Single-Homed VXLAN Eline xConnect
Topology
Figure 14-15: Single-homed VXLAN Eline xConnect topology
L2, IPv4, and IPv6 traffic streams are sent from TG-1 and TG-2.
CE1
(config)#hostname CE1 | Configure host name |
(config)#bridge 1 protocol ieee vlan-bridge | Configure bridge as IEEE VLAN bridge |
(config)#interface xe6 | Enter interface mode |
(config-if)#switchport | Configure the interface as switchport |
(config-if)#exit | Exit interface mode |
(config)#interface xe7 | Enter interface mode |
(config-if)#switchport | Configure the interface as switchport |
(config-if)#bridge-group 1 | Associate bridge to an interface. |
(config-if)#switchport mode trunk | Configure port as a trunk. |
(config-if)#switchport trunk allowed vlan all | Allow all VLANs on the interface. |
(config-if)#commit | Commit the candidate configuration to the running configuration. |
VTEP-1
#con t | Enter configure mode |
(config)#hostname VTEP-1 | Configure host name |
(config)#hardware-profile filter vxlan enable | Enable hardware-profile filter for VXLAN |
(config)#hardware-profile statistics ingress-acl enable | Configure hardware profile statistics ingress-acl |
(config)#nvo vxlan enable | Enable VXLAN globally on this vtep |
(config)#mac vrf evpn_sh | Configure a new VRF |
(config-vrf)#rd 1.1.1.1:1 | Assign the Route Distinguisher value. |
(config-vrf)#route-target both 10:1 | Configure route target to import and export the routes |
(config-vrf)#exit | Exit vrf mode |
(config)#bridge 1 protocol ieee vlan-bridge | Configure bridge as IEEE VLAN bridge |
(config)#interface xe6 | Enter interface mode |
(config-if)#switchport | Configure the interface as switchport |
(config-if)#exit | Exit interface mode |
(config)#interface xe15 | Enter interface mode |
(config-if)#ip address 10.10.10.1/24 | Configure IP address on the interface |
(config-if)#exit | Exit interface mode |
(config)#interface lo | Enter interface mode |
(config-if)#ip address 1.1.1.1/32 secondary | Configure IP address on the interface |
(config-if)#exit | Exit interface mode |
(config)#router ospf 100 | Enter router mode for OSPF |
(config-router)#bfd all-interfaces | Enable BFD for all-interface into OSPF |
(config-router)#network 1.1.1.1/32 area 0.0.0.0 | Add 1.1.1.1 network into area 0 |
(config-router)#network 10.10.10.0/24 area 0.0.0.0 | Add 10.10.10.0 network into area 0 |
(config)#router bgp 100 | Enter BGP router mode |
(config-router)#bgp router-id 1.1.1.1 | Assign BGP router ID |
(config-router)#neighbor 2.2.2.2 remote-as 100 | Specify a neighbor router with peer ip address and remote-as defined |
(config-router)#neighbor 2.2.2.2 update-source lo | Specify the neighbor to use loopback address as source |
(config-router)#address-family l2vpn evpn | Enter into l2vpn address family mode |
(config-router-af)#neighbor 2.2.2.2 activate | Activate the peer into address family mode |
(config-router-af)#exit-address-family | Exit l2vpn address family mode |
(config-router)#exit | Exit BGP router mode |
(config)#nvo vxlan vtep-ip-global 1.1.1.1 | Configure Source vtep-ip-global configuration |
(config)#nvo vxlan id 10 xconnect target-vxlan-id 20 | add a tenant and the type of VPN. This creates an ELAN with source and target identifier for ELINE XConnect |
(config-nvo)#vxlan host-reachability-protocol evpn-bgp evpn_sh | Set the host reachable protocol to Ethernet- |
(config-nvo)#nvo vxlan access-if port-vlan xe6 2 | Map the access port xe6 of this VTEP with vlan 2 |
(config-nvo-acc-if)#map vnid 10 | Map the VNID to access-port |
(config-nvo-acc-if)#commit | Commit the candidate configuration to the running configuration. |
SPINE-1
(config)#hostname SPINE-1 | Configure hostname |
(config)#hardware-profile statistics ingress-acl enable | Configure hardware profile statistics ingress-acl |
(config)#interface xe8 | Enter interface mode |
(config-if)#ip address 20.20.20.1/24 | Configure IP address on the interface |
(config-if)#exit | Exit interface mode |
(config)#interface xe15 | Enter interface mode |
(config-if)#ip address 10.10.10.2/24 | Configure IP address on the interface |
(config-if)#exit | Exit interface mode |
(config)#router ospf 100 | Enter OSPF router mode |
(config-router)#bfd all-interfaces | Enable BFD for all-interface into OSPF |
(config-router)#network 10.10.10.0/24 area 0.0.0.0 | Add 10.10.10.0 network into area 0 |
(config-router)#network 20.20.20.0/24 area 0.0.0.0 | Add 20.20.20.0 network into area 0 |
(config-router)#commit | Commit the candidate configuration to the running configuration. |
VTEP-2
#con t | Enter configure mode |
(config)#hostname VTEP-2 | Configure hostname |
(config)#hardware-profile filter vxlan enable | Enable hardware-profile filter for VXLAN |
(config)#hardware-profile statistics ingress-acl enable | Configure hardware profile statistics ingress-acl |
(config)#nvo vxlan enable | Enable VXLAN globally on this vtep |
(config)#mac vrf evpn_sh | Configure a new VRF |
(config-vrf)#rd 2.2.2.2:1 | Assign the Route Distinguisher value. |
(config-vrf)#route-target both 10:1 | Configure route target to import and export the routes |
(config-vrf)#exit | Exit vrf mode |
(config)#bridge 1 protocol ieee vlan-bridge | Configure bridge as IEEE VLAN bridge |
(config)#interface xe6 | Enter interface mode |
(config-if)#switchport | Configure the interface as switchport |
(config-if)#exit | Exit interface mode |
(config)#interface xe8 | Enter interface mode |
(config-if)#ip address 20.20.20.2/24 | Configure IP address on the interface |
(config-if)#exit | Exit interface mode |
(config)#interface lo | Enter interface mode |
(config-if)#ip address 2.2.2.2/32 secondary | Configure IP address on the interface |
(config-if)#exit | Exit interface mode |
(config)#router ospf 100 | Enter into router ospf mode |
(config-router)#bfd all-interfaces | Enable BFD for all-interface into OSPF |
(config-router)#network 2.2.2.2/32 area 0.0.0.0 | Add lo ip address 2.2.2.2 as network into area 0 |
(config-router)#network 20.20.20.0/24 area 0.0.0.0 | Add 20.20.20.0 network into area 0 |
(config-router)#exit | Exit router mode |
(config)#router bgp 100 | Enter BGP router mode |
(config-router)#bgp router-id 2.2.2.2 | Assign BGP router ID |
(config-router)#neighbor 1.1.1.1 remote-as 100 | Specify a neighbor router with peer ip address and remote-as defined |
(config-router)#neighbor 1.1.1.1 update-source lo | Specify the neighbor to use loopback address as source |
(config-router)#address-family l2vpn evpn | Enter into l2vpn address family mode |
(config-router-af)#neighbor 1.1.1.1 activate | Activate the peer into address family mode |
(config-router-af)#exit-address-family | Exit l2vpn address family mode |
(config-router)#exit | Exit BGP router mode |
(config)#nvo vxlan vtep-ip-global 2.2.2.2 | Configure Source vtep-ip-global configuration |
(config)#nvo vxlan id 20 xconnect target-vxlan-id 10 | add a tenant and the type of VPN. This creates an ELAN with source and target identifier for ELINE XConnect |
(config-nvo)#vxlan host-reachability-protocol evpn-bgp evpn_sh | Set the host reachable protocol to Ethernet- |
(config-nvo)#nvo vxlan access-if port-vlan xe6 2 | Map the access port xe6 of this VTEP with vlan 2 |
(config-nvo-acc-if)#map vnid 20 | Map the VNID to access-port |
(config-nvo-acc-if)#commit | Commit the candidate configuration to the running configuration. |
CE2
(config)#hostname CE1 | Configure host name |
(config)#bridge 1 protocol ieee vlan-bridge | Configure bridge as IEEE VLAN bridge |
(config)#interface xe6 | Enter interface mode |
(config-if)#switchport | Configure the interface as switchport |
(config-if)#exit | Exit interface mode |
(config)#interface xe7 | Enter interface mode |
(config-if)#switchport | Configure the interface as switchport |
(config-if)#bridge-group 1 | Associate bridge to an interface. |
(config-if)#switchport mode trunk | Configure port as a trunk. |
(config-if)#switchport trunk allowed vlan all | Allow all VLANs on the interface. |
(config-if)#commit | Commit the candidate configuration to the running configuration. |
Validation
VTEP-1#sh nvo vxlan xconnect
EVPN Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
10 ---- 1500 20 xe6 2 --- Single Homed Port --- 2.2.2.2 1500 AC-NW NW-SET
Total number of entries are 1
VTEP-1#sh nvo vxlan tunnel
VXLAN Network tunnel Entries
Source Destination Status Up/Down Update
======================================================================
1.1.1.1 2.2.2.2 Installed 00:02:01 00:02:01
Total number of entries are 1
VTEP-1#
VTEP-2#sh nvo vxlan xconnect
EVPN Xconnect Info
========================
AC-AC: Local-Cross-connect
AC-NW: Cross-connect to Network
AC-UP: Access-port is up
AC-DN: Access-port is down
NW-UP: Network is up
NW-DN: Network is down
NW-SET: Network and AC both are up
Local Remote Connection-Details
================================ ============ ===================================================================================
VPN-ID EVI-Name MTU VPN-ID Source Destination PE-IP MTU Type NW-Status
================================ ============ ===================================================================================
20 ---- 1500 10 xe6 2 --- Single Homed Port --- 1.1.1.1 1500 AC-NW NW-SET
Total number of entries are 1
VTEP-2#sh nvo vxlan tunnel
VXLAN Network tunnel Entries
Source Destination Status Up/Down Update
======================================================================
2.2.2.2 1.1.1.1 Installed 00:01:16 00:01:16
Total number of entries are 1
VTEP-2#
Last modified date: 08/29/2023