Data Center

 View Only
last person joined: 6 days ago 

Ask questions and share experiences about Data Center Architecture and approaches.
  • 1.  Static ARP and EVPN VXLAN

    Posted 07-12-2025 00:50

    Hi everyone,

    I am trying to find out if there is a way to advertise static MAC tied to static arp across VXLAN.

          Device1 100.100.100.2   ----V100-------L1---VXLAN-fabric------BL3---ae1------Monitoring device

    Objective:

         We are using ERSPAN above where device1 is sending some traffic inside GRE with SRC IP 100.100.100.2, DST 100.100.100.14 with vlan tag 100

        L1 and BL3 are  performing ERB vlan 100  mapped to 1001. Both have irb.100 , 100.100.100.13/29

       Monitoring device do not support ERSPAN, as a work around, a static arp 100.100.100.14 is created on irb.100,  this will allow BL3 simply forward traffic received from VXLAN fabric from Device1 to Monitoring tool.

    ISSUE:

    Even though  I have configured static arp for 100.100.100.14 with mac publish  option under irb.100  on BL3,  BL3 does not responds to any arp request from device1 for 100.100.100.14. I  can see device1 arp request VXLAN switched by L1 towards to BL3, but BL3 does not respond to ARP request, it seems to me publish option under static arp is ignored if ARP request is received over a vtep.

    Is there anyway can we   tell BL3 to respond to arp request received over  vtep, for 100.100.100.14?

    Below is sample config on BL3:

      BL3:

    set routing-instances evpn-1 instance-type mac-vrf
    set routing-instances evpn-1 protocols evpn encapsulation vxlan
    set routing-instances evpn-1 protocols evpn default-gateway do-not-advertise
    set routing-instances evpn-1 protocols evpn duplicate-mac-detection auto-recover                                                                             y-time 9
    set routing-instances evpn-1 protocols evpn extended-vni-list all
    set routing-instances evpn-1 protocols evpn vni-options vni 10001 vrf-target tar                                                                             get:10001:1
    set routing-instances evpn-1 vtep-source-interface lo0.0
    set routing-instances evpn-1 service-type vlan-aware
    set routing-instances evpn-1 interface ae1.0
    set routing-instances evpn-1 route-distinguisher 172.16.0.2:65534
    set routing-instances evpn-1 vrf-target target:100:100
    set routing-instances evpn-1 vlans vn100 description v100
    set routing-instances evpn-1 vlans vn100 vlan-id 100
    set routing-instances evpn-1 vlans vn100 l3-interface irb.100
    set routing-instances evpn-1 vlans vn100 vxlan vni 10001

    set interfaces irb unit 100 family inet mtu 9000
    set interfaces irb unit 100 family inet address 100.100.100.13/29 arp 100.100.100.14 l2-interface ae1.0
    set interfaces irb unit 100 family inet address 100.100.100.13/29 arp 100.100.100.14 mac 30:30:30:44:44:44
    set interfaces irb unit 100 family inet address 100.100.100.13/29 arp 100.100.100.14 publish
    set interfaces irb unit 100 mac 00:1c:73:00:00:01

    Much appreciated!!



    ------------------------------
    Be kind!!
    ------------------------------