I don't speak Nokia but here is a Cisco CSR example I got working a while
ago. Maybe it will be easier for you to understand than a Juniper config?
You are basically setting up dynamic MGRE tunnels to the compute nodes and
a VRF for onramp/offramp into the cluster. The Contrail controllers are
advertising L3VPN routes via BGP to the gateway. You'll need a public VRF
for onramp / offramp of public traffic. A small 'backplane loopback
network" connects that VRF to the global table. The gateway learns about
the tenants and sets up a route with a GRE tunnel to a specific compute
node as the next hop. MPLS tags are inside the GRE tunnels to isolate
different virtual networks from each other.
HTH,
Doug
On Tue, Oct 25, 2016 at 6:29 AM, Rhine, Jay (Nokia - US) <
[email protected]> wrote:
> Any thoughts on where I can get more information on how different routers
> need to be configure work with the MPLS / VXLAN of the OpenContrail
> vrouters?
>
>
>
> Thank you very much!
>
>
>
> ----
>
> Jay Rhine, CISSP
>
> DMTS, Solution Validation & Cloud Transformation
>
> Solutions & Partners Business Unit
>
> Applications & Analytics Group, Nokia
>
> Email - [email protected]
>
>
>
> *From:* Dev [mailto:[email protected]] *On Behalf Of *Rhine,
> Jay (Nokia - US)
> *Sent:* Monday, October 24, 2016 12:57 PM
> *To:* [email protected]
> *Subject:* Suspected SPAM - [opencontrail-dev] Opencontrail
> interoperation with Nokia 7750 Services Router or other routers
>
>
>
> Hello!
>
>
>
> I’ve been trying to connect our opencontrail 3.0 setup to
> an external router to allow communication items outside the openstack
> cloud. I understand that the OpenContrail vRouters support MPLS over GRE,
> MPLS over UDP, and VXLAN for this type of communication. I’m trying to do
> this with a Nokia 7750 Services Router, but I have been unsuccessful. I
> can get the BGP talking between the OpenContrail controller and the router,
> but I can’t get the routes into the route table or any traffic to pass. I
> really don’t understand how the OpenContrail expects its MPLS / VXLAN to be
> setup. The only practical example I can find is the following link which
> is over 2 years old:
>
>
>
> http://www.opencontrail.org/how-to-setup-opencontrail-
> gateway-juniper-mx-cisco-asr-and-software-gw/
>
>
>
> Is there any more information on how to set this up? Or
> any more examples of real configuration? I’d love an actual Nokia 7750
> Services Router example, but I would take anything that might help me
> better understand the setup.
>
>
>
> Thank you very much!
>
>
>
> Jay
>
> ----
>
> Jay Rhine, CISSP
>
> DMTS, Solution Validation & Cloud Transformation
>
> Solutions & Partners Business Unit
>
> Applications & Analytics Group, Nokia
>
> Email - [email protected]
>
> _______________________________________________
> Dev mailing list
> [email protected]
> http://lists.opencontrail.org/mailman/listinfo/dev_lists.opencontrail.org
>
>
--
*Doug Lardo *// *Riot Games* // c: 818.620.7046 // summoner: Riot Antares
Q: Why is this email 5 sentences or less? A: http://five.sentenc.es
csr#sh run
Building configuration...
Current configuration : 4982 bytes
!
! Last configuration change at 20:38:29 UTC Sat Feb 14 2015 by ec2-user
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no platform punt-keepalive disable-kernel-core
platform console virtual
!
hostname csr
!
boot-start-marker
boot-end-marker
!
!
vrf definition Contrail
rd 64512:10000
route-target export 64512:10000
route-target import 111:111
route-target import 64512:10000
!
address-family ipv4
exit-address-family
!
enable secret 5 $1$blahblahblah.
!
aaa new-model
!
!
aaa authentication login default local
!
!
!
!
!
aaa session-id common
!
!
!
!
!
!
!
!
!
no ip domain lookup
ip domain name ourcloud.labstuff.com
!
!
!
ipv6 multicast rpf use-bgp
!
!
!
!
!
!
!
subscriber templating
!
multilink bundle-name authenticated
!
!
crypto pki trustpoint TP-self-signed-2619399958
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2619399958
revocation-check none
rsakeypair TP-self-signed-2619399958
!
!
crypto pki certificate chain TP-self-signed-2619399958
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 blahblah 53656C66 2D536967 6E65642D 43657274
26D94A9F 6160A9C0 E7515759 F783D408 269E0E0B 4BA30C2D 759B61E2 CE39C453
blahblah 542B1FE2 90FD363D FBEB504E blahblah 8467FA8C 0E6A7B71 0A5DC561
EBB9AB65 A3470233 0061FAA5 019D9F88 12FC9FEA E808C517 25A3530B A49ADAA9
05FAFD38 0C872681 4C67F68E 19818B
quit
license udi pid CSR1000V sn blahblah
spanning-tree extend system-id
!
username ec2-user privilege 15 secret 5 $1$XblahblahlBy$blahblah/
username neteng secret 5 $1$Mk/r$blahblah/blahblah
!
redundancy
mode none
!
!
!
!
!
!
ip ssh rsa keypair-name ssh-key
ip ssh version 2
ip ssh pubkey-chain
username ec2-user
key-hash ssh-rsa B9DB2blahblahblahblahF6D96D2AC7F2 happyuser-OpenLab
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback91
vrf forwarding Contrail
ip address 192.168.91.1 255.255.255.255
!
interface Loopback102
description Internal-Tunnel-LoopbackA
ip address 192.0.2.1 255.255.255.255
!
interface Loopback103
description Internal-Tunnel-LoopbackB
ip address 192.0.2.2 255.255.255.255
!
interface Tunnel102
ip address 192.0.2.129 255.255.255.252
tunnel source Loopback102
tunnel destination 192.0.2.2
!
interface Tunnel103
vrf forwarding Contrail
ip address 192.0.2.130 255.255.255.252
tunnel source Loopback103
tunnel destination 192.0.2.1
!
interface GigabitEthernet1
vrf forwarding Contrail
ip address 10.188.3.254 255.255.255.0
negotiation auto
!
interface GigabitEthernet2
ip address 10.188.5.254 255.255.255.0
no ip redirects
ip local-proxy-arp
ip route-cache same-interface
negotiation auto
!
l3vpn encapsulation ip MGRE
transport ipv4 source GigabitEthernet2
!
router ospf 101 vrf Contrail
network 192.0.2.130 0.0.0.0 area 0
!
router ospf 100
network 10.188.5.0 0.0.0.255 area 0
network 192.0.2.129 0.0.0.0 area 0
!
router bgp 64512
bgp router-id 10.188.5.254
bgp log-neighbor-changes
neighbor 10.188.5.15 remote-as 64512
!
address-family ipv4
network 10.188.3.0 mask 255.255.255.0
neighbor 10.188.5.15 activate
neighbor 10.188.5.15 route-map MGRE-NEXT-HOP out
default-information originate
exit-address-family
!
address-family vpnv4
neighbor 10.188.5.15 activate
neighbor 10.188.5.15 send-community extended
neighbor 10.188.5.15 route-map MGRE-NEXT-HOP in
exit-address-family
!
address-family ipv4 vrf Contrail
redistribute static
default-information originate
exit-address-family
!
!
virtual-service csr_mgmt
ip shared host-interface GigabitEthernet1
activate
!
no ip forward-protocol nd
!
no ip http server
ip http secure-server
ip route vrf Contrail 0.0.0.0 0.0.0.0 10.188.3.1
!
ip access-list extended concal
permit ip 10.188.2.0 0.0.0.255 192.168.1.0 0.0.0.255
permit ip 192.168.1.0 0.0.0.255 10.188.2.0 0.0.0.255
!
!
route-map MGRE-NEXT-HOP permit 10
set ip next-hop encapsulate l3vpn MGRE
!
!
!
!
!
control-plane
!
!
line con 0
stopbits 1
line vty 0 4
transport input ssh
!
!
end
csr#wr
Building configuration...
[OK]
csr#
_______________________________________________
Dev mailing list
[email protected]
http://lists.opencontrail.org/mailman/listinfo/dev_lists.opencontrail.org
