H3C S12500R Switch Router Series
VXLAN Configuration Examples

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

The information in this document is subject to change without notice.

 

Contents

Introduction· 1

Prerequisites· 1

General restrictions and guidelines· 1

Example: Configuring VXLAN Layer 2 forwarding· 1

Network configuration· 1

Analysis· 2

Software versions used· 2

Restrictions and guidelines· 2

Procedures· 2

Configuring IP addresses for interfaces· 2

Configuring a routing protocol on the transport network· 3

Configuring VXLAN settings· 3

Verifying the configuration· 5

Configuration files· 7

Example: Configuring a centralized VXLAN IP gateway· 10

Network configuration· 10

Analysis· 10

Software versions used· 11

Restrictions and guidelines· 11

Procedures· 11

Configuring IP addresses for interfaces· 11

Configuring a routing protocol on the transport network· 11

Configuring basic VXLAN settings· 12

Configuring the centralized VXLAN IP gateway· 15

Verifying the configuration· 15

Configuration files· 20

Example: Configuring a centralized VXLAN IP gateway group· 23

Network configuration· 23

Analysis· 24

Software versions used· 25

Restrictions and guidelines· 25

Procedures· 25

Configuring IP addresses for interfaces· 25

Configuring a routing protocol on the transport network· 25

Configuring basic VXLAN settings· 26

Configuring centralized VXLAN IP gateway settings· 30

Configuring the VTEP group· 31

Specifying the VTEP group as the gateway for access layer VTEPs· 32

Verifying the configuration· 32

Configuration files· 38

Related documentation· 43

 

Introduction

This document provides Virtual eXtensible LAN (VXLAN) configuration examples. VXLAN is a MAC-in-UDP technology that provides Layer 2 connectivity between distant network sites across an IP network. VXLAN is typically used in data centers for multitenant services.

Prerequisites

This document is not restricted to specific software or hardware versions.

The configuration examples in this document were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.

This document assumes that you have basic knowledge of VXLAN.

General restrictions and guidelines

Before you can configure VXLANs, you must perform the following tasks:

1.     Set the system operating mode to standard by using the system-working-mode standard command. For more information about setting the system operating mode, see device management in Fundamentals Configuration Guide.

2.     Save the configuration.

3.     Reboot the device.

Example: Configuring VXLAN Layer 2 forwarding

Network configuration

As shown in Figure 1:

·     Configure VXLAN 10 as a unicast-mode VXLAN on Router A, Router B, and Router C to provide Layer 2 connectivity for the VMs across the network sites.

·     Manually establish VXLAN tunnels and assign the tunnels to VXLAN 10.

Figure 1 Network diagram

 

Analysis

To ensure that the routers in the transport network can reach one another, configure a routing protocol on the routers to advertise routes for interfaces, including the loopback interfaces. In this example, OSPF is used.

To assign Router A, Router B, and Router C to a VXLAN network, create VXLAN tunnels on the routers and assign the tunnels to the VXLAN.

To assign customer traffic to a VXLAN, map the interface that receives the customer traffic to the VSI of the VXLAN.

Software versions used

This configuration example was created and verified on Release 3606.

Restrictions and guidelines

Execute the undo vxlan ip-forwarding command on each VTEP to enable Layer 2 forwarding for VXLANs on the VTEPs.

By default, interfaces on the device are disabled (in ADM or Administratively Down state). To have an interface operate, you must use the undo shutdown command to enable that interface.

Procedures

Configuring IP addresses for interfaces

# Configure IP addresses for interfaces on Router A.

<RouterA> system-view

[RouterA] interface hundredgige 1/0/2

[RouterA-HundredGigE1/0/2] ip address 11.1.1.1 24

[RouterA-HundredGigE1/0/2] quit

[RouterA] interface loopback 0

[RouterA-LoopBack0] ip address 1.1.1.1 32

# Configure IP addresses for interfaces on other routers in the same way the IP addresses are configured on Router A. (Details not shown.)

Configuring a routing protocol on the transport network

# Configure OSPF to advertise routes for Router A.

[RouterA] ospf 1 router-id 1.1.1.1

[RouterA-ospf-1] area 0

[RouterA-ospf-1-area-0.0.0.0] network 1.1.1.1 0.0.0.0

[RouterA-ospf-1-area-0.0.0.0] network 11.1.1.0 0.0.0.255

[RouterA-ospf-1-area-0.0.0.0] quit

[RouterA-ospf-1] quit

# Configure OSPF to advertise routes for Router B.

[RouterB] ospf 1 router-id 2.2.2.2

[RouterB-ospf-1] area 0

[RouterB-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0

[RouterB-ospf-1-area-0.0.0.0] network 12.1.1.0 0.0.0.255

[RouterB-ospf-1-area-0.0.0.0] quit

[RouterB-ospf-1] quit

# Configure OSPF to advertise routes for Router C.

[RouterC] ospf 1 router-id 3.3.3.3

[RouterC-ospf-1] area 0

[RouterC-ospf-1-area-0.0.0.0] network 3.3.3.3 0.0.0.0

[RouterC-ospf-1-area-0.0.0.0] network 13.1.1.0 0.0.0.255

[RouterC-ospf-1-area-0.0.0.0] quit

[RouterC-ospf-1] quit

# Configure OSPF to advertise routes for Router D.

[RouterD] ospf 1 router-id 4.4.4.4

[RouterD-ospf-1] area 0

[RouterD-ospf-1-area-0.0.0.0] network 4.4.4.4 0.0.0.0

[RouterD-ospf-1-area-0.0.0.0] network 11.1.1.0 0.0.0.255

[RouterD-ospf-1-area-0.0.0.0] network 12.1.1.0 0.0.0.255

[RouterD-ospf-1-area-0.0.0.0] network 13.1.1.0 0.0.0.255

[RouterD-ospf-1-area-0.0.0.0] quit

[RouterD-ospf-1] quit

Configuring VXLAN settings

Configuring Router A

# Enable L2VPN.

[RouterA] l2vpn enable

# Enable Layer 2 forwarding for VXLANs.

[RouterA] undo vxlan ip-forwarding

# Create VSI vpna and VXLAN 10.

[RouterA] vsi vpna

[RouterA-vsi-vpna] vxlan 10

[RouterA-vsi-vpna-vxlan10] quit

[RouterA-vsi-vpna] quit

# Create a VXLAN tunnel to Router B. The tunnel interface name is Tunnel 1.

[RouterA] interface tunnel 1 mode vxlan

[RouterA-Tunnel1] source 1.1.1.1

[RouterA-Tunnel1] destination 2.2.2.2

[RouterA-Tunnel1] quit

# Create a VXLAN tunnel to Router C. The tunnel interface name is Tunnel 2.

[RouterA] interface tunnel 2 mode vxlan

[RouterA-Tunnel2] source 1.1.1.1

[RouterA-Tunnel2] destination 3.3.3.3

[RouterA-Tunnel2] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 10.

[RouterA] vsi vpna

[RouterA-vsi-vpna] vxlan 10

[RouterA-vsi-vpna-vxlan10] tunnel 1

[RouterA-vsi-vpna-vxlan10] tunnel 2

[RouterA-vsi-vpna-vxlan10] quit

[RouterA-vsi-vpna] quit

# Map HundredGigE 1/0/1 to VSI vpna.

[RouterA] interface hundredgige 1/0/1

[RouterA-HundredGigE1/0/1] xconnect vsi vpna

[RouterA-HundredGigE1/0/1] quit

Configuring Router B

# Enable L2VPN.

[RouterB] l2vpn enable

# Enable Layer 2 forwarding for VXLANs.

[RouterB] undo vxlan ip-forwarding

# Create VSI vpna and VXLAN 10.

[RouterB] vsi vpna

[RouterB-vsi-vpna] vxlan 10

[RouterB-vsi-vpna-vxlan10] quit

[RouterB-vsi-vpna] quit

# Create a VXLAN tunnel to Router A. The tunnel interface name is Tunnel 1.

[RouterB] interface tunnel 1 mode vxlan

[RouterB-Tunnel1] source 2.2.2.2

[RouterB-Tunnel1] destination 1.1.1.1

[RouterB-Tunnel1] quit

# Create a VXLAN tunnel to Router C. The tunnel interface name is Tunnel 2.

[RouterB] interface tunnel 2 mode vxlan

[RouterB-Tunnel2] source 2.2.2.2

[RouterB-Tunnel2] destination 3.3.3.3

[RouterB-Tunnel2] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 10.

[RouterB] vsi vpna

[RouterB-vsi-vpna] vxlan 10

[RouterB-vsi-vpna-vxlan10] tunnel 1

[RouterB-vsi-vpna-vxlan10] tunnel 2

[RouterB-vsi-vpna-vxlan10] quit

[RouterB-vsi-vpna] quit

# Map HundredGigE 1/0/1 to VSI vpna.

[RouterB] interface hundredgige 1/0/1

[RouterB-HundredGigE1/0/1] xconnect vsi vpna

[RouterB-HundredGigE1/0/1] quit

Configuring Router C

# Enable L2VPN.

[RouterC] l2vpn enable

# Enable Layer 2 forwarding for VXLANs.

[RouterC] undo vxlan ip-forwarding

# Create VSI vpna and VXLAN 10.

[RouterC] vsi vpna

[RouterC-vsi-vpna] vxlan 10

[RouterC-vsi-vpna-vxlan10] quit

[RouterC-vsi-vpna] quit

# Create a VXLAN tunnel to Router A. The tunnel interface name is Tunnel 1.

[RouterC] interface tunnel 1 mode vxlan

[RouterC-Tunnel1] source 3.3.3.3

[RouterC-Tunnel1] destination 1.1.1.1

[RouterC-Tunnel1] quit

# Create a VXLAN tunnel to Router B. The tunnel interface name is Tunnel 2.

[RouterC] interface tunnel 2 mode vxlan

[RouterC-Tunnel2] source 3.3.3.3

[RouterC-Tunnel2] destination 2.2.2.2

[RouterC-Tunnel2] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 10.

[RouterC] vsi vpna

[RouterC-vsi-vpna] vxlan 10

[RouterC-vsi-vpna-vxlan10] tunnel 1

[RouterC-vsi-vpna-vxlan10] tunnel 2

[RouterC-vsi-vpna-vxlan10] quit

[RouterC-vsi-vpna] quit

# Map HundredGigE 1/0/1 to VSI vpna.

[RouterC] interface hundredgige 1/0/1

[RouterC-HundredGigE1/0/1] xconnect vsi vpna

[RouterC-HundredGigE1/0/1] quit

Verifying the configuration

1.     Verify the VXLAN settings on the VTEPs. This example uses Router A.

# Verify that the VXLAN tunnel interfaces on the VTEP are in up state.

[RouterA] display interface tunnel

Tunnel1

Current state: UP

Line protocol state: UP

Description: Tunnel1 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 1.1.1.1, destination 2.2.2.2

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

 

Tunnel2

Current state: UP

Line protocol state: UP

Description: Tunnel2 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 1.1.1.1, destination 3.3.3.3

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

# Verify that the VXLAN tunnels have been assigned to the VXLAN, and the VXLAN tunnels and Ethernet service instances are in up state.

[RouterA] display l2vpn vsi verbose

VSI Name: vpna

  VSI Index               : 0

  VSI State               : Up

  MTU                     : 1500

  Bandwidth               : Unlimited

  Broadcast Restrain      : 4294967295 kbps

  Multicast Restrain      : 4294967295 kbps

  Unknown Unicast Restrain: 4294967295 kbps

  MAC Learning            : Enabled

  MAC Table Limit         : -

  MAC Learning rate       : -

  Local MAC aging time    : 300 sec

  Remote MAC aging time   : 300 sec

  Drop Unknown            : -

  PW Redundancy Mode      : Slave

  Flooding                : Enabled

  Statistics              : Disabled

  VXLAN ID                : 10

  Tunnels:

    Tunnel Name          Link ID    State  Type        Flood proxy

    Tunnel1              0x5000001  Up     Manual      Disabled

    Tunnel2              0x5000002  Up     Manual      Disabled

  ACs:

    AC                               Link ID    State     Type

    HGE1/0/1                         0          Up        Manual

# Verify that the VTEP has learned the MAC addresses of remote VMs.

[RouterA] display l2vpn mac-address

MAC Address      State    VSI Name                        Link ID/Name  Aging

cc3e-5f9c-6cdb   Dynamic  vpna                            Tunnel1       Aging

cc3e-5f9c-23dc   Dynamic  vpna                            Tunnel2       Aging

--- 2 mac address(es) found  ---

2.     Verify that VM 1, VM 2, and VM 3 can ping each other. (Details not shown.)

Configuration files

·     Router A:

#

 undo vxlan ip-forwarding

#

ospf 1 router-id 1.1.1.1

 area 0.0.0.0

  network 1.1.1.1 0.0.0.0

  network 11.1.1.0 0.0.0.255

#

 l2vpn enable

#

vsi vpna

 vxlan 10

  tunnel 1

  tunnel 2

#

interface LoopBack0

 ip address 1.1.1.1 255.255.255.255

#

interface HundredGigE1/0/1

 xconnect vsi vpna

#

interface HundredGigE1/0/2

 ip address 11.1.1.1 255.255.255.0

#

interface Tunnel1 mode vxlan

 source 1.1.1.1

 destination 2.2.2.2

#

interface Tunnel2 mode vxlan

 source 1.1.1.1

 destination 3.3.3.3

#

return

·     Router B:

#

 undo vxlan ip-forwarding

#

ospf 1 router-id 2.2.2.2

 area 0.0.0.0

  network 2.2.2.2 0.0.0.0

  network 12.1.1.0 0.0.0.255

#

 l2vpn enable

#

vsi vpna

 vxlan 10

  tunnel 1

  tunnel 2

#

interface LoopBack0

 ip address 2.2.2.2 255.255.255.255

#

interface HundredGigE1/0/1

 xconnect vsi vpna

#

interface HundredGigE1/0/2

 ip address 12.1.1.2 255.255.255.0

#

interface Tunnel1 mode vxlan

 source 2.2.2.2

 destination 1.1.1.1

#

interface Tunnel2 mode vxlan

 source 2.2.2.2

 destination 3.3.3.3

#

return

·     Router C:

#

 undo vxlan ip-forwarding

#

ospf 1 router-id 3.3.3.3

 area 0.0.0.0

  network 3.3.3.3 0.0.0.0

  network 13.1.1.0 0.0.0.255

#

 l2vpn enable

#

vsi vpna

 vxlan 10

  tunnel 1

  tunnel 2

#

interface LoopBack0

 ip address 3.3.3.3 255.255.255.255

#

interface HundredGigE1/0/1

 xconnect vsi vpna

#

interface HundredGigE1/0/2

 ip address 13.1.1.3 255.255.255.0

#

interface Tunnel1 mode vxlan

 source 3.3.3.3

 destination 1.1.1.1

#

interface Tunnel2 mode vxlan

 source 3.3.3.3

 destination 2.2.2.2

#

return

·     Router D:

#

ospf 1 router-id 4.4.4.4

 area 0.0.0.0

  network 4.4.4.4 0.0.0.0

  network 11.1.1.0 0.0.0.255

  network 12.1.1.0 0.0.0.255

  network 13.1.1.0 0.0.0.255

#

interface LoopBack0

 ip address 4.4.4.4 255.255.255.255

#

interface HundredGigE1/0/1

 ip address 11.1.1.4 255.255.255.0

#

interface HundredGigE1/0/2

 ip address 13.1.1.4 255.255.255.0

#

interface HundredGigE1/0/3

 ip address 12.1.1.4 255.255.255.0

#

return

Example: Configuring a centralized VXLAN IP gateway

Network configuration

As shown in Figure 2:

·     Configure VXLAN 10 and VXLAN 20 as unicast-mode VXLANs on Router A, Router B, and Router C.

·     Manually establish VXLAN tunnels and assign the tunnels to VXLAN 10 or VXLAN 20. Make sure VM 1 and VM 3 belong to VXLAN 10 and VM 2 and VM 4 belong to VXLAN 20.

·     Configure a centralized VXLAN IP gateway on Router C to provide gateway services for VXLAN 10 and VXLAN 20.

Figure 2 Network diagram

 

Analysis

To ensure that the routers in the transport network can reach one another, configure a routing protocol on the routers to advertise routes for interfaces, including the loopback interfaces. In this example, OSPF is used.

To assign Router A, Router B, and Router C to VXLANs, create VXLAN tunnels on the routers and assign the tunnels to the VXLANs.

To assign customer traffic to a VXLAN, map the interface that receives the customer traffic to the VSI of the VXLAN.

For Router C to provide centralized VXLAN IP gateway services for VXLANs, you must perform the following tasks:

·     Create a VSI interface for each VXLAN on the router.

·     Assign an IP address to each VSI interface.

·     Specify the VSI interfaces as the gateway interfaces for VXLANs.

For Layer 3 nodes in the transport network to reach the VMs, configure a routing protocol on Router C to advertise routes for VSI interfaces and HundredGigE 1/0/1. In this example, OSPF is used.

Software versions used

This configuration example was created and verified on Release 3606.

Restrictions and guidelines

By default, interfaces on the device are disabled (in ADM or Administratively Down state). To have an interface operate, you must use the undo shutdown command to enable that interface.

Procedures

Configuring IP addresses for interfaces

# Configure IP addresses for interfaces on Router A.

<RouterA> system-view

[RouterA] interface hundredgige 1/0/2

[RouterA-HundredGigE1/0/2] ip address 20.1.1.1 24

[RouterA-HundredGigE1/0/2] quit

[RouterA] interface loopback 0

[RouterA-LoopBack0] ip address 1.1.1.1 32

# Configure IP addresses for interfaces on other devices in the same way the IP addresses are configured on Router A. (Details not shown.)

Configuring a routing protocol on the transport network

# Configure OSPF to advertise routes for Router A.

[RouterA] ospf 1 router-id 1.1.1.1

[RouterA-ospf-1] area 0

[RouterA-ospf-1-area-0.0.0.0] network 1.1.1.1 0.0.0.0

[RouterA-ospf-1-area-0.0.0.0] network 20.1.1.0 0.0.0.255

[RouterA-ospf-1-area-0.0.0.0] quit

[RouterA-ospf-1] quit

# Configure OSPF to advertise routes for Router B.

[RouterB] ospf 1 router-id 2.2.2.2

[RouterB-ospf-1] area 0

[RouterB-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0

[RouterB-ospf-1-area-0.0.0.0] network 30.1.1.0 0.0.0.255

[RouterB-ospf-1-area-0.0.0.0] quit

[RouterB-ospf-1] quit

# Configure OSPF to advertise routes for Router C.

[RouterC] ospf 1 router-id 3.3.3.3

[RouterC-ospf-1] area 0

[RouterC-ospf-1-area-0.0.0.0] network 3.3.3.3 0.0.0.0

[RouterC-ospf-1-area-0.0.0.0] network 40.1.1.0 0.0.0.255

[RouterC-ospf-1-area-0.0.0.0] quit

[RouterC-ospf-1] quit

# Configure OSPF to advertise routes for Router D.

[RouterD] ospf 1 router-id 4.4.4.4

[RouterD-ospf-1] area 0

[RouterD-ospf-1-area-0.0.0.0] network 4.4.4.4 0.0.0.0

[RouterD-ospf-1-area-0.0.0.0] network 20.1.1.0 0.0.0.255

[RouterD-ospf-1-area-0.0.0.0] network 30.1.1.0 0.0.0.255

[RouterD-ospf-1-area-0.0.0.0] network 40.1.1.0 0.0.0.255

[RouterD-ospf-1-area-0.0.0.0] quit

[RouterD-ospf-1] quit

Configuring basic VXLAN settings

Configuring Router A

# Enable L2VPN.

[RouterA] l2vpn enable

# Enable Layer 2 forwarding for VXLANs.

[RouterA] undo vxlan ip-forwarding

# Create VSI vpna and VXLAN 10.

[RouterA] vsi vpna

[RouterA-vsi-vpna] vxlan 10

[RouterA-vsi-vpna-vxlan10] quit

[RouterA-vsi-vpna] quit

# Create VSI vpnb and VXLAN 20.

[RouterA] vsi vpnb

[RouterA-vsi-vpnb] vxlan 20

[RouterA-vsi-vpnb-vxlan10] quit

[RouterA-vsi-vpnb] quit

# Create a VXLAN tunnel to Router B. The tunnel interface name is Tunnel 1.

[RouterA] interface tunnel 1 mode vxlan

[RouterA-Tunnel1] source 1.1.1.1

[RouterA-Tunnel1] destination 2.2.2.2

[RouterA-Tunnel1] quit

# Create a VXLAN tunnel to Router C. The tunnel interface name is Tunnel 2.

[RouterA] interface tunnel 2 mode vxlan

[RouterA-Tunnel2] source 1.1.1.1

[RouterA-Tunnel2] destination 3.3.3.3

[RouterA-Tunnel2] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 10.

[RouterA] vsi vpna

[RouterA-vsi-vpna] vxlan 10

[RouterA-vsi-vpna-vxlan10] tunnel 1

[RouterA-vsi-vpna-vxlan10] tunnel 2

[RouterA-vsi-vpna-vxlan10] quit

[RouterA-vsi-vpna] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 20.

[RouterA] vsi vpnb

[RouterA-vsi-vpnb] vxlan 20

[RouterA-vsi-vpnb-vxlan20] tunnel 1

[RouterA-vsi-vpnb-vxlan20] tunnel 2

[RouterA-vsi-vpnb-vxlan20] quit

[RouterA-vsi-vpnb] quit

# Map HundredGigE 1/0/1 to VSI vpna.

[RouterA] interface hundredgige 1/0/1

[RouterA-HundredGigE1/0/1] xconnect vsi vpna

[RouterA-HundredGigE1/0/1] quit

# Map HundredGigE 1/0/3 to VSI vpnb.

[RouterA] interface hundredgige 1/0/3

[RouterA-HundredGigE1/0/3] xconnect vsi vpnb

[RouterA-HundredGigE1/0/3] quit

Configuring Router B

# Enable L2VPN.

[RouterB] l2vpn enable

# Enable Layer 2 forwarding for VXLANs.

[RouterB] undo vxlan ip-forwarding

# Create VSI vpna and VXLAN 10.

[RouterB] vsi vpna

[RouterB-vsi-vpna] vxlan 10

[RouterB-vsi-vpna-vxlan10] quit

[RouterB-vsi-vpna] quit

# Create VSI vpnb and VXLAN 20.

[RouterB] vsi vpnb

[RouterB-vsi-vpnb] vxlan 20

[RouterB-vsi-vpnb-vxlan10] quit

[RouterB-vsi-vpnb] quit

# Create a VXLAN tunnel to Router A. The tunnel interface name is Tunnel 1.

[RouterB] interface tunnel 1 mode vxlan

[RouterB-Tunnel1] source 2.2.2.2

[RouterB-Tunnel1] destination 1.1.1.1

[RouterB-Tunnel1] quit

# Create a VXLAN tunnel to Router C. The tunnel interface name is Tunnel 2.

[RouterB] interface tunnel 2 mode vxlan

[RouterB-Tunnel2] source 2.2.2.2

[RouterB-Tunnel2] destination 3.3.3.3

[RouterB-Tunnel2] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 10.

[RouterB] vsi vpna

[RouterB-vsi-vpna] vxlan 10

[RouterB-vsi-vpna-vxlan10] tunnel 1

[RouterB-vsi-vpna-vxlan10] tunnel 2

[RouterB-vsi-vpna-vxlan10] quit

[RouterB-vsi-vpna] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 20.

[RouterB] vsi vpnb

[RouterB-vsi-vpnb] vxlan 20

[RouterB-vsi-vpnb-vxlan20] tunnel 1

[RouterB-vsi-vpnb-vxlan20] tunnel 2

[RouterB-vsi-vpnb-vxlan20] quit

[RouterB-vsi-vpnb] quit

# Map HundredGigE 1/0/1 to VSI vpna.

[RouterB] interface hundredgige 1/0/1

[RouterB-HundredGigE1/0/1] xconnect vsi vpna

[RouterB-HundredGigE1/0/1] quit

# Map HundredGigE 1/0/3 to VSI vpnb.

[RouterB] interface hundredgige 1/0/3

[RouterB-HundredGigE1/0/3] xconnect vsi vpnb

[RouterB-HundredGigE1/0/3] quit

Configuring Router C

# Enable L2VPN.

[RouterC] l2vpn enable

# Create VSI vpna and VXLAN 10.

[RouterC] vsi vpna

[RouterC-vsi-vpna] vxlan 10

[RouterC-vsi-vpna-vxlan10] quit

[RouterC-vsi-vpna] quit

# Create VSI vpnb and VXLAN 20.

[RouterC] vsi vpnb

[RouterC-vsi-vpnb] vxlan 20

[RouterC-vsi-vpnb-vxlan10] quit

[RouterC-vsi-vpnb] quit

# Create a VXLAN tunnel to Router A. The tunnel interface name is Tunnel 1.

[RouterC] interface tunnel 1 mode vxlan

[RouterC-Tunnel1] source 3.3.3.3

[RouterC-Tunnel1] destination 1.1.1.1

[RouterC-Tunnel1] quit

# Create a VXLAN tunnel to Router B. The tunnel interface name is Tunnel 2.

[RouterC] interface tunnel 2 mode vxlan

[RouterC-Tunnel2] source 3.3.3.3

[RouterC-Tunnel2] destination 2.2.2.2

[RouterC-Tunnel2] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 10.

[RouterC] vsi vpna

[RouterC-vsi-vpna] vxlan 10

[RouterC-vsi-vpna-vxlan10] tunnel 1

[RouterC-vsi-vpna-vxlan10] tunnel 2

[RouterC-vsi-vpna-vxlan10] quit

[RouterC-vsi-vpna] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 20.

[RouterC] vsi vpnb

[RouterC-vsi-vpnb] vxlan 20

[RouterC-vsi-vpnb-vxlan20] tunnel 1

[RouterC-vsi-vpnb-vxlan20] tunnel 2

[RouterC-vsi-vpnb-vxlan20] quit

[RouterC-vsi-vpnb] quit

Configuring the centralized VXLAN IP gateway

# Create VSI-interface 1 and assign the interface an IP address. The IP address will be used as the gateway address for VXLAN 10.

[RouterC] interface vsi-interface 1

[RouterC-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[RouterC-Vsi-interface1] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[RouterC] vsi vpna

[RouterC-vsi-vpna] gateway vsi-interface 1

[RouterC-vsi-vpna] quit

# Create VSI-interface 2 and assign the interface an IP address. The IP address will be used as the gateway address for VXLAN 20.

[RouterC] interface vsi-interface 2

[RouterC-Vsi-interface2] ip address 10.1.2.1 255.255.255.0

[RouterC-Vsi-interface2] quit

# Specify VSI-interface 2 as the gateway interface for VSI vpnb.

[RouterC] vsi vpnb

[RouterC-vsi-vpnb] gateway vsi-interface 2

[RouterC-vsi-vpnb] quit

# Configure OSPF to advertise routes for the VSI interfaces and HundredGigE 1/0/1.

[RouterC] ospf 2 router-id 3.3.3.3

[RouterC-ospf-2] area 0

[RouterC-ospf-2-area-0.0.0.0] network 10.1.1.0 0.0.0.255

[RouterC-ospf-2-area-0.0.0.0] network 10.1.2.0 0.0.0.255

[RouterC-ospf-2-area-0.0.0.0] network 100.1.1.0 0.0.0.255

[RouterC-ospf-2-area-0.0.0.0] quit

[RouterC-ospf-2] quit

Verifying the configuration

1.     Verify the VXLAN settings on the VTEPs. This example uses Router A.

# Verify that the VXLAN tunnel interfaces are in up state.

[RouterA] display interface tunnel

Tunnel1

Current state: UP

Line protocol state: UP

Description: Tunnel1 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 1.1.1.1, destination 2.2.2.2

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

 

Tunnel2

Current state: UP

Line protocol state: UP

Description: Tunnel2 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 1.1.1.1, destination 3.3.3.3

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

# Verify that the VXLAN tunnels have been assigned to their respective VXLANs, and the VXLAN tunnels and Ethernet service instances are in up state.

[RouterA] display l2vpn vsi verbose

VSI Name: vpna

  VSI Index               : 0

  VSI State               : Up

  MTU                     : 1500

  Bandwidth               : Unlimited

  Broadcast Restrain      : 4294967295 kbps

  Multicast Restrain      : 4294967295 kbps

  Unknown Unicast Restrain: 4294967295 kbps

  MAC Learning            : Enabled

  MAC Table Limit         : -

  MAC Learning rate       : -

  Local MAC aging time    : 300 sec

  Remote MAC aging time   : 300 sec

  Drop Unknown            : -

  PW Redundancy Mode      : Slave

  Flooding                : Enabled

  Statistics              : Disabled

  VXLAN ID                : 10

  Tunnels:

    Tunnel Name          Link ID    State  Type        Flood proxy

    Tunnel1              0x5000001  Up     Manual      Disabled

    Tunnel2              0x5000002  Up     Manual      Disabled

  ACs:

    AC                               Link ID    State       Type

    HGE1/0/1                         0          Up          Manual

 

VSI Name: vpnb

  VSI Index               : 1

  VSI State               : Up

  MTU                     : 1500

  Bandwidth               : Unlimited

  Broadcast Restrain      : 4294967295 kbps

  Multicast Restrain      : 4294967295 kbps

  Unknown Unicast Restrain: 4294967295 kbps

  MAC Learning            : Enabled

  MAC Table Limit         : -

  MAC Learning rate       : -

  Local MAC aging time    : 300 sec

  Remote MAC aging time   : 300 sec

  Drop Unknown            : -

  PW Redundancy Mode      : Slave

  Flooding                : Enabled

  Statistics              : Disabled

  VXLAN ID                : 20

  Tunnels:

    Tunnel Name          Link ID    State  Type        Flood proxy

    Tunnel1              0x5000001  Up     Manual      Disabled

    Tunnel2              0x5000002  Up     Manual      Disabled

  ACs:

    AC                               Link ID    State       Type

    HGE1/0/3                         0          Up          Manual

2.     Verify the configuration on the VXLAN IP gateway:

# Verify that the VXLAN tunnel interfaces are in up state.

[RouterC] display interface tunnel

Tunnel1

Current state: UP

Line protocol state: UP

Description: Tunnel1 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 3.3.3.3, destination 1.1.1.1

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

 

Tunnel2

Current state: UP

Line protocol state: UP

Description: Tunnel2 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 3.3.3.3, destination 2.2.2.2

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

# Verify that the VSI interfaces are in up state.

[RouterC] display interface vsi-interface

Vsi-interface1

Current state: UP

Line protocol state: UP

Description: Vsi-interface1 Interface

Bandwidth: 1000000 kbps

Maximum transmission unit: 1500

Internet Address: 10.1.1.1/24 (primary)

IP packet frame type: Ethernet II, hardware address: 0000-fc00-458d

IPv6 packet frame type: Ethernet II, hardware address: 0000-fc00-458d

Physical: Unknown, baudrate: 1000000 kbps

Last clearing of counters: Never

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

 

Vsi-interface2

Current state: UP

Line protocol state: UP

Description: Vsi-interface2 Interface

Bandwidth: 1000000 kbps

Maximum transmission unit: 1500

Internet Address:  10.1.2.1/24 (primary)

IP packet frame type: Ethernet II, hardware address: 0000-fc00-458d

IPv6 packet frame type: Ethernet II, hardware address: 0000-fc00-458d

Physical: Unknown, baudrate: 1000000 kbps

Last clearing of counters: Never

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

# Verify that the VXLAN tunnels have been assigned to VXLANs 10 and 20, VSI-interface 1 is the gateway interface of VSI vpna, and VSI-interface 2 is the gateway interface of VSI vpnb.

[RouterC] display l2vpn vsi verbose

VSI Name: vpna

  VSI Index               : 0

  VSI State               : Up

  MTU                     : 1500

  Bandwidth               : Unlimited

  Broadcast Restrain      : 4294967295 kbps

  Multicast Restrain      : 4294967295 kbps

  Unknown Unicast Restrain: 4294967295 kbps

  MAC Learning            : Enabled

  MAC Table Limit         : -

  MAC Learning rate       : -

  Local MAC aging time    : 300 sec

  Remote MAC aging time   : 300 sec

  Drop Unknown            : -

  PW Redundancy Mode      : Slave

  Flooding                : Enabled

  Statistics              : Disabled

  Gateway interface       : VSI-interface 1

  VXLAN ID                : 10

  Tunnels:

    Tunnel Name          Link ID    State    Type        Flooding proxy

    Tunnel1              0x5000002  Up       Manual      Disabled

    Tunnel2              0x5000003  Up       Manual      Disabled

 

VSI Name: vpnb

  VSI Index               : 1

  VSI State               : Up

  MTU                     : 1500

  Bandwidth               : Unlimited

  Broadcast Restrain      : 4294967295 kbps

  Multicast Restrain      : 4294967295 kbps

  Unknown Unicast Restrain: 4294967295 kbps

  MAC Learning            : Enabled

  MAC Table Limit         : -

  MAC Learning rate       : -

  Local MAC aging time    : 300 sec

  Remote MAC aging time   : 300 sec

  Drop Unknown            : -

  PW Redundancy Mode      : Slave

  Flooding                : Enabled

  Statistics              : Disabled

  Gateway interface       : VSI-interface 2

  VXLAN ID                : 20

  Tunnels:

    Tunnel Name          Link ID    State    Type        Flooding proxy

    Tunnel1              0x5000002  Up       Manual      Disabled

    Tunnel2              0x5000003  Up       Manual      Disabled

# Verify that Router C has created ARP entries for the VMs.

[RouterC] display arp

  Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address      MAC address    VLAN/VSI name Interface                Aging Type

10.1.1.11       0000-1234-0001 N/A           Tunnel1                  20    D

10.1.1.12       0000-1234-0002 N/A           Tunnel2                  19    D

# Verify that Router C has created FIB entries for the VMs.

[RouterC] display fib 10.1.1.11

 

Destination count: 1 FIB entry count: 1

 

Flag:

  U:Useable   G:Gateway   H:Host   B:Blackhole   D:Dynamic   S:Static

  R:Relay     F:FRR

 

Destination/Mask   Nexthop         Flag     OutInterface/Token       Label

10.1.1.11/32       10.1.1.11       UH       Vsi1                     Null

3.     Verify the network connectivity for VMs:

# Verify that VM 1, VM 2, VM 3, and VM 4 can ping each other. (Details not shown.)

# Verify that VM 1, VM 2, VM 3, VM 4, and HundredGigE 1/0/1 (100.1.1.1) on Router C can ping each other. (Details not shown.)

Configuration files

·     Router A:

#

 undo vxlan ip-forwarding

#

ospf 1 router-id 1.1.1.1

 area 0.0.0.0

  network 1.1.1.1 0.0.0.0

  network 20.1.1.0 0.0.0.255

#

 l2vpn enable

#

vsi vpna

 vxlan 10

  tunnel 1

  tunnel 2

#

vsi vpnb

 vxlan 20

  tunnel 1

  tunnel 2

#

interface LoopBack0

 ip address 1.1.1.1 255.255.255.255

#

interface HundredGigE1/0/1

 xconnect vsi vpna

#

interface HundredGigE1/0/2

 ip address 20.1.1.1 255.255.255.0

#

interface HundredGigE1/0/3

 xconnect vsi vpnb

#

interface Tunnel1 mode vxlan

 source 1.1.1.1

 destination 2.2.2.2

#

interface Tunnel2 mode vxlan

 source 1.1.1.1

 destination 3.3.3.3

·     Router B:

#

 undo vxlan ip-forwarding

#

ospf 1 router-id 2.2.2.2

 area 0.0.0.0

  network 2.2.2.2 0.0.0.0

  network 30.1.1.0 0.0.0.255

#

 l2vpn enable

#

vsi vpna

 vxlan 10

  tunnel 1

  tunnel 2

#

vsi vpnb

 vxlan 20

  tunnel 1

  tunnel 2

#

interface LoopBack0

 ip address 2.2.2.2 255.255.255.255

#

interface HundredGigE1/0/1

 xconnect vsi vpna

#

interface HundredGigE1/0/2

 ip address 30.1.1.2 255.255.255.0

#

interface HundredGigE1/0/3

 xconnect vsi vpnb

#

interface Tunnel1 mode vxlan

 source 2.2.2.2

 destination 1.1.1.1

#

interface Tunnel2 mode vxlan

 source 2.2.2.2

 destination 3.3.3.3

·     Router C:

#

ospf 1 router-id 3.3.3.3

 area 0.0.0.0

  network 3.3.3.3 0.0.0.0

  network 40.1.1.0 0.0.0.255

#

ospf 2 router-id 3.3.3.3

 area 0.0.0.0

  network 10.1.1.0 0.0.0.255

  network 10.1.2.0 0.0.0.255

  network 100.1.1.0 0.0.0.255

#

 l2vpn enable

#

vsi vpna

 gateway vsi-interface 1

 vxlan 10

  tunnel 1

  tunnel 2

#

vsi vpnb

 gateway vsi-interface 2

 vxlan 20

  tunnel 1

  tunnel 2

#

interface LoopBack0

 ip address 3.3.3.3 255.255.255.255

#

interface HundredGigE1/0/1

 ip address 100.1.1.1 255.255.255.0

#

interface HundredGigE1/0/2

 ip address 40.1.1.3 255.255.255.0

#

interface Vsi-interface1

 ip address 10.1.1.1 255.255.255.0

#

interface Vsi-interface2

 ip address 10.1.2.1 255.255.255.0

#

interface Tunnel1 mode vxlan

 source 3.3.3.3

 destination 1.1.1.1

#

interface Tunnel2 mode vxlan

 source 3.3.3.3

 destination 2.2.2.2

#

return

·     Router D:

#

ospf 1 router-id 4.4.4.4

 area 0.0.0.0

  network 4.4.4.4 0.0.0.0

  network 20.1.1.0 0.0.0.255

  network 30.1.1.0 0.0.0.255

  network 40.1.1.0 0.0.0.255

#

interface LoopBack0

 ip address 4.4.4.4 255.255.255.255

#

interface HundredGigE1/0/1

 ip address 20.1.1.4 255.255.255.0

#

interface HundredGigE1/0/2

 ip address 30.1.1.4 255.255.255.0

#

interface HundredGigE1/0/3

 ip address 40.1.1.4 255.255.255.0

#

return

Example: Configuring a centralized VXLAN IP gateway group

Network configuration

As shown in Figure 3:

·     Configure VXLAN 10 and VXLAN 20 as unicast-mode VXLANs on Router A, Router B, Router C, and Router D.

·     Manually establish VXLAN tunnels and assign the tunnels to VXLAN 10 or VXLAN 20. Make sure VM 1 and VM 3 belong to VXLAN 10 and VM 2 and VM 4 belong to VXLAN 20.

·     Assign Router C and Router D to a VTEP group to provide gateway services for VXLAN 10 and VXLAN 20.

Figure 3 Network diagram

 

Analysis

To ensure that the routers in the transport network can reach one another, configure a routing protocol on the routers to advertise routes for interfaces, including the loopback interfaces. In this example, OSPF is used.

To assign Router A, Router B, Router C, and Router D to VXLANs, create VXLAN tunnels on the routers and assign the tunnels to the VXLANs.

To assign customer traffic to a VXLAN, map the interface that receives the customer traffic to the VSI of the VXLAN.

For Router C and Router D to act as centralized VXLAN IP gateways, you must perform the following tasks:

·     Create a VSI interface for each VXLAN on the routers.

·     Assign an IP address to each VSI interface.

·     Specify the VSI interfaces as the gateway interfaces for VXLANs.

For Layer 3 nodes in the transport network to reach the VMs, configure a routing protocol on Router C and Router D to advertise routes for VSI interfaces and HundredGigE 1/0/1. In this example, OSPF is used.

Software versions used

This configuration example was created and verified on Release 3606.

Restrictions and guidelines

Make sure all VTEPs in the VTEP group have consistent VXLAN configuration.

By default, interfaces on the device are disabled (in ADM or Administratively Down state). To have an interface operate, you must use the undo shutdown command to enable that interface.

Procedures

Configuring IP addresses for interfaces

# Configure IP addresses for interfaces on Router A.

<RouterA> system-view

[RouterA] interface hundredgige 1/0/2

[RouterA-HundredGigE1/0/2] ip address 20.1.1.1 24

[RouterA-HundredGigE1/0/2] quit

[RouterA] interface loopback 0

[RouterA-LoopBack0] ip address 1.1.1.1 32

# Configure IP addresses for interfaces on other devices in the same way the IP addresses are configured on Router A. (Details not shown.)

Configuring a routing protocol on the transport network

# Configure OSPF to advertise routes for Router A.

[RouterA] ospf 1 router-id 1.1.1.1

[RouterA-ospf-1] area 0

[RouterA-ospf-1-area-0.0.0.0] network 1.1.1.1 0.0.0.0

[RouterA-ospf-1-area-0.0.0.0] network 20.1.1.0 0.0.0.255

[RouterA-ospf-1-area-0.0.0.0] quit

[RouterA-ospf-1] quit

# Configure OSPF to advertise routes for Router B.

[RouterB] ospf 1 router-id 2.2.2.2

[RouterB-ospf-1] area 0

[RouterB-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0

[RouterB-ospf-1-area-0.0.0.0] network 30.1.1.0 0.0.0.255

[RouterB-ospf-1-area-0.0.0.0] quit

[RouterB-ospf-1] quit

# Configure OSPF to advertise routes for Router C.

[RouterC] ospf 1 router-id 3.3.3.3

[RouterC-ospf-1] area 0

[RouterC-ospf-1-area-0.0.0.0] network 3.3.3.3 0.0.0.0

[RouterC-ospf-1-area-0.0.0.0] network 8.8.8.8 0.0.0.0

[RouterC-ospf-1-area-0.0.0.0] network 40.1.1.0 0.0.0.255

[RouterC-ospf-1-area-0.0.0.0] quit

[RouterC-ospf-1] quit

# Configure OSPF to advertise routes for Router D.

[RouterD] ospf 1 router-id 4.4.4.4

[RouterD-ospf-1] area 0

[RouterD-ospf-1-area-0.0.0.0] network 4.4.4.4 0.0.0.0

[RouterD-ospf-1-area-0.0.0.0] network 8.8.8.8 0.0.0.0

[RouterD-ospf-1-area-0.0.0.0] network 50.1.1.0 0.0.0.255

[RouterD-ospf-1-area-0.0.0.0] quit

[RouterD-ospf-1] quit

# Configure OSPF to advertise routes for Router E.

[RouterE] ospf 1 router-id 5.5.5.5

[RouterE-ospf-1] area 0

[RouterE-ospf-1-area-0.0.0.0] network 5.5.5.5 0.0.0.0

[RouterE-ospf-1-area-0.0.0.0] network 20.1.1.0 0.0.0.255

[RouterE-ospf-1-area-0.0.0.0] network 30.1.1.0 0.0.0.255

[RouterE-ospf-1-area-0.0.0.0] network 40.1.1.0 0.0.0.255

[RouterE-ospf-1-area-0.0.0.0] network 50.1.1.0 0.0.0.255

[RouterE-ospf-1-area-0.0.0.0] quit

[RouterE-ospf-1] quit

Configuring basic VXLAN settings

Configuring Router A

# Enable L2VPN.

[RouterA] l2vpn enable

# Enable Layer 2 forwarding for VXLANs.

[RouterA] undo vxlan ip-forwarding

# Create VSI vpna and VXLAN 10.

[RouterA] vsi vpna

[RouterA-vsi-vpna] vxlan 10

[RouterA-vsi-vpna-vxlan10] quit

[RouterA-vsi-vpna] quit

# Create VSI vpnb and VXLAN 20.

[RouterA] vsi vpnb

[RouterA-vsi-vpnb] vxlan 20

[RouterA-vsi-vpnb-vxlan10] quit

[RouterA-vsi-vpnb] quit

# Create a VXLAN tunnel to the VTEP group. The tunnel interface name is Tunnel 1.

[RouterA] interface tunnel 1 mode vxlan

[RouterA-Tunnel1] source 1.1.1.1

[RouterA-Tunnel1] destination 8.8.8.8

[RouterA-Tunnel1] quit

# Create a VXLAN tunnel to Router B. The tunnel interface name is Tunnel 2.

[RouterA] interface tunnel 2 mode vxlan

[RouterA-Tunnel2] source 1.1.1.1

[RouterA-Tunnel2] destination 2.2.2.2

[RouterA-Tunnel2] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 10.

[RouterA] vsi vpna

[RouterA-vsi-vpna] vxlan 10

[RouterA-vsi-vpna-vxlan10] tunnel 1

[RouterA-vsi-vpna-vxlan10] tunnel 2

[RouterA-vsi-vpna-vxlan10] quit

[RouterA-vsi-vpna] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 20.

[RouterA] vsi vpnb

[RouterA-vsi-vpnb] vxlan 20

[RouterA-vsi-vpnb-vxlan20] tunnel 1

[RouterA-vsi-vpnb-vxlan20] tunnel 2

[RouterA-vsi-vpnb-vxlan20] quit

[RouterA-vsi-vpnb] quit

# Map HundredGigE 1/0/1 to VSI vpna.

[RouterA] interface hundredgige 1/0/1

[RouterA-HundredGigE1/0/1] xconnect vsi vpna

[RouterA-HundredGigE1/0/1] quit

# Map HundredGigE 1/0/3 to VSI vpnb.

[RouterA] interface hundredgige 1/0/3

[RouterA-HundredGigE1/0/3] xconnect vsi vpnb

[RouterA-HundredGigE1/0/3] quit

Configuring Router B

# Enable L2VPN.

[RouterB] l2vpn enable

# Enable Layer 2 forwarding for VXLANs.

[RouterB] undo vxlan ip-forwarding

# Create VSI vpna and VXLAN 10.

[RouterB] vsi vpna

[RouterB-vsi-vpna] vxlan 10

[RouterB-vsi-vpna-vxlan10] quit

[RouterB-vsi-vpna] quit

# Create VSI vpnb and VXLAN 20.

[RouterB] vsi vpnb

[RouterB-vsi-vpnb] vxlan 20

[RouterB-vsi-vpnb-vxlan10] quit

[RouterB-vsi-vpnb] quit

# Create a VXLAN tunnel to the VTEP group. The tunnel interface name is Tunnel 1.

[RouterB] interface tunnel 1 mode vxlan

[RouterB-Tunnel1] source 2.2.2.2

[RouterB-Tunnel1] destination 8.8.8.8

[RouterB-Tunnel1] quit

# Create a VXLAN tunnel to Router A. The tunnel interface name is Tunnel 2.

[RouterB] interface tunnel 2 mode vxlan

[RouterB-Tunnel2] source 2.2.2.2

[RouterB-Tunnel2] destination 1.1.1.1

[RouterB-Tunnel2] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 10.

[RouterB] vsi vpna

[RouterB-vsi-vpna] vxlan 10

[RouterB-vsi-vpna-vxlan10] tunnel 1

[RouterB-vsi-vpna-vxlan10] tunnel 2

[RouterB-vsi-vpna-vxlan10] quit

[RouterB-vsi-vpna] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 20.

[RouterB] vsi vpnb

[RouterB-vsi-vpnb] vxlan 20

[RouterB-vsi-vpnb-vxlan20] tunnel 1

[RouterB-vsi-vpnb-vxlan20] tunnel 2

[RouterB-vsi-vpnb-vxlan20] quit

[RouterB-vsi-vpnb] quit

# Map HundredGigE 1/0/1 to VSI vpna.

[RouterB] interface hundredgige 1/0/1

[RouterB-HundredGigE1/0/1] xconnect vsi vpna

[RouterB-HundredGigE1/0/1] quit

# Map HundredGigE 1/0/3 to VSI vpnb.

[RouterB] interface hundredgige 1/0/3

[RouterB-HundredGigE1/0/3] xconnect vsi vpnb

[RouterB-HundredGigE1/0/3] quit

Configuring Router C

# Enable L2VPN.

[RouterC] l2vpn enable

# Create VSI vpna and VXLAN 10.

[RouterC] vsi vpna

[RouterC-vsi-vpna] vxlan 10

[RouterC-vsi-vpna-vxlan10] quit

[RouterC-vsi-vpna] quit

# Create VSI vpnb and VXLAN 20.

[RouterC] vsi vpnb

[RouterC-vsi-vpnb] vxlan 20

[RouterC-vsi-vpnb-vxlan10] quit

[RouterC-vsi-vpnb] quit

# Create a VXLAN tunnel for the VTEP group to Router A. The tunnel source IP address is 8.8.8.8, and the tunnel interface name is Tunnel 1.

[RouterC] interface tunnel 1 mode vxlan

[RouterC-Tunnel1] source 8.8.8.8

[RouterC-Tunnel1] destination 1.1.1.1

[RouterC-Tunnel1] quit

# Create a VXLAN tunnel for the VTEP group to Router B. The tunnel source IP address is 8.8.8.8, and the tunnel interface name is Tunnel 2.

[RouterC] interface tunnel 2 mode vxlan

[RouterC-Tunnel2] source 8.8.8.8

[RouterC-Tunnel2] destination 2.2.2.2

[RouterC-Tunnel2] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 10.

[RouterC] vsi vpna

[RouterC-vsi-vpna] vxlan 10

[RouterC-vsi-vpna-vxlan10] tunnel 1

[RouterC-vsi-vpna-vxlan10] tunnel 2

[RouterC-vsi-vpna-vxlan10] quit

[RouterC-vsi-vpna] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 20.

[RouterC] vsi vpnb

[RouterC-vsi-vpnb] vxlan 20

[RouterC-vsi-vpnb-vxlan20] tunnel 1

[RouterC-vsi-vpnb-vxlan20] tunnel 2

[RouterC-vsi-vpnb-vxlan20] quit

[RouterC-vsi-vpnb] quit

Configuring Router D

# Enable L2VPN.

[RouterD] l2vpn enable

# Create VSI vpna and VXLAN 10.

[RouterD] vsi vpna

[RouterD-vsi-vpna] vxlan 10

[RouterD-vsi-vpna-vxlan10] quit

[RouterD-vsi-vpna] quit

# Create VSI vpnb and VXLAN 20.

[RouterD] vsi vpnb

[RouterD-vsi-vpnb] vxlan 20

[RouterD-vsi-vpnb-vxlan10] quit

[RouterD-vsi-vpnb] quit

# Create a VXLAN tunnel for the VTEP group to Router A. The tunnel source IP address is 8.8.8.8, and the tunnel interface name is Tunnel 1.

[RouterD] interface tunnel 1 mode vxlan

[RouterD-Tunnel1] source 8.8.8.8

[RouterD-Tunnel1] destination 1.1.1.1

[RouterD-Tunnel1] quit

# Create a VXLAN tunnel for the VTEP group to Router B. The tunnel source IP address is 8.8.8.8, and the tunnel interface name is Tunnel 2.

[RouterD] interface tunnel 2 mode vxlan

[RouterD-Tunnel2] source 8.8.8.8

[RouterD-Tunnel2] destination 2.2.2.2

[RouterD-Tunnel2] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 10.

[RouterD] vsi vpna

[RouterD-vsi-vpna] vxlan 10

[RouterD-vsi-vpna-vxlan10] tunnel 1

[RouterD-vsi-vpna-vxlan10] tunnel 2

[RouterD-vsi-vpna-vxlan10] quit

[RouterD-vsi-vpna] quit

# Assign Tunnel 1 and Tunnel 2 to VXLAN 20.

[RouterD] vsi vpnb

[RouterD-vsi-vpnb] vxlan 20

[RouterD-vsi-vpnb-vxlan20] tunnel 1

[RouterD-vsi-vpnb-vxlan20] tunnel 2

[RouterD-vsi-vpnb-vxlan20] quit

[RouterD-vsi-vpnb] quit

Configuring centralized VXLAN IP gateway settings

Configuring Router C

# Create VSI-interface 1 and assign the interface an IP address and a MAC address. The IP address will be used as the gateway address for VXLAN 10.

[RouterC] interface vsi-interface 1

[RouterC-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[RouterC-Vsi-interface1] mac-address 1-1-1

# Enable periodic sending of gratuitous ARP packets on VSI-interface 1.

[RouterC-Vsi-interface1] arp send-gratuitous-arp interval 200000

[RouterC-Vsi-interface1] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[RouterC] vsi vpna

[RouterC-vsi-vpna] gateway vsi-interface 1

[RouterC-vsi-vpna] quit

# Create VSI-interface 2 and assign the interface an IP address and a MAC address. The IP address will be used as the gateway address for VXLAN 20.

[RouterC] interface vsi-interface 2

[RouterC-Vsi-interface2] ip address 10.1.2.1 255.255.255.0

[RouterC-Vsi-interface2] mac-address 2-2-2

# Enable periodic sending of gratuitous ARP packets on VSI-interface 2.

[RouterC-Vsi-interface2] arp send-gratuitous-arp interval 200000

[RouterC-Vsi-interface2] quit

# Specify VSI-interface 2 as the gateway interface for VSI vpnb.

[RouterC] vsi vpnb

[RouterC-vsi-vpnb] gateway vsi-interface 2

[RouterC-vsi-vpnb] quit

# Configure OSPF to advertise routes for the VSI interfaces and HundredGigE 1/0/1.

[RouterC] ospf 2 router-id 3.3.3.3

[RouterC-ospf-2] area 0

[RouterC-ospf-2-area-0.0.0.0] network 10.1.1.0 0.0.0.255

[RouterC-ospf-2-area-0.0.0.0] network 10.1.2.0 0.0.0.255

[RouterC-ospf-2-area-0.0.0.0] network 100.1.1.0 0.0.0.255

[RouterC-ospf-2-area-0.0.0.0] quit

[RouterC-ospf-2] quit

Configuring Router D

# Create VSI-interface 1 and assign the interface an IP address and a MAC address. The IP address will be used as the gateway address for VXLAN 10.

[RouterD] interface vsi-interface 1

[RouterD-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[RouterD-Vsi-interface1] mac-address 1-1-1

# Enable periodic sending of gratuitous ARP packets on VSI-interface 1.

[RouterD-Vsi-interface1] arp send-gratuitous-arp interval 200000

[RouterD-Vsi-interface1] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[RouterD] vsi vpna

[RouterD-vsi-vpna] gateway vsi-interface 1

[RouterD-vsi-vpna] quit

# Create VSI-interface 2 and assign the interface an IP address and a MAC address. The IP address will be used as the gateway address for VXLAN 20.

[RouterD] interface vsi-interface 2

[RouterD-Vsi-interface2] ip address 10.1.2.1 255.255.255.0

[RouterD-Vsi-interface2] mac-address 2-2-2

# Enable periodic sending of gratuitous ARP packets on VSI-interface 2.

[RouterD-Vsi-interface2] arp send-gratuitous-arp interval 200000

[RouterD-Vsi-interface2] quit

# Specify VSI-interface 2 as the gateway interface for VSI vpnb.

[RouterD] vsi vpnb

[RouterD-vsi-vpnb] gateway vsi-interface 2

[RouterD-vsi-vpnb] quit

# Configure OSPF to advertise routes for the VSI interfaces and HundredGigE 1/0/1.

[RouterD] ospf 2 router-id 4.4.4.4

[RouterD-ospf-2] area 0

[RouterD-ospf-2-area-0.0.0.0] network 10.1.1.0 0.0.0.255

[RouterD-ospf-2-area-0.0.0.0] network 10.1.2.0 0.0.0.255

[RouterD-ospf-2-area-0.0.0.0] network 100.1.1.0 0.0.0.255

[RouterD-ospf-2-area-0.0.0.0] quit

[RouterD-ospf-2] quit

Configuring the VTEP group

Configuring member VTEP Router C

# Assign Router C to VTEP group 8.8.8.8, and specify the member IP address of Router C as 3.3.3.3.

[RouterC] vtep group 8.8.8.8 member local 3.3.3.3

# Specify the other member VTEP in the VTEP group.

[RouterC] vtep group 8.8.8.8 member remote 4.4.4.4

Configuring member VTEP Router D

# Assign Router D to VTEP group 8.8.8.8, and specify the member IP address of Router D as 4.4.4.4.

[RouterD] vtep group 8.8.8.8 member local 4.4.4.4

# Specify the other member VTEP in the VTEP group.

[RouterD] vtep group 8.8.8.8 member remote 3.3.3.3

Specifying the VTEP group as the gateway for access layer VTEPs

Configuring access layer VTEP Router A

# Specify VTEP group 8.8.8.8 and its member VTEPs at 3.3.3.3 and 4.4.4.4.

[RouterA] vtep group 8.8.8.8 member remote 3.3.3.3 4.4.4.4

Configuring access layer VTEP Router B

# Specify VTEP group 8.8.8.8 and its member VTEPs at 3.3.3.3 and 4.4.4.4.

[RouterB] vtep group 8.8.8.8 member remote 3.3.3.3 4.4.4.4

Verifying the configuration

1.     Verify the VXLAN settings on the VTEPs. This example uses Router A.

# Verify that the VXLAN tunnel interfaces are in up state. Tunnel 1 and Tunnel 2 are manual tunnels, and Tunnel 3 and Tunnel 4 are VXLAN tunnels automatically established between the VTEP and each VXLAN IP gateway.

[RouterA] display interface tunnel

Tunnel1

Current state: UP

Line protocol state: UP

Description: Tunnel1 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 1.1.1.1, destination 8.8.8.8

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

 

Tunnel2

Current state: UP

Line protocol state: UP

Description: Tunnel2 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 1.1.1.1, destination 2.2.2.2

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

 

Tunnel3

Current state: UP

Line protocol state: UP

Description: Tunnel3 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 1.1.1.1, destination 3.3.3.3

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

 

Tunnel4

Current state: UP

Line protocol state: UP

Description: Tunnel4 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 1.1.1.1, destination 4.4.4.4

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

# Verify that the VXLAN tunnels have been assigned to VXLAN 10 and VXLAN 20, and the Ethernet service instances have been mapped to VSIs vpna and vpnb.

[RouterA] display l2vpn vsi verbose

VSI Name: vpna

  VSI Index               : 0

  VSI State               : Up

  MTU                     : 1500

  Bandwidth               : Unlimited

  Broadcast Restrain      : 4294967295 kbps

  Multicast Restrain      : 4294967295 kbps

  Unknown Unicast Restrain: 4294967295 kbps

  MAC Learning            : Enabled

  MAC Table Limit         : -

  MAC Learning rate       : -

  Local MAC aging time    : 300 sec

  Remote MAC aging time   : 300 sec

  Drop Unknown            : -

  PW Redundancy Mode      : Slave

  Flooding                : Enabled

  Statistics              : Disabled

  VXLAN ID                : 10

  Tunnels:

    Tunnel Name          Link ID    State  Type        Flood proxy

    Tunnel1              0x5000001  Up     Manual      Disabled

    Tunnel2              0x5000002  Up     Manual      Disabled

    Tunnel3              0x5000003  Up     Auto        Disabled

    Tunnel4              0x5000004  Up     Auto        Disabled

  ACs:

    AC                               Link ID    State       Type

    HGE1/0/1                         0          Up          Manual

 

VSI Name: vpnb

  VSI Index               : 1

  VSI State               : Up

  MTU                     : 1500

  Bandwidth               : Unlimited

  Broadcast Restrain      : 4294967295 kbps

  Multicast Restrain      : 4294967295 kbps

  Unknown Unicast Restrain: 4294967295 kbps

  MAC Learning            : Enabled

  MAC Table Limit         : -

  MAC Learning rate       : -

  Local MAC aging time    : 300 sec

  Remote MAC aging time   : 300 sec

  Drop Unknown            : -

  PW Redundancy Mode      : Slave

  Flooding                : Enabled

  Statistics              : Disabled

  VXLAN ID                : 20

  Tunnels:

    Tunnel Name          Link ID    State  Type        Flood proxy

    Tunnel1              0x5000001  Up     Manual      Disabled

    Tunnel2              0x5000002  Up     Manual      Disabled

    Tunnel3              0x5000003  Up     Auto        Disabled

    Tunnel4              0x5000004  Up     Auto        Disabled

  ACs:

    AC                               Link ID    State       Type

    HGE1/0/3                         0          Up          Manual

2.     Verify the basic VXLAN settings and VXLAN IP gateway settings on VXLAN IP gateways. This example uses Router C.

# Verify that the VXLAN tunnel interfaces are in up state on Router C.

[RouterC] display interface tunnel

Tunnel1

Current state: UP

Line protocol state: UP

Description: Tunnel1 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 8.8.8.8, destination 1.1.1.1

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

 

Tunnel2

Current state: UP

Line protocol state: UP

Description: Tunnel2 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Last clearing of counters: Never

Tunnel source 8.8.8.8, destination 2.2.2.2

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

# Verify that the VSI interfaces are in up state on Router C.

[RouterC] display interface vsi-interface

Vsi-interface1

Current state: UP

Line protocol state: UP

Description: Vsi-interface1 Interface

Bandwidth: 1000000 kbps

Maximum transmission unit: 1500

Internet Address: 10.1.1.1/24 (primary)

IP packet frame type: Ethernet II, hardware address: 0001-0001-0001

IPv6 packet frame type: Ethernet II, hardware address: 0001-0001-0001

Physical: Unknown, baudrate: 1000000 kbps

Last clearing of counters: Never

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

 

Vsi-interface2

Current state: UP

Line protocol state: UP

Description: Vsi-interface2 Interface

Bandwidth: 1000000 kbps

Maximum transmission unit: 1500

Internet Address:  10.1.2.1/24 (primary)

IP packet frame type: Ethernet II, hardware address: 0002-0002-0002

IPv6 packet frame type: Ethernet II, hardware address: 0002-0002-0002

Physical: Unknown, baudrate: 1000000 kbps

Last clearing of counters: Never

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

# Verify that the VXLAN tunnels have been assigned to VXLANs 10 and 20, VSI-interface 1 is the gateway interface for VSI vpna, and VSI-interface 2 is the gateway interface for VSI vpnb.

[RouterC] display l2vpn vsi verbose

VSI Name: vpna

  VSI Index               : 0

  VSI State               : Up

  MTU                     : 1500

  Bandwidth               : Unlimited

  Broadcast Restrain      : 4294967295 kbps

  Multicast Restrain      : 4294967295 kbps

  Unknown Unicast Restrain: 4294967295 kbps

  MAC Learning            : Enabled

  MAC Table Limit         : -

  MAC Learning rate       : -

  Local MAC aging time    : 300 sec

  Remote MAC aging time   : 300 sec

  Drop Unknown            : -

  PW Redundancy Mode      : Slave

  Flooding                : Enabled

  Statistics              : Disabled

  Gateway interface       : VSI-interface 1

  VXLAN ID                : 10

  Tunnels:

    Tunnel Name          Link ID    State    Type        Flooding proxy

    Tunnel1              0x5000002  Up       Manual      Disabled

    Tunnel2              0x5000003  Up       Manual      Disabled

 

VSI Name: vpnb

  VSI Index               : 1

  VSI State               : Up

  MTU                     : 1500

  Bandwidth               : Unlimited

  Broadcast Restrain      : 4294967295 kbps

  Multicast Restrain      : 4294967295 kbps

  Unknown Unicast Restrain: 4294967295 kbps

  MAC Learning            : Enabled

  MAC Table Limit         : -

  MAC Learning rate       : -

  Local MAC aging time    : 300 sec

  Remote MAC aging time   : 300 sec

  Drop Unknown            : -

  PW Redundancy Mode      : Slave

  Flooding                : Enabled

  Statistics              : Disabled

  Gateway interface       : VSI-interface 2

  VXLAN ID                : 20

  Tunnels:

    Tunnel Name          Link ID    State    Type        Flooding proxy

    Tunnel1              0x5000002  Up       Manual      Disabled

    Tunnel2              0x5000003  Up       Manual      Disabled

# Verify that Router C has created ARP entries for the VMs.

[RouterC] display arp

  Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address      MAC address    VLAN/VSI name Interface                Aging Type

10.1.1.11       0000-1234-0001 N/A           Tunnel1                  20    D

10.1.1.12       0000-1234-0002 N/A           Tunnel2                  19    D

# Verify that Router C has created FIB entries for the VMs.

[RouterC] display fib 10.1.1.11

 

Destination count: 1 FIB entry count: 1

 

Flag:

  U:Useable   G:Gateway   H:Host   B:Blackhole   D:Dynamic   S:Static

  R:Relay     F:FRR

 

Destination/Mask   Nexthop         Flag     OutInterface/Token       Label

10.1.1.11/32       10.1.1.11       UH       Vsi1                     Null

# Verify that Router D has created the same ARP entries and FIB entries for the VMs as Router C.

[RouterD] display arp

  Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address      MAC address    VLAN/VSI name Interface                Aging Type

10.1.1.11       0000-1234-0001 N/A           Tunnel1                  20    D

10.1.1.12       0000-1234-0002 N/A           Tunnel2                  19    D

[RouterD] display fib 10.1.1.11

 

Destination count: 1 FIB entry count: 1

 

Flag:

  U:Useable   G:Gateway   H:Host   B:Blackhole   D:Dynamic   S:Static

  R:Relay     F:FRR

 

Destination/Mask   Nexthop         Flag     OutInterface/Token       Label

10.1.1.11/32       10.1.1.11       UH       Vsi1                     Null

3.     Verify the network connectivity for VMs:

# Verify that VM 1, VM 2, VM 3, and VM 4 can ping each other. (Details not shown.)

# Verify that VM 1, VM 2, VM 3, and VM 4 can ping HundredGigE 1/0/1 on Router C (100.1.1.3) and Router D (100.1.1.4). (Details not shown.)

Configuration files

·     Router A:

#

 undo vxlan ip-forwarding

#

ospf 1 router-id 1.1.1.1

 area 0.0.0.0

  network 1.1.1.1 0.0.0.0

  network 20.1.1.0 0.0.0.255

#

 l2vpn enable

#

vsi vpna

 vxlan 10

  tunnel 1

  tunnel 2

#

vsi vpnb

 vxlan 20

  tunnel 1

  tunnel 2

#

interface LoopBack0

 ip address 1.1.1.1 255.255.255.255

#

interface HundredGigE1/0/1

 xconnect vsi vpna

#

interface HundredGigE1/0/2

 ip address 20.1.1.1 255.255.255.0

#

interface HundredGigE1/0/3

 xconnect vsi vpnb

#

interface Tunnel1 mode vxlan

 source 1.1.1.1

 destination 8.8.8.8

#

interface Tunnel2 mode vxlan

 source 1.1.1.1

 destination 2.2.2.2

#

 vtep group 8.8.8.8 member remote 3.3.3.3 4.4.4.4

#

·     Router B:

#

 undo vxlan ip-forwarding

#

ospf 1 router-id 2.2.2.2

 area 0.0.0.0

  network 2.2.2.2 0.0.0.0

  network 30.1.1.0 0.0.0.255

#

 l2vpn enable

#

vsi vpna

 vxlan 10

  tunnel 1

  tunnel 2

#

vsi vpnb

 vxlan 20

  tunnel 1

  tunnel 2

#

interface LoopBack0

 ip address 2.2.2.2 255.255.255.255

#

interface HundredGigE1/0/1

 xconnect vsi vpna

#

interface HundredGigE1/0/2

 ip address 30.1.1.2 255.255.255.0

#

interface HundredGigE1/0/3

 xconnect vsi vpnb

#

interface Tunnel1 mode vxlan

 source 2.2.2.2

 destination 8.8.8.8

#

interface Tunnel2 mode vxlan

 source 2.2.2.2

 destination 1.1.1.1

#

 vtep group 8.8.8.8 member remote 3.3.3.3 4.4.4.4

#

·     Router C:

#

ospf 1 router-id 3.3.3.3

 area 0.0.0.0

  network 3.3.3.3 0.0.0.0

  network 8.8.8.8 0.0.0.0

  network 40.1.1.0 0.0.0.255

#

ospf 2 router-id 3.3.3.3

 area 0.0.0.0

  network 10.1.1.0 0.0.0.255

  network 10.1.2.0 0.0.0.255

  network 100.1.1.0 0.0.0.255

#

 l2vpn enable

#

vsi vpna

 gateway vsi-interface 1

 vxlan 10

  tunnel 1

  tunnel 2

#

vsi vpnb

 gateway vsi-interface 2

 vxlan 20

  tunnel 1

  tunnel 2

#

interface LoopBack0

 ip address 3.3.3.3 255.255.255.255

#

interface LoopBack1

 ip address 8.8.8.8 255.255.255.255

#

interface HundredGigE1/0/1

 ip address 100.1.1.3 255.255.255.0

#

interface HundredGigE1/0/2

 ip address 40.1.1.3 255.255.255.0

#

interface Vsi-interface1

 ip address 10.1.1.1 255.255.255.0

 mac-address 0001-0001-0001

 arp send-gratuitous-arp interval 200000

#

interface Vsi-interface2

 ip address 10.1.2.1 255.255.255.0

 mac-address 0002-0002-0002

 arp send-gratuitous-arp interval 200000

#

interface Tunnel1 mode vxlan

 source 8.8.8.8

 destination 1.1.1.1

#

interface Tunnel2 mode vxlan

 source 8.8.8.8

 destination 2.2.2.2

#

 vtep group 8.8.8.8 member local 3.3.3.3

#

 vtep group 8.8.8.8 member remote 4.4.4.4

#

return

·     Router D:

#

ospf 1 router-id 4.4.4.4

 area 0.0.0.0

  network 4.4.4.4 0.0.0.0

  network 8.8.8.8 0.0.0.0

  network 50.1.1.0 0.0.0.255

#

ospf 2 router-id 4.4.4.4

 area 0.0.0.0

  network 10.1.1.0 0.0.0.255

  network 10.1.2.0 0.0.0.255

  network 100.1.1.0 0.0.0.255

#

 l2vpn enable

#

vsi vpna

 gateway vsi-interface 1

 vxlan 10

  tunnel 1

  tunnel 2

#

vsi vpnb

 gateway vsi-interface 2

 vxlan 20

  tunnel 1

  tunnel 2

#

interface LoopBack0

 ip address 4.4.4.4 255.255.255.255

#

interface LoopBack1

 ip address 8.8.8.8 255.255.255.255

#

interface HundredGigE1/0/1

 ip address 100.1.1.4 255.255.255.0

#

interface HundredGigE1/0/2

 ip address 50.1.1.4 255.255.255.0

#

interface Vsi-interface1

 ip address 10.1.1.1 255.255.255.0

 mac-address 0001-0001-0001

 arp send-gratuitous-arp interval 200000

#

interface Vsi-interface2

 ip address 10.1.2.1 255.255.255.0

 mac-address 0002-0002-0002

 arp send-gratuitous-arp interval 200000

#

interface Tunnel1 mode vxlan

 source 8.8.8.8

 destination 1.1.1.1

#

interface Tunnel2 mode vxlan

 source 8.8.8.8

 destination 2.2.2.2

#

 vtep group 8.8.8.8 member local 4.4.4.4

#

 vtep group 8.8.8.8 member remote 3.3.3.3

#

return

·     Router E:

#

ospf 1 router-id 5.5.5.5

 area 0.0.0.0

  network 5.5.5.5 0.0.0.0

  network 20.1.1.0 0.0.0.255

  network 30.1.1.0 0.0.0.255

  network 40.1.1.0 0.0.0.255

  network 50.1.1.0 0.0.0.255

#

interface LoopBack0

 ip address 5.5.5.5 255.255.255.255

#

interface HundredGigE1/0/1

 ip address 20.1.1.5 255.255.255.0

#

interface HundredGigE1/0/2

 ip address 30.1.1.5 255.255.255.0

#

interface HundredGigE1/0/3

 ip address 40.1.1.5 255.255.255.0

#

interface HundredGigE1/0/4

 ip address 50.1.1.5 255.255.255.0

#

return

Related documentation

·     H3C S12500R Switch Router Series VXLAN Command Reference-R3606

·     H3C S12500R Switch Router Series VXLAN Configuration Guide-R3606