Shortest path bridging 802.1 aq

1. Shortest Path Bridging 802.1AQ

2. © 2011 Avaya Inc. All rights reserved. 22
Values of 802.1aq SPB
 Plug&play services enabled by end-point provisioning
 Operational Simplicity
 Increased network uptime
 Predictable network behavior
 Optimal network bandwidth utilization
 Maximum network design flexibility
 Immune to errors introduced by end-user
2

3. © 2011 Avaya Inc. All rights reserved. 3
Shortest Path Bridging – Network Virtualization
Standard Year Name Loopfree
topology by:
Service ID‘s Provisioning Virtualization
of
IEEE
802.1Q
1998 Virtual Lans
(VLAN Tagging)
Spanning Tree
SMLT
4096 Edge and Core Layer 2
IEEE
802.1ad
2005 Provider
Bridging
(QinQ)
Spanning Tree
SMLT
4096x4096 Edge and Core Layer 2
IEEE
802.1ah
2008 Provider
Backbone
Bridging
(MacInMac)
Spanning Tree
SMLT
16 Mil. Edge and Core Layer 2
IEEE
802.1aq
2011 Shortest Path
Bridging
(SPBm)
Link-State-
Protocol (IS-IS)
16 Mil. Only Service
Access Points
IEEE: Layer 2
IETF draft:
Layer 3 Unicast
& Multicast
802.1Qbg 2012+ Edge Virtual
Bridging
VEPA & VEB QnQ
Attachement
s to ISIDs &
VLANs
VDP (LLDP)
discovery of
VM‘s
VM attachment
to the network
Ethernet = IEEE
Time

4. © 2011 Avaya Inc. All rights reserved. 44
Spanning Tree IGP
Tradition
?
Which would you rather do?
GVRP PIM-SM
IGP
mLDP
Signal after convergence Compute
Disruption
Unicast FIB
Multicast FIB
IGP
Unicast & Multicast FIB
BGP

5. © 2011 Avaya Inc. All rights reserved. 55
Virtualization Technology Comparison
MPLS versus VENA
e.g. PIM
Protocol
Infrastructure
e.g. RIP/OSPF
Protocol
Infrastructure
e.g. 802.1q/D
Protocol
Infrastructure
e.g. RFC4364
Protocol
Infrastructure
e.g. Draft Rosen
Protocol
Infrastructure
802.1Q
(VLAN)
802.1D
(Spanning Tree)
SONET, SDH,
Ethernet, etc…
UC IGP
(IS-IS or OSPF)
Layer 3 Unicast
Service
Layer 3 Multicast
Service
Layer 3 Virtualized
Multicast Service
Physical
Infrastructure
Layer 3
Virtualized
Multicast
Service
Top–DownVerticaldependency
Layer 3 Virtualized
Unicast Service
Layer 3
Virtualized
Unicast
Service
Layer 3
Multicast
Service
Layer 3
Unicast
Service
Layer 2
Virtualized
Service
Layer 2
Virtualized
Service IP/SPB, SPBm/SPBm
Protocol Infrastructure
SONET, SDH,
Ethernet, etc…
Physical
Infrastructure
Horizontally Independent
Connectivity Services independent from Infrastructure
5

6. © 2011 Avaya Inc. All rights reserved. 66
The Benefits of Virtualization
Server Virtualization
Allows aggregation of multiple
independent virtual servers to exist
on a physical server
Network Virtualization
Decouples the physical infrastructure
from the connectivity services making
the network adaptive and dynamic
with simple one-touch provisioning
Network Virtualization enabled via Shortest Path Bridging
Compute
Access
Data Center
Core
Campus
Core
Distribution
Layer
Access
Layer

7. © 2011 Avaya Inc. All rights reserved. 77
Understanding Shortest Path Bridging
 An IEEE technology using MAC-in-MAC encapsulation
– Evolved from Provider Backbone Bridging (802.1ah)
– Deployed around the world providing Carrier metro service
 Standards-based OA&M (802.1ag)
– Configuration and Fault Management tools built-in
– Deployed around the world testing SLA of Metro Ethernet
 Eliminates the need for multiple protocols in the core
– Uses a single Ethernet-based link state protocol (IS-IS)
providing virtualization services at both Layer 2 and 3
SPB is an essential component for the Avaya VENA implementation
7

8. © 2011 Avaya Inc. All rights reserved. 8 8
Shortest Path Bridging (SPB)
IEEE 802.1aq & RFC 6329
SPB Shortest Path
Tree from Node A
Node A
802.1ah
interfaces
SPB Network
PB
Network
MPLS
Network
CPE
SPB/MPLS
Interworking
SPB Shortest Path Tree for
Green Service from Node A
SPB is a Spanning-Tree Protocol replacement for Ethernet and introduces:
Network Efficiency - No blocked ports
Fast resiliency - Network reconvergence in 100s of milliseconds
Simplicity - Well-known networking paradigm (link state)
Customized Broadcast - Broadcast only to need-to-know nodes
One-touch provisioning - Dynamic auto-discovery of end-points

9. © 2011 Avaya Inc. All rights reserved. 99
The Basics of How SPBm Works
ISIS
ISIS ISIS
ISISISIS
ISIS
ISIS
ISIS ISIS
ISIS
ISIS
CREATE
ISID=100
1. Discover network topology
• IS-IS natural L2 routing protocol
• Hierarchy built in for scaling
2. IS-IS nodes automatically build
trees from themselves to all
nodes:
Important properties:
• Shortest path tree based on link metrics
• No blocked links
• RPFC to eliminate loops
• Symmetric datapath between any two nodes
provides closed OAM system
• unicast path now exists from every node to
every other node
3. Use IS-IS to advertise new
services communities of interest
• Floods topology, MAC and ISID information to
network
4. When nodes receive notice of a
new service AND they are on the
shortest path, update FDB
• ISID/Service specific entries ISID=100
#config vlan 20 isid 100
CLI applied to edge switch only
Vlan 20
Vlan 20
Vlan 20
100
100100
100
100
100
100
100
100
100
A
B
C
9

10. © 2011 Avaya Inc. All rights reserved. 1010
The Basics of How SPBm Works
ISIS
ISIS ISIS
ISISISIS
ISIS
ISIS
ISIS ISIS
ISIS
ISIS
CREATE
ISID=100
1. Discover network topology
• IS-IS natural L2 routing protocol
• Hierarchy built in for scaling
2. IS-IS nodes automatically build
trees from themselves to all
nodes:
Important properties:
• Shortest path tree based on link metrics
• No blocked links
• RPFC to eliminate loops
• Symmetric datapath between any two nodes
provides closed OAM system
• Unicast path now exists from every node to
every other node
3. Use IS-IS to advertise new
services communities of
interest
• Floods topology, MAC and ISID information
to network
4. When nodes receive notice of a
new service AND they are on
the shortest path, update FDB
• ISID/Service specific entries
Vlan 20
Vlan 20
Vlan 20
ISID=100
#config vlan 20 isid 100
CLI applied to edge switch only
A
B
C
10

11. © 2011 Avaya Inc. All rights reserved. 1111
The Basics of How SPBm Works
ISIS
ISIS ISIS
ISISISIS
ISIS
ISIS
ISIS ISIS
ISIS
ISIS
CREATE
ISID=100
1. Discover network topology
• IS-IS natural L2 routing protocol
• Hierarchy built in for scaling
2. IS-IS nodes automatically build
trees from themselves to all
nodes:
Important properties:
• Shortest path tree based on link metrics
• No blocked links
• RPFC to eliminate loops
• Symmetric datapath between any two nodes
provides closed OAM system
• Unicast path now exists from every node to
every other node
3. Use IS-IS to advertise new
services communities of interest
• Floods topology, MAC and ISID information
to network
4. When nodes receive notice of a
new service AND they are on
the shortest path, update FDB
• ISID/Service specific entries
Vlan 20
Vlan 20
Vlan 20
A
B
C
11

12. © 2011 Avaya Inc. All rights reserved. 1212
The Basics of How SPBm Works
ISIS
ISIS ISIS
ISISISIS
ISIS
ISIS
ISIS ISIS
ISIS
ISIS
CREATE
ISID=100
1. Discover network topology
• IS-IS natural L2 routing protocol
• Hierarchy built in for scaling
2. IS-IS nodes automatically build
trees from itself to all nodes:
Important properties:
• Shortest path tree based on link metrics
• No blocked links
• RPFC to eliminate loops
• Symmetric datapath between any two nodes
provides closed OAM system
• Unicast path now exists from every node to
every other node
3. Use IS-IS to advertise new
services communities of
interest
• Floods topology, MAC and ISID information
to network
4. When nodes receive notice of a
new service AND they are on
the shortest path, update FDB
• ISID/Service specific entries
Vlan 20
Vlan 20
Vlan 20
A
B
C
12

13. © 2011 Avaya Inc. All rights reserved. 1313July 18
IEEE Plenary San
Francisco
13
Simulate a Large Network
<ottawa-s9300-6>d spb status
SPB Status:
mode SPBM, nodes 187, links 412, adj 6, ufib
372, mfib 45

14. © 2011 Avaya Inc. All rights reserved. 14
SPBm 802.1ah Mac-in-Mac Encapsulation
DA
SA
Payload
VLAN ID
DA
SA
Payload
C-VID
B-DA
B-SA
B-VID
802.1Q
802.1ah
Provider
Backbone
Bridges
Legend:
SA = Source MAC address
DA = Dest. MAC address
VID = VLAN ID
C-VID = Customer VID
I-SID = 24 Bit Service ID
B-VID = Backbone VID
B-DA = Backbone DA
B-SA = Backbone SA
I-SID
Tunnel Identifiers
Service Identifiers
Customer
VLANs
DA
SA
Payload
Customer
with
No VLAN Tags
or
Consolidated Service and Tunnel
Simplified and integrated forwarding
like MPLS without the complexity

15. © 2011 Avaya Inc. All rights reserved. 1515
Transparent Networking
TRILL & SPB Lookup Compared
Outer-Eth
Z | B
Rbridge A
TRILL
Nickname TA
Router B Router C Router D Rbridge E
TRILL
Nickname TE
Host X Host Y
MAC Z MAC B MAC C MAC D MAC N MAC F MAC H MAC I
TRILL
N | F
Host X Host Y
SPB A SPB B SPB C SPB D SPB E
A | E
Eth
Route Lookup
TRILL
SPB
SPB is much simpler, lower cost, OAM transparent Solution
EthMPLS
C | D H | I
Payload
L2VSN
TA | TEX | Y
X
Y
Inner-Eth
Outer-EthTRILLPayload
TA | TEX | Y
Inner-Eth
Outer-EthTRILLPayload
TA | TEX | Y
Inner-Eth
Outer-EthTRILLPayload
TA | TEX | Y
Inner-Eth
X
Y
X | Y
FCS
FCS’
FCS’’
FCS’’’
FCS
Eth
A | E
Eth
X | YFCS
IP
IP/L3VSN
Only small scale L2
Full set of L2 and L3 services

16. © 2011 Avaya Inc. All rights reserved. 1616
Transparent Networking
MPLS & SPB Lookup Compared
Outer-Eth
Z | B
Router A Router B Router C Router D Router E
Host X Host Y
MAC Z MAC B MAC C MAC D MAC N MAC F MAC H MAC I
N | F
Host X Host Y
SPB A SPB B SPB C SPB D SPB E
A | E
Eth
Route Lookup
MPLS – creates a LSP
SPB – creates a ESP
SPB is much simpler, lower cost, OAM transparent Solution
C | D H | I
Payload
Payload
24
X
Y
Payload
Payload
Outer-EthPayload Label
X
Y
32
11
11
Outer-EthLabel
Outer-EthLabel
Outer-EthLabel

17. © 2011 Avaya Inc. All rights reserved. 17
SPB
The power of Service Awareness
Host->VLAN->L2VSN->L3VSN
VSI’s
VRF’s
VLAN’s
Example Configuration of Service Mapping
 Simplified Troubleshooting
 VSN connectivity fully redundant
 Regardless of edge switch model
 Hosts mapped to VLANs
 VLANs mapped to VSNs
 Multi-pathing – symmetric flows
Simple Management

18. © 2011 Avaya Inc. All rights reserved. 1818
What Problems Are We Solving?
Fixing the problems of STP, MSTP, MMRP, etc…
Need to improve efficiency and flexibility
 Using All Paths and Bandwidth
 Fast Convergence
 MAC Explosion
 Simplified Change Control
Efficiency
 Physical Topology Independent
 Service Virtualization L2/L3
 Networks Where Needed
 Small to Large Networks
Flexibility
Private Cloud

19. © 2011 Avaya Inc. All rights reserved. 1919
Shortest Path Bridging – SPBm
Ease of Setup
 Create Backbone VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
 Place NNI ports in Backbone VLAN
 Enable ISIS
 Create VSN i-sid end points
associated with VLAN or VRF
 Services are Discovered
 Network is operational
 Backbone is Discovered

20. © 2011 Avaya Inc. All rights reserved. 2020
Shortest Path Bridging – SPBm
Network Virtualization and Operational Simplification
 Enable flexible Virtual Services
Networks (VSNs) at L2 or L3
quickly and easily
 Define VSN end points in the
network – a virtual “plug-and-
play” approach
 No hop-by-hop provisioning or
configuration to establish end-to-
end services
 Elimination of Spanning Tree and
its associated issues – no
blocked or orphaned links as
when using Spanning Tree
 Fast network convergence ~ 200
milliseconds
Dest
MAC
Src
MAC
VLAN
ID
Data
User data
Dest
MAC
Src
MAC
Service
ID Yel
Dest
MAC
Src
MAC
VLAN
ID
Data
User data encapsulated into the backbone
Dest
MAC
Src
MAC
Service
ID Red
Dest
MAC
Src
MAC
VLAN
ID
Data
D-MAC S-MAC VLAN Data
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN
VLAN

21. © 2011 Avaya Inc. All rights reserved. 21
SPB Service Types
Layer 2 Virtual Services Network
VLAN
200
VLAN
200
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
802.1Q
VLAN Tagged
VLAN
200
VLAN
200
I-SID
200
I-SID
200
VLAN
120
VLAN
150
VLAN
150
I-SID
110
VLAN
120
I-SID
110
• Transparent Layer 2 VLAN extension of services across SPB domain
• Simply associate I-SID to VLAN in BEB Switches

22. © 2011 Avaya Inc. All rights reserved. 22
SPB Service Types
Layer 3 Virtual Services Network
VLAN
10
VLAN
10
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
802.1Q
VLAN Tagged
VLAN
200
VLAN
200
VLAN
120
VLAN
120
• Simply associate I-SID to VRF Instance in BEB Switches
• SPB IPVPN reachability TLV 184 used to advertise IPVPN reachability among ISIS
peer switches within the SPB domain
I-SID
500
I-SID
500

23. © 2011 Avaya Inc. All rights reserved. 23
SPB Service Types
Inter-VSN Routing
VLAN
10
VLAN
200
VLAN
10
VLAN
10
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
802.1Q
VLAN Tagged
VLAN
200
VLAN
200
I-SID
10
I-SID
10
I-SID
200
I-SID
200
VLAN
100
VLAN
150
I-SID
110
I-SID
110
• IP Route from any Layer 2 Virtual Services Network to other Layer 2 VSNs
VLAN
150
VRF
Virtual Router
Instance

24. © 2011 Avaya Inc. All rights reserved. 24
SPB Service Types
IP Shortcuts (Route propagation into ISIS)
VLAN
10
VLAN
10
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
802.1Q
VLAN Tagged
VLAN
200
VLAN
200
VLAN
120
VLAN
120
VLAN
100
VLAN
100
Route redistribution
across ISIS
• Direct IP forwarding over IS-IS
• Simply enable IS-IS Redistribution (direct – rip – ospf – static – bgp)

25. © 2011 Avaya Inc. All rights reserved. 25
SPB Service Types
BGP IP-VPN over IS-IS
VLAN
10
VLAN
10
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
802.1Q
VLAN Tagged
VLAN
200
VLAN
200
VLAN
120
VLAN
120
VLAN
100
VLAN
100
• BGP-Based IP-VPNs and IP VPN Lite allow hub and spoke configuration by
import and export Route Target values
GRT/NRE Over IS-IS
iBGP Peering CLIPCLIP

26. © 2011 Avaya Inc. All rights reserved. 26
SPB Services
SMLT Switch Clustering Interoperability
VLAN
200
VLAN
200
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
802.1Q
VLAN Tagged
VLAN
200
I-SID
200
• All L2 VSN and L3 VSN and IP VPN Services Supported
• Full backwards compatibility with Avaya SMLT-Based Switch Clustering
VLAN
200
VLAN
200
I-SID
200
I-SID
200

27. © 2011 Avaya Inc. All rights reserved. 27
SPB Services
Layer 2 and Layer 3 QoS and Policing
VLAN
10
VLAN
10
Non-SPB
Switch
Non-SPB
Switch
BEB
Switch
BEB
Switch
BCB
Switch
BCB
Switch
SPBm ISIS Domain
VLAN
200
VLAN
200
VLAN
120
VLAN
120
• Map Port/VLAN/VSN markings to 802.1p Layer 2 marking used throughout
SPB backbone
I-SID
500
I-SID
500
Port
Policer
Edge port
Trusted or
Untrusted
Full 802.1p and IP DiffServ QoS Support
Map ingress DSCP or 802.1p markings
to SPB Backbone 802.1p QoS markings
Queue based on 802.1p priority within SPB backbone

28. © 2011 Avaya Inc. All rights reserved. 2828
802.1ag CFM
– Maintenance hierarchies
– Layer 2 Ping
– Layer 2 Traceroute
– Layer 2 Tracetree
Network Discovery
– Service (e.g., all BEBs supporting
common service instance)
– Network (e.g. all devices common
to a domain)
Y.1731 Performance Monitoring
– Frame Delay
– Frame Delay Variation
– Frame Loss
Edge
Switch
Edge
Switch
Transit
Switch
Adapt Adapt
NNI
Link
NNI
Link
UNI
Link
UNI
Link
Link OAM
Trunk OAM
Service OAM (SID)
customer demarcs
Link OAM Link OAM
Trunk
802.1ag
802.1ag
Service
802.1ag Maintenance levels/hierarchy
Conceptually:
-monitor the trunk or the service
… or both
Built-in and on-switch
IEEE 802.1ag CFM – Connectivity Fault Management
and ITU Y.1731 Performance Management
28

29. © 2011 Avaya Inc. All rights reserved. 2929
IEEE 802.1ag Overview and Support
Why implement it?
 IEEE 802.1ag provides connectivity fault management previously not
available in ethernet networks:
– Fault Detection (failures)
– Fault Verification (misconfigurations)
– Fault Isolation (troubleshooting)
– Fault Notification (SNMP traps)
 CFM can be provided at the Ethernet service and trunk layers:
– Service layer : Client (C-VLAN)
– Trunk layer : B-VLAN, Trunk, Port
29

30. © 2011 Avaya Inc. All rights reserved. 3030
Data Center Connectivity
Case Study: Server Deployment with VMware & VMotion
Data Center 1
Core
iSCSI Array
Data Center 2
Modular Switch
Net Mgmt
Virtualized ServerStackable Switch
Scenario
• HR needs three new web servers
• The traffic flowing between these servers and
other servers must be completed separated
from the rest of the
organization
• VMware/Vmotion
required
• DC1 – 2 servers
• DC2 – 1 server
VRF VRF
VRF
Return
SPB VPN connectivity
established end-to-end
Define I-SID end point
Define I-SID end point
Define I-SID end point

31. © 2011 Avaya Inc. All rights reserved. 31
End-to-End Provisioning for VMware Systems
Automated End-to-End Provisioning
• VM instances are
provisioned
through VCenter
• UCM/Virtual
Provisioning
Service recognizes
through API that
new VMWare
instance on virtual
Port Group is being
configured and
provisions network
connectivity
accordingly
Virtual Switch
Port group 106
Virtual Switch
Port Group 20
ISID 10
VLAN 10
Port Group
10
ISID 20
Vlan 20
Port Group
20
1/1 2/14
1/14 2/5
VCenter
VPS
NIC2NIC1
VM instances
API
Virtual Switch
Port group 106
Virtual Switch
Port Group 20
ISID 10
VLAN 10
Port Group
10
ISID 20
Vlan 20
Port Group
20
1/1 2/14
1/14 2/5
Core
NIC2NIC1
VM instances
Core
Preconfigured
Rule Set for binding:
Server-Type: “Production“
Port: any
VLAN: 10
Isid: isid=200
Learns topology
Link Level
Topology Protocol
Link Level
Topology Protocol