このトラブルシューティングのドキュメントでは show コマンドの出力の特定の行の最後にコメントが追加されています。これはその出力行の特定の側面を強調または説明するためのものです。コメントが新しい行で始まる場合はコメントの前の出力行を参照します。show コマンドの出力内のコメントを強調するために、ドキュメント全体で次の表記が使用されています。
<<— Text highlighted in this format inside a command's output represents a comment. This is done for explanation purpose only and is not part of the command's output.
ローカルホストデバイスの MAC アドレスと ARP トンネリングに使用するマルチキャストグループの決定
次に、ローカルホストデバイスの MAC アドレスと、ARP ブロードキャスト要求のトンネリングに使用するマルチキャストグループを確認する例を示します。
VTEP-1# show mac address-table address 005f.8602.10c6
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
10 005f.8602.10c6 DYNAMIC Tw1/0/1 <<— MAC address of 10.10.10.11 is learnt here
VTEP-1# show run int nve 1
interface nve1
no ip address
source-interface Loopback999
host-reachability protocol bgp
member vni 10001 mcast-group 239.10.10.10 <<— Group is mapped to the VNI under NVE
VTEP-1# show run | s vlan conf
vlan configuration 10
member evpn-instance 10 vni 10001 <<— VNI mapped under VLAN 10
VTEP-1# show l2vpn evpn evi
EVI VLAN Ether Tag L2 VNI Multicast Pseudoport
----- ----- ---------- --------- ------------- ------------------
10 10 0 10001 239.10.10.10 Tw1/0/1:10
<<— EVPN instance 10 is mapped to VLAN 10 and VNI 10001 (Using multicast group 239.10.10.10 for Broadcast ecap tunnel)
<...snip...>
コア側インターフェイス対する組み込みキャプチャの設定
次に、コア側インターフェイス対する組み込みキャプチャを設定する例を示します。
(注)
実稼働ネットワークでは、フィルタを指定してこのコマンドを使用します。
VTEP-1# show monitor capture 1 parameter
monitor capture 1 interface TwoGigabitEthernet1/0/2 BOTH
monitor capture 1 match any
monitor capture 1 buffer size 100
monitor capture 1 limit pps 1000
リモートホストデバイスへの ping
次に、リモートホストデバイスに ping を実行する例を示します。
VTEP-1-HOST# ping 10.10.10.12<<— sourced from Host machine 10.10.10.11
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.12, timeout is 2 seconds:
..!!!
VTEP-1# show ip mroute 239.10.10.10 10.255.1.1
IP Multicast Routing Table
Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected,
L - Local, P - Pruned, R - RP-bit set, F - Register flag,
T - SPT-bit set, J - Join SPT, M - MSDP created entry, E - Extranet,
X - Proxy Join Timer Running, A - Candidate for MSDP Advertisement,
U - URD, I - Received Source Specific Host Report,
Z - Multicast Tunnel, z - MDT-data group sender,
Y - Joined MDT-data group, y - Sending to MDT-data group,
G - Received BGP C-Mroute, g - Sent BGP C-Mroute,
N - Received BGP Shared-Tree Prune, n - BGP C-Mroute suppressed,
Q - Received BGP S-A Route, q - Sent BGP S-A Route,
V - RD & Vector, v - Vector, p - PIM Joins on route,
x - VxLAN group, c - PFP-SA cache created entry
Outgoing interface flags: H - Hardware switched, A - Assert winner, p - PIM Join
Timers: Uptime/Expires
Interface state: Interface, Next-Hop or VCD, State/Mode
(10.255.1.1, 239.10.10.10), 00:00:25/00:02:34, flags: FTx <<— x flag set for VxLAN group
Incoming interface: Loopback999, RPF nbr 0.0.0.0 <<— Broadcast being encapsulated into VXLAN tunnel IP
Outgoing interface list:
TwoGigabitEthernet1/0/2, Forward/Sparse, 00:00:23/00:03:06
<<— Sending towards core to VTEP-2
(10.255.1.4, 239.10.10.10), 3d18h/00:02:25, flags: JTx <<— BUM traffic from VTEP-2 (if the ARP request was from VTEP-2)
Incoming interface: TwoGigabitEthernet1/0/2, RPF nbr 10.1.1.6
Outgoing interface list:
Tunnel0, Forward/Sparse-Dense, 3d18h/00:00:14 <<— Tunnel 0 is the VXLAN tunnel used for decapsulation
組み込みキャプチャでの ARP 要求応答の存在を確認する
次の出力では、ARP 要求応答が組み込みキャプチャにあることを確認します。
VTEP-1# show monitor capture 1 buffer display-filter "arp"
Starting the packet display ........ Press Ctrl + Shift + 6 to exit
7 0.000018 00:5f:86:02:10:c6 -> ff:ff:ff:ff:ff:ff ARP 110 Who has 10.10.10.12? Tell 10.10.10.11
9 0.000022 28:52:61:bf:a9:46 -> 00:5f:86:02:10:c6 ARP 110 10.10.10.12 is at 28:52:61:bf:a9:46
VTEP-1# show run | section l2vpn
l2vpn evpn instance 10 vlan-based
encapsulation vxlan
route-target export 10:1 <<— Import or export right route-targets
route-target import 10:2 <<— Import or export right route-targets
VTEP-1# show run | section vlan config
vlan configuration 10
member evpn-instance 10 vni 10001 <<— EVPN instance & VNI mapped to the VLAN
VTEP-1# show run interface nve1
interface nve1
source-interface Loopback999
host-reachability protocol bgp
member vni10001 mcast-group 239.10.10.10 <<— VNI added to NVE interface
VTEP-1# show run interface loopback 999
interface Loopback999
description VxLAN Loopback
ip address 10.255.1.1 255.255.255.255
(注)
必要に応じて、VTEP 2 で show run コマンドを実行して設定を確認します。
VTEP-1# show l2vpn evpn evi 10 detail <<— VLAN number and EVPN Instance number are not always the same, confirm which EVPN Instance maps to your VLAN with the show l2vpn evpn evi command
EVPN instance: 10 (VLAN Based) <<— EVPN Instance number does map to the VLAN.
RD: 10.1.1.1:10 (auto)
Import-RTs: 10:2 <<— Importing VTEP-2 (if you are not seeing the prefix, check configuration for the right import/export statement under the l2vpn evpn instance)
Export-RTs: 10:1
Per-EVI Label: none
State: Established
Encapsulation: vxlan
Vlan: 10 <<— Layer 2 VLAN
Ethernet-Tag: 0
State: Established <<— If State is not "Established", there could be a misconfiguration
Core If: Vlan99
Access If: Vlan10
NVE If: nve1
RMAC: 7035.0956.7edd
Core Vlan: 99
L2 VNI: 10001 <<— Layer 2 VNI
L3 VNI: 99999
VTEP IP: 10.255.1.1
MCAST IP: 239.10.10.10 <<— BUM Group for flooded traffic (Layer 2 learning, etc)
VRF: vxlan
IPv4 IRB: Enabled
IPv6 IRB: Enabled
Pseudoports:
TwoGigabitEthernet1/0/1 service instance 10
<<— Layer 2 Access pseudoport (combination of Layer 2 port and service instance)
VTEP-1# show nve peers vni 10001<<— This VNI is learned from "show l2vpn evpn evi"
Interface VNI Type Peer-IP RMAC/Num_RTs eVNI state flags UP time
nve1 10001 L2CP 10.255.2.1 2 10001 UP N/A 00:01:03
<<— Layer 2 Control Plane (L2CP) peer for the VNI is an indicator that this is Layer 2 forwarding <<— Interface NVE1, L2CP, egress VNI are shown, state is UP for a time of 00:01:03
VTEP-2# show nve peers vni 10001
Interface VNI Type Peer-IP RMAC/Num_RTs eVNI state flags UP time
nve1 10001 L2CP 10.255.1.1 3 10001 UP N/A 00:47:2
<<— Interface NVE1, L2CP, egress VNI are shown, state is UP for a time of 00:47:02
VTEP-1# show nve vni 10001 detail<<— VNI 10001 is correlated to VLAN 10 from show l2vpn evpn evi
Interface VNI Multicast-group VNI state Mode VLAN cfg vrf
nve1 10001 239.10.10.10 Up L2CP 10 CLI vxlan
<<— state is UP, type is Layer 2 VNI (L2CP); VLAN 10 is mapped to VNI 10001
L2 VNI IPv6 IRB down reason:
BDI or associated L3 BDI's IPv6 addr un-configured
IPv6 topo_id disabled
L2CP VNI local VTEP info: <<— Layer 2 VNI provisioning
VLAN: 10 <<— Confirms that mapping is with VLAN 10
SVI if handler: 0x4D
Local VTEP IP: 10.255.1.1 <<— VxLAN Tunnel IP
Core IRB info: <<— Layer 3 VPN provisioning (not required for troubleshooting a scenario with pure Layer 2 VPN packet path
L3VNI: 99999
VRF name: vxlan
VLAN: 99
V4TopoID: 0x2
V6TopoID: 0xFFFF
Local VTEP IP: 10.255.1.1
SVI if handler: 0x50
SVI MAC: 7035.0956.7EDD
VNI Detailed statistics:
Pkts In Bytes In Pkts Out Bytes Out
0 0 18158681548 27383291735556
VTEP-1# show mac address-table interface tw 1/0/1 vlan 10
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
10 005f.8602.10c6 DYNAMIC Tw1/0/1 <<— IOS-MATM shows only local MAC addresses
VTEP-2# show mac address-table interface g 2/0/1 vlan 10
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
10 008e.7391.1946 DYNAMIC Gi2/0/1
FED-MATM でローカル MAC アドレスとリモート MAC アドレスの両方が学習されていることを確認する
次に、ローカル MAC アドレスとリモート MAC アドレスの両方が FED-MATM で学習されていることを確認する例を示します。
VTEP-1# show platform software fed switch active matm macTable vlan 10
VLAN MAC Type Seq# EC_Bi Flags machandle
siHandle riHandle diHandle *a_time *e_time ports
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
10 005f.8602.10c6 0x1 60 0 0 0x7efcc0d78fc8 0x7efcc0ca8b88 0x0 0x7efcc06cf9c8 300 144 TwoGigabitEthernet1/0/1
<<— Local MAC address is displayed here
10 008e.7391.1946 0x1000001 0 0 64 0x7efcc0cafb38 0x7efcc0d7f628 0x7ffa48c850b8 0x7efcc038cc18 0 144 RLOC 10.255.2.1 adj_id 135
<<— Remote MAC address is displayed here
VTEP-2#sh platform software fed switch active matm macTable vlan 10
VLAN MAC Type Seq# EC_Bi Flags machandle siHandle riHandle diHandle *a_time *e_time ports
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
10 005f.8602.10c6 0x1000001 0 0 64 0x7fcec4e977d8 0x7fcec4e93ae8 0x7fcec4e93308 0x7fcec430a3d8 0 0 RLOC 10.255.1.1 adj_id 64
<<— Remote MAC address is displayed here
10 008e.7391.1946 0x1 46 0 0 0x7fcec4c6a248 0x7fcec4c20698 0x0 0x7fcec4611438 300 126 GigabitEthernet2/0/1
<<— Local MAC address is displayed here
VTEP-1# show device-tracking database mac<<— Only Local MAC addresses are seen in SISF device tracking table
MAC Interface vlan prlvl state time left policy
005f.8602.10c6 Tw1/0/1 10 NO TRUST MAC-REACHABLE 347 s evpn-sisf-policy
<<— MAC, REACH, and EVPN type SISF policy are displayed
VTEP-2# show device-tracking database mac<<— Only Local MAC addresses are seen in SISF device tracking table
MAC Interface vlan prlvl state time left policy
008e.7391.1946 Gi2/0/1 10 NO TRUST MAC-REACHABLE 164 s evpn-sisf-policy
<<— MAC, REACH, and EVPN type SISF policy are displayed
EVPN マネージャが MAC アドレスエントリで更新されていることを確認する
EVPN マネージャはローカル MAC アドレスを学習し、それらをレイヤ 2 RIB に追加します。EVPN マネージャは、レイヤ 2 の RIB からリモート MAC アドレスも学習しますが、エントリは MAC モビリティの処理にのみ使用されます。
次に、EVPN マネージャが MAC アドレスで更新されていることを確認する例を示します。
VTEP-1# show l2vpn evpn mac evi 10
MAC Address EVI VLAN ESI Ether Tag Next Hop
-------------- ----- ----- ------------------------ ---------- ---------------
005f.8602.10c6 10 10 0000.0000.0000.0000.0000 0 Tw1/0/1:10
<<— MAC Addresss learned by EVPN Manager. States look correct
008e.7391.1946 10 10 0000.0000.0000.0000.0000 0 10.255.2.1
VTEP-1#sh l2vpn evpn mac evi 10 detail
MAC Address: 005f.8602.10c6 <<— Local MAC address
EVPN Instance: 10 <<— EVPN Instance
Vlan: 10 <<— VLAN
Ethernet Segment: 0000.0000.0000.0000.0000
Ethernet Tag ID: 0
Next Hop(s): TwoGigabitEthernet1/0/1 service instance 10<<— Local interface or local instance
VNI: 10001 <<— VNI Label
Sequence Number: 0
MAC only present: Yes
MAC Duplication Detection: Timer not running
MAC Address: 008e.7391.1946 <<— Remote MAC Address
EVPN Instance: 10 <<— EVPN Instance
Vlan: 10 <<— VLAN
Ethernet Segment: 0000.0000.0000.0000.0000
Ethernet Tag ID: 0
Next Hop(s): 10.255.2.1 <<— Remote VTEP-2 Tunnel Loopback
Local Address: 10.255.1.1 <<— Local VTEP-1 Tunnel Loopback
VNI: 10001 <<— VNI Label
Sequence Number: 0
MAC only present: Yes
MAC Duplication Detection: Timer not running
VTEP-2# show l2vpn evpn mac evi 10
MAC Address EVI VLAN ESI Ether Tag Next Hop
-------------- ----- ----- ------------------------ ---------- ---------------
005f.8602.10c6 10 10 0000.0000.0000.0000.0000 0 10.255.1.1
008e.7391.1946 10 10 0000.0000.0000.0000.0000 0 Gi2/0/1:10
VTEP-2#sh l2vpn evpn mac evi 10 detail
MAC Address: 005f.8602.10c6 <<— Remote MAC address
EVPN Instance: 10 <<— EVPN Instance
Vlan: 10 <<— VLAN
Ethernet Segment: 0000.0000.0000.0000.0000
Ethernet Tag ID: 0
Next Hop(s): 10.255.1.1 <<— Remote VTEP-1 Tunnel Loopback
Local Address: 10.255.2.1 <<— Local VTEP-2 Tunnel Loopback
VNI: 10001 <<— VNI Label
Sequence Number: 0
MAC only present: Yes
MAC Duplication Detection: Timer not running
MAC Address: 008e.7391.1946 <<— Remote MAC adress
EVPN Instance: 10 <<— EVPN Instance
Vlan: 10 <<— VLAN
Ethernet Segment: 0000.0000.0000.0000.0000
Ethernet Tag ID: 0
Next Hop(s): GigabitEthernet2/0/1 service instance 10 <<— Local interface or local instance
VNI: 10001 <<— VNI Label
Sequence Number: 0
MAC only present: Yes
MAC Duplication Detection: Timer not running
次に、EVPN マネージャが MAC ルートをレイヤ 2 の RIB に更新したことを確認する例を示します。
VTEP-1# show l2route evpn mac
EVI ETag Prod Mac Address Next Hop(s) Seq Number
----- ---------- ----- -------------- ---------------------------- ----------
10 0 L2VPN 005f.8602.10c6 Tw1/0/1:10 0
<<— Local prefix was added by EVPN Manager (Layer 2 VPN) into Layer 2 RIB
10 0 BGP 008e.7391.1946 V:10001 10.255.2.1 0
<<— Remote prefix was added by BGP into Layer 2 RIB
VTEP-2# show l2route evpn mac
EVI ETag Prod Mac Address Next Hop(s) Seq Number
----- ---------- ----- -------------- ---------------------------- ----------
10 0 BGP 005f.8602.10c6 V:10001 10.255.1.1 0
<<— Remote prefix was added by BGP into Layer 2 RIB
10 0 L2VPN 008e.7391.1946 Gi2/0/1:10 0
<<— Local prefix was added by EVPN Manager (Layer 2 VPN) into Layer 2 RIB
レイヤ 2 の RIB がローカル MAC ルートを使用して BGP を更新し、BGP がリモート MAC ルートを使用してレイヤ 2 の RIB を更新していることを確認する
次に、レイヤ 2 の RIB がローカル MAC アドレスを使用して BGP を更新し、BGP がリモート MAC ルートを使用してレイヤ 2 の RIB が更新されていることを確認する例を示します。
VTEP-1# show bgp l2vpn evpn route-type 2 0 005f860210c6 *<<— Route-type is 2, Ethernet tag = 0, Local MAC address is in undelimited format, and * specifies to omit IP address
BGP routing table entry for [2][10.1.1.1:10][0][48][005F860210C6][0][*]/20, version 249
Paths: (1 available, best #1, table evi_10) <<— Added to BGP from EVPN Manager provisioning in l2vpn evi context
Advertised to update-groups:
2
Refresh Epoch 1
Local
:: (via default) from 0.0.0.0 (10.1.1.1) <<— Locally Advertised by VTEP-1, (:: indicates local)
Origin incomplete, localpref 100, weight 32768, valid, sourced, local, best
EVPN ESI: 00000000000000000000, Label1 10001 <<— VNI ID is 10001 for VLAN 10
Extended Community: RT:10:1 ENCAP:8 <<— RT 10:1 (local RT), Encap type 8 is VXLAN
Local irb vxlan vtep:
vrf:vxlan, l3-vni:99999
local router mac:7035.0956.7EDD
core-irb interface:Vlan99
vtep-ip:10.255.1.1
rx pathid: 0, tx pathid: 0x0
VTEP-1# show bgp l2vpn evpn route-type 2 0 008e73911946 *<<— Route-type is 2, Ethernet tag = 0, Remote MAC address is in undelimited format, and * specifies to omit IP address
BGP routing table entry for [2][10.1.1.1:10][0][48][008e73911946][0][*]/20, version 253
Paths: (1 available, best #1, table evi_10) <<— EVPN instance BGP table for VLAN 10
Not advertised to any peer
Refresh Epoch 1
Local, imported path from [2][10.2.2.2:10][0][48][008e73911946][0][*]/20 (global)
<<— From VTEP-2, RD is 10.2.2.2:10, MAC length is 48, [*] indicates MAC only
10.255.2.1 (metric 2) (via default) from 10.2.2.2 (10.2.2.2)
<<— Next hop of VTEP-2 Lo999, learned from RR 10.2.2.2
Origin incomplete, metric 0, localpref 100, valid, internal, best
EVPN ESI: 00000000000000000000, Label1 10001 <<— VNI ID 10001 for VLAN 10
Extended Community: RT:10:2 ENCAP:8 <<— Layer 2 VPN Route-Target 10:2 Encap type 8 is VXLAN
Originator: 10.2.2.2, Cluster list: 10.2.2.2
rx pathid: 0, tx pathid: 0x0
BGP routing table entry for [2][10.2.2.2:10][0][48][008e73911946][0][*]/20, version 251
Paths: (1 available, best #1, table EVPN-BGP-Table)
Not advertised to any peer
Refresh Epoch 1
Local
10.255.2.1 (metric 2) (via default) from 10.2.2.2 (10.2.2.2)
Origin incomplete, metric 0, localpref 100, valid, internal, best
EVPN ESI: 00000000000000000000, Label1 10001
Extended Community: RT:10:2 ENCAP:8
Originator: 10.2.2.2, Cluster list: 10.2.2.2
rx pathid: 0, tx pathid: 0x0
VTEP-2# show bgp l2vpn evpn route-type 2 0 008e73911946 *<<— Route-type is 2, Ethernet tag = 0, Local MAC address is in undelimited format, and * specifies to omit IP address
BGP routing table entry for [2][10.2.2.2:10][0][48][008e73911946][0][*]/20, version 292
Paths: (1 available, best #1, table evi_10)
Advertised to update-groups:
2
Refresh Epoch 1
Local
:: (via default) from 0.0.0.0 (10.2.2.2) <<— Locally Advertised by VTEP-2, (:: indicates local)
Origin incomplete, localpref 100, weight 32768, valid, sourced, local, best
EVPN ESI: 00000000000000000000, Label1 10001 <<— VNI ID 10001 for VLAN 10
Extended Community: RT:10:2 ENCAP:8 <<— RT 10:2 (local RT), Encap type 8 is VXLAN
Local irb vxlan vtep:
vrf:vxlan, l3-vni:99999
local router mac:7486.0BC4.B75D
core-irb interface:Vlan99
vtep-ip:10.255.2.1
rx pathid: 0, tx pathid: 0x0
VTEP-2# show bgp l2vpn evpn route-type 2 0 005f860210c6 *<<— Route-type is 2, Ethernet tag = 0, Remote MAC address is in undelimited format, and * specifies to omit IP address
BGP routing table entry for [2][10.1.1.1:10][0][48][005F860210C6][0][*]/20, version 312
Paths: (1 available, best #1, table EVPN-BGP-Table)
Not advertised to any peer
Refresh Epoch 7
Local
10.255.1.1 (metric 2) (via default) from 10.2.2.2 (10.2.2.2)
Origin incomplete, metric 0, localpref 100, valid, internal, best
EVPN ESI: 00000000000000000000, Label1 10001
Extended Community: RT:10:1 ENCAP:8
Originator: 10.1.1.1, Cluster list: 10.2.2.2
rx pathid: 0, tx pathid: 0x0
BGP routing table entry for [2][10.2.2.2:10][0][48][005F860210C6][0][*]/20, version 314
Paths: (1 available, best #1, table evi_10) <<— EVPN instance BGP table for VLAN 10
Not advertised to any peer
Refresh Epoch 7
Local, imported path from [2][10.1.1.1:10][0][48][005F860210C6][0][*]/20 (global)
<<— From VTEP-2, RD is 10.2.2.2:10, MAC length is 48, [*] indicates MAC only<<— From VTEP-1, RD is 10.1.1.1:10, MAC length is 48, [*] indicates MAC only
10.255.1.1 (metric 2) (via default) from 10.2.2.2 (10.2.2.2)
Origin incomplete, metric 0, localpref 100, valid, internal, best
EVPN ESI: 00000000000000000000, Label1 10001 <<— VNI ID 10001 for VLAN 10
Extended Community: RT:10:1 ENCAP:8 <<— Layer 2 VPN Route-Target 10:1 Encap type 8 is VXLAN
Originator: 10.1.1.1, Cluster list: 10.2.2.2
rx pathid: 0, tx pathid: 0x0
BGP から学習し、レイヤ 2 の RIB に更新された MAC ルートも L2FIB に更新されていることを確認する
VTEP-1# show ip interface brief
Interface IP-Address OK? Method Status Protocol
Vlan10 10.10.10.1 YES NVRAM up up
Vlan12 10.12.12.1 YES NVRAM up up <<— Access Interface
Vlan99 10.255.1.1 YES unset up up <<— Core Interface<<— If protocol status for the core interface is down, run the no autostate command
Loopback0 10.1.1.1 YES NVRAM up up
Loopback999 10.255.1.1 YES NVRAM up up
Tunnel0 10.255.1.1 YES unset up up
Tunnel1 10.1.1.5 YES unset up up
nve1 unassigned YES unset up up
VTEP-2# show ip interface brief
Interface IP-Address OK? Method Status Protocol
Vlan10 10.10.10.1 YES NVRAM up up
Vlan13 10.13.13.1 YES NVRAM up up <<— Access Interface
Vlan99 10.255.2.1 YES unset up up <<— Core Interface<<— If protocol status for the core interface is down, run the no autostate command
Loopback0 10.2.2.2 YES NVRAM up up
Loopback999 10.255.2.1 YES NVRAM up up
Tunnel0 10.255.2.1 YES unset up up
Tunnel1 10.1.1.10 YES unset up up
IP VRF が正しい SVI、スティッチング ルート ターゲット、およびルート識別子でプロビジョニングされていることを確認します。
VTEP-1# show run vrf vxlan<<— vxlan is the name of the VRF
vrf definition vxlan
rd 10.255.1.1:1
!
address-family ipv4
route-target export 10.255.1.1:1 stitching <<— Exporting local route-target
route-target import 10.255.2.1:1 stitching <<— Importing VTEP-2 route-target
VTEP-1# show ip vrf vxlan<<— vxlan is the name of the VRF
Name Default RD Interfaces
vxlan 10.255.1.1:1 Vl10
Vl12
Vl99
VTEP-1# show ip vrf detail vxlan<<— vxlan is the name of the VRF
VRF vxlan (VRF Id = 2); default RD 10.255.1.1:1; default VPNID <not set>
New CLI format, supports multiple address-families
Flags: 0x180C
Interfaces:
Vl10 Vl12 Vl99
Address family ipv4 unicast (Table ID = 0x2): <<— Table 2 maps to VRF vxlan, also found in BPG VPNv4 table
Flags: 0x0
No Export VPN route-target communities
No Import VPN route-target communities
Export VPN route-target stitching communities
<<— VRF is using stitching route-targets. VTEPs must import each other's targets (same as Layer 3 VPN)
RT:10.255.1.1:1
Import VPN route-target stitching communities
RT:10.255.2.1:1
No import route-map
No global export route-map
No export route-map
VRF label distribution protocol: not configured
VRF label allocation mode: per-prefix
VTEP-2# show ip vrf vxlan<<— vxlan is the name of the VRF
Name Default RD Interfaces
vxlan 10.255.2.1:1 Vl10
Vl13
Vl99
VTEP-2# show ip vrf detail vxlan<<— vxlan is the name of the VRF
VRF vxlan (VRF Id = 2); default RD 10.255.2.1:1; default VPNID <not set>
New CLI format, supports multiple address-families
Flags: 0x180C
Interfaces:
Vl10 Vl13 Vl99
Address family ipv4 unicast (Table ID = 0x2): <<— Table 2 maps to VRF vxlan, also found in BPG VPNv4 table
Flags: 0x0
No Export VPN route-target communities
No Import VPN route-target communities
Export VPN route-target stitching communities
<<— VRF is using stitching route-targets. VTEPs must import each other's targets (same as Layer 3 VPN)
RT:10.255.2.1:1
Import VPN route-target stitching communities
RT:10.255.1.1:1
No import route-map
No global export route-map
No export route-map
VRF label distribution protocol: not configured
VRF label allocation mode: per-prefix
VTEP-1# show run | section vlan config
vlan configuration 99 <<— VNI is a member of VRF vxlan, not of EVPN instance
member vni99999
VTEP-1# show run interface vlan 99
interface Vlan99
description connected to L3_VNI_99999
vrf forwarding vxlan
ip unnumbered Loopback999
VTEP-1# show run interface nve 1
no ip address
source-interface Loopback999
host-reachability protocol bgp
member vni 99999 vrf vxlan <<— VNI tied to the VRF under NVE interface
member vni 12012 mcast-group 239.12.12.12 <<— VNI tied to the NVE
VTEP-1# show run | section l2vpn
l2vpn evpn instance 12 vlan-based
encapsulation vxlan
route-target export 12:1 <<— Remote VTEP is NOT importing this route target, as it does not have the VLAN or VNI on its end
route-target import 12:1
no auto-route-target
VTEP-1# show run | section vlan config
vlan configuration 12
member evpn-instance 12 vni 12012 <<— EVPN instance or VNI associated to the VLAN
VTEP-1# show nve vni
Interface VNI Multicast-group VNI state Mode VLAN cfg vrf
nve1 10001 239.10.10.10 Up L2CP 10 CLI vxlan
nve1 12012 239.12.12.12 Up L2CP 12 CLI vxlan <<— Layer 2 VNI
nve1 99999 N/A Up L3CP 99 CLI vxlan <<— Layer 3 VNI
VTEP-2# show nve vni
Interface VNI Multicast-group VNI state Mode VLAN cfg vrf
nve1 13013 239.13.13.13 Up L2CP 13 CLI vxlan <<— Layer 2 VNI
nve1 10001 239.10.10.10 Up L2CP 10 CLI vxlan
nve1 99999 N/A Up L3CP 99 CLI vxlan <<— Layer 3 VNI
VTEP-1# show l2vpn evpn evi
EVI VLAN Ether Tag L2 VNI Multicast Pseudoport
----- ----- ---------- --------- ------------- ------------------
12 12 0 12012 239.12.12.12 Tw1/0/1:12
<<— See which EVPN instance maps to the VLAN. The VLAN or EVPN instance values are not always the same
<...snip...>
VTEP-1# show l2vpn evpn evi 12 detail
EVPN instance: 12 (VLAN Based)
RD: 10.1.1.1:12 (auto)
Import-RTs: 12:1
Export-RTs: 12:1
Per-EVI Label: none
State: Established
Encapsulation: vxlan
Vlan: 12 <<— VLAN Layer 2 VNI
Ethernet-Tag: 0
State: Established
Core If: Vlan99 <<— Interface handling IP VRF forwarding
Access If: Vlan12
NVE If: nve1
RMAC: 7035.0956.7edd <<— RMAC is the BIA of SVI 99 Core interface
Core Vlan: 99
L2 VNI: 12012
L3 VNI: 99999
VTEP IP: 10.255.1.1 <<— Local Tunnel endpoint IP address
MCAST IP: 239.12.12.12
VRF: vxlan <<— IP VRF for Layer 3 VPN
Pseudoports:
TwoGigabitEthernet1/0/1 service instance 12
VTEP-2# show l2vpn evpn evi
EVI VLAN Ether Tag L2 VNI Multicast Pseudoport
----- ----- ---------- --------- ------------- ------------------
13 13 0 13013 239.13.13.13 Gi2/0/1:13
<<— See which EVPN instance maps to the VLAN. The VLAN or EVPN instance values are not always the same
VTEP-2# show l2vpn evpn evi 13 detail
EVPN instance: 13 (VLAN Based)
RD: 10.2.2.2:13 (auto)
Import-RTs: 13:2
Export-RTs: 13:2
Per-EVI Label: none
State: Established
Encapsulation: vxlan
Vlan: 13 <<— VLAN Layer 2 VNI
Ethernet-Tag: 0
State: Established
Core If: Vlan99 <<— Interface handling IP VRF forwarding
Access If: Vlan13
NVE If: nve1
RMAC: 7486.0bc4.b75d <<— RMAC is the BIA of SVI 99 Core interface
Core Vlan: 99
L2 VNI: 13013
L3 VNI: 99999
VTEP IP: 10.255.2.1 <<— Local Tunnel endpoint IP address
MCAST IP: 239.13.13.13
VRF: vxlan <<— IP VRF for Layer 3 VPN
Pseudoports:
GigabitEthernet2/0/1 service instance 13
VTEP-1# show nve peers
Interface VNI Type Peer-IP RMAC/Num_RTs eVNI state flags UP time
nve1 99999 L3CP 10.255.2.1 7486.0bc4.b75d 99999 UP A/M 1w1d
<<— Layer 3 Control Plane (L3CP), RMAC of Remote VTEP and Uptime of peer are displayed
VTEP-2# show nve peers
Interface VNI Type Peer-IP RMAC/Num_RTs eVNI state flags UP time
nve1 99999 L3CP 10.255.1.1 7035.0956.7edd 99999 UP A/M 21:27:36
<<— Layer 3 Control Plane (L3CP), RMAC of Remote VTEP and Uptime of peer are displayed
ローカル MAC アドレスと IP アドレスのエントリが SISF デバイス トラッキング テーブルで学習されていることを確認する
次に、ローカル MAC アドレスと IP アドレスのエントリが SISF デバイス トラッキング テーブルで学習されることを確認する例を示します。
VTEP-1# show device-tracking database vlanid 12
Binding Table has 4 entries, 2 dynamic (limit 100000)
Codes: L - Local, S - Static, ND - Neighbor Discovery, ARP - Address Resolution Protocol, DH4 - IPv4 DHCP, DH6 - IPv6 DHCP, PKT - Other Packet, API - API created
Preflevel flags (prlvl):
0001:MAC and LLA match 0002:Orig trunk 0004:Orig access
0008:Orig trusted trunk 0010:Orig trusted access 0020:DHCP assigned
0040:Cga authenticated 0080:Cert authenticated 0100:Statically assigned
Network Layer Address Link Layer Address Interface vlan prlvl age state Time left
ARP 10.12.12.12 005f.8602.10e7 Tw1/0/1 12 0005 115s REACHABLE N/A
VTEP-2# show device-tracking database vlanid 13
vlanDB has 2 entries for vlan 13, 1 dynamic
Codes: L - Local, S - Static, ND - Neighbor Discovery, ARP - Address Resolution Protocol, DH4 - IPv4 DHCP, DH6 - IPv6 DHCP, PKT - Other Packet, API - API created
Preflevel flags (prlvl):
0001:MAC and LLA match 0002:Orig trunk 0004:Orig access
0008:Orig trusted trunk 0010:Orig trusted access 0020:DHCP assigned
0040:Cga authenticated 0080:Cert authenticated 0100:Statically assigned
Network Layer Address Link Layer Address Interface vlan prlvl age state Time left
ARP 10.13.13.13 008e.7391.1977 Gi2/0/1 13 0005 155s REACHABLE N/A
EVPN マネージャで MAC アドレスと IP アドレスのエントリが学習されていることを確認する
次に、EVPN マネージャで MAC アドレスと IP アドレスのエントリが学習されていることを確認する例を示します。
VTEP-1# show l2vpn evpn mac ip evi 12
IP Address EVI VLAN MAC Address Next Hop
------------------------- ----- ----- -------------- -------------------------
10.12.12.12 12 12 005f.8602.10e7 Tw1/0/1:12
VTEP-1#sh l2vpn evpn mac ip evi 12 detail
IP Address: 10.12.12.12
EVPN Instance: 12
Vlan: 12
MAC Address: 005f.8602.10e7
Ethernet Segment: 0000.0000.0000.0000.0000
Ethernet Tag ID: 0
Next Hop: TwoGigabitEthernet1/0/1 service instance 12
VNI: 12012
Sequence Number: 0
IP Duplication Detection: Timer not running
VTEP-2# show l2vpn evpn mac ip evi 13
IP Address EVI VLAN MAC Address Next Hop
------------------------- ----- ----- -------------- -------------------------
10.13.13.13 13 13 008e.7391.1977 Gi2/0/1:13
VTEP-2#sh l2vpn evpn mac ip evi 13 detail
IP Address: 10.13.13.13
EVPN Instance: 13
Vlan: 13
MAC Address: 008e.7391.1977
Ethernet Segment: 0000.0000.0000.0000.0000
Ethernet Tag ID: 0
Next Hop: GigabitEthernet2/0/1 service instance 13
VNI: 13013
Sequence Number: 0
IP Duplication Detection: Timer not running
MAC アドレスと IP アドレスのエントリがレイヤ 2 の RIB で学習されていることを確認する
次に、MAC アドレスと IP アドレスのエントリがレイヤ 2 の RIBで学習されることを確認する例を示します。
VTEP-1# show l2route evpn mac ip
EVI ETag Prod Mac Address Host IP Next Hop(s)
----- ---------- ----- -------------- --------------- --------------------------
12 0 L2VPN 005f.8602.10e7 10.12.12.12 Tw1/0/1:12
VTEP-2# show l2route evpn mac ip
EVI ETag Prod Mac Address Host IP Next Hop(s)
----- ---------- ----- -------------- --------------- --------------------------
13 0 L2VPN 008e.7391.1977 10.13.13.13 Gi2/0/1:13
ローカル MAC アドレスと IP アドレスのエントリが MAC VRF で学習されていることを確認する
VTEP-1# show bgp l2vpn evpn evi 12 route-type 2 0 005F860210E7 10.12.12.12
BGP routing table entry for [2][10.1.1.1:12][0][48][005F860210E7][32][10.12.12.12]/24, version 72
Paths: (1 available, best #1, table evi_12) <<— The Layer 2 VPN table number for EVPN instance 12
Advertised to update-groups:
1
Refresh Epoch 1
Local <<— Indicates locally learned route
:: (via default) from 0.0.0.0 (10.1.1.1)
Origin incomplete, localpref 100, weight 32768, valid, sourced, local, best
EVPN ESI: 00000000000000000000, Label1 12012, Label2 99999 <<— Displays both Layer 2 and VRF labels
Extended Community: RT:12:1 RT:10.255.1.1:1 ENCAP:8 <<— Note the VRF stitching RT as well as the Layer 2 RT
Router MAC:7035.0956.7EDD
Local irb vxlan vtep:
vrf:vxlan, l3-vni:99999
local router mac:7035.0956.7EDD <<— Local RMAC
core-irb interface:Vlan99 <<— VRF Layer 3 VPN interface
vtep-ip:10.255.1.1 <<— Loopback 999 tunnel endpoint
rx pathid: 0, tx pathid: 0x0
次に、ローカル MAC アドレスと IP アドレスのエントリが MAC VRF で学習されることを確認する例を示します。
VTEP-2# show bgp l2vpn evpn evi 13 route-type 2 0 008E73911977 10.13.13.13
BGP routing table entry for [2][10.2.2.2:13][0][48][008E73911977][32][10.13.13.13]/24, version 70
Paths: (1 available, best #1, table evi_13)
Advertised to update-groups:
1
Refresh Epoch 1
Local <<— Indicates locally learned route
:: (via default) from 0.0.0.0 (10.2.2.2)
Origin incomplete, localpref 100, weight 32768, valid, sourced, local, best
EVPN ESI: 00000000000000000000, Label1 13013, Label2 99999
Extended Community: RT:13:1 RT:10.255.2.1:1 ENCAP:8
Router MAC:7486.0BC4.B75D
Local irb vxlan vtep:
vrf:vxlan, l3-vni:99999
local router mac:7486.0BC4.B75D
core-irb interface:Vlan99
vtep-ip:10.255.2.1
rx pathid: 0, tx pathid: 0x0
リモート MAC と IP アドレスのペアが VRF で学習されていることを確認する
次に、リモート MAC と IP アドレスのペアが VRF で学習されていることを確認する例を示します。
VTEP-1# show bgp vpnv4 unicast vrf vxlan 10.13.13.13
BGP routing table entry for 10.255.1.1:1:10.13.13.13/32, version 15
Paths: (1 available, best #1, table vxlan) <<— VPNv4 VRF BGP table
Not advertised to any peer
Refresh Epoch 2
Local, imported path from [2][10.2.2.2:13][0][48][008E73911977][32][10.13.13.13]/24 (global)
<<— EVPN type-2, l2vpn RD 10.2.2.2:13, MAC and IP addresses
10.255.2.1 (metric 3) (via default) from 10.2.2.2 (10.2.2.2)
<<— Next hop 10.255.2.1, learned from RR 10.2.2.2
Origin incomplete, metric 0, localpref 100, valid, internal, best
Extended Community: ENCAP:8 Router MAC:7486.0BC4.B75D
Originator: 10.2.2.2, Cluster list: 10.2.2.2
Local vxlan vtep:
vrf:vxlan, vni:99999
local router mac:7035.0956.7EDD
encap:8
vtep-ip:10.255.1.1
bdi:Vlan99
Remote VxLAN:
Topoid 0x2(vrf vxlan) <<— VRF vxlan (mapped to ID 2)
Remote Router MAC:7486.0BC4.B75D <<— VTEP-2 RMAC
Encap 8 <<— VXLAN encap (type 8)
Egress VNI 99999 <<— VRF VNI
RTEP 10.255.2.1 <<— VTEP-2 Remote Tunnel Endpoint
rx pathid: 0, tx pathid: 0x0
VTEP-2# show bgp vpnv4 unicast vrf vxlan 10.12.12.12
BGP routing table entry for 10.255.2.1:1:10.12.12.12/32, version 15
Paths: (1 available, best #1, table vxlan)
Not advertised to any peer
Refresh Epoch 2
Local, imported path from [2][10.1.1.1:12][0][48][005F860210E7][32][10.12.12.12]/24 (global)
<<— EVPN type-2, l2vpn RD 10.1.1.1:12, MAC and IP addresses
10.255.1.1 (metric 3) (via default) from 10.2.2.2 (10.2.2.2)
<<— Next hop 10.255.1.1, learned from RR 10.2.2.2
Origin incomplete, metric 0, localpref 100, valid, internal, best
Extended Community: ENCAP:8 Router MAC:7035.0956.7EDD
Originator: 10.1.1.1, Cluster list: 10.2.2.2
Local vxlan vtep:
vrf:vxlan, vni:99999
local router mac:7486.0BC4.B75D
encap:8
vtep-ip:10.255.2.1
bdi:Vlan99
Remote VxLAN:
Topoid 0x2(vrf vxlan) <<— VRF vxlan (mapped to ID 2)
Remote Router MAC:7035.0956.7EDD <<— VTEP-1 RMAC
Encap 8 <<— VXLAN encap (type 8)
Egress VNI 99999 <<— VRF VNI
RTEP 10.255.1.1 <<— VTEP-2 Remote Tunnel Endpoint
rx pathid: 0, tx pathid: 0x0
IP ルートが RIB に挿入されていることを確認する
次に、IP ルートが RIB に挿入されていることを確認する例を示します。
VTEP-1# show ip route vrf vxlan 10.13.13.13
Routing Table: vxlan
Routing entry for 10.13.13.13/32
Known via "bgp 69420", distance 200, metric 0, type internal
Last update from 10.255.2.1 on Vlan99, 00:11:33 ago
Routing Descriptor Blocks:
* 10.255.2.1 (default), from 10.2.2.2, 00:11:33 ago, via Vlan99 <<— Next hop here is the Core VLAN interface
Route metric is 0, traffic share count is 1
AS Hops 0
MPLS label: none
VTEP-2# show ip route vrf vxlan 10.12.12.12
Routing Table: vxlan
Routing entry for 10.12.12.12/32
Known via "bgp 69420", distance 200, metric 0, type internal
Last update from 10.255.1.1 on Vlan99, 00:04:06 ago
Routing Descriptor Blocks:
* 10.255.1.1 (default), from 10.2.2.2, 00:04:06 ago, via Vlan99 <<— Next hop here is the Core VLAN interface
Route metric is 0, traffic share count is 1
AS Hops 0
MPLS label: none
VTEP-1# show adjacency vlan 99 detail
Protocol Interface Address
IP Vlan99 10.255.2.1(9) <<— IP unnumbered from Loopback 999
0 packets, 0 bytes
epoch 0
sourced in sev-epoch 6
Encap length 14
74860BC4B75D703509567EDD0800
<<— Local RMAC is 74860BC4B75D, Remote RMAC is 703509567EDD, etype is 800
VXLAN Transport tunnel
<<— Tunnel Interface (RMAC, using VTEP Loopback IP address)
VTEP-2# show adjacency vlan 99 detail
Protocol Interface Address
IP Vlan99 10.255.1.1(9) <<— IP unnumbered from Loopback 999
0 packets, 0 bytes
epoch 0
sourced in sev-epoch 5
Encap length 14
703509567EDD74860BC4B75D0800
<<— Local RMAC is 703509567EDD, Remote RMAC is 74860BC4B75D, etype is 800
VXLAN Transport tunnel
<<— Tunnel Interface (RMAC, using VTEP Loopback IP address)
IP VRF のホストデバイスの VTEP トンネルの IP アドレスに隣接関係があるすることを確認する
次に、IP VRF のホストデバイスの VTEPトンネルの IP アドレスに隣接関係があることを確認する例を示します。
VTEP-1# show ip cef vrf vxlan 10.13.13.13/32<<— Remote host in VLAN 13 of VTEP-2
10.13.13.13/32
nexthop 10.255.2.1 Vlan99
トンネルの宛先に到達する隣接関係の存在の確認
次に、トンネルの宛先に到達する隣接関係が存在することを確認する例を示します。
VTEP-1# show ip cef 10.255.1.11
10.255.2.1/32
nexthop 10.1.1.6 TwoGigabitEthernet1/0/2
VTEP-1# show bgp vpnv4 unicast vrf vxlan 10.9.9.9/32<<— To a remote IP address outside the VXLAN fabric
BGP routing table entry for 10.255.1.1:1:10.9.9.9/32, version 150
Paths: (1 available, best #1, table vxlan) <<— VPNv4 VRF BGP table
Not advertised to any peer
Refresh Epoch 2
Local, imported path from [5][10.255.1.11:1][0][32][10.9.9.9]/17 (global)
<<— Learned from EVPN into VPNv4
10.255.1.11 (metric 3) (via default) from 10.2.2.2 (10.2.2.2)
Origin IGP, metric 0, localpref 100, valid, internal, best
Extended Community: ENCAP:8 Router MAC:EC1D.8B55.F55D
Originator: 10.255.1.11, Cluster list: 10.2.2.2
Local vxlan vtep:
vrf:vxlan, vni:99999
local router mac:7035.0956.7EDD
encap:8
vtep-ip:10.255.1.1
bdi:Vlan99
Remote VxLAN:
Topoid 0x2(vrf vxlan)
Remote Router MAC:EC1D.8B55.F55D <<— Border_Leaf_VTEP RMAC
Encap 8
Egress VNI 99999 <<— VNI associated with VRF
RTEP 10.255.1.11 <<— Tunnel IP address
rx pathid: 0, tx pathid: 0x0
VTEP-1# show bgp l2vpn evpn all route-type 5 0 10.9.9.9 32<<— This is sent as type 5 as there is no VNI at all for it to be mapped to
BGP routing table entry for [5][10.255.1.11:1][0][32][10.9.9.9]/17, version 650
Paths: (1 available, best #1, table EVPN-BGP-Table)
Not advertised to any peer
Refresh Epoch 2
Local
10.255.1.11 (metric 3) (via default) from 10.2.2.2 (10.2.2.2)
<<— Border_Leaf_VTEP Tunnel IP address
Origin IGP, metric 0, localpref 100, valid, internal, best
EVPN ESI: 00000000000000000000, Gateway Address: 0.0.0.0, VNI Label 99999, MPLS VPN Label 0
<<— Using Layer 3 VNI 99999
Extended Community: RT:10.255.1.11:1 ENCAP:8 Router MAC:EC1D.8B55.F55D
<<— Route Target and RMAC of Border_Leaf_VTEP
Originator: 10.255.1.11, Cluster list: 10.2.2.2
rx pathid: 0, tx pathid: 0x0
Border_Leaf_VTEP# show bgp vpnv4 unicast vrf vxlan 10.12.12.12/32<<— To VXLAN Fabric IP address on VTEP-1
BGP routing table entry for 10.255.1.11:1:10.12.12.12/32, version 3092
Paths: (1 available, best #1, table vxlan)
Not advertised to any peer
Refresh Epoch 4
Local, imported path from [2][10.1.1.1:12][0][48][005F860210E7][32][10.12.12.12]/24 (global)
<<— EVPN type-2 has been imported to VPNv4, from VTEP-1
10.255.1.1 (metric 3) (via default) from 10.2.2.2 (10.2.2.2)
Origin incomplete, metric 0, localpref 100, valid, internal, best
Extended Community: RT:10.255.1.11:1 ENCAP:8 Router MAC:7035.0956.7EDD
Originator: 10.1.1.1, Cluster list: 10.2.2.2
Local vxlan vtep:
vrf:vxlan, vni:99999
local router mac:EC1D.8B55.F55D
encap:8
vtep-ip:10.255.1.11
bdi:Vlan99
Remote VxLAN:
Topoid 0x2(vrf vxlan)
Remote Router MAC:7035.0956.7EDD <<— VTEP-1 RMAC
Encap 8
Egress VNI 99999
RTEP 10.255.1.1 <<— VTEP-1 Tunnel IP address
rx pathid: 0, tx pathid: 0x0
Border_Leaf_VTEP# show bgp l2vpn evpn all route-type 2 0 005F860210E7 10.12.12.12 <<— Border_Leaf_VTEP still knows the type-2. This is still exchanged between the VTEPs even though the prefix has been imported to VPNv4
BGP routing table entry for [2][10.1.1.1:12][0][48][005F860210E7][32][10.12.12.12]/24, version 3085
Paths: (1 available, best #1, table EVPN-BGP-Table)
Not advertised to any peer
Refresh Epoch 4
Local
10.255.1.1 (metric 3) (via default) from 10.2.2.2 (10.2.2.2)
Origin incomplete, metric 0, localpref 100, valid, internal, best
EVPN ESI: 00000000000000000000, Label1 12012, Label2 99999
<<— Both Layer 2 VNI and Layer 3 VNI labels are seen in type-2, but only Layer 3 VNI 99999 is used, once imported to VPNv4
Extended Community: RT:12:1 RT:10.255.1.1:1 ENCAP:8
Router MAC:7035.0956.7EDD
Originator: 10.1.1.1, Cluster list: 10.2.2.2
rx pathid: 0, tx pathid: 0x0
(注)
IP ルートが CEF テーブルに挿入されているかどうかを確認するには、特権 EXEC モードで show ip route vrf vrf-name コマンドを実行します。
IP VRF 内のホストデバイスに VTEP トンネル IP アドレスへの隣接関係があるかどうかの確認
次に、IP VRF 内のホストデバイスの VTEP トンネル IP アドレスに隣接関係があることを確認する例を示します。
VTEP-1# show ip cef vrf vxlan 10.9.9.9/32 platform
10.9.9.9/32
Platform adj-id: 0x1A, 0x0, tun_qos_dpidx:0 <<— Adjacency ID to remote IP address