Interface - NJEDge.Net

advertisement

NJEDge.Net Regional Optical Network Deployment:

Member Migration Handbook

In preparation for the new network deployment, members must review the following information. Please use the following information as a guideline for reconfiguring your edge router and turning up your new network connection.

Current Network Access

In the current network environment, members are using ATM as the access method for both the NJEDge.Net IP/VPN and Internet access. The current configuration on a typical member’s edge router is utilizing two ATM PVC’s; on one ATM sub-interface, a PVC and ip address are used for connectivity to the Internet, and, the other ATM sub-interface has a PVC and ip address that are used for connectivity to the Extranet/IP/VPN/Internet

2. Some members have additional PVCs. Members who will be maintaining their ATM access will maintain only one atm-subinterface, 1 PVC and 1 ip address. The new

NJEDge RON is designed for a converged network, supporting Voice (if desired), Data

(Internet and Internet 2) and Video (H.323). All traffic will flow over the same interface to the NJEDge.Net network. The connection provides access for Member to Member,

Member to Internet, and Member to Internet 2 traffic. Directly connected Internet 2

Members will have a slightly different traffic flow. Appendix A provides a graphic showing a typical SEGP member, while Appendix B shows a typical dedicated Internet 2

Member.

New Network Access

There are several access methods to connect to the new NJEDge.Net network. The first is using ATM; some members will need to maintain ATM access as other access methods are not cost effective, or are unavailable. The second method is dark fiber; dark fiber can also be used for optical connections for multiple campuses within the same institution.

The last and typical access method is SES (Switched Ethernet Service); over 30 SES connections have been ordered for NJEDge members. Please refer to the url http://www.njedge.net/techsection under the SES Implementation for detailed SES information.

The new NJEDge RON is a converged network and members will use a single EVC/PVC for their combined Internet and member-to-member traffic; QoS markings will continue to be used to differentiate video traffic.

IP Addressing

There will be a new ip address assignment for the interfaces on the new network.

Members connecting to the Newark Router will be assigned a /30 address from the

130.156.251.0/24 block; Members connecting to the Camden Router will use addresses from the 130.156.252.0/24 block. Direct Internet 2 members will receive a new address

4/17/2020 page 1 of 20

for the Internet 2 connection from MAGPI. Assigning these addresses will allow member to pre-configure the new connection and allow a simple reachability test to the new network without disruption the current production network. The addresses that are used for current Internet and IP/VPN connections will no longer be used and should be removed when you are transitioned to the new network.

Routing

Members are still required to run BGP on their Edge Router . Members utilizing the private ASN 65201 will be assigned a new number (Appendix C).

Most members are currently receiving the 10K plus routes from the IP/VPN connection and have a default route pointing to their Internet connection. During the transition, members must remove that default route as they will be receiving a new default route from the new connection via BGP. All members should maintain a copy of the current

BGP configuration as there will be some minimal changes. Direct Internet 2 members, as well as members who will be maintaining a second Internet connection, will be taking the full Internet routing table 204k routes on 1 EVC and 10k Routes from Internet 2 EVC, allowing BGP to make the proper routing decision for your institution. For Members wishing to run multicast, NJEDge will follow the original multicast design document.

Members wanting multicast will need to run “pim” on their new interfaces. Direct

Internet 2 members will need to run pim on both EVCs. Members may want to consider obtaining some technical assistance for this transition.

QOS

Please reference the NJEDge.Net web-site for more detailed QOS information@www.njedge.net/techsection

Members remaining with ATM access should continue to use their current QOS policies.

SES connected members will have a change for their Priority Data policies. Currently those using H.323 video conferencing are using IP Prec 4 and this can continue.

Verizon SES however is using COS 2 for this type of traffic (H.323) video and this needs to be reflected in your edge router configuration. Appendix D provides a sample configuration for a 7200 router with Fast Ethernet towards the campus and a Fast

Ethernet connection to NJEDge.Net

ADDITIONAL CONFIGURATIONS & DRAWINGS

There are five examples of configurations and drawings.

The are samples only and would have to be modified for your networks

4/17/2020 page 2 of 20

Transition Planning

Member Items to consider for planning transition:

Scheduling of Downtime

Flexibility of scheduling

DNS changes, required if using fVerizon DNS service

Edge Router re-configuration

Other Network changes?

Transition Verification

Internet Access

Internet 2 Access

Video Portal Access

4/17/2020 page 3 of 20

A. NEW SES CONNECTIONS (1 EVC)

Plan to test the new SES service 3 – 5 days prior to scheduled migration. Using the assigned Vlan ID, configure the interface and perform ping tests on both the local and remote side addresses; see example below.

Configure Ethernet Interface For Routers (7200’s example

)

Interface Fastethernet0/0 or Gige0/0 Gigabit Main Interface

Description <Circuit ID>

Speed 100 (For Fast Ethernet Only)

Duplex full For Fast Ethernet Only)

For Gigabit leave setting to auto

No Shutdown

Interface Fastethernet0/0.1 or gige0/0.x (example x=1 could also be Vlan ID )

Description Connection to NJEDge

Encapsulation dot1q xx (xx=evc/vlan will be assigned by Verizon)

Ip address 130.156.251.xxx 255.255.255.252 xxx=address assigned by NJEDge

No Shutdown

REACHABILITY TEST EXAMPLE

Perform a ping test ONLY from the router just configured; this will test the

EVC.

NJEDge_Cat6509_MSFC#ping

Protocol [ip]:

Target IP address: 130.156.251.113

Repeat count [5]:100000

Datagram size [100]:1300

Timeout in seconds [2]:

Extended commands [n]:

Sweep range of sizes [n]:

Type escape sequence to abort.

Sending 5, 1300-byte ICMP Echos to 130.156.251.113, timeout is 2 seconds:

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms

4/17/2020 page 4 of 20

B. NEW SES CONNECTIONS (2nd EVC Direct Internet 2

Members only – RU, NJIT, SHU, UMD and SIT

)

Configure Ethernet Interface For Routers (7200’s example)

Configure Fast Ethernet or Gigabit Main Interface

Interface Fastethernet0/0 or gige0/0

Description <Circuit ID>

Speed 100 (For Fast Ethernet Only)

Duplex full For Fast Ethernet Only)

For Gige leave setting on Auto

No Shutdown

Interface Fastethernet0/0.1 or gige0/0.1 (example .1 could also be vlan ID)

Description <Connection to NJEDge.Net >

Encapsulation dot1q xx (xx=evc/vlan will be assigned by Verizon)

Ip address 130.156.251.xxx 255.255.255.252 xxx=address assigned by NJEDge

No Shutdown

Interface Fastethernet 0/0.2 or gige1/0.2(example .2 could also be vlan ID)

Description <Connection to MAGPI I2>

Encapsulation dot1q xx (xx=evc/vlan will be assigned by Verizon)

Ip address xxx.xxx.xxx.xxx 255.255.255.252 xxx=address assigned by MAGPI

No shutdown

4/17/2020 page 5 of 20

C.

Configuring Fast-Ethernet on a 6500 with CATos and MSFC

NOTE:

Customers must configure their 802.1Q trunks in the "on" mode; Verizon SES will not negotiate trunking. STP, Cisco CDP and VTP will be dropped with

EVPL service.

Switchport Trunk

Set trunk mod/port on dot1q <vlanid>

Create Vlan

Set vlan <vlanid> <Provided by Verizon>

1 Gigabit-Port Settings

Leave as auto

100mb Port Settings speed 100 duplex full

MSFC

Interface vlan <cvlanid provided by Verizon>

Ip address 130.156.xxx.xxx<

No shut

D. Configure Ethernet Sub-Interface For Layers 3 Switches (6500’s example)

Interface Fastethernet0/0 or gige0/0

Description <Circuit ID>

Speed 100 (For Fast Ethernet Only)

Duplex full For Fast Ethernet Only)

For Gige leave setting on Auto

No Shutdown

Interface Fastethernet0/0.1 or gige0/0.1 (example .1 could also be vlan ID)

Description <Connection to NJEDge.Net >

Encapsulation dot1q xx (xx=evc/vlan will be assigned by Verizon)

Ip address 130.156.251.xxx 255.255.255.252 xxx=address assigned by NJEDge

No Shutdown

4/17/2020 page 6 of 20

Configure Switchport Interface For Layers 3 Switches (6500’s example)

Configure Switchport for Fast Ethernet or Gigabit Main Interface

Interface Fastethernet0/0 or gige0/0

Description <Circuit ID>

Speed 100 (For Fast Ethernet Only)

Duplex full For Fast Ethernet Only)

For Gige leave setting on Auto

No Shutdown

Switchport

Switchport mode trunk encapsulation dot1q

Switchport trunk allowed vlan xx (supplied bt Verizon)

Create Vlan

Config t <enter>

Vlan xxx

Name <connection to NJEDge>

Create SVI

Interface vlan xxx

Ip address 130.156.25x.xxx <supplied by NJEDge.Net)

4/17/2020 page 7 of 20

C. Members Maintaining ATM Connections

Remember to save your current configuration!!

Add an additional ATM Sub-interface

Interface atm0/0.3 point-to-point Example

Description CircuitID

Ip address 130.156.25x.xxx Assigned by NJEDge

Pvc 1/23 (example)

vbr-nrt xxxx xxxxx (x value may change)

Shutdown your two other ATM sub interfaces only

Atm0/0.1 and atm0/0.2 (example) shutdown

Leave the main interface up

ATM0/0

4/17/2020 page 8 of 20

D. BGP CONFIGURATION

NJEDGE will be using AS 21976. All addresses delegated to Members from the

NJEDge Network block 130.156.0.0 will need to be SWIP’d prior to transitioning to the new network. There should not be many changes for most members to your current configuration with one exception bolded below. There will be a mix of Private and Public

AS notations.

Record your current BGP configuration .

The BGP ASN number will change for members using the private number 65201.

Members with Public ASN will not change - just their neighbor statements.

Sample Configuration (Guideline Only)

Router bgp 6520X X=NUMBER ASSIGNED BY NJEDGE neighbor 130.156.251.1 remote-as 21976 bgp log-neighbor-change

neighbor x.x.x.x password <wesetapassword> address-family ipv4 neighbor 130.156.251.1 activate no auto-summary no synchronization network 130.156.34.0 mask 255.255.255.0 Example (your network block) neighbor 130.156.251.1 prefix-list advertise-out out ip prefix-list advertise-out seq 5 permit 130.156.34.0/24 example x=new asn assignment fromNJEDGE xxx=new ses ip address

4/17/2020 page 9 of 20

E. MULTICAST, for those interested

address-family ipv4 multicast neighbor 130.156.251.1 activate neighbor xxx.xxx.xxx.xxx activate (Internet 2 MAGPI) no auto-summary no synchronization network 130.156.34.0

4/17/2020 page 10 of 20

Appendix-A SEGP MEMBER

4/17/2020 page 11 of 20

APPENDIX – B Direct Member and SEGP

4/17/2020 page 12 of 20

Appendix C

ASN NUMBER ASSIGNMENT

Atlantic Cape Community College 65202

Bergen County College

Bloomfield

65203

65204

Brookdale Community College 65205

Burlington County College 65206

Camden County College

County College of Morris

College of New Jersey

Centenary College

College of St. Elizabeth

Cumberland County College

65207

65208

15166

65209

65210

65211

Essex County College

Fairleigh Dickenson

Hudson County College

Kean University

Mercer County College

Middlesex County College

Montclair BOE

Monmouth University

New Jersey City University

NJIT

Ocean County College

Passaic County College

Passaic Valley HS

PCTI

Ramapo

Raritan Valley CCC

Stockton

65212

65213

65214

65215

26635

65216

65217

65218

65219

4246

65220

65221

65226

42076

18794

4460

18722

Rider

Rosenet

Rowan University

Rutgers

St. Peters

Salem County College

Seton Hall University

65222

65223

33523

46

65227

65228

33538

Stevens

St. Joseph’s

Sussex County College

Thomas Edison

UMDNJ

16889

33467

65224

32450

11094

Union County College 65229

Warren County College 65230

William Patterson U 65225

4/17/2020 page 13 of 20

Appendix D- QOS Configuration Examples

Please refer to the NJEDge.Net Web Site for more information regarding QOS http://www.njedge.net/techsection (Look at the QOS Heading.)

Note that the following are just examples and may not match exactly to every member’s network configuration. Use this information as a guideline.

I. ATM Connected Members

ATM members should continue to use their current QOS policies.

II. SES/Dark Fiber (DF) Connected Members

Classifying Traffic from Internal Network ip access-list extended njedge-allother-traffic

permit ip any any ip access-list extended njedge-h323-VC

permit tcp any any eq 1720

permit udp any any eq 1719

permit tcp any any eq 1719

permit udp any any eq 1718

permit ip host 155.246.1.10 any

permit tcp any any eq 1718

(you can also use an access-list to identify your h.323 traffic or other PD traffic) class-map match-any in-af41

match ip precedence 4

match access-group name njedge-h323-VC class-map match-all in-best-effort

match access-group name njedge-allother-traffic policy-map in-SETDSCP

class in-af41

set ip dscp af41

class in-best-effort

set ip dscp default

Applying Classification from Internal Network interface GigabitEthernet0/3

ip address 130.156.34.120 255.255.255.0

load-interval 30

duplex auto

speed auto

media-type rj45

no negotiation auto service-policy input in-SETDSCP

4/17/2020 page 14 of 20

Classifying Traffic out to SES/DF class-map match-all out-ROUTING

match ip dscp cs6 class-map match-any out-INTERACTIVE-VIDEO

match ip dscp af41 af42 af43

match precedence 4 class-map match-any out-DEFAULT-BEST-EFFORT

match ip dscp default policy-map SCHOOL-EDGE-TWO-CLASS-SES

class out-ROUTING

bandwidth percent 1

set cos 2 class out-INTERACTIVE-VIDEO

priority percent 12

set ip dscp cs4

set cos 2 class out-DEFAULT-BEST-EFFORT

bandwidth percent 83

random-detect

set cos 0

Applying Classification on to SES/DF Interface interface GigabitEthernet 0/2.93

description to CORE (I1) NJEDGEI

encapsulation dot1Q 93

ip address 130.156.250.94 255.255.255.252

service-policy SCHOOL-EDGE-TWO-CLASS-SES

4/17/2020 page 15 of 20

EAMPLE#1

Edge Router to SES Connection

4/17/2020 page 16 of 20

EAMPLE#2

Edge Switch/Router to SES Connection

To Campus

MODE

SYST

RPS

MASTR

STAT

DUPLX

SPEED

STACK

1X

1

2

3

4

5

6

7

8

9

10

11 12

11X 13X

13 14 15 16 17 18 19 20 21 22 23 24

23X

24X 2X 12X 14X

Member Switch

Catalyst 3750

SERIES

1 2

3 4

Create Vlan vlan xx

Description XXXX switchport switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan xxx

Create SVI Interface

Interface vlan xxx ip address 130.156.25x.xxx

802.1q Trunk

1

WS-SVC -F WM-1

A T US

FIREWALL SER VICES MODU LE

DO N OT R EMOVE CA RD WHILE

DISK CORRU PTION MAY OCC UR

SHUTDOWN

WS-SVC -F WM-1

2 A T

FIREWALL SER VICES MODU LE

STATUS LED IS GR EEN OR

DISK CORRU PTION MAY OCC UR

WS-X6724-SFP 24 PORT GIGABIT ETHERNET SFP

3

STATUS

SHUTDOWN

S P A - 2 X O C 3 -A T M 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

WS-X6724-SFP 24 PORT GIGABIT ETHERNET SFP

4

STATUS

S P A - 2 X O C 3 - A T M

10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

WS-SUP720-3BXL

5

DISK 0

TU

TA SY

TE EJEC T

SUPERVISOR 720 WITH INT EGRATED SWITCH FABRIC/PF C3BXL

WS-SUP720-3BXL DISK 0

6

SY

TE EJEC T

SUPERVISOR 720 WITH INT EGRATED SWITCH FABRIC/PF C3BXL

W S-X6704-10GE

7 TA

TU

-48 V TO -60 V

80 A

4 PORT 10 GIGABIT ETHERNET

WS- X6182 -2PA

EJECT

EJECT

DISK 1

DISK 1

PORT1

TX RX

PORT2

TX RX

FAN

INS

TA

STATUS

LL

RUN

8

S TATUS

FLEX WAN MODULE

WS- X6182 -2PA

9

S TATUS

FLEX WAN MODULE

Cisco Systems, Inc.

INPUT

OK

FAN

OK

OUTPUT

FAIL

Switch must be in off "O" position to Install/Remove power supply.

Fastener must be fully enaged prior to operating power supply.

S P A - 2 X O C 3 -A T M

S P A - 2 X O C 3 -A T M

CONSOLE

CONSOLE

PORT3

TX RX

PORT 1

PORT 1

PORT4

T X RX

PORT 2

PORT 2

S P A - 2 X O C 3 -A T M

S P A - 2 X O C 3 -A T M

-48 V TO -60 V

80 A

INS

TA

LL

RUN

INPUT

OK

FAN

OK

OUTPUT

FAIL

-48 V TO -60 V

80 A

INS

TA

LL

RUN

INPUT

OK

FAN

OK

OUTPUT

FAIL

Cisco Systems, Inc.

Switch must be in off "O" position to Install/Remove power supply.

Fastener must be fully enaged prior to operating power supply.

Power Supply 1

Cisco Systems, Inc.

Catalyst 6500

SERIES

Switch must be in off "O" position to Install/Remove power supply.

Fastener must be fully enaged prior to operating power supply.

Power Supply 2

Verizon Switch

4/17/2020 page 17 of 20

EAMPLE#3

Edge Switch/Router to SES Connection

Member Switch

MODE

SYST

RPS

MASTR

STAT

DUPLX

SPEED

STACK

1X

1 2 3 4 5 6 7 8 9 10 11 12

11X

2X 12X

13X

13 14 15 16 17 18 19 20 21 22 23 24

23X

14X 24X

Catalyst 3750

SERIES

1 2 3 4

Create Vlan vlan xx

Interface gig1/0.XX

encapsulation dot1q XX ip address 130.156.25X.xxx

802.1q Trunk

WS-SVC -FWM-1

1 A T

FIREWALL SERVICES MODULE

STATUS LED IS GREEN OR

DISK CORRUPTION MAY OCCUR

SHUTDOWN

WS-SVC -FWM-1

2 A T

FIREWALL SERVICES MODULE

DO NOT REMOVE CARD WHILE

DISK CORRUPTION MAY OCCUR

SHUTDOWN

WS-X6724-SFP

24 PORT GIGABIT ETHERNET SFP

3

STATUS

S P A - 2 X O C 3 - A T M 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

WS-X6724-SFP

24 PORT GIGABIT ETHERNET SFP

4

STATUS

S P A - 2 X O C 3 -A T M

WS-SUP720-3BXL

DISK 0

5

TU TE EJECT

SUPERVISOR 720 WITH INTEGRATED SWITCH FABRIC/PFC3BXL

WS-SUP720-3BXL

DISK 0

6 TU TE EJECT

SUPERVISOR 720 WITH INTEGRATED SWITCH FABRIC/PFC3BXL

W S-X6704-10GE

7 TA

TU

-48 V TO -60 V 4 PORT 10 GIGABIT ETHERNET

80 A

WS- X6182 -2PA

FAN

INS

TA

LL

STATUS

RUN

8

S TATUS

FLEX WAN MODULE

WS- X6182 -2PA

INPUT

OK

FAN

OK

EJECT

EJECT

OUTPUT

FAIL

DISK 1

DISK 1

PO RT1

TX RX

10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

PORT2

TX RX

S P A - 2 X O C 3 -A T M

CONSOLE

CONSOLE

PORT3

TX RX

SE

SE

PORT 1

PORT 1

PO RT 4

TX RX

PORT 2

PORT 2

S P A - 2 X O C 3 -A T M

S P A - 2 X O C 3 -A T M 9

S TATUS

FLEX WAN MODULE

Cisco Systems, Inc.

Switch must be in off "O" position to Install/Remove power supply.

Fastener must be fully enaged prior to operating power supply.

S P A - 2 X O C 3 -A T M

-48 V TO -60 V

80 A

TA

LL

INS

RUN

-48 V TO -60 V

80 A

TA

LL

INS

RUN

INPUT

OK

FAN

OK

OUTPUT

FAIL

INPUT

OK

FAN

OK

OUTPUT

FAIL

Cisco Systems, Inc.

Switch must be in off "O" position to Install/Remove power supply.

Fastener must be fully enaged prior to operating power supply.

Power Supply 1

Cisco Systems, Inc.

Catalyst 6500

SERIES

Switch must be in off "O" position to Install/Remove power supply.

Fastener must be fully enaged prior to operating power supply.

Power Supply 2

Verizon Switch

4/17/2020 page 18 of 20

EAMPLE #4

Edge Switch to additional Router to SES Connection

4/17/2020 page 19 of 20

EXAMPLE #5

Edge Switch with Vlan Translation thru an additional switch to a Router to

SES Connection

4/17/2020 page 20 of 20

Download