7-5 - Implement Ethernet VPNs (EVPN) Flashcards
3 higher level types of EVPN
EVPN native
-EVPN native with software MAC learning enables the distribution of the MAC addresses that are learned on one device to the other devices that connect to a network
- The MAC addresses are learned from the remote devices through BGP.
EVPN-VPWS
-point-to-point solution
-has the ability to forward traffic from one network to another without MAC lookup
-eliminates the need for signaling single-segment and multisegment PWs for point-to-point Ethernet services
-You can also configure the Pseudowire Headend (PWHE) interface and a bridge domain access pseudowire by using EVPN-VPWS.
EVPN IRB
-EVPN Integrated Routing and Bridging
-enables L3 forwarding among hosts across different IP subnets and still maintains the multihoming capabilites of EVPN
EVPN Native - Operational Steps
- Traffic arrives on one port in the bridge domain.
- The PE learns the source MAC address (AA in figure) and stores it as a dynamic MAC entry.
- The MAC address (AA) converts into a type-2 BGP route and transmits over BGP to all the remote PEs in the same EVI.
- The MAC address (AA) updates on the PE as a remote MAC address.
EVPN Native—Software MAC Learning Modes
- Single Home Device (SHD) or Single Home Network (SHN)
- Dual Home Device (DHD) or all-active (per-flow) load balancing
- DHD or single-active (per-service) load balancing
What is this a configuration of?
(config)#interface Loopback0 (if)#ipv4 address 1.100.100.100/32 (if)#interface GigabitEthernet0/0/0/1 (if)#ipv4 address 2.2.2.2/24 (config)#router ospf 1 (ospf)#router-id 1.100.100.100 (ospf)#area 10 (ospf-ar)#interface GigabitEthernet0/0/0/1 (config)#mpls ldp (ldp)#router-id 1.100.100.100 (ldp)#interface GigabitEthernet0/0/0/1 (config)#router bgp 100 (bgp)#bgp router-id 1.100.100.100 (bgp)#neighbor 2.100.100.100 (bgp)#remote-as 100 (bgp)#update-source Loopback0
EVPN Native-Prerequisite Configurations
What is this a configuration of?
l2vpn
bridge domain EVPN_SHD
bridge-domain EVPN_2001
interface Bundle-Ether1.2001
evi 2001
!
evpn
evpn 2001
advertise-mac
!
router bgp 200
bgp router-id 40.40.40.40
address-family l2vpn evpn
neighbor 10.10.10.10
remote-as 200
description MPLS-FACING-PEER
update-source Loopback0
address-family l2vpn evpn
EVPN Native-SHD and SHN Configurations
What is this a configuration of?
l2vpn bridge group EVPN_ALL_ACTIVE bridge-domain EVPN_2001 interface Bundle-Ether1.2001 evi 2001 ! evpn evi 2001 advertise-mac ethernet-segment interface bundle-ether1 identifier type 0 01.11.00.00.00.00.00.00.01 ! router bgp 200 bgp router-id 209.165.200.227 address-family l2vpn evpn neighbor 10.10.10.10 remote-as 200 description MPLS-FACING-PEER update-source Loopback0 address-family l2vpn evpn
EVPN Native - Dual Home Device AApF
What is this a configuration of?
redundancy
iccp
group 11
mlacp node 1
mlacp system mac 0111.0222.0111
mlacp system priority 1
mode singleton
backbone
interface Bundle-Ether10
interface HundredGigE0/2/0/5
interface Bundle-Ether1
lacp switchover suppress-flaps 300
mlacp iccp-group 11
mlacp port-priority 1
load-interval 30
interface Bundle-Ether1.2001 l2transport
encapsulation dot1q 2001
rewrite ingress tag pop 1 symmetric
MLACP Configuration (for Dual Home Device AApF)
What is this a configuration of?
l2vpn bridge group EVPN_SINGLE_ACTIVE bridge-domain EVPN_2001 interface Bundle-Ether1.2001 evi 2001 ! evpn evi 2001 advertise-mac interface Bundle-Ether1 ethernet-segment load-balancing-mode single-active identifier type 0 12.12.00.00.00.00.00.00.02 bgp route-target 1212.0000.0002 ! router bgp 200 bgp router-id 209.165.200.227 address-family l2vpn evpn ! neighbor 10.10.10.10 remote-as 200 description MPLS-FACING-PEER update-source Loopback0 address-family l2vpn evpn ! interface Bundle-Ether1.21 l2transport lacp switchover suppress-flaps 300 interface Bundle-Ether1.2001 l2transport encapsulation dot1q 10 rewrite ingress tag pop 1 symmetric
EVPN Native—Dual Home Device AApS
T/F: The EVPN-VPWS single-homed solution requires the per-EVI EAD route.
True
What is this a configuration of?
interface Bundle-Ether25.10 l2transport encapsulation dot1q 25 second-dot1q 10 l2vpn xconnect group pbb_evpn p2p xc-1 interface Bundle-Ether25.10 neighbor evpn evi 500 target 300000 source 10000 router bgp 100 address-family l2vpn evpn ! neighbor 40.40.40.40 remote-as 100 update-source Loopback0 address-family l2vpn evpn evpn interface Bundle-Ether25 ethernet-segment identifier type 0 00.01.00.ac.ce.55.00.0a.00
EVPN VPWS—Multihomed Configuration
T/F: The EVPN IRB feature enables a Layer 2 VPN and a Layer 3 VPN overlay that allows end hosts across the overlay to communicate with each other within the same subnet and across different subnets within the VPN.
True
Characteristics of EVPN IRB Operations
- Each PE has a local BVI Layer 3 interface with IP address.
- To send packets to other subnets, hosts use the destination IP and local BVI MAC.
- BVI in the local PE looks up the VRF table and routes the packet to the destination PE.
- The Destination PE looks up the VRF table for MACs that are tied to the destination host.
- The Remote PE forwards the packet to the destination host.
What is this a configuration of?
interface Bundle-Ether1.1 l2transport encpasulation dot1q 44 rewrite ingress tag pop 1 symmetric interface BVI4 host-routing vrf irb4 ipv4 address 11.11.11.1 255.255.255.0 mac.address 4444.4444.4444
EVPN IRB - Layer 2 Attachment Circuit and BVI Configuration
What is this a configuration of?
cef adjacency route override rib evpn evi 44 bgp route-target import 444:1 route-target export 444:1 ! advertise-mac ! unknown-unicast-suppression
EVPN IRB—EVPN Configuration
What is this a configuration of?
l2vpn
bridge group irb4
bridge-domain irb4
interface Bundle-Ether1.1
!
routed interface BVI4
split-horizon group core
!
evi 44
EVPN IRB—L2VPN Configuration
