Configuring an MCR
This topic describes how to edit and configure a Megaport Cloud Router (MCR) and Virtual Cross Connect (VXC). Before you begin, you need to create an MCR and configure a VXC, as described in Creating an MCR and Creating an MCR VXC.
Editing an MCR
For each MCR, you can edit any field on the MCR Configuration page, except the rate limit, which is fixed for the duration of the service. The Megaport Marketplace service availability must also be set in your Megaport Marketplace profile. For more information about how to make your service visible to the Megaport Marketplace, see Adding services to your profile.
To edit an MCR
- Log in to the Megaport Portal and choose Services.
-
Select the MCR you want to edit.
-
Edit any field on the MCR Configuration page as required, except for the MCR Rate Limit or Megaport Marketplace visibility.
-
The Initial BGP State lets you select whether newly created BGP connections are enabled or shut down by default. Select Enabled (the default) if you want any new BGP sessions you configure to be live as soon as you save the configuration. Select Shut Down if you want any new BGP sessions you configure to be left in a shut down state when you save the configuration.
For example, you might want to select the Shut Down option if you are planning to add several BGP sessions across your Virtual Cross Connects (VXCs) but know that you want to do some other router setup before you want them exchanging route information. When you are finished configuring your routers, you can then go into the relevant BGP sessions and enable them.
-
The setting you choose here just sets the default state for the new BGP session. You can override this in the MCR Connection detail screen. For more information about overriding the BGP state for an individual connection, see Shutting down a BGP connection.
For more information, see Creating an MCR.
-
-
Click Save.
Editing a VXC
For each VXC connected to an MCR you can configure one or more interfaces, IP addresses, BGP connections, or static routes.
Depending on the VXC destination or CSP provider, the MCR connection settings might have been auto-configured during VXC creation. Follow the steps in this task to configure the connection settings as required.
Note
If the VXC provisioning status is LIVE, CONFIGURED, or DEPLOYABLE, the connection configuration fields will be available when editing a VXC regardless of provider.
To edit a VXC interface
-
Select the MCR VXC you want to edit.
-
Select the VXC A-End or B-End.
-
Enable or disable the Q-in-Q VLAN option:
- Disabled allows a single VLAN tag (802.1q). This is the default setting. In most cases, you use a single VLAN that is exposed on the destination physical port as a trunked port instance, allowing the port to contain multiple VXCs to destinations other than the MCR you are configuring. Some use cases might require multiple inner VLANs exposed to this port through Q-in-Q.
- Enabled allows the VLAN to carry multiple or dual-stacked VLANs (802.1ad).
After enabling Q-in-Q, accept the default VLAN ID or specify the VLAN ID for the connection.
The tag protocol identifier (TPID) will be set to 0x8100.
For more information, see Understanding Q-in-Q with Megaport VXCs.
-
If you have enabled Q-in-Q, click Add VLAN to enter the preferred VLAN ID for the B-End of the connection. Megaport automatically assigns an available VLAN to the B-End. If you enter a VLAN ID, Megaport verifies that the VLAN ID is available.
-
Enter one or more IP addresses and subnet mask to configure on the A-End interface.
-
(Optional) Select a NAT source IPv4 address from the Network Address Translation drop-down list. All packets leaving this interface will have their source NAT rewritten to this address.
Network Address Translation (NAT)Network Address Translation (NAT) is the process that translates the unregistered private IP addresses used for an organization’s private inner network into a single registered public IP address before packets are sent to an external network. NAT allows private IP networks to use the internet and cloud.
allows flexibility in designing a scalable and secure multi-vendor, multicloud, or hybrid cloud scenario. Source NAT translates the source IP address of a packet leaving the MCR. When you assign a NAT IP address in MCR, all packets leaving the interface use that IP address as their source IP address. Enable this feature when NAT is required for a connection, for example, when you need to translate several private IP addresses into a single public IP address to meet Cloud Service Provider (CSP) requirements.For more information about how MCR performs NAT to support public peering types to cloud service providers, see How MCR performs NAT.
-
(Optional) Enter an IP MTU (Maximum Transmission Unit)IP MTU (Maximum Transmission Unit) refers to the largest size (in bytes) of an IP packet that can be sent over a network interface (VXC). Jumbo packets are larger than the standard 1500 bytes (MTU), and are typically used in high-performance networks to reduce overhead and improve efficiency.
value (in bytes) for the VXC. The IP MTU can range from 1280 to 9070 (9074 if Q-in-Q is disabled). The default value is 1500.IP MTU (Maximum Transmission Unit) refers to the largest size (in bytes) of an IP packet that can be sent over a network interface (VXC). Jumbo packets are larger than the standard 1500 bytes (MTU), and are typically used in high-performance networks to reduce overhead and improve efficiency.
The IP MTU is important for efficient network communication because if a packet exceeds the MTU, it will be fragmented, which adds overhead and latency. Fewer, larger packets ensure faster data transfer with reduced packet processing overhead. This is ideal for transferring large files between clouds or improving performance for high-throughput applications, such as machine learning workloads.
Note
If you change the IP MTU value, it can take up to 2 minutes for the new value to take effect and be displayed in the Portal.
-
Enter any details specific to the VXC type.
- For more information about using packet filters, see Using Packet Filters.
- For more information about adding a BGP connection, see Configuring BGP.
- For more information about enabling Bidirectional Forwarding Detection (BFD) settings, see Enabling the BFD protocol.
- For more information about adding a static route, see Configuring static routes.
-
Click Save.
Using packet filter lists
Packet filters are used to manage the traffic that is allowed to flow through your MCR. You can apply packet filter lists to your VXC if they have been defined on the MCR. Using packet filter lists is optional.
For more information, see Using Packet Filters.
To apply packet filter lists
-
In the Megaport Portal, go to the Services page.
-
Select the VXC and select the A-End or B-End.
-
Select the packet filter lists to apply from the drop-down lists.
You can select inbound and outbound filters. -
Click Save.
Configuring BGP
The Border Gateway Protocol (BGP) allows dynamic route table updates from the MCR across the VXC to the port. Enable one or more BGP peers for the MCR, up to a maximum of five.
To configure BGP
-
On the MCR Connection detail page, click Add BGP Connection.
-
Specify these values:
-
Local IP – Select the IP address on this interface that communicates with the BGP peer. The drop-down menu is auto-populated based on the address you specified in the connection detail.
-
Peer IP – Specify the IP address for the BGP peer. For example, if the local IP is 198.162.100.1, the peer IP address would be 198.162.100.2.
-
Peer ASN – The ASN of the target routing device that will terminate the BGP connection. The ASN range is from 2 to 4294967294. 4-byte ASNs are supported in the asplain format.
-
BGP Password – The shared key to authenticate the BGP peer. A shared key is optional when creating the VXC, but is required to set up the BGP peering. You can add it after you create the VXC. The shared key length is from 1 to 25 characters. The key can include any of these characters:
a-z
A-Z
0-9
! @ # . $ % ^ & * + = - _Tip
Click the eye icon to see the password as you type. The view persists until you click the eye icon again to hide the password.
-
Description (optional) – Enter a description that will help identify this connection. The minimum description length is from 1 to 100 characters.
-
BGP State – Shuts down the connection without removing it. The initial setting will be taken from the setting on the A-End of the MCR. Enabling or shutting down the BGP state does not affect existing BGP sessions. The BGP state only affects new VXCs. This setting overrides the MCR state for an individual connection. For more information, see Shutting down a BGP connection and Creating an MCR.
Note
- If you have entered multiple CIDR ranges, the IP addresses are available for selection.
- Use a CIDR calculator to ensure that all data is valid and within range.
-
-
Click Add.
-
Click Next.
To edit a BGP connection
- Select the VXC and select MCR A-End or MCR B-End.
- Next to the BGP connection, click Edit.
- Make your changes.
- Click Update.
For information on the BGP Advanced tab settings, see Configuring BGP Advanced Settings.
Configuring static routes
Static routes establish reachability to peers in place of BGP connections that provide dynamic routing. You configure static routes to provide connectivity to a customer device that doesn’t support BGP or to a target device that requires manually configured addressing and routes. With static routes, you need to manually update any topology changes.
An MCR supports up to 100 static routes.
To add a static route
- Select the VXC and select MCR A-End.
- In the MCR Connection detail page, under Static Routes, specify the IPv4 or IPv6 destination network address in CIDR notation.
- Specify the IPv4 or IPv6 address of the next-hop router.
The address must be in the same subnet as the interface but it cannot match the interface IP address. - (Optional) In the Description field, include any notes that will help identify this static route.
The description range is from 1 to 100 characters. - Click Next.
- Update the MCR B-End, if necessary.
- Click Next.
- Click Update.
To view static routes, see Viewing Traffic Routing through the MCR Looking Glass.
Verifying the BGP configuration
The MCR Looking Glass provides single-screen visibility into the BGP configuration. For more information, see Viewing Traffic Routing through MCR Looking Glass.
To view the BGP status
- In the Megaport Portal, go to the Services page.
- Select the VXC.
- Choose Details.
The Configuration Details page shows the provisioning, service, and BGP status.
Troubleshooting BGP
If the Services > Connection Detail page displays a status issue, verify these items:
- Select the VXC and select MCR A End or B End.
- Under BGP Connections, verify that the correct local ASN is in use for the A-End of the VXC.
- Verify that the correct peer IP address is in use.
- Verify that the correct BGP MD5 password is in use for the A-End of the VXC.
If the BGP configuration looks correct:
-
Make sure that a BGP peer is not blocking ingress or egress from TCP port 179 (BGP) and other relevant ephemeral ports.
-
Verify that a BGP peer is not advertising more than 100 prefixes to AWS. The maximum number of advertised routes to AWS is 100. The BGP session is disabled if it exceeds the prefix limit of 100 advertised routes.
Shutting down a BGP connection
Use this setting to temporarily disable the BGP session without removing it. BGP shutdown provides a way to administratively shut down a BGP connection while setting up a new route, performing maintenance, troubleshooting, and so on.
To temporarily disable a BGP connection
-
In the Megaport Portal, go to the Services page.
-
Select the VXC and select the A-End or B-End.
-
After the BGP connection details, click Shut Down.
-
Click Yes to confirm.