vrf

 

[root@evpn2 ~]# ip vrf show
Name              Table
-----------------------
evpn-vrf           100
vrftest            101
[root@evpn2 ~]# ip -br link show evpn-vrf
evpn-vrf         UP             aa:5c:32:2c:09:e5 <NOARP,MASTER,UP,LOWER_UP>

[root@evpn2 ~]# ip -4 r ls table 100
default via 5.5.5.254 dev default_g1
broadcast 3.3.3.0 dev br30 proto kernel scope link src 3.3.3.254
3.3.3.0/24 dev br30 proto kernel scope link src 3.3.3.254
local 3.3.3.254 dev br30 proto kernel scope host src 3.3.3.254
broadcast 3.3.3.255 dev br30 proto kernel scope link src 3.3.3.254
broadcast 5.5.5.0 dev default_g1 proto kernel scope link src 5.5.5.253
5.5.5.0/24 dev default_g1 proto kernel scope link src 5.5.5.253
local 5.5.5.253 dev default_g1 proto kernel scope host src 5.5.5.253
broadcast 5.5.5.255 dev default_g1 proto kernel scope link src 5.5.5.253

sudo ip link add mgmt-vrf type vrf table 10
ip link set dev mgmt-vrf up
ip route add table 10 unreachable default metric 4278198272
sudo ip link set dev eth0 master mgmt-vrf
sudo ip route add table 10 0.0.0.0/0 dev eth0 via 10.40.255.1

 

[root@evpn2 ~]# ip -4 r  ls table 100 dev br30
broadcast 3.3.3.0 proto kernel scope link src 3.3.3.254 
3.3.3.0/24 proto kernel scope link src 3.3.3.254 
local 3.3.3.254 proto kernel scope host src 3.3.3.254 
broadcast 3.3.3.255 proto kernel scope link src 3.3.3.254 

 

 

ip link set dev br10 address 00:00:01:02:03:10
ip addr add 2.2.2.254/24 dev br10


ip link add br100 type bridge
ip link set dev br100 address 00:00:01:02:03:04

# add vrf
ip link add evpn-vrf type vrf table 100
ip link set evpn-vrf up
ip link set br100 master evpn-vrf  
ip link set br10 master evpn-vrf 

 

[root@evpn2 ~]#  ip rule add oif evpn-vrf table 1001 
[root@evpn2 ~]#  ip rule add iif evpn-vrf table 1001 
[root@evpn2 ~]#  ip rule add oif evpn-vrf table 100 
[root@evpn2 ~]# ip vrf list
Name              Table
-----------------------
evpn-vrf           100
vrftest            101
[root@evpn2 ~]#  ip rule add iif evpn-vrf table 100 
[root@evpn2 ~]#  ip rule add l3mdev pref 1000

 

[root@evpn2 ~]# ip rule list
0:      from all lookup local 
996:    from all iif evpn-vrf lookup 100 
997:    from all oif evpn-vrf lookup 100 
998:    from all iif evpn-vrf lookup 1001 
999:    from all oif evpn-vrf lookup 1001 
1000:   from all lookup [l3mdev-table] 
1000:   from all lookup [l3mdev-table] 
32766:  from all lookup main 
32767:  from all lookup default