Connectivity Guide

Congure VXLAN
To extend a L2 tenant segment using VXLAN, follow these conguration steps on each VTEP switch:
1 Congure the source IP address used in encapsulated VXLAN packets.
2 Congure a virtual network and assign a VXLAN VNI.
3 Congure VLAN-tagged access ports.
4 Congure untagged access ports.
5 (Optional) Enable routing for hosts on dierent virtual networks.
6 Advertise the local VXLAN source IP address to remote VTEPs.
7 (Optional) Congure VLT.
Congure source IP address on VTEP
When you congure a switch as a VXLAN tunnel endpoint (VTEP), congure a loopback interface, whose IP address is used as the source
IP address in encapsulated packet headers. Only a loopback interface assigned to a network virtualization edge (NVE) instance can be used
as a source VXLAN interface.
• You cannot recongure the VXLAN source interface or the IP address assigned to the source interface if there is at least one VXLAN
network ID (VNI) already assigned to a virtual-network ID (VNID) on the switch.
• The source loopback IP address must be reachable from a remote VTEP.
• An IPv6 address is not supported as the source VXLAN address.
• Do not assign the source loopback interface to a non-default VRF instance.
• VXLAN VTEP functionality is not supported for non-default VRF instances.
1 Congure a loopback interface to serve as the source VXLAN tunnel endpoint in CONFIGURATION mode (0 to 255).
interface loopback number
2 Congure an IP address on the loopback interface in INTERFACE mode. The IP address allows the source VTEP to send VXLAN
frames over the L3 transport network.
ip address ip-address/mask
3 Return to CONFIGURATION mode.
exit
4 Enter NVE mode from CONFIGURATION mode. NVE mode allows you to congure the VXLAN tunnel endpoint on the switch.
nve
5 Congure the loopback interface as the source tunnel endpoint for all virtual networks on the switch in NVE mode.
source-interface loopback number
6 Return to CONFIGURATION mode.
exit
Congure a VXLAN virtual network
To create a VXLAN, assign a VXLAN segment ID (VNI) to a virtual network ID (VNID) and congure a remote VTEP. A virtual network is
identied by a unique 2-byte VNID. You cannot assign the same VXLAN VNI to more than one virtual network. VXLAN tunnel endpoints
can either be manually congured in a static VXLAN or automatically discovered using BGP EVPN.
1 Create a virtual-network bridge domain in CONFIGURATION mode. Valid virtual-network ID (VNID) numbers are 1 to 65535.
virtual-network vn-id
2 Assign a VXLAN network identier (VNI) to the virtual network in VIRTUAL-NETWORK mode (1 to 16,777,215). Congure the VNI for
the same tenant segment on each VTEP switch.
vxlan-vni vni
3 (Optional) If you use BGP EVPN for VXLAN, this step is not required — To set up a static VXLAN, congure the source IP address of
a remote VTEP in VXLAN-VNI mode. You can congure up to 1024 remote VTEP addresses for a VXLAN VNI.
remote-vtep ip-address
516
VXLAN