evpn-vxlan
Syntax
evpn-vxlan {
gbp {
ingress-enforcement;
tag-only-policy;
}
host-originated-packets {
gbp-src-tag gbp-src-tag;
}
reroute-address {
inet address;
inet6 address;
}
shared-tunnels;
vxlan-trans-vni-enable;
}Hierarchy Level
[edit forwarding-options], [edit logical-systems name routing-instances name forwarding-options]
Description
Set various global or per-routing-instance options in an EVPN-VXLAN fabric.
Options
| gbp ingress-enforcement |
Configure Group Based Policy (GBP) policy enforcement at the ingress node. |
| gbp tag-only-policy |
Allow only GBP source and destination tags as matches in GBP policy. Configuring the IPv4 and IPv6 L4 filters can reduce the supported GBP scale. These matches are supported by default. However, on the EX4650 series, QFX5120-32C, and QFX5120-48Y switches, you can use this option to allow only GBP source and destination tags as matches in GBP policy. Note:
The Packet Forwarding Engine (PFE) restarts when you set or delete this option. |
| host-originated-packets gbp-src-tag gbp-src-tag |
Insert the specified GBP source tag in all host originated packets. Range for gbp-src-tag: 1 through 65535. |
| reroute-address (inet address | inet6 address) |
Enable fast reroute egress link protection (ELP) on provider edge (PE) devices for access links to multihomed customer edge (CE) devices in an EVPN-VXLAN fabric. With this statement, you also specify the IPv4 or IPv6 device reroute address, which is a secondary loopback address you configure as the fast reroute ELP tunnel source VTEP address for an Ethernet segment. This feature helps to minimize load-balanced traffic loss when the link from a PE device to a multihomed CE device goes down. |
| shared-tunnels | Create shared VXLAN tunnel endpoint (VTEP) tunnels to EVPN
provider edge (PE) devices to save VTEP resources. Note:
When you configure the |
| vxlan-trans-vni-enable | Enable translated VXLAN network identifiers (VNIs) with Data
Center Interconnect (DCI). Note:
We require this option on QFX5120 switches when you configure EVPN-VXLAN stitching with EVPN Type 2 routes in DCI topologies. The PFE restarts when you set or delete this option. |
The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.
Default
Not enabled
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 22.4R1 for supported EX4100, EX4400, EX4650, and QFX5120 Series switches.
tag-only-policy option introduced in 23.2R1 for the
QFX5120-48YM, QFX5120-48Y, and EX4650-48Y Series switches.
reroute-address option introduced in Junos OS 21.3R1 for the
QFX5110 and QFX5120 Series swtiches.
shared-tunnels option introduced in Junos OS
20.3R1.
vxlan-trans-vni-enable option introduced in Junos OS 23.2R1
for QFX5120 switches.