All Cisco CCIE Data Center certification exam dumps, study guide, training courses are prepared by industry experts. Cisco CCIE Data Center certification practice test questions and answers, exam dumps, study guide and training courses help candidates to study and pass hassle-free!

Introduction

49. Scenario 4. Configuring BGP EVPN Control Plane

In this section, the agenda is to configure the BGPE VPN control plane, and for that, what I have to do is go to spines one and two and enable the address family called L-2 VPN. And then I have the template website called Peer Leaf. So whatever peers we have there, again, I will initiate this address. Family. That equates to two VPNs. This will be used if the community is sent to both.

As a route reflector client, this configuration is fine. One and two over the leaves, we need to enable this additional family, so I'll go in the leaves as well, and then I'll enable the address family called L-2 VPN; VPN, then obviously I'll retain the route target all then for neighbour zero six, which is a spine one. I will go and configure these things, and here I also need to create a BGP relationship.

But in terms of two VPN EBPs and seven as well, I have to create the same address family as this. So once I do that, I then need to create the EVPN as well. Here you can see the EVPN-related configurations for configure, rd, and rt for the VX land vision. So here, my VNI says 50140 with respect to L-2 VPN. Auto is what I'm doing with Rd, and the route targets import and export auto.

Likewise, for another VNI 50141, the Rand route target, I have to configure. Okay, so once I do the configuration up to this point, we are very much done with our control plane configuration. With respect to BGP VPN, let me go to the devices, and then we'll do the configuration for the spine and the leads. First of all, let us configure the spine.

Let me open the CLI for the spine. one here within this spine I'll go ahead and turn on the L2 VPN (E VPN Addis Family). Okay, so let me just fit the screen here. We'll go inside our router and say BGP 6500. And then the address family is "l 2 VPN.E VPN." I want to retain all of my routes and targets. And then we have the template, say, for the peer leaf. So I can use that template with whatever leaves I have, and then I can give Say two VPN. Finally, I can send both to the community both. And then the route reflector is the client. So this configuration I need to do for my other is also acceptable.

So let me copy and paste it in. The notepad. Okay, so the same type of configuration I'll do Let me filter it. Okay, so here you can see the piece of configuration that we are enabling for the address family. And then inside that address family, as you can see here, is the address family. We are sending the community and creating this Addis family, or we are enabling the route reflector within this address family. Okay, so let us go and paste this configuration to spine number two.

Once we are done with this configuration, we'll go and configure the leaves as well. Inside the leaves, we have to do several configurations. We'll do that. I just wanted to make sure that I configured everything. The required stuff So keep the template, address both the family and the community; otherwise, we'll have to do some troubleshooting. If we miss any portion of the configuration, let's go ahead and leave numbers one and inside. The first leaf We'll do the configuration related to the control plane. So let me reflect on this screen.

Assume the address family is L2 VPN in this case. Also, I want to keep the route target all and the neighbour configuration. So my neighbour is 192-1680-6; that is the first spine. The remote are families. Obviously, this time is l 2 VPNEVPN and finally send community, both of which are fine, indicating that this configuration is related to 6. Now I want configuration related to seven as well.

So what I will do is create one template for seven as well, and I can paste it to all the leads, or we can create a script and we can paste it everywhere. So let me do it. I guess L.Two VPN is family. VPN, then the same community. Booth is okay, so I want to copy and paste this to all the leads. Let me check. Sure. And this time, BGP saves the configuration so that you can match it. Here is the router. BGP address, family retention, and then six, then add his family, and finally send community. So far, I've wanted to copy and paste to all of my leaves. So let me go. And do it a little quickly, and then finally leave number four.

Okay, so once we are done, we have to do the configuration that will be the final piece here with respect to our VNI or EVPN. So what? I can do here. I can go inside e-VPN and inside EVPN. I need to map the VNI. So VNI is 50740. You can see l two if I type a question mark here. I have something to offer. The road and route target So let's check the road, then the route target. import and export. I can use both auto and manual.

Okay, show off and run. Say grip. EVPN here. You can see that inside EVPN we have some configuration that is not coming here. So, despite the fact that I can check showrun, what will I do? I just want to check the EVPN configuration. This is the EVPN configuration. Is it correct that I now only have 50141 in this configuration? The route target will be both auto and Rd auto. So AVPN and EVPN will be available, but not in the desired format. But anyway, let's check this first. We'll copy and paste this configuration to all the leaves, and then we will be ready. We're almost finished with this section. Okay, I'll go and paste. We are very much done with this section. Let's just stop here.

50. Scenario 5. Verify VXLAN EVPN Control Plane Update

Now we are done with the configuration. Let us verify. So, for verification, we can look at the topology diagram and see that our leaf is connected to one of the servers. So we need to do the configuration for that as well and leave three connected to one of the servers. So for that also, I'm going to do the configuration, and then we'll send traffic over VXLAN fabric.

Okay, so here you can see in this slide that, okay, these are the interfaces connected, and I'm going to do the configuration with respect to leaf one for VLAN number 40 and VLAN one four one for my leaf number 3, and servers one and three are connected. So, once we've assigned an IP address and added a route to the leaf, we can refer to server one and server three. Then we'll do the pink test between server one and server three. Okay. And the IP address I'm going to assign is 172-2114 00:10 and one four one dot ten, respectively, to server one and server three. So let me open my servers.

So here I have server number one, and I need to add first of all the IP address and then the route. So let me do that. So what I can do here is use the Linux command because these are Linux-based servers. Over 812-1140, and the netmask status is enabled. Then, the next time, I want to add a route. So, for example, route 172 to the network at 21 00:16, and the gateway is one. And then let me do the ping. So we ping 217-22-1140 dot 1, its gateway, and then we wait for it to ping its gateway before we can do an end-to-end ping. So what I'm doing here is, let me stop this pin first. Simply, I'm trying to ping over this particular SVI interface, and I have done the configuration for my server one, which is ten, and I'm bringing over this leaf one, which is dot one.

So let's go and do the configuration for leaf number one inside the SVI, which is to check the SVI zero because this is inside the VLAN one 40. So we need to reach here first. So for that, I'll go inside one last time. That is my switch port. As a result, switchport access VLAN I'm simply doing the VLAN-specific configuration here. Clearly, there should be no closing. Let me go to server number one. It's still showing that this is unreachable. It should ping first. Let's look at how three switchport access VLAN 10 are configured. That's correct. State is up once the last three are down; it's inactive. Let me quickly double-check this.

Why does this appear to be inactive or down? I have simply done something to the interface, and it is coming up now; let me show you the configuration. This is the configuration. Okay, let me check on my server number one. Now you can see that we are able to reach Now, pally, I'll go to this particular switch and turn it on one last time. Make it switch ports. No, switch ports says shutdown. The mode is access, and the accessVLAN is one to one. If I want, I can give a description. Please serve number two. Last three, check show and interface E. Okay, and then show interface E-1, last three. Now this is up. So let me quickly go to server number two. And here I need to add the IP and the route. So, pseudo, if configuration 221one 4110 this time because this is one four one netmask is the same up, then we can add a route pseudo out, add net 172210 00:16 gateway, and that's all there is to it.

If I ping the gateway server now, it should respond. Now you can see. So here, from my server side, I'm able to ping its gateway. There's no problem with that. So, from server one to server three, I can ping leave three and say leaf one. I'd like to do this end-to-end pinging now. So from server one, I will ping server three. And then we'll check the V-cap tunnels. Okay, so let me go and ping from server one to server number three. So here I am. Allow me to ping this IP address, which is pennies in. Okay, so it just tried to ping, and I don't have any responses at the moment. We'll wait, and finally I can go to leave number one. I can look at the show IP route. We are for tenant number one. Also, we are not able to see the specific routes from one channel to another. Still, we don't have any responses. What I have done is add back all the BGP configuration. Everything is working now, as you can see on your screen. Let me demonstrate the BGP configuration in Notepad Plus Plus. So here you can see the BGP configuration first.

The fine 21 is followed by the leaf 1234. What I'll do with this PPT is share all of the configuration files; all of the configuration I'll embed inside that PPT so you can refer to them. Okay, so once I added back all the VGP configuration, now you can see that my neighbours are up and running in the Leaf as well. As you can see, I've restored the configurations. So leaf one, two, and three in total. You can see that I have my NBE pier if I go here to leave number one and check show NBEPA. And if I go to server number two and ping, say, server number one, that is, ten, I'm getting the end-to-end ping response. I'll go to Leaf No. 1. I can see the NV line, which means my VPN is operational.

If I go to leaf number four, Here, if I check the NVE peer, that is up, you can see the uptime, and you can see the router Mac. There are some other verifications that we can also do. so I can check. Now show IP Route VRF Tenant One. And here you can see the VXLAN encapsulation. Initially, these things are not presented. Because of this VXLAN in Cap, we now have these routes. Even I can check. Display the BGP level two VPN. E VPN. And here you can see the Mac, the IP, and all the other stuff that we have. So these are the exact commands related to our VXLAN overlay.

51. Scenario 6. Configure Border Leaf to External Entity

In this section, we have to configure our border leaf to refer to an external entity. And here's the diagram so you can see what I'm going to do: I'm going to connect this Leaf to a van router. And here, in this van router, we have a server. We will extend our network towards the van, and from the van server, we will ping our internal servers. So that is the overall goal here in this particular section. And you can see all of the steps you need to take here. Okay.

So please allow me to connect the Leafdevice to the van router. And then I will configure the van router to connect to my Leaf Edge. Okay, so let me go and log in to the devices. Let me first configure my van. So here is my van router. And the interface in this van router is gigtwo, where, first and foremost, let me set the Mt value description, which is connected to, say, four. The IP address is then 17 255-25-5255 252 no shutdown. Do the ping. I will do the configuration from the Leaf side as well. And then we'll check the reachability.

Let me complete this section first. In this case, I'd like to perform IPOSP on a point-to-point network. Okay. And we have already done the no shut. Then it's okay. From here, I can exit. Now I can connect to OSPF router sayone; the router ID is 192-1680 five. Then let me advertise the network at sixteen zero zero three, where the area is zero, and then I can check and show IPOs at PF, where nothing is there. Let me go and configure Leaf number four as well. From the Leaf side, I have to do the configuration. As a result, the interface is three MTU 9216. This is covered by VRF membership. 100 00:18:30 is the IP address. That's a subnet mask. OSPF says one area zero and finally no shirt on the IPOSPF network, which is a point-to-point IP router. Then I'll go to Router OSPF One.

Then there's VR. This configuration is already there. Okay, now if I go to the van router, let me check the OSPF neighbour that is there; that is full. And if I ping, let me do the ping test as well. So we have the lichability now, and finally, what I will do in this section is configure server number three. same way that we have configured servers one and two. because this is the Linux machine. So studio if configuration 221 dot 10 is the IP address, the net mask is 255-255-2550 up. So if there is any problem, it will throw an error. Correct. And we can see that we have a spelling error here. Then I will go and add the route. Let me type it correctly: route add net 172 210 dot say zero slash 16 gateway 172. 21. One device is an Ethernet one. If everything is okay and correct, let me first of all ping my gateway, and you can see I have the disability, so I'm going to stop here. And in the next section, we'll see. That is how we can add some more configuration for the redistribution. And then finally, we'll do the end-to-end pin test.

52. Final Verification

This is our final session. Let me go inside Leap Number Four. And I want to do the redistribution. Okay? So let me go inside the router, say BGP 6500. I'm inside the router. Let me fix the screen here. So inside this router, BGP 6500, I'd like to go inside, say, VRF Tenant 1. In addition, the address family is IPV4 unicast. I want to advertise two VPNs.

I'd like to redistribute OSPF on a single route map, say. OSPF BGP. Okay, then I'll go to router OSPF One, and inside that as well, tenant one will redistribute the route map. Say the name is permit BGP-OSPF, then redistribute direct, and then say permit BGP-OSPF on the route map. So these are the redistributions that I am doing in BGP inside OS PF and BGP inside BGP. I haven't created these route maps.

So let me create the route map as well. So let me exit for one more time. I'd like to make a route called "A" with the permit "Bgpospfit." Ten. I'm not revealing anything here. Then I'll create one other route map. Consider a route map. Allow OSPF BGP. Permit ten. And we are very much done here. So, let me quickly show you the tenant route for VRF. You can see in the output that we are getting this route as an intra route. We have some VXLAN routes as well. So you can see the routes that we are receiving; that is advertising to leave if I go to my van router, check the IP addresses and network here, and show IP route. So here also, you can see that we have the EVPN routes as an OE 2. If I show run section OSPF and this is my OSPF configuration where I have my OSPF route and then I'm redistributing the static route, it's okay.

Then these are the networks. Okay, so now we have end-to-end reachability. If I ping the other side server from this server, the other side server address is something like 172-21 14 00:10. You can see we have reachability because you have seen that we are learning the network as well in the van edge. So let me stop this pin first, and then I will pin to 110. Yes, we have the eligibility. So this way we can extend the leaf towards the van. And have you seen what other steps I've taken here for that extension? I have done the redistribution from BGP to OSPF first, and then I have done the redistribution from OSPF to BGP. Okay, so this was the final slide show and recording that we have here. I will share all these configurations with the PPT, and you will see all the very best for this particular course.

CCIE Data Center certification practice test questions and answers, training course, study guide are uploaded in ETE files format by real users. Study and pass Cisco CCIE Data Center certification exam dumps & practice test questions and answers are the best available resource to help students pass at the first attempt.