Damien
cb74dd118f
With 'no bgp default ipv4-unicast' set at the router level, VRF gold eBGP/iBGP neighbors were establishing but not exchanging any IPv4 prefixes, breaking inter-fabric transit between DC and Campus. Add an explicit 'address-family ipv4' block with 'neighbor X activate' under 'vrf gold' on both cores and all four border leafs. Also drop 'redistribute learned' from the border leaf VRF gold stanza: it is not a valid command in that context and was silently stripped by EOS.
239 lines
5.7 KiB
INI
239 lines
5.7 KiB
INI
! Border-Leaf-Campus2 Configuration
|
|
! Campus Border Leaf - AS 66005 (MLAG pair with border-leaf-campus1)
|
|
! Provides egress from Campus EVPN-VXLAN fabric to Core L3 network
|
|
!
|
|
hostname border-leaf-campus2
|
|
!
|
|
! LLDP Management0
|
|
lldp management-address Management0
|
|
!
|
|
! enable gNMI API
|
|
management api gnmi
|
|
transport grpc default
|
|
provider eos-native
|
|
!
|
|
! admin/admin for ssh access
|
|
username admin privilege 15 role network-admin secret sha512 $6$xQktFrbdeqEhVzLM$.1wOJB25nw2fqYaSXDu6y4mo6AP9hngMCFe2vGDl84hWoz00Q.4unoEBqspNI0HEoRz.OZhdBHqQv12KABf0B0
|
|
!
|
|
! Enable IP routing
|
|
ip routing
|
|
!
|
|
! Enable routing protocols
|
|
service routing protocols model multi-agent
|
|
!
|
|
! VRF Definition
|
|
vrf instance gold
|
|
!
|
|
! VLANs
|
|
vlan 4090
|
|
name mlag-peer
|
|
trunk group mlag-peer
|
|
!
|
|
vlan 4091
|
|
name mlag-ibgp
|
|
trunk group mlag-peer
|
|
!
|
|
! Management interface
|
|
interface Management0
|
|
ip address 172.16.0.23/24
|
|
!
|
|
! MLAG Peer-link SVI
|
|
interface Vlan4090
|
|
description MLAG Peer-Link
|
|
ip address 10.1.199.255/31
|
|
no autostate
|
|
!
|
|
! iBGP Peering SVI
|
|
interface Vlan4091
|
|
description MLAG iBGP Peering
|
|
ip address 10.1.3.5/31
|
|
mtu 9214
|
|
!
|
|
! Loopbacks
|
|
interface Loopback0
|
|
description Router-ID
|
|
ip address 10.1.250.22/32
|
|
!
|
|
interface Loopback1
|
|
description VTEP
|
|
ip address 10.1.255.21/32
|
|
!
|
|
interface Loopback2
|
|
description VRF-Gold-health
|
|
vrf gold
|
|
ip address 10.1.250.222/32
|
|
!
|
|
! MLAG Peer-link
|
|
interface Ethernet10
|
|
description mlag peer link
|
|
channel-group 999 mode active
|
|
!
|
|
interface Port-Channel999
|
|
description MLAG Peer
|
|
switchport mode trunk
|
|
switchport trunk group mlag-peer
|
|
spanning-tree link-type point-to-point
|
|
!
|
|
! Underlay P2P interfaces to Campus Spines
|
|
interface Ethernet11
|
|
description campus-spine1
|
|
no switchport
|
|
ip address 10.1.1.11/31
|
|
mtu 9214
|
|
!
|
|
interface Ethernet12
|
|
description campus-spine2
|
|
no switchport
|
|
ip address 10.1.2.11/31
|
|
mtu 9214
|
|
!
|
|
! Uplink to Core1 (subinterfaced: .100 default VRF, .200 VRF gold)
|
|
interface Ethernet13
|
|
description core1
|
|
no switchport
|
|
mtu 9214
|
|
!
|
|
interface Ethernet13.100
|
|
description core1-underlay
|
|
encapsulation dot1q vlan 100
|
|
ip address 10.0.5.3/31
|
|
mtu 9214
|
|
!
|
|
interface Ethernet13.200
|
|
description core1-vrf-gold
|
|
encapsulation dot1q vlan 200
|
|
vrf gold
|
|
ip address 10.0.15.3/31
|
|
mtu 9214
|
|
!
|
|
! Uplink to Core2
|
|
interface Ethernet14
|
|
description core2
|
|
no switchport
|
|
mtu 9214
|
|
!
|
|
interface Ethernet14.100
|
|
description core2-underlay
|
|
encapsulation dot1q vlan 100
|
|
ip address 10.0.5.7/31
|
|
mtu 9214
|
|
!
|
|
interface Ethernet14.200
|
|
description core2-vrf-gold
|
|
encapsulation dot1q vlan 200
|
|
vrf gold
|
|
ip address 10.0.15.7/31
|
|
mtu 9214
|
|
!
|
|
! Spanning-tree
|
|
no spanning-tree vlan 4090
|
|
no spanning-tree vlan 4091
|
|
!
|
|
! Virtual MAC for Anycast Gateway
|
|
ip virtual-router mac-address c001.cafe.babe
|
|
!
|
|
! MLAG Configuration
|
|
mlag configuration
|
|
domain-id border-leafs-campus
|
|
local-interface Vlan4090
|
|
peer-address 10.1.199.254
|
|
peer-link Port-Channel999
|
|
dual-primary detection delay 10 action errdisable all-interfaces
|
|
peer-address heartbeat 172.16.0.22 vrf mgmt
|
|
!
|
|
! VXLAN Interface
|
|
interface Vxlan1
|
|
vxlan source-interface Loopback1
|
|
vxlan udp-port 4789
|
|
vxlan learn-restrict any
|
|
vxlan vrf gold vni 100001
|
|
!
|
|
! IP Routing
|
|
ip routing
|
|
ip routing vrf gold
|
|
ip route 100.64.0.0/10 172.16.0.254
|
|
!
|
|
! OSPF for loopback reachability with Core (default VRF)
|
|
router ospf 1
|
|
router-id 10.1.250.22
|
|
passive-interface default
|
|
no passive-interface Ethernet13.100
|
|
no passive-interface Ethernet14.100
|
|
network 10.1.250.22/32 area 0
|
|
network 10.0.5.2/31 area 0
|
|
network 10.0.5.6/31 area 0
|
|
max-lsa 12000
|
|
!
|
|
! BGP Configuration
|
|
router bgp 66005
|
|
router-id 10.1.250.22
|
|
no bgp default ipv4-unicast
|
|
bgp log-neighbor-changes
|
|
distance bgp 20 200 200
|
|
maximum-paths 4 ecmp 64
|
|
!
|
|
! Underlay peer-group (to Campus spines)
|
|
neighbor underlay peer group
|
|
neighbor underlay remote-as 66000
|
|
neighbor underlay maximum-routes 12000 warning-only
|
|
neighbor 10.1.1.10 peer group underlay
|
|
neighbor 10.1.2.10 peer group underlay
|
|
!
|
|
! iBGP peer-group (to MLAG peer)
|
|
neighbor underlay_ibgp peer group
|
|
neighbor underlay_ibgp remote-as 66005
|
|
neighbor underlay_ibgp maximum-routes 12000 warning-only
|
|
neighbor underlay_ibgp next-hop-self
|
|
neighbor 10.1.3.4 peer group underlay_ibgp
|
|
!
|
|
! EVPN peer-group (to Campus spines)
|
|
neighbor evpn peer group
|
|
neighbor evpn remote-as 66000
|
|
neighbor evpn update-source Loopback0
|
|
neighbor evpn ebgp-multihop 3
|
|
neighbor evpn send-community extended
|
|
neighbor evpn maximum-routes 12000 warning-only
|
|
neighbor 10.1.250.1 peer group evpn
|
|
neighbor 10.1.250.2 peer group evpn
|
|
!
|
|
! eBGP to Core routers (default VRF)
|
|
neighbor core peer group
|
|
neighbor core remote-as 65500
|
|
neighbor core send-community extended
|
|
neighbor core maximum-routes 12000 warning-only
|
|
neighbor 10.0.5.2 peer group core
|
|
neighbor 10.0.5.6 peer group core
|
|
!
|
|
! IPv4 address family
|
|
address-family ipv4
|
|
neighbor underlay activate
|
|
neighbor underlay_ibgp activate
|
|
neighbor core activate
|
|
network 10.1.250.22/32
|
|
network 10.1.255.21/32
|
|
!
|
|
! EVPN address family
|
|
address-family evpn
|
|
neighbor evpn activate
|
|
!
|
|
! VRF Gold configuration
|
|
vrf gold
|
|
rd 10.1.250.22:1
|
|
route-target import evpn 1:100001
|
|
route-target export evpn 1:100001
|
|
router-id 10.1.250.22
|
|
neighbor 10.0.15.2 remote-as 65500
|
|
neighbor 10.0.15.2 send-community extended
|
|
neighbor 10.0.15.2 maximum-routes 12000 warning-only
|
|
neighbor 10.0.15.6 remote-as 65500
|
|
neighbor 10.0.15.6 send-community extended
|
|
neighbor 10.0.15.6 maximum-routes 12000 warning-only
|
|
!
|
|
address-family ipv4
|
|
neighbor 10.0.15.2 activate
|
|
neighbor 10.0.15.6 activate
|
|
!
|
|
redistribute connected
|
|
!
|
|
end
|