Create a Tenant VRF

You can configure virtual routing and forwarding (VRF) for the tenant. You can specify the name of VRF and the associated tenant, target VPN community, Route Target and Route Distinguisher, Local ASN, IPv4 and IPv6 static BFD routes, IPv4 and IPv6 static next hop routes, number of load sharing paths, redistribute type, whether resilient hashing is on SLX devices, and the routing type.

About this task

Follow this procedure to create a tenant VRF.

Procedure

To configure a tenant VRF, run the following command:
efa tenant vrf create [ --name vrf-name | --tenant tenant-name | --rt-type { both | import | export }| --rt value |--local-asn local-asn | --ipv4-static-route-bfd route | --ipv6-static-route-bfd route | --ipv4-static-route-next-hop route | --ipv6-static-route-next-hop route
| --max-path unit |--redistribute { static | connected} | --rh-maxpath { 8 | 16 | 64 }| --rh-ecmp-enable= {true | false } | --graceful-restart-enable= {true | false } | --routing-type { distributed |centralized }|--help ]
Note

Note

For more information on syntax and command examples, see the ExtremeCloud Orchestrator Command Reference, 3.2.0 .

Example

  1. The following example creates a distributed VRF:
    (efa:root)root@node-2:~# efa tenant vrf create --tenant tenant11 --name blue11 --local-asn 65001 --rt-type import --rt 100:100 --rt-type export --rt 100:100 --rt-type import --rt 200:200 --rt-type export --rt 200:200 --rt-type import --rt 300:300 --rt-type export --rt 400:400 --max-path 50 --redistribute connected --redistribute static --ipv4-static-route-next-hop 10.20.246.6,192.168.0.0/24,10.10.10.1,5 --ipv4-static-route-next-hop 10.20.246.5,192.168.10.0/24,10.10.10.5,5 --ipv6-static-route-next-hop 10.20.246.6,2020:20::1/128,3001::2,6 --ipv6-static-route-next-hop 10.20.246.5,2020:30::1/128,3001::3,5 --ipv6-static-route-bfd 10.20.246.6,3001::3,3001::1,100,200,5 --ipv6-static-route-bfd 10.20.246.6,3001::2,3001::1 --ipv6-static-route-bfd 10.20.246.6,3001::4,3001::1,100,300,6 --ipv4-static-route-bfd 10.20.246.5,10.10.10.1,10.10.10.254,200,300,6 --ipv4-static-route-bfd 10.20.246.6,10.10.10.5,10.10.10.252 --rh-ecmp-enable --rh-max-path 16 --graceful-restart-enable --routing-type distributed
    
    Vrf created successfully.
    
    --- Time Elapsed: 772.62533ms ---
    
    (efa:root)root@node-2:~# efa tenant vrf show --name blue11 --tenant tenant11 --detail
    ===============================================================================================================================================================
    Name                    : blue11
    Tenant                  : tenant11
    Routing Type            : distributed
    Centralized Routers     :
    Redistribute            : connected,static
    Max Path                : 50
    Local Asn               : 65001
    L3VNI                   :
    EVPN IRB BD             :
    EVPN IRB VE             :
    BR VNI                  :
    BR BD                   :
    BR VE                   :
    RH Max Path             : 16
    Enable RH ECMP          : true
    Enable Graceful Restart : true
    Route Target            : import 100:100
                            : export 100:100
                            : import 200:200
                            : export 200:200
                            : import 300:300
                            : export 400:400
    Static Route            : Switch-IP->Network,Nexthop-IP[Route-Distance], ...
                            : 10.20.246.6->192.168.0.0/24,10.10.10.1[5] 2020:20::1/128,3001::2[6]
                            : 10.20.246.5->192.168.10.0/24,10.10.10.5[5] 2020:30::1/128,3001::3[5]
    Static Route BFD        : Switch-IP->[DestIP,SourceIP][Interval,Min-Rx,Multiplier], ...
                            : 10.20.246.5->10.10.10.1,10.10.10.254[200,300,6]
                            : 10.20.246.6->10.10.10.5,10.10.10.252 3001::3,3001::1[100,200,5] 3001::2,3001::1 3001::4,3001::1[100,300,6]
    VRF Type                :
    State                   : vrf-create
    Dev State               : not-provisioned
    App State               : cfg-ready
    
    ===============================================================================================================================================================
    
    --- Time Elapsed: 47.564929ms ---
    
    
    
    
    (efa:root)root@node-2:~# efa tenant epg create --name epg1 --tenant tenant11 --port 10.20.246.5[0/1],10.20.246.6[0/1] --vrf blue11 --switchport-mode trunk --ctag-range 2001 --anycast-ip 2001:10.10.11.1/24
    
    EndpointGroup created successfully.
    
    --- Time Elapsed: 12.400157552s ---
    
  2. The following is an example configuration on SLX devices:
    On Device1: 10.20.246.5
    SLX# show running-config vrf
    vrf blue11
     rd 172.31.254.211:1
     resilient-hash ecmp enable
     resilient-hash max-path 16
     evpn irb ve 8192
     address-family ipv4 unicast
      route-target export 100:100 evpn
      route-target export 200:200 evpn
      route-target export 400:400 evpn
      route-target import 100:100 evpn
      route-target import 200:200 evpn
      route-target import 300:300 evpn
      ip route static bfd 10.10.10.1 10.10.10.254 interval 200 min-rx 300 multiplier 6
      ip route 192.168.10.0/24 10.10.10.5 distance 5
     !
     address-family ipv6 unicast
      route-target export 100:100 evpn
      route-target export 200:200 evpn
      route-target export 400:400 evpn
      route-target import 100:100 evpn
      route-target import 200:200 evpn
      route-target import 300:300 evpn
      ipv6 route 2020:30::1/128 3001::3 distance 5
     !
    !
    On Device2: 10.20.246.6
    SLX# show running-config vrf
    vrf blue11
     rd 172.31.254.152:1
     resilient-hash ecmp enable
     resilient-hash max-path 16
     evpn irb ve 8192
     address-family ipv4 unicast
      route-target export 100:100 evpn
      route-target export 200:200 evpn
      route-target export 400:400 evpn
      route-target import 100:100 evpn
      route-target import 200:200 evpn
      route-target import 300:300 evpn
      ip route static bfd 10.10.10.5 10.10.10.252
      ip route 192.168.0.0/24 10.10.10.1 distance 5
     !
     address-family ipv6 unicast
      route-target export 100:100 evpn
      route-target export 200:200 evpn
      route-target export 400:400 evpn
      route-target import 100:100 evpn
      route-target import 200:200 evpn
      route-target import 300:300 evpn
      ipv6 route static bfd 3001::2 3001::1
      ipv6 route static bfd 3001::3 3001::1 interval 100 min-rx 200 multiplier 5
      ipv6 route static bfd 3001::4 3001::1 interval 100 min-rx 300 multiplier 6
      ipv6 route 2020:20::1/128 3001::2 distance 6
     !
    !
  3. The following example creates a centralized VRF:
    (efa:extreme)extreme@node-1:~$ efa tenant vrf create --name red13 --tenant tenant21 --max-path 50 --redistribute connected --redistribute static --local-asn 65002 --ipv4-static-route-next-hop 10.20.216.104,192.168.0.0/24,10.10.10.1,5 --ipv4-static-route-next-hop 10.20.216.104,192.168.10.0/24,10.10.10.5,5 --ipv6-static-route-next-hop 10.20.216.104,2020:20::1/128,3001::2,6 --ipv6-static-route-next-hop 10.20.216.104,2020:30::1/128,3001::3,5 --ipv6-static-route-bfd 10.20.216.104,3001::3,3001::1,100,200,5 --ipv6-static-route-bfd 10.20.216.104,3001::2,3001::1 --ipv6-static-route-bfd 10.20.216.104,3001::4,3001::1,100,300,6 --ipv4-static-route-bfd 10.20.216.104,10.10.10.1,10.10.10.254,200,300,6 --ipv4-static-route-bfd 10.20.216.104,10.10.10.5,10.10.10.252 --rh-max-path 64 --routing-type centralized --centralized-router 10.20.216.103,10.20.216.104
    
    Vrf created successfully.
    
    --- Time Elapsed: 726.425268ms ---