Data Center Solution – EVPN with VXLAN

CHAPTER 1

Data Center Solution Overview

Data Center Virtualization

Virtualization Technologies

Data Center Virtualization with VXLAN and EVPN

CHAPTER 2

VXLAN and EVPN Overview

OcNOS VXLAN EVPN Architecture

VXLAN using Unicast and Multicast Tunnels

EVPN Learns VTEP Topology

Basic Example Configuration

  1. Non-EVPN: VXLANUnicast Traffic 8
  2. EVPN:VXLAN with EVPN Control Plane 11
  3. Non-EVPN:VXLAN with Data Plane Learning 16
  4. EVPN:VXLANTenant Identification using Port and VLAN 20

Conclusion 24

Glossary

VXLAN – Virtual extensible LAN

EVPN – Ethernet Virtual Private Network VM – Virtual Machine

PBB – Provider Backbone bridging OTV – Overlay Transport Virtualization

NVGRE – Network virtualization using Generic Route Encapsulation MPLS – Multiprotocol Label Switching

VPLS – Virtual Private LAN Service STT – Stateless Transport Tunelling

ISIS – Intermediate system – Intermediate system BGP – Border Gateway Protocol

MP-BGP – Multiprotocol Border Gateway Protocol

CHAPTER 1

Data Center Solution Overview

  • DataCenter Virtualization
  • VirtualizationTechnologies
  • DataCenter Virtualization with VXLAN and EVPN

Data Center Virtualization

With the increase of data centers and huge amount of data that they store and manage and the increase in services, virtualization in data canters has been the need of the day. Server virtualization helps in reducing the cost to setup and manage a data center, as not only does it reduces the cost in buying and setting up the hardware, it also reduces the cost for cooling, electricity and maintenance. Also, most enterprise data centers are deployed in a hybrid cloud environment, which require the ability to expand, reduce or move their services/virtual machines.

Redeploying a service or a VM, needs support from the data center network. When new VMs have to be added in a data center or old VMs need to be moved, they should be added based on the compute availability and not because of the network configuration for the customer. This way the compute infrastructure is better utilized. In IP networks this requires reconfiguration of L3 infrastructure or a change in the customer VM IP address. This is not acceptable in a data center deployment. Tenants would want their VMs in the same subnet, wherever they are placed.

An overlay protocol can be used to connect the customer virtual machines (VMs) on servers located at different locations in the network to communicate without affecting the L3 infrastructure. The following sections discuss the technologies that can be used for this purpose.

Virtualization Technologies

An overlay is basically a tunneling protocol where the customer traffic can be tunneled across the network, without reconfiguring the network. Various tunneling technologies are in use in the enterprise and data center network.

  • Q-in-Qtunneling or provider bridging provides a solution to scale beyond the 4K VLAN limitation, but it does not hide the customer MAC addresses from the core

PBB or Mac-in-Mac tunneling provided a solution to hide customer MAC addresses along with scaling, but it has a disadvantage on relying on xSTP protocols.

TRILL and SPB solved the issue of reliance on STP by using ISIS control plane learning. These technologies are deployable at the edge networks.

OTV and LISP are other tunneling technologies which address L2/L3 over L3 networks.

MPLS based VPLS and VPRN services provide VPN services within the data center and data center interconnect.

New host based virtualization technologies focus more on VM/Service mobility and multitenancy.

VXLAN, NVGRE and STT are some of the technologies developed in this area. VXLAN is the most popular among these as it is an UDP-based protocol allowing the network to use multiple paths. In this paper, VXLAN and EVPN will be discussed in details.

Data Center Virtualization with VXLAN and EVPN

VXLAN, NVGRE and STT are some of the technologies developed in this area. VXLAN is the most popular amongst these as it is an UDP based protocol providing the network to use multipaths. In this paper, VXLAN and EVPN will be discussed in details.

The VTEPs (Virtual Tunnel Endpoints) form UDP tunnels among themselves. VTEPs identify a specific tenant’s traffic and encapsulate it within the UDP tunnel. If the traffic is broadcast, multicast or unknown, then the traffic is multicasted over UDP to other VTEPs. A VXLAN header is inserted by the VTEP to identify the tenant of the traffic.

OcNOS supports VTEP functionality for VXLAN tunnels.

VXLAN depends on multicast and data plane learning to discover the VTEPs. To overcome this limitation, OcNOS supports EVPN control plane for VXLAN from Release 1.1 as beta quality.

EVPN is a control plane technology using MP-BGP for implementing VPN technologies in a network. EVPN was developed to provide the following improvements over the current VPN technologies.

  • Controlplane learning
  • Multicastoptimization
  • Multihoming
  • Simplicityin provisioning
  • Achievingvarious services
  • Betterreconvergence

When VXLAN is deployed in DCI, multicast and data plane learning are not preferred. A VXLAN solution with EVPN control plane is preferred in that deployment.

The next chapter describes the VXLAN and EVPN solution in OcNOS.

CHAPTER 2

VXLAN and EVPN Overview

  • OcNOSVXLAN EVPN architecture
  • VXLANusing unicast and multicast tunnels
  • EVPNto learn VTEP topology
  • Basic exampleconfigurations

OcNOS VXLAN EVPN Architecture

DC Interconnect Using eBGP

The above topology diagram demonstrates the network architecture which will be used to describe this solution. The access or top-of-rack (TOR) switches) implement the VTEP functionality. The Leaf node routers act as Route Reflectors and communicate within the data center. The Spine node routers act as second-level hierarchical Route Reflectors to communicate between different data centers using eBGP on the data center interconnect (DCI). MP-BGP is used at the routers and VTEPs to implement EVPN.

VXLAN using Unicast and Multicast Tunnels

VXLAN technology is defined in RFC 7348. The OcNOS implementation of VXLAN complies with the specification. In addition to providing the option of IP multicast for broadcast, unknown and multicast (BUM) traffic, the OcNOS implementation also provides an option for head-end replication of this kind of traffic.

This configuration shows a unicast-only VXLAN VNID (Tenant), mostly used for ELINE services. Also shown in this configuration is mapping a port to a tenant and a static entry for a remote virtual machine MAC address.

This configuration shows a VXLAN VNID with IP multicast tunnels. All broadcast, unknown and multicast traffic will be sent on the tunnel destined to the multicast IP address specified in the configuration.

This configuration shows a VXLAN VNID with head-end replication. All broadcast, unknown and multicast traffic will be sent on all the unicast tunnels mapped to this tenant, in this case on both Tunnel4 and Tunnel5.

The tenant traffic can be identified through a port or through a port+VLAN identifier mapped to the tenant.

When a port is mapped to the tenant, all traffic arriving at the port is treated as the tenant traffic and

tunneled to remote VTEP(s) using the tenant id (VNID) in the VXLAN header.

When a port+VLAN is mapped to the tenant, all traffic tagged with the specified VLAN arriving at the specified port is treated as the tenant traffic. When tunneled, the packet is encapsulated as shown in the below packet capture.

EVPN Learns VTEP Topology

EVPN was introduced in RFC 7432 for VPLS. EVPN was then extended for overlay technologies like VXLAN in draft-ietf-bess-evpn-overlay-02. The OcNOS EVPN solution complies with these standards. It is implemented only for the VXLAN data plane and is extensible to other data planes.

EVPN defines the use of MP-BGP protocol for learning the MAC/IP of the hosts connected to the VTEPs. The host MAC/IP is learned at the local VTEP through data plane learning. This is then transmitted to the other VTEPs through MP BGP. The remote VTEPs learn these routes at the tunnels connected to these VTEPs. The tunnels are learned automatically through MP-BGP.

In the configuration below, BGP neighbors are configured for the EVPN address family.

When configuring VXLAN VNIDs, it needs to be specified that EVPN will be used as a control plane. This is shown in the below configuration.

As can be seen in the above configuration, for VNIDs that will be using EVPN, there is no need to configure a tunnel, it will be automatically configured through BGP EVPN.

When a VNID is configured with EVPN, a BGP update message is sent to the EVPN neighbors with this information. This is the “Inclusive Multicast Ethernet Tag Route”. OcNOS supports only head end replication with EVPN. Once the tunnels are established on receiving this route, the MAC IP advertisements for host MAC and IP are distributed to the remote VTEPs using BGP-MP. This is

illustrated in the packet capture below. On receiving this route, the MAC/IP for the remote host is learned at this tunnel, and the packets will no longer be multicasted

At the route reflectors, the neighbors are configured as RR clients for the EVPN address family. The hierarchical RRs help load balance the intra and inter data center traffic.

Basic Example Configuration

1. Non-EVPN: VXLAN Unicast Traffic

This configuration has the following features:

  • Dataplane learning
  • ISIS configured as interior gatewayprotocol
  • Theloopback interface is used as the VTEP IP

Topology

C om man d Purpose
Step 1 VTEP1#configure terminal Entering configuration mode
Step 2 VTEP1(con fi g)#bridge 1 protocol mstp Creating bridge
Step 3 VTEP1(con fi g)#interface xe50 Configure xe50 interface.
Step 4 VTEP1(con fi g-if)#switchport Configure the port as L2 port.
Step 5 V T E P 1 ( co n f i g – i f ) # b ri d g e – g ro u p 1 Add the port to the bridge
Step 6 VTEP1(con fi g-if)#switchport mode access Set the port as access port
Step 7 VTEP1(con fi g-if)#no shutdown Set interface state as up
Step 8 VTEP1(con fi g-if)#exit Exit interface mode
Step 9 VTEP1(con fi g)#interface xe22 Configure xe22 interface
Step 10 VTEP1(con fi g-if)#no switchport Configure the port as L3 port.
Step 11 VTEP1(con fi g-if)#ip address 11.11.11.1/24 Configure IP address on the interface
Step 12 VTEP1(con fi g-if)#no shutdown Set interface state as up
Step 13 VTEP1(con fi g-if)#exit Exit interface mode
Step 14 VTEP1(con fi g)#interface lo Configure loopback interface
Step 15 VTEP1(con fi g-if)#ip address 2.2.2.1/24 Configure IP address on the interface
Step 16 VTEP1(con fi g-if)#exit Exit interface mode
Step 17 VTEP1(con fi g)#router isis ipi Configure ISIS as IGP.
Step 18 VTEP1(con fi g-router)#is-type level-1 Set the ISIS as Level 1.
Step 19 VTEP1(con fi g-router)#net 49.0001.1111.1111.1111.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 20 VTEP1(con fi g-if)#exit Exit router mode
Step 21 VTEP1(con fi g)#interface lo Configure loopback interface
Step 22 VTEP1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 23 VTEP1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface lo
Step 24 VTEP1(con fi g-if)#exit Exit interface mode
Step 25 VTEP1(con fi g)#interface xe22 Configure xe22 interface
Step 26 VTEP1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 27 VTEP1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe22
Step 28 VTEP1(con fi g-if)#exit Exit interface mode
Step 29 VTEP1(con fi g)#nvo vxlan enable Enable VXLAN. Configure the node as VTEP.
Step 30 VTEP1(con fi g)#interface tunnel 98 Configure Tunnel interface
Step 31 VTEP1(con fi g-if)#tunnel mode vxlan Set the tunnel interface for vxlan
Step 32 VTEP1(con fi g-if)#tunnel source 2.2.2.1 Set the tunnel source ip
Step 33 VTEP1(con fi g-if)#tunnel destination 3.3.3.1 Set the tunnel destination ip
Step 34 VTEP1(con fi g-if)#exit Exit interface mode
Step 35 VTEP1(con fi g)#nvo vxlan id 54321 ingress- replication Configure a VXLAN VPN with head end

replication

Step 36 VTEP1(con fi g-nvo)#vxlan map-access port xe50 Set xe50 as access port to VPN 54321
Step 37 V T E P 1 ( co n f i g – n v o ) # v x l a n m a p – n e t w ork t un n e l

Tunnel98

Set Tunnel98 as network tunnel for VPN 54321
Step 38 VTEP2(con fi g-nvo)#vxlan static-entry host-mac

0000.0000.bbbb remote-vtep-ip 3.3.3.1

Add a static entry for remote host
C om man d Purpose
Step 1 VTEP2#configure terminal Entering configuration mode
Step 2 VTEP2(con fi g)#bridge 1 protocol mstp Creating bridge
Step 3 VTEP2(con fi g)#interface xe50 Configure xe50 interface.
Step 4 VTEP2(con fi g-if)#switchport Configure the port as L2 port.
Step 5 VTEP2(con fi g-if)#bridge-group 1 Add the port to the bridge
Step 6 VTEP2(con fi g-if)#switchport mode access Set the port as access port
Step 7 VTEP2(con fi g-if)#no shutdown Set interface state as up
Step 8 VTEP2(con fi g-if)#exit Exit interface mode
Step 9 VTEP2(con fi g)#interface xe33 Configure xe33 interface
Step 10 VTEP2(con fi g-if)#no switchport Configure the port as L3 port.
Step 11 VTEP2(con fi g-if)#ip address 12.12.12.1/24 Configure IP address on the interface
Step 12 VTEP2(con fi g-if)#no shutdown Set interface state as up
Step 13 VTEP2(con fi g-if)#exit Exit interface mode
Step 14 VTEP2(con fi g)#interface lo Configure loopback interface
Step 15 VTEP2(con fi g-if)#ip address 3.3.3.1/24 Configure IP address on the interface
Step 16 VTEP2(con fi g-if)#exit Exit interface mode
Step 17 VTEP2(con fi g)#router isis ipi Configure ISIS as IGP.
Step 18 VTEP2(con fi g-router)#is-type level-1 Set the ISIS as Level 1.
Step 19 VTEP2(con fi g-router)#net 49.0001.3333.3333.3333.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 20 VTEP2(con fi g-if)#exit Exit router mode
Step 21 VTEP2(con fi g)#interface lo Configure loopback interface
Step 22 VTEP2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 23 VTEP2(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface lo
Step 24 VTEP2(con fi g-if)#exit Exit interface mode
Step 25 VTEP2(con fi g)#interface xe33 Configure xe33 interface
Step 26 VTEP2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 27 VTEP2(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe33
Step 28 VTEP2(con fi g-if)#exit Exit interface mode
Step 29 VTEP2(con fi g)#nvo vxlan enable Enable VXLAN. Configure the node as VTEP.
Step 30 VTEP2(con fi g)#interface tunnel 98 Configure Tunnel interface
Step 31 VTEP2(con fi g-if)#tunnel mode vxlan Set the tunnel interface for vxlan
Step 32 VTEP2(con fi g-if)#tunnel source 3.3.3.1 Set the tunnel source ip
Step 33 VTEP2(con fi g-if)#tunnel destination 2.2.2.1 Set the tunnel destination ip
Step 34 VTEP2(con fi g-if)#exit Exit interface mode
Step 35 VTEP2(con fi g)#nvo vxlan id 54321 ingress- replication Configure a VXLAN VPN with head end

replication

Step 36 VTEP2(con fi g-nvo)#vxlan map-access port xe50 Set xe50 as access port to VPN 54321
Step 37 VTEP2(con fi g-nvo)#vxlan map-network tunnel

Tunnel98

Set Tunnel98 as network tunnel for VPN 54321
Step 38 VTEP2(con fi g-nvo)#vxlan static-entry host-mac

0000.0000.aaaa remote-vtep-ip 2.2.2.1

Add a static entry for remote host
C om man d Purpose
Step 1 RTR1#configure terminal Entering configuration mode
Step 2 RTR1(con fi g)#interface xe22 Configure xe22 interface.
Step 3 RTR1(con fi g-if)#no switchport Configure the port as L3 port.
Step 4 RTR1(con fi g-if)#ip address 11.11.11.2/24 Configure IP address on the interface
Step 5 RTR1(con fi g-if)#no shutdown Set interface state as up
Step 6 RTR1(con fi g-if)#exit Exit interface mode
Step 7 RTR1(con fi g)#interface xe33 Configure xe33 interface
Step 8 RTR1(con fi g-if)#no switchport Configure the port as L3 port.
Step 9 RTR1(con fi g-if)#ip address 12.12.12.2/24 Configure IP address on the interface
Step 10 RTR1(con fi g-if)#no shutdown Set interface state as up
Step 11 RTR1(con fi g-if)#exit Exit interface mode
Step 12 RTR1(con fi g)#router isis ipi Configure ISIS as IGP.
Step 13 RTR1(con fi g-router)#is-type level-1 Set the ISIS as Level 1.
Step 14 RTR1(con fi g-router)#net 49.0001.2222.2222.2222.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 15 RTR1(con fi g-if)#exit Exit router mode
Step 16 RTR1(con fi g)#interface xe22 Configure xe22 interface
Step 17 RTR1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 18 RTR1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe22
Step 19 RTR1(con fi g-if)#exit Exit interface mode
Step 20 RTR1(con fi g)#interface xe33 Configure xe33 interface
Step 21 RTR1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 22 RTR1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe33
Step 23 RTR1(con fi g-if)#exit Exit interface mode

2. EVPN: VXLAN with EVPN Control Plane

In this configuration, the transit BGP routers are Route Reflectors that are EBGP peers.

Topology

C om man d Purpose
Step 1 VTEP1#configure terminal Entering configuration mode
Step 2 VTEP1(con fi g)#bridge 1 protocol mstp Creating bridge
Step 3 VTEP1(con fi g)#interface xe50 Configure xe50 interface.
Step 4 VTEP1(con fi g-if)#switchport Configure the port as L2 port.
Step 5 V T E P 1 ( co n f i g – i f ) # b ri d g e – g ro u p 1 Add the port to the bridge
Step 6 VTEP1(con fi g-if)#switchport mode access Set the port as access port
Step 7 VTEP1(con fi g-if)#no shutdown Set interface state as up
Step 8 VTEP1(con fi g-if)#exit Exit interface mode
Step 9 VTEP1(con fi g)#interface xe27 Configure xe27 interface
Step 10 VTEP1(con fi g-if)#no switchport Configure the port as L3 port.
Step 11 VTEP1(con fi g-if)#ip address 3.3.3.1/24 Configure IP address on the interface
Step 12 VTEP1(con fi g-if)#no shutdown Set interface state as up
Step 13 VTEP1(con fi g-if)#exit Exit interface mode
Step 14 VTEP1(con fi g)#router isis ipi Configure ISIS as IGP.
Step 15 VTEP1(con fi g-router)#is-type level-2 only Set the ISIS as Level 2
Step 16 VTEP1(con fi g-router)#net 49.0001.1111.1111.1111.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 17 VTEP1(con fi g-if)#exit Exit router mode
Step 18 VTEP1(con fi g)#interface xe27 Configure xe27 interface
Step 19 VTEP1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 20 VTEP1(con fi g-if)#isis circuit-type level-2 Set the circuit type for the interface xe27
Step 21 VTEP1(con fi g-if)#exit Exit interface mode
Step 22 VTEP1(con fi g)#nvo vxlan enable Enable VXLAN. Configure the node as VTEP.
Step 23 VTEP1(con fi g)#nvo vxlan vtep-ip-global 3.3.3.1 Configure the VTEP IP to be used in EVPN.
Step 24 VTEP1(con fi g)#router bgp 1 Configure BGP Router
Step 25 V T E P 1 ( co n f i g – r o u t e r ) # n e i g h b o r 3 . 3 . 3 . 2 r e m o t e – a s 1 Configure BGP neighbor
Step 26 VTEP1(con fi -router)#address-family l2vpn evpn Set the address family to evpn
Step 27 V T E P 1 ( co n f i g – ro u t e r – a f ) # n e i g h b o r 3 . 3 . 3 . 2

activate

Activate the neighbor for evpn address family.
Step 28 VTEP1(con fi g-router-af)#exit Exit address family mode
Step 29 VTEP1(con fi g-router)#exit Exit router mode
Step 30 VTEP1(con fi g)#ip vrf vxlan100 Configure VRF for EVPN
Step 31 VTEP1(con fi g-vrf)#rd 100:1 Configure Route Distinguisher
Step 32 V T E P 1 ( co n f i g – v r f ) # r o u t e – t a r g e t b o t h 1 0 0 : 1 0 0 Configure Route Target
Step 33 VTEP1(con fi g-vrf)#exit Exit VRF mode
Step 34 VTEP1(con fi g)#nvo vxlan id 100 ingress- replication Configure a VXLAN VPN with head end

replication

Step 35 V T E P 1 ( co n f i g – n v o ) # v x l a n host-reachability-

protocol evpn-bgp vxlan100

Set EVPN based learning for VXLAN VPN 100
Step 36 VTEP1(con fi g-nvo)#vxlan map-access port xe50 Set xe50 as access port to VPN 100
Step 37 VTEP1(con fi g-nvo)#exit Exit NVO mode
C om man d Purpose
Step 1 RTR1#configure terminal Entering configuration mode
Step 2 RTR1(con fi g)#interface xe27 Configure xe27 interface
Step 3 RTR1(con fi g-if)#no switchport Configure the port as L3 port.
Step 4 RTR1(con fi g-if)#ip address 3.3.3.2/24 Configure IP address on the interface
Step 5 RTR1(con fi g-if)#no shutdown Set interface state as up
Step 6 RTR1(con fi g-if)#exit Exit interface mode
Step 7 RTR1(con fi g)#interface xe25 Configure xe25 interface
Step 8 RTR1(con fi g-if)#no switchport Configure the port as L3 port.
Step 9 RTR1(con fi g-if)#ip address 2.2.2.2/24 Configure IP address on the interface
Step 10 RTR1(con fi g-if)#no shutdown Set interface state as up
Step 11 RTR1(con fi g-if)#exit Exit interface mode
Step 12 RTR1(con fi g)#router isis ipi Configure ISIS as IGP.
Step 13 RTR1(con fi g-router)#is-type level-2 only Set the ISIS as Level 2
Step 14 RTR1(con fi g-router)#net 49.0001.2222.2222.2222.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 15 RTR1(con fi g-if)#exit Exit router mode
Step 16 RTR1(con fi g)#interface xe27 Configure xe27 interface
Step 17 RTR1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 18 RTR1(con fi g-if)#isis circuit-type level-2 Set the circuit type for the interface xe27
Step 19 RTR1(con fi g-if)#exit Exit interface mode
Step 20 RTR1(con fi g)#interface xe25 Configure xe25 interface
Step 21 RTR1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 22 RTR1(con fi g-if)#isis circuit-type level-2 Set the circuit type for the interface xe25
Step 23 RTR1(con fi g-if)#exit Exit interface mode
Step 24 RTR1(con fi g)#router bgp 1 Configure BGP Router
Step 25 R TR 1 ( co n f i g – r o u t e r ) # n e i g h b o r 2 . 2 . 2. 1 r e m o t e – a s 2 Configure BGP neighbor
Step 26 R TR 1 ( co n f i g – r o u t e r ) # n e i g h b o r 3 . 3 . 3 . 1 r e m o t e – a s 1 Configure BGP neighbor
Step 27 RTR1(con fi g-router)#address-family l2vpn evpn Set the address family to evpn
Step 28 RTR 1 ( co n f i g – r o u t e r – a f ) # n e i g h b o r 2.2.2.1

activate

Activate the neighbor for evpn address family.
Step 29 R TR 1 ( co n f i g – r o u t e r – a f ) # n e i g h b o r 3 . 3 . 3 . 1 a c t i v a te Activate the neighbor for evpn address family.
Step 30 R TR 1 ( co n f i g – ro u t e r – a f ) # n e i g h b o r 3 . 3 . 3 . 1

route-re fl ector-client

Configure RR client for this RR
Step 31 RTR1(con fi g-router-af)#exit Exit address family mode
Step 32 RTR1(con fi g-router)#exit Exit router mode
C om man d Purpose
Step 1 RTR2#configure terminal Entering configuration mode
Step 2 RTR2(con fi g)#interface xe25 Configure xe25 interface
Step 3 RTR2(con fi g-if)#no switchport Configure the port as L3 port.
Step 4 RTR2(con fi g-if)#ip address 2.2.2.1/24 Configure IP address on the interface
Step 5 RTR2(con fi g-if)#no shutdown Set interface state as up
Step 6 RTR2(con fi g-if)#exit Exit interface mode
Step 7 RTR2(con fi g)#interface xe11 Configure xe11 interface
Step 8 RTR2(con fi g-if)#no switchport Configure the port as L3 port.
Step 9 RTR2(con fi g-if)#ip address 4.4.4.1/24 Configure IP address on the interface
Step 10 RTR2(con fi g-if)#no shutdown Set interface state as up
Step 11 RTR2(con fi g-if)#exit Exit interface mode
Step 12 RTR2(con fi g)#router isis ipi Configure ISIS as IGP.
Step 13 RTR2(con fi g-router)#is-type level-2 only Set the ISIS as Level 2
Step 14 RTR2(con fi g-router)#net 49.0001.3333.3333.3333.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 15 RTR2(con fi g-if)#exit Exit router mode
Step 16 RTR2(con fi g)#interface xe25 Configure xe25 interface
Step 17 RTR2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 18 RTR2(con fi g-if)#isis circuit-type level-2 Set the circuit type for the interface xe25
Step 19 RTR2(con fi g-if)#exit Exit interface mode
Step 20 RTR2(con fi g)#interface xe11 Configure xe11 interface
Step 21 RTR2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 22 RTR2(con fi g-if)#isis circuit-type level-2 Set the circuit type for the interface xe11
Step 23 RTR2(con fi g-if)#exit Exit interface mode
Step 24 RTR2(con fi g)#router bgp 2 Configure BGP Router
Step 25 RTR2(con fi g-router)#neighbor 2.2.2.2 remote-as 1 Configure BGP neighbor
Step 26 RTR2(con fi g-router)#neighbor 4.4.4.2 remote-as 2 Configure BGP neighbor
Step 27 RTR2(con fi g-router)#address-family l2vpn evpn Set the address family to evpn
Step 28 RTR2(con fi g-router-af)#neighbor 2.2.2.2 activate Activate the neighbor for evpn address family.
Step 29 RTR2(con fi g-router-af)#neighbor 4.4.4.2 activate Activate the neighbor for evpn address family.
Step 30 RTR2(con fi g-router-af)#neighbor 4.4.4.2

route-re fl ector-client

Configure RR client for this RR
Step 31 RTR2(con fi g-router-af)#exit Exit address family mode
Step 32 RTR2(con fi g-router)#exit Exit router mode
C om man d Purpose
Step 1 VTEP2#configure terminal Entering configuration mode
Step 2 VTEP2(con fi g)#bridge 1 protocol mstp Creating bridge
Step 3 VTEP2(con fi g)#interface xe50 Configure xe50 interface.
Step 4 VTEP2(con fi g-if)#switchport Configure the port as L2 port.
Step 5 VTEP2(con fi g-if)#bridge-group 1 Add the port to the bridge
Step 6 VTEP2(con fi g-if)#switchport mode access Set the port as access port
Step 7 VTEP2(con fi g-if)#no shutdown Set interface state as up
Step 8 VTEP2(con fi g-if)#exit Exit interface mode
Step 9 VTEP2(con fi g)#interface xe11 Configure xe11 interface
Step 10 VTEP2(con fi g-if)#no switchport Configure the port as L3 port.
Step 11 VTEP2(con fi g-if)#ip address 4.4.4.2/24 Configure IP address on the interface
Step 12 VTEP2(con fi g-if)#no shutdown Set interface state as up
Step 13 VTEP2(con fi g-if)#exit Exit interface mode
Step 14 VTEP2(con fi g)#router isis ipi Configure ISIS as IGP.
Step 15 VTEP2(con fi g-router)#is-type level-2 only Set the ISIS as Level 2
Step 16 VTEP2(con fi g-router)#net 49.0001.4444.4444.4444.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 17 VTEP2(con fi g-if)#exit Exit router mode
Step 18 VTEP2(con fi g)#interface xe11 Configure xe11 interface
Step 19 VTEP2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 20 VTEP2(con fi g-if)#isis circuit-type level-2 Set the circuit type for the interface xe27
Step 21 VTEP2(con fi g-if)#exit Exit interface mode
Step 22 VTEP2(con fi g)#nvo vxlan enable Enable VXLAN. Configure the node as VTEP.
Step 23 VTEP2(con fi g)#nvo vxlan vtep-ip-global 4.4.4.2 Configure the VTEP IP to be used in EVPN.
Step 24 VTEP2(con fi g)#router bgp 2 Configure BGP Router
Step 25 VTEP2(con fi g-router)#neighbor 4.4.4.1 remote-as 2 Configure BGP neighbor
Step 26 VTEP2(con fi g-router)#address-family l2vpn evpn Set the address family to evpn
Step 27 VTEP2(con fi g-router-af)#neighbor 4.4.4.1

activate

Activate the neighbor for evpn address family.
Step 28 VTEP2(con fi g-router-af)#exit Exit address family mode
Step 29 VTEP2(con fi g-router)#exit Exit router mode
Step 30 VTEP2(con fi g)#ip vrf vxlan100 Configure VRF for EVPN
Step 31 VTEP2(con fi g-vrf)#rd 101:1 Configure Route Distinguisher
Step 32 VTEP2(con fi g-vrf)#route-target both 100:100 Configure Route Target
Step 33 VTEP2(con fi g-vrf)#exit Exit VRF mode
Step 34 VTEP2(con fi g)#nvo vxlan id 100 ingress- replication Configure a VXLAN VPN with head end

replication

Step 35 VTEP2(config-nvo)#vxlan host-reachability-

protocol evpn-bgp vxlan100

Set EVPN based learning for VXLAN VPN 100
Step 36 VTEP2(con fi g-nvo)#vxlan map-access port xe50 Set xe50 as access port to VPN 100
Step 37 VTEP2(con fi g-nvo)#exit Exit NVO mode

This configuration has the following features:

  • TheVTEP is connected to more than one router
  • Link failoverhappens when one router interface shuts down and then the packets are forwarded using the other router

Topology

VTEP1

C om man d Purpose
Step 1 VTEP1#configure terminal Entering configuration mode
Step 2 VTEP1(con fi g)#bridge 1 protocol mstp Creating bridge
Step 3 VTEP1(con fi g)#interface xe50 Configure xe50 interface.
Step 4 VTEP1(con fi g-if)#switchport Configure the port as L2 port.
Step 5 V T E P 1 ( co n f i g – i f ) # b ri d g e – g ro u p 1 Add the port to the bridge
Step 6 VTEP1(con fi g-if)#switchport mode access Set the port as access port
Step 7 VTEP1(con fi g-if)#no shutdown Set interface state as up
Step 8 VTEP1(con fi g-if)#exit Exit interface mode
Step 9 VTEP1(con fi g)#interface xe22 Configure xe22 interface
Step 10 VTEP1(con fi g-if)#no switchport Configure the port as L3 port.
Step 11 VTEP1(con fi g-if)#ip address 11.11.11.1/24 Configure IP address on the interface
Step 12 VTEP1(con fi g-if)#no shutdown Set interface state as up
Step 13 VTEP1(con fi g-if)#exit Exit interface mode
Step 14 VTEP1(con fi g)#interface xe25 Configure xe25 interface
Step 15 VTEP1(con fi g-if)#no switchport Configure the port as L3 port.
Step 16 VTEP1(con fi g-if)#ip address 21.21.21.1/24 Configure IP address on the interface
Step 17 VTEP1(con fi g-if)#no shutdown Set interface state as up
Step 18 VTEP1(con fi g-if)#exit Exit interface mode
Step 19 VTEP1(con fi g)#interface lo Configure loopback interface
Step 20 VTEP1(con fi g-if)#ip address 2.2.2.1/24 Configure IP address on the interface
Step 21 VTEP1(con fi g-if)#exit Exit interface mode
Step 22 VTEP1(con fi g)#router isis ipi Configure ISIS as IGP.
Step 23 VTEP1(con fi g-router)#is-type level-1 Set the ISIS as Level 1.
Step 24 VTEP1(con fi g-router)#net 49.0001.1111.1111.1111.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 25 VTEP1(con fi g-if)#exit Exit router mode
Step 26 VTEP1(con fi g)#interface lo Configure loopback interface
Step 27 VTEP1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 28 VTEP1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface lo
Step 29 VTEP1(con fi g-if)#exit Exit interface mode
Step 30 VTEP1(con fi g)#interface xe22 Configure xe22 interface
Step 32 VTEP1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe22
Step 33 VTEP1(con fi g-if)#exit Exit interface mode
Step 34 VTEP1(con fi g)#interface xe22 Configure xe22 interface
Step 35 VTEP1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 36 VTEP1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe22
Step 37 VTEP1(con fi g-if)#exit Exit interface mode
Step 38 VTEP1(con fi g)#nvo vxlan enable Enable VXLAN. Configure the node as VTEP.
Step 39 VTEP1(con fi g)#interface tunnel 98 Configure Tunnel interface
Step 40 VTEP1(con fi g-if)#tunnel mode vxlan Set the tunnel interface for vxlan
Step 41 VTEP1(con fi g-if)#tunnel source 2.2.2.1 Set the tunnel source ip
Step 42 VTEP1(con fi g-if)#tunnel destination 3.3.3.1 Set the tunnel destination ip
Step 43 VTEP1(con fi g-if)#exit Exit interface mode
Step 44 VTEP1(con fi g)#nvo vxlan id 54321 ingress- replication Configure a VXLAN VPN with head end

replication

Step 45 VTEP1(con fi g-nvo)#vxlan map-access port xe50 Set xe50 as access port to VPN 54321
Step 46 VTEP1(con fi g-nvo)#vxlan map-network tunnel

Tunnel98

Set Tunnel98 as network tunnel for VPN 54321
Step 47 VTEP1(con fi g-nvo)#vxlan static-entry host-mac

0000.0000.bbbb remote-vtep-ip 3.3.3.1

Add a static entry for remote host

VTEP2

C om man d Purpose
Step 1 VTEP2#configure terminal Entering configuration mode
Step 2 VTEP2(con fi g)#bridge 1 protocol mstp Creating bridge
Step 3 VTEP2(con fi g)#interface xe50 Configure xe50 interface.
Step 4 VTEP2(con fi g-if)#switchport Configure the port as L2 port.
Step 5 VTEP2(con fi g-if)#bridge-group 1 Add the port to the bridge
Step 6 VTEP2(con fi g-if)#switchport mode access Set the port as access port
Step 7 VTEP2(con fi g-if)#no shutdown Set interface state as up
Step 8 VTEP2(con fi g-if)#exit Exit interface mode
Step 9 VTEP2(con fi g)#interface xe33 Configure xe33 interface
Step 10 VTEP2(con fi g-if)#no switchport Configure the port as L3 port.
Step 11 VTEP2(con fi g-if)#ip address 12.12.12.1/24 Configure IP address on the interface
Step 12 VTEP2(con fi g-if)#no shutdown Set interface state as up
Step 13 VTEP2(con fi g-if)#exit Exit interface mode
Step 14 VTEP2(con fi g)#interface lo Configure loopback interface
Step 15 VTEP2(con fi g-if)#ip address 3.3.3.1/24 Configure IP address on the interface
Step 16 VTEP2(con fi g-if)#exit Exit interface mode
Step 17 VTEP2(con fi g)#router isis ipi Configure ISIS as IGP.
Step 18 VTEP2(con fi g-router)#is-type level-1 Set the ISIS as Level 1.
Step 19 VTEP2(con fi g-router)#net 49.0001.3333.3333.3333.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 20 VTEP2(con fi g-if)#exit Exit router mode
Step 21 VTEP2(con fi g)#interface lo Configure loopback interface
Step 22 VTEP2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 23 VTEP2(config-if)#isis circuit-type level-1 Set the circuit type for the interface lo
Step 24 VTEP2(con fi g-if)#exit Exit interface mode
Step 25 VTEP2(con fi g)#interface xe33 Configure xe33 interface
Step 26 VTEP2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 27 VTEP2(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe33
Step 28 VTEP2(con fi g-if)#exit Exit interface mode
Step 29 VTEP2(con fi g)#nvo vxlan enable Enable VXLAN. Configure the node as VTEP.
Step 30 VTEP2(con fi g)#interface tunnel 98 Configure Tunnel interface
Step 31 VTEP2(con fi g-if)#tunnel mode vxlan Set the tunnel interface for vxlan
Step 32 VTEP2(con fi g-if)#tunnel source 3.3.3.1 Set the tunnel source ip
Step 33 VTEP2(con fi g-if)#tunnel destination 2.2.2.1 Set the tunnel destination ip
Step 34 VTEP2(con fi g-if)#exit Exit interface mode
Step 35 VTEP2(con fi g)#nvo vxlan id 54321 ingress- replication Configure a VXLAN VPN with head end

replication

Step 36 VTEP2(con fi g-nvo)#vxlan map-access port xe50 Set xe50 as access port to VPN 54321
Step 37 VTEP2(con fi g-nvo)#vxlan map-network tunnel

Tunnel98

Set Tunnel98 as network tunnel for VPN 54321
Step 38 VTEP2(con fi g-nvo)#vxlan static-entry host-mac

0000.0000.aaaa remote-vtep-ip 2.2.2.1

Add a static entry for remote host
C om man d Purpose
Step 1 RTR1#configure terminal Entering configuration mode
Step 2 RTR1(con fi g)#interface xe22 Configure xe22 interface.
Step 3 RTR1(con fi g-if)#no switchport Configure the port as L3 port.
Step 4 RTR1(con fi g-if)#ip address 11.11.11.2/24 Configure IP address on the interface
Step 5 RTR1(con fi g-if)#no shutdown Set interface state as up
Step 6 RTR1(con fi g-if)#exit Exit interface mode
Step 7 RTR2(con fi g)#interface xe26 Configure xe26 interface
Step 8 RTR2(con fi g-if)#no switchport Configure the port as L3 port.
Step 9 RTR2(con fi g-if)#ip address 22.22.22.1/24 Configure IP address on the interface
Step 10 RTR2(con fi g-if)#no shutdown Set interface state as up
Step 11 RTR2(con fi g-if)#exit Exit interface mode
Step 12 RTR1(config)#interface xe33 Configure xe33 interface
Step 13 RTR1(con fi g-if)#no switchport Configure the port as L3 port.
Step 14 RTR1(con fi g-if)#ip address 12.12.12.2/24 Configure IP address on the interface
Step 15 RTR1(con fi g-if)#no shutdown Set interface state as up
Step 16 RTR1(con fi g-if)#exit Exit interface mode
Step 17 RTR1(con fi g)#router isis ipi Configure ISIS as IGP.
Step 18 RTR1(con fi g-router)#is-type level-1 Set the ISIS as Level 1.
Step 19 RTR1(con fi g-router)#net 49.0001.2222.2222.2222.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 20 RTR1(con fi g-if)#exit Exit router mode
Step 21 RTR1(con fi g)#interface xe22 Configure xe22 interface
Step 22 RTR1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 23 RTR1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe22
Step 24 RTR1(con fi g-if)#exit Exit interface mode
Step 25 RTR1(con fi g)#interface xe33 Configure xe33 interface
Step 26 RTR1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 27 RTR1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe33
Step 28 RTR1(con fi g-if)#exit Exit interface mode
Step 29 RTR2(con fi g)#interface xe26 Configure xe26 interface
Step 30 RTR2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 31 RTR2(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe26
Step 32 RTR2(con fi g-if)#exit Exit interface mode
C om man d Purpose
Step 1 RTR2#configure terminal Entering configuration mode
Step 2 RTR2(con fi g)#interface xe25 Configure xe25 interface.
Step 3 RTR2(con fi g-if)#no switchport Configure the port as L3 port.
Step 4 RTR2(con fi g-if)#ip address 21.21.21.2/24 Configure IP address on the interface
Step 5 RTR2(con fi g-if)#no shutdown Set interface state as up
Step 6 RTR2(con fi g-if)#exit Exit interface mode
Step 7 RTR2(con fi g)#interface xe26 Configure xe26 interface
Step 8 RTR2(con fi g-if)#no switchport Configure the port as L3 port.
Step 9 RTR2(con fi g-if)#ip address 22.22.22.2/24 Configure IP address on the interface
Step 10 RTR2(con fi g-if)#no shutdown Set interface state as up
Step 11 RTR2(con fi g-if)#exit Exit interface mode
Step 12 RTR2(con fi g)#router isis ipi Configure ISIS as IGP.
Step 13 RTR2(con fi g-router)#is-type level-1 Set the ISIS as Level 1.
Step 14 RTR2(con fi g-router)#net 49.0001.4444.4444.4444.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 15 RTR2(con fi g-if)#exit Exit router mode
Step 16 RTR2(con fi g)#interface xe25 Configure xe25 interface
Step 17 RTR2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 18 RTR2(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe25
Step 19 RTR2(con fi g-if)#exit Exit interface mode
Step 20 RTR2(con fi g)#interface xe26 Configure xe26 interface
Step 21 RTR2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 22 RTR2(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe26
Step 23 RTR2(con fi g-if)#exit Exit interface mode

4. EVPN: VXLAN Tenant Identification using Port and VLAN

All the other test cases mentioned until have used only the port for identification. In this configuration, the VLAN identifier (2 in this example) is also used along with port to identify the tenant. So, data traffic must be tagged with the configured VLAN (2 in this case).

Topology

C om man d Purpose
Step 1 VTEP1#configure terminal Entering configuration mode
Step 2 VTEP1(con fi g)#bridge 1 protocol mstp Creating bridge
Step 3 VTEP1(con fi g)#vlan 2-10 bridge 1 state enable Create VLANs for the bridge
Step 4 VTEP1(con fi g)#interface xe50 Configure xe50 interface.
Step 5 VTEP1(con fi g-if)#switchport Configure the port as L2 port.
Step 6 V T E P 1 ( co n f i g – i f ) # b ri d g e – g ro u p 1 Add the port to the bridge
Step 7 VTEP1(con fi g-if)#switchport mode hybrid Set the port as hybrid port
Step 8 VTEP1(con fi g-if)#switchport hybrid allowed

vlan add 2 egress-tagged enable

Make the port a member of VLAN 2
Step 9 VTEP1(con fi g-if)#no shutdown Set interface state as up
Step 10 VTEP1(con fi g-if)#exit Exit interface mode
Step 11 VTEP1(con fi g)#interface xe22 Configure xe22 interface
Step 12 VTEP1(con fi g-if)#no switchport Configure the port as L3 port.
Step 13 VTEP1(con fi g-if)#ip address 10.1.1.2/24 Configure IP address on the interface
Step 14 VTEP1(con fi g-if)#no shutdown Set interface state as up
Step 15 VTEP1(con fi g-if)#exit Exit interface mode
Step 16 VTEP1(con fi g)#interface lo Configure lo interface
Step 17 VTEP1(con fi g-if)#ip address 3.3.3.3/32 Configure IP address on the interface
Step 18 VTEP1(con fi g-if)#exit Exit interface mode
Step 19 VTEP1(con fi g)#router isis ipi Configure ISIS as IGP.
Step 20 VTEP1(con fi g-router)#is-type level-1 Set the ISIS as Level 1
Step 21 VTEP1(con fi g-router)#net 49.0001.3333.3333.3333.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 22 VTEP1(con fi g-if)#exit Exit router mode
Step 23 VTEP1(con fi g)#interface xe22 Configure xe22 interface
Step 24 VTEP1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 25 VTEP1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface lo
Step 26 VTEP1(con fi g-if)#exit Exit interface mode
Step 27 VTEP1(con fi g)#interface lo Configure lo interface
Step 28 VTEP1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 29 VTEP1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface lo
Step 30 VTEP1(con fi g-if)#exit Exit interface mode
Step 31 VTEP1(con fi g)#nvo vxlan enable Enable VXLAN. Configure the node as VTEP.
Step 32 VTEP1(con fi g)#nvo vxlan vtep-ip-global 3.3.3.3 Configure the VTEP IP to be used in EVPN.
Step 33 VTEP1(con fi g)#router bgp 1 Configure BGP Router
Step 34 VTEP1(con fi g-router)#bgp router-id 3.3.3.3 Configure BGP Router id
Step 35 VTEP1(con fi g-router)#neighbor 10.1.1.1 remote-as 1 Configure BGP neighbor
Step 36 VTEP1(con fi -router)#address-family l2vpn evpn Set the address family to evpn
Step 37 V T E P 1 ( co n f i g – ro u t e r – a f ) # n e i g h b o r 1 0 .1.1.1

activate

Activate the neighbor for evpn address family.
Step 38 VTEP1(con fi g-router-af)#exit Exit address family mode
Step 39 VTEP1(con fi g-router)#exit Exit router mode
Step 40 VTEP1(con fi g)#ip vrf vxlan100 Configure VRF for EVPN
Step 41 VTEP1(con fi g-vrf)#rd 3.3.3.3:1 Configure Route Distinguisher
Step 42 V T E P 1 ( co n f i g – v r f ) # r o u t e – t a r g e t b o t h 3 . 3 . 3 . 3 : 1 Configure Route Target
Step 43 VTEP1(con fi g-vrf)#exit Exit VRF mode
Step 44 VTEP1(con fi g)#nvo vxlan id 100 ingress- replication Configure a VXLAN VPN with head end

replication

Step 45 VTEP1(con fi g-nvo)#vxlan host-reachability-

protocol evpn-bgp vxlan100

Set EVPN based learning for VXLAN VPN 100
Step 46 VTEP1(con fi g-nvo)#vxlan map-access port-vlan

xe50 2

Set xe50 and vlan 2 as access port to VPN 100
Step 47 VTEP1(con fi g-nvo)#exit Exit NVO mode

RTR1

C om man d Purpose
Step 1 RTR1#configure terminal Entering configuration mode
Step 2 RTR1(con fi g)#interface xe22 Configure xe22 interface
Step 3 RTR1(con fi g-if)#no switchport Configure the port as L3 port.
Step 4 RTR1(con fi g-if)#ip address 10.1.1.1/24 Configure IP address on the interface
Step 5 RTR1(con fi g-if)#no shutdown Set interface state as up
Step 6 RTR1(con fi g-if)#exit Exit interface mode
Step 7 RTR1(con fi g)#interface xe33 Configure xe33 interface
Step 8 RTR1(con fi g-if)#no switchport Configure the port as L3 port.
Step 9 RTR1(con fi g-if)#ip address 10.2.1.1/24 Configure IP address on the interface
Step 10 RTR1(con fi g-if)#no shutdown Set interface state as up
Step 11 RTR1(con fi g-if)#exit Exit interface mode
Step 12 RTR1(con fi g)#router isis ipi Configure ISIS as IGP.
Step 13 RTR1(con fi g-router)#is-type level 1 Set the ISIS as Level 1
Step 14 RTR1(con fi g-router)#net 49.0001.2222.2222.2222.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 15 RTR1(con fi g-if)#exit Exit router mode
Step 16 RTR1(con fi g)#interface xe22 Configure xe22 interface
Step 17 RTR1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 18 RTR1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe22
Step 19 RTR1(con fi g-if)#exit Exit interface mode
Step 20 RTR1(con fi g)#interface xe33 Configure xe33 interface
Step 21 RTR1(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 22 RTR1(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe33
Step 23 RTR1(con fi g-if)#exit Exit interface mode
Step 24 RTR1(con fi g)#router bgp 1 Configure BGP Router
Step 25 RTR1(con fi g-router)#neighbor 10.1.1.2 remote-as 1 Configure BGP neighbor
Step 26 R TR 1 ( co n f i g – r o u t e r ) # n e i g h b o r 1 0 . 2.1 . 2 r e m o t e –

as 1

Configure BGP neighbor
Step 27 R TR 1 ( co n f i g – r o u t e r ) # a d d re s s – f a m i l y l 2 v p n e v p n Set the address family to evpn
Step 28 R TR 1 ( co n f i g – r o u t e r – a f ) # n e i g h b o r 1 0 .1.1 . 2

activate

Activate the neighbor for evpn address family.
Step 29 R TR 1 ( co n f i g – ro u t e r – a f ) # n e i g h b o r 1 0 . 2.1 . 2

activate

Activate the neighbor for evpn address family.
Step 30 R TR 1 ( co n f i g – ro u t e r – a f ) # n e i g h b o r 1 0 .1.1 . 2

route-re fl ector-client

Configure RR client for this RR
Step 31 R TR 1 ( co n f i g – ro u t e r – a f ) # n e i g h b o r 1 0 . 2.1 . 2

route-re fl ector-client

Configure RR client for this RR
Step 32 RTR1(con fi g-router-af)#exit Exit address family mode
Step 33 RTR1(con fi g-router)#exit Exit router mode

VTEP2

C om man d Purpose
Step 1 VTEP2#configure terminal Entering configuration mode
Step 2 VTEP2(con fi g)#bridge 1 protocol mstp Creating bridge
Step 3 VTEP2(con fi g)#vlan 2-10 bridge 1 state enable Create VLANs for the bridge
Step 4 VTEP2(con fi g)#interface xe50 Configure xe50 interface.
Step 5 VTEP2(con fi g-if)#switchport Configure the port as L2 port.
Step 6 VTEP2(con fi g-if)#bridge-group 1 Add the port to the bridge
Step 7 VTEP2(con fi g-if)#switchport mode hybrid Set the port as hybrid port
Step 8 VTEP2(con fi g-if)#switchport hybrid allowed vlan

add 2 egress-tagged enable

Make the port a member of VLAN 2
Step 9 VTEP2(con fi g-if)#no shutdown Set interface state as up
Step 10 VTEP2(con fi g-if)#exit Exit interface mode
Step 11 VTEP2(con fi g)#interface xe33 Configure xe33 interface
Step 12 VTEP2(con fi g-if)#no switchport Configure the port as L3 port.
Step 13 VTEP2(con fi g-if)#ip address 10.2.1.2/24 Configure IP address on the interface
Step 14 VTEP2(con fi g-if)#no shutdown Set interface state as up
Step 15 VTEP2(con fi g-if)#exit Exit interface mode
Step 16 VTEP2(con fi g)#interface lo Configure lo interface
Step 17 VTEP2(con fi g-if)#ip address 4.4.4.4/32 Configure IP address on the interface
Step 18 VTEP2(con fi g-if)#exit Exit interface mode
Step 19 VTEP2(con fi g)#router isis ipi Configure ISIS as IGP.
Step 20 VTEP2(con fi g-router)#is-type level-1 Set the ISIS as Level 1
Step 21 VTEP2(con fi g-router)#net 49.0001.4444.4444.4444.00 Establish a Network Entity Title for this instance, specifying the area address and the system ID.
Step 22 VTEP2(con fi g-if)#exit Exit router mode
Step 23 VTEP2(con fi g)#interface xe33 Configure xe33 interface

Step 24 VTEP2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 25 VTEP2(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface xe33
Step 26 VTEP2(con fi g-if)#exit Exit interface mode
Step 27 VTEP2(con fi g)#interface lo Configure lo interface
Step 28 VTEP2(con fi g-if)#ip router isis ipi Enable IS-IS routing on an interface for area ipi
Step 29 VTEP2(con fi g-if)#isis circuit-type level-1 Set the circuit type for the interface lo
Step 30 VTEP2(con fi g-if)#exit Exit interface mode
Step 31 VTEP2(con fi g)#nvo vxlan enable Enable VXLAN. Configure the node as VTEP.
Step 32 VTEP2(con fi g)#nvo vxlan vtep-ip-global 4.4.4.4 Configure the VTEP IP to be used in EVPN.
Step 33 VTEP2(con fi g)#router bgp 1 Configure BGP Router
Step 34 VTEP2(con fi g-router)#bgp router-id 4.4.4.4 Configure BGP Router id
Step 35 VTEP2(con fi g-router)#neighbor 10.2.1.1

remote-as 1

Configure BGP neighbor
Step 36 VTEP2(con fi g-router)#address-family l2vpn evpn Set the address family to evpn
Step 37 VTEP2(con fi g-router-af)#neighbor 10.2.1.1

activate

Activate the neighbor for evpn address family.
Step 38 VTEP2(con fi g-router-af)#exit Exit address family mode
Step 39 VTEP2(con fi g-router)#exit Exit router mode
Step 40 VTEP2(con fi g)#ip vrf vxlan100 Configure VRF for EVPN
Step 41 VTEP2(con fi g-vrf)#rd 4.4.4.4:1 Configure Route Distinguisher
Step 42 VTEP2(con fi g-vrf)#route-target both 3.3.3.3:1 Configure Route Target
Step 43 VTEP2(con fi g-vrf)#exit Exit VRF mode
Step 44 VTEP2(con fi g)#nvo vxlan id 100 ingress- replication Configure a VXLAN VPN with head end

replication

Step 45 VTEP2(con fi g-nvo)#vxlan host-reachability-

protocol evpn-bgp vxlan100

Set EVPN based learning for VXLAN VPN 100
Step 46 VTEP2(con fi g-nvo)#vxlan map-access

port-vlan xe50 2

Set xe50 and vlan 2 as access port to VPN 100
Step 47 VTEP2(con fi g-nvo)#exit Exit NVO mode

Conclusion

OcNOS is a feature rich solution for data center deployments. VXLAN with EVPN is a perfect solution to provide various services especially in a multi-tenant and hybrid cloud environments. OcNOS is fully standards compliant in both these features.