Login
- Table of Contents
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 06-EVPN-DCI configuration | 412.84 KB |
Contents
Restrictions and guidelines: EVPN-DCI configuration
Configuring route reorigination on EDs
Enabling route nexthop replacement and route router MAC replacement
Enabling an ED to replace the L3 VXLAN ID, RD, and route targets of BGP EVPN routes
Configuring the BGP EVPN address family and the BGP VPNv4 or VPNv6 address family to exchange routes
Enabling BGP VPNv4 or VPNv6 route advertisement for the BGP EVPN address family
Enabling BGP EVPN route advertisement for the BGP VPNv4 or VPNv6 address family
Configuring EVPN-DCI dualhoming
EVPN-DCI configuration examples
Example: Configuring a basic EVPN-DCI network
Example: Configuring EVPN-DCI intermediate VXLAN mapping
Example: Configuring EVPN-DCI IPv4 Layer 3 communication
Example: Configuring EVPN-DCI dualhoming
Configuring EVPN-DCI
About EVPN-DCI
EVPN data center interconnect (EVPN-DCI) uses VXLAN-DCI tunnels to provide connectivity for data centers over an IP transport network.
EVPN-DCI network model
As shown in Figure 1, the EVPN-DCI network contains VTEPs and edge devices (EDs) located at the edge of the transport network. A VXLAN tunnel is established between a VTEP and an ED, and a VXLAN-DCI tunnel is established between two EDs. VXLAN-DCI tunnels use VXLAN encapsulation. Each ED de-encapsulates incoming VXLAN packets and re-encapsulates them based on the destination before forwarding the packets through a VXLAN or VXLAN-DCI tunnel.
Figure 1 EVPN-DCI network model
Working mechanisms
In an EVPN-DCI network, BGP EVPN peer relationships are established between EDs and between EDs and VTEPs. When advertising routes to a VTEP or another ED, an ED replaces the routes' nexthop IP address and router MAC address with its IP address and router MAC address.
In an EVPN-DCI network, a VTEP and an ED use a VXLAN tunnel to send traffic, and two EDs use a VXLAN-DCI tunnel to send traffic. An ED de-encapsulates incoming VXLAN packets and re-encapsulates them before forwarding the packets through a VXLAN or VXLAN-DCI tunnel.
EVPN-DCI dualhoming
As shown in Figure 2, EVPN-DCI dualhoming allows you to deploy two EDs at a data center for high availability and load sharing. To virtualize the redundant EDs into one device, a virtual ED address is configured on them. The redundant EDs use the virtual ED address to establish tunnels with VTEPs and remote EDs.
Figure 2 EVPN-DCI dualhoming
The redundant EDs use their respective IP addresses as the BGP peer addresses to establish BGP EVPN neighbor relationships with VTEPs and remote EDs. The VTEPs and remote EDs send traffic destined for the virtual ED address to both of the redundant EDs through the ECMP routes provided by the underlay network.
The redundant EDs communicate with remote data centers through the transport network. Devices in the dualhomed data center are unaware of the transport network. When the transport-side link fails on one of the redundant EDs, traffic destined for remote data centers is still sent to that ED. To resolve this issue, EAA CLI-defined monitor policies and Track are used together with EVPN-DCI dualhoming.
On each redundant ED, the transport-facing physical interface is associated with the following loopback interfaces: The loopback interface that provides the IP address used for establishing BGP EVPN neighbor relationships and the loopback interface that provides the virtual ED address. If the transport-side link fails on a redundant ED, the loopback interfaces are placed in down state, and all traffic is forwarded by the other redundant ED. For more information about EAA, see Network Management and Monitoring Configuration Guide.
For link redundancy, deploy multiple RRs on the spine nodes in a data center, and connect each redundant ED to the transport network through multiple links.
Restrictions and guidelines: EVPN-DCI configuration
On an ED, make sure the VSI interfaces configured with L3 VXLAN IDs use the same MAC address. To modify the MAC address of a VSI interface, use the mac-address command.
EVPN-DCI tasks at a glance
To configure EVPN-DCI, perform the following tasks on EDs:
1. Enabling DCI
2. Configuring route reorigination on EDs
¡ Enabling route nexthop replacement and route router MAC replacement
¡ Enabling an ED to replace the L3 VXLAN ID, RD, and route targets of BGP EVPN routes
3. (Optional.) Configuring VXLAN mapping
Perform this task to provide Layer 2 connectivity for a tenant subnet that uses different VXLAN IDs in multiple data centers.
4. Configuring the BGP EVPN address family and the BGP VPNv4 or VPNv6 address family to exchange routes
You must perform this task if data centers are interconnected through an MPLS L3VPN network.
5. (Optional.) Configuring EVPN-DCI dualhoming
Prerequisites for EVPN-DCI
Before you configure EVPN-DCI, complete basic EVPN configuration for each data center. For more information about basic EVPN configuration, see "Configuring EVPN VXLAN."
Enabling DCI
About this task
For EDs to automatically establish VXLAN-DCI tunnels, you must enable DCI on the Layer 3 interfaces that interconnect the EDs.
An ED establishes VXLAN-DCI tunnels based on BGP EVPN routes. If DCI is disabled on the outgoing interfaces to remote sites, EDs cannot establish VXLAN-DCI tunnels.
Procedure
1. Enter system view.
system-view
2. Enter interface view.
interface interface-type interface-number
3. Enable DCI.
dci enable
By default, DCI is disabled on an interface.
You cannot enable DCI on a subinterface.
Configuring route reorigination on EDs
Enabling route nexthop replacement and route router MAC replacement
1. Enter system view.
system-view
2. Configure a global router ID.
router id router-id
By default, no global router ID is configured.
3. Enable a BGP instance and enter BGP instance view.
bgp as-number [ instance instance-name ]
By default, BGP is disabled, and no BGP instances exist.
4. Specify local VTEPs and remote EDs as BGP peers.
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } as-number as-number
5. Create the BGP EVPN address family and enter BGP EVPN address family view.
address-family l2vpn evpn
6. Enable BGP to exchange BGP EVPN routes with a peer or peer group.
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } enable
By default, BGP does not exchange BGP EVPN routes with peers.
7. Set the local router as the next hop for routes advertised to a peer or peer group.
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } next-hop-local
The default settings for this command are as follows:
¡ BGP sets the local router as the next hop for all routes advertised to an EBGP peer or peer group.
¡ BGP does not modify the next hop for EBGP routes advertised to an IBGP peer or peer group.
The peers specified in this task must be VTEPs in the local data center.
8. Enable route router MAC replacement for a peer or peer group.
peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } router-mac-local
By default, the device does not modify the router MAC address of routes before advertising the routes.
This command enables the device to use its router MAC address to replace the router MAC address of routes received from and advertised to a peer or peer group.
The peers specified in this task must be remote EDs.
Enabling an ED to replace the L3 VXLAN ID, RD, and route targets of BGP EVPN routes
About this task
In an EVPN-DCI network, use this feature to hide the L3 VXLAN IDs of data centers or enable communication between data centers that use different L3 VXLAN IDs or route targets.
After you enable this feature on an ED, the ED performs the following operations after receiving BGP EVPN routes:
1. Matches the route targets of the routes with the import route targets of local VPN instances.
2. Replaces the L3 VXLAN ID, RD, and route targets of the routes with those of the matching local VPN instance.
3. Advertises the routes to a VTEP or remote ED.
After you execute the peer re-originated command, the ED advertises only reoriginated BGP EVPN routes. For the ED to advertise both original and reoriginated BGP EVPN routes, execute the peer advertise original-route command.
An ED configured with the peer re-originated and peer advertise original-route commands advertises both original and reoriginated BGP EVPN routes. For the ED to advertise only original BGP EVPN routes, execute the peer suppress re-originated command on the ED.
Restrictions and guidelines
If the RD of a received BGP EVPN route is identical to the RD of the matching local VPN instance, an ED does not replace the L3 VXLAN ID and route targets of the route or reoriginate the route. As a result, the ED does not advertise the route. As a best practice, assign unique RDs to VPN instances on different EVPN gateways and EDs when you use this command.
Procedure
1. Enter system view.
system-view
2. Enter BGP instance view.
bgp as-number [ instance instance-name ]
3. Enter BGP EVPN address family view.
address-family l2vpn evpn
4. Replace the L3 VXLAN ID, RD, and route targets of received BGP EVPN routes.
peer { group-name | ipv4-address [ mask-length ] } re-originated [ ip-prefix | mac-ip ] [ replace-rt ]
By default, the device does not modify the L3 VXLAN ID, RD, or route targets of the BGP EVPN routes that are received from peers or peer groups.
5. (Optional.) Enable the device to advertise original BGP EVPN routes to a peer or peer group.
peer { group-name | ipv4-address [ mask-length ] } advertise original-route
By default, the device advertises reoriginated BGP EVPN routes to peers and peer groups after the peer re-originated command is executed.
6. (Optional.) Suppress advertisement of reoriginated BGP EVPN routes to a peer or peer group.
peer { group-name | ipv4-address [ mask-length ] } suppress re-originated { ip-prefix | mac-ip }
By default, the device advertises reoriginated BGP EVPN routes to peers and peer groups after the peer re-originated command is executed.
Configuring VXLAN mapping
About this task
The VXLAN mapping feature provides Layer 2 connectivity for a tenant subnet that uses different VXLAN IDs in multiple data centers.
If you map a local VXLAN to a remote VXLAN on an ED, the ED processes routes as follows:
· When the ED receives the local VXLAN's MAC/IP advertisement routes from local VTEPs, it performs the following operations:
¡ Adds the routes to the local VXLAN.
¡ Replaces the VXLAN ID of the routes with the remote VXLAN ID and advertises the routes to remote EDs.
· When the ED receives the remote VXLAN's MAC/IP advertisement routes from a remote data center, it adds the routes to the local VXLAN.
VXLAN mapping includes the following types:
· Non-intermediate VXLAN mapping—When two data centers use different VXLAN IDs for a subnet, map the local VXLAN to the remote VXLAN on the ED of one data center. For example, for VXLAN 10 of data center 1 to communicate with VXLAN 20 of data center 2, map VXLAN 10 to VXLAN 20 on the ED of data center 1.
· Intermediate VXLAN mapping—When multiple data centers use different VXLAN IDs for a subnet, map the VXLANs to an intermediate VXLAN on all EDs. For example, data center 1 uses VXLAN 10, data center 2 uses VXLAN 20, and data center 3 uses VXLAN 30. To provide connectivity for the VXLANs, map them to intermediate VXLAN 500 on EDs of the data centers. You must use intermediate VXLAN mapping if more than two data centers use different VXLAN IDs. The intermediate VXLAN can be used only for VXLAN mapping, and it cannot be used for common VXLAN services.
Restrictions and guidelines
You must create mapped remote VXLANs on the device, create an EVPN instance for each remote VXLAN, and configure RD and route target settings for the EVPN instances.
When you use VXLAN mapping, follow these route target restrictions:
· EVPN instances and EVPN address family of VPN instances do not have the same export targets.
· EVPN instances and EVPN address family of the public instance do not have the same export targets.
Procedure
1. Enter system view.
system-view
2. Enter VSI view.
vsi vsi-name
3. Enter EVPN instance view.
evpn encapsulation vxlan
4. Map the local VXLAN to a remote VXLAN.
mapping vni vxlan-id
By default, a local VXLAN is not mapped to any remote VXLAN.
A mapped remote VXLAN ID cannot be an L3 VXLAN ID specified by using the l3-vni command.
Configuring the BGP EVPN address family and the BGP VPNv4 or VPNv6 address family to exchange routes
About route exchange
When data centers are interconnected through an MPLS L3VPN network, EVPN EDs also act as MPLS L3VPN PEs. To enable communication between the data centers, you must perform the following tasks on the EDs:
· Configure both MPLS L3VPN and EVPN.
· Configure the BGP EVPN address family and the BGP VPNv4 or VPNv6 address family to exchange routes.
Figure 3 Data centers interconnected through an MPLS L3VPN network
Enabling BGP VPNv4 or VPNv6 route advertisement for the BGP EVPN address family
1. Enter system view.
system-view
2. Enter BGP instance view.
bgp as-number [ instance instance-name ]
3. Enter BGP EVPN address family view.
address-family l2vpn evpn
4. Enable BGP VPNv4 or VPNv6 route advertisement for the BGP EVPN address family.
advertise l3vpn route [ replace-rt ][ advertise-policy policy-name ]
By default, BGP VPNv4 or VPNv6 routes are not advertised through the BGP EVPN address family.
After you execute this command, the device advertises BGP VPNv4 or VPNv6 routes as IP prefix advertisement routes through the BGP EVPN address family.
Enabling BGP EVPN route advertisement for the BGP VPNv4 or VPNv6 address family
1. Enter system view.
system-view
2. Enter BGP instance view.
bgp as-number [ instance instance-name ]
3. Enter BGP VPNv4 address family view or BGP VPNv6 address family view.
address-family { vpnv4 | vpnv6 }
4. Enable BGP EVPN route advertisement for the BGP VPNv4 or VPNv6 address family.
advertise evpn route [ replace-rt ][ advertise-policy policy-name ]
By default, BGP EVPN routes are not advertised through the BGP VPNv4 or VPNv6 address family.
After you execute this command, the device advertises IP prefix advertisement routes and MAC/IP advertisement routes that contain host route information through the BGP VPNv4 or VPNv6 address family.
Configuring EVPN-DCI dualhoming
About this task
For high availability and load sharing, you can deploy two EDs at a data center. To virtualize the redundant EDs into one device, you must configure the same virtual ED address on them.
Restrictions and guidelines
Do not configure a virtual ED address on the only ED of a data center.
On a redundant ED, the virtual ED address must be the IP address of a loopback interface, and it cannot be the BGP peer IP address of the ED.
Redundant EDs cannot provide access service for local VMs. They can act only as EDs. For correct communication, do not redistribute external routes on only one of the redundant EDs. However, you can redistribute the same external routes on both EDs.
To use EVPN-DCI dual-homing, make sure the overlay and undelay networks are both IPv4 networks or both IPv6 networks.
Procedure
1. Enter system view.
system-view
2. Configure a virtual ED address.
evpn edge group { group-ipv4 | group-ipv6 }
By default, no virtual ED address is configured.
EVPN-DCI configuration examples
Example: Configuring a basic EVPN-DCI network
Network configuration
As shown in Figure 4:
· Configure VXLAN 10 on Router A through Router D to provide connectivity for the VMs in the data centers.
· Configure Router A and Router D as VTEPs, and configure Router B and Router C as EDs.
Procedure
1. Configure IP addresses and unicast routing settings:
# Assign IP addresses to the interfaces, as shown in Figure 4. (Details not shown.)
# Configure OSPF on the transport network for the routers to reach one another. (Details not shown.)
2. Configure Router A:
# Enable L2VPN.
<RouterA> system-view
[RouterA] l2vpn enable
# Disable remote MAC address learning.
[RouterA] vxlan tunnel mac-learning disable
# Create VXLAN 10 on VSI vpna.
[RouterA] vsi vpna
[RouterA-vsi-vpna] vxlan 10
[RouterA-vsi-vpna-vxlan-10] quit
# Create an EVPN instance on VSI vpna. Configure the router to automatically generate an RD, and manually configure a route target for the EVPN instance.
[RouterA-vsi-vpna] evpn encapsulation vxlan
[RouterA-vsi-vpna-evpn-vxlan] route-distinguisher auto
[RouterA-vsi-vpna-evpn-vxlan] vpn-target 123:456
[RouterA-vsi-vpna-evpn-vxlan] quit
[RouterA-vsi-vpna] quit
# Configure BGP to advertise BGP EVPN routes.
[RouterA] bgp 100
[RouterA-bgp-default] peer 2.2.2.2 as-number 100
[RouterA-bgp-default] peer 2.2.2.2 connect-interface loopback 0
[RouterA-bgp-default] address-family l2vpn evpn
[RouterA-bgp-default-evpn] peer 2.2.2.2 enable
[RouterA-bgp-default-evpn] quit
[RouterA-bgp-default] quit
# Map site-facing interface Ten-GigabitEthernet 3/1/1 to VSI vpna.
[RouterA] interface ten-gigabitethernet 3/1/1
[RouterA-Ten-GigabitEthernet3/1/1] xconnect vsi vpna
[RouterA-Ten-GigabitEthernet3/1/1] quit
3. Configure Router B:
# Enable L2VPN.
<RouterB> system-view
[RouterB] l2vpn enable
# Disable remote MAC address learning.
[RouterB] vxlan tunnel mac-learning disable
# Enable DCI on the Layer 3 interface that connects Router B to Router C for the routers to establish a VXLAN-DCI tunnel.
[RouterB] interface ten-gigabitethernet 3/1/2
[RouterB-Ten-GigabitEthernet3/1/2] dci enable
[RouterB-Ten-GigabitEthernet3/1/2] quit
# Create VXLAN 10 on VSI vpna.
[RouterB] vsi vpna
[RouterB-vsi-vpna] vxlan 10
[RouterB-vsi-vpna-vxlan-10] quit
# Create an EVPN instance on VSI vpna. Configure the router to automatically generate an RD, and manually configure a route target for the EVPN instance.
[RouterB-vsi-vpna] evpn encapsulation vxlan
[RouterB-vsi-vpna-evpn-vxlan] route-distinguisher auto
[RouterB-vsi-vpna-evpn-vxlan] vpn-target 123:456
[RouterB-vsi-vpna-evpn-vxlan] quit
[RouterB-vsi-vpna] quit
# Configure BGP to advertise BGP EVPN routes. Enable nexthop replacement for routes advertised to Router A, and enable router MAC replacement for routes advertised to and received from Router C.
[RouterB] bgp 100
[RouterB-bgp-default] peer 3.3.3.3 as-number 200
[RouterB-bgp-default] peer 3.3.3.3 connect-interface loopback 0
[RouterB-bgp-default] peer 3.3.3.3 ebgp-max-hop 64
[RouterB-bgp-default] peer 1.1.1.1 as-number 100
[RouterB-bgp-default] peer 1.1.1.1 connect-interface loopback 0
[RouterB-bgp-default] address-family l2vpn evpn
[RouterB-bgp-default-evpn] peer 3.3.3.3 enable
[RouterB-bgp-default-evpn] peer 3.3.3.3 router-mac-local
[RouterB-bgp-default-evpn] peer 1.1.1.1 enable
[RouterB-bgp-default-evpn] peer 1.1.1.1 next-hop-local
[RouterB-bgp-default-evpn] quit
[RouterB-bgp-default] quit
4. Configure Router C:
# Enable L2VPN.
<RouterC> system-view
[RouterC] l2vpn enable
# Disable remote MAC address learning.
[RouterC] vxlan tunnel mac-learning disable
# Enable DCI on the Layer 3 interface that connects Router C to Router B for the routers to establish a VXLAN-DCI tunnel.
[RouterC] interface ten-gigabitethernet 3/1/1
[RouterC-Ten-GigabitEthernet3/1/1] dci enable
[RouterC-Ten-GigabitEthernet3/1/1] quit
# Create VXLAN 10 on VSI vpna.
[RouterC] vsi vpna
[RouterC-vsi-vpna] vxlan 10
[RouterC-vsi-vpna-vxlan-10] quit
# Create an EVPN instance on VSI vpna. Configure the router to automatically generate an RD, and manually configure a route target for the EVPN instance.
[RouterC-vsi-vpna] evpn encapsulation vxlan
[RouterC-vsi-vpna-evpn-vxlan] route-distinguisher auto
[RouterC-vsi-vpna-evpn-vxlan] vpn-target 123:456
[RouterC-vsi-vpna-evpn-vxlan] quit
[RouterC-vsi-vpna] quit
# Configure BGP to advertise BGP EVPN routes. Enable nexthop replacement for routes advertised to Router D, and enable router MAC replacement for routes advertised to and received from Router B.
[RouterC] bgp 200
[RouterC-bgp-default] peer 2.2.2.2 as-number 100
[RouterC-bgp-default] peer 2.2.2.2 connect-interface loopback 0
[RouterC-bgp-default] peer 2.2.2.2 ebgp-max-hop 64
[RouterC-bgp-default] peer 4.4.4.4 as-number 200
[RouterC-bgp-default] peer 4.4.4.4 connect-interface loopback 0
[RouterC-bgp-default] address-family l2vpn evpn
[RouterC-bgp-default-evpn] peer 2.2.2.2 enable
[RouterC-bgp-default-evpn] peer 2.2.2.2 router-mac-local
[RouterC-bgp-default-evpn] peer 4.4.4.4 enable
[RouterC-bgp-default-evpn] peer 4.4.4.4 next-hop-local
[RouterC-bgp-default-evpn] quit
[RouterC-bgp-default] quit
5. Configure Router D:
# Enable L2VPN.
<RouterD> system-view
[RouterD] l2vpn enable
# Disable remote MAC address learning.
[RouterD] vxlan tunnel mac-learning disable
# Create VXLAN 10 on VSI vpna.
[RouterD] vsi vpna
[RouterD-vsi-vpna] vxlan 10
[RouterD-vsi-vpna-vxlan-10] quit
# Create an EVPN instance on VSI vpna. Configure the router to automatically generate an RD, and manually configure a route target for the EVPN instance.
[RouterD-vsi-vpna] evpn encapsulation vxlan
[RouterD-vsi-vpna-evpn-vxlan] route-distinguisher auto
[RouterD-vsi-vpna-evpn-vxlan] vpn-target 123:456
[RouterD-vsi-vpna-evpn-vxlan] quit
[RouterD-vsi-vpna] quit
# Configure BGP to advertise BGP EVPN routes.
[RouterD] bgp 200
[RouterD-bgp-default] peer 3.3.3.3 as-number 200
[RouterD-bgp-default] peer 3.3.3.3 connect-interface loopback 0
[RouterD-bgp-default] address-family l2vpn evpn
[RouterD-bgp-default-evpn] peer 3.3.3.3 enable
[RouterD-bgp-default-evpn] quit
[RouterD-bgp-default] quit
# Map site-facing interface Ten-GigabitEthernet 3/1/1 to VSI vpna.
[RouterD] interface ten-gigabitethernet 3/1/1
[RouterD-Ten-GigabitEthernet3/1/1] xconnect vsi vpna
[RouterD-Ten-GigabitEthernet3/1/1] quit
Verifying the configuration
1. Verify the configuration on EDs. (This example uses Router B.)
# Verify that the ED has discovered Router A and Router C through IMET routes and has established VXLAN and VXLAN-DCI tunnels to the routers.
[RouterB] display evpn auto-discovery imet
Total number of automatically discovered peers: 2
VSI name: vpna
RD PE_address Tunnel_address Tunnel mode VXLAN ID
1:10 1.1.1.1 1.1.1.1 VXLAN 10
1:10 3.3.3.3 3.3.3.3 VXLAN-DCI 10
# Verify that the VXLAN and VXLAN-DCI tunnels on the ED are up.
[RouterB] display interface tunnel
Tunnel0
Interface index: 261
Current state: UP
Line protocol state: UP
Description: Tunnel0 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1464
Internet protocol processing: Disabled
Last clearing of counters: Never
Tunnel source 2.2.2.2, destination 1.1.1.1
Tunnel protocol/transport UDP_VXLAN/IP
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
Tunnel1
Interface index: 262
Current state: UP
Line protocol state: UP
Description: Tunnel1 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1500
Internet protocol processing: Disabled
Last clearing of counters: Never
Tunnel source 2.2.2.2, destination 3.3.3.3
Tunnel protocol/transport UDP_VXLAN-DCI/IP
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
# Verify that the VXLAN and VXLAN-DCI tunnels have been assigned to the VXLAN.
[RouterB] display l2vpn vsi name vpna verbose
VSI Name: vpna
VSI Index : 0
VSI State : Up
MTU : 1500
Diffserv Mode : -
Bandwidth : Unlimited
Broadcast Restrain : 5120 kbps
Multicast Restrain : 5120 kbps
Unknown Unicast Restrain: 5120 kbps
MAC Learning : Enabled
MAC Table Limit : Unlimited
MAC Learning rate : -
Local MAC aging time : 300 sec
Remote MAC aging time : 300 sec
Drop Unknown : Disabled
PW Redundancy Mode : Slave
DSCP : -
Service Class : -
Flooding : Enabled
ESI : 0000.0000.0000.0000.0000
Redundancy Mode : All-active
Straight-fwd PW-to-AC : Disabled
Statistics : Disabled
VXLAN ID : 10
Tunnel Statistics : Disabled
Tunnels:
Tunnel Name Link ID State Type Flood proxy
Tunnel0 0x5000000 UP Auto Disabled
Tunnel1 0x5000001 UP Auto Disabled
# Verify that the ED has generated EVPN MAC address entries for the VMs.
[RouterB] display evpn route mac
Flags: D - Dynamic B - BGP G - Gateway L - Local active M - Mapping
VSI name: vpna
MAC address Link ID/Name Flags Encap Next hop
0001-0001-0011 Tunnel0 B VXLAN 1.1.1.1
0001-0001-0033 Tunnel1 B VXLAN 3.3.3.3
2. Verify that VM 1 and VM 2 can communicate. (Details not shown.)
Example: Configuring EVPN-DCI intermediate VXLAN mapping
Network configuration
As shown in Figure 5:
· Configure VXLAN 10 on VTEP Router A and ED Router B, and configure VXLAN 30 on VTEP Router D and ED Router C.
· Configure intermediate VXLAN mapping for VXLAN 10 and VXLAN 30 to have Layer 2 connectivity:
¡ Map VXLAN 10 to intermediate VXLAN 500 on Router B.
¡ Map VXLAN 30 to intermediate VXLAN 500 on Router C.
Procedure
1. Configure IP addresses and unicast routing settings:
# Assign IP addresses to the interfaces, as shown in Figure 5. (Details not shown.)
# Configure OSPF on the transport network for the routers to reach one another. (Details not shown.)
2. Configure Router A:
# Enable L2VPN.
<RouterA> system-view
[RouterA] l2vpn enable
# Disable remote MAC address learning.
[RouterA] vxlan tunnel mac-learning disable
# Create VXLAN 10 on VSI vpna.
[RouterA] vsi vpna
[RouterA-vsi-vpna] vxlan 10
[RouterA-vsi-vpna-vxlan-10] quit
# Create an EVPN instance on VSI vpna. Configure the router to automatically generate an RD and a route target for the EVPN instance.
[RouterA-vsi-vpna] evpn encapsulation vxlan
[RouterA-vsi-vpna-evpn-vxlan] route-distinguisher auto
[RouterA-vsi-vpna-evpn-vxlan] vpn-target auto
[RouterA-vsi-vpna-evpn-vxlan] quit
[RouterA-vsi-vpna] quit
# Configure BGP to advertise BGP EVPN routes.
[RouterA] bgp 100
[RouterA-bgp-default] peer 2.2.2.2 as-number 100
[RouterA-bgp-default] peer 2.2.2.2 connect-interface loopback 0
[RouterA-bgp-default] address-family l2vpn evpn
[RouterA-bgp-default-evpn] peer 2.2.2.2 enable
[RouterA-bgp-default-evpn] quit
[RouterA-bgp-default] quit
# Map site-facing interface Ten-GigabitEthernet 3/1/1 to VSI vpna.
[RouterA] interface ten-gigabitethernet 3/1/1
[RouterA-Ten-GigabitEthernet3/1/1] xconnect vsi vpna
[RouterA-Ten-GigabitEthernet3/1/1] quit
3. Configure Router B:
# Enable L2VPN.
<RouterB> system-view
[RouterB] l2vpn enable
# Disable remote MAC address learning.
[RouterB] vxlan tunnel mac-learning disable
# Enable DCI on the Layer 3 interface that connects Router B to Router C for the routers to establish a VXLAN-DCI tunnel.
[RouterB] interface ten-gigabitethernet 3/1/2
[RouterB-Ten-GigabitEthernet3/1/2] dci enable
[RouterB-Ten-GigabitEthernet3/1/2] quit
# Create VXLAN 10 on VSI vpna.
[RouterB] vsi vpna
[RouterB-vsi-vpna] vxlan 10
[RouterB-vsi-vpna-vxlan-10] quit
# Create an EVPN instance on VSI vpna. Configure the router to automatically generate an RD and a route target for the EVPN instance.
[RouterB-vsi-vpna] evpn encapsulation vxlan
[RouterB-vsi-vpna-evpn-vxlan] route-distinguisher auto
[RouterB-vsi-vpna-evpn-vxlan] vpn-target auto
# Map local VXLAN 10 to intermediate VXLAN 500.
[RouterB-vsi-vpna-evpn-vxlan] mapping vni 500
[RouterB-vsi-vpna-evpn-vxlan] quit
[RouterB-vsi-vpna] quit
# Create VXLAN 500 on VSI vpnb. The router will replace the VXLAN ID of VXLAN 10's traffic with VXLAN ID 500 when performing Layer 2 forwarding.
[RouterB] vsi vpnb
[RouterB-vsi-vpnb] vxlan 500
[RouterB-vsi-vpnb-vxlan-500] quit
# Create an EVPN instance on VSI vpnb. Configure the router to automatically generate an RD, and manually configure a route target for the EVPN instance.
[RouterB-vsi-vpnb] evpn encapsulation vxlan
[RouterB-vsi-vpnb-evpn-vxlan] route-distinguisher auto
[RouterB-vsi-vpnb-evpn-vxlan] vpn-target 123:456
[RouterB-vsi-vpnb-evpn-vxlan] quit
[RouterB-vsi-vpnb] quit
# Configure BGP to advertise BGP EVPN routes. Enable nexthop replacement for routes advertised to Router A, and enable router MAC replacement for routes advertised to and received from Router C.
[RouterB] bgp 100
[RouterB-bgp-default] peer 3.3.3.3 as-number 200
[RouterB-bgp-default] peer 3.3.3.3 connect-interface loopback 0
[RouterB-bgp-default] peer 3.3.3.3 ebgp-max-hop 64
[RouterB-bgp-default] peer 1.1.1.1 as-number 100
[RouterB-bgp-default] peer 1.1.1.1 connect-interface loopback 0
[RouterB-bgp-default] address-family l2vpn evpn
[RouterB-bgp-default-evpn] peer 3.3.3.3 enable
[RouterB-bgp-default-evpn] peer 3.3.3.3 router-mac-local
[RouterB-bgp-default-evpn] peer 1.1.1.1 enable
[RouterB-bgp-default-evpn] peer 1.1.1.1 next-hop-local
[RouterB-bgp-default-evpn] quit
[RouterB-bgp-default] quit
4. Configure Router C:
# Enable L2VPN.
<RouterC> system-view
[RouterC] l2vpn enable
# Disable remote MAC address learning.
[RouterC] vxlan tunnel mac-learning disable
# Enable DCI on the Layer 3 interface that connects Router C to Router B for the routers to establish a VXLAN-DCI tunnel.
[RouterC] interface ten-gigabitethernet 3/1/1
[RouterC-Ten-GigabitEthernet3/1/1] dci enable
[RouterC-Ten-GigabitEthernet3/1/1] quit
# Create VXLAN 30 on VSI vpna.
[RouterC] vsi vpna
[RouterC-vsi-vpna] vxlan 30
[RouterC-vsi-vpna-vxlan-30] quit
# Create an EVPN instance on VSI vpna. Configure the router to automatically generate an RD and a route target for the EVPN instance.
[RouterC-vsi-vpna] evpn encapsulation vxlan
[RouterC-vsi-vpna-evpn-vxlan] route-distinguisher auto
[RouterC-vsi-vpna-evpn-vxlan] vpn-target auto
# Map local VXLAN 30 to intermediate VXLAN 500.
[RouterC-vsi-vpna-evpn-vxlan] mapping vni 500
[RouterC-vsi-vpna-evpn-vxlan] quit
[RouterC-vsi-vpna] quit
# Create VXLAN 500 on VSI vpnb. The router will replace the VXLAN ID of VXLAN 30's traffic with VXLAN ID 500 when performing Layer 2 forwarding.
[RouterC] vsi vpnb
[RouterC-vsi-vpnb] vxlan 500
[RouterC-vsi-vpnb-vxlan-500] quit
# Create an EVPN instance on VSI vpnb. Configure the router to automatically generate an RD, and manually configure a route target for the EVPN instance.
[RouterC-vsi-vpnb] evpn encapsulation vxlan
[RouterC-vsi-vpnb-evpn-vxlan] route-distinguisher auto
[RouterC-vsi-vpnb-evpn-vxlan] vpn-target 123:456
[RouterC-vsi-vpnb-evpn-vxlan] quit
[RouterC-vsi-vpnb] quit
# Configure BGP to advertise BGP EVPN routes. Enable nexthop replacement for routes advertised to Router D, and enable router MAC replacement for routes advertised to and received from Router B.
[RouterC] bgp 200
[RouterC-bgp-default] peer 2.2.2.2 as-number 100
[RouterC-bgp-default] peer 2.2.2.2 connect-interface loopback 0
[RouterC-bgp-default] peer 2.2.2.2 ebgp-max-hop 64
[RouterC-bgp-default] peer 4.4.4.4 as-number 200
[RouterC-bgp-default] peer 4.4.4.4 connect-interface loopback 0
[RouterC-bgp-default] address-family l2vpn evpn
[RouterC-bgp-default-evpn] peer 2.2.2.2 enable
[RouterC-bgp-default-evpn] peer 2.2.2.2 router-mac-local
[RouterC-bgp-default-evpn] peer 4.4.4.4 enable
[RouterC-bgp-default-evpn] peer 4.4.4.4 next-hop-local
[RouterC-bgp-default-evpn] quit
[RouterC-bgp-default] quit
5. Configure Router D:
# Enable L2VPN.
<RouterD> system-view
[RouterD] l2vpn enable
# Disable remote MAC address learning.
[RouterD] vxlan tunnel mac-learning disable
# Create VXLAN 30 on VSI vpna.
[RouterD] vsi vpna
[RouterD-vsi-vpna] vxlan 30
[RouterD-vsi-vpna-vxlan-30] quit
# Create an EVPN instance on VSI vpna. Configure the router to automatically generate an RD and a route target for the EVPN instance.
[RouterD-vsi-vpna] evpn encapsulation vxlan
[RouterD-vsi-vpna-evpn-vxlan] route-distinguisher auto
[RouterD-vsi-vpna-evpn-vxlan] vpn-target auto
[RouterD-vsi-vpna-evpn-vxlan] quit
[RouterD-vsi-vpna] quit
# Configure BGP to advertise BGP EVPN routes.
[RouterD] bgp 200
[RouterD-bgp-default] peer 3.3.3.3 as-number 200
[RouterD-bgp-default] peer 3.3.3.3 connect-interface loopback 0
[RouterD-bgp-default] address-family l2vpn evpn
[RouterD-bgp-default-evpn] peer 3.3.3.3 enable
[RouterD-bgp-default-evpn] quit
[RouterD-bgp-default] quit
# Map site-facing interface Ten-GigabitEthernet 3/1/1 to VSI vpna.
[RouterD] interface ten-gigabitethernet 3/1/1
[RouterD-Ten-GigabitEthernet3/1/1] xconnect vsi vpna
[RouterD-Ten-GigabitEthernet3/1/1] quit
Verifying the configuration
1. Verify the configuration on EDs. (This example uses Router B.)
# Verify that the ED has discovered Router A and Router C through IMET routes and has established VXLAN and VXLAN-DCI tunnels to the routers.
[RouterB] display evpn auto-discovery imet
Total number of automatically discovered peers: 2
VSI name: vpna
RD PE_address Tunnel_address Tunnel mode VXLAN ID
1:10 1.1.1.1 1.1.1.1 VXLAN 10
1:500 3.3.3.3 3.3.3.3 VXLAN-DCI 500
# Verify that the VXLAN and VXLAN-DCI tunnels on the ED are up.
[RouterB] display interface tunnel
Tunnel0
Interface index: 261
Current state: UP
Line protocol state: UP
Description: Tunnel0 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1464
Internet protocol processing: Disabled
Last clearing of counters: Never
Tunnel source 2.2.2.2, destination 1.1.1.1
Tunnel protocol/transport UDP_VXLAN/IP
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
Tunnel1
Interface index: 262
Current state: UP
Line protocol state: UP
Description: Tunnel1 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1500
Internet protocol processing: Disabled
Last clearing of counters: Never
Tunnel source 2.2.2.2, destination 3.3.3.3
Tunnel protocol/transport UDP_VXLAN-DCI/IP
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
# Verify that the VXLAN and VXLAN-DCI tunnels have been assigned to VXLAN 10, and that no tunnels are assigned to intermediate VXLAN 500.
[RouterB] display l2vpn vsi verbose
VSI Name: vpna
VSI Index : 0
VSI State : Up
MTU : 1500
Diffserv Mode : -
Bandwidth : Unlimited
Broadcast Restrain : 5120 kbps
Multicast Restrain : 5120 kbps
Unknown Unicast Restrain: 5120 kbps
MAC Learning : Enabled
MAC Table Limit : Unlimited
MAC Learning rate : -
Local MAC aging time : 300 sec
Remote MAC aging time : 300 sec
Drop Unknown : Disabled
PW Redundancy Mode : Slave
DSCP : -
Service Class : -
Flooding : Enabled
ESI : 0000.0000.0000.0000.0000
Redundancy Mode : All-active
Straight-fwd PW-to-AC : Disabled
Statistics : Disabled
VXLAN ID : 10
Tunnel Statistics : Disabled
Tunnels:
Tunnel Name Link ID State Type Flood proxy
Tunnel0 0x5000000 UP Auto Disabled
Tunnel1 0x5000001 UP Auto Disabled
VSI Name: vpnb
VSI Index : 1
VSI State : Up
MTU : 1500
Diffserv Mode : -
Bandwidth : Unlimited
Broadcast Restrain : 5120 kbps
Multicast Restrain : 5120 kbps
Unknown Unicast Restrain: 5120 kbps
MAC Learning : Enabled
MAC Table Limit : Unlimited
MAC Learning rate : -
Local MAC aging time : 300 sec
Remote MAC aging time : 300 sec
Drop Unknown : Disabled
PW Redundancy Mode : Slave
DSCP : -
Service Class : -
Flooding : Enabled
ESI : 0000.0000.0000.0000.0000
Redundancy Mode : All-active
Straight-fwd PW-to-AC : Disabled
Statistics : Disabled
VXLAN ID : 500
Tunnel Statistics : Disabled
# Verify that the ED has generated EVPN MAC address entries for the VMs, and the remote MAC address entry has the M flag.
[RouterB] display evpn route mac
Flags: D - Dynamic B - BGP G - Gateway L - Local active M - Mapping
VSI name: vpna
MAC address Link ID/Name Flags Encap Next hop
0001-0001-0011 Tunnel0 B VXLAN 1.1.1.1
0001-0001-0033 Tunnel1 BM VXLAN 3.3.3.3
2. Verify that VM 1 and VM 2 can communicate. (Details not shown.)
Example: Configuring EVPN-DCI IPv4 Layer 3 communication
Network configuration
As shown in Figure 6:
· Configure VXLAN 10 for data center 1, and configure VXLAN 20 for data center 2.
· Configure Router A and Router D as distributed EVPN gateways to perform Layer 3 forwarding between VXLAN 10 and VXLAN 20.
· Configure Router B and Router C as EDs.
Procedure
1. Configure IP addresses and unicast routing settings:
# On VM 1, specify 10.1.1.1 as the gateway address. On VM 2, specify 10.1.2.1 as the gateway address. (Details not shown.)
# Assign IP addresses to the interfaces, as shown in Figure 6. (Details not shown.)
# Configure OSPF on the transport network for the routers to reach one another. (Details not shown.)
2. Configure Router A:
# Enable L2VPN.
<RouterA> system-view
[RouterA] l2vpn enable
# Disable remote MAC address learning and remote ARP learning.
[RouterA] vxlan tunnel mac-learning disable
[RouterA] vxlan tunnel arp-learning disable
# Create VXLAN 10 on VSI vpna.
[RouterA] vsi vpna
[RouterA-vsi-vpna] vxlan 10
[RouterA-vsi-vpna-vxlan-10] quit
# Create an EVPN instance on VSI vpna. Configure the router to automatically generate an RD and a route target for the EVPN instance.
[RouterA-vsi-vpna] evpn encapsulation vxlan
[RouterA-vsi-vpna-evpn-vxlan] route-distinguisher auto
[RouterA-vsi-vpna-evpn-vxlan] vpn-target auto
[RouterA-vsi-vpna-evpn-vxlan] quit
[RouterA-vsi-vpna] quit
# Configure BGP to advertise BGP EVPN routes.
[RouterA] bgp 100
[RouterA-bgp-default] peer 2.2.2.2 as-number 100
[RouterA-bgp-default] peer 2.2.2.2 connect-interface loopback 0
[RouterA-bgp-default] address-family l2vpn evpn
[RouterA-bgp-default-evpn] peer 2.2.2.2 enable
[RouterA-bgp-default-evpn] quit
[RouterA-bgp-default] quit
# Map site-facing interface Ten-GigabitEthernet 3/1/1 to VSI vpna.
[RouterA] interface ten-gigabitethernet 3/1/1
[RouterA-Ten-GigabitEthernet3/1/1] xconnect vsi vpna
[RouterA-Ten-GigabitEthernet3/1/1] quit
# Configure RD and route target settings for VPN instance vpn1.
[RouterA] ip vpn-instance vpn1
[RouterA-vpn-instance-vpn1] route-distinguisher 1:1
[RouterA-vpn-instance-vpn1] address-family ipv4
[RouterA-vpn-ipv4-vpn1] vpn-target 2:2
[RouterA-vpn-ipv4-vpn1] quit
[RouterA-vpn-instance-vpn1] address-family evpn
[RouterA-vpn-evpn-vpn1] vpn-target 1:1
[RouterA-vpn-evpn-vpn1] quit
[RouterA-vpn-instance-vpn1] quit
# Configure VSI-interface 1 as a distributed gateway.
[RouterA] interface vsi-interface 1
[RouterA-Vsi-interface1] ip binding vpn-instance vpn1
[RouterA-Vsi-interface1] ip address 10.1.1.1 255.255.255.0
[RouterA-Vsi-interface1] mac-address 1-1-1
[RouterA-Vsi-interface1] distributed-gateway local
[RouterA-Vsi-interface1] quit
# Create VSI-interface 2. Associate VSI-interface 2 with VPN instance vpn1, and configure the L3 VXLAN ID as 1000 for the VPN instance.
[RouterA] interface vsi-interface 2
[RouterA-Vsi-interface2] ip binding vpn-instance vpn1
[RouterA-Vsi-interface2] l3-vni 1000
[RouterA-Vsi-interface2] quit
# Specify VSI-interface 1 as the gateway interface for VSI vpna.
[RouterA] vsi vpna
[RouterA-vsi-vpna] gateway vsi-interface 1
[RouterA-vsi-vpna] quit
3. Configure Router B:
# Enable L2VPN.
<RouterB> system-view
[RouterB] l2vpn enable
# Disable remote MAC address learning and remote ARP learning.
[RouterB] vxlan tunnel mac-learning disable
[RouterB] vxlan tunnel arp-learning disable
# Enable DCI on the Layer 3 interface that connects Router B to Router C for the routers to establish a VXLAN-DCI tunnel.
[RouterB] interface ten-gigabitethernet 3/1/2
[RouterB-Ten-GigabitEthernet3/1/2] dci enable
[RouterB-Ten-GigabitEthernet3/1/2] quit
# Configure BGP to advertise BGP EVPN routes. Enable nexthop replacement for routes advertised to Router A, and enable router MAC replacement for routes advertised to and received from Router C.
[RouterB] bgp 100
[RouterB-bgp-default] peer 3.3.3.3 as-number 200
[RouterB-bgp-default] peer 3.3.3.3 connect-interface loopback 0
[RouterB-bgp-default] peer 3.3.3.3 ebgp-max-hop 64
[RouterB-bgp-default] peer 1.1.1.1 as-number 100
[RouterB-bgp-default] peer 1.1.1.1 connect-interface loopback 0
[RouterB-bgp-default] address-family l2vpn evpn
[RouterB-bgp-default-evpn] peer 3.3.3.3 enable
[RouterB-bgp-default-evpn] peer 3.3.3.3 router-mac-local
[RouterB-bgp-default-evpn] peer 1.1.1.1 enable
[RouterB-bgp-default-evpn] peer 1.1.1.1 next-hop-local
[RouterB-bgp-default-evpn] quit
[RouterB-bgp-default] quit
# Configure RD and route target settings for VPN instance vpn1.
[RouterB] ip vpn-instance vpn1
[RouterB-vpn-instance-vpn1] route-distinguisher 1:2
[RouterB-vpn-instance-vpn1] address-family ipv4
[RouterB-vpn-ipv4-vpn1] vpn-target 2:2
[RouterB-vpn-ipv4-vpn1] quit
[RouterB-vpn-instance-vpn1] address-family evpn
[RouterB-vpn-evpn-vpn1] vpn-target 1:1
[RouterB-vpn-evpn-vpn1] quit
[RouterB-vpn-instance-vpn1] quit
# Create VSI-interface 2. Associate VSI-interface 2 with VPN instance vpn1, and configure the L3 VXLAN ID as 1000 for the VPN instance.
[RouterB] interface vsi-interface 2
[RouterB-Vsi-interface2] ip binding vpn-instance vpn1
[RouterB-Vsi-interface2] l3-vni 1000
[RouterB-Vsi-interface2] quit
4. Configure Router C:
# Enable L2VPN.
<RouterC> system-view
[RouterC] l2vpn enable
# Disable remote MAC address learning and remote ARP learning.
[RouterC] vxlan tunnel mac-learning disable
[RouterC] vxlan tunnel arp-learning disable
# Enable DCI on the Layer 3 interface that connects Router C to Router B For the routers to establish a VXLAN-DCI tunnel.
[RouterC] interface ten-gigabitethernet 3/1/1
[RouterC-Ten-GigabitEthernet3/1/1] dci enable
[RouterC-Ten-GigabitEthernet3/1/1] quit
# Configure BGP to advertise BGP EVPN routes. Enable nexthop replacement for routes advertised to Router D, and enable router MAC replacement for routes advertised to and received from Router B.
[RouterC] bgp 200
[RouterC-bgp-default] peer 2.2.2.2 as-number 100
[RouterC-bgp-default] peer 2.2.2.2 connect-interface loopback 0
[RouterC-bgp-default] peer 2.2.2.2 ebgp-max-hop 64
[RouterC-bgp-default] peer 4.4.4.4 as-number 200
[RouterC-bgp-default] peer 4.4.4.4 connect-interface loopback 0
[RouterC-bgp-default] address-family l2vpn evpn
[RouterC-bgp-default-evpn] peer 2.2.2.2 enable
[RouterC-bgp-default-evpn] peer 2.2.2.2 router-mac-local
[RouterC-bgp-default-evpn] peer 4.4.4.4 enable
[RouterC-bgp-default-evpn] peer 4.4.4.4 next-hop-local
[RouterC-bgp-default-evpn] quit
[RouterC-bgp-default] quit
# Configure RD and route target settings for VPN instance vpn1.
[RouterC] ip vpn-instance vpn1
[RouterC-vpn-instance-vpn1] route-distinguisher 1:3
[RouterC-vpn-instance-vpn1] address-family ipv4
[RouterC-vpn-ipv4-vpn1] vpn-target 2:2
[RouterC-vpn-ipv4-vpn1] quit
[RouterC-vpn-instance-vpn1] address-family evpn
[RouterC-vpn-evpn-vpn1] vpn-target 1:1
[RouterC-vpn-evpn-vpn1] quit
[RouterC-vpn-instance-vpn1] quit
# Create VSI-interface 2. Associate VSI-interface 2 with VPN instance vpn1, and configure the L3 VXLAN ID as 1000 for the VPN instance.
[RouterC] interface vsi-interface 2
[RouterC-Vsi-interface2] ip binding vpn-instance vpn1
[RouterC-Vsi-interface2] l3-vni 1000
[RouterC-Vsi-interface2] quit
5. Configure Router D:
# Enable L2VPN.
<RouterD> system-view
[RouterD] l2vpn enable
# Disable remote MAC address learning and remote ARP learning.
[RouterD] vxlan tunnel mac-learning disable
[RouterD] vxlan tunnel arp-learning disable
# Create an EVPN instance on VSI vpnb. Configure the router to automatically generate an RD and a route target for the EVPN instance.
[RouterD] vsi vpnb
[RouterD-vsi-vpnb] evpn encapsulation vxlan
[RouterD-vsi-vpnb-evpn-vxlan] route-distinguisher auto
[RouterD-vsi-vpnb-evpn-vxlan] vpn-target auto
[RouterD-vsi-vpnb-evpn-vxlan] quit
# Create VXLAN 20 on VSI vpnb.
[RouterD-vsi-vpnb] vxlan 20
[RouterD-vsi-vpnb-vxlan-20] quit
[RouterD-vsi-vpnb] quit
# Configure BGP to advertise BGP EVPN routes.
[RouterD] bgp 200
[RouterD-bgp-default] peer 3.3.3.3 as-number 200
[RouterD-bgp-default] peer 3.3.3.3 connect-interface loopback 0
[RouterD-bgp-default] address-family l2vpn evpn
[RouterD-bgp-default-evpn] peer 3.3.3.3 enable
[RouterD-bgp-default-evpn] quit
[RouterD-bgp-default] quit
# Map site-facing interface Ten-GigabitEthernet 3/1/1 to VSI vpnb.
[RouterD] interface ten-gigabitethernet 3/1/1
[RouterD-Ten-GigabitEthernet3/1/1] xconnect vsi vpnb
[RouterD-Ten-GigabitEthernet3/1/1] quit
# Configure RD and route target settings for VPN instance vpn1.
[RouterD] ip vpn-instance vpn1
[RouterD-vpn-instance-vpn1] route-distinguisher 1:4
[RouterD-vpn-instance-vpn1] address-family ipv4
[RouterD-vpn-ipv4-vpn1] vpn-target 2:2
[RouterD-vpn-ipv4-vpn1] quit
[RouterD-vpn-instance-vpn1] address-family evpn
[RouterD-vpn-evpn-vpn1] vpn-target 1:1
[RouterD-vpn-evpn-vpn1] quit
[RouterD-vpn-instance-vpn1] quit
# Configure VSI-interface 1 as a distributed gateway.
[RouterD] interface vsi-interface 1
[RouterD-Vsi-interface1] ip binding vpn-instance vpn1
[RouterD-Vsi-interface1] ip address 10.1.2.1 255.255.255.0
[RouterD-Vsi-interface1] mac-address 1-2-1
[RouterD-Vsi-interface1] distributed-gateway local
[RouterD-Vsi-interface1] quit
# Create VSI-interface 2. Associate VSI-interface 2 with VPN instance vpn1, and configure the L3 VXLAN ID as 1000 for the VPN instance.
[RouterD] interface vsi-interface 2
[RouterD-Vsi-interface2] ip binding vpn-instance vpn1
[RouterD-Vsi-interface2] l3-vni 1000
[RouterD-Vsi-interface2] quit
# Specify VSI-interface 1 as the gateway interface for VSI vpnb.
[RouterD] vsi vpnb
[RouterD-vsi-vpnb] gateway vsi-interface 1
[RouterD-vsi-vpnb] quit
Verifying the configuration
1. Verify the configuration on EDs. (This example uses Router B.)
# Verify that the ED has discovered Router A and Router C through MAC/IP advertisement routes and IP prefix advertisement routes, and has established VXLAN and VXLAN-DCI tunnels to the routers.
[RouterB] display evpn auto-discovery macip-prefix
Destination IP Source IP L3VNI Tunnel mode OutgoingInterface
1.1.1.1 2.2.2.2 1000 VXLAN Vsi-interface2
3.3.3.3 2.2.2.2 1000 VXLAN-DCI Vsi-interface2
# Verify that the VXLAN and VXLAN-DCI tunnels on the ED are up.
[RouterB] display interface tunnel
Tunnel0
Interface index: 261
Current state: UP
Line protocol state: UP
Description: Tunnel0 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1464
Internet protocol processing: Disable
Last clearing of counters: Never
Tunnel source 2.2.2.2, destination 1.1.1.1
Tunnel protocol/transport UDP_VXLAN/IP
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
Tunnel1
Interface index: 262
Current state: UP
Line protocol state: UP
Description: Tunnel1 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1500
Internet protocol processing: Disabled
Last clearing of counters: Never
Tunnel source 2.2.2.2, destination 3.3.3.3
Tunnel protocol/transport UDP_VXLAN-DCI/IP
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
# Verify that the ED has EVPN ARP entries and EVPN routes for the VMs.
[RouterB] display arp vpn-instance vpn1
Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-Invalid
IP address MAC address VLAN/VSI name Interface Aging Type
1.1.1.1 0031-1900-0000 0 Tunnel0 -- R
3.3.3.3 0031-3900-0000 0 Tunnel1 -- R
[RouterB] display ip routing-table vpn-instance vpn1
Destinations : 4 Routes : 4
Destination/Mask Proto Pre Cost NextHop Interface
10.1.1.0/24 BGP 255 0 1.1.1.1 Vsi2
10.1.1.11/32 BGP 255 0 1.1.1.1 Vsi2
10.1.2.0/24 BGP 255 0 3.3.3.3 Vsi2
10.1.2.22/32 BGP 255 0 3.3.3.3 Vsi2
2. Verify that VM 1 and VM 2 can communicate. (Details not shown.)
Example: Configuring EVPN-DCI dualhoming
Network configuration
As shown in Figure 7:
· Configure VXLAN 10 for data center 1, and configure VXLAN 20 for data center 2.
· Configure Router A and Router G as distributed EVPN gateways to perform Layer 3 forwarding between VXLAN 10 and VXLAN 20.
· Configure Router C and Router D as EDs of data center 1, and configure Router F as the ED of data center 2.
· Configure Router B as an RR.
Procedure
1. Configure IP addresses and unicast routing settings:
# On VM 1, specify 100.1.1.1 as the gateway address. On VM 2, specify 100.1.2.1 as the gateway address. (Details not shown.)
# Assign IP addresses to the interfaces, as shown in Figure 7. (Details not shown.)
# Configure OSPF for the routers to reach one another. (Details not shown.)
2. Configure Router A:
# Enable L2VPN.
<RouterA> system-view
[RouterA] l2vpn enable
# Disable remote MAC address learning and remote ARP learning.
[RouterA] vxlan tunnel mac-learning disable
[RouterA] vxlan tunnel arp-learning disable
# Create VXLAN 10 on VSI vpna.
[RouterA] vsi vpna
[RouterA-vsi-vpna] vxlan 10
[RouterA-vsi-vpna-vxlan-10] quit
# Create an EVPN instance on VSI vpna. Configure the router to automatically generate an RD and a route target for the EVPN instance.
[RouterA-vsi-vpna] evpn encapsulation vxlan
[RouterA-vsi-vpna-evpn-vxlan] route-distinguisher auto
[RouterA-vsi-vpna-evpn-vxlan] vpn-target auto
[RouterA-vsi-vpna-evpn-vxlan] quit
[RouterA-vsi-vpna] quit
# Configure BGP to advertise BGP EVPN routes.
[RouterA] bgp 100
[RouterA-bgp-default] peer 2.2.2.2 as-number 100
[RouterA-bgp-default] peer 2.2.2.2 connect-interface loopback 0
[RouterA-bgp-default] address-family l2vpn evpn
[RouterA-bgp-default-evpn] peer 2.2.2.2 enable
[RouterA-bgp-default-evpn] quit
[RouterA-bgp-default] quit
# Map Ten-GigabitEthernet 3/1/1 to VSI vpna.
[RouterA] interface ten-gigabitethernet 3/1/1
[RouterA-Ten-GigabitEthernet3/1/1] xconnect vsi vpna
[RouterA-Ten-GigabitEthernet3/1/1] quit
# Configure RD and route target settings for VPN instance vpn1.
[RouterA] ip vpn-instance vpn1
[RouterA-vpn-instance-vpn1] route-distinguisher 1:1
[RouterA-vpn-instance-vpn1] address-family ipv4
[RouterA-vpn-ipv4-vpn1] vpn-target 2:2
[RouterA-vpn-ipv4-vpn1] quit
[RouterA-vpn-instance-vpn1] address-family evpn
[RouterA-vpn-evpn-vpn1] vpn-target 1:1
[RouterA-vpn-evpn-vpn1] quit
[RouterA-vpn-instance-vpn1] quit
# Configure VSI-interface 1 as a distributed gateway.
[RouterA] interface vsi-interface 1
[RouterA-Vsi-interface1] ip binding vpn-instance vpn1
[RouterA-Vsi-interface1] ip address 100.1.1.1 255.255.255.0
[RouterA-Vsi-interface1] mac-address 1-1-1
[RouterA-Vsi-interface1] distributed-gateway local
[RouterA-Vsi-interface1] quit
# Create VSI-interface 2. Associate VSI-interface 2 with VPN instance vpn1, and configure the L3 VXLAN ID as 1000 for the VPN instance.
[RouterA] interface vsi-interface 2
[RouterA-Vsi-interface2] ip binding vpn-instance vpn1
[RouterA-Vsi-interface2] l3-vni 1000
[RouterA-Vsi-interface2] quit
# Specify VSI-interface 1 as the gateway interface for VSI vpna.
[RouterA] vsi vpna
[RouterA-vsi-vpna] gateway vsi-interface 1
[RouterA-vsi-vpna] quit
3. Configure Router B as an RR.
<RouterB> system-view
[RouterB] bgp 100
[RouterB-bgp-default] group evpn internal
[RouterB-bgp-default] peer evpn connect-interface loopback 0
[RouterB-bgp-default] peer 1.1.1.1 group evpn
[RouterB-bgp-default] peer 3.3.3.3 group evpn
[RouterB-bgp-default] peer 4.4.4.4 group evpn
[RouterB-bgp-default] address-family l2vpn evpn
[RouterB-bgp-default-evpn] undo policy vpn-target
[RouterB-bgp-default-evpn] peer evpn enable
[RouterB-bgp-default-evpn] peer evpn reflect-client
[RouterB-bgp-default-evpn] quit
4. Configure Router C:
# Enable L2VPN.
<RouterC> system-view
[RouterC] l2vpn enable
# Disable remote MAC address learning and remote ARP learning.
[RouterC] vxlan tunnel mac-learning disable
[RouterC] vxlan tunnel arp-learning disable
# Enable DCI on the Layer 3 interface that connects Router C to Router E for automatic VXLAN-DCI tunnel establishment.
[RouterC] interface ten-gigabitethernet 3/1/1
[RouterC-Ten-GigabitEthernet3/1/1] dci enable
[RouterC-Ten-GigabitEthernet3/1/1] quit
# Configure BGP to advertise BGP EVPN routes. Enable nexthop replacement for routes advertised to Router B, and enable router MAC replacement for routes advertised to and received from Router F.
[RouterC] bgp 100
[RouterC-bgp-default] peer 6.6.6.6 as-number 200
[RouterC-bgp-default] peer 6.6.6.6 connect-interface loopback 0
[RouterC-bgp-default] peer 6.6.6.6 ebgp-max-hop 64
[RouterC-bgp-default] peer 2.2.2.2 as-number 100
[RouterC-bgp-default] peer 2.2.2.2 connect-interface loopback 0
[RouterC-bgp-default] address-family l2vpn evpn
[RouterC-bgp-default-evpn] peer 6.6.6.6 enable
[RouterC-bgp-default-evpn] peer 6.6.6.6 router-mac-local
[RouterC-bgp-default-evpn] peer 2.2.2.2 enable
[RouterC-bgp-default-evpn] peer 2.2.2.2 next-hop-local
[RouterC-bgp-default-evpn] quit
[RouterC-bgp-default] quit
# Configure RD and route target settings for VPN instance vpn1.
[RouterC] ip vpn-instance vpn1
[RouterC-vpn-instance-vpn1] route-distinguisher 1:2
[RouterC-vpn-instance-vpn1] address-family ipv4
[RouterC-vpn-ipv4-vpn1] vpn-target 2:2
[RouterC-vpn-ipv4-vpn1] quit
[RouterC-vpn-instance-vpn1] address-family evpn
[RouterC-vpn-evpn-vpn1] vpn-target 1:1
[RouterC-vpn-evpn-vpn1] quit
[RouterC-vpn-instance-vpn1] quit
# Create VSI-interface 2. Associate VSI-interface 2 with VPN instance vpn1, and configure the L3 VXLAN ID as 1000 for the VPN instance.
[RouterC] interface vsi-interface 2
[RouterC-Vsi-interface2] ip binding vpn-instance vpn1
[RouterC-Vsi-interface2] l3-vni 1000
[RouterC-Vsi-interface2] mac-address 1-2-3
[RouterC-Vsi-interface2] quit
# Configure 1.2.3.4 as the virtual ED address, and assign the IP address to Loopback 2. Configure OSPF to advertise the virtual ED address.
[RouterC] evpn edge group 1.2.3.4
[RouterC] interface loopback 2
[RouterC-LoopBack2] ip address 1.2.3.4 32
[RouterC-LoopBack2] quit
[RouterC] ospf
[RouterC-ospf-1] area 0
[RouterC-ospf-1-area-0.0.0.0] network 1.2.3.4 0.0.0.0
[RouterC-ospf-1-area-0.0.0.0] quit
[RouterC-ospf-1] quit
# Associate Ten-GigabitEthernet 3/1/1 with track entry 1.
[RouterC] track 1 interface Ten-GigabitEthernet3/1/1
[RouterC-track-1] quit
# Configure CLI-defined monitor policy 1 to associate Ten-GigabitEthernet 3/1/1 with Loopback 2.
[RouterC] rtm cli-policy policy1
[RouterC-rtm-policy1] event track 1 state negative
[RouterC-rtm-policy1] action 0 cli system-view
[RouterC-rtm-policy1] action 1 cli interface loopback 2
[RouterC-rtm-policy1] action 2 cli shutdown
[RouterC-rtm-policy1] user-role network-admin
[RouterC-rtm-policy1] quit
5. Configure Router D:
# Enable L2VPN.
<RouterD> system-view
[RouterD] l2vpn enable
# Disable remote MAC address learning and remote ARP learning.
[RouterD] vxlan tunnel mac-learning disable
[RouterD] vxlan tunnel arp-learning disable
# Enable DCI on the Layer 3 interface that connects Router D to Router E for automatic VXLAN-DCI tunnel establishment.
[RouterD] interface ten-gigabitethernet 3/1/1
[RouterD-Ten-GigabitEthernet3/1/1] dci enable
[RouterD-Ten-GigabitEthernet3/1/1] quit
# Configure BGP to advertise BGP EVPN routes. Enable nexthop replacement for routes advertised to Router B, and enable router MAC replacement for routes advertised to and received from Router F.
[RouterD] bgp 100
[RouterD-bgp-default] peer 6.6.6.6 as-number 200
[RouterD-bgp-default] peer 6.6.6.6 connect-interface loopback 0
[RouterD-bgp-default] peer 6.6.6.6 ebgp-max-hop 64
[RouterD-bgp-default] peer 2.2.2.2 as-number 100
[RouterD-bgp-default] peer 2.2.2.2 connect-interface loopback 0
[RouterD-bgp-default] address-family l2vpn evpn
[RouterD-bgp-default-evpn] peer 6.6.6.6 enable
[RouterD-bgp-default-evpn] peer 6.6.6.6 router-mac-local
[RouterD-bgp-default-evpn] peer 2.2.2.2 enable
[RouterD-bgp-default-evpn] peer 2.2.2.2 next-hop-local
[RouterD-bgp-default-evpn] quit
[RouterD-bgp-default] quit
# Configure RD and route target settings for VPN instance vpn1.
[RouterD] ip vpn-instance vpn1
[RouterD-vpn-instance-vpn1] route-distinguisher 1:2
[RouterD-vpn-instance-vpn1] address-family ipv4
[RouterD-vpn-ipv4-vpn1] vpn-target 2:2
[RouterD-vpn-ipv4-vpn1] quit
[RouterD-vpn-instance-vpn1] address-family evpn
[RouterD-vpn-evpn-vpn1] vpn-target 1:1
[RouterD-vpn-evpn-vpn1] quit
[RouterD-vpn-instance-vpn1] quit
# Create VSI-interface 2. Associate VSI-interface 2 with VPN instance vpn1, and configure the L3 VXLAN ID as 1000 for the VPN instance.
[RouterD] interface vsi-interface 2
[RouterD-Vsi-interface2] ip binding vpn-instance vpn1
[RouterD-Vsi-interface2] l3-vni 1000
[RouterD-Vsi-interface2] mac-address 1-2-3
[RouterD-Vsi-interface2] quit
# Configure 1.2.3.4 as the virtual ED address, and assign the IP address to Loopback 2. Configure OSPF to advertise the virtual ED address.
[RouterD] evpn edge group 1.2.3.4
[RouterD] interface loopback 2
[RouterD-LoopBack2] ip address 1.2.3.4 32
[RouterD-LoopBack2] quit
[RouterD] ospf
[RouterD-ospf-1] area 0
[RouterD-ospf-1-area-0.0.0.0] network 1.2.3.4 0.0.0.0
[RouterD-ospf-1-area-0.0.0.0] quit
[RouterD-ospf-1] quit
# Associate Ten-GigabitEthernet 3/1/1 with track entry 1.
[RouterD] track 1 interface Ten-GigabitEthernet3/1/1
[RouterD-track-1] quit
# Configure CLI-defined monitor policy 1 to associate Ten-GigabitEthernet 3/1/1 with Loopback 2.
[RouterD] rtm cli-policy policy1
[RouterD-rtm-policy1] event track 1 state negative
[RouterD-rtm-policy1] action 0 cli system-view
[RouterD-rtm-policy1] action 1 cli interface loopback 2
[RouterD-rtm-policy1] action 2 cli shutdown
[RouterD-rtm-policy1] user-role network-admin
[RouterD-rtm-policy1] quit
6. Configure Router F:
# Enable L2VPN.
<RouterF> system-view
[RouterF] l2vpn enable
# Disable remote MAC address learning and remote ARP learning.
[RouterF] vxlan tunnel mac-learning disable
[RouterF] vxlan tunnel arp-learning disable
# Enable DCI on the Layer 3 interface that connects Router F to Router E for automatic VXLAN-DCI tunnel establishment.
[RouterF] interface ten-gigabitethernet 3/1/1
[RouterF-Ten-GigabitEthernet3/1/1] dci enable
[RouterF-Ten-GigabitEthernet3/1/1] quit
# Configure BGP to advertise BGP EVPN routes. Enable nexthop replacement for routes advertised to Router G, and enable router MAC replacement for routes advertised to and received from Router C and Router D.
[RouterF] bgp 200
[RouterF-bgp-default] peer 3.3.3.3 as-number 100
[RouterF-bgp-default] peer 3.3.3.3 connect-interface loopback 0
[RouterF-bgp-default] peer 3.3.3.3 ebgp-max-hop 64
[RouterF-bgp-default] peer 4.4.4.4 as-number 100
[RouterF-bgp-default] peer 4.4.4.4 connect-interface loopback 0
[RouterF-bgp-default] peer 4.4.4.4 ebgp-max-hop 64
[RouterF-bgp-default] peer 7.7.7.7 as-number 200
[RouterF-bgp-default] peer 7.7.7.7 connect-interface loopback 0
[RouterF-bgp-default] address-family l2vpn evpn
[RouterF-bgp-default-evpn] peer 3.3.3.3 enable
[RouterF-bgp-default-evpn] peer 3.3.3.3 router-mac-local
[RouterF-bgp-default-evpn] peer 4.4.4.4 enable
[RouterF-bgp-default-evpn] peer 4.4.4.4 router-mac-local
[RouterF-bgp-default-evpn] peer 7.7.7.7 enable
[RouterF-bgp-default-evpn] peer 7.7.7.7 next-hop-local
[RouterF-bgp-default-evpn] quit
[RouterF-bgp-default] quit
# Configure RD and route target settings for VPN instance vpn1.
[RouterF] ip vpn-instance vpn1
[RouterF-vpn-instance-vpn1] route-distinguisher 1:4
[RouterF-vpn-instance-vpn1] address-family ipv4
[RouterF-vpn-ipv4-vpn1] vpn-target 2:2
[RouterF-vpn-ipv4-vpn1] quit
[RouterF-vpn-instance-vpn1] address-family evpn
[RouterF-vpn-evpn-vpn1] vpn-target 1:1
[RouterF-vpn-evpn-vpn1] quit
[RouterF-vpn-instance-vpn1] quit
# Create VSI-interface 2. Associate VSI-interface 2 with VPN instance vpn1, and configure the L3 VXLAN ID as 1000 for the VPN instance.
[RouterF] interface vsi-interface 2
[RouterF-Vsi-interface2] ip binding vpn-instance vpn1
[RouterF-Vsi-interface2] l3-vni 1000
[RouterF-Vsi-interface2] quit
7. Configure Router G:
# Enable L2VPN.
<RouterG> system-view
[RouterG] l2vpn enable
# Disable remote MAC address learning and remote ARP learning.
[RouterG] vxlan tunnel mac-learning disable
[RouterG] vxlan tunnel arp-learning disable
# Create VXLAN 20 on VSI vpnb.
[RouterG] vsi vpnb
[RouterG-vsi-vpnb] vxlan 20
[RouterG-vsi-vpnb-vxlan-20] quit
# Create an EVPN instance on VSI vpnb. Configure the router to automatically generate an RD and a route target for the EVPN instance.
[RouterG-vsi-vpnb] evpn encapsulation vxlan
[RouterG-vsi-vpnb-evpn-vxlan] route-distinguisher auto
[RouterG-vsi-vpnb-evpn-vxlan] vpn-target auto
[RouterG-vsi-vpnb-evpn-vxlan] quit
[RouterG-vsi-vpnb] quit
# Configure BGP to advertise BGP EVPN routes.
[RouterG] bgp 200
[RouterG-bgp-default] peer 6.6.6.6 as-number 200
[RouterG-bgp-default] peer 6.6.6.6 connect-interface loopback 0
[RouterG-bgp-default] address-family l2vpn evpn
[RouterG-bgp-default-evpn] peer 6.6.6.6 enable
[RouterG-bgp-default-evpn] quit
[RouterG-bgp-default] quit
# Map Ten-GigabitEthernet 3/1/1 to VSI vpnb.
[RouterG] interface ten-gigabitethernet 3/1/1
[RouterG-Ten-GigabitEthernet3/1/1] xconnect vsi vpnb
[RouterG-Ten-GigabitEthernet3/1/1] quit
# Configure RD and route target settings for VPN instance vpn1.
[RouterG] ip vpn-instance vpn1
[RouterG-vpn-instance-vpn1] route-distinguisher 1:4
[RouterG-vpn-instance-vpn1] address-family ipv4
[RouterG-vpn-ipv4-vpn1] vpn-target 2:2
[RouterG-vpn-ipv4-vpn1] quit
[RouterG-vpn-instance-vpn1] address-family evpn
[RouterG-vpn-evpn-vpn1] vpn-target 1:1
[RouterG-vpn-evpn-vpn1] quit
[RouterG-vpn-instance-vpn1] quit
# Configure VSI-interface 1 as a distributed gateway.
[RouterG] interface vsi-interface 1
[RouterG-Vsi-interface1] ip binding vpn-instance vpn1
[RouterG-Vsi-interface1] ip address 100.1.2.1 255.255.255.0
[RouterG-Vsi-interface1] mac-address 2-2-2
[RouterG-Vsi-interface1] distributed-gateway local
[RouterG-Vsi-interface1] quit
# Create VSI-interface 2. Associate VSI-interface 2 with VPN instance vpn1, and configure the L3 VXLAN ID as 1000 for the VPN instance.
[RouterG] interface vsi-interface 2
[RouterG-Vsi-interface2] ip binding vpn-instance vpn1
[RouterG-Vsi-interface2] l3-vni 1000
[RouterG-Vsi-interface2] quit
# Specify VSI-interface 1 as the gateway interface for VSI vpnb.
[RouterG] vsi vpnb
[RouterG-vsi-vpnb] gateway vsi-interface 1
[RouterG-vsi-vpnb] quit
Verifying the configuration
1. Verify the configuration on EDs. (This example uses Router C.)
# Verify that the ED has discovered Router A and Router F through MAC/IP advertisement routes and IP prefix advertisement routes, and has established VXLAN and VXLAN-DCI tunnels to the routers.
[RouterC] display evpn auto-discovery macip-prefix
Destination IP Source IP L3VNI Tunnel mode OutInterface
1.1.1.1 1.2.3.4 1000 VXLAN Vsi-interface2
6.6.6.6 1.2.3.4 1000 VXLAN-DCI Vsi-interface2
# Verify that the VXLAN and VXLAN-DCI tunnels on the ED are up.
[RouterC] display interface tunnel
Tunnel0
Interface index: 261
Current state: UP
Line protocol state: UP
Description: Tunnel0 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1464
Internet protocol processing: Disabled
Last clearing of counters: Never
Tunnel source 1.2.3.4, destination 1.1.1.1
Tunnel protocol/transport UDP_VXLAN/IP
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
Tunnel1
Interface index: 262
Current state: UP
Line protocol state: UP
Description: Tunnel1 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1500
Internet protocol processing: Disabled
Last clearing of counters: Never
Tunnel source 1.2.3.4, destination 6.6.6.6
Tunnel protocol/transport UDP_VXLAN-DCI/IP
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
# Verify that the ED has ARP entries and routes for the VMs.
[RouterC] display arp vpn-instance vpn1
Type: S Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-Invalid
IP address MAC address VLAN/VSI name Interface Aging Type
1.1.1.1 0031-1900-0000 0 Tunnel0 -- R
6.6.6.6 0031-3900-0000 0 Tunnel1 -- R
[RouterC] display ip routing-table vpn-instance vpn1
Destinations : 4 Routes : 4
Destination/Mask Proto Pre Cost NextHop Interface
100.1.1.0/24 BGP 255 0 1.1.1.1 Vsi2
100.1.1.10/32 BGP 255 0 1.1.1.1 Vsi2
100.1.2.0/24 BGP 255 0 6.6.6.6 Vsi2
100.1.2.20/32 BGP 255 0 6.6.6.6 Vsi2
2. Verify the configuration on Router A:
# Verify that the router has discovered the virtual ED through MAC/IP advertisement routes and IP prefix advertisement routes, and has established a VXLAN tunnel to the virtual ED.
[RouterA] display evpn auto-discovery macip-prefix
Destination IP Source IP L3VNI Tunnel mode OutInterface
1.2.3.4 1.1.1.1 1000 VXLAN Vsi-interface2
# Verify that the VXLAN tunnel on the router is up.
[RouterA] display interface tunnel
Tunnel0
Interface index: 261
Current state: UP
Line protocol state: UP
Description: Tunnel0 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1464
Internet protocol processing: Disabled
Last clearing of counters: Never
Tunnel source 1.1.1.1, destination 1.2.3.4
Tunnel protocol/transport UDP_VXLAN/IP
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
# Verify that the router has ARP entries and routes for the VMs.
[RouterA] display arp vpn-instance vpn1
Type: S Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-Invalid
IP address MAC address VLAN/VSI name Interface Aging Type
1.2.3.4 0031-1900-0001 0 Tunnel0 -- R
[RouterA] display ip routing-table vpn-instance vpn1
Destinations : 2 Routes : 2
Destination/Mask Proto Pre Cost NextHop Interface
100.1.2.0/24 BGP 255 0 1.2.3.4 Vsi2
100.1.2.10/32 BGP 255 0 1.2.3.4 Vsi2
3. Verify that VM 1 and VM 2 can communicate when both Router C and Router D are working correctly and when Router C or Router D fails. (Details not shown.)
