Reliability

• Hybrid FRR

  NOTE:

  In Figure 7-3, CE1 is dual-homed to UPE1 and UPE2. A VPN tunnel is established between two UPEs. In this situation, hybrid FRR can be configured. If the UPE1-to-CE1 route has an unreachable next hop, hybrid FRR switches traffic from UPE1 to UPE2 to forward the traffic to CE1.

  Figure 7-3 Hybrid FRR
  

  Configure hybrid FRR using either of the following methods:

  • Method 1 is applicable to a network on which a non-BGP routing protocol is configured on links between PEs and a CE. Configure UPEs (UPE1 and UPE3) on the active link.

    #
    ip vpn-instance vpn1               //Enter the VPN instance view.
     ipv4-family
     ip frr                            //Enable IP FRR.
    #

  • Method 2 is applicable to a network on which BGP is configured on links between PEs and a CE. Configure UPEs (UPE1 and UPE3) on the active link.

    #
    bgp
     ipv4-family vpn-instance vpn1     //Enter the BGP-VPN instance IPv4 address family view.
      auto-frr                         //Enable VPN BGP Auto FRR.
    #

• IP FRR
  NOTE:

  In Figure 7-4, CE2 and CE3 are connected to UPE3. In this situation, IP FRR can be configured. If the UPE3's next hop to a VPN site is unreachable, IP FRR switches traffic from UPE3 to CE3 to forward the traffic to the destination VPN site.

  Figure 7-4 IP FRR
  

  Configure IP FRR using either of the following methods:

  • Method 1 is applicable to a network on which a non-BGP routing protocol is configured on links between PEs and a CE. Configure a UPE (UPE3) on the active link.

    #
    ip vpn-instance vpn1               //Enter the VPN instance view.
     ipv4-family
     ip frr                            //Enable IP FRR.
    #

  • Method 2 is applicable to a network on which BGP is configured on links between PEs and a CE. Configure a UPE (UPE3) on the active link.

    #
    bgp
     ipv4-family vpn-instance vpn1     //Enter the BGP-VPN instance IPv4 address family view.
      auto-frr                         //Enable VPN BGP Auto FRR.
    #

• BFD for VRRP

  For configuration details, see Associating a VRRP Backup Group with a BFD Session.

• Association between VRRP and NQA

  For configuration details, see Associating a VRRP Backup Group with an NQA Test Instance.

• IGP FC (Fast Convergence)
  • IS-IS Fast convergence

    #
    isis 1
     is-level level-2
     cost-style wide
     timer lsp-generation 1 level-2
     flash-flood level-2
     network-entity 86.0010.1921.6800.001.00
     is-name BJBJ-CR1
     timer spf 1 100 100
    log-peer-change
    #
    interface GigabitEthernet0/1/0
     isis enable 1
     isis timer hello { hello-interval1 | millisecond-timer hello-interval2 } [ level-1 | level-2 ]
    #
    

  • OSPF Fast convergence

    See Adjusting the OSPF Network Convergence Speed.

LSP reliability

• If an LDP LSP is used, use the following functions to improve reliability:

  • LDP IGP synchronization

    LDP-IGP synchronization is configured on the LDP peer nodes on the active link in an OSPF process and the cross node of the active and standby links.

    #
    ospf 1
     area 0
     ldp-sync enable                     //Enable LDP-IGP synchronization in an OSPF process.
    #

    LDP-IGP synchronization is configured on the LDP peer interfaces on the active link and the cross node of the active and standby links.

    #
    interface giabitethernet 0/1/0
     ip address 172.16.1.1 255.255.255.252
     mpls
     mpls ldp
     ldp-sync enable                     //Enable LDP-IGP synchronization in an OSPF process.
    #

  • LDP Auto FRR is configured on the ingress or a transit node on an LDP LSP.

    #
    mpls ldp
     auto-frr lsp-trigger host           //Enable LDP Auto FRR.
     graceful-delete                     //Enable LDP graceful deletion.
    #

• If a TE constraint-based routed label switched path (CR-LSP) is used, use the functions to improve reliability:

  • TE FRR

    For configuration details, see Configuring MPLS TE Manual FRR or Configuring MPLS TE Auto FRR.

  • MPLS TE Hot-standby

    For configuration details, see Configuring CR-LSP Backup.

  • BFD for CR-LSP/TE/RSVP

    For configuration details, see Configuring Static BFD for CR-LSP, Configuring Dynamic BFD for CR-LSP, Configuring Static BFD for TE and Configuring Dynamic BFD for RSVP.

BFD for VPN FRR

1. Configure VPN FRR. In this example, VPN FRR is configured on UPE1. The configurations on other nodes are similar to the configuration on UPE1.

   #
   bgp 100
    peer 3.3.3.3 as-number 100
    peer 3.3.3.3 connect-interface LoopBack1
    peer 4.4.4.4 as-number 100
    peer 4.4.4.4 connect-interface LoopBack1
    #
    ipv4-family unicast
     undo synchronization
     peer 3.3.3.3 enable
     peer 4.4.4.4 enable
   #
    ipv4-family vpnv4
     policy vpn-target
     peer 3.3.3.3 enable
     peer 4.4.4.4 enable
   #
    ipv4-family vpn-instance vpn1
     import direct
     import ospf
     auto-frr                                               //Enable Auto FRR in the BGP VPN instance view.
   #

2. Configure a multi-hop BFD session to monitor the active link.

   • Configure UPE1.

     #
     bfd for_ip_frr bind peer-ip 3.3.3.3
      discriminator local 10
      discriminator remote 30
     #

   • Configure UPE2.

     #
     bfd for_ip_frr bind peer-ip 4.4.4.4
      discriminator local 20
      discriminator remote 40
     #

   • Configure UPE3.

     #
     bfd for_ip_frr bind peer-ip 1.1.1.1
      discriminator local 30
      discriminator remote 10
     #

   • Configure UPE4.

     #
     bfd for_ip_frr bind peer-ip 2.2.2.2
      discriminator local 40
      discriminator remote 20
     #

• Configure UPE1. In the following example, Eth-Trunk 1 is configured on the AC interface of UPE1 and consists of four member interfaces GE 0/1/0 through GE 0/1/3.

  #
  interface eth-trunk 1               //Create Eth-trunk 1.
  #
  interface gigabitethernet 0/1/0
   eth-trunk 1                        //Add GE 0/1/0 to Eth-Tunk 1.
  #
  interface gigabitethernet 0/1/1
   eth-trunk 1                        //Add GE 0/1/1 to Eth-Tunk 1.
  #
  interface gigabitethernet 0/1/2
   eth-trunk 1                        //Add GE 0/1/2 to Eth-Tunk 1.
  #
  interface gigabitethernet 0/1/3
   eth-trunk 1                        //Add GE 0/1/3 to Eth-Tunk 1.
  #

• The Eth-Trunk configuration of UPE2 and UPE3 is similar to Eth-Trunk configurations of UPE1.

• Configure an E-Trunk interface on UPE2.

  #
  lacp e-trunk system-id 00e0-fc00-0000                    //Configure a system ID.
  lacp e-trunk priority 100                                //Configure an LACP priority.
  #
  e-trunk 10                                               //Create an E-Trunk interface.
   priority 10                                             //Configure a priority.
   peer-address 3.3.3.3 source-address 2.2.2.2             //Specify IP addresses on the local and remote ends of the E-Trunk interface.
  #
  interface eth-trunk 10
   e-trunk 10                                              //Add the AC interface to the E-Trunk interface.
  #

• Configure an E-Trunk interface on UPE3.

  #
  lacp e-trunk system-id 00e0-fc00-0000
  lacp e-trunk priority 100
  #
  e-trunk 10
   priority 10
   peer-address 2.2.2.2 source-address 3.3.3.3
  #
  interface eth-trunk 10
   e-trunk 10
  #

• Configure UPE2.

  #
  bfd upe2&upe3 bind peer-ip 3.3.3.3 source-ip 2.2.2.2     //Create a BFD session and bind the local and peer IP addresses of the E-Trunk interface to the session.
   discriminator local 100                                 //Set the local discriminator.
   discriminator remote 101                                //Set the remote discriminator.
  #
  e-trunk 10
   e-trunk track bfd-session session-name upe2&upe3        //Bind the E-Trunk interface to the BFD session.
  #

• Configure UPE3.

  #
  bfd upe2&upe3 bind peer-ip 2.2.2.2 source-ip 3.3.3.3
   discriminator local 101
   discriminator remote 100
  #
  e-trunk 10
   e-trunk track bfd-session session-name upe2&upe3
  #

1. Establish a primary PW between UPE1 and UPE2. For configuration details, see Table 5-2.

2. Establish a secondary PW between UPE1 and UPE3. The configuration on UPE3 is the same as the primary PW configuration. For configuration details, see Table 5-2. The secondary PW configuration on UPE1 is similar to the primary PW configuration. The configuration includes an LDP session, an LSP, and a VC on an AC interface. The difference is that different command lines are used to configure VCs:

   • For the primary PW, run the mpls l2vc remote-pe-address vc-id

     command.

   • For the secondary PW, run the mpls l2vc remote-pe-address vc-id

     secondary command.

• Configure a bypass PW on UPE2.

  #
  interface Eth-Trunk1.1                    //Enter the AC interface view.
   vlan-type dot1q 100
   mpls l2vc 3.3.3.3 203 bypass             //Configure a bypass PW to UPE3.

• Configure a bypass PW on UPE3.

  #
  interface Eth-Trunk1.1                    //Enter the AC interface view.
   vlan-type dot1q 100
   mpls l2vc 2.2.2.2 203 bypass             //Configure a bypass PW to UPE2.

• Configure UPE1.

  #
  interface loopback 1                               //Create a loopback interface.
   mpls l2vc 2.2.2.2 102 control-word admin          //Create an mPW with UPE2's IP address of 2.2.2.2 and the VC ID of 102.
  #
  interface loopback 2                               //Create another loopback interface.
   mpls l2vc 3.3.3.3 103 control-word admin          //Create an mPW with UPE3's LSR ID of 3.3.3.3 and the VC ID of 103.
  #

• Configure UPE2.

  #
  interface loopback 1                               //Create a loopback interface.
   mpls l2vc 1.1.1.1 102 control-word admin          //Create an mPW with UPE1's IP address of 1.1.1.1.
  #

• Configure UPE3.

  #
  interface loopback 1
   mpls l2vc 1.1.1.1 103 control-word admin
  #

• Configure UPE1.

  #
  interface eth-trunk 1
   mpls l2vc track admin-vc interface loopback 1                  //Bind the service primary PW to the primary mPW.
   mpls l2vc secondary track admin-vc interface loopback 2        //Bind the service secondary PW to the secondary mPW.

• Configure UPE2 and UPE3.

  #
  interface eth-trunk 1
   mpls l2vc track admin-vc interface loopback 1                  //Bind the service primary PW to the primary mPW.
  

• Configure UPE1.

  #
  bfd toPE2 bind pw interface loopback 1              //Create a BFD session and bind it to the mPW's loopback interface.
   discriminator local 1000                           //Set the local discriminator.
   discriminator remote 1001                          //Set the remote discriminator.
  #
  bfd toPE3 bind pw interface loopback 2
   discriminator local 2000
   discriminator remote 2001
  #

• Configure UPE2.

  #
  bfd toPE1 bind pw interface loopback 1
   discriminator local 1001
   discriminator remote 1000
  #

• Configure UPE3.

  #
  bfd toPE1 bind pw interface loopback 1
   discriminator local 2001
   discriminator remote 2000
  #

Configure an Eth-Trunk interface. The configuration is the same as the configurations on UPE2 and UPE3 in Figure 7-5. For configuration details, see Table 7-3.

• Configure UPE1.

  #
  bfd upe1&ce1 bind peer-ip 192.168.1.1 interface eth-trunk 1.1     //Create a BFD session to monitor the UPE1-CE1 link.
   discriminator local 100                                          //Set the local discriminator.
   discriminator remote 101                                         //Set the remote discriminator.
  #
  bfd upe1&upe2 bind peer-ip 192.168.1.3 interface eth-trunk 1.1    //Create a BFD session to monitor the UPE1-UPE2 link.
   discriminator local 200                                          //Set the local discriminator.
   discriminator remote 201                                         //Set the remote discriminator.
  #
  

• Configure UPE2.

  #
  bfd upe2&ce1 bind peer-ip 192.168.1.1 interface eth-trunk 1.1
   discriminator local 102
   discriminator remote 103
  #
  bfd upe1&upe2 bind peer-ip 192.168.1.2 interface eth-trunk 1.1
   discriminator local 201
   discriminator remote 200
  #
  

The BFD for AC configuration of UPE1 is similar to BFD for AC configurations of UPE3 and UPE4. The configuration procedure is not provided.

1. Configure an LDP session between each pair of four UPEs. For configuration details, see Table 5-1.
2. Establish a tunnel between each UPE and each of two remote UPEs. Establish two tunnels between each pair of UPEs that are at the same site. For configuration details, see Constructing an Infrastructure Network.
3. Configure the primary, secondary, and bypass PWs on each UPE. In the following example, UPE1 is configured.

   interface Eth-trunk 1.1                                 //Create an Eth-trunk sub-interface to function as an AC interface bound to a PW.
    vlan-type dot1q 100                                           //Configure a VLAN to which the sub-interface belongs.
    mpls l2vc 2.2.2.2 300 control-word                            //Create the primary PW to the remote UPE2 and enable the control word function.
    mpls l2vc 4.4.4.4 600 secondary control-word                  //Create the secondary PW to the remote UPE4 and enable the control word function.
    mpls l2vpn redundancy independent                             //Enable independent PW redundancy to use a signaling protocol to determine the primary/secondary status of PWs.
    mpls l2vc 3.3.3.3 ac-bypass 200 pw-bypass 500 control-word    //Configure a bypass PW to UPE3 at the same site and enable the control word function.
    mpls l2vpn stream-dual-receiving                              //Enable the UPE to receive packets from both the primary and secondary PWs to prevent packet loss during a primary/secondary PW switchback.
   #
   

mVRRP is configured to determine the primary/secondary PW status when the independent PW redundancy mode is used. In the following example, mVRRP is configured on UPE1 and UPE2. The mVRRP configuration on UPE3 is similar to that on UPE1, and that on UPE4 is similar to that on UPE2. The configuration procedure is not provided.

• Configure UPE1.

  #
  interface eth-trunk 1.2                       //Create an Eth-Trunk sub-interface to send mVRRP packets.
   vlan-type dot1q 2                            //Configure a VLAN to which the sub-interface belongs.
   ip address 192.168.1.1 255.255.255.0         //Assign an IP address to the sub-interface.
   vrrp vrid 1 virtual-ip 192.168.1.254         //Assign a virtual IP address to the mVRRP backup group. The IP address must be on the same network segment as that of the CE.
   admin-vrrp vrid 1                            //Set a VRID for the mVRRP backup group.
   vrrp vrid 1 priority 120                     //Set a VRRP priority value so that UPE1 functions as the VRRP master. The default priority value is 100. The greater the value, the higher the priority.

• Configure UPE2.

  #
  interface eth-trunk 1.2
   vlan-type dot1q 2
   ip address 192.168.1.2 255.255.255.0
   vrrp vrid 1 virtual-ip 192.168.1.254         //Configure the same virtual IP address as that on UPE1.
   admin-vrrp vrid 1                            //Configure the same VRID as that on UPE1.
  

In the following example, bind a service PW to an mVRRP backup group on UPE1. The configurations on UPE2, UPE3, and UPE4 are similar to the configuration on UPE1. The configuration procedure is not provided.

#
interface eth-trunk 1.1                       //Enter the view of an AC interface bound to a PW.
 vlan-type dot1q 100
 mpls l2vc track admin-vrrp interface eth-trunk1.2 vrid 1 pw-redundancy
 mpls l2vc track admin-vrrp secondary

• Eth-Trunk
• E-Trunk
• BFD for E-Trunk
• E-VRRP, which enables a VRRP backup group to be associated with Ethernet OAM
• MSTP

For configuration details about the Eth-Trunk interface, an E-Trunk interface, and BFD for E-Trunk, see Table 7-3.

In the following example, E-VRRP is configured on UPE2.

#
efm enable                                       //Enable EFM OAM globally.
#
interface eth-trunk 1.1                          //Enter the AC interface view.
 vlan-type dot1q 100
 l2 binding vsi a2
 vrrp vrid 1 virtual-ip 192.168.1.254            //Assign a VRRP virtual IP address. It must be on the same network segment as that of the CE.
 vrrp vrid 1 priority 120                        //Set a VRRP priority value so that UPE2 functions as the VRRP master. The default priority value is 100. The greater the value, the higher the priority.
 vrrp vrid 1 track efm interface eth-trunk 1     //Associate the VRRP backup group with an EFM session.
 efm enable                                      //Enable EFM OAM on the AC interface.
 efm error-frame notification enable             //(Optional) Enable errored frame detection on the interface.
 efm error-code notification enable              //(Optional) Enable errored code detection on the interface.
 efm error-frame-second notification enable      //(Optional) Enable errored frame second detection on the interface.

For MSTP configuration guide, seeMSTP Configuration.

#
vsi vsi1 static
 pwsignal ldp
  vsi-id 1
  peer 2.2.2.2                               //Configure a PW to SPE1.
  peer 3.3.3.3                               //Configure a PW to SPE2.
  protect-group vsi1                         //Create a redundancy PW protection group.
   protect-mode pw-redundancy master         //Enable the master/slave PW redundancy mode.
   reroute delay 60                          //Set the switchback delay time to 60s. On a large network, a delayed switchback helps prevent packet loss during a switchback due to asynchronous network convergence.
   peer 2.2.2.2 preference 1                 //Set a PW priority value. The smaller the value, the higher the priority. The primary PW has the highest priority.
   peer 3.3.3.3 preference 2
#

Configure a UPE.

#
bfd vplspw1 bind pw vsi vsi1 peer 2.2.2.2 remote-peer 2.2.2.2 pw-ttl auto-calculate   //Configure BFD to monitor the primary PW.
 discriminator local 100                     //Set the local discriminator.
 discriminator remote 101                    //Set the remote discriminator.
#

Configure SPE1.

#
bfd vplspw1 bind pw vsi vsi1 peer 1.1.1.1 remote-peer 1.1.1.1 pw-ttl auto-calculate   //Configure BFD to monitor the primary PW.
 discriminator local 101                     //Set the local discriminator.
 discriminator remote 100                    //Set the remote discriminator.
#