Deploying Juniper Data Centers with EVPN VXLAN

Description

Learn to deploy Juniper Data Centers with EVPN VXLAN and master the only intent-based multivendor solution for deploying and monitoring EVPN-based VXLAN fabrics!

Deploying Juniper Data Centers with EVPN VXLAN is designed for engineers and architects designing, deploying, and/or maintaining small to large data centers. This book will increase productivity and streamline processing and communication by helping you understand BGP EVPN–based VXLAN, data center design and deployment using Junos, and interconnecting multiple data centers for various deployment applications. Aninda Chatterjee’s straightforward prose and industry experience also gives you the foundational knowledge necessary for Juniper Data Center certification from the JNCIA-DC to the JNCIE-DC.

The book’s structure is unique in its chapter-by-chapter approach with one-pager quick reference guides at the end of the book. The author also puts theory to practice using a combination of packet captures and packet walks.

• Learn to design, deploy, and maintain a data center using Junos OS and Junos Evolved.
• Understand how to troubleshoot BGP EVPN-based VXLAN.
• Maximize learning with with packet captures and packet walks.
• Build foundational knowledge for Juniper Data Center certification.
• Gain a deep understanding of data center design.

Introduction xvii
Chapter 1 Introducing the Juniper Ecosystem 1
Junos Architecture 1
Building Layer 2 and Layer 3 Networks with Junos 3
Introducing the Junos CLI 4
Building a Network with Junos 11
Miscellaneous Junos Features 25
Rescue Configuration 25
Junos Copy Utility 26
Junos Groups 26
Junos Insert Utility 28
Summary 30
Chapter 2 Overview of Data Center Architecture 31
History and Evolution of Data Centers 31
Data Center Designs and Overlay Architectures 37
3-Stage Clos Fabric 37
5-Stage Fabric 39
Collapsed Spine Design 40
Summary 41
Chapter 3 BGP for the Data Center 43
BGP Path Hunting and ASN Scheme for Data Centers 44
Implementing BGP for the Underlay 49
Auto-Discovered BGP Neighbors 59
Summary 67
Chapter 4 VXLAN as a Network Virtualization Overlay 69
Introducing VXLAN 70
EVPN for Data Center VXLAN Fabrics 75
Summary 79
Chapter 5 Bridged Overlay in an EVPN VXLAN Fabric 81
Configuring and Validating a Bridged Overlay EVPN VXLAN Fabric 82
Configuring the Underlay 83
Configuring the Overlay 91
Packet Flow in a Bridged Overlay Fabric 97
Learning MAC Addresses and EVPN Type-2 Routes 101
High-Level Software Architecture for MAC Address Learning 101
Learning Local MAC Addresses 102
Learning Remote MAC Addresses 112
Proxy ARP and ARP Suppression 116
Replication of BUM Traffic and EVPN Type-3 Routes 120
EVPN Multihoming with ESI LAG and EVPN Type-1/Type-4 Routes 127
Configuring ESI LAG and EVPN Multihoming 129
MAC Address Synchronization Across ESI LAG VTEPs 132
EVPN Type-4 Routes and the Need for a Designated Forwarder 139
Aliasing, Fast Convergence, and Split Horizon with EVPN Type-1 Routes 147
Core Isolation in an EVPN VXLAN Fabric 157
Route Targets in an EVPN VXLAN Fabric 159
MAC Mobility 169
Loop Detection 173
Connectivity Fault Management 178
Loop Prevention Mechanism Using IETF Draft draft-snr-bess-evpn-loop-protect 181
Bidirectional Forwarding Detection in an EVPN VXLAN Fabric 182
Summary 188
Chapter 6 MAC-VRFs 189
Introducing EVPN Service Types 189
VLAN-Based MAC-VRFs 191
Order of Operations with MAC-VRFs 200
Shared Tunnels with MAC-VRFs 201
VLAN-Aware MAC-VRFs 204
Overlapping VLANs, VLAN Translation, and VLAN Normalization 208
VLAN Translation 210
VLAN Normalization 214
Summary 223
Chapter 7 Centrally Routed Bridging 225
Introducing Integrated Routing and Bridging and CRB Design 225
Configuring a Centrally Routed Bridging EVPN VXLAN Fabric 228
Validating and Understanding EVPN Route Exchange in a CRB Fabric 238
Importance of “Sticky” MACs for Virtual Gateway and IRB Addresses 250
Historical (and Present Day) Relevance of proxy-macip-advertisement 255
Packet Walk for Hosts in Different Subnets 263
Control Plane Flow 264
Data Plane Flow 271
Summary 277
Chapter 8 Edge-Routed Bridging 279
Overview of Different Routing Models with Edge-Routed Bridging 279
Asymmetric IRB 283
Configuring and Validating Asymmetric IRB 283
Control Plane and Data Plane with Asymmetric IRB 291
Symmetric IRB 300
Configuring and Validating Symmetric IRB 300
Control Plane in a Symmetric IRB Design 304
Data Plane in a Symmetric IRB Design 313
Silent Hosts in a Symmetric IRB Design 319
Summary 323
Chapter 9 Routed Overlay and Host-Routed Bridging 325
Overview of a Routed Overlay Design 325
Understanding EVPN Type-5 Routes and Their Use in Data Centers 326
Configuring and Validating Routed Overlay 329
Host-Routed Bridging 340
Summary 352
Chapter 10 DHCP in EVPN VXLAN Fabrics 353
A DHCP Refresher 353
DHCP in a Bridged Overlay Fabric 355
DHCP in an Edge-Routed Bridging Fabric 361
DHCP Server in a Dedicated Services VRF 367
Summary 375
Chapter 11 Data Center Interconnect 377
Introduction to DCI 377
Over-the-Top DCI 380
Integrated Interconnect with IP Transit 394
Stitching Two Bridged Overlay Data Centers via IP Transit 396
Stitching EVPN Type-2 Symmetric IRB Routes 415
Stitching EVPN Type-5 Routes 431
Integrated Interconnect with MPLS Transit 436
Control Plane Flow 442
Data Plane Flow 448
Summary 453
Chapter 12 Building Data Centers with Juniper Apstra, Part I—Apstra Foundation 455
Introduction to Juniper Apstra 455
Building Blocks of Apstra 457
Onboarding Devices in Apstra 463
Zero Touch Provisioning 464
Manual Onboarding 475
Creating Rack Types and Templates 481
Creating Rack Types 482
Creating Templates 487
Deploying a Bridged Overlay 3-Stage Clos Fabric 489
Lifecycle of a Device in Juniper Apstra 515
Summary 516
Chapter 13 Building Data Centers with Juniper Apstra, Part II—Advanced Apstra Deployments 517
Edge-Routed Bridging with Symmetric IRB 517
Data Center Interconnect with Juniper Apstra 530
Over-the-Top DCI 539
Adding an External Generic System 539
Creating Connectivity Templates 542
Configuring OTT DCI 552
Integrated Interconnect 558
Interconnect Domain and MSB for Auto-derivation of Interconnect ESI 560
Creating Remote BGP EVPN Peers 561
Extending IP VRFs and Virtual Networks 562
Configuring DC2 for Integrated Interconnect 569
Validating Integrated Interconnect 571
Summary 574
Chapter 14 Building Virtual Fabrics with vJunos, Containerlab, and Juniper Apstra 575
Installing Containerlab and Building the vJunos-switch Image 575
Instantiating a Virtual Topology with vJunos-switch and Containerlab 579
Orchestrating a Virtual Fabric with Apstra 583
Summary 590
Chapter 15 Large-Scale Fabrics, Inter-VRF Routing, and Security Policies in Apstra 591
Deploying a 5-Stage Clos Fabric 591
Inter-VRF Routing in Apstra Deployments 601
Deploying Security Policies in Apstra 618
Summary 629
Acronym Legend 631
Appendix A Quick Reference Guide 635

9780138225391 TOC 3/28/2024

Aninda Chatterjee holds a Bachelor of Engineering degree in Information Science. His networking career started at AT&T, troubleshooting Layer 1 circuit issues, eventually transitioning to customer support at Cisco TAC, specializing in Layer 2. After his stint at Cisco TAC, he has held several roles across different organizations, with functions including escalation support for enterprise and data center engineering, designing, implementing, and troubleshooting enterprise and data center networks, and technical marketing for Cisco Software Defined Access (SDA).

In his current role as a senior technical marketing engineer at Juniper Networks, Aninda specializes in data center networks with EVPN VXLAN, while also focusing on the high demand of networking infrastructure for high-performance computing and AI/ML clusters.

Aninda actively writes on his personal blog, www.theasciiconstruct.com.

Additional information