VXLAN Journey - Part 10 - Multi-Site VXLAN Anycast Border Gateway Ip-Vrf (L3VNI) extension - advertise-pip
In part - 09 we have prepared our anycast border-gateways for underlay and overlay bgp configuration. But we have not done any l3vni/l2vni extension. In this blog we will configure ip-vrf (l3vni) extension in our border-gateways. Along the way we will troubleshoot something called rouge-vtep which is Cisco's proprietary always-on native data plane security. And solve that rouge-vtep problem with another proprietary solution called advertise-pip . What is multi-site ? When we connect two different dc-fabrics (different BGP ASN) together with eBGP l2vpn-evpn - we call it vxlan multi-site extension. What is l3vni extension ? If vlan - A, under vrf - X, from Site - 1 can communicate over the border-gateways with vlan - B, under vrf - X from Site - 2; we call it l3vni/ip-vrf extension over multisite. The common thing in the extension is that communicating vlans belong to the same vrf (l3vni). Our topology looks like below - 01 - Network Topology For Spin...