Cisco Nexus 9000 Series Configuration Manual page 68
Nx-os vxlan
Hide thumbs
Also See for Nexus 9000 Series:
- Configuration manual (562 pages) ,
- Troubleshooting manual (126 pages) ,
- Quick start configuration manual (6 pages)
Table of Contents
Advertisement
Guidelines and Limitations for VXLAN BGP EVPN
Note
• When peer-link is shut, the loopback interface used by NVE on the VPC secondary is brought down
and the status is Admin Shut. This is done so that the route to the loopback is withdrawn on the upstream
and that the upstream can divert all traffic to the VPC primary.
Note
• When peer-link is no-shut, the NVE loopback address is brought up again and the route is advertised
upstream, attracting traffic.
• For VPC, the loopback interface has 2 IP addresses: the primary IP address and the secondary IP address.
The primary IP address is unique and is used by Layer 3 protocols.
The secondary IP address on loopback is necessary because the interface NVE uses it for the VTEP IP
address. The secondary IP address must be same on both vPC peers.
• The VPC peer-gateway feature must be enabled on both peers.
As a best practice, use peer-switch, peer gateway, ip arp sync, ipv6 nd sync configurations for improved
convergence in VPC topologies.
In addition, increase the STP hello timer to 4 seconds to avoid unnecessary TCN generations when VPC
role changes occur.
The following is an example (best practice) of a VPC configuration:
switch# sh ru vpc
version 6.1(2)I3(1)
feature vpc
vpc domain 2
peer-switch
peer-keepalive destination 172.29.206.65 source 172.29.206.64
peer-gateway
ipv6 nd synchronize
ip arp synchronize
• On a VPC pair, shutting down NVE or NVE loopback on one of the VPC nodes is not a supported
configuration. This means that traffic failover on one-side NVE shut or one-side loopback shut is not
supported.
• Redundant anycast RPs configured in the network for multicast load-balancing and RP redundancy are
supported on VPC VTEP topologies.
• Enabling vpc peer-gateway configuration is mandatory. For peer-gateway functionality, at least one
backup routing SVI is required to be enabled across peer-link and also configured with PIM. This
provides a backup routing path in the case when VTEP loses complete connectivity to the spine. Remote
peer reachability is re-routed over the peer-link in this case.
Cisco Nexus 9000 Series NX-OS VXLAN Configuration Guide, Release 7.x
56
Each copied packet is sent on a special internal VLAN (VLAN 4041).
Orphans connected to the VPC secondary will experience loss of traffic for the period
that the peer-link is shut. This is similar to Layer 2 orphans in a VPC secondary of a
traditional VPC setup.
Configuring VXLAN BGP EVPN
- Quick Links:
- Configuring Vxlan
- Configuring Q-In-Vni
Hide quick links:
Advertisement
Table of Contents
