EVPN-VXLAN sur Cisco Nexus : guide de déploiement complet
·2 min de lecture·273 mots
Déploiement EVPN-VXLAN sur Cisco Nexus 9000 en NX-OS standalone (pas ACI). Configuration spine-leaf fabric avec BGP underlay + BGP EVPN overlay + VXLAN dataplane. Guide step-by-step 2026 pour NetEng expérimentés Cisco Nexus.
Prérequis
- Nexus 9300-EX/FX/GX ou 9500
- NX-OS 9.3.x ou 10.x
- Licences : NX-OS Advantage
- Lab ou POC avant prod
Features à activer
- feature bgp
- feature vn-segment-vlan-based
- feature nv overlay
- feature interface-vlan
- feature fabric forwarding
- nv overlay evpn
Topologie lab
- 2× spine (AS 65100)
- 4× leaf (AS 65200-65203, eBGP ou iBGP)
- Loopback0 : router-id + VTEP source
- Loopback1 : anycast RP (si multicast)
Configuration underlay eBGP
- spine-01:
- router bgp 65100
- router-id 10.0.0.101
- neighbor 10.0.0.1 remote-as 65200 (leaf1)
- neighbor 10.0.0.2 remote-as 65201
- address-family ipv4 unicast
- redistribute direct route-map ALLOW-LOOPBACKS
Configuration overlay BGP EVPN
- router bgp 65200 (sur leaf)
- neighbor 10.0.0.101 (spine)
- remote-as 65100
- address-family l2vpn evpn
- send-community extended
- allowas-in
Configuration VXLAN + VNI
- interface nve1
- source-interface loopback0
- host-reachability protocol bgp
- member vni 10010
- ingress-replication protocol bgp
- member vni 20000 associate-vrf
- vlan 10
- vn-segment 10010
Configuration IRB (routage)
- interface vlan 10
- vrf member TENANT-A
- ip address 10.10.10.1/24
- fabric forwarding mode anycast-gateway
VRF
- vrf context TENANT-A
- vni 20000
- rd auto
- address-family ipv4 unicast
- route-target both auto evpn
Anycast gateway MAC
- fabric forwarding anycast-gateway-mac 0000.0000.abcd
- Mêmes IP + MAC sur toutes les leaves pour migration VM
Multi-homing ESI LAG
- evpn multihoming
- interface Ethernet1/1
- ethernet-segment
- esi system-mac 0000.0000.1111 0001
- es-import-rt 0000.0000.1111
Troubleshooting
- show bgp l2vpn evpn summary
- show nve peers : VTEP peers actifs
- show nve vni : VNIs actifs
- show mac address-table dynamic vni 10010
- show ip route vrf TENANT-A
Commander chez OPTINOC
Déploiement EVPN-VXLAN Cisco Nexus clé-en-main. Formation + POC + migration. Devis DC sous 48h.