├── README.md
├── l3fabric-evpn.png
├── leaf-r101
├── leaf-r102
├── leaf-r201
├── leaf-r202
├── leaf-r301
├── leaf-r302
├── node-r101
├── node-r102
├── node-r201
├── node-r202
├── spine1
├── spine2
└── spine3
/README.md:
--------------------------------------------------------------------------------
1 | # arista-l3fabric-bgp-evpn-config
2 | Arista EOS L3Fabric EVPN
3 |
4 | Environmnet:
5 | Spine/Leaf switches - Arista 4.18.5M
6 | Node - VyOS 1.1.7 (VyOS is good enough to simulate mlag bonding)
7 | ISP - VyOS 1.1.7
8 |
9 | IP addressing:
10 |
11 |
Topology:
12 |
13 | 
14 |
15 | Cheatsheet/Commonly used terms:
16 |
--------------------------------------------------------------------------------
/l3fabric-evpn.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/maugli13/arista-l3fabric-bgp-evpn-config/1ffe028eb8c5a31759d3669baefde1366ce7ed7c/l3fabric-evpn.png
--------------------------------------------------------------------------------
/leaf-r101:
--------------------------------------------------------------------------------
1 | ! Command: show running-config
2 | ! device: leaf-r101 (vEOS, EOS-4.18.5M)
3 | !
4 | ! boot system flash:/vEOS-lab.swi
5 | !
6 | transceiver qsfp default-mode 4x10G
7 | !
8 | service routing protocols model multi-agent
9 | !
10 | hostname leaf-r101
11 | !
12 | spanning-tree mode mstp
13 | no spanning-tree vlan 4000
14 | !
15 | no aaa root
16 | !
17 | vlan 100
18 | name GROUP1
19 | !
20 | vlan 200
21 | !
22 | vlan 4000
23 | name mlag-control
24 | trunk group mlag-control
25 | !
26 | vlan 4001
27 | name iBGP_LOCAL_PEER
28 | trunk group iBGP_LOCAL_PEER
29 | !
30 | interface Port-Channel1
31 | description node-r101
32 | switchport access vlan 100
33 | mlag 1
34 | !
35 | interface Port-Channel2
36 | description node-r102
37 | switchport access vlan 200
38 | mlag 2
39 | !
40 | interface Port-Channel2000
41 | description mlag-peerlink
42 | switchport mode trunk
43 | switchport trunk group iBGP_LOCAL_PEER
44 | switchport trunk group mlag-control
45 | !
46 | interface Ethernet1
47 | description SPINE1
48 | no switchport
49 | ip address 172.16.101.2/30
50 | !
51 | interface Ethernet2
52 | description SPINE2
53 | no switchport
54 | ip address 172.16.102.2/30
55 | !
56 | interface Ethernet3
57 | description SPINE3
58 | no switchport
59 | ip address 172.16.103.2/30
60 | !
61 | interface Ethernet4
62 | !
63 | interface Ethernet5
64 | description node-r101
65 | channel-group 1 mode active
66 | !
67 | interface Ethernet6
68 | description node-r102
69 | channel-group 2 mode active
70 | !
71 | interface Ethernet7
72 | description mlag-peerlink
73 | channel-group 2000 mode active
74 | !
75 | interface Loopback0
76 | description VTEP
77 | ip address 172.17.10.1/32
78 | !
79 | interface Loopback255
80 | description MGMT
81 | ip address 10.255.255.11/32
82 | !
83 | interface Management1
84 | !
85 | interface Vlan100
86 | ip address 10.1.100.2/24
87 | ip virtual-router address 10.1.100.1
88 | !
89 | interface Vlan200
90 | ip address 10.1.200.2/24
91 | ip virtual-router address 10.1.200.1
92 | !
93 | interface Vlan4000
94 | ip address 192.168.1.1/30
95 | !
96 | interface Vlan4001
97 | description iBGP_LOCAL_PEER
98 | ip address 172.16.10.1/30
99 | !
100 | interface Vxlan1
101 | vxlan source-interface Loopback0
102 | vxlan udp-port 4789
103 | vxlan vlan 100 vni 1100
104 | vxlan vlan 200 vni 1200
105 | !
106 | ip virtual-router mac-address 50:00:43:21:12:34
107 | !
108 | ip routing
109 | !
110 | ip prefix-list LOOPBACKS
111 | seq 10 permit 172.17.10.1/32
112 | seq 20 permit 10.255.255.11/32
113 | !
114 | mlag configuration
115 | domain-id MLAG1
116 | heartbeat-interval 1000
117 | local-interface Vlan4000
118 | peer-address 192.168.1.2
119 | peer-link Port-Channel2000
120 | reload-delay 200
121 | !
122 | route-map LOOPBACKS permit 10
123 | match ip address prefix-list LOOPBACKS
124 | !
125 | router bgp 65100
126 | router-id 10.255.255.11
127 | maximum-paths 3
128 | neighbor LOCAL_PEER peer-group
129 | neighbor LOCAL_PEER remote-as 65100
130 | neighbor LOCAL_PEER next-hop-self
131 | neighbor LOCAL_PEER maximum-routes 12000
132 | neighbor SPINE peer-group
133 | neighbor SPINE remote-as 65000
134 | neighbor SPINE allowas-in 1
135 | neighbor SPINE route-map LOOPBACKS out
136 | neighbor SPINE send-community
137 | neighbor SPINE maximum-routes 12000
138 | neighbor SPINE-EVPN peer-group
139 | neighbor SPINE-EVPN remote-as 65000
140 | neighbor SPINE-EVPN update-source Loopback255
141 | neighbor SPINE-EVPN allowas-in 1
142 | neighbor SPINE-EVPN ebgp-multihop 5
143 | neighbor SPINE-EVPN send-community extended
144 | neighbor SPINE-EVPN maximum-routes 12000
145 | neighbor 10.255.255.1 peer-group SPINE-EVPN
146 | neighbor 10.255.255.2 peer-group SPINE-EVPN
147 | neighbor 10.255.255.3 peer-group SPINE-EVPN
148 | neighbor 172.16.10.2 peer-group LOCAL_PEER
149 | neighbor 172.16.101.1 peer-group SPINE
150 | neighbor 172.16.102.1 peer-group SPINE
151 | neighbor 172.16.103.1 peer-group SPINE
152 | redistribute connected route-map LOOPBACKS
153 | !
154 | vlan 100
155 | rd 10.255.255.11:1100
156 | route-target both 1100:1100
157 | redistribute learned
158 | !
159 | vlan 200
160 | rd 10.255.255.11:1200
161 | route-target both 1200:1200
162 | redistribute learned
163 | !
164 | address-family evpn
165 | no neighbor SPINE activate
166 | neighbor SPINE-EVPN activate
167 | !
168 | address-family ipv4
169 | no neighbor SPINE-EVPN activate
170 | !
171 | end
--------------------------------------------------------------------------------
/leaf-r102:
--------------------------------------------------------------------------------
1 | ! Command: show running-config
2 | ! device: leaf-r102 (vEOS, EOS-4.18.5M)
3 | !
4 | ! boot system flash:/vEOS-lab.swi
5 | !
6 | transceiver qsfp default-mode 4x10G
7 | !
8 | service routing protocols model multi-agent
9 | !
10 | hostname leaf-r102
11 | !
12 | spanning-tree mode mstp
13 | no spanning-tree vlan 4000
14 | !
15 | no aaa root
16 | !
17 | vlan 100
18 | name GROUP1
19 | !
20 | vlan 200
21 | !
22 | vlan 4000
23 | name mlag-control
24 | trunk group mlag-control
25 | !
26 | vlan 4001
27 | name iBGP_LOCAL_PEER
28 | trunk group iBGP_LOCAL_PEER
29 | !
30 | interface Port-Channel1
31 | description node-r101
32 | switchport access vlan 100
33 | mlag 1
34 | !
35 | interface Port-Channel2
36 | description node-r102
37 | switchport access vlan 200
38 | mlag 2
39 | !
40 | interface Port-Channel2000
41 | description mlag-peerlink
42 | switchport mode trunk
43 | switchport trunk group iBGP_LOCAL_PEER
44 | switchport trunk group mlag-control
45 | !
46 | interface Ethernet1
47 | description SPINE1
48 | no switchport
49 | ip address 172.18.101.2/30
50 | !
51 | interface Ethernet2
52 | description SPINE2
53 | no switchport
54 | ip address 172.18.102.2/30
55 | !
56 | interface Ethernet3
57 | description SPINE3
58 | no switchport
59 | ip address 172.18.103.2/30
60 | !
61 | interface Ethernet4
62 | !
63 | interface Ethernet5
64 | description node-r101
65 | channel-group 1 mode active
66 | !
67 | interface Ethernet6
68 | description node-r102
69 | channel-group 2 mode active
70 | !
71 | interface Ethernet7
72 | description mlag-peerlink
73 | channel-group 2000 mode active
74 | !
75 | interface Loopback0
76 | description VTEP
77 | ip address 172.17.10.1/32
78 | !
79 | interface Loopback255
80 | description MGMT
81 | ip address 10.255.255.12/32
82 | !
83 | interface Management1
84 | !
85 | interface Vlan100
86 | ip address 10.1.100.3/24
87 | ip virtual-router address 10.1.100.1
88 | !
89 | interface Vlan200
90 | ip address 10.1.200.3/24
91 | ip virtual-router address 10.1.200.1
92 | !
93 | interface Vlan4000
94 | ip address 192.168.1.2/30
95 | !
96 | interface Vlan4001
97 | description iBGP_LOCAL_PEER
98 | ip address 172.16.10.2/30
99 | !
100 | interface Vxlan1
101 | vxlan source-interface Loopback0
102 | vxlan udp-port 4789
103 | vxlan vlan 100 vni 1100
104 | vxlan vlan 200 vni 1200
105 | !
106 | ip virtual-router mac-address 50:00:43:21:12:34
107 | !
108 | ip routing
109 | !
110 | ip prefix-list LOOPBACKS
111 | seq 10 permit 172.17.10.1/32
112 | seq 20 permit 10.255.255.12/32
113 | !
114 | mlag configuration
115 | domain-id MLAG1
116 | heartbeat-interval 1000
117 | local-interface Vlan4000
118 | peer-address 192.168.1.1
119 | peer-link Port-Channel2000
120 | reload-delay 200
121 | !
122 | route-map LOOPBACKS permit 10
123 | match ip address prefix-list LOOPBACKS
124 | !
125 | router bgp 65100
126 | router-id 10.255.255.12
127 | maximum-paths 3
128 | neighbor LOCAL_PEER peer-group
129 | neighbor LOCAL_PEER remote-as 65100
130 | neighbor LOCAL_PEER next-hop-self
131 | neighbor LOCAL_PEER maximum-routes 12000
132 | neighbor SPINE peer-group
133 | neighbor SPINE remote-as 65000
134 | neighbor SPINE allowas-in 1
135 | neighbor SPINE route-map LOOPBACKS out
136 | neighbor SPINE send-community extended
137 | neighbor SPINE maximum-routes 12000
138 | neighbor SPINE-EVPN peer-group
139 | neighbor SPINE-EVPN remote-as 65000
140 | neighbor SPINE-EVPN update-source Loopback255
141 | neighbor SPINE-EVPN allowas-in 1
142 | neighbor SPINE-EVPN ebgp-multihop 5
143 | neighbor SPINE-EVPN send-community extended
144 | neighbor SPINE-EVPN maximum-routes 12000
145 | neighbor 10.255.255.1 peer-group SPINE-EVPN
146 | neighbor 10.255.255.2 peer-group SPINE-EVPN
147 | neighbor 10.255.255.3 peer-group SPINE-EVPN
148 | neighbor 172.16.10.1 peer-group LOCAL_PEER
149 | neighbor 172.18.101.1 peer-group SPINE
150 | neighbor 172.18.102.1 peer-group SPINE
151 | neighbor 172.18.103.1 peer-group SPINE
152 | redistribute connected route-map LOOPBACKS
153 | !
154 | vlan 100
155 | rd 10.255.255.12:1100
156 | route-target both 1100:1100
157 | redistribute learned
158 | !
159 | vlan 200
160 | rd 10.255.255.12:1200
161 | route-target both 1200:1200
162 | redistribute learned
163 | !
164 | address-family evpn
165 | no neighbor SPINE activate
166 | neighbor SPINE-EVPN activate
167 | !
168 | address-family ipv4
169 | no neighbor SPINE-EVPN activate
170 | !
171 | end
--------------------------------------------------------------------------------
/leaf-r201:
--------------------------------------------------------------------------------
1 | ! Command: show running-config
2 | ! device: leaf-r201 (vEOS, EOS-4.18.5M)
3 | !
4 | ! boot system flash:/vEOS-lab.swi
5 | !
6 | transceiver qsfp default-mode 4x10G
7 | !
8 | service routing protocols model multi-agent
9 | !
10 | hostname leaf-r201
11 | !
12 | spanning-tree mode mstp
13 | no spanning-tree vlan 4000
14 | !
15 | no aaa root
16 | !
17 | vlan 100
18 | name GROUP1
19 | !
20 | vlan 200
21 | !
22 | vlan 4000
23 | name mlag-control
24 | trunk group mlag-control
25 | !
26 | vlan 4001
27 | name iBGP_LOCAL_PEER
28 | trunk group iBGP_LOCAL_PEER
29 | !
30 | interface Port-Channel1
31 | description node-r201
32 | switchport access vlan 100
33 | mlag 1
34 | !
35 | interface Port-Channel2
36 | description node-r202
37 | switchport access vlan 200
38 | mlag 2
39 | !
40 | interface Port-Channel2000
41 | description mlag-peerlink
42 | switchport mode trunk
43 | switchport trunk group iBGP_LOCAL_PEER
44 | switchport trunk group mlag-control
45 | !
46 | interface Ethernet1
47 | description SPINE1
48 | no switchport
49 | ip address 172.16.121.2/30
50 | !
51 | interface Ethernet2
52 | description SPINE2
53 | no switchport
54 | ip address 172.16.122.2/30
55 | !
56 | interface Ethernet3
57 | description SPINE3
58 | no switchport
59 | ip address 172.16.123.2/30
60 | !
61 | interface Ethernet4
62 | !
63 | interface Ethernet5
64 | description node-r201
65 | channel-group 1 mode active
66 | !
67 | interface Ethernet6
68 | description node-r202
69 | channel-group 2 mode active
70 | !
71 | interface Ethernet7
72 | description mlag-peerlink
73 | channel-group 2000 mode active
74 | !
75 | interface Loopback0
76 | description VTEP
77 | ip address 172.17.20.1/32
78 | !
79 | interface Loopback255
80 | description MGMT
81 | ip address 10.255.255.21/32
82 | !
83 | interface Management1
84 | !
85 | interface Vlan100
86 | ip address 10.1.100.4/24
87 | ip virtual-router address 10.1.100.1
88 | !
89 | interface Vlan200
90 | ip address 10.1.200.4/24
91 | ip virtual-router address 10.1.200.1
92 | !
93 | interface Vlan4000
94 | ip address 192.168.2.1/30
95 | !
96 | interface Vlan4001
97 | description iBGP_LOCAL_PEER
98 | ip address 172.16.20.1/30
99 | !
100 | interface Vxlan1
101 | vxlan source-interface Loopback0
102 | vxlan udp-port 4789
103 | vxlan vlan 100 vni 1100
104 | vxlan vlan 200 vni 1200
105 | !
106 | ip virtual-router mac-address 50:00:43:21:12:34
107 | !
108 | ip routing
109 | !
110 | ip prefix-list LOOPBACKS
111 | seq 10 permit 172.17.20.1/32
112 | seq 20 permit 10.255.255.21/32
113 | !
114 | mlag configuration
115 | domain-id MLAG1
116 | heartbeat-interval 1000
117 | local-interface Vlan4000
118 | peer-address 192.168.2.2
119 | peer-link Port-Channel2000
120 | reload-delay 200
121 | !
122 | route-map LOOPBACKS permit 10
123 | match ip address prefix-list LOOPBACKS
124 | !
125 | router bgp 65100
126 | router-id 10.255.255.21
127 | maximum-paths 3
128 | neighbor LOCAL_PEER peer-group
129 | neighbor LOCAL_PEER remote-as 65100
130 | neighbor LOCAL_PEER next-hop-self
131 | neighbor LOCAL_PEER maximum-routes 12000
132 | neighbor SPINE peer-group
133 | neighbor SPINE remote-as 65000
134 | neighbor SPINE allowas-in 1
135 | neighbor SPINE route-map LOOPBACKS out
136 | neighbor SPINE send-community
137 | neighbor SPINE maximum-routes 12000
138 | neighbor SPINE-EVPN peer-group
139 | neighbor SPINE-EVPN remote-as 65000
140 | neighbor SPINE-EVPN update-source Loopback255
141 | neighbor SPINE-EVPN allowas-in 1
142 | neighbor SPINE-EVPN ebgp-multihop 5
143 | neighbor SPINE-EVPN send-community extended
144 | neighbor SPINE-EVPN maximum-routes 12000
145 | neighbor 10.255.255.1 peer-group SPINE-EVPN
146 | neighbor 10.255.255.2 peer-group SPINE-EVPN
147 | neighbor 10.255.255.3 peer-group SPINE-EVPN
148 | neighbor 172.16.20.2 peer-group LOCAL_PEER
149 | neighbor 172.16.121.1 peer-group SPINE
150 | neighbor 172.16.122.1 peer-group SPINE
151 | neighbor 172.16.123.1 peer-group SPINE
152 | redistribute connected route-map LOOPBACKS
153 | !
154 | vlan 100
155 | rd 10.255.255.21:1100
156 | route-target both 1100:1100
157 | redistribute learned
158 | !
159 | vlan 200
160 | rd 10.255.255.21:1200
161 | route-target both 1200:1200
162 | redistribute learned
163 | !
164 | address-family evpn
165 | no neighbor SPINE activate
166 | neighbor SPINE-EVPN activate
167 | !
168 | address-family ipv4
169 | no neighbor SPINE-EVPN activate
170 | !
171 | end
--------------------------------------------------------------------------------
/leaf-r202:
--------------------------------------------------------------------------------
1 | ! Command: show running-config
2 | ! device: leaf-r202 (vEOS, EOS-4.18.5M)
3 | !
4 | ! boot system flash:/vEOS-lab.swi
5 | !
6 | transceiver qsfp default-mode 4x10G
7 | !
8 | service routing protocols model multi-agent
9 | !
10 | hostname leaf-r202
11 | !
12 | spanning-tree mode mstp
13 | no spanning-tree vlan 4000
14 | !
15 | no aaa root
16 | !
17 | vlan 100
18 | name GROUP1
19 | !
20 | vlan 200
21 | !
22 | vlan 4000
23 | name mlag-control
24 | trunk group mlag-control
25 | !
26 | vlan 4001
27 | name iBGP_LOCAL_PEER
28 | trunk group iBGP_LOCAL_PEER
29 | !
30 | interface Port-Channel1
31 | description node-r201
32 | switchport access vlan 100
33 | mlag 1
34 | !
35 | interface Port-Channel2
36 | description node-r202
37 | switchport access vlan 200
38 | mlag 2
39 | !
40 | interface Port-Channel2000
41 | description mlag-peerlink
42 | switchport mode trunk
43 | switchport trunk group iBGP_LOCAL_PEER
44 | switchport trunk group mlag-control
45 | !
46 | interface Ethernet1
47 | description SPINE1
48 | no switchport
49 | ip address 172.18.121.2/30
50 | !
51 | interface Ethernet2
52 | description SPINE2
53 | no switchport
54 | ip address 172.18.122.2/30
55 | !
56 | interface Ethernet3
57 | description SPINE3
58 | no switchport
59 | ip address 172.18.123.2/30
60 | !
61 | interface Ethernet4
62 | !
63 | interface Ethernet5
64 | description node-r201
65 | channel-group 1 mode active
66 | !
67 | interface Ethernet6
68 | description node-r202
69 | channel-group 2 mode active
70 | !
71 | interface Ethernet7
72 | description mlag-peerlink
73 | channel-group 2000 mode active
74 | !
75 | interface Loopback0
76 | description VTEP
77 | ip address 172.17.20.1/32
78 | !
79 | interface Loopback255
80 | description MGMT
81 | ip address 10.255.255.22/32
82 | !
83 | interface Management1
84 | !
85 | interface Vlan100
86 | ip address 10.1.100.5/24
87 | ip virtual-router address 10.1.100.1
88 | !
89 | interface Vlan200
90 | ip address 10.1.200.5/24
91 | ip virtual-router address 10.1.200.1
92 | !
93 | interface Vlan4000
94 | ip address 192.168.2.2/30
95 | !
96 | interface Vlan4001
97 | description iBGP_LOCAL_PEER
98 | ip address 172.16.20.2/30
99 | !
100 | interface Vxlan1
101 | vxlan source-interface Loopback0
102 | vxlan udp-port 4789
103 | vxlan vlan 100 vni 1100
104 | vxlan vlan 200 vni 1200
105 | !
106 | ip virtual-router mac-address 50:00:43:21:12:34
107 | !
108 | ip routing
109 | !
110 | ip prefix-list LOOPBACKS
111 | seq 10 permit 172.17.20.1/32
112 | seq 20 permit 10.255.255.22/32
113 | !
114 | mlag configuration
115 | domain-id MLAG1
116 | heartbeat-interval 1000
117 | local-interface Vlan4000
118 | peer-address 192.168.2.1
119 | peer-link Port-Channel2000
120 | reload-delay 200
121 | !
122 | route-map LOOPBACKS permit 10
123 | match ip address prefix-list LOOPBACKS
124 | !
125 | router bgp 65100
126 | router-id 10.255.255.22
127 | maximum-paths 3
128 | neighbor LOCAL_PEER peer-group
129 | neighbor LOCAL_PEER remote-as 65100
130 | neighbor LOCAL_PEER next-hop-self
131 | neighbor LOCAL_PEER maximum-routes 12000
132 | neighbor SPINE peer-group
133 | neighbor SPINE remote-as 65000
134 | neighbor SPINE allowas-in 1
135 | neighbor SPINE route-map LOOPBACKS out
136 | neighbor SPINE send-community
137 | neighbor SPINE maximum-routes 12000
138 | neighbor SPINE-EVPN peer-group
139 | neighbor SPINE-EVPN remote-as 65000
140 | neighbor SPINE-EVPN update-source Loopback255
141 | neighbor SPINE-EVPN allowas-in 1
142 | neighbor SPINE-EVPN ebgp-multihop 5
143 | neighbor SPINE-EVPN send-community extended
144 | neighbor SPINE-EVPN maximum-routes 12000
145 | neighbor 10.255.255.1 peer-group SPINE-EVPN
146 | neighbor 10.255.255.2 peer-group SPINE-EVPN
147 | neighbor 10.255.255.3 peer-group SPINE-EVPN
148 | neighbor 172.16.20.1 peer-group LOCAL_PEER
149 | neighbor 172.18.121.1 peer-group SPINE
150 | neighbor 172.18.122.1 peer-group SPINE
151 | neighbor 172.18.123.1 peer-group SPINE
152 | redistribute connected route-map LOOPBACKS
153 | !
154 | vlan 100
155 | rd 10.255.255.22:1100
156 | route-target both 1100:1100
157 | redistribute learned
158 | !
159 | vlan 200
160 | rd 10.255.255.22:1200
161 | route-target both 1200:1200
162 | redistribute learned
163 | !
164 | address-family evpn
165 | no neighbor SPINE activate
166 | neighbor SPINE-EVPN activate
167 | !
168 | address-family ipv4
169 | no neighbor SPINE-EVPN activate
170 | !
171 | end
--------------------------------------------------------------------------------
/leaf-r301:
--------------------------------------------------------------------------------
1 | ! Command: show running-config
2 | ! device: leaf-r301 (vEOS, EOS-4.18.5M)
3 | !
4 | ! boot system flash:/vEOS-lab.swi
5 | !
6 | transceiver qsfp default-mode 4x10G
7 | !
8 | service routing protocols model multi-agent
9 | !
10 | hostname leaf-r301
11 | !
12 | spanning-tree mode mstp
13 | no spanning-tree vlan 4000
14 | !
15 | no aaa root
16 | !
17 | vlan 4000
18 | name mlag-control
19 | trunk group mlag-control
20 | !
21 | vlan 4001
22 | name iBGP_LOCAL_PEER
23 | trunk group iBGP_LOCAL_PEER
24 | !
25 | interface Port-Channel1
26 | description ISP1
27 | switchport access vlan 100
28 | mlag 1
29 | !
30 | interface Port-Channel2
31 | description ISP2
32 | switchport access vlan 200
33 | mlag 2
34 | !
35 | interface Port-Channel2000
36 | description mlag-peerlink
37 | switchport mode trunk
38 | switchport trunk group iBGP_LOCAL_PEER
39 | switchport trunk group mlag-control
40 | !
41 | interface Ethernet1
42 | description SPINE1
43 | no switchport
44 | ip address 172.16.131.2/30
45 | !
46 | interface Ethernet2
47 | description SPINE2
48 | no switchport
49 | ip address 172.16.132.2/30
50 | !
51 | interface Ethernet3
52 | description SPINE3
53 | no switchport
54 | ip address 172.16.133.2/30
55 | !
56 | interface Ethernet4
57 | !
58 | interface Ethernet5
59 | description ISP1
60 | channel-group 1 mode active
61 | !
62 | interface Ethernet6
63 | description ISP2
64 | channel-group 2 mode active
65 | !
66 | interface Ethernet7
67 | description mlag-peerlink
68 | channel-group 2000 mode active
69 | !
70 | interface Loopback255
71 | description MGMT
72 | ip address 10.255.255.31/32
73 | !
74 | interface Management1
75 | !
76 | interface Vlan4000
77 | ip address 192.168.3.1/30
78 | !
79 | interface Vlan4001
80 | description iBGP_LOCAL_PEER
81 | ip address 172.16.30.1/30
82 | !
83 | ip routing
84 | !
85 | ip prefix-list LOOPBACKS
86 | seq 10 permit 10.255.255.31/32
87 | !
88 | mlag configuration
89 | domain-id MLAG1
90 | heartbeat-interval 1000
91 | local-interface Vlan4000
92 | peer-address 192.168.3.2
93 | peer-link Port-Channel2000
94 | reload-delay 200
95 | !
96 | route-map LOOPBACKS permit 10
97 | match ip address prefix-list LOOPBACKS
98 | !
99 | end
--------------------------------------------------------------------------------
/leaf-r302:
--------------------------------------------------------------------------------
1 | ! Command: show running-config
2 | ! device: leaf-r302 (vEOS, EOS-4.18.5M)
3 | !
4 | ! boot system flash:/vEOS-lab.swi
5 | !
6 | transceiver qsfp default-mode 4x10G
7 | !
8 | service routing protocols model multi-agent
9 | !
10 | hostname leaf-r302
11 | !
12 | spanning-tree mode mstp
13 | no spanning-tree vlan 4000
14 | !
15 | no aaa root
16 | !
17 | vlan 100,200
18 | !
19 | vlan 4000
20 | name mlag-control
21 | trunk group mlag-control
22 | !
23 | vlan 4001
24 | name iBGP_LOCAL_PEER
25 | trunk group iBGP_LOCAL_PEER
26 | !
27 | interface Port-Channel1
28 | description ISP1
29 | switchport access vlan 100
30 | mlag 1
31 | !
32 | interface Port-Channel2
33 | description ISP2
34 | switchport access vlan 200
35 | mlag 2
36 | !
37 | interface Port-Channel2000
38 | description mlag-peerlink
39 | switchport mode trunk
40 | switchport trunk group iBGP_LOCAL_PEER
41 | switchport trunk group mlag-control
42 | !
43 | interface Ethernet1
44 | description SPINE1
45 | no switchport
46 | ip address 172.18.131.2/30
47 | !
48 | interface Ethernet2
49 | description SPINE2
50 | no switchport
51 | ip address 172.18.132.2/30
52 | !
53 | interface Ethernet3
54 | description SPINE3
55 | no switchport
56 | ip address 172.18.133.2/30
57 | !
58 | interface Ethernet4
59 | !
60 | interface Ethernet5
61 | description ISP1
62 | channel-group 1 mode active
63 | !
64 | interface Ethernet6
65 | description ISP2
66 | channel-group 2 mode active
67 | !
68 | interface Ethernet7
69 | description mlag-peerlink
70 | channel-group 2000 mode active
71 | !
72 | interface Loopback255
73 | description MGMT
74 | ip address 10.255.255.32/32
75 | !
76 | interface Management1
77 | !
78 | interface Vlan4000
79 | ip address 192.168.3.2/30
80 | !
81 | interface Vlan4001
82 | description iBGP_LOCAL_PEER
83 | ip address 172.16.30.2/30
84 | !
85 | ip routing
86 | !
87 | ip prefix-list LOOPBACKS
88 | seq 10 permit 10.255.255.32/32
89 | !
90 | mlag configuration
91 | domain-id MLAG1
92 | heartbeat-interval 1000
93 | local-interface Vlan4000
94 | peer-address 192.168.3.1
95 | peer-link Port-Channel2000
96 | reload-delay 200
97 | !
98 | route-map LOOPBACKS permit 10
99 | match ip address prefix-list LOOPBACKS
100 | !
101 | end
--------------------------------------------------------------------------------
/node-r101:
--------------------------------------------------------------------------------
1 | set interfaces bonding bond100 address '10.1.100.100/24'
2 | set interfaces bonding bond100 description 'leaf mlag'
3 | set interfaces bonding bond100 hash-policy 'layer2'
4 | set interfaces bonding bond100 mode '802.3ad'
5 | set interfaces ethernet eth0 bond-group 'bond100'
6 | set interfaces ethernet eth0 duplex 'auto'
7 | set interfaces ethernet eth0 hw-id '50:00:00:0a:00:00'
8 | set interfaces ethernet eth0 smp_affinity 'auto'
9 | set interfaces ethernet eth0 speed 'auto'
10 | set interfaces ethernet eth1 bond-group 'bond100'
11 | set interfaces ethernet eth1 duplex 'auto'
12 | set interfaces ethernet eth1 hw-id '50:00:00:0a:00:01'
13 | set interfaces ethernet eth1 smp_affinity 'auto'
14 | set interfaces ethernet eth1 speed 'auto'
15 | set interfaces ethernet eth2 duplex 'auto'
16 | set interfaces ethernet eth2 hw-id '50:00:00:0a:00:02'
17 | set interfaces ethernet eth2 smp_affinity 'auto'
18 | set interfaces ethernet eth2 speed 'auto'
19 | set interfaces ethernet eth3 duplex 'auto'
20 | set interfaces ethernet eth3 hw-id '50:00:00:0a:00:03'
21 | set interfaces ethernet eth3 smp_affinity 'auto'
22 | set interfaces ethernet eth3 speed 'auto'
23 | set interfaces loopback 'lo'
24 | set protocols static route 0.0.0.0/0 next-hop '10.1.100.1'
25 | set service lldp legacy-protocols 'cdp'
26 | set system config-management commit-revisions '20'
27 | set system console device ttyS0 speed '9600'
28 | set system host-name 'node-r101'
29 | set system login user vyos authentication encrypted-password '$1$HR42KG7n$Ynpv5D8LEnJiOZPX85Wt.1'
30 | set system login user vyos authentication plaintext-password ''
31 | set system login user vyos level 'admin'
32 | set system ntp server '0.pool.ntp.org'
33 | set system ntp server '1.pool.ntp.org'
34 | set system ntp server '2.pool.ntp.org'
35 | set system package auto-sync '1'
36 | set system package repository community components 'main'
37 | set system package repository community distribution 'helium'
38 | set system package repository community password ''
39 | set system package repository community url 'http://packages.vyos.net/vyos'
40 | set system package repository community username ''
41 | set system syslog global facility all level 'notice'
42 | set system syslog global facility protocols level 'debug'
43 | set system time-zone 'UTC'
44 |
--------------------------------------------------------------------------------
/node-r102:
--------------------------------------------------------------------------------
1 | set interfaces bonding bond100 address '10.1.200.100/24'
2 | set interfaces bonding bond100 description 'leaf mlag'
3 | set interfaces bonding bond100 hash-policy 'layer2'
4 | set interfaces bonding bond100 mode '802.3ad'
5 | set interfaces ethernet eth0 bond-group 'bond100'
6 | set interfaces ethernet eth0 duplex 'auto'
7 | set interfaces ethernet eth0 hw-id '50:00:00:0b:00:00'
8 | set interfaces ethernet eth0 smp_affinity 'auto'
9 | set interfaces ethernet eth0 speed 'auto'
10 | set interfaces ethernet eth1 bond-group 'bond100'
11 | set interfaces ethernet eth1 duplex 'auto'
12 | set interfaces ethernet eth1 hw-id '50:00:00:0b:00:01'
13 | set interfaces ethernet eth1 smp_affinity 'auto'
14 | set interfaces ethernet eth1 speed 'auto'
15 | set interfaces ethernet eth2 duplex 'auto'
16 | set interfaces ethernet eth2 hw-id '50:00:00:0b:00:02'
17 | set interfaces ethernet eth2 smp_affinity 'auto'
18 | set interfaces ethernet eth2 speed 'auto'
19 | set interfaces ethernet eth3 duplex 'auto'
20 | set interfaces ethernet eth3 hw-id '50:00:00:0b:00:03'
21 | set interfaces ethernet eth3 smp_affinity 'auto'
22 | set interfaces ethernet eth3 speed 'auto'
23 | set interfaces loopback 'lo'
24 | set protocols static route 0.0.0.0/0 next-hop '10.1.200.1'
25 | set system config-management commit-revisions '20'
26 | set system console device ttyS0 speed '9600'
27 | set system host-name 'node-r102'
28 | set system login user vyos authentication encrypted-password '$1$HR42KG7n$Ynpv5D8LEnJiOZPX85Wt.1'
29 | set system login user vyos authentication plaintext-password ''
30 | set system login user vyos level 'admin'
31 | set system ntp server '0.pool.ntp.org'
32 | set system ntp server '1.pool.ntp.org'
33 | set system ntp server '2.pool.ntp.org'
34 | set system package auto-sync '1'
35 | set system package repository community components 'main'
36 | set system package repository community distribution 'helium'
37 | set system package repository community password ''
38 | set system package repository community url 'http://packages.vyos.net/vyos'
39 | set system package repository community username ''
40 | set system syslog global facility all level 'notice'
41 | set system syslog global facility protocols level 'debug'
42 | set system time-zone 'UTC'
43 |
--------------------------------------------------------------------------------
/node-r201:
--------------------------------------------------------------------------------
1 | set interfaces bonding bond100 address '10.1.100.101/24'
2 | set interfaces bonding bond100 description 'leaf mlag'
3 | set interfaces bonding bond100 hash-policy 'layer2'
4 | set interfaces bonding bond100 mode '802.3ad'
5 | set interfaces ethernet eth0 bond-group 'bond100'
6 | set interfaces ethernet eth0 duplex 'auto'
7 | set interfaces ethernet eth0 hw-id '50:00:00:0c:00:00'
8 | set interfaces ethernet eth0 smp_affinity 'auto'
9 | set interfaces ethernet eth0 speed 'auto'
10 | set interfaces ethernet eth1 bond-group 'bond100'
11 | set interfaces ethernet eth1 duplex 'auto'
12 | set interfaces ethernet eth1 hw-id '50:00:00:0c:00:01'
13 | set interfaces ethernet eth1 smp_affinity 'auto'
14 | set interfaces ethernet eth1 speed 'auto'
15 | set interfaces ethernet eth2 duplex 'auto'
16 | set interfaces ethernet eth2 hw-id '50:00:00:0c:00:02'
17 | set interfaces ethernet eth2 smp_affinity 'auto'
18 | set interfaces ethernet eth2 speed 'auto'
19 | set interfaces ethernet eth3 duplex 'auto'
20 | set interfaces ethernet eth3 hw-id '50:00:00:0c:00:03'
21 | set interfaces ethernet eth3 smp_affinity 'auto'
22 | set interfaces ethernet eth3 speed 'auto'
23 | set interfaces loopback 'lo'
24 | set protocols static route 0.0.0.0/0 next-hop '10.1.100.1'
25 | set system config-management commit-revisions '20'
26 | set system console device ttyS0 speed '9600'
27 | set system host-name 'node-r201'
28 | set system login user vyos authentication encrypted-password '$1$HR42KG7n$Ynpv5D8LEnJiOZPX85Wt.1'
29 | set system login user vyos authentication plaintext-password ''
30 | set system login user vyos level 'admin'
31 | set system ntp server '0.pool.ntp.org'
32 | set system ntp server '1.pool.ntp.org'
33 | set system ntp server '2.pool.ntp.org'
34 | set system package auto-sync '1'
35 | set system package repository community components 'main'
36 | set system package repository community distribution 'helium'
37 | set system package repository community password ''
38 | set system package repository community url 'http://packages.vyos.net/vyos'
39 | set system package repository community username ''
40 | set system syslog global facility all level 'notice'
41 | set system syslog global facility protocols level 'debug'
42 | set system time-zone 'UTC'
43 |
44 |
--------------------------------------------------------------------------------
/node-r202:
--------------------------------------------------------------------------------
1 | set interfaces bonding bond100 address '10.1.200.101/24'
2 | set interfaces bonding bond100 description 'leaf mlag'
3 | set interfaces bonding bond100 hash-policy 'layer2'
4 | set interfaces bonding bond100 mode '802.3ad'
5 | set interfaces ethernet eth0 bond-group 'bond100'
6 | set interfaces ethernet eth0 duplex 'auto'
7 | set interfaces ethernet eth0 hw-id '50:00:00:0d:00:00'
8 | set interfaces ethernet eth0 smp_affinity 'auto'
9 | set interfaces ethernet eth0 speed 'auto'
10 | set interfaces ethernet eth1 bond-group 'bond100'
11 | set interfaces ethernet eth1 duplex 'auto'
12 | set interfaces ethernet eth1 hw-id '50:00:00:0d:00:01'
13 | set interfaces ethernet eth1 smp_affinity 'auto'
14 | set interfaces ethernet eth1 speed 'auto'
15 | set interfaces ethernet eth2 duplex 'auto'
16 | set interfaces ethernet eth2 hw-id '50:00:00:0d:00:02'
17 | set interfaces ethernet eth2 smp_affinity 'auto'
18 | set interfaces ethernet eth2 speed 'auto'
19 | set interfaces ethernet eth3 duplex 'auto'
20 | set interfaces ethernet eth3 hw-id '50:00:00:0d:00:03'
21 | set interfaces ethernet eth3 smp_affinity 'auto'
22 | set interfaces ethernet eth3 speed 'auto'
23 | set interfaces loopback 'lo'
24 | set protocols static route 0.0.0.0/0 next-hop '10.1.200.1'
25 | set system config-management commit-revisions '20'
26 | set system console device ttyS0 speed '9600'
27 | set system host-name 'node-r202'
28 | set system login user vyos authentication encrypted-password '$1$HR42KG7n$Ynpv5D8LEnJiOZPX85Wt.1'
29 | set system login user vyos authentication plaintext-password ''
30 | set system login user vyos level 'admin'
31 | set system ntp server '0.pool.ntp.org'
32 | set system ntp server '1.pool.ntp.org'
33 | set system ntp server '2.pool.ntp.org'
34 | set system package auto-sync '1'
35 | set system package repository community components 'main'
36 | set system package repository community distribution 'helium'
37 | set system package repository community password ''
38 | set system package repository community url 'http://packages.vyos.net/vyos'
39 | set system package repository community username ''
40 | set system syslog global facility all level 'notice'
41 | set system syslog global facility protocols level 'debug'
42 | set system time-zone 'UTC'
43 |
--------------------------------------------------------------------------------
/spine1:
--------------------------------------------------------------------------------
1 | ! Command: show running-config
2 | ! device: spine1 (vEOS, EOS-4.18.5M)
3 | !
4 | ! boot system flash:/vEOS-lab.swi
5 | !
6 | transceiver qsfp default-mode 4x10G
7 | !
8 | service routing protocols model multi-agent
9 | !
10 | hostname spine1
11 | !
12 | spanning-tree mode mstp
13 | !
14 | no aaa root
15 | !
16 | interface Ethernet1
17 | description LEAF-R101
18 | no switchport
19 | ip address 172.16.101.1/30
20 | !
21 | interface Ethernet2
22 | description LEAF-R102
23 | no switchport
24 | ip address 172.18.101.1/30
25 | !
26 | interface Ethernet3
27 | no switchport
28 | ip address 172.16.121.1/30
29 | !
30 | interface Ethernet4
31 | no switchport
32 | ip address 172.18.121.1/30
33 | !
34 | interface Ethernet5
35 | no switchport
36 | ip address 172.16.131.1/30
37 | !
38 | interface Ethernet6
39 | no switchport
40 | ip address 172.18.131.1/30
41 | !
42 | interface Ethernet7
43 | !
44 | interface Loopback0
45 | !
46 | interface Loopback255
47 | description MGMT
48 | ip address 10.255.255.1/32
49 | !
50 | interface Management1
51 | !
52 | ip routing
53 | !
54 | ip prefix-list LOOPBACKS
55 | seq 10 permit 10.255.255.1/32
56 | !
57 | route-map LOOPBACKS permit 10
58 | match ip address prefix-list LOOPBACKS
59 | !
60 | router bgp 65000
61 | router-id 10.255.255.1
62 | maximum-paths 3
63 | neighbor LEAF peer-group
64 | neighbor LEAF remote-as 65100
65 | no neighbor LEAF next-hop-unchanged
66 | neighbor LEAF send-community
67 | neighbor LEAF maximum-routes 12000
68 | neighbor LEAF-EVPN peer-group
69 | neighbor LEAF-EVPN remote-as 65100
70 | neighbor LEAF-EVPN next-hop-unchanged
71 | neighbor LEAF-EVPN update-source Loopback255
72 | neighbor LEAF-EVPN ebgp-multihop 5
73 | neighbor LEAF-EVPN send-community extended
74 | neighbor LEAF-EVPN maximum-routes 12000
75 | neighbor 10.255.255.11 peer-group LEAF-EVPN
76 | neighbor 10.255.255.12 peer-group LEAF-EVPN
77 | neighbor 10.255.255.21 peer-group LEAF-EVPN
78 | neighbor 10.255.255.22 peer-group LEAF-EVPN
79 | neighbor 172.16.101.2 peer-group LEAF
80 | neighbor 172.16.121.2 peer-group LEAF
81 | neighbor 172.18.101.2 peer-group LEAF
82 | neighbor 172.18.121.2 peer-group LEAF
83 | redistribute connected route-map LOOPBACKS
84 | !
85 | address-family evpn
86 | no neighbor LEAF activate
87 | neighbor LEAF-EVPN activate
88 | !
89 | address-family ipv4
90 | no neighbor LEAF-EVPN activate
91 | !
92 | end
--------------------------------------------------------------------------------
/spine2:
--------------------------------------------------------------------------------
1 | ! Command: show running-config
2 | ! device: spine2 (vEOS, EOS-4.18.5M)
3 | !
4 | ! boot system flash:/vEOS-lab.swi
5 | !
6 | transceiver qsfp default-mode 4x10G
7 | !
8 | service routing protocols model multi-agent
9 | !
10 | hostname spine2
11 | !
12 | spanning-tree mode mstp
13 | !
14 | no aaa root
15 | !
16 | interface Ethernet1
17 | description LEAF-R101
18 | no switchport
19 | ip address 172.16.102.1/30
20 | !
21 | interface Ethernet2
22 | description LEAF-R102
23 | no switchport
24 | ip address 172.18.102.1/30
25 | !
26 | interface Ethernet3
27 | no switchport
28 | ip address 172.16.122.1/30
29 | !
30 | interface Ethernet4
31 | no switchport
32 | ip address 172.18.122.1/30
33 | !
34 | interface Ethernet5
35 | no switchport
36 | ip address 172.16.132.1/30
37 | !
38 | interface Ethernet6
39 | no switchport
40 | ip address 172.18.132.1/30
41 | !
42 | interface Ethernet7
43 | !
44 | interface Loopback0
45 | !
46 | interface Loopback255
47 | description MGMT
48 | ip address 10.255.255.2/32
49 | !
50 | interface Management1
51 | !
52 | ip routing
53 | !
54 | ip prefix-list LOOPBACKS
55 | seq 10 permit 10.255.255.2/32
56 | !
57 | route-map LOOPBACKS permit 10
58 | match ip address prefix-list LOOPBACKS
59 | !
60 | router bgp 65000
61 | router-id 10.255.255.2
62 | maximum-paths 3
63 | neighbor LEAF peer-group
64 | neighbor LEAF remote-as 65100
65 | no neighbor LEAF next-hop-unchanged
66 | neighbor LEAF send-community
67 | neighbor LEAF maximum-routes 12000
68 | neighbor LEAF-EVPN peer-group
69 | neighbor LEAF-EVPN remote-as 65100
70 | neighbor LEAF-EVPN next-hop-unchanged
71 | neighbor LEAF-EVPN update-source Loopback255
72 | neighbor LEAF-EVPN ebgp-multihop 5
73 | neighbor LEAF-EVPN send-community extended
74 | neighbor LEAF-EVPN maximum-routes 12000
75 | neighbor 10.255.255.11 peer-group LEAF-EVPN
76 | neighbor 10.255.255.12 peer-group LEAF-EVPN
77 | neighbor 10.255.255.21 peer-group LEAF-EVPN
78 | neighbor 10.255.255.22 peer-group LEAF-EVPN
79 | neighbor 172.16.102.2 peer-group LEAF
80 | neighbor 172.16.122.2 peer-group LEAF
81 | neighbor 172.18.102.2 peer-group LEAF
82 | neighbor 172.18.122.2 peer-group LEAF
83 | redistribute connected route-map LOOPBACKS
84 | !
85 | address-family evpn
86 | no neighbor LEAF activate
87 | neighbor LEAF-EVPN activate
88 | !
89 | address-family ipv4
90 | no neighbor LEAF-EVPN activate
91 | !
92 | end
--------------------------------------------------------------------------------
/spine3:
--------------------------------------------------------------------------------
1 | ! Command: show running-config
2 | ! device: spine3 (vEOS, EOS-4.18.5M)
3 | !
4 | ! boot system flash:/vEOS-lab.swi
5 | !
6 | transceiver qsfp default-mode 4x10G
7 | !
8 | service routing protocols model multi-agent
9 | !
10 | hostname spine3
11 | !
12 | spanning-tree mode mstp
13 | !
14 | no aaa root
15 | !
16 | interface Ethernet1
17 | description LEAF-R101
18 | no switchport
19 | ip address 172.16.103.1/30
20 | !
21 | interface Ethernet2
22 | description LEAF-R102
23 | no switchport
24 | ip address 172.18.103.1/30
25 | !
26 | interface Ethernet3
27 | no switchport
28 | ip address 172.16.123.1/30
29 | !
30 | interface Ethernet4
31 | no switchport
32 | ip address 172.18.123.1/30
33 | !
34 | interface Ethernet5
35 | no switchport
36 | ip address 172.16.133.1/30
37 | !
38 | interface Ethernet6
39 | no switchport
40 | ip address 172.18.133.1/30
41 | !
42 | interface Ethernet7
43 | !
44 | interface Loopback0
45 | !
46 | interface Loopback255
47 | description MGMT
48 | ip address 10.255.255.3/32
49 | !
50 | interface Management1
51 | !
52 | ip routing
53 | !
54 | ip prefix-list LOOPBACKS
55 | seq 10 permit 10.255.255.3/32
56 | !
57 | route-map LOOPBACKS permit 10
58 | match ip address prefix-list LOOPBACKS
59 | !
60 | router bgp 65000
61 | router-id 10.255.255.3
62 | maximum-paths 3
63 | neighbor LEAF peer-group
64 | neighbor LEAF remote-as 65100
65 | no neighbor LEAF next-hop-unchanged
66 | neighbor LEAF send-community
67 | neighbor LEAF maximum-routes 12000
68 | neighbor LEAF-EVPN peer-group
69 | neighbor LEAF-EVPN remote-as 65100
70 | neighbor LEAF-EVPN next-hop-unchanged
71 | neighbor LEAF-EVPN update-source Loopback255
72 | neighbor LEAF-EVPN ebgp-multihop 5
73 | neighbor LEAF-EVPN send-community extended
74 | neighbor LEAF-EVPN maximum-routes 12000
75 | neighbor 10.255.255.11 peer-group LEAF-EVPN
76 | neighbor 10.255.255.12 peer-group LEAF-EVPN
77 | neighbor 10.255.255.21 peer-group LEAF-EVPN
78 | neighbor 10.255.255.22 peer-group LEAF-EVPN
79 | neighbor 10.255.255.31 peer-group LEAF-EVPN
80 | neighbor 10.255.255.32 peer-group LEAF-EVPN
81 | neighbor 172.16.103.2 peer-group LEAF
82 | neighbor 172.16.123.2 peer-group LEAF
83 | neighbor 172.16.133.2 peer-group LEAF
84 | neighbor 172.18.103.2 peer-group LEAF
85 | neighbor 172.18.123.2 peer-group LEAF
86 | neighbor 172.18.133.2 peer-group LEAF
87 | redistribute connected route-map LOOPBACKS
88 | !
89 | address-family evpn
90 | no neighbor LEAF activate
91 | neighbor LEAF-EVPN activate
92 | !
93 | address-family ipv4
94 | no neighbor LEAF-EVPN activate
95 | !
96 | end
--------------------------------------------------------------------------------