Configure Advertise Network and Static-Network on Tenant VRF

You can configure “network” and “static-network” attributes (to be advertised by BGP) on a tenant VRF (and device) when you create and update VRF. EFA provisions the “network” and “static-network” attributes on switches when you initiate or update VRF the switches.

EFA supports only static-network with IPv4.

Procedure

To configure “network” and “static-network” when you create a tenant VRF, run the following commands:

When you create L3 EPG or transition L2 EPG to L3 EPG, VRF gets instantiated on the switches based on the endpoints present in the EPG.

efa tenant vrf create --name <vrf-name> --tenant <tenant-name> 

                 --ipv4-network <device-ip,network> --ipv4-network-backdoor < device-ip,network,true|false> 
                 --ipv4-network-weight <device-ip,network,0-65535> --ipv4-network-route-map <device-ip,network,route-map>

                 --ipv4-static-network <device-ip,static-network> --ipv4-static-network-distance <device-ip,static-network,1-255>

                 --ipv6-network <device-ip,network> --ipv6-network-backdoor <device-ip,network,true|false> 
                 --ipv6-network-weight <device-ip,network,0-65535> --ipv6-network-route-map <device-ip,network,route-map>

To configure “network” and “static-network” when you update a tenant VRF, run the following commands:

When you trigger VRF update operation, VRF gets updated on the switches based on the endpoints present in the EPGs using the VRF.

efa tenant vrf update --name <vrf-name> --tenant <tenant-name> 

                 --operation network-add|network-delete|static-network-add|static-network-delete

                 --ipv4-network <device-ip,network> --ipv4-network-backdoor < device-ip,network,true|false> 
                 --ipv4-network-weight <device-ip,network,0-65535> --ipv4-network-route-map <device-ip,network,route-map>

                 --ipv4-static-network <device-ip,static-network> --ipv4-static-network-distance <device-ip,static-network,1-255>

                 --ipv6-network <device-ip,network> --ipv6-network-backdoor <device-ip,network,true|false> 
                 --ipv6-network-weight <device-ip,network,0-65535> --ipv6-network-route-map <device-ip,network,route-map>

Example

efa tenant vrf create --name vrf1 --tenant tenant1
           --ipv4-network 10.24.80.134,10.20.30.40/30 
           --ipv4-network 10.24.80.134,10.21.30.40/30 --ipv4-network-backdoor 10.24.80.134,10.21.30.40/30,true

           --ipv4-static-network 10.24.80.134,11.10.30.40/30 
           --ipv4-static-network 10.24.80.134,11.20.30.40/30 --ipv4-static-network-distance 10.24.80.134,11.20.30.40/30,169

           --ipv6-network 10.24.80.135,11::22/128 
           --ipv6-network 10.24.80.135,11::23/128 --ipv6-network-backdoor 10.24.80.134,11::23/128,true 
           --ipv6-network 10.24.80.135,11::24/128 --ipv6-network-weight 10.24.80.134,11::24/128,144 
           --ipv6-network 10.24.80.135,11::25/128 --ipv6-network-route-map 10.24.80.134,11::25/128,rmap1

efa tenant epg create --name ten1epg1 --tenant tenant1
           --port 10.24.80.134[0/11],10.24.80.135[0/11]
           --switchport-mode trunk –ctag-range 11 --vrf vrf1 –anycast-ip 11:10.10.11.1/24

efa tenant vrf update –-name vrf1 –-tenant tenant1
           --operation network-add
           --ipv4-network 10.24.80.134,10.22.30.40/30 --ipv4-network-weight 10.24.80.134,10.22.30.40/30,144
           --ipv4-network 10.24.80.134,10.23.30.40/30 --ipv4-network-route-map 10.24.80.134,10.23.30.40/30,rmap1

Verify the switch configuration on the SLX device.

Rack1-Device1# sh run router bgp address-family ipv4 unicast vrf vrf1

router bgp
  address-family ipv4 unicast vrf vrf1
    redistribute connected
    static-network 11.10.30.40/30
    static-network 11.20.30.40/30 distance 169
    network 10.20.30.40/30
    network 10.21.30.40/30 backdoor
    network 10.22.30.40/30 weight 144
    network 10.23.30.40/30 route-map rmap1
  !
  address-family ipv6 unicast vrf vrf1
    redistribute connected
  !
!

Rack1-Device2# sh run router bgp address-family ipv4 unicast vrf vrf1

router bgp
  address-family ipv4 unicast vrf vrf1
    redistribute connected
  !
  address-family ipv6 unicast vrf vrf1
    redistribute connected
    network 11::22/128
    network 11::23/128 backdoor
    network 11::24/128 weight 144
    network 11::25/128 route-map rmap1
  !
!