検証

【Cisco Nexus】L3VNI不要・default VRFのみで実現する拠点間VXLANルーティング

gumio

導入

通常、VXLAN上でL3ルーティングを行うためにはL3VNIと専用のテナントVRFを用意し、VTEP間でL3到達性を確保する構成が一般的です。

しかし、実務において、「グローバルのルーティングテーブルだけでL2延伸セグメントやその他セグメント間の通信を完結させたい。」という要望を受けたことがありました。

本記事では、その要件を満たす構成として、Cisco Nexus9000vを使用してアンダーレイ・オーバーレイ・WANからのデフォルトルート受信まで、すべてをdefault VRF内で完結させながらVXLANルーティングを実現する方法を紹介します。

なお、VXLANの基本的な設定手順についてはCisco公式ドキュメントや有志の方による解説記事が多数存在するため、最終コンフィグとステータス確認を中心に記載します。

構成イメージは以下の通りです。
各Ubuntuホスト間でpingによる疎通確認ができる状態をゴールとします。(実行コマンドの詳細は割愛します)

構成概要

構成概要は以下の通りです。

  • DCルータがキャリアルータからOSPFでデフォルトルートを受け取り、インターネット出口を集約する。
  • HQ/DCのNexusをそれぞれVTEPとする。
  • アンダーレイはOSPFでVTEP間の到達性を確保する。
  • オーバーレイはHQ–DC間で直接MP-BGP(iBGP)を構成し、L2VNIのMAC/IPアドレスをVTEP間で同期する。
  • L2延伸対象のSVI(ゲートウェイ)はOSPFによりHQ-DC双方で広報し、L3到達性を確保する。
    • ここが一般的なVXLAN ルーティング(L3VNI + 専用VRF)と異なるポイントです。本来は「EVPN Route Type 5」という仕組みが担う「VTEP間の経路同期」を、アンダーレイ側のOSPFが肩代わりしている構成となります。
  • L2延伸対象のSVI(ゲートウェイ)はAnycast Gatewayにより分散配置する。
    • Anycast GatewayはVXLANにおいて一般的ですが、今回はVTEP間のL3到達性をアンダーレイのOSPFに依存している点が通常と異なります。そのため、中継機器が正しく転送先を判断できるよう、各NexusでVLAN100/200配下のホストルートを個別に作成してOSPFへ再配布する設計としています。

コンフィグ一覧

Internet

Internet#show running-config
Building configuration...

Current configuration : 3195 bytes
!
! Last configuration change at 13:28:03 UTC Sat Nov 29 2025
!
version 15.9
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Internet
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
!
!
!
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 8.8.8.8 255.255.255.255
!
interface GigabitEthernet0/0
 ip address 100.100.100.2 255.255.255.252
 ip ospf network point-to-point
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/2
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/3
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
router ospf 1
 router-id 8.8.8.8
 network 8.8.8.8 0.0.0.0 area 0
 network 100.100.100.2 0.0.0.0 area 0
 default-information originate always metric-type 1
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
ipv6 ioam timestamp
!
!
!
control-plane
!
banner exec ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
banner incoming ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
banner login ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
!
line con 0
line aux 0
line vty 0 4
 login
 transport input none
!
no scheduler allocate
!
end

Internet#

DCRT1

DCRT1#show running-config
Building configuration...

Current configuration : 3322 bytes
!
! Last configuration change at 15:00:16 UTC Sat Nov 29 2025
!
version 15.9
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname DCRT1
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
!
!
!
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 1.1.1.1 255.255.255.255
!
interface GigabitEthernet0/0
 mtu 9216
 ip address 192.168.1.1 255.255.255.0
 ip ospf network point-to-point
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/1
 mtu 9216
 ip address 10.10.10.1 255.255.255.252
 ip ospf network point-to-point
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/2
 ip address 100.100.100.1 255.255.255.252
 ip ospf network point-to-point
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/3
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
router ospf 1
 router-id 1.1.1.1
 network 1.1.1.1 0.0.0.0 area 0
 network 10.10.10.1 0.0.0.0 area 0
 network 100.100.100.1 0.0.0.0 area 0
 network 192.168.1.1 0.0.0.0 area 0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
ipv6 ioam timestamp
!
!
!
control-plane
!
banner exec ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
banner incoming ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
banner login ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
!
line con 0
line aux 0
line vty 0 4
 login
 transport input none
!
no scheduler allocate
!
end

DCRT1#

HQRT1

HQRT1#show running-config
Building configuration...

Current configuration : 3235 bytes
!
! Last configuration change at 15:02:03 UTC Sat Nov 29 2025
!
version 15.9
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname HQRT1
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
!
!
!
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 2.2.2.2 255.255.255.255
!
interface GigabitEthernet0/0
 mtu 9216
 ip address 192.168.2.1 255.255.255.0
 ip ospf network point-to-point
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/1
 mtu 9216
 ip address 10.10.10.2 255.255.255.252
 ip ospf network point-to-point
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/2
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/3
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
router ospf 1
 router-id 2.2.2.2
 network 2.2.2.2 0.0.0.0 area 0
 network 10.10.10.2 0.0.0.0 area 0
 network 192.168.2.1 0.0.0.0 area 0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
ipv6 ioam timestamp
!
!
!
control-plane
!
banner exec ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
banner incoming ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
banner login ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
!
line con 0
line aux 0
line vty 0 4
 login
 transport input none
!
no scheduler allocate
!
end

HQRT1#

DCSW1

DCSW1# show running-config

!Command: show running-config
!Running configuration last done at: Sun Nov 30 14:19:51 2025
!Time: Sun Nov 30 14:19:59 2025

version 9.3(10) Bios:version
hostname DCSW1
vdc DCSW1 id 1
  limit-resource vlan minimum 16 maximum 4094
  limit-resource vrf minimum 2 maximum 4096
  limit-resource port-channel minimum 0 maximum 511
  limit-resource u4route-mem minimum 248 maximum 248
  limit-resource u6route-mem minimum 96 maximum 96
  limit-resource m4route-mem minimum 58 maximum 58
  limit-resource m6route-mem minimum 8 maximum 8

nv overlay evpn
feature ospf
feature bgp
feature interface-vlan
feature vn-segment-vlan-based
feature nv overlay

no password strength-check
username admin password 5 $5$ADIHFD$4D7gEB43UdcO8jH5X3oKqhrpH2WO1HBiErVMpbxGHC2  role network-admin
ip domain-lookup
copp profile strict
snmp-server user admin network-admin auth md5 0060AF31E481E133667E76FAB0A150CF3DAA priv 366ABF2FF683B2623A0D6FE0B2E353DF77F6 localizedV2key
rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO

fabric forwarding anycast-gateway-mac aaaa.bbbb.cccc
ip route 192.168.100.100/32 Vlan100
ip route 192.168.200.100/32 Vlan200
vlan 1,100,200
vlan 100
  vn-segment 10100
vlan 200
  vn-segment 10200

ip prefix-list STATIC-PFX seq 5 permit 192.168.100.100/32
ip prefix-list STATIC-PFX seq 10 permit 192.168.200.100/32
route-map REDIST-STATIC permit 10
  match ip address prefix-list STATIC-PFX
vrf context management


interface Vlan1

interface Vlan100
  no shutdown
  ip address 192.168.100.254/24
  ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  fabric forwarding mode anycast-gateway

interface Vlan200
  no shutdown
  ip address 192.168.200.254/24
  ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  fabric forwarding mode anycast-gateway

interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback0
  member vni 10100
    ingress-replication protocol bgp
  member vni 10200
    ingress-replication protocol bgp

interface Ethernet1/1
  switchport access vlan 100

interface Ethernet1/2
  switchport access vlan 200

interface Ethernet1/3

interface Ethernet1/4

interface Ethernet1/5

interface Ethernet1/6

interface Ethernet1/7
  no switchport
  mtu 9216
  ip address 192.168.1.7/24
  ip ospf network point-to-point
  ip router ospf UNDERLAY area 0.0.0.0
  no shutdown

interface mgmt0
  vrf member management

interface loopback0
  ip address 3.3.3.3/32
  ip router ospf UNDERLAY area 0.0.0.0
icam monitor scale

line console
line vty
router ospf UNDERLAY
  router-id 3.3.3.3
  redistribute static route-map REDIST-STATIC
router bgp 10000
  neighbor 1.1.1.1
    remote-as 10000
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
  neighbor 4.4.4.4
    remote-as 10000
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
evpn
  vni 10100 l2
    rd auto
    route-target import auto
    route-target export auto
  vni 10200 l2
    rd auto
    route-target import auto
    route-target export auto



DCSW1#

HQSW1

HQSW1# show running-config

!Command: show running-config
!Running configuration last done at: Sun Nov 30 14:19:38 2025
!Time: Sun Nov 30 14:20:41 2025

version 9.3(10) Bios:version
hostname HQSW1
vdc HQSW1 id 1
  limit-resource vlan minimum 16 maximum 4094
  limit-resource vrf minimum 2 maximum 4096
  limit-resource port-channel minimum 0 maximum 511
  limit-resource u4route-mem minimum 248 maximum 248
  limit-resource u6route-mem minimum 96 maximum 96
  limit-resource m4route-mem minimum 58 maximum 58
  limit-resource m6route-mem minimum 8 maximum 8

nv overlay evpn
feature ospf
feature bgp
feature interface-vlan
feature vn-segment-vlan-based
feature nv overlay

no password strength-check
username admin password 5 $5$NFHBGI$3tiwk1hGIXUA8MVSIUvySANCP3dpn6yL/LYWmLorU96  role network-admin
ip domain-lookup
copp profile strict
snmp-server user admin network-admin auth md5 366A46F4412E575EA407100F9BE47BFCEBA9 priv 205B31C36667277296796A7DC2F338A7E28C localizedV2key
rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO

fabric forwarding anycast-gateway-mac aaaa.bbbb.cccc
ip route 192.168.100.200/32 Vlan100
ip route 192.168.200.200/32 Vlan200
vlan 1,100,200
vlan 100
  vn-segment 10100
vlan 200
  vn-segment 10200

ip prefix-list STATIC-PFX seq 5 permit 192.168.100.200/32
ip prefix-list STATIC-PFX seq 10 permit 192.168.200.200/32
route-map REDIST-STATIC permit 10
  match ip address prefix-list STATIC-PFX
vrf context management


interface Vlan1

interface Vlan100
  no shutdown
  ip address 192.168.100.254/24
  ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  fabric forwarding mode anycast-gateway

interface Vlan200
  no shutdown
  ip address 192.168.200.254/24
  ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  fabric forwarding mode anycast-gateway

interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback0
  member vni 10100
    ingress-replication protocol bgp
  member vni 10200
    ingress-replication protocol bgp

interface Ethernet1/1
  switchport access vlan 100

interface Ethernet1/2
  switchport access vlan 200

interface Ethernet1/3

interface Ethernet1/4

interface Ethernet1/5

interface Ethernet1/6

interface Ethernet1/7
  no switchport
  mtu 9216
  ip address 192.168.2.7/24
  ip ospf network point-to-point
  ip router ospf UNDERLAY area 0.0.0.0
  no shutdown

interface mgmt0
  vrf member management

interface loopback0
  ip address 4.4.4.4/32
  ip router ospf UNDERLAY area 0.0.0.0
icam monitor scale

line console
line vty
router ospf UNDERLAY
  router-id 4.4.4.4
  redistribute static route-map REDIST-STATIC
router bgp 10000
  neighbor 1.1.1.1
    remote-as 10000
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
  neighbor 3.3.3.3
    remote-as 10000
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
evpn
  vni 10100 l2
    rd auto
    route-target import auto
    route-target export auto
  vni 10200 l2
    rd auto
    route-target import auto
    route-target export auto



HQSW1#

ステータス確認

Internet

Internet#show ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
1.1.1.1           0   FULL/  -        00:00:37    100.100.100.1   GigabitEthernet0/0
Internet#show ip route vrf *
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override, p - overrides from PfR

Gateway of last resort is not set

      1.0.0.0/32 is subnetted, 1 subnets
O        1.1.1.1 [110/2] via 100.100.100.1, 1d01h, GigabitEthernet0/0
      2.0.0.0/32 is subnetted, 1 subnets
O        2.2.2.2 [110/3] via 100.100.100.1, 1d01h, GigabitEthernet0/0
      3.0.0.0/32 is subnetted, 1 subnets
O        3.3.3.3 [110/3] via 100.100.100.1, 1d01h, GigabitEthernet0/0
      4.0.0.0/32 is subnetted, 1 subnets
O        4.4.4.4 [110/4] via 100.100.100.1, 1d01h, GigabitEthernet0/0
      8.0.0.0/32 is subnetted, 1 subnets
C        8.8.8.8 is directly connected, Loopback0
      10.0.0.0/30 is subnetted, 1 subnets
O        10.10.10.0 [110/2] via 100.100.100.1, 1d01h, GigabitEthernet0/0
      100.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        100.100.100.0/30 is directly connected, GigabitEthernet0/0
L        100.100.100.2/32 is directly connected, GigabitEthernet0/0
O     192.168.1.0/24 [110/2] via 100.100.100.1, 1d01h, GigabitEthernet0/0
O     192.168.2.0/24 [110/3] via 100.100.100.1, 1d01h, GigabitEthernet0/0
      192.168.100.0/24 is variably subnetted, 3 subnets, 2 masks
O        192.168.100.0/24
           [110/42] via 100.100.100.1, 1d01h, GigabitEthernet0/0
O E1     192.168.100.100/32
           [110/22] via 100.100.100.1, 00:03:46, GigabitEthernet0/0
O E1     192.168.100.200/32
           [110/23] via 100.100.100.1, 00:03:40, GigabitEthernet0/0
      192.168.200.0/24 is variably subnetted, 3 subnets, 2 masks
O        192.168.200.0/24
           [110/42] via 100.100.100.1, 1d01h, GigabitEthernet0/0
O E1     192.168.200.100/32
           [110/22] via 100.100.100.1, 00:03:46, GigabitEthernet0/0
O E1     192.168.200.200/32
           [110/23] via 100.100.100.1, 00:03:40, GigabitEthernet0/0
Internet#show ip arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  100.100.100.1          33   5082.e200.0a02  ARPA   GigabitEthernet0/0
Internet  100.100.100.2           -   5019.ef00.0c00  ARPA   GigabitEthernet0/0
Internet#

DCRT1

DCRT1#show ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
8.8.8.8           0   FULL/  -        00:00:36    100.100.100.2   GigabitEthernet0/2
3.3.3.3           0   FULL/  -        00:00:32    192.168.1.7     GigabitEthernet0/0
2.2.2.2           0   FULL/  -        00:00:38    10.10.10.2      GigabitEthernet0/1
DCRT1#show ip route vrf *
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override, p - overrides from PfR

Gateway of last resort is 100.100.100.2 to network 0.0.0.0

O*E1  0.0.0.0/0 [110/2] via 100.100.100.2, 1d01h, GigabitEthernet0/2
      1.0.0.0/32 is subnetted, 1 subnets
C        1.1.1.1 is directly connected, Loopback0
      2.0.0.0/32 is subnetted, 1 subnets
O        2.2.2.2 [110/2] via 10.10.10.2, 1d02h, GigabitEthernet0/1
      3.0.0.0/32 is subnetted, 1 subnets
O        3.3.3.3 [110/2] via 192.168.1.7, 1d02h, GigabitEthernet0/0
      4.0.0.0/32 is subnetted, 1 subnets
O        4.4.4.4 [110/3] via 10.10.10.2, 1d02h, GigabitEthernet0/1
      8.0.0.0/32 is subnetted, 1 subnets
O        8.8.8.8 [110/2] via 100.100.100.2, 1d01h, GigabitEthernet0/2
      10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        10.10.10.0/30 is directly connected, GigabitEthernet0/1
L        10.10.10.1/32 is directly connected, GigabitEthernet0/1
      100.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        100.100.100.0/30 is directly connected, GigabitEthernet0/2
L        100.100.100.1/32 is directly connected, GigabitEthernet0/2
      192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.1.0/24 is directly connected, GigabitEthernet0/0
L        192.168.1.1/32 is directly connected, GigabitEthernet0/0
O     192.168.2.0/24 [110/2] via 10.10.10.2, 1d02h, GigabitEthernet0/1
      192.168.100.0/24 is variably subnetted, 3 subnets, 2 masks
O        192.168.100.0/24 [110/41] via 192.168.1.7, 1d02h, GigabitEthernet0/0
O E1     192.168.100.100/32
           [110/21] via 192.168.1.7, 00:02:52, GigabitEthernet0/0
O E1     192.168.100.200/32
           [110/22] via 10.10.10.2, 00:02:46, GigabitEthernet0/1
      192.168.200.0/24 is variably subnetted, 3 subnets, 2 masks
O        192.168.200.0/24 [110/41] via 192.168.1.7, 1d02h, GigabitEthernet0/0
O E1     192.168.200.100/32
           [110/21] via 192.168.1.7, 00:02:52, GigabitEthernet0/0
O E1     192.168.200.200/32
           [110/22] via 10.10.10.2, 00:02:46, GigabitEthernet0/1
DCRT1#show ip arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  10.10.10.1              -   5082.e200.0a01  ARPA   GigabitEthernet0/1
Internet  10.10.10.2             79   500d.4000.0b01  ARPA   GigabitEthernet0/1
Internet  100.100.100.1           -   5082.e200.0a02  ARPA   GigabitEthernet0/2
Internet  100.100.100.2          32   5019.ef00.0c00  ARPA   GigabitEthernet0/2
Internet  192.168.1.1             -   5082.e200.0a00  ARPA   GigabitEthernet0/0
Internet  192.168.1.7            11   5000.0800.1b08  ARPA   GigabitEthernet0/0
DCRT1#

HQRT1

HQRT1#show ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
4.4.4.4           0   FULL/  -        00:00:37    192.168.2.7     GigabitEthernet0/0
1.1.1.1           0   FULL/  -        00:00:33    10.10.10.1      GigabitEthernet0/1
HQRT1#show ip route vrf *
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override, p - overrides from PfR

Gateway of last resort is 10.10.10.1 to network 0.0.0.0

O*E1  0.0.0.0/0 [110/3] via 10.10.10.1, 1d01h, GigabitEthernet0/1
      1.0.0.0/32 is subnetted, 1 subnets
O        1.1.1.1 [110/2] via 10.10.10.1, 1d02h, GigabitEthernet0/1
      2.0.0.0/32 is subnetted, 1 subnets
C        2.2.2.2 is directly connected, Loopback0
      3.0.0.0/32 is subnetted, 1 subnets
O        3.3.3.3 [110/3] via 10.10.10.1, 1d02h, GigabitEthernet0/1
      4.0.0.0/32 is subnetted, 1 subnets
O        4.4.4.4 [110/2] via 192.168.2.7, 1d02h, GigabitEthernet0/0
      8.0.0.0/32 is subnetted, 1 subnets
O        8.8.8.8 [110/3] via 10.10.10.1, 1d01h, GigabitEthernet0/1
      10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        10.10.10.0/30 is directly connected, GigabitEthernet0/1
L        10.10.10.2/32 is directly connected, GigabitEthernet0/1
      100.0.0.0/30 is subnetted, 1 subnets
O        100.100.100.0 [110/2] via 10.10.10.1, 1d01h, GigabitEthernet0/1
O     192.168.1.0/24 [110/2] via 10.10.10.1, 1d02h, GigabitEthernet0/1
      192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.2.0/24 is directly connected, GigabitEthernet0/0
L        192.168.2.1/32 is directly connected, GigabitEthernet0/0
      192.168.100.0/24 is variably subnetted, 3 subnets, 2 masks
O        192.168.100.0/24
           [110/41] via 192.168.2.7, 01:16:45, GigabitEthernet0/0
O E1     192.168.100.100/32
           [110/22] via 10.10.10.1, 00:02:53, GigabitEthernet0/1
O E1     192.168.100.200/32
           [110/21] via 192.168.2.7, 00:02:47, GigabitEthernet0/0
      192.168.200.0/24 is variably subnetted, 3 subnets, 2 masks
O        192.168.200.0/24
           [110/41] via 192.168.2.7, 01:16:45, GigabitEthernet0/0
O E1     192.168.200.100/32
           [110/22] via 10.10.10.1, 00:02:53, GigabitEthernet0/1
O E1     192.168.200.200/32
           [110/21] via 192.168.2.7, 00:02:47, GigabitEthernet0/0
HQRT1#show ip arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  10.10.10.1             79   5082.e200.0a01  ARPA   GigabitEthernet0/1
Internet  10.10.10.2              -   500d.4000.0b01  ARPA   GigabitEthernet0/1
Internet  192.168.2.1             -   500d.4000.0b00  ARPA   GigabitEthernet0/0
Internet  192.168.2.7            11   5000.0900.1b08  ARPA   GigabitEthernet0/0
HQRT1#

DCSW1

DCSW1# show ip ospf neighbors
 OSPF Process ID UNDERLAY VRF default
 Total number of neighbors: 1
 Neighbor ID     Pri State            Up Time  Address         Interface
 1.1.1.1           1 FULL/ -          1d02h    192.168.1.1     Eth1/7
DCSW1# show ip route vrf all
IP Route Table for VRF "default"
'*' denotes best ucast next-hop
'**' denotes best mcast next-hop
'[x/y]' denotes [preference/metric]
'%<string>' in via output denotes VRF <string>

0.0.0.0/0, ubest/mbest: 1/0
    *via 192.168.1.1, Eth1/7, [110/42], 1d01h, ospf-UNDERLAY, type-1, tag 1
1.1.1.1/32, ubest/mbest: 1/0
    *via 192.168.1.1, Eth1/7, [110/41], 1d02h, ospf-UNDERLAY, intra
2.2.2.2/32, ubest/mbest: 1/0
    *via 192.168.1.1, Eth1/7, [110/42], 1d02h, ospf-UNDERLAY, intra
3.3.3.3/32, ubest/mbest: 2/0, attached
    *via 3.3.3.3, Lo0, [0/0], 1d02h, local
    *via 3.3.3.3, Lo0, [0/0], 1d02h, direct
4.4.4.4/32, ubest/mbest: 1/0
    *via 192.168.1.1, Eth1/7, [110/43], 1d02h, ospf-UNDERLAY, intra
8.8.8.8/32, ubest/mbest: 1/0
    *via 192.168.1.1, Eth1/7, [110/42], 1d01h, ospf-UNDERLAY, intra
10.10.10.0/30, ubest/mbest: 1/0
    *via 192.168.1.1, Eth1/7, [110/41], 1d02h, ospf-UNDERLAY, intra
100.100.100.0/30, ubest/mbest: 1/0
    *via 192.168.1.1, Eth1/7, [110/41], 1d01h, ospf-UNDERLAY, intra
192.168.1.0/24, ubest/mbest: 1/0, attached
    *via 192.168.1.7, Eth1/7, [0/0], 1d02h, direct
192.168.1.7/32, ubest/mbest: 1/0, attached
    *via 192.168.1.7, Eth1/7, [0/0], 1d02h, local
192.168.2.0/24, ubest/mbest: 1/0
    *via 192.168.1.1, Eth1/7, [110/42], 1d02h, ospf-UNDERLAY, intra
192.168.100.0/24, ubest/mbest: 1/0, attached
    *via 192.168.100.254, Vlan100, [0/0], 1d02h, direct
192.168.100.100/32, ubest/mbest: 1/0, attached
    *via Vlan100, [1/0], 00:31:36, static
192.168.100.200/32, ubest/mbest: 1/0
    *via 192.168.1.1, Eth1/7, [110/62], 00:02:51, ospf-UNDERLAY, type-1
192.168.100.254/32, ubest/mbest: 1/0, attached
    *via 192.168.100.254, Vlan100, [0/0], 1d02h, local
192.168.200.0/24, ubest/mbest: 1/0, attached
    *via 192.168.200.254, Vlan200, [0/0], 1d02h, direct
192.168.200.100/32, ubest/mbest: 1/0, attached
    *via Vlan200, [1/0], 00:31:36, static
192.168.200.200/32, ubest/mbest: 1/0
    *via 192.168.1.1, Eth1/7, [110/62], 00:02:51, ospf-UNDERLAY, type-1
192.168.200.254/32, ubest/mbest: 1/0, attached
    *via 192.168.200.254, Vlan200, [0/0], 1d02h, local

DCSW1# show bgp l2vpn evpn summary
BGP summary information for VRF default, address family L2VPN EVPN
BGP router identifier 3.3.3.3, local AS number 10000
BGP table version is 143, L2VPN EVPN config peers 2, capable peers 1
18 network entries and 18 paths using 3672 bytes of memory
BGP attribute entries [10/1720], BGP AS path entries [0/0]
BGP community entries [0/0], BGP clusterlist entries [0/0]

Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
1.1.1.1         4 10000       0       0        0    0    0    1d02h Idle
4.4.4.4         4 10000    1591    1607      143    0    0    1d02h 6
DCSW1# show bgp l2vpn evpn
BGP routing table information for VRF default, address family L2VPN EVPN
BGP table version is 143, Local Router ID is 3.3.3.3
Status: s-suppressed, x-deleted, S-stale, d-dampened, h-history, *-valid, >-best
Path type: i-internal, e-external, c-confed, l-local, a-aggregate, r-redist, I-injected
Origin codes: i - IGP, e - EGP, ? - incomplete, | - multipath, & - backup, 2 - best2

   Network            Next Hop            Metric     LocPrf     Weight Path
Route Distinguisher: 3.3.3.3:32867    (L2VNI 10100)
*>l[2]:[0]:[0]:[48]:[5038.ca00.0400]:[0]:[0.0.0.0]/216
                      3.3.3.3                           100      32768 i
*>i[2]:[0]:[0]:[48]:[50be.1f00.0600]:[0]:[0.0.0.0]/216
                      4.4.4.4                           100          0 i
*>l[2]:[0]:[0]:[48]:[5038.ca00.0400]:[32]:[192.168.100.100]/248
                      3.3.3.3                           100      32768 i
*>i[2]:[0]:[0]:[48]:[50be.1f00.0600]:[32]:[192.168.100.200]/248
                      4.4.4.4                           100          0 i
*>l[3]:[0]:[32]:[3.3.3.3]/88
                      3.3.3.3                           100      32768 i
*>i[3]:[0]:[32]:[4.4.4.4]/88
                      4.4.4.4                           100          0 i

Route Distinguisher: 3.3.3.3:32967    (L2VNI 10200)
*>l[2]:[0]:[0]:[48]:[50ab.5800.0500]:[0]:[0.0.0.0]/216
                      3.3.3.3                           100      32768 i
*>i[2]:[0]:[0]:[48]:[50fc.6500.0700]:[0]:[0.0.0.0]/216
                      4.4.4.4                           100          0 i
*>l[2]:[0]:[0]:[48]:[50ab.5800.0500]:[32]:[192.168.200.100]/248
                      3.3.3.3                           100      32768 i
*>i[2]:[0]:[0]:[48]:[50fc.6500.0700]:[32]:[192.168.200.200]/248
                      4.4.4.4                           100          0 i
*>l[3]:[0]:[32]:[3.3.3.3]/88
                      3.3.3.3                           100      32768 i
*>i[3]:[0]:[32]:[4.4.4.4]/88
                      4.4.4.4                           100          0 i

Route Distinguisher: 4.4.4.4:32867
*>i[2]:[0]:[0]:[48]:[50be.1f00.0600]:[0]:[0.0.0.0]/216
                      4.4.4.4                           100          0 i
*>i[2]:[0]:[0]:[48]:[50be.1f00.0600]:[32]:[192.168.100.200]/248
                      4.4.4.4                           100          0 i
*>i[3]:[0]:[32]:[4.4.4.4]/88
                      4.4.4.4                           100          0 i

Route Distinguisher: 4.4.4.4:32967
*>i[2]:[0]:[0]:[48]:[50fc.6500.0700]:[0]:[0.0.0.0]/216
                      4.4.4.4                           100          0 i
*>i[2]:[0]:[0]:[48]:[50fc.6500.0700]:[32]:[192.168.200.200]/248
                      4.4.4.4                           100          0 i
*>i[3]:[0]:[32]:[4.4.4.4]/88
                      4.4.4.4                           100          0 i

DCSW1# show nve peers
Interface Peer-IP                                 State LearnType Uptime   Router-Mac
--------- --------------------------------------  ----- --------- -------- -----------------
nve1      4.4.4.4                                 Up    CP        1d02h    n/a

DCSW1# show nve peers detail
Details of nve Peers:
----------------------------------------
Peer-Ip: 4.4.4.4
    NVE Interface       : nve1
    Peer State          : Up
    Peer Uptime         : 1d02h
    Router-Mac          : n/a
    Peer First VNI      : 10200
    Time since Create   : 1d02h
    Configured VNIs     : 10100,10200
    Provision State     : peer-add-complete
    Learnt CP VNIs      : 10100,10200
    vni assignment mode : SYMMETRIC
    Peer Location       : N/A

DCSW1# show nve vni
Codes: CP - Control Plane        DP - Data Plane
       UC - Unconfigured         SA - Suppress ARP
       SU - Suppress Unknown Unicast
       Xconn - Crossconnect
       MS-IR - Multisite Ingress Replication

Interface VNI      Multicast-group   State Mode Type [BD/VRF]      Flags
--------- -------- ----------------- ----- ---- ------------------ -----
nve1      10100    UnicastBGP        Up    CP   L2 [100]
nve1      10200    UnicastBGP        Up    CP   L2 [200]

DCSW1# show ip arp vrf all

Flags: * - Adjacencies learnt on non-active FHRP router
       + - Adjacencies synced via CFSoE
       # - Adjacencies Throttled for Glean
       CP - Added via L2RIB, Control plane Adjacencies
       PS - Added via L2RIB, Peer Sync
       RO - Re-Originated Peer Sync Entry
       D - Static Adjacencies attached to down interface

IP ARP Table for all contexts
Total number of entries: 3
Address         Age       MAC Address     Interface       Flags
192.168.1.1     00:11:24  5082.e200.0a00  Ethernet1/7
192.168.100.100 00:00:03  5038.ca00.0400  Vlan100
192.168.200.100 00:09:58  50ab.5800.0500  Vlan200
DCSW1# show mac address-table
Legend:
        * - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC
        age - seconds since last seen,+ - primary entry using vPC Peer-Link,
        (T) - True, (F) - False, C - ControlPlane MAC, ~ - vsan
   VLAN     MAC Address      Type      age     Secure NTFY Ports
---------+-----------------+--------+---------+------+----+------------------
*  100     5038.ca00.0400   dynamic  0         F      F    Eth1/1
C  100     50be.1f00.0600   dynamic  0         F      F    nve1(4.4.4.4)
*  200     50ab.5800.0500   dynamic  0         F      F    Eth1/2
C  200     50fc.6500.0700   dynamic  0         F      F    nve1(4.4.4.4)
G    -     5000.0800.1b08   static   -         F      F    sup-eth1(R)
G  100     5000.0800.1b08   static   -         F      F    sup-eth1(R)
G  200     5000.0800.1b08   static   -         F      F    sup-eth1(R)
G    -     aaaa.bbbb.cccc   static   -         F      F    sup-eth1(R)
DCSW1#

HQSW1

HQSW1# show ip ospf neighbors
 OSPF Process ID UNDERLAY VRF default
 Total number of neighbors: 1
 Neighbor ID     Pri State            Up Time  Address         Interface
 2.2.2.2           1 FULL/ -          1d02h    192.168.2.1     Eth1/7
HQSW1# show ip route vrf all
IP Route Table for VRF "default"
'*' denotes best ucast next-hop
'**' denotes best mcast next-hop
'[x/y]' denotes [preference/metric]
'%<string>' in via output denotes VRF <string>

0.0.0.0/0, ubest/mbest: 1/0
    *via 192.168.2.1, Eth1/7, [110/43], 1d01h, ospf-UNDERLAY, type-1, tag 1
1.1.1.1/32, ubest/mbest: 1/0
    *via 192.168.2.1, Eth1/7, [110/42], 1d02h, ospf-UNDERLAY, intra
2.2.2.2/32, ubest/mbest: 1/0
    *via 192.168.2.1, Eth1/7, [110/41], 1d02h, ospf-UNDERLAY, intra
3.3.3.3/32, ubest/mbest: 1/0
    *via 192.168.2.1, Eth1/7, [110/43], 1d02h, ospf-UNDERLAY, intra
4.4.4.4/32, ubest/mbest: 2/0, attached
    *via 4.4.4.4, Lo0, [0/0], 1d02h, local
    *via 4.4.4.4, Lo0, [0/0], 1d02h, direct
8.8.8.8/32, ubest/mbest: 1/0
    *via 192.168.2.1, Eth1/7, [110/43], 1d01h, ospf-UNDERLAY, intra
10.10.10.0/30, ubest/mbest: 1/0
    *via 192.168.2.1, Eth1/7, [110/41], 1d02h, ospf-UNDERLAY, intra
100.100.100.0/30, ubest/mbest: 1/0
    *via 192.168.2.1, Eth1/7, [110/42], 1d01h, ospf-UNDERLAY, intra
192.168.1.0/24, ubest/mbest: 1/0
    *via 192.168.2.1, Eth1/7, [110/42], 1d02h, ospf-UNDERLAY, intra
192.168.2.0/24, ubest/mbest: 1/0, attached
    *via 192.168.2.7, Eth1/7, [0/0], 1d02h, direct
192.168.2.7/32, ubest/mbest: 1/0, attached
    *via 192.168.2.7, Eth1/7, [0/0], 1d02h, local
192.168.100.0/24, ubest/mbest: 1/0, attached
    *via 192.168.100.254, Vlan100, [0/0], 01:17:16, direct
192.168.100.100/32, ubest/mbest: 1/0
    *via 192.168.2.1, Eth1/7, [110/62], 00:02:58, ospf-UNDERLAY, type-1
192.168.100.200/32, ubest/mbest: 1/0, attached
    *via Vlan100, [1/0], 00:31:33, static
192.168.100.254/32, ubest/mbest: 1/0, attached
    *via 192.168.100.254, Vlan100, [0/0], 01:17:16, local
192.168.200.0/24, ubest/mbest: 1/0, attached
    *via 192.168.200.254, Vlan200, [0/0], 01:17:16, direct
192.168.200.100/32, ubest/mbest: 1/0
    *via 192.168.2.1, Eth1/7, [110/62], 00:02:58, ospf-UNDERLAY, type-1
192.168.200.200/32, ubest/mbest: 1/0, attached
    *via Vlan200, [1/0], 00:31:33, static
192.168.200.254/32, ubest/mbest: 1/0, attached
    *via 192.168.200.254, Vlan200, [0/0], 01:17:16, local

HQSW1# show bgp l2vpn evpn summary
BGP summary information for VRF default, address family L2VPN EVPN
BGP router identifier 4.4.4.4, local AS number 10000
BGP table version is 241, L2VPN EVPN config peers 2, capable peers 1
18 network entries and 18 paths using 3672 bytes of memory
BGP attribute entries [10/1720], BGP AS path entries [0/0]
BGP community entries [0/0], BGP clusterlist entries [0/0]

Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
1.1.1.1         4 10000       0       0        0    0    0    1d02h Idle
3.3.3.3         4 10000    1664    1581      241    0    0    1d02h 6
HQSW1# show bgp l2vpn evpn
BGP routing table information for VRF default, address family L2VPN EVPN
BGP table version is 241, Local Router ID is 4.4.4.4
Status: s-suppressed, x-deleted, S-stale, d-dampened, h-history, *-valid, >-best
Path type: i-internal, e-external, c-confed, l-local, a-aggregate, r-redist, I-injected
Origin codes: i - IGP, e - EGP, ? - incomplete, | - multipath, & - backup, 2 - best2

   Network            Next Hop            Metric     LocPrf     Weight Path
Route Distinguisher: 3.3.3.3:32867
*>i[2]:[0]:[0]:[48]:[5038.ca00.0400]:[0]:[0.0.0.0]/216
                      3.3.3.3                           100          0 i
*>i[2]:[0]:[0]:[48]:[5038.ca00.0400]:[32]:[192.168.100.100]/248
                      3.3.3.3                           100          0 i
*>i[3]:[0]:[32]:[3.3.3.3]/88
                      3.3.3.3                           100          0 i

Route Distinguisher: 3.3.3.3:32967
*>i[2]:[0]:[0]:[48]:[50ab.5800.0500]:[0]:[0.0.0.0]/216
                      3.3.3.3                           100          0 i
*>i[2]:[0]:[0]:[48]:[50ab.5800.0500]:[32]:[192.168.200.100]/248
                      3.3.3.3                           100          0 i
*>i[3]:[0]:[32]:[3.3.3.3]/88
                      3.3.3.3                           100          0 i

Route Distinguisher: 4.4.4.4:32867    (L2VNI 10100)
*>i[2]:[0]:[0]:[48]:[5038.ca00.0400]:[0]:[0.0.0.0]/216
                      3.3.3.3                           100          0 i
*>l[2]:[0]:[0]:[48]:[50be.1f00.0600]:[0]:[0.0.0.0]/216
                      4.4.4.4                           100      32768 i
*>i[2]:[0]:[0]:[48]:[5038.ca00.0400]:[32]:[192.168.100.100]/248
                      3.3.3.3                           100          0 i
*>l[2]:[0]:[0]:[48]:[50be.1f00.0600]:[32]:[192.168.100.200]/248
                      4.4.4.4                           100      32768 i
*>i[3]:[0]:[32]:[3.3.3.3]/88
                      3.3.3.3                           100          0 i
*>l[3]:[0]:[32]:[4.4.4.4]/88
                      4.4.4.4                           100      32768 i

Route Distinguisher: 4.4.4.4:32967    (L2VNI 10200)
*>i[2]:[0]:[0]:[48]:[50ab.5800.0500]:[0]:[0.0.0.0]/216
                      3.3.3.3                           100          0 i
*>l[2]:[0]:[0]:[48]:[50fc.6500.0700]:[0]:[0.0.0.0]/216
                      4.4.4.4                           100      32768 i
*>i[2]:[0]:[0]:[48]:[50ab.5800.0500]:[32]:[192.168.200.100]/248
                      3.3.3.3                           100          0 i
*>l[2]:[0]:[0]:[48]:[50fc.6500.0700]:[32]:[192.168.200.200]/248
                      4.4.4.4                           100      32768 i
*>i[3]:[0]:[32]:[3.3.3.3]/88
                      3.3.3.3                           100          0 i
*>l[3]:[0]:[32]:[4.4.4.4]/88
                      4.4.4.4                           100      32768 i

HQSW1# show nve peers
Interface Peer-IP                                 State LearnType Uptime   Router-Mac
--------- --------------------------------------  ----- --------- -------- -----------------
nve1      3.3.3.3                                 Up    CP        1d02h    n/a

HQSW1# show nve peers detail
Details of nve Peers:
----------------------------------------
Peer-Ip: 3.3.3.3
    NVE Interface       : nve1
    Peer State          : Up
    Peer Uptime         : 1d02h
    Router-Mac          : n/a
    Peer First VNI      : 10100
    Time since Create   : 1d02h
    Configured VNIs     : 10100,10200
    Provision State     : peer-add-complete
    Learnt CP VNIs      : 10100,10200
    vni assignment mode : SYMMETRIC
    Peer Location       : N/A

HQSW1# show nve vni
Codes: CP - Control Plane        DP - Data Plane
       UC - Unconfigured         SA - Suppress ARP
       SU - Suppress Unknown Unicast
       Xconn - Crossconnect
       MS-IR - Multisite Ingress Replication

Interface VNI      Multicast-group   State Mode Type [BD/VRF]      Flags
--------- -------- ----------------- ----- ---- ------------------ -----
nve1      10100    UnicastBGP        Up    CP   L2 [100]
nve1      10200    UnicastBGP        Up    CP   L2 [200]

HQSW1# show ip arp vrf all

Flags: * - Adjacencies learnt on non-active FHRP router
       + - Adjacencies synced via CFSoE
       # - Adjacencies Throttled for Glean
       CP - Added via L2RIB, Control plane Adjacencies
       PS - Added via L2RIB, Peer Sync
       RO - Re-Originated Peer Sync Entry
       D - Static Adjacencies attached to down interface

IP ARP Table for all contexts
Total number of entries: 3
Address         Age       MAC Address     Interface       Flags
192.168.2.1     00:11:26  500d.4000.0b00  Ethernet1/7
192.168.100.200 00:09:40  50be.1f00.0600  Vlan100
192.168.200.200 00:00:30  50fc.6500.0700  Vlan200
HQSW1# show mac address-table
Legend:
        * - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC
        age - seconds since last seen,+ - primary entry using vPC Peer-Link,
        (T) - True, (F) - False, C - ControlPlane MAC, ~ - vsan
   VLAN     MAC Address      Type      age     Secure NTFY Ports
---------+-----------------+--------+---------+------+----+------------------
C  100     5038.ca00.0400   dynamic  0         F      F    nve1(3.3.3.3)
*  100     50be.1f00.0600   dynamic  0         F      F    Eth1/1
C  200     50ab.5800.0500   dynamic  0         F      F    nve1(3.3.3.3)
*  200     50fc.6500.0700   dynamic  0         F      F    Eth1/2
G    -     5000.0900.1b08   static   -         F      F    sup-eth1(R)
G  100     5000.0900.1b08   static   -         F      F    sup-eth1(R)
G  200     5000.0900.1b08   static   -         F      F    sup-eth1(R)
G    -     aaaa.bbbb.cccc   static   -         F      F    sup-eth1(R)
HQSW1#

Tips

EVPNでは、VTEP 間でMAC/IP・サブネット情報を交換するために「ルートタイプ(メッセージ形式)」が定義されています。ここでは、VXLANでよく使われるType 2 / Type 5について簡潔にまとめます。

  • Type 2(MAC/IP Advertisement Route)
    • L2VNI(Bridge Domain)に属するMAC/IP情報を広報します。具体的には次の情報を伝えます。
      1. エンドホストのMAC/IPアドレス
      2. 各VTEPのSVI(ホストのデフォルトゲートウェイ)のMAC/IPアドレス
  • Type 5(IP Prefix Route)
    • L3VNI(テナントVRF)に属するIPプレフィックス(ルーティングテーブル)を広報します。具体的には、「このVTEPは、このテナントVRFにこの経路を保持している」という情報を伝えるイメージです。

ABOUT ME
空花(そらはな)ぐみを
空花(そらはな)ぐみを
ネットワークエンジニア / 愛猫家
高卒工場勤務を経て31歳でIT業界へ転職し、現在はSIerでネットワークエンジニアの現場リーダーとして設計・構築を担当しています。未経験からキャリアを切り開いた経験を活かし、
・ネットワークエンジニア初級〜中級者がつまずきやすいポイントの解説
・ラボ環境を活用した検証手順
・業務で生かせる実践的なノウハウ
など、インフラエンジニアを目指す方や、現職でスキルを磨きたい方に役立つ情報を発信していきます。
記事URLをコピーしました