Skip to main content

VXLAN with VPC




hostname DCB-Leaf1

nv overlay evpn
feature ospf
feature bgp
feature pim
feature fabric forwarding
feature interface-vlan
feature vn-segment-vlan-based
feature hsrp
feature lacp
feature vpc
feature nv overlay

fabric forwarding anycast-gateway-mac 0000.4321.8765
ip pim rp-address 10.2.1.11 group-list 224.0.0.0/4
ip pim ssm range 232.0.0.0/8
vlan 1,100,200,500
vlan 100
  vn-segment 100100
vlan 200
  vn-segment 100200
vlan 500
  vn-segment 50000

route-map Overlay_Subnets permit 10
  match tag 54321 
vrf context TENANT1
  vni 50000
  ip pim ssm range 232.0.0.0/8
  rd auto
  address-family ipv4 unicast
    route-target both auto
    route-target both auto evpn
vrf context management
hardware access-list tcam region racl 512
hardware access-list tcam region arp-ether 256
vpc domain 102
  peer-switch
  role priority 1000
  peer-keepalive destination 192.168.30.2 source 192.168.30.1
  peer-gateway
  ip arp synchronize


interface Vlan1
  no ip redirects
  no ipv6 redirects

interface Vlan100
  no shutdown
  mtu 9150
  vrf member TENANT1
  no ip redirects
  ip address 10.100.0.1/24 tag 54321
  no ipv6 redirects
  fabric forwarding mode anycast-gateway

interface Vlan200
  no shutdown
  mtu 9150
  vrf member TENANT1
  no ip redirects
  ip address 10.200.0.1/24 tag 54321
  no ipv6 redirects
  fabric forwarding mode anycast-gateway

interface Vlan500
  no shutdown
  vrf member TENANT1
  no ip redirects
  ip forward
  no ipv6 redirects

interface port-channel102
  switchport mode trunk
  spanning-tree port type network
  speed 10000
  vpc peer-link

interface port-channel110
  switchport mode trunk
  switchport trunk allowed vlan 100,200
  vpc 110

interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback0
  member vni 50000 associate-vrf
  member vni 100100
    suppress-arp
    mcast-group 239.0.0.101
  member vni 100200
    suppress-arp
    mcast-group 239.0.0.201

interface Ethernet1/1
  no switchport
  mtu 9150
  no ip redirects
  ip address 10.2.12.2/30
  ip ospf network point-to-point
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/2
  no switchport
  mtu 9150
  no ip redirects
  ip address 10.2.12.6/30
  ip ospf network point-to-point
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/3
  switchport mode trunk
  speed 10000
  channel-group 102 mode active

interface Ethernet1/5
  switchport mode trunk
  switchport trunk allowed vlan 100,200
  channel-group 110 mode active

interface Ethernet1/6
  switchport access vlan 100

interface Ethernet1/7
  switchport access vlan 200

interface mgmt0
  vrf member management
  ip address 192.168.30.1/30

interface loopback0
  ip address 10.2.1.3/32
  ip address 10.2.1.102/32 secondary
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
router ospf UNDERLAY
router bgp 65001
  router-id 10.2.1.113
  log-neighbor-changes
  address-family ipv4 unicast
  address-family l2vpn evpn
  template peer VXLAN_SPINE
    remote-as 65001
    update-source loopback0
    address-family ipv4 unicast
      send-community
      send-community extended
    address-family l2vpn evpn
      send-community
      send-community extended
  neighbor 10.2.1.1
    inherit peer VXLAN_SPINE
  neighbor 10.2.1.2
    inherit peer VXLAN_SPINE
  vrf TENANT1
    address-family ipv4 unicast
      redistribute direct route-map Overlay_Subnets
evpn
  vni 100100 l2
    rd auto
    route-target import auto
    route-target export auto
  vni 100200 l2
    rd auto
    route-target import auto
    route-target export auto



DCB-Leaf1(config-if)#sh vpc
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                     : 102 
Peer status                       : peer adjacency formed ok      
vPC keep-alive status             : peer is alive                 
Configuration consistency status  : success 
Per-vlan consistency status       : success                       
Type-2 consistency status         : success 
vPC role                          : primary, operational secondary
Number of vPCs configured         : 1   
Peer Gateway                      : Enabled
Dual-active excluded VLANs        : -
Graceful Consistency Check        : Enabled
Auto-recovery status              : Disabled
Delay-restore status              : Timer is off.(timeout = 30s)
Delay-restore SVI status          : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router    : Disabled
Virtual-peerlink mode             : Disabled

vPC Peer-link status
---------------------------------------------------------------------
id    Port   Status Active vlans    
--    ----   ------ -------------------------------------------------
1     Po102  up     1,100,200,500                                               
         

vPC status
----------------------------------------------------------------------------
Id    Port          Status Consistency Reason                Active vlans
--    ------------  ------ ----------- ------                ---------------
110   Po110         up     success     success               100,200            
         
                                                                                
         

Please check "show vpc consistency-parameters vpc <vpc-num>" for the 
consistency reason of down vpc and for type-2 consistency reasons for 
any vpc.

DCB-Leaf1(config-if)# sh vpc consistency-parameters global 

    Legend:
        Type 1 : vPC will be suspended in case of mismatch

Name                        Type  Local Value            Peer Value             
-------------               ----  ---------------------- -----------------------
STP MST Simulate PVST       1     Enabled                Enabled               
STP Port Type, Edge         1     Normal, Disabled,      Normal, Disabled,     
BPDUFilter, Edge BPDUGuard        Disabled               Disabled              
STP MST Region Name         1     ""                     ""                    
STP Disabled                1     None                   None                  
STP Mode                    1     Rapid-PVST             Rapid-PVST            
STP Bridge Assurance        1     Enabled                Enabled               
STP Loopguard               1     Disabled               Disabled              
STP MST Region Instance to  1                                                  
 VLAN Mapping                                                                  
STP MST Region Revision     1     0                      0                     
Interface-vlan admin up     2     100,200,500            100,200,500           
Interface-vlan routing      2     1,100,200,500          1,100,200,500         
capability                                                                     
Nve1 Adm St, Src Adm St,    1     Up, Up, 10.2.1.102,    Up, Up, 10.2.1.102,   
Sec IP, Host Reach, VMAC          CP, FALSE, Disabled,   CP, FALSE, Disabled,  
Adv, SA,mcast l2, mcast           0.0.0.0, 0.0.0.0,      0.0.0.0, 0.0.0.0,     
l3, IR BGP,MS Adm St, Reo         Disabled, Down,        Disabled, Down,       
                                  0.0.0.0                0.0.0.0               
Xconnect Vlans              1                                                  
QoS (Cos)                   2     ([0-7], [], [], [],    ([0-7], [], [], [],   
                                  [], [])                [], [])               
Network QoS (MTU)           2     (1500, 1500, 1500,     (1500, 1500, 1500,    
                                  1500, 0, 0)            1500, 0, 0)           
Network Qos (Pause:         2     (F, F, F, F, F, F)     (F, F, F, F, F, F)    
T->Enabled, F->Disabled)                                                       
Input Queuing (Bandwidth)   2     (0, 0, 0, 0, 0, 0)     (0, 0, 0, 0, 0, 0)    
Input Queuing (Absolute     2     (F, F, F, F, F, F)     (F, F, F, F, F, F)    
Priority: T->Enabled,                                                          
F->Disabled)                                                                   
Output Queuing (Bandwidth   2     (100, 0, 0, 0, 0, 0)   (100, 0, 0, 0, 0, 0)  
Remaining)                                                                     
Output Queuing (Absolute    2     (F, F, F, T, F, F)     (F, F, F, T, F, F)    
Priority: T->Enabled,                                                          
F->Disabled)                                                                   
Allowed VLANs               -     1,100,200,500          1,100,200,500         
Local suspended VLANs       -     -                      -                     

DCB-Leaf1(config-if)# sh vpc orphan-ports 
Note: 
--------::Going through port database. Please be patient.::--------

VLAN           Orphan Ports             
-------        -------------------------
100            Eth1/6                                                           
         
200            Eth1/7                                                           


hostname DCB-Leaf2

nv overlay evpn
feature ospf
feature bgp
feature pim
feature fabric forwarding
feature interface-vlan
feature vn-segment-vlan-based
feature hsrp
feature lacp
feature vpc
feature nv overlay

fabric forwarding anycast-gateway-mac 0000.4321.8765
ip pim rp-address 10.2.1.11 group-list 224.0.0.0/4
ip pim ssm range 232.0.0.0/8
vlan 1,100,200,500
vlan 100
  vn-segment 100100
vlan 200
  vn-segment 100200
vlan 500
  vn-segment 50000

route-map Overlay_Subnets permit 10
  match tag 54321 
vrf context TENANT1
  vni 50000
  ip pim ssm range 232.0.0.0/8
  rd auto
  address-family ipv4 unicast
    route-target both auto
    route-target both auto evpn
vrf context management
hardware access-list tcam region racl 512
hardware access-list tcam region arp-ether 256
vpc domain 102
  peer-switch
  role priority 2000
  peer-keepalive destination 192.168.30.1 source 192.168.30.2
  peer-gateway
  ip arp synchronize

interface Vlan1
  no ip redirects
  no ipv6 redirects

interface Vlan100
  no shutdown
  mtu 9150
  vrf member TENANT1
  no ip redirects
  ip address 10.100.0.1/24 tag 54321
  no ipv6 redirects
  fabric forwarding mode anycast-gateway

interface Vlan200
  no shutdown
  mtu 9150
  vrf member TENANT1
  no ip redirects
  ip address 10.200.0.1/24 tag 54321
  no ipv6 redirects
  fabric forwarding mode anycast-gateway

interface Vlan500
  no shutdown
  vrf member TENANT1
  no ip redirects
  ip forward
  no ipv6 redirects

interface port-channel102
  switchport mode trunk
  spanning-tree port type network
  speed 10000
  vpc peer-link

interface port-channel110
  switchport mode trunk
  switchport trunk allowed vlan 100,200
  vpc 110

interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback0
  member vni 50000 associate-vrf
  member vni 100100
    suppress-arp
    mcast-group 239.0.0.101
  member vni 100200
    suppress-arp
    mcast-group 239.0.0.201

interface Ethernet1/1
  no switchport
  mtu 9150
  no ip redirects
  ip address 10.2.12.10/30
  ip ospf network point-to-point
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/2
  no switchport
  mtu 9150
  no ip redirects
  ip address 10.2.12.14/30
  ip ospf network point-to-point
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/3
  switchport mode trunk
  speed 10000
  channel-group 102 mode active

interface Ethernet1/5
  switchport mode trunk
  switchport trunk allowed vlan 100,200
  channel-group 110 mode active

interface Ethernet1/6
  switchport access vlan 100

interface Ethernet1/7
  switchport access vlan 200

interface mgmt0
  vrf member management
  ip address 192.168.30.2/30

interface loopback0
  ip address 10.2.1.4/32
  ip address 10.2.1.102/32 secondary
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
router ospf UNDERLAY
router bgp 65001
  router-id 10.2.1.114
  log-neighbor-changes
  address-family ipv4 unicast
  address-family l2vpn evpn
  template peer VXLAN_SPINE
    remote-as 65001
    update-source loopback0
    address-family ipv4 unicast
      send-community
      send-community extended
    address-family l2vpn evpn
      send-community
      send-community extended
  neighbor 10.2.1.1
    inherit peer VXLAN_SPINE
  neighbor 10.2.1.2
    inherit peer VXLAN_SPINE
  vrf TENANT1
    address-family ipv4 unicast
      redistribute direct route-map Overlay_Subnets
evpn
  vni 100100 l2
    rd auto
    route-target import auto
    route-target export auto
  vni 100200 l2
    rd auto
    route-target import auto
    route-target export auto



DCB-Leaf2(config-if)#  sh vpc
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                     : 102 
Peer status                       : peer adjacency formed ok      
vPC keep-alive status             : peer is alive                 
Configuration consistency status  : success 
Per-vlan consistency status       : success                       
Type-2 consistency status         : success 
vPC role                          : secondary, operational primary
Number of vPCs configured         : 1   
Peer Gateway                      : Enabled
Dual-active excluded VLANs        : -
Graceful Consistency Check        : Enabled
Auto-recovery status              : Disabled
Delay-restore status              : Timer is off.(timeout = 30s)
Delay-restore SVI status          : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router    : Disabled
Virtual-peerlink mode             : Disabled

vPC Peer-link status
---------------------------------------------------------------------
id    Port   Status Active vlans    
--    ----   ------ -------------------------------------------------
1     Po102  up     1,100,200,500                                               
         

vPC status
----------------------------------------------------------------------------
Id    Port          Status Consistency Reason                Active vlans
--    ------------  ------ ----------- ------                ---------------
110   Po110         up     success     success               100,200            
         
                                                                                
         

Please check "show vpc consistency-parameters vpc <vpc-num>" for the 
consistency reason of down vpc and for type-2 consistency reasons for 




hostname DCB-ESXi-1

feature interface-vlan
feature lacp

vlan 1,100,200

vrf context management

interface Vlan1

interface Vlan100
  no shutdown
  ip address 10.100.0.201/24

interface Vlan200
  no shutdown
  ip address 10.200.0.201/24

interface port-channel110
  switchport mode trunk
  switchport trunk allowed vlan 100,200

interface Ethernet1/1
  switchport mode trunk
  switchport trunk allowed vlan 100,200
  channel-group 110 mode active

interface Ethernet1/2
  switchport mode trunk
  switchport trunk allowed vlan 100,200
  channel-group 110 mode active

interface mgmt0
  vrf member management

DCB-ESXi-1(config-if)#  ping 10.100.0.102
PING 10.100.0.102 (10.100.0.102): 56 data bytes
64 bytes from 10.100.0.102: icmp_seq=0 ttl=63 time=185.459 ms
64 bytes from 10.100.0.102: icmp_seq=1 ttl=63 time=142.801 ms
64 bytes from 10.100.0.102: icmp_seq=2 ttl=63 time=327.084 ms
64 bytes from 10.100.0.102: icmp_seq=3 ttl=63 time=253.254 ms
64 bytes from 10.100.0.102: icmp_seq=4 ttl=63 time=296.388 ms

--- 10.100.0.102 ping statistics ---
5 packets transmitted, 5 packets received, 0.00% packet loss
round-trip min/avg/max = 142.801/240.997/327.084 ms
DCB-ESXi-1(config-if)#  ping 10.200.0.102
PING 10.200.0.102 (10.200.0.102): 56 data bytes
64 bytes from 10.200.0.102: icmp_seq=0 ttl=63 time=195.243 ms
64 bytes from 10.200.0.102: icmp_seq=1 ttl=63 time=154.739 ms
64 bytes from 10.200.0.102: icmp_seq=2 ttl=63 time=105.613 ms
64 bytes from 10.200.0.102: icmp_seq=3 ttl=63 time=105.8 ms
64 bytes from 10.200.0.102: icmp_seq=4 ttl=63 time=230.389 ms

--- 10.200.0.102 ping statistics ---
5 packets transmitted, 5 packets received, 0.00% packet loss
round-trip min/avg/max = 105.613/158.356/230.389 ms

DCB-ESXi-1(config-if)#  ping 10.100.0.104
PING 10.100.0.104 (10.100.0.104): 56 data bytes
64 bytes from 10.100.0.104: icmp_seq=0 ttl=63 time=1976.62 ms
64 bytes from 10.100.0.104: icmp_seq=1 ttl=63 time=1967.06 ms
64 bytes from 10.100.0.104: icmp_seq=2 ttl=63 time=1095.59 ms
64 bytes from 10.100.0.104: icmp_seq=3 ttl=63 time=552.867 ms
64 bytes from 10.100.0.104: icmp_seq=4 ttl=63 time=396.085 ms

--- 10.100.0.104 ping statistics ---
5 packets transmitted, 5 packets received, 0.00% packet loss
round-trip min/avg/max = 396.085/1197.64/1976.62 ms

DCB-ESXi-1(config-if)#  ping 10.200.0.104
PING 10.200.0.104 (10.200.0.104): 56 data bytes
64 bytes from 10.200.0.104: icmp_seq=0 ttl=63 time=1399.57 ms
64 bytes from 10.200.0.104: icmp_seq=1 ttl=63 time=1260.47 ms
64 bytes from 10.200.0.104: icmp_seq=2 ttl=63 time=1468.5 ms
64 bytes from 10.200.0.104: icmp_seq=3 ttl=63 time=1591.05 ms
64 bytes from 10.200.0.104: icmp_seq=4 ttl=63 time=1100.81 ms

--- 10.200.0.104 ping statistics ---
5 packets transmitted, 5 packets received, 0.00% packet loss
round-trip min/avg/max = 1100.81/1364.08/1591.05 ms
DCB-ESXi-1(config-if)# 





DCB-SRV1> ping 10.200.0.102

84 bytes from 10.200.0.102 icmp_seq=1 ttl=63 time=9.339 ms
84 bytes from 10.200.0.102 icmp_seq=2 ttl=63 time=7.246 ms
84 bytes from 10.200.0.102 icmp_seq=3 ttl=63 time=7.745 ms
84 bytes from 10.200.0.102 icmp_seq=4 ttl=63 time=8.903 ms
84 bytes from 10.200.0.102 icmp_seq=5 ttl=63 time=8.400 ms

DCB-SRV1> ping 10.100.0.104

84 bytes from 10.100.0.104 icmp_seq=1 ttl=64 time=4.776 ms
84 bytes from 10.100.0.104 icmp_seq=2 ttl=64 time=8.452 ms
84 bytes from 10.100.0.104 icmp_seq=3 ttl=64 time=8.129 ms
84 bytes from 10.100.0.104 icmp_seq=4 ttl=64 time=8.390 ms
84 bytes from 10.100.0.104 icmp_seq=5 ttl=64 time=6.324 ms
^[[A
DCB-SRV1> ping 10.200.0.104

84 bytes from 10.200.0.104 icmp_seq=1 ttl=63 time=18.711 ms
84 bytes from 10.200.0.104 icmp_seq=2 ttl=63 time=10.258 ms
84 bytes from 10.200.0.104 icmp_seq=3 ttl=63 time=13.789 ms
84 bytes from 10.200.0.104 icmp_seq=4 ttl=63 time=13.994 ms
84 bytes from 10.200.0.104 icmp_seq=5 ttl=63 time=15.235 ms

DCB-SRV1> ping 10.100.0.201

84 bytes from 10.100.0.201 icmp_seq=1 ttl=255 time=7.420 ms
84 bytes from 10.100.0.201 icmp_seq=2 ttl=255 time=10.363 ms
84 bytes from 10.100.0.201 icmp_seq=3 ttl=255 time=10.437 ms
84 bytes from 10.100.0.201 icmp_seq=4 ttl=255 time=17.722 ms
84 bytes from 10.100.0.201 icmp_seq=5 ttl=255 time=8.889 ms

DCB-SRV1> ping 10.200.0.201

84 bytes from 10.200.0.201 icmp_seq=1 ttl=255 time=13.603 ms
84 bytes from 10.200.0.201 icmp_seq=2 ttl=255 time=11.821 ms
84 bytes from 10.200.0.201 icmp_seq=3 ttl=255 time=11.778 ms
84 bytes from 10.200.0.201 icmp_seq=4 ttl=255 time=12.907 ms
84 bytes from 10.200.0.201 icmp_seq=5 ttl=255 time=12.470 ms



Comments

Popular posts from this blog

VXLAN - External connectivity for TENANT using eBGP

  Ping from DCB-SRV4 in DCB to loopback 0 of BCA-BB-A,BCA-BB-B,BCA-MPLS-A, and BCA-MPLS-B DCB-SRV4> ping 10.1.100.1 -i 5 84 bytes from 10.1.100.1 icmp_seq=1 ttl=251 time=60.865 ms 84 bytes from 10.1.100.1 icmp_seq=2 ttl=251 time=51.113 ms 84 bytes from 10.1.100.1 icmp_seq=3 ttl=251 time=56.060 ms 84 bytes from 10.1.100.1 icmp_seq=4 ttl=251 time=50.108 ms 84 bytes from 10.1.100.1 icmp_seq=5 ttl=251 time=56.570 ms DCB-SRV4> ping 10.1.100.2 -i 5 84 bytes from 10.1.100.2 icmp_seq=1 ttl=251 time=83.532 ms 84 bytes from 10.1.100.2 icmp_seq=2 ttl=251 time=48.313 ms 84 bytes from 10.1.100.2 icmp_seq=3 ttl=251 time=51.152 ms 84 bytes from 10.1.100.2 icmp_seq=4 ttl=251 time=47.318 ms 84 bytes from 10.1.100.2 icmp_seq=5 ttl=251 time=50.505 ms DCB-SRV4> ping 10.1.100.3 -i 5 84 bytes from 10.1.100.3 icmp_seq=1 ttl=250 time=68.015 ms 84 bytes from 10.1.100.3 icmp_seq=2 ttl=250 time=51.954 ms 84 bytes from 10.1.100.3 icmp_seq=3 ttl=250 time=51.534 ms 84 bytes from 10.1.100.3 icmp_seq=4 t...