{"id":11773,"date":"2020-02-18T13:49:21","date_gmt":"2020-02-18T16:49:21","guid":{"rendered":"https:\/\/made4it.com.br\/interconnecting-two-virtual-systems-vs-on-platform-huawei-ne-interconnecting-2-virtual-routers-on-huawei-ne\/"},"modified":"2023-03-09T14:42:20","modified_gmt":"2023-03-09T17:42:20","slug":"interconnecting-two-virtual-systems-vs-on-platform-huawei-ne-interconnecting-2-virtual-routers-on-huawei-ne","status":"publish","type":"post","link":"https:\/\/made4it.com.br\/en\/interconnecting-two-virtual-systems-vs-on-platform-huawei-ne-interconnecting-2-virtual-routers-on-huawei-ne\/","title":{"rendered":"Interconnecting two Virtual Systems (VS) on Huawei NE platform (Interconnecting 2 virtual routers on Huawei NE)"},"content":{"rendered":"\n

Huawei’s NE40 line, especially the M2K and M2K-B models, has become the new “darling” of ISPs in Brazil, allowing several cost-effective scenarios, both at the Core Network layer (BGP, Aggregation Routers, and the like) and at the Access layer (BNGs IPoE, PPPoE…).

Recently at Made4IT, we had a case where a customer with an NE40E-M2K-B needed a virtualization at the Chassis level, so that a partner could also take advantage of the box resources but with a certain level of segregation.<\/p>\n

With our knowledge and expertise with the vendor, we suggested and designed a Virtual System in the box for this purpose, and, following the vendor’s recommendation, we informed the customer that the communication between the “virtual-systems” should be through dedicated network ports, where we would have a “physical loop” to deliver data to the partner’s “virtual-system”. Here in the company, we have come to affectionately call this feature the “coffin strap<\/em>” (laughs).<\/p>\n

 <\/p>\n\n

\"\"<\/figure><\/div>\n\n

With this, \n the first way<\/strong>\n<\/em> to link two VS is simply to connect a cable between two ports on the same router, allocating each port to a single VS.<\/p>\n

Se quer saber mais sobre virtualiza\u00e7\u00e3o de roteadores Huawei, consulte o post Roteadores Virtuais (VS \/ Virtual-System) no Huawei NE<\/a><\/span><\/strong><\/p>\n

In this same scenario, a while back we did an implementation where his need was simple, being basically:

“My carrier is approaching me on 2 different pieces of equipment in my network being BGP and an MPLS Switch that I have 40km away. The carrier wants to use MPLS with me. I need to route MPLS on my NE40 where the carrier will deliver the circuits to me on some VPWS’es.”<\/em><\/p>\n

In this case the deployment went smoothly, using the “Virtual Ethernet <\/em>” feature where the “layer2” side and the “layer3” side have distinct interfaces to work the VPWS and do the IP connectivity respectively.<\/p>\n


If you don’t know about MPLS on NE routers, or if the concept of “layer2 side” or “layer3 side” didn’t make sense, see the post L3 Interfaces in L2 MPLS Tunnels on Huawei NE Router (How to configure MPLS with IP on Huawei)<\/a> <\/strong><\/p>\n\n

The other way to link…<\/h3>\n\n

In our constant, daily exchanges of experience between the N2 and N3 teams, one of our consultants had an insight in a moment of reverie (usually in the shower, in the bathroom, opening the fridge, walking, etc):

“We know that a virtual-ethernet has its layer2 side and its layer3 side.
And we know that we can put one of these sides on a virtual-system<\/em> other than admin<\/em> because, virtual-ethernets<\/em> can only be created in vs admin.<\/em> Now imagine, if we made 2 different ve-groups<\/em> and used a circuit-cross-connection (CCC) <\/em>from MPLS<\/em> to join those 2 layer2 sides, would it be possible to make the virtual-systems<\/em> talk to each other in layer3 without needing the coffin strap ?<\/em>“

<\/em>Just to name a few, CCC is the most basic, non-signaling way to connect two services via a VPWS.<\/p>\n

Then we set out to test the interconnection of two local VS via an MPLS CCC.<\/p>\n\n

Interconnecting two VS via VPN VPWS CCC<\/h2>\n\n

Scenario:<\/strong><\/p>\n

For our tests we will use two VE-GROUPs, interconnect the L2 of the VE-GROUPs via CCC VPWS, and keep one side L3 in Admin-VS while the other side L3 we will put in VS1.<\/p>\n\n

\"\"<\/figure>\n\n

Settings:<\/strong><\/p>\n

First, we will create the interfaces that will be part of L2:<\/p>\n\n

# Admin-VS ! Side L2 Admin-VS Virtual-Ethernet0\/2\/100 interface  ve-group 100 l2-terminate Virtual-Ethernet0\/2\/100,100 interface  vlan-type dot1q 100 ! Side L2 VS1 Virtual-Ethernet0\/2\/200 interface  ve-group 200 l2-terminate Virtual-Ethernet0\/2\/200.100 interface  vlan-type dot1q 100<\/pre>\n\n
After that we will interconnect VLAN 100 via VPN VPWS CCC:<\/p>\n\n
! MPLS CCC VPWS Interconnectionccc test interface Virtual-Ethernet0\/2\/100,100 tagged out-interface Virtual-Ethernet0\/2\/200,100 tagged<\/pre>\n\n
With layer2 configured, we can move on to activating the L3 services:<\/p>\n\n
# Admin-VS ! Side L3 Admin-VS Virtual-Ethernet0\/2\/101 interface  mac-address c4b8-b434-ab45  ve-group 100 l3-access interface Virtual-Ethernet0\/2\/101.100  vlan-type dot1q 100  ip address 10.1.1.1 255.255.255.252  ! Side L3 VS1 interface Virtual-Ethernet0\/2\/201  ve-group 200 l3-access interface Virtual-Ethernet0\/2\/201.100  vlan-type dot1q 100<\/pre>\n\n
Finally, we will insert only the L3 subinterface for VS1.<\/span><\/p>\n\n
# Admin-VSadmin  virtual-system vs1 pvmb slot 3  port-mode port  assign interface Virtual-Ethernet0\/2\/201.100  # VS1 ! Side L3 VS1interface Virtual-Ethernet0\/2\/201.100  vlan-type dot1q 100  ip address 10.1.1.2 255.255.255.252<\/pre>\n\n
Scenario Considerations<\/h3>\n\n
Some considerations of the scenario:<\/p>\n
    \n
  • It was only possible to add a vlan subinterface in the virtual-system, it did not allow the entire virtual-ethernet<\/li>\n
  • It was necessary to change the mac-address of the Virtual-Ethernet on one side, because the VS inherits the mac from the chassis<\/li>\n<\/ul>\n\n
    Validations<\/h3>\n\n
    CCC between virtual-ethernets up:<\/p>\n\n
    <HUAWEI>display vll ccctotal ccc vc : 1local ccc vc : 1, 1 upremote ccc vc : 0, 0 up name: test, type: local, state: up,intf1: Virtual-Ethernet0\/2\/100.100 (up), access-port: false intf2: Virtual-Ethernet0\/2\/200.100 (up), access-port: false VC last up time : 2020\/02\/17 14:40:58VC total up time: 0 days, 0 hours, 16 minutes, 37 seconds<\/pre>\n\n
    Ping between the two VS:<\/p>\n\n
    Admin-VS:<HUAWEI>ping 10.1.1.2  PING 10.1.1.2: 56 data bytes, press CTRL_C to break  Reply from 10.1.1.2: bytes=56 Sequence=1 ttl=255 time=1 ms  Reply from 10.1.1.2: bytes=56 Sequence=2 ttl=255 time=1 ms  Reply from 10.1.1.2: bytes=56 Sequence=3 ttl=255 time=1 msd  Reply from 10.1.1.2: bytes=56 Sequence=4 ttl=255 time=1 ms  Reply from 10.1.1.2: bytes=56 Sequence=5 ttl=255 time=1 ms   --- 10.1.1.2 ping statistics ---  5 packet(s) transmitted  5 packet(s) received  0.00% packet loss  round-trip min\/avg\/max = 1\/1\/1 ms  VS1:<HUAWEI-vs1>ping 10.1.1.1  PING 10.1.1.1: 56 data bytes, press CTRL_C to break  Reply from 10.1.1.1: bytes=56 Sequence=1 ttl=255 time=1 ms  Reply from 10.1.1.1: bytes=56 Sequence=2 ttl=255 time=1 ms  Reply from 10.1.1.1: bytes=56 Sequence=3 ttl=255 time=1 ms  Reply from 10.1.1.1: bytes=56 Sequence=4 ttl=255 time=1 ms  Reply from 10.1.1.1: bytes=56 Sequence=5 ttl=255 time=1 ms   --- 10.1.1.1 ping statistics ---  5 packet(s) transmitted  5 packet(s) received  0.00% packet loss  round-trip min\/avg\/max = 1\/1\/1 ms<HUAWEI>ping 10.1.1.2  PING 10.1.1.2: 56 data bytes, press CTRL_C to break  Reply from 10.1.1.2: bytes=56 Sequence=1 ttl=255 time=1 ms  Reply from 10.1.1.2: bytes=56 Sequence=2 ttl=255 time=1 ms  Reply from 10.1.1.2: bytes=56 Sequence=3 ttl=255 time=1 msd  Reply from 10.1.1.2: bytes=56 Sequence=4 ttl=255 time=1 ms  Reply from 10.1.1.2: bytes=56 Sequence=5 ttl=255 time=1 ms   --- 10.1.1.2 ping statistics ---  5 packet(s) transmitted  5 packet(s) received  0.00% packet loss  round-trip min\/avg\/max = 1\/1\/1 ms<\/pre>\n\n
    Test with a BGP session and adjacent OSPFv2 and OSPFv3:<\/p>\n\n
    <HUAWEI>displ bgp peer   BGP local router ID : 192.168.88.100  Local AS number : 11111  Total number of peers : 1 Peers in established state : 1   Peer V AS MsgRcvd MsgSent OutQ Up\/Down State PrefRcv  10.1.1.2 4 22222 25 25 0 00:19:38 Established 0<HUAWEI>displ ospf peer brief (M) Indicates MADJ neighbor    OSPF Process 1 with Router ID 10.0.0.1  Peer Statistic InformationTotal number of peer(s): 1  Peer(s) in full state: 1-----------------------------------------------------------------------------  Area Id Interface Neighbor id State  0.0.0.0 VE0\/2\/101.100 10.0.0.2 Full<HUAWEI> displ ospfv3 peer  OSPFv3 Process (1)  OSPFv3 Area (0.0.0.0)  Neighbor ID Pri State Dead Time Interface Instance ID  10.0.0.1 1 Full\/DR 00:00:38 VE0\/2\/201.100 0<\/pre>\n\n
    Finally that’s it folks, we don’t know the performance or impact on the box, but the basic services worked normally.<\/p>\n
     <\/p>\n
    If you test it with traffic, let us know! Share your results with us.<\/p>\n
     <\/p>\n
    Hugs,<\/p>\n
     <\/p>\n
    Rafael Ganascim, Gabriel Henrique and Kevin Walters<\/p>\n
    IT Consulting Team – Made4it<\/p>\n","protected":false},"excerpt":{"rendered":"
    The other way to link… Interconnecting two VS via VPN VPWS CCC # Admin-VS ! Side L2 Admin-VS Virtual-Ethernet0\/2\/100 interface ve-group 100 l2-terminate Virtual-Ethernet0\/2\/100,100 interface vlan-type dot1q 100 ! Side L2 VS1 Virtual-Ethernet0\/2\/200 interface ve-group 200 l2-terminate Virtual-Ethernet0\/2\/200.100 interface vlan-type dot1q 100 ! MPLS CCC VPWS Interconnectionccc test interface Virtual-Ethernet0\/2\/100,100 tagged out-interface Virtual-Ethernet0\/2\/200,100 tagged # […]<\/p>\n","protected":false},"author":13,"featured_media":8512,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"postBodyCss":"","postBodyMargin":[],"postBodyPadding":[],"postBodyBackground":{"backgroundType":"classic","gradient":""},"footnotes":""},"categories":[530,296,531],"tags":[532,536,454,533,534,538,537,535],"class_list":["post-11773","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-huawei-en","category-network","category-routers","tag-huawei-en","tag-huawei-interconnection","tag-huawei-ne20-en","tag-huawei-ne40-en","tag-huawei-virtual-router","tag-interconnecting-huawei-virtual-system","tag-interconnecting-huawei-vs","tag-vs-huawei-en"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/posts\/11773","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/comments?post=11773"}],"version-history":[{"count":0,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/posts\/11773\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/media\/8512"}],"wp:attachment":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/media?parent=11773"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/categories?post=11773"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/tags?post=11773"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}