Pulogalamu ya ProHoster > Blog > Ulamuliro > VxLAN fakitale. Gawo 2

VxLAN fakitale. Gawo 2

Pa Habr. Ndikupitiriza mndandanda wa nkhani za VxLAN EVPN teknoloji, yomwe zinalembedwa makamaka poyambitsa maphunzirowa "Network engineer" ndi OTUS. Ndipo lero tikambirana gawo losangalatsa la ntchito - mayendedwe. Ziribe kanthu momwe zingamvekere, komabe, monga gawo la ntchito ya fakitale ya intaneti, chirichonse sichingakhale chophweka.

VxLAN fakitale. Gawo 2

1 gawo la kuzungulira - L2 kulumikizana pakati pa ma seva

Mu gawo lomaliza, tidapeza gawo limodzi lowulutsa lomwe linamangidwa pamwamba pa nsalu ya netiweki pa Nexus 9000v. Komabe, izi siziri mndandanda wonse wa ntchito zomwe ziyenera kuthetsedwa mkati mwa dongosolo la data center network. Ndipo lero tikambirana ntchito zotsatirazi - mayendedwe pakati pa maukonde kapena pakati pa VNIs.

Ndiroleni ndikukumbutseni kuti Spine-Leaf topology imagwiritsidwa ntchito:

VxLAN fakitale. Gawo 2

Poyamba, tiwona momwe mayendedwe amachitikira komanso zomwe ali nazo.

Kuti timvetsetse, tiyeni tifewetse zojambulazo ndikuwonjezera VNI 20000 ina ya Host-2. Zotsatira zake ndi:

VxLAN fakitale. Gawo 2

Kodi, pamenepa, mungasamutse bwanji magalimoto kuchokera ku Host wina kupita ku wina?

Pali njira ziwiri:

  1. Sungani zambiri za VNIs pamasinthidwe onse a Leaf, ndiye kuti njira zonse zidzachitika pa Tsamba loyamba pamaneti;
  2. Gwiritsani ntchito odzipereka - L3 VNI

Njira yoyamba ndi yosavuta komanso yabwino. Popeza muyenera kungoyambitsa ma VNI onse pama switch onse a Leaf. Komabe, kuthamanga mazana angapo kapena masauzande a VNIs pa Tsamba lonse sikukuwoneka ngati ntchito yosavuta. Choncho, mu ntchito izo ntchito kwenikweni kawirikawiri.

Tisanthula njira 2, monga yosangalatsa komanso yovuta kwambiri, koma yopatsa kusinthasintha pakukhazikitsa fakitale.

Tiyeni tiwonjezere "PROD" ku VRF topology. Tiyeni tiwonjezere mawonekedwe vlan 10 kwa iwo pa Leaf-11/12 awiri ndi mawonekedwe VLAN 20 pa Leaf-21. VLAN 20 imagwirizana ndi VNI 20000

vrf context PROD
  rd auto       ! Route Distinguisher Π½Π΅ ΠΏΡ€ΠΈΠ½Ρ†ΠΈΠΏΠΈΠ°Π»Π΅Π½ ΠΈ ΠΌΠΎΠΆΠ΅ΠΌ ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚ΡŒ сформированный автоматичСски
  address-family ipv4 unicast
    route-target both auto      ! ΡƒΠΊΠ°Π·Ρ‹Π²Π°Π΅ΠΌ Route-target с ΠΊΠΎΡ‚ΠΎΡ€Ρ‹ΠΌ Π±ΡƒΠ΄ΡƒΡ‚ ΠΈΠΌΠΏΠΎΡ€Ρ‚ΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒΡΡ ΠΈ ΡΠΊΡΠΏΠΎΡ€Ρ‚ΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒΡΡ прСфиксы Π²/ΠΈΠ· VRF
vlan 20
  vn-segment 20000

interface nve 1
  member vni 20000
    ingress-replication protocol bgp

interface Vlan10
  no shutdown
  vrf member PROD
  ip address 192.168.20.1/24
  fabric forwarding mode anycast-gateway

Kuti mugwiritse ntchito L3VNI, muyenera kupanga VLAN yatsopano, kuigwirizanitsa ndi VNI yatsopano. VNI yatsopano iyenera kukhala yofanana pa Masamba onse omwe ali ndi chidwi ndi chidziwitso cha VLAN 10 ndi 20.

vlan 99
  vn-segment 99000

interface nve1
  member vni 99000 associate-vrf        ! Π‘ΠΎΠ·Π΄Π°Π΅ΠΌ L3 VNI

vrf context PROD
  vni 99000                             ! ΠŸΡ€ΠΈΠ²ΡΠ·Ρ‹Π²Π°Π΅ΠΌ L3 VNI ΠΊ ΠΎΠΏΡ€Π΅Π΄Π΅Π»Π΅Π½Π½ΠΎΠΌΡƒ VRF

Chifukwa chake, chithunzichi chikuwoneka motere:

VxLAN fakitale. Gawo 2

Ingotsala pang'ono kumaliza pang'ono - onjezani mawonekedwe enanso - mawonekedwe vlan 99 mu VRF PROD

interface Vlan99
  no shutdown
  vrf member PROD
  ip forward  ! На интСрфСйсС Π½Π΅ Π΄ΠΎΠ»ΠΆΠ½ΠΎ Π±Ρ‹Ρ‚ΡŒ IP. Π˜ΡΠΏΠΎΠ»ΡŒΠ·ΡƒΠ΅Ρ‚ΡΡ Ρ‚ΠΎΠ»ΡŒΠΊΠΎ для пСрСсылки ΠΏΠ°ΠΊΠ΅Ρ‚ΠΎΠ² ΠΌΠ΅ΠΆΠ΄Ρƒ Leaf

Zotsatira zake, malingaliro odutsira chimango kuchokera ku Host-1 kupita ku Host-2 ndi motere:

  1. Chimango chotumizidwa ndi Host-1 chimafika pa Tsamba mu VLAN 10, yomwe imagwirizanitsidwa ndi VNI 10000;
  2. Tsamba limayang'ana komwe adilesi yopita ili ndikuipeza kudzera pa L3 VNI pakusintha kwachiwiri kwa Leaf;
  3. Mwamsanga pamene njira yopita ku adiresi yopita ikupezeka, Leaf imanyamula chimango mumutu ndi zofunikira L3VNI 99000 - ndikuzitumiza ku Tsamba lachiwiri;
  4. Kusintha kwachiwiri kwa Leaf kumalandira deta kuchokera ku L3VNI 99000. Imapeza chimango choyambirira ndikuchisamutsa ku L2VNI 20000 yofunikira kenako ku VLAN 20.

Chifukwa cha ntchitoyi, L3VNI imachotsa kufunika kosunga zambiri za ma VNI onse omwe ali pa netiweki pama switch onse a Leaf.

Zotsatira zake, tikatumiza magalimoto kuchokera ku Host-1 kupita ku Host-2, paketiyo imadzaza mkati mwa VxLAN ndi VNI - 99000 yatsopano:

VxLAN fakitale. Gawo 2

Zikuwonekerabe momwe Leaf-1 amaphunzirira za adilesi ya MAC kuchokera ku VNI ina. Izi zimachitikanso mothandizidwa ndi EVPN njira-mtundu 2 (MAC / IP).

Zotsatirazi zikuwonetsa njira yofalitsira njira yachiyambi chomwe chili mu VNI ina:

VxLAN fakitale. Gawo 2

Ndiye kuti, ma adilesi omwe adalandira kuchokera ku VNI 20000 ali ndi ma RT awiri.
Ndiroleni ndikukumbutseni kuti njira zomwe zalandilidwa kuchokera ku Update zikugwera patebulo la BGP ndi Route-chandan yomwe yafotokozedwa muzokonda za VRF (njirayo ndi yovuta kwambiri, koma sitilowa m'nkhaniyi).
RT yokha imapangidwa ndi chilinganizo: AS: VNI ​​(ngati njira yokhayo ikugwiritsidwa ntchito).

Chitsanzo cha mapangidwe a RT m'njira zodziwikiratu komanso zamabuku:

vrf context PROD
  address-family ipv4 unicast
    route-target import auto - автоматичСский Ρ€Π΅ΠΆΠΈΠΌ Ρ€Π°Π±ΠΎΡ‚Ρ‹
    route-target export 65001:20000 - Ρ€ΡƒΡ‡Π½ΠΎΠΉ Ρ€Π΅ΠΆΠΈΠΌ формирования RT

Zotsatira zake, mutha kuwona pamwambapa kuti zoyambira kuchokera ku VNI ina zili ndi ma RT awiri.
Mmodzi wa iwo 65001:99000 ndi L3 VNI yowonjezera. Popeza VNI iyi ndi yofanana pa Masamba onse ndipo imagwera pansi pa malamulo athu otumizira mu VRF zoikamo, choyambirira chimalowa patebulo la BGP, lomwe limatha kuwoneka kuchokera pazotuluka:

sh bgp l2vpn evpn
<.....>
   Network            Next Hop            Metric     LocPrf     Weight Path
Route Distinguisher: 10.255.1.11:32777    (L2VNI 10000)
*>l[2]:[0]:[0]:[48]:[5001.0007.0007]:[0]:[0.0.0.0]/216
                      10.255.1.10                       100      32768 i
*>l[2]:[0]:[0]:[48]:[5001.0007.0007]:[32]:[192.168.10.10]/272
                      10.255.1.10                       100      32768 i
*>l[3]:[0]:[32]:[10.255.1.10]/88
                      10.255.1.10                       100      32768 i

Route Distinguisher: 10.255.1.21:32787
* i[2]:[0]:[0]:[48]:[5001.0008.0007]:[32]:[192.168.20.20]/272    ! ΠŸΡ€Π΅Ρ„ΠΈΠΊΡ ΠΏΠΎΠ»ΡƒΡ‡Π΅Π½Π½Ρ‹ΠΉ ΠΈΠ· VNI 20000
                      10.255.1.20                       100          0 i
*>i                   10.255.1.20                       100          0 i

Ngati tiyang'anitsitsa zosinthidwa zomwe zalandilidwa, titha kuwona kuti choyambirirachi chili ndi ma RT awiri:

Leaf11# sh bgp l2vpn evpn 5001.0008.0007
BGP routing table information for VRF default, address family L2VPN EVPN
Route Distinguisher: 10.255.1.21:32787
BGP routing table entry for [2]:[0]:[0]:[48]:[5001.0008.0007]:[32]:[192.168.20.2
0]/272, version 5164
Paths: (2 available, best #2)
Flags: (0x000202) (high32 00000000) on xmit-list, is not in l2rib/evpn, is not i
n HW

  Path type: internal, path is valid, not best reason: Neighbor Address, no labeled nexthop
  AS-Path: NONE, path sourced internal to AS
    10.255.1.20 (metric 81) from 10.255.1.102 (10.255.1.102)
      Origin IGP, MED not set, localpref 100, weight 0
      Received label 20000 99000                                 ! Π”Π²Π° label для Ρ€Π°Π±ΠΎΡ‚Ρ‹ VxLAN
      Extcommunity: RT:65001:20000 RT:65001:99000 SOO:10.255.1.20:0 ENCAP:8     ! Π”Π²Π° значСния Route-target, Π½Π° основС, ΠΊΠΎΡ‚ΠΎΡ€Ρ‹Ρ… Π΄ΠΎΠ±Π°Π²ΠΈΠ»ΠΈ Π΄Π°Π½Π½Ρ‹ΠΉ прСфикс
          Router MAC:5001.0005.0007
      Originator: 10.255.1.21 Cluster list: 10.255.1.102
<......>

Patebulo lolowera pa Leaf-1, mutha kuwonanso mawu oyambira 192.168.20.20/32:

Leaf11# sh ip route vrf PROD
192.168.10.0/24, ubest/mbest: 1/0, attached
    *via 192.168.10.1, Vlan10, [0/0], 01:29:28, direct
192.168.10.1/32, ubest/mbest: 1/0, attached
    *via 192.168.10.1, Vlan10, [0/0], 01:29:28, local
192.168.10.10/32, ubest/mbest: 1/0, attached
    *via 192.168.10.10, Vlan10, [190/0], 01:27:22, hmm
192.168.20.20/32, ubest/mbest: 1/0                                        ! АдрСс Host-2
    *via 10.255.1.20%default, [200/0], 01:20:20, bgp-65001, internal, tag 65001     ! Доступный Ρ‡Π΅Ρ€Π΅Π· Leaf-2
(evpn) segid: 99000 tunnelid: 0xaff0114 encap: VXLAN                                ! Π§Π΅Ρ€Π΅Π· VNI 99000

Mukuwona mawu oyambira omwe akusowa 192.168.20.0/24 patebulo lamayendedwe?
Ndiko kulondola, iye kulibe. Ndiko kuti, Remote Leafs amalandira zambiri za omwe ali pa netiweki yanu okha. Ndipo ili ndi khalidwe lolondola. Pamwambapa, pazosintha zonse, mutha kuwona kuti zambiri zimabwera ndi zomwe zili mu MAC / IP. Palibe ma prefixes oti alankhulepo.

Iyi ndi protocol ya Host Mobility Manager (HMM) yomwe imadzaza tebulo la ARP pomwe tebulo la BGP limadzazidwa (tidzasiya ndondomekoyi mkati mwa nkhaniyi). Kutengera zomwe zalandilidwa kuchokera ku HMM, ma EVPN amtundu wa 2 amapangidwa (amafalitsidwa ndi MAC / IP).

Komabe, bwanji ngati pakufunika kufotokoza zambiri za mawu oyamba?

Pazidziwitso zamtundu uwu, pali EVPN mtundu wa 5 - imakupatsani mwayi wotumiza ma prefixes kudzera pa adilesi-family l2vpn evpn (njira yamtunduwu panthawi yolembayi ili m'gulu lokonzekera Mtengo RFC, chifukwa cha izi, opanga osiyanasiyana amatha kukhala ndi machitidwe osiyanasiyana anjira iyi)

Kusamutsa ma prefixes, ndikofunikira kuwonjezera ma prefixes munjira ya BGP ya VRF, yomwe idzalengezedwa:

router bgp 65001
  vrf PROD
    address-family ipv4 unicast
      redistribute direct route-map VNI20000        ! Π’ Π΄Π°Π½Π½ΠΎΠΌ случаС анонсируСм прСфиксы ΠΏΠΎΠ΄ΠΊΠ»ΡŽΡ‡Π΅Π½ΠΈΠ΅ нСпосрСдствСнно ΠΊ Leaf Π² VNI 20000
route-map VNI20000 permit 10
  match ip address prefix-list VNI20000_OUT    ! Π£ΠΊΠ°Π·Ρ‹Π²Π°Π΅ΠΌ ΠΊΠ°ΠΊΠΎΠΉ ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚ΡŒ prefix-list

ip prefix-list VNI20000_OUT seq 5 permit 192.168.20.0/24   ! Π£ΠΊΠ°Π·Ρ‹Π²Π°Π΅ΠΌ ΠΊΠ°ΠΊΠΈΠ΅ сСти Π±ΡƒΠ΄ΡƒΡ‚ ΠΏΠΎΠΏΠ°Π΄Π°Ρ‚ΡŒ Π² EVPN route-type 5

Zotsatira zake, Kusintha kudzakhala:

VxLAN fakitale. Gawo 2

Tiyeni tiwone tebulo la BGP. Kuphatikiza pa mtundu wa 2,3 wa EVPN, lembani misewu 5 yomwe ili ndi chidziwitso cha nambala ya netiweki:

<......>
   Network            Next Hop            Metric     LocPrf     Weight Path
Route Distinguisher: 10.255.1.11:3
* i[5]:[0]:[0]:[24]:[192.168.10.0]/224
                      10.255.1.10              0        100          0 ?
*>i                   10.255.1.10              0        100          0 ?

Route Distinguisher: 10.255.1.11:32777
* i[2]:[0]:[0]:[48]:[5001.0007.0007]:[0]:[0.0.0.0]/216
                      10.255.1.10                       100          0 i
*>i                   10.255.1.10                       100          0 i
* i[2]:[0]:[0]:[48]:[5001.0007.0007]:[32]:[192.168.10.10]/272
                      10.255.1.10                       100          0 i
*>i                   10.255.1.10                       100          0 i
* i[3]:[0]:[32]:[10.255.1.10]/88
                      10.255.1.10                       100          0 i
*>i                   10.255.1.10                       100          0 i

Route Distinguisher: 10.255.1.12:3
*>i[5]:[0]:[0]:[24]:[192.168.10.0]/224      ! EVPN route-type 5 с Π½ΠΎΠΌΠ΅Ρ€ΠΎΠΌ прСфикса
                      10.255.1.10              0        100          0 ?
* i
<.......>

Chiyambi chinawonekeranso patebulo lolowera:

Leaf21# sh ip ro vrf PROD
192.168.10.0/24, ubest/mbest: 1/0
    *via 10.255.1.10%default, [200/0], 00:14:32, bgp-65001, internal, tag 65001  ! Π£Π΄Π°Π»Π΅Π½Π½Ρ‹ΠΉ прСфикс, доступный Ρ‡Π΅Ρ€Π΅Π· Leaf1/2(адрСс Next-hop = virtual IP ΠΌΠ΅ΠΆΠ΄Ρƒ ΠΏΠ°Ρ€ΠΎΠΉ VPC)
(evpn) segid: 99000 tunnelid: 0xaff010a encap: VXLAN      ! ΠŸΡ€Π΅Ρ„ΠΈΠΊΡ доступСн Ρ‡Π΅Ρ€Π΅Π· L3VNI 99000

192.168.10.10/32, ubest/mbest: 1/0
    *via 10.255.1.10%default, [200/0], 02:33:40, bgp-65001, internal, tag 65001
(evpn) segid: 99000 tunnelid: 0xaff010a encap: VXLAN

192.168.20.0/24, ubest/mbest: 1/0, attached
    *via 192.168.20.1, Vlan20, [0/0], 02:39:44, direct
192.168.20.1/32, ubest/mbest: 1/0, attached
    *via 192.168.20.1, Vlan20, [0/0], 02:39:44, local
192.168.20.20/32, ubest/mbest: 1/0, attached
    *via 192.168.20.20, Vlan20, [190/0], 02:35:46, hmm

Izi zikumaliza gawo lachiwiri la zolemba za VxLAN EVPN. Mu gawo lotsatira, tiwona njira zingapo zosinthira pakati pa ma VRF.

Zofunikira za IPv6 ndi momwe zimasiyanirana ndi IPv4

Source: www.habr.com

Kuwonjezera ndemanga