Configure Advertise Network and Static Network on Tenant VRF

You can configure “network” and “static-network” attributes (advertized by BGP) on a tenant VRF (and device) when you create and update VRF. XCO provisions the “network” and “static-network” attributes on switches when you initiate or update VRF on the switches.

XCO supports only static-network with IPv4.

About this task

Follow this procedure to configure network and static network advertized by BGP on tenant VRF.

Procedure

  1. To configure “network” and “static-network” when you create a tenant VRF, run the following command:
    When you create L3 EPG or transition L2 EPG to L3 EPG, VRF is instantiated on the switches based on the endpoints present in the EPG.
    efa tenant vrf create --name <vrf-name> --tenant <tenant-name> 

    --ipv4-network <device-ip,network> --ipv4-network-backdoor < device-ip,network,true|false> 
    --ipv4-network-weight <device-ip,network,0-65535> --ipv4-network-route-map <device-ip,network,route-map>

    --ipv4-static-network <device-ip,static-network> --ipv4-static-network-distance <device-ip,static-network,1-255>

    --ipv6-network <device-ip,network> --ipv6-network-backdoor <device-ip,network,true|false> 
    --ipv6-network-weight <device-ip,network,0-65535> --ipv6-network-route-map <device-ip,network,route-map>
  2. To configure “network” and “static-network” when you update a tenant VRF, run the following command:
    When you trigger VRF update operation, VRF is updated on the switches based on the endpoints present in the EPGs.
    efa tenant vrf update --name <vrf-name> --tenant <tenant-name> 

    --operation network-add|network-delete|static-network-add|static-network-delete

    --ipv4-network <device-ip,network> --ipv4-network-backdoor < device-ip,network,true|false> 
    --ipv4-network-weight <device-ip,network,0-65535> --ipv4-network-route-map <device-ip,network,route-map>

    --ipv4-static-network <device-ip,static-network> --ipv4-static-network-distance <device-ip,static-network,1-255>

    --ipv6-network <device-ip,network> --ipv6-network-backdoor <device-ip,network,true|false> 
    --ipv6-network-weight <device-ip,network,0-65535> --ipv6-network-route-map <device-ip,network,route-map>
    The following example configures network and static network (advertized by BGP) on a tenant VRF:
    efa tenant vrf create --name vrf1 --tenant tenant1
   --ipv4-network 10.24.80.134,10.20.30.40/30 
   --ipv4-network 10.24.80.134,10.21.30.40/30 --ipv4-network-backdoor 10.24.80.134,10.21.30.40/30,true

   --ipv4-static-network 10.24.80.134,11.10.30.40/30 
   --ipv4-static-network 10.24.80.134,11.20.30.40/30 --ipv4-static-network-distance 10.24.80.134,11.20.30.40/30,169

   --ipv6-network 10.24.80.135,11::22/128 
   --ipv6-network 10.24.80.135,11::23/128 --ipv6-network-backdoor 10.24.80.134,11::23/128,true 
   --ipv6-network 10.24.80.135,11::24/128 --ipv6-network-weight 10.24.80.134,11::24/128,144 
   --ipv6-network 10.24.80.135,11::25/128 --ipv6-network-route-map 10.24.80.134,11::25/128,rmap1

efa tenant epg create --name ten1epg1 --tenant tenant1
   --port 10.24.80.134[0/11],10.24.80.135[0/11]
   --switchport-mode trunk –ctag-range 11 --vrf vrf1 –anycast-ip 11:10.10.11.1/24

efa tenant vrf update –-name vrf1 –-tenant tenant1
   --operation network-add
   --ipv4-network 10.24.80.134,10.22.30.40/30 --ipv4-network-weight 10.24.80.134,10.22.30.40/30,144
   --ipv4-network 10.24.80.134,10.23.30.40/30 --ipv4-network-route-map 10.24.80.134,10.23.30.40/30,rmap1
  3. Verify the switch configuration on the SLX device. 
    Rack1-Device1# sh run router bgp address-family ipv4 unicast vrf vrf1

router bgp
  address-family ipv4 unicast vrf vrf1
    redistribute connected
    static-network 11.10.30.40/30
    static-network 11.20.30.40/30 distance 169
    network 10.20.30.40/30
    network 10.21.30.40/30 backdoor
    network 10.22.30.40/30 weight 144
    network 10.23.30.40/30 route-map rmap1
  !
  address-family ipv6 unicast vrf vrf1
    redistribute connected
  !
!
    		 
    Rack1-Device2# sh run router bgp address-family ipv4 unicast vrf vrf1

router bgp
  address-family ipv4 unicast vrf vrf1
    redistribute connected
  !
  address-family ipv6 unicast vrf vrf1
    redistribute connected
    network 11::22/128
    network 11::23/128 backdoor
    network 11::24/128 weight 144
    network 11::25/128 route-map rmap1
  !
!
9037725-01 RevAA