VxLAN Layer2 VNI and Laye2 3 VNI between asr 1006 router dci and nexus 93160YC-EX switrch

[fly]

Hi,Dear Sir/Madam,

    This subject is not only related to just nexus 93180YC-EX switch, and there are also two ASR1006-X router.

   We just config a VxLAN nework , two spines :nexus 9508, 4 leaf :nexus 93180YC-EX, two DCI leaf router :ASR 1006-X

   we are running MP-BGP EVPN in this 6 switches and 2 routers, I met a prolem

   ON ASR 1006-X , I want running both Layer 2 vni and layer 3 vxlan  sametime on ASR,I config layer3 VxLAN like this

interface nve1
 no ip address
 source-interface Loopback1
 host-reachability protocol bgp
 member vni 12021 vrf TEST1

but when I config layer 2 VNI under same interface NVE1 report an error

//can't config l2 and l3 same time under same interfave nve

so I create another nve 2

  interface nve2
 no ip address
 source-interface Loopback2
 member vni 10022 mcast-group 239.0.20.2

  this is not bgp drive for layer 2 VNI, just multicast drive dataplane I can see VxLAN multicast traffic send to 9508 ,

but problem is on nexus 93180YC-EX config like this

interface nve1
 no ip address
 source-interface Loopback1
 host-reachability protocol bgp

  member vni 10022
    mcast-group 239.0.20.2
 member vni 12022 associate vrf

under nexus93180YC-EX, I can config layer3 VNI and layer2 VNI under same interface nve 1,but from ASR1006 layer2 vni traffic driven by multicast data plane but on nexus 93180, layer2 vni driven by bgp control plane.

 if I remove layer3 vni and host-reachablility protocol bgp command , I can ping from asr 1006 to nexus 93180,

becauser they both driven by multicast data plane.

 But I can't remove bgp under nexus 93180, because there are also another  set of leaf(93180) config by host-reachablility protocol bgp.

it seems ASR 1006 can't support bgp drive layer2 vni ,only multicast , and ingress replication.\

So I can't running layer2 vni and layer 3 vxlan same time on ASR 1006

  is there any method to solve this?

Thank you

Jere

[fly]

I have weird situation when I create a VxLAN network.
I connect ASR1006-X Directly to Spine as a DCI solution connect to remote many different BANK wans.

ON ASR1006 ,I create a interface nve1  and config bgp evpn as control plane to transmit layer 3 VxLAN route information , and create VRF outside interface connecting to remote bank router , that is ok ,
 I CAN ping from remote bank router to many sets of nexus 93180YC-EX switch(as leaf,also running bgp evpn)
 
 the problem was coming when I started to config layer2 VxLAN on ASR 1006,
 I planed let remote bank's server can layer2 access inside VxLAN server leaf(under nexus 93180 switch), but on ASR 1006,  I can't config layer 2 vni under same interfave nve 1 as vxlan layer3 vni as I configured above.
 when i configured asr 1006 told me you can't config layer2 vni and layer3 vni under a same interaface nve.
So I created a new interfave nve2,and configured layer 2 vni under new interfave nve2, but from cisco doc, it hasn't told me ,I can config vxlan layer 2 vni by using bgp as control plan , in fact ,I really couldn't config
bgp under interfave nve2 which I configured  layer2 vni, when i configured It told me I can't config bgp and layer 2vni together(hum hum hum,same story happen),like this:

ASR1006-1(config)#interface nve2

ASR1006-2(config-if)#member vni mcast 239.0.0.2<<--Layer 2 vni
ASR1006-2(config-if)#host-reachability protocol bgp <<--config bgp under interface
%L3CP VNI can't co-exist with L2DP VNI in same NVE interface <<----error

I check cisco doc again and again ,there is no sample configuration for bgp and l2 vni, just bgp vxlan layer3,
So I have to use only multicast or ingress replication under interfave nve2,

the real problem appear
on inside vxlan network there are many sets of leaf swtich(nexus 93180), It has already configured bgp evpn for layer2 and layer3 vni between these nexus 93180 switch ,I can't modify it, 
I tried remove host-reachablility protocol bgp on one set on nexus 93180 leaf to test, just using multicast or ingress replication to connect asr 1006 layer2 vxlan , It is running ,running is ok
I can ping from each other side.
but when I return my configuration back to bgp mode on nexus 93180, layer 2 vxlan ping from asr1006 to 93180 leaf  was failed,

I think asr 1006 can't support bgp evpn and layer 2 vxlan , just only multicast or ingress replication
 
but on 93180, I can't config pure multicast or ingress mode connecting to ASR 1006 layer 2 vxlan, because on 93180 I can only create just one interface nve1, I can't remove bgp configuration under interface nve1
 on 93180 switch because there are many sets of other 93180 leaf in vxlan network,

I totally confused for this situation, Fortunatetlycustomer now don't have layer 2 vxlan connection requirement for DCI.
but when customer has layer2 vxlan connection requirment from ASR1006 ,how can I do this.
  thank you
  Jere