Configuring EVPN ORF

After EVPN outbound route filtering (ORF) is configured, the BGP-EVPN address family can filter the routes being advertised to a peer by comparing the export VPN target (ERT) of the routes with the import VPN target (IRT) of the remote peer. This reduces network load.

Usage Scenario

The growing number of services over EVPNs has triggered a proliferation of new users. As a result, BGP-EVPN peers on an EVPN send vast quantities of EVPN routes to each other. Even if the remote peer does not have an RT-matching EVPN instance, the local PE still sends it EVPN routes. To reduce network load, each PE needs to receive only desired routes. If a separate export route policy is configured for each user, the cost of O&M goes up. To address this issue, EVPN ORF can be deployed.

After this function is configured, each PE on the EVPN sends the IRT and original AS number of locally desired routes to the other PEs or BGP EVPN RRs that function as BGP-EVPN peers. The information is sent through ORF routes. Upon receipt, the peers construct export route policies based on these routes so that the local PE only receives the expected routes, which reduces the receiving pressure on the local PE.

Pre-configuration Tasks

Before configuring EVPN ORF, ensure that one of the following EVPN functions has been configured: PBB-EVPN, BD-EVPN Functions, Common EVPN Functions, and EVPN VPWS over MPLS Functions

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run bgp { as-number-plain | as-number-dot }

    The BGP view is displayed.

  3. Run ipv4-family vpn-target

    The BGP-VT address family view is displayed.

  4. Run peer { ipv4-address | group-name } enable

    ORF route exchange with a specified peer or peer group is enabled.

  5. (Optional) Run peer { group-name | ipv4-address } reflect-client

    Local device is enabled as an RR, and the peer or peer group is specified as RR clients. Even on an EVPN where an RR is deployed, perform this step on the RR to enable the RR function in the BGP-VT address family view.

  6. Run quit

    Exit from the BGP-VT address family view.

  7. Run l2vpn-family evpn

    The BGP-EVPN address family view is displayed.

  8. Run vpn-orf enable

    EVPN ORF is enabled.

  9. (Optional) Run peer { ipv4-address | group-name } vpn-orf disable

    EVPN ORF is disabled for a specified BGP EVPN peer or peer group.

    On a network where EVPN and L3VPN services are both deployed, a PE does not support EVPN ORF because of running an early version. After an RR establishes BGP-VT peer relationships with all the PEs on the entire network and EVPN ORF is enabled on the other PEs and RR, the PE running an early version cannot exchange EVPN routes with the RR. As a result, EVPN services cannot run properly. To resolve this issue, run the peer vpn-orf disable command to disable the RR from filtering routes based on the IRT for the PE running an early version so that the PE can advertise and receive EVPN routes properly. This ensures that the EVPN services run properly.

  10. Run commit

    The configuration is committed.

Verifying the EVPN ORF Configuration

Run the display bgp vpn-target routing-table command to check the routing information in the BGP-VT address family.

Run the display bgp evpn all routing-table peer peer-address advertised-routes command to check the information about the advertised routes.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >