroute routing-instance VPN-A 10.1.1.1 source 20.1.1.2
> no-resolve
> traceroute to 10.1.1.1 (10.1.1.1) from 20.1.1.2, 30 hops max, 40 byte
> packets
> ^C
> @JUN3-PE2# run traceroute routing-instance VPN-A 10.1.1.2 source 20.1.1.2
> no-resolve
> traceroute to 10.1.1.2 (10.1.1.2) from 20.1.1.2, 30 hops max, 40 byte
> packets
> 1 *^C
>
>
> What i'm i missing?
>
> All Juniper examples have traffic engineering mixed with mpls vpn. They love
> complicating things !
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Oct 12 2010 - 20:24:06 ART