Internet DRAFT - draft-yong-trill-trill-o-mpls

draft-yong-trill-trill-o-mpls




TRILL Working Group                                            Lucy Yong
INTERNET-DRAFT                                           Donald Eastlake
Intended status: Informational                                Sam Aldrin
                                                          Huawei R&D USA
                                                              Jon Hudson
                                                                 Brocade
Expires: September 9, 2012                                March 10, 2012

       Transparent Interconnection of Lots of Links (TRILL) over
                           MPLS Pseudo Wires
                 <draft-yong-trill-trill-o-mpls-01.txt>


Abstract

   This informational document describes ways to interconnect TRILL
   RBridges by using MPLS Pseudo Wire (PW) services with existing TRILL
   and MPLS standards so as to form a unified TRILL campus.


Status of This Memo

   This Internet-Draft is submitted to IETF in full conformance with the
   provisions of BCP 78 and BCP 79.

   Distribution of this document is unlimited. Comments should be sent
   to the TRILL working group mailing list <rbridge@postel.org>.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF), its areas, and its working groups.  Note that
   other groups may also distribute working documents as Internet-
   Drafts.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   The list of current Internet-Drafts can be accessed at
   http://www.ietf.org/1id-abstracts.html

   The list of Internet-Draft Shadow Directories can be accessed at
   http://www.ietf.org/shadow.html












D. Eastlake, et al                                              [Page 1]

INTERNET-DRAFT                                        TRILL over MPLS PW


Table of Contents

      1. Introduction............................................3
      1.1 Conventions used in this document......................3

      2. Use Cases...............................................4
      2.1 Point-To-Point Interconnection.........................4
      2.1.1 Direct Point-to-Point................................5
      2.1.2 Provider Point-to-Point Service......................5
      2.2 Multi-Access Link Interconnection......................6

      3. RBridge Behavior for MPLS Pseudo Wire...................9

      4. IANA Considerations....................................10
      5. Security Considerations................................10
      6. Acknowledgements.......................................10
      7. Normative References...................................11
      8. Informative References.................................12


































D. Eastlake, et al                                              [Page 2]

INTERNET-DRAFT                                        TRILL over MPLS PW


1. Introduction

   The IETF TRILL (Transparent Interconnection of Lots of Links)
   standard [RFC6325] [RFC6326] provides optimal pair-wise data frame
   forwarding without configuration in multi-hop networks with arbitrary
   topology and link technology, and supports multipathing of both
   unicast and multicast traffic. TRILL enables a new method to
   construct a campus or data center network. Devices that implement
   TRILL are called RBridges (Routing Bridges) or TRILL Switches.

   This document describes the use of MPLS Pseudo Wire or VPLS links by
   TRILL.



1.1 Conventions used in this document

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
   document are to be interpreted as described in [RFC2119].

   Acronyms used in this document include the following:

      AC - Attachment Circuit

      IS-IS - Intermediate System to Intermediate System

      MPLS - Multi-Protocol Label Switching

      PE - Provider Edge

      PPP - Point-to-Point Protocol

      PW - Pseudo Wire

      QoS - Quality of Service

      RB - RBridge

      RBridge - Routing Bridge

      TRILL - Transparent Interconnection of Lots of Links

      TRILL Switch - An alternative term for an RBridge

      VPLS - Virtual Private LAN Service

      VSI - Virtual Service Instance




D. Eastlake, et al                                              [Page 3]

INTERNET-DRAFT                                        TRILL over MPLS PW


2. Use Cases

   TRILL campuses at different locations may interconnect by networks
   that are implemented with different technologies to form a unified
   RBridge campus. This section describes use cases assuming that
   IP/MPLS technology is available. From the MPLS network view, a pair
   of RBridges can be directly connected with a pseudo wire or an
   RBridge can act as a Customer Edge device that connects to a Provider
   Edge device via an attachment circuit. RBridge ports [RFC6325], by
   default, support both point-to-point links and multi-access links.

   Section 2.1 describes point-to-point links, i.e. TRILL over an
   Ethernet or PPP point-to-point link that is over an MPLS network.
   Section 2.2 describes TRILL over a bridged LAN or equivalent that is
   implemented by MPLS/VPLS.



2.1 Point-To-Point Interconnection

   Either an Ethernet or PPP link over an MPLS network interconnets two
   RBridge ports. This can be either a direct pseudo wire between the
   RBridges or by attachment circuits from each RBridge port to Provider
   Edge devices that provide a transparent tunnel between the provider
   edge attachment points.

   MPLS already supports many pseudo wire transport encapsulations
   [RFC4446].  Two types of TRILL links between RBridges have been
   standardized are Ethernet [RFC6325] and PPP [RFC6361]. Pseudo wire
   encapsulations for these two interfaces are specified in [RFC4448]
   and [RFC4618], respectively.

   The method described in 2.1.1 below is typically suitable when the
   TRILL and MPLS facilities have common management while the method
   described in 2.1.2 is typically suittable when the TRILL and MPLS
   facilities are separately managed.  In the case of different
   management, the core MPLS operator can sell a VPWS service to an
   RBridge operator.

   In both cases, the MPLS label switched routers involved need no
   awareness of TRILL.

   A pseudo wire may cross multiple MPLS domains [RFC5659]. In these
   cases, RBridges may be considered to connect to T-PEs and it works in
   the same way as a single domain. The MPLS network can provide
   transport resiliency for a pseudo wire. The dual homing (two
   attachment circuits) can be used for attachment circuit protection.
   In this case, two TRILL links are established; RBridges can perform
   load balancing over two links.



D. Eastlake, et al                                              [Page 4]

INTERNET-DRAFT                                        TRILL over MPLS PW


2.1.1 Direct Point-to-Point

   Two RBridge ports can be connected directly by an MPLS pseudo wire.
   This implies that the RBridges, which are TRILL routers, are also
   acting as label switched routers. The pseudo wire can be either
   Ethernet over MPLS or PPP over MPLS but PPP over MPLS is recommended
   because it saves 16 bytes per frame. The pseudo wire between two
   RBridge ports can be auto-configured [RFC4447] or manually
   configured; the two RBridges then appear directly interconnected with
   a transparent link.

   (Technically speaking, it is possible to create a specially
   designated TRILL encapsulated pseudo wire for point-to-point TRILL
   over MPLS. However, the authors think that this is not worth the
   effort in this case because of available technologies, particularly
   the highly-efficient PPP link technology.)

   From a customer/provider point of view, this can also be though of as
   shown in the following diagram:

               *---------*                        *---------*
               | TRILL   |<---- TRILL Link------->| TRILL   |
               | Site A  |    (Customer Layer)    | Site B  |
               |         |                        |         |
               |     +-------+     +---+      +-------+     |
               |     | RB/PE |-----| P |------| PE/RB |     |
               |     +-------+     +---+      +-------+     |
               |         |<---------PW ---------->|         |
               |         |    (Provider Layer)    |         |
               *---------*                        *---------*
                         {      MPLS Network      }

              {               One RBridge Campus             }

   The interworking between the RBridge network and the MPLS network is
   within the combined TRILL/MPLS device. This has a similar
   architecture to MPLS/VPLS [RFC4762].



2.1.2 Provider Point-to-Point Service

   Two RBridge ports may also be connected by attachment circuits (ACs)
   to Provider Edge (PE) devices that are part of a typically separately
   managed provider network. The provider network then provides a
   transparent path between these attachment circuits, connecting the
   RBridge ports. The following diagram illustrates this arrangement:





D. Eastlake, et al                                              [Page 5]

INTERNET-DRAFT                                        TRILL over MPLS PW


                     <-------------TRILL Link------------>
           *--------*       <----------PW---------->      *--------*
           | TRILL  |                                     | TRILL  |
           | Site A |                                     | Site B |
           |      +--+  AC  +----+   +---+   +----+  AC  +--+      |
           |      |RB|------| PE |---| P |---| PE |------|RB|      |
           |      +--+      +----+   +---+   +----+      +--+      |
           |        |       {   Provider Network   }      |        |
           *--------*                                     *--------*
           {                   One RBridge Campus                  }

   If the attachment circuits are Ethernet, the two PEs would be
   configured to form a pseudo wire with Ethernet encapsulation
   [RFC4448]. This pseudo wire can be auto-configured [RFC4447] or
   manually configured; the two RBridges then appear directly
   interconnected with an Ethernet link. The provider edge devices
   SHOULD use the Raw mode and non-service-delimiting, which provides a
   transparent Ethernet transport.

   If the attachment circuits are PPP link type, the two PEs must be
   configured to form a PW with PPP encapsulation [RFC4618]. After the
   pseudo wire is established between two PEs, the two RBridges then
   appear directly connected with a PPP link. The PPP link configuration
   will be more efficient than the Ethernet point-to-point
   configuration; it saves about 16 bytes per frame by replacing the
   TRILL Outer.MacDA, Outer.MacSA, Outer.VLAN, and outer Ethertype with
   a PPP code point [RFC6361].

   In both case, the pseudo wire provides transparent transport between
   attachment circuits. The TRILL link and the connectivity over that
   link is automatically discovered and established through TRILL IS-IS
   control messages.



2.2 Multi-Access Link Interconnection

   Multiple RBridges may interconnect via an [802.1Q] Bridged LAN that
   acts as a hub. The bridged LAN simply forwards on the outer Ethernet
   header of the TRILL over Ethernet frames. This configuration creates
   what appears to each connected RBridge as a multi-access link. In
   other words, each RBridge connecting to a bridged LAN normally has
   connectivity to every other RBridge connecting to the same bridged
   LAN.

   MPLS/VPLS can provide the same capability when multiple parts of an
   RBridge campus are interconnected over an IP/MPLS network and make
   each RBridge attaching to the VPLS appear as having a multi-access
   TRILL link. The diagram below shows one RBridge campus is split
   between three different sites and the use of MPLS/VPLS for RBridge


D. Eastlake, et al                                              [Page 6]

INTERNET-DRAFT                                        TRILL over MPLS PW


   interconnection. Ethernet attachment circuits and pseudo wires are
   assumed.

       *-------*      ...........................     *-------*
       |       |      .             MPLS/VPLS   .     |       |
       | TRILL |AC +----+       PW           +----+ AC| TRILL |
       | Site 1+---|VSI ********************** VSI|---+ Site 2|
       |       |   | PE *****            ***** PE |   |       |
       |       |   +----+    ****    ****    +----+   |       |
       |       |      .         +*--*+          .     *-------*
       *-------*      ..........|VSI |...........
                                | PE |
                                +----+
                                  |AC
                                  |
                             *---------*
                             |  TRILL  |
                             |  Site 3 |
                             |         |
                             *---------*

   One VPLS instance is configured on three Provider Edge (PE) devices
   and the pseudo wires are configured for the VPLS instance. Each
   RBridge Site connects to the VSI on a PE via an attachment circuit.
   The VSI on a PE forwards TRILL frames based on the outer Ethernet
   header of the frames [RFC6325]. Either BGP [RFC4761] or LDP [RFC4762]
   protocol can be used to automatically construct the VPLS instance on
   the PEs.

   The choice of three VSIs and three singly connected sites was for
   illustrative purposes. There could be two or more than three.
   Furthermore, each TRILL site could have multiple connections to the
   VPLS network and/or direct connection via other technologies or VPLS
   networks to one or more of the other sites. TRILL sorts all this out
   and router properly.

   A PE may connect to several different RBridge campuses that belong to
   different customers. Separated VPLS instances are configured for
   individual customers and customer traffic is isolated by VPLS
   instance. The PE treats an RBridge as a generic Ethernet customer
   devices and has no awareness of TRILL.  The outer Ethernet MAC of
   TRILL frames may be either a next-hop RBridge MAC address (for
   unicast frames) or one of TRILL defined multicast addresses (ALL-IS-
   IS-RBridges and All-RBridges) [RFC6325]. The VSI at each PE learns
   the source MAC addresses on each VSI interface and forward the frame
   based on the destination MAC. For the multicast frames, the VSI
   replicates the frames to all pseudo wires it associates. If a VPLS is
   configured with some optimization capability [VPLS-BCAST], the
   multicast frames can be delivered over a point-to-multipoint pseudo
   wire while unicast frames are carried over a point-to-point pseudo


D. Eastlake, et al                                              [Page 7]

INTERNET-DRAFT                                        TRILL over MPLS PW


   wire.

   The scenario above can also be extended to multiple RBridge
   interconnections when a device serves both the RBridge and PE
   functions, similarly to the case in Section 2.1.2 and 2.1.1 above.

   Note: If the customer devices associated with one VPLS instances
   happen to include some RBridges and some end stations or IEEE 802.1Q
   bridges providing paths to end stations, TRILL will, by default, be
   able to handle this by providing both through service and end station
   service. However, the end station addresses will be visible to the
   VPLS instance. If, in such a case, all the RBridge ports connected to
   the VPLS are configured as trunk ports (see Section 4.9.2 of
   [RFC6325]), then they will not provide any end station service.






































D. Eastlake, et al                                              [Page 8]

INTERNET-DRAFT                                        TRILL over MPLS PW


3. RBridge Behavior for MPLS Pseudo Wire

   This section describes RBridge behaviors for TRILL Ethernet or TRILL
   PPP links over MPLS pseudo wire (PW) as described in Sections 2.1.

   1. For two RBridge ports connecting via a PPP pseudo wire, the ports
      MUST be configured as IS-IS point-to-point because there are no
      subnetwork point of attachment (SNPA/MAC) addresses of the end
      points at the PPP protocol layer. Thus TRILL will use IS-IS P2P
      Hellos that, as described in "Point-to-Point IS to IS Hello PDU"
      (section 9.7 of [IS-IS]), do not use Neighbor TLVs or require
      SNPAs. However, as described section 4.2.4.1 of [RFC6325], three-
      way IS-IS handshake using extended circuit IDs is required.

   2. Any MPLS forwarder within an MPLS label switched path does not
      change the TRILL Header Hop Count. RBridges are not aware of the
      packet forwarders in with the MPLS network.

   3. If it is desired for MPLS label switched routers to perform QoS in
      the same way as RBridges do, an Ethernet path MUST be used and
      RBridges MUST be configured to send an Outer.VLAN tag on the
      RBridge port leading to the pseudo wire. The PE can then copy the
      priority value from the Outer.VLAN tag to the COS field of the
      pseudo wire label prior to the forwarding [RFC5462].

   4. TRILL MTU-probe and TRILL MTU-ack messages (section 4.3.2 of
      [RFC6325]) are not needed on a pseudo wire link.  Implementations
      MUST NOT send MTU-probe and SHOULD NOT reply to these messages.
      The MTU pseudo wire interface parameter SHOULD be used instead.
      PE MUST configure the MTU size as the originating RBridges Size
      specified in Section 4.3.1 of [RFC6325].





















D. Eastlake, et al                                              [Page 9]

INTERNET-DRAFT                                        TRILL over MPLS PW


4. IANA Considerations

   No IANA action is required by this document. RFC Editor: Please
   remove this section before publication.



5. Security Considerations

   The IS-IS authentication mechanism [RFC5304] [RFC5310], at the TRILL
   IS-IS layer, can be used to prevent fabrication of link-state control
   messages over TRILL links including those discussed in this document.

   For general TRILL protocol security considerations, see [RFC6325].

   Use cases in which the path between RBridges transits a provider
   network under separate administration may represent a substantial
   increase in the threat of observation, deletion, modification, or
   insertion of data or control information. Under such circumstances
   consideration should be give to the use of security at the TRILL link
   level, such as [802.1AE] if the path between the RBridge ports is
   Ethernet or security as suggested in [RFC6361] if that path is PPP.



6. Acknowledgements

   The authors sincerely acknowledge the contributions of Ben Mack-Crane
   and Sue Hares.























D. Eastlake, et al                                             [Page 10]

INTERNET-DRAFT                                        TRILL over MPLS PW


7. Normative References

   [RFC2119] - Bradner, S., "Key words for use in RFCs to Indicate
         Requirement Levels", BCP 14, RFC 2119, March 1997.

   [RFC4446] Martini, L., "IANA Allocations for Pseudowire Edge to
         EdgeEmulation (PWE3)", BCP 116, RFC 4446, April 2006.

   [RFC4447] Martini, L., Ed., Rosen, E., El-Aawar, N., Smith, T., and
         G. Heron, "Pseudowire Setup and Maintenance Using the Label
         Distribution Protocol (LDP)", RFC 4447, April 2006.

   [RFC4448] Martini, L., Ed., Rosen, E., El-Aawar, N., and G. Heron,
         "Encapsulation Methods for Transport of Ethernet over MPLS
         Networks", RFC 4448, April 2006.

   [RFC4618] Martini, L., "Encapsulation Methods for Transport of
         PPP/High-Level Data Link Control (HDLC) over MPLS Networks",
         BCP 116, RFC 4618, September 2006.

   [RFC4761] Kompella, K. and Y. Rekhter, "Virtual Private LAN Service
         (VPLS) Using BGP for Auto-Discovery and Signaling", RFC4761,
         January 2007.

   [RFC4762] Lasserre, M. and Kompella, V, "Virtual Private LAN
         Service(VPLS) Using Label Distribution Protocol (LDP)
         Signaling",RFC4762, January 2007

   [RFC2119] S. Bradner, "Key words for use in RFCs to Indicate
         Requirement Levels," BCP 14 and RFC 2119, March 1997

   [RFC5304] Li, T. and Atkinson, R, "IS-IS Cryptographic
         Authentication," RFC 5304, October 2008

   [RFC5310] Bhatia, M., Manral, V., Li, T., Atkinson, R., White, R.,
         and M. Fanto, "IS-IS Generic Cryptographic Authentication", RFC
         5310, February 2009

   [RFC5462] Andersson, L. and Asati, R., "Multiprotocol Label Switching
         (MPLS) Label Stack entry: "Exp" Field Rename to "Traffic Class"
         Field", RFC5462, February 2009

   [RFC5659] Bocci, M and Bryant, S, "An Architecture for Multi-Segment
         Pseudowire Emulation Edge-to-Edge", RFC 5659, October2009.

   [RFC6325] Perlman, R., Eastlake 3rd, D., Dutt, D., Gai, S., and A.
         Ghanwani, "Routing Bridges (RBridges): Base Protocol
         Specification", RFC6325, July 2011.

   [RFC6326] Eastlake 3rd, D., Banerjee, A., Dutt, D., Perlman, R.,


D. Eastlake, et al                                             [Page 11]

INTERNET-DRAFT                                        TRILL over MPLS PW


         andGhanwani, A. "Transparent Interconnection of Lots of
         Links(TRILL) Use of IS-IS", RFC6326, July 2011.

   [RFC6361] Carlson, J., and D. Eastlake, "PPP Transparent
         Interconnection of Lots of Links (TRILL) Protocol Control
         Protocol", RFC6361, August 2011.



8. Informative References

   [802.1AE] "IEEE Standard for Local and metropolitan area networks /
         Media Access Control (MAC) Security", 802.1AE-2006, 18 August
         2006.

   [802.1Q] IEEE 802.1, "IEEE Standard for Local and metropolitan area
         networks - Virtual Bridged Local Area Networks", IEEE Std
         802.1Q-2011, May 2011.

   [IS-IS] International Organization for Standardization, "Intermediate
         system to Intermediate system intra-domain routing information
         exchange protocol for use in conjunction with the protocol for
         providing the connectionless-mode Network Service (ISO 8473)",
         ISO/IEC10589:2002, Second Edition, Nov 2002

   [VPLS-BCAST] Delord, S, and Key, R., "Extension to LDP-VPLS for
         Ethernet Broadcast and Multicast", draft-ietf-l2vpn-ldp-vpls-
         broadcast-exten-02, work in progress, 2011.
























D. Eastlake, et al                                             [Page 12]

INTERNET-DRAFT                                        TRILL over MPLS PW


Authors' Addresses

   Lucy Yong
   Huawei R&D USA
   5340 Legacy Drive
   Plano, TX 75025

   Phone: +1-469-227-5837
   Email: lucy.yong@huawei.com


   Donald E. Eastlake, 3rd
   Huawei R&D USA
   155 Beaver Street
   Milford, MA 01757 USA

   Phone: +1-508-333-2270
   Email: d3e3e3@gmail.com


   Sam Aldrin
   Huawei R&D USA
   2330 Central Expressway
   Santa Clara, CA 95050

   Phone: +1-408-330-4517
   Email: sam.aldrin@huawei.com


   Jon Hudson
   Brocade
   130 Holger Way
   San Jose, CA 95134

   Phone: +1-408-333-4062
   jon.hudson@brocade.com
















D. Eastlake, et al                                             [Page 13]

INTERNET-DRAFT                                        TRILL over MPLS PW


Copyright and IPR Provisions

   Copyright (c) 2012 IETF Trust and the persons identified as the
   document authors. All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document. Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document. Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.  The definitive version of
   an IETF Document is that published by, or under the auspices of, the
   IETF. Versions of IETF Documents that are published by third parties,
   including those that are translated into other languages, should not
   be considered to be definitive versions of IETF Documents. The
   definitive version of these Legal Provisions is that published by, or
   under the auspices of, the IETF. Versions of these Legal Provisions
   that are published by third parties, including those that are
   translated into other languages, should not be considered to be
   definitive versions of these Legal Provisions.  For the avoidance of
   doubt, each Contributor to the IETF Standards Process licenses each
   Contribution that he or she makes as part of the IETF Standards
   Process to the IETF Trust pursuant to the provisions of RFC 5378. No
   language to the contrary, or terms, conditions or rights that differ
   from or are inconsistent with the rights and licenses granted under
   RFC 5378, shall have any effect and shall be null and void, whether
   published or posted by such Contributor, or included with or in such
   Contribution.





















D. Eastlake, et al                                             [Page 14]