Output Square

EVPN VXLAN最低限

3月 18, 2025

—

in CCIE Data Center

構成は前回と一緒

追加コンフィグ

Config_BGP ダウンロード

Config_VXLAN_EVPN ダウンロード

各種show

公式情報を参考にして設定したら「vni assignment mode : SYMMETRIC」になってた（IBRをちゃんとわかっていない）
NVE用とBGPピアリング用のLoopbackを共有するのは、どういう理由でダメなのかがよくわからない。

NXOS3# show mac address-table
Legend:
        * - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC
        age - seconds since last seen,+ - primary entry using vPC Peer-Link,
        (T) - True, (F) - False, C - ControlPlane MAC, ~ - vsan
   VLAN     MAC Address      Type      age     Secure NTFY Ports
---------+-----------------+--------+---------+------+----+------------------
*   20     0050.7966.6809   dynamic  0         F      F    Po5
C   20     0050.7966.680a   dynamic  0         F      F    nve1(67.0.0.67)
G    -     2020.0000.00aa   static   -         F      F    sup-eth1(R)
G    -     5003.0000.1b08   static   -         F      F    sup-eth1(R)
G    1     5003.0000.1b08   static   -         F      F    sup-eth1(R)
G    1     5004.0000.1b08   static   -         F      F    vPC Peer-Link(R)
NXOS3#
NXOS3#
NXOS3# show nve vni
Codes: CP - Control Plane        DP - Data Plane
       UC - Unconfigured         SA - Suppress ARP
       SU - Suppress Unknown Unicast
       Xconn - Crossconnect
       MS-IR - Multisite Ingress Replication

Interface VNI      Multicast-group   State Mode Type [BD/VRF]      Flags
--------- -------- ----------------- ----- ---- ------------------ -----
nve1      160010   239.0.113.1       Up    CP   L2 [10]
nve1      160020   239.0.113.1       Up    CP   L2 [20]

NXOS3#
NXOS3#
NXOS3#
NXOS3# show nve peers detail
Details of nve Peers:
----------------------------------------
Peer-Ip: 67.0.0.67
    NVE Interface       : nve1
    Peer State          : Up
    Peer Uptime         : 00:04:29
    Router-Mac          : n/a
    Peer First VNI      : 160020
    Time since Create   : 00:04:29
    Configured VNIs     : 160010,160020
    Provision State     : peer-add-complete
    Learnt CP VNIs      : 160020
    vni assignment mode : SYMMETRIC
    Peer Location       : N/A

NXOS3# show nve internal platform interface nve 1 detail
Printing Interface ifindex 0x49000001 detail
|======|=========================|===============|===============|
|Intf  |State                    |PriIP          |SecIP          |
|======|=========================|===============|===============|
|nve1  |UP                       |34.0.0.3       |34.0.0.34      |
|======|=========================|===============|===============|

SW_BD/VNIs of interface nve1:
================================================
|======|======|=========================|======|====|======|========
|Sw BD |Vni   |State                    |Intf  |Type|Vrf-ID|Notified
|======|======|=========================|======|====|======|========
|10    |160010|NONE                     |nve1  |CP  |0     |No
|20    |160020|NONE                     |nve1  |CP  |0     |No
|======|======|=========================|======|====|======|========

Peers of interface nve1:
============================================
no peers
NXOS3#
NXOS3# show bgp l2vpn evpn
BGP routing table information for VRF default, address family L2VPN EVPN
BGP table version is 10, Local Router ID is 34.0.0.3
Status: s-suppressed, x-deleted, S-stale, d-dampened, h-history, *-valid, >-best
Path type: i-internal, e-external, c-confed, l-local, a-aggregate, r-redist, I-i
njected
Origin codes: i - IGP, e - EGP, ? - incomplete, | - multipath, & - backup, 2 - b
est2

   Network            Next Hop            Metric     LocPrf     Weight Path
Route Distinguisher: 34.0.0.3:32787    (L2VNI 160020)
*>l[2]:[0]:[0]:[48]:[0050.7966.6809]:[0]:[0.0.0.0]/216
                      34.0.0.34                         100      32768 i
* i[2]:[0]:[0]:[48]:[0050.7966.680a]:[0]:[0.0.0.0]/216
                      67.0.0.67                         100          0 i
*>i                   67.0.0.67                         100          0 i

Route Distinguisher: 67.0.0.6:32787
* i[2]:[0]:[0]:[48]:[0050.7966.680a]:[0]:[0.0.0.0]/216
                      67.0.0.67                         100          0 i
*>i                   67.0.0.67                         100          0 i

Route Distinguisher: 67.0.0.7:32787
*>i[2]:[0]:[0]:[48]:[0050.7966.680a]:[0]:[0.0.0.0]/216
                      67.0.0.67                         100          0 i
* i                   67.0.0.67                         100          0 i

パケットキャプチャ

ARP: マルチキャストで配信されるらしい

BGP: パスアトリビュートとしてNVE情報を転送

参考

Nexus シリーズ : VXLAN EVPN 基本設定

EVPN VXLAN