CISCO/BGP VPLS Tagged Ethernet not working

IbraR · October 14, 2015, 6:49am

Dear All,

I have deployed MPLS/OSPF with 4 CCR 1036 routers with version 6.32.2.
Mikrotik BGP VPLS does not seem stable at all, so I switched to CISCO based VPLS.
In both cases I am unable to change the tunnels to use Tagged-Ethernet instead of Raw-Ethernet.
CISCO VPLS does not have any option to change the type of the tunnel when you create it, while the BGP VPLS
can only be enabled from the terminal, but even when I enable it dynamic tunnels are created with raw ethernet pseudowire type.

Any help would be appreciated.

Thanks,
Ibra

samsung172 · October 14, 2015, 11:50am

what exactly is your goal? What distribute MPLS ospf or only BGP?

My setup that works like a charm:

R1 :

/mpls
set propagate-ttl=no
/mpls interface
set [ find default=yes ] mpls-mtu=1590
/mpls ldp
set enabled=yes lsr-id=172.31.2.76 transport-address=172.31.2.76
/mpls ldp accept-filter
add prefix=172.31.0.0/16
add accept=no
/mpls ldp advertise-filter
add prefix=172.31.0.0/16
add advertise=no
/mpls ldp interface
add interface=sfp1
add interface=ether5
add interface=ether3


/routing bgp instance
set default as=676 confederation=2xxxx confederation-peers=1-10000 router-id=172.31.2.76
add as=2xxxx name=vrf.internet redistribute-connected=yes redistribute-other-bgp=yes redistribute-static=yes router-id=xxxxxxxxxxx routing-table=vrf.internet
/routing bgp instance vrf
add redistribute-connected=yes redistribute-other-bgp=yes redistribute-static=yes routing-mark=vrf.internet
/routing bgp peer
add address-families=l2vpn-cisco,vpnv4 multihop=yes name="MPLS Termineringsrom" remote-address=172.31.1.76 remote-as=376 tcp-md5-key=eb ttl=default update-source=loopback
add default-originate=always instance=vrf.internet multihop=yes name=Nas1 remote-address=xxxxxxxxxxxxx remote-as=2xxx tcp-md5-key=eb ttl=default update-source=xxxxxxxxxxxxx
add address-families=l2vpn-cisco,vpnv4 multihop=yes name=firewall1 remote-address=172.31.1.164 remote-as=364 tcp-md5-key=eb ttl=default update-source=loopback
add address-families=l2vpn-cisco,vpnv4 default-originate=if-installed multihop=yes name=vpn1 remote-address=172.31.1.161 remote-as=361 tcp-md5-key=eb ttl=default update-source=loopback


/routing ospf instance
set [ find default=yes ] mpls-te-area=backbone mpls-te-router-id=loopback redistribute-connected=as-type-1 redistribute-static=as-type-1 router-id=172.31.2.76
/routing ospf interface
add authentication=md5 authentication-key=OSPF9 interface=sfp1 network-type=point-to-point
add authentication=md5 authentication-key=OSPF9 interface=ether6 network-type=point-to-point
add authentication=md5 authentication-key=OSPF9interface=ether5 network-type=point-to-point
add authentication=md5 authentication-key=OSPF9 interface=ether3 network-type=point-to-point
/routing ospf network
add area=backbone network=172.17.76.0/29
add area=backbone network=172.17.76.200/29
add area=backbone network=172.17.76.208/29
add area=backbone network=172.17.76.192/29
add area=backbone network=172.31.2.76/32

R2

/mpls
set propagate-ttl=no
/mpls interface
set [ find default=yes ] mpls-mtu=1590
/mpls ldp
set enabled=yes lsr-id=172.31.1.76 transport-address=172.31.1.76
/mpls ldp accept-filter
add prefix=172.31.0.0/16
add accept=no
/mpls ldp advertise-filter
add prefix=172.31.0.0/16
add advertise=no
/mpls ldp interface
add interface=sfp3
add interface=sfp4
add interface=ether4
add interface=sfp2
add interface=ether2

/routing bgp instance
set default as=376 confederation=2xxx confederation-peers=1-1000 out-filter=bgp-out redistribute-connected=yes redistribute-static=yes router-id=172.31.1.76
add as=1001 client-to-client-reflection=no name=DC redistribute-connected=yes redistribute-ospf=yes redistribute-static=yes router-id=172.17.76.10
add as=2xxxx name=vrf.internet out-filter=BB-out redistribute-connected=yes redistribute-other-bgp=yes redistribute-static=yes router-id=xxxxxx \
    routing-table=vrf.internet
/routing bgp instance vrf
add redistribute-connected=yes redistribute-other-bgp=yes redistribute-static=yes routing-mark=vrf.internet
/routing bgp peer
add address-families=l2vpn-cisco,vpnv4 multihop=yes name="MPLS Vestby" remote-address=172.31.0.24 remote-as=24 tcp-md5-key=eb5 ttl=\
    default update-source=loopback
add address-families=l2vpn-cisco,vpnv4 multihop=yes name="MPLS Server Rom" remote-address=172.31.2.76 remote-as=676 tcp-md5-key=eb529 \
    ttl=default update-source=loopback
add default-originate=if-installed in-filter=BB-in instance=vrf.internet multihop=yes name=BGP out-filter=BB-out remote-address=xxxxxxx remote-as=2xxxx \
    ttl=default update-source=xx.xxx.117.218
add address-families=l2vpn-cisco,vpnv4 multihop=yes name=Sagahuset remote-address=172.31.0.5 remote-as=5 tcp-md5-key=eb5296a05aa9fc01704aa4fb6a736298 ttl=default \
    update-source=loopback
add address-families=l2vpn-cisco,vpnv4 multihop=yes name="VPLS Term-Rom" remote-address=172.31.3.76 remote-as=976 tcp-md5-key=eb529 \
    ttl=default update-source=loopback

/routing ospf instance
set [ find default=yes ] mpls-te-area=backbone mpls-te-router-id=loopback name=Default redistribute-connected=as-type-1 redistribute-static=as-type-1 router-id=\
    172.31.1.76
/routing ospf interface
add authentication=md5 authentication-key=OSPF9 cost=20 interface=sfp2 network-type=point-to-point priority=5
add authentication=md5 authentication-key=OSPF9 interface=sfp3 network-type=point-to-point
add authentication=md5 authentication-key=OSPF9 interface=sfp4 network-type=point-to-point
add authentication=md5 authentication-key=OSPF9 interface=ether4 network-type=point-to-point
/routing ospf network
add area=backbone network=172.17.24.8/29
add area=backbone network=172.17.76.0/29
add area=backbone network=172.17.76.16/29
add area=backbone network=172.17.76.8/29
add area=backbone network=172.17.76.24/29
add area=backbone network=172.17.76.32/29
add area=backbone network=172.31.1.76/32
add area=backbone network=172.18.76.0/29


/interface vpls
add disabled=no l2mtu=1500 mac-address=02:4C:DD:92:CD:D9 name="BB - Telenor Vestby" remote-peer=172.31.0.24 vpls-id=172.31.0.24:24
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:E0:96:C5:D4:A1 mtu=1510 name="BB - VPLS - Flekkefjord" remote-peer=172.31.0.102 vpls-id=\
    172.31.0.102:2019
add advertised-l2mtu=1525 mac-address=02:E0:96:C5:D4:A1 mtu=1510 name="BB - VPLS - Glorudasen" remote-peer=172.31.0.25 vpls-id=172.31.0.25:2012
add advertised-l2mtu=1525 mac-address=02:E0:96:C5:D4:A1 mtu=1510 name="BB - VPLS - Hoytorp" remote-peer=172.31.0.59 vpls-id=172.31.0.59:2018
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:23:1A:CF:FC:B0 mtu=1510 name="BB - VPLS - Hylli" remote-peer=172.31.0.56 vpls-id=172.31.0.56:2007
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:B2:10:6E:DE:93 mtu=1510 name="BB - VPLS - Julsrud" remote-peer=172.31.0.41 vpls-id=\
    172.31.0.41:2014
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:D1:13:D7:8E:05 mtu=1510 name="BB - VPLS - Kontor - Lan" remote-peer=172.31.0.85 vpls-id=\
    172.31.0.85:185
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:28:44:71:BA:05 mtu=1510 name="BB - VPLS - Meum" remote-peer=172.31.0.29 vpls-id=172.31.0.29:2015
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:23:1A:CF:FC:B0 mtu=1510 name="BB - VPLS - RadeVann" remote-peer=172.31.0.14 vpls-id=\
    172.31.0.14:2010
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:23:1A:CF:FC:B0 mtu=1510 name="BB - VPLS - Sagahuset" remote-peer=172.31.0.5 vpls-id=\
    172.31.0.5:2011
add disabled=no l2mtu=1500 mac-address=02:B8:61:EF:A9:E0 name="BB - VPLS - Sandvatn (via Flekkefjord)" remote-peer=172.31.0.102 vpls-id=172.31.0.102:11
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:E0:96:C5:D4:A1 mtu=1510 name="BB - VPLS - Serverrom" remote-peer=172.31.2.76 vpls-id=\
    172.31.2.76:1991
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:23:1A:CF:FC:B0 mtu=1510 name="BB - VPLS - Smedabol" remote-peer=172.31.0.17 vpls-id=\
    172.31.0.17:2009
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:E0:96:C5:D4:A1 mtu=1510 name="BB - VPLS - Svinekleasen" remote-peer=172.31.0.55 vpls-id=\
    172.31.0.55:2013
add disabled=no l2mtu=1500 mac-address=02:0A:16:CD:8C:BD name="BB - VPLS - VVT" remote-peer=172.31.0.115 vpls-id=172.31.0.115:115
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:96:6F:DA:04:E3 mtu=1510 name="BB - VPLS -Tomb" remote-peer=172.31.0.52 vpls-id=172.31.0.52:2016
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:E0:96:C5:D4:A1 mtu=1510 name="BB -VPLS-SERVERROM2" remote-peer=172.31.2.76 vpls-id=\
    172.31.2.76:1956
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=66:E0:96:C5:D4:A1 mtu=1510 name="BB -VPLS-SERVERROM3" remote-peer=172.31.2.76 vpls-id=\
    172.31.2.76:3000
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:31:B6:BB:AB:3C mtu=1510 name=VPLS-NGT-Peab remote-peer=172.31.0.110 vpls-id=172.31.0.110:1500
add advertised-l2mtu=1525 disabled=no l2mtu=1525 mac-address=02:31:B6:BB:AB:3C mtu=1510 name="VPLS-NGT-Volvo Maskin" remote-peer=172.31.0.116 vpls-id=\
    172.31.1.76:3310

IbraR · October 15, 2015, 1:58pm

Hi samsung172,

Thanks for your reply. Maybe I wasn’t clear enough, but I am talking about BGP based VPLS or CISCO BGP based VPLS, not static VPLS tunnels.
Static tunnels work perfectly in my case as well. The setup is the same as the one in the wiki:

http://wiki.mikrotik.com/wiki/Manual:BGP_based_VPLS

What I want to accomplish with the BGP based VPLS is to create tagged tunnels, which means that client sites bridged
on both sides of the dynamic VPLS tunnels should be able to send tagged traffic from one side to the other.
In static tunnels this is done by switching the pw-type to tagged ethernet, instead of raw ethernet.
In the case of CISCO or Mikrotik BGP based VPLS I don’t see any way to enable this during the time of tunnel creation.

Best Regards,
Ibrahim

IbraR · October 27, 2015, 1:09pm

Hi All,

I contacted Mikrotik Support. Apparently the VPLS type is only for negotiation purposes, but it does not have any effect on the functionality of the tunnel. So, even if you don’t change the VPLS-type the tunnel should transport tagged packets.

I have not been able to make this work with Mikrotik BGP based VPLS, but after deleting and adding again the CISCO based VPLS config, tagged traffic started to work through the tunnel.

Best Regards,
Ibrahim