API Guide

In EVPN mode, configure the router MAC used by remote VTEPs as the destination address in VXLAN encapsulated packets
sent to the switch. Configure a dedicated VXLAN VNI for symmetric IRB for each tenant VRF.
OS10(config)# evpn
OS10(config-evpn)# router-mac 00:01:02:03:04:06
OS10(config-evpn)# vrf tenant1
OS10(config-evpn-vrf-tenant1)# vni 3000
OS10(config-evpn-vrf-tenant1)# route-target 65535:30000 both
OS10(config-evpn-vrf-tenant1)# exit
OS10(config-evpn)# exit
OS10(config)#
16. Configure an externally connected VLAN
OS10(conf)# interface vlan 200
OS10(conf-if-vlan)# ip vrf forwarding tenant1
OS10(conf-if-vlan)# ip address 10.10.0.1/16
OS10(conf-if-vlan)# no shutdown
OS10(conf-if-vlan)# exit
OS10(conf)# interface ethernet 1/1/7
OS10(conf-if-eth1/1/7)# switchport mode trunk
OS10(conf-if-eth1/1/7)# switchport trunk allowed vlan 200
17. Configure advertisement of the connected networks via EVPN Type-5 routes
OS10(config)# evpn
OS10(config-evpn)# vrf tenant1
OS10(config-evpn-vrf-tenant1)# advertise ipv4 connected
OS10(config-evpn-vrf-tenant1)# exit
18. Configure BGP session with external router on the border-leaf VTEPs
OS10(config)# router bgp 100
OS10(config-router-bgp-100)# vrf tenant1
OS10(config-router-bgp-100-vrf)# neighbor 10.10.0.3
OS10(config-router-vrf-neighbor)# remote-as 102
OS10(config-router-vrf-neighbor)# no shutdown
OS10(config-router-vrf-neighbor)# end
19. Import external routes in to EVPN on the border-leaf switches
External routes for WAN connectivity and other appliances can be imported in to a VXLAN pod using the following configuration
on the border-leaf router.
OS10(config)# evpn
OS10(config-evpn)# vrf tenant1
OS10(config-evpn-vrf-tenant1)# advertise ipv4 bgp
OS10(config-evpn-vrf-tenant1)# end
20. Export BGP EVPN routes out of border-leaf switch to external devices
For interpod connectivity, use the following configuration to export the BGP EVPN routes of a VXLAN pod from the border-leaf
router.
With connected routes of virtual networks present in an individual VTEP advertised as type-5 routes, the border-leaf router has
information about all the virtual networks present in the pod.
OS10(config)# router bgp 100
OS10(config-router-bgp-100)# vrf tenant1
OS10(config-router-bgp-100-vrf)# address-family ipv4 unicast
OS10(configure-router-bgpv4-vrf-af)# redistribute l2vpn evpn
OS10(configure-router-bgpv4-vrf-af)# end
The redistribute l2vpn evpn command redistributes both type-2 mac-ip (/32 routes) and type-5 routes (subnet
routes). Use the route-map command to filter type-2 mac-ip (/32 routes) and redistribute only the type-5 routes.
OS10(config)# ip prefix-list deny_v4_host_routes seq 10 deny 0.0.0.0/0 ge 32 le 32
OS10(config)# ip prefix-list deny_v4_host_routes seq 20 permit 0.0.0.0/0 le 31
OS10(config)# route-map deny_v4_host_routes permit 10
BGP EVPN for VXLAN
135