Hi there,   EVPN and VXLAN provide two different functions to a fabric overlay.  In simple terms:   EVPN is the Control Plane - It is responsible for the propagation of IP/Mac mappings and locations.   VXLAN is the Data Plane - Traffic is encapsulate...

> This merits to be documented somewhere, no? You're right, it should be - It's been a while since I looked at any of our guidance around policy, but I will do some digging to see if we have a CVD for it. This strategy is definitely used widely. Rodd...

Hi Jan, Yes, this has been fully-supported since Day 1.  It is a very common strategy in guest networks where you don't want guest endpoints talking to each other.  It's simply a matter of creating a deny policy using the same SGT for source and dest...

Does your client have VRFs in their existing networks to hand-off to or is everything going to be funneled into one routing table?  Do they plan on adding VRFs to the existing network?   There are a couple of ways to handle this depending on what the...