Example for Configuring the NFVI Distributed Gateway Function (Quad-Active DC-GWs)

This section provides an example for configuring the NFVI distributed function when the quad-active gateway function is deployed on DC-GWs.

Networking Requirements

The NFVI telco cloud solution uses the DCI+DCN networking. A large amount of IPv4 and IPv6 mobile phone traffic is sent to vUGWs and vMSEs on the DCN. After being processed by the vUGWs and vMSEs, the mobile phone traffic is forwarded over the DCN to destination devices on the Internet. The destination devices send traffic to mobile phones in similar ways. To achieve these functions and ensure traffic load balancing on the DCN, you need to deploy the NFVI distributed gateway function.

Figure 1 shows the networking of an NFVI distributed gateway. DC-GWs, which are the border gateways of the DCN, can exchange Internet routes with external devices. L2GW/L3GW1 and L2GW/L3GW2 are connected to VNFs. VNF1 and VNF2 that function as virtualized NEs are deployed to implement the vUGW functions and vMSE functions, respectively. VNF1 and VNF2 are each connected to L2GW/L3GW1 and L2GW/L3GW2 through IPUs.

This networking can be considered a combination of the distributed gateway function and the VXLAN quad-active gateway function.

  • The VXLAN quad-active gateway function is deployed on DC-GWs. Specifically, a bypass VXLAN tunnel is established between four DC-GWs, and the four DC-GWs use the same virtual anycast VTEP address to establish a VXLAN tunnel with L2GW/L3GW1 and L2GW/L3GW2, respectively.

  • The distributed gateway function is deployed on L2GW/L3GW1 and L2GW/L3GW2, and a VXLAN tunnel is established between L2GW/L3GW1 and L2GW/L3GW2.

NetEngine 8000 Fs can be deployed as DC-GWs and L2GW/L3GWs in this networking.

Figure 1 Configuring the NFVI distributed gateway function (quad-active DC-GWs)

Interfaces 1 through 6 in this example represent GE 0/1/1, GE 0/1/2, GE 0/1/3, GE 0/1/3, GE 0/1/4, and GE 0/1/5, respectively.



Table 1 IP address planning

Device

Interface

IP Address

DCGW1

GigabitEthernet 0/1/1

10.6.1.1/24

GigabitEthernet 0/1/2

10.6.2.1/24

GigabitEthernet 0/1/3

10.6.5.1/24

LoopBack0

9.9.9.9/32

LoopBack1

3.3.3.3/32

LoopBack2

2001:db8:33::33/128

33.33.33.33/32

DCGW2

GigabitEthernet 0/1/1

10.6.1.2/24

GigabitEthernet 0/1/2

10.6.3.1/24

GigabitEthernet 0/1/3

10.6.6.1/24

LoopBack0

9.9.9.9/32

LoopBack1

4.4.4.4/32

LoopBack2

2001:db8:44::44/128

44.44.44.44/32

DCGW3

GigabitEthernet 0/1/1

10.6.7.1/24

GigabitEthernet 0/1/2

10.6.5.2/24

LoopBack0

9.9.9.9/32

LoopBack1

7.7.7.7/32

LoopBack2

2001:db8:77::77/128

77.77.77.77/32

DCGW4

GigabitEthernet 0/1/1

10.6.7.2/24

GigabitEthernet 0/1/2

10.6.6.2/24

LoopBack0

9.9.9.9/32

LoopBack1

8.8.8.8/32

LoopBack2

2001:db8:88::88/128

88.88.88.88/32

L2GW/L3GW1

GigabitEthernet 0/1/1

10.6.4.1/24

GigabitEthernet 0/1/2

10.6.2.2/24

GigabitEthernet 0/1/3

-

GigabitEthernet 0/1/4

-

GigabitEthernet 0/1/5

-

LoopBack1

1.1.1.1/32

L2GW/L3GW2

GigabitEthernet 0/1/1

10.6.4.2/24

GigabitEthernet 0/1/2

10.6.3.2/24

GigabitEthernet 0/1/3

-

GigabitEthernet 0/1/4

-

LoopBack1

2.2.2.2/32

Configuration Roadmap

The configuration roadmap is as follows:

  1. Configure a routing protocol on DC-GWs and L2GW/L3GWs to ensure Layer 3 networking. OSPF is used in this example.
  2. Configure EVPN instances on DC-GWs and L2GW/L3GWs and bind the EVPN instances to BDs.
  3. Configure L3VPN instances on DC-GWs and L2GW/L3GWs and bind the L3VPN instances to VBDIF interfaces.
  4. Configure the BGP EVPN function on DC-GWs and L2GW/L3GWs.
  5. Configure VXLAN tunnels between DC-GWs, between L2GW/L3GWs, and between DC-GWs and L2GW/L3GWs.
  6. Configure Layer 2 sub-interfaces connecting L2GW/L3GWs to VNFs and the static VPN routes destined for VNFs.
  7. Configure L2GW/L3GWs to import static VPN routes through BGP EVPN. Configure and apply a route-policy to L3VPN instances so that the static VPN routes can retain the original next hops.
  8. Configure static default VPN routes and loopback addresses on DC-GWs. The loopback addresses are used to establish BGP VPN peer relationships with VNFs. Configure and apply a route-policy to L3VPN instances so that DC-GWs can advertise static default VPN routes and VPN loopback routes only through BGP EVPN.
  9. Establish BGP VPN peer relationships between DC-GWs and VNFs.
  10. Configure the load balancing function on DC-GWs and L2GW/L3GWs.

Procedure

  1. Configure IP addresses for all interfaces, including loopback interfaces, on DC-GWs and L2GW/L3GWs.

    For configuration details, see Configuration Files in this section.

  2. Configure a routing protocol on DC-GWs and L2GW/L3GWs to ensure Layer 3 networking. OSPF is used in this example.

    For configuration details, see Configuration Files in this section.

  3. Configure EVPN instances on DC-GWs and L2GW/L3GWs and bind the EVPN instances to BDs.

    # Configure DC-GW1.

    [~DCGW1] evpn vpn-instance evrf1 bd-mode
[*DCGW1-evpn-instance-evrf1] route-distinguisher 1:1
[*DCGW1-evpn-instance-evrf1] vpn-target 1:1
[*DCGW1-evpn-instance-evrf1] quit
[*DCGW1] evpn vpn-instance evrf2 bd-mode
[*DCGW1-evpn-instance-evrf2] route-distinguisher 2:2
[*DCGW1-evpn-instance-evrf2] vpn-target 2:2
[*DCGW1-evpn-instance-evrf2] quit
[*DCGW1] evpn vpn-instance evrf3 bd-mode
[*DCGW1-evpn-instance-evrf3] route-distinguisher 3:3
[*DCGW1-evpn-instance-evrf3] vpn-target 3:3
[*DCGW1-evpn-instance-evrf3] quit
[*DCGW1] evpn vpn-instance evrf4 bd-mode
[*DCGW1-evpn-instance-evrf4] route-distinguisher 4:4
[*DCGW1-evpn-instance-evrf4] vpn-target 4:4
[*DCGW1-evpn-instance-evrf4] quit
[*DCGW1] bridge-domain 10
[*DCGW1-bd10] vxlan vni 100 split-horizon-mode
[*DCGW1-bd10] evpn binding vpn-instance evrf1
[*DCGW1-bd10] quit
[*DCGW1] bridge-domain 20
[*DCGW1-bd20] vxlan vni 110 split-horizon-mode
[*DCGW1-bd20] evpn binding vpn-instance evrf2
[*DCGW1-bd20] quit
[*DCGW1] bridge-domain 30
[*DCGW1-bd30] vxlan vni 120 split-horizon-mode
[*DCGW1-bd30] evpn binding vpn-instance evrf3
[*DCGW1-bd30] quit
[*DCGW1] bridge-domain 40
[*DCGW1-bd40] vxlan vni 130 split-horizon-mode
[*DCGW1-bd40] evpn binding vpn-instance evrf4
[*DCGW1-bd40] quit
[*DCGW1] commit

    Repeat this step for DC-GW2, DC-GW3, DC-GW4, and L2GW/L3GWs. For configuration details, see Configuration Files in this section.

  4. Configure L3VPN instances on DC-GWs and L2GW/L3GWs.

    # Configure DC-GW1.

    [~DCGW1] ip vpn-instance vpn1
[*DCGW1-vpn-instance-vpn1] vxlan vni 200
[*DCGW1-vpn-instance-vpn1] ipv4-family
[*DCGW1-vpn-instance-vpn1-af-ipv4] route-distinguisher 11:11
[*DCGW1-vpn-instance-vpn1-af-ipv4] vpn-target 11:1 evpn
[*DCGW1-vpn-instance-vpn1-af-ipv4] quit
[*DCGW1-vpn-instance-vpn1] ipv6-family
[*DCGW1-vpn-instance-vpn1-af-ipv6] route-distinguisher 11:66
[*DCGW1-vpn-instance-vpn1-af-ipv6] vpn-target 11:6 evpn
[*DCGW1-vpn-instance-vpn1-af-ipv6] quit
[*DCGW1-vpn-instance-vpn1] quit
[*DCGW1] interface vbdif10
[*DCGW1-Vbdif10] ip binding vpn-instance vpn1
[*DCGW1-Vbdif10] ipv6 enable
[*DCGW1-Vbdif10] ipv6 address 2001:db8:1::1 64
[*DCGW1-Vbdif10] ip address 10.1.1.1 24
[*DCGW1-Vbdif10] ipv6 nd generate-rd-table enable
[*DCGW1-Vbdif10] arp generate-rd-table enable
[*DCGW1-Vbdif10] vxlan anycast-gateway enable
[*DCGW1-Vbdif10] mac-address 00e0-fc00-0002
[*DCGW1-Vbdif10] quit
[*DCGW1] interface vbdif20
[*DCGW1-Vbdif20] ip binding vpn-instance vpn1
[*DCGW1-Vbdif20] ipv6 enable
[*DCGW1-Vbdif20] ipv6 address 2001:db8:2::1 64
[*DCGW1-Vbdif20] ip address 10.2.1.1 24
[*DCGW1-Vbdif20] ipv6 nd generate-rd-table enable
[*DCGW1-Vbdif20] arp generate-rd-table enable
[*DCGW1-Vbdif20] vxlan anycast-gateway enable
[*DCGW1-Vbdif20] mac-address 00e0-fc00-0003
[*DCGW1-Vbdif20] quit
[*DCGW1] interface vbdif30
[*DCGW1-Vbdif30] ip binding vpn-instance vpn1
[*DCGW1-Vbdif30] ipv6 enable
[*DCGW1-Vbdif30] ipv6 address 2001:db8:3::1 64
[*DCGW1-Vbdif30] ip address 10.3.1.1 24
[*DCGW1-Vbdif30] ipv6 nd generate-rd-table enable
[*DCGW1-Vbdif30] arp generate-rd-table enable
[*DCGW1-Vbdif30] vxlan anycast-gateway enable
[*DCGW1-Vbdif30] mac-address 00e0-fc00-0001
[*DCGW1-Vbdif30] quit
[*DCGW1] interface vbdif40
[*DCGW1-Vbdif40] ip binding vpn-instance vpn1
[*DCGW1-Vbdif40] ipv6 enable
[*DCGW1-Vbdif40] ipv6 address 2001:db8:4::1 64
[*DCGW1-Vbdif40] ip address 10.4.1.1 24
[*DCGW1-Vbdif40] ipv6 nd generate-rd-table enable
[*DCGW1-Vbdif40] arp generate-rd-table enable
[*DCGW1-Vbdif40] vxlan anycast-gateway enable
[*DCGW1-Vbdif40] mac-address 00e0-fc00-0004
[*DCGW1-Vbdif40] quit
[*DCGW1] commit

    Repeat this step for DC-GW2, DC-GW3, DC-GW4, and L2GW/L3GWs. For configuration details, see Configuration Files in this section.

  5. Configure the BGP EVPN function on DC-GWs and L2GW/L3GWs.

    # Configure DC-GW1.

    [~DCGW1] ip ip-prefix uIP index 10 permit 10.10.10.10 32
[*DCGW1] ip ipv6-prefix uIPv6 index 10 permit 2001:DB8:10::10 128
[*DCGW1] route-policy stopuIP deny node 10
[*DCGW1-route-policy] if-match ip-prefix uIP
[*DCGW1-route-policy] quit
[*DCGW1] route-policy stopuIP deny node 15
[*DCGW1-route-policy] if-match ipv6 address prefix-list uIPv6
[*DCGW1-route-policy] quit
[*DCGW1] route-policy stopuIP permit node 20
[*DCGW1-route-policy] quit
[*DCGW1] bgp 100
[*DCGW1-bgp] peer 1.1.1.1 as-number 100
[*DCGW1-bgp] peer 1.1.1.1 connect-interface LoopBack 1
[*DCGW1-bgp] peer 2.2.2.2 as-number 100
[*DCGW1-bgp] peer 2.2.2.2 connect-interface LoopBack 1
[*DCGW1-bgp] peer 4.4.4.4 as-number 100
[*DCGW1-bgp] peer 4.4.4.4 connect-interface LoopBack 1
[*DCGW1-bgp] peer 7.7.7.7 as-number 100
[*DCGW1-bgp] peer 7.7.7.7 connect-interface LoopBack 1
[*DCGW1-bgp] peer 8.8.8.8 as-number 100
[*DCGW1-bgp] peer 8.8.8.8 connect-interface LoopBack 1
[*DCGW1-bgp] l2vpn-family evpn
[*DCGW1-bgp-af-evpn] peer 1.1.1.1 enable
[*DCGW1-bgp-af-evpn] peer 1.1.1.1 advertise encap-type vxlan
[*DCGW1-bgp-af-evpn] peer 2.2.2.2 enable
[*DCGW1-bgp-af-evpn] peer 2.2.2.2 advertise encap-type vxlan
[*DCGW1-bgp-af-evpn] peer 4.4.4.4 enable
[*DCGW1-bgp-af-evpn] peer 4.4.4.4 advertise encap-type vxlan
[*DCGW1-bgp-af-evpn] peer 4.4.4.4 route-policy stopuIP export
[*DCGW1-bgp-af-evpn] peer 7.7.7.7 enable
[*DCGW1-bgp-af-evpn] peer 7.7.7.7 advertise encap-type vxlan
[*DCGW1-bgp-af-evpn] peer 7.7.7.7 route-policy stopuIP export
[*DCGW1-bgp-af-evpn] peer 8.8.8.8 enable
[*DCGW1-bgp-af-evpn] peer 8.8.8.8 advertise encap-type vxlan
[*DCGW1-bgp-af-evpn] peer 8.8.8.8 route-policy stopuIP export
[*DCGW1-bgp-af-evpn] quit
[*DCGW1-bgp] quit
[*DCGW1] commit

    Repeat this step for DC-GW2, DC-GW3, and DC-GW4. For configuration details, see Configuration Files in this section.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] bgp 100
[*L2GW/L3GW1-bgp] peer 2.2.2.2 as-number 100
[*L2GW/L3GW1-bgp] peer 2.2.2.2 connect-interface LoopBack 1
[*L2GW/L3GW1-bgp] peer 3.3.3.3 as-number 100
[*L2GW/L3GW1-bgp] peer 3.3.3.3 connect-interface LoopBack 1
[*L2GW/L3GW1-bgp] peer 4.4.4.4 as-number 100
[*L2GW/L3GW1-bgp] peer 4.4.4.4 connect-interface LoopBack 1
[*L2GW/L3GW1-bgp] peer 7.7.7.7 as-number 100
[*L2GW/L3GW1-bgp] peer 7.7.7.7 connect-interface LoopBack 1
[*L2GW/L3GW1-bgp] peer 8.8.8.8 as-number 100
[*L2GW/L3GW1-bgp] peer 8.8.8.8 connect-interface LoopBack 1
[*L2GW/L3GW1-bgp] l2vpn-family evpn
[*L2GW/L3GW1-bgp-af-evpn] peer 2.2.2.2 enable
[*L2GW/L3GW1-bgp-af-evpn] peer 2.2.2.2 advertise encap-type vxlan
[*L2GW/L3GW1-bgp-af-evpn] peer 3.3.3.3 enable
[*L2GW/L3GW1-bgp-af-evpn] peer 3.3.3.3 advertise encap-type vxlan
[*L2GW/L3GW1-bgp-af-evpn] peer 3.3.3.3 advertise arp
[*L2GW/L3GW1-bgp-af-evpn] peer 3.3.3.3 advertise nd
[*L2GW/L3GW1-bgp-af-evpn] peer 4.4.4.4 enable
[*L2GW/L3GW1-bgp-af-evpn] peer 4.4.4.4 advertise encap-type vxlan
[*L2GW/L3GW1-bgp-af-evpn] peer 4.4.4.4 advertise arp
[*L2GW/L3GW1-bgp-af-evpn] peer 4.4.4.4 advertise nd
[*L2GW/L3GW1-bgp-af-evpn] peer 7.7.7.7 enable
[*L2GW/L3GW1-bgp-af-evpn] peer 7.7.7.7 advertise encap-type vxlan
[*L2GW/L3GW1-bgp-af-evpn] peer 7.7.7.7 advertise arp
[*L2GW/L3GW1-bgp-af-evpn] peer 7.7.7.7 advertise nd
[*L2GW/L3GW1-bgp-af-evpn] peer 8.8.8.8 enable
[*L2GW/L3GW1-bgp-af-evpn] peer 8.8.8.8 advertise encap-type vxlan
[*L2GW/L3GW1-bgp-af-evpn] peer 8.8.8.8 advertise arp
[*L2GW/L3GW1-bgp-af-evpn] peer 8.8.8.8 advertise nd
[*L2GW/L3GW1-bgp-af-evpn] quit
[*L2GW/L3GW1-bgp] quit
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  6. Configure VXLAN tunnels between DC-GWs, between L2GW/L3GWs, and between DC-GWs and L2GW/L3GWs.

    # Configure DC-GW1.

    [~DCGW1] evpn
[*DCGW1-evpn] bypass-vxlan enable
[*DCGW1-evpn] quit
[*DCGW1] interface nve 1
[*DCGW1-Nve1] source 9.9.9.9
[*DCGW1-Nve1] bypass source 3.3.3.3
[*DCGW1-Nve1] mac-address 00e0-fc00-0009
[*DCGW1-Nve1] vni 100 head-end peer-list protocol bgp
[*DCGW1-Nve1] vni 110 head-end peer-list protocol bgp
[*DCGW1-Nve1] vni 120 head-end peer-list protocol bgp
[*DCGW1-Nve1] vni 130 head-end peer-list protocol bgp
[*DCGW1-Nve1] quit
[*DCGW1] commit

    Repeat this step for DC-GW2, DC-GW3, and DC-GW4. For configuration details, see Configuration Files in this section.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] interface nve 1
[*L2GW/L3GW1-Nve1] source 1.1.1.1
[*L2GW/L3GW1-Nve1] vni 100 head-end peer-list protocol bgp
[*L2GW/L3GW1-Nve1] vni 110 head-end peer-list protocol bgp
[*L2GW/L3GW1-Nve1] vni 120 head-end peer-list protocol bgp
[*L2GW/L3GW1-Nve1] vni 130 head-end peer-list protocol bgp
[*L2GW/L3GW1-Nve1] quit
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  7. Configure Layer 2 sub-interfaces connecting L2GW/L3GWs to VNFs and the static VPN routes destined for VNFs.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] interface GigabitEthernet0/1/3.1 mode l2
[*L2GW/L3GW1-GigabitEthernet0/1/3.1] encapsulation dot1q vid 10
[*L2GW/L3GW1-GigabitEthernet0/1/3.1] rewrite pop single
[*L2GW/L3GW1-GigabitEthernet0/1/3.1] bridge-domain 10
[*L2GW/L3GW1-GigabitEthernet0/1/3.1] quit
[*L2GW/L3GW1] interface GigabitEthernet0/1/4.1 mode l2
[*L2GW/L3GW1-GigabitEthernet0/1/4.1] encapsulation dot1q vid 20
[*L2GW/L3GW1-GigabitEthernet0/1/4.1] rewrite pop single
[*L2GW/L3GW1-GigabitEthernet0/1/4.1] bridge-domain 20
[*L2GW/L3GW1-GigabitEthernet0/1/4.1] quit
[*L2GW/L3GW1] interface GigabitEthernet0/1/5.1 mode l2
[*L2GW/L3GW1-GigabitEthernet0/1/5.1] encapsulation dot1q vid 10
[*L2GW/L3GW1-GigabitEthernet0/1/5.1] rewrite pop single
[*L2GW/L3GW1-GigabitEthernet0/1/5.1] bridge-domain 10
[*L2GW/L3GW1-GigabitEthernet0/1/5.1] quit
[*L2GW/L3GW1] ip route-static vpn-instance vpn1 5.5.5.5 32 10.1.1.2 tag 1000
[*L2GW/L3GW1] ip route-static vpn-instance vpn1 5.5.5.5 32 10.2.1.2 tag 1000
[*L2GW/L3GW1] ip route-static vpn-instance vpn1 6.6.6.6 32 10.1.1.3 tag 1000
[*L2GW/L3GW1] ipv6 route-static vpn-instance vpn1 2001:db8:5::5 128 2001:db8:1::2 tag 1006
[*L2GW/L3GW1] ipv6 route-static vpn-instance vpn1 2001:db8:5::5 128 2001:db8:2::2 tag 1006
[*L2GW/L3GW1] ipv6 route-static vpn-instance vpn1 2001:db8:6::6 128 2001:db8:1::3 tag 1006
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  8. Configure L2GW/L3GWs to import static VPN routes through BGP EVPN. Configure and apply a route-policy to L3VPN instances so that the static VPN routes can retain the original next hops.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] bgp 100
[*L2GW/L3GW1-bgp] ipv4-family vpn-instance vpn1
[*L2GW/L3GW1-bgp-vpn1] import-route static
[*L2GW/L3GW1-bgp-vpn1] advertise l2vpn evpn import-route-multipath
[*L2GW/L3GW1-bgp-vpn1] quit
[*L2GW/L3GW1-bgp] ipv6-family vpn-instance vpn1
[*L2GW/L3GW1-bgp-6-vpn1] import-route static
[*L2GW/L3GW1-bgp-6-vpn1] advertise l2vpn evpn import-route-multipath
[*L2GW/L3GW1-bgp-6-vpn1] quit
[*L2GW/L3GW1-bgp] quit
[*L2GW/L3GW1] route-policy sp permit node 10
[*L2GW/L3GW1-route-policy] if-match tag 1000
[*L2GW/L3GW1-route-policy] apply gateway-ip origin-nexthop
[*L2GW/L3GW1-route-policy] quit
[*L2GW/L3GW1] route-policy sp deny node 20
[*L2GW/L3GW1-route-policy] quit
[*L2GW/L3GW1] route-policy spv6 permit node 10
[*L2GW/L3GW1-route-policy] if-match tag 1006
[*L2GW/L3GW1-route-policy] apply ipv6 gateway-ip origin-nexthop
[*L2GW/L3GW1-route-policy] quit
[*L2GW/L3GW1] route-policy spv6 deny node 20
[*L2GW/L3GW1-route-policy] quit
[*L2GW/L3GW1] ip vpn-instance vpn1
[*L2GW/L3GW1-vpn-instance-vpn1] ipv4-family
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv4] export route-policy sp evpn
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv4] quit
[*L2GW/L3GW1-vpn-instance-vpn1] ipv6-family
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv6] export route-policy spv6 evpn
[*L2GW/L3GW1-vpn-instance-vpn1-af-ipv6] quit
[*L2GW/L3GW1-vpn-instance-vpn1] quit
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  9. Configure static default VPN routes and loopback addresses on DC-GWs. The loopback addresses are used to establish BGP VPN peer relationships with VNFs. Configure and apply a route-policy to L3VPN instances so that DC-GWs can advertise static default VPN routes and VPN loopback routes only through BGP EVPN.

    # Configure DC-GW1.

    [~DCGW1] ip route-static vpn-instance vpn1 0.0.0.0 0.0.0.0 NULL0 tag 2000
[*DCGW1] ipv6 route-static vpn-instance vpn1 :: 0 NULL0 tag 2006
[*DCGW1] interface LoopBack2
[*DCGW1-LoopBack2] ip binding vpn-instance vpn1
[*DCGW1-LoopBack2] ipv6 enable
[*DCGW1-LoopBack2] ipv6 address 2001:db8:33::33 128
[*DCGW1-LoopBack2] ip address 33.33.33.33 32
[*DCGW1-LoopBack2] quit
[*DCGW1] bgp 100
[*DCGW1-bgp] ipv4-family vpn-instance vpn1
[*DCGW1-bgp-vpn1] advertise l2vpn evpn
[*DCGW1-bgp-vpn1] import-route direct
[*DCGW1-bgp-vpn1] import-route static
[*DCGW1-bgp-vpn1] quit
[*DCGW1-bgp] ipv6-family vpn-instance vpn1
[*DCGW1-bgp-6-vpn1] advertise l2vpn evpn
[*DCGW1-bgp-6-vpn1] import-route direct
[*DCGW1-bgp-6-vpn1] import-route static
[*DCGW1-bgp-6-vpn1] quit
[*DCGW1-bgp] quit
[*DCGW1] ip ip-prefix lp index 10 permit 33.33.33.33 32
[*DCGW1] ip ipv6-prefix lpv6 index 10 permit 2001:DB8:33::33 128
[*DCGW1] route-policy dp permit node 10
[*DCGW1-route-policy] if-match tag 2000
[*DCGW1-route-policy] quit
[*DCGW1] route-policy dp permit node 15
[*DCGW1-route-policy] if-match ipv6 address prefix-list lp
[*DCGW1-route-policy] quit
[*DCGW1] route-policy dpv6 permit node 10
[*DCGW1-route-policy] if-match tag 2006
[*DCGW1-route-policy] quit
[*DCGW1] route-policy dpv6 permit node 15
[*DCGW1-route-policy] if-match ipv6 address prefix-list lp
[*DCGW1-route-policy] quit
[*DCGW1] ip vpn-instance vpn1
[*DCGW1-vpn-instance-vpn1] ipv4-family
[*DCGW1-vpn-instance-vpn1-af-ipv4] export route-policy dp evpn
[*DCGW1-vpn-instance-vpn1-af-ipv4] quit
[*DCGW1-vpn-instance-vpn1] ipv6-family
[*DCGW1-vpn-instance-vpn1-af-ipv6] export route-policy dpv6 evpn
[*DCGW1-vpn-instance-vpn1-af-ipv6] quit
[*DCGW1-vpn-instance-vpn1] quit
[*DCGW1] commit

    Repeat this step for DC-GW2, DC-GW3, and DC-GW4. For configuration details, see Configuration Files in this section.

  10. Establish BGP VPN peer relationships between DC-GWs and VNFs.

    # Configure DC-GW1.

    [~DCGW1] route-policy p1 deny node 10
[*DCGW1-route-policy] quit
[*DCGW1] bgp 100
[*DCGW1-bgp] ipv4-family vpn-instance vpn1
[*DCGW1-bgp-vpn1] peer 5.5.5.5 as-number 100
[*DCGW1-bgp-vpn1] peer 5.5.5.5 connect-interface LoopBack2
[*DCGW1-bgp-vpn1] peer 5.5.5.5 route-policy p1 export
[*DCGW1-bgp-vpn1] peer 6.6.6.6 as-number 100
[*DCGW1-bgp-vpn1] peer 6.6.6.6 connect-interface LoopBack2
[*DCGW1-bgp-vpn1] peer 6.6.6.6 route-policy p1 export
[*DCGW1-bgp-vpn1] quit
[*DCGW1-bgp] ipv6-family vpn-instance vpn1
[*DCGW1-bgp-6-vpn1] peer 2001:db8:5::5 as-number 100
[*DCGW1-bgp-6-vpn1] peer 2001:db8:5::5 connect-interface LoopBack2
[*DCGW1-bgp-6-vpn1] peer 2001:db8:5::5 route-policy p1 export
[*DCGW1-bgp-6-vpn1] peer 2001:db8:6::6 as-number 100
[*DCGW1-bgp-6-vpn1] peer 2001:db8:6::6 connect-interface LoopBack2
[*DCGW1-bgp-6-vpn1] peer 2001:db8:6::6 route-policy p1 export
[*DCGW1-bgp-6-vpn1] quit
[*DCGW1-bgp] quit
[*DCGW1] commit

    Repeat this step for DC-GW2, DC-GW3, and DC-GW4. For configuration details, see Configuration Files in this section.

  11. Configure the load balancing function on DC-GWs and L2GW/L3GWs.

    # Configure DC-GW1.

    [~DCGW1] bgp 100
[*DCGW1-bgp] ipv6-family vpn-instance vpn1
[*DCGW1-bgp-6-vpn1] maximum load-balancing 16
[*DCGW1-bgp-6-vpn1] quit
[*DCGW1-bgp] l2vpn-family evpn
[*DCGW1-bgp-af-evpn] peer 1.1.1.1 capability-advertise add-path both
[*DCGW1-bgp-af-evpn] peer 1.1.1.1 advertise add-path path-number 16
[*DCGW1-bgp-af-evpn] peer 2.2.2.2 capability-advertise add-path both
[*DCGW1-bgp-af-evpn] peer 2.2.2.2 advertise add-path path-number 16
[*DCGW1-bgp-af-evpn] quit
[*DCGW1-bgp] quit
[*DCGW1] commit

    Repeat this step for DC-GW2, DC-GW3, and DC-GW4. For configuration details, see Configuration Files in this section.

    # Configure L2GW/L3GW1.

    [~L2GW/L3GW1] bgp 100
[*L2GW/L3GW1-bgp] ipv6-family vpn-instance vpn1
[*L2GW/L3GW1-bgp-6-vpn1] maximum load-balancing 16
[*L2GW/L3GW1-bgp-6-vpn1] quit
[*L2GW/L3GW1-bgp] l2vpn-family evpn
[*L2GW/L3GW1-bgp-af-evpn] bestroute add-path path-number 16
[*L2GW/L3GW1-bgp-af-evpn] peer 3.3.3.3 capability-advertise add-path both
[*L2GW/L3GW1-bgp-af-evpn] peer 3.3.3.3 advertise add-path path-number 16
[*L2GW/L3GW1-bgp-af-evpn] peer 4.4.4.4 capability-advertise add-path both
[*L2GW/L3GW1-bgp-af-evpn] peer 4.4.4.4 advertise add-path path-number 16
[*L2GW/L3GW1-bgp-af-evpn] peer 7.7.7.7 capability-advertise add-path both
[*L2GW/L3GW1-bgp-af-evpn] peer 7.7.7.7 advertise add-path path-number 16
[*L2GW/L3GW1-bgp-af-evpn] peer 8.8.8.8 capability-advertise add-path both
[*L2GW/L3GW1-bgp-af-evpn] peer 8.8.8.8 advertise add-path path-number 16
[*L2GW/L3GW1-bgp-af-evpn] quit
[*L2GW/L3GW1-bgp] quit
[*L2GW/L3GW1] commit

    Repeat this step for L2GW/L3GW2. For configuration details, see Configuration Files in this section.

  12. Verify the configuration.

    After completing the configurations, run the display ip routing-table vpn-instance vpn1 and display ipv6 routing-table vpn-instance vpn1 commands on DC-GWs to check the VNF route information and mobile phone route information (in this example, the destination IPv4 address and IPv6 address of mobile phone routes destined for VNFs are 10.10.10.10 and 2001:DB8:10::10, respectively) in the VPN routing tables of DC-GWs and specify the VBDIF interface as the outbound interface.

    [~DCGW1] display ip routing-table vpn-instance vpn1
Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route
------------------------------------------------------------------------------
Routing Table : vpn1
         Destinations : 22       Routes : 26        

Destination/Mask    Proto   Pre  Cost        Flags NextHop         Interface

        0.0.0.0/0   Static  60   0             DB  0.0.0.0         NULL0
       5.5.5.5/32  IBGP    255  0             RD  10.2.1.2        Vbdif20
                    IBGP    255  0             RD  10.1.1.2        Vbdif10
       6.6.6.6/32  IBGP    255  0             RD  10.1.1.3        Vbdif10
                    IBGP    255  0             RD  10.4.1.2        Vbdif40
                    IBGP    255  0             RD  10.3.1.2        Vbdif30
       10.1.1.0/24  Direct  0    0             D   10.1.1.1        Vbdif10
       10.1.1.1/32  Direct  0    0             D   127.0.0.1       Vbdif10
     10.1.1.255/32  Direct  0    0             D   127.0.0.1       Vbdif10
       10.2.1.0/24  Direct  0    0             D   10.2.1.1        Vbdif20
       10.2.1.1/32  Direct  0    0             D   127.0.0.1       Vbdif20
     10.2.1.255/32  Direct  0    0             D   127.0.0.1       Vbdif20
       10.3.1.0/24  Direct  0    0             D   10.3.1.1        Vbdif30
       10.3.1.1/32  Direct  0    0             D   127.0.0.1       Vbdif30
     10.3.1.255/32  Direct  0    0             D   127.0.0.1       Vbdif30
       10.4.1.0/24  Direct  0    0             D   10.4.1.1        Vbdif40
       10.4.1.1/32  Direct  0    0             D   127.0.0.1       Vbdif40
     10.4.1.255/32  Direct  0    0             D   127.0.0.1       Vbdif40
  10.10.10.10/32  IBGP    255  0             RD  5.5.5.5         Vbdif20
                    IBGP    255  0             RD  5.5.5.5         Vbdif10
    33.33.33.33/32  Direct  0    0             D   127.0.0.1       LoopBack2
    44.44.44.44/32  IBGP    255  0             RD  4.4.4.4         VXLAN
    77.77.77.77/32  IBGP    255  0             RD  7.7.7.7         VXLAN
    88.88.88.88/32  IBGP    255  0             RD  8.8.8.8         VXLAN
      127.0.0.0/8   Direct  0    0             D   127.0.0.1       InLoopBack0
255.255.255.255/32  Direct  0    0             D   127.0.0.1       InLoopBack0
[~DCGW1] display ipv6 routing-table vpn-instance vpn1
Routing Table : vpn1
         Destinations : 17       Routes : 21        

Destination  : ::                                      PrefixLength : 0
NextHop      : ::                                      Preference   : 60
Cost         : 0                                       Protocol     : Static
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : NULL0                                   Flags        : DB

Destination  : 2001:DB8:1::                            PrefixLength : 64
NextHop      : 2001:DB8:1::1                           Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : Vbdif10                                 Flags        : D

Destination  : 2001:DB8:1::1                           PrefixLength : 128
NextHop      : ::1                                     Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : Vbdif10                                 Flags        : D

Destination  : 2001:DB8:2::                            PrefixLength : 64
NextHop      : 2001:DB8:2::1                           Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : Vbdif20                                 Flags        : D

Destination  : 2001:DB8:2::1                           PrefixLength : 128
NextHop      : ::1                                     Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : Vbdif20                                 Flags        : D

Destination  : 2001:DB8:3::                            PrefixLength : 64
NextHop      : 2001:DB8:3::1                           Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : Vbdif30                                 Flags        : D

Destination  : 2001:DB8:3::1                           PrefixLength : 128
NextHop      : ::1                                     Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : Vbdif30                                 Flags        : D

Destination  : 2001:DB8:4::                            PrefixLength : 64
NextHop      : 2001:DB8:4::1                           Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : Vbdif40                                 Flags        : D

Destination  : 2001:DB8:4::1                           PrefixLength : 128
NextHop      : ::1                                     Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : Vbdif40                                 Flags        : D

Destination  : 2001:DB8:5::5                         PrefixLength : 128
NextHop      : 2001:DB8:2::2                           Preference   : 255
Cost         : 0                                       Protocol     : IBGP
RelayNextHop : 2001:DB8:2::2                           TunnelID     : 0x0
Interface    : Vbdif20                                 Flags        : RD

Destination  : 2001:DB8:5::5                         PrefixLength : 128
NextHop      : 2001:DB8:1::2                           Preference   : 255
Cost         : 0                                       Protocol     : IBGP
RelayNextHop : 2001:DB8:1::2                           TunnelID     : 0x0
Interface    : Vbdif10                                 Flags        : RD

Destination  : 2001:DB8:6::6                         PrefixLength : 128
NextHop      : 2001:DB8:1::3                           Preference   : 255
Cost         : 0                                       Protocol     : IBGP
RelayNextHop : 2001:DB8:1::3                           TunnelID     : 0x0
Interface    : Vbdif10                                 Flags        : RD

Destination  : 2001:DB8:6::6                         PrefixLength : 128
NextHop      : 2001:DB8:4::2                           Preference   : 255
Cost         : 0                                       Protocol     : IBGP
RelayNextHop : 2001:DB8:4::2                           TunnelID     : 0x0
Interface    : Vbdif40                                 Flags        : RD

Destination  : 2001:DB8:6::6                         PrefixLength : 128
NextHop      : 2001:DB8:3::2                           Preference   : 255
Cost         : 0                                       Protocol     : IBGP
RelayNextHop : 2001:DB8:3::2                           TunnelID     : 0x0
Interface    : Vbdif30                                 Flags        : RD

Destination  : 2001:DB8:10::10                       PrefixLength : 128
NextHop      : 2001:DB8:5::5                           Preference   : 255
Cost         : 0                                       Protocol     : IBGP
RelayNextHop : 2001:DB8:2::2                           TunnelID     : 0x0
Interface    : Vbdif20                                 Flags        : RD

Destination  : 2001:DB8:10::10                       PrefixLength : 128
NextHop      : 2001:DB8:5::5                           Preference   : 255
Cost         : 0                                       Protocol     : IBGP
RelayNextHop : 2001:DB8:1::2                           TunnelID     : 0x0
Interface    : Vbdif10                                 Flags        : RD

Destination  : 2001:DB8:33::33                         PrefixLength : 128
NextHop      : ::1                                     Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : LoopBack2                               Flags        : D

Destination  : 2001:DB8:44::44                         PrefixLength : 128
NextHop      : ::FFFF:4.4.4.4                          Preference   : 255
Cost         : 0                                       Protocol     : IBGP
RelayNextHop : ::                                      TunnelID     : 0x0000000027f0000003
Interface    : VXLAN                                   Flags        : RD

Destination  : 2001:DB8:77::77                         PrefixLength : 128
NextHop      : ::FFFF:7.7.7.7                          Preference   : 255
Cost         : 0                                       Protocol     : IBGP
RelayNextHop : ::                                      TunnelID     : 0x0000000027f0000001
Interface    : VXLAN                                   Flags        : RD
                
Destination  : 2001:DB8:88::88                         PrefixLength : 128
NextHop      : ::FFFF:8.8.8.8                          Preference   : 255
Cost         : 0                                       Protocol     : IBGP
RelayNextHop : ::                                      TunnelID     : 0x0000000027f0000002
Interface    : VXLAN                                   Flags        : RD

Destination  : FE80::                                  PrefixLength : 10
NextHop      : ::                                      Preference   : 0
Cost         : 0                                       Protocol     : Direct
RelayNextHop : ::                                      TunnelID     : 0x0
Interface    : NULL0                                   Flags        : DB

Configuration Files

  • DC-GW1 configuration file

    #
sysname DCGW1
#
evpn
 bypass-vxlan enable
 #
 mac-duplication
#
evpn vpn-instance evrf1 bd-mode
 route-distinguisher 1:1
 vpn-target 1:1 export-extcommunity
 vpn-target 1:1 import-extcommunity
#
evpn vpn-instance evrf2 bd-mode
 route-distinguisher 2:2
 vpn-target 2:2 export-extcommunity
 vpn-target 2:2 import-extcommunity
#
evpn vpn-instance evrf3 bd-mode
 route-distinguisher 3:3
 vpn-target 3:3 export-extcommunity
 vpn-target 3:3 import-extcommunity
#
evpn vpn-instance evrf4 bd-mode
 route-distinguisher 4:4
 vpn-target 4:4 export-extcommunity
 vpn-target 4:4 import-extcommunity
#
ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 11:11
  apply-label per-instance
  export route-policy dp evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
 ipv6-family    
  route-distinguisher 11:66
  apply-label per-instance
  export route-policy dpv6 evpn
  vpn-target 11:6 export-extcommunity evpn
  vpn-target 11:6 import-extcommunity evpn
 vxlan vni 200
#
bridge-domain 10
 vxlan vni 100 split-horizon-mode
 evpn binding vpn-instance evrf1
#
bridge-domain 20
 vxlan vni 110 split-horizon-mode
 evpn binding vpn-instance evrf2
#
bridge-domain 30
 vxlan vni 120 split-horizon-mode
 evpn binding vpn-instance evrf3
#
bridge-domain 40
 vxlan vni 130 split-horizon-mode
 evpn binding vpn-instance evrf4
#
interface Vbdif10
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.1.1.1 255.255.255.0
 ipv6 address 2001:DB8:1::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0002
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif20
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.2.1.1 255.255.255.0
 ipv6 address 2001:DB8:2::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0003
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif30
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.3.1.1 255.255.255.0
 ipv6 address 2001:DB8:3::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0001
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif40
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.4.1.1 255.255.255.0
 ipv6 address 2001:DB8:4::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0004
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.1.1 255.255.255.0
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.2.1 255.255.255.0
#
interface GigabitEthernet0/1/3
 undo shutdown
 ip address 10.6.5.1 255.255.255.0
#
interface LoopBack0
 ip address 9.9.9.9 255.255.255.255
#
interface LoopBack1
 ip address 3.3.3.3 255.255.255.255
#
interface LoopBack2
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 33.33.33.33 255.255.255.255
 ipv6 address 2001:DB8:33::33/128
#
interface Nve1
 source 9.9.9.9
 bypass source 3.3.3.3
 mac-address 00e0-fc00-0009
 vni 100 head-end peer-list protocol bgp
 vni 110 head-end peer-list protocol bgp
 vni 120 head-end peer-list protocol bgp
 vni 130 head-end peer-list protocol bgp
#
bgp 100
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 connect-interface LoopBack1
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 connect-interface LoopBack1
 peer 4.4.4.4 as-number 100
 peer 4.4.4.4 connect-interface LoopBack1
 peer 7.7.7.7 as-number 100
 peer 7.7.7.7 connect-interface LoopBack1
 peer 8.8.8.8 as-number 100
 peer 8.8.8.8 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
  peer 2.2.2.2 enable
  peer 4.4.4.4 enable
  peer 7.7.7.7 enable
  peer 8.8.8.8 enable
 #
 ipv4-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn
  peer 5.5.5.5 as-number 100
  peer 5.5.5.5 route-policy p1 export
  peer 6.6.6.6 as-number 100
  peer 6.6.6.6 route-policy p1 export
 #
 ipv6-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn
  peer 2001:DB8:5::5 as-number 100
  peer 2001:DB8:5::5 route-policy p1 export
  peer 2001:DB8:6::6 as-number 100
  peer 2001:DB8:6::6 route-policy p1 export
 #
 l2vpn-family evpn
  undo policy vpn-target
  peer 1.1.1.1 enable
  peer 1.1.1.1 capability-advertise add-path both
  peer 1.1.1.1 advertise encap-type vxlan
  peer 2.2.2.2 enable
  peer 2.2.2.2 capability-advertise add-path both
  peer 2.2.2.2 advertise encap-type vxlan
  peer 4.4.4.4 enable
  peer 4.4.4.4 advertise encap-type vxlan
  peer 4.4.4.4 route-policy stopuIP export
  peer 7.7.7.7 enable
  peer 7.7.7.7 advertise encap-type vxlan
  peer 7.7.7.7 route-policy stopuIP export
  peer 8.8.8.8 enable
  peer 8.8.8.8 advertise encap-type vxlan
  peer 8.8.8.8 route-policy stopuIP export
#
ospf 1
 area 0.0.0.0
  network 3.3.3.3 0.0.0.0
  network 9.9.9.9 0.0.0.0
  network 10.6.1.0 0.0.0.255
  network 10.6.2.0 0.0.0.255
  network 10.6.5.0 0.0.0.255
#
route-policy dp permit node 10
 if-match tag 2000
#
route-policy dp permit node 15
 if-match ip-prefix lp
#
route-policy dpv6 permit node 10
 if-match tag 2006
#
route-policy dpv6 permit node 15
 if-match ipv6 address prefix-list lpv6
#
route-policy p1 deny node 10
#
route-policy stopuIP deny node 10
 if-match ip-prefix uIP
#
route-policy stopuIP deny node 15
 if-match ipv6 address prefix-list uIPv6
#
route-policy stopuIP permit node 20
#
ip ip-prefix lp index 10 permit 33.33.33.33 32
ip ip-prefix uIP index 10 permit 10.10.10.10 32
#
ip route-static vpn-instance vpn1 0.0.0.0 0.0.0.0 NULL0 tag 2000
#
ipv6 route-static vpn-instance vpn1 :: 0 NULL0 tag 2006
#
ip ipv6-prefix lpv6 index 10 permit 2001:DB8:33::33 128
ip ipv6-prefix uIPv6 index 10 permit 2001:DB8:10::10 128
#
return

  • DC-GW2 configuration file

    #
sysname DCGW2
#
evpn
 bypass-vxlan enable
 #
 mac-duplication
#
evpn vpn-instance evrf1 bd-mode
 route-distinguisher 1:1
 vpn-target 1:1 export-extcommunity
 vpn-target 1:1 import-extcommunity
#
evpn vpn-instance evrf2 bd-mode
 route-distinguisher 2:2
 vpn-target 2:2 export-extcommunity
 vpn-target 2:2 import-extcommunity
#
evpn vpn-instance evrf3 bd-mode
 route-distinguisher 3:3
 vpn-target 3:3 export-extcommunity
 vpn-target 3:3 import-extcommunity
#
evpn vpn-instance evrf4 bd-mode
 route-distinguisher 4:4
 vpn-target 4:4 export-extcommunity
 vpn-target 4:4 import-extcommunity
#
ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 11:11
  apply-label per-instance
  export route-policy dp evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
 ipv6-family    
  route-distinguisher 11:66
  apply-label per-instance
  export route-policy dpv6 evpn
  vpn-target 11:6 export-extcommunity evpn
  vpn-target 11:6 import-extcommunity evpn
 vxlan vni 200
#
bridge-domain 10
 vxlan vni 100 split-horizon-mode
 evpn binding vpn-instance evrf1
#
bridge-domain 20
 vxlan vni 110 split-horizon-mode
 evpn binding vpn-instance evrf2
#
bridge-domain 30
 vxlan vni 120 split-horizon-mode
 evpn binding vpn-instance evrf3
#
bridge-domain 40
 vxlan vni 130 split-horizon-mode
 evpn binding vpn-instance evrf4
#
interface Vbdif10
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.1.1.1 255.255.255.0
 ipv6 address 2001:DB8:1::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0002
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif20
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.2.1.1 255.255.255.0
 ipv6 address 2001:DB8:2::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0003
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif30
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.3.1.1 255.255.255.0
 ipv6 address 2001:DB8:3::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0001
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif40
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.4.1.1 255.255.255.0
 ipv6 address 2001:DB8:4::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0004
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.1.2 255.255.255.0
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.3.1 255.255.255.0
#
interface GigabitEthernet0/1/3
 undo shutdown
 ip address 10.6.6.1 255.255.255.0
#
interface LoopBack0
 ip address 9.9.9.9 255.255.255.255
#
interface LoopBack1
 ip address 4.4.4.4 255.255.255.255
#
interface LoopBack2
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 44.44.44.44 255.255.255.255
 ipv6 address 2001:DB8:44::44/128
#
interface Nve1
 source 9.9.9.9
 bypass source 4.4.4.4
 mac-address 00e0-fc00-0009
 vni 100 head-end peer-list protocol bgp
 vni 110 head-end peer-list protocol bgp
 vni 120 head-end peer-list protocol bgp
 vni 130 head-end peer-list protocol bgp
#
bgp 100
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 connect-interface LoopBack1
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 connect-interface LoopBack1
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 connect-interface LoopBack1
 peer 7.7.7.7 as-number 100
 peer 7.7.7.7 connect-interface LoopBack1
 peer 8.8.8.8 as-number 100
 peer 8.8.8.8 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
  peer 2.2.2.2 enable
  peer 3.3.3.3 enable
  peer 7.7.7.7 enable
  peer 8.8.8.8 enable
 #
 ipv4-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn
  peer 5.5.5.5 as-number 100
  peer 5.5.5.5 route-policy p1 export
  peer 6.6.6.6 as-number 100
  peer 6.6.6.6 route-policy p1 export
 #
 ipv6-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn
  peer 2001:DB8:5::5 as-number 100
  peer 2001:DB8:5::5 route-policy p1 export
  peer 2001:DB8:6::6 as-number 100
  peer 2001:DB8:6::6 route-policy p1 export
 #
 l2vpn-family evpn
  undo policy vpn-target
  peer 1.1.1.1 enable
  peer 1.1.1.1 capability-advertise add-path both
  peer 1.1.1.1 advertise encap-type vxlan
  peer 2.2.2.2 enable
  peer 2.2.2.2 capability-advertise add-path both
  peer 2.2.2.2 advertise encap-type vxlan
  peer 3.3.3.3 enable
  peer 3.3.3.3 advertise encap-type vxlan
  peer 3.3.3.3 route-policy stopuIP export
  peer 7.7.7.7 enable
  peer 7.7.7.7 advertise encap-type vxlan
  peer 7.7.7.7 route-policy stopuIP export
  peer 8.8.8.8 enable
  peer 8.8.8.8 advertise encap-type vxlan
  peer 8.8.8.8 route-policy stopuIP export
#
ospf 1          
 area 0.0.0.0
  network 4.4.4.4 0.0.0.0
  network 9.9.9.9 0.0.0.0
  network 10.6.1.0 0.0.0.255
  network 10.6.3.0 0.0.0.255
  network 10.6.6.0 0.0.0.255
#
route-policy dp permit node 10
 if-match tag 2000
#
route-policy dp permit node 15
 if-match ip-prefix lp
#
route-policy dpv6 permit node 10
 if-match tag 2006
#
route-policy dpv6 permit node 15
 if-match ipv6 address prefix-list lpv6
#
route-policy p1 deny node 10
#
route-policy stopuIP deny node 10
 if-match ip-prefix uIP
#
route-policy stopuIP deny node 15
 if-match ipv6 address prefix-list uIPv6
#
route-policy stopuIP permit node 20
#
ip ip-prefix lp index 10 permit 44.44.44.44 32
ip ip-prefix uIP index 10 permit 10.10.10.10 32
#
ip route-static vpn-instance vpn1 0.0.0.0 0.0.0.0 NULL0 tag 2000
#
ipv6 route-static vpn-instance vpn1 :: 0 NULL0 tag 2006
#
ip ipv6-prefix lpv6 index 10 permit 2001:DB8:44::44 128
ip ipv6-prefix uIPv6 index 10 permit 2001:DB8:10::10 128
#
return

  • DC-GW3 configuration file

    #
sysname DCGW3
#
evpn
 bypass-vxlan enable
 #
 mac-duplication
#
evpn vpn-instance evrf1 bd-mode
 route-distinguisher 1:1
 vpn-target 1:1 export-extcommunity
 vpn-target 1:1 import-extcommunity
#
evpn vpn-instance evrf2 bd-mode
 route-distinguisher 2:2
 vpn-target 2:2 export-extcommunity
 vpn-target 2:2 import-extcommunity
#
evpn vpn-instance evrf3 bd-mode
 route-distinguisher 3:3
 vpn-target 3:3 export-extcommunity
 vpn-target 3:3 import-extcommunity
#
evpn vpn-instance evrf4 bd-mode
 route-distinguisher 4:4
 vpn-target 4:4 export-extcommunity
 vpn-target 4:4 import-extcommunity
#
ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 11:11
  apply-label per-instance
  export route-policy dp evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
 ipv6-family    
  route-distinguisher 11:66
  apply-label per-instance
  export route-policy dpv6 evpn
  vpn-target 11:6 export-extcommunity evpn
  vpn-target 11:6 import-extcommunity evpn
 vxlan vni 200
#
bridge-domain 10
 vxlan vni 100 split-horizon-mode
 evpn binding vpn-instance evrf1
#
bridge-domain 20
 vxlan vni 110 split-horizon-mode
 evpn binding vpn-instance evrf2
#
bridge-domain 30
 vxlan vni 120 split-horizon-mode
 evpn binding vpn-instance evrf3
#
bridge-domain 40
 vxlan vni 130 split-horizon-mode
 evpn binding vpn-instance evrf4
#
interface Vbdif10
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.1.1.1 255.255.255.0
 ipv6 address 2001:DB8:1::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0002
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif20
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.2.1.1 255.255.255.0
 ipv6 address 2001:DB8:2::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0003
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif30
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.3.1.1 255.255.255.0
 ipv6 address 2001:DB8:3::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0001
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif40
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.4.1.1 255.255.255.0
 ipv6 address 2001:DB8:4::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0004
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.7.1 255.255.255.0
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.5.2 255.255.255.0
#
interface LoopBack0
 ip address 9.9.9.9 255.255.255.255
#
interface LoopBack1
 ip address 7.7.7.7 255.255.255.255
#
interface LoopBack2
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 77.77.77.77 255.255.255.255
 ipv6 address 2001:DB8:77::77/128
#
interface Nve1
 source 9.9.9.9
 bypass source 7.7.7.7
 mac-address 00e0-fc00-0009
 vni 100 head-end peer-list protocol bgp
 vni 110 head-end peer-list protocol bgp
 vni 120 head-end peer-list protocol bgp
 vni 130 head-end peer-list protocol bgp
#
bgp 100
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 connect-interface LoopBack1
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 connect-interface LoopBack1
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 connect-interface LoopBack1
 peer 4.4.4.4 as-number 100
 peer 4.4.4.4 connect-interface LoopBack1
 peer 8.8.8.8 as-number 100
 peer 8.8.8.8 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
  peer 2.2.2.2 enable
  peer 3.3.3.3 enable
  peer 4.4.4.4 enable
  peer 8.8.8.8 enable
 #
 ipv4-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn
  peer 5.5.5.5 as-number 100
  peer 5.5.5.5 route-policy p1 export
  peer 6.6.6.6 as-number 100
  peer 6.6.6.6 route-policy p1 export
 #
 ipv6-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn
  peer 2001:DB8:5::5 as-number 100
  peer 2001:DB8:5::5 route-policy p1 export
  peer 2001:DB8:6::6 as-number 100
  peer 2001:DB8:6::6 route-policy p1 export
 #              
 l2vpn-family evpn
  undo policy vpn-target
  peer 1.1.1.1 enable
  peer 1.1.1.1 capability-advertise add-path both
  peer 1.1.1.1 advertise encap-type vxlan
  peer 2.2.2.2 enable
  peer 2.2.2.2 capability-advertise add-path both
  peer 2.2.2.2 advertise encap-type vxlan
  peer 3.3.3.3 enable
  peer 3.3.3.3 advertise encap-type vxlan
  peer 3.3.3.3 route-policy stopuIP export
  peer 4.4.4.4 enable
  peer 4.4.4.4 advertise encap-type vxlan
  peer 4.4.4.4 route-policy stopuIP export
  peer 8.8.8.8 enable
  peer 8.8.8.8 advertise encap-type vxlan
  peer 8.8.8.8 route-policy stopuIP export
#
ospf 1
 area 0.0.0.0
  network 7.7.7.7 0.0.0.0
  network 9.9.9.9 0.0.0.0
  network 10.6.5.0 0.0.0.255
  network 10.6.7.0 0.0.0.255
#
route-policy dp permit node 10
 if-match tag 2000
#
route-policy dp permit node 15
 if-match ip-prefix lp
#
route-policy dpv6 permit node 10
 if-match tag 2006
#
route-policy dpv6 permit node 15
 if-match ipv6 address prefix-list lpv6
#
route-policy p1 deny node 10
#
route-policy stopuIP deny node 10
 if-match ip-prefix uIP
#
route-policy stopuIP deny node 15
 if-match ipv6 address prefix-list uIPv6
#
route-policy stopuIP permit node 20
#
ip ip-prefix lp index 10 permit 77.77.77.77 32
ip ip-prefix uIP index 10 permit 10.10.10.10 32
#
ip route-static vpn-instance vpn1 0.0.0.0 0.0.0.0 NULL0 tag 2000
#
ipv6 route-static vpn-instance vpn1 :: 0 NULL0 tag 2006
#
ip ipv6-prefix lpv6 index 10 permit 2001:DB8:77::77 128
ip ipv6-prefix uIPv6 index 10 permit 2001:DB8:10::10 128
#
return

  • DC-GW4 configuration file

    #
sysname DCGW4
#
evpn
 bypass-vxlan enable
 #
 mac-duplication
#
evpn vpn-instance evrf1 bd-mode
 route-distinguisher 1:1
 vpn-target 1:1 export-extcommunity
 vpn-target 1:1 import-extcommunity
#
evpn vpn-instance evrf2 bd-mode
 route-distinguisher 2:2
 vpn-target 2:2 export-extcommunity
 vpn-target 2:2 import-extcommunity
#
evpn vpn-instance evrf3 bd-mode
 route-distinguisher 3:3
 vpn-target 3:3 export-extcommunity
 vpn-target 3:3 import-extcommunity
#
evpn vpn-instance evrf4 bd-mode
 route-distinguisher 4:4
 vpn-target 4:4 export-extcommunity
 vpn-target 4:4 import-extcommunity
#
ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 11:11
  apply-label per-instance
  export route-policy dp evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
 ipv6-family    
  route-distinguisher 11:66
  apply-label per-instance
  export route-policy dpv6 evpn
  vpn-target 11:6 export-extcommunity evpn
  vpn-target 11:6 import-extcommunity evpn
 vxlan vni 200
#
bridge-domain 10
 vxlan vni 100 split-horizon-mode
 evpn binding vpn-instance evrf1
#
bridge-domain 20
 vxlan vni 110 split-horizon-mode
 evpn binding vpn-instance evrf2
#
bridge-domain 30
 vxlan vni 120 split-horizon-mode
 evpn binding vpn-instance evrf3
#
bridge-domain 40
 vxlan vni 130 split-horizon-mode
 evpn binding vpn-instance evrf4
#
interface Vbdif10
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.1.1.1 255.255.255.0
 ipv6 address 2001:DB8:1::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0002
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif20
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.2.1.1 255.255.255.0
 ipv6 address 2001:DB8:2::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0003
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif30
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.3.1.1 255.255.255.0
 ipv6 address 2001:DB8:3::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0001
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface Vbdif40
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.4.1.1 255.255.255.0
 ipv6 address 2001:DB8:4::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0004
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.7.2 255.255.255.0
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.6.2 255.255.255.0
#
interface LoopBack0
 ip address 9.9.9.9 255.255.255.255
#
interface LoopBack1
 ip address 8.8.8.8 255.255.255.255
#
interface LoopBack2
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 88.88.88.88 255.255.255.255
 ipv6 address 2001:DB8:88::88/128
#
interface Nve1
 source 9.9.9.9
 bypass source 8.8.8.8
 mac-address 00e0-fc00-0009
 vni 100 head-end peer-list protocol bgp
 vni 110 head-end peer-list protocol bgp
 vni 120 head-end peer-list protocol bgp
 vni 130 head-end peer-list protocol bgp
#
bgp 100
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 connect-interface LoopBack1
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 connect-interface LoopBack1
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 connect-interface LoopBack1
 peer 4.4.4.4 as-number 100
 peer 4.4.4.4 connect-interface LoopBack1
 peer 7.7.7.7 as-number 100
 peer 7.7.7.7 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
  peer 2.2.2.2 enable
  peer 3.3.3.3 enable
  peer 4.4.4.4 enable
  peer 7.7.7.7 enable
 #
 ipv4-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn
  peer 5.5.5.5 as-number 100
  peer 5.5.5.5 route-policy p1 export
  peer 6.6.6.6 as-number 100
  peer 6.6.6.6 route-policy p1 export
 #
 ipv6-family vpn-instance vpn1
  import-route direct
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn
  peer 2001:DB8:5::5 as-number 100
  peer 2001:DB8:5::5 route-policy p1 export
  peer 2001:DB8:6::6 as-number 100
  peer 2001:DB8:6::6 route-policy p1 export
 #
 l2vpn-family evpn
  undo policy vpn-target
  peer 1.1.1.1 enable
  peer 1.1.1.1 capability-advertise add-path both
  peer 1.1.1.1 advertise encap-type vxlan
  peer 2.2.2.2 enable
  peer 2.2.2.2 capability-advertise add-path both
  peer 2.2.2.2 advertise encap-type vxlan
  peer 3.3.3.3 enable
  peer 3.3.3.3 advertise encap-type vxlan
  peer 3.3.3.3 route-policy stopuIP export
  peer 4.4.4.4 enable
  peer 4.4.4.4 advertise encap-type vxlan
  peer 4.4.4.4 route-policy stopuIP export
  peer 7.7.7.7 enable
  peer 7.7.7.7 advertise encap-type vxlan
  peer 7.7.7.7 route-policy stopuIP export
#
ospf 1
 area 0.0.0.0   
  network 8.8.8.8 0.0.0.0
  network 9.9.9.9 0.0.0.0
  network 10.6.6.0 0.0.0.255
  network 10.6.7.0 0.0.0.255
#
route-policy dp permit node 10
 if-match tag 2000
#
route-policy dp permit node 15
 if-match ip-prefix lp
#
route-policy dpv6 permit node 10
 if-match tag 2006
#
route-policy dpv6 permit node 15
 if-match ipv6 address prefix-list lpv6
#
route-policy p1 deny node 10
#
route-policy stopuIP deny node 10
 if-match ip-prefix uIP
#
route-policy stopuIP deny node 15
 if-match ipv6 address prefix-list uIPv6
#
route-policy stopuIP permit node 20
#
ip ip-prefix lp index 10 permit 88.88.88.88 32
ip ip-prefix uIP index 10 permit 10.10.10.10 32
#
ip route-static vpn-instance vpn1 0.0.0.0 0.0.0.0 NULL0 tag 2000
#
ipv6 route-static vpn-instance vpn1 :: 0 NULL0 tag 2006
#
ip ipv6-prefix lpv6 index 10 permit 2001:DB8:88::88 128
ip ipv6-prefix uIPv6 index 10 permit 2001:DB8:10::10 128
#
return

  • L2GW/L3GW1 configuration file

    #
sysname L2L3GW1
#
evpn vpn-instance evrf1 bd-mode
 route-distinguisher 1:1
 vpn-target 1:1 export-extcommunity
 vpn-target 1:1 import-extcommunity
#
evpn vpn-instance evrf2 bd-mode
 route-distinguisher 2:2
 vpn-target 2:2 export-extcommunity
 vpn-target 2:2 import-extcommunity
#
evpn vpn-instance evrf3 bd-mode
 route-distinguisher 3:3
 vpn-target 3:3 export-extcommunity
 vpn-target 3:3 import-extcommunity
#
evpn vpn-instance evrf4 bd-mode
 route-distinguisher 4:4
 vpn-target 4:4 export-extcommunity
 vpn-target 4:4 import-extcommunity
#
ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 11:11
  apply-label per-instance
  export route-policy sp evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
 ipv6-family
  route-distinguisher 11:66
  apply-label per-instance
  export route-policy spv6 evpn
  vpn-target 11:6 export-extcommunity evpn
  vpn-target 11:6 import-extcommunity evpn
 vxlan vni 200  
#
bridge-domain 10
 vxlan vni 100 split-horizon-mode
 evpn binding vpn-instance evrf1
#
bridge-domain 20
 vxlan vni 110 split-horizon-mode
 evpn binding vpn-instance evrf2
#
bridge-domain 30
 vxlan vni 120 split-horizon-mode
 evpn binding vpn-instance evrf3
#
bridge-domain 40
 vxlan vni 130 split-horizon-mode
 evpn binding vpn-instance evrf4
#
interface Vbdif10
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.1.1.1 255.255.255.0
 ipv6 address 2001:DB8:1::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0002
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
 arp collect host enable
#
interface Vbdif20
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.2.1.1 255.255.255.0
 ipv6 address 2001:DB8:2::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0003
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
 arp collect host enable
#
interface Vbdif30
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.3.1.1 255.255.255.0
 ipv6 address 2001:DB8:3::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0001
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
 arp collect host enable
#
interface Vbdif40
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.4.1.1 255.255.255.0
 ipv6 address 2001:DB8:4::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0004
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
 arp collect host enable
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.4.1 255.255.255.0
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.2.2 255.255.255.0
#
interface GigabitEthernet0/1/3
 undo shutdown
#
interface GigabitEthernet0/1/3.1 mode l2
 encapsulation dot1q vid 10
 rewrite pop single
 bridge-domain 10
#
interface GigabitEthernet0/1/4
 undo shutdown
#
interface GigabitEthernet0/1/4.1 mode l2
 encapsulation dot1q vid 20
 rewrite pop single
 bridge-domain 20
#
interface GigabitEthernet0/1/5
 undo shutdown
#
interface GigabitEthernet0/1/5.1 mode l2
 encapsulation dot1q vid 10
 rewrite pop single
 bridge-domain 10
#
interface LoopBack1
 ip address 1.1.1.1 255.255.255.255
#
interface Nve1
 source 1.1.1.1
 vni 100 head-end peer-list protocol bgp
 vni 110 head-end peer-list protocol bgp
 vni 120 head-end peer-list protocol bgp
 vni 130 head-end peer-list protocol bgp
#
bgp 100
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 connect-interface LoopBack1
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 connect-interface LoopBack1
 peer 4.4.4.4 as-number 100
 peer 4.4.4.4 connect-interface LoopBack1
 peer 7.7.7.7 as-number 100
 peer 7.7.7.7 connect-interface LoopBack1
 peer 8.8.8.8 as-number 100
 peer 8.8.8.8 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  import-route static
  maximum load-balancing 16  
  peer 2.2.2.2 enable
  peer 3.3.3.3 enable
  peer 4.4.4.4 enable
  peer 7.7.7.7 enable
  peer 8.8.8.8 enable
 #
 ipv4-family vpn-instance vpn1
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn import-route-multipath
 #
 ipv6-family vpn-instance vpn1
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn import-route-multipath
 #
 l2vpn-family evpn
  undo policy vpn-target
  bestroute add-path path-number 16
  peer 2.2.2.2 enable
  peer 2.2.2.2 advertise encap-type vxlan
  peer 3.3.3.3 enable
  peer 3.3.3.3 advertise arp
  peer 3.3.3.3 advertise nd
  peer 3.3.3.3 capability-advertise add-path both
  peer 3.3.3.3 advertise add-path path-number 16
  peer 3.3.3.3 advertise encap-type vxlan
  peer 4.4.4.4 enable
  peer 4.4.4.4 advertise arp
  peer 4.4.4.4 advertise nd
  peer 4.4.4.4 capability-advertise add-path both
  peer 4.4.4.4 advertise add-path path-number 16
  peer 4.4.4.4 advertise encap-type vxlan
  peer 7.7.7.7 enable
  peer 7.7.7.7 advertise arp
  peer 7.7.7.7 advertise nd
  peer 7.7.7.7 capability-advertise add-path both
  peer 7.7.7.7 advertise add-path path-number 16
  peer 7.7.7.7 advertise encap-type vxlan
  peer 8.8.8.8 enable
  peer 8.8.8.8 advertise arp
  peer 8.8.8.8 advertise nd
  peer 8.8.8.8 capability-advertise add-path both
  peer 8.8.8.8 advertise add-path path-number 16
  peer 8.8.8.8 advertise encap-type vxlan
#
ospf 1
 area 0.0.0.0
  network 1.1.1.1 0.0.0.0
  network 10.6.2.0 0.0.0.255
  network 10.6.4.0 0.0.0.255
#
route-policy sp permit node 10
 if-match tag 1000
 apply gateway-ip origin-nexthop
#
route-policy sp deny node 20
#
route-policy spv6 permit node 10
 if-match tag 1006
 apply ipv6 gateway-ip origin-nexthop
#
route-policy spv6 deny node 20
#
ip route-static vpn-instance vpn1 5.5.5.5 255.255.255.255 10.1.1.2 tag 1000
ip route-static vpn-instance vpn1 5.5.5.5 255.255.255.255 10.2.1.2 tag 1000
ip route-static vpn-instance vpn1 6.6.6.6 255.255.255.255 10.1.1.3 tag 1000
#
ipv6 route-static vpn-instance vpn1 2001:DB8:5::5 128 2001:DB8:1::2 tag 1006
ipv6 route-static vpn-instance vpn1 2001:DB8:5::5 128 2001:DB8:2::2 tag 1006
ipv6 route-static vpn-instance vpn1 2001:DB8:6::6 128 2001:DB8:1::3 tag 1006
#
return

  • L2GW/L3GW2 configuration file

    #
sysname L2L3GW2
#
evpn vpn-instance evrf1 bd-mode
 route-distinguisher 1:1
 vpn-target 1:1 export-extcommunity
 vpn-target 1:1 import-extcommunity
#
evpn vpn-instance evrf2 bd-mode
 route-distinguisher 2:2
 vpn-target 2:2 export-extcommunity
 vpn-target 2:2 import-extcommunity
#
evpn vpn-instance evrf3 bd-mode
 route-distinguisher 3:3
 vpn-target 3:3 export-extcommunity
 vpn-target 3:3 import-extcommunity
#
evpn vpn-instance evrf4 bd-mode
 route-distinguisher 4:4
 vpn-target 4:4 export-extcommunity
 vpn-target 4:4 import-extcommunity
#
ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 11:11
  apply-label per-instance
  export route-policy sp evpn
  vpn-target 11:1 export-extcommunity evpn
  vpn-target 11:1 import-extcommunity evpn
 ipv6-family
  route-distinguisher 11:66
  apply-label per-instance
  export route-policy spv6 evpn
  vpn-target 11:6 export-extcommunity evpn
  vpn-target 11:6 import-extcommunity evpn
 vxlan vni 200  
#
bridge-domain 10
 vxlan vni 100 split-horizon-mode
 evpn binding vpn-instance evrf1
#
bridge-domain 20
 vxlan vni 110 split-horizon-mode
 evpn binding vpn-instance evrf2
#
bridge-domain 30
 vxlan vni 120 split-horizon-mode
 evpn binding vpn-instance evrf3
#
bridge-domain 40
 vxlan vni 130 split-horizon-mode
 evpn binding vpn-instance evrf4
#
interface Vbdif10
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.1.1.1 255.255.255.0
 ipv6 address 2001:DB8:1::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0002
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
 arp collect host enable
#
interface Vbdif20
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.2.1.1 255.255.255.0
 ipv6 address 2001:DB8:2::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0003
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
 arp collect host enable
#
interface Vbdif30
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.3.1.1 255.255.255.0
 ipv6 address 2001:DB8:3::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0001
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
 arp collect host enable
#
interface Vbdif40
 ip binding vpn-instance vpn1
 ipv6 enable
 ip address 10.4.1.1 255.255.255.0
 ipv6 address 2001:DB8:4::1/64
 arp generate-rd-table enable
 mac-address 00e0-fc00-0004
 ipv6 nd collect host enable
 ipv6 nd generate-rd-table enable
 vxlan anycast-gateway enable
 arp collect host enable
#
interface GigabitEthernet0/1/1
 undo shutdown
 ip address 10.6.4.2 255.255.255.0
#
interface GigabitEthernet0/1/2
 undo shutdown
 ip address 10.6.3.2 255.255.255.0
#
interface GigabitEthernet0/1/3
 undo shutdown
#
interface GigabitEthernet0/1/3.1 mode l2
 encapsulation dot1q vid 30
 rewrite pop single
 bridge-domain 30
#
interface GigabitEthernet0/1/4
 undo shutdown
#
interface GigabitEthernet0/1/4.1 mode l2
 encapsulation dot1q vid 40
 rewrite pop single
 bridge-domain 40
#
interface LoopBack1
 ip address 2.2.2.2 255.255.255.255
#
interface Nve1  
 source 2.2.2.2
 vni 100 head-end peer-list protocol bgp
 vni 110 head-end peer-list protocol bgp
 vni 120 head-end peer-list protocol bgp
 vni 130 head-end peer-list protocol bgp
#
bgp 100
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 connect-interface LoopBack1
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 connect-interface LoopBack1
 peer 4.4.4.4 as-number 100
 peer 4.4.4.4 connect-interface LoopBack1
 peer 7.7.7.7 as-number 100
 peer 7.7.7.7 connect-interface LoopBack1
 peer 8.8.8.8 as-number 100
 peer 8.8.8.8 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
  peer 3.3.3.3 enable
  peer 4.4.4.4 enable
  peer 7.7.7.7 enable
  peer 8.8.8.8 enable
 #
 ipv4-family vpn-instance vpn1
  import-route static
  maximum load-balancing 16  
  advertise l2vpn evpn import-route-multipath
 #
 l2vpn-family evpn
  undo policy vpn-target
  bestroute add-path path-number 16
  peer 1.1.1.1 enable
  peer 1.1.1.1 advertise encap-type vxlan
  peer 3.3.3.3 enable
  peer 3.3.3.3 advertise arp
  peer 3.3.3.3 advertise nd
  peer 3.3.3.3 capability-advertise add-path both
  peer 3.3.3.3 advertise add-path path-number 16
  peer 3.3.3.3 advertise encap-type vxlan
  peer 4.4.4.4 enable
  peer 4.4.4.4 advertise arp
  peer 4.4.4.4 advertise nd
  peer 4.4.4.4 capability-advertise add-path both
  peer 4.4.4.4 advertise add-path path-number 16
  peer 4.4.4.4 advertise encap-type vxlan
  peer 7.7.7.7 enable
  peer 7.7.7.7 advertise arp
  peer 7.7.7.7 advertise nd
  peer 7.7.7.7 capability-advertise add-path both
  peer 7.7.7.7 advertise add-path path-number 16
  peer 7.7.7.7 advertise encap-type vxlan
  peer 8.8.8.8 enable
  peer 8.8.8.8 advertise arp
  peer 8.8.8.8 advertise nd
  peer 8.8.8.8 capability-advertise add-path both
  peer 8.8.8.8 advertise add-path path-number 16
  peer 8.8.8.8 advertise encap-type vxlan
#
ospf 1
 area 0.0.0.0
  network 2.2.2.2 0.0.0.0
  network 10.6.3.0 0.0.0.255
  network 10.6.4.0 0.0.0.255
#
route-policy sp permit node 10
 if-match tag 1000
 apply gateway-ip origin-nexthop
#
route-policy sp deny node 20
#
route-policy spv6 permit node 10
 if-match tag 1006
 apply ipv6 gateway-ip origin-nexthop
#
route-policy spv6 deny node 20
#
ip route-static vpn-instance vpn1 6.6.6.6 255.255.255.255 10.3.1.2 tag 1000
ip route-static vpn-instance vpn1 6.6.6.6 255.255.255.255 10.4.1.2 tag 1000
#
ipv6 route-static vpn-instance vpn1 2001:DB8:6::6 128 2001:DB8:3::2 tag 1006
ipv6 route-static vpn-instance vpn1 2001:DB8:6::6 128 2001:DB8:4::2 tag 1006
#               
return

  • VNF1 configuration file

    For details, see the configuration file of the corresponding product.

  • VNF2 configuration file

    For details, see the configuration file of the corresponding product.

Parent Topic: Configuration Examples for VXLAN
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >