Ethernet Ring Protection

Bước 1: Tạo Bridge Domains

# vMX1 + vMX2 + vMX3 + vMX4 + vMX5 + vMX6

set bridge-domains bd100 vlan-id 100
set bridge-domains bd101 vlan-id 101
set bridge-domains bd200 vlan-id 200
set bridge-domains bd201 vlan-id 201

Bước 2: Cấu hình giao diện trunk

# vMX1 + vMX2 + vMX3 + vMX4 + vMX5 + vMX6

set interfaces ge-0/0/0 vlan-tagging
set interfaces ge-0/0/0 unit 0 family bridge interface-mode trunk
set interfaces ge-0/0/0 unit 0 family bridge vlan-id-list 100-1000
set interfaces ge-0/0/1 vlan-tagging
set interfaces ge-0/0/1 unit 0 family bridge interface-mode trunk
set interfaces ge-0/0/1 unit 0 family bridge vlan-id-list 100-1000

Bước 3: Cấu hình RPL Owner Node (Master Node)

# vMX3 (RPL Owner Node của erp100)

set protocols protection-group ethernet-ring erp100 ring-protection-link-owner
set protocols protection-group ethernet-ring erp100 west-interface ring-protection-link-end

# vMX6 (RPL Owner Node của erp200)

set protocols protection-group ethernet-ring erp200 ring-protection-link-owner
set protocols protection-group ethernet-ring erp200 east-interface ring-protection-link-end

Bước 4: Cấu hình Normal Node (Transit Node)

# vMX1 + vMX2 + vMX3 + vMX4 + vMX5 + vMX6

set protocols protection-group ethernet-ring erp100 east-interface control-channel vlan 101
set protocols protection-group ethernet-ring erp100 east-interface control-channel ge-0/0/0.0
set protocols protection-group ethernet-ring erp100 west-interface control-channel vlan 101
set protocols protection-group ethernet-ring erp100 west-interface control-channel ge-0/0/1.0
set protocols protection-group ethernet-ring erp100 data-channel vlan 100-199

set protocols protection-group ethernet-ring erp200 east-interface control-channel vlan 201
set protocols protection-group ethernet-ring erp200 east-interface control-channel ge-0/0/0.0
set protocols protection-group ethernet-ring erp200 west-interface control-channel vlan 201
set protocols protection-group ethernet-ring erp200 west-interface control-channel ge-0/0/1.0
set protocols protection-group ethernet-ring erp200 data-channel vlan 200-299

Kiểm tra

  • Trên 2 RPL Owner node
root@vMX3> show protection-group ethernet-ring interface

Ethernet ring port parameters for protection group erp100

Interface    Control Channel  Forward State  Ring Protection Link End  Signal Failure  Admin State
ge-0/0/0     ge-0/0/0.0       forwarding     No                        Clear          IFF ready
ge-0/0/1     ge-0/0/1.0       discarding     Yes                       Clear          IFF ready

Ethernet ring port parameters for protection group erp200

Interface    Control Channel  Forward State  Ring Protection Link End  Signal Failure  Admin State
ge-0/0/0     ge-0/0/0.0       forwarding     No                        Clear          IFF ready
ge-0/0/1     ge-0/0/1.0       forwarding     No                        Clear          IFF ready


root@vMX6> show protection-group ethernet-ring interface

Ethernet ring port parameters for protection group erp100

Interface    Control Channel  Forward State  Ring Protection Link End  Signal Failure  Admin State
ge-0/0/0     ge-0/0/0.0       forwarding     No                        Clear          IFF ready
ge-0/0/1     ge-0/0/1.0       forwarding     No                        Clear          IFF ready

Ethernet ring port parameters for protection group erp200

Interface    Control Channel  Forward State  Ring Protection Link End  Signal Failure  Admin State
ge-0/0/0     ge-0/0/0.0       discarding     Yes                       Clear          IFF ready
ge-0/0/1     ge-0/0/1.0       forwarding     No                        Clear          IFF ready
  • Trên bất kỳ Normal Node
root@vMX5> show protection-group ethernet-ring interface

Ethernet ring port parameters for protection group erp100

Interface    Control Channel  Forward State  Ring Protection Link End  Signal Failure  Admin State
ge-0/0/0     ge-0/0/0.0       forwarding     No                        Clear          IFF ready
ge-0/0/1     ge-0/0/1.0       forwarding     No                        Clear          IFF ready

Ethernet ring port parameters for protection group erp200

Interface    Control Channel  Forward State  Ring Protection Link End  Signal Failure  Admin State
ge-0/0/0     ge-0/0/0.0       forwarding     No                        Clear          IFF ready
ge-0/0/1     ge-0/0/1.0       forwarding     No                        Clear          IFF ready

root@vMX5> show protection-group ethernet-ring vlan

Ethernet ring IFBD parameters for protection group erp100

Interface    Vlan    STP Index   Bridge Domain
ge-0/0/0     100     16          default-switch/bd100
ge-0/0/1     100     17          default-switch/bd100
ge-0/0/0     101     16          default-switch/bd101
ge-0/0/1     101     17          default-switch/bd101

Ethernet ring IFBD parameters for protection group erp200

Interface    Vlan    STP Index   Bridge Domain
ge-0/0/0     200     18          default-switch/bd200
ge-0/0/1     200     19          default-switch/bd200
ge-0/0/0     201     18          default-switch/bd201
ge-0/0/1     201     19          default-switch/bd201

Bổ sung cấu hình vlan access để test ping

# vMX1 + vMX5
set interfaces ge-0/0/3 unit 0 family bridge interface-mode access
set interfaces ge-0/0/3 unit 0 family bridge vlan-id 100

# vMX2 + vMX4
set interfaces ge-0/0/3 unit 0 family bridge interface-mode access
set interfaces ge-0/0/3 unit 0 family bridge vlan-id 200