Example for Configuring VXLAN for a Virtual Network in Distributed Gateway Mode (IPv4 over IPv6, BGP EVPN Mode)
Networking Requirements
An enterprise has constructed a mature campus network but does not have a dedicated data center network. All the servers of the enterprise are scattered in different departments and do not support centralized placement. The enterprise wants to construct a virtual data center network over the existing campus network to meet the following requirements:
- Servers scattered in different departments form a virtual network, realizing resource integration and flexible service deployment.
- The server network is an IPv6 network, and the campus interconnection network is an IPv4 network.
- A lot of VMs are deployed on servers. VMs in the same network segment achieve Layer 2 interconnection while VMs in different network segments achieve Layer 3 interconnection.
- The VXLAN Layer 3 gateway is moved downward to the VXLAN access device. The distributed gateway is deployed on the access device to optimize forwarding paths.
- The core device is responsible for communication between the VXLAN network and external networks.
This example uses the S6730-S, S6730S-S, S5732-H, S5731-S, S5731S-S, S5731S-H, S6730-H, S6730S-H, S5731-H, S5720-HI, S5730-HI, or S6720-HI as an example to describe the configuration.
Data Preparation
Device |
EVPN Instance |
RD Value |
BD |
VNI |
Router ID |
Peer IP |
|---|---|---|---|---|---|---|
VTEP1 |
- |
- |
- |
- |
10.1.1.1 |
10.2.2.2 10.3.3.3 |
VTEP2 |
evpn10:
|
1:10 |
10 |
10 |
10.2.2.2 |
10.1.1.1 10.3.3.3 |
evpn20:
|
1:20 |
20 |
20 |
10.2.2.2 |
10.1.1.1 10.3.3.3 |
|
VTEP3 |
evpn10:
|
2:10 |
10 |
10 |
10.3.3.3 |
10.1.1.1 10.2.2.2 |
evpn20:
|
2:20 |
20 |
20 |
10.3.3.3 |
10.1.1.1 10.2.2.2 |
Device |
Interface |
VPN Instance |
VNI |
RD Value |
|---|---|---|---|---|
VTEP1 |
- |
vpn1:
|
100 |
1:100 |
VTEP2 |
VBDIF 10 |
vpn1:
|
100 |
2:100 |
VBDIF 20 |
||||
VTEP3 |
VBDIF 10 |
vpn1:
|
100 |
3:100 |
VBDIF 20 |
Figure 2 Overlapped RT configuration of EVPN and VPN instances
Configuration Roadmap
The configuration roadmap is as follows:
- Configure a routing protocol on VTEP1, VTEP2, and VTEP3 to ensure Layer 3 interconnection.
- Configure a deployment mode for the VXLAN access service on VTEP2 and VTEP3, and configure a VLAN on Switch2 and Switch3.
- Configure an EVPN instance on VTEP2 and VTEP3, and bind the instance to a bridge domain (BD).
- Configure a VPN instance on VTEP1, VTEP2, and VTEP3, and bind the VPN instance to a VBDIF interface on VTEP2 and VTEP3.
- Configure a BGP EVPN peer relationship between VTEP1, VTEP2, and VTEP3.
- Configure a VXLAN tunnel on VTEP1, VTEP2, and VTEP3, respectively.
- Configure a VXLAN distributed gateway on VTEP2 and VTEP3.
- Configure a default route on VTEP1 and import BGP routes. VTEP1 is responsible for communication between users in the campus and those outside the campus.
Layer 3 interconnection of the campus network is the basis of the virtual network. If Layer 3 interconnection has been implemented on the existing campus network, ignore step 1.
Procedure
- Configure a routing protocol.
# Configure IP addresses of interfaces on VTEP2. The configurations of VTEP1 and VTEP3 are similar to those of VTEP2, and are not mentioned here. When OSPF is used, the 32-bit loopback interface addresses of devices must be advertised.
<HUAWEI> system-view [HUAWEI] sysname VTEP2 [VTEP2] interface loopback 1 [VTEP2-LoopBack1] ip address 10.2.2.2 32 [VTEP2-LoopBack1] quit [VTEP2] interface gigabitethernet 0/0/1 [VTEP2-GigabitEthernet0/0/1] undo portswitch [VTEP2-GigabitEthernet0/0/1] ip address 192.168.1.1 24 [VTEP2-GigabitEthernet0/0/1] quit [VTEP2] ospf router-id 10.2.2.2 [VTEP2-ospf-1] area 0 [VTEP2-ospf-1-area-0.0.0.0] network 10.2.2.2 0.0.0.0 [VTEP2-ospf-1-area-0.0.0.0] network 192.168.1.0 0.0.0.255 [VTEP2-ospf-1-area-0.0.0.0] quit [VTEP2-ospf-1] quit
# After OSPF is configured, VTEP1, VTEP2, and VTEP3 can learn the loopback interface address of each other and successfully ping each other. The following shows the result when VTEP2 pings VTEP3.
[VTEP2] ping 10.3.3.3 PING 10.3.3.3: 56 data bytes, press CTRL_C to break Reply from 10.3.3.3: bytes=56 Sequence=1 ttl=253 time=240 ms Reply from 10.3.3.3: bytes=56 Sequence=2 ttl=253 time=5 ms Reply from 10.3.3.3: bytes=56 Sequence=3 ttl=253 time=5 ms Reply from 10.3.3.3: bytes=56 Sequence=4 ttl=253 time=14 ms Reply from 10.3.3.3: bytes=56 Sequence=5 ttl=253 time=5 ms --- 10.3.3.3 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 5/53/240 ms - Configure VLAN access on Switch2 and Switch3 and configure the access point for the VXLAN service on VTEP2 and VTEP3.
# Configure Switch2.
<HUAWEI> system-view [HUAWEI] sysname Switch2 [Switch2] vlan batch 10 20 [Switch2] interface gigabitethernet 0/0/2 [Switch2-GigabitEthernet0/0/2] port link-type access [Switch2-GigabitEthernet0/0/2] port default vlan 10 [Switch2-GigabitEthernet0/0/2] quit [Switch2] interface gigabitethernet 0/0/3 [Switch2-GigabitEthernet0/0/3] port link-type access [Switch2-GigabitEthernet0/0/3] port default vlan 20 [Switch2-GigabitEthernet0/0/3] quit [Switch2] interface gigabitethernet 0/0/1 [Switch2-GigabitEthernet0/0/1] port link-type trunk [Switch2-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 20 [Switch2-GigabitEthernet0/0/1] quit
# Configure Switch3.
<HUAWEI> system-view [HUAWEI] sysname Switch3 [Switch3] vlan batch 10 20 [Switch3] interface gigabitethernet 0/0/2 [Switch3-GigabitEthernet0/0/2] port link-type access [Switch3-GigabitEthernet0/0/2] port default vlan 10 [Switch3-GigabitEthernet0/0/2] quit [Switch3] interface gigabitethernet 0/0/3 [Switch3-GigabitEthernet0/0/3] port link-type access [Switch3-GigabitEthernet0/0/3] port default vlan 20 [Switch3-GigabitEthernet0/0/3] quit [Switch3] interface gigabitethernet 0/0/1 [Switch3-GigabitEthernet0/0/1] port link-type trunk [Switch3-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 20 [Switch3-GigabitEthernet0/0/1] quit
# Configure VTEP2.
[VTEP2] bridge-domain 10 [VTEP2-bd10] quit [VTEP2] vcmp role silent [VTEP2] interface gigabitethernet 0/0/2 [VTEP2-GigabitEthernet0/0/2] port link-type trunk [VTEP2-GigabitEthernet0/0/2] quit [VTEP2] interface gigabitethernet 0/0/2.1 mode l2 [VTEP2-GigabitEthernet0/0/2.1] encapsulation dot1q vid 10 [VTEP2-GigabitEthernet0/0/2.1] bridge-domain 10 [VTEP2-GigabitEthernet0/0/2.1] quit [VTEP2] bridge-domain 20 [VTEP2-bd20] quit [VTEP2] interface gigabitethernet 0/0/2.2 mode l2 [VTEP2-GigabitEthernet0/0/2.2] encapsulation dot1q vid 20 [VTEP2-GigabitEthernet0/0/2.2] bridge-domain 20 [VTEP2-GigabitEthernet0/0/2.2] quit
# Configure VTEP3.
[VTEP3] bridge-domain 10 [VTEP3-bd10] quit [VTEP3] vcmp role silent [VTEP3] interface gigabitethernet 0/0/2 [VTEP3-GigabitEthernet0/0/2] port link-type trunk [VTEP3-GigabitEthernet0/0/2] quit [VTEP3] interface gigabitethernet 0/0/2.1 mode l2 [VTEP3-GigabitEthernet0/0/2.1] encapsulation dot1q vid 10 [VTEP3-GigabitEthernet0/0/2.1] bridge-domain 10 [VTEP3-GigabitEthernet0/0/2.1] quit [VTEP3] bridge-domain 20 [VTEP3-bd20] quit [VTEP3] interface gigabitethernet 0/0/2.2 mode l2 [VTEP3-GigabitEthernet0/0/2.2] encapsulation dot1q vid 20 [VTEP3-GigabitEthernet0/0/2.2] bridge-domain 20 [VTEP3-GigabitEthernet0/0/2.2] quit
- Configure an EVPN instance on VTEP2 and VTEP3, and bind the instance to a BD.
# Configure VTEP2.
[VTEP2] evpn vpn-instance evpn10 bd-mode [VTEP2-evpn-instance-evpn10] route-distinguisher 1:10 [VTEP2-evpn-instance-evpn10] vpn-target 10:1 both [VTEP2-evpn-instance-evpn10] vpn-target 1:100 export-extcommunity [VTEP2-evpn-instance-evpn10] quit [VTEP2] bridge-domain 10 [VTEP2-bd10] vxlan vni 10 [VTEP2-bd10] evpn binding vpn-instance evpn10 [VTEP2-bd10] quit [VTEP2] evpn vpn-instance evpn20 bd-mode [VTEP2-evpn-instance-evpn20] route-distinguisher 1:20 [VTEP2-evpn-instance-evpn20] vpn-target 20:1 both [VTEP2-evpn-instance-evpn20] vpn-target 1:100 export-extcommunity [VTEP2-evpn-instance-evpn20] quit [VTEP2] bridge-domain 20 [VTEP2-bd20] vxlan vni 20 [VTEP2-bd20] evpn binding vpn-instance evpn20 [VTEP2-bd20] quit
# Configure VTEP3.
[VTEP3] evpn vpn-instance evpn10 bd-mode [VTEP3-evpn-instance-evpn10] route-distinguisher 2:10 [VTEP3-evpn-instance-evpn10] vpn-target 10:1 both [VTEP3-evpn-instance-evpn10] vpn-target 1:100 export-extcommunity [VTEP3-evpn-instance-evpn10] quit [VTEP3] bridge-domain 10 [VTEP3-bd10] vxlan vni 10 [VTEP3-bd10] evpn binding vpn-instance evpn10 [VTEP3-bd10] quit [VTEP3] evpn vpn-instance evpn20 bd-mode [VTEP3-evpn-instance-evpn20] route-distinguisher 2:20 [VTEP3-evpn-instance-evpn20] vpn-target 20:1 both [VTEP3-evpn-instance-evpn20] vpn-target 1:100 export-extcommunity [VTEP3-evpn-instance-evpn20] quit [VTEP3] bridge-domain 20 [VTEP3-bd20] vxlan vni 20 [VTEP3-bd20] evpn binding vpn-instance evpn20 [VTEP3-bd20] quit
- Configure a VPN instance on VTEP1, VTEP2, and VTEP3, and bind the VPN instance to a VBDIF interface on VTEP2 and VTEP3.
# Configure VTEP1.
[VTEP1] ip vpn-instance vpn1 [VTEP1-vpn-instance-vpn1] ipv6-family [VTEP1-vpn-instance-vpn1-af-ipv6] route-distinguisher 1:100 [VTEP1-vpn-instance-vpn1-af-ipv6] vpn-target 1:100 both evpn [VTEP1-vpn-instance-vpn1-af-ipv6] quit [VTEP1-vpn-instance-vpn1] vxlan vni 100 [VTEP1-vpn-instance-vpn1] quit
# Configure VTEP2.
[VTEP2] ip vpn-instance vpn1 [VTEP2-vpn-instance-vpn1] ipv6-family [VTEP2-vpn-instance-vpn1-af-ipv6] route-distinguisher 2:100 [VTEP2-vpn-instance-vpn1-af-ipv6] vpn-target 1:100 both evpn [VTEP2-vpn-instance-vpn1-af-ipv6] quit [VTEP2-vpn-instance-vpn1] vxlan vni 100 [VTEP2-vpn-instance-vpn1] quit [VTEP2] interface vbdif 10 [VTEP2-Vbdif10] ip binding vpn-instance vpn1 [VTEP2-Vbdif10] quit [VTEP2] interface vbdif 20 [VTEP2-Vbdif20] ip binding vpn-instance vpn1 [VTEP2-Vbdif20] quit
# Configure VTEP3.
[VTEP3] ip vpn-instance vpn1 [VTEP3-vpn-instance-vpn1] ipv6-family [VTEP3-vpn-instance-vpn1-af-ipv6] route-distinguisher 3:100 [VTEP3-vpn-instance-vpn1-af-ipv6] vpn-target 1:100 both evpn [VTEP3-vpn-instance-vpn1-af-ipv6] quit [VTEP3-vpn-instance-vpn1] vxlan vni 100 [VTEP3-vpn-instance-vpn1] quit [VTEP3] interface vbdif 10 [VTEP3-Vbdif10] ip binding vpn-instance vpn1 [VTEP3-Vbdif10] quit [VTEP3] interface vbdif 20 [VTEP3-Vbdif20] ip binding vpn-instance vpn1 [VTEP3-Vbdif20] quit
- Configure a BGP EVPN peer relationship between VTEP1, VTEP2, and VTEP3.
# Configure VTEP1.
[VTEP1] bgp 100 [VTEP1-bgp] router-id 10.1.1.1 [VTEP1-bgp] peer 10.2.2.2 as-number 100 [VTEP1-bgp] peer 10.2.2.2 connect-interface LoopBack1 [VTEP1-bgp] peer 10.3.3.3 as-number 100 [VTEP1-bgp] peer 10.3.3.3 connect-interface LoopBack1 [VTEP1-bgp] l2vpn-family evpn [VTEP1-bgp-af-evpn] peer 10.2.2.2 enable [VTEP1-bgp-af-evpn] peer 10.2.2.2 advertise irbv6 [VTEP1-bgp-af-evpn] peer 10.3.3.3 enable [VTEP1-bgp-af-evpn] peer 10.3.3.3 advertise irbv6 [VTEP1-bgp-af-evpn] quit [VTEP1-bgp] ipv6-family vpn-instance vpn1 [VTEP1-bgp-vpn1] advertise l2vpn evpn [VTEP1-bgp-vpn1] import-route direct [VTEP1-bgp-vpn1] quit [VTEP1-bgp] quit
# Configure VTEP2.
[VTEP2] bgp 100 [VTEP2-bgp] router-id 10.2.2.2 [VTEP2-bgp] peer 10.1.1.1 as-number 100 [VTEP2-bgp] peer 10.1.1.1 connect-interface LoopBack1 [VTEP2-bgp] peer 10.3.3.3 as-number 100 [VTEP2-bgp] peer 10.3.3.3 connect-interface LoopBack1 [VTEP2-bgp] l2vpn-family evpn [VTEP2-bgp-af-evpn] peer 10.1.1.1 enable [VTEP2-bgp-af-evpn] peer 10.1.1.1 advertise irbv6 [VTEP2-bgp-af-evpn] peer 10.3.3.3 enable [VTEP2-bgp-af-evpn] peer 10.3.3.3 advertise irbv6 [VTEP2-bgp-af-evpn] quit [VTEP2-bgp] ipv6-family vpn-instance vpn1 [VTEP2-bgp-vpn1] advertise l2vpn evpn [VTEP2-bgp-vpn1] import-route direct [VTEP2-bgp-vpn1] quit [VTEP2-bgp] quit
# Configure VTEP3.
[VTEP3] bgp 100 [VTEP3-bgp] router-id 10.3.3.3 [VTEP3-bgp] peer 10.1.1.1 as-number 100 [VTEP3-bgp] peer 10.1.1.1 connect-interface LoopBack1 [VTEP3-bgp] peer 10.2.2.2 as-number 100 [VTEP3-bgp] peer 10.2.2.2 connect-interface LoopBack1 [VTEP3-bgp] l2vpn-family evpn [VTEP3-bgp-af-evpn] peer 10.1.1.1 enable [VTEP3-bgp-af-evpn] peer 10.1.1.1 advertise irbv6 [VTEP3-bgp-af-evpn] peer 10.2.2.2 enable [VTEP3-bgp-af-evpn] peer 10.2.2.2 advertise irbv6 [VTEP3-bgp-af-evpn] quit [VTEP3-bgp] ipv6-family vpn-instance vpn1 [VTEP3-bgp-vpn1] advertise l2vpn evpn [VTEP3-bgp-vpn1] import-route direct [VTEP3-bgp-vpn1] quit [VTEP3-bgp] quit
- Configure a VXLAN tunnel on VTEP1, VTEP2, and VTEP3, respectively.
# Configure VTEP1.
[VTEP1] interface nve 1 [VTEP1-Nve1] source 10.1.1.1 [VTEP1-Nve1] quit
# Configure VTEP2.
[VTEP2] interface nve 1 [VTEP2-Nve1] source 10.2.2.2 [VTEP2-Nve1] vni 10 head-end peer-list protocol bgp [VTEP2-Nve1] vni 20 head-end peer-list protocol bgp [VTEP2-Nve1] quit
# Configure VTEP3.
[VTEP3] interface nve 1 [VTEP3-Nve1] source 10.3.3.3 [VTEP3-Nve1] vni 10 head-end peer-list protocol bgp [VTEP3-Nve1] vni 20 head-end peer-list protocol bgp [VTEP3-Nve1] quit
- Configure a VXLAN distributed gateway on VTEP2 and VTEP3.
# Configure VTEP2.
[VTEP2] ipv6 [VTEP2] interface vbdif 10 [VTEP2-Vbdif10] ipv6 enable [VTEP2-Vbdif10] ipv6 address fc00:1::1 64 [VTEP2-Vbdif10] ipv6 nd distribute-gateway enable [VTEP2-Vbdif10] ipv6 nd collect host enable [VTEP2-Vbdif10] mac-address 0000-5e00-0101 [VTEP2-Vbdif10] quit [VTEP2] interface vbdif 20 [VTEP2-Vbdif20] ipv6 enable [VTEP2-Vbdif20] ipv6 address fc00:2::1 64 [VTEP2-Vbdif20] ipv6 nd distribute-gateway enable [VTEP2-Vbdif20] ipv6 nd collect host enable [VTEP2-Vbdif20] mac-address 0000-5e00-0102 [VTEP2-Vbdif20] quit
# Configure VTEP3.
[VTEP3] ipv6 [VTEP3] interface vbdif 10 [VTEP3-Vbdif10] ipv6 enable [VTEP3-Vbdif10] ipv6 address fc00:1::1 64 [VTEP3-Vbdif10] ipv6 nd distribute-gateway enable [VTEP3-Vbdif10] ipv6 nd collect host enable [VTEP3-Vbdif10] mac-address 0000-5e00-0101 [VTEP3-Vbdif10] quit [VTEP3] interface vbdif 20 [VTEP3-Vbdif20] ipv6 enable [VTEP3-Vbdif20] ipv6 address fc00:2::1 64 [VTEP3-Vbdif20] ipv6 nd distribute-gateway enable [VTEP3-Vbdif20] ipv6 nd collect host enable [VTEP3-Vbdif20] mac-address 0000-5e00-0102 [VTEP3-Vbdif20] quit
- Configure a default route on VTEP1 and import BGP routes.
# Configure VTEP1.
[VTEP1] ipv6 [VTEP1] ipv6 route-static vpn-instance vpn1 :: 0 NULL0 [VTEP1] bgp 100 [VTEP1-bgp] ipv6-family vpn-instance vpn1 [VTEP1-bgp6-vpn1] import-route static [VTEP1-bgp6-vpn1] default-route imported [VTEP1-bgp6-vpn1] quit [VTEP1-bgp] quit
- Verify configuration results.
# After the preceding configuration, run the display vxlan vni and display vxlan tunnel commands on VTEP1, VTEP2, and VTEP3. You can view that the VNI state is up and VXLAN tunnel information is displayed. The following shows the result of VTEP2.
[VTEP2] display vxlan vni VNI BD-ID State ----------------------------------------- 10 10 up 20 20 up ----------------------------------------- Number of vxlan vni bound to BD is : 2 VNI VRF-ID ----------------------------------------- 100 1 ----------------------------------------- Number of vxlan vni bound to VPN is : 1
[VTEP2] display vxlan tunnel Tunnel ID Source Destination State Type -------------------------------------------------------------------------------------------------------------------- 4026531841 10.2.2.2 10.3.3.3 up l2 dynamic 1 10.2.2.2 10.1.1.1 up l3 dynamic 2 10.2.2.2 10.3.3.3 up l3 dynamic -------------------------------------------------------------------------------------------------------------------- Number of vxlan tunnel : Total : 3 Static: 0 L2 dynamic: 1 L3 dynamic: 2
# After the configuration, users in the same network segment achieve Layer 2 interconnection. The following shows the result when Server1 VM1 pings Server3 VM1.
C:\Users\VM1>ping fc00:1::3 PING fc00:1::3 : 56 data bytes, press CTRL_C to break Reply from fc00:1::3 bytes=56 Sequence=1 hop limit=63 time = 4 ms Reply from fc00:1::3 bytes=56 Sequence=2 hop limit=63 time = 4 ms Reply from fc00:1::3 bytes=56 Sequence=3 hop limit=63 time = 5 ms Reply from fc00:1::3 bytes=56 Sequence=4 hop limit=63 time = 4 ms Reply from fc00:1::3 bytes=56 Sequence=5 hop limit=63 time = 4 ms --- fc00:1::3 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 4/4/5 ms# Users in different network segments achieve Layer 3 interconnection. The following shows the result when Server1 VM1 pings Server4 VM1.
C:\Users\VM1>ping fc00:2::3 PING fc00:2::3 : 56 data bytes, press CTRL_C to break Reply from FC00:2::3 bytes=56 Sequence=1 hop limit=63 time = 4 ms Reply from FC00:2::3 bytes=56 Sequence=2 hop limit=63 time = 4 ms Reply from FC00:2::3 bytes=56 Sequence=3 hop limit=63 time = 5 ms Reply from FC00:2::3 bytes=56 Sequence=4 hop limit=63 time = 4 ms Reply from FC00:2::3 bytes=56 Sequence=5 hop limit=63 time = 4 ms --- fc00:2::3 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 4/4/5 ms - Verify the VM migration result.
For example, VM1 (IP address: FC00:1::2) is migrated from Server1 to Server3. Compare the ND entries of VTEP2 and VTEP3 and the routing tables of VTEP1 before and after the migration to verify the migration result.
Before the migration:
# Check the routing table of VPN instance vpn1 on VTEP1.
[VTEP1] display ipv6 routing-table vpn-instance vpn1 Routing Table : vpn1 Destinations : 7 Routes : 7 Destination : :: PrefixLength : 0 NextHop : :: Preference : 60 Cost : 0 Protocol : Static RelayNextHop : :: TunnelID : 0x0 Interface : NULL0 Flags : D Destination : FC00:1:: PrefixLength : 64 NextHop : ::FFFF:10.2.2.2 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x2 Interface : VXLAN Flags : RD Destination : FC00:1::2 PrefixLength : 128 NextHop : ::FFFF:10.2.2.2 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x2 Interface : VXLAN Flags : RD Destination : FC00:1::3 PrefixLength : 128 NextHop : ::FFFF:10.3.3.3 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x1 Interface : VXLAN Flags : RD Destination : FC00:2:: PrefixLength : 64 NextHop : ::FFFF:10.2.2.2 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x2 Interface : VXLAN Flags : RD Destination : FC00:2::2 PrefixLength : 128 NextHop : ::FFFF:10.2.2.2 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x2 Interface : VXLAN Flags : RD Destination : FC00:2::3 PrefixLength : 128 NextHop : ::FFFF:10.3.3.3 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x1 Interface : VXLAN Flags : RD
# Check the ND table of VPN instance vpn1 on VTEP2.
[VTEP2] display ipv6 neighbors vpn-instance vpn1 ----------------------------------------------------------------------------- IPv6 Address : FC00:1::2 Link-layer : 2cab-0098-15db State : STALE Interface : GE0/0/2.1 Age : 00h01m04s VLAN : 10 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 10 IPv6 Address : FE80::2EAB:FF:FE98:15DB Link-layer : 2cab-0098-15db State : STALE Interface : GE0/0/2.1 Age : 00h01m53s VLAN : 10 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 10 IPv6 Address : FC00:2::2 Link-layer : 2cab-0098-15d6 State : STALE Interface : GE0/0/2.2 Age : 00h01m47s VLAN : 20 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 20 IPv6 Address : FE80::2EAB:FF:FE98:15D6 Link-layer : 2cab-0098-15d6 State : STALE Interface : GE0/0/2.2 Age : 00h01m49s VLAN : 20 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 20 ----------------------------------------------------------------------------- Total: 4 Dynamic: 4 Static: 0
# Check the ND table of VPN instance vpn1 on VTEP3.
[VTEP3] display ipv6 neighbors vpn-instance vpn1 ----------------------------------------------------------------------------- IPv6 Address : FC00:1::3 Link-layer : 000b-099d-eb3b State : STALE Interface : GE0/0/2.1 Age : 00h01m44s VLAN : 10 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 10 IPv6 Address : FE80::20B:9FF:FE9D:EB3B Link-layer : 000b-099d-eb3b State : STALE Interface : GE0/0/2.1 Age : 00h07m19s VLAN : 10 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 10 IPv6 Address : FC00:2::3 Link-layer : 000b-099d-fb3b State : STALE Interface : GE0/0/2.2 Age : 00h02m33s VLAN : 20 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 20 IPv6 Address : FE80::20B:9FF:FE9D:FB3B Link-layer : 000b-099d-fb3b State : STALE Interface : GE0/0/2.2 Age : 00h02m35s VLAN : 20 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 20 ----------------------------------------------------------------------------- Total: 4 Dynamic: 4 Static: 0
After the migration:
# Check the routing table of VPN instance vpn1 on VTEP1.
[VTEP1] display ipv6 routing-table vpn-instance vpn1 Routing Table : vpn1 Destinations : 7 Routes : 7 Destination : :: PrefixLength : 0 NextHop : :: Preference : 60 Cost : 0 Protocol : Static RelayNextHop : :: TunnelID : 0x0 Interface : NULL0 Flags : D Destination : FC00:1:: PrefixLength : 64 NextHop : ::FFFF:10.2.2.2 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x2 Interface : VXLAN Flags : RD Destination : FC00:1::2 PrefixLength : 128 NextHop : ::FFFF:10.3.3.3 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x1 Interface : VXLAN Flags : RD Destination : FC00:1::3 PrefixLength : 128 NextHop : ::FFFF:10.3.3.3 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x1 Interface : VXLAN Flags : RD Destination : FC00:2:: PrefixLength : 64 NextHop : ::FFFF:10.2.2.2 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x2 Interface : VXLAN Flags : RD Destination : FC00:2::2 PrefixLength : 128 NextHop : ::FFFF:10.2.2.2 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x2 Interface : VXLAN Flags : RD Destination : FC00:2::3 PrefixLength : 128 NextHop : ::FFFF:10.3.3.3 Preference : 255 Cost : 0 Protocol : IBGP RelayNextHop : ::FFFF:0.0.0.0 TunnelID : 0x1 Interface : VXLAN Flags : RD
# Check the ND table of VPN instance vpn1 on VTEP2.
[VTEP2] display ipv6 neighbors vpn-instance vpn1 ----------------------------------------------------------------------------- IPv6 Address : FC00:2::2 Link-layer : 2cab-0098-15d6 State : STALE Interface : GE0/0/2.2 Age : 00h11m34s VLAN : 20 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 20 IPv6 Address : FE80::2EAB:FF:FE98:15D6 Link-layer : 2cab-0098-15d6 State : STALE Interface : GE0/0/2.2 Age : 00h11m36s VLAN : 20 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 20 ----------------------------------------------------------------------------- Total: 2 Dynamic: 2 Static: 0
# Check the ND table of VPN instance vpn1 on VTEP3.
[VTEP3] display ipv6 neighbors vpn-instance vpn1 ----------------------------------------------------------------------------- IPv6 Address : FC00:1::2 Link-layer : 0487-ea01-0506 State : STALE Interface : GE0/0/2.1 Age : 00h15m49s VLAN : 10 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 10 IPv6 Address : FE80::687:EAFF:FE01:506 Link-layer : 0487-ea01-0506 State : REACH Interface : GE0/0/2.1 Age : 00h00m16s VLAN : 10 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 10 IPv6 Address : FC00:1::3 Link-layer : 000b-099d-eb3b State : STALE Interface : GE0/0/2.1 Age : 00h11m25s VLAN : 10 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 10 IPv6 Address : FE80::20B:9FF:FE9D:EB3B Link-layer : 000b-099d-eb3b State : STALE Interface : GE0/0/2.1 Age : 00h17m00s VLAN : 10 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 10 IPv6 Address : FC00:2::3 Link-layer : 000b-099d-fb3b State : STALE Interface : GE0/0/2.2 Age : 00h12m17s VLAN : 20 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 20 IPv6 Address : FE80::20B:9FF:FE9D:FB3B Link-layer : 000b-099d-fb3b State : STALE Interface : GE0/0/2.2 Age : 00h12m19s VLAN : 20 CEVLAN: - VPN name : vpn1 Is Router: TRUE Bridge-domain: 20 ----------------------------------------------------------------------------- Total: 6 Dynamic: 6 Static: 0
# Compare the ND entries of VTEP2 and VTEP3 and the routing tables of VTEP1 before and after the migration. The preceding command outputs show that the ND entry of VM1 is deleted from the ND table of VTEP2 and added to the ND table of VTEP3, and the host route of VM1 is also switched from VTEP2 to VTEP3, ensuring the network connectivity after the migration.
Configuration Files
VTEP1 configuration file
# sysname VTEP1 # ipv6 # ip vpn-instance vpn1 ipv6-family route-distinguisher 1:100 vpn-target 1:100 export-extcommunity evpn vpn-target 1:100 import-extcommunity evpn vxlan vni 100 # interface GigabitEthernet0/0/1 undo portswitch ip address 192.168.1.2 255.255.255.0 # interface GigabitEthernet0/0/2 undo portswitch ip address 192.168.2.1 255.255.255.0 # interface LoopBack1 ip address 10.1.1.1 255.255.255.255 # interface Nve1 source 10.1.1.1 # bgp 100 router-id 10.1.1.1 peer 10.2.2.2 as-number 100 peer 10.2.2.2 connect-interface LoopBack1 peer 10.3.3.3 as-number 100 peer 10.3.3.3 connect-interface LoopBack1 # ipv4-family unicast undo synchronization default-route imported import-route direct import-route static peer 10.2.2.2 enable peer 10.3.3.3 enable # l2vpn-family evpn policy vpn-target peer 10.2.2.2 enable peer 10.2.2.2 advertise irbv6 peer 10.3.3.3 enable peer 10.3.3.3 advertise irbv6 # ipv6-family vpn-instance vpn1 default-route imported import-route direct import-route static advertise l2vpn evpn # ospf 1 router-id 10.1.1.1 area 0.0.0.0 network 10.1.1.1 0.0.0.0 network 192.168.1.0 0.0.0.255 network 192.168.2.0 0.0.0.255 # ipv6 route-static vpn-instance vpn1 :: 0 NULL0 # return
VTEP2 configuration file
# sysname VTEP2 # ipv6 # vcmp role silent # ip vpn-instance vpn1 ipv6-family route-distinguisher 2:100 vpn-target 1:100 export-extcommunity evpn vpn-target 1:100 import-extcommunity evpn vxlan vni 100 # evpn vpn-instance evpn10 bd-mode route-distinguisher 1:10 vpn-target 1:100 10:1 export-extcommunity vpn-target 10:1 import-extcommunity # evpn vpn-instance evpn20 bd-mode route-distinguisher 1:20 vpn-target 1:100 20:1 export-extcommunity vpn-target 20:1 import-extcommunity # bridge-domain 10 vxlan vni 10 evpn binding vpn-instance evpn10 bridge-domain 20 vxlan vni 20 evpn binding vpn-instance evpn20 # interface GigabitEthernet0/0/1 undo portswitch ip address 192.168.1.1 255.255.255.0 # interface GigabitEthernet0/0/2 port link-type trunk # interface GigabitEthernet0/0/2.1 mode l2 encapsulation dot1q vid 10 bridge-domain 10 # interface GigabitEthernet0/0/2.2 mode l2 encapsulation dot1q vid 20 bridge-domain 20 # interface LoopBack1 ip address 10.2.2.2 255.255.255.255 # interface Vbdif10 mac-address 0000-5e00-0101 ip binding vpn-instance vpn1 ipv6 enable ipv6 address FC00:1::1/64 ipv6 nd collect host enable ipv6 nd distribute-gateway enable # interface Vbdif20 mac-address 0000-5e00-0102 ip binding vpn-instance vpn1 ipv6 enable ipv6 address FC00:2::1/64 ipv6 nd collect host enable ipv6 nd distribute-gateway enable # interface Nve1 source 10.2.2.2 vni 10 head-end peer-list protocol bgp vni 20 head-end peer-list protocol bgp # bgp 100 router-id 10.2.2.2 peer 10.1.1.1 as-number 100 peer 10.1.1.1 connect-interface LoopBack1 peer 10.3.3.3 as-number 100 peer 10.3.3.3 connect-interface LoopBack1 # ipv4-family unicast undo synchronization peer 10.1.1.1 enable peer 10.3.3.3 enable # l2vpn-family evpn policy vpn-target peer 10.1.1.1 enable peer 10.1.1.1 advertise irbv6 peer 10.3.3.3 enable peer 10.3.3.3 advertise irbv6 # ipv6-family vpn-instance vpn1 import-route direct advertise l2vpn evpn # ospf 1 router-id 10.2.2.2 area 0.0.0.0 network 10.2.2.2 0.0.0.0 network 192.168.1.0 0.0.0.255 # return
VTEP3 configuration file
# sysname VTEP3 # ipv6 # vcmp role silent # ip vpn-instance vpn1 ipv6-family route-distinguisher 3:100 vpn-target 1:100 export-extcommunity evpn vpn-target 1:100 import-extcommunity evpn vxlan vni 100 # evpn vpn-instance evpn10 bd-mode route-distinguisher 2:10 vpn-target 1:100 10:1 export-extcommunity vpn-target 10:1 import-extcommunity # evpn vpn-instance evpn20 bd-mode route-distinguisher 2:20 vpn-target 1:100 20:1 export-extcommunity vpn-target 20:1 import-extcommunity # bridge-domain 10 vxlan vni 10 evpn binding vpn-instance evpn10 bridge-domain 20 vxlan vni 20 evpn binding vpn-instance evpn20 # interface GigabitEthernet0/0/1 undo portswitch ip address 192.168.2.2 255.255.255.0 # interface GigabitEthernet0/0/2 port link-type trunk # interface GigabitEthernet0/0/2.1 mode l2 encapsulation dot1q vid 10 bridge-domain 10 # interface GigabitEthernet0/0/2.2 mode l2 encapsulation dot1q vid 20 bridge-domain 20 # interface LoopBack1 ip address 10.3.3.3 255.255.255.255 # interface Vbdif10 mac-address 0000-5e00-0101 ip binding vpn-instance vpn1 ipv6 enable ipv6 address FC00:1::1/64 ipv6 nd collect host enable ipv6 nd distribute-gateway enable # interface Vbdif20 mac-address 0000-5e00-0102 ip binding vpn-instance vpn1 ipv6 enable ipv6 address FC00:2::1/64 ipv6 nd collect host enable ipv6 nd distribute-gateway enable # interface Nve1 source 10.3.3.3 vni 10 head-end peer-list protocol bgp vni 20 head-end peer-list protocol bgp # bgp 100 router-id 10.3.3.3 peer 10.1.1.1 as-number 100 peer 10.1.1.1 connect-interface LoopBack1 peer 10.2.2.2 as-number 100 peer 10.2.2.2 connect-interface LoopBack1 # ipv4-family unicast undo synchronization peer 10.1.1.1 enable peer 10.2.2.2 enable # l2vpn-family evpn policy vpn-target peer 10.1.1.1 enable peer 10.1.1.1 advertise irbv6 peer 10.2.2.2 enable peer 10.2.2.2 advertise irbv6 # ipv6-family vpn-instance vpn1 import-route direct advertise l2vpn evpn # ospf 1 router-id 10.3.3.3 area 0.0.0.0 network 10.3.3.3 0.0.0.0 network 192.168.2.0 0.0.0.255 # return
Switch2 configuration file
# sysname Switch2 # vlan batch 10 20 # interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 20 # interface GigabitEthernet0/0/2 port link-type access port default vlan 10 # interface GigabitEthernet0/0/3 port link-type access port default vlan 20 # return
Switch3 configuration file
# sysname Switch3 # vlan batch 10 20 # interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 20 # interface GigabitEthernet0/0/2 port link-type access port default vlan 10 # interface GigabitEthernet0/0/3 port link-type access port default vlan 20 # return