Juniper - MPLS BGP L2-VPN Auto Provisioning

Topology

PE1

interfaces {
    ge-0/0/3 {
        unit 0 {
            description "To P1.";
            family inet {
                address 172.22.209.1/24;
            }
            family mpls;
        }
    }
    ge-0/0/5 {
        unit 0 {
            description "To P2.";
            family inet {
                address 172.22.210.1/24;
            }
            family mpls;
        }
    }
    ge-0/0/7 {
        vlan-tagging;
        encapsulation vlan-ccc;
        unit 1001 {                                //Connect with Site-2
            encapsulation vlan-ccc;
            vlan-id 1001;
        }
        unit 1002 {                               //Connect with Site-3         
            encapsulation vlan-ccc;
            vlan-id 1002;
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 192.168.1.1/32;
            }
        }
    }
}

routing-options {
    autonomous-system 65512;
}

protocols {
    rsvp {
        interface ge-0/0/3.0;
        interface ge-0/0/5.0;
    }
    mpls {
        label-switched-path PE1-to-PE2 {
            from 192.168.1.1;
            to 192.168.1.2;
        }
        label-switched-path PE1-to-PE3 {
            from 192.168.1.1;
            to 192.168.1.3;
        }
        interface ge-0/0/3.0;
        interface ge-0/0/5.0;
    }
    bgp {
        group int-grp-core {
            type internal;
            local-address 192.168.1.1;
            family inet {
                unicast;
            }
            family inet-vpn {
                unicast;
            }
            family l2vpn {
                signaling;
            }
            neighbor 192.168.1.2;      
            neighbor 192.168.1.3;
        }
    }
    ospf {
        traffic-engineering;
        area 0.0.0.0 {
            interface ge-0/0/3.0;
            interface ge-0/0/5.0;
            interface lo0.0;
        }
    }
}

policy-options {
    policy-statement export-cust-A {
        term 1 {
            then {
                community add cust-A;
                accept;
            }
        }
        term 2 {
            then reject;
        }
    }
    policy-statement import-cust-A {
        term 1 {
            from {
                protocol bgp;
                community cust-A;
            }
            then accept;
        }
        term 2 {
            then reject;
        }
    }
    community cust-A members target:65512:1;
}

routing-instances {
    customer-A {
        instance-type l2vpn;
        interface ge-0/0/7.1001;
        interface ge-0/0/7.1002;
        route-distinguisher 192.168.1.1:1;
        vrf-import import-cust-A;
        vrf-export export-cust-A;      
        protocols {
            l2vpn {
                encapsulation-type ethernet-vlan;
                site ce1-A1 {
                    site-identifier 1;
                    interface ge-0/0/7.1001;                          \\ site-2 (PE2)
                    interface ge-0/0/7.1002;                           \\site-3 (PE3)
                }
            }
        }
    }
}

PE-2

interfaces {
    ge-0/0/4 {
        description "To P1.";
        unit 0 {
            family inet {
                address 172.22.211.1/24;
            }
            family mpls;
        }
    }
    ge-0/0/5 {
        description "To P3.";
        unit 0 {
            family inet {
                address 172.22.212.1/24;
            }
            family mpls;
        }
    }
    ge-0/0/7 {
        vlan-tagging;
        encapsulation vlan-ccc;
        unit 1001 {
            encapsulation vlan-ccc;
            vlan-id 1001;
        }
        unit 1003 {
            encapsulation vlan-ccc;    
            vlan-id 1003;
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 192.168.1.2/32;
            }
        }
    }
}

routing-options {
    autonomous-system 65512;
}

protocols {
    rsvp {
        interface ge-0/0/4.0;
        interface ge-0/0/5.0;
    }
    mpls {
        label-switched-path PE2-to-PE1 {
            from 192.168.1.2;
            to 192.168.1.1;
        }
        label-switched-path PE2-to-PE3 {
            from 192.168.1.2;
            to 192.168.1.3;
        }
        interface ge-0/0/4.0;
        interface ge-0/0/5.0;
    }
    bgp {
        group int-grp-core {
            type internal;
            local-address 192.168.1.2;
            family inet {
                unicast;
            }
            family inet-vpn {
                unicast;
            }
            family l2vpn {
                signaling;
            }
            neighbor 192.168.1.1;
            neighbor 192.168.1.3;      
        }
    }
    ospf {
        traffic-engineering;
        area 0.0.0.0 {
            interface ge-0/0/4.0;
            interface ge-0/0/5.0;
            interface lo0.0;
        }
    }
}

policy-options {
    policy-statement export-cust-A {
        term 1 {
            then {
                community add cust-A;
                accept;
            }
        }
        term 2 {
            then reject;
        }
    }
    policy-statement import-cust-A {
        term 1 {
            from {
                protocol bgp;
                community cust-A;
            }
            then accept;
        }
        term 2 {
            then reject;
        }
    }
    community cust-A members target:65512:1;
}

routing-instances {
    customer-A {
        instance-type l2vpn;
        interface ge-0/0/7.1001;
        interface ge-0/0/7.1003;
        route-distinguisher 192.168.1.2:1;
        vrf-import import-cust-A;
        vrf-export export-cust-A;
        protocols {                    
            l2vpn {
                encapsulation-type ethernet-vlan;
                site ce2-A2 {
                    site-identifier 2;
                    interface ge-0/0/7.1001;                                            //site-1 (PE-1)
                    interface ge-0/0/7.1003;                                            //site-3 (PE-3)
                }
            }
        }
    }
}

PE3

interfaces {
    ge-0/0/3 {
        description "To P3.";
        unit 0 {
            family inet {
                address 172.22.214.1/24;
            }
            family mpls;
        }
    }
    ge-0/0/4 {
        description "To P2.";
        unit 0 {
            family inet {
                address 172.22.213.1/24;
            }
            family mpls;
        }
    }
    ge-0/0/7 {
        vlan-tagging;
        encapsulation vlan-ccc;
        unit 1002 {
            encapsulation vlan-ccc;
            vlan-id 1002;
        }
        unit 1003 {
            encapsulation vlan-ccc;    
            vlan-id 1003;
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 192.168.1.3/32;
            }
        }
    }
}

routing-options {
    autonomous-system 65512;
}

protocols {
    rsvp {
        interface ge-0/0/3.0;
        interface ge-0/0/4.0;
    }
    mpls {
        label-switched-path PE3-to-PE1 {
            from 192.168.1.3;
            to 192.168.1.1;
        }
        label-switched-path PE3-to-PE2 {
            from 192.168.1.3;
            to 192.168.1.2;
        }
        interface ge-0/0/3.0;
        interface ge-0/0/4.0;
    }
    bgp {
        group int-grp-core {
            type internal;
            local-address 192.168.1.3;
            family inet {
                unicast;
            }
            family inet-vpn {
                unicast;
            }
            family l2vpn {
                signaling;
            }
            neighbor 192.168.1.1;
            neighbor 192.168.1.2;      
        }
    }
    ospf {
        traffic-engineering;
        area 0.0.0.0 {
            interface ge-0/0/3.0;
            interface ge-0/0/4.0;
            interface lo0.0;
        }
    }
}

policy-options {
    policy-statement export-cust-A {
        term 1 {
            then {
                community add cust-A;
                accept;
            }
        }
        term 2 {
            then reject;
        }
    }
    policy-statement import-cust-A {
        term 1 {
            from {
                protocol bgp;
                community cust-A;
            }
            then accept;
        }
        term 2 {
            then reject;
        }
    }
    community cust-A members target:65512:1;
}

routing-instances {
    customer-A {
        instance-type l2vpn;
        interface ge-0/0/7.1002;
        interface ge-0/0/7.1003;
        route-distinguisher 192.168.1.3:1;
        vrf-import import-cust-A;
        vrf-export export-cust-A;
        protocols {                    
            l2vpn {
                encapsulation-type ethernet-vlan;
                site ce3-A3 {
                    site-identifier 3;
                    interface ge-0/0/7.1002;                                          //site1 (PE-1)
                    interface ge-0/0/7.1003;                                          //site2 (PE-2)
                }
            }
        }
    }
}

CE-1

interfaces {
    ge-0/0/7 {
        vlan-tagging;
        unit 1001 {
            description "Site-1 to Site-2";
            vlan-id 1001;
            family inet {
                address 10.1.10.1/24;
            }
        }
        unit 1002 {
            description "Site-1 to Site-3";
            vlan-id 1002;
            family inet {
                address 10.1.11.1/24;
            }
        }
    }
    lo0 {
        unit 1 {
            family inet {
                address 192.168.11.1/32;
            }
        }
    }
}
routing-options {
    static {
        route 172.1.0.0/24 reject;     
        route 172.1.1.0/24 reject;
        route 172.1.2.0/24 reject;
        route 172.1.3.0/24 reject;
    }
    autonomous-system 65101;
}

CE-2

interfaces {
    ge-0/0/7 {
        vlan-tagging;
        unit 1001 {
            description "Site-2 to Site-1";
            vlan-id 1001;
            family inet {
                address 10.1.10.2/24;
            }
        }
        unit 1003 {
            description "Site-2 to Site-3";
            vlan-id 1003;
            family inet {
                address 10.1.12.1/24;
            }
        }
    }
    lo0 {
        unit 1 {
            family inet {
                address 192.168.11.2/32;
            }
        }
    }
}
routing-options {
    static {
        route 172.1.4.0/24 reject;     
        route 172.1.5.0/24 reject;
        route 172.1.6.0/24 reject;
        route 172.1.7.0/24 reject;
    }
    autonomous-system 65101;
}

CE-3

interfaces {
   ge-0/0/7 {
        vlan-tagging;
        unit 1002 {
            description "Site-3 to Site-1";
            vlan-id 1002;
            family inet {
                address 10.1.11.2/24;
            }
        }
        unit 1003 {
            description "Site-3 to Site-2";
            vlan-id 1003;
            family inet {
                address 10.1.12.2/24;
            }
        }
    }
    lo0 {
        unit 1 {
            family inet {
                address 192.168.11.3/32;
            }
        }
    }
}
routing-options {
    static {
        route 172.1.8.0/24 reject;     
        route 172.1.9.0/24 reject;
        route 172.1.10.0/24 reject;
        route 172.1.11.0/24 reject;
    }
    autonomous-system 65101;
}

P1

set interfaces ge-0/0/1 description "To Router P2."
set interfaces ge-0/0/1 unit 0 family inet address 172.20.201.1/24
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/3 description "To Router PE1."
set interfaces ge-0/0/3 unit 0 family inet address 172.22.209.2/24
set interfaces ge-0/0/3 unit 0 family mpls
set interfaces ge-0/0/4 description "To Router PE2."
set interfaces ge-0/0/4 unit 0 family inet address 172.22.211.2/24
set interfaces ge-0/0/4 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 192.168.5.1/24
set routing-options autonomous-system 65512
set protocols rsvp interface all
set protocols mpls interface all
set protocols ospf traffic-engineering
set protocols ospf area 0.0.0.0 interface ge-0/0/1.0
set protocols ospf area 0.0.0.0 interface ge-0/0/3.0
set protocols ospf area 0.0.0.0 interface ge-0/0/4.0
set protocols ospf area 0.0.0.0 interface lo0.0

P2

set interfaces ge-0/0/1 description "To P1."
set interfaces ge-0/0/1 unit 0 family inet address 172.20.201.2/24
set interfaces ge-0/0/1 unit 0 family mpls
set interfaces ge-0/0/2 description "To P3."
set interfaces ge-0/0/2 unit 0 family inet address 172.20.206.2/24
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces ge-0/0/4 description "To PE3."
set interfaces ge-0/0/4 unit 0 family inet address 172.22.213.2/24
set interfaces ge-0/0/4 unit 0 family mpls
set interfaces ge-0/0/5 description "To PE1."
set interfaces ge-0/0/5 unit 0 family inet address 172.22.210.2/24
set interfaces ge-0/0/5 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 192.168.5.2/24
set routing-options autonomous-system 65512
set protocols rsvp interface all
set protocols mpls interface all
set protocols ospf traffic-engineering
set protocols ospf area 0.0.0.0 interface ge-0/0/1.0
set protocols ospf area 0.0.0.0 interface ge-0/0/2.0
set protocols ospf area 0.0.0.0 interface ge-0/0/4.0
set protocols ospf area 0.0.0.0 interface ge-0/0/5.0
set protocols ospf area 0.0.0.0 interface lo0.0

P3

set interfaces ge-0/0/2 description "To P2."
set interfaces ge-0/0/2 unit 0 family inet address 172.20.206.1/24
set interfaces ge-0/0/2 unit 0 family mpls
set interfaces ge-0/0/3 description "To PE3."
set interfaces ge-0/0/3 unit 0 family inet address 172.22.214.2/24
set interfaces ge-0/0/3 unit 0 family mpls
set interfaces ge-0/0/5 description "To PE2."
set interfaces ge-0/0/5 unit 0 family inet address 172.22.212.2/24
set interfaces ge-0/0/5 unit 0 family mpls
set interfaces lo0 unit 0 family inet address 192.168.5.3/24
set routing-options autonomous-system 65512
set protocols rsvp interface all
set protocols mpls interface all
set protocols ospf traffic-engineering
set protocols ospf area 0.0.0.0 interface ge-0/0/2.0
set protocols ospf area 0.0.0.0 interface ge-0/0/3.0
set protocols ospf area 0.0.0.0 interface ge-0/0/5.0
set protocols ospf area 0.0.0.0 interface lo0.0

PE1 - L2VPN Connection Status

PE2 - L2VPN Connection Status

PE3 - L2VPN Connection Status

~~~ The End ~~~