Nn48500 570v2.0vrflitetcg Avaya

  • Upload
    carios

  • View
    216

  • Download
    0

Embed Size (px)

Citation preview

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    1/53

    VRF-Lite for Ethernet Routing Switch8600 / 8800 Technical ConfigurationGuide

    Avaya Data SolutionsDocument Date: April 2011Document Number: NN48500-570Document Version: 2.0

    Ethernet Routing Switch8600 / 8800

    Engineering

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    2/53

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    3/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide3 April 2011

    avaya.com

    Abstract

    This Technical Configuration Guide provides a brief summary for the configuration of VRF-Lite for the Avaya Ethernet Routing Switch 8600/8800.

    Acronym Key AS : Autonomous System

    EDM : Enterprise Device Manager

    GRT : Global Route Table

    IPVPN : IP Virtual Private Network

    IST : Inter Switch Trunk (Avaya SMLT Clustering)

    JDM : Java Device Manager

    LACP : Link Aggregation Control Protocol

    LLDP : Link Layer Discovery Protocol; IEEE 802.1AB

    LSDB : Link State Data Base

    MAC : Media Access Control

    MLT : Multi Link Trunk

    MPLS : Multiprotocol Label Switching

    MVR : Multicast VLAN Registration

    PIM : Protocol Independent Multicast

    PIM-SM : Protocol Independent Multicast Sparse ModePIM-SSM : Protocol Independent Multicast Source Specfic Multicast

    SNMP : Simple Network Management Protocol

    SMLT : Split MLT (Avaya Clustering)

    SPB : Shortest Path Bridging

    SPBM : Shortest Path Bridging MAC

    VID : VLAN identifier

    VLACP : Virtual LACP

    VLAN : Virtual LAN

    VPN : Virtual Private Network

    VRF : Virtual Routing and Forwarding

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    4/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide4 April 2011

    avaya.com

    Revision Control

    No Date Version Revised by Remarks

    1 1/23/2008 1.0 JVE Initial release

    2 7/4/2008 1.1 JVE Updates

    3 4/28/2011 2.0 PRMGT Updates

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    5/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide5 April 2011

    avaya.com

    Table of Contents

    Figures ......................................................................................................................................................... 6 Document Updates ..................................................................................................................................... 7

    Conventions ................................................................................................................................................ 7

    1. Overview: VRF-Lite ............................................................................................................................. 8

    2. Base Scenario: .................................................................................................................................. 16

    2.1 Assumptions: ................ ................. ................. .................. ................. .................. .................. ...... 16

    2.2 VRF-Lite Configuration .................. ................. .................. ................. .................. ................. ....... 16

    2.3 Basic VRF-Lite Configuration Steps ........................................................................................... 17

    3. VRF-Lite Configuration Example ..................................................................................................... 27

    3.1 Configuration Adding VRF Instance ......................................................................................... 28

    3.2 Verification ................................................................................................................................... 40

    4. Routing between VRFs .................................................................................................................... 47

    4.1 Configuration Leaking Routes between VRF Instances .......................................................... 47

    5. Software Baseline: ............................................................................................................................ 52

    6. Reference Documentation: .............................................................................................................. 52

    7. Customer service .............................................................................................................................. 53

    7.1 Getting technical documentation ................................................................................................. 53

    7.2 Getting product training ............................................................................................................... 53

    7.3 Getting help from a distributor or reseller ................ ................. .................. ................. ................ 53

    7.4 Getting technical support from the Avaya Web site .................................................................... 53

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    6/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide6 April 2011

    avaya.com

    FiguresFigure 1: VRF-Lite Overview ......................................................................................................................... 8 Figure 2: IP-VPN VRF between Switches ................ .................. ................. .................. .................. ............ 11

    Figure 3: VRRP and VRF in SMLT topology ............................................................................................... 11

    Figure 4: Router Redundacy for multiple routing instances (RSMLT) ........................................................ 12

    Figure 5: MPLS IP-VPN PE Combined with IP-VRF .................................................................................. 12

    Figure 6: IP-VPN VRF-Lite Interactions ...................................................................................................... 13

    Figure 7: SPBM L3 VSN ............................................................................................................................. 13

    Figure 8: Internal Multicast Virtualization for VRF-Lite ............................................................................... 14

    Figure 9: MVR for VRF-Lite......................................................................................................................... 15

    Figure 10: VF-Lite Configuration Example .................................................................................................. 27

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    7/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide7 April 2011

    avaya.com

    Document Updates April 2011

    ConventionsThis section describes the text, image, and command conventions used in this document.

    Symbols

    Tip Highlights a configuration or technical tip.

    Note Highlights important information to the reader.

    Warning Highlights important information about an action that may result in equipmentdamage, configuration or data loss.Text

    Bold text indicates emphasis.

    Italic text in a Courier New font indicates text the user must enter or select in a menu item, buttonor command:

    ERS8600:5# show config

    Output examples from Avaya devices are displayed in a Lucida Console font:

    ERS8600:5# show config Preparing to Display Configuration...

    #

    # WED JAN 23 12:15:28 2008 UTC

    # box type : ERS-8006

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    8/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide8 April 2011

    avaya.com

    1. Overview: VRF-Lite

    Figure 1: VRF-Lite Overview

    VRF-light provides multiple independent IPv4 routing and forwarding instances within the EthernetRouting Switch 8600/8800. In addition to the global routing table (VRF0), up to 255 virtual routeforwarding (VRF) instances are supported.

    Each VRF-Lite instance supports the following features:

    256 VPNs for each system VRF routing protocols (OSPF, RIP, or BGP) IPv4 only Filtering support VRRP, ARP, and DHCP Relay Overlapping address space

    Inter-VRF forwarding policies SMLT and RSMLT support for VRFs IEEE 802.3ad and MLT support SMLT and RSMLT for CE connectivity ECMP VRF-based ping and traceroute Interoperability with RFC2547/4364 layer 3 VPNs 256K total routes per switch; 256K routes in on e VRF or spread among all VRFs 32K ARP table size shared between global route table and VRF

    VLAN01IP01

    IP03

    IP02

    VLAN03

    VLAN02

    RIP0OSPF0 VRF

    0

    VLAN11

    IP11

    IP13

    IP12

    VLAN13

    VLAN12RIP1

    OSPF1VRF

    1

    Global Routing Table / VRF 0

    Second Routing Instance / VRF 1

    IP04

    IP04

    IPv6R

    Third Routing Instance / VRF 2

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    9/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide9 April 2011

    avaya.com

    Virtualized SNMP Management restrict access at a VRF-Lite level using either SNMPv1/2 orSNMPv3 applies to release 5.x

    Starting in release 7.0, Enterprise Device Manager (EDM) can be used to configure VRF-Lite

    VRF-Lite Multicast Support (software release 5.1) :

    PIM-SM, PIM-SSM, IGMPv1,v2,v3 protocols are virtualized and can be configure in non-zeroVRF

    PIM-SM / PIM-SSM support upto 64 instances Max number of OSPF and RIP v1/v2 instances have also been increased to 64 in this release. Virtualized multicast features support on MLT/SMLT/RSMLT related topologies Partial HA support for virtualized multicast functionalities The following multicast features are not virtualized:

    o PIM-DMo IGAPo DVMRPo PGM

    o PIM-MBR Virtualization is supported only on R/RS modules and on 8692 CPU card Multicast Virtualization is available only in Premier license

    Multicast VLAN registration (software release 7.0)

    Multicast VLAN Registration (MVR) allows the single multicast VLAN to be shared in the networkwhile subscribers remain in separate VLANs

    MVR is based upon IGMP Snoop, but these 2 features can work independently of each other When a multicast data stream is received to MVR vlan, it will be replicated to all receiver vlan

    associated/bind to MVR vlan MVR functionality is virtualized, it means each vrf can have its own MVR vlan Only one vlan can be configured as MVR vlan in a vrf When a Report/Leave is received, it will be forwarded to mrouter port

    IP- VPNs can be connected together in several ways across a core network using any of the followingmethods:

    VRF

    o Multiple VRF instances are used between ERS 8600/8800 switches as shown in figure 2,3, and 4 below showing VRF support between switches, VRRP, RSMLT, and SMLTsupport

    o For each VRF, a separate VLAN must be created between ERS 8600/8800 switcheso VLAN tagging can be used between

    MPLS

    o MPLS network is used as a transport for IP- VPNs usi ng RFC 4364 as shown in figure 5below

    IP VPN-Lite

    o IP VPN-Lite can be used to build IP- VPNs across any routed IP core using MP -iBGP forVPN exchange as shown in figure 6 below

    o Please refer to Technical Brief titled Technical Brief for IP VPN-Lite for Ethernet RoutingSwitch 8600 for more details

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    10/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide10 April 2011

    avaya.com

    SPBM

    o SPB L3 VSNs can be used to build IP- VPNs across an SPBM core using IPVSNReachability TLV 184 to distribution IPVSN reachability between IS-IS peers as shown infigure 7 below

    o A Backbone Service Instance Identifier (I-SID) is assigned at a Virtual Router (VRF) level

    All VRFs that share the same I-SID can participate in the same VSN

    o Please refer to Technical Configuration Guide titled Shortest Path Bridging (802.1aq) forERS 8600 / 8800 Technical Configuration Guide for more details

    Multicast

    o Multicast virtualization for VRF-Lite is supported and shown in figure 8 below in additionto support for MVR as illustrated in figure 9

    Requirement for VRF support include the following:

    Software release 5.0 or higher for VRF support Software release 5.1 or higher for VRF multicast support Software release 7.0 or higher for MVR support R or RS Modules 8692SF with Super Mezzaine daughter card or an 8895SF Premier software license

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    11/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide11 April 2011

    avaya.com

    Figure 2: IP-VPN VRF between Switches

    Figure 3: VRRP and VRF in SMLT topology

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    12/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide12 April 2011

    avaya.com

    Figure 4: Router Redundacy for multiple routing instances (RSMLT)

    Figure 5: MPLS IP-VPN PE Combined with IP-VRF

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    13/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide13 April 2011

    avaya.com

    Figure 6: IP-VPN VRF-Lite Interactions

    Figure 7: SPBM L3 VSN

    IP VPN-Lite

    RIP/OSPF/Static

    VLAN

    SMLT/RSMLT/VRRP/

    DHCP relay

    VLAN

    VRF-Lite (CE)VRF-Lite (CE) P L2

    V

    V

    V

    V

    V

    V

    V

    V

    V

    V

    V

    V

    SMLT/RSMLT/VRRP/DHCP relay

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    14/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide14 April 2011

    avaya.com

    Figure 8: Internal Multicast Virtualization for VRF-Lite

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    15/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide15 April 2011

    avaya.com

    Figure 9: MVR for VRF-Lite

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    16/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide16 April 2011

    avaya.com

    2. Base Scenario:This technical brief covers configuration examples only pertaining to VRF-light for the ERS 8600/8800.

    2.1 Assumptions:It is assumed that general knowledge of routing and SMLT on Avaya switches is understood.

    2.2 VRF-Lite ConfigurationIn the 5.0 software release or latter, the concept of global routing table and virtual routing table(s) isintroduced. The global route table (GRT) is also referred to as VRF0 and refers to the main global routingtable. For each virtual routing instance, it will be referred to by the instance number you assign to theVRF; for example VRF1 refers to virtual router instance 1. Overall, there is only one global routing table(VRF0) and up to 255 virtual routing tables (VRF1 up to VRF255). The VRF instance can be createdusing either CLI, SNMP (5.x), or EDM ( 7.0).

    For each VRF-Lite instance that you create, you will need to specify the routing protocol or protocols thatyou wish to enable for this VRF instance. This can include OSPF, RIP, and/or BGP. As an option, youcan also limit the number of routes allowed per VRF instance.

    The order of VRF-Lite configuration is as follows:

    1. Create VRF instance(s)2. Enable IGP routing protocol you wish to enable per VRF, i.e. enable OSPF, RIP, and/or BGP per

    VRF instance3. As an option, configure the number of routes allowed for each VRF4. Create the VRF VLAN(s) and add port members5. If using JDM

    a. At this stage, only if using Java Device Manager (JDM) for software release 5.x, you mustselect the VRF instance to further configure the VRF if you are a JDM Super User.

    b. If you are a JDM VRF user, you must logon to the switch with the appropriate credentials(community string if SNMPv1/2 or USM user if SNMPv3).

    c. Please see section titled JDM : VRF-Lite SNMP Access for ERS 8600 software release5.x below for more details.

    6. If using EDM,a. If using software release 7.0, you can select the VRF context at the EDM login screenb. If using software level 7.1 or higher, after loggin in via the global user credentials, you

    can select the VRF context available via the left navigation plane VRF Context view c. Please see section titled EDM: VRF-Lite http Access for ERS 8800 software release 7.x

    for more details7. Add IP address and routing protocol(s) at a VLAN level for each VRF instance.8. Add optional route policies if required. You can also use route policies if you wish to leak routes

    between VRF instances or to the global route table.

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    17/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide17 April 2011

    avaya.com

    2.3 Basic VRF-Lite Configuration StepsThe following are the steps used to configure a VRF instance, adding an IP address, and enable a routingprotocol using CLI, JDM (5.x), and EDM ( 7.0) .

    2.3.1 Initial VRF Configuration

    2.3.1.1 Logon to the ERS 8600/8800 switch using ether CLI, Java Device Manger (5.x), or EDM(7.0 or higher)

    You can use either CLI, JDM, or EDM to configure the ERS 8600/8800 for VRF-Light.

    2.3.1.2 Create VRF instances

    By default, the maximum routes per VRF instance is set to 10,000 routes

    By default, SNMP trap is enabled is the maximum route is reached

    CLI Step 1 Create VRF instance, add maximum routes (optional), and routing protocol

    CLI

    ERS8000-1:5# config ip vrf create id

    ERS8000-1:5# config ip vrf max-routes

    ERS8000-1:5# config ip vrf create

    ERS8000-1:5# config ip vrf enable

    ACLI

    ERS8000-1:5(config)# ip vrf vrfid

    ERS8000-1:5(config)# ip vrf max-routes

    ERS8000-1:5(config)# router vrf ERS8000-1:5(router-vrf)# ip

    ERS8000-1:5(router-vrf)# exit

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    18/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide18 April 2011

    avaya.com

    JDM (release 5.x) Step 1 Create VRF instance. To to IP -> VR F -> Insert and select the routingprotocol(s) and maximum routes (optional)

    EDM (release 7.0) Step 1 Create VRF instance. To to IP -> VR F -> Insert and select the routingprotocol(s) and maximum routes (optional)

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    19/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide19 April 2011

    avaya.com

    2.3.1.3 Create VLANs

    Create VLAN(s) and add port members

    Once you have create the VLAN(s), you can add the VRF instance to the corresponding VLAN

    CLI Step 1 Assign VRF instance to VLAN

    CLI

    ERS8000-1:5# config vlan vrf

    ACLI

    ERS8000-1:5(config)# interface vlan

    ERS8000-1:5(config-if)# vrf

    ERS8000-1:5(config-if)# exit

    JDM (release 5.x) Step 1 Assign VRF instance to VLAN. After you have created the VLAN(s), viaVLAN -> VLANs Glob lRouter (vrf 0) - > Bas ic (click on corresponding VLAN id, click on Vrfid andselect the VRF ID you wish to use for this VLAN

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    20/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide20 April 2011

    avaya.com

    EDM (release 7.0) Step 1 Create VRF instance. After you have created the VLAN(s), viaConf igura t ion ->VLAN -> VLANs - > Bas ic (go to the corresponding VLAN id, click on Vrfid andenter the VRF ID you wish to use for this VLAN

    2.3.2 VRF Context User access to VRF context using SNMP / WEB Browser

    Depending of the software release used, you can change the way a user can access VRF context.

    In software release 5.x, SNMP is used to access a specific VRF instance or instances.

    In software release 7.0, when logging into EDM, in addition to entering a user name andpassword, you will also have to enter a VRF Name. By default, a VRF name of GlobalRouter isused to access the Global Router view.

    In software release 7.1, when logging into EDM the user is only offered the Global Router view. Auser can select a specific VRF where a new browser tab will be opened for the selected VRFview. A user can choose to view and manipulate the different VRF view simultaneously.

    2.3.2.1 JDM : VRF-Lite SNMP Access for ERS 8600 software release 5.x

    As mentioned above, SNMP (release 5.x) can be used to allow 3 rd party or partner access to a specificVRF instance or instances. Please note that only SNMP can be used to visualize management access ata VRF level; CLI access at a VRF level is not supported at this time.

    If you wish to enable SNMP at a VRF level, both SMNPv1/2 and SNMPv3 can be used. SNMPv3 accesscontrol at a VRF level is accomplished using the USM model. If SNMPv1/2 is used, access is controlledvia community strings.

    Overall, there are two types of users supported with VRF-light, Super Users and VRF users.

    Super User Has full access to switch using ether JDM or CLI Has access to global route (GRT) and each VRF instance

    o The Super User must either select Global Router instance or a specific VRF instance Configures all VLANs (global and VRF) and assigns initial IP address for each VRF via the

    Global Router instance The Super User must ether select the Global Router instance or a VRF instance

    o Cannot select both at the same time

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    21/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide21 April 2011

    avaya.com

    o If a VRF instance is selected, only the VFP specific fields and parameters will beconfigurable and displayed

    o The Super User must select Global Router instance initially to configure the VRF

    instances, VRF VLAN(s), and routing protocols allowed for each VRF instance At this stage, either the Super User or a VRF User can be used to continue theVRF configuration

    If the Super User wishes to continue the VRF configuration, he/she must firstselect the VRF instance.

    VRF User

    Has access only at a VRF level SMNP access only VRF access level is configured by the Super User SNMPv3 support via USM model SNMPv1/2 support via community string

    o Default: public::x and private::x where x = 1 to 255 (VRF instance)

    Only the Super User can add VLANs, VRF instances The VRF user can add IP addresses, routing protocols, and other IP parameters pertaining onlyto the VLANs configured by the Super User.

    The VRF user can only view routes, arp, MAC addresses, etc for the VLANs configured by theSuper User

    2.3.2.1.1 SNMP Global Router and VRF Selection Super User

    Assuming you have already configured the VRF instance(s) and VRF VLAN(s), to select the VRFinstance using Java Device Manager (JDM), go to IP -> VRF, select the VRF instance, and then click onSet Current VRF as shown below. From now on, only the fields pertaining to this VRF will be displayed.

    ERS8600/8800 VRF instance selection using Super User

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    22/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide22 April 2011

    avaya.com

    2.3.2.1.2 VRF User

    After the Super User has either configured the SNMP community strings (SNMPv1/2) or SNMPv3 VRFUSM users, a VRF user can access the VRF instance as shown below. If the SNMPv1/2 communitystrings have not been configured and only if SNMPv1/2 is enabled, the default community strings ofpublic::x and private::x where x = 1 to 255 can be used.

    ERS8600/8800 VRF instance login usingSNMPv1/2

    ERS8600/8800 VRF instance login usingSNMPv3

    2.3.3 EDM: VRF-Lite http Access for ERS 8800 software release 7.x2.3.3.1 EDM - Using EDM for software release 7.0

    ERS8600/8800 Via the main EDM login page, after entering the WEB server global user name andpassword, enter the VRF context name you wish to work on via the VRF Name: window

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    23/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide23 April 2011

    avaya.com

    2.3.3.2 EDM Using EDM for software release 7.1

    ERS8600/8800 Go to Conf igura t ion -> Set VRF Context view -> select VRF to switch context to -

    > Launc h VRF Context view

    ERS8600/8800 Go to VR F tab

    1. Select Set VRF

    2. Select the VRF toswitch context to

    3. Click Launch VRF

    4. A new tab will be opened inthe browser window that willhost the selected VRF view

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    24/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide24 April 2011

    avaya.com

    2.3.4 VRF Configuration Adding IP Related Parameters

    2.3.4.1 If using SNMP only via JDM (release 5.x), either select VRF instance via Super User orlog-in via a valid VRF user for the corresponding VRF instance

    At this point, you can need to select the VRF instance where you wish to configure the IP relatedparameters. If you are using a VRF user interface to configure the VRF instance, you must open up aJDM connection using the correct user credentials that belong to the VRF instance. Either SNMPv1/2 orSNMPv3 can be used. If using SNMPv3, the Super User must first create the VRF SNMPv3 users.

    Using JDM Step 1 Super User, go to IP -> VRF and select the VRF instance

    Using JDM Step 1 VRFUser

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    25/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide25 April 2011

    avaya.com

    2.3.4.2 Add IP Address and Routing Protocol

    CLI Step 1 Add IP address to VRF VLAN

    CLI

    ERS8000-1:5# config vlan ip create

    ERS8000-1:5# config vlan ip enable

    ACLI

    ERS8000-1:5(config)# interface vlan

    ERS8000-1:5(config-if)# ip address

    ERS8000-1:5(config-if)# ip enable

    ERS8000-1:5(config-if)# exit

    JDM (release 5.x) Step 1 Go to VLAN -> VLANs - > (click on corresponding VLAN id ) -> IP ->Insert and add IP address and mask. After that, click on the corresponding routing protocol tabthat you wish to enable, i.e. RIP or OSPF.

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    26/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide26 April 2011

    avaya.com

    EDM (release 7.0) Step 1 Go to Conf igura t ion -> VLAN -> VLANs - > (click on correspondingVLAN id . Click on the IP icon and and via the IP Add ress tab, click on Insert and add IP addressand mask. After that, click on the corresponding routing protocol tab that you wish to enable, i.e.RIP or OSPF.

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    27/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide27 April 2011

    avaya.com

    3. VRF-Lite Configuration Example

    Figure 10: VF-Lite Configuration Example

    For this configuration example, two IP-VRF instances will be added, VRF1 using a name of vrfone andVRF2 using a name of vrftwo . RSMLT will be enabled on both VRF instances along with the SLT ID, IPaddress and IGP protocols as shown in figure 5 above. For this example, we will only add theconfiguration for VLAN 601 to Switch-1 and VLAN 700 to Switch-2. Realistically, more than one routerwould normally be connected to each VRF instance in addition to the core configuration. However, thepurpose of this example is to simply demonstrate how to configure VRF instances locally at an edge levelusing SMLT. In the core, either VRF, IP VPN-Lite, or MPLS can be deployed.

    In addition, assuming ERS8000-1 and ERS8000-2 are using software level 5.x, we will configure threeSNMPv3 USM users with the following user names:

    vrf0user: Super User

    vrfone: VRF1 user to manage VRF1 only

    vrftwo: VRF2 user to manage VRF2 only

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    28/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide28 April 2011

    avaya.com

    3.1 Configuration Adding VRF InstanceFor this configuration example, we will configure ERS8000-1 using ACLI and ERS8000-2 using CLI.

    3.1.1 Optional SNMP Configuration Software release 5.x

    Only complete this section if ERS8000-1 and 8600-2 have software level 5.x and only if you wish to useJDM to limit access to a specific VRF instance. Otherwise, please continue to the next section.

    3.1.1.1 Create VRF SNMP user using CLI

    In this example, we will create three SNMPv3 users with the following characteristics:

    VRF UserName

    ContextName

    Authentication Privacy

    Protocol Password Protocol Password

    VRF0 vrf0user MD5 User1234 AES userpriv

    VRF1 vrfone vrf1 MD5 vrf1user AES vrf1priv

    VRF2 vrftwo vrf2 MD5 vrf2user AES vrf2priv

    ERS8000-1 Step 1 Load the SNMPv3 AES encryption module

    ERS8000-1:5(config)# load-encryption-module AES

    ERS8000-2 Step 1 Load the SNMPv3 AES encryption module

    ERS8000-2:5# config load-encryption-module AES

    ERS8000-1 Step 2 Add SNMP-v3 Super User. For this example, we will add user vrf0user toUSM group named group_1

    ERS8000-1:5(config)# snmp-server user vrf0user md5 user1234 aes userpriv

    ERS8000-1:5(config)# snmp-server user vrf0user group group_1

    ERS8000-1:5(config)# snmp-server group group_1 "" auth-priv read-view org write-vieworg notify-view org

    ERS8000-2 Step 2 Add SNMP- v3 Super User. For this example, we will add user vrf0user to

    USM group named group_1

    ERS8000-2:5# config snmp-v3 usm create vrf0user md5 auth user1234 priv-prot aes privuserpriv

    ERS8000-2:5# config snmp-v3 group-member create vrf0user usm group_1

    ERS8000-2:5# config snmp-v3 group-access create group_1 "" usm authPriv

    ERS8000-2:5# config snmp-v3 group-access view group_1 "" usm authPriv read org writeorg notify org

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    29/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide29 April 2011

    avaya.com

    ERS8000-1 Step 3 Add SNMP- v3 VRF1 user. For this example, we will add user vrfone to USMgroup named vrf1_group and context name vrf1

    ERS8000-1:5(config)# snmp-server user vrfone md5 vrf1user aes vrf1priv

    ERS8000-1:5(config)# snmp-server user vrf1user group vrf1_group

    ERS8000-1:5(config)# snmp-server group vrf1_group vrf1 auth-priv read-view vrf write-view vrf notify-view vrf

    ERS8000-2 Step 3 Add SNMP- v3 VRF1 user. For this example, we will add user vrfone to USMgroup named vrf1_group and context name vrf1

    ERS8000-2:5# config snmp-v3 usm create vrfone md5 auth vrf1user priv-prot aes privvrf1priv

    ERS8000-2:5# config snmp-v3 group-member create vrfone usm vrf1_group

    ERS8000-2:5# config snmp-v3 group-access create vrf1_group vrf1 usm authPriv

    ERS8000-2:5# config snmp-v3 group-access view vrf1_group vrf1 usm authPriv read vrfwrite vrf notify vrf

    ERS8000-1 Step 4 Add SNMP- v3 VRF2 user. For this example, we will add user vrftwo to USMgroup named vrf2_group and context name vrf2

    ERS8000-1:5(config)# snmp-server user vrftwo md5 vrf2user aes vrf2priv

    ERS8000-1:5(config)# snmp-server user vrf2user group vrf2_group

    ERS8000-1:5(config)# snmp-server group vrf2_group vrf2 auth-priv read-view vrf write-view vrf notify-view vrf

    ERS8000-2 Step 4 Add SNMP-v3 VRF2 user. F or this example, we will add user vrftwo to USMgroup named vrf2_group and context name vrf2

    ERS8000-2:5# config snmp-v3 usm create vrftwo md5 auth vrf2user priv-prot aes privvrf2priv

    ERS8000-2:5# config snmp-v3 group-member create vrftwo usm vrf2_group

    ERS8000-2:5# config snmp-v3 group-access create vrf2_group vrf2 usm authPriv

    ERS8000-2:5# config snmp-v3 group-access view vrf2_group vrf2 usm authPriv read vrfwrite vrf notify vrf

    3.1.1.2 Add SNMP Trap Receiver

    ERS8000-1 Step 1 Add an trap receiver using the name taddr1

    ERS8000-1:5(config)# snmp-server host 172.30.30.50 port 162 v1 TAddr1

    ERS8000-1 Step 1 Add an trap receiver using the name taddr1

    ERS8000-2:5# config snmp-v3 target-addr create taddr1 172.30.30.50:162 TparamV1

    timeout 1500 retry 3 taglist trapTap mask 0xff:ff:00:00:00:00 mms 484

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    30/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide30 April 2011

    avaya.com

    3.1.2 IST Configuration

    3.1.2.1 Create IST

    ERS8000-1: Step 1 Create VLAN 1900

    ERS8000-1:5(config)# vlan create 1900 name IST type port 1

    ERS8000-2: Step 1 Create VLAN 1900

    ERS8000-2:5# config vlan 1900 create byport 1 name IST

    ERS8000-1: Step 2 Create MLT 1 for IST

    ERS8000-1:5(config)# mlt 1 enable name IST

    ERS8000-1:5(config)# mlt 1 member 1/1,2/1

    ERS8000-1:5(config)# mlt 1 encapsulation dot1q

    ERS8000-1:5(config)# mlt 1

    ERS8000-2: Step 2 Create MLT 1 for IST

    ERS8000-2:5# config mlt 1 create

    ERS8000-2:5# config mlt 1 name IST

    ERS8000-2:5# config mlt 1 add port 1/1,2/1

    ERS8000-2:5# config vlan 1900 add-mlt 1

    ERS8000-1: Step 2 Create IST

    ERS8000-1:5(config)# interface mlt 1

    ERS8000-1:5(config-mlt)# ist peer-ip 2.1.1.1/30 vlan 1900

    ERS8000-1:5(config-mlt)# ist enable

    ERS8000-1:5(config-mlt)# exit

    ERS8000-2: Step 2 Create IST

    ERS8000-2:5# config vlan 1900 ip create 2.1.1.2/30

    ERS8000-2:5# config mlt 1 ist create ip 2.1.1.1 vlan-id 1900

    ERS8000-2:5# config mlt 1 ist enable

    ERS8000-1: Step 3 Enable VLACP

    ERS8000-1:5(config)# interface gigabitEthernet 1/1,2/1

    ERS8000-1:5(config-if)# vlacp funcmac-addr 01:80:c2:00:00:0f

    ERS8000-1:5(config-if)# vlacp enable

    ERS8000-1:5(config-if)# exit

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    31/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide31 April 2011

    avaya.com

    ERS8000-2: Step 3 Enable VLACP

    ERS8000-2:5# ethernet 1/1,2/1 vlacp macaddress 01:80:c2:00:00:0f

    ERS8000-2:5# ethernet 1/1,2/1 vlacp enable

    ERS8000-2:5# config vlacp enable

    3.1.3 VRF Instances Initial Configuration

    3.1.3.1 Create VRF Instances

    ERS8000-1 Step 1 Create VRF instances 1 and 2. Set maximum routes for VRF 1 to 1000 andmaximum route to 500 for VRF 2.

    ERS8000-1:5(config)# ip vrf vrfone vrfid 1

    ERS8000-1:5(config)# ip vrf vrfone max-routes 1000

    ERS8000-1:5(config)# ip vrf vrftwo vrfid 2

    ERS8000-1:5(config)# ip vrf vrftwo max-routes 500

    ERS8000-2 Step 1 Create VRF instances 1 and 2. Set maximum routes for VRF 1 to 1000 andmaximum route to 500 for VRF 2.

    ERS8000-2:5# config ip vrf vrfone create id 1

    ERS8000-2:5# config ip vrf vrfone max-routes 1000

    ERS8000-2:5# config ip vrf vrftwo create id 2

    ERS8000-2:5# config ip vrf vrftwo max-routes 500

    ERS8000-1 Step 2 Add OSPF to VRF1 and RIP to VRF2

    ERS8000-1:5(config)# router vrf vrfone

    ERS8000-1:5(router-vrf)# ip ospf

    ERS8000-1:5(router-vrf)# exit

    ERS8000-1:5(config)# router vrf vrftwo

    ERS8000-1:5(router-vrf)# ip rip enable

    ERS8000-1:5(router-vrf)# exit

    ERS8000-2 Step 2 Add OSPF to VRF1 and RIP to VRF2

    ERS8000-2:5# config ip vrf vrfone ospf createERS8000-2:5# config ip vrf vrfone ospf enable

    ERS8000-2:5# config ip vrf vrftwo rip create

    ERS8000-2:5# config ip vrf vrftwo rip enable

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    32/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide32 April 2011

    avaya.com

    3.1.3.2 Create VLANs for VRF

    ERS8000-1 Step 1 Create VLAN 601 for vrf1 and VLAN 700 for vrf2

    ERS8000-1:5(config)# vlan create 601 name vrf1_two type port 1

    ERS8000-1:5(config)# vlan members add 601 4/26

    ERS8000-1:5(config)# interface vlan 601

    ERS8000-1:5(config-if)# vrf vrfone

    ERS8000-1:5(config-if)# exit

    ERS8000-1:5(config)# vlan create 700 name vrf2_one type port 1

    ERS8000-1:5(config)# vlan members add 700 4/23

    ERS8000-1:5(config)# interface vlan 700

    ERS8000-1:5(config-if)# vrf vrftwo

    ERS8000-1:5(config-if)# exit

    ERS8000-2 Step 2 Create VLAN 601 for vrf1 and VLAN 700 for vrf2

    ERS8000-2:5# config vlan 601 create byport 1

    ERS8000-2:5# config vlan 601 name vrf1_two

    ERS8000-2:5# config vlan 601 vrf vrfone

    ERS8000-2:5# config vlan 601 ports add 4/26

    ERS8000-2:5# config vlan 700 create byport 1

    ERS8000-2:5# config vlan 700 name vrf2_one

    ERS8000-2:5# config vlan 700 vrf vrftwo

    ERS8000-2:5# config vlan 700 ports add 4/23

    3.1.4 VRF1 Configuration

    3.1.4.1 Add IP Address, Routing Protocol, and enable RSMLT for VRF 1

    For the rest of this example, we will configure ERS8000-1 using CLI and configure ERS8000-2 usingJDM.

    For ERS8000-2, proceed to the following steps using JDM

    ERS8000-1 Step 1 Add IP address for VLAN 601 and enable OSPF

    ERS8000-1:5(config)# interface vlan 601 ERS8000-1:5(config-if)# ip address 10.1.11.1 255.255.255.0

    ERS8000-1:5(config-if)# ip ospf enable

    ERS8000-1:5(config-if)# ip rsmlt

    ERS8000-1:5(config-if)# ip rsmlt holdup-timer 60

    ERS8000-1:5(config-if)# exit

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    33/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide33 April 2011

    avaya.com

    ERS8000-1 Step 2 Enable OSPF globally for VRF 1

    ERS8000-1:5(config)# router vrf vrfone

    ERS8000-1:5(router-vrf)# ip ospf admin-state

    ERS8000-1:5(router-vrf)# exit

    ERS8000-2 Step 1 Logon using JDM using the password credentials created above for vrf1

    If Super User, via JDM go to IP -> VRF -> VRF and select VRF 1

    Via VRF 1 user, enter the correct SNMP-v3 credentials

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    34/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide34 April 2011

    avaya.com

    ERS8000-2 Step 2 Once logged on, you should only see the VLAN and VLAN port membersactivated for vrf1.

    Please notice, as shown in the above Java Device Manager (JDM) snap-shot, only the VLANand VLAN members as configured by the Super User are visible.

    ERS8000-1 Step 3 Add IP address for VLAN 601. Via JDM, go to VLA N -> VLANs -> Id 601 -> IP ->IP Address > Insert and then go to the OSPF tab and enable OSPF

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    35/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide35 April 2011

    avaya.com

    ERS8000-2 Step 4 Enable OSPF globally for VRF 1. Via JDM, go to IP -> OSPF vrfo ne (vrf 1) ->General

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    36/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide36 April 2011

    avaya.com

    3.1.5 VRF2 Configuration

    3.1.5.1 Add IP Address, Routing Protocol, and enable RSMLT for VRF 2

    For the rest of this example, we will configure ERS8000-1 using CLI and configure ERS8000-2 usingJDM.

    For ERS8000-2, proceed to the following steps using JDM.

    ERS8000-1 Step 1 Add IP address for VLAN 600, enable RIP and set the RSMLT hold-down timerto 180 seconds (assuming default RIP timers)

    ERS8000-1:5(config)# interface vlan 700

    ERS8000-1:5(config-if)# ip address 172.1.1.1 255.255.255.0

    ERS8000-1:5(config-if)# ip rip enable

    ERS8000-1:5(config-if)# ip rsmlt

    ERS8000-1:5(config-if)# ip rsmlt holddown-timer 180 ERS8000-1:5(config-if)# exit

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    37/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide37 April 2011

    avaya.com

    ERS8000-2 Step 1 Logon using JDM using the password credentials created above for vrf2

    If Super User, via JDM go to IP -> VRF -> VRF and select VRF 1

    Via VRF 2 user, enter the correct SNMP-v3 credentials

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    38/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide38 April 2011

    avaya.com

    ERS8000-1 Step 2 Add IP address for VLAN 700. Via JDM, go to VLAN -> VLANs -> Id 700 -> IP ->Insert and then go to the RIP tab and enable RIP

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    39/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide39 April 2011

    avaya.com

    ERS8000-1 Step 2 Enable RIP. Via JDM, go to VLA N -> VLA Ns -> Id 700 -> IP -> RIP and enableRIP

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    40/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide40 April 2011

    avaya.com

    3.2 Verification

    With using the show command to view various VRF parameters, you can ether use theVRF name or VRF ID.

    3.2.1 VRF:

    3.2.1.1 Verify VRF IP information: Interfaces, Routes and ARP Entries

    Step 1 Verify the IP addresses using CLI, i.e. for VRF 1

    ERS8000-1:5# show ip interface vrf vrfone

    or

    ERS8000-1:5#show ip interface vrfids 1

    Result:

    ================================================================================IP Interface - VRF vrfone

    ================================================================================INTERFACE IP NET BCASTADDR REASM VLAN BROUTER

    ADDRESS MASK FORMAT MAXSIZE ID PORT--------------------------------------------------------------------------------Vlan600 10.1.10.1 255.255.255.0 ones 1500 -- falseVlan601 10.1.11.1 255.255.255.0 ones 1500 -- false

    Step 1 Verify the IP address using JDM, i.e. assuming Super User for VRF 1

    Go to:

    1. IP -> VRF -> Id 1 (vrfone) -> Set Currect VRF

    2. IP -> IP vrfone (vrf 1) -> Addresses .

    Result:

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    41/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide41 April 2011

    avaya.com

    Step 2 Verify the IP ARP table using CLI, i.e. for VRF 1

    ERS8000-1:5# show ip arp vrf vrfoneor

    ERS8000-1:5# show ip arp vrfids 1

    Result:

    =====================================================================IP Arp - VRF vrfone

    =====================================================================IP_ADDRESS MAC_ADDRESS VLAN PORT TYPE TTL(10 Sec)---------------------------------------------------------------------10.1.10.1 00:01:81:28:86:11 600 - LOCAL 216010.1.10.255 ff:ff:ff:ff:ff:ff 600 - LOCAL 216010.1.11.1 00:01:81:28:86:12 601 - LOCAL 2160

    10.1.11.255 ff:ff:ff:ff:ff:ff 601 - LOCAL 216010.1.10.2 00:00:15:2b:56:7c 600 4/27 DYNAMIC 215910.1.11.2 00:00:15:29:0f:d3 601 4/28 DYNAMIC 2159

    Step 2 Verify the IP ARP table using JDM, i.e. assuming Super User for VRF 1

    Go to:

    1. IP -> VRF -> Id 1 (vrfone) -> Set Currect VRF

    2. IP -> IP vrfone (vrf 1) -> ARP

    Result:

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    42/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide42 April 2011

    avaya.com

    Step 3 Verify the IP route table using CLI, i.e. for VRF 1

    ERS8000-1:5# show ip route vrf vrfoneor

    ERS8000-1:5# show ip route vrfids 1

    Result:

    ================================================================================IP Route - VRF vrfone

    ================================================================================NH INTER

    DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF--------------------------------------------------------------------------------10.1.10.0 255.255.255.0 10.1.10.1 - 1 600 LOC 0 DB 010.1.11.0 255.255.255.0 10.1.11.1 - 1 601 LOC 0 DB 0

    192.33.34.0 255.255.255.0 10.1.10.2 vrfo~ 20 600 OSPF 0 IB 120192.33.35.0 255.255.255.0 10.1.10.2 vrfo~ 20 600 OSPF 0 IB 120192.33.36.0 255.255.255.0 10.1.10.2 vrfo~ 20 600 OSPF 0 IB 120192.33.37.0 255.255.255.0 10.1.10.2 vrfo~ 20 600 OSPF 0 IB 120192.33.38.0 255.255.255.0 10.1.10.2 vrfo~ 20 600 OSPF 0 IB 120192.33.39.0 255.255.255.0 10.1.10.2 vrfo~ 20 600 OSPF 0 IB 120192.33.40.0 255.255.255.0 10.1.10.2 vrfo~ 20 600 OSPF 0 IB 120192.33.41.0 255.255.255.0 10.1.10.2 vrfo~ 20 600 OSPF 0 IB 120192.33.42.0 255.255.255.0 10.1.10.2 vrfo~ 20 600 OSPF 0 IB 120192.33.43.0 255.255.255.0 10.1.10.2 vrfo~ 20 600 OSPF 0 IB 120192.168.1.0 255.255.255.0 10.1.11.2 vrfo~ 10 601 OSPF 0 IB 125192.168.2.0 255.255.255.0 10.1.11.2 vrfo~ 10 601 OSPF 0 IB 125192.168.3.0 255.255.255.0 10.1.11.2 vrfo~ 10 601 OSPF 0 IB 125192.168.4.0 255.255.255.0 10.1.11.2 vrfo~ 10 601 OSPF 0 IB 125

    192.168.5.0 255.255.255.0 10.1.11.2 vrfo~ 10 601 OSPF 0 IB 125192.168.6.0 255.255.255.0 10.1.11.2 vrfo~ 10 601 OSPF 0 IB 125

    192.168.7.0 255.255.255.0 10.1.11.2 vrfo~ 10 601 OSPF 0 IB 125192.168.8.0 255.255.255.0 10.1.11.2 vrfo~ 10 601 OSPF 0 IB 125192.168.9.0 255.255.255.0 10.1.11.2 vrfo~ 10 601 OSPF 0 IB 125192.168.10.0 255.255.255.0 10.1.11.2 vrfo~ 10 601 OSPF 0 IB 125

    22 out of 22 Total Num of Route Entries, 22 Total Num of Dest Networks displayed.--------------------------------------------------------------------------------TYPE Legend:I=Indirect Route, D=Direct Route, A=Alternative Route, B=Best Route, E=Ecmp Route,U=Unresolved Route, N=Not in HW, F=Replaced by FTN, V=IPVPN Route

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    43/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide43 April 2011

    avaya.com

    Step 3 Verify the IP route table using JDM, i.e. assuming Super User for VRF 1,

    Go to:1. IP -> VRF -> Id 1 (vrfone) -> Set Currect VRF

    2. IP -> IP vrfone (vrf 1) -> Routes

    Result:

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    44/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide44 April 2011

    avaya.com

    3.2.2 SNMP:

    3.2.2.1 Verify SNMP Users

    Step 1 Verify the SNMP-v3 users

    ERS8000-1:5# show snmp-server user

    Result:

    Engine ID = 80:00:08:E0:03:00:01:81:28:84:00

    ================================================================================USM Configuration

    ================================================================================User/Security Name Engine Id Protocol--------------------------------------------------------------------------------vrfone 0x80:00:08:E0:03:00:01:81:28:84:00 HMAC_MD5, AES PRIVACY,vrftwo 0x80:00:08:E0:03:00:01:81:28:84:00 HMAC_MD5, AES PRIVACY,initial 0x80:00:08:E0:03:00:01:81:28:84:00 NO AUTH, NO PRIVACYvrf0user 0x80:00:08:E0:03:00:01:81:28:84:00 HMAC_MD5, AES PRIVACY,

    4 out of 4 Total entries displayed--------------------------------------------------------------------------------

    Step 1 Verify the SNMP-v3 users using JDM via Super User:

    Go to:

    1. Edit -> SNMPv3 -> USM Table

    Result:

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    45/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide45 April 2011

    avaya.com

    3.2.2.2 Verify SNMP Group Member and Group Access

    Step 1 Verify the SNMP-v3 group-member

    ERS8000-1:5# show snmp-server group

    Result:

    ==================================================================VACM Group Membership Configuration

    ==================================================================Sec Model Security Name Group Name------------------------------------------------------------------snmpv1 readview readgrpsnmpv1 sBladeUser sBladeGrpsnmpv1 initialview v1v2grpsnmpv2c readview readgrpsnmpv2c sBladeUser sBladeGrp

    snmpv2c initialview v1v2grpusm vrfone vrf1_groupusm vrftwo vrf2_groupusm initial initialusm vrf0user group_1

    10 out of 10 Total entries displayed------------------------------------------------------------------

    Step 1 Verify the SNMP-v3 users using JDM via Super User:

    Go to:

    1. Edit -> SNMPv3 -> VCAM Table -> Group Membership

    Result:

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    46/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide46 April 2011

    avaya.com

    Step 2 Verify the SNMP-v3 group access

    ERS8000-1:5# show snmp-server group

    Result:

    ================================================================================VACM Group Access Configuration

    ================================================================================Group Prefix Model Level ReadV WriteV NotifyV--------------------------------------------------------------------------------vrf1_group vrf1 usm authPriv vrf vrf vrfvrf2_group vrf2 usm authPriv vrf vrf vrf

    Step 2 Verify the SNMP-v3 users using JDM via Super User:

    Go to:

    1. Edit -> SNMPv3 -> VCAM Table>Group Access Right

    Result:

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    47/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide47 April 2011

    avaya.com

    4. Routing between VRFs

    4.1 Configuration Leaking Routes between VRF InstancesThere may be times where you may wish to inject routes between VRFs for various reasons. Forexample, you may have a case where there is service on a particulate VRF, i.e. VRF10, which you alsowould also like to use on other VRFs. Instead of duplicating the service on each VRF, you could injectthe service routes from VRF 10 to the other VRFs that require the use of this servi ce. In the otherdirection, you will also need to inject the routes from the other VRFs that require the service back toVRF10.

    In this example, using the base configuration from the configuration example in section 3, we will enablethe leaking of routes between VRF1 and VRF2. Overall, we will accomplish the following:

    Enable re-distribution of direct interfaces between VRF1 and VRF2

    Only re-distribute network 172.1.25.0/24 from VRF2 to VRF1 Only re-distribute network 192.33.34.0/24 from VRF1 to VRF2

    4.1.1 ERS 8600/8800 Configuration

    4.1.1.1 Enable ASBR

    In order to re-distribute static routes, you must enable OSPF ASBR on vrf 1.

    ERS8000-1 Step 1 Enable OSPF ASBR for vrf 1

    ERS8000-1:5(config)# router vrf vrfone

    ERS8000-1:5(router-vrf)# ip ospf as-boundary-router enable

    ERS8000-1:5(router-vrf)# exit

    ERS8000-2 Step 1 Enable OSPF ASBR for vrf 1

    ERS8000-2:5# config ip vrf vrfone ospf as-boundary-router enable

    4.1.1.2 Add static routes

    ERS8000-1 Step 1 Create Static route for vrf 1

    ERS8000-1:5(config)# router vrf vrfone

    ERS8000-1:5(router-vrf)# ip route 172.1.25.0 255.255.255.0 172.1.1.5 weight 1 next-hop-vrf vrftwo

    ERS8000-1:5(router-vrf)# exit

    ERS8000-2 Step 1 Create Static route for vrf 1

    ERS8000-2:5# config ip vrf vrfone static-route create 172.1.25.0/24 next-hop 172.1.1.5cost 1 next-hop-vrf vrftwo

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    48/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide48 April 2011

    avaya.com

    ERS8000-1 Step 2 Create Static route for vrf 2

    ERS8000-1:5(config)# router vrf vrftwo

    ERS8000-1:5(router-vrf)# ip route 192.33.34.0 255.255.255.0 10.1.11.3 weight 1 next-hop-vrf vrfone

    ERS8000-1:5(router-vrf)# exit

    ERS8000-2 Step 2 Create Static route for vrf 2

    ERS8000-2:5# config ip vrf vrftwo static-route create 192.33.34.0/24 next-hop10.1.11.3 cost 1 next-hop-vrf vrfone

    4.1.1.3 Enable Route Re-distribution

    We will also have to re-distribute the direct interfaces in order for either Switch-1 or Switch-2 to get to theremote networks.

    ERS8000-1 Step 1 For vrf 1, enable OSPF re-distribution of static routes from VRF source of vrf2

    ERS8000-1:5(config)# router vrf vrfone

    ERS8000-1:5(router-vrf)# ip ospf redistribute static vrf-src vrftwo

    ERS8000-1:5(router-vrf)# ip ospf redistribute static enable vrf-src vrftwo

    ERS8000-1:5(router-vrf)# ip ospf redistribute direct vrf-src vrftwo

    ERS8000-1:5(router-vrf)# ip ospf redistribute direct enable vrf-src vrftwo

    ERS8000-1:5(router-vrf)# exit

    ERS8000-2 Step 1 For vrf 1, enable OSPF re-distribution of static routes from VRF source of vrf2

    ERS8000-2:5# config ip vrf vrfone ospf redistribute static create vrf-src vrftwo

    ERS8000-2:5# config ip vrf vrfone ospf redistribute static enable vrf-src vrftwo

    ERS8000-2:5# config ip vrf vrfone ospf redistribute static apply vrf-src vrftwo

    ERS8000-2:5# config ip vrf vrfone ospf redistribute direct create vrf-src vrftwo

    ERS8000-2:5# config ip vrf vrfone ospf redistribute direct enable vrf-src vrftwo

    ERS8000-2:5# config ip vrf vrfone ospf redistribute direct apply vrf-src vrftwo

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    49/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide49 April 2011

    avaya.com

    ERS8000-1 Step 2 For vrf 2, enable RIP re-distribution of static routes from VRF source of vrf 1

    ERS8000-1:5(config)# router vrf vrftwo

    ERS8000-1:5(router-vrf)# ip rip redistribute static vrf-src vrfone

    ERS8000-1:5(router-vrf)# ip rip redistribute static enable vrf-src vrfone

    ERS8000-1:5(router-vrf)# ip rip redistribute direct vrf-src vrfone

    ERS8000-1:5(router-vrf)# ip rip redistribute direct enable vrf-src vrfone

    ERS8000-1:5(router-vrf)# exit

    ERS8000-2 Step 2 For vrf 2, enable RIP re-distribution of static routes from VRF source of vrf 1

    ERS8000-2:5# config ip vrf vrftwo rip redistribute static create vrf-src vrfone

    ERS8000-2:5# config ip vrf vrftwo rip redistribute static enable vrf-src vrfone

    ERS8000-2:5# config ip vrf vrftwo rip redistribute static apply vrf-src vrfone

    ERS8000-2:5# config ip vrf vrftwo rip redistribute direct create vrf-src vrfone

    ERS8000-2:5# config ip vrf vrftwo rip redistribute direct enable vrf-src vrfone

    ERS8000-2:5# config ip vrf vrftwo rip redistribute direct apply vrf-src vrfone

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    50/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide50 April 2011

    avaya.com

    4.1.2 Verification

    4.1.2.1 Verify Static Routes

    Step 1 Verify the OSPF route redistribution configuration

    ERS8000-1:5# show ip route static vrf vrfone

    or

    ERS8000-1:5# show ip route static vrfids 1

    Result:

    ================================================================================IP Static Route - VRF vrfone

    ================================================================================DEST MASK NEXT NH-VRF COST PREF LCLNHOP STATUS ENABLE--------------------------------------------------------------------------------

    172.1.25.0 255.255.255.0 172.1.1.3 vrftwo 1 5 TRUE ACTIVE TRUE

    4.1.2.2 Verify Route Policies

    In order to re-distribute static routes, you must enable OSPF ASBR on vrf 1.

    Step 1 Verify the OSPF route redistribution configuration

    ERS8000-1:5# show ip ospf redistribute vrf vrfone

    or

    ERS8000-1:5# show ip ospf redistribute vrfids 1

    Result:================================================================================

    OSPF Redistribute List - VRF vrfone================================================================================

    SRC-VRF SRC MET MTYPE SUBNET ENABLE RPOLICY--------------------------------------------------------------------------------vrftwo STAT 0 type2 allow TRUEvrftwo LCL 0 type2 allow TRUE

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    51/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide51 April 2011

    avaya.com

    4.1.2.3 Verify Route table

    Step 1 Verify the OSPF route redistribution configuration

    ERS8000-1:5# show ip route vrf vrfone

    or

    ERS8000-1:5# show ip route vrfids 1

    Result:

    ================================================================================IP Route - VRF vrfone

    ================================================================================NH INTER

    DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF--------------------------------------------------------------------------------10.1.11.0 255.255.255.0 10.1.11.1 - 1 601 LOC 0 DB 0

    |192.33.34.0 255.255.255.0 10.1.11.3 vrfo~ 20 601 OSPF 0 IB 20|172.1.1.0 255.255.255.0 10.1.11.2 vrfo~ 1 601 OSPF 0 IB 125172.1.25.0 255.255.255.0 172.1.1.3 vrft~ 1 700 STAT 0 IB 5

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    52/53

    VRF-Lite for Ethernet Routing Switch 8600 Technical Configuration Guide52 April 2011

    avaya.com

    5. Software Baseline:Software level used for this guide is based on 5.x or higher.

    6. Reference Documentation:Document Title Publication Number Description

    IP VPN-Lite for EthernetRouting Switch 8600Technical Configuration Guide

    NN48500-562

    Configuration IP VPN NN46205-520

  • 8/11/2019 Nn48500 570v2.0vrflitetcg Avaya

    53/53

    avaya.com

    7. Customer serviceVisit the Avaya Web site to access the complete range of services and support that Avaya provides. Goto www.avaya.com or go to one of the pages listed in the following sections.

    7.1 Getting technical documentationTo download and print selected technical publications and release notes directly from the Internet,go towww.avaya.com/support .

    7.2 Getting product trainingOngoing product training is available. For more information or to register, you can access the Web site atwww.avaya.com/support . From this Web site, you can locate the Training contacts link on the left-handnavigation pane.

    7.3 Getting help from a distributor or resellerIf you purchased a service contract for your Avaya product from a distributor or authorized reseller,contact the technical support staff for that distributor or reseller for assistance.

    7.4 Getting technical support from the Avaya Web siteThe easiest and most effective way to get technical support for Avaya products is from the AvayaTechnical Support Web site at www.avaya.com/support .

    http://www.avaya.com/http://www.avaya.com/http://www.avaya.com/http://www.avaya.com/supporthttp://www.avaya.com/supporthttp://www.avaya.com/supporthttp://www.avaya.com/supporthttp://www.avaya.com/supporthttp://www.avaya.com/supporthttp://www.avaya.com/supporthttp://www.avaya.com/supporthttp://www.avaya.com/supporthttp://www.avaya.com/supporthttp://www.avaya.com/