{"id":18835,"date":"2024-07-03T17:59:39","date_gmt":"2024-07-03T17:59:39","guid":{"rendered":"https:\/\/made4it.com.br\/blog\/configuring-l2vpn-with-srv6-on-huawei-hands-on-with-srv6\/"},"modified":"2026-06-29T19:46:54","modified_gmt":"2026-06-29T19:46:54","slug":"configuring-l2vpn-with-srv6-on-huawei-hands-on-with-srv6","status":"publish","type":"post","link":"https:\/\/made4it.com.br\/en\/blog\/configuring-l2vpn-with-srv6-on-huawei-hands-on-with-srv6\/","title":{"rendered":"Configuring L2VPN with SRv6 on Huawei: Hands-on with SRv6"},"content":{"rendered":"\n

Welcome, dear readers and networking enthusiasts! If you\u2019ve made it this far, it\u2019s because you\u2019ve already made it through the theory of SRv6 (IPv6 Segment Routing) in our first two articles. If you haven\u2019t checked them out yet, I recommend taking a look so you don\u2019t feel as lost as a packet without a router.After all, no one wants to be the lost packet on the network, right? In the first chapters of our SRv6 saga, we delved into the concepts and theory behind the protocol. If you don’t remember, go there and review the articles: https:\/\/made4it.com.br\/srv6-um-sucessor-do-mpls\/<\/a>https:\/\/made4it.com.br\/srv6-um-sucessor-do-mpls-parte-2\/<\/a>Now it’s time to get your hands dirty and see how it all works in practice. It’s like building a LEGO Millennium Falcon after reading the instruction manual. Let’s put this structure together step by step! Get your terminals ready, buckle up and let’s take off in this basic SRv6 configuration lab. If you’re ready to turn theory into practice and master yet another networking Jedi skill, join me! The laboratory<\/strong> The aim of the lab is to create a simple topology with SRv6, using ISIS as the IGP and BGP to signal L2VPN. We will use the “END-DX2” SID to transport L2VPN within our SRv6 environment. For our lab we are using 6 Huawei NE40E-M2K routers (V800R022C10SPC500), acting as nodes in the IPv6 Segment-Routing network. We also have 2 Mikrotik routers (RouterOS 7.6), simulating the network CEs. Physical topology:<\/p>\n\n

\n
\"\"<\/figure>\n<\/figure>\n\n

Topology with IPv6 addressing:<\/p>\n\n

\n
\"\"<\/figure>\n<\/figure>\n\n

Topology with services:<\/p>\n\n

\n
\"\"<\/figure>\n<\/figure>\n\n

We can see from the topologies that someone certainly likes coffee a lot. Without further ado, let’s get down to business. Configuration roadmap <\/strong><\/p>\n\n

    \n
  • Task 1: Configure IS-IS on all routers. <\/li>\n<\/ul>\n\n
      \n
    • Task 2: Configure Loopbacks with IS-IS support. <\/li>\n<\/ul>\n\n
        \n
      • Task 3: Configure link networks with IS-IS support. <\/li>\n<\/ul>\n\n
          \n
        • Task 4: Enable SRv6 globally <\/li>\n<\/ul>\n\n
            \n
          • Task 5: Configure BGP with L2VPN support on PEs <\/li>\n<\/ul>\n\n
              \n
            • Task 6: Create VPN VPWS and SID End.DX2 on R1 and R6. <\/li>\n<\/ul>\n\n
                \n
              • Task 7: Link EVPL to interfaces with ECs <\/li>\n<\/ul>\n\n
                  \n
                • Task 8: Checks <\/li>\n<\/ul>\n\n

                  Easy Peasy. Task 1: Configure IS-IS on all routers. <\/strong> First, we configured IS-IS as the level 2 routing protocol on all routers, enabling IPv6. R1: <\/strong><\/p>\n\n

                  system-view \nisis 1 \nis-level level-2 \ncost-style wide \nnetwork-entity 10.0000.0000.0001.00 \n# \nipv6 enable topology ipv6 \n# <\/code><\/pre>\n\n
                  R2:<\/strong><\/p>\n\n
                  system-view \nisis 1 \nis-level level-2 \ncost-style wide \nnetwork-entity 10.0000.0000.0002.00 \n#  \nipv6 enable topology ipv6 \n# \n<\/code><\/pre>\n\n
                  Follow the configuration of the other routers according to the documentation.<\/p>\n\n
                  Task 2: Configure Loopbacks with IS-IS Support <\/strong>  Configure the loopback interfaces on each router with IPv4 and IPv6 addresses and enable IS-IS. R1:<\/strong> <\/p>\n\n
                  system-view \ninterface LoopBack0 \nipv6 enable \nip address 10.1.1.1 255.255.255.255 \nipv6 address 2001:DB8:C0CA::1\/128 \nisis ipv6 enable 1 \n# <\/code><\/pre>\n\n
                  R2:<\/strong><\/p>\n\n
                  system-view \ninterface LoopBack0 \nipv6 enable \nip address 10.1.1.2 255.255.255.255 \nipv6 address 2001:DB8:C0CA::2\/128 \nisis ipv6 enable 1 \n# <\/code><\/pre>\n\n
                  Configure the other routers according to the documentation. Task 3: Configure IS-IS-enabled link networks <\/strong>  Configure the Ethernet interfaces connecting the routers with IPv6 addresses and enable IS-IS.  <\/p>\n\n
                  R1 – Ethernet3\/0\/1- Connected to router R2.  <\/strong><\/p>\n\n
                  system-view \ninterface Ethernet3\/0\/1 \ndescription Connected to Eth3\/0\/1 - R2 \nundo shutdown \nipv6 enable \nipv6 address 2001:DB8:CADE:CAFE:1:2:0:1\/96 \nisis ipv6 enable 1 \n# <\/code><\/pre>\n\n
                  R1 – Ethernet3\/0\/3 – Connected to router R3.  <\/p>\n\n
                  system-view  \ninterface Ethernet3\/0\/3  \ndescription Connected to Eth3\/0\/3 - R3  \nundo shutdown  \nipv6 enable\nipv6 address 2001:DB8:CADE:CAFE:1:3:0:1\/96  \nisis ipv6 enable 1 \n#<\/code><\/pre>\n\n
                  Follow the configuration of the other routers according to the documentation.  <\/p>\n\n
                  Task 4: Enable SRv6 globally  <\/p>\n\n
                   Configure SRv6 on each router, defining source addresses and locators, and integrating them with IS-IS<\/p>\n\n
                  R1:<\/strong><\/p>\n\n
                  system-view \nsegment-routing ipv6 \nencapsulation source-address 2001:DB8:C0CA::1 \nlocator R1 ipv6-prefix 2001:DB8:1:1:: 64 static 32 \n# \nisis 1 \nsegment-routing ipv6 locator R1 \n# \n#<\/code><\/pre>\n\n
                  R2:  <\/strong><\/p>\n\n
                  system-view \nsegment-routing ipv6 \nencapsulation source-address 2001:DB8:C0CA::2 \nlocator R2 ipv6-prefix 2001:DB8:2:2:: 64 static 32 \n# \nisis 1 \nsegment-routing ipv6 locator R2 \n# \n# <\/code><\/pre>\n\n
                  Configure the other routers according to the documentation. Task 5: Configure BGP with L2VPN support on the PE routers  Configure BGP with EVPN and L2VPN support on the edge routers (R1 and R6), creating BGP sessions between them. R1:<\/strong><\/p>\n\n
                  system-view \nevpn source-address 10.1.1.1 \nbgp 65000 \nrouter-id 10.1.1.1 \npeer 2001:DB8:C0CA::6 as-number 65000 \npeer 2001:DB8:C0CA::6 connect-interface LoopBack0 \n# \nl2vpn-family evpn \nundo policy vpn-target \npeer 2001:DB8:C0CA::6 enable \ny \npeer 2001:DB8:C0CA::6 advertise encap-type srv6 \n#<\/code><\/pre>\n\n
                  R6:<\/strong><\/p>\n\n
                  system-view \nevpn source-address 10.1.1.6 \nbgp 65000 \nrouter-id 10.1.1.6 \npeer 2001:DB8:C0CA::1 as-number 65000 \npeer 2001:DB8:C0CA::1 connect-interface LoopBack0 \n# \nl2vpn-family evpn \nundo policy vpn-target \npeer 2001:DB8:C0CA::1 enable \ny \npeer 2001:DB8:C0CA::1 advertise encap-type srv6 \n# <\/code><\/pre>\n\n
                  <\/p>\n\n
                  Task 6: Create EVPN\/EVPL and SID End.DX2 on PEs  <\/p>\n\n
                  Configure the EVPN\/EVPL instances and associate the appropriate SRv6 locators on the edge routers.<\/p>\n\n
                  R1:<\/strong><\/p>\n\n
                  system-view \nevpn vpn-instance evrf1 vpws \nroute-distinguisher 100:1 \nsegment-routing ipv6 best-effort \nvpn-target 1:1 export-extcommunity \nvpn-target 1:1 import-extcommunity \n# \nevpl instance 1 \nevpn binding vpn-instance evrf1 \nlocal-service-id 100 remote-service-id 200 \nsegment-routing ipv6 locator R1 \n# \nsegment-routing ipv6 \nlocator R1 \nopcode ::A end-dx2 evpl-instance 1 \n# <\/code><\/pre>\n\n
                  R6:<\/strong><\/p>\n\n
                  system-view \nevpn vpn-instance evrf1 vpws \nroute-distinguisher 200:1 \nsegment-routing ipv6 best-effort \nvpn-target 1:1 export-extcommunity \nvpn-target 1:1 import-extcommunity\n# \nevpl instance 1 \nevpn binding vpn-instance evrf1 \nlocal-service-id 200 remote-service-id 100 \nsegment-routing ipv6 locator R6 \n# \nsegment-routing ipv6 \nlocator R6 \nopcode ::A end-dx2 evpl-instance 1 \n#<\/code><\/pre>\n\n
                  <\/p>\n\n
                  Task 7: Link EVPL to interfaces with ECs   <\/p>\n\n
                  Associate the EVPL instances with the interfaces connected to the client routers (CEs).   <\/p>\n\n
                  R1:  <\/strong><\/p>\n\n
                  interface Ethernet3\/0\/4 \ndescription Connected to CE1 \nundo shutdown \nevpl instance 1 \n# \n\n<\/code><\/pre>\n\n
                  R6:<\/strong>  <\/p>\n\n
                  system-view \ninterface Ethernet3\/0\/4 \ndescription Connected to CE2 \nevpl instance 1 \n# <\/code><\/pre>\n\n
                  <\/p>\n\n
                  Task 8: Checks<\/strong>  Once configured, let’s perform some checks on the technologies involved: 8.1: IGP adjacencies. <\/strong>Confirm the IS-IS adjacencies between the routers.  <\/p>\n\n
                  \n
                  \"\"<\/figure>\n<\/figure>\n\n
                  8.2: IS-IS route table.  <\/strong>Below is the output of router R1’s routing table:<\/p>\n\n
                  \n
                  \"\"<\/figure>\n<\/figure>\n\n
                  One cool thing we noticed here is routes for the \u201cLocator\u201d prefixes (\/64). In other words, the system already knows in its routing table the prefix used for SRv6 by each node in the topology \ud83d\ude0a8.3: Router R1\u2019s \u201cEVPN\u201d BGP table, to ensure that we have a session between R1 and R6, which is required for VPWS.<\/strong><\/p>\n\n
                  \n
                  \"\"<\/figure>\n<\/figure>\n\n
                  \n
                  \"\"<\/figure>\n<\/figure>\n\n
                  <\/p>\n\n
                  We can see that R1 has an established and functional session with router R6. R1’s routing table also shows an ESI for R6 in RD 200:1. So far, everything is ready for the environment to transition to VPWS.    <\/p>\n\n
                  8.4: EVPL on router R1 and R6. Below, the output of router R1. <\/p>\n\n
                  \n
                  \"\"<\/figure>\n<\/figure>\n\n
                  We can see in R1 that the EVPL is UP, and the tunnel used to forward packets within the network is of the \u201cSRv6-BE\u201d type (Segment Routing IPv6 \u2013 Best Effort). This indicates that the VPWS is established and operational between the head-end<\/em> and tail-end<\/em>, and also that the transport tunnel between the PEs is using SRv6.8.5: Local SID table of router R1:<\/p>\n\n
                  \n
                  \"\"<\/figure>\n<\/figure>\n\n
                  Looking at the local table of SIDs allocated to R1, we see not only the SID configured for the VPWS but also some SIDs of the \u201cEND\u201d and \u201cEND.X\u201d types.  What really matters to us right now is the \u201cEnd.DX2\u201d SID, which specifies that anything sent to the IPv6 address 2001:db8:1:1::a\/128 will be delivered to our VPWS. If you\u2019re curious about what the other SIDs are for, stay tuned for upcoming blog posts \ud83d\ude008.6: CE Configuration and Communication.  Interfaces of CEs 1 and 2, with an IPv4 address for communication.<\/p>\n\n
                  \n
                  \"\"<\/figure>\n<\/figure>\n\n
                  \n
                  \"\"<\/figure>\n<\/figure>\n\n
                  ARP table from CE1 and a ping to CE2, confirming connectivity between the CEs.<\/p>\n\n
                  \n
                  \"\"<\/figure>\n<\/figure>\n\n
                  Neighbors LLDP in CE1, showing the path being “Transparent” from the ECs point of view.<\/p>\n\n
                  \n
                  \"\"<\/figure>\n<\/figure>\n\n
                  8.7: While CE1 is exchanging \u201cpings\u201d with CE2, a packet capture on the R1 router\u2019s interface for traffic destined for the rest of the SRv6 network produces the following output:<\/p>\n\n
                  \n
                  \"\"<\/figure>\n<\/figure>\n\n
                  EVPN packets are encapsulated, and when they are forwarded to the SRv6 network, the \u201cdestination address\u201d becomes 2001:db8:6:6::A, which is the \u201cSID\u201d END.DX2.   The most interesting thing about SRv6 is that the package is “IPv6”. If our environment contained only SRv6-supporting PEs, the rest of the network would know how to forward traffic without any problems \ud83d\ude0a <\/p>\n\n
                  Summary<\/strong> <\/p>\n\n
                  In this lab, we explore the configuration of an L2VPN tunnel using SRv6, showing the basic configurations of each device.  SRv6, with its advanced capabilities, is proving to be a promising technology for the networks of the future. To learn more about implementing SRv6 in your network, turn to Made4it, an expert in the field. We can assist you in the migration process from MPLS to SRv6 by ensuring the coexistence of these protocols.    <\/p>\n\n
                  <\/p>\n\n
                  Complete configurations  <\/strong><\/p>\n\n
                  Download this complete lab, with topologies, configurations and roadmap here:  <\/p>\n\n
                  <\/div>