Training, Certification, and Career Topics
Highlighted
Training, Certification, and Career Topics

evpn/vxlan L3 gateway question

[ Edited ]
‎05-02-2020 04:29 PM

evpn.JPG

set interfaces irb unit 100 virtual-gateway-accept-data
set interfaces irb unit 101 virtual-gateway-accept-data
set interfaces irb unit 100 family inet address 10.200.100.250/24 virtual-gateway-address 10.200.100.254
set interfaces irb unit 101 family inet address 10.200.101.250/24 virtual-gateway-address 10.200.101.254

set routing-instances evpn1 vtep-source-interface lo0.0
set routing-instances evpn1 instance-type virtual-switch
set routing-instances evpn1 interface ae0.0
set routing-instances evpn1 interface ae1.0
set routing-instances evpn1 route-distinguisher 10.200.0.7:7
set routing-instances evpn1 vrf-target target:64513:1
set routing-instances evpn1 vrf-target auto
set routing-instances evpn1 protocols evpn encapsulation vxlan
set routing-instances evpn1 protocols evpn extended-vni-list all
set routing-instances evpn1 protocols evpn multicast-mode ingress-replication
set routing-instances evpn1 bridge-domains vlan100 vlan-id 100
set routing-instances evpn1 bridge-domains vlan100 routing-interface irb.100
set routing-instances evpn1 bridge-domains vlan100 vxlan vni 5100
set routing-instances evpn1 bridge-domains vlan101 vlan-id 101
set routing-instances evpn1 bridge-domains vlan101 routing-interface irb.101
set routing-instances evpn1 bridge-domains vlan101 vxlan vni 5101

server-1 can ping server-2 via vxlan, but the server-1 can't ping gateway.

Any ideas?

thanks a lot in advance!!

2 REPLIES 2
Highlighted
Training, Certification, and Career Topics

Re: evpn/vxlan L3 gateway question

‎05-02-2020 08:07 PM

After I looked closer, I found it is related to the lag.

When I disabled ae1 on vMX8, it works fine.

The vMX7 arp is as follows:

root@vMX7# run show arp
MAC Address       Address         Name                      Interface               Flags
aa:bb:cc:00:90:00 10.200.100.4    10.200.100.4              irb.100                 permanent remote
aa:bb:cc:00:a0:00 10.200.100.5    10.200.100.5              irb.100 [ae1.0]         permanent remote
50:00:00:21:00:01 128.0.0.16      fpc0                      em1.0                   none
50:00:00:22:00:07 192.168.78.8    192.168.78.8              ge-0/0/5.0              none

When ae1 on vMX8 is enabled, the arp table on vMX8 is as follows:

root@vMX8# run show arp
MAC Address       Address         Name                      Interface               Flags
aa:bb:cc:00:90:00 10.200.100.4    10.200.100.4              irb.100 [ae0.0]         permanent remote
aa:bb:cc:00:a0:00 10.200.100.5    10.200.100.5              irb.100 [ae1.0]         permanent remote
50:00:00:22:00:01 128.0.0.16      fpc0                      em1.0                   none
50:00:00:21:00:07 192.168.78.7    192.168.78.7              ge-0/0/5.0              none
Total entries: 4

I do not fully understand why.

Highlighted
Training, Certification, and Career Topics

Re: evpn/vxlan L3 gateway question

‎05-02-2020 08:19 PM

sorry to bother all. It is working now.

I am still digging to see what might be the cause.

 

thanks all !!