Dell EMC SmartFabric OS10 User Guide Release 10.5.1

Configure Symmetric IRB for VXLAN BGP EVPN

Before you start

1. Follow the procedure in Configure VXLAN to:
   • Configure the VXLAN overlay network.
   • Enable routing for VXLAN virtual networks. Integrated Routing and Bridging (IRB) is automatically enabled.
   • Enable an overlay routing profile with the number of reserved ARP table entries for VXLAN overlay routing.
2. Follow the procedure in Configure BGP EVPN for VXLAN to:
   • Configure BGP to advertise EVPN routes.
   • Configure EVPN for VXLAN virtual networks.

   For a sample configuration, see Example: VXLAN with BGP EVPN.

Configure symmetric IRB

1. (Optional) If the switch is a VTEP VLT peer, configure a local router MAC that is used by remote VTEPs as the destination address in VXLAN encapsulated packets sent to the switch in EVPN mode.

   If you assign a unique VLT MAC address on each pair of VLT peers, use the same MAC address as the local router MAC. By default, the router MAC is derived as an offset from the local system MAC address.

   In a VLT VTEP pair, the router MAC configured in both the VLT peers must be the same. Router MAC configuration is mandatory for VTEP VLT peers.

   OS10(config)# evpn
   OS10(config-evpn)# router-mac nn:nn:nn:nn:nn:nn

2. Configure a non-default VRF with a dedicated VXLAN VNI for each tenant VRF in EVPN mode. The tenant VRF is created using the ip vrf command when you enable overlay routing with IRB; see Enable overlay routing between virtual networks. The VXLAN VNI associated with the tenant VRF for EVPN symmetric IRB must be unique on the switch.

   By default, the route distinguisher value is auto-generated. To reconfigure it, use the rd A.B.C.D:[1-65535]command. The route target value is a mandatory entry.

   OS10(config-evpn)# vrf tenant-vrf-name
   OS10(config-evpn-vrf-vrf-tenant)# vni  vxlan-vni
   OS10(config-evpn-vrf-vrf-tenant)# rd {A.B.C.D:[1-65535]}
   OS10(config-evpn-vrf-vrf-tenant)# route-target {auto | value {import | export | both}  [asn4]}
   OS10(config-evpn-vrf-vrf-tenant)# exit

3. (Optional) Advertise the IP prefixes learned from external networks and directly connected networks into EVPN type-5 route advertisements in EVPN-VRF mode; for example:

   OS10(config)# evpn
   OS10(config-evpn)# vrf vrf-tenant1
   OS10(config-evpn-vrf-vrf-tenant1)# advertise {ipv4 | ipv6} {connected | static| ospf | bgp} [route-map map-name]

4. (Optional) To redistribute EVPN routes to a BGP or OSPF neighbor, configure the redistribution of L2VPN EVPN routes into BGP or OSPF IPv4/IPv6 routes on a border leaf VTEP in ROUTER-BGP or ROUTER-OSPF mode; for example:

   OS10(config)# router bgp 101
   OS10(conf-router-bgp-101)# vrf blue 
   OS10(conf-router-bgp-101-vrf)# address-family ipv4 unicast
   OS10(configure-router-bgpv4-af)# redistribute l2vpn evpn [route-map map-name]

5. Verify the VXLAN BGP EVPN with symmetric IRB configuration.

Display the EVPN instance configuration

OS10# show evpn evi 10000

EVI : 10000, State : up
  Bridge-Domain : Virtual-Network 10000, VNI 10000 
  Route-Distinguisher : 1:110.111.170.195:10000(auto)
  Route-Targets : 0:10000:16787216(auto) both
  Inclusive Multicast : 110.111.170.107
  IRB : Enabled(VRF-TENANT-1)

OS10# show evpn evi 20000
  EVI : 20000, State : up
  Bridge-Domain : Virtual-Network 20000, VNI 20000
  Route-Distinguisher : 1:110.111.170.195:20000(auto)
  Route-Targets : 0:20000:16797216(auto) both
  Inclusive Multicast :
  IRB : Enabled(VRF-TENANT-1)

show evpn mac-ip
Type -(lcl): Local (rmt): remote
EVI   Mac Address       Type Seq No Host-IP     Interface/Next-Hops
10000 00:00:0b:0b:0b:0a lcl  0      10.10.10.10 ethernet1/1/6
10000 14:18:77:25:4e:82 rmt  0      10.10.10.11 110.111.170.107

OS10# show evpn vrf
VXLAN-VNI  EVI  Virtual-Network-Instance  VRF-Name
30         30   30                        vrf_30
40         40   40                        vrf_40


OS10# show evpn vrf l3-vni
VRF : vrf_30, State : up
  L3-VNI : 3030
  Route-Distinguisher : 1:80.80.1.1:3030(auto)
  Route-Targets : 0:200:268438486(auto) both
  Remote VTEP : 4.4.4.4

VRF : vrf_40, State : up
  L3-VNI : 4040
  Route-Distinguisher : 1:80.80.1.1:4040(auto)
  Route-Targets : 0:200:268439496(auto) both
  Remote VTEP : 4.4.4.4

VRF : vrf_50, State : up
  L3-VNI : 5050
  Route-Distinguisher : 1:80.80.1.1:5050(auto)
  Route-Targets : 0:200:268430506(auto) both
  Remote VTEP : 4.4.4.4

show evpn router-mac
Local Router MAC : 14:18:77:25:4e:4d

Remote-VTEP  Router's-MAC
4.4.4.4      14:18:77:25:6f:4d
5.5.5.5      00:00:01:00:a3:b4

OS10# show ip bgp l2vpn evpn
BGP local RIB : Routes to be Added , Replaced , Withdrawn
BGP local router ID is 95.0.0.4
Status codes: s suppressed, S stale, d dampened, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external,
r - redistributed/network, S - stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network                               Next Hop  Metric LocPrf Weight  Path
*>r Route distinguisher: 4.4.4.4:65001 VNI:65001
[5]:[0]:[24]:[11.11.11.0]:[0.0.0.0]/224 4.4.4.4  0     100    32768   ? 

*>r Route distinguisher: 3.3.3.3:65002 VNI:65002
[5]:[0]:[24]:[12.12.12.0]:[0.0.0.0]/224 3.3.3.3  0     100    0 100 101 ?

*>r Route distinguisher: 4.4.4.4:101 VNI:101
[2]:[0]:[48]:[14:18:77:25:6f:4d]:[32]:[11.11.11.2]/224 
                                        4.4.4.4  0     100    32768   ?

*>r Route distinguisher: 3.3.3.3:102 VNI:102
[2]:[0]:[48]:[14:18:77:25:8f:6d]:[32]:[12.12.12.1]/224 
                                        3.3.3.3  0     100    0 100 101 ?

*> Route distinguisher: 3.3.3.3:101
[3]:[0]:[32]:[3.3.3.3]/152              3.3.3.3  0     100    0 100 101 ?

*>r Route distinguisher: 4.4.4.4:101
[3]:[0]:[32]:[4.4.4.4]/152              4.4.4.4  0     100   32768   ?

*>r Route distinguisher: 4.4.4.4:102
[3]:[0]:[32]:[4.4.4.4]/152              4.4.4.4  0     100   32768   ?

OS10# show ip route vrf blue
Codes: C - connected
S - static
B - BGP, IN - internal BGP, EX - external BGP, EV - EVPN BGP
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1,
E2 - OSPF external type 2, * - candidate default,
+ - summary route, > - non-active route
Gateway of last resort is not set

Destination        Gateway        Dist/Metric Last Change
------------------------------------------------------------
C 11.11.11.0/24  via 11.11.11.1   0/0         1 day 02:54:39
                 virtual-network101
B EV 15.15.15.2/32 via 4.4.4.4    200/0       1 day 02:09:19
B EV 15.15.15.0/24 via 4.4.4.4    200/0       1 day 02:09:19
B EV 11.11.11.2/32 via 4.4.4.4    100/0       1 day 05:10:11
B EV 12.12.12.0/24 via 3.3.3.3    100/0       1 day 00:10:01