Posts

VXLAN Journey - Part 10 - Multi-Site VXLAN Anycast Border Gateway Ip-Vrf (L3VNI) extension - advertise-pip

Image
In part - 09  we have prepared our anycast border-gateways for underlay and overlay bgp configuration. But we have not done any l3vni/l2vni extension. In this blog we will configure ip-vrf (l3vni) extension in our border-gateways. Along the way we will troubleshoot something called rouge-vtep which is Cisco's proprietary always-on native data plane security. And solve that rouge-vtep problem with another proprietary solution called advertise-pip . What is multi-site ? When we connect two different dc-fabrics (different BGP ASN) together with eBGP l2vpn-evpn - we call it vxlan multi-site extension. What is l3vni extension ? If vlan - A, under vrf - X, from Site - 1 can communicate over the border-gateways with  vlan - B, under vrf - X  from Site - 2;  we call it l3vni/ip-vrf extension over multisite. The common thing in the extension is that communicating vlans belong to the same vrf (l3vni).  Our topology looks like below -  01 - Network Topology For Spin...
Post a Comment
Read more

VXLAN Journey - Part 09 - Multi-Site VXLAN Anycast Border Gateway Configuration

Image
In this blog we will configure special leaf nodes called border-gateways and prepare our data-centers for seamless l3vni (ip-vrf) and l2vni (mac-vrf) extension across sites. What is multi-site ? When we connect two different dc-fabrics (different BGP ASN) together with eBGP l2vpn-evpn - we call it vxlan multi-site extension. Border-Gateways comes in two flavors - anycast and vpc . Anycast border-gateways are just standalone switches. vPC border-gateways are two border-gateways which are also vPC-pairs. We will configure the variant called - anycast border-gateway . Our border-gateways and Spine switches topology is given below (Leafs and Spines connections are ignored intentionally; for that see previous blogs) -  01 - Anycast Border-Gateway DCI/Fabric Topology A border-gateway connects to Spine switches in the local site - those links are called fabric-links . It also connects to remote site's border-gateways - those links are called dci-links . In Cisco NXOS both dci and fabric ...
Post a Comment
Read more