Hi,
I have the following setup
DC1 VXLAN/EVPN DC2 VXLAN/EVPN
HostA- QFXB1-------- MXB1 --------------EVPN MPLS ---------------MXB2------QFXB2 - Host B
I'm trying to interconnect two VXLAN/EVPN datacenters via MPLS EVPN using stiching on logical tunnel interfaces. I can see MAC address of host connected to QFXB1 on QFBX2, however I cannot ping between Host B and Host A. Maybe somebody faced up this problem and could help? Configuration looks the following
QFXB1:
show switch-options
vtep-source-interface lo0.0;
route-distinguisher 172.16.100.1:1;
vrf-import vrf-import;
vrf-target target:64520:1;
show protocols evpn
vni-options {
vni 1000 {
vrf-target export target:1:1000;
}
vni 2000 {
vrf-target export target:2:1000;
}
}
encapsulation vxlan;
extended-vni-list [ 1000 2000 ];
multicast-mode ingress-replication;
show protocols
bgp {
group underlay {
type external;
advertise-peer-as;
family inet {
unicast {
loops 2;
}
}
export direct;
local-as 64513;
multipath multiple-as;
neighbor 10.0.1.1 { //IP of MXB1
peer-as 64512;
}
}
group overlay {
type internal;
local-address 172.16.100.1;
family evpn {
signaling;
}
local-as 64520;
multipath;
neighbor 172.16.100.2; //MXB1 loopback
}
}
MXB1 configuration
group underlay {
type external;
advertise-peer-as;
family inet {
unicast {
loops 2;
}
}
export [ direct ospf_to_bgp ];
local-as 64512;
multipath multiple-as;
neighbor 10.0.1.2 {
peer-as 64513;
}
}
group overlay {
type internal;
local-address 172.16.100.2;
family evpn {
signaling;
}
cluster 1.1.1.1;
local-as 64520;
multipath;
neighbor 172.16.100.1;
inactive: neighbor 172.16.100.3;
}
group DCI {
type internal;
local-address 172.16.100.2;
family evpn {
signaling {
loops 10;
}
}
export nhs;
neighbor 172.16.100.3;
evpn_L2_gateway {
vtep-source-interface lo0.0;
instance-type virtual-switch;
interface lt-0/0/0.0;
route-distinguisher 172.16.100.2:1000;
vrf-import vlan10_import;
vrf-target target:1:1000;
protocols {
evpn {
encapsulation vxlan;
extended-vni-list 1000;
multicast-mode ingress-replication;
}
}
bridge-domains {
v10 {
vlan-id 10;
routing-interface irb.10;
vxlan {
vni 1000;
ingress-node-replication;
}
}
}
}
evpn_L3_gateway {
instance-type vrf;
interface irb.10;
route-distinguisher 172.16.100.2:10;
vrf-target target:10:100;
routing-options {
static {
route 0.0.0.0/0 next-table inet.0;
}
auto-export;
}
}
evpn_stiching {
vtep-source-interface lo0.0;
instance-type virtual-switch;
interface lt-0/0/0.1;
vrf-import vrf-import;
vrf-target target:1:1000;
protocols {
evpn {
extended-vlan-list 10;
}
}
bridge-domains {
v10 {
domain-type bridge;
vlan-id 10;
}
}
}
show interfaces lt-0/0/0
unit 0 {
description toEVPN_VXLAN;
encapsulation ethernet-bridge;
peer-unit 1;
family bridge {
interface-mode trunk;
vlan-id-list 10;
}
}
unit 1 {
description toEVPN_MPLS;
encapsulation ethernet-bridge;
peer-unit 0;
family bridge {
interface-mode trunk;
vlan-id-list 10;
}
}
show chassis
fpc 0 {
pic 0 {
tunnel-services {
bandwidth 1g;
}
}
}
network-services enhanced-ip;
192.168.10.2 is address of Host 2 in second DC
root@qfxB-1# run show arp
MAC Address Address Name Interface Flags
84:b5:9c:b3:d8:50 10.0.1.1 10.0.1.1 ge-0/0/1.0 none
00:50:56:a4:a0:3b 10.8.0.41 10.8.0.41 ge-0/0/2.0 none
84:b5:9c:b3:d8:51 10.8.0.171 10.8.0.171 ge-0/0/2.0 none
00:1b:17:00:01:30 10.210.14.190 10.210.14.190 em0.0 none
80:ac:ac:68:bf:03 192.168.1.1 192.168.1.1 em2.32768 none
80:ac:ac:69:dc:18 192.168.10.2 192.168.10.2 ge-0/0/21.10 none
Total entries: 6