ืืขืื, ืืึทืืจ. ืืื ืืื ืืขืจืืืืึทื ืืขืจ ืงืืจืก ืคืืจืขืจ ืคึฟืึทืจ ืื ื ืขืืืืึธืจืง ืื ืืฉืขื ืืจ ืงืืจืก ืืื OTUS.
ืืื ืึทื ืืืกืึทืคึผืืืฉืึทื ืคืื ืื ืึธื ืืืื ืคืื ืึท ื ืืึท ืขื ืจืึธืืืืึทื ื ืคึฟืึทืจ ืืขื ืงืืจืก , ืืื ืืึธืื ืฆืืืขืืจืืื ืึท ืกืขืจืืข ืคืื โโโโืึทืจืืืงืืขื ืืืืฃ VxLAN EVPN ืืขืื ืึธืืึธืืืข.
ืขืก ืืื ืึท ืจืืืืง ืกืืืข ืคืื โโืืึทืืขืจืืึทื ืืืืฃ ืืื VxLAN EVPN ืึทืจืืขื, ืึทืืื ืืื ืืืืื ืฆื ืืึทืืืขื ืคืึทืจืฉืืื ืืึทืกืงืก ืืื ืคึผืจืึทืงืืืกืื ืคึฟืึทืจ ืกืึทืืืืื ื ืคึผืจืึธืืืขืืก ืืื ืึท ืืึธืืขืจื ืืึทืื ืฆืขื ืืขืจ.
ืืื ืืขืจ ืขืจืฉืืขืจ ืืืื ืคืื ืื ืกืขืจืืข ืืืืฃ VxLAN EVPN ืืขืื ืึธืืึธืืืข, ืืื ืืืืื ืฆื ืงืืงื ืืื ืึท ืืืขื ืฆื ืึธืจืืึทื ืืืืจื ื 2 ืงืึทื ืขืงืืืืืืื ืฆืืืืฉื ืืื ืืช ืืืืฃ ืฉืคึผืืฅ ืคืื ืึท ื ืขืฅ ืฉืืึธืฃ.
ืึทืืข ืืืืฉืคืืื ืืืขื ืืืื ืืืจืืืขืงืึธืื ืืืืฃ ืึท Cisco Nexus 9000v, ืึทืกืขืืืึทืื ืืื ืื ืกืคึผืื ืข-ืืืึทื ืืึทืคึผืึทืืึทืืืฉื. ืืืจ ืืืขืื ื ืืฉื ืืืืื ืขื ืืืืฃ ืืึทืฉืืขืืืงื ืึท ืื ืืขืจืืื ื ืขืฅ ืืื ืืขื ืึทืจืืืงื.
- ืึทื ืืขืจืืื ื ืขืฅ
- BGP ืคึผืืจืื ื ืคึฟืึทืจ ืึทืืจืขืก-ืืฉืคึผืื l2vpn evpn
- ืืึทืฉืืขืืืงื NVE
- ืคืึทืจืฉืืืงื-ืึทืจืคึผ
ืึทื ืืขืจืืื ื ืขืฅ
ืื ืืึธืคึผืึธืืึธืื ืืขื ืืฆื ืืื ืืื ืืืื:
ืืึธืืืจ ืฉืืขืื ืึทืืจืขืกืื ื ืืืืฃ ืึทืืข ืืขืืืืกืขืก:
Spine-1 - 10.255.1.101
Spine-2 - 10.255.1.102
Leaf-11 - 10.255.1.11
Leaf-12 - 10.255.1.12
Leaf-21 - 10.255.1.21
Host-1 - 192.168.10.10
Host-2 - 192.168.10.20ืืึธืืืจ ืงืึธื ืืจืึธืืืจื ืึทื ืขืก ืืื IP ืงืึทื ืขืงืืืืืืื ืฆืืืืฉื ืึทืืข ืืขืืืืกืขืก:
Leaf21# sh ip route
<........>
10.255.1.11/32, ubest/mbest: 2/0 ! Leaf-11 ะดะพัััะฟะตะฝ ัะตะตัะท ะดะฒะฐ Spine
*via 10.255.1.101, Eth1/4, [110/81], 00:00:03, ospf-UNDERLAY, intra
*via 10.255.1.102, Eth1/3, [110/81], 00:00:03, ospf-UNDERLAY, intra
10.255.1.12/32, ubest/mbest: 2/0 ! Leaf-12 ะดะพัััะฟะตะฝ ัะตะตัะท ะดะฒะฐ Spine
*via 10.255.1.101, Eth1/4, [110/81], 00:00:03, ospf-UNDERLAY, intra
*via 10.255.1.102, Eth1/3, [110/81], 00:00:03, ospf-UNDERLAY, intra
10.255.1.21/32, ubest/mbest: 2/0, attached
*via 10.255.1.22, Lo0, [0/0], 00:02:20, local
*via 10.255.1.22, Lo0, [0/0], 00:02:20, direct
10.255.1.101/32, ubest/mbest: 1/0
*via 10.255.1.101, Eth1/4, [110/41], 00:00:06, ospf-UNDERLAY, intra
10.255.1.102/32, ubest/mbest: 1/0
*via 10.255.1.102, Eth1/3, [110/41], 00:00:03, ospf-UNDERLAY, intraืืึธืืืจ ืงืึธื ืืจืึธืืืจื ืึทื ืื VPC ืคืขืื ืืื ืืืฉืืคื ืืื ืืืืืข ืกืืืืืฉืื ืืึธืื ืืืจืืืขืืื ืืขื ืื ืงืึธื ืกืืกืืขื ืกื ืืฉืขืง ืืื ืื ืกืขืืืื ืืก ืืืืฃ ืืืืืข ื ืึธืืื ืืขื ืขื ืืืืขื ืืงืึทื:
Leaf11# show vpc
vPC domain id : 1
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : success
Per-vlan consistency status : success
Type-2 consistency status : success
vPC role : primary
Number of vPCs configured : 0
Peer Gateway : Disabled
Dual-active excluded VLANs : -
Graceful Consistency Check : Enabled
Auto-recovery status : Disabled
Delay-restore status : Timer is off.(timeout = 30s)
Delay-restore SVI status : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router : Disabled
vPC status
----------------------------------------------------------------------------
Id Port Status Consistency Reason Active vlans
-- ------------ ------ ----------- ------ ---------------
5 Po5 up success success 1BGP ืคึผืืจืื ื
ืฆืื ืกืืฃ, ืืืจ ืงืขื ืขื ืืึทื ืืืืฃ ืฆื ืืึทืฉืืขืืืงื ืื ืึธืืืืขืจืืื ื ืขืฅ.
ืืื ืึท ืืืื ืคืื ืืขื ืึทืจืืืงื, ืขืก ืืื ื ืืืืืง ืฆื ืึธืจืืึทื ืืืืจื ืึท ื ืขืฅ ืฆืืืืฉื ืืื ืืช, ืืื ืืขืืืืื ืืื ืื ืืืึทืืจืึทืืข ืืื ืื:
ืฆื ืงืึทื ืคืืืืขืจ ืึท ืึธืืืืขืจืืื ื ืขืฅ, ืืืจ ืืึทืจืคึฟื ืฆื ืืขืื BGP ืืืืฃ ืื ืกืคึผืื ืข ืืื ืืืึทื ืกืืืืืฉืื ืืื ืฉืืืฆื ืคึฟืึทืจ ืื l2vpn evpn ืืฉืคึผืื:
feature bgp
nv overlay evpnืืขืจื ืึธื ืืืจ ืืึทืจืคึฟื ืฆื ืงืึทื ืคืืืืขืจ BGP ืคึผืืจืื ื ืฆืืืืฉื ืืืึทื ืืื ืจืืงื ืืืื. ืฆื ืคืึทืจืคึผืึธืฉืขืืขืจื ืกืขืืึทืคึผ ืืื ืึทืคึผืืึทืืืื ืื ืคืึทืจืฉืคึผืจืืืืื ื ืคืื ืจืืืื ื ืืื ืคึฟืึธืจืืึทืฆืืข, ืืืจ ืงืึทื ืคืืืืขืจ ืกืคึผืื ืข ืืื ืึท ืจืื-ืจืขืคืืขืงืืึธืจ ืกืขืจืืืขืจ. ืืืจ ืืืขืื ืฉืจืืึทืื ืึทืืข ืืืึทื ืืื ืื ืงืึธื ืคืื ืืื ืืขืืคึผืืึทืืขืก ืฆื ืึทืคึผืืึทืืืื ืื ืกืขืืึทืคึผ.
ืึทืืื ืื ืกืขืืืื ืืก ืืืืฃ ืกืคึผืื ืข ืงืืงื ืืื ืืึธืก:
router bgp 65001
template peer LEAF
remote-as 65001
update-source loopback0
address-family l2vpn evpn
send-community
send-community extended
route-reflector-client
neighbor 10.255.1.11
inherit peer LEAF
neighbor 10.255.1.12
inherit peer LEAF
neighbor 10.255.1.21
inherit peer LEAFืื ืกืขืืึทืคึผ ืืืืฃ ืื ืืืึทื ืืึทืฉืืืืขื ืงืืงื ืขื ืืขื:
router bgp 65001
template peer SPINE
remote-as 65001
update-source loopback0
address-family l2vpn evpn
send-community
send-community extended
neighbor 10.255.1.101
inherit peer SPINE
neighbor 10.255.1.102
inherit peer SPINEืืืืฃ ืจืืงื ืืืื, ืืึธืืืจ ืงืึธื ืืจืึธืืืจื ืคึผืืจืื ื ืืื ืึทืืข ืืืึทื ืกืืืืืฉืื:
Spine1# sh bgp l2vpn evpn summary
<.....>
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.255.1.11 4 65001 7 8 6 0 0 00:01:45 0
10.255.1.12 4 65001 7 7 6 0 0 00:01:16 0
10.255.1.21 4 65001 7 7 6 0 0 00:01:01 0ืืื ืืืจ ืงืขื ืขื ืืขื, ืขืก ืืขื ืขื ืงืืื ืคืจืืืืขืืขื ืืื BGP. ืืื ืก ืืึทื ืืืืฃ ืฆื ืืึทืฉืืขืืืงื VxLAN. ืืืืึทืืขืจ ืงืึทื ืคืืืืขืจืืืฉืึทื ืืืขื ืืืื ืืืจืืืขืงืึธืื ืืืืื ืืืืฃ ืื ืืืึทื ืืืึทื ืคืื ืื ืกืืืืืฉืื. ืจืืงื ืืืื ืืงืื ืืืืื ืืื ืื ืืึทืจืฅ ืคืื ืื ื ืขืฅ ืืื ืืื ืืืืื ืื ืืืึทืืืื ืืื ืืจืึทื ืกืืืืื ื ืคืึทืจืงืขืจ. ืื ืขื ืงืึทืคึผืกืืืึทืืืึธื ืืื ืืืขื ืคืขืกืืงืืึทื ืึทืจืืขื ืึทืงืขืจื ืืืืื ืืืืฃ ืืืึทื ืกืืืืืฉืื.
ืืึทืฉืืขืืืงื NVE
NVE - ื ืขืฅ ืืืืจืืืึทื ืฆืืืื ื
ืืืืืขืจ ืืืจ ืึธื ืืืืื ืื ืกืขืืึทืคึผ, ืืึธืื ืืื ืื ืืึทืงืขื ืขื ืขืืืขืืข ืืขืจืืื ืึธืืึธืืืข:
VTEP - ืืืืืืึทื ืืื ืขื ืกืืฃ ืคึผืืื ื, ืื ืืืื ืืืืฃ ืืืึธืก ืื VxLAN ืืื ืขื ืืืืื ืึธืืขืจ ืขื ืืก. VTEP ืืื ื ืื ืืึทืืืงืข ืงืืื ื ืขืฅ ืืืื. ื ืกืขืจืืืขืจ ืืืึธืก ืฉืืืฆื VxLAN ืืขืื ืึธืืึธืืืข ืงืขื ืขื ืืืื ืฉืคึผืืื ืืื ืึท ืกืขืจืืืขืจ. ืืื ืืื ืืืขืจ ืืึทืคึผืึทืืึทืืืฉื, ืึทืืข ืืืึทื ืกืืืืืฉืื ืืขื ืขื VTEP.
VNI - ืืืืจืืืึทื ื ืขืืืืึธืจืง ืืื ืืขืงืก - ื ืขืฅ ืืืขื ืืืคืืขืจ ืืื VxLAN. ืึทื ืึทื ืึทืืึทืืืฉื ืงืขื ืขื ืืืื ืฆืืขื ืืื ืืืืึทื. ืึธืืขืจ, ืขืก ืืขื ืขื ืขืืืขืืข ืืืคืขืจืึทื ืกืื. ืืืขื ื ืืฆื ืึท ืฉืืึธืฃ, ืืืืึทื ื ืืืขืจื ืืื ืฆืืง ืืืืื ืืื ืืืื ืืืึทื ืืึทืฉืืืืขื ืืื ืืขื ืขื ื ืืฉื ืืจืึทื ืกืืืืืขื ืึทืจืืืขืจ ืื ื ืขืฅ. ืึธืืขืจ ืืขืืขืจ ืืืืึทื ืงืขื ืขื ืืึธืื ืึท VNI ื ืืืขืจ ืคึฟืึทืจืืื ืื ืืื ืืื, ืืืึธืก ืืื ืฉืืื ืืจืึทื ืกืืืืืขื ืืืืขืจ ืื ื ืขืฅ. ืืื ืขืก ืงืืงื ืืื ืืื ืืื ืขืก ืงืขื ืขื ืืืื ืืขืืืืื ื ืืืขื ืืืื ืืืกืงืึทืกื ืืืืึทืืขืจ.
ืืึธืื ืื ืคืื ืงืฆืืข ืคึฟืึทืจ VxLAN ืืขืื ืึธืืึธืืืข ืฆื ืึทืจืืขืื ืืื ืื ืคืืืืงืืื ืฆื ืคืึทืจืืื ืื VLAN ื ืืืขืจื ืืื ืึท VNI ื ืืืขืจ:
feature nv overlay
feature vn-segment-vlan-basedืืึธืืืจ ืงืึทื ืคืืืืขืจ ืื NVE ืฆืืืื ื, ืืืึธืก ืืื ืคืึทืจืึทื ืืืืึธืจืืืขื ืคึฟืึทืจ ืื ืึธืคึผืขืจืึทืฆืืข ืคืื โโVxLAN. ืืขืจ ืฆืืืื ื ืืื ืคืึทืจืึทื ืืืืึธืจืืืขื ืคึฟืึทืจ ืขื ืงืึทืคึผืกืึทืืืืืื ื ืจืึธืืขื ืืื VxLAN ืืขืืขืจื. ืืืจ ืงืขื ืขื ืฆืืขื ืึทื ืึทื ืึทืืึทืืืฉื ืืื ืื ืืื ืขื ืฆืืืื ื ืคึฟืึทืจ GRE:
interface nve1
no shutdown
host-reachability protocol bgp ! ะธัะฟะพะปัะทัะตะผ BGP ะดะปั ะฟะตัะตะดะฐัะธ ะผะฐัััััะฝะพะน ะธะฝัะพัะผะฐัะธะธ
source-interface loopback0 ! ะธะฝัะตััะตะนั ั ะบะพัะพัะพะณะพ ะพัะฟัะฐะฒะปัะตะผ ะฟะฐะบะตัั loopback0ืืืืฃ ืื Leaf-21 ืืึทืฉืืืืขื ืึทืืฅ ืืื ืืืฉืืคื ืึธื ืคืจืืืืขืืขื. ืึธืืขืจ, ืืืื ืืืจ ืงืึธื ืืจืึธืืืจื ืื ืจืขืืืืืึทื ืคืื ืื ืืึทืคึฟืขื show nve peers, ืืขืืึธืื ืขืก ืืืขื ืืืื ืืืืืืง. ืืึธ ืืืจ ืืึทืจืคึฟื ืฆื ืฆืืจืืงืงืืืขื ืฆื ืื VPC ืงืึทื ืคืืืืขืจืืืฉืึทื. ืืืจ ืืขื ืึทื Leaf-11 ืืื Leaf-12 ืึทืจืืขื ืืื ืคึผืขืจื ืืื ืืขื ืขื ืคึฟืึทืจืืืื ืืงืืข ืืืจื ืึท VPC ืคืขืื. ืืึธืก ืืื ืืื ืื ืื ืคืืืืขื ืืข ืกืืืืึทืฆืืข:
ืืึธืกื-2 ืกืขื ืื ืืืื ืจืึทื ืฆื Leaf-21 ืึทืืื ืึทื ืขืก ืืจืึทื ืกืืืืืขื ืขืก ืืืืขืจ ืื ื ืขืฅ ืฆื ืืึธืกื-1. ืึธืืขืจ, Leaf-21 ืืขื ืึทื ืื MAC ืึทืืจืขืก ืคืื Host-1 ืืื ืฆืืืจืืืืขื ืืืจื ืฆืืืื VTEPs ืืื ืึทืืึธื. ืืืึธืก ืืึธื Leaf-21 ืืึธื ืืื ืืขื ืคืึทื? ื ืึธื ืึทืืข, ืืึธืก ืืืื ืึทื ืึท ืฉืืืืฃ ืงืขื ืืขืจืฉืืึทื ืขื ืืื ืื ื ืขืฅ.
ืฆื ืกืึธืืืืข ืืขื ืกืืืืึทืฆืืข, ืืืจ ืืึทืจืคึฟื Leaf-11 ืืื Leaf-12 ืฆื ืฉืคึผืืื ืืื ืืืื ืืืื ืืื ืืขืจ ืคืึทืืจืืง. ืื ืืืืืื ื ืืื ืืึทื ืฅ ืคึผืฉืื. ืืืืฃ ืื ืืึธืึธืคึผืืึทืงืง ืฆืืืื ื ืคืื ืืืึธืก ืืืจ ืืืืขื ืืขื ืืื ืขื, ืืืืื ืึท ืฆืืืืืืืง ืึทืืจืขืก. ืื ืฆืืืืืืืง ืึทืืจืขืก ืืืื ืืืื ืื ืืขืืืข ืืืืฃ ืืืืืข VTEPs.
interface loopback0
ip add 10.255.1.10/32 secondaryืืืื, ืคึฟืื ืื ืคืื ื ืคืื ืืืื ืื ื ืคืื ืื ืืขืจืข VTEPs, ืืืจ ืืึทืงืืืขื ืื ืคืืืืขื ืืข ืืึทืคึผืึทืืึทืืืฉื:
ืืึธืก ืืื, ืืืฆื ืืขืจ ืืื ืขื ืืืขื ืืืื ืืขืืืื ืฆืืืืฉื ืื IP ืึทืืจืขืก ืคืื Leaf-21 ืืื ืื ืืืืจืืืขื IP ืฆืืืืฉื ืฆืืืื Leaf-11 ืืื Leaf-12. ืืืฆื ืขืก ืืืขื ืืืื ืงืืื ืคืจืืืืขืืขื ืฆื ืืขืจื ืขื ืื MAC ืึทืืจืขืก ืคืื ืฆืืืื ืืขืืืืกืขืก ืืื ืคืึทืจืงืขืจ ืงืขื ืขื ืืึทื ืคืื ืืืื ืืืืขืคึผ ืฆื ืื ืืขืจื. ืืืึธืก ืคืื ืื ืฆืืืื VTEPs ืืืขื ืคึผืจืึธืฆืขืก ืื ืคืึทืจืงืขืจ ืืื ืืึทืฉืืึธืกื ืืื ืื ืจืืืื ื ืืืฉ ืืืืฃ ืกืคึผืื ืข:
Spine1# sh ip route
<.....>
10.255.1.10/32, ubest/mbest: 2/0
*via 10.255.1.11, Eth1/1, [110/41], 1d01h, ospf-UNDERLAY, intra
*via 10.255.1.12, Eth1/2, [110/41], 1d01h, ospf-UNDERLAY, intra
10.255.1.11/32, ubest/mbest: 1/0
*via 10.255.1.11, Eth1/1, [110/41], 1d22h, ospf-UNDERLAY, intra
10.255.1.12/32, ubest/mbest: 1/0
*via 10.255.1.12, Eth1/2, [110/41], 1d01h, ospf-UNDERLAY, intraืืื ืืืจ ืงืขื ืขื ืืขื ืืืืื, ืื ืึทืืจืขืก 10.255.1.10 ืืื ืืืจืขืืืืื ืืืืื ืืืจื ืฆืืืื ืืืืึทืืขืจ-ืืึธืคึผืก.
ืืื ืืขื ืืื ืข, ืืืจ ืืึธืื ืืขืื ืืื ืื ืืจืื ื ืงืึทื ืขืงืืืืืืื. ืืึธืืืจ ืคืึธืจืืขืฆื ืฆื ืืึทืฉืืขืืืงื ืื NVE ืฆืืืื ื:
ืืึธืืืจ ืืืืื ืืขืื Vlan 10 ืืื ืคืึทืจืืื ืื ืขืก ืืื VNI 10000 ืืืืฃ ืืขืืขืจ ืืืึทื ืคึฟืึทืจ ืื ืืื ืืช. ืืึธืืืจ ืฉืืขืื ืึท ื 2 ืืื ืขื ืฆืืืืฉื ืืื ืืช
vlan 10 ! ะะบะปััะฐะตะผ VLAN ะฝะฐ ะฒัะตั
VTEP ะฟะพะดะบะปััะตะฝะฝัั
ะบ ะฝะตะพะฑั
ะพะดะธะผัะผ ั
ะพััะฐะผ
vn-segment 10000 ! ะััะพัะธะธััะตะผ VLAN ั ะฝะพะผะตั VNI
interface nve1
member vni 10000 ! ะะพะฑะฐะฒะปัะตะผ VNI 10000 ะดะปั ัะฐะฑะพัั ัะตัะตะท ะธะฝัะตััะตะนั NVE. ะดะปั ะธะฝะบะฐะฟััะปััะธะธ ะฒ VxLAN
ingress-replication protocol bgp ! ัะบะฐะทัะฒะฐะตะผ, ััะพ ะดะปั ัะฐัะฟัะพัััะฐะฝะตะฝะธั ะธะฝัะพัะผะฐัะธะธ ะพ ั
ะพััะต ะธัะฟะพะปัะทัะตะผ BGPืืืฆื ืืึธืืืจ ืืฉืขืง nve ืคึผืืจื ืืื ืื ืืืฉ ืคึฟืึทืจ BGP EVPN:
Leaf21# sh nve peers
Interface Peer-IP State LearnType Uptime Router-Mac
--------- --------------- ----- --------- -------- -----------------
nve1 10.255.1.10 Up CP 00:00:41 n/a ! ะะธะดะธะผ ััะพ peer ะดะพัััะฟะตะฝ ั secondary ะฐะดัะตัะฐ
Leaf11# sh bgp l2vpn evpn
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10.255.1.11:32777 (L2VNI 10000) ! ะั ะบะพะณะพ ะธะผะตะฝะฝะพ ะฟัะธัะตะป ััะพั l2VNI
*>l[3]:[0]:[32]:[10.255.1.10]/88 ! EVPN route-type 3 - ะฟะพะบะฐะทัะฒะฐะตั ะฝะฐัะตะณะพ ัะพัะตะดะฐ, ะบะพัะพััะน ัะฐะบ ะถะต ะทะฝะฐะตั ะพะฑ l2VNI10000
10.255.1.10 100 32768 i
*>i[3]:[0]:[32]:[10.255.1.20]/88
10.255.1.20 100 0 i
* i 10.255.1.20 100 0 i
Route Distinguisher: 10.255.1.21:32777
* i[3]:[0]:[32]:[10.255.1.20]/88
10.255.1.20 100 0 i
*>i 10.255.1.20 100 0 iืืืืื ืืืจ ืืขื ืืืืื EVPN ืืึทืจืฉืจืื-ืืืคึผ 3. ืืขืจ ืืืคึผ ืคืื ืืึทืจืฉืจืื ืจืขืื ืืืขืื ืคึผืืขืจ (ืืืึทื), ืึธืืขืจ ืืื ืืขื ืขื ืืื ืืืขืจ ืืื ืืช?
ืื ืืึทื ืืื ืึทื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื MAC ืืื ืืช ืืื ืืจืึทื ืกืืืืืขื ืืืจื EVPN ืืึทืจืฉืจืื ืืืคึผ 2
ืฆื ืืขื ืืื ืืืขืจ ืืื ืืช, ืืืจ ืืึทืจืคึฟื ืฆื ืงืึทื ืคืืืืขืจ EVPN ืืึทืจืฉืจืื ืืืคึผ 2:
evpn
vni 10000 l2
route-target import auto ! ะฒ ัะฐะผะบะฐั
ะดะฐะฝะฝะพะน ััะฐััะธ ะธัะฟะพะปัะทัะตะผ ะฐะฒัะพะผะฐัะธัะตัะบะธะน ะฝะพะผะตั ะดะปั route-target
route-target export autoืืึธืืืจ ืคึผืื ื ืคืื Host-2 ืฆื Host-1:
Firewall2# ping 192.168.10.1
PING 192.168.10.1 (192.168.10.1): 56 data bytes
36 bytes from 192.168.10.2: Destination Host Unreachable
Request 0 timed out
64 bytes from 192.168.10.1: icmp_seq=1 ttl=254 time=215.555 ms
64 bytes from 192.168.10.1: icmp_seq=2 ttl=254 time=38.756 ms
64 bytes from 192.168.10.1: icmp_seq=3 ttl=254 time=42.484 ms
64 bytes from 192.168.10.1: icmp_seq=4 ttl=254 time=40.983 msืืื ืืื ืื ืืืจ ืงืขื ืขื ืืขื ืึทื ืืึทืจืฉืจืื-ืืืคึผ 2 ืืื ืืึทืืขืืึธืก MAC ืึทืืจืขืก ืืจืืืก ืืื ืื BGP ืืืฉ - 5001.0007.0007 ืืื 5001.0008.0007
Leaf11# sh bgp l2vpn evpn
<......>
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10.255.1.11:32777 (L2VNI 10000)
*>l[2]:[0]:[0]:[48]:[5001.0007.0007]:[0]:[0.0.0.0]/216 ! evpn route-type 2 ะธ mac ะฐะดัะตั ั
ะพััะฐ 1
10.255.1.10 100 32768 i
*>i[2]:[0]:[0]:[48]:[5001.0008.0007]:[0]:[0.0.0.0]/216 ! evpn route-type 2 ะธ mac ะฐะดัะตั ั
ะพััะฐ 2
* i 10.255.1.20 100 0 i
*>l[3]:[0]:[32]:[10.255.1.10]/88
10.255.1.10 100 32768 i
Route Distinguisher: 10.255.1.21:32777
* i[2]:[0]:[0]:[48]:[5001.0008.0007]:[0]:[0.0.0.0]/216
10.255.1.20 100 0 i
*>i 10.255.1.20 100 0 iืืขืจื ืึธื ืืืจ ืงืขื ืขื ืืขื ืืืืืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืืฃ ืืขืจืืืึทื ืืืงื, ืืื ืืืึธืก ืืืจ ืืึธื ืืึทืงืืืขื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื MAC ืืึธืกื. ืื ืืขืจ ืืื ื ืื ืึทืืข ืื ืืึทืคึฟืขื ืจืขืืืืืึทื.
Leaf21# sh bgp l2vpn evpn 5001.0007.0007
BGP routing table information for VRF default, address family L2VPN EVPN
Route Distinguisher: 10.255.1.11:32777 ! ะพัะฟัะฐะฒะธะป Update ั MAC Host. ะะต ะฒะธัััะฐะปัะฝัะน ะฐะดัะตั VPC, ะฐ ะฐะดัะตั Leaf
BGP routing table entry for [2]:[0]:[0]:[48]:[5001.0007.0007]:[0]:[0.0.0.0]/216,
version 1507
Paths: (2 available, best #2)
Flags: (0x000202) (high32 00000000) on xmit-list, is not in l2rib/evpn, is not i
n HW
Path type: internal, path is valid, not best reason: Neighbor Address, no labe
led nexthop
AS-Path: NONE, path sourced internal to AS
10.255.1.10 (metric 81) from 10.255.1.102 (10.255.1.102) ! ั ะบะตะผ ะธะผะตะฝะฝะพ ัััะพะธะผ VxLAN ัะพะฝะฝะตะปั
Origin IGP, MED not set, localpref 100, weight 0
Received label 10000 ! ะะพะผะตั VNI, ะบะพัะพััะน ะฐััะพัะธะธัะพะฒะฐะฝ ั VLAN, ะฒ ะบะพัะพัะพะผ ะฝะฐั
ะพะดะธััั Host
Extcommunity: RT:65001:10000 SOO:10.255.1.10:0 ENCAP:8 ! ะขัั ะฒะธะดะฝะพ, ััะพ RT ััะพัะผะธัะพะฒะฐะปัั ะฐะฒัะพะผะฐัะธัะตัะบะธ ะฝะฐ ะพัะฝะพะฒะต ะฝะพะผะตัะพะฒ AS ะธ VNI
Originator: 10.255.1.11 Cluster list: 10.255.1.102
<........>ืืื ืก ืืขื ืืื ืจืึธืืขื ืงืืงื ืืื ืืืขื ืืื ืืขื ืขื ืืืจืืืขืืื ืืขื ืืืจื ืื ืคืึทืืจืืง:
ืคืึทืจืฉืืืงื-ARP
ืืจืืืก, ืืืจ ืืืฆื ืืึธืื L2 ืงืึธืืื ืืงืึทืฆืืข ืฆืืืืฉื ืื ืืื ืืช ืืื ืืืจ ืงืขื ืขื ืืืงื ืืึธืจื. ืึธืืขืจ, ื ืื ืึทืืข ืึทืืื ืคึผืฉืื. ืืื ืืึทื ื ืืื ืืืจ ืืึธืื ืืืืื ืืง ืืื ืืช, ืขืก ืืืขื ืืืื ืงืืื ืคืจืืืืขืืขื. ืืึธืืืจ ืืื ืึธืืขืจ ืคึฟืึธืจืฉืืขืื ืึท ืกืืืืึทืฆืืข, ืืืึผ ืืืจ ืืึธืื ืืื ืืขืจืืขืจ ืืื ืืืืื ืืขืจ ืืื ืืช. ืืืึธืก ืคึผืจืึธืืืขื ืงืขื ืืืจ ืคึผื ืื?
ืืขืจ ืคึผืจืึธืืืขื ืืื BUM (ืืจืึธืืงืึทืกื, ืืืืืึทืงืึทื ื ืื ืืงืึทืกื, ืืืืืืงืึทืกื) ืคืึทืจืงืขืจ. ืืื ืืขื ืึทืจืืืงื, ืืืจ ืืืขืื ืืึทืืจืึทืืื ืื ืึธืคึผืฆืืข ืคืื โโืืึทื ืืืื ื ืืื ืืจืึธืืงืึทืกื ืคืึทืจืงืขืจ.
ืืขืจ ืืืืคึผื ืืจืึธืืงืึทืกื ืืขื ืขืจืึทืืึธืจ ืืื ืขืืืขืจื ืขื ื ืขืืืืึธืจืงืก ืืื ืื ืืื ืืช ืืื ืืืจื ืื ARP ืคึผืจืึธืืึธืงืึธื.
ื ืขืงืกืืก ืืืคึผืืึทืืึทื ืฅ ืื ืคืืืืขื ืืข ืืขืงืึทื ืืืึทื ืฆื ืงืึทืืืึทื ARP ืจืืงืืืขืก - ืคืึทืจืฉืืืงื-ืึทืจืคึผ.
ืืขื ืฉืืจืื ืึทืจืืขื ืืื ืืืื:
- ืืึธืกื-1 ืกืขื ืื ืึทื ืึทืคึผืจ ืืขืื ืฆื ืื ืืจืึธืืงืึทืกื ืึทืืจืขืก ืคืื ืืืื ื ืขืฅ.
- ืื ืืขืื ืจืืืฉืึทื ืื ืืืึทื ืืึทืฉืืืืขื ืืื ืึทื ืฉืืึธื ืคืื ืคืึธืจื ืืขื ืืขืื ืืืืึทืืขืจ ืฆื ืื ืฉืืึธืฃ ืฆื ืืึธืกื-2, Leaf ืจืืกืคึผืึทื ืื ืืื ืืื ืื ืืืงืืืฅ ืื ืคืืจืืื ืื IP ืืื MAC.
ืืืื, ืื ืืจืึธืืงืึทืกื ืืขืื ืืื ื ืืฉื ืืขืืื ืืขื ืฆื ืื ืคืึทืืจืืง. ืึธืืขืจ ืืื ืงืขื ืืึธืก ืึทืจืืขื ืืืื ืืืฃ ื ืึธืจ ืืืืืกื ืื MAC ืึทืืจืขืก?
ืึทืืฅ ืืื ืืึทื ืฅ ืคึผืฉืื, EVPN ืืึทืจืฉืจืื ืืืคึผ 2, ืืื ืึทืืืฉืึทื ืฆื ืื MAC ืึทืืจืขืก, ืงืขื ืขื ืึทืจืืืขืจืคืืจื ืึท MAC / IP ืงืึธืืืื ืึทืฆืืข. ืฆื ืืึธื ืืึธืก, ืืืจ ืืึทืจืคึฟื ืฆื ืงืึทื ืคืืืืขืจ ืึทื IP ืึทืืจืขืก ืืื ืื ืืืืึทื ืืืืฃ ืืืึทื. ืื ืงืฉืื ืขืจืืืืึทื, ืืืึธืก IP ืืึธื ืืื ืฉืืขืื? ืืืืฃ ื ืขืงืกืืก ืขืก ืืื ืืขืืืขื ืฆื ืฉืึทืคึฟื ืึท ืคืื ืื ืืขืจืืขืืืืื (ืืขืืืืงืขืจ) ืึทืืจืขืก ืืืืฃ ืึทืืข ืกืืืืืฉืื:
feature interface-vlan
fabric forwarding anycast-gateway-mac 0001.0001.0001 ! ะทะฐะดะฐะตะผ virtual mac ะดะปั ัะพะทะดะฐะฝะธั ัะฐัะฟัะตะดะตะปะตะฝะฝะพะณะพ ัะปัะทะฐ ะผะตะถะดั ะฒัะตะผะธ ะบะพะผะผััะฐัะพัะฐะผะธ
interface Vlan10
no shutdown
ip address 192.168.10.254/24 ! ะฝะฐ ะฒัะตั
Leaf ะทะฐะดะฐะตะผ ะพะดะธะฝะฐะบะพะฒัะน IP
fabric forwarding mode anycast-gateway ! ะณะพะฒะพัะธะผ ะธัะฟะพะปัะทะพะฒะฐัั Virtual macืืืื, ืคึฟืื ืืขืจ ืืืื ืื ื ืคืื ืื ืืื ืืช, ืื ื ืขืฅ ืืืขื ืงืืงื ืืื ืืึธืก:
ืืึธืืืจ ืงืึธื ืืจืึธืืืจื BGP l2route evpn
Leaf11# sh bgp l2vpn evpn
<......>
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10.255.1.11:32777 (L2VNI 10000)
*>l[2]:[0]:[0]:[48]:[5001.0007.0007]:[0]:[0.0.0.0]/216
10.255.1.21 100 32768 i
*>i[2]:[0]:[0]:[48]:[5001.0008.0007]:[0]:[0.0.0.0]/216
10.255.1.10 100 0 i
* i 10.255.1.10 100 0 i
* i[2]:[0]:[0]:[48]:[5001.0008.0007]:[32]:[192.168.10.20]/248
10.255.1.10 100 0 i
*>i 10.255.1.10 100 0 i
<......>
Route Distinguisher: 10.255.1.21:32777
* i[2]:[0]:[0]:[48]:[5001.0008.0007]:[0]:[0.0.0.0]/216
10.255.1.20 100 0 i
*>i 10.255.1.20 100 0 i
* i[2]:[0]:[0]:[48]:[5001.0008.0007]:[32]:[192.168.10.20]/248
*>i 10.255.1.20 100 0 i
<......>ืคึฟืื ืื ืืึทืคึฟืขื ืจืขืืืืืึทื ืืืจ ืงืขื ืขื ืืขื ืึทื ืืื EVPN ืืึทืจืฉืจืื ืืืคึผ 2, ืืื ืึทืืืฉืึทื ืฆื ืื MAC, ืืืจ ืืืฆื ืืืื ืืขื ืื ืืึทืืขืืึธืก IP ืึทืืจืขืก.
ืืื ืก ืฆืืจืืงืงืืืขื ืฆื ืืึทืฉืืขืืืงื ืกืืคึผืคึผืจืขืกืก-ืึทืจืคึผ. ืื ืืึทืฉืืขืืืงื ืืื ืขื ืืืืึทืื ืคึฟืึทืจ ืืขืืขืจ VNI ืกืขืคึผืขืจืึทืืื:
interface nve1
member vni 10000
suppress-arpืืขืืึธืื ืขืืืขืืข ืงืึทืืคึผืืขืงืกืืื ืขืจืืืืึทื:
- ืคึฟืึทืจ ืืขื ืฉืืจืื ืฆื ืึทืจืืขืื, ืคึผืืึทืฅ ืืื TCAM ืืึผืจืื ืืื ืคืืจืืื ืื. ืืึธ ืก ืึท ืืืืฉืคึผืื ืคืื ืกืขืืืื ืืก ืคึฟืึทืจ ืกืืคึผืคึผืจืขืกืก-ืึทืจืคึผ:
hardware access-list tcam region arp-ether 256ืืขื ืืึทืฉืืขืืืงื ืืืขื ืืึทืจืคื ืืึธืคึผื-ืืจืืื. ืึทื ืืื, ืืืื ืืืจ ืฉืืขืื 256, ืืืจ ืืึทืจืคึฟื ืฆื ืคืจืื 512 ืืื TCAM.
- ืืืคึผืืึทืืขื ืื ื ืกืืคึผืคึผืจืขืกืก-ืึทืจืคึผ ืืืื ืืืื ืืขืืื ืืืืฃ ืึทืืข ืืืึทื ืกืืืืืฉืื. ืึธืืขืจ, ืงืึทืืคึผืืขืงืกืืื ืงืขื ืขื ืืืืคืฉืืืื ืืืขื ืงืึทื ืคืืืืขืจืื ื ืืืืฃ ืืืึทื ืคึผืขืจื ืืืึธืก ืืืืื ืขื ืืื ืึท VPC ืคืขืื. ืืืื TCAM ืืื ืคืืจืขื ืืขืจื, ืื ืงืึธื ืกืืกืืขื ืกื ืฆืืืืฉื ืคึผืขืจื ืืืขื ืืืื ืฆืขืืจืืื ืืื ืืืื ืขืจ ื ืึธืืข ืงืขื ืืืื ืืขื ืืืขื ืืืืก ืคืื ืึธืคึผืขืจืึทืฆืืข. ืึทืืืฉื ืึทื, ืึท ืจืขืืึธืึธื ืคืื ืื ืืืื ืงืขื ืืืื ืคืืจืืื ืื ืฆื ืฆืืืืืื ืื TCAM ืืืืฉื ืืึทืฉืืขืืืงื.
ืืื ืึท ืจืขืืืืืึทื, ืืืจ ืืึทืจืคึฟื ืฆื ืงืขืจืคืึทืื ืืึทืืจืึทืืื ืฆื, ืืื ืืืื ืกืืืืึทืฆืืข, ืขืก ืืื ืืืขืจื ืืืคึผืืึทืืขื ืื ื ืืขื ืืึทืฉืืขืืืงื ืืื ืึท ืคืืืกื ืืืง ืคืึทืืจืืง.
ืืึธืก ืขื ืืืงื ืืื ืืขืจ ืขืจืฉืืขืจ ืืืื ืคืื ืืขืจ ืกืขืจืืข. ืืื ืืขืจ ืืืืึทืืขืจ ืืืื ืืืจ ืืืขืื ืงืืงื ืืื ืจืืืื ื ืืืจื ืึท VxLAN ืฉืืึธืฃ ืืื ืฆืขืฉืืืืื ื ืคืื ื ืขืืืืึธืจืงืก ืืื ืคืึทืจืฉืืืขื ืข VRFs.
ืืื ืืืฆื ืืื ืืึทืื ืึทืืขืืขื ืฆื , ืืื ืืืึธืก ืืื ืืืขื ืืึธืื ืืืจ ืืื ืืขืืึทื ืืืขืื ืืขื ืงืืจืก. ืืขืจ ืขืจืฉืืขืจ 20 ืคึผืึทืจืืืกืึทืคึผืึทื ืฅ ืฆื ืคืึทืจืฉืจืืึทืื ืคึฟืึทืจ ืืขื ืืืขืืื ืึทืจ ืืืขื ืืึทืงืืืขื ืึท ืึทืจืึธืคึผืจืขืืขื ืขื ืกืขืจืืืคืืงืึทื ืืืจื E- ืืจืืื ืื 1-2 ืืขื ื ืึธื ืื ืืจืึธืืงืึทืกื.
ืืงืืจ: www.habr.com