Sample configuration for Border Leaf switches

Border Leaf

As we need to advertise our Underlay routing into the EVPN domain, we will add a BGP instance on the Border Leaf connected to the WAN.

Configuring the VTEP connected to the WAN

net add bgp autonomous-system 65006
net add vrf vrf-mgmt vni 104001 prefix-routes-only
net add bgp router-id 10.130.199.6
net add bgp bestpath as-path multipath-relax
net add bgp neighbor FABRIC peer-group
net add bgp neighbor FABRIC remote-as external
net add bgp neighbor FABRIC capability extended-nexthop
net add bgp neighbor swp16 interface peer-group FABRIC
net add bgp ipv4 unicast network 10.130.199.6/32
net add bgp ipv4 unicast redistribute connected
net add bgp ipv4 unicast redistribute static
net add bgp ipv6 unicast neighbor FABRIC activate
net add bgp l2vpn evpn  neighbor FABRIC activate
net add bgp l2vpn evpn  advertise-all-vni
net add bgp l2vpn evpn  advertise-svi-ip
net add bgp l2vpn evpn  advertise ipv4 unicast
net add bgp vrf vrf-mgmt autonomous-system 65006
net add bgp vrf vrf-mgmt router-id 10.130.199.6
net add bgp vrf vrf-mgmt ipv4 unicast network 10.253.253.128/29
net add bgp vrf vrf-mgmt ipv4 unicast redistribute static
net add bgp vrf vrf-mgmt ipv4 unicast redistribute ospf
net add bgp vrf vrf-mgmt l2vpn evpn  advertise ipv4 unicast
net add bgp vrf vrf-mgmt l2vpn evpn  default-originate ipv4
net add bgp vrf vrf-mgmt l2vpn evpn  default-originate ipv6
net add interface swp1-16 breakout 1x
net add vxlan vxlan350 vxlan id 100350
net add vxlan vxlan351 vxlan id 100351
net add vxlan vxlan352 vxlan id 100352
net add vxlan vxlan353 vxlan id 100353
net add vxlan vxlan354 vxlan id 100354
net add vxlan vxlan_BLS_303 vxlan id 100303
net add vxlan vxlan_CAN_305 vxlan id 100305
net add vxlan vxlan_CLM_302 vxlan id 100302
net add vxlan vxlan_L3_4001 vxlan id 104001
net add vxlan vxlan_OAM_304 vxlan id 100304
net add vxlan vxlan_PXE_301 vxlan id 100301
net add bridge bridge ports swp1,vxlan_BLS_303,vxlan_CAN_305,vxlan_CLM_302,vxlan_L3_4001,vxlan_OAM_304,vxlan_PXE_301,vxlan350,vxlan351,vxlan352,vxlan353,vxlan354
net add bridge bridge pvid 4030
net add bridge bridge vids 301-305,350-399,4001,4030
net add bridge bridge vlan-aware
net add interface swp1,16 mtu 9216
net add interface swp2-15
net add loopback lo ip address 10.130.199.6/32
net add vlan 301 ip address 10.130.1.6/24
net add vlan 301 ip address-virtual 00:00:00:00:00:1a 10.130.1.1/24
net add vlan 301 vlan-id 301
net add vlan 301 vlan-raw-device bridge
net add vlan 301 vrf vrf-mgmt
net add vlan 302 ip address 10.130.2.6/24
net add vlan 302 ip address-virtual 00:00:00:00:00:2a 10.130.2.1/24
net add vlan 302 vlan-id 302
net add vlan 302 vlan-raw-device bridge
net add vlan 302 vrf vrf-mgmt
net add vlan 303 ip address 10.130.3.6/24
net add vlan 303 ip address-virtual 00:00:00:00:00:3a 10.130.3.1/24
net add vlan 303 vlan-id 303
net add vlan 303 vlan-raw-device bridge
net add vlan 303 vrf vrf-mgmt
net add vlan 304 vlan-id 304
net add vlan 304 vlan-raw-device bridge
net add vlan 304 vrf vrf-mgmt
net add vlan 305 vlan-id 305
net add vlan 305 vlan-raw-device bridge
net add vlan 305 vrf vrf-mgmt
net add vlan 350 vlan-id 350
net add vlan 350 vlan-raw-device bridge
net add vlan 350 vrf vrf-data
net add vlan 351 vlan-id 351
net add vlan 351 vlan-raw-device bridge
net add vlan 351 vrf vrf-data
net add vlan 352 vlan-id 352
net add vlan 352 vlan-raw-device bridge
net add vlan 352 vrf vrf-data
net add vlan 353 vlan-id 353
net add vlan 353 vlan-raw-device bridge
net add vlan 353 vrf vrf-data
net add vlan 354 vlan-id 354
net add vlan 354 vlan-raw-device bridge
net add vlan 354 vrf vrf-data
net add vlan 399 vlan-id 399
net add vlan 399 vlan-raw-device bridge
net add vlan 399 vrf vrf-data
net add vlan 4001 vlan-id 4001
net add vlan 4001 vlan-raw-device bridge
net add vlan 4001 vrf vrf-mgmt
net add vlan 4030 ip address 10.253.253.130/29
net add vlan 4030 vlan-id 4030
net add vlan 4030 vlan-raw-device bridge
net add vlan 4030 vrf vrf-mgmt
net add vrf vrf-data,vrf-mgmt vrf-table auto
net add vxlan vxlan350 bridge access 350
net add vxlan vxlan350-354,vxlan_BLS_303,vxlan_CAN_305,vxlan_CLM_302,vxlan_L3_4001,vxlan_OAM_304,vxlan_PXE_301 bridge arp-nd-suppress on
net add vxlan vxlan350-354,vxlan_BLS_303,vxlan_CAN_305,vxlan_CLM_302,vxlan_L3_4001,vxlan_OAM_304,vxlan_PXE_301 bridge learning off
net add vxlan vxlan350-354,vxlan_BLS_303,vxlan_CAN_305,vxlan_CLM_302,vxlan_L3_4001,vxlan_OAM_304,vxlan_PXE_301 mtu 9216
net add vxlan vxlan350-354,vxlan_BLS_303,vxlan_CAN_305,vxlan_CLM_302,vxlan_L3_4001,vxlan_OAM_304,vxlan_PXE_301 stp bpduguard
net add vxlan vxlan350-354,vxlan_BLS_303,vxlan_CAN_305,vxlan_CLM_302,vxlan_L3_4001,vxlan_OAM_304,vxlan_PXE_301 stp portbpdufilter
net add vxlan vxlan350-354,vxlan_BLS_303,vxlan_CAN_305,vxlan_CLM_302,vxlan_L3_4001,vxlan_OAM_304,vxlan_PXE_301 vxlan local-tunnelip 10.130.199.6
net add vxlan vxlan351 bridge access 351
net add vxlan vxlan352 bridge access 352
net add vxlan vxlan353 bridge access 353
net add vxlan vxlan354 bridge access 354
net add vxlan vxlan_BLS_303 bridge access 303
net add vxlan vxlan_CAN_305 bridge access 305
net add vxlan vxlan_CLM_302 bridge access 302
net add vxlan vxlan_L3_4001 bridge access 4001
net add vxlan vxlan_OAM_304 bridge access 304
net add vxlan vxlan_PXE_301 bridge access 301
net add hostname LEAF