Configure EVPN IRB VE Cluster-gateway on a Tenant VRF

About this task

The layer3-extension is enabled by default for the Distributed VRF instantiated by EFA and you cannot disable it. The layer3-extension is disabled by default for the Centralized VRF instantiated by EFA and you cannot enable it.

When the layer3-extension is enabled, the following configurations are pushed by EFA:

EVPN IRB BD
EVPN IRB VE
Addition of the EVPN IRB BD to the EVPN instance
Addition of the EVPN IRB BD to the overlay-gateway instance
EVPN IRB VE configuration under the VRF

Procedure

Run the following command to configure EVPN IRB VE cluster-gateway on a distributed tenant VRF:

efa tenant vrf create --tenant <tenant-name> --name <vrf-name> 
                      --layer3-extension-enable {true | false}

efa tenant vrf create --tenant "t1" --name "v1" --routing-type "distributed" --rt-type import --rt 101:101 --rt-type export --rt 101:101 

efa tenant vrf show --name v1 --tenant t1 –detail
=====================================================================================
Name                        : v1
Tenant:                     : t1
Routing Type                : distributed
Centralized Routers         : 
Enable Layer3 Extension     : true
Redistribute                : connected
Max Path                    : 8
Local Asn                   : 
L3VNI                       : 
EVPN IRB BD                 : 
EVPN IRB VE                 : 
BR VNI                      : 
BR BD                       : 
BR VE                       : 
RH Max Path                 : 
Enable RH ECMP              : false
Enable Graceful Restart     : false
Route Target                : 
Static Route                :
Static Route BFD            :
Network Route Address       :
Static Network              :
Aggregate Address           :
VRF Type                    : 
State                       : vrf-created
Dev State                   : not-provisioned
App State                   : cfg-ready
=====================================================================================


efa tenant epg create --name epg1 --tenant t1 --switchport-mode trunk –port 10.20.246.15[0/1] --vrf v1 --switchport-native-vlan 10 --ctag-range 10 --anycast-ip 10:10.10.12.1/24


efa tenant vrf show --name v1 --tenant t1 –detail
=====================================================================================
Name                        : v1
Tenant                      : t1
Routing Type                : distributed
Centralized Routers         : 
Enable Layer3 Extension     : true
Redistribute                : connected
Max Path                    : 8
Local Asn                   : 
L3VNI                       : 10111
EVPN IRB BD                 : 4096
EVPN IRB VE                 : 8192
BR VNI                      : 10110
BR BD                       : 4095
BR VE                       : 8191
RH Max Path                 : 
Enable RH ECMP		 : false
Enable Graceful Restart     : false
Route Target                : import 101:101
                            : export 101:101
Static Route		   :
Static Route BFD            :
Network Route Address       :
Static Network		 :
Aggregate Address           :
VRF Type                    : 
State                       : vrf-device-created
Dev State                   : provisioned
App State                   : cfg-in-sync
====================================================================================

Verify the switch configuration on the SLX device.

Rack1-Device1# show running-config vrf v1 vrf v1 rd 172.31.254.19:1 evpn irb ve 8192 cluster-gateway address-family ipv4 unicast route-target export 101:101 evpn route-target import 101:101 evpn ! address-family ipv6 unicast route-target export 101:101 evpn route-target import 101:101 evpn ! !	Rack1-Device2# show running-config vrf v1 vrf v1 rd 172.31.254.20:1 evpn irb ve 8192 cluster-gateway address-family ipv4 unicast route-target export 101:101 evpn route-target import 101:101 evpn ! address-family ipv6 unicast route-target export 101:101 evpn route-target import 101:101 evpn ! !

Rack1-Device1# show running-config vrf v1
vrf v1
 rd 172.31.254.19:1
 evpn irb ve 8192 cluster-gateway
 address-family ipv4 unicast
  route-target export 101:101 evpn
  route-target import 101:101 evpn
 !
 address-family ipv6 unicast
  route-target export 101:101 evpn
  route-target import 101:101 evpn
 !
!

Rack1-Device2# show running-config vrf v1
vrf v1
 rd 172.31.254.20:1
 evpn irb ve 8192 cluster-gateway
 address-family ipv4 unicast
  route-target export 101:101 evpn
  route-target import 101:101 evpn
 !
 address-family ipv6 unicast
  route-target export 101:101 evpn
  route-target import 101:101 evpn
 !
!

Run the following command to configure EVPN IRB VE cluster-gateway on a centralized tenant VRF without layer3-extension.

efa tenant vrf create --tenant <tenant-name> --name <vrf-name> 
                      --layer3-extension-enable {true | false}
efa tenant vrf create --tenant "t1" --name "v2" --routing-type "centralized" 

efa tenant vrf show --name v2 --tenant t1 –detail
======================================================================================
Name                      : v2
Tenant                    : t1
Routing Type              : centralized
Centralized Routers       : 10.20.246.15
                          : 10.20.246.16
Enable Layer3 Extension   : false
Redistribute              : connected
Max Path                  : 8
Local Asn                 : 
L3VNI                     : 
EVPN IRB BD               : 
EVPN IRB VE               : 
BR VNI                    : 
BR BD                     : 
BR VE                     : 
RH Max Path               : 
Enable RH ECMP            : false
Enable Graceful Restart   : false
Route Target              : 
Static Route              :
Static Route BFD          :
Network Route Address     :
Static Network            :
Aggregate Address         :
VRF Type                  : 
State                     : vrf-created
Dev State                 : not-provisioned|
App State                 : cfg-ready
=====================================================================================

efa tenant epg create --name epg1 --tenant t1 --switchport-mode trunk –port 10.20.246.15[0/1] --vrf v2 --switchport-native-vlan 10 --ctag-range 10 --anycast-ip 10:10.10.12.1/24



efa tenant vrf show --name v2 --tenant t1 –detail
=====================================================================================
Name                       : v2
Tenant                     : t1
Routing Type               : centralized
Centralized Routers        : 10.20.246.15
                           : 10.20.246.16
Enable Layer3 Extension    : false
Redistribute               : connected
Max Path                   : 8
Local Asn                  : 
L3VNI                      : 
EVPN IRB BD                : 
EVPN IRB VE                : 
BR VNI                     : 10110
BR BD                      : 4096
BR VE                      : 8192
RH Max Path                : 
Enable RH ECMP             : false
Enable Graceful Restart    : false
Route Target               : import 101:101
                           : export 101:101
Static Route		  :
Static Route BFD           :
Network Route Address      :
Static Network		:
Aggregate Address          :
VRF Type                   : 
State                      : vrf-device-created
Dev State                  : provisioned
App State                  : cfg-in-sync
========================================================================================

Run the following command to configure EVPN IRB VE cluster-gateway on a centralized tenant VRF with layer3-extension.

efa tenant vrf create --tenant <tenant-name> --name <vrf-name> 
                      --layer3-extension-enable {true | false}
efa tenant vrf create --tenant "t1" --name "v3" --routing-type "centralized" –-layer3-extension-enable true

efa tenant vrf show --name v3 --tenant t1 –detail
======================================================================================
Name                      : v3
Tenant                    : t1
Routing Type              : centralized
Centralized Routers       : 10.20.246.15
                          : 10.20.246.16
Enable Layer3 Extension   : true
Redistribute              : connected
Max Path                  : 8
Local Asn                 : 
L3VNI                     : 
EVPN IRB BD               : 
EVPN IRB VE               : 
BR VNI                    : 
BR BD                     : 
BR VE                     : 
RH Max Path               : 
Enable RH ECMP            : false
Enable Graceful Restart   : false
Route Target              : 
Static Route              :
Static Route BFD          :
Network Route Address     :
Static Network            :
Aggregate Address         :
VRF Type                  : 
State                     : vrf-created
Dev State                 : not-provisioned
App State                 : cfg-ready
======================================================================================

efa tenant epg create --name epg1 --tenant t1 --switchport-mode trunk –port 10.20.246.15[0/1] --vrf v3 --switchport-native-vlan 10 --ctag-range 10 --anycast-ip 10:10.10.12.1/24


efa tenant vrf show --name v3 --tenant t1 –detail
=======================================================================================
Name                      : v3
Tenant                    : t1
Routing Type              : centralized
Centralized Routers       : 10.20.246.15
                          : 10.20.246.16
Enable Layer3 Extension   : true
Redistribute              : connected
Max Path                  : 8
Local Asn                 : 
L3VNI                     : 10111
EVPN IRB BD               : 4096
EVPN IRB VE               : 8192
BR VNI                    : 10110
BR BD                     : 4095
BR VE                     : 8191
RH Max Path               : 
Enable RH ECMP            : false
Enable Graceful Restart   : false
Route Target              : import 101:101
                          : export 101:101
Static Route              :
Static Route BFD          :
Network Route Address     :
Static Network            :
Aggregate Address         :
VRF Type                  : 
State                     : vrf-device-created
Dev State                 : provisioned
App State                 : cfg-in-sync
======================================================================================

Verify the switch configuration on the SLX device.

Rack1-Device1# show running-config vrf v3 vrf v2 rd 172.31.254.19:1 evpn irb ve 8192 cluster-gateway address-family ipv4 unicast route-target export 101:101 evpn route-target import 101:101 evpn ! address-family ipv6 unicast route-target export 101:101 evpn route-target import 101:101 evpn ! !	Rack1-Device2# show running-config vrf v3 vrf v2 rd 172.31.254.20:1 evpn irb ve 8192 cluster-gateway address-family ipv4 unicast route-target export 101:101 evpn route-target import 101:101 evpn ! address-family ipv6 unicast route-target export 101:101 evpn route-target import 101:101 evpn ! !

Rack1-Device1# show running-config vrf v3
vrf v2
 rd 172.31.254.19:1
 evpn irb ve 8192 cluster-gateway
 address-family ipv4 unicast
  route-target export 101:101 evpn
  route-target import 101:101 evpn
 !
 address-family ipv6 unicast
  route-target export 101:101 evpn
  route-target import 101:101 evpn
 !
!

Rack1-Device2# show running-config vrf v3
vrf v2
 rd 172.31.254.20:1
 evpn irb ve 8192 cluster-gateway
 address-family ipv4 unicast
  route-target export 101:101 evpn
  route-target import 101:101 evpn
 !
 address-family ipv6 unicast
  route-target export 101:101 evpn
  route-target import 101:101 evpn
 !
!