Configure Aggregate Address on Tenant VRF

You can configure an aggregate address (advertised by BGP) for ean tenant VRF (and device) when you create or update a VRF. XCO provisions the aggregate address on switches when VRF is instantiated or updated on the switches.

About this task

Follow this procedure to configure an aggregate address on tenant VRF.

Procedure

  1. To configure aggregate address when you create a tenant VRF, run the following command:
    When you trigger L3 EPG create or L2 EPG transition to L3 EPG, VRF is instantiated on the switches based on the endpoints present in the EPG.
    efa tenant vrf create --name <vrf-name> --tenant <tenant-name> 
    
         --ipv4-aggregate-address <device-ip,aggregate-address> 
         --ipv4-aggregate-summary-only <device-ip,aggregate-address,true|false>
         --ipv4-aggregate-as-set <device-ip,aggregate-address,true|false> 
         --ipv4-aggregate-advertise-map <device-ip,aggregate-address,route-map>
         --ipv4-aggregate-suppress-map <device-ip,aggregate-address,route-map>
  2. To configure aggregate address when you update a tenant VRF, run the following command:
    When you trigger VRF update operation, VRF is updated on the switches based on the endpoints present in the EPGs.
    efa tenant vrf update --name <vrf-name> --tenant <tenant-name> 
    
         --operation aggregate-address-add| aggregate-address-delete
    
         --ipv4-aggregate-address <device-ip,aggregate-address> 
         --ipv4-aggregate-summary-only <device-ip,aggregate-address,true|false>
         --ipv4-aggregate-as-set <device-ip,aggregate-address,true|false> 
         --ipv4-aggregate-advertise-map <device-ip,aggregate-address,route-map>
         --ipv4-aggregate-suppress-map <device-ip,aggregate-address,route-map>
    The following example configures aggregate address during VRF create operation:
    efa tenant vrf create --name vrf1 --tenant tenant1
    
         --ipv4-aggregate-address 10.24.80.134,10.20.21.40/30
         --ipv4-aggregate-summary-only 10.24.80.134,10.20.21.40/30,true
         --ipv4-aggregate-as-set 10.24.80.134,10.20.21.40/30,true 
         --ipv4-aggregate-advertise-map 10.24.80.134,10.20.21.40/30,some
         --ipv4-aggregate-suppress-map 10.24.80.134,10.20.21.40/30,some
    
         --ipv6-aggregate-address 10.24.80.135,10::20/126
         --ipv6-aggregate-summary-only 10.24.80.135,10::20/126,true
         --ipv6-aggregate-as-set 10.24.80.135,10::20/126,true 
         --ipv6-aggregate-advertise-map 10.24.80.135,10::20/126,some
         --ipv6-aggregate-suppress-map 10.24.80.135,10::20/126,some
    
    efa tenant epg create --name ten1epg1 --tenant tenant1
         --port 10.24.80.134[0/11],10.24.80.135[0/11]
         --switchport-mode trunk –ctag-range 11 --vrf vrf1 –anycast-ip 11:10.10.11.1/24
    
    efa tenant vrf update –-name vrf1 –-tenant tenant1
         --operation aggregate-address-add
    
         --ipv4-aggregate-address 10.24.80.134,10.21.21.40/30
         --ipv4-aggregate-summary-only 10.24.80.134,10.21.21.40/30,true
         --ipv4-aggregate-as-set 10.24.80.134,10.21.21.40/30,true 
         --ipv4-aggregate-advertise-map 10.24.80.134,10.21.21.40/30,some
         --ipv4-aggregate-suppress-map 10.24.80.134,10.21.21.40/30,some
    
         --ipv6-aggregate-address 10.24.80.135,11::20/126
         --ipv6-aggregate-summary-only 10.24.80.135,11::20/126,true
         --ipv6-aggregate-as-set 10.24.80.135,11::20/126,true 
         --ipv6-aggregate-advertise-map 10.24.80.135,11::20/126,some
         --ipv6-aggregate-suppress-map 10.24.80.135,11::20/126,some
  3. Verify the switch configuration on the SLX device.
    Rack1-Device1# sh run router bgp address-family ipv4 unicast vrf vrf1
    
    router bgp
      address-family ipv4 unicast vrf vrf1
        redistribute connected
        aggregate-address 10.20.21.40/30 advertise-map some
        aggregate-address 10.20.21.40/30 as-set
        aggregate-address 10.20.21.40/30 summary-only
        aggregate-address 10.20.21.40/30 suppress-map some
        aggregate-address 10.21.21.40/30 advertise-map some
        aggregate-address 10.21.21.40/30 as-set
        aggregate-address 10.21.21.40/30 summary-only
        aggregate-address 10.21.21.40/30 suppress-map some
      !
      address-family ipv6 unicast vrf vrf1
        redistribute connected
      !
    !
    Rack1-Device2# sh run router bgp address-family ipv4 unicast vrf vrf1
    
    router bgp
      address-family ipv4 unicast vrf vrf1
        redistribute connected
      !
      address-family ipv6 unicast vrf vrf1
        redistribute connected
        aggregate-address 10::20/126 advertise-map some
        aggregate-address 10::20/126 as-set
        aggregate-address 10::20/126 summary-only
        aggregate-address 10::20/126 suppress-map some
        aggregate-address 11::20/126 advertise-map some
        aggregate-address 11::20/126 as-set
        aggregate-address 11::20/126 summary-only
        aggregate-address 11::20/126 suppress-map some
      !
    !