Configure Advertise Network and Static Network on Tenant VRF

You can configure “network” and “static-network” attributes (advertized by BGP) on a tenant VRF (and device) when you create and update VRF. XCO provisions the “network” and “static-network” attributes on switches when you initiate or update VRF on the switches.

XCO supports only static-network with IPv4.

About this task

Follow this procedure to configure network and static network advertized by BGP on tenant VRF.

Procedure

  1. To configure “network” and “static-network” when you create a tenant VRF, run the following command:
    When you create L3 EPG or transition L2 EPG to L3 EPG, VRF is instantiated on the switches based on the endpoints present in the EPG.
    efa tenant vrf create --name <vrf-name> --tenant <tenant-name> 
    
        --ipv4-network <device-ip,network> --ipv4-network-backdoor < device-ip,network,true|false> 
        --ipv4-network-weight <device-ip,network,0-65535> --ipv4-network-route-map <device-ip,network,route-map>
    
        --ipv4-static-network <device-ip,static-network> --ipv4-static-network-distance <device-ip,static-network,1-255>
    
        --ipv6-network <device-ip,network> --ipv6-network-backdoor <device-ip,network,true|false> 
        --ipv6-network-weight <device-ip,network,0-65535> --ipv6-network-route-map <device-ip,network,route-map>
  2. To configure “network” and “static-network” when you update a tenant VRF, run the following command:
    When you trigger VRF update operation, VRF is updated on the switches based on the endpoints present in the EPGs.
    efa tenant vrf update --name <vrf-name> --tenant <tenant-name> 
    
        --operation network-add|network-delete|static-network-add|static-network-delete
    
        --ipv4-network <device-ip,network> --ipv4-network-backdoor < device-ip,network,true|false> 
        --ipv4-network-weight <device-ip,network,0-65535> --ipv4-network-route-map <device-ip,network,route-map>
    
        --ipv4-static-network <device-ip,static-network> --ipv4-static-network-distance <device-ip,static-network,1-255>
    
        --ipv6-network <device-ip,network> --ipv6-network-backdoor <device-ip,network,true|false> 
        --ipv6-network-weight <device-ip,network,0-65535> --ipv6-network-route-map <device-ip,network,route-map>
    The following example configures network and static network (advertized by BGP) on a tenant VRF:
    efa tenant vrf create --name vrf1 --tenant tenant1
       --ipv4-network 10.24.80.134,10.20.30.40/30 
       --ipv4-network 10.24.80.134,10.21.30.40/30 --ipv4-network-backdoor 10.24.80.134,10.21.30.40/30,true
    
       --ipv4-static-network 10.24.80.134,11.10.30.40/30 
       --ipv4-static-network 10.24.80.134,11.20.30.40/30 --ipv4-static-network-distance 10.24.80.134,11.20.30.40/30,169
    
       --ipv6-network 10.24.80.135,11::22/128 
       --ipv6-network 10.24.80.135,11::23/128 --ipv6-network-backdoor 10.24.80.134,11::23/128,true 
       --ipv6-network 10.24.80.135,11::24/128 --ipv6-network-weight 10.24.80.134,11::24/128,144 
       --ipv6-network 10.24.80.135,11::25/128 --ipv6-network-route-map 10.24.80.134,11::25/128,rmap1
    
    efa tenant epg create --name ten1epg1 --tenant tenant1
       --port 10.24.80.134[0/11],10.24.80.135[0/11]
       --switchport-mode trunk –ctag-range 11 --vrf vrf1 –anycast-ip 11:10.10.11.1/24
    
    efa tenant vrf update –-name vrf1 –-tenant tenant1
       --operation network-add
       --ipv4-network 10.24.80.134,10.22.30.40/30 --ipv4-network-weight 10.24.80.134,10.22.30.40/30,144
       --ipv4-network 10.24.80.134,10.23.30.40/30 --ipv4-network-route-map 10.24.80.134,10.23.30.40/30,rmap1
  3. Verify the switch configuration on the SLX device.
    Rack1-Device1# sh run router bgp address-family ipv4 unicast vrf vrf1
    
    router bgp
      address-family ipv4 unicast vrf vrf1
        redistribute connected
        static-network 11.10.30.40/30
        static-network 11.20.30.40/30 distance 169
        network 10.20.30.40/30
        network 10.21.30.40/30 backdoor
        network 10.22.30.40/30 weight 144
        network 10.23.30.40/30 route-map rmap1
      !
      address-family ipv6 unicast vrf vrf1
        redistribute connected
      !
    !
    Rack1-Device2# sh run router bgp address-family ipv4 unicast vrf vrf1
    
    router bgp
      address-family ipv4 unicast vrf vrf1
        redistribute connected
      !
      address-family ipv6 unicast vrf vrf1
        redistribute connected
        network 11::22/128
        network 11::23/128 backdoor
        network 11::24/128 weight 144
        network 11::25/128 route-map rmap1
      !
    !