Distributed VXLAN gateway mode with EVPN on CE6851

Latest reply: Dec 24, 2018 09:35:03 261 1 0 0
Issue Description

The following configuration was used.

f9794538aced4b5594ac36922df03b03

The simptom below:

f10c2ec5af2346839c5e62a247b6a790

transparent.gif Alarm Information

The ping response is request time out.

<CE6851-2>ping -vpn vxlan-test 172.16.0.1

  PING 172.16.0.1: 56  data bytes, press CTRL_C to break

    Request time out

    Request time out

    Request time out

    Request time out

    Request time out

 

  --- 172.16.0.1 ping statistics ---

    5 packet(s) transmitted

    0 packet(s) received

    100.00% packet loss


transparent.gif Handling Process

We can see the destination present in the fib for vpn-instance vxlan-test, ping to next hop 1.1.1.1 is also working and the vxlan tunnel status is UP!

 

<CE6851-2>di ip fib slot 1 vpn-instance vxlan-test

Route Flags: G - Gateway Route, H - Host Route,    U - Up Route

             S - Static Route,  D - Dynamic Route, B - Black Hole Route

--------------------------------------------------------------------------------

FIB Table: vxlan-test

Total number of Routes: 8

 

Destination/Mask   Nexthop          Flag   Interface               TunnelID

     172.16.0.0/24  1.1.1.1          DGU    VXLAN                   0x0000000027f0000001

     172.16.0.1/32  1.1.1.1          DGHU   VXLAN                   0x0000000027f0000001

   172.16.100.0/24  172.16.100.1     U      Vbdif100                 -

   172.16.100.1/32  127.0.0.1        HU     Vbdif100                 -

172.16.100.255/32  127.0.0.1        U      Vbdif100                 -

   172.16.255.1/32  1.1.1.1          DGHU   VXLAN                   0x0000000027f0000001

   172.16.255.2/32  127.0.0.1        HU     LoopBack1000             -

255.255.255.255/32  127.0.0.1        U      InLoopBack0              -

<CE6851-2>di tun all

Tunnel ID                     Type                Destination         Status

-----------------------------------------------------------------------------

0x0000000027f0000001          vxlan_nvo3          1.1.1.1             UP

 

<CE6851-2>ping 1.1.1.1

  PING 1.1.1.1: 56  data bytes, press CTRL_C to break

    Reply from 1.1.1.1: bytes=56 Sequence=1 ttl=254 time=1 ms

    Reply from 1.1.1.1: bytes=56 Sequence=2 ttl=254 time=1 ms

    Reply from 1.1.1.1: bytes=56 Sequence=3 ttl=254 time=1 ms

    Reply from 1.1.1.1: bytes=56 Sequence=4 ttl=254 time=1 ms

    Reply from 1.1.1.1: bytes=56 Sequence=5 ttl=254 time=1 ms

 

  --- 1.1.1.1 ping statistics ---

    5 packet(s) transmitted

    5 packet(s) received

    0.00% packet loss

    round-trip min/avg/max = 1/1/1 ms

  

[~CE6851-1]display vxlan tunnel

Number of vxlan tunnel : 1

Tunnel ID   Source           Destination      State  Type

--------------------------------------------------------------

4026531842  1.1.1.1          3.3.3.3          up     dynamic

[~CE6851-1]

 

[~CE6851-1]display bgp evpn all routing-table

Local AS number : 65100

 

BGP Local router ID is 10.10.10.27

Status codes: * - valid, > - best, d - damped, x - best external, a - add path,

               h - history,  i - internal, s - suppressed, S - Stale

               Origin : i - IGP, e - EGP, ? - incomplete

 

 

EVPN address family:

  Number of Mac Routes: 4

Route Distinguisher: 65300:100

       Network(EthTagId/MacAddrLen/MacAddr/IpAddrLen/IpAddr)  NextHop

*>    0:48:883f-d32c-9621:0:0.0.0.0                          0.0.0.0

*>    0:48:883f-d32c-9621:32:172.16.0.1                      0.0.0.0

*>i   0:48:883f-d32c-96a1:0:0.0.0.0                          3.3.3.3

*>i   0:48:883f-d32c-96a1:32:172.16.100.1                    3.3.3.3

 

EVN-Instance 100:

Number of Mac Routes: 4

      Network(EthTagId/MacAddrLen/MacAddr/IpAddrLen/IpAddr)  NextHop

*>    0:48:883f-d32c-9621:0:0.0.0.0                          0.0.0.0

*>    0:48:883f-d32c-9621:32:172.16.0.1                      0.0.0.0

*>i   0:48:883f-d32c-96a1:0:0.0.0.0                          3.3.3.3

*>i   0:48:883f-d32c-96a1:32:172.16.100.1                    3.3.3.3

 

EVPN address family:

  Number of Inclusive Multicast Routes: 2

Route Distinguisher: 65300:100

       Network(EthTagId/IpAddrLen/OriginalIp)                 NextHop

*>    0:32:1.1.1.1                                           0.0.0.0

*>i   0:32:3.3.3.3                                           3.3.3.3

 

EVN-Instance 100:

Number of Inclusive Multicast Routes: 2

       Network(EthTagId/IpAddrLen/OriginalIp)                 NextHop

*>    0:32:1.1.1.1                                           0.0.0.0

*>i   0:32:3.3.3.3                                           3.3.3.3

 

EVPN address family:

  Number of Ip Prefix Routes: 6

Route Distinguisher: 65100:1301

       Network(EthTagId/IpPrefix/IpPrefixLen)                 NextHop

*>    0:172.16.0.0:24                                        0.0.0.0

*>i   0:172.16.100.0:24                                      3.3.3.3

*>    0:172.16.0.1:32                                        0.0.0.0

*>i   0:172.16.100.1:32                                      3.3.3.3

*>    0:172.16.255.1:32                                      0.0.0.0

*>i   0:172.16.255.2:32                                      3.3.3.3

 

EVN-Instance __vni1301__:

Number of Ip Prefix Routes: 6

       Network(EthTagId/IpPrefix/IpPrefixLen)                 NextHop

*>    0:172.16.0.0:24                                        0.0.0.0

*>i   0:172.16.100.0:24                                      3.3.3.3

*>    0:172.16.0.1:32                                        0.0.0.0

*>i   0:172.16.100.1:32                                      3.3.3.3

*>    0:172.16.255.1:32                                      0.0.0.0

*>i   0:172.16.255.2:32                                      3.3.3.3

[~CE6851-1]


transparent.gif Root Cause

The loopback interface for Layer 3 VXLAN gateway was not created.


transparent.gif Solution

For this model we need to configure a service loopback interface for the Layer 3 VXLAN gateway that can be used only for Layer 3 VXLAN gateway and no other services run on it. Also ensure that the bandwidth of a service loopback-capable Eth-Trunk interface at least doubles that of traffic carried on the Layer 3 VXLAN gateway on which the Eth-Trunk interface resides. For example, if 10 Gbit/s user traffic must be sent to the gateway through a VXLAN, two 10GE physical interfaces must be added to the service loopback-capable Eth-Trunk interface.

 

<HUAWEI> system-view

[~HUAWEI] interface eth-trunk 2

[*HUAWEI-Eth-Trunk2] service type tunnel

[*HUAWEI-Eth-Trunk2] trunkport 10ge 1/0/1

[*HUAWEI-Eth-Trunk2]quit

[~HUAWEI] quit

<HUAWEI> quit

  • x
  • convention:

Created Dec 24, 2018 09:35:03 Helpful(0) Helpful(0)

Learn more, great
  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!

Login and enjoy all the member benefits

Login
Fast reply Scroll to top