Config

Question 1

what are the config steps to deploy vxlan-ms on leaf?

Answer 1

• enable the features
• configure the loopbacks and interfaces
  
  • for vPC dont forget secondary address on loopback which is used for nve
• configure underlay routing (e.g. ospf)
• create vlans
• map the vlans to vnids
• create anycast gateway mac
• configure nve interface
• configure VRFs
• configure SVIs
• configure overlay routing (BGP EVPN)
• configure EVPN (vni and route targets)
• configure multicast RP

Question 2

which features do you need to enable on N9K leaf for vxlan evpn?

Answer 2

cfs eth distribute
nv overlay evpn
feature ospf
feature bgp
feature pim
feature fabric forwarding
feature interface-vlan
feature vn-segment-vlan-based
feature lacp
feature vpc
feature nv overlay

Question 3

which features do you need to enable on N7K spine for vxlan evpn?

Answer 3

feature-set fabric

feature bgp

feature fabric forwarding

feature vni

feature interface-vlan

feature nv overlay

Question 4

which features do you need to enable on N56K leaf for vxlan evpn?

Answer 4

install feature-set fabric 
feature-set fabric
feature fabric forwarding 
nv overlay evpn 
feature ospf 
feature bgp 
feature pim 
feature bfd 
feature nv overlay 
feature nxapi 
feature vn-segment-vlan-based 
! feature ngoam ! optional
hardware ethernet store-and-fwd-switching

Question 5

how do you set the multi-site ID?

Answer 5

evpn multisite border-gateway

Question 6

where do you set the source IP for the multi-site BGW function?

Answer 6

interface nve1

host-reachability protocol bgp

source-interface loopback1

multisite border-gateway interface loopback100

Question 7

how do you make sure, that traffic is not blackholed in BGW if the external connection is down?

Answer 7

configure multi-site DCI tracking on all external facing interfaces which participate in external overlay

int ethx/y
evpn multisite dci-tracking

Question 8

which parameters are mandatory in the neighborship statement (bgp) when configuring multi-site neighbohrs ?

Answer 8

peer type fabric-external
address-family l2vpn evpn
rewrite-evpn-rt-asn

Question 9

what is an easy way to prevent that you are anouncing your fabric-local default-route to the other site(s)? (avoid to become a transit fabric)

Answer 9

ip prefix-list NODEF seq 5 permit 0.0.0.0/0
route-map NODEFAULT deny 10
match ip address prefix-list NODEF
route-map NODEFAULT permit 1000

then on neighbor-statement:
route-map NODEFAULT out

Question 10

repeat the steps to make an n9k a BGW

Answer 10

1. evpn multisite border-gateway $ID
   (optional: delay-restore time)
2. in NVE interface:
   multisite border-gateway interface loXXX
   member vni 2001001
   multisite ingress-replication

Question 11

name the steps to create vn-segements in N7K and map them to VLANs

Answer 11

1. Create a VNI and bridge domain and associate the Layer 2 VNI with it

vni 30000
system bridge-domain 200-210
bridge-domain 200
member vni 30000

2. Associate a VLAN (or dot1q tag) with the Layer 2 VNI:

encapsulation profile vni cisco
dot1q 50 vni 30000

3. Associate the encapsulation profile with the server facing interface

interface Ethernet 1/12
   no shutdown
   no switchport
   service instance 1 vni
   encapsulation profile cisco default
      no shutdown

Question 12

what is a typical trap, when you configure vxlan (flood and learn) on N7K, all interfaces are up, NVE peers see each other, but the N7K do not learn MAC addresses of local attached devices?

Answer 12

the service instance under the interface needs an explicit “no shutdown” command

int e3/6
  no shut
  service instance 1 vni
      NO SHUT
      encapsulation profile DC_VXLAN default

Question 13

how do you enable jumbo MTU on N5K?

Answer 13

n5k-switch#configure terminal
n5k-switch(config)#policy-map type network-qos jumbo
n5k-switch(config-pmap-nq)#class type network-qos class-default
n5k-switch(config-pmap-c-nq)#mtu 9216
n5k-switch(config-pmap-c-nq)#exit
n5k-switch(config-pmap-nq)#exit
n5k-switch(config)#system qos
n5k-switch(config-sys-qos)#service-policy type network-qos jumbo

Question 14

how do you enable fcoe qos together with jumbo on N5K?

Answer 14

n5k-switch#configure terminal
n5k-switch(config)#policy-map type network-qos jumbo
n5k-switch(config-pmap-nq)#class type network-qos class-default
n5k-switch(config-pmap-c-nq)#mtu 9216
n5k-switch(config-pmap-c-nq)#exit
n5k-switch(config-pmap-nq)#class type network-qos class-fcoe
n5k-switch(config)#system qos
n5k-switch(config-sys-qos)#service-policy type network-qos jumbo