Shortest Path Bridging 802.1AQ
© 2011 Avaya Inc. All rights reserved. 22
Values of 802.1aq SPB
 Plug&play services enabled by end-point provisioning
 Operational Simplicity
 Increased network uptime
 Predictable network behavior
 Optimal network bandwidth utilization
 Maximum network design flexibility
 Immune to errors introduced by end-user
2
© 2011 Avaya Inc. All rights reserved. 3
Shortest Path Bridging – Network Virtualization
Standard Year Name Loopfree
topology by:
Service ID‘s Provisioning Virtualization
of
IEEE
802.1Q
1998 Virtual Lans
(VLAN Tagging)
Spanning Tree
SMLT
4096 Edge and Core Layer 2
IEEE
802.1ad
2005 Provider
Bridging
(QinQ)
Spanning Tree
SMLT
4096x4096 Edge and Core Layer 2
IEEE
802.1ah
2008 Provider
Backbone
Bridging
(MacInMac)
Spanning Tree
SMLT
16 Mil. Edge and Core Layer 2
IEEE
802.1aq
2011 Shortest Path
Bridging
(SPBm)
Link-State-
Protocol (IS-IS)
16 Mil. Only Service
Access Points
IEEE: Layer 2
IETF draft:
Layer 3 Unicast
& Multicast
802.1Qbg 2012+ Edge Virtual
Bridging
VEPA & VEB QnQ
Attachement
s to ISIDs &
VLANs
VDP (LLDP)
discovery of
VM‘s
VM attachment
to the network
Ethernet = IEEE
Time
© 2011 Avaya Inc. All rights reserved. 44
Spanning Tree IGP
Tradition
?
Which would you rather do?
GVRP PIM-SM
IGP
mLDP
Signal after convergence Compute
Disruption
Unicast FIB
Multicast FIB
IGP
Unicast & Multicast FIB
BGP
© 2011 Avaya Inc. All rights reserved. 55
Virtualization Technology Comparison
MPLS versus VENA
e.g. PIM
Protocol
Infrastructure
e.g. RIP/OSPF
Protocol
Infrastructure
e.g. 802.1q/D
Protocol
Infrastructure
e.g. RFC4364
Protocol
Infrastructure
e.g. Draft Rosen
Protocol
Infrastructure
802.1Q
(VLAN)
802.1D
(Spanning Tree)
SONET, SDH,
Ethernet, etc…
UC IGP
(IS-IS or OSPF)
Layer 3 Unicast
Service
Layer 3 Multicast
Service
Layer 3 Virtualized
Multicast Service
Physical
Infrastructure
Layer 3
Virtualized
Multicast
Service
Top–DownVerticaldependency
Layer 3 Virtualized
Unicast Service
Layer 3
Virtualized
Unicast
Service
Layer 3
Multicast
Service
Layer 3
Unicast
Service
Layer 2
Virtualized
Service
Layer 2
Virtualized
Service IP/SPB, SPBm/SPBm
Protocol Infrastructure
SONET, SDH,
Ethernet, etc…
Physical
Infrastructure
Horizontally Independent
Connectivity Services independent from Infrastructure
5
© 2011 Avaya Inc. All rights reserved. 66
The Benefits of Virtualization
Server Virtualization
Allows aggregation of multiple
independent virtual servers to exist
on a physical server
Network Virtualization
Decouples the physical infrastructure
from the connectivity services making
the network adaptive and dynamic
with simple one-touch provisioning
Network Virtualization enabled via Shortest Path Bridging
Compute
Access
Data Center
Core
Campus
Core
Distribution
Layer
Access
Layer
© 2011 Avaya Inc. All rights reserved. 77
Understanding Shortest Path Bridging
 An IEEE technology using MAC-in-MAC encapsulation
– Evolved from Provider Backbone Bridging (802.1ah)
– Deployed around the world providing Carrier metro service
 Standards-based OA&M (802.1ag)
– Configuration and Fault Management tools built-in
– Deployed around the world testing SLA of Metro Ethernet
 Eliminates the need for multiple protocols in the core
– Uses a single Ethernet-based link state protocol (IS-IS)
providing virtualization services at both Layer 2 and 3
SPB is an essential component for the Avaya VENA implementation
7
© 2011 Avaya Inc. All rights reserved. 8 8
Shortest Path Bridging (SPB)
IEEE 802.1aq & RFC 6329
SPB Shortest Path
Tree from Node A
Node A
802.1ah
interfaces
SPB Network
PB
Network
MPLS
Network
CPE
SPB/MPLS
Interworking
SPB Shortest Path Tree for
Green Service from Node A
SPB is a Spanning-Tree Protocol replacement for Ethernet and introduces:
Network Efficiency - No blocked ports
Fast resiliency - Network reconvergence in 100s of milliseconds
Simplicity - Well-known networking paradigm (link state)
Customized Broadcast - Broadcast only to need-to-know nodes
One-touch provisioning - Dynamic auto-discovery of end-points
© 2011 Avaya Inc. All rights reserved. 99
The Basics of How SPBm Works
ISIS
ISIS ISIS
ISISISIS
ISIS
ISIS
ISIS ISIS
ISIS
ISIS
CREATE
ISID=100
1. Discover network topology
• IS-IS natural L2 routing protocol
• Hierarchy built in for scaling
2. IS-IS nodes automatically build
trees from themselves to all
nodes:
Important properties:
• Shortest path tree based on link metrics
• No blocked links
• RPFC to eliminate loops
• Symmetric datapath between any two nodes
provides closed OAM system
• unicast path now exists from every node to
every other node
3. Use IS-IS to advertise new
services communities of interest
• Floods topology, MAC and ISID information to
network
4. When nodes receive notice of a
new service AND they are on the
shortest path, update FDB
• ISID/Service specific entries ISID=100
#config vlan 20 isid 100
CLI applied to edge switch only
Vlan 20
Vlan 20
Vlan 20
100
100100
100
100
100
100
100
100
100
A
B
C
9
© 2011 Avaya Inc. All rights reserved. 1010
The Basics of How SPBm Works
ISIS
ISIS ISIS
ISISISIS
ISIS
ISIS
ISIS ISIS
ISIS
ISIS
CREATE
ISID=100
1. Discover network topology
• IS-IS natural L2 routing protocol
• Hierarchy built in for scaling
2. IS-IS nodes automatically build
trees from themselves to all
nodes:
Important properties:
• Shortest path tree based on link metrics
• No blocked links
• RPFC to eliminate loops
• Symmetric datapath between any two nodes
provides closed OAM system
• Unicast path now exists from every node to
every other node
3. Use IS-IS to advertise new
services communities of
interest
• Floods topology, MAC and ISID information
to network
4. When nodes receive notice of a
new service AND they are on
the shortest path, update FDB
• ISID/Service specific entries
Vlan 20
Vlan 20
Vlan 20
ISID=100
#config vlan 20 isid 100
CLI applied to edge switch only
A
B
C
10
© 2011 Avaya Inc. All rights reserved. 1111
The Basics of How SPBm Works
ISIS
ISIS ISIS
ISISISIS
ISIS
ISIS
ISIS ISIS
ISIS
ISIS
CREATE
ISID=100
1. Discover network topology
• IS-IS natural L2 routing protocol
• Hierarchy built in for scaling
2. IS-IS nodes automatically build
trees from themselves to all
nodes:
Important properties:
• Shortest path tree based on link metrics
• No blocked links
• RPFC to eliminate loops
• Symmetric datapath between any two nodes
provides closed OAM system
• Unicast path now exists from every node to
every other node
3. Use IS-IS to advertise new
services communities of interest
• Floods topology, MAC and ISID information
to network
4. When nodes receive notice of a
new service AND they are on
the shortest path, update FDB
• ISID/Service specific entries
Vlan 20
Vlan 20
Vlan 20
A
B
C
11
© 2011 Avaya Inc. All rights reserved. 1212
The Basics of How SPBm Works
ISIS
ISIS ISIS
ISISISIS
ISIS
ISIS
ISIS ISIS
ISIS
ISIS
CREATE
ISID=100
1. Discover network topology
• IS-IS natural L2 routing protocol
• Hierarchy built in for scaling
2. IS-IS nodes automatically build
trees from itself to all nodes:
Important properties:
• Shortest path tree based on link metrics
• No blocked links
• RPFC to eliminate loops
• Symmetric datapath between any two nodes
provides closed OAM system
• Unicast path now exists from every node to
every other node
3. Use IS-IS to advertise new
services communities of
interest
• Floods topology, MAC and ISID information
to network
4. When nodes receive notice of a
new service AND they are on
the shortest path, update FDB
• ISID/Service specific entries
Vlan 20
Vlan 20
Vlan 20
A
B
C
12
© 2011 Avaya Inc. All rights reserved. 1313July 18
IEEE Plenary San
Francisco
13
Simulate a Large Network
<ottawa-s9300-6>d spb status
SPB Status:
mode SPBM, nodes 187, links 412, adj 6, ufib
372, mfib 45
© 2011 Avaya Inc. All rights reserved. 14
SPBm 802.1ah Mac-in-Mac Encapsulation
DA
SA
Payload
VLAN ID
DA
SA
Payload
C-VID
B-DA
B-SA
B-VID
802.1Q
802.1ah
Provider
Backbone
Bridges
Legend:
SA = Source MAC address
DA = Dest. MAC address
VID = VLAN ID
C-VID = Customer VID
I-SID = 24 Bit Service ID
B-VID = Backbone VID
B-DA = Backbone DA
B-SA = Backbone SA
I-SID
Tunnel Identifiers
Service Identifiers
Customer
VLANs
DA
SA
Payload
Customer
with
No VLAN Tags
or
Consolidated Service and Tunnel
Simplified and integrated forwarding
like MPLS without the complexity
© 2011 Avaya Inc. All rights reserved. 1515
Transparent Networking
TRILL & SPB Lookup Compared
Outer-Eth
Z | B
Rbridge A
TRILL
Nickname TA
Router B Router C Router D Rbridge E
TRILL
Nickname TE
Host X Host Y
MAC Z MAC B MAC C MAC D MAC N MAC F MAC H MAC I
TRILL
N | F
Host X Host Y
SPB A SPB B SPB C SPB D SPB E
A | E
Eth
Route Lookup
TRILL
SPB
SPB is much simpler, lower cost, OAM transparent Solution
EthMPLS
C | D H | I
Payload
L2VSN
TA | TEX | Y
X
Y
Inner-Eth
Outer-EthTRILLPayload
TA | TEX | Y
Inner-Eth
Outer-EthTRILLPayload
TA | TEX | Y
Inner-Eth
Outer-EthTRILLPayload
TA | TEX | Y
Inner-Eth
X
Y
X | Y
FCS
FCS’
FCS’’
FCS’’’
FCS
Eth
A | E
Eth
X | YFCS
IP
IP/L3VSN
Only small scale L2
Full set of L2 and L3 services
© 2011 Avaya Inc. All rights reserved. 1616
Transparent Networking
MPLS & SPB Lookup Compared
Outer-Eth
Z | B
Router A Router B Router C Router D Router E
Host X Host Y
MAC Z MAC B MAC C MAC D MAC N MAC F MAC H MAC I
N | F
Host X Host Y
SPB A SPB B SPB C SPB D SPB E
A | E
Eth
Route Lookup
MPLS – creates a LSP
SPB – creates a ESP
SPB is much simpler, lower cost, OAM transparent Solution
C | D H | I
Payload
Payload
24
X
Y
Payload
Payload
Outer-EthPayload Label
X
Y
32
11
11
Outer-EthLabel
Outer-EthLabel
Outer-EthLabel
© 2011 Avaya Inc. All rights reserved. 17
SPB
The power of Service Awareness
Host->VLAN->L2VSN->L3VSN
VSI’s
VRF’s
VLAN’s
Example Configuration of Service Mapping
 Simplified Troubleshooting
 VSN connectivity fully redundant
 Regardless of edge switch model
 Hosts mapped to VLANs
 VLANs mapped to VSNs
 Multi-pathing – symmetric flows
Simple Management
© 2011 Avaya Inc. All rights reserved. 1818
What Problems Are We Solving?
Fixing the problems of STP, MSTP, MMRP, etc…
Need to improve efficiency and flexibility
 Using All Paths and Bandwidth
 Fast Convergence
 MAC Explosion
 Simplified Change Control
Efficiency
 Physical Topology Independent
 Service Virtualization L2/L3
 Networks Where Needed
 Small to Large Networks
Flexibility
Private Cloud
© 2011 Avaya Inc. All rights reserved. 1919
Shortest Path Bridging – SPBm
Ease of Setup
 Create Backbone VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
 Place NNI ports in Backbone VLAN
 Enable ISIS
 Create VSN i-sid end points
associated with VLAN or VRF
 Services are Discovered
 Network is operational
 Backbone is Discovered
© 2011 Avaya Inc. All rights reserved. 2020
Shortest Path Bridging – SPBm
Network Virtualization and Operational Simplification
 Enable flexible Virtual Services
Networks (VSNs) at L2 or L3
quickly and easily
 Define VSN end points in the
network – a virtual “plug-and-
play” approach
 No hop-by-hop provisioning or
configuration to establish end-to-
end services
 Elimination of Spanning Tree and
its associated issues – no
blocked or orphaned links as
when using Spanning Tree
 Fast network convergence ~ 200
milliseconds
Dest
MAC
Src
MAC
VLAN
ID
Data
User data
Dest
MAC
Src
MAC
Service
ID Yel
Dest
MAC
Src
MAC
VLAN
ID
Data
User data encapsulated into the backbone
Dest
MAC
Src
MAC
Service
ID Red
Dest
MAC
Src
MAC
VLAN
ID
Data
D-MAC S-MAC VLAN Data
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
© 2011 Avaya Inc. All rights reserved. 21
SPB Service Types
Layer 2 Virtual Services Network
VLAN
200
VLAN
200
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
802.1Q
VLAN Tagged
VLAN
200
VLAN
200
I-SID
200
I-SID
200
VLAN
120
VLAN
150
VLAN
150
I-SID
110
VLAN
120
I-SID
110
• Transparent Layer 2 VLAN extension of services across SPB domain
• Simply associate I-SID to VLAN in BEB Switches
© 2011 Avaya Inc. All rights reserved. 22
SPB Service Types
Layer 3 Virtual Services Network
VLAN
10
VLAN
10
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
802.1Q
VLAN Tagged
VLAN
200
VLAN
200
VLAN
120
VLAN
120
• Simply associate I-SID to VRF Instance in BEB Switches
• SPB IPVPN reachability TLV 184 used to advertise IPVPN reachability among ISIS
peer switches within the SPB domain
I-SID
500
I-SID
500
© 2011 Avaya Inc. All rights reserved. 23
SPB Service Types
Inter-VSN Routing
VLAN
10
VLAN
200
VLAN
10
VLAN
10
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
802.1Q
VLAN Tagged
VLAN
200
VLAN
200
I-SID
10
I-SID
10
I-SID
200
I-SID
200
VLAN
100
VLAN
150
I-SID
110
I-SID
110
• IP Route from any Layer 2 Virtual Services Network to other Layer 2 VSNs
VLAN
150
VRF
Virtual Router
Instance
© 2011 Avaya Inc. All rights reserved. 24
SPB Service Types
IP Shortcuts (Route propagation into ISIS)
VLAN
10
VLAN
10
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
802.1Q
VLAN Tagged
VLAN
200
VLAN
200
VLAN
120
VLAN
120
VLAN
100
VLAN
100
Route redistribution
across ISIS
• Direct IP forwarding over IS-IS
• Simply enable IS-IS Redistribution (direct – rip – ospf – static – bgp)
© 2011 Avaya Inc. All rights reserved. 25
SPB Service Types
BGP IP-VPN over IS-IS
VLAN
10
VLAN
10
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
802.1Q
VLAN Tagged
VLAN
200
VLAN
200
VLAN
120
VLAN
120
VLAN
100
VLAN
100
• BGP-Based IP-VPNs and IP VPN Lite allow hub and spoke configuration by
import and export Route Target values
GRT/NRE Over IS-IS
iBGP Peering CLIPCLIP
© 2011 Avaya Inc. All rights reserved. 26
SPB Services
SMLT Switch Clustering Interoperability
VLAN
200
VLAN
200
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
VLAN
200
I-SID
200
• All L2 VSN and L3 VSN and IP VPN Services Supported
• Full backwards compatibility with Avaya SMLT-Based Switch Clustering
VLAN
200
VLAN
200
I-SID
200
I-SID
200
© 2011 Avaya Inc. All rights reserved. 27
SPB Services
Layer 2 and Layer 3 QoS and Policing
VLAN
10
VLAN
10
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
VLAN
200
VLAN
200
VLAN
120
VLAN
120
• Map Port/VLAN/VSN markings to 802.1p Layer 2 marking used throughout
SPB backbone
I-SID
500
I-SID
500
Port
Policer
Edge port
Trusted or
Untrusted
Full 802.1p and IP DiffServ QoS Support
Map ingress DSCP or 802.1p markings
to SPB Backbone 802.1p QoS markings
Queue based on 802.1p priority within SPB backbone
© 2011 Avaya Inc. All rights reserved. 2828
802.1ag CFM
– Maintenance hierarchies
– Layer 2 Ping
– Layer 2 Traceroute
– Layer 2 Tracetree
Network Discovery
– Service (e.g., all BEBs supporting
common service instance)
– Network (e.g. all devices common
to a domain)
Y.1731 Performance Monitoring
– Frame Delay
– Frame Delay Variation
– Frame Loss
Edge
Switch
Edge
Switch
Transit
Switch
Adapt Adapt
NNI
Link
NNI
Link
UNI
Link
UNI
Link
Link OAM
Trunk OAM
Service OAM (SID)
customer demarcs
Link OAM Link OAM
Trunk
802.1ag
802.1ag
Service
802.1ag Maintenance levels/hierarchy
Conceptually:
-monitor the trunk or the service
… or both
Built-in and on-switch
IEEE 802.1ag CFM – Connectivity Fault Management
and ITU Y.1731 Performance Management
28
© 2011 Avaya Inc. All rights reserved. 2929
IEEE 802.1ag Overview and Support
Why implement it?
 IEEE 802.1ag provides connectivity fault management previously not
available in ethernet networks:
– Fault Detection (failures)
– Fault Verification (misconfigurations)
– Fault Isolation (troubleshooting)
– Fault Notification (SNMP traps)
 CFM can be provided at the Ethernet service and trunk layers:
– Service layer : Client (C-VLAN)
– Trunk layer : B-VLAN, Trunk, Port
29
© 2011 Avaya Inc. All rights reserved. 3030
Data Center Connectivity
Case Study: Server Deployment with VMware & VMotion
Data Center 1
Core
iSCSI Array
Data Center 2
Modular Switch
Net Mgmt
Virtualized ServerStackable Switch
Scenario
• HR needs three new web servers
• The traffic flowing between these servers and
other servers must be completed separated
from the rest of the
organization
• VMware/Vmotion
required
• DC1 – 2 servers
• DC2 – 1 server
VRF VRF
VRF
Return
SPB VPN connectivity
established end-to-end
Define I-SID end point
Define I-SID end point
Define I-SID end point
© 2011 Avaya Inc. All rights reserved. 31
End-to-End Provisioning for VMware Systems
Automated End-to-End Provisioning
• VM instances are
provisioned
through VCenter
• UCM/Virtual
Provisioning
Service recognizes
through API that
new VMWare
instance on virtual
Port Group is being
configured and
provisions network
connectivity
accordingly
Virtual Switch
Port group 106
Virtual Switch
Port Group 20
ISID 10
VLAN 10
Port Group
10
ISID 20
Vlan 20
Port Group
20
1/1 2/14
1/14 2/5
VCenter
VPS
NIC2NIC1
VM instances
API
Virtual Switch
Port group 106
Virtual Switch
Port Group 20
ISID 10
VLAN 10
Port Group
10
ISID 20
Vlan 20
Port Group
20
1/1 2/14
1/14 2/5
Core
NIC2NIC1
VM instances
Core
Preconfigured
Rule Set for binding:
Server-Type: “Production“
Port: any
VLAN: 10
Isid: isid=200
Learns topology
Link Level
Topology Protocol
Link Level
Topology Protocol
Shortest path bridging 802.1 aq

Shortest path bridging 802.1 aq

  • 1.
  • 2.
    © 2011 AvayaInc. All rights reserved. 22 Values of 802.1aq SPB  Plug&play services enabled by end-point provisioning  Operational Simplicity  Increased network uptime  Predictable network behavior  Optimal network bandwidth utilization  Maximum network design flexibility  Immune to errors introduced by end-user 2
  • 3.
    © 2011 AvayaInc. All rights reserved. 3 Shortest Path Bridging – Network Virtualization Standard Year Name Loopfree topology by: Service ID‘s Provisioning Virtualization of IEEE 802.1Q 1998 Virtual Lans (VLAN Tagging) Spanning Tree SMLT 4096 Edge and Core Layer 2 IEEE 802.1ad 2005 Provider Bridging (QinQ) Spanning Tree SMLT 4096x4096 Edge and Core Layer 2 IEEE 802.1ah 2008 Provider Backbone Bridging (MacInMac) Spanning Tree SMLT 16 Mil. Edge and Core Layer 2 IEEE 802.1aq 2011 Shortest Path Bridging (SPBm) Link-State- Protocol (IS-IS) 16 Mil. Only Service Access Points IEEE: Layer 2 IETF draft: Layer 3 Unicast & Multicast 802.1Qbg 2012+ Edge Virtual Bridging VEPA & VEB QnQ Attachement s to ISIDs & VLANs VDP (LLDP) discovery of VM‘s VM attachment to the network Ethernet = IEEE Time
  • 4.
    © 2011 AvayaInc. All rights reserved. 44 Spanning Tree IGP Tradition ? Which would you rather do? GVRP PIM-SM IGP mLDP Signal after convergence Compute Disruption Unicast FIB Multicast FIB IGP Unicast & Multicast FIB BGP
  • 5.
    © 2011 AvayaInc. All rights reserved. 55 Virtualization Technology Comparison MPLS versus VENA e.g. PIM Protocol Infrastructure e.g. RIP/OSPF Protocol Infrastructure e.g. 802.1q/D Protocol Infrastructure e.g. RFC4364 Protocol Infrastructure e.g. Draft Rosen Protocol Infrastructure 802.1Q (VLAN) 802.1D (Spanning Tree) SONET, SDH, Ethernet, etc… UC IGP (IS-IS or OSPF) Layer 3 Unicast Service Layer 3 Multicast Service Layer 3 Virtualized Multicast Service Physical Infrastructure Layer 3 Virtualized Multicast Service Top–DownVerticaldependency Layer 3 Virtualized Unicast Service Layer 3 Virtualized Unicast Service Layer 3 Multicast Service Layer 3 Unicast Service Layer 2 Virtualized Service Layer 2 Virtualized Service IP/SPB, SPBm/SPBm Protocol Infrastructure SONET, SDH, Ethernet, etc… Physical Infrastructure Horizontally Independent Connectivity Services independent from Infrastructure 5
  • 6.
    © 2011 AvayaInc. All rights reserved. 66 The Benefits of Virtualization Server Virtualization Allows aggregation of multiple independent virtual servers to exist on a physical server Network Virtualization Decouples the physical infrastructure from the connectivity services making the network adaptive and dynamic with simple one-touch provisioning Network Virtualization enabled via Shortest Path Bridging Compute Access Data Center Core Campus Core Distribution Layer Access Layer
  • 7.
    © 2011 AvayaInc. All rights reserved. 77 Understanding Shortest Path Bridging  An IEEE technology using MAC-in-MAC encapsulation – Evolved from Provider Backbone Bridging (802.1ah) – Deployed around the world providing Carrier metro service  Standards-based OA&M (802.1ag) – Configuration and Fault Management tools built-in – Deployed around the world testing SLA of Metro Ethernet  Eliminates the need for multiple protocols in the core – Uses a single Ethernet-based link state protocol (IS-IS) providing virtualization services at both Layer 2 and 3 SPB is an essential component for the Avaya VENA implementation 7
  • 8.
    © 2011 AvayaInc. All rights reserved. 8 8 Shortest Path Bridging (SPB) IEEE 802.1aq & RFC 6329 SPB Shortest Path Tree from Node A Node A 802.1ah interfaces SPB Network PB Network MPLS Network CPE SPB/MPLS Interworking SPB Shortest Path Tree for Green Service from Node A SPB is a Spanning-Tree Protocol replacement for Ethernet and introduces: Network Efficiency - No blocked ports Fast resiliency - Network reconvergence in 100s of milliseconds Simplicity - Well-known networking paradigm (link state) Customized Broadcast - Broadcast only to need-to-know nodes One-touch provisioning - Dynamic auto-discovery of end-points
  • 9.
    © 2011 AvayaInc. All rights reserved. 99 The Basics of How SPBm Works ISIS ISIS ISIS ISISISIS ISIS ISIS ISIS ISIS ISIS ISIS CREATE ISID=100 1. Discover network topology • IS-IS natural L2 routing protocol • Hierarchy built in for scaling 2. IS-IS nodes automatically build trees from themselves to all nodes: Important properties: • Shortest path tree based on link metrics • No blocked links • RPFC to eliminate loops • Symmetric datapath between any two nodes provides closed OAM system • unicast path now exists from every node to every other node 3. Use IS-IS to advertise new services communities of interest • Floods topology, MAC and ISID information to network 4. When nodes receive notice of a new service AND they are on the shortest path, update FDB • ISID/Service specific entries ISID=100 #config vlan 20 isid 100 CLI applied to edge switch only Vlan 20 Vlan 20 Vlan 20 100 100100 100 100 100 100 100 100 100 A B C 9
  • 10.
    © 2011 AvayaInc. All rights reserved. 1010 The Basics of How SPBm Works ISIS ISIS ISIS ISISISIS ISIS ISIS ISIS ISIS ISIS ISIS CREATE ISID=100 1. Discover network topology • IS-IS natural L2 routing protocol • Hierarchy built in for scaling 2. IS-IS nodes automatically build trees from themselves to all nodes: Important properties: • Shortest path tree based on link metrics • No blocked links • RPFC to eliminate loops • Symmetric datapath between any two nodes provides closed OAM system • Unicast path now exists from every node to every other node 3. Use IS-IS to advertise new services communities of interest • Floods topology, MAC and ISID information to network 4. When nodes receive notice of a new service AND they are on the shortest path, update FDB • ISID/Service specific entries Vlan 20 Vlan 20 Vlan 20 ISID=100 #config vlan 20 isid 100 CLI applied to edge switch only A B C 10
  • 11.
    © 2011 AvayaInc. All rights reserved. 1111 The Basics of How SPBm Works ISIS ISIS ISIS ISISISIS ISIS ISIS ISIS ISIS ISIS ISIS CREATE ISID=100 1. Discover network topology • IS-IS natural L2 routing protocol • Hierarchy built in for scaling 2. IS-IS nodes automatically build trees from themselves to all nodes: Important properties: • Shortest path tree based on link metrics • No blocked links • RPFC to eliminate loops • Symmetric datapath between any two nodes provides closed OAM system • Unicast path now exists from every node to every other node 3. Use IS-IS to advertise new services communities of interest • Floods topology, MAC and ISID information to network 4. When nodes receive notice of a new service AND they are on the shortest path, update FDB • ISID/Service specific entries Vlan 20 Vlan 20 Vlan 20 A B C 11
  • 12.
    © 2011 AvayaInc. All rights reserved. 1212 The Basics of How SPBm Works ISIS ISIS ISIS ISISISIS ISIS ISIS ISIS ISIS ISIS ISIS CREATE ISID=100 1. Discover network topology • IS-IS natural L2 routing protocol • Hierarchy built in for scaling 2. IS-IS nodes automatically build trees from itself to all nodes: Important properties: • Shortest path tree based on link metrics • No blocked links • RPFC to eliminate loops • Symmetric datapath between any two nodes provides closed OAM system • Unicast path now exists from every node to every other node 3. Use IS-IS to advertise new services communities of interest • Floods topology, MAC and ISID information to network 4. When nodes receive notice of a new service AND they are on the shortest path, update FDB • ISID/Service specific entries Vlan 20 Vlan 20 Vlan 20 A B C 12
  • 13.
    © 2011 AvayaInc. All rights reserved. 1313July 18 IEEE Plenary San Francisco 13 Simulate a Large Network <ottawa-s9300-6>d spb status SPB Status: mode SPBM, nodes 187, links 412, adj 6, ufib 372, mfib 45
  • 14.
    © 2011 AvayaInc. All rights reserved. 14 SPBm 802.1ah Mac-in-Mac Encapsulation DA SA Payload VLAN ID DA SA Payload C-VID B-DA B-SA B-VID 802.1Q 802.1ah Provider Backbone Bridges Legend: SA = Source MAC address DA = Dest. MAC address VID = VLAN ID C-VID = Customer VID I-SID = 24 Bit Service ID B-VID = Backbone VID B-DA = Backbone DA B-SA = Backbone SA I-SID Tunnel Identifiers Service Identifiers Customer VLANs DA SA Payload Customer with No VLAN Tags or Consolidated Service and Tunnel Simplified and integrated forwarding like MPLS without the complexity
  • 15.
    © 2011 AvayaInc. All rights reserved. 1515 Transparent Networking TRILL & SPB Lookup Compared Outer-Eth Z | B Rbridge A TRILL Nickname TA Router B Router C Router D Rbridge E TRILL Nickname TE Host X Host Y MAC Z MAC B MAC C MAC D MAC N MAC F MAC H MAC I TRILL N | F Host X Host Y SPB A SPB B SPB C SPB D SPB E A | E Eth Route Lookup TRILL SPB SPB is much simpler, lower cost, OAM transparent Solution EthMPLS C | D H | I Payload L2VSN TA | TEX | Y X Y Inner-Eth Outer-EthTRILLPayload TA | TEX | Y Inner-Eth Outer-EthTRILLPayload TA | TEX | Y Inner-Eth Outer-EthTRILLPayload TA | TEX | Y Inner-Eth X Y X | Y FCS FCS’ FCS’’ FCS’’’ FCS Eth A | E Eth X | YFCS IP IP/L3VSN Only small scale L2 Full set of L2 and L3 services
  • 16.
    © 2011 AvayaInc. All rights reserved. 1616 Transparent Networking MPLS & SPB Lookup Compared Outer-Eth Z | B Router A Router B Router C Router D Router E Host X Host Y MAC Z MAC B MAC C MAC D MAC N MAC F MAC H MAC I N | F Host X Host Y SPB A SPB B SPB C SPB D SPB E A | E Eth Route Lookup MPLS – creates a LSP SPB – creates a ESP SPB is much simpler, lower cost, OAM transparent Solution C | D H | I Payload Payload 24 X Y Payload Payload Outer-EthPayload Label X Y 32 11 11 Outer-EthLabel Outer-EthLabel Outer-EthLabel
  • 17.
    © 2011 AvayaInc. All rights reserved. 17 SPB The power of Service Awareness Host->VLAN->L2VSN->L3VSN VSI’s VRF’s VLAN’s Example Configuration of Service Mapping  Simplified Troubleshooting  VSN connectivity fully redundant  Regardless of edge switch model  Hosts mapped to VLANs  VLANs mapped to VSNs  Multi-pathing – symmetric flows Simple Management
  • 18.
    © 2011 AvayaInc. All rights reserved. 1818 What Problems Are We Solving? Fixing the problems of STP, MSTP, MMRP, etc… Need to improve efficiency and flexibility  Using All Paths and Bandwidth  Fast Convergence  MAC Explosion  Simplified Change Control Efficiency  Physical Topology Independent  Service Virtualization L2/L3  Networks Where Needed  Small to Large Networks Flexibility Private Cloud
  • 19.
    © 2011 AvayaInc. All rights reserved. 1919 Shortest Path Bridging – SPBm Ease of Setup  Create Backbone VLAN VLAN VLAN VLAN VLAN VLAN VLAN VLAN VLAN VLAN  Place NNI ports in Backbone VLAN  Enable ISIS  Create VSN i-sid end points associated with VLAN or VRF  Services are Discovered  Network is operational  Backbone is Discovered
  • 20.
    © 2011 AvayaInc. All rights reserved. 2020 Shortest Path Bridging – SPBm Network Virtualization and Operational Simplification  Enable flexible Virtual Services Networks (VSNs) at L2 or L3 quickly and easily  Define VSN end points in the network – a virtual “plug-and- play” approach  No hop-by-hop provisioning or configuration to establish end-to- end services  Elimination of Spanning Tree and its associated issues – no blocked or orphaned links as when using Spanning Tree  Fast network convergence ~ 200 milliseconds Dest MAC Src MAC VLAN ID Data User data Dest MAC Src MAC Service ID Yel Dest MAC Src MAC VLAN ID Data User data encapsulated into the backbone Dest MAC Src MAC Service ID Red Dest MAC Src MAC VLAN ID Data D-MAC S-MAC VLAN Data VLAN VLAN VLAN VLAN VLAN VLAN VLAN VLAN VLAN
  • 21.
    © 2011 AvayaInc. All rights reserved. 21 SPB Service Types Layer 2 Virtual Services Network VLAN 200 VLAN 200 Non-SPB Switch Non-SPB Switch BEB Switch BEB Switch BCB Switch BCB Switch SPBm ISIS Domain 802.1Q VLAN Tagged 802.1Q VLAN Tagged VLAN 200 VLAN 200 I-SID 200 I-SID 200 VLAN 120 VLAN 150 VLAN 150 I-SID 110 VLAN 120 I-SID 110 • Transparent Layer 2 VLAN extension of services across SPB domain • Simply associate I-SID to VLAN in BEB Switches
  • 22.
    © 2011 AvayaInc. All rights reserved. 22 SPB Service Types Layer 3 Virtual Services Network VLAN 10 VLAN 10 Non-SPB Switch Non-SPB Switch BEB Switch BEB Switch BCB Switch BCB Switch SPBm ISIS Domain 802.1Q VLAN Tagged 802.1Q VLAN Tagged VLAN 200 VLAN 200 VLAN 120 VLAN 120 • Simply associate I-SID to VRF Instance in BEB Switches • SPB IPVPN reachability TLV 184 used to advertise IPVPN reachability among ISIS peer switches within the SPB domain I-SID 500 I-SID 500
  • 23.
    © 2011 AvayaInc. All rights reserved. 23 SPB Service Types Inter-VSN Routing VLAN 10 VLAN 200 VLAN 10 VLAN 10 Non-SPB Switch Non-SPB Switch BEB Switch BEB Switch BEB Switch BCB Switch SPBm ISIS Domain 802.1Q VLAN Tagged 802.1Q VLAN Tagged VLAN 200 VLAN 200 I-SID 10 I-SID 10 I-SID 200 I-SID 200 VLAN 100 VLAN 150 I-SID 110 I-SID 110 • IP Route from any Layer 2 Virtual Services Network to other Layer 2 VSNs VLAN 150 VRF Virtual Router Instance
  • 24.
    © 2011 AvayaInc. All rights reserved. 24 SPB Service Types IP Shortcuts (Route propagation into ISIS) VLAN 10 VLAN 10 Non-SPB Switch Non-SPB Switch BEB Switch BEB Switch BCB Switch BCB Switch SPBm ISIS Domain 802.1Q VLAN Tagged 802.1Q VLAN Tagged VLAN 200 VLAN 200 VLAN 120 VLAN 120 VLAN 100 VLAN 100 Route redistribution across ISIS • Direct IP forwarding over IS-IS • Simply enable IS-IS Redistribution (direct – rip – ospf – static – bgp)
  • 25.
    © 2011 AvayaInc. All rights reserved. 25 SPB Service Types BGP IP-VPN over IS-IS VLAN 10 VLAN 10 Non-SPB Switch Non-SPB Switch BEB Switch BEB Switch BCB Switch BCB Switch SPBm ISIS Domain 802.1Q VLAN Tagged 802.1Q VLAN Tagged VLAN 200 VLAN 200 VLAN 120 VLAN 120 VLAN 100 VLAN 100 • BGP-Based IP-VPNs and IP VPN Lite allow hub and spoke configuration by import and export Route Target values GRT/NRE Over IS-IS iBGP Peering CLIPCLIP
  • 26.
    © 2011 AvayaInc. All rights reserved. 26 SPB Services SMLT Switch Clustering Interoperability VLAN 200 VLAN 200 Non-SPB Switch Non-SPB Switch BEB Switch BEB Switch BCB Switch BCB Switch SPBm ISIS Domain 802.1Q VLAN Tagged VLAN 200 I-SID 200 • All L2 VSN and L3 VSN and IP VPN Services Supported • Full backwards compatibility with Avaya SMLT-Based Switch Clustering VLAN 200 VLAN 200 I-SID 200 I-SID 200
  • 27.
    © 2011 AvayaInc. All rights reserved. 27 SPB Services Layer 2 and Layer 3 QoS and Policing VLAN 10 VLAN 10 Non-SPB Switch Non-SPB Switch BEB Switch BEB Switch BCB Switch BCB Switch SPBm ISIS Domain VLAN 200 VLAN 200 VLAN 120 VLAN 120 • Map Port/VLAN/VSN markings to 802.1p Layer 2 marking used throughout SPB backbone I-SID 500 I-SID 500 Port Policer Edge port Trusted or Untrusted Full 802.1p and IP DiffServ QoS Support Map ingress DSCP or 802.1p markings to SPB Backbone 802.1p QoS markings Queue based on 802.1p priority within SPB backbone
  • 28.
    © 2011 AvayaInc. All rights reserved. 2828 802.1ag CFM – Maintenance hierarchies – Layer 2 Ping – Layer 2 Traceroute – Layer 2 Tracetree Network Discovery – Service (e.g., all BEBs supporting common service instance) – Network (e.g. all devices common to a domain) Y.1731 Performance Monitoring – Frame Delay – Frame Delay Variation – Frame Loss Edge Switch Edge Switch Transit Switch Adapt Adapt NNI Link NNI Link UNI Link UNI Link Link OAM Trunk OAM Service OAM (SID) customer demarcs Link OAM Link OAM Trunk 802.1ag 802.1ag Service 802.1ag Maintenance levels/hierarchy Conceptually: -monitor the trunk or the service … or both Built-in and on-switch IEEE 802.1ag CFM – Connectivity Fault Management and ITU Y.1731 Performance Management 28
  • 29.
    © 2011 AvayaInc. All rights reserved. 2929 IEEE 802.1ag Overview and Support Why implement it?  IEEE 802.1ag provides connectivity fault management previously not available in ethernet networks: – Fault Detection (failures) – Fault Verification (misconfigurations) – Fault Isolation (troubleshooting) – Fault Notification (SNMP traps)  CFM can be provided at the Ethernet service and trunk layers: – Service layer : Client (C-VLAN) – Trunk layer : B-VLAN, Trunk, Port 29
  • 30.
    © 2011 AvayaInc. All rights reserved. 3030 Data Center Connectivity Case Study: Server Deployment with VMware & VMotion Data Center 1 Core iSCSI Array Data Center 2 Modular Switch Net Mgmt Virtualized ServerStackable Switch Scenario • HR needs three new web servers • The traffic flowing between these servers and other servers must be completed separated from the rest of the organization • VMware/Vmotion required • DC1 – 2 servers • DC2 – 1 server VRF VRF VRF Return SPB VPN connectivity established end-to-end Define I-SID end point Define I-SID end point Define I-SID end point
  • 31.
    © 2011 AvayaInc. All rights reserved. 31 End-to-End Provisioning for VMware Systems Automated End-to-End Provisioning • VM instances are provisioned through VCenter • UCM/Virtual Provisioning Service recognizes through API that new VMWare instance on virtual Port Group is being configured and provisions network connectivity accordingly Virtual Switch Port group 106 Virtual Switch Port Group 20 ISID 10 VLAN 10 Port Group 10 ISID 20 Vlan 20 Port Group 20 1/1 2/14 1/14 2/5 VCenter VPS NIC2NIC1 VM instances API Virtual Switch Port group 106 Virtual Switch Port Group 20 ISID 10 VLAN 10 Port Group 10 ISID 20 Vlan 20 Port Group 20 1/1 2/14 1/14 2/5 Core NIC2NIC1 VM instances Core Preconfigured Rule Set for binding: Server-Type: “Production“ Port: any VLAN: 10 Isid: isid=200 Learns topology Link Level Topology Protocol Link Level Topology Protocol