Juniper Contrail Networking User guide

Contrail®Networking

Contrail Networking Fabric Lifecycle

Management Guide

Release

Published

2021-01-06

2011

Juniper Networks, Inc.

1133 Innovation Way

Sunnyvale, California 94089

USA

408-745-2000

www.juniper.net

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in

the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks

are the property of their respective owners.

Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right

to change, modify, transfer, or otherwise revise this publication without notice.

Contrail®Networking Contrail Networking Fabric Lifecycle Management Guide

2011

The information in this document is current as of the date on the title page.

YEAR 2000 NOTICE

Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related

limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.

END USER LICENSE AGREEMENT

The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with)

Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement

(“EULA”) posted at https://support.juniper.net/support/eula/. By downloading, installing or using such software, you

agree to the terms and conditions of that EULA.

ii

Table of Contents

About the Documentation | xi

Documentation and Release Notes | xii

Documentation Conventions | xii

Documentation Feedback | xiv

Requesting Technical Support | xv

Self-Help Online Tools and Resources | xv

Creating a Service Request with JTAC | xvi

Overview

1

Understanding Underlay Management | 18

Benefits of Underlay Management | 19

Fabric Lifecycle Management | 19

Fabric Overview | 20

Zero-Touch-Provisioning

2

Create a Fabric | 23

Provisioning Option - New Fabric | 24

Provisioning Option - Existing Fabric | 31

Discover a Device | 36

Assign a Role to a Device | 40

Assign Telemetry Profiles | 45

Delete a Fabric | 47

Provision Fabric Devices Using End-to-End ZTP | 48

iii

Fabric Configuration

3

Image Management | 70

Upload a New Device Image | 70

Onboard Brownfield Devices | 73

Onboard Greenfield Devices | 83

Device Import | 95

Create Virtual Network | 99

Create Logical Routers | 106

Create Network Policy | 108

Create Network IPAM | 110

Reconfigure Roles | 112

Managing Custom Roles | 115

Adding Custom Roles | 115

Backup and Restore Custom Roles | 122

Backup Custom Roles | 123

Restore Custom Roles | 124

View Node Profile Information | 127

Monitoring Fabric Jobs | 129

Terminating Ongoing Fabric Jobs | 133

Adding a Leaf or Spine Device to an Existing Fabric Using ZTP | 135

Grouping Fabric Devices and Roles Using Device Functional Groups | 138

Creating Layer 3 PNF Service Chains for Inter-LR Traffic | 141

Onboard Fabric Devices | 142

Configure Virtual Networks | 143

Configure Virtual Port Groups | 143

Configure Logical Routers | 143

Configure PNF | 144

View Service Appliance Sets and Service Appliances | 147

iv

Creating VNF Service Chains for Inter-LR Traffic | 148

Onboard Brownfield Devices | 150

Create Virtual Network | 160

Configuring Virtual Port Groups | 167

Create Logical Routers | 174

Create VNF Service Template | 176

Create VNF Service Instance | 177

Retaining the AS Path Attribute in a Service Chain | 179

Assisted Replication of Broadcast, Unknown Unicast, and Multicast Traffic | 180

Benefits of Assisted Replication | 182

Running Generic Device Operations Commands In Contrail Command | 182

Adding DHCP Server Information for Virtual Networks and Logical Routers | 187

Topology | 188

Steps to Add DHCP Server Information | 190

Adding DHCP Server Information to an Existing Logical Router | 191

Adding DHCP Server Information while Creating a Logical Router | 192

Steps to Remove CSN Information | 193

Return Material Authorization | 194

Move a Device to RMA State | 194

Replace a Device in RMA State with a New Device | 196

Getting Started with a New Device | 197

Approaches to Enable External Connectivity for Overlay Networks | 198

Contrail Networking Supported Hardware Platforms and Associated Roles And Node

Profiles | 200

Hardware Platforms and Associated Roles | 200

Hardware Platforms and Associated Node Profiles and Roles | 203

v

Managing Data Center Devices

4

Data Center Interconnect | 215

Understanding Data Center Interconnect | 215

Data Center Interconnect Deployment Topologies | 216

DCI using EBGP | 216

DCI using IBGP | 217

Creating Data Center Interconnect | 217

Onboard Brownfield Devices | 218

Create Virtual Network | 218

Create Logical Routers | 219

Create DCI | 219

Logical Router Interconnect | 222

Understanding Logical Router Interconnect | 223

Creating Logical Router Interconnect | 224

Create a Fabric and Deploy Logical Routers on the Fabric Devices | 224

Create a Routing Policy for QFX Series Devices | 224

Creating Logical Router Interconnect | 226

Configuring Data Center Gateway | 228

Configuring QFX Series Devices as Data Center Gateway | 229

Onboard Brownfield Devices | 229

Add Bare Metal Server | 230

Create Tenant Virtual Network | 231

Add CSN Nodes | 238

Create Logical Routers | 239

Verification | 240

Configuring MX Series Routers as Data Center Gateway | 241

Onboard Brownfield Devices | 241

Create Virtual Network | 242

Virtual Port Groups | 243

Configuring Virtual Port Groups | 245

vi

Using Static, eBGP, PIM, and OSPF Protocols to Connect to Third-Party Network

Devices | 253

Overview | 253

Steps to Connect to a Third-Party Device | 255

Configuring Storm Control on Interfaces | 274

When Is a Traffic Storm Generated? | 274

How Do You Recognize a Traffic Storm? | 274

How Can You Use Storm Control Profiles to Manage a Traffic Storm? | 275

Configuring Storm Control Profiles | 276

Creating Port Profiles, Storm Control Profiles, sFlow Profiles, or Telemetry Profiles by

Cloning | 281

Configuring EVPN VXLAN Fabric with Multitenant Networking Services | 285

Edge-Routed Bridging for QFX Series Switches | 287

Benefits of ERB | 288

Optimization of IRB Interfaces Creation in ERB Switches | 288

Activating Maintenance Mode on Data Center Devices | 289

Viewing the Network Topology | 291

Viewing Hardware Inventory of Data Center Devices | 298

Viewing Configuration of Devices Deployed in Contrail Fabric | 300

Detecting and Managing Manual CLI Configuration Changes | 303

Detecting a CLI Change | 303

Accept, Ignore, or Reject a CLI Change | 307

Certificate Lifecycle Management Using Red Hat Identity Management | 309

Fully Qualified Domain Names | 310

Performing Lifecycle Management of Certificates using Identity Management | 310

Collapsed Spine Architecture | 313

Benefits | 314

Support for Superspine Role | 315

vii

High Availability in Contrail Networking

5

Using HA Cluster to Manage Fabric | 319

Topology Information | 320

Hitless Software Upgrade of Data Center Devices Overview | 321

Benefits of Hitless Software Upgrade | 322

Performing Hitless Software Upgrade on Data Center Devices | 323

Fast Routing Convergence with Contrail Networking | 332

What is Convergence | 332

Fast Network Convergence in a Network Managed by Contrail Networking | 333

Configuring Fast Convergence from Contrail Command | 336

Integrating VMware with Contrail Networking Fabric

6

Understanding VMware-Contrail Networking Fabric Integration | 340

Benefits of CVFM plug-in | 341

CVFM Design Overview | 341

Getting Started with CVFM Plug-in | 342

Limitations of the CVFM Plug-in | 342

Deploying Contrail vCenter Fabric Manager Plug-in | 343

Prerequisites | 343

Deploying CVFM Plug-in while Provisioning Contrail Command | 344

Deploying CVFM Plug-in after Provisioning Contrail Command | 344

Troubleshooting Information | 345

Fabric Discovery and ESXi Discovery by Using Contrail Command | 346

Fabric Discovery | 347

ESXi Discovery | 351

Adding Distributed Port Groups | 353

Updating vCenter Credentials on Contrail Command | 355

viii

Integrating OpenStack with Contrail Networking Fabric

7

Understanding OpenStack-Contrail Networking Fabric Integration | 358

Modular Layer 2 (ML2) Neutron Plug-in | 358

Benefits of ML2 Plug-in | 359

Design Overview | 359

Deploying ML2 Plug-in with Red Hat OpenStack | 361

Deploy Contrail Command and CFM without Orchestrator | 362

Configure Fabric by using Contrail Command | 363

Deploy RHOSP13 with ML2 Plug-in | 368

Configure Connectivity between RHOSP Internal API Network and Contrail Command Virtual

Machines | 373

Add Red Hat OpenStack Orchestrator | 374

Create Swift Containers in OpenStack | 375

(Optional) Deploy AppFormix and sFlows | 375

Sample Network Files | 378

Extending Contrail Networking to Bare Metal Servers

8

Bare Metal Server Management | 386

Understanding Bare Metal Server Management | 386

Features of the Bare Metal Server Management Framework | 388

How Bare Metal Server Management Works | 390

Administrative Workflow | 390

Tenant Workflow | 391

LAG and Multihoming Support | 392

Adding Bare Metal Server to Inventory | 394

Launching a Bare Metal Server | 396

ix

Onboarding and Discovery of Bare Metal Servers | 398

Onboarding of Bare Metal Servers | 398

Discovery of Bare Metal Servers | 398

Manual Discovery | 399

Auto Discovery | 399

Launching and Deleting a Greenfield Bare Metal Server | 399

Destination Network Address Translation for Bare Metal Servers | 401

Enabling DNAT in a Data Center Gateway | 402

Extending a Public Virtual Network to the Data Center Gateway | 402

Creating a Floating IP Address Pool | 403

Mapping Floating IP Address to the Fixed IP address of the BMS Private Network | 404

Troubleshooting Bare Metal Servers | 405

x

About the Documentation

IN THIS SECTION

Documentation and Release Notes | xii

Documentation Conventions | xii

Documentation Feedback | xiv

Requesting Technical Support | xv

Use this guide to understand Contrail Networking underlay management and managing data center devices.

This guide also provides information on integrating VMware with Contrail Networking fabric and extending

Contrail Networking to bare metal servers.

Contrail Networking product documentation is organized into multiple guides as shown in

Table 1 on page xi, according to the task you want to perform or the deployment scenario.

Table 1: Contrail Networking Guides

DescriptionGuide Name

Provides step-by-step instructions to install and bring up Contrail and its various

components.

Contrail Networking Installation

and Upgrade Guide

Provides information about Contrail underlay management and data center

automation.

Contrail Networking Fabric

Lifecycle Management Guide

Provides information about creating and orchestrating highly secure virtual

networks.

Contrail Networking and Security

User Guide

Provides information about the features that are used by service providers.Contrail Networking Service

Provider Focused Features Guide

Provides information about Contrail Insights and Contrail analytics.Contrail Networking Monitoring

and Troubleshooting Guide

xi

Documentation and Release Notes

To obtain the most current version of all Juniper Networks®technical documentation, see the product

documentation page on the Juniper Networks website at https://www.juniper.net/documentation/.

If the information in the latest release notes differs from the information in the documentation, follow the

product Release Notes.

Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts.

These books go beyond the technical documentation to explore the nuances of network architecture,

deployment, and administration. The current list can be viewed at https://www.juniper.net/books.

Documentation Conventions

Table 2 on page xii defines notice icons used in this guide.

Table 2: Notice Icons

DescriptionMeaningIcon

Indicates important features or instructions.Informational note

Indicates a situation that might result in loss of data or hardware

damage.

Caution

Alerts you to the risk of personal injury or death.Warning

Alerts you to the risk of personal injury from a laser.Laser warning

Indicates helpful information.Tip

Alerts you to a recommended use or implementation.Best practice

Table 3 on page xiii defines the text and syntax conventions used in this guide.

xii

Table 3: Text and Syntax Conventions

ExamplesDescriptionConvention

To enter configuration mode, type

the configure command:

user@host> configure

Represents text that you type.Bold text like this

user@host> show chassis alarms

No alarms currently active

Represents output that appears on

the terminal screen.

Fixed-width text like this

•A policy term is a named structure

that defines match conditions and

actions.

•Junos OS CLI User Guide

•RFC 1997, BGP Communities

Attribute

•Introduces or emphasizes important

new terms.

•Identifies guide names.

•Identifies RFC and Internet draft

titles.

Italic text like this

Configure the machine’s domain

name:

[edit]

root@# set system domain-name

domain-name

Represents variables (options for

which you substitute a value) in

commands or configuration

statements.

Italic text like this

•To configure a stub area, include

the stub statement at the [edit

protocols ospf area area-id]

hierarchy level.

•The console port is labeled

CONSOLE.

Represents names of configuration

statements, commands, files, and

directories; configuration hierarchy

levels; or labels on routing platform

components.

Text like this

stub <default-metric metric>;Encloses optional keywords or

variables.

< > (angle brackets)

broadcast | multicast

(string1 |string2 |string3)

Indicates a choice between the

mutually exclusive keywords or

variables on either side of the symbol.

The set of choices is often enclosed

in parentheses for clarity.

| (pipe symbol)

rsvp { # Required for dynamic MPLS

only

Indicates a comment specified on the

same line as the configuration

statement to which it applies.

# (pound sign)

xiii

Table 3: Text and Syntax Conventions (continued)

ExamplesDescriptionConvention

community name members [

community-ids ]

Encloses a variable for which you can

substitute one or more values.

[ ] (square brackets)

[edit]

routing-options {

static {

route default {

nexthop address;

retain;

}

Identifies a level in the configuration

hierarchy.

Indention and braces ( { } )

Identifies a leaf statement at a

configuration hierarchy level.

; (semicolon)

GUI Conventions

•In the Logical Interfaces box, select

All Interfaces.

•To cancel the configuration, click

Cancel.

Represents graphical user interface

(GUI) items you click or select.

Bold text like this

In the configuration editor hierarchy,

select Protocols>Ospf.

Separates levels in a hierarchy of

menu selections.

>(bold right angle bracket)

Documentation Feedback

We encourage you to provide feedback so that we can improve our documentation. You can use either

of the following methods:

•Online feedback system—Click TechLibrary Feedback, on the lower right of any page on the Juniper

Networks TechLibrary site, and do one of the following:

xiv

•Click the thumbs-up icon if the information on the page was helpful to you.

•Click the thumbs-down icon if the information on the page was not helpful to you or if you have

suggestions for improvement, and use the pop-up form to provide feedback.

•E-mail—Send your comments to [email protected]. Include the document or topic name,

URL or page number, and software version (if applicable).

Requesting Technical Support

Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC).

If you are a customer with an active Juniper Care or Partner Support Services support contract, or are

covered under warranty, and need post-sales technical support, you can access our tools and resources

online or open a case with JTAC.

•JTAC policies—For a complete understanding of our JTAC procedures and policies, review the JTAC User

Guide located at https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.

•Product warranties—For product warranty information, visit https://www.juniper.net/support/warranty/.

•JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week,

365 days a year.

Self-Help Online Tools and Resources

For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called

the Customer Support Center (CSC) that provides you with the following features:

•Find CSC offerings: https://www.juniper.net/customers/support/

•Search for known bugs: https://prsearch.juniper.net/

•Find product documentation: https://www.juniper.net/documentation/

•Find solutions and answer questions using our Knowledge Base: https://kb.juniper.net/

•Download the latest versions of software and review release notes:

https://www.juniper.net/customers/csc/software/

•Search technical bulletins for relevant hardware and software notifications:

https://kb.juniper.net/InfoCenter/

•Join and participate in the Juniper Networks Community Forum:

https://www.juniper.net/company/communities/

•Create a service request online: https://myjuniper.juniper.net

xv

To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool:

https://entitlementsearch.juniper.net/entitlementsearch/

Creating a Service Request with JTAC

You can create a service request with JTAC on the Web or by telephone.

•Visit https://myjuniper.juniper.net.

•Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).

For international or direct-dial options in countries without toll-free numbers, see

https://support.juniper.net/support/requesting-support/.

xvi

1

CHAPTER

Overview

Understanding Underlay Management | 18

Fabric Lifecycle Management | 19

Fabric Overview | 20

Understanding Underlay Management

A private cloud data center is a critical business infrastructure that enterprise customers and service

providers need. These private cloud data centers help deliver automated application networking services

to internal departments. Today, most enterprises and service providers are moving from a vendor proprietary

fabric to a standard-based EVPN-VXLAN data center built on IP Clos technology. In an EVPN-VXLAN data

center, the underlay network is the physical infrastructure (switches, routers, firewall) on which overlay

network services are built.

An EVPN-VXLAN data center fabric relies on a standard model that consists of tenants. These tenants are

a group of endpoints, where,

•groups are subnets that are routed to other groups.

•endpoints are bridged within a group.

•tenants are routed to other tenants depending on the overlay architecture.

•tenants, groups, and endpoints may have services such as security, transit, multihoming, and QoS

associated with them.

•tenants and groups are implemented in the network as IP and Ethernet Virtual Private Networks (VPNs)

and Virtual Tunnel End Points (VTEPs).

EVPN-VXLAN is used in a data center fabric to deliver multi-tenant networking services. The following

network virtualization overlay architectures can be deployed in an EVPN-VXLAN IP fabric.

•Centrally-Routed Bridging overlay design—inter-VN routing occurs in either the spine switch or border

leaf switch.

•Edge-Routed Bridging overlay design— inter-VN routing occurs natively in the leaf switch that workloads

and servers are attached to.

•Ethernet overlays—Layer 2 reachability and workload mobility across endpoints are the main services

that the data center fabric provides.

•IP overlay—traffic in a tenant is routed using IP routes.

Contrail Networking Release 5.0.1 supports the automation and management of EVPN-VXLAN data center

IP fabric as well as the automation of layer 2 and layer 3 multi-tenant services on the IP fabric. The existing

Contrail Networking configuration node can provide intent driven automation capabilities on physical

network elements such as ToR and EoR switches, Spines, SDN gateway, and VPN gateways in the data

center. In addition, you can perform basic device management functions such as image upgrade, device

discovery, device underlay configuration, assigning roles to devices, and viewing node profile information

from the node.

18

Benefits of Underlay Management

•Enables basic device management functions from the Contrail Networking configuration node.

•Enables underlay network automation.

•Supports zero-touch-provisioning (ZTP) of factory-default devices to form an IP Clos network.

NOTE: ZTP allows you to provision new devices in your network automatically, with minimal

manual intervention.

Juniper Contrail Networking User guide

This manual is also suitable for

Juniper Contrail Networking User guide

Related papers

Other documents