Data Center

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



  • 1.  Need assistance for DCI L3 gateway

    Posted 09-04-2021 05:17
    I have two Data Centers running EVPN/vXLAN on spine nodes.  On the PE routers on both Data Centers, I run EVPN-MPLS stitching with Spine nodes. L2 works fine for intra and inter Data Centers. But L3 only  works one direction.  From Data Center A, the devices can reach the devices in Data Center B for inter subnets.  But not the other way.  Within the Data Center,  inter-subnets works fine in both Data Centers.

    Any insights and any suggestions where I should look into ?

    thanks !!


  • 2.  RE: Need assistance for DCI L3 gateway

    Posted 09-04-2021 11:09
    Do you have the Type-5 route exchanged between DCs, meaning, can you see the Prefix route on each site?

    Elvin


  • 3.  RE: Need assistance for DCI L3 gateway

    Posted 09-05-2021 05:44
    Sorry, I did not explain it clearly.
    I meant L3 gateways route networks between vxlan networks, not route the networks between the data centers.
    So I do not need type 5.
     I have the following topology

    My issue is
    Any vlan in DC-1 can reach different vlan in DC-2, but not reverse.
    The same vlan is reachable from any direction.
    the different vlan can reach reach other within the DC itself.

    thanks a lot for taking a look !!



  • 4.  RE: Need assistance for DCI L3 gateway

    Posted 09-06-2021 14:03
    I think it might be related to the vMX image. not behaved consistently. I have the following the configuration to stitch EVPN/vXLAN and EVPN/MPLS.
    set logical-systems Core-1 interfaces ge-0/0/3 unit 0 family inet address 172.17.0.2/30
    set logical-systems Core-1 interfaces ge-0/0/3 unit 0 family mpls
    set logical-systems Core-1 interfaces lt-0/0/10 unit 3 encapsulation ethernet-bridge
    set logical-systems Core-1 interfaces lt-0/0/10 unit 3 peer-unit 2
    set logical-systems Core-1 interfaces lt-0/0/10 unit 3 family bridge interface-mode trunk
    set logical-systems Core-1 interfaces lt-0/0/10 unit 3 family bridge vlan-id-list 100-101
    set logical-systems Core-1 interfaces lo0 unit 1 family inet address 192.168.100.1/32
    set logical-systems Core-1 protocols mpls interface ge-0/0/3.0
    set logical-systems Core-1 protocols bgp group dcp type internal
    set logical-systems Core-1 protocols bgp group dcp local-address 192.168.100.1
    set logical-systems Core-1 protocols bgp group dcp family evpn signaling
    set logical-systems Core-1 protocols bgp group dcp local-as 11111
    set logical-systems Core-1 protocols bgp group dcp neighbor 192.168.100.2
    set logical-systems Core-1 protocols bgp group dcp neighbor 192.168.100.3
    set logical-systems Core-1 protocols bgp group dcp neighbor 192.168.100.4
    set logical-systems Core-1 protocols ospf area 0.0.0.0 interface ge-0/0/3.0 interface-type p2p
    set logical-systems Core-1 protocols ospf area 0.0.0.0 interface lo0.1 passive
    set logical-systems Core-1 protocols ldp interface ge-0/0/3.0
    set logical-systems Core-1 routing-instances EVPN-MPLS instance-type virtual-switch
    set logical-systems Core-1 routing-instances EVPN-MPLS interface lt-0/0/10.3
    set logical-systems Core-1 routing-instances EVPN-MPLS route-distinguisher 192.168.100.1:1
    set logical-systems Core-1 routing-instances EVPN-MPLS vrf-target target:65500:11111
    set logical-systems Core-1 routing-instances EVPN-MPLS protocols evpn extended-vlan-list 100-101
    set logical-systems Core-1 routing-instances EVPN-MPLS bridge-domains BD100 domain-type bridge
    set logical-systems Core-1 routing-instances EVPN-MPLS bridge-domains BD100 vlan-id 100
    set logical-systems Core-1 routing-instances EVPN-MPLS bridge-domains BD101 domain-type bridge
    set logical-systems Core-1 routing-instances EVPN-MPLS bridge-domains BD101 vlan-id 101
    
    set routing-instances EVPN1 vtep-source-interface lo0.0
    set routing-instances EVPN1 instance-type virtual-switch
    set routing-instances EVPN1 interface lt-0/0/10.2
    set routing-instances EVPN1 vrf-import import-fabric
    set routing-instances EVPN1 vrf-target target:1:1
    set routing-instances EVPN1 vrf-target auto
    set routing-instances EVPN1 protocols evpn encapsulation vxlan
    set routing-instances EVPN1 protocols evpn extended-vni-list 100
    set routing-instances EVPN1 protocols evpn extended-vni-list 101
    set routing-instances EVPN1 protocols evpn vni-options vni 100 vrf-target target:100:100
    set routing-instances EVPN1 protocols evpn vni-options vni 101 vrf-target target:101:101
    set routing-instances EVPN1 protocols evpn multicast-mode ingress-replication
    set routing-instances EVPN1 bridge-domains BD100 domain-type bridge
    set routing-instances EVPN1 bridge-domains BD100 vlan-id 100
    set routing-instances EVPN1 bridge-domains BD100 routing-interface irb.100
    set routing-instances EVPN1 bridge-domains BD100 vxlan vni 100
    set routing-instances EVPN1 bridge-domains BD101 domain-type bridge
    set routing-instances EVPN1 bridge-domains BD101 vlan-id 101
    set routing-instances EVPN1 bridge-domains BD101 routing-interface irb.101
    set routing-instances EVPN1 bridge-domains BD101 vxlan vni 101
    
    set interfaces irb unit 100 virtual-gateway-accept-data
    set interfaces irb unit 100 family inet address 173.173.100.251/24 virtual-gateway-address 173.173.100.254
    set interfaces irb unit 101 virtual-gateway-accept-data
    set interfaces irb unit 101 family inet address 173.173.101.251/24 virtual-gateway-address 173.173.101.254
    ​

    anything wrong here ?

    thanks !!


  • 5.  RE: Need assistance for DCI L3 gateway

    Posted 09-07-2021 08:56
    Hi ,

    Good day !
    As the same vlan is used , there will be no type 5 routes that are generated but you need to have type 2 routes and a VTEP to the other DCI leaf 

    As you have confirmed that there is reachability between DC1 to DC2 , this confirm type 2 routes are update and there is reverse path.

    If only DC2 to DC1 is affected then there might be a filter or it can be a device issue .

    Note : i checked the configuration it looks good 

    -Sharanya


  • 6.  RE: Need assistance for DCI L3 gateway

    Posted 09-07-2021 13:24
    thanks for confirming my configuration!!


  • 7.  RE: Need assistance for DCI L3 gateway

    Posted 09-09-2021 05:37
    Hi 

    No problem .

    -Sharanya