EVPN L3 Gateway with VXLAN Stitching
Overview
Layer 3 EVPN Gateway Stitching in OcNOS enables seamless IP connectivity between isolated VXLAN EVPN domains or VRFs without merging their control planes or Layer 2 broadcast domains. This approach is designed for multi-site data center interconnect, multi-PoD fabrics, and hybrid cloud deployments, where scalable and secure routing between domains is required.
EVPN stitching is supported on TD3 and TD4 data center platforms using EVPN Type-5 routes at border leaf or spine devices. The solution provides route translation, loop prevention, policy-based route control, and operational visibility, ensuring flexible and modular data center expansion.
Feature Characteristics
• Maintains independent EVPN control planes across domains while enabling IP-level connectivity.
• Uses EVPN Type-5 route stitching at border leaf/spine nodes for prefix exchange.
• Supports multiple domains, Multi-PoD fabrics, and inter-DC connectivity without merging VNIs or broadcast domains.
• Implements mechanisms like SOO and DPATH to avoid routing loops between domains.
Benefits
• Provides IP-level communication between isolated VXLAN EVPN domains without merging their control planes.
• Enables multi-site, multi-PoD, and hybrid cloud deployments with independent scaling per domain.
• Route-maps and policy tools allow selective advertisement and filtering of prefixes.
• Built-in loop prevention (SOO/DPATH) ensures stable inter-domain routing.
Prerequisites
Below CLIs need to be configured, saved, and the node should be rebooted before proceeding to configure the EVPN L3 gateway VXLAN stitching commands.
OcNOS#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
OcNOS(config)#nvo vxlan enable
OcNOS(config)#nvo vxlan irb
OcNOS(config)#commit
OcNOS(config)#end
OcNOS#write
Building configuration...
[OK]
OcNOS#reload
Are you sure you would like to reset the system? (y/n): y
Device rebooted by ocnos user from cmlsh at time:Tue Oct 7 18:33:51 2025
OcNOS#
Limitation
• Type-5 Only – Only EVPN Type-5 route stitching is supported. Other route types (e.g., Type-2) must be converted to Type-5 before stitching.
• Static VXLAN Tunnels – Not supported; stitching is limited to dynamic EVPN-based VXLAN.
• Management Support – SNMP and OpenConfig are not supported in this release; only CLI and Netconf are available.
• Platform Scope – Supported only on TD3 and TD4 data center platforms.
• Scale – Validated with up to four border gateways; larger scale not verified in this release.
• Advanced QoS, ACLs, or telemetry extensions across stitched domains are not included.
EVPN L3 Gateway with VXLAN Stitching - Commands
evpn-stitching
Use this command to enable EVPN L3 gateway with VXLAN stitching.
Use no parameter of this command to disable EVPN L3 gateway with VXLAN stitching.
Command Syntax
evpn-stitching
no evpn-stitching
Parameters
None
Default
None
Command Mode
VRF mode
Applicability
Introduced in OcNOS version 7.0.0.
Example
The following example shows how to enable EVPN L3 gateway with VXLAN stitching:
#configure terminal
(config)#ip vrf red
(config-vrf)#evpn-stitching
(config-vrf-evpn)#commit
(config-vrf-evpn)#
#configure terminal
(config)#ip vrf red
(config-vrf)#no evpn-stitching
(config-vrf)#commit
rd (route distinguisher)
Use this command to assign a route distinguisher (RD).
Use no parameter of this command to remove the configured RD.
Command Syntax
rd ASN:nn_or_IP-address:nn
no rd ASN:nn_or_IP-address:nn
Parameters
ASN:nn_or_IP-address:nn | AS number and an arbitrary number (for example, 100:1). Otherwise, specify a 32-bit IP address and an arbitrary number (for example, 192.16.10.1:1). |
•
Default
None
Command Mode
evpn-stitching mode
Applicability
Introduced in OcNOS version 7.0.0.
Example
The following example shows how to configure an EVPN instance with VXLAN Stitching:
#configure terminal
(config)#ip vrf red
(config-vrf)#rd 101:101
(config-vrf)#evpn-stitching
(config-vrf-evpn)#rd 102:102
(config-vrf-evpn)#commit
#configure terminal
(config)#ip vrf red
(config-vrf)#evpn-stitching
(config-vrf-evpn)#no rd 102:102
(config-vrf-evpn)#commit
route-target
Use this command to configure a route-target of type import, export, or both to the EVPN instance.
Use no parameter of this command to remove the configured the route-target.
Command Syntax
route-target (import|export|both) (ASN:nn_or_IP-address:nn)
no route-target (import|export|both) (ASN:nn_or_IP-address:nn)
Parameters
import | AImport routing information. |
export | Export routing information. |
both | Import and export routing information. |
ASN:nn_or_IP-address:nn | AS number and an arbitrary number (for example, 100:1). Otherwise, specify a 32-bit IP address and an arbitrary number (for example, 192.16.10.1:1). |
Default
None
Command Mode
evpn-stitching mode
Applicability
Introduced in OcNOS version 7.0.0.
Example
The following example is for configuring an EVPN instance with VXLAN stitching, including route-target import/export::
#configure terminal
(config)#ip vrf red
(config-vrf)#evpn-stitching
(config-vrf-evpn)#rd 102:102
(config-vrf-evpn)#route-target both 102:102
(config-vrf-evpn)#commit
#configure terminal
(config)#ip vrf red
(config-vrf)#evpn-stitching
(config-vrf-evpn)#no route-target both 102:102
(config-vrf-evpn)#commit
host-route-extend
Use this command to enable host route extension for a given L2VNI or all L2VNIs in EVPN stitching mode.
Use no parameter of this command to disable host route extension.
Command Syntax
host-route-extend-l2vni <VNI_RANGE | all>
no host-route-extend-l2vni
Parameters
VNI_RANGE | Specifies L2VNIs in the range <1-16777215> for which host route extension is enabled. |
all | Applies host route extension to all configured L2VNIs. |
Default
None
Command Mode
evpn-stitching mode
Applicability
Introduced in OcNOS version 7.0.0.
Example
The following example shows how to configure a :
#configure terminal
(config)#ip vrf red
(config-vrf)#evpn-stitching
(config-vrf-evpn)#host-route-extend-l2vni all
(config-vrf-evpn)#commit
#configure terminal
(config)#ip vrf red
(config-vrf)#evpn-stitching
(config-vrf-evpn)#no host-route-extend-l2vni all
(config-vrf-evpn)#commit
#configure terminal
(config)#ip vrf red
(config-vrf)#evpn-stitching
(config-vrf-evpn)#host-route-extend-l2vni 1-2,5,10-14
(config-vrf-evpn)#commit
#configure terminal
(config)#ip vrf red
(config-vrf)#evpn-stitching
(config-vrf-evpn)#no host-route-extend-l2vni 1-2,5,10-14
(config-vrf-evpn)#commit
translation-l3vni
Use this command to configure L3VNI translation from a local L3VNI to a DCI L3VNI.
Use no parameter of this command to disable the L3VNI translation.
Command Syntax
translation-l3vni <1-16777215>
no translation-l3vni
Parameters
<1-16777215> | Specifies the L3VNI identifier to be used for translation. |
Default
None
Command Mode
evpn-stitching mode
Applicability
Introduced in OcNOS version 7.0.0.
Example
The following example shows how to configure an L3VNI translation:
#configure terminal
(config)#ip vrf red
(config-vrf)#l3vni 1000
(config-vrf)#evpn-stitching
(config-vrf-evpn)#translation-l3vni 300
(config-vrf-evpn)#commit
%% After map/unmap of L3VNI from VRF red, interfaces are unbounded with VRF
(config-vrf-evpn)#
#configure terminal
(config)#ip vrf red
(config-vrf)#evpn-stitching
(config-vrf-evpn)#no translation-l3vni
(config-vrf-evpn)#commit
%% After map/unmap of L3VNI from VRF red, interfaces are unbounded with VRF
(config-vrf-evpn)#
exit-config-vrf-evpn-mode
Use this command to exit the EVPN stitching.
Command Syntax
exit-config-vrf-evpn-mode
Parameters
None
Default
None
Command Mode
evpn-stitching mode
Applicability
Introduced in OcNOS version 7.0.0.
Example
The following example shows how to exit an EVPN Stitching:
#configure terminal
(config)#ip vrf red
(config-vrf)#evpn-stitching
(config-vrf-evpn)#exit-config-vrf-evpn-mode
(config-vrf)#