ISIS ExternalRoute Tests and Use Cases
ISIS ExternalRoute Tests and Use Cases
Ludovico Stevens
February 2018
Version 4 (pdf version)
IP routes
IP routes
IP routes
IP routes
VSP8000-1
1/48 3/2
Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
VSP8000-2
▪ VSP4000 ▪ VSP8000-2
– VSP 4850GTS-PWR+ /
6.1.0.0_B021 – VSP 8242XSQ / 6.1.0.0_B021
▪ VSP8000-1 ▪ ERS8800
– VSP 8404 / 6.1.0.0_B021 – 7.2.25.0GA
▪ Slot1 8424GT
▪ Slot2 8418XSQ
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Port & MLT Config
VSP8000-1
2/15 2/16
1/48 3/2
1/13 1/17
VSP8000-1
1/48 3/2
1/13 1/17
VSP8000-2
VSP8000-1
1/48 3/2
1/13 1/17
VSP8000-2
VSP8000-1
1/48 3/2
interface GigabitEthernet 1/17 1/17
1/13
brouter vlan 3902 subnet 192.168.255.5/30
ip ospf enable
exit VSP8000-2
router ospf prompt ERS8800
router-id 10.0.0.81 interface GigabitEthernet 3/1,3/2
exit brouter port 3/1 vlan 3902 subnet 192.168.255.6/30
router ospf enable brouter port 3/2 vlan 3901 subnet 192.168.255.2/30
ip ospf enable
interface GigabitEthernet 1/17 exit
brouter vlan 3901 subnet 192.168.255.1/30 interface loopback 1
ip ospf enable ip address 10.0.0.88/32
exit ip ospf
router ospf exit
router-id 10.0.0.82 router ospf
exit router-id 10.0.0.88
router ospf enable exit
router ospf enable
VSP8000-1
1/48 3/2
Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
SPB
OSPF
IS-IS 2/15 10 2/16
1/48 10
1 3/2
10 Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
1/48 3/2
Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
1/48 3/2
Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
router isis
redistribute ospf
redistribute ospf metric-type external
redistribute ospf enable
exit
isis apply redistribute ospf
▪ We redistribute all OSPF routes into ISIS and make them of metric-type
“External”
1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
1/48 3/2
Net 192.168.20.0/24
ISIS Pref 7
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24 OSPF Pref 20 & 125
▪ Ok, so what’s happening here is that VSP8000-1 was slightly quicker than ▪ So VSP8000-2 replaces in its routing table the OSPF routes with the ISIS ones
VSP8000-2 in redistributing OSPF routes into ISIS ▪ Now VSP8000-2 is no longer redistributing the OSPF routes into ISIS, since it
▪ So VSP8000-2 now sees the same IP routes from both OSPF & ISIS has none in its routing table
▪ ISIS has a higher protocol preference (7 is lower than OSPF’s 20 or 125) ▪ This state of affairs remains stable in the current state, but it clearly is not
optimal
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS OSPF Redistribution - Fixing
1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
▪ This ISIS Accept policy ensures that the 2 VSP8000 border routers will only accept ISIS “External” routes with a
modified preference of 130 (instead of SPB’s default preference 7)
▪ OSPF routes have preference levels ranging between 20, 25,120 or 125 (depending on OSPF route type)
▪ Hence we are ensuring that the border routers will never install ISIS External routes (from each other) as long as
they have the original OSPF routes
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS OSPF Redistribution – Checking again
1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
▪ Here we see that the border VSP8000s learn from each other the already redistributed OSPF routes as ISIS External routes, but
our Accept policy ensures they get a preference of 130 (in orange) which ensures that these will not displace the preferred OSPF
route
©2017 Extreme(in green)
Networks, Inc. All and
©2017 rights
Extremeremain
reserved thus
Networks, Inc. asreserved
All rights alternative routes; we will come back to alternative routes as they present problems…
IS-IS OSPF Redistribution – Checking
1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
▪ No change here,
NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
-----------------------------------------------------------------------------------------------------
still looking good 10.0.0.40
10.0.0.81
255.255.255.255 10.0.0.40
255.255.255.255 VSP8000-1
-
GlobalRouter
1
10
0
4051
LOC 0
ISIS 0
DB
IBS 7
0
1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
VSP4000:1#% show isis lsdb ip-unicast
====================================================================================================
ISIS IP-UNICAST-ROUTE SUMMARY VSP8000-2 Clip1: 10.0.0.82
====================================================================================================
PREFIX METRIC TLV LSP HOST VSP8000-1:1#% show ip route
I-SID ADDRESS LENGTH METRIC TYPE TYPE FRAG NAME =====================================================================================================
-------------------------------------------------------------------------------- IP Route - GlobalRouter
- 10.0.0.40 32 1 Internal 135 0x2 VSP4000 =====================================================================================================
- 172.16.10.0 24 1 Internal 135 0x2 VSP4000 NH INTER
- 10.0.0.81 32 1 Internal 135 0x2 VSP8000-1 DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
- 192.168.255.4 30 1 Internal 135 0x2 VSP8000-1 -----------------------------------------------------------------------------------------------------
- 10.0.0.88 32 11 External 135 0x2 VSP8000-1 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
- 192.168.10.0 24 11 External 135 0x2 VSP8000-1 VSP8000-2:1#% 10.0.0.81
show ip route 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0
- 192.168.20.0 24 1 External 135 0x2 VSP8000-1 =====================================================================================================
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
- 10.0.0.82 32 1 Internal 135 0x2 VSP8000-2 10.0.0.88 IP Route
255.255.255.255 - GlobalRouter
192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20
- 192.168.255.0 30 1 Internal 135 0x2 VSP8000-2 =====================================================================================================
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
- 10.0.0.88 32 11 External 135 0x2 VSP8000-2 192.168.10.0 255.255.255.0 NH
192.168.255.6 INTER 11
GlobalRouter 1/17 OSPF 0 IB 20
- 192.168.10.0 24 11 External 135 0x2 VSP8000-2 DST MASK
192.168.20.0 NEXT
255.255.255.0 VRF/ISID
192.168.255.6 COST FACE
GlobalRouter 1 PROT 1/17
AGE TYPE OSPF
PRF 0 IB 125
- 192.168.20.0 24 1 External 135 0x2 VSP8000-2 -----------------------------------------------------------------------------------------------------
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.40 255.255.255.255
192.168.255.4 VSP4000
255.255.255.252 GlobalRouter - 10
192.168.255.5 4051 1 ISIS 1/17
0 IBS LOC
7 0 DB 0
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
▪ OSPF routes are marked as External routes in the ISIS LSDB 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
▪ Note how the original route cost is used as the ISIS route metric 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
– This metric is only used as a tie breaker for Internal routes, but 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
becomes the primary route selection metric for External routes
192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
(though not relevant to this particular use case) 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS OSPF Redistribution – Checking
1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
VSP4000:1#% show isis spbm ip-unicast-fib all
==================================================================================================================================
VSP8000-2 Clip1: 10.0.0.82 SPBM IP-UNICAST FIB ENTRY INFO
==================================================================================================================================
1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
▪ It would seem all is looking good on the border routers… but not quite….
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ OSPF Redistribution - Checking
1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
▪ The alternative routes in red are not good to have, because they will simply result in rapid route flapping (more on next slide)
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ OSPF Redistribution - Fixing
1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
▪ ISIS routes are preferred over OSPF ones, so the “alternative” OSPF routes that the VSP8000s learn
from each other for ISIS networks that have been re-distributed into OSPF will not get installed
▪ However, if those ISIS routes were to become unavailable (e.g. reboot of VSP4000) then both
VSP8000s would immediately remove the ISIS routes and replace them with these alternative OSPF
routes, which would cause a temporary route flapping, with both VSP8000s temporarily announcing
those routes back into ISIS (which is where they originated from!)
– Same applies in reverse, for OSPF routes advertised into ISIS, for which we have upped the preference
to 130
▪ The best approach is to simply disable alternative IP routes on the border routers, which is what we
are doing here. This approach will also work with a RIP or BGP cloud
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ OSPF Redistribution – Checking again
1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
▪ Looking much better now (we got rid of all alternative routes)
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Enabling ECMP - Config
IP routes
Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88
IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16
1/48 3/2
Net 192.168.20.0/24
IP routes
Net 172.16.10.0/24 1/13 IP routes 1/17 Net 192.168.10.0/24
ip ecmp
IP routes
Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88
IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16
1/48 3/2
Net 192.168.20.0/24
IP routes
Net 172.16.10.0/24 1/13 IP routes 1/17 Net 192.168.10.0/24
VSP4000:1#% show ip route
=====================================================================================================
IP Route - GlobalRouter VSP8000-2 Clip1: 10.0.0.82
=====================================================================================================
NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF ERS8800:5#% show ip route
----------------------------------------------------------------------------------------------------- ===========================================================================================
10.0.0.40 255.255.255.255 10.0.0.40 - 1 0 LOC 0 DB 0 IP Route - GlobalRouter
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBSE 7 ===========================================================================================
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4052 ISIS 0 IBSE 7 NH INTER
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBSE 7 DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4052 ISIS 0 IBSE 7 -------------------------------------------------------------------------------------------
10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IBSE 7 10.0.0.40 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IBE 125
10.0.0.88 255.255.255.255 VSP8000-2 GlobalRouter 11 4051 ISIS 0 IBSE 7 10.0.0.40 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IBE 125
10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 11 4052 ISIS 0 IBSE 7 10.0.0.81 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
10.0.0.88 255.255.255.255 VSP8000-2 GlobalRouter 11 4052 ISIS 0 IBSE 7 10.0.0.82 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IB 125
172.16.10.0 255.255.255.0 172.16.10.1 - 1 0 LOC 0 DB 0 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IBSE 7 172.16.10.0 255.255.255.0 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IBE 125
192.168.10.0 255.255.255.0 VSP8000-2 GlobalRouter 11 4051 ISIS 0 IBSE 7 172.16.10.0 255.255.255.0 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IBE 125
192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 11 4052 ISIS 0 IBSE 7 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
192.168.10.0 255.255.255.0 VSP8000-2 GlobalRouter 11 4052 ISIS 0 IBSE 7 192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 1 4051 ISIS 0 IBSE 7 192.168.255.0 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
192.168.20.0 255.255.255.0 VSP8000-2 GlobalRouter 1 4051 ISIS 0 IBSE 7 192.168.255.4 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0
192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 1 4052 ISIS 0 IBSE 7
192.168.20.0
192.168.255.0
255.255.255.0 VSP8000-2
255.255.255.252 VSP8000-2
GlobalRouter
GlobalRouter
1
10
4052
4051
ISIS 0
ISIS 0
IBSE 7
IBSE 7
▪ We get 4-way ECMP on VSP4000 and 2-way
192.168.255.0
192.168.255.4
255.255.255.252 VSP8000-2
255.255.255.252 VSP8000-1
GlobalRouter
GlobalRouter
10
10
4052
4051
ISIS 0
ISIS 0
IBSE 7
IBSE 7
ECMP on the ERS8800
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4052 ISIS 0 IBSE 7
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Testing failure on border router OSPF link
IP routes
Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88
IP routes
1/47 3/1
interface gigabitEthernet 1/17
shutdown SPB
OSPF
exit IS-IS 2/15 2/16
1/48 3/2
Net 192.168.20.0/24
IP routes
Net 172.16.10.0/24 1/13 IP routes 1/17 Net 192.168.10.0/24
▪ Note that now VSP8000-2 has installed the ISIS External routes from VSP8000-1
Summarized route
IP routes
IP routes
Summarized route
▪ Let us assume that we have many ISIS IP routes but that we do not
want to advertise all of them into OSPF
▪ Instead we want to aggregate ISIS IP routes and inject into
OSPF/RIP/BGP a single (or a few) summarized prefixes
Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24
interface loopback 3
ip address 172.16.20.1/24
exit
▪ Here we create some extra IP networks on
interface loopback 4
ip address 172.16.30.1/24
VSP4000 in the 172.16.0.0/16 range
exit
interface loopback 5
ip address 172.16.40.1/24
exit
Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24
VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.20.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.20.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.30.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.30.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.40.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.40.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24
▪ We replace our original “isis-internal” route-map with a new route-map for the ip prefix-list net172 172.16.0.0/16 ge 16 le 32
existing ISIS ➔ OSPF redistribution route-map "isis-internal-aggregate" 1
– Route-map sequence 1: any ISIS Internal route falling within 172.16.0.0/16 will match metric-type-isis internal
be aggregated and only the prefix 172.16.0.0/16 will be advertised instead match network "net172"
– Route-map sequence 2: any other ISIS Internal route will be advertised as set injectlist "net172"
before enable
exit
▪ We are also taking the pre-caution of configuring a corresponding static black- route-map "isis-internal-aggregate" 2
hole route for 172.16.0.0/16 on the VSP8000s with a preference of 8 match metric-type-isis internal
– This is a good idea whenever aggregating IP routes. There are 254 possible enable
Class C routes within 172.16.0.0/16, but we only have 4 active. If the exit
VSP8000s had a default route in their routing table and the OSPF cloud router ospf
started forwarding traffic for network 172.16.100.100, this traffic would go into a
redistribute isis route-map "isis-internal-aggregate"
routing loop until expiry of IP TTL. The static black hole route will prevent this
from happening. exit
ip ospf apply redistribute isis
– We set a preference of 8 so that should the prefix 172.16.0.0/16 be ISIS ip route 172.16.0.0 255.255.0.0 255.255.255.255 weight 65535 preference 8
advertised by some other BEB in the ISIS cloud, this will have a higher
preference of 7 and will automatically replace the static black-hole route
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Aggregating ISIS routes and injecting a summarized route into
OSPF - Checking
VSP8000-1 Clip1: 10.0.0.81
Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24
VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.0.0 255.255.0.0 255.255.255.255 - 65535 0 STAT 0 IB 8 172.16.0.0 255.255.0.0 255.255.255.255 - 65535 0 STAT 0 IB 8
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.20.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.20.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.30.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.30.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.40.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.40.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
▪ Only change visible here is the appearance of the black-hole static route
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Aggregating ISIS routes and injecting a summarized route
into OSPF - Checking
VSP8000-1 Clip1: 10.0.0.81
Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24 ERS8800:5#% show ip route
===========================================================================================
▪ We see that the only the aggregated 172.16.0.0/16 IP Route - GlobalRouter
was redistributed as an OSPF LSA5 external route ===========================================================================================
NH INTER
by each border router DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
ERS8800:5#% show ip ospf ase -------------------------------------------------------------------------------------------
================================================================================ 10.0.0.40 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IBE 125
OSPF AsExternal Lsas - GlobalRouter 10.0.0.40 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IBE 125
================================================================================ 10.0.0.81 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
LSTYPE LINKSTATEID ADV_ROUTER ETYPE METRIC ASE_FWD_ADDR AGE SEQ_NBR 10.0.0.82
CSUM 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IB 125
-------------------------------------------------------------------------------- 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
AsExternal 10.0.0.40 10.0.0.81 2 10 0.0.0.0 172.16.0.0
1070 0x80000001 0xf04a 255.255.0.0 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IBE 125
AsExternal 10.0.0.40 10.0.0.82 2 10 0.0.0.0 172.16.0.0
1070 0x80000001 0xea4f 255.255.0.0 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IBE 125
AsExternal 10.0.0.81 10.0.0.82 2 10 0.0.0.0 192.168.10.0
1070 0x80000001 0x4fc1 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
AsExternal 10.0.0.82 10.0.0.81 2 10 0.0.0.0 192.168.20.0
1070 0x80000001 0x4bc5 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
AsExternal 172.16.0.0 10.0.0.81 2 10 0.0.0.0 192.168.255.0
1070 0x80000002 0x7d32 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
AsExternal 172.16.0.0 10.0.0.82 2 10 0.0.0.0 192.168.255.4
1069 0x80000002 0x7737 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0
AsExternal 192.168.20.0 10.0.0.88 2 1 0.0.0.0 1184 0x80000004 0x37f6
AsExternal 192.168.255.0 10.0.0.81 2 10 0.0.0.0 1070 0x80000001 0x41c5 ▪ And we see the aggregated route on the OSPF side
AsExternal 192.168.255.4 10.0.0.82 2 10 0.0.0.0 1070 0x80000001 0x13ee
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Aggregating ISIS routes and injecting a summarized route into
OSPF – Testing
VSP8000-1 Clip1: 10.0.0.81
Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24
▪ As expected VSP8000-1 stops ERS8800:5#% show ip route
===========================================================================================
announcing the aggregated route as it IP Route - GlobalRouter
===========================================================================================
no longer has any ISIS Internal routes NH INTER
DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
matching the 172.16.0.0/24 range -------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
ERS8800:5#% show ip ospf ase 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
================================================================================ 172.16.0.0 255.255.0.0 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
OSPF AsExternal Lsas - GlobalRouter 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
================================================================================ 192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
LSTYPE LINKSTATEID ADV_ROUTER ETYPE METRIC ASE_FWD_ADDR 192.168.255.0
AGE SEQ_NBR CSUM 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
-------------------------------------------------------------------------------- 192.168.255.4 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0
AsExternal 10.0.0.40 10.0.0.82 2 10 0.0.0.0 1521 0x80000001 0xea4f
AsExternal 172.16.0.0 10.0.0.82 2 10 0.0.0.0 1520 0x80000002 0x7737
AsExternal 192.168.20.0 10.0.0.88 2 1 0.0.0.0 1635 0x80000004 0x37f6
default route
IP routes
IP routes
default route
▪ Let us assume that SPB is the core network and that we only want to
inject a default route into the other OSPF/BGP/RIP cloud
– Rather than redistributing all ISIS IP routes available
1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
– If a valid ISIS default route exists, this will have a higher preference of 7
and will replace the static black-hole default route
– If a valid ISIS default route does not exist, then any traffic received from
OSPF (after following the default route to SPB) which cannot be handled
via more specific routes, will be dropped on the VSP8000s
1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
▪ Only change visible here is the appearance of the default black-hole route
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Only injecting a default route into OSPF - Checking
1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
IP routes IP routes
IP routes IP routes
IP routes IP routes
IP routes IP routes
▪ We now have an SPB ISIS Core and a number (>1) of satellite networks running a different IP routing protocol
▪ GOAL = IP route across all the clouds
– OSPF, RIP or BGP routes from all the satellite clouds are redistributed into ISIS
– SPB (ISIS) Fabric IP routes are redistributed in the opposite direction
– IP routes from one satellite cloud need to be redistributed into the other satellite clouds
– Two border routers are used for redundancy on each boundary, and both can forward traffic at the same time
▪ CHALLENGE = not to get into routing loops where the IP routes redistributed by one router in one direction end
up being re-redistributed to the same cloud where they came from by the other router on the same boundary
▪ These slides will use an OSPF Cloud on one side and a RIP one on the other; the same config and principles
will equally work for BGP
VSP4000-1 VSP8000-1
1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
VSP4000-2 VSP8000-2
▪ VSP4000-C ▪ VSP8000-1
– VSP 4850GTS / 6.1.0.0_B021 – VSP 8404 / 6.1.0.0_B021
▪ VSP4000-1, VSP4000-2 ▪ Slot1 8424GT
– VSP 4850GTS-PWR+ / 6.1.0.0_B021 ▪ Slot2 8418XSQ
▪ ERS8800 ▪ VSP8000-2
– 7.2.25.0GA – VSP 8242XSQ / 6.1.0.0_B021
VSP4000-1 VSP8000-1
1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1
1/48 2/16
1/48 3/2
1/19 1/17
1/47 1/13
VSP4000-2 VSP8000-2
vlan members remove 1 1/47,1/48
interface gigabitEthernet 1/47,1/48 no spanning-tree stp 1 ports 3/1,3/2
no shutdown interface gigabitEthernet 3/1,3/2
no spanning-tree mstp no shutdown
exit exit
VSP4000-1 VSP8000-1
prompt VSP8000-1
prompt VSP4000-1
interface loopback 1
1/47 1/13 interface loopback 1
VSP4000-C 1/19 1/17 ERS8800 ip address 10.0.0.81/32
ip address 10.0.0.41/32
exit
exit 1/47 3/1 spbm
spbm
router isis SPB router isis
1/48 2/16 system-id 00bb.0000.8100
system-id 00bb.0000.4100 IS-IS manual-area 49.0000
manual-area 49.0000
ip-source-address 10.0.0.81
ip-source-address 10.0.0.41 1/48 3/2 spbm 1
spbm 1
spbm 1 nick-name 0.00.81
spbm 1 nick-name 0.00.41 1/19 1/17 spbm 1 b-vid 4051-4052 primary 4051
spbm 1 b-vid 4051-4052 primary 4051 1/47 1/13 spbm 1 ip enable
spbm 1 ip enable
exit
exit
VSP4000-2 VSP8000-2 vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan
router isis enable
router isis enable
cfm spbm mepid 81
cfm spbm mepid 41 prompt VSP4000-2 prompt VSP8000-2 cfm spbm enable
cfm spbm enable interface loopback 1 interface loopback 1
ip address 10.0.0.42/32 ip address 10.0.0.82/32
exit exit
spbm spbm
router isis router isis
system-id 00bb.0000.4200 system-id 00bb.0000.8200
manual-area 49.0000 manual-area 49.0000
ip-source-address 10.0.0.42 ip-source-address 10.0.0.82
spbm 1 spbm 1
spbm 1 nick-name 0.00.42 spbm 1 nick-name 0.00.82
spbm 1 b-vid 4051-4052 primary 4051 spbm 1 b-vid 4051-4052 primary 4051
spbm 1 ip enable spbm 1 ip enable
exit exit
vlan create 4051 name "B-VLAN-1" type spbm-bvlan vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan vlan create 4052 name "B-VLAN-2" type spbm-bvlan
router isis enable router isis enable
cfm spbm mepid 42 cfm spbm mepid 82
cfm spbm enable cfm spbm enable
VSP4000-1 VSP8000-1
1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1
SPB
1/48 2/16
IS-IS
1/48 3/2
1/19 1/17
1/47 1/13
VSP4000-2 VSP8000-2
VSP4000-1 VSP8000-1
1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1
SPB
1/48 2/16 OSPF
IS-IS
1/48 3/2
1/19 1/17
interface GigabitEthernet 1/17 1/47 1/13
brouter vlan 3902 subnet 192.168.255.5/30
ip ospf enable VSP4000-2 VSP8000-2
exit prompt ERS8800
router ospf interface GigabitEthernet 3/1,3/2
router-id 10.0.0.81 brouter port 3/1 vlan 3902 subnet 192.168.255.6/30
exit brouter port 3/2 vlan 3901 subnet 192.168.255.2/30
router ospf enable ip ospf enable
exit
interface GigabitEthernet 1/17 interface loopback 1
brouter vlan 3901 subnet 192.168.255.1/30 ip address 10.0.0.88/32
ip ospf enable ip ospf
exit exit
router ospf router ospf
router-id 10.0.0.82 router-id 10.0.0.88
exit exit
router ospf enable router ospf enable
VSP4000-1 VSP8000-1
1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1
SPB
RIP 1/48 2/16
IS-IS
1/48 3/2
1/19 1/17
1/47 1/13
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
interface loopback 1 Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82
ip address 10.0.0.40/32
exit interface loopback 2
interface loopback 2 ip address 192.168.10.1/24
ip address 172.16.10.1/24 ip ospf
exit exit
router rip router isis interface loopback 3
redistribute direct redistribute direct ip address 192.168.20.1/24
redistribute direct enable redistribute direct enable exit
exit exit router ospf
ip rip apply redistribute direct isis apply redistribute direct as-boundary-router enable
redistribute direct
▪ Net 192.168.10.0/24 will be an OSPF intra-area route redistribute direct enable
exit
▪ Net 192.168.20.0/24 will be an OSPF AS external route ip ospf apply redistribute direct
▪ We also redistribute directs on the VSP8000 border routers since this will typically be the case anyway
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
ISIS and OSPF link metrics
ERS8800:5#% show ip ospf interface
================================================================================
OSPF Interface - GlobalRouter
================================================================================
INTERFACE AREA ADM IFST MET PRI DR/ TYPE AUTH MTU
ID BDR TYPE IGNO
--------------------------------------------------------------------------------
192.168.10.1 0.0.0.0 en DR 10 1 192.168.10.1 pass none dis
0.0.0.0
10.0.0.88 0.0.0.0 en DR 10 1 10.0.0.88 pass none dis
0.0.0.0
Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81
192.168.255.2 0.0.0.0 en DR 1 1 192.168.255.2 brdc none dis
192.168.255.1
192.168.255.6 0.0.0.0 en DR 1 1 192.168.255.6 brdc none dis
1/47 1/13 192.168.255.5
VSP8000-1:1#% show ip ospf interface ▪ ISIS NNI links use default SPBM L1-metric of 10
====================================================================================================
OSPF Interface - GlobalRouter
▪ OSPF interface metrics at default 1 (for Gig Ethernet) and 10 for CLIPs
====================================================================================================
INTERFACE AREA ADM IFST MET PRI DR/ TYPE AUTH MTU
ID BDR TYPE IGNO ▪ RIP is hop based, it has no link metrics
----------------------------------------------------------------------------------------------------
192.168.255.5 0.0.0.0 en BDR 1 1 192.168.255.6 brdc none dis
192.168.255.5
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IP routes before ISIS OSPF redistribution
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
▪ We redistribute all RIP & OSPF routes into ISIS and make them of metric-type “External”
▪ We also set the metric value which will be associated with these routes in ISIS; we will use this to tag the
routes
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
RIP ➔ IS-IS OSPF Redistribution - Checking
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
ISIS Pref 7 Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 OSPF Pref 20 & 125 Net 192.168.10.0/24
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
ISIS Pref 7 Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 RIP Pref 100 1/47 1/13 Net 192.168.10.0/24
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
▪ This ISIS Accept policy ensures that a border router in charge of ISIS ➔ OSPF/RIP redistribution will only accept from his border peer ISIS “External”
routes with a modified preference of 130 (instead of SPB’s default preference 7)
– OSPF routes have preference levels ranging between 20, 25,120 or 125 (depending on OSPF route type) and RIP always has preference 100
▪ Hence we are ensuring that a border router will never install ISIS External routes from its border peer as long as it has the original OSPF/RIP routes
▪ NOTE that the same configuration would equally work if 3 or more border routers were used on a given boundary
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
▪ What the default accept policy looks like, with a route-map assigned; no need to enable it
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS OSPF Redistribution – Checking again
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
▪ Here we see that the border VSP8000s learn from each other the already redistributed OSPF routes as ISIS External routes, but our Accept policy ensures they get a
preference of 130 Inc.
©2017 Extreme Networks, (in orange)
©2017
All rights
Extreme which
Networks,ensures
reserved Inc. All rightsthat these will not displace the preferred OSPF route (in green) and remain thus as alternative routes
reserved
RIP ➔ IS-IS Redistribution – Checking again
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
▪ Here we see that the border VSP4000s learn from each other the already redistributed RIP routes as ISIS External routes, but our Accept policy ensures they get a
preference of 130 (in orange) which ensures that these will not displace the preferred RIP route (in green) and remain thus as alternative routes
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
RIP IS-IS ➔ OSPF Redistribution - Config
▪ Note that now VSP8000-1 has installed the ISIS External routes from VSP8000-2
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Testing failure on border router OSPF/RIP link
▪ Note that now VSP4000-1 has installed the ISIS External routes from VSP4000-2
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IP Routing between separate ISIS (SPB)
Fabrics
IP routes
IP routes
Fabric 1 SPB IS-IS Fabric 2 SPB IS-IS
Fabric1 Internal IP Routes Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
IP routes
IP routes
VSP4000-1 VSP8000-1
1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
RIPv2
1/47 3/1
SPB Fabric 1 SPB Fabric 2
1/48 2/16
1/48 3/2
RIPv2
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
VSP4000-2 VSP8000-2
▪ VSP4000-C ▪ VSP8000-1
– VSP 4850GTS / 6.1.0.0_B021 – VSP 8404 / 6.1.0.0_B021
▪ VSP4000-1, VSP4000-2 ▪ Slot1 8424GT
– VSP 4850GTS-PWR+ / 6.1.0.0_B021 ▪ Slot2 8418XSQ
▪ ERS8800 ▪ VSP8000-2
– 7.2.25.0GA – VSP 8242XSQ / 6.1.0.0_B021
VSP4000-1 VSP8000-1
1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1
1/48 2/16
1/48 3/2
1/19 1/17
1/47 1/13
VSP4000-2 VSP8000-2
vlan members remove 1 1/47,1/48 no spanning-tree stp 1 ports 3/1,3/2
interface gigabitEthernet 1/47,1/48 interface gigabitEthernet 3/1,3/2
no shutdown no shutdown
no spanning-tree mstp exit
exit
1/19 1/17
once we support 1/47 1/13
VSP4000-1 VSP8000-1
1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 10 10 3/1
SPB Fabric 1 SPB Fabric 2
101/48 2/1610
1/48 10 10 3/2
1/19 1/17
1/47 1/13
VSP4000-2 VSP8000-2
1/47 1/13
Clip1: 10.0.0.43 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.44
1/47 3/1
SPB Fabric 1 SPB Fabric 2
1/48 2/16
1/48 3/2
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
▪ We also redistribute directs on the boundary border routers since this will typically be the case
anyway
1/47 1/13
Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
1/48 2/16
▪ We redistribute exit
router rip
▪ We also redistribute
redistribute isis direct routes, as the
only ISIS Internal redistribute isis route-map isis-internal
border nodes might
redistribute isis enable
routes to the RIP redistribute direct
redistribute direct enable
have some (here
border links exit the CLIPs)
ip rip apply redistribute isis
ip rip apply redistribute direct
▪ Bump up the preference value (decrease preference) for ISIS External routes received
from peer border router so that they will never replace the same RIP route if available
▪ Looking good
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ RIP Redistribution - Checking
▪ Looking good
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ RIP Redistribution - Checking
VRF
VRF
ISID
DEST
ISID Destination NH BEB
OUTGOING
VLAN INTERFACE
SPBM
COST
PREFIX
COST
PREFIX
TYPE
IP ROUTE
PREFERENCE
================================================================================
▪ VSP8000-1 is now installing the ISIS External (from RIP) routes from VSP8000-2
▪ VSP4000-1 is now installing the ISIS External (from RIP) routes from VSP4000-2
▪ Looking good
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Redistributing Default route in one direction - Config
▪ There is no default ISIS route in Fabric2, so the black-hole defaults are active
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Redistributing Default route in one direction - Checking
▪ Fabric1 border nodes are now learning just a default route from RIP
▪ Fabric1 nodes now have a default route 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
▪ Fabric2 has no default ISIS route (it could, but this was not done in this setup)
▪ We can see
==================================================================================================================================
SPBM IP-UNICAST FIB ENTRY INFO
==================================================================================================================================
VRF DEST OUTGOING SPBM PREFIX PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST TYPE PREFERENCE
----------------------------------------------------------------------------------------------------------------------------------
default route
GRT - - 0.0.0.0/0 VSP4000-1 4051 1/47 10 2 External 7
GRT
GRT
-
-
-
-
0.0.0.0/0
0.0.0.0/0
VSP4000-1
VSP4000-2
4052 1/47
4051 1/48
10
10
2
2
External 7
External 7
is advertised
GRT - - 0.0.0.0/0 VSP4000-2 4052 1/48 10 2 External 7
GRT
GRT
-
-
-
-
10.0.0.41/32
10.0.0.41/32
VSP4000-1
VSP4000-1
4051 1/47
4052 1/47
10
10
1
1
Internal 7
Internal 7
as an
GRT
GRT
GRT
-
-
-
-
-
-
10.0.0.42/32
10.0.0.42/32
172.16.255.0/30
VSP4000-2
VSP4000-2
VSP4000-1
4051 1/48
4052 1/48
4051 1/47
10
10
10
1
1
1
Internal 7
Internal 7
Internal 7
External ISIS
GRT
GRT
GRT
-
-
-
-
-
-
172.16.255.0/30
172.16.255.4/30
172.16.255.4/30
VSP4000-1
VSP4000-2
VSP4000-2
4052 1/47
4051 1/48
4052 1/48
10
10
10
1
1
1
Internal 7
Internal 7
Internal 7
route
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Routing towards a Primary Firewall
SPB
1/48 2/16
IS-IS
1/48 2/16
SPB
101/48 IS-IS 10 2/16
10
1/47 1/13 1/17
SPB
1/48 2/16
IS-IS
router isis
redistribute direct
redistribute direct enable
exit
isis apply redistribute direct
SPB
1/48 2/16
IS-IS
192.168.255.0/30
1/47 1/13 1/17 .2
✓
0.0.0.0/0 to VSP-1 VRF DEST OUTGOING SPBM PREFIX PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST TYPE PREFERENCE
SPB-metric = 20 ----------------------------------------------------------------------------------------------------------------------------------
External-metric = 100
10
GRT
GRT
-
-
192.168.255.0/30
-
-
0.0.0.0/0
0.0.0.0/0
VSP8000-1
VSP8000-1
4051 1/47
4052 1/47
10
10
100
100
✓ External 7
External 7
0.0.0.0/0 to VSP-2
1/47 GRT
1/13 - 1/17
- 0.0.0.0/0.2 VSP8000-2 4051 1/48 20 200 External 7
SPB-metric = 10 GRT - - 0.0.0.0/0 VSP8000-2 4052 1/47 20 200 External 7
External-metric = 200 GRT - - 10.0.0.42/32 VSP4000-2 4051 1/48 10 1 Internal 7
GRT - - 10.0.0.42/32 VSP4000-2 4052 1/48 10 1 Internal 7
▪ We can see here VSP4000-2 GRT
GRT
VSP8000-2
-
-
-
-
Secondary-FW
10.0.0.81/32
10.0.0.81/32
VSP8000-1
VSP8000-1
4051 1/47
4052 1/47
10
10
1
1
Internal 7
Internal 7
Prefix-cost wins
GRT
GRT
-
-
-
-
0.0.0.0/0
0.0.0.0/0
VSP8000-1
VSP8000-1
4051 1/48
4052 1/47
20
20
100
100
✓ External 7
External 7
GRT - - 0.0.0.0/0 VSP8000-2 4051 1/47 10 200 External 7
ignored GRT
GRT
-
-
-
-
10.0.0.81/32
10.0.0.82/32
VSP8000-1
VSP8000-2
4052 1/47
4051 1/47
20
10
1
1
Internal 7
Internal 7
GRT - - 10.0.0.82/32 VSP8000-2 4052 1/47 10 1 Internal 7
GRT - - 192.168.255.0/30 VSP8000-2 4051 1/47 10 1 Internal 7
GRT - - 192.168.255.0/30 VSP8000-2 4052 1/47 10 1 Internal 7
GRT - - 192.168.255.4/30 VSP8000-1 4051 1/48 20 1 Internal 7
GRT - - 192.168.255.4/30 VSP8000-1 4052 1/47 20 1 Internal 7
✓
0.0.0.0/0 to VSP-1
SPB-metric = 20
External-metric = 100 192.168.255.0/30
0.0.0.0/0 to VSP-2 10
1/47 1/13 1/17 .2
SPB-metric = 10
External-metric = 200
VSP4000-2 VSP8000-2 Secondary-FW
SPB
101/48 IS-IS 10 2/16
192.168.255.0/30
10
1/47 1/13 1/17 .2
▪ We still have a little problem in that ▪ Static routes by default have a higher preference (5) than
ISIS (7)
VSP8000-2 prefers its static route ▪ We could just decrease the preference of the VSP8000-2
– This may or may not be a problem
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
static route (give it a pref > 7)
Firewalls Static Route ➔ ISIS External Route
SPB
101/48 IS-IS 10 2/16
192.168.255.0/30
10
1/47 1/13 1/17 .2
route-map pref-prim-fw 1
match metric-type-isis external
▪ Instead we are going to demonstrate how we can use an set ip-preference 4
ISIS Accept policy on VSP8000-2 to increase the enable
exit
preference for only the ISIS External routes we receive router isis
from VSP8000-1 accept adv-rtr 0.00.81 route-map pref-prim-fw
– We force the preference to 4 which is < Static’s 5 accept adv-rtr 0.00.81 enable
exit
▪ This approach is also better if we are learning the default isis apply accept
route from the Firewalls using OSPF instead of Static
routes
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Firewalls Static Route ➔ ISIS External Route - Checking
SPB
101/48 IS-IS 10 2/16
192.168.255.0/30
10
1/47 1/13 1/17 .2
▪ Looking good
▪ In fact, by doing this, VSP8000-2 is now no longer redistributing a default route into ISIS (because its
Static route is not active anymore)
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Firewalls Static Route ➔ ISIS External Route - Checking
SPB
101/48 IS-IS 10 2/16
192.168.255.0/30
10
1/47 1/13 1/17 .2
▪ Here we see that there is only one default ISIS External route now and VSP8000-2 is accepting it
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Firewalls Static Route ➔ ISIS External Route - Checking
SPB
101/48 IS-IS 10 2/16
192.168.255.0/30
10
1/47 1/13 1/17 .2
SPB
101/48 IS-IS 10 2/16
192.168.255.0/30
10
1/47 1/13 1/17 .2
▪ Immediate switchover
▪ Restoration is also immediate
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Primary Firewall failure
SPB
101/48 IS-IS 10 2/16
192.168.255.0/30
10
1/47 1/13 1/17 .2
▪ Immediate switchover
▪ Restoration is also immediate
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Routing between ISIS (SPB) and BGP(MPLS)
using Primary & Backup paths
VSP8000-1 8600A
eBGP
VSP4000 8600G 8600C
Primary path
SPB Simulate AS
AS AS MPLS 65003
IS-IS 65002 65001 eBGP
Network
VSP8000-2 8600B
▪ It is desired that all traffic flowing between the SPB cloud and the BGP cloud follow the Primary path
over VSP8000-1 and that the path over VSP8000-2 only be used in case of failure of the Primary path
▪ Configuration should avoid spelling out individual subnets in redistribution route-maps
– I.e. if new BGP or ISIS subnets appear, there should be no need to reconfigure the redistribution on the
border routers
▪ (a) Case where SPB GRT IP Shortcuts are used
– Following BGP by the book, and using iBGP with local-pref attribute between VSP8000-1 & VSP8000-2
▪ (b) Case where SPB VRF L3VSN is used
– We lack iBGP support on VRFs; so here we have to use a different approach in order to avoid BGP routes
from distant ASes (here 65003) being reflected back into the MPLS core network
VSP8000-1 8600A
eBGP
VSP4000 8600G 8600C
Primary path
SPB Simulate AS
AS AS
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
VSP8000-2 8600B
▪ Case (a)
– The SPB nodes will be redistributing BGP routes into IP Shortcuts and vice
versa
– VSP8000-1 and VSP8000-2 will have an iBGP peering to each other
– The BGP nodes have a single routing instance in all cases and in this setup
8600A, 8600B & 8600G are simulating a BGP/MPLS network
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Connecting SPB Fabric to BGP/MPLS Core – Case (b)
VSP8000-1 8600A
eBGP
VSP4000 8600G 8600C
Primary path
SPB Simulate AS
AS AS
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
VSP8000-2 8600B
▪ Case (b)
– The SPB nodes will be redistributing BGP routes into a VRF extended via
L3VSN
– There cannot be any iBGP peering on a VRF, as we lack this support today
– The BGP nodes have a single routing instance in all cases and in this setup
8600A, 8600B & 8600G are simulating a BGP/MPLS network
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Setup, Equipment & Software used
VSP8000-1 8600A
VSP8000-2 8600B
▪ VSP4000 ▪ VSP8000-1
– VSP 8404 / 6.1.0.0_B021
– VSP 4850GTS / 6.1.0.0_B021 ▪ Slot1 8424GT
▪ 8600A, 8600B, 8600G, 8600C ▪ Slot2 8418XSQ
– 7.2.25.0GA ▪ VSP8000-2
– VSP 8242XSQ / 6.1.0.0_B021
1/48 3/12
1/13 3/3
2/8 2/5 no spanning-tree stp 1 ports 4/30
interface gigabitEthernet 4/30
vlan members remove 1 1/47,1/48 no shutdown
VSP8000-2 8600B
interface gigabitEthernet 1/47,1/48 exit
no shutdown
no spanning-tree mstp
exit no spanning-tree stp 1 ports 3/5,3/11,3/12
interface gigabitEthernet 3/5,3/11,3/12
no shutdown
exit
vlan members remove 1 1/13,2/8,2/16 no spanning-tree stp 1 ports 2/5,3/3,3/30
interface gigabitEthernet 1/13,2/8,2/16 interface gigabitEthernet 2/5,3/3,3/30
no shutdown no shutdown
no spanning-tree mstp exit
exit
VSP8000-1 8600A
2/8 2/5
1/13 3/2
VSP4000 8600G 8600C
1/47 3/11
SPB 3/5 4/30
2/16 3/30
IS-IS
1/48 3/12
1/13 3/3
2/8 2/5
VSP8000-2 8600B
2/8 2/5
1/13 3/2
Clip1: 10.0.0.40 VSP4000 8600G 8600C
1/47 10 3/11
SPB 10 2/16
3/5 4/30
3/30
IS-IS
1/48 10 3/12
1/13 3/3
2/8 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30
2/16 3/30 MPLS
IS-IS
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
2/8 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30
2/16 3/30 MPLS
IS-IS
Network
1/48 3/12
192.168.255.4/30
1/13 3/3 Net 192.168.0.0/17
2/8 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30 router bgp
1/13 3/3 no auto-summary
Net 192.168.0.0/17
2/8 eBGP 2/5 no synchronization
no bgp aggregation
router-id 10.0.0.3
Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12 exit
router bgp router bgp router bgp router bgp 65003 enable
no auto-summary no auto-summary no auto-summary router bgp
no synchronization no synchronization no synchronization network 192.168.0.0/17
no bgp aggregation no bgp aggregation no bgp aggregation neighbor 192.168.255.21
router-id 10.0.0.11 router-id 10.0.0.12 router-id 10.0.0.10 neighbor 192.168.255.21 remote-as 65001
exit exit exit neighbor 192.168.255.21 enable
router bgp 65001 enable router bgp 65001 enable router bgp 65001 enable exit
router bgp router bgp router bgp
neighbor 192.168.255.2 neighbor 192.168.255.6 neighbor 192.168.255.22
neighbor 192.168.255.2 remote-as 65002 neighbor 192.168.255.6 remote-as 65002 neighbor 192.168.255.22 remote-as 65003
neighbor 192.168.255.2 enable neighbor 192.168.255.6 enable neighbor 192.168.255.22 enable
neighbor 10.0.0.12 neighbor 10.0.0.11 neighbor 10.0.0.11
neighbor 10.0.0.12 remote-as 65001 neighbor 10.0.0.11 remote-as 65001 neighbor 10.0.0.11 remote-as 65001
neighbor 10.0.0.12 update-source 10.0.0.11 neighbor 10.0.0.11 update-source 10.0.0.12 neighbor 10.0.0.11 update-source 10.0.0.10
neighbor 10.0.0.12 next-hop-self enable neighbor 10.0.0.11 next-hop-self enable neighbor 10.0.0.11 next-hop-self enable
neighbor 10.0.0.12 enable neighbor 10.0.0.11 enable neighbor 10.0.0.11 enable
neighbor 10.0.0.10 neighbor 10.0.0.10 neighbor 10.0.0.12
neighbor 10.0.0.10 remote-as 65001 neighbor 10.0.0.10 remote-as 65001 neighbor 10.0.0.12 remote-as 65001
neighbor 10.0.0.10 update-source 10.0.0.11 neighbor 10.0.0.10 update-source 10.0.0.12 neighbor 10.0.0.12 update-source 10.0.0.10
neighbor 10.0.0.10 next-hop-self enable neighbor 10.0.0.10 next-hop-self enable neighbor 10.0.0.12 next-hop-self enable
neighbor 10.0.0.10 enable neighbor 10.0.0.10 enable neighbor 10.0.0.12 enable
exit exit exit
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Forcing paths with BGP and SPB – Case (a) GRT IP Shortcuts
▪ We are now going to look at the case where BGP is redistributed into
SPB GRT IP Shortcuts
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
interface loopback 2
ip address 172.16.0.41/16
exit
router isis
redistribute direct
redistribute direct enable
exit
isis apply redistribute direct
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
iBGP
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
iBGP
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
iBGP
SPB Simulate 3/5 4/30 AS
IP Shortcuts 2/16 AS AS 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
ISIS Ext
Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
iBGP
SPB Simulate 3/5 4/30 AS
IP Shortcuts 2/16 AS AS 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
route-map "reject-externals" 1
no permit Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12
match metric-type-isis external
enable
exit
router isis ▪ In this use case we have not had to
accept adv-rtr 0.00.82
accept adv-rtr 0.00.82 route-map "reject-externals" modify the protocol priorities
accept adv-rtr 0.00.82 enable
exit
isis apply accept
▪ We don’t want the VSP8000s to accept
route-map "reject-externals" 1
ISIS External routes from each other,
no permit
match metric-type-isis external as these would otherwise replace the
enable
exit iBGP routes we want; so we reject
router isis
accept adv-rtr 0.00.81
accept adv-rtr 0.00.81 route-map "reject-externals"
them via an Accept policy
accept adv-rtr 0.00.81 enable
exit
isis apply accept
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – ISIS eBGP Redistribution -
Checking
Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11
ISIS Ext eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
iBGP
SPB Simulate 3/5 4/30 AS
IP Shortcuts 2/16 AS AS 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
▪ Looking good
VSP4000:1#% show ip route
=====================================================================================================
IP Route - GlobalRouter
=====================================================================================================
VRF
VRF
ISID
DEST
ISID Destination NH BEB
OUTGOING
VLAN INTERFACE
SPBM
COST
PREFIX
COST
PREFIX
TYPE
IP ROUTE
PREFERENCE
ISIS External
----------------------------------------------------------------------------------------------------------------------------------
GRT - - 10.0.0.81/32 VSP8000-1 4051 1/47 10 1 Internal 7
route
GRT - - 10.0.0.81/32 VSP8000-1 4052 1/47 10 1 Internal 7
GRT - - 10.0.0.82/32 VSP8000-2 4051 1/48 10 1 Internal 7
GRT - - 10.0.0.82/32 VSP8000-2 4052 1/48 10 1 Internal 7
GRT - - 192.168.0.0/17 VSP8000-1 4051 1/47 10 2 External 7
GRT - - 192.168.0.0/17 VSP8000-1 4052 1/47 10 2 External 7
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – ISIS eBGP Redistribution -
Checking
Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11
ISIS Ext eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
iBGP
SPB Simulate 3/5 4/30 AS
IP Shortcuts 2/16 AS AS 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
ISIS
1/13 BGP 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
iBGP
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
▪ Looking good
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – Final Checking
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
192.168.0.0/17 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
172.16.0.0/16 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
192.168.0.0/17 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.0.0/17
Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
172.16.0.0/16 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
172.16.0.0/16
Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12
▪ We are now going to look at the case where BGP is redistributed into
SPB VRF L3VSN
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
ip vrf green
interface loopback 3
ip address 172.16.0.41/16 vrf green ip vrf green ip vrf green
exit interface GigabitEthernet 2/8 interface GigabitEthernet 2/8
router vrf green vrf green vrf green
ipvpn brouter vlan 2500 subnet 192.168.255.2/30 brouter vlan 2504 subnet 192.168.255.6/30
i-sid 30001 exit exit
ipvpn enable router vrf green router vrf green
isis redistribute direct ipvpn ipvpn
isis redistribute direct enable i-sid 30001 i-sid 30001
exit ipvpn enable ipvpn enable
isis apply redistribute direct vrf green exit exit
▪ Since we cannot have iBGP peerings with VRFs, no real need to create VRF CLIPs on the VSP8000s
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – BGP Config
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
Simulate
ISIS
SPB AS AS 3/5 4/30 AS
L3VSN 30001 2/16 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
VSP8000-1:1#% show ip bgp route vrf green VSP8000-2:1#% show ip bgp route vrf green
==================================================================================================== ====================================================================================================
BGP Routes - VRF green BGP Routes - VRF green
==================================================================================================== ====================================================================================================
The total number of bgp routes in this Vrf are 1 The total number of bgp routes in this Vrf are 1
NETWORK/MASK PEER REM ADDR NEXTHOP ADDRESS ORG LOC PREF NETWORK/MASK PEER REM ADDR NEXTHOP ADDRESS ORG LOC PREF
---------------------------------------------------------------------------------------------------- ----------------------------------------------------------------------------------------------------
192.168.0.0/17 192.168.255.1 192.168.255.1 IGP 100 192.168.0.0/17 192.168.255.5 192.168.255.5 IGP 100
AS_PATH: (65001 65003) AS_PATH: (65001 65003)
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
L3VSN 30001 2/16 AS AS 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
eBGP
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
ISIS Int BGP eBGP 2/5
2/8
192.168.255.8/30
1/47 3/11 192.168.255.20/30
iBGP
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
ISIS Int eBGP 2/5
2/8 eBGP
▪ Looking good
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – Final Checking
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
192.168.0.0/17 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
VSP8000-1:1#% show ip route vrf green VSP8000-2:1#% show ip route vrf green
===================================================================================================== =====================================================================================================
IP Route - VRF green IP Route - VRF green
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
172.16.0.0 255.255.0.0 VSP4000 green 10 4051 ISIS 0 IBSV 50 172.16.0.0 255.255.0.0 VSP4000 green 10 4051 ISIS 0 IBSV 7
192.168.0.0 255.255.128.0 192.168.255.1 green 2 2/8 BGP 0 IB 45 192.168.0.0 255.255.128.0 VSP8000-1 green 2 4051 ISIS 0 IBSV 7
192.168.255.0 255.255.255.252 192.168.255.2 - 1 2/8 LOC 0 DB 0 192.168.255.4 255.255.255.252 192.168.255.6 - 1 2/8 LOC 0 DB 0
192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
172.16.0.0/16 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
192.168.0.0/17 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.0.0/17
VSP8000-2 8600B Clip1: 10.0.0.12
VSP8000-1:1#% show ip route vrf green VSP8000-2:1#% show ip route vrf green
===================================================================================================== =====================================================================================================
IP Route - VRF green IP Route - VRF green
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
172.16.0.0 255.255.0.0 VSP4000 green 10 4051 ISIS 0 IBSV 50 172.16.0.0 255.255.0.0 VSP4000 green 10 4051 ISIS 0 IBSV 7
192.168.0.0 255.255.128.0 VSP8000-2 green 2 4051 ISIS 0 IBSV 50 192.168.0.0 255.255.128.0 192.168.255.5 green 2 2/8 BGP 0 IB 45
192.168.255.4 255.255.255.252 192.168.255.6 - 1 2/8 LOC 0 DB 0
192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
172.16.0.0/16 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
172.16.0.0/16
VSP8000-2 8600B Clip1: 10.0.0.12
WWW.EXTREMENETWORKS.COM