Cisco Nexus 9000 Series NX-OS VXLAN Configuration Guide, Release 9.3(X)
Total Page:16
File Type:pdf, Size:1020Kb
Cisco Nexus 9000 Series NX-OS VXLAN Configuration Guide, Release 9.3(x) First Published: 2019-07-20 Last Modified: 2021-09-22 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS REFERENCED IN THIS DOCUMENTATION ARE SUBJECT TO CHANGE WITHOUT NOTICE. EXCEPT AS MAY OTHERWISE BE AGREED BY CISCO IN WRITING, ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS DOCUMENTATION ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. The Cisco End User License Agreement and any supplemental license terms govern your use of any Cisco software, including this product documentation, and are located at: http://www.cisco.com/go/softwareterms.Cisco product warranty information is available at http://www.cisco.com/go/warranty. US Federal Communications Commission Notices are found here http://www.cisco.com/c/en/us/products/us-fcc-notice.html. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Any products and features described herein as in development or available at a future date remain in varying stages of development and will be offered on a when-and if-available basis. Any such product or feature roadmaps are subject to change at the sole discretion of Cisco and Cisco will have no liability for delay in the delivery or failure to deliver any products or feature roadmap items that may be set forth in this document. Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental. The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com go trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1721R) © 2019–2021 Cisco Systems, Inc. All rights reserved. CONTENTS PREFACE Preface xvii Audience xvii Document Conventions xvii Related Documentation for Cisco Nexus 9000 Series Switches xviii Documentation Feedback xviii Communications, Services, and Additional Information xviii CHAPTER 1 New and Changed Information 1 New and Changed Information 1 CHAPTER 2 Overview 7 Licensing Requirements 7 VXLAN Overview 7 Cisco Nexus 9000 as Hardware-Based VXLAN Gateway 8 VXLAN Encapsulation and Packet Format 8 VXLAN Tunnel 9 VXLAN Tunnel Endpoint 9 Underlay Network 9 Overlay Network 9 Distributed Anycast Gateway 9 Control Plane 10 CHAPTER 3 Configuring VXLAN 13 Guidelines and Limitations for VXLAN 13 Considerations for VXLAN Deployment 19 vPC Considerations for VXLAN Deployment 21 Cisco Nexus 9000 Series NX-OS VXLAN Configuration Guide, Release 9.3(x) iii Contents Network Considerations for VXLAN Deployments 25 Considerations for the Transport Network 26 Considerations for Tunneling VXLAN 27 Configuring VXLAN 29 Enabling VXLANs 29 Mapping VLAN to VXLAN VNI 29 Creating and Configuring an NVE Interface and Associate VNIs 29 Configuring a VXLAN VTEP in vPC 30 Configuring Static MAC for VXLAN VTEP 32 Disabling VXLANs 33 Configuring BGP EVPN Ingress Replication 34 Configuring Static Ingress Replication 34 VXLAN and IP-in-IP Tunneling 35 Configuring VXLAN Static Tunnels 38 About VXLAN Static Tunnels 38 Guidelines and Limitations for VXLAN Static Tunnels 38 Enabling VXLAN Static Tunnels 39 Configuring VRF Overlay for Static Tunnels 40 Configuring a VRF for VXLAN Routing 40 Configuring the L3 VNI for Static Tunnels 41 Configuring the Tunnel Profile 42 Verifying VXLAN Static Tunnels 43 Example Configurations for VXLAN Static Tunnels 43 CHAPTER 4 Configuring VXLAN BGP EVPN 45 Information About VXLAN BGP EVPN 45 About RD Auto 45 About Route-Target Auto 46 Guidelines and Limitations for VXLAN BGP EVPN 47 Information About VXLAN EVPN with Downstream VNI 50 Asymmetric VNIs 50 Shared Services VRFs 51 Multi-Site with Asymmetric VNIs 51 Guidelines and Limitations for VXLAN EVPN with Downstream VNI 52 Cisco Nexus 9000 Series NX-OS VXLAN Configuration Guide, Release 9.3(x) iv Contents Configuring VXLAN BGP EVPN 54 Enabling VXLAN 54 Configuring VLAN and VXLAN VNI 54 Configuring VRF for VXLAN Routing 55 Configuring SVI for Core-facing VXLAN Routing 56 Configuring SVI for Host-Facing VXLAN Routing 57 Configuring the NVE Interface and VNIs Using Multicast 57 Configuring VXLAN EVPN Ingress Replication 58 Configuring BGP on the VTEP 59 Configuring iBGP for EVPN on the Spine 61 Configuring eBGP for EVPN on the Spine 62 Suppressing ARP 63 Disabling VXLANs 63 Duplicate Detection for IP and MAC Addresses 64 Verifying the VXLAN BGP EVPN Configuration 65 Verifying the VXLAN EVPN with Downstream VNI Configuration 66 Example of VXLAN BGP EVPN (IBGP) 69 Example of VXLAN BGP EVPN (EBGP) 80 Example Show Commands 93 CHAPTER 5 Configuring VXLAN with IPv6 in the Underlay (VXLANv6) 95 Information About Configuring VXLAN with IPv6 in the Underlay (VXLANv6) 95 Guidelines and Limitations for VXLAN with IPv6 in the Underlay (VXLANv6) 96 Information About vPC and VXLAN with IPv6 in the Underlay (VXLANv6) 98 Information About vPC Peer Keepalive and VXLAN with IPv6 in the Underlay (VXLANv6) 98 Configuring the VTEP IP Address 99 Configuring vPC for VXLAN with IPv6 in the Underlay (VXLANv6) 100 Example Configurations for VXLAN with IPv6 in the Underlay (VXLANv6) 101 Verifying VXLAN with IPv6 in the Underlay (VXLANv6) 103 CHAPTER 6 Configuring External VRF Connectivity and Route Leaking 113 Configuring External VRF Connectivity 113 About External Layer-3 Connectivity for VXLAN BGP EVPN Fabrics 113 VXLAN BGP EVPN - VRF-lite brief 113 Cisco Nexus 9000 Series NX-OS VXLAN Configuration Guide, Release 9.3(x) v Contents Guidelines and Limitations for External VRF Connectivity and Route Leaking 114 Configuring VXLAN BGP EVPN with eBGP for VRF-lite 114 VXLAN BGP EVPN - Default-Route, Route Filtering on External Connectivity 118 Configuring VXLAN BGP EVPN with OSPF for VRF-lite 124 Configuring Route Leaking 127 About Centralized VRF Route-Leaking for VXLAN BGP EVPN Fabrics 127 Guidelines and Limitations for Centralized VRF Route-Leaking 127 Centralized VRF Route-Leaking Brief - Specific Prefixes Between Custom VRF 127 Configuring Centralized VRF Route-Leaking - Specific Prefixes between Custom VRF 128 Configuring VRF Context on the Routing-Block VTEP 128 Configuring the BGP VRF instance on the Routing-Block 129 Example - Configuration Centralized VRF Route-Leaking - Specific Prefixes Between Custom VRF 130 Centralized VRF Route-Leaking Brief - Shared Internet with Custom VRF 131 Configuring Centralized VRF Route-Leaking - Shared Internet with Custom VRF 132 Configuring Internet VRF on Border Node 132 Configuring Shared Internet BGP Instance on the Border Node 133 Configuring Custom VRF on Border Node 133 Configuring Custom VRF Context on the Border Node - 1 134 Configuring Custom VRF Instance in BGP on the Border Node 135 Example - Configuration Centralized VRF Route-Leaking - Shared Internet with Custom VRF 135 Centralized VRF Route-Leaking Brief - Shared Internet with VRF Default 137 Configuring Centralized VRF Route-Leaking - Shared Internet with VRF Default 138 Configuring VRF Default on Border Node 138 Configuring BGP Instance for VRF Default on the Border Node 138 Configuring Custom VRF on Border Node 139 Configuring Filter for Permitted Prefixes from VRF Default on the Border Node 139 Configuring Custom VRF Context on the Border Node - 2 140 Configuring Custom VRF Instance in BGP on the Border Node 141 Example - Configuration Centralized VRF Route-Leaking - VRF Default with Custom VRF 141 CHAPTER 7 Configuring BGP EVPN Filtering 145 About BGP EVPN Filtering 145 Cisco Nexus 9000 Series NX-OS VXLAN Configuration Guide, Release 9.3(x) vi Contents Guidelines and Limitations for BGP EVPN Filtering 146 Configuring BGP EVPN Filtering 146 Configuring the Route Map with Match and Set Clauses 146 Matching Based on EVPN Route Type 147 Matching Based on MAC Address in the NLRI 147 Matching Based on RMAC Extended Community 148 Setting the RMAC Extended Community 148 Setting the EVPN Next-Hop IP Address 149 Setting the Gateway IP Address for Route Type-5 149 Applying the Route Map at the Inbound or Outbound Level 150 BGP EVPN Filtering Configuration Examples 150 Configuring a Table Map 159 Configuring a MAC List and a Route Map