问题:配置分布式VPN网关的时候,发现必须配置vpn实例的L3VNI 网络才能通,如果没有配置L3VNI的话,需要关闭vsi网关接口的arp代理功能,网络才能通,这里想问下L3VNI的作用是什么? 如果不配置L3VNI同时关闭vsi网关接口的arp代理,这个和配置L3VNI的核心区别是什么?不配置L3VNI的话,会有什么场景限制嘛?
interface Vsi-interface2182
ip binding vpn-instance vgw2182
ip address 192.168.20.1 255.255.252.0
mac-address 000f-e2ff-2182
local-proxy-arp enable
distributed-gateway local
SPINE(AS 2000)
| |
tor1 tor2
(AS 1000)(AS 1000)
| |
SERVER1 SERVER2
tor和spine之间走的ebgp,然后tor1 和 tor2 是经过spine建立ibgp,
server1 和server2 是同网段192.168.20.0/22 的,通过server1 ping server2 测试连通性:
配置如下:
vlan 2182
#
ip vpn-instance vgw2182
route-distinguisher 2182:1
address-family ipv4
vpn-target 2182:2
quit
address-family evpn
vpn-target 2182:1
quit
quit
#
interface Vsi-interface2182
ip binding vpn-instance vgw2182
ip address 192.168.20.1 255.255.252.0
mac-address 000f-e2ff-2182
local-proxy-arp enable
distributed-gateway local
quit
#
interface Vsi-interface3182
ip binding vpn-instance vgw2182
l3-vni 3182
quit
#
vsi vsi2182
gateway vsi-interface 2182
vxlan 2182
quit
restrain broadcast 10000
restrain multicast 10000
restrain unknown-unicast 100000
statistics enable
evpn encapsulation vxlan
arp mac-learning disable
nd mac-learning disable
route-distinguisher auto
vpn-target auto
quit
quit
#
interface Twenty-FiveGigE1/1/1
port link-mode bridge
port access vlan 2182
port link-flap protect enable
qos trust dscp
#
service-instance 2182
encapsulation untagged
xconnect vsi vsi2182
quit
quit
#
bgp 64532
group evpn internal
peer 10.172.80.111 group evpn
peer 10.172.80.111 connect-interface LoopBack0
address-family l2vpn evpn
peer evpn enable
vpn-route cross multipath
quit
quit
(0)
最佳答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论