VXLAN分布式EVPN网关实验

一、网络拓扑（命名用H3C模拟器）

1、实现VM1、VM2、VM3、VM4之间互通

2、VM1、VM2与外网互通；

3、VM3、VM4与外网不通。

主要通过EVPN的IRT控制。

 二、RTA配置

ip vpn-instance l2vpna
 route-distinguisher 1:1
 #
 address-family ipv4
  vpn-target 3:3 import-extcommunity
 #
 address-family evpn
  vpn-target 1:1 2:2 3:3 import-extcommunity
  vpn-target 1:1 export-extcommunity
#
 vxlan tunnel mac-learning disable
#
ospf 1
 area 0.0.0.0
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
 l2vpn enable
 vxlan tunnel arp-learning disable
#
vsi vpn1
 gateway vsi-interface 1
 vxlan 10
 evpn encapsulation vxlan
  route-distinguisher auto
  vpn-target auto export-extcommunity
  vpn-target auto import-extcommunity
#
vsi vpn2
 gateway vsi-interface 2
 vxlan 20
 evpn encapsulation vxlan
  route-distinguisher auto
  vpn-target auto export-extcommunity
  vpn-target auto import-extcommunity
#
interface LoopBack0
 ip address 1.1.1.1 255.255.255.255
 ospf 1 area 0.0.0.0
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 11.1.1.2 255.255.255.252
 ospf 1 area 0.0.0.0
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 xconnect vsi vpn1
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
 xconnect vsi vpn2
#
interface Vsi-interface1
 ip binding vpn-instance l2vpna
 ip address 10.1.1.1 255.255.255.0
 mac-address 0001-0001-0001
 local-proxy-arp enable  
 distributed-gateway local
#
interface Vsi-interface2
 ip binding vpn-instance l2vpna
 ip address 10.1.2.1 255.255.255.0
 mac-address 0002-0002-0002
 local-proxy-arp enable  
 distributed-gateway local
#
interface Vsi-interface3
 ip binding vpn-instance l2vpna
 l3-vni 1000
#
interface Vsi-interface4
 l3-vni 2000
#
interface Vsi-interface5
 l3-vni 3000
#              
bgp 200
 peer 4.4.4.4 as-number 200
 peer 4.4.4.4 connect-interface LoopBack0
 #
 address-family l2vpn evpn
  peer 4.4.4.4 enable

三、RTB配置

ip vpn-instance l2vpna
 route-distinguisher 1:1
 #
 address-family ipv4
  vpn-target 2:2 1:1 3:3 import-extcommunity
  vpn-target 2:2 export-extcommunity
 #
 address-family evpn
  vpn-target 2:2 1:1 import-extcommunity
  vpn-target 2:2 export-extcommunity
#
 vxlan tunnel mac-learning disable
#
ospf 1
 area 0.0.0.0
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
 l2vpn enable
 vxlan tunnel arp-learning disable
#
vsi vpn1
 gateway vsi-interface 1
 vxlan 10
 evpn encapsulation vxlan
  route-distinguisher auto
  vpn-target auto export-extcommunity
  vpn-target auto import-extcommunity
#
vsi vpn2
 gateway vsi-interface 2
 vxlan 20
 evpn encapsulation vxlan
  route-distinguisher auto
  vpn-target auto export-extcommunity
  vpn-target auto import-extcommunity
#              
interface Serial1/0
#
interface Serial2/0
#
interface Serial3/0
#
interface Serial4/0
#
interface NULL0
#
interface LoopBack0
 ip address 2.2.2.2 255.255.255.255
 ospf 1 area 0.0.0.0
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 12.1.1.2 255.255.255.252
 ospf 1 area 0.0.0.0
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 xconnect vsi vpn1
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
 xconnect vsi vpn2
#              
interface Vsi-interface1
 ip binding vpn-instance l2vpna
 ip address 10.1.1.1 255.255.255.0
 mac-address 0001-0001-0001
 local-proxy-arp enable  
 distributed-gateway local
#
interface Vsi-interface2
 ip binding vpn-instance l2vpna
 ip address 10.1.2.1 255.255.255.0
 mac-address 0002-0002-0002
 local-proxy-arp enable  
 distributed-gateway local
#
interface Vsi-interface3
 ip binding vpn-instance l2vpna
 l3-vni 2000
#
interface Vsi-interface4
 l3-vni 1000
#
interface Vsi-interface5
 l3-vni 3000   
#
bgp 200
 peer 4.4.4.4 as-number 200
 peer 4.4.4.4 connect-interface LoopBack0
 #
 address-family l2vpn evpn
  peer 4.4.4.4 enable

四、RTC配置

ip vpn-instance l2vpn
 route-distinguisher 1:1
 #
 address-family ipv4
  vpn-target 3:3 1:1 import-extcommunity
  vpn-target 3:3 export-extcommunity
 #
 address-family evpn
  vpn-target 3:3 1:1 2:2 import-extcommunity
  vpn-target 3:3 export-extcommunity
#
 vxlan tunnel mac-learning disable
#
ospf 1
 area 0.0.0.0
#
 l2vpn enable
 vxlan tunnel arp-learning disable
#
interface LoopBack0
 ip address 3.3.3.3 255.255.255.255
 ospf 1 area 0.0.0.0
#
interface LoopBack1
#              
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 13.1.1.2 255.255.255.252
 ospf 1 area 0.0.0.0
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 ip binding vpn-instance l2vpn
 ip address 20.1.1.3 255.255.255.0
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
#
interface Vsi-interface3
 ip binding vpn-instance l2vpn
 l3-vni 3000
#
interface Vsi-interface4
 l3-vni 2000
#
interface Vsi-interface5
 l3-vni 1000
#
bgp 200
 peer 4.4.4.4 as-number 200
 peer 4.4.4.4 connect-interface LoopBack0
 #             
 address-family ipv4 unicast
 #
 address-family l2vpn evpn
  peer 4.4.4.4 enable
 #
 ip vpn-instance l2vpn
  #
  address-family ipv4 unicast
   default-route imported
   import-route static
#
 ip route-static vpn-instance l2vpn 0.0.0.0 0 20.1.1.100

六：RTD（BGP RR配置）

ospf 1
 area 0.0.0.0
#
interface LoopBack0
 ip address 4.4.4.4 255.255.255.255
 ospf 1 area 0.0.0.0
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 11.1.1.1 255.255.255.252
 ospf 1 area 0.0.0.0
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 ip address 12.1.1.1 255.255.255.252
 ospf 1 area 0.0.0.0
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
 ip address 13.1.1.1 255.255.255.252
 ospf 1 area 0.0.0.0
#
bgp 200
 group evpn internal
 peer evpn connect-interface LoopBack0
 peer 1.1.1.1 group evpn
 peer 2.2.2.2 group evpn
 peer 3.3.3.3 group evpn
 #
 address-family l2vpn evpn
  undo policy vpn-target
  peer evpn enable
  peer evpn reflect-client

七：检查

1、路由：

<RTA>dis ip routing-table vpn-instance l2vpna protocol bgp 

Summary count : 3

BGP Routing table status : <Active>
Summary count : 3

Destination/Mask   Proto   Pre Cost        NextHop         Interface
0.0.0.0/0          BGP     255 0           3.3.3.3         Vsi5
10.1.1.20/32       BGP     255 0           2.2.2.2         Vsi4
10.1.2.20/32       BGP     255 0           2.2.2.2         Vsi4

BGP Routing table status : <Inactive>

2、VXLAN隧道

<RTA>dis interface Tunnel 
Tunnel0
Current state: UP
Line protocol state: UP
Description: Tunnel0 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1464
Internet protocol processing: Disabled
Output queue - Urgent queuing: Size/Length/Discards 0/1024/0
Output queue - Protocol queuing: Size/Length/Discards 0/500/0
Output queue - FIFO queuing: Size/Length/Discards 0/75/0
Last clearing of counters: Never
Tunnel source 1.1.1.1, destination 2.2.2.2
Tunnel protocol/transport UDP_VXLAN/IP
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 48 packets, 4704 bytes, 0 drops
Output: 48 packets, 4704 bytes, 0 drops

Tunnel1
Current state: UP
Line protocol state: UP
Description: Tunnel1 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1464
Internet protocol processing: Disabled
Output queue - Urgent queuing: Size/Length/Discards 0/1024/0
Output queue - Protocol queuing: Size/Length/Discards 0/500/0
Output queue - FIFO queuing: Size/Length/Discards 0/75/0
Last clearing of counters: Never
Tunnel source 1.1.1.1, destination 3.3.3.3
Tunnel protocol/transport UDP_VXLAN/IP
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 35 packets, 3430 bytes, 0 drops
Output: 39 packets, 3670 bytes, 0 drops

--------------

<RTA>dis vxlan tunnel 
Total number of VXLANs: 5

VXLAN ID: 10, VSI name: vpn1, Total tunnels: 1 (1 up, 0 down, 0 defect, 0 blocked)
  Tunnel name          Link ID    State    Type        Flood Proxy  Split horizon
  Tunnel0              0x5000000  UP       Auto        Disabled     Enabled

VXLAN ID: 20, VSI name: vpn2, Total tunnels: 1 (1 up, 0 down, 0 defect, 0 blocked)
  Tunnel name          Link ID    State    Type        Flood Proxy  Split horizon
  Tunnel0              0x5000000  UP       Auto        Disabled     Enabled

VXLAN ID: 1000, VSI name: Auto_L3VNI1000_3

VXLAN ID: 2000, VSI name: Auto_L3VNI2000_4

VXLAN ID: 3000, VSI name: Auto_L3VNI3000_5

3、检查BGP路由通告

<RTA>dis bgp l2vpn evpn peer 4.4.4.4 received-routes 

 Total number of routes: 6

 BGP local router ID is 1.1.1.1 
 Status codes: * - valid, > - best, d - dampened, h - history,
               s - suppressed, S - stale, i - internal, e - external
               Origin: i - IGP, e - EGP, ? - incomplete

 Route distinguisher: 1:1(l2vpna)
 Total number of routes: 1

     Network            NextHop         MED        LocPrf     PrefVal Path/Ogn

* >i [5][0][0][0.0.0.0]/80
                        3.3.3.3         0          100        0       ?

 Route distinguisher: 1:10
 Total number of routes: 2

     Network            NextHop         MED        LocPrf     PrefVal Path/Ogn

* >i [2][0][48][1a88-a626-0706][32][10.1.1.20]/136
                        2.2.2.2         0          100        0       i
* >i [3][0][32][2.2.2.2]/80
                        2.2.2.2         0          100        0       i

 Route distinguisher: 1:20
 Total number of routes: 3

     Network            NextHop         MED        LocPrf     PrefVal Path/Ogn

* >i [2][0][48][1a88-aab2-0806][0][0.0.0.0]/104
                        2.2.2.2         0          100        0       i
* >i [2][0][48][1a88-aab2-0806][32][10.1.2.20]/136
                        2.2.2.2         0          100        0       i
* >i [3][0][32][2.2.2.2]/80
                        2.2.2.2         0          100        0       i