EVPN MPLS IRB Symmetric with Host Routes

Overview

EVPN-IRB facilitates communication between two L2VNIs with the help of Routing using IP-VRF. This features provides the Host (/32 or /128) based Symmetric IRB support which forwards the inter-subnet traffic directly towards the host (CEs) attached to VTEP (PEs).

Host based Symmetric IRB support is two modes: interface-full and interface-less.

• Interface-full mode refers to configuring of IRB interface
• Interface-less mode refers to configuring the access interface as L3 interface and using the IRB configuration. IRB interface is not used in this case.
• Interface-full mode supports evpn irb-advertise-host-route CLI under evpn mpls id <id>.
• Interface-less mode supports both evpn irb-advertise-host-route CLI under evpn mpls id <id> and redistribute-connected-host-routes under bgp vrf address family.
• Host based Symmetric IRB support is achieved through one of the modes:
• evpn irb-advertise-host-route in interface-full mode (with IRB interface)
• evpn irb-advertise-host-route in interface-less mode (without IRB interface)
• redistribute-connected-host-routes in interface-less mode (without IRB interface)

Topology

The topology below depicts the EVPN MPLS IRB with LDP as underlay MPLS path.

Figure 58. Host based symmetric IRB support

PE1

Enable EVPN MPLS and IRB

#configure terminal

Enter configuration mode.

(config)#evpn mpls enable

Enable EVPN MPLS globally.

(config)#evpn mpls irb

Enable EVPN MPLS IRB globally.

Loopback Interface

(config-if)#interface lo

Enter the Interface mode for the loopback interface.

(config-if)# ip address 20.20.20.20/32 secondary

Configure IP address on loopback interface.

(config-if)#exit

Exit interface mode.

Configure MAC VRF

(config)#mac vrf green

Create MAC VRF mvrf4.

(config-vrf)# rd 20.20.20.20:400

Configure route distinguisher.

(config-vrf)# route-target both 65010:400

Configure route target as evpn auto route target (it can be configured as manual RT).

(config-vrf)#exit

Exit VRF mode.

Configure IP VRF

(config)#ip vrf vrf400

Configure IP VRF vrf100.

(config-vrf)# rd 30:400

Configure route distinguisher

(config-vrf)# route-target both 100:400

Configure route target

(config-vrf)# l3vni 40000

Configure L3 VNID for routing

(config-vrf)#exit

Exit VRF mode

Configure anycast gateway MAC

(config)#evpn irb-forwarding anycast-gateway-mac 0011.2233.5577

Configure anycast gateway MAC globally.

Configuring IRB interface

(config)#interface irb400

Create IRB interface irb100.

(config-irb-if)# ip vrf forwarding vrf400

Map L3 VRF to the IRB interface.

(config-irb-if)# ip address 40.40.1.1/24 anycast

Assign IP address.

(config-irb-if)# ipv6 address 5001::1/48

Assign IPv6 address.

(config-irb-if)# evpn irb-if-forwarding anycast-gateway-mac

Map anycast gateway MAC.

(config-irb-if)#exit

Exit interface mode.

Creating EVPN MPLS ID

(config)#evpn mpls vtep-ip-global 20.20.20.20

Configure VTEP global IP.

(config)#evpn mpls id 400

Create EVPN MPLS ID.

(config-evpn-mpls)# host-reachability-protocol evpn-bgp green

Map the MAC VRF mvrf4.

(config-evpn-mpls)# evpn irb irb400

Map the IRB interface.

(config-evpn-mpls)# evpn irb-advertise-host-route

Set host to route advertise.

(config-evpn-mpls)#exit

Exit the EVPN MPLS mode.

Global LDP

(config)#router ldp

Enter the Router LDP mode.

(config-router)# router-id 20.20.20.20

Set router ID of LDP.

(config-router)# targeted-peer ipv4 17.17.17.17

Configure targeted peer.

(config-router-targeted-peer)# exit

Exit from targeted-peer mode.

(config-router)# transport-address ipv4 20.20.20.20

Configure LDP transport address.

(config-router)#exit

Exit from LDP mode.

Interface Configuration Network Side

(config)#interface xe18

Configure physical interface.

(config-if)# mtu 9216

Configure MTU on the interface.

(config-if)# load-interval 30

Set load interval.

(config-if)# ip address 55.55.55.1/24

Assign IP address.

(config-if)# label-switching

Enable label switching.

(config-if)# isis network point-to-point

Configure isis as point-to-point network.

(config-if)# enable-ldp ipv4

Enable LDP IPv4.

(config-if)# ip router isis ISIS-IGP

Enable a routing process.

(config-if)#exit

Exit interface mode.

(config-if)# router isis ISIS-IGP

Enter the Router ISIS mode.

(config-router)# is-type level-1

IS Level for this routing process.

(config-router)# mpls traffic-eng router-id 20.20.20.20

Routing protocol commands for MPLS Traffic Engineering.

(config-router)# net 49.0001.0000.0000.0001.00

Configure net.

(config-router)#exit

Exit OSPF mode.

BGP Configuration

(config)#router bgp

Enter the Router BGP mode, ASN: 100

(config-router)# neighbor 11.11.11.11 remote-as 65010

Configuring PE3 as I-BGP neighbor using it's loopback IP

(config-router)# neighbor 11.11.11.11 update-source lo

Source of routing updates as loopback

(config-router)# neighbor 22.22.22.22 remote-as 65010

Configuring PE2 as I-BGP neighbor using it's loopback IP

(config-router)# neighbor 22.22.22.22 update-source lo

Source of routing updates as loopback

(config-router)# neighbor 17.17.17.17 remote-as 65010

Configuring PE3 as I-BGP neighbor using it's loopback IP

(config-router)# neighbor 22.22.22.22 update-source lo

Source of routing updates as loopback

(config-router)# address-family l2vpn evpn

Entering into address family mode as EVPN

(config-router-af)# neighbor 11.11.11.11 activate

Enabling EVPN Address family for neighbor

(config-router-af)# neighbor 22.22.22.22 activate

Enabling EVPN Address family for neighbor

(config-router-af)# neighbor 17.17.17.17 activate

Enabling EVPN Address family for neighbor

(config-router-af)# exit-address-family

Exiting of Address family mode

(config-router)# address-family ipv4 vrf vrf400

Entering into VRF address family mode

(config-router-af)# redistribute connected

Redistribute connected routes to the network

(config-router-af)# exit-address-family

Exiting of Address family mode

Access Port Configuration

(config)# interface xe26

Configure physical interface

(config-if)# static-channel-group 10000

Create static channel group

(config-if)# exit

Exit interface mode

(config)# interface sa10000

Configure Static channel sa10000

(config-if)# switchport

Make it L2 interface

(config-if)# load-interval 30

Set load interval

(config-if)# mtu 9216

Configure MTU on the interface.

(config)# exit

Exit interface mode

(config)# interface sa10000.400 switchport

Configure static sub-interface

(config-if)# encapsulation dot1q 701

Configure encapsulation

(config-ig)# rewrite pop

Pop the outer VID

(config-if)# access-if-evpn

Entering Access mode for EVPN MPLS ID configuration

(config-acc-if-evpn)# map vpn-id 400

Map VPN-ID 400

(config-acc-if-evpn)# mac 0000.0000.aaaa ip 40.40.1.10

Configure static mac with IP

(config-acc-if-evpn)# mac 0000.0000.bbbb ipv6 5001:aaaa::1

Configure static mac with IPv6

(config-acc-if-evpn)#exit

Exiting out of access interface mode

PE2

Enable EVPN MPLS and IRB

#configure terminal

Enter configuration mode.

(config)#evpn mpls enable

Enable EVPN MPLS globally

(config)#evpn mpls irb

Enable EVPN MPLS IRB globally

Loopback Interface

(config-if)#interface lo

Enter the Interface mode for the loopback interface.

(config-if)# ip address 22.22.22.22/32 secondary

Configure IP address on loopback interface.

(config-if)#exit

Exit interface mode

Configure MAC VRF

(config)#mac vrf green

Create MAC VRF mvrf4.

(config-vrf)# rd 22.22.22.22:400

Configure route distinguisher

(config-vrf)# route-target both 65010:400

Configure route target as evpn auto route target (we can configure as manual RT also)

(config-vrf)#exit

Exit VRF mode

Configure IP VRF

(config)#ip vrf vrf400

Configure IP VRF vrf100.

(config-vrf)# rd 40:400

Configure route distinguisher

(config-vrf)# route-target both 100:400

Configure route target

(config-vrf)# l3vni 40000

Configure L3 VNID for routing

(config-vrf)#exit

Exit VRF mode

Configure anycast gateway MAC

(config)#evpn irb-forwarding anycast-gateway-mac 0011.2233.5577

Configure anycast gateway MAC globally

Configuring IRB interface

(config)#interface irb400

Create IRB interface irb100

(config-irb-if)# ip vrf forwarding vrf400

Map L3 VRF to the IRB interface

(config-irb-if)# ip address 40.40.1.1/24 anycast

Assign IP address

(config-irb-if)# ipv6 address 5001::1/48

Assign IPv6 address

(config-irb-if)# evpn irb-if-forwarding anycast-gateway-mac

Map anycast gateway MAC

(config-irb-if)#exit

Exit interface mode

Creating EVPN MPLS ID

(config)#evpn mpls vtep-ip-global 22.22.22.22

Configure VTEP global IP

(config)#evpn mpls id 400

Create EVPN MPLS ID

(config-evpn-mpls)# host-reachability-protocol evpn-bgp green

Map the MAC VRF mvrf4

(config-evpn-mpls)# evpn irb irb400

Map the IRB interface

(config-evpn-mpls)# evpn irb-advertise-host-route

Set host to route advertise

(config-evpn-mpls)#exit

Exit the EVPN MPLS mode

Global LDP

(config)#router ldp

Enter the Router LDP mode.

(config-router)# router-id 22.22.22.22

Set router ID of LDP

(config-router)# targeted-peer ipv4 17.17.17.17

Configure targeted peer

(config-router)# targeted-peer ipv4 11.11.11.11

Configure targeted peer

(config-router-targeted-peer)# exit

Exit from targeted-peer mode

(config-router)# transport-address ipv4 22.22.22.22

Configure LDP transport address

(config-router)#exit

Exit from LDP mode

Interface Configuration Network Side

(config)#interface xe19

Configure physical interface

(config-if)# mtu 9216

Configure MTU on the interface.

(config-if)# load-interval 30

Set load interval

(config-if)# ip address 30.30.30.1/24

Assign IP address

(config-if)# label-switching

Enable label switching

(config-if)# isis network point-to-point

Configure isis as point-to-point network

(config-if)# enable-ldp ipv4

Enable LDP IPv4

(config-if)# ip router isis ISIS-IGP

Enable a routing process

(config-if)#exit

Exit interface mode

(config-if)# router isis ISIS-IGP

Enter the Router ISIS mode.

(config-router)# is-type level-1

IS Level for this routing process

(config-router)# mpls traffic-eng router-id 22.22.22.22

routing protocol commands for MPLS Traffic Engineering

(config-router)# net 49.0001.0000.0000.0006.00

Configure net

(config-router)#exit

Exit OSPF mode

BGP Configuration

(config)#router bgp

Enter the Router BGP mode, ASN: 100

(config-router)# neighbor 11.11.11.11 remote-as 65010

Configuring PE3 as I-BGP neighbor using it's loopback IP

(config-router)# neighbor 11.11.11.11 update-source lo

Source of routing updates as loopback

(config-router)# neighbor 20.20.20.20 remote-as 65010

Configuring PE2 as I-BGP neighbor using it's loopback IP

(config-router)# neighbor 20.20.20.20 update-source lo

Source of routing updates as loopback

(config-router)# neighbor 17.17.17.17 remote-as 65010

Configuring PE3 as I-BGP neighbor using it's loopback IP

(config-router)# neighbor 17.17.17.17 update-source lo

Source of routing updates as loopback

(config-router)# address-family l2vpn evpn

Entering into address family mode as EVPN

(config-router-af)# neighbor 11.11.11.11 activate

Enabling EVPN Address family for neighbor

(config-router-af)# neighbor 22.22.22.22 activate

Enabling EVPN Address family for neighbor

(config-router-af)# neighbor 17.17.17.17 activate

Enabling EVPN Address family for neighbor

(config-router-af)# exit-address-family

Exiting of Address family mode

(config-router)# address-family ipv4 vrf vrf400

Entering into VRF address family mode

(config-router-af)# redistribute connected

Redistribute connected routes to the network

(config-router-af)# exit-address-family

Exiting of Address family mode

Access Port Configuration

(config)# interface xe12.400 switchport

Configure static sub-interface

(config-if)# encapsulation dot1q 400

Configure encapsulation

(config-ig)# rewrite pop

Pop the outer VID

(config-if)# access-if-evpn

Entering Access mode for EVPN MPLS ID configuration

(config-acc-if-evpn)# map vpn-id 400

Map VPN-ID 400

(config-acc-if-evpn)# mac 0000.0000.aabb ip 40.40.1.20

Configure static mac with IP

(config-acc-if-evpn)# mac 0000.0000.bbaa ipv6 5001::20

Configure static mac with IPv6

(config-acc-if-evpn)#exit

Exiting out of access interface mode

P1

Loopback Interface

#configure terminal

Enter configuration mode.

(config-if)#interface lo

Enter the Interface mode for the loopback interface.

(config-if)# ip address 24.24.24.24/32 secondary

Configure IP address on loopback interface.

(config-if)#exit

Exit interface mode

Global LDP

(config)#router ldp

Enter the Router LDP mode.

(config-router)# router-id 24.24.24.24

Configure router id

(config-router)# transport-address ipv4 24.24.24.24

Configure transport address

Interface Configuration

(config)#interface xe2

Configure physical interface

(config-if)# mtu 9216

Configure MTU on the interface.

(config-if)# load-interval 30

Set load interval

(config-if)# ip address 30.30.30.2/24

Assign IP address

(config-if)# label-switching

Enable label switching

(config-if)# isis network point-to-point

Configure isis as point-to-point network

(config-if)# enable-ldp ipv4

Enable LDP IPv4

(config-if)#exit

Exit interface mode

(config)#interface xe18

Configure physical interface

(config-if)# mtu 9216

Configure MTU on the interface.

(config-if)# load-interval 30

Set load interval

(config-if)# ip address 55.55.55.2/24

Assign IP address

(config-if)# label-switching

Enable label switching

(config-if)# isis network point-to-point

Configure isis as point-to-point network

(config-if)# enable-ldp ipv4

Enable LDP IPv4

(config-if)#exit

Exit interface mode

(config)#interface xe40

Configure physical interface

(config-if)# mtu 9216

Configure MTU on the interface.

(config-if)# load-interval 30

Set load interval

(config-if)# ip address 76.76.76.2/24

Enter interface mode xe40

(config-if)# label-switching

Set label switching

(config-if)# isis network point-to-point

Set routing protocol isis

(config-if)# enable-ldp ipv4

Enable ldp

(config-if)#exit

Exit interface mode

(config-if)# mtu 1522

Configure MTU on the interface.

(config-if)#exit

Exit interface mode.

(config)# interface xe11

Create po subinterface

(config-if)# ip address 60.60.60.2/24

Assign IP address

(config-if)# mtu 9216

Configure MTU to the sub-if

(config-if)# label-switching

Enable label switching

(config-if)# enable-ldp ipv4

Enable LDP IPv4

(config-if)# isis network point-to-point

Set routing protocol isis

(config-if)#exit

Exit interface mode

ISIS Configuration

(config)#router isis ISIS-IGP

Enter the Router IsIs mode.

(config-router)# is-type level-1

IS Level for this routing process

(config-router)# mpls traffic-eng router-id 24.24.24.24

routing protocol commands for MPLS Traffic Engineering

(config-router)# net 49.0001.0000.0000.0003.00

Configure net

(config-router)#exit

Exit Router isis mode and return to Configure mode.

(config)#commit

Commit candidate configuration to be running configuration

PE3

Enable EVPN MPLS and IRB

#configure terminal

Enter configuration mode.

(config)#hardware-profile filter evpn-mpls-mh enable

Configure hardware profile to enable EVPN MPLS multi homing in hardware

(config)#evpn mpls enable

Enable EVPN MPLS globally

(config)#evpn mpls irb

Enable EVPN MPLS IRB globally

(config)#evpn mpls multihoming enable

Enable EVPN MPLS multihoming globally

Loopback Interface

(config-if)#interface lo

Enter the Interface mode for the loopback interface.

(config-if)# ip address 11.11.11.11/32 secondary

Configure IP address on loopback interface.

(config-if)#exit

Exit interface mode

Configure MAC VRF

(config-vrf)#mac vrf green

Create MAC VRF mvrf4.

(config-vrf)# rd 11.11.11.11:400

Configure route distinguisher

(config-vrf)# route-target both 65010:400

Configure route target as evpn auto-rt(we can configure as manual RT also)

(config-vrf)#exit

Exit VRF mode

Configure IP VRF

(config)#ip vrf vrf400

Configure IP VRF vrf100.

(config-vrf)# rd 20:400

Configure route distinguisher

(config-vrf)# route-target both 100:400

Configure route target

(config-vrf)# l3vni 40000

Configure L3 VNID for routing

(config-vrf)#exit

Exit VRF mode

Configure Anycast Gateway MAC

(config)#evpn irb-forwarding anycastgateway-

mac 0011.2233.4455

Configure anycast gateway MAC globally

(config)#interface irb500

Create IRB interface irb100

(config-irb-if)# ip vrf forwarding vrf400

Map L3 VRF to the IRB interface

(config-irb-if)# ip address 80.80.1.1/24 anycast

Assign IP address

(config-irb-if)# evpn irb-if-forwarding

anycast-gateway-mac

Map anycast gateway MAC

(config-irb-if)#exit

Exit interface mode

Creating EVPN MPLS ID

(config)#evpn mpls vtep-ip-global 11.11.11.11

Configure VTEP global IP

(config)#evpn mpls id 500

Create EVPN MPLS ID

(config-evpn-mpls)# host-reachability-protocol evpn-bgp green

Map the MAC VRF mvrf4

(config-evpn-mpls)# evpn irb irb500

Map the IRB interface

(config-evpn-mpls)#exit

Exit the EVPN MPLS mode

Global LDP

(config)#router ldp

Enter the Router LDP mode

(config-router)# transport-address ipv4

11.11.11.11

Configure LDP transport address

(config-router)#exit

Exit from LDP mode

Interface Configuration Network Side

(config-if)#interface xe27

Enter the Interface mode for eth10.

(config-if)# mtu 9216

Configure MTU.

(config-if)# enable-ldp ipv4

Enable LDP on the physical interface

(config-if)# ip address ip address 76.76.76.1/24

Assign IP address

(config-if)# mtu 1522

Configure MTU to the sub-if

(config-if)# label-switching

Enable label switching

(config-if)# isis network point-to-point

Configure isis as point-to-point network

(config-if)# router isis ISIS-IGP

Configure isis with ISIS-IGP area tag

(config-if)# exit

Exit interface mode

ISIS Configuration

(config)# router isis ISIS-IGP

Enter the Router ISIS mode.

(config-router)# is-type level-1

IS Level for this routing process

(config-router)# mpls traffic-eng router-id 11.11.11.11

Routing protocol commands for MPLS Traffic Engineering

(config-router)# net 49.0001.0000.0000.0005.00

Configure net

BGP Configuration

(config-router)# router bgp 65010

Enter the Router BGP mode, ASN: 65010

(config-router)# neighbor 20.20.20.20 remote-as 65010

Configuring PE1 as iBGP neighbor using it's loopback IP

(config-router)# neighbor 20.20.20.20 update-source

lo

Source of routing updates as loopback

(config-router)# neighbor 22.22.22.22 remote-as

65010

Configuring PE2 as iBGP neighbor using it's loopback IP

(config-router)# neighbor 22.22.22.22 update-source lo

lo

Source of routing updates as loopback

(config-router)# address-family l2vpn evpn

Entering into address family mode as EVPN

(config-router-af)# neighbor 20.20.20.20

activate

Enabling EVPN Address family for neighbor

(config-router-af)# neighbor 22.22.22.22

activate

Enabling EVPN Address family for neighbor

(config-router-af)# exit-address-family

Exiting of Address family mode

(config-router)# address-family ipv4 vrf

Vrf400

Entering into VRF address family mode

(config-router-af)# redistribute connected

Redistribute connected routes to the network

(config-router-af)# exit-address-family

Exiting of Address family mode

Access Port Configuration

(config)#interface po900

Create LAG interface po900

(config-if)# switchport

Configure as switchport

(config-if)# evpn multi-homed system-mac 0000.1111.aaaa

Configure system MAC for multi homing

(config)#interface po900.500 switchport

Creating L2 sub interface of physical interface xe28

(config-if)# encapsulation dot1q 500

Setting Encapsulation to dot1q with VLAN ID 500

(config-if)# access-if-evpn

Entering Access mode for EVPN MPLS ID configuration

(config-acc-if-evpn)# map vpn-id 500

Map VPN-ID 500

(config-acc-if-evpn)#exit

Exiting out of access interface mode

PE4

Enable EVPN MPLS and IRB

#configure terminal

Enter configuration mode.

(config)#hardware-profile filter evpn-mpls-mh enable

Configure hardware profile to enable EVPN MPLS multi

homing in hardware

(config)#evpn mpls enable

Enable EVPN MPLS globally

(config)#evpn mpls irb

Enable EVPN MPLS IRB globally

(config)#evpn mpls multihoming enable

Enable EVPN MPLS multihoming globally

Loopback Interface

(config-if)#interface lo

Enter the Interface mode for the loopback interface

(config-if)# ip address 17.17.17/32 secondary

Configure IP address on loopback interface.

(config-if)#exit

Exit interface mode

Configure MAC VRF

(config-vrf)#mac vrf green

Create MAC VRF mvrf4.

(config-vrf)# rd 17.17.17.17:400

Configure route distinguisher

(config-vrf)# route-target both 65010:400

Configure route target as evpn auto-rt (we can configure as

manual RT also)

(config-vrf)#exit

Exit VRF mode

Configure IP VRF

(config)#ip vrf vrf400

Configure IP VRF vrf100.

(config-vrf)# rd 10:400

Configure route distinguisher

(config-vrf)# route-target both 100:400

Configure route target

(config-vrf)# l3vni 40000

Configure L3 VNID for routing

(config-vrf)#exit

Exit VRF mode

Configure Anyc ast Gateway MAC

(config)#evpn irb-forwarding anycast-gateway-mac 0011.2233.5577

Configure anycast gateway MAC globally

Configuring IRB interface

(config)#interface irb500

Create IRB interface irb100

(config-irb-if)# ip vrf forwarding vrf400

Map L3 VRF to the IRB interface

(config-irb-if)# ip address 80.80.1.1/24 anycast

Assign IP address

(config-irb-if)# evpn irb-if-forwarding

anycast-gateway-mac

Map anycast gateway MAC

(config-irb-if)#exit

Exit interface mode

Creating EVPN MPLS ID

(config)#evpn mpls vtep-ip-global 17.17.17.17

Configure VTEP global IP

(config)#evpn mpls id 500

Create EVPN MPLS ID

(config-evpn-mpls)# host-reachability-protocol evpn-bgp green

Map the MAC VRF green

(config-evpn-mpls)# evpn irb irb500

Map the IRB interface

(config-evpn-mpls)#exit

Exit the EVPN MPLS mode

Global LDP

(config)#router ldp

Enter the Router LDP mode.

(config-router)#router-id 17.17.17.17

Configure lo under ldp

(config-router)#targeted-peer ipv4 20.20.20.20

Configure targeted peer

(config-router-targeted-peer)# exit-targeted-peer-mode

Exit target peer mode

(config-router)# targeted-peer ipv4 22.22.22.22

Configure targeted peer

(config-router-targeted-peer)# exit-targeted-peer-mode

Exit target peer mode

(config-router)# transport-address ipv4

17.17.17.17

Configure LDP transport address

(config-router)#exit

Exit from LDP mode

Interface Configuration Network Side

(config-if)#interface xe2

Configure physical interface

(config-if)# ip address 60.60.60.1/24

Assign IP address

(config-if)# mtu 9216

Configure MTU to the sub-if

(config-if)# label-switching

Enable label switching

(config-if)# isis network point-to-point

Configure ISIS as point-to-point network

(config-if)# ip router isis ISIS-IGP

Configure ISIS with area tag ISIS-IGP

(config-if)# enable-ldp ipv4

Enable LDP IPv4

(config-if)#exit

Exit interface mode

ISIS Configuration

(config)# router isis ISIS-IGP

Enter the Router OSPF mode.

(config-router)# is-type level-1

Configure routing ISIS level

(config-router)# mpls traffic-eng router-id 17.17.17.17

Routing protocol commands for MPLS Traffic Engineering.

(config-router)# net 49.0001.0000.0000.0004.00

Configure net

BGP Configuration

(config)#router bgp 65010

Enter the Router BGP mode, ASN: 100

(config-router)# bgp router-id 17.17.17.17

 

(config-router)# neighbor 20.20.20.20 remote-as 65010

Configuring PE3 as iBGP neighbor using it's loopback IP

(config-router)# neighbor 20.20.20.20 update-source lo

Source of routing updates as loopback

(config-router)# neighbor 22.22.22.22 remote-as 65010

Configuring PE3 as iBGP neighbor using it's loopback IP

(config-router)# neighbor 22.22.22.21 update-source lo

Source of routing updates as loopback

(config-router)# address-family l2vpn evpn

Entering into address family mode as EVPN

(config-router-af)# neighbor 20.20.20.20

activate

Enabling EVPN Address family for neighbor

(config-router-af)# neighbor 22.22.22.22

activate

Enabling EVPN Address family for neighbor

(config-router-af)# exit-address-family

Exiting of Address family mode

(config-router)# address-family ipv4 vrf

Vrf500

Entering into VRF address family mode

(config-router-af)# redistribute connected

Redistribute connected routes to the network

(config-router-af)# exit-address-family

Exiting of Address family mode

Access Port Configuration

(config)#interface po900

Create LAG interface po1

(config-if)# switchport

Configure as switchport

(config-if)# evpn multi-homed system-mac

0000.0000.1111

Configure system MAC for multi homing

(config)#interface po900.500 switchport

Creating L2 sub interface of physical interface xe9

(config-if)# encapsulation dot1q 500

Setting Encapsulation to dot1q with VLAN ID 500

(config-if)# access-if-evpn

Entering Access mode for EVPN MPLS ID configuration

(config-acc-if-evpn)# map vpn-id 500

Map VPN-ID 500

(config-acc-if-evpn)#exit

Exiting out of access interface mode

Validation

PE1

Copy 
PE1-7020#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source           Destination      Status        Up/Down       Update        evpn-id
===================================================================================
20.20.20.20      17.17.17.17      Installed     17:04:56      17:04:56      701
20.20.20.20      17.17.17.17      Installed     17:04:56      17:04:56      700
20.20.20.20      17.17.17.17      Installed     17:04:56      17:04:56      600
20.20.20.20      17.17.17.17      Installed     21:39:09      21:39:09      40000
20.20.20.20      22.22.22.22      Installed     21:39:09      21:39:09      40000
20.20.20.20      22.22.22.22      Installed     13:59:58      13:59:58      400
20.20.20.20      11.11.11.11      Installed     17:04:56      17:04:56      701
20.20.20.20      11.11.11.11      Installed     17:04:56      17:04:56      700
20.20.20.20      11.11.11.11      Installed     17:04:56      17:04:56      600
20.20.20.20      11.11.11.11      Installed     17:04:56      17:04:56      400
20.20.20.20      11.11.11.11      Installed     21:39:09      21:39:09      40000
 
Total number of entries are 11
PE1-7020#show evpn mpls mac-table
=========================================================================================================================================
                                                     EVPN MPLS MAC Entries
=========================================================================================================================================
VNID       Interface VlanId    In-VlanId Mac-Addr       VTEP-Ip/ESI                    Type            Status     MAC move AccessPortDesc
_________________________________________________________________________________________________________________________________________
 
400        irb400    ----      ----      0011.2233.5577 20.20.20.20                    Static Local    -------    0        -------
400        sa10000.400 ----      ----      0000.0000.aaaa 20.20.20.20                    Static Local    -------    0        -------
400        sa10000.400 ----      ----      0000.0000.bbbb 20.20.20.20                    Static Local    -------    0        -------
 
Total number of entries are: 3
PE1-7020#show evpn mpls arp-cache
MPLS-EVPN ARP-CACHE Information
===============================
EVPN-ID   Ip-Addr          Mac-Addr        Type        Age-Out   Retries-Left
_____________________________________________________________________________
400      40.40.1.1        0011.2233.5577 Static Local   ----
400      40.40.1.10       0000.0000.aaaa Static Local   ----
Total number of entries are 2
PE1-7020#show evpn mpls nd-cache
MPLS-EVPN ND-CACHE Information
==============================
EVPN-ID  Ip-Addr                        Mac-Addr          Type         Age-Out   Retries-Left
_____________________________________________________________________________________________
400      5001::1                        0011.2233.5577 Static Local     ----
400      5001:aaaa::1                   0000.0000.bbbb Static Local     ----
Total number of entries are 2
PE1-7020#show bgp l2vpn evpn multihoming ethernet-ad-per-es
 
RD[11.11.11.11:64512]
ESI                            Eth-Tag     VNID/LABEL     Nexthop IP      Encap
00:00:00:11:11:aa:aa:00:00:00  4294967295  38             11.11.11.11     MPLS
 
RD[17.17.17.17:64512]
ESI                            Eth-Tag     VNID/LABEL     Nexthop IP      Encap
00:00:00:11:11:aa:aa:00:00:00  4294967295  37             17.17.17.17     MPLS

PE2

Copy 
PE2-7022#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source           Destination      Status        Up/Down       Update        evpn-id
===================================================================================
22.22.22.22      11.11.11.11      Installed     14:21:58      14:21:58      400
22.22.22.22      11.11.11.11      Installed     19:56:30      19:56:30      40000
22.22.22.22      17.17.17.17      Installed     19:56:30      19:56:30      40000
22.22.22.22      20.20.20.20      Installed     14:30:31      14:30:31      400
22.22.22.22      20.20.20.20      Installed     19:56:30      19:56:30      40000
 
Total number of entries are 5
PE2-7022#show evpn mpls mac-table
=========================================================================================================================================
                                                     EVPN MPLS MAC Entries
=========================================================================================================================================
VNID       Interface VlanId    In-VlanId Mac-Addr       VTEP-Ip/ESI                    Type            Status     MAC move AccessPortDesc
_________________________________________________________________________________________________________________________________________
 
400        irb400    ----      ----      0011.2233.5577 22.22.22.22                    Static Local    -------    0        -------
400        ----      ----      ----      0000.0000.aaaa 20.20.20.20                    Static Remote   -------    0        -------
400        ----      ----      ----      0000.0000.bbbb 20.20.20.20                    Static Remote   -------    0        -------
 
Total number of entries are : 3
PE2-7022#sh evpn mpls arp-cache
MPLS-EVPN ARP-CACHE Information
===============================
EVPN-ID   Ip-Addr          Mac-Addr        Type        Age-Out   Retries-Left
_____________________________________________________________________________
400      40.40.1.1        0011.2233.5577 Static Local   ----
400      40.40.1.10       0000.0000.aaaa Static Remote  ----
Total number of entries are 2
 
PE2-7022#sh evpn mpls nd-cache
MPLS-EVPN ND-CACHE Information
==============================
EVPN-ID  Ip-Addr                        Mac-Addr          Type         Age-Out   Retries-Left
_____________________________________________________________________________________________
400      5001::1                        0011.2233.5577 Static Local     ----
400      5001:aaaa::1                   0000.0000.bbbb Static Remote    ----
Total number of entries are 2
 
PE2-7022#show bgp l2vpn evpn multihoming ethernet-ad-per-es
 
RD[11.11.11.11:64512]
ESI                            Eth-Tag     VNID/LABEL     Nexthop IP      Encap
00:00:00:11:11:aa:aa:00:00:00  4294967295  38             11.11.11.11     MPLS
 
RD[17.17.17.17:64512]
ESI                            Eth-Tag     VNID/LABEL     Nexthop IP      Encap
00:00:00:11:11:aa:aa:00:00:00  4294967295  37             17.17.17.17     MPLS
 
PE2-7022#sh bgp l2vpn evpn
BGP table version is 11, local router ID is 22.22.22.22
Status codes: s suppressed, d damped, h history, a add-path, * valid, > best, i - internal,
              l - labeled, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
 
[EVPN route type]:[ESI]:[VNID]:[relevent route informantion]
1 - Ethernet Auto-discovery Route
2 - MAC/IP Route
3 - Inclusive Multicast Route
4 - Ethernet Segment Route
5 - Prefix Route
 
    Network          Next Hop            Metric    LocPrf       Weight     Path  Peer          Encap
 
RD[10:400]
*>i  [5]:[0]:[0]:[24]:[80.80.1.0]:[0.0.0.0]:[16]
                       17.17.17.17          0        100       0    ?  17.17.17.17     MPLS
 
RD[20:400]
*>i  [5]:[0]:[0]:[24]:[80.80.1.0]:[0.0.0.0]:[16]
                       11.11.11.11          0        100       0    ?  11.11.11.11     MPLS
 
RD[30:400]
*>i  [5]:[0]:[0]:[24]:[40.40.1.0]:[0.0.0.0]:[16]
                       20.20.20.20          0        100       0    ?  20.20.20.20     MPLS
 
RD[11.11.11.11:400]
*>i  [2]:[0]:[500]:[48,0011:2233:5577]:[32,80.80.1.1]:[18]
                       11.11.11.11          0        100       0    i  11.11.11.11     MPLS
*>i  [3]:[400]:[32,11.11.11.11]
                       11.11.11.11          0        100       0    i  11.11.11.11     MPLS
*>i  [3]:[500]:[32,11.11.11.11]
                       11.11.11.11          0        100       0    i  11.11.11.11     MPLS
 
RD[17.17.17.17:400]
*>i  [2]:[0]:[500]:[48,0011:2233:5577]:[32,80.80.1.1]:[17]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
*>i  [3]:[500]:[32,17.17.17.17]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
 
RD[17.17.17.17:600]
*>i  [1]:[00:00:00:11:11:aa:aa:00:00:00]:[600]:[18]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
*>i  [3]:[600]:[32,17.17.17.17]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
 
RD[20.20.20.20:400]
*>i  [2]:[0]:[400]:[48,0000:0000:aaaa]:[32,40.40.1.10]:[17]:[16]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>i  [2]:[0]:[400]:[48,0000:0000:bbbb]:[128,5001:aaaa::1]:[17]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>i  [2]:[0]:[400]:[48,0011:2233:5577]:[32,40.40.1.1]:[17]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>i  [2]:[0]:[400]:[48,0011:2233:5577]:[128,5001::1]:[17]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>i  [3]:[400]:[32,20.20.20.20]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
 
RD[20.20.20.20:600]
*>i  [3]:[600]:[32,20.20.20.20]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
 
RD[20.20.20.20:700]
*>i  [3]:[0]:[32,20.20.20.20]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
 
RD[20.20.20.20:701]
*>i  [2]:[0]:[701]:[48,0000:0000:2001]:[0]:[29]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>i  [2]:[0]:[701]:[48,0000:0000:2002]:[32,20.20.20.1]:[29]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>i  [2]:[0]:[701]:[48,0000:0000:2003]:[128,1204::1]:[29]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>i  [3]:[701]:[32,20.20.20.20]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
 
RD[22.22.22.22:400] VRF[green]:
* i  [2]:[0]:[400]:[48,0000:0000:aaaa]:[32,40.40.1.10]:[17]:[16]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
* i  [2]:[0]:[400]:[48,0000:0000:bbbb]:[128,5001:aaaa::1]:[17]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>   [2]:[0]:[400]:[48,0011:2233:5577]:[32,40.40.1.1]:[17]
                       22.22.22.22          0        100       32768  i  ----------      MPLS
* i                    20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>   [2]:[0]:[400]:[48,0011:2233:5577]:[128,5001::1]:[17]
                       22.22.22.22          0        100       32768  i  ----------      MPLS
* i                    20.20.20.20          0        100       0    i  20.20.20.20     MPLS
* i  [2]:[0]:[500]:[48,0011:2233:5577]:[32,80.80.1.1]:[18]
                       11.11.11.11          0        100       0    i  11.11.11.11     MPLS
* i                    17.17.17.17          0        100       0    i  17.17.17.17     MPLS
* i  [3]:[400]:[32,11.11.11.11]
                       11.11.11.11          0        100       0    i  11.11.11.11     MPLS
* i  [3]:[400]:[32,20.20.20.20]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>   [3]:[400]:[32,22.22.22.22]
                       22.22.22.22          0        100       32768  i  ----------      MPLS
* i  [3]:[500]:[32,11.11.11.11]
                       11.11.11.11          0        100       0    i  11.11.11.11     MPLS
* i  [3]:[500]:[32,17.17.17.17]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
 
Total number of prefixes 50

PE3

Copy 
PE3-7011#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source           Destination      Status        Up/Down       Update        evpn-id
===================================================================================
11.11.11.11      22.22.22.22      Installed     15:23:05      15:23:05      400
11.11.11.11      22.22.22.22      Installed     23:11:42      23:11:42      40000
11.11.11.11      17.17.17.17      Installed     18:36:34      18:36:34      500
11.11.11.11      17.17.17.17      Installed     23:11:42      23:11:42      40000
11.11.11.11      20.20.20.20      Installed     18:36:34      18:36:34      400
11.11.11.11      20.20.20.20      Installed     23:11:42      23:11:42      40000
 
PE3-7011#show evpn mpls mac-table
=========================================================================================================================================
                                                     EVPN MPLS MAC Entries
=========================================================================================================================================
VNID       Interface VlanId    In-VlanId Mac-Addr       VTEP-Ip/ESI                    Type            Status     MAC move AccessPortDesc
_________________________________________________________________________________________________________________________________________
 
400        ----      ----      ----      0011.2233.5577 20.20.20.20                    Static Remote   -------    0        -------
400        ----      ----      ----      0000.0000.aaaa 20.20.20.20                    Static Remote   -------    0        -------
400        ----      ----      ----      0000.0000.bbbb 20.20.20.20                    Static Remote   -------    0        -------
500        irb500    ----      ----      0011.2233.5577 11.11.11.11                    Static Local    -------    0        -------
 
PE3-7011#show evpn mpls arp-cache
MPLS-EVPN ARP-CACHE Information
===============================
EVPN-ID   Ip-Addr          Mac-Addr        Type        Age-Out   Retries-Left
_____________________________________________________________________________
400      40.40.1.1        0011.2233.5577 Static Remote  ----
400      40.40.1.10       0000.0000.aaaa Static Remote  ----
500      80.80.1.1        0011.2233.5577 Static Local   ----
Total number of entries are 3
PE3-7011#show evpn mpls nd-cache
MPLS-EVPN ND-CACHE Information
==============================
EVPN-ID  Ip-Addr                        Mac-Addr          Type         Age-Out   Retries-Left
_____________________________________________________________________________________________
400      5001::1                        0011.2233.5577 Static Remote    ----
400      5001:aaaa::1                   0000.0000.bbbb Static Remote    ----
Total number of entries are 2
 
PE3-7011#show bgp l2vpn evpn multihoming ethernet-ad-per-es
 
 
RD[11.11.11.11:64512] VRF[evpn-gvrf-1]:
ESI                            Eth-Tag     VNID/LABEL     Nexthop IP      Encap
00:00:00:11:11:aa:aa:00:00:00  4294967295  38             11.11.11.11     MPLS
 
RD[17.17.17.17:64512]
ESI                            Eth-Tag     VNID/LABEL     Nexthop IP      Encap
00:00:00:11:11:aa:aa:00:00:00  4294967295  37             17.17.17.17     MPLS
PE3-7011#sh bgp l2vpn evpn
BGP table version is 8, local router ID is 11.11.11.11
Status codes: s suppressed, d damped, h history, a add-path, * valid, > best, i - internal,
              l - labeled, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
 
[EVPN route type]:[ESI]:[VNID]:[relevent route informantion]
1 - Ethernet Auto-discovery Route
2 - MAC/IP Route
3 - Inclusive Multicast Route
4 - Ethernet Segment Route
5 - Prefix Route
 
    Network          Next Hop            Metric    LocPrf       Weight     Path  Peer          Encap
 
RD[10:400]
*>i  [5]:[0]:[0]:[24]:[80.80.1.0]:[0.0.0.0]:[16]
                       17.17.17.17          0        100       0    ?  17.17.17.17     MPLS
 
RD[30:400]
*>i  [5]:[0]:[0]:[24]:[40.40.1.0]:[0.0.0.0]:[16]
                       20.20.20.20          0        100       0    ?  20.20.20.20     MPLS
 
RD[40:400]
*>i  [5]:[0]:[0]:[24]:[40.40.1.0]:[0.0.0.0]:[16]
                       22.22.22.22          0        100       0    ?  22.22.22.22     MPLS
 
RD[11.11.11.11:400] VRF[green]:
* i  [2]:[0]:[400]:[48,0000:0000:aaaa]:[32,40.40.1.10]:[17]:[16]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
* i  [2]:[0]:[400]:[48,0000:0000:bbbb]:[128,5001:aaaa::1]:[17]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
* i  [2]:[0]:[400]:[48,0011:2233:5577]:[32,40.40.1.1]:[17]
                       22.22.22.22          0        100       0    i  22.22.22.22     MPLS
* i                    20.20.20.20          0        100       0    i  20.20.20.20     MPLS
* i  [2]:[0]:[400]:[48,0011:2233:5577]:[128,5001::1]:[17]
                       22.22.22.22          0        100       0    i  22.22.22.22     MPLS
* i                    20.20.20.20          0        100       0    i  20.20.20.20     MPLS
* i  [2]:[0]:[500]:[48,0011:2233:5577]:[32,80.80.1.1]:[17]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
*>                     11.11.11.11          0        100       32768  i  ----------      MPLS
*>   [3]:[400]:[32,11.11.11.11]
                       11.11.11.11          0        100       32768  i  ----------      MPLS
* i  [3]:[400]:[32,20.20.20.20]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
* i  [3]:[400]:[32,22.22.22.22]
                       22.22.22.22          0        100       0    i  22.22.22.22     MPLS
*>   [3]:[500]:[32,11.11.11.11]
                       11.11.11.11          0        100       32768  i  ----------      MPLS
* i  [3]:[500]:[32,17.17.17.17]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
 
 
RD[11.11.11.11:64512] VRF[evpn-gvrf-1]:
*>   [1]:[00:00:00:11:11:aa:aa:00:00:00]:[4294967295]:[0]
                       11.11.11.11          0        100       32768  i  ----------      MPLS
*>   [4]:[00:00:00:11:11:aa:aa:00:00:00]:[32,11.11.11.11]
                       11.11.11.11          0        100       32768  i  ----------      MPLS
* i  [4]:[00:00:00:11:11:aa:aa:00:00:00]:[32,17.17.17.17]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
 
RD[17.17.17.17:400]
*>i  [2]:[0]:[500]:[48,0011:2233:5577]:[32,80.80.1.1]:[17]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
*>i  [3]:[500]:[32,17.17.17.17]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
 
 
RD[17.17.17.17:64512]
*>i  [1]:[00:00:00:11:11:aa:aa:00:00:00]:[4294967295]:[0]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
*>i  [4]:[00:00:00:11:11:aa:aa:00:00:00]:[32,17.17.17.17]
                       17.17.17.17          0        100       0    i  17.17.17.17     MPLS
 
RD[20.20.20.20:400]
*>i  [2]:[0]:[400]:[48,0000:0000:aaaa]:[32,40.40.1.10]:[17]:[16]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>i  [2]:[0]:[400]:[48,0000:0000:bbbb]:[128,5001:aaaa::1]:[17]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>i  [2]:[0]:[400]:[48,0011:2233:5577]:[32,40.40.1.1]:[17]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>i  [2]:[0]:[400]:[48,0011:2233:5577]:[128,5001::1]:[17]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
*>i  [3]:[400]:[32,20.20.20.20]
                       20.20.20.20          0        100       0    i  20.20.20.20     MPLS
 
RD[22.22.22.22:400]
*>i  [2]:[0]:[400]:[48,0011:2233:5577]:[32,40.40.1.1]:[17]
                       22.22.22.22          0        100       0    i  22.22.22.22     MPLS
*>i  [2]:[0]:[400]:[48,0011:2233:5577]:[128,5001::1]:[17]
                       22.22.22.22          0        100       0    i  22.22.22.22     MPLS
*>i  [3]:[400]:[32,22.22.22.22]
                       22.22.22.22          0        100       0    i  22.22.22.22     MPLS

PE4

Copy 
PE4-7017#show evpn mpls tunnel
EVPN-MPLS Network tunnel Entries
Source           Destination      Status        Up/Down       Update        evpn-id
===================================================================================
17.17.17.17      22.22.22.22      Installed     1d00h04m      1d00h04m      40000
17.17.17.17      11.11.11.11      Installed     00:20:45      00:20:45      500
17.17.17.17      11.11.11.11      Installed     1d00h04m      1d00h04m      40000
17.17.17.17      20.20.20.20      Installed     1d00h04m      1d00h04m      40000
 
PE4-7017#show evpn mpls arp-cache
MPLS-EVPN ARP-CACHE Information
===============================
EVPN-ID   Ip-Addr          Mac-Addr        Type        Age-Out   Retries-Left
_____________________________________________________________________________
500      80.80.1.1        0011.2233.5577 Static Local   ----
Total number of entries are 1