cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1801
Views
5
Helpful
1
Replies

Nexus 9k VXLAN evpn Help

rtjensen4
Level 4
Level 4

Hello!

N00b question I'm sure. 

I have a pair of Nexus 93180YC-EX running 9.2(2) in VPC mode.

I'm trying to get a basic VXLAN EVPN between them. This is a working "Classic" environment, only have the two 9ks, no other swithes. This is a secondary DC, so I'm starting there... I have a pair of 7706s at my primary DC that I'll look to expand this to as well later on. Overall goal is to be able to have a couple of the same VLANs at secondary DC.

Anyway, VPC is running in classic is fine.

I'm trying to follow this configuration guide:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/92x/vxlan-92x/configuration/guide/b-cisco-nexus-9000-series-nx-os-vxlan-configuration-guide-92x/b_Cisco_Nexus_9000_Series_NX-OS_VXLAN_Configuration_Guide_9x_chapter_0100.html

 

It seems none of the "evpn" config options are available to me.

 

I had to enabled 'feature fabric forwarding' to get the fabric commands that are referenced, but asside from that, I'm trying to follow it pretty closely.

Here's an example of what's missing:

Config guide says:

Configuring VRF for VXLAN Routing

Configure the tenant VRF.

Procedure

  Command or Action Purpose
Step 1

vrf context vxlan

Configure the VRF.

Step 2

vni number

Specify VNI.

Step 3

rd auto

Specify VRF RD (route distinguisher).

Step 4

address-family ipv4 unicast

Configure address family for IPv4.

Step 5

route-target both auto

Note 

Specifying the auto option is applicable only for IBGP.

Manually configured route targets are required for EBGP.

Step 6

route-target both auto evpn

Note 

Specifying the auto option is applicable only for IBGP.

Manually configured route targets are required for EBGP.

 

 

My Results:

DR-N9k-2(config)# vrf context VXLANTEST
DR-N9k-2(config-vrf)# vni 5076
DR-N9k-2(config-vrf)# rd auto
DR-N9k-2(config-vrf)# address-family ipv4 unicast
DR-N9k-2(config-vrf-af-ipv4)# route-target both auto
DR-N9k-2(config-vrf-af-ipv4)# route-target both auto evpn
^
% Invalid command at '^' marker.
DR-N9k-2(config-vrf-af-ipv4)# route-target both auto ?
<CR>

DR-N9k-2(config-vrf-af-ipv4)# route-target both auto

 

 

 

Another Example:

Configuring BGP on the VTEP

Procedure

  Command or Action Purpose
Step 1

router bgp number

Configure BGP.

Step 2

router-id address

Specify router address.

Step 3

neighbor address remote-as number

Define MPBGP neighbors. Under each neighbor define L2VPN EVPN.

Step 4

address-family ipv4 unicast

Configure the address family for IPv4.

Step 5

address-family l2vpn evpn

Configure address family Layer 2 VPN EVPN under the BGP neighbor.

Note 

Address-family IPv4 EVPN for VXLAN host-based routing

Step 6

(Optional) Allowas-in

(Optional)

Allows duplicate autonomous system (AS) numbers in the AS path. Configure this parameter on the leaf for eBGP when all leafs are using the same AS, but the spines have a different AS than leafs.

Step 7

send-community extended

Configures community for BGP neighbors.

Step 8

vrf vrf-name

Specify VRF.

Step 9

address-family ipv4 unicast

Configure the address family for IPv4.

Step 10

advertise l2vpn evpn

Enable advertising EVPN routes.

Note 

Beginning with Cisco NX-OS Release 9.2(1), the advertise l2vpn evpn command no longer takes effect. To disable advertisement for a VRF toward the EVPN, disable the VNI in NVE by entering the no member vni vni associate-vrf command in interface nve1. The vni is the VNI associated with that particular VRF.

 

 

My Switch outputs:

DR-N9k-2(config-vrf)# router bgp 65107
DR-N9k-2(config-router)# neighbor 76.76.76.76 remote-as 65107 !This is just a loopback on the other 9k in VPC pair.
DR-N9k-2(config-router-neighbor)# address-family ipv4 unicast
DR-N9k-2(config-router-neighbor-af)# address-family l2vpn evpn
^
% Invalid command at '^' marker.
DR-N9k-2(config-router-neighbor-af)# address-family l2vpn ?
^
% Invalid command at '^' marker.
DR-N9k-2(config-router-neighbor-af)# address-family ?
*** No matching command found in current mode, matching in (config-router-neighbor) mode ***
ipv4 Configure IPv4 address-family
ipv6 Configure IPv6 address-family
l2vpn Configure L2VPN address-family
link-state Configure link-state address-family
vpnv4 Configure IPv4 VPN address-family
vpnv6 Configure IPv6 VPN address-family

DR-N9k-2(config-router-neighbor-af)# address-family l2vpn
^
% Incomplete command at '^' marker.
DR-N9k-2(config-router-neighbor-af)#

 

Is there something I'm missing here? A license? A feature?

License on both 9k:

DR-N9k-2(config-router-neighbor-af)# show license
license_<snip>_25.lic:
SERVER this_host ANY
VENDOR cisco
INCREMENT LAN_ENTERPRISE_SERVICES_PKG cisco 1.0 permanent uncounted \

 

1 Reply 1

Varun Jose
Cisco Employee
Cisco Employee

Do you have the commands shown below configured?

 # Feature nv overlay

# nv overlay evpn