H3C S10500 Series Manuel utilisateur

H3C S10500 Switch Series

EVPN

Configuration Guide

Hangzhou H3C Technologies Co., Ltd.

http://www.h3c.com

Software version: S10500-CMW710-R7523P01

Document version: 6W100-20160830

No part of this manual may be reproduced or transmitted in any form or by any means without prior written

consent of Hangzhou H3C Technologies Co., Ltd.

Trademarks

H3C, , H3CS, H3CIE, H3CNE,Aolynk, , H3Care, , IRF, NetPilot, Netflow, SecEngine,

SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of Hangzhou H3C

Technologies Co., Ltd.

All other trademarks that may be mentioned in this manual are the property of their respective owners

Notice

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, and

recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface

This configuration guide describes fundamentals and configuration of Ethernet Virtual Private

Network (EVPN). EVPN is a Layer 2 VPN technology that provides connectivity between distant

network sites across an IP network. EVPN uses MP-BGPin the control plane and VXLAN in the data

plane.

This preface includes the following topics about the documentation:

•Audience.

•Conventions.

•About the H3C S10500 documentation set.

•Obtaining documentation.

•Technical support.

•Documentation feedback.

Audience

This documentation is intended for:

•Network planners.

•Field technical support and servicing engineers.

•Network administrators working with the S10500 switch series.

Conventions

This section describes the conventions used in the documentation.

Port numbering in examples

The port numbers in the documentation are for illustration only and might be unavailable on your

device.

Command conventions

Convention Description

Boldface Bold text represents commands and keywords that you enter literally as shown.

Italic Italic text represents arguments that you replace with actual values.

[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.

{ x | y | ... }

Braces enclose a set of required syntax choices separated by vertical bars, from which

you select one.

[ x | y | ... ]

Square brackets enclose a set of optional syntax choices separated by vertical bars,

from which you select one or none.

Convention Description

{ x | y | ... } *

Asterisk marked braces enclose a set of required syntax choices separated by vertical

bars, from which you select at least one.

[ x | y | ... ] *

Asterisk marked square brackets enclose optional syntax choices separated by vertical

bars, from which you select one choice, multiple choices, or none.

&<1-n> The argument or keyword and argument combination before the ampersand (&) sign

can be entered 1 to n times.

# A line that starts with a pound (#) sign is comments.

GUI conventions

Convention Description

Boldface Window names, button names, field names, and menu items are in Boldface. For

example, the New User window appears; click OK.

> Multi-level menus are separated by angle brackets. For example, File > Create >

Folder.

Symbols

Convention Description

WARNING! An alert that calls attention to important information that if not understood or followed

can result in personal injury.

CAUTION: An alert that calls attention to important information that if not understood or followed

can result in data loss, data corruption, or damage to hardware or software.

IMPORTANT: An alert that calls attention to essential information.

NOTE: An alert that contains additional or supplementary information.

TIP: An alert that provides helpful information.

Network topology icons

Convention Description

Represents a generic network device, such as a router, switch, or firewall.

Represents a routing-capable device, such as a router or Layer 3 switch.

Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that

supports Layer 2 forwarding and other Layer 2 features.

Represents an access controller, a unified wired-WLAN module, or the access

controller engine on a unified wired-WLAN switch.

Represents an access point.

Wireless terminator unit.

Convention Description

Wireless terminator.

Represents a mesh access point.

Represents omnidirectional signals.

Represents directional signals.

Represents a security product, such as a firewall, UTM, multiservice security

gateway, or load balancing device.

Represents a security card, such as a firewall, load balancing, NetStream, SSL VPN,

IPS, or ACG card.

About the H3C S10500 documentation set

The H3C S10500 documentation set includes the following categories of documents:

Category Documents Purposes

Product description and

specifications Marketing brochures Describes product specifications and benefits.

Hardware specifications

and installation

Compliance and safety

manual

Provides regulatory information and the safety

instructions that must be followed during

installation.

Quick start Guides you through initial installation and setup

procedures to help you quickly set up and use

your device with the minimum configuration.

Installation guide Provides a complete guide to hardware

installation and hardware specifications.

H3C Pluggable SFP

[SFP+][XFP] Transceiver

Modules Installation Guide

Guides you through installing SFP/SFP+/XFP

transceiver modules.

H3C CFP Transceiver

Modules Installation Guide Guides you through installing CFP transceiver

modules.

H3C QSFP+ Transceiver

Modules Installation Guide Guides you through installing QSFP+

transceiver modules.

H3C Transceiver Modules

User Guide

Describes the transceiver modules available

for the H3C network products, their external

views, and specifications.

Category Documents Purposes

Software configuration

Configuration guides Describes software features and configuration

procedures.

Command references Provides a quick reference to all available

commands.

Configuration examples Describes typical network scenarios and

provide configuration examples and

instructions.

Operations and

maintenance

Troubleshooting Provides troubleshooting information for

common problems of using the product.

FAQ Covers the most frequently asked questions

about the hardware, software and system

specifications.

Release notes

Provides information about the product

release, including the version history, hardware

and software compatibility matrix, version

upgrade information, technical support

information, and software upgrading.

System log messages Explains the system log messages.

Obtaining documentation

Access the most up-to-date H3C product documentation on the World Wide Web

at http://www.h3c.com.

Click the following links to obtain different categories of product documentation:

[Technical Documents]—Provides hardware installation, software upgrading, and software feature

configuration and maintenance documentation.

[Products & Solutions]—Provides information about products and technologies, as well as

solutions. [Software Download]—Provides the documentation released with the software version.

Technical support

service@h3c.com

http://www.h3c.com

Documentation feedback

You can e-mail your comments about product documentation to info@h3c.com.

We appreciate your comments.

Contents

EVPN overview·······························································································1

EVPN network model·········································································································································1

MP-BGP extension for EVPN ····························································································································2

Configuration automation···································································································································3

Assignment of traffic to VXLANs························································································································3

Traffic from the local site to a remote site··································································································3

Traffic from a remote site to the local site··································································································4

Layer 2 forwarding ·············································································································································4

MAC learning ·············································································································································4

Unicast·······················································································································································4

Flood··························································································································································5

Layer 3 forwarding ·············································································································································6

Centralized EVPN gateway deployment····································································································6

Distributed EVPN gateway deployment·····································································································7

ARP flood suppression ····································································································································10

MAC mobility····················································································································································11

Configuring EVPN·························································································12

Hardware compatibility restrictions ··················································································································12

EVPN configuration task list·····························································································································12

Creating a VXLAN on a VSI·····························································································································12

Configuring an EVPN instance ························································································································13

Configuring BGP to advertise EVPN routes·····································································································13

Mapping an Ethernet service instance to a VSI·······························································································15

Configuring a centralized EVPN gateway········································································································16

Configuration restrictions and guidelines·································································································16

Configuration procedure···························································································································16

Configuring a distributed EVPN gateway·········································································································16

Configuration prerequisites······················································································································16

Configuring a VSI interface as a gateway interface·················································································17

Configuring an L3 VXLAN ID for a VSI interface······················································································17

Configuring IP prefix route advertisement································································································18

Managing remote MAC address entries and remote ARP learning·································································19

Disabling remote MAC address learning and remote ARP learning························································19

Disabling MAC address advertisement····································································································20

Disabling learning of MAC addresses from ARP information···································································20

Enabling BGP EVPN route advertisement to the local site··············································································20

Confining floods to the local site ······················································································································21

Enabling ARP flood suppression ·····················································································································21

Displaying and maintaining EVPN ···················································································································22

EVPN configuration examples ·························································································································22

Centralized EVPN gateway configuration example··················································································22

Distributed EVPN gateway configuration example···················································································31

Index·············································································································41

EVPN overview

Ethernet Virtual Private Network (EVPN) is a Layer 2 VPN technology that provides both Layer 2 and

Layer 3 connectivity between distant network sites across an IP network. EVPN uses MP-BGP in the

control plane and VXLAN in the data plane. EVPN is typically used in data centers for multitenant

services.

EVPN provides the following benefits:

•Configuration automation—MP-BGP automates VTEP discovery, VXLAN tunnel

establishment, and VXLAN tunnel assignment to ease deployment.

•Separation of the control plane and the data plane—EVPN uses MP-BGPto advertise host

reachability information in the control plane and uses VXLAN to forward traffic in the data plane.

•Integrated bridging and routing (IBR)—MP-BGP advertises both Layer 2 and Layer 3 host

reachability information to provide optimal forwarding paths and minimize flooding.

EVPN network model

As shown in Figure 1, EVPN uses the VXLAN technology for traffic forwarding in the data plane. The

transport edge devices assign VMs to different VXLANs, and then forward traffic between sites for

VMs by using VXLAN tunnels. The transport edge devices are VXLAN tunnel endpoints (VTEPs).

They can be servers that host VMs or independent network devices.

A VTEP uses ESs, VSIs, and VXLAN tunnels to provide VXLAN services:

•Ethernet segment (ES)—An ES is a link that connects a site to a VTEP. Each ES is uniquely

identified by an Ethernet segment identifier (ESI). A site can be connected to a VTEP through

only one ES. The ES uses ESI 0.

•VSI—A virtual switch instance is a virtual Layer 2 switched domain. Each VSI provides

switching services only for one VXLAN. VSIs learn MAC addresses and forward frames

independently of one another. VMs in different sites have Layer 2 connectivity if they are in the

same VXLAN.A VXLAN is identified by a 24-bit VXLAN ID which is also called the virtual

network identifier (VNI). A VXLAN corresponds to an EVPN instance.

•VXLAN tunnel—Logical point-to-point tunnels between VTEPs over the transport network.

Each VXLAN tunnel can trunk multiple VXLANs.

All VXLAN processing is performed on VTEPs. The ingress VTEP encapsulates VXLAN traffic in the

VXLAN, outer UDP, and outer IP headers, and forwards the traffic through VXLAN tunnels. The

egress VTEP removes the VXLAN encapsulation and forwards the traffic to the destination.

Transport network devices (for example, the P device in Figure 1) forward VXLAN traffic only based

on the outer IP header of VXLAN packets.

Figure 1 EVPN network model

As shown in Figure 2, typically the EVPN transport network uses a layered structure. On the

transport network, leaf nodes act as VTEPs to provide VXLAN services, and spine nodes perform

forwarding for VXLAN traffic based on the outer IP header. If all VTEPs and transport network

devices of an EVPN network belong to the same AS, the spine nodes can act as route reflectors

(RRs) to reflect routes between the VTEPs. In this scenario, the spine nodes advertise and receive

EVPN routes, but do not perform VXLAN encapsulation and de-encapsulation.

Figure 2 Layered transport network

MP-BGP extension for EVPN

To support EVPN, MP-BGP introduces the EVPN subsequent address family under the L2VPN

address family and the following network layer reachability information (EVPN routes):

•Ethernet auto-discovery route—Advertises ES information in multihomed sites.

•MAC/IP advertisement route—Advertises MAC reachability information and host route

information (host ARP information).

•Inclusive multicast Ethernet tag (IMET) route—Advertises VTEP and VXLAN mappings for

automating VTEP discovery, VXLAN tunnel establishment, and VXLAN tunnel assignment.

•Ethernet segment route—Advertises ES and VTEP mappings.

VXLAN tunnel

VTEP

Server Server

Site 1 Site 2

VSI/VXLAN 10

VSI/VXLAN 20

VSI/VXLAN 30

VSI/VXLAN 10

VSI/VXLAN 20

VSI/VXLAN 30

Transport

network

ES ES

VTEP

•IP prefix advertisement route—Advertises external routes as IP prefixes.

MP-BGP uses the route distinguisher (RD) field to differentiate EVPN routes of different VXLANs and

uses route target attributes to control the advertisement and acceptance of EVPN routes. MP-BGP

supports the following types of route target attributes:

•Export target attribute—AVTEP sets the export target attribute for EVPN routes learned from

the local site before advertising them to remote VTEPs.

•Import target attribute—A VTEP checks the export target attribute of EVPN routes received

from remote VTEPs. The VTEP imports the EVPN routes only when their export target attribute

matches the local import target attribute.

Configuration automation

VTEPs use EVPN routes to discover VTEP neighbors, establish VXLAN tunnels, and assign the

tunnels to VXLANs.

•IMET route—VTEPs advertise the VXLAN IDs they have through IMET routes. If two VTEPs

have the same VXLAN ID, they automatically establish a VXLAN tunnel and assign the tunnel

to the VXLAN.

•MAC/IP advertisement route and IP prefix advertisement route—In the EVPN gateway

deployment, VTEPs advertise MAC/IP advertisement routes or IP prefix advertisement routes

with the export target attribute. If a VTEP receives a route of which the export target attribute

matches the local import target attribute, the VTEP establishes a VXLAN tunnel with the remote

VTEP and associates the tunnel with the L3 VXLAN ID of the corresponding VPN instance. For

more information about the L3 VXLAN ID, see "Distributed EVPN gateway deployment."

Assignment of traffic to VXLANs

Traffic from the local site to a remote site

The VTEP uses an Ethernet service instance to match a list of VLANs on a site-facing interface. The

VTEP assigns customer traffic to a VXLAN by mapping the Ethernet service instance to a VSI. An

Ethernet service instance is identical to an attachment circuit (AC) in L2VPN.

As shown in Figure 3, Ethernet service instance 1 matches VLAN 2 and is mapped to VSI A(VXLAN

10). When a frame from VLAN 2 arrives, the VTEPassigns the frame to VXLAN 10, and looks up VSI

A's MAC address table for the outgoing interface.

Figure 3 Identifying traffic from the local site

Autres manuels pour S10500 Series

Table des matières

Autres manuels H3C Changer

H3C

H3C S7500 Series Manuel utilisateur

H3C

H3C S3600-28PSI Guide de l'utilisateur

H3C

H3C S9500 Series Manuel utilisateur

H3C

H3C S9500 Series Manuel utilisateur

H3C

H3C S1200 Series Mode d’emploi

H3C

H3C WX3000 Series Manuel utilisateur

H3C

H3C s5820x series Manuel d'installation

H3C

H3C S7500 Series Manuel utilisateur

H3C

H3C S5500-HI Switch Series Manuel utilisateur

H3C

H3C S6300 Series Manuel d'installation

H3C

H3C S3610 Series Instructions d'installation

H3C

H3C S9500E Series Manuel utilisateur

H3C

H3C S3100V2-52TP Manuel utilisateur

H3C

H3C S7500E-XS Series Manuel d'installation

H3C

H3C S6520-EI Series Manuel utilisateur

H3C

H3C UniServer BX1010E Manuel utilisateur

H3C

H3C S9500 Series Manuel utilisateur

H3C

H3C S5500-SI Series Manuel utilisateur

H3C

H3C S6820 Series Manuel d'installation

H3C

H3C S7500X Series Manuel utilisateur

H3C

H3C s5820x series Manuel utilisateur

H3C

H3C S5120-EI Series Manuel d'utilisation et d'entretien

H3C

H3C S5510 Series Instructions d'installation

H3C

H3C S5560X-30C-EI Manuel utilisateur

Manuels Changer populaires d'autres marques

URC

URC Total Control MFS-8 Manuel utilisateur

Azbil

Azbil HPQ-D11 Manuel utilisateur

Sony

Sony DFS-900M Manuel utilisateur

SICK

SICK i17S Manuel utilisateur

F&F

F&F SZR-277 Manuel utilisateur

Shure

Shure UAMS/BK Manuel utilisateur

Dräger

Dräger X-zone Switch Off Manuel utilisateur

Asco

Asco Joucomatic 349 Series Manuel utilisateur

BT Mini Hub Manuel utilisateur

D-Link

D-Link DES-1226G Manuel utilisateur

Johnson Controls

Johnson Controls FS80-C Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuel utilisateur

MicroNet

MicroNet SP1200A Manuel utilisateur

Ruijie

Ruijie RG-PF2920 Series Manuel d'installation et d'exploitation

Altinex

Altinex DA1914SX Manuel utilisateur

MiLAN

MiLAN MIL-SM2401M Manuel utilisateur

RJM

RJM MASTERMIND PBC/6X Manuel utilisateur

Atlas

Atlas MMK-KVM8 Manuel utilisateur