cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2802
Views
0
Helpful
5
Replies

MPLS L3VPN over SR-TE tunnel

billwade98
Level 1
Level 1

 I have a single ISIS area with segment routing (no MPLS LDP).   All LSR LER nodes running XRv 6.1.2.  

On the LER (PE) nodes I have a single L3VPN and I have CE--CE connectivity across this network.  When I create a SR-TE tunnel on the 2 PE nodes with destination remote PE and use a static route to direct the traffic I lose CE -- CE connectivity.   

Relevant config and debug output below --


interface tunnel-te1
ipv4 unnumbered Loopback0
logging events all
destination 20.20.20.20
path-option 1 explicit name 8-20 segment-routing
path-option 10 dynamic segment-routing

!

router static
address-family ipv4 unicast
20.20.20.20/32 tunnel-te1

!

router isis core
apply-group ISIS_TI-LFA
is-type level-2-only
net 49.0001.0000.0000.0008.00
segment-routing global-block 16000 16500
address-family ipv4 unicast
metric-style wide
metric-style wide level 2
fast-reroute per-prefix tiebreaker node-protecting index 100
mpls traffic-eng level-2-only
mpls traffic-eng router-id Loopback0
segment-routing mpls sr-prefer
segment-routing prefix-sid-map receive
!
interface Loopback0
circuit-type level-2-only
address-family ipv4 unicast
prefix-sid absolute 16008
!
!
interface GigabitEthernet0/0/0/3
circuit-type level-2-only
point-to-point
address-family ipv4 unicast


RP/0/RP0/CPU0:xrv-dev-01#sh mpls tra tu 1 det
Tue Jan 10 17:39:11.882 UTC


Name: tunnel-te1 Destination: 20.20.20.20 Ifhandle:0x8000054
Signalled-Name: xrv-dev-01_t1
Status:
Admin: up Oper: up Path: valid Signalling: connected

path option 10, (Segment-Routing) type dynamic (Basis for Setup, path weight 40)
G-PID: 0x0800 (derived from egress interface properties)
Bandwidth Requested: 0 kbps CT0
Creation Time: Mon Jan 9 20:29:15 2017 (21:09:58 ago)
Config Parameters:
Bandwidth: 0 kbps (CT0) Priority: 7 7 Affinity: 0x0/0xffff
Metric Type: TE (global)
Path Selection:
Tiebreaker: Min-fill (default)
Protection: any (default)
Hop-limit: disabled
Cost-limit: disabled
Path-invalidation timeout: 10000 msec (default), Action: Tear (default)
AutoRoute: disabled LockDown: disabled Policy class: not set
Forward class: 0 (default)
Forwarding-Adjacency: disabled
Autoroute Destinations: 0
Loadshare: 0 equal loadshares
Auto-bw: disabled
Path Protection: Not Enabled
BFD Fast Detection: Disabled
Reoptimization after affinity failure: Enabled
SRLG discovery: Disabled
SNMP Index: 12
Binding SID: 24002
History:
Tunnel has been up for: 00:10:33 (since Tue Jan 10 17:28:40 UTC 2017)
Current LSP:
Uptime: 00:10:33 (since Tue Jan 10 17:28:40 UTC 2017)
Reopt. LSP:
Last Failure:
LSP not signalled, identical to the [CURRENT] LSP
Date/Time: Tue Jan 10 17:29:11 UTC 2017 [00:10:02 ago]
Prior LSP:
ID: 8 Path Option: 1
Removal Trigger: path tear
Current LSP Info:
Instance: 10, Signaling Area: IS-IS core level-2
Uptime: 00:10:33 (since Tue Jan 10 17:28:40 UTC 2017)
Soft Preemption: None
SRLGs: not collected
Path Info:
Segment-Routing Path Info (IS-IS core level-2)
Segment0[Link]: 21.0.0.1 - 21.0.0.2, Label: 24001
Segment1[Link]: 60.0.0.1 - 60.0.0.2, Label: 24003
Segment2[Link]: 70.0.0.2 - 70.0.0.1, Label: 24001
Segment3[Link]: 52.0.0.1 - 52.0.0.2, Label: 24017

Persistent Forwarding Statistics:
Out Bytes: 5684
Out Packets: 64
Displayed 1 (of 1) heads, 0 (of 0) midpoints, 0 (of 0) tails
Displayed 1 up, 0 down, 0 recovering, 0 recovered heads

!


RP/0/RP0/CPU0:xrv-dev-01#sh mpls for labels 24002 det
Tue Jan 10 17:41:29.475 UTC
Local Outgoing Prefix Outgoing Next Hop Bytes
Label Label or ID Interface Switched
------ ----------- ------------------ ------------ --------------- ------------
24002 Pop No ID tt1 point2point 0
Updated: Jan 10 17:28:40.590
Label Stack (Top -> Bottom): { }
MAC/Encaps: 0/0, MTU: 0
Packets Switched: 0


RP/0/RP0/CPU0:xrv-dev-01#sh cef 20.20.20.20/32 det
Tue Jan 10 17:34:35.068 UTC
20.20.20.20/32, version 77, attached, internal 0x1000041 0x0 (ptr 0x1365a4f0) [3], 0x0 (0x135f65e8), 0xa20 (0x14b8e6d8)
Updated Jan 10 17:28:40.592
Prefix Len 32, traffic index 0, precedence n/a, priority 3
gateway array (0x1348c680) reference count 3, flags 0x68, source lsd (5), 1 backups
[3 type 4 flags 0x8401 (0x14bd8978) ext 0x0 (0x0)]
LW-LDI[type=1, refc=1, ptr=0x135f65e8, sh-ldi=0x14bd8978]
gateway array update type-time 1 Jan 10 17:28:40.592
LDI Update time Jan 10 17:28:40.599
LW-LDI-TS Jan 10 17:28:40.599
via tunnel-te1, 7 dependencies, weight 0, class 0 [flags 0x8]
path-idx 0 NHID 0x0 [0x163641e0 0x16363c20]
local adjacency
local label 24009 labels imposed {ImplNull}


Load distribution: 0 (refcount 3)

Hash OK Interface Address
0 Y tunnel-te1 point2point

!

RP/0/RP0/CPU0:xrv-dev-01#sh cef vrf customer-100 172.16.0.170/32 det
Tue Jan 10 17:42:19.297 UTC
172.16.0.170/32, version 24, internal 0x5000001 0x0 (ptr 0x150b59f4) [1], 0x0 (0x0), 0x208 (0x14b8e598)
Updated Jan 10 17:00:12.622
Prefix Len 32, traffic index 0, precedence n/a, priority 3
gateway array (0x1348b7a8) reference count 2, flags 0x4038, source rib (7), 0 backups
[1 type 1 flags 0x40441 (0x14bd3698) ext 0x0 (0x0)]
LW-LDI[type=0, refc=0, ptr=0x0, sh-ldi=0x0]
gateway array update type-time 3 Jan 10 17:28:42.001
LDI Update time Jan 10 17:28:41.994
via 20.20.20.20/32, 3 dependencies, recursive [flags 0x6000]
path-idx 0 NHID 0x0 [0x14c8fd58 0x0]
recursion-via-/32
next hop VRF - 'default', table - 0xe0000000
next hop 20.20.20.20/32 via 24009/0/21
next hop 0.0.0.0/32 tt1 labels imposed {ImplNull 24005}


Load distribution: 0 (refcount 1)

Hash OK Interface Address
0 Y Unknown 24009/0

Thanks for any insight,

Bill

5 Replies 5

Nagendra Kumar Nainar
Cisco Employee
Cisco Employee

Hi Bill,

The config seems fine (except missing explicit path). So SR-TE tunnel is taking dynamic path. THis node on receiving packet from VRF destinated to 172.16.0.170 will push 24005 (which I believe as VPN label from egress PE) and then pushes {24003, 24001, 24017} and forward out the interface where 24001 is assigned to.

So far, it appears to be fine. What do you see when the tunnel is shut down. Do you see the traffic from CE working fine?. 

-Nagendra

Hi Nagendra,

Thank you for the prompt reply!   I tried both explicit and dynamic and yes 24005 is the VPN label from egress PE.  

With the tunnel shutdown the traffic flows from CE -- CE.  

The control plane looks ok with tunnel up as I see the remote BGP routes on both CEs but no connectivity.

-Bill

RP/0/RP0/CPU0:xrv-dev-01#sh cef 20.20.20.20/32 det <<<NH of the VPN prefix)

local label 24009 labels imposed {ImplNull} <<<<<<<shouldn’t it display the whole label stack here?

 

And also for the VPN prefix

RP/0/RP0/CPU0:xrv-dev-01#sh cef vrf customer-100 172.16.0.170/32 det

next hop 0.0.0.0/32 tt1 labels imposed {ImplNull 24005}<<<<<<just the VPN label and I’d expect the whole label stack here

 

how does these two outputs look like when the te-tunnel is disabled please?

 

adam

netconsultings.com

::carrier-class solutions for the telecommunications industry::

adam

Hi Adam,

When the SR-TE tunnel is shut the label stack consists of the following -- top label is the egress PE node SID and  2nd label is L3VPN label from egress PE. 

And I'm being told by the XRv BU that there are no plans for segment routing support in xrv9k.

Thanks,

Bill

Hmmm it looks like to me that this great idea of free XRv for education and evaluation purposes is slowly being commercialized via XR9000v or whatever the name is.

 

adam

adam