Hi Adam, Thank you for your response.
I was thinking that the 6880 will break the loop but I guess there should be some issues with the L2 FIB in that case... What do you think I can do ? Manual failover ? Let the interface on the second asr down and do a manual switchover in case of issue with the "primary" ASR ? I'm not too sure what would be the best scenario in that case. I'm thinking about using xconnect and peer backup on the vlan interface but I'm not too sure if I can use a Layer 3 on that interface at the same time. Thank you for your help. Nick # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - # - - Nicolas KARP # - - Network and Security Engineer # - - Email : [email protected] <[email protected]> # - - Linkedin : http://www.linkedin.com/in/nicolaskarp # - - Viadeo : http://www.viadeo.com/fr/profile/nicolas.karp <http://www.viadeo.com/fr/profile/nicolas.karp%20> # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 2015-04-08 23:54 GMT+02:00 Adam Vitkovsky <[email protected]>: > Hello Nicolas, > > Right the split horizon is there so packets coming from a PW will not be > forwarded to another PW in the same VFI so that takes care of loops in MPLS. > However you need to take care of the loops created via LAN/DC side so you > need to have a dedicated forwarder for the BUM traffic on one of the ASRs > or break the loop. > > adam > > -----Original Message----- > > From: cisco-nsp [mailto:[email protected]] On Behalf Of > > Nicolas KARP > > Sent: 08 April 2015 15:21 > > To: [email protected] > > Subject: [c-nsp] VPLS : Loop avoidance > > > > Hello, > > > > We are going to interconnect two of our datacenters. In one datacenter we > > have a 6880-X configured with VSS and on the other hand, we have a pair > of > > ASR 1001-X. > > > > We would like to configure the VPLS and I have some questions about the > > redundancy and loop avoidance. You can find a diagram attached to my > > email.. > > > > > > *6880 VSS : * > > > > *l2 vfi VPLS-VLAN-582 manual* > > * vpn id 582* > > * neighbor ASR-2 24 encapsulation mpls* > > * neighbor ASR-1 23 encapsulation mpls* > > > > *interface Vlan582* > > * mtu 9180* > > * no ip address* > > * xconnect vfi VPLS-VLAN-582* > > > > > > *ASR 1: * > > > > interface GigabitEthernet0/0/5 > > service instance 100 ethernet > > description VLAN582 > > encapsulation dot1q 582 exact > > rewrite ingress tag pop 1 symmetric > > bridge-domain 582 > > ! > > > > l2 vfi VPLS-VLAN-582 manual > > vpn id 582 > > bridge-domain 582 > > mtu 9180 > > neighbor VSS-6880 23 encapsulation mpls > > ! > > > > > > *ASR 2 : * > > > > > interface GigabitEthernet0/0/5 > > service instance 100 ethernet > > description VLAN582 > > encapsulation dot1q 582 exact > > rewrite ingress tag pop 1 symmetric > > bridge-domain 582 > > ! > > l2 vfi VPLS-VLAN-582 manual > > vpn id 582 > > bridge-domain 582 > > mtu 9180 > > neighbor VSS-6880 24 encapsulation mpls > > ! > > > > > > At the moment, I've enabled one interface on the ASR-1 (g0/0/5), the > g0/0/5 > > on ASR-2 is still shut. VPLS is working like a charm between the 6880 and > > ASR-1 but now I would like to activate the second interface on ASR-2 :-) > > > > I have some doubts about a loop in this case... > > I guess there should be no loop because the 6880 is configured with > > split-horizon but I just wanted to be sure that I will not break my > network > > if I activate the second port. > > > > Can you please help me ? > > > > Thank you. > > > > > > # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - > - - > > - - - - - - - - - - - - - - - - - - - > > # - - Nicolas KARP > > # - - Network and Security Engineer > > # - - Email : [email protected] <[email protected]> > > # - - Linkedin : http://www.linkedin.com/in/nicolaskarp > > # - - Viadeo : http://www.viadeo.com/fr/profile/nicolas.karp > > <<http://www.viadeo.com/fr/profile/nicolas.karp%20>> > > # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - > - - > > - - - - - - - - - - - - - - - - - - - > > _______________________________________________ > > cisco-nsp mailing list [email protected] > > https://puck.nether.net/mailman/listinfo/cisco-nsp > > archive at http://puck.nether.net/pipermail/cisco-nsp/ > > > ------------------------------ > This email has been scanned for email related threats and delivered safely > by Mimecast. > For more information please visit http://www.mimecast.com > ------------------------------ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
