0
0

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?

EVPN/VXLAN動かしてみた(Part4)

Posted at

前回までの記事
EVPN/VXLAN動かしてみた(Part1)
EVPN/VXLAN動かしてみた(Part2)
EVPN/VXLAN動かしてみた(Part3)

前回の振り返り

・前回は同一Vlan内で離れたホスト同士 End to Endの疎通が取れることを確認しました
・また、パケットキャプチャからMP_REACH_NLRI Type2の広報によってホストのMACを学習していることも確認しました

・今回は、Leaf001配下のVlan100に属するホストと、Leaf003配下のVlan200に属するホストで疎通が取れることを確認します
image.png

image.png
Containerlabを再起動してしまったのでMACアドレスが微妙に変わってます

疎通確認

今回はまずゲートウェイの10.100.0.254にPingを打ってみました。
10.100.0.254はip virtual-router address コマンドで全Leaf同じIPを設定しています
また、ip virtual-router mac-address コマンドでこちらも全LeafのMACを00:00:00:00:00:0aに設定しています
この記事ではあまり関係ないかもしれませんが例えばサーバのvMotionで所属するLeafが変わっても
同一のゲートウェイを提供し続けるという点で必要になってくる設定ですね。

≪Host1≫
image.png
↑10.100.0.254へのARP要求に対してip virtual-router mac-addressで設定したMACで応答しています

≪Leaf001~Spine≫
image.png
↑Leaf001がHost1のMAC/IPを学習後、BGP UpdateがSpine向けに送出されています

Leaf001からのUpdateの中身1 NLRI MAC Advertisement Route(Route Type2)によってHost1のMACが伝搬されています。 ここは前回と一緒です。Extened CommunitieではVlan100に設定したRTが付与されています
1個目のUpdate
Frame 161: 169 bytes on wire (1352 bits), 169 bytes captured (1352 bits) on interface 0
Ethernet II, Src: aa:c1:ab:c7:c3:89 (aa:c1:ab:c7:c3:89), Dst: aa:c1:ab:f1:57:ec (aa:c1:ab:f1:57:ec)
Internet Protocol Version 4, Src: 172.17.0.1, Dst: 172.16.0.1
Transmission Control Protocol, Src Port: 179, Dst Port: 37937, Seq: 245, Ack: 226, Len: 103
Border Gateway Protocol - UPDATE Message
    Marker: ffffffffffffffffffffffffffffffff
    Length: 103
    Type: UPDATE Message (2)
    Withdrawn Routes Length: 0
    Total Path Attribute Length: 80
    Path attributes
        Path Attribute - ORIGIN: IGP
            Flags: 0x40, Transitive, Well-known, Complete
            Type Code: ORIGIN (1)
            Length: 1
            Origin: IGP (0)
        Path Attribute - AS_PATH: 64612 
            Flags: 0x40, Transitive, Well-known, Complete
            Type Code: AS_PATH (2)
            Length: 6
            AS Path segment: 64612
        Path Attribute - MP_REACH_NLRI
            Flags: 0x90, Optional, Extended-Length, Non-transitive, Complete
            Type Code: MP_REACH_NLRI (14)
            Length: 44
            Address family identifier (AFI): Layer-2 VPN (25)
            Subsequent address family identifier (SAFI): EVPN (70)
            Next hop network address (4 bytes)
            Number of Subnetwork points of attachment (SNPA): 0
            Network layer reachability information (35 bytes)
                EVPN NLRI: MAC Advertisement Route
                    Route Type: MAC Advertisement Route (2)
                    Length: 33
                    Route Distinguisher: 00010a00000f0064 (10.0.0.15:100)
                    ESI: 00:00:00:00:00:00:00:00:00:00
                    Ethernet Tag ID: 0
                    MAC Address Length: 48
                    MAC Address: aa:c1:ab:51:ea:01 (aa:c1:ab:51:ea:01)
                    IP Address Length: 0
                    IP Address: NOT INCLUDED
                    0000 0000 0010 0111 0111 .... = MPLS Label 1: 631
        Path Attribute - EXTENDED_COMMUNITIES
            Flags: 0xc0, Optional, Transitive, Complete
            Type Code: EXTENDED_COMMUNITIES (16)
            Length: 16
            Carried extended communities: (2 communities)
                Route Target: 100:10100 [Transitive 2-Octet AS-Specific]
                Encapsulation: VXLAN Encapsulation [Transitive Opaque]
Leaf001からのUpdateの中身2 NLRI MAC Advertisement Route(Route Type2)によってHost1のMACが伝搬されています。 1個目と異なる点として、Host1のIPアドレスもAdvertiseされています。 1個目のUpdateに含めればいいのにと思いましたが別のUpdateとして出す理由はあるのですかね??

また、Extened Communitieでは、VRFに設定したRTも新たに付与されていることが確認できます

2個目のUpdate
Frame 163: 192 bytes on wire (1536 bits), 192 bytes captured (1536 bits) on interface 0
Ethernet II, Src: aa:c1:ab:c7:c3:89 (aa:c1:ab:c7:c3:89), Dst: aa:c1:ab:f1:57:ec (aa:c1:ab:f1:57:ec)
Internet Protocol Version 4, Src: 172.17.0.1, Dst: 172.16.0.1
Transmission Control Protocol, Src Port: 179, Dst Port: 37937, Seq: 348, Ack: 226, Len: 126
Border Gateway Protocol - UPDATE Message
    Marker: ffffffffffffffffffffffffffffffff
    Length: 126
    Type: UPDATE Message (2)
    Withdrawn Routes Length: 0
    Total Path Attribute Length: 103
    Path attributes
        Path Attribute - ORIGIN: IGP
            Flags: 0x40, Transitive, Well-known, Complete
            Type Code: ORIGIN (1)
            Length: 1
            Origin: IGP (0)
        Path Attribute - AS_PATH: 64612 
            Flags: 0x40, Transitive, Well-known, Complete
            Type Code: AS_PATH (2)
            Length: 6
            AS Path segment: 64612
        Path Attribute - MP_REACH_NLRI
            Flags: 0x90, Optional, Extended-Length, Non-transitive, Complete
            Type Code: MP_REACH_NLRI (14)
            Length: 51
            Address family identifier (AFI): Layer-2 VPN (25)
            Subsequent address family identifier (SAFI): EVPN (70)
            Next hop network address (4 bytes)
            Number of Subnetwork points of attachment (SNPA): 0
            Network layer reachability information (42 bytes)
                EVPN NLRI: MAC Advertisement Route
                    Route Type: MAC Advertisement Route (2)
                    Length: 40
                    Route Distinguisher: 00010a00000f0064 (10.0.0.15:100)
                    ESI: 00:00:00:00:00:00:00:00:00:00
                    Ethernet Tag ID: 0
                    MAC Address Length: 48
                    MAC Address: aa:c1:ab:51:ea:01 (aa:c1:ab:51:ea:01)
                    IP Address Length: 32
                    IPv4 address: 10.100.0.1
                    0000 0000 0010 0111 0111 .... = MPLS Label 1: 631
                    0000 0000 0010 0111 0000 .... = MPLS Label 2: 624
        Path Attribute - EXTENDED_COMMUNITIES
            Flags: 0xc0, Optional, Transitive, Complete
            Type Code: EXTENDED_COMMUNITIES (16)
            Length: 32
            Carried extended communities: (4 communities)
                Route Target: 99:9999 [Transitive 2-Octet AS-Specific]
                Route Target: 100:10100 [Transitive 2-Octet AS-Specific]
                Encapsulation: VXLAN Encapsulation [Transitive Opaque]
                Unknown subtype 0x03: 0x001c 0x7367 0x6f79 [Transitive EVPN]

これらのUpdateは、SpineからLeaf002、Leaf003へ伝搬されています
≪Spine~Leaf002,Leaf003≫
image.png
image.png
Host2の情報も同様に、Leaf003のRouteType2によってFabricへ広報されていました。(省略)

この時の各LeafスイッチのMAC,IP学習状況を見てみます

Leaf001

・show bgp evpn:Host2のMACアドレスとIPをEVPNで学習
・show ip arp vrf VRF-1:EVPNで学習したためARPテーブルにもEntry
・show ip route vrf VRF-1:host1へのホストルートをBGP(EVPN)で学習
             Leaf003から広報されたUPDATEのExtened Communitieに99:9999のRTが付与されていたためImport条件と一致したことでRoutetableにImport

==== show bgp evpn ====
BGP routing table information for VRF default
Router identifier 172.17.0.1, local AS number 64612
Route status codes: * - valid, > - active, S - Stale, E - ECMP head, e - ECMP
                    c - Contributing to ECMP, % - Pending best path selection
Origin codes: i - IGP, e - EGP, ? - incomplete
AS Path Attributes: Or-ID - Originator ID, C-LST - Cluster List, LL Nexthop - Link Local Nexthop
          Network                Next Hop              Metric  LocPref Weight  Path
 * >Ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9
                                 10.0.0.17             -       100     0       64512 64614 i
 *  ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9
                                 10.0.0.17             -       100     0       64512 64614 i
 * >Ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9 10.200.0.1
                                 10.0.0.17             -       100     0       64512 64614 i
 *  ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9 10.200.0.1
                                 10.0.0.17             -       100     0       64512 64614 i
 * >      RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01
                                 -                     -       -       0       i
 * >      RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01 10.100.0.1
 ##---ip-prefix(RouteType5はすでに学習済みでPCAPで拾えませんでした。。)
 * >      RD: 10.0.0.15:9999 ip-prefix 10.100.0.0/24
                                 -                     -       -       0       i
 * >Ec    RD: 10.0.0.16:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.16             -       100     0       64512 64613 i
 *  ec    RD: 10.0.0.16:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.16             -       100     0       64512 64613 i
 * >Ec    RD: 10.0.0.17:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.17             -       100     0       64512 64614 i
 *  ec    RD: 10.0.0.17:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.17             -       100     0       64512 64614 i
 * >      RD: 10.0.0.15:9999 ip-prefix 10.200.0.0/24
                                 -                     -       -       0       i
 * >Ec    RD: 10.0.0.16:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.16             -       100     0       64512 64613 i
 *  ec    RD: 10.0.0.16:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.16             -       100     0       64512 64613 i
 * >Ec    RD: 10.0.0.17:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.17             -       100     0       64512 64614 i
 *  ec    RD: 10.0.0.17:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.17             -       100     0       64512 64614 i

=== show ip arp vrf VRF-1 ====
Address         Age (sec)  Hardware Addr   Interface
10.100.0.1        0:01:38  aac1.ab51.ea01  Vlan100, Ethernet3
10.200.0.1              -  aac1.ab1c.65a9  Vlan200, Vxlan1
=== show ip route vrf VRF-1 ====
VRF: VRF-1
Source Codes:
       C - connected, S - static, K - kernel,
       O - OSPF, IA - OSPF inter area, E1 - OSPF external type 1,
       E2 - OSPF external type 2, N1 - OSPF NSSA external type 1,
       N2 - OSPF NSSA external type2, B - Other BGP Routes,
       B I - iBGP, B E - eBGP, R - RIP, I L1 - IS-IS level 1,
       I L2 - IS-IS level 2, O3 - OSPFv3, A B - BGP Aggregate,
       A O - OSPF Summary, NG - Nexthop Group Static Route,
       V - VXLAN Control Service, M - Martian,
       DH - DHCP client installed default route,
       DP - Dynamic Policy Route, L - VRF Leaked,
       G  - gRIBI, RC - Route Cache Route,
       CL - CBF Leaked Route

Gateway of last resort is not set

 C        10.100.0.0/24
           directly connected, Vlan100
 B E      10.200.0.1/32 [20/0]
           via VTEP 10.0.0.17 VNI 9999 router-mac 00:1c:73:20:d1:77 local-interface Vxlan1
 C        10.200.0.0/24
           directly connected, Vlan200
Leaf003

Leaf001と同様

==== show bgp evpn ====
BGP routing table information for VRF default
Router identifier 172.17.0.3, local AS number 64614
Route status codes: * - valid, > - active, S - Stale, E - ECMP head, e - ECMP
                    c - Contributing to ECMP, % - Pending best path selection
Origin codes: i - IGP, e - EGP, ? - incomplete
AS Path Attributes: Or-ID - Originator ID, C-LST - Cluster List, LL Nexthop - Link Local Nexthop

          Network                Next Hop              Metric  LocPref Weight  Path
 * >      RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9
                                 -                     -       -       0       i
 * >      RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9 10.200.0.1
                                 -                     -       -       0       i
 * >Ec    RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01
                                 10.0.0.15             -       100     0       64512 64612 i
 *  ec    RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01
                                 10.0.0.15             -       100     0       64512 64612 i
 * >Ec    RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01 10.100.0.1
                                 10.0.0.15             -       100     0       64512 64612 i
 *  ec    RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01 10.100.0.1
                                 10.0.0.15             -       100     0       64512 64612 i
 * >Ec    RD: 10.0.0.15:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.15             -       100     0       64512 64612 i
 *  ec    RD: 10.0.0.15:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.15             -       100     0       64512 64612 i
 * >Ec    RD: 10.0.0.16:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.16             -       100     0       64512 64613 i
 *  ec    RD: 10.0.0.16:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.16             -       100     0       64512 64613 i
 * >      RD: 10.0.0.17:9999 ip-prefix 10.100.0.0/24
                                 -                     -       -       0       i
 * >Ec    RD: 10.0.0.15:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.15             -       100     0       64512 64612 i
 *  ec    RD: 10.0.0.15:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.15             -       100     0       64512 64612 i
 * >Ec    RD: 10.0.0.16:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.16             -       100     0       64512 64613 i
 *  ec    RD: 10.0.0.16:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.16             -       100     0       64512 64613 i
 * >      RD: 10.0.0.17:9999 ip-prefix 10.200.0.0/24
                                 -                     -       -       0       i
=== show ip arp vrf VRF-1 ====
Address         Age (sec)  Hardware Addr   Interface
10.100.0.1              -  aac1.ab51.ea01  Vlan100, Vxlan1
10.200.0.1        0:02:05  aac1.ab1c.65a9  Vlan200, Ethernet3
=== show ip route vrf VRF-1 ====
VRF: VRF-1
Source Codes:
       C - connected, S - static, K - kernel,
       O - OSPF, IA - OSPF inter area, E1 - OSPF external type 1,
       E2 - OSPF external type 2, N1 - OSPF NSSA external type 1,
       N2 - OSPF NSSA external type2, B - Other BGP Routes,
       B I - iBGP, B E - eBGP, R - RIP, I L1 - IS-IS level 1,
       I L2 - IS-IS level 2, O3 - OSPFv3, A B - BGP Aggregate,
       A O - OSPF Summary, NG - Nexthop Group Static Route,
       V - VXLAN Control Service, M - Martian,
       DH - DHCP client installed default route,
       DP - Dynamic Policy Route, L - VRF Leaked,
       G  - gRIBI, RC - Route Cache Route,
       CL - CBF Leaked Route

Gateway of last resort is not set

 B E      10.100.0.1/32 [20/0]
           via VTEP 10.0.0.15 VNI 9999 router-mac 00:1c:73:67:6f:79 local-interface Vxlan1
 C        10.100.0.0/24
           directly connected, Vlan100
 C        10.200.0.0/24
           directly connected, Vlan200

もちろんLeaf002も同様にHost1、Host3の情報を学習できています
Leaf002

Leaf001と同様

==== show bgp evpn ====
BGP routing table information for VRF default
Router identifier 172.17.0.2, local AS number 64613
Route status codes: * - valid, > - active, S - Stale, E - ECMP head, e - ECMP
                    c - Contributing to ECMP, % - Pending best path selection
Origin codes: i - IGP, e - EGP, ? - incomplete
AS Path Attributes: Or-ID - Originator ID, C-LST - Cluster List, LL Nexthop - Link Local Nexthop

          Network                Next Hop              Metric  LocPref Weight  Path
 * >Ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9
                                 10.0.0.17             -       100     0       64512 64614 i
 *  ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9
                                 10.0.0.17             -       100     0       64512 64614 i
 * >Ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9 10.200.0.1
                                 10.0.0.17             -       100     0       64512 64614 i
 *  ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9 10.200.0.1
                                 10.0.0.17             -       100     0       64512 64614 i
 * >Ec    RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01
                                 10.0.0.15             -       100     0       64512 64612 i
 *  ec    RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01
                                 10.0.0.15             -       100     0       64512 64612 i
 * >Ec    RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01 10.100.0.1
                                 10.0.0.15             -       100     0       64512 64612 i
 *  ec    RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01 10.100.0.1
                                 10.0.0.15             -       100     0       64512 64612 i
 * >Ec    RD: 10.0.0.15:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.15             -       100     0       64512 64612 i
 *  ec    RD: 10.0.0.15:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.15             -       100     0       64512 64612 i
 * >      RD: 10.0.0.16:9999 ip-prefix 10.100.0.0/24
                                 -                     -       -       0       i
 * >Ec    RD: 10.0.0.17:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.17             -       100     0       64512 64614 i
 *  ec    RD: 10.0.0.17:9999 ip-prefix 10.100.0.0/24
                                 10.0.0.17             -       100     0       64512 64614 i
 * >Ec    RD: 10.0.0.15:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.15             -       100     0       64512 64612 i
 *  ec    RD: 10.0.0.15:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.15             -       100     0       64512 64612 i
 * >      RD: 10.0.0.16:9999 ip-prefix 10.200.0.0/24
                                 -                     -       -       0       i
 * >Ec    RD: 10.0.0.17:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.17             -       100     0       64512 64614 i
 *  ec    RD: 10.0.0.17:9999 ip-prefix 10.200.0.0/24
                                 10.0.0.17             -       100     0       64512 64614 i
=== show ip arp vrf VRF-1 ====
Address         Age (sec)  Hardware Addr   Interface
10.100.0.1              -  aac1.ab51.ea01  Vlan100, Vxlan1
10.200.0.1              -  aac1.ab1c.65a9  Vlan200, Vxlan1
=== show ip route vrf VRF-1 ====
VRF: VRF-1
Source Codes:
       C - connected, S - static, K - kernel,
       O - OSPF, IA - OSPF inter area, E1 - OSPF external type 1,
       E2 - OSPF external type 2, N1 - OSPF NSSA external type 1,
       N2 - OSPF NSSA external type2, B - Other BGP Routes,
       B I - iBGP, B E - eBGP, R - RIP, I L1 - IS-IS level 1,
       I L2 - IS-IS level 2, O3 - OSPFv3, A B - BGP Aggregate,
       A O - OSPF Summary, NG - Nexthop Group Static Route,
       V - VXLAN Control Service, M - Martian,
       DH - DHCP client installed default route,
       DP - Dynamic Policy Route, L - VRF Leaked,
       G  - gRIBI, RC - Route Cache Route,
       CL - CBF Leaked Route

Gateway of last resort is not set

 B E      10.100.0.1/32 [20/0]
           via VTEP 10.0.0.15 VNI 9999 router-mac 00:1c:73:67:6f:79 local-interface Vxlan1
 C        10.100.0.0/24
           directly connected, Vlan100
 B E      10.200.0.1/32 [20/0]
           via VTEP 10.0.0.17 VNI 9999 router-mac 00:1c:73:20:d1:77 local-interface Vxlan1
 C        10.200.0.0/24
           directly connected, Vlan200

なお前回、何も学習していない状態でHost同士のICMPを実行した際は、Host1->Host2のARP、Host2->Host1のARPがそれぞれVXLANカプセル化されてお互いに届いていました
今回そういった挙動は見られなかったので、Hostの情報が予めVTEP間で学習されている状態であれば
そのようなARPは抑制されそうですね
前回:EVPN/VXLAN動かしてみた(Part3)

ICMPパケット

EVPNでの学習を経てHost1⇔Host3のVXLANルーティングができました
≪Host1≫
image.png
Host1側で取得したPCAPなのでここではまだVXLANカプセル化は行われていない状態です

PCAP
Frame 140: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) on interface 0
Ethernet II, Src: aa:c1:ab:51:ea:01 (aa:c1:ab:51:ea:01), Dst: 00:00:00_00:00:0a (00:00:00:00:00:0a)
Internet Protocol Version 4, Src: 10.100.0.1, Dst: 10.200.0.1
Internet Control Message Protocol

Leaf001~Spine間で取得したPCAPをみていきます
行きはSpine002、戻りはSpine001を経由しているのでPCAPが分かれてます
が、VXLANカプセル化されていることが確認できます
image.png

:point_down: 同一Vlanでの通信時はVXLANヘッダのVNIはL2VNI(Vlanに紐づくVNI)でしたが、
  VLAN間通信の場合L3VNI(VRFに紐づくVNI)でカプセル化されているという違いがあることがわかりました
image.png

image.png

単純な構成ですがVXLANによるVLAN間通信も確認することができました
今後はマルチテナント構成だったりファブリック外部とのルートのやり取りを見ていきたいと思います!

おわり

補足:RT不一致による挙動

:high_brightness: そういえばMAC-IPのAdvertise時のExtened CommunitieにてVRFで指定したRTが付与されていました、
これを試しにLeaf001のImport設定を88:8888など、受信するRTと異なる設定に変更した場合に
どのような動きになるか気になりますね。おそらくRoutetableにホストルートが見えなくなるのかなと。

今の設定
router bgp 64612
   !
   vrf VRF-1
      rd 10.0.0.15:9999
      route-target import 99:9999
      route-target export 99:9999
      redistribute connected
変更後
Leaf001(config-router-bgp-vrf-VRF-1)#show active
router bgp 64612
   vrf VRF-1
      rd 10.0.0.15:9999
      route-target import 88:8888
      route-target export 99:9999
      redistribute connected
Leaf001(config-router-bgp-vrf-VRF-1)#

パケットキャプチャ上ではLeaf003からのUPDATEを受信しています
image.png

RouteType2は受信しているが、Route-Tableにはホストルートはインストールされていないという状態

=== show ip route vrf VRF-1 ====
Leaf001#show bgp evpn route-type ip-prefix ipv4mac-ip
BGP routing table information for VRF default
Router identifier 172.17.0.1, local AS number 64612
Route status codes: * - valid, > - active, S - Stale, E - ECMP head, e - ECMP
                    c - Contributing to ECMP, % - Pending best path selection
Origin codes: i - IGP, e - EGP, ? - incomplete
AS Path Attributes: Or-ID - Originator ID, C-LST - Cluster List, LL Nexthop - Link Local Nexthop

          Network                Next Hop              Metric  LocPref Weight  Path
 * >Ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9
                                 10.0.0.17             -       100     0       64512 64614 i
 *  ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9
                                 10.0.0.17             -       100     0       64512 64614 i
 * >Ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9 10.200.0.1
                                 10.0.0.17             -       100     0       64512 64614 i
 *  ec    RD: 10.0.0.17:200 mac-ip aac1.ab1c.65a9 10.200.0.1
                                 10.0.0.17             -       100     0       64512 64614 i
 * >      RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01
                                 -                     -       -       0       i
 * >      RD: 10.0.0.15:100 mac-ip aac1.ab51.ea01 10.100.0.1
                                 -                     -       -       0       i
Leaf001#
Leaf001#show macip arp VRvrf VLeaf001#show ip arp vrf VRF-1 
Address         Age (sec)  Hardware Addr   Interface
10.100.0.1        1:24:40  aac1.ab51.ea01  Vlan100, Ethernet3
10.200.0.1              -  aac1.ab1c.65a9  Vlan200, Vxlan1
10.200.0.200      0:01:50  aac1.ab1c.65a9  Vlan200, Vxlan1
Leaf001#show ip roLeaf001#show ip route vrf VRLeaf001#show ip route vrf VRF-1 

VRF: VRF-1
Source Codes:
       C - connected, S - static, K - kernel,
       O - OSPF, IA - OSPF inter area, E1 - OSPF external type 1,
       E2 - OSPF external type 2, N1 - OSPF NSSA external type 1,
       N2 - OSPF NSSA external type2, B - Other BGP Routes,
       B I - iBGP, B E - eBGP, R - RIP, I L1 - IS-IS level 1,
       I L2 - IS-IS level 2, O3 - OSPFv3, A B - BGP Aggregate,
       A O - OSPF Summary, NG - Nexthop Group Static Route,
       V - VXLAN Control Service, M - Martian,
       DH - DHCP client installed default route,
       DP - Dynamic Policy Route, L - VRF Leaked,
       G  - gRIBI, RC - Route Cache Route,
       CL - CBF Leaked Route

Gateway of last resort is not set

 C        10.100.0.0/24
           directly connected, Vlan100
 C        10.200.0.0/24
           directly connected, Vlan200

Leaf001#

ただこの状態でも通信は成功しており、VXLANヘッダをよく見ると
・行き:L2VNI(Vlan100)でカプセル化
・戻り:L3VNI(VRF)でカプセル化
となっている。。
≪行き≫
image.png
≪戻り≫
image.png

RTの不一致はそもそも適切な状態ではないと思うのであまり気にしなくてもいいのかもですが、、
個人的には疎通も取れない状態になると想像してたので、、どなたか理屈がわかったらご教授いただけると嬉しいですmm

0
0
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
0
0

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?