ααααΆααα½α, habr α αα
αα
α»αααααααααα»αααΆα’αααααΉαααΆααααααα·ααααΆαααααΆαααααααα·ααααΆ Network Engineer αα
OTUSα
αα
αααα»αααΆαααααΉααα»αααααΆαα
αΆααααααΎαααααΆαα
α»ααααααααααΈαααααΆαααααααα·ααααΆ
ααΆααααααΆαααα½αα ααα½αααα’αααΈααααααα VxLAN EVPN ααααΎαααΆα ααΌα αααααααα»αα αααααααΌααα·α αα ααΆα αα·αααΆαα’αα»αααααααααααααααΆααααΆααααααααΆααααα αΆαα αααα»αααααααααααα·ααααααααααΎαα
αα αααα»ααααααααααΌααααααααΈαα ααΎαα αα αααα·ααααΆ VxLAN EVPN αααα»αα ααααΎααα·ααΈαα½αααΎααααΈαααα αααΆααααααΆαα L2 αααΆααααΆαααΈααα ααΎααααΌααααααααΆαααααααΆαα
α§ααΆα αααααΆααα’ααααΉαααααΌαααΆαα’αα»αααααα
ααΎ Cisco Nexus 9000v ααααααααΌααααα»ααα
αααα»α Spine-Leaf topology α ααΎαααΉααα·αααααα
ααΎααΆαααα‘αΎααααααΆα Underlay αα
αααα»αα’ααααααααααα
- αααααΆαααααα
- BGP peering αααααΆαα address-family l2vpn evpn
- ααΆαααα‘αΎα NVE
- αααααααΆα-arp
αααααΆαααααα
topology αααααααΎααΆαααΌα ααΆααααααα
ααααααααα’αΆααααααΆααα ααΎα§αααααααΆααα’ααα
Spine-1 - 10.255.1.101
Spine-2 - 10.255.1.102
Leaf-11 - 10.255.1.11
Leaf-12 - 10.255.1.12
Leaf-21 - 10.255.1.21
Host-1 - 192.168.10.10
Host-2 - 192.168.10.20
ααΌααα·αα·αααααΎαααΆααΆαααΆααααααΆαα IP αααΆαα§αααααααΆααα’ααα
Leaf21# sh ip route
<........>
10.255.1.11/32, ubest/mbest: 2/0 ! Leaf-11 Π΄ΠΎΡΡΡΠΏΠ΅Π½ ΡΠ΅Π΅ΡΠ· Π΄Π²Π° Spine
*via 10.255.1.101, Eth1/4, [110/81], 00:00:03, ospf-UNDERLAY, intra
*via 10.255.1.102, Eth1/3, [110/81], 00:00:03, ospf-UNDERLAY, intra
10.255.1.12/32, ubest/mbest: 2/0 ! Leaf-12 Π΄ΠΎΡΡΡΠΏΠ΅Π½ ΡΠ΅Π΅ΡΠ· Π΄Π²Π° Spine
*via 10.255.1.101, Eth1/4, [110/81], 00:00:03, ospf-UNDERLAY, intra
*via 10.255.1.102, Eth1/3, [110/81], 00:00:03, ospf-UNDERLAY, intra
10.255.1.21/32, ubest/mbest: 2/0, attached
*via 10.255.1.22, Lo0, [0/0], 00:02:20, local
*via 10.255.1.22, Lo0, [0/0], 00:02:20, direct
10.255.1.101/32, ubest/mbest: 1/0
*via 10.255.1.101, Eth1/4, [110/41], 00:00:06, ospf-UNDERLAY, intra
10.255.1.102/32, ubest/mbest: 1/0
*via 10.255.1.102, Eth1/3, [110/41], 00:00:03, ospf-UNDERLAY, intra
ααΌααα·αα·αααααΎαααΆααα VPC ααααΌαααΆααααααΎα α αΎααα»αααΆααααΆααααΈαααΆαααααααΆααααΆααααα½ααα·αα·αααααΆααααΈαααααΆααααααΆ α αΎαααΆαααααααα ααΎααααΆααααΆααααΈαααΊααΌα ααααΆααααα·αα
Leaf11# show vpc
vPC domain id : 1
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : success
Per-vlan consistency status : success
Type-2 consistency status : success
vPC role : primary
Number of vPCs configured : 0
Peer Gateway : Disabled
Dual-active excluded VLANs : -
Graceful Consistency Check : Enabled
Auto-recovery status : Disabled
Delay-restore status : Timer is off.(timeout = 30s)
Delay-restore SVI status : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router : Disabled
vPC status
----------------------------------------------------------------------------
Id Port Status Consistency Reason Active vlans
-- ------------ ------ ----------- ------ ---------------
5 Po5 up success success 1
ααΆααααααααα BGP
ααΆα α»αααααα α’αααα’αΆα αααααα ααΆαααα‘αΎααααααΆα Overlayα
ααΆαααααααα’ααααα α αΆαααΆα αααααΌααααα ααααααΆααααΆααααΆαααΈα ααΌα αααα αΆααααα»αααααΆααααΆαααΆααααααα
ααΎααααΈααααααα ααΆαααααααααααααΆα Overlay α’αααααααΌαααΎα ββBGP αα ααΎ Spine and Leaf switches ααΆαα½αααΉαααΆαααΆαααααααααΆαααααα½ααΆα l2vpn evpnα
feature bgp
nv overlay evpn
αααααΆααα’αααααααΌαααααααα ααΆαααααααα BGP peering αααΆαααααΉααα·αααα’αΉαααααα ααΎααααΈααααα½αααΆαααα‘αΎα αα·ααααααΎαααααα·αααααΆαααΆαα ααα αΆαααααααΆαααααΌα ααΎαααααααα ααΆαααααααα Spine ααΆαααΆαααΈααα Route-Reflectorα ααΎαααΉαααααα Leaf ααΆααα’αααα αααα»α config αααααααΎ templates ααΎααααΈαααααΎαααααα·αααααΆαααΆαααα‘αΎαα
ααΌα ααααααΆαααααααα ααΎααα’αΉαααααααΎααα ααΌα ααα:
router bgp 65001
template peer LEAF
remote-as 65001
update-source loopback0
address-family l2vpn evpn
send-community
send-community extended
route-reflector-client
neighbor 10.255.1.11
inherit peer LEAF
neighbor 10.255.1.12
inherit peer LEAF
neighbor 10.255.1.21
inherit peer LEAF
ααΆαααα‘αΎααα ααΎ Leaf switch ααΎααα ααααααααααΆα
router bgp 65001
template peer SPINE
remote-as 65001
update-source loopback0
address-family l2vpn evpn
send-community
send-community extended
neighbor 10.255.1.101
inherit peer SPINE
neighbor 10.255.1.102
inherit peer SPINE
αα ααΎααα’αΉααααα ααΌααα·αα·αααααΎαααΆαααααΆααααΆαα½αα§αααααααααΌαααααΉαααΆααα’ααα
Spine1# sh bgp l2vpn evpn summary
<.....>
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.255.1.11 4 65001 7 8 6 0 0 00:01:45 0
10.255.1.12 4 65001 7 7 6 0 0 00:01:16 0
10.255.1.21 4 65001 7 7 6 0 0 00:01:01 0
ααΌα αααα’αααα’αΆα ααΎαααΆαα·αααΆααααα αΆααΆαα½α BGP ααα α αΌααααααα ααΆαααα‘αΎα VxLAN α ααΆαβαααααβαα ααΆααααααααβααααααβαααβααΉαβααααΌαβααααΎβααβαα βαααααβααααΉαβααβαα»αααΆααβααα»αααααα ααα’αΉαααααααΎααα½ααΆααΈααΆααααΌααααααααΆα αα·αα αΌααα½ααααααα»αααΆααααααΌαα ααΆα αααα»αααααα ααΆααααΆαααΆααααααααααΌα αα·α encapsulation ααΎαα‘αΎαααααΎ Leaf switches ααα»αααααα
ααΆαααα‘αΎα NVE
NVE - α ααα»α αααααΆαααα·αααα·ααααααΆα
αα»αβααΉαβα αΆααβααααΎαβααΆαβαααα α ααΌαβααααΆαβααΆαααβαα½αβα ααα½αα
VTEP - Vitual Tunnel End Point ααΆα§αααααααα VxLAN tunnel α αΆααααααΎα α¬αααα ααα VTEP αα·αα αΆαααΆα αααΆα§ααααααααααΆαααΆαα½αααα αααΆαααΈααααααααΆαααααα αα αααα·ααααΆ VxLAN ααα’αΆα ααΎααα½ααΆαααΆαααΈααααααααα αα αααα»α topology ααααααΎα ααΆαααααΆααααααΌα Leaf ααΆααα’ααααΊ VTEP α
VNI - ααααααααααααααΆααα·αααα·α - α§ααααααααααα’ααααααααΆααααααΆααα αααα»α VxLAN α ααΆαααααααααααΆα’αΆα ααααΌαααΆαααΌαααΆαα½α VLAN α ααααααΆαααΆαααααααΆαααΆααα»αααααΆαα½αα ααα½αα αα αααααααΎαααααΆαα VLAN ααααΆαααΆαααα½αααααα αααα»αα§αααααααααΌαααααΉααααα½α α αΎααα·αααααΌαααΆααααααΌαααααααΆαααααααΆαααα ααα»αααα VLAN ααΈαα½ααα’αΆα ααΆαααα VNI αααααααΆααααΆαα½αααΆ αααααααΌαααΆααααααΌαααΆααααααΆααα½α α αΎαα ααΎααΆααΎααα ααΌα ααααα αα·ααααααααααΆα’αΆα ααααΎααΆα ααΉαααααΌαααΆααα·ααΆααααΆαααααααααα
αααααΎααα»αααΆαα±αααα αα αααα·ααααΆ VxLAN ααααΎαααΆα αα·ααααααααΆααααα»αααΆαααααΆααααα VLAN ααΆαα½αααα VNIα
feature nv overlay
feature vn-segment-vlan-based
α αΌαααααααα ααΆααααααααα ααα»α αααααΆαα NVE αααααα½ααα»αααααΌαα ααααααααα·ααααα·ααΆααααα VxLAN α α ααα»α αααααΆαααααααα½ααα»αααααΌαα ααααααΆααα»ααααααααα»ααα αααα»αααααααΆ VxLAN α α’αααα’αΆα ααΌαααΆαααααααααααΆααΆαα½αα ααα»α αααααΆααααααΌαααΌααααααααΈαααααΆαα GREα
interface nve1
no shutdown
host-reachability protocol bgp ! ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΠ΅ΠΌ BGP Π΄Π»Ρ ΠΏΠ΅ΡΠ΅Π΄Π°ΡΠΈ ΠΌΠ°ΡΡΡΡΡΠ½ΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ
source-interface loopback0 ! ΠΈΠ½ΡΠ΅ΡΡΠ΅ΠΉΡ Ρ ΠΊΠΎΡΠΎΡΠΎΠ³ΠΎ ΠΎΡΠΏΡΠ°Π²Π»ΡΠ΅ΠΌ ΠΏΠ°ΠΊΠ΅ΡΡ loopback0
αα
ααΎααΆαααααΆααααααΌα Leaf-21 α’αααΈααααααααΆαααααΌαααΆααααααΎααααααααΆααααα αΆα ααααααΆαααΆαααααααααα·αααΎααΎααα·αα·αααααΎαααααααααααΆααααααααΆ show nve peers
αααααΆααααααΆααΉααααα αα
ααΈαααα’αααααααΌααααααααα
ααΆαααααααα
ααΆαααααααα VPC αα·αα ααΎαααΎαααΆ Leaf-11 αα·α Leaf-12 ααααΎααΆαααΆααΌ α αΎαααααΌαααΆαααααα½αααααα½ααααααα VPC α ααααααααα±ααααΎαααΌαααααΆαααΆαααΌα
ααΆααααααα
Host-2 αααααΌαααα»ααα½αααααααα ααΆαα Leaf-21 ααΌα ααααααΆαααααΌαααΆααΆααααααΆαααααααα ααΆαα Host-1 α αααααΆαααΆαααΆααααα Leaf-21 ααΎαααΎαααΆα’αΆααααααΆα MAC αααα Host-1 α’αΆα α αΌαααααΎααΆαααΆαααα VTEPs ααΈααααα»αααααααα½αα ααΎ Leaf-21 αα½αααααΎα’αααΈαααα»αααααΈααα? αααΆαααΆαα·α αααααΆααααααΆ ααααα·ααα»αα’αΆα ααα α‘αΎααααα»ααααααΆαα
ααΎααααΈαααααααΆαααααΆαααΆαααα ααΎαααααΌαααΆα Leaf-11 αα·α Leaf-12 ααΎααααΈααΎααα½ααΆα§ααααααααα½ααα αααα»ααααα ααααααααα αααααααααΆαααΊααΆααααααΆααα αα ααΎα ααα»α αααααΆαα Loopback αααααΎαααΆααααααααΌαααΌααααααααΈ ααααααα’αΆααααααΆααααααΆαααααααα α’αΆααααααΆααααααΆαααααααααααΌαααααΌα ααααΆαα ααΎ VTEP ααΆααααΈαα
interface loopback0
ip add 10.255.1.10/32 secondary
ααΌα ααααααΆααααααααα VTEPs ααααααααααΎαααα½αααΆα topology ααΌα ααΆαααααα:
αααααΊα₯α‘αΌααααααααΌαααΌααααααααΈααΉαααααΌαααΆαααΆαααααααΆαα’αΆααααααΆα IP αααα Leaf-21 αα·α IP αα·αααα·ααααΆα Leaf-11 αα·α Leaf-12 ααΈαα α₯α‘αΌααααααΉααα·αααΆααααα αΆαααα»αααΆααααα’αΆααααααΆα MAC ααΈα§αααααααΈααα α αΎαα ααΆα αααα’αΆα ααααΆααααΈααΈ VTEP αα½ααα αα½ααααα VTEPs αα½αααΆαααα»αα αααα VTEPs ααΆααααΈαααΉαααααΎαααΆαα ααΆα αααααααΌαααΆααααααα αααααααΎααΆααΆαααααΌααα ααΎααα’αΉαααααα
Spine1# sh ip route
<.....>
10.255.1.10/32, ubest/mbest: 2/0
*via 10.255.1.11, Eth1/1, [110/41], 1d01h, ospf-UNDERLAY, intra
*via 10.255.1.12, Eth1/2, [110/41], 1d01h, ospf-UNDERLAY, intra
10.255.1.11/32, ubest/mbest: 1/0
*via 10.255.1.11, Eth1/1, [110/41], 1d22h, ospf-UNDERLAY, intra
10.255.1.12/32, ubest/mbest: 1/0
*via 10.255.1.12, Eth1/2, [110/41], 1d01h, ospf-UNDERLAY, intra
ααΌα αααα’αααα’αΆα ααΎαααΆαααΎ α’αΆααααααΆα 10.255.1.10 α’αΆα ααααΆαααααΆααααΆαααα Next-hops ααΈαα
αα
ααααΆααααΆααααααΎαααΆααααααααΆαααΆαα½αααΉαααΆααααααΆααααΆααΌαααααΆαα α
αΌααααααα
ααΆααααα
αα
ααα»α
αααααΆαα NVEα
αααααΎα Vlan 10 ααααΆαα α αΎαααααΆααααΆααΆαα½α VNI 10000 αα
ααΎααααΉαααΈαα½αααααααΆααααα
αΆααααααα ααααααα
αααααΌαααΌααααααααΈ L2 αααΆααααΆαααΈα
vlan 10 ! ΠΠΊΠ»ΡΡΠ°Π΅ΠΌ VLAN Π½Π° Π²ΡΠ΅Ρ
VTEP ΠΏΠΎΠ΄ΠΊΠ»ΡΡΠ΅Π½Π½ΡΡ
ΠΊ Π½Π΅ΠΎΠ±Ρ
ΠΎΠ΄ΠΈΠΌΡΠΌ Ρ
ΠΎΡΡΠ°ΠΌ
vn-segment 10000 ! ΠΡΡΠΎΡΠΈΠΈΡΡΠ΅ΠΌ VLAN Ρ Π½ΠΎΠΌΠ΅Ρ VNI
interface nve1
member vni 10000 ! ΠΠΎΠ±Π°Π²Π»ΡΠ΅ΠΌ VNI 10000 Π΄Π»Ρ ΡΠ°Π±ΠΎΡΡ ΡΠ΅ΡΠ΅Π· ΠΈΠ½ΡΠ΅ΡΡΠ΅ΠΉΡ NVE. Π΄Π»Ρ ΠΈΠ½ΠΊΠ°ΠΏΡΡΠ»ΡΡΠΈΠΈ Π² VxLAN
ingress-replication protocol bgp ! ΡΠΊΠ°Π·ΡΠ²Π°Π΅ΠΌ, ΡΡΠΎ Π΄Π»Ρ ΡΠ°ΡΠΏΡΠΎΡΡΡΠ°Π½Π΅Π½ΠΈΡ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ ΠΎ Ρ
ΠΎΡΡΠ΅ ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΠ΅ΠΌ BGP
α₯α‘αΌααααααΌααα·αα·αααααΎα nve peers αα·αααΆααΆααααααΆαα BGP EVPN:
Leaf21# sh nve peers
Interface Peer-IP State LearnType Uptime Router-Mac
--------- --------------- ----- --------- -------- -----------------
nve1 10.255.1.10 Up CP 00:00:41 n/a ! ΠΠΈΠ΄ΠΈΠΌ ΡΡΠΎ peer Π΄ΠΎΡΡΡΠΏΠ΅Π½ Ρ secondary Π°Π΄ΡΠ΅ΡΠ°
Leaf11# sh bgp l2vpn evpn
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10.255.1.11:32777 (L2VNI 10000) ! ΠΡ ΠΊΠΎΠ³ΠΎ ΠΈΠΌΠ΅Π½Π½ΠΎ ΠΏΡΠΈΡΠ΅Π» ΡΡΠΎΡ l2VNI
*>l[3]:[0]:[32]:[10.255.1.10]/88 ! EVPN route-type 3 - ΠΏΠΎΠΊΠ°Π·ΡΠ²Π°Π΅Ρ Π½Π°ΡΠ΅Π³ΠΎ ΡΠΎΡΠ΅Π΄Π°, ΠΊΠΎΡΠΎΡΡΠΉ ΡΠ°ΠΊ ΠΆΠ΅ Π·Π½Π°Π΅Ρ ΠΎΠ± l2VNI10000
10.255.1.10 100 32768 i
*>i[3]:[0]:[32]:[10.255.1.20]/88
10.255.1.20 100 0 i
* i 10.255.1.20 100 0 i
Route Distinguisher: 10.255.1.21:32777
* i[3]:[0]:[32]:[10.255.1.20]/88
10.255.1.20 100 0 i
*>i 10.255.1.20 100 0 i
ααΆαααΎααΎαααΎαααααααΌααααααα EVPN αααααα 3 ααα»αααααα ααααΌαααααααααααα·ααΆαα’αααΈαα·αααααααα· (ααααΉα) ααα»ααααααΎαααΆαααΈαααααααΎααα
α―ααΆ?
ααΏααααααΊααΆααααααΆαα’αααΈαααΆαααΈα MAC ααααΌαααΆααααααΌαααΆαααα EVPN route-type 2
ααΎααααΈααΎααααΆαααΈαααααααΎα α’αααααααΌαααααααα ααΆαααααααα EVPN route-type 2:
evpn
vni 10000 l2
route-target import auto ! Π² ΡΠ°ΠΌΠΊΠ°Ρ
Π΄Π°Π½Π½ΠΎΠΉ ΡΡΠ°ΡΡΠΈ ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΠ΅ΠΌ Π°Π²ΡΠΎΠΌΠ°ΡΠΈΡΠ΅ΡΠΊΠΈΠΉ Π½ΠΎΠΌΠ΅Ρ Π΄Π»Ρ route-target
route-target export auto
ααα ping ααΈ Host-2 αα Host-1α
Firewall2# ping 192.168.10.1
PING 192.168.10.1 (192.168.10.1): 56 data bytes
36 bytes from 192.168.10.2: Destination Host Unreachable
Request 0 timed out
64 bytes from 192.168.10.1: icmp_seq=1 ttl=254 time=215.555 ms
64 bytes from 192.168.10.1: icmp_seq=2 ttl=254 time=38.756 ms
64 bytes from 192.168.10.1: icmp_seq=3 ttl=254 time=42.484 ms
64 bytes from 192.168.10.1: icmp_seq=4 ttl=254 time=40.983 ms
α αΎαααΆααααααααΎαα’αΆα ααΎαααΎαααΆααααΌαααααααααΈ 2 αααααΆαα’αΆααααααΆα MAC αααααααΆαααΈαααΆααααα αΆααααα½ααα αααα»αααΆααΆα BGP - 5001.0007.0007 αα·α 5001.0008.0007
Leaf11# sh bgp l2vpn evpn
<......>
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10.255.1.11:32777 (L2VNI 10000)
*>l[2]:[0]:[0]:[48]:[5001.0007.0007]:[0]:[0.0.0.0]/216 ! evpn route-type 2 ΠΈ mac Π°Π΄ΡΠ΅Ρ Ρ
ΠΎΡΡΠ° 1
10.255.1.10 100 32768 i
*>i[2]:[0]:[0]:[48]:[5001.0008.0007]:[0]:[0.0.0.0]/216 ! evpn route-type 2 ΠΈ mac Π°Π΄ΡΠ΅Ρ Ρ
ΠΎΡΡΠ° 2
* i 10.255.1.20 100 0 i
*>l[3]:[0]:[32]:[10.255.1.10]/88
10.255.1.10 100 32768 i
Route Distinguisher: 10.255.1.21:32777
* i[2]:[0]:[0]:[48]:[5001.0008.0007]:[0]:[0.0.0.0]/216
10.255.1.20 100 0 i
*>i 10.255.1.20 100 0 i
αααααΆαααα α’αααα’αΆα ααΎαααΎαααααααΆαααα’α·ααα ααΎ Update αααα’αααααΆαααα½αααααααΆαα’αααΈ MAC Hostα ααΆαααααααα·ααααααΆααααααααΆααααααααΆααΆααα’ααααα
Leaf21# sh bgp l2vpn evpn 5001.0007.0007
BGP routing table information for VRF default, address family L2VPN EVPN
Route Distinguisher: 10.255.1.11:32777 ! ΠΎΡΠΏΡΠ°Π²ΠΈΠ» Update Ρ MAC Host. ΠΠ΅ Π²ΠΈΡΡΡΠ°Π»ΡΠ½ΡΠΉ Π°Π΄ΡΠ΅Ρ VPC, Π° Π°Π΄ΡΠ΅Ρ Leaf
BGP routing table entry for [2]:[0]:[0]:[48]:[5001.0007.0007]:[0]:[0.0.0.0]/216,
version 1507
Paths: (2 available, best #2)
Flags: (0x000202) (high32 00000000) on xmit-list, is not in l2rib/evpn, is not i
n HW
Path type: internal, path is valid, not best reason: Neighbor Address, no labe
led nexthop
AS-Path: NONE, path sourced internal to AS
10.255.1.10 (metric 81) from 10.255.1.102 (10.255.1.102) ! Ρ ΠΊΠ΅ΠΌ ΠΈΠΌΠ΅Π½Π½ΠΎ ΡΡΡΠΎΠΈΠΌ VxLAN ΡΠΎΠ½Π½Π΅Π»Ρ
Origin IGP, MED not set, localpref 100, weight 0
Received label 10000 ! ΠΠΎΠΌΠ΅Ρ VNI, ΠΊΠΎΡΠΎΡΡΠΉ Π°ΡΡΠΎΡΠΈΠΈΡΠΎΠ²Π°Π½ Ρ VLAN, Π² ΠΊΠΎΡΠΎΡΠΎΠΌ Π½Π°Ρ
ΠΎΠ΄ΠΈΡΡΡ Host
Extcommunity: RT:65001:10000 SOO:10.255.1.10:0 ENCAP:8 ! Π’ΡΡ Π²ΠΈΠ΄Π½ΠΎ, ΡΡΠΎ RT ΡΡΠΎΡΠΌΠΈΡΠΎΠ²Π°Π»ΡΡ Π°Π²ΡΠΎΠΌΠ°ΡΠΈΡΠ΅ΡΠΊΠΈ Π½Π° ΠΎΡΠ½ΠΎΠ²Π΅ Π½ΠΎΠΌΠ΅ΡΠΎΠ² AS ΠΈ VNI
Originator: 10.255.1.11 Cluster list: 10.255.1.102
<........>
αααβααΎαβααΆβααΎβααα»αβααΆαβααααααβαααβααΆβαααβααααβααΆααβαααα αααα
αααααααΆα-ARP
ααα’ααΆαα α₯α‘αΌααααααΎαααΆαααααΆαααααα L2 αααΆαααα αΆαααααα α αΎαααΎαα’αΆα αααα αααα ααΈαααα ααααααΆαααΆααααααα·ααααααΆααα’ααααΆααααααα αααΆαααΆβααΎαβααΆαβαααΆαααΈαβαα·α αα½α ααΆβααΉαβαα·αβααΆαβαααα αΆβα’αααΈβα‘αΎαα ααα»ααααβααΌαβαααααβααΎαβααααΆαααΆαβαα½αβαααβααΎαβααΆαβαααΆαααΈαβααΆααβααβααΆααα ααΎβααΎαβα’αΆα βαααααβαα»αβααΉαβαααα αΆβα’αααΈ?
αααα αΆβαααβααΊβα
ααΆα
ααα BUM(Broadcast, Unknown Unicast, Multicast)α αα
αααα»αα’αααααααα ααΎαααΉααα·α
αΆαααΆααΈαααααΎαααααΆααααααααΆαααΆαα½αααΉαα
ααΆα
αααααααΆαα
αααΆαααΈααααααΎαααΆαααααΆαααααΆαααα
αααα»ααααααΆαα’ααΈααΊααα·αααΊααΆαααΆαααΈαααααΆααααΆαααααα·ααΈααΆα ARP α
Nexus α’αα»ααααααααααΆαααΆααααααααΎααααΈααααα»ααααααααΆααααΉαααααΎ ARP - suppress-arp α
αα»αααΆααααααααΎαααΆαααΌα
ααΆααααααα
- Host-1 ααααΎααααΎ APR αα ααΆααα’αΆααααααΆα Broadcast αααααααΆαααααααΆα
- ααααΎααΆααααααΆαααααΆααααααΌα Leaf α αΎααααα½αα±ααααΆααααααΌαααααΎαααααααααααααα ααΆαααααααΆααααααααα ααΆαα Host-2 ααα Leaf ααααΎαααααααααα½αα―α αα·αα ααα’α»ααααα αΆα IP αα·α MAC αααααααΌαααΆαα
ααΌα ααααβααααΎβαααα Broadcast αα·αβααΆαβαα βαααα αααβααα ααα»ααααααΎαααα’αΆα ααααΎαααΆαααΆααααααααααΆααααα·αααΎ Leaf ααΉαααα’αΆααααααΆα MAC?
α’αααΈααααααααΆαααΊααΆααααααΆαα EVPN route-type 2 ααααααααΎα’αΆααααααΆα MAC α’αΆα αααααΌαααΆααα½ααααα αΌαααααΆ MAC/IP α ααΎααααΈααααΎααΌα αααα’αααααααΌααααααα’αΆααααααΆα IP αα αααα»α VLAN αα ααΎ Leaf α αααα½αααΎαα‘αΎαααΎαααα»ααα½αααααα IP α’αααΈ? αα ααΎ nexus ααΆα’αΆα ααααΎαα ααΆαααΎααααΈαααααΎαα’αΆααααααΆαα ααα αΆα (ααΌα ααααΆ) αα ααΎαα»αααΆααααΆααα’αα:
feature interface-vlan
fabric forwarding anycast-gateway-mac 0001.0001.0001 ! Π·Π°Π΄Π°Π΅ΠΌ virtual mac Π΄Π»Ρ ΡΠΎΠ·Π΄Π°Π½ΠΈΡ ΡΠ°ΡΠΏΡΠ΅Π΄Π΅Π»Π΅Π½Π½ΠΎΠ³ΠΎ ΡΠ»ΡΠ·Π° ΠΌΠ΅ΠΆΠ΄Ρ Π²ΡΠ΅ΠΌΠΈ ΠΊΠΎΠΌΠΌΡΡΠ°ΡΠΎΡΠ°ΠΌΠΈ
interface Vlan10
no shutdown
ip address 192.168.10.254/24 ! Π½Π° Π²ΡΠ΅Ρ
Leaf Π·Π°Π΄Π°Π΅ΠΌ ΠΎΠ΄ΠΈΠ½Π°ΠΊΠΎΠ²ΡΠΉ IP
fabric forwarding mode anycast-gateway ! Π³ΠΎΠ²ΠΎΡΠΈΠΌ ΠΈΡΠΏΠΎΠ»ΡΠ·ΠΎΠ²Π°ΡΡ Virtual mac
ααΌα αααα ααΆαααααααααααααα αΆαααααα αααααΆαααΉαααΎααα ααΌα αααα
ααααα·αα·αααααΎα BGP l2route evpn
Leaf11# sh bgp l2vpn evpn
<......>
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10.255.1.11:32777 (L2VNI 10000)
*>l[2]:[0]:[0]:[48]:[5001.0007.0007]:[0]:[0.0.0.0]/216
10.255.1.21 100 32768 i
*>i[2]:[0]:[0]:[48]:[5001.0008.0007]:[0]:[0.0.0.0]/216
10.255.1.10 100 0 i
* i 10.255.1.10 100 0 i
* i[2]:[0]:[0]:[48]:[5001.0008.0007]:[32]:[192.168.10.20]/248
10.255.1.10 100 0 i
*>i 10.255.1.10 100 0 i
<......>
Route Distinguisher: 10.255.1.21:32777
* i[2]:[0]:[0]:[48]:[5001.0008.0007]:[0]:[0.0.0.0]/216
10.255.1.20 100 0 i
*>i 10.255.1.20 100 0 i
* i[2]:[0]:[0]:[48]:[5001.0008.0007]:[32]:[192.168.10.20]/248
*>i 10.255.1.20 100 0 i
<......>
ααΈααααααααΆααααααααΆ α’αααα’αΆα ααΎαααΎαααΆαα αααα»α EVPN route-type 2 ααααααααΈααΎ MAC α₯α‘αΌααααααΎαααααΎαα’αΆααααααΆα IP αααααααΆαααΈααααααα
α αΌαααΎααααααααα ααΆαααααα suppress-arp α ααΆαααααααααααααΌαααΆαααΎααααααΆαα VNI ααΈαα½αααααα‘ααααΈααααΆα
interface nve1
member vni 10000
suppress-arp
αααααΆααααααΆααααα»αααααΆαααααααΎαα‘αΎαα
- ααΎααααΈα±αααα»αααΆααααααααΎαααΆα ααααΌαααΆαααα ααααα»ααααα»αα’αααα αα αΆα TCAM α αααααΆα§ααΆα αααααααΆαααααααααααΆαα suppress-arpα
hardware access-list tcam region arp-ether 256
ααΆαααααααααααΉααααααΌαα±ααααΌααΆαααααααα αααααΊααααα·αααΎα’αααααααα 256 αααα’αααααααΌααααααα 512 αα αααα»α TCAM α ααΆαααα‘αΎα TCAM ααΊα α½αααΈαα·ααΆαααΆαααα’αααααααα αααααααΆααΆαααα‘αΎα TCAM α’αΆαααααααααΎαα·α αα ααΆααααααΆαααααααα±ααα’ααα α αΎαα’αΆα αα»αααααΆααΈαααααΆααα½ααα αααααΆααα½ααααα
- ααΆαα’αα»ααααααΆααααααααΆα-arp ααααΌαααααααΎα‘αΎααα ααΎα§αααααααααΌα Leaf ααΆααα’ααα αααααΆαααΆαααΆαααααααΆααααα»αααααΆαα’αΆα ααΎαα‘αΎααα αααααααααα ααΆαααααααααα ααΎααΌ Leaf αααααααα αααα»αααα VPC α ααααα·αααΎ TCAM ααααΌαααΆαααααΆααααααΌα ααΆααααΈαααααΆααααααΆαααΆαααΌααΉαααααΌαααΆαααΌα α αΎαααααΆαααα½αα’αΆα ααααΌαααΆαααα ααααΈααααα·ααααα·ααΆαα ααΎαααΈααα ααΆαα αΆααααααΎαα§αααααα‘αΎααα·αα’αΆα ααααΌαααΆαααΆαααΆα ααΎααααΈα’αα»ααααααΆααααααααΆαααααΆααααααΌα TCAM α
ααΆααααααα’αααααααΌααα·α αΆαααΆααααααα»αααααααααααΆααΎαααα»αααααΆαααΆαααααα’αααααΆααΆααααααα’αα»ααααααΆααααααααααα αααα»ααααα αααααααααα»αααααΎαααΆααααα¬ααα
ααααααα αααααααααααΌααααααααΈα αα ααααααααααΆααααΎαααΉααα·αα·αααααΎαααΆααααααΌαααΆαααααααααΆαα VxLAN ααΆαα½αααΉαααΆαααααααααααΆααα ααΆ VRFs ααααααααααΆα
α αΎαβα₯α‘αΌαβαααβαααα»αβααΌαβα’ααααΎαβα’αααβααΆααβααααΆβαα
β
ααααα: www.habr.com