Ethernet Virtual Private Network (EVPN) Support for External Border Gateway Protocol (EBGP)

BGP was standardized in RFC 7432 and RFC 8365 to carry Layer-2 information for virtualized networks. Ethernet virtual private network (EVPN) was initially targeted for MPLS and WAN, but later adopted as a VXLAN control plane protocol. ExtremeXOS supports EVPN control plane for VXLAN. At a high level, BGP supports the following constructs to distribute information for any virtualized network:
  • Identify the network address family with AFI/SAFI—For VXLAN, AFI of 25 (L2VPN) and a SAFI (EVPN) of 70 is used.
  • Within the address family, identify the type of route being advertised—Different route types are defined.
  • Identify which device originated the route and virtual network the route belongs to—This is the role of the route distinguisher (RD) and route target (RT).

EVPN requires the Core License. For more information about licensing, see ExtremeXOS 30.2 Feature License Requirements.

Supported Platforms

Summit X670-G2, and ExtremeSwitching X465, X590, X690, X870 series switches.
Note

Note

Summit X670-G2 and X870 ExtremeSwitching series switches do not support asymmetric routing.

Limitations

  • EVPN functionality is not supported between switches running ExtremeXOS 30.2 and switches running earlier ExtremeXOS versions. The earlier versions rely on auto-creation of IBGP peers, which is disabled functionality in ExtremeXOS 30.2. However, the proprietary AFI are supported and can be used to establish tunnels to RTEPs so that native VXLAN functionality using data plane learning functions is supported.
  • A maximum of 1,024 EVI instances are supported.
  • IPv6 Type 2 routes are not supported.
  • Stacking is not supported.
  • ExtremeXOS only supports asymmetric routing model.
  • ExtremeXOS does not support Type 5 routes. Received Type 5 routes are not processed.
  • Configuring VMANs as VXLAN tenant VLANs is not supported.
  • Anycast gateway is not supported.
  • ExtremeXOS does not advertise default gateway extended community.
  • Multi-hop BFD is not supported.
  • Peer-group configuration for L2VPN-EVPN address family is not supported.
  • If silent hosts are expected, static ARP/FDB should be created on tenant VLANs for these hosts. To configure static ARP entries it is necessary to configure IP address on tenant VLANs.

New CLI Commands

create bgp evpn instance evpn_instance_name

delete bgp evpn instance evpn_instance_name

configure bgp evpn instance evpn_instance_name vxlan vni [vni_value | none]

configure bgp evpn instance evpn_instance_name route-target {import | export | both} [add | delete] route_target

configure bgp evpn instance evpn_instance_name rd [rd_value | auto]

configure bgp neighbor [all | remoteaddr] alternate-local-as asNumber

enable bgp {neighbor [remoteaddr | all]} {{address-family} l2vpn-evpn} next-hop-unchanged

disable bgp {neighbor [remoteaddr | all]} {{address-family} l2vpn-evpn} next-hop-unchanged

show bgp evpn evi {evi-index evi_index} {vni vni}

show bgp evpn mac {mac-address mac_address}

show bgp evpn ipv4 {evi-index evi_index} {ip-address ip_address}

show bgp evpn ipv6 {evi-index evi_index} {ip-address ip_address}

Changed CLI Commands

Changes are underlined.

enable bgp neighbor [all |remoteaddr] capability [ipv4-unicast | ipv4-multicast | ipv6-unicast | ipv6-multicast | vpnv4 | route-refresh | ipv4-vxlan | l2vpn-evpn]

disable bgp neighbor [all | remoteaddr] capability [ipv4-unicast | ipv4-multicast | ipv6-unicast | ipv6-multicast | vpnv4 | route-refresh | ipv4-vxlan | l2vpn-evpn]

show bgp routes {address-family [ipv4-unicast | ipv4-multicast |ipv6-unicast | ipv6-multicast | ipv4-vxlan | {l2vpn-evpn [inclusive-multicast | mac-ip]}]} {detail} [ipv4-vxlan | all | as-path path-expression | community [no-advertise | no-export | no-export-subconfed | number community_number | autonomous-system-idbgp-community] | network [any/netMaskLen | networkPrefixFilter] {exact}]

The output of the following show command displays L2VPN EVPN information:

show bgp {neighbor} remoteaddr {address-family [ipv4-unicast | ipv4-multicast |ipv6-unicast | ipv6-multicast | ipv4-vxlan | {l2vpn-evpn [inclusive-multicast | mac-ip]}]} [accepted-routes | received-routes | rejected-routes | transmitted-routes] {detail} [all | as-path path-expression | community [no-advertise | no-export | no-export-subconfed | number community_number | autonomous-system-id : bgp-community] | network [any/netMaskLen | networkPrefixFilter] {exact}]