ARISTA - VXLAN
VXLAN Overview
VXLAN (Virtual Extensible LAN) is a network overlay protocol designed to address the limitations of VLANs. It encapsulates Layer 2 Ethernet frames in Layer 3 UDP packets, allowing for scalable network segmentation across large data center environments. Below are advanced Arista EOS CLI commands related to VXLAN configuration and troubleshooting.
VXLAN Configuration
!-- Enable VXLAN routing globally vtep local-ip 192.168.1.1 vtep source-interface loopback0 !-- Configure VXLAN VLANs to map VNI (VXLAN Network Identifier) vlan 10 vn-segment 10010 vlan 20 vn-segment 10020
VXLAN Underlay Configuration
!-- Configure the IP addresses for VXLAN Underlay interface Ethernet1 ip address 10.1.1.1/30 no shutdown interface Ethernet2 ip address 10.1.1.2/30 no shutdown
VXLAN EVPN (Ethernet VPN) Configuration
!-- Enable EVPN control plane for VXLAN router bgp 65000 address-family l2vpn evpn neighbor 10.1.1.2 remote-as 65001 neighbor 10.1.1.2 activate neighbor 10.1.1.2 send-community extended advertise-all-vni
VXLAN Tunnel Endpoints (VTEP)
!-- Configure a VTEP interface interface Vxlan1 vxlan udp-port 4789 vxlan source-interface loopback0 !-- Associate VTEP with a VLAN vxlan vlan 10 vni 10010 vxlan vlan 20 vni 10020
VXLAN Bridging Configuration
!-- Enable VXLAN bridging for Layer 2 traffic interface Vxlan1 bridge-group vxlan-bridge
VXLAN Routing Configuration
!-- Enable VXLAN routing to allow routing between VNIs interface Vxlan1 ip routing no shutdown
VXLAN Mapping to VLAN
!-- Create a VLAN to VNI mapping vlan 10 vn-segment 10010 exit vlan 20 vn-segment 10020 exit
EVPN Configuration for VXLAN
!-- Configure EVPN Type 5 routes for VXLAN interconnect router bgp 65000 address-family l2vpn evpn advertise-all-vni maximum-paths 4 route-target import 10010:10020 route-target export 10010:10020
VXLAN Troubleshooting
!-- Display VXLAN tunnel status show vxlan tunnel !-- Display VNI to VLAN mapping show vxlan vlan mapping !-- Show VXLAN routing details show ip route vxlan !-- Check VXLAN VTEP neighbor status show evpn neighbors !-- Check VXLAN forwarding table show vxlan fdb
VXLAN Network Functions (VNF)
!-- Configure VXLAN multicast mode for VTEP discovery vxlan vtep multicast-group 239.1.1.1 !-- Enable VXLAN on Layer 3 interfaces interface Vlan10 ip address 192.168.10.1/24 no shutdown interface Vlan20 ip address 192.168.20.1/24 no shutdown
Advanced VXLAN Features
!-- Enable VXLAN QoS (Quality of Service) interface Vxlan1 qos trust dscp !-- Enable VXLAN IP SLA ip sla 1 icmp-echo 192.168.2.2 source-ip 192.168.1.1 frequency 5 threshold 100 timeout 5000
VXLAN Security
!-- Enable VXLAN encryption for secure transport vxlan encryption aes-256 key abcdef1234567890
VXLAN Configuration Backup
!-- Save the VXLAN configuration to a file copy running-config startup-config
VXLAN Statistics
!-- Display VXLAN statistics for monitoring show vxlan statistics
VXLAN Troubleshooting Commands
!-- Display VXLAN routing table show ip route vxlan !-- Check the VXLAN tunnel state and statistics show vxlan tunnel
VXLAN Multicast Mode
!-- Enable VXLAN multicast mode for VTEP discovery vxlan vtep multicast-group 239.1.1.1
VXLAN MTU Configuration
!-- Set MTU size for VXLAN to handle larger frames interface Ethernet1 mtu 9216
