You can configure an Ethernet VPN (EVPN) with virtual
switch support to enable multiple tenants with independent VLAN and
subnet space within an EVPN instance. Virtual switch provides the
ability to extend Ethernet VLANs over a WAN using a single EVPN instance
while maintaining data-plane separation between the various VLANs
associated with that instance. A single EVPN instance can stretch
up to 4094 bridge domains defined in a virtual switch to remote sites.
When configuring virtual switch for EVPN, be aware of
the following considerations:
Due to default ARP policing, some of the ARP packets not
destined for the device can be missed. This can lead to delayed ARP
learning and synchronization.
Clearing ARP for an EVPN can lead to inconsistency between
the ARP table and the EVPN ARP table. To avoid this situation, clear
both ARP and EVPN ARP tables.
The vlan-tag
can be configured for local switching.
However, vlan-tagged VLANs should not be extended over the EVPN cloud.
This task explains how to configure one Virtual Switch
instance that includes one VLAN.
- Configure the virtual switch routing instance.
[edit routing-instances]
user@PE1# set evpn-instance instance-type virtual-switch
- Configure the interface names for the virtual switch routing
instance.
[edit routing-instances]
user@PE1# set evpn-instance interface interface-name
- Configure the route distinguisher for the virtual switch
routing instance.
[edit routing-instances]
user@PE1# set evpn-instance route-distinguisher route-distinguisher-value
- Configure the VPN routing and forwarding (VRF) target
community for the virtual switch routing instance.
[edit routing-instances]
user@PE1# set evpn-instance vrf-target vrf-target
- List the VLAN identifiers that are to be EVPN extended.
[edit routing-instances]
user@PE1# set evpn-instance protocols evpn extended-vni-list [vlan-id-range]
- Configure the VLAN and VLAN ID for the virtual switch
routing instance.
[edit routing-instances]
user@PE1# set evpn-instance vlans name of VLAN vlan-id VLAN ID number
- Configure VXLAN encapsulation and Virtual Network Identifier
for the virtual switch routing instance.
[edit routing-instances]
user@PE1# set evpn-instance vxlan vni VNI number
- Configure the virtual tunnel endpoint source interface
for the virtual switch routing instance.
[edit routing-instances]
user@PE1# set evpn-instance vtep-source-interface interface-name
- Verify and commit the configuration.
[edit]
user@PE1# commit
commit complete