evpn-vxlan

Syntax

Hierarchy Level

Description

Set various global or per-routing-instance options in an EVPN-VXLAN fabric.

Options

gbp ingress-enforcement	Configure Group Based Policy (GBP) policy enforcement at the ingress node.
gbp ingress-src-tag filter `<gbp-filter>`	Associate the specified `<gbp-filter>` with the routing instance. Use this option to enable EVPN Type 5 tag propagation, which is the ability to pass a source GBP tag within the extended BGP communities string of an EVPN Type 5 advertisement. By propagating the source GBP tag across the network, remote endpoints gain the information necessary to enforce GBP policies at their ingress. The specified `<gbp-filter>` must be an IP-based (IP address or IP prefix) GBP filter. This option has no effect if the specified `<gbp-filter>` is not an IP-based filter.
gbp mac-ip-inter-tagging	Allow MAC-based GBP filters and IP-based GBP filters to apply to both routed and switched traffic. If disabled, then MAC-based GBP filters apply only to switched traffic, and IP-based GBP filters apply only to routed traffic. This setting has no effect on other GBP filters, such as port and VLAN GBP filters. Note: The Packet Forwarding Engine (PFE) restarts when you set or delete this option.
gbp tag-only-policy	Allow only GBP source and destination tags as matches in GBP policy. Configuring the IPv4 and IPv6 L4 filters can reduce the supported GBP scale. These matches are supported by default. However, on the EX4650 series, QFX5120-32C, and QFX5120-48Y switches, you can use this option to allow only GBP source and destination tags as matches in GBP policy. Note: The Packet Forwarding Engine (PFE) restarts when you set or delete this option.
host-originated-packets gbp-src-tag `gbp-src-tag`	Insert the specified GBP source tag in all host originated packets. Range for `gbp-src-tag`: 1 through 65535.
reroute-address (inet `address` \| inet6 `address`)	Enable fast reroute egress link protection (ELP) on provider edge (PE) devices for access links to multihomed customer edge (CE) devices in an EVPN-VXLAN fabric. With this statement, you also specify the IPv4 or IPv6 device reroute address, which is a secondary loopback address you configure as the fast reroute ELP tunnel source VTEP address for an Ethernet segment. This feature helps to minimize load-balanced traffic loss when the link from a PE device to a multihomed CE device goes down.
shared-tunnels	Create shared VXLAN tunnel endpoint (VTEP) tunnels to EVPN provider edge (PE) devices to save VTEP resources. Note: When you configure the `shared-tunnels` option, you must reboot the device for the setting to take effect.
vxlan-trans-vni-enable	Enable translated VXLAN network identifiers (VNIs) with Data Center Interconnect (DCI). Note: We require this option on QFX5120 switches when you configure EVPN-VXLAN stitching with EVPN Type 2 routes in DCI topologies. The PFE restarts when you set or delete this option.

The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.

Default

Not enabled

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 22.4R1 for supported EX4100, EX4400, EX4650, and QFX5120 Series switches.

tag-only-policy option introduced in 23.2R1 for the QFX5120-48YM, QFX5120-48Y, and EX4650-48Y Series switches.

reroute-address option introduced in Junos OS 21.3R1 for the QFX5110 and QFX5120 Series swtiches.

shared-tunnels option introduced in Junos OS 20.3R1.

vxlan-trans-vni-enable option introduced in Junos OS 23.2R1 for QFX5120 switches.

gbp ingress-src-tag filter option introduced in Junos OS 24.2R1 for the EX4400, EX4650, and QFX5120 Series switches.

ON THIS PAGE