Deployment Guide

Configure Symmetric IRB for VXLAN BGP EVPN
Before you start
1. Follow the procedure in Configure VXLAN to:
● Configure the VXLAN overlay network.
● Enable routing for VXLAN virtual networks. Integrated Routing and Bridging (IRB) is automatically enabled.
● Enable an overlay routing profile with the number of reserved ARP table entries for VXLAN overlay routing.
For a sample configuration, see Example: VXLAN with static VTEP.
2. Follow the procedure in Configure BGP EVPN for VXLAN to:
● Configure BGP to advertise EVPN routes.
● Configure EVPN for VXLAN virtual networks.
For a sample configuration, see Example: VXLAN with BGP EVPN.
Configure symmetric IRB
1. (Optional) If the switch is a VTEP VLT peer, configure a local router MAC that is used by remote VTEPs as the destination
address in VXLAN encapsulated packets sent to the switch in EVPN mode.
If you assign a unique VLT MAC address on each pair of VLT peers, use the same MAC address as the local router MAC. By
default, the router MAC is derived as an offset from the local system MAC address.
In a VLT VTEP pair, the router MAC configured in both the VLT peers must be the same. Router MAC configuration is
mandatory for VTEP VLT peers.
OS10(config)# evpn
OS10(config-evpn)# router-mac nn:nn:nn:nn:nn:nn
2. Configure a non-default VRF with a dedicated VXLAN VNI for each tenant VRF in EVPN mode. The tenant VRF is created
using the ip vrf command when you enable overlay routing with IRB; see Enable overlay routing between virtual networks.
The VXLAN VNI associated with the tenant VRF for EVPN symmetric IRB must be unique on the switch.
By default, the route distinguisher value is auto-generated. To reconfigure it, use the rd A.B.C.D:[1-65535]command.
The route target value is a mandatory entry.
OS10(config-evpn)# vrf tenant-vrf-name
OS10(config-evpn-vrf-vrf-tenant)# vni vxlan-vni
OS10(config-evpn-vrf-vrf-tenant)# rd {A.B.C.D:[1-65535]}
OS10(config-evpn-vrf-vrf-tenant)# route-target {auto | value {import | export | both}
[asn4]}
OS10(config-evpn-vrf-vrf-tenant)# exit
3. (Optional) Advertise the IP prefixes learned from external networks and directly connected networks into EVPN type-5 route
advertisements in EVPN-VRF mode; for example:
OS10(config)# evpn
OS10(config-evpn)# vrf vrf-tenant1
OS10(config-evpn-vrf-vrf-tenant1)# advertise {ipv4 | ipv6} {connected | static| ospf
| bgp} [route-map map-name]
4. (Optional) To redistribute EVPN routes to a BGP or OSPF neighbor, configure the redistribution of L2VPN EVPN routes into
BGP or OSPF IPv4/IPv6 routes on a border leaf VTEP in ROUTER-BGP or ROUTER-OSPF mode; for example:
OS10(config)# router bgp 101
OS10(conf-router-bgp-101)# vrf blue
OS10(conf-router-bgp-101-vrf)# address-family ipv4 unicast
OS10(configure-router-bgpv4-af)# redistribute l2vpn evpn [route-map map-name]
5. Verify the VXLAN BGP EVPN with symmetric IRB configuration.
Display the EVPN instance configuration
OS10# show evpn evi 10000
EVI : 10000, State : up
Bridge-Domain : Virtual-Network 10000, VNI 10000
Route-Distinguisher : 1:110.111.170.195:10000(auto)
Route-Targets : 0:10000:16787216(auto) both
BGP EVPN for VXLAN
59