VXLAN实验

拓扑图：

SPINE配置：

hostname SPINE-1
vdc SPINE-1 id 1
limit-resource vlan minimum 16 maximum 4094
limit-resource vrf minimum 2 maximum 4096
limit-resource port-channel minimum 0 maximum 511
limit-resource u4route-mem minimum 248 maximum 248
limit-resource u6route-mem minimum 96 maximum 96
limit-resource m4route-mem minimum 58 maximum 58
limit-resource m6route-mem minimum 8 maximum 8

nv overlay evpn
feature ospf
feature bgp
feature pim
feature vn-segment-vlan-based
feature nv overlay

username admin password 5 $5$bjUuS34N$DaWFpLKAxc.89ZQkEif9YY8a/JukfKjuyzDMDojrB.
B role network-admin
ip domain-lookup
snmp-server user admin network-admin auth md5 0x491623bcc3af3ee723c3e7faf5da4c50
priv 0x491623bcc3af3ee723c3e7faf5da4c50 localizedkey
rmon event 1 description FATAL(1) owner PMON@FATAL
rmon event 2 description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 description ERROR(3) owner PMON@ERROR
rmon event 4 description WARNING(4) owner PMON@WARNING
rmon event 5 description INFORMATION(5) owner PMON@INFO

vlan 1
ip pim rp-address 192.168.1.1 group-list 224.0.0.0/4
ip pim log-neighbor-changes
ip pim ssm range 232.0.0.0/8

vrf context management

interface Ethernet1/1
no switchport
ip address 10.10.1.1/30
ip router ospf 100 area 0.0.0.0
ip pim sparse-mode
no shutdown

interface Ethernet1/2
no switchport
ip address 10.10.2.1/30
ip router ospf 100 area 0.0.0.0
ip pim sparse-mode
no shutdown

interface loopback0
ip address 192.168.1.1/32
ip router ospf 100 area 0.0.0.0
ip pim sparse-mode
line console
line vty
boot nxos bootflash:/nxos.7.0.3.I5.2.bin
router ospf 100
router-id 192.168.1.1
router bgp 65001
router-id 192.168.1.1
log-neighbor-changes
address-family ipv4 unicast
address-family l2vpn evpn
retain route-target all
template peer VTEP
remote-as 65001
update-source loopback0
address-family ipv4 unicast
send-community
send-community extended
route-reflector-client
address-family l2vpn evpn
send-community
send-community extended
route-reflector-client
neighbor 192.168.1.2
inherit peer VTEP
remote-as 65001
update-source loopback0
address-family ipv4 unicast
send-community
send-community extended
address-family l2vpn evpn
send-community
send-community extended
neighbor 192.168.1.3
inherit peer VTEP
remote-as 65001

LEAF-1配置如下：

hostname LEAF-1
vdc LEAF-1 id 1
limit-resource vlan minimum 16 maximum 4094
limit-resource vrf minimum 2 maximum 4096
limit-resource port-channel minimum 0 maximum 511
limit-resource u4route-mem minimum 248 maximum 248
limit-resource u6route-mem minimum 96 maximum 96
limit-resource m4route-mem minimum 58 maximum 58
limit-resource m6route-mem minimum 8 maximum 8

nv overlay evpn
feature ospf
feature bgp
feature pim
feature interface-vlan
feature vn-segment-vlan-based
feature nv overlay

username admin password 5 $5$c/UAIe9A$SDYP9JFFiKC8SiS9sSe/SIT6ClZnv9jia2rb/NqVj2
7 role network-admin
ip domain-lookup
snmp-server user admin network-admin auth md5 0xe1718bdb6f8d19c41d0c56fe114ff587
priv 0xe1718bdb6f8d19c41d0c56fe114ff587 localizedkey
rmon event 1 description FATAL(1) owner PMON@FATAL
rmon event 2 description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 description ERROR(3) owner PMON@ERROR
rmon event 4 description WARNING(4) owner PMON@WARNING
rmon event 5 description INFORMATION(5) owner PMON@INFO

vlan 1,10-50,901-904
fabric forwarding anycast-gateway-mac 0000.1111.2222
ip pim rp-address 192.168.1.1 group-list 224.0.0.0/4
ip pim log-neighbor-changes
ip pim ssm range 232.0.0.0/8
vlan 10
vn-segment 160010
vlan 11
vn-segment 160011
vlan 12
vn-segment 160012
vlan 13
vn-segment 160013
vlan 14
vn-segment 160014
vlan 15
vn-segment 160015
vlan 16
vn-segment 160016
vlan 17
vn-segment 160017
vlan 18
vn-segment 160018
vlan 19
vn-segment 160019
vlan 20
vn-segment 160020
vlan 21
vn-segment 160021
vlan 22
vn-segment 160022
vlan 23
vn-segment 160023
vlan 24
vn-segment 160024
vlan 25
vn-segment 160025
vlan 26
vn-segment 160026
vlan 27
vn-segment 160027
vlan 28
vn-segment 160028
vlan 29
vn-segment 160029
vlan 30
vn-segment 160030
vlan 31
vn-segment 160031
vlan 32
vn-segment 160032
vlan 33
vn-segment 160033
vlan 34
vn-segment 160034
vlan 35
vn-segment 160035
vlan 36
vn-segment 160036
vlan 37
vn-segment 160037
vlan 38
vn-segment 160038
vlan 39
vn-segment 160039
vlan 40
vn-segment 160040
vlan 41
vn-segment 160041
vlan 42
vn-segment 160042
vlan 43
vn-segment 160043
vlan 44
vn-segment 160044
vlan 45
vn-segment 160045
vlan 46
vn-segment 160046
vlan 47
vn-segment 160047
vlan 48
vn-segment 160048
vlan 49
vn-segment 160049
vlan 50
vn-segment 160050
vlan 901
vn-segment 900901
vlan 902
vn-segment 900902
vlan 903
vn-segment 900903
vlan 904
vn-segment 900904

vrf context APP
vni 900901
rd auto
address-family ipv4 unicast
route-target both auto
route-target both auto evpn
vrf context HXYW
vni 900903
rd auto
address-family ipv4 unicast
route-target both auto
route-target both auto evpn
vrf context MES
vni 900904
rd auto
address-family ipv4 unicast
route-target both auto
route-target both auto evpn
vrf context VM
vni 900902
rd auto
address-family ipv4 unicast
route-target both auto
route-target both auto evpn
vrf context management

interface Vlan1

interface Vlan10
no shutdown
mtu 9192
vrf member APP
ip address 10.20.1.254/24
fabric forwarding mode anycast-gateway

interface Vlan11
no shutdown
mtu 9192
vrf member APP
ip address 10.20.2.254/24
fabric forwarding mode anycast-gateway

interface Vlan13
no shutdown
mtu 9192
vrf member APP
ip address 10.20.3.254/24
fabric forwarding mode anycast-gateway

interface Vlan14
no shutdown
mtu 9192
vrf member APP
ip address 10.20.4.254/24
fabric forwarding mode anycast-gateway

interface Vlan15
no shutdown
mtu 9192
vrf member APP
ip address 10.20.5.254/24
fabric forwarding mode anycast-gateway

interface Vlan16
no shutdown
mtu 9192
vrf member APP
ip address 10.20.6.254/24
fabric forwarding mode anycast-gateway

interface Vlan17
no shutdown
mtu 9192
vrf member APP
ip address 10.20.7.254/24
fabric forwarding mode anycast-gateway

interface Vlan18
no shutdown
mtu 9192
vrf member APP
ip address 10.20.8.254/24
fabric forwarding mode anycast-gateway

interface Vlan19
no shutdown
mtu 9192
vrf member APP
ip address 10.20.9.254/24
fabric forwarding mode anycast-gateway

interface Vlan20
no shutdown
mtu 9192
vrf member APP
ip address 10.20.10.254/24
fabric forwarding mode anycast-gateway

interface Vlan21
no shutdown
mtu 9192
vrf member VM
ip address 10.30.1.254/24
fabric forwarding mode anycast-gateway

interface Vlan22
no shutdown
mtu 9192
vrf member VM
ip address 10.30.2.254/24
fabric forwarding mode anycast-gateway

interface Vlan23
no shutdown
mtu 9192
vrf member VM
ip address 10.30.3.254/24
fabric forwarding mode anycast-gateway

interface Vlan24
no shutdown
mtu 9192
vrf member VM
ip address 10.30.4.254/24
fabric forwarding mode anycast-gateway

interface Vlan25
no shutdown
mtu 9192
vrf member VM
ip address 10.30.5.254/24
fabric forwarding mode anycast-gateway

interface Vlan26
no shutdown
mtu 9192
vrf member VM
ip address 10.30.6.254/24
fabric forwarding mode anycast-gateway

interface Vlan27
no shutdown
mtu 9192
vrf member VM
ip address 10.30.7.254/24
fabric forwarding mode anycast-gateway

interface Vlan28
no shutdown
mtu 9192
vrf member VM
ip address 10.30.8.254/24
fabric forwarding mode anycast-gateway

interface Vlan29
no shutdown
mtu 9192
vrf member VM
ip address 10.30.9.254/24
fabric forwarding mode anycast-gateway

interface Vlan30
no shutdown
mtu 9192
vrf member VM
ip address 10.30.10.254/24
fabric forwarding mode anycast-gateway

interface Vlan31
no shutdown
mtu 9192
vrf member HXYW
ip address 10.40.1.254/24
fabric forwarding mode anycast-gateway

interface Vlan32
no shutdown
mtu 9192
vrf member HXYW
ip address 10.40.2.254/24
fabric forwarding mode anycast-gateway

interface Vlan33
no shutdown
mtu 9192
vrf member HXYW
ip address 10.40.3.254/24
fabric forwarding mode anycast-gateway

interface Vlan34
no shutdown
mtu 9192
vrf member HXYW
ip address 10.40.4.254/24
fabric forwarding mode anycast-gateway

interface Vlan35
no shutdown
mtu 9192
vrf member HXYW
ip address 10.40.5.254/24
fabric forwarding mode anycast-gateway

interface Vlan36
no shutdown
mtu 9192
vrf member HXYW
ip address 10.40.6.254/24
fabric forwarding mode anycast-gateway

interface Vlan37
no shutdown
mtu 9192
vrf member HXYW
ip address 10.40.7.254/24
fabric forwarding mode anycast-gateway

interface Vlan38
no shutdown
mtu 9192
vrf member HXYW
ip address 10.40.8.254/24
fabric forwarding mode anycast-gateway

interface Vlan39
no shutdown
mtu 9192
vrf member HXYW
ip address 10.40.9.254/24
fabric forwarding mode anycast-gateway

interface Vlan40
no shutdown
mtu 9192
vrf member HXYW
ip address 10.40.10.254/24
fabric forwarding mode anycast-gateway

interface Vlan41
no shutdown
mtu 9192
vrf member MES
ip address 10.50.1.254/24
fabric forwarding mode anycast-gateway

interface Vlan42
no shutdown
mtu 9192
vrf member MES
ip address 10.50.2.254/24
fabric forwarding mode anycast-gateway

interface Vlan43
no shutdown
mtu 9192
vrf member MES
ip address 10.50.3.254/24
fabric forwarding mode anycast-gateway

interface Vlan44
no shutdown
mtu 9192
vrf member MES
ip address 10.50.4.254/24
fabric forwarding mode anycast-gateway

interface Vlan45
no shutdown
mtu 9192
vrf member MES
ip address 10.50.5.254/24
fabric forwarding mode anycast-gateway

interface Vlan46
no shutdown
mtu 9192
vrf member MES
ip address 10.50.6.254/24
fabric forwarding mode anycast-gateway

interface Vlan47
no shutdown
mtu 9192
vrf member MES
ip address 10.50.7.254/24
fabric forwarding mode anycast-gateway

interface Vlan48
no shutdown
mtu 9192
vrf member MES
ip address 10.50.8.254/24
fabric forwarding mode anycast-gateway

interface Vlan49
no shutdown
mtu 9192
vrf member MES
ip address 10.50.9.254/24
fabric forwarding mode anycast-gateway

interface Vlan50
no shutdown
mtu 9192
vrf member MES
ip address 10.50.10.254/24
fabric forwarding mode anycast-gateway

interface Vlan901
no shutdown
mtu 9192
vrf member APP
no ip redirects
ip forward

interface Vlan902
no shutdown
mtu 9192
vrf member VM
no ip redirects
ip forward

interface Vlan903
no shutdown
mtu 9192
vrf member HXYW
no ip redirects
ip forward

interface Vlan904
no shutdown
mtu 9192
vrf member MES
no ip redirects
ip forward

interface nve1
no shutdown
source-interface loopback0
host-reachability protocol bgp
member vni 1
member vni 16
mcast-group 224.1.1.3
member vni 160
mcast-group 224.1.1.1
member vni 900
member vni 1600
member vni 160010
mcast-group 224.1.1.1
member vni 160011
mcast-group 224.1.1.1
member vni 160012
mcast-group 224.1.1.1
member vni 160013
mcast-group 224.1.1.1
member vni 160014
mcast-group 224.1.1.1
member vni 160015
mcast-group 224.1.1.1
member vni 160016
mcast-group 224.1.1.1
member vni 160017
mcast-group 224.1.1.1
member vni 160018
mcast-group 224.1.1.1
member vni 160019
mcast-group 224.1.1.1
member vni 160020
mcast-group 224.1.1.1
member vni 160021
mcast-group 224.1.1.2
member vni 160022
mcast-group 224.1.1.2
member vni 160023
mcast-group 224.1.1.2
member vni 160024
mcast-group 224.1.1.2
member vni 160025
mcast-group 224.1.1.2
member vni 160026
mcast-group 224.1.1.2
member vni 160027
mcast-group 224.1.1.2
member vni 160028
mcast-group 224.1.1.2
member vni 160029
mcast-group 224.1.1.2
member vni 160030
mcast-group 224.1.1.2
member vni 160031
mcast-group 224.1.1.3
member vni 160032
mcast-group 224.1.1.3
member vni 160033
mcast-group 224.1.1.3
member vni 160034
mcast-group 224.1.1.3
member vni 160035
mcast-group 224.1.1.3
member vni 160036
mcast-group 224.1.1.3
member vni 160037
mcast-group 224.1.1.3
member vni 160038
mcast-group 224.1.1.3
member vni 160039
mcast-group 224.1.1.3
member vni 160040
mcast-group 224.1.1.4
member vni 160041
mcast-group 224.1.1.4
member vni 160042
mcast-group 224.1.1.4
member vni 160043
mcast-group 224.1.1.4
member vni 160047
mcast-group 224.1.1.4
member vni 160048
mcast-group 224.1.1.4
member vni 160049
mcast-group 224.1.1.4
member vni 160050
mcast-group 224.1.1.4
member vni 900901 associate-vrf
member vni 900902 associate-vrf
member vni 900903 associate-vrf
member vni 900904 associate-vrf

interface Ethernet1/1
no switchport
ip address 10.10.1.2/30
ip router ospf 100 area 0.0.0.0
ip pim sparse-mode
no shutdown

interface Ethernet1/2
switchport access vlan 50

interface loopback0
ip address 192.168.1.2/32
ip router ospf 100 area 0.0.0.0
ip pim sparse-mode
line console
line vty
boot nxos bootflash:/nxos.7.0.3.I5.2.bin
router ospf 100
router-id 192.168.1.2
router bgp 65001
router-id 192.168.1.2
address-family l2vpn evpn
neighbor 192.168.1.1
remote-as 65001
update-source loopback0
address-family ipv4 unicast
send-community
send-community extended
address-family l2vpn evpn
send-community
send-community extended
vrf APP
address-family ipv4 unicast
advertise l2vpn evpn
maximum-paths ibgp 4
vrf HXYW
address-family ipv4 unicast
advertise l2vpn evpn
maximum-paths ibgp 4
vrf MES
address-family ipv4 unicast
advertise l2vpn evpn
maximum-paths ibgp 4
vrf VM
address-family ipv4 unicast
advertise l2vpn evpn
maximum-paths ibgp 4
evpn
vni 160010 l2
rd auto
route-target import auto
route-target export auto
vni 160011 l2
rd auto
route-target import auto
route-target export auto
vni 160012 l2
rd auto
route-target import auto
route-target export auto
vni 160013 l2
rd auto
route-target import auto
route-target export auto
vni 160014 l2
rd auto
route-target import auto
route-target export auto
vni 160015 l2
rd auto
route-target import auto
route-target export auto
vni 160016 l2
rd auto
route-target import auto
route-target export auto
vni 160017 l2
rd auto
route-target import auto
route-target export auto
vni 160018 l2
rd auto
route-target import auto
route-target export auto
vni 160019 l2
rd auto
route-target import auto
route-target export auto
vni 160020 l2
rd auto
route-target import auto
route-target export auto
vni 160021 l2
rd auto
route-target import auto
route-target export auto
vni 160022 l2
rd auto
route-target import auto
route-target export auto
vni 160023 l2
rd auto
route-target import auto
route-target export auto
vni 160024 l2
rd auto
route-target import auto
route-target export auto
vni 160025 l2
rd auto
route-target import auto
route-target export auto
vni 160026 l2
rd auto
route-target import auto
route-target export auto
vni 160027 l2
rd auto
route-target import auto
route-target export auto
vni 160028 l2
rd auto
route-target import auto
route-target export auto
vni 160029 l2
rd auto
route-target import auto
route-target export auto
vni 160030 l2
rd auto
route-target import auto
route-target export auto
vni 160031 l2
rd auto
route-target import auto
route-target export auto
vni 160032 l2
rd auto
route-target import auto
route-target export auto
vni 160033 l2
rd auto
route-target import auto
route-target export auto
vni 160034 l2
rd auto
route-target import auto
route-target export auto
vni 160035 l2
rd auto
route-target import auto
route-target export auto
vni 160036 l2
rd auto
route-target import auto
route-target export auto
vni 160037 l2
rd auto
route-target import auto
route-target export auto
vni 160038 l2
rd auto
route-target import auto
route-target export auto
vni 160039 l2
rd auto
route-target import auto
route-target export auto
vni 160040 l2
rd auto
route-target import auto
route-target export auto
vni 160041 l2
rd auto
route-target import auto
route-target export auto
vni 160042 l2
rd auto
route-target import auto
route-target export auto
vni 160043 l2
rd auto
route-target import auto
route-target export auto
vni 160044 l2
rd auto
route-target import auto
route-target export auto
vni 160045 l2
rd auto
route-target import auto
route-target export auto
vni 160046 l2
rd auto
route-target import auto
route-target export auto
vni 160047 l2
rd auto
route-target import auto
route-target export auto
vni 160048 l2
rd auto
route-target import auto
route-target export auto
vni 160049 l2
rd auto
route-target import auto
route-target export auto
vni 160050 l2
rd auto
route-target import auto
route-target export auto

Boderleaf配置：

hostname Boderleaf
vdc Boderleaf id 1
limit-resource vlan minimum 16 maximum 4094
limit-resource vrf minimum 2 maximum 4096
limit-resource port-channel minimum 0 maximum 511
limit-resource u4route-mem minimum 248 maximum 248
limit-resource u6route-mem minimum 96 maximum 96
limit-resource m4route-mem minimum 58 maximum 58
limit-resource m6route-mem minimum 8 maximum 8

nv overlay evpn
feature ospf
feature bgp
feature pim
feature interface-vlan
feature vn-segment-vlan-based
feature nv overlay

username admin password 5 $5$9aBsFd3d$p/BQKmuf6sV8NTmOnpyrn58sxcLb.wYAsh73j.AmRQ
9 role network-admin
ip domain-lookup
snmp-server user admin network-admin auth md5 0xab8031f8945308cd33666e681cda6e58
priv 0xab8031f8945308cd33666e681cda6e58 localizedkey
rmon event 1 description FATAL(1) owner PMON@FATAL
rmon event 2 description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 description ERROR(3) owner PMON@ERROR
rmon event 4 description WARNING(4) owner PMON@WARNING
rmon event 5 description INFORMATION(5) owner PMON@INFO

ip prefix-list static2bgp seq 10 permit 0.0.0.0/0 le 32
route-map static2bgp permit 10
match ip address prefix-list static2bgp
vrf context APP
vni 900901
ip route 0.0.0.0/0 Ethernet1/2.10 10.10.3.2
rd auto
address-family ipv4 unicast
route-target both auto
route-target both auto evpn
vrf context HXYW
vni 900903
ip route 0.0.0.0/0 Ethernet1/2.30 10.10.5.2
rd auto
address-family ipv4 unicast
route-target both auto
route-target both auto evpn
vrf context MES
vni 900904
ip route 0.0.0.0/0 Ethernet1/2.40 10.10.6.2
rd auto
address-family ipv4 unicast
route-target both auto
route-target both auto evpn
vrf context VM
vni 900902
ip route 0.0.0.0/0 Ethernet1/2.20 10.10.4.2
rd auto
address-family ipv4 unicast
route-target both auto
route-target both auto evpn
vrf context management