efa tenant vrf create

Creates a tenant VRF.

Syntax

Parameters

--name vrf-name

Specifies the name of the VRF.

--tenant tenant-name

Specifies the name of the tenant.

--rt-type both | import | export

Specifies the route's target VPN community. Valid values are both, import, or export. The default is an empty string array.

--rt value

Specifies the unique number for forming the Route Target and the Route Distinguisher.

--ipv4-static-route-next-hop route

Specifies the IPv4 static route next hop. Valid values for the route distance are 1 through 254.

Format: device IP, IPv4 static route network, next hop IP, and route distance separated by commas.

Example: 10.25.25.100,20.0.0.0/24,16.0.0.2,3.

--local-asn local-asn

Specifies the local ASN for the VRF.

--ipv4-static-route-bfd route

Specifies the IPv4 static route BFD.

Format: device IP, destination IPv4 address, source IPv4 address[interval,min-rx,multiplier]

Example: 10.25.25.100,1.1.1.1,2.2.2.2,123,456,3

--ipv6-static-route-bfd route

Specifies the IPv6 static route BFD.

Format: device-ip,dest-ipv6-addr,source-ipv6-addr[interval,min-rx,multiplier].

Example: 10.25.25.100,1::1,2::2,300,300,3

--ipv6-static-route-next-hop route

Specifies the IPv4 static route next hop in the following format: device IP, IPv6 static route network, next hop IP, and route distance separated by commas. For example: 10.25.25.100,2001:1::/64,3001::2,3. Valid values for the route distance are 1 through 254.

--max-path unit

Specifies the number of load-sharing paths for the VRF. Valid values are 1 through 64.

--redistribute static | connected

Specifies the redistribute type for routes. Valid values are static or connected. The default is an empty string array.

--rh-max-path 8 | 16 | 64

Specifies the maximum number of resilient hashing paths allowed per tenant VRF. Valid values are 8, 16, or 64. The default is 0 and unless you specify it, it is not set.

--rh-ecmp-enable true | false

Turns on or turns off resilient hashing for a tenant VRF. Valid values are true or false. The default value is false.

--graceful-restart-enable true | false

Turns on or turns off graceful restart for a tenant VRF. Valid values are true or false. The default value is false.

--routing-type distributed | centralized

VRF routing type. Valid values are distributed or centralized. The default value is distributed.

--centralized-routerstring

Comma-separated list of border-leaf IP addresses.

Example: 10.10.1.1,10.10.1.2 | 10.10.1.1-2

--ipv4-network network

Specified IPv4 network address for BGP to advertise.

Format:device-ip,network-address

Example: 10.24.80.134,10.20.30.0/30

--ipv4-network-backdoor stringArray

Increases the administrative distance of eBGP so that IGP learned routes are preferred for the specified network address. Disabled, by default.

Format: device-ip,network-address,flag

Example: 10.24.80.134,10.21.30.0/30,true

--ipv4-network-weight weight

Weight to use to set the BGP weight attribute for the given network address.

Format: device-ip,network-address,weight

Example: 10.24.80.134,10.22.30.0/30,144

--ipv4-network-route-map route-map

Route map to use to set the BGP attributes for the given network address, such as MED.

Format: device-ip,network-address,rm

Example: 10.24.80.134,10.23.30.0/30,rmap1

--ipv6-network stringArray

BGP advertises given network address.

Format: device-ip,network-address

Example: --ipv6-network 10.24.80.134,11::/128

--ipv6-network-backdoor stringArray

Increases the administrative distance of eBGP with the goal of making IGP learned routes preferred for the given network address.

Format: device-ip,network-address

Example: --ipv6-network 10.24.80.134,11::/128

--ipv6-network-weight stringArray

Given weight is used to set the BGP weight attribute for the given network address.

Format: device-ip,network-address,weight.

Example: --ipv6-network-weight 10.24.80.134,11::/128,144

--ipv6-network-route-map stringArray

Given route map is used to set the BGP attributes for the given network address like MED.

Format: device-ip,network-address,rm.

Example: --ipv6-network-route-map 10.24.80.134,11::/128,rmap1.

--ipv4-static-network stringArray

IPv4 Static Network to be configured on the device.

Format: Device IP, IPv4 Static Network

Example: 10.24.80.134,11.10.30.40/30

--ipv4-static-network-distance stringArray

IPv4 Static Network with distance to be configured on the device. Valid values are 1 through 255.

Format: Device IP, IPv4 Static Network, Distance

Example: 10.24.80.134,11.10.30.40/30,169

--ipv4-aggregate-advertise-map stringArray

Route map name used to filter the BGP attributes to be advertised as part of aggregate-address.

Format: device-ip,ipv4-aggregate-address,ipv4-aggregate-advertise-map

Example: 10.25.25.100,10.20.21.40/30,routeMap1

--ipv6-aggregate-advertise-map stringArray

Route map name used to filter the BGP attributes to be advertised as part of aggregate-address.

Format: device-ip,ipv6-aggregate-address,ipv6-aggregate-advertise-map.

Example: 10.25.25.100,10::20/126,routeMap1.

--ipv4-aggregate-suppress-map stringArray

Route map name used to suppress the specific routes to be advertised along with the aggregate-address advertisement.

Format: device-ip,ipv4-aggregate-address,ipv4-aggregate-suppress-map

Example: 10.25.25.100,10.20.21.40/30,routeMap1

--ipv4-aggregate-as-set stringArray

Enable to set autonomous system set path information as part of aggregate-address advertisement.

Format: device-ip,ipv4-aggregate-address,ipv4-aggregate-as-set

Example: 10.25.25.100,10.20.21.40/30,true

--ipv6-aggregate-as-set stringArray

Enable to set AS set path information as part of aggregate-address advertisement.

Format: device-ip,ipv6-aggregate-address,ipv6-aggregate-as-set.

Example: 10.25.25.100,10::20/126,true.

--ipv4-aggregate-summary-only stringArray

Enable to advertise only aggregated-address.

Format: device-ip,ipv4-aggregate-address,ipv4-aggregate-summary-only

Example: 10.25.25.100,10.20.21.40/30,true

--ipv6-aggregate-summary-only stringArray

Enable to advertise only aggregated-address.

Format: device-ip,ipv6-aggregate-address,ipv6-aggregate-summary-only.

Example: 10.25.25.100,10::20/126,true.

--ipv4-aggregate-address stringArray

IPv4 aggregate address.

Format: device-ip,ipv4-aggregate-address

Example: 10.25.25.100,10.20.21.40/30

--ipv6-aggregate-address stringArray

IPv6 aggregate address.

Format: device-ip,ipv6-aggregate-address

Example: 10.25.25.100,10::20/126

--ipv6-aggregate-suppress-map stringArray

Route map name used to suppress the specific routes to be advertised along with the aggregate-address advertisement.

Format: device-ip,ipv6-aggregate-address,ipv6-aggregate-suppress-map.

Example: 10.25.25.100,10::20/126,routeMap1

Usage Guidelines

The max-path and rh-max-path parameters can co-exist.

You cannot choose the specific devices on which to configure resilient hashing. Configuration applies to all SLX devices in the tenant VRF.

Examples

This example creates a distributed VRF.

$ efa tenant vrf create --tenant tenant11 
--name blue11 --local-asn 65001 --rt-type import --rt 100:100 --rt-type export 
--rt 100:100 --rt-type import --rt 200:200 --rt-type export --rt 200:200 --rt-type import 
--rt 300:300 --rt-type export --rt 400:400 --max-path 50 --redistribute connected 
--redistribute static --ipv4-static-route-next-hop 10.20.216.16,192.168.0.0/24,10.10.10.1,5 
--ipv4-static-route-next-hop 10.20.216.15,192.168.10.0/24,10.10.10.5,5  
--ipv6-static-route-next-hop  10.20.216.16,2020:20::1/128,3001::2,6 
--ipv6-static-route-next-hop 10.20.216.15,2020:30::1/128,3001::3,5  
--ipv6-static-route-bfd 10.20.216.16,3001::3,3001::1,100,200,5 
--ipv6-static-route-bfd 10.20.216.16,3001::2,3001::1 
--ipv6-static-route-bfd 10.20.216.16,3001::4,3001::1,100,300,6 
--ipv4-static-route-bfd 10.20.216.15,10.10.10.1,10.10.10.254,200,300,6 
--ipv4-static-route-bfd 10.20.216.16,10.10.10.5,10.10.10.252 --rh-ecmp-enable 
--rh-max-path 16 --graceful-restart-enable --routing-type distributed

Vrf created successfully.

This example creates a centralized VRF.

$ efa tenant vrf create --name red13 
--tenant tenant21 --max-path 50 --redistribute connected --redistribute static 
--local-asn 65002 --ipv4-static-route-next-hop 10.20.216.104,192.168.0.0/24,10.10.10.1,5 
--ipv4-static-route-next-hop 10.20.216.104,192.168.10.0/24,10.10.10.5,5  
--ipv6-static-route-next-hop  10.20.216.104,2020:20::1/128,3001::2,6 
--ipv6-static-route-next-hop 10.20.216.104,2020:30::1/128,3001::3,5  
--ipv6-static-route-bfd 10.20.216.104,3001::3,3001::1,100,200,5 
--ipv6-static-route-bfd 10.20.216.104,3001::2,3001::1 
--ipv6-static-route-bfd 10.20.216.104,3001::4,3001::1,100,300,6 
--ipv4-static-route-bfd 10.20.216.104,10.10.10.1,10.10.10.254,200,300,6 
--ipv4-static-route-bfd 10.20.216.104,10.10.10.5,10.10.10.252 --rh-max-path 64 
--routing-type centralized --centralized-router 10.20.216.103,10.20.216.104

Vrf created successfully.

$ efa tenant vrf create --name vrf1 --tenant tenant1

           --ipv4-aggregate-address 10.24.80.134,10.20.21.40/30
           --ipv4-aggregate-summary-only 10.24.80.134,10.20.21.40/30,true
           --ipv4-aggregate-as-set 10.24.80.134,10.20.21.40/30,true 
           --ipv4-aggregate-advertise-map 10.24.80.134,10.20.21.40/30,some
           --ipv4-aggregate-suppress-map 10.24.80.134,10.20.21.40/30,some

           --ipv6-aggregate-address 10.24.80.135,10::20/126
           --ipv6-aggregate-summary-only 10.24.80.135,10::20/126,true
           --ipv6-aggregate-as-set 10.24.80.135,10::20/126,true 
           --ipv6-aggregate-advertise-map 10.24.80.135,10::20/126,some
           --ipv6-aggregate-suppress-map 10.24.80.135,10::20/126,some

$ efa tenant vrf create --name vrf1 --tenant tenant1
           --ipv4-network 10.24.80.134,10.20.30.40/30 
           --ipv4-network 10.24.80.134,10.21.30.40/30 
           --ipv4-network-backdoor 10.24.80.134,10.21.30.40/30,true

           --ipv4-static-network 10.24.80.134,11.10.30.40/30 
           --ipv4-static-network 10.24.80.134,11.20.30.40/30 
           --ipv4-static-network-distance 10.24.80.134,11.20.30.40/30,169

           --ipv6-network 10.24.80.135,11::22/128 
           --ipv6-network 10.24.80.135,11::23/128 
           --ipv6-network-backdoor 10.24.80.134,11::23/128,true 
           --ipv6-network 10.24.80.135,11::24/128 
           --ipv6-network-weight 10.24.80.134,11::24/128,144 
           --ipv6-network 10.24.80.135,11::25/128 
           --ipv6-network-route-map 10.24.80.134,11::25/128,rmap1