Info | ||
---|---|---|
| ||
EVPN feature is currently supported on X86 platforms only. |
The following steps represent the fundamental configuration to use EVPN as the control plane for VXLAN. These steps are in addition to configuring VXLAN interfaces, attaching them to a bridge, and mapping VLANs to VNIs.
...
Additional configuration is necessary to enable ARP/ND suppression, provision such as the provision of inter-subnet routing, and so on. The configuration depends on the deployment scenario. You can also configure various other BGP parameters depending on your network requirements.
...
Figure 1 EVPN Symmetric Routing
Router Configuration
The configuration for Router 1 is shown below. The first part of the configuration deals with physical interfaces and assigning VLANs to these interfaces. Router 1 has three physical interfaces configured, two interfaces connecting server 1 and server 3.
...
Then we setup VXLAN VNIs, enable VLAN to VNI mapping and map VNIs to VLAN IDs. Finally we enable IP routing on the device and configure BGP related parameters such as router ID, BGP neighbor and enabling advertising all VNIs.
Follow the detailed configuration steps below.
Router 1 Configuration
Step 1. Configure physical interfaces, VLAN interfaces and assign VLAN IDs and IP addresses.
Code Block |
---|
admin@router1# set interface gigabit-ethernet te-1/1/1 family ethernet-switching native-vlan-id 100
admin@router1# set interface gigabit-ethernet te-1/1/10 family ethernet-switching native-vlan-id 1111
admin@router1# set interface gigabit-ethernet te-1/1/10 family ethernet-switching port-mode "trunk"
admin@router1# set interface gigabit-ethernet te-1/1/10 family ethernet-switching vlan members 2221
admin@router1# set interface gigabit-ethernet te-1/1/11 family ethernet-switching native-vlan-id 2222
admin@router1# set l3-interface loopback address 201.201.201.201 prefix-length 32
admin@router1# set l3-interface loopback address 201.201.201.88 prefix-length 32
admin@router1# set l3-interface loopback address 201::201 prefix-length 128
admin@router1# set l3-interface vlan-interface vlan100 mtu 1450
admin@router1# set l3-interface vlan-interface vlan100 address 100.1.1.201 prefix-length 24
admin@router1# set l3-interface vlan-interface vlan100 address 100::201 prefix-length 64
admin@router1# set l3-interface vlan-interface vlan2221 vrf "vrf1"
admin@router1# set l3-interface vlan-interface vlan2221 mtu 1450
admin@router1# set l3-interface vlan-interface vlan2221 address 21.1.1.201 prefix-length 24
admin@router1# set l3-interface vlan-interface vlan2222 vrf "vrf1"
admin@router1# set l3-interface vlan-interface vlan2222 mtu 1450
admin@router1# set l3-interface vlan-interface vlan2222 address 22.1.1.201 prefix-length 24
admin@router1# set l3-interface vlan-interface vlan1111 vrf "vrf1"
admin@router1# set l3-interface vlan-interface vlan1111 mtu 1450
admin@router1# set vlans vlan-id 100 l3-interface "vlan100"
admin@router1# set vlans vlan-id 1111 l3-interface "vlan1111"
admin@router1# set vlans vlan-id 2221 l3-interface "vlan2221"
admin@router1# set vlans vlan-id 2222 l3-interface "vlan2222"
admin@router1# set |
Step 2: Configure VXLAN VNI and map VNI IDs to VLAN IDs. Also create an L3 VNI in vrf1.
Code Block |
---|
admin@router1# set vxlans source-interface lo address 201.201.201.201 admin@router1# set vxlans vni-map-vlan true admin@router1# set vxlans vni 9999 vlan 1111 admin@router1# set vxlans vni 22221 vlan 2221 admin@router1# set vxlans vni 22222 vlan 2222 admin@router1# set protocolsvxlans vrf bgpvrf1 locall3-as 201 admin@router1# set protocols bgp routervni 9999 |
Step 3: Enable IP routing and configure VRF.
Code Block |
---|
admin@R1# set ip routing enable true
admin@R1# set ip vrf vrf1 |
Step 4: Configure BGP related configuration.
Code Block |
---|
admin@router1# set protocols bgp local-as 201 admin@router1# set protocols bgp router-id 201.201.201.201 admin@router1# set protocols bgp neighbor 100.1.1.134 remote-as "external" admin@router1# set protocols bgp neighbor 100.1.1.134 update-source "100.1.1.201" admin@router1# set protocols bgp neighbor 100.1.1.134 evpn activate admin@router1# set protocols bgp ipv4-unicast network 201.201.201.201/32 admin@router1# set protocols bgp ipv4-unicast network 201.201.201.88/32 admin@router1# set protocols bgp evpn advertise-all-vni admin@router1# set protocols bgp evpn advertise ipv4-unicast admin@router1# set protocols bgp vrf vrf1 local-as 201 admin@router1# set protocols bgp vrf vrf1 router-id 201.201.201.201 admin@router1# set protocols bgp vrf vrf1 ipv4-unicast network 22.1.1.0/24 admin@router1# set protocols bgp vrf vrf1 evpn advertise ipv4-unicast admin@router1# set ip vrf vrf1 admin@router1# set ip vrf vrf2 admin@router1# set evpn vrf vrf1 vni 9999 admin@router1# set ip routing enable true |
...
Router 2 Configuration
Configuration of Router 2 is shown below. Router 2 also has 3 physical interfaces configured with two interfaces connecting server 2 and server 4. The configuration of Router 2 is almost identical to Router 1 other than the basic configurations like VXLAN VNI and interface IP addresses. The detailed configuration steps are shown below.
Step 1. Configure physical interfaces, VLAN interfaces and assign VLAN ID to physical interfaces and IP addresses.
Code Block |
---|
admin@router2# set interface gigabit-ethernet ge-1/1/1 family ethernet-switching native-vlan-id 100 admin@router2# set interface gigabit-ethernet ge-1/1/2 disable true admin@router2# set interface gigabit-ethernet ge-1/1/2 family ethernet-switching native-vlan-id 2221 admin@router2# set interface gigabit-ethernet ge-1/1/10 family ethernet-switching native-vlan-id 1111 admin@router2# set interface gigabit-ethernet ge-1/1/10 family ethernet-switching port-mode "trunk" admin@router2# set interface gigabit-ethernet ge-1/1/10 family ethernet-switching vlan members 2221 admin@router2# set interface gigabit-ethernet ge-1/1/10 family ethernet-switching vlan members 2222 admin@router2# set interface gigabit-ethernet ge-1/1/11 family ethernet-switching native-vlan-id 2222 admin@router2# set interface gigabit-ethernet ge-1/1/11 family ethernet-switching port-mode "trunk" admin@router2# set interface gigabit-ethernet ge-1/1/11 family ethernet-switching vlan members 3333 admin@router2# set l3-interface loopback address 134.134.134.134 prefix-length 32 admin@router2# set l3-interface vlan-interface vlan2221 vrf "vrf1" admin@router2# set l3-interface vlan-interface vlan2221 mtu 1450 admin@router2# set l3-interface vlan-interface vlan2221 address 21.1.1.134 prefix-length 24 admin@router2# set l3-interface vlan-interface vlan100 mtu 1450 admin@router2# set l3-interface vlan-interface vlan100 address 100.1.1.134 prefix-length 24 admin@router2# set l3-interface vlan-interface vlan100 address 100::134 prefix-length 64 admin@router2# set l3-interface vlan-interface vlan3333 vrf "vrf1" admin@router2# set l3-interface vlan-interface vlan3333 mtu 1450 admin@router2# set l3-interface vlan-interface vlan3333 address 33.1.1.134 prefix-length 24 admin@router2# set l3-interface vlan-interface vlan1111 vrf "vrf1" admin@router2# set l3-interface vlan-interface vlan1111 mtu 1450 admin@router2# set ipvlans routing enable truevlan-id 100 l3-interface "vlan100" admin@router2# set ipvlans vrfvlan-id vrf11111 admin@router2# set ip vrf vrf2 l3-interface "vlan1111" admin@router2# set evpnvlans vrfvlan-id vrf12221 vni 9999l3-interface "vlan2221" admin@router2# set protocols bgp local-as 134vlans vlan-id 2222 l3-interface "vlan2222" admin@router2# set protocolsvlans bgp routervlan-id 134.134.134.134 3333 l3-interface "vlan3333" |
Step 2: Configure VXLAN VNI and map VNI IDs to VLAN IDs.
Code Block |
---|
admin@router2# set protocols bgp neighbor 100.1.1.201 remote-as "external"vxlans source-interface lo address 134.134.134.134 admin@router2# set vxlans vni-mapvlan true admin@router2# set protocolsvxlans bgpvni neighbor 100.1.1.201 update-source "100.1.1.134" 9999 vlan 1111 admin@router2# set protocolsvxlans bgpvni neighbor 100.1.1.201 evpn activate 22221 vlan 2221 admin@router2# set protocolsvxlans bgpvni ipv4-unicast22222 network 134.134.134.134/32vlan 2222 admin@router2# set protocols bgp evpn advertise-all-vxlans vni admin@router2#33333 set protocols bgp vrf vrf1 local-as 134vlan 3333 |
Step 3: Enable IP routing and configure VRF and hostname.
Code Block |
---|
admin@router2# set ip routing enable true admin@router2# set protocolsip bgp vrf vrf1 router-id 134.134.134.134 admin@router2# set protocolsevpn bgp vrf vrf1 ipv4-unicast network 33.1.1.0/24vni 9999 admin@router2# set protocolsvxlans bgp vrf vrf1 evpn advertise ipv4-unicast admin@router2#l3-vni 9999 |
Step 4: Configure BGP related configuration
Code Block |
---|
admin@router2# set vlansprotocols vlan-id 100 l3-interface "vlan100"bgp local-as 134 admin@router2# set vlansprotocols bgp vlanrouter-id 1111 l3-interface "vlan1111" 134.134.134.134 admin@router2# set vlans vlan-id 2221 l3-interface "vlan2221protocols bgp neighbor 100.1.1.201 remote-as "external" admin@router2# set vlans vlan-id 2222 l3-interface "vlan2222protocols bgp neighbor 100.1.1.201 update-source "100.1.1.134" admin@router2# set vlans vlan-id 3333 l3-interface "vlan3333"protocols bgp neighbor 100.1.1.201 evpn activate admin@router2# set vxlansprotocols bgp sourceipv4-interfaceunicast lonetwork address 134.134.134.134/32 admin@router2# set vxlans vni-map-vlan true admin@router2# set vxlans vni 9999 vlan 1111protocols bgp evpn advertise-all-vni admin@router2# set protocols bgp vrf vrf1 local-as 134 admin@router2# set protocols vxlansbgp vnivrf 22221vrf1 vlan 2221router-id 134.134.134.134 admin@router2# set protocols vxlansbgp vrf vnivrf1 22222ipv4-unicast vlan 2222network 33.1.1.0/24 admin@router2# set protocols vxlansbgp vrf vnivrf1 33333evpn vlan 3333 |
ARP and Neighbor Discovery (ND) Suppression
...
advertise ipv4-unicast |
EVPN MAC Learning Process
Traditionally, MAC address learning in VXLANs is achieved through flooding. In EVPN where BGP is used as the control plane for VXLANs, the problem of flooding can be eliminated through sending EVPN Type-2 advertisement between VTEPs assuming the ARP and ND suppression is enabled. In Figure 2, when Host 1 is first plugged into R1, Host 1 will start sending ARP and other basic networking traffic like DHCP. When R1 receives a packet from Host 1 for the first time, it will record its MAC address in its local MAC address table. Also, R1 will advertise an EVPN Type-2 route to R2. The route includes the local EVPN instance of R1, the VTEP IP address, the Host 1 MAC address and the L2VNI.
...