Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Routing IPv6 Data Traffic through an EVPN-VXLAN Network with an IPv4 Underlay

SUMMARY On devices that can function as Layer 3 (L3) VXLAN gateways in an EVPN-VXLAN overlay network, IRB interfaces on L3 VXLAN gateways can route Layer 2 (L2) or L3 data packets from one IPv6 host to another IPv6 host through an EVPN-VXLAN network with an IPv4 underlay.

Upon receipt of an L2 or L3 data packet from an IPv6 host, an L3 VXLAN gateway encapsulates the packet with an IPv4 outer header, thereby tunneling the packet through the IPv4 underlay network. The L2 or L3 VXLAN gateway at the other end of the tunnel de-encapsulates the packet and forwards the packet towards the other IPv6 host.

The L3 VXLAN gateways in the EVPN-VXLAN overlay network learn the IPv6 routes through the exchange of EVPN Type 2 and Type 5 routes.

This feature is supported in EVPN-VXLAN overlay networks with the following architectures, which are commonly deployed within a data center:

  • EVPN-VXLAN centrally-routed bridging (CRB) overlay (also called an EVPN-VXLAN topology with a two-layer IPv4 fabric)—A two-layer IPv4 fabric in which one layer of devices function as L3 VXLAN gateways, and another layer of devices (usually switches) function as L2 VXLAN gateways. In this architecture, the IRB interfaces configured on the L3 VXLAN gateways function in a central location in the fabric.

  • EVPN-VXLAN edge-routed bridging (ERB) overlay (also called an EVPN-VXLAN topology with a collapsed IPv4 fabric)—A one-layer IPv4 fabric in which one layer of devices function as both L2 and L3 VXLAN gateways. In this architecture, the IRB interfaces configured on the L3 VXLAN gateways function at the edge of the fabric.

A key part of setting up this feature is configuring IRB interfaces on the L3 VXLAN gateways. In general, you configure the IRB interfaces as you would with only IPv4 hosts in the topology. However, in a CRB overlay fabric, in addition to specifying IPv4 addresses for the IRB interface and default L3 gateway (virtual gateway), you also specify IPv6 addresses. Similarly, in an ERB overlay fabric, in addition to specifying IPv4 addresses for the IRB interface, you also specify IPv6 addresses and you must configure a MAC address for the IRB interface.

Note:

The tables in the next sections specify sample IPv6 IRB interface addresses using an IPv4-embedded IPv6 address format (for example, 2001:db8::192.168.100.1/96). The Junos CLI accepts address parameters you provide in this format to specify an IPv6 address associated with the IPv4 address for a dual-stack interface. However, in show command output that displays the IPv6 address, the output shows the address in the IPv6 address format with the colon-separated address fields as hexadecimal numbers.

Benefits of Routing IPv6 Data Traffic through an EVPN-VXLAN Network With an IPv4 Underlay

Routing IPv6 data traffic through an EVPN-VXLAN network with an IPv4 underlay provides the following benefits:

  • Eliminates the need to deploy an IPv6 underlay network. The supported IPv4 fabric architectures are agile enough to support both IPv4 and IPv6 data traffic needs.

  • Leverages the EVPN control plane’s inherent support for exchanging IPv4 and IPv6 routes.

  • Does not introduce any new configuration. To set up this feature, you configure IRB interfaces with IPv6 addresses.

Centrally-Routed Bridging Overlay—How to Set Up the Routing of IPv6 Data Traffic

Note:

The focus of this section is the configuration of IRB interfaces on L3 VXLAN gateways. For a more comprehensive example of configuring EVPN-VXLAN, see Example: Configure an EVPN-VXLAN Centrally-Routed Bridging Fabric.

Table 1 shows how to configure the addresses for IRB interfaces irb.100 and irb.200 on the three L3 VXLAN gateways. Table 2 outlines some additional required global configuration and configuration for irb.100 and irb.200.

Table 1: Centrally-Routed Bridging Overlay—Sample IRB Interface Addresses

Addresses

L3 VXLAN Gateway 1

L3 VXLAN Gateway 2

L3 VXLAN Gateway 3

Description

IRB interface irb.100

IRB IPv4 address

192.168.100.1/24

192.168.100.2/24

192.168.100.3/24

Specify a different IPv4 address for irb.100 on each device.

IRB global IPv6 address

2001:db8::192.168.100.1/96

2001:db8::192.168.100.2/96

2001:db8::192.168.100.3/96

Specify a different IPv6 address for irb.100 on each device.

IRB link-local IPv6 address

fe80::100:00:01/64

fe80::100:00:01/64

fe80::100:00:01/64

Specify the same link-local IPv6 address for irb.100 on each device. Any packet destined to this IPv6 address is intercepted for Network Discovery Protocol (NDP) processing.

IRB link-local IPv6 address (DHCPv6 or SLAAC )

fe80::100:00:11/64

fe80::100:00:12/64

fe80::100:00:13/64

Specify a different link-local address on each device when using DHCPV6 or SLAAC in the EVPN Fabric. You must also configure the router advertisement for this IRB.

Virtual gateway IPv4 address

192.168.100.254/24

192.168.100.254/24

192.168.100.254/24

Specify the same IPv4 anycast address for the virtual gateway on each device.

Virtual gateway IPv6 address

2001:db8::192.168.100.254/96

2001:db8::192.168.100.254/96

2001:db8::192.168.100.254/96

Specify the same IPv6 anycast address for the virtual gateway on each device.

Virtual gateway IPv6 address (DHCPv6 or SLAAC )

fe80::100:00:100

fe80::100:00:100

fe80::100:00:100

Specify the same virtual-gateway-address for the link-local address on all the devices when using DHCPV6 or SLAAC in the EVPN Fabric. You must also configure the router advertisement for this IRB.

Virtual gateway IPv4 and IPv6 MAC addresses

Method 1

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:fe

Method 2

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:ff

Method 3

  • IPv4 MAC address: 00:00:5e:00:01:01

  • IPv6 MAC address: 00:00:5e:00:02:01

Method 1

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:fe

Method 2

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:ff

Method 3

  • IPv4 MAC address: 00:00:5e:00:01:01

  • IPv6 MAC address: 00:00:5e:00:02:01

Method 1

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:fe

Method 2

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:ff

Method 3

  • IPv4 MAC address: 00:00:5e:00:01:01

  • IPv6 MAC address: 00:00:5e:00:02:01

For the default L3 gateway, the IPv4 and IPv6 MAC addresses can be the same or different, as long as they are consistent across the three devices. Here are the supported options:

  • Method 1—you explicitly configure the same IPv4 and IPv6 MAC address on each device.

  • Method 2—you explicitly configure different IPv4 and IPv6 MAC addresses on each device.

  • Method 3—you do not explicitly configure IPv4 and IPv6 MAC addresses, and the system automatically generates 00:00:5e:00:01:01 as the IPv4 MAC address and 00:00:5e:00:02:01 as the IPv6 MAC address.

IRB interface irb.200

IRB IPv4 address

192.168.200.1/24

192.168.200.2/24

192.168.200.3/24

Specify a different IPv4 address for irb.200 on each device.

IRB global IPv6 address

2001:db8::192.168.200.1/96

2001:db8::192.168.200.2/96

2001:db8::192.168.200.3/96

Specify a different IPv6 address for irb.200 on each device.

IRB link-local IPv6 address

fe80::200:00:01/64

fe80::200:00:01/64

fe80::200:00:01/64

Specify the same link-local IPv6 address for irb.200 on each device. Any packet destined to this IPv6 address is intercepted for NDP processing.

IRB link-local IPv6 address (DHCPv6 or SLAAC)

fe80::200:00:11/64

fe80::200:00:12/64

fe80::200:00:13/64

Specify a different link-local address on each device when using DHCPV6 or SLAAC in the EVPN Fabric. You must also configure the router advertisement for this IRB.

Virtual gateway IPv4 address

192.168.200.254/24

192.168.200.254/24

192.168.200.254/24

Specify the same IPv4 anycast address for the virtual gateway on each device.

Virtual gateway IPv6 address

2001:db8::192.168.200.254/96

2001:db8::192.168.200.254/96

2001:db8::192.168.200.254/96

Specify the same IPv6 anycast address for the virtual gateway on each device.

Virtual gateway IPv6 address (DHCPv6 or SLAAC)

fe80::100:00:200

fe80::100:00:200

fe80::100:00:200

Specify the same virtual-gateway-address for the link-local address on all the devices when using DHCPV6 or SLAAC in the EVPN Fabric. You must also configure the router advertisement for this IRB.

Virtual gateway IPv4 and IPv6 MAC addresses

Method 1

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:fe

Method 2

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:ff

Method 3

  • IPv4 MAC address: 00:00:5e:00:01:01

  • IPv6 MAC address: 00:00:5e:00:02:01

Method 1

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:fe

Method 2

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:ff

Method 3

  • IPv4 MAC address: 00:00:5e:00:01:01

  • IPv6 MAC address: 00:00:5e:00:02:01

Method 1

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:fe

Method 2

  • IPv4 MAC address: 10:00:00:00:00:fe

  • IPv6 MAC address: 10:00:00:00:00:ff

Method 3

  • IPv4 MAC address: 00:00:5e:00:01:01

  • IPv6 MAC address: 00:00:5e:00:02:01

For the default L3 gateway, the IPv4 and IPv6 MAC addresses can be the same or different, as long as they are consistent across the three devices. Here are the supported options:

  • Method 1—you explicitly configure the same IPv4 and IPv6 MAC address on each device.

  • Method 2—you explicitly configure different IPv4 and IPv6 MAC addresses on each device.

  • Method 3—you do not explicitly configure IPv4 and IPv6 MAC addresses, and the system automatically generates 00:00:5e:00:01:01 as the IPv4 MAC address and 00:00:5e:00:02:01 as the IPv6 MAC address.
Table 2: Centrally-Routed Bridging Overlay—Required IRB Interface Configuration

Description

L3 VXLAN Gateway 1

L3 VXLAN Gateway 2

L3 VXLAN Gateway 3

Global IRB interface configuration

Specify that the IPv4 and IPv6 MAC addresses of the default L3 gateway are advertised to the L2 VXLAN gateways without the extended community option.

set protocols evpn default-gateway no-gateway-community

set protocols evpn default-gateway no-gateway-community

set protocols evpn default-gateway no-gateway-community

IRB interface irb.100 configuration

Configure the L3 VXLAN gateway to advertise the MAC and IP routes (MAC+IP type 2 routes) on behalf of the L2 VXLAN gateways.

set interfaces irb unit 100 proxy-macip-advertisement

set interfaces irb unit 100 proxy-macip-advertisement

set interfaces irb unit 100 proxy-macip-advertisement

Enable the default L3 gateway to be pinged by either IPv4 or IPv6 addresses.

set interfaces irb unit 100 virtual-gateway-accept-data

set interfaces irb unit 100 family inet address 192.168.100.1/24 preferred

set interfaces irb unit 100 family inet6 address 2001:db8::192.168.100.1/96 preferred

set interfaces irb unit 100 virtual-gateway-accept-data

set interfaces irb unit 100 family inet address 192.168.100.2/24 preferred

set interfaces irb unit 100 family inet6 address 2001:db8::192.168.100.2/96 preferred

set interfaces irb unit 100 virtual-gateway-accept-data

set interfaces irb unit 100 family inet address 192.168.100.3/24 preferred

set interfaces irb unit 100 family inet6 address 2001:db8::192.168.100.3/96 preferred

IRB interface irb.200 configuration

Configure the L3 VXLAN gateway to advertise the MAC and IP routes (MAC+IP type 2 routes) on behalf of the L2 VXLAN gateways.

set interfaces irb unit 200 proxy-macip-advertisement

set interfaces irb unit 200 proxy-macip-advertisement

set interfaces irb unit 200 proxy-macip-advertisement

Enable the default L3 gateway to be pinged by either IPv4 or IPv6 addresses.

set interfaces irb unit 200 virtual-gateway-accept-data

set interfaces irb unit 200 family inet address 192.168.200.1/24 preferred

set interfaces irb unit 200 family inet6 address 2001:db8::192.168.200.1/96 preferred

set interfaces irb unit 200 virtual-gateway-accept-data

set interfaces irb unit 200 family inet address 192.168.200.2/24 preferred

set interfaces irb unit 200 family inet6 address 2001:db8::192.168.200.2/96 preferred

set interfaces irb unit 200 virtual-gateway-accept-data

set interfaces irb unit 200 family inet address 192.168.200.3/24 preferred

set interfaces irb unit 200 family inet6 address 2001:db8::192.168.200.3/96 preferred

DHCPv6 or SLAAC configuration

Configure the link-local address.

set interfaces irb.100 family inet6 address fe80::100:00:11/64 virtual-gateway-address fe80::100:00:100

set interfaces irb.200 family inet6 address fe80::200:00:11/64 fe80::200:00:100

set interfaces irb.100 family inet6 address fe80::100:00:12/64 virtual-gateway-address fe80::100:00:100

set interfaces irb.200 family inet6 address fe80::200:00:12/64 fe80::200:00:100

set interfaces irb.100 family inet6 address fe80::100:00:13/64 virtual-gateway-address fe80::100:00:100

set interfaces irb.200 family inet6 address fe80::200:00:13/64 fe80::200:00:100

Configure the global address.

set interfaces irb.100 family inet6 address 2001:db8::192.168.100.1/96 virtual-gateway-address 2001:db8::192.168.100.254

set interfaces irb.200 family inet6 address 2001:db8::192.168.200.1/96 virtual-gateway-address 2001:db8::192.168.200.254

set interfaces irb.100 family inet6 address 2001:db8::192.168.100.2/96 virtual-gateway-address 2001:db8::192.168.100.254

set interfaces irb.200 family inet6 address 2001:db8::192.168.200.2/96 virtual-gateway-address 2001:db8::192.168.200.254

set interfaces irb.100 family inet6 address 2001:db8::192.168.100.3/96 virtual-gateway-address 2001:db8::192.168.100.254

set interfaces irb.200 family inet6 address 2001:db8::192.168.200.3/96 virtual-gateway-address 2001:db8::192.168.200.254

Configure the gateway to send router advertisement packets only for the link-local virtual-gateway-address.

set protocols router-advertisement interface irb.100 virtual-router-only

set protocols router-advertisement interface irb.200 virtual-router-only

set protocols router-advertisement interface irb.100 virtual-router-only

set protocols router-advertisement interface irb.200 virtual-router-only

set protocols router-advertisement interface irb.100 virtual-router-only

set protocols router-advertisement interface irb.200 virtual-router-only

Edge-Routed Bridging Overlay—How to Set Up the Routing of IPv6 Data Traffic

Note:

The focus of this section is the configuration of IRB interfaces on L3 VXLAN gateways. For a more comprehensive example of configuring EVPN-VXLAN, see Example: Configuring an EVPN-VXLAN Edge-Routed Bridging Fabric with an Anycast Gateway.

Table 3 shows how to configure the addresses for IRB interfaces irb.100 and irb.200 on the three L3 VXLAN gateways. Table 4 outlines some additional required global IRB interface configuration.

Table 3: Edge-Routed Bridging Overlay—Sample IRB Interface Addresses

Addresses

L2 and 3 VXLAN Gateway 1

L2 and 3 VXLAN Gateway 2

L2 and 3 VXLAN Gateway 3

Description

IRB interface irb.100

IPv4 address

192.168.100.1/24

192.168.100.1/24

192.168.100.1/24

Specify the same IPv4 address for irb.100 on each device.

Global IPv6 address

2001:db8::192.168.100.1/96

2001:db8::192.168.100.1/96

2001:db8::192.168.100.1/96

Specify the same IPv6 address for irb.100 on each device.

Link-local IPv6 address

fe80::100:00:01/64

fe80::100:00:01/64

fe80::100:00:01/64

Specify the same link-local IPv6 address for irb.100 on each device. Any packet destined to this IPv6 address is intercepted for NDP processing.

IRB link-local IPv6 address (DHCPv6 or SLAAC)

fe80::100:00:11/64

fe80::100:00:12/64

fe80::100:00:13/64

Specify a different link-local address on each device when using DHCPV6 or SLAAC in the EVPN Fabric. You must also configure the router advertisement for this IRB.

IRB MAC address

10:00:00:00:00:fe

10:00:00:00:00:fe

10:00:00:00:00:fe

Specify the same MAC address for irb.100 on each device.

IRB interface irb.200

IPv4 address

192.168.200.1/24

192.168.200.1/24

192.168.200.1/24

Specify the same IPv4 address for irb.200 on each device.

Global IPv6 address

2001:db8::192.168.200.1/96

2001:db8::192.168.200.1/96

2001:db8::192.168.200.1/96

Specify the same IPv6 address for irb.200 on each device.

Link-local IPv6 address

fe80::200:00:01/64

fe80::200:00:01/64

fe80::200:00:01/64

Specify the same link-local IPv6 address for irb.200 on each device. Any packet destined to this IPv6 address is intercepted for NDP processing.

IRB link-local IPv6 address (DHCPv6 or SLAAC)

fe80::200:00:11/64

fe80::200:00:12/64

fe80::200:00:13/64

Specify a different link-local address on each device when using DHCPV6 or SLAAC in the EVPN Fabric. You must also configure the router advertisement for this IRB..

IRB MAC address

10:00:00:00:00:ff

10:00:00:00:00:ff

10:00:00:00:00:ff

Specify the same MAC address for irb.200 on each device.

Table 4: Edge-Routed Bridging Overlay—Required IRB Interface Configuration

Description

L2 and 3 VXLAN Gateway 1

L2 and 3 VXLAN Gateway 2

L2 and 3 VXLAN Gateway 3

Global IRB interface configuration

For IPv4 fabric 2, a default L3 gateway is not configured. Therefore, you must disable the advertisement of a default L3 gateway.

set protocols evpn default-gateway do-not-advertise

set protocols evpn default-gateway do-not-advertise

set protocols evpn default-gateway do-not-advertise

DHCPv6 or SLAAC configuration

Configure the link-local address.

set interfaces irb.100 family inet6 address fe80::100:00:11/64 virtual-gateway-address fe80::100:00:254

set interfaces irb.200 family inet6 address fe80::200:00:11/64 virtual-gateway-address fe80::200:00:254

set interfaces irb.100 family inet6 address fe80::100:00:12/64 virtual-gateway-address fe80::100:00:254

set interfaces irb.200 family inet6 address fe80::200:00:12/64 virtual-gateway-address fe80::200:00:254

set interfaces irb.100 family inet6 address fe80::100:00:13/64 virtual-gateway-address fe80::100:00:254

set interfaces irb.200 family inet6 address fe80::200:00:13/64 virtual-gateway-address fe80::200:00:254

Configure the global IPv6 address.

set interfaces irb.100 family inet6 address 2001:db8::192.168.100.1/96

set interfaces irb.200 family inet6 address 2001:db8::192.168.200.1/9

set interfaces irb.100 family inet6 address 2001:db8::192.168.100.1/96

set interfaces irb.200 family inet6 address 2001:db8::192.168.200.1/9

set interfaces irb.100 family inet6 address 2001:db8::192.168.100.1/96

set interfaces irb.200 family inet6 address 2001:db8::192.168.200.1/9

Configure the gateway to send router advertisement packets only for the link-local virtual-gateway-address.

set protocols router-advertisement interface irb.100 virtual-router-only

set protocols router-advertisement interface irb.200 virtual-router-only

set protocols router-advertisement interface irb.100 virtual-router-only

set protocols router-advertisement interface irb.200 virtual-router-only

set protocols router-advertisement interface irb.100 virtual-router-only

set protocols router-advertisement interface irb.200 virtual-router-only

Related Documentation

Change History Table

Feature support is determined by the platform and release you are using. Use Feature Explorer to determine if a feature is supported on your platform.

Release
Description
15.1X53-D30
Starting with Junos OS Release 15.1X53-D30 for QFX10000 switches and Junos OS Release 18.4R1 for QFX5110 switches, the IRB interfaces on these Layer 3 VXLAN gateways can route Layer 2 or Layer 3 data packets from one IPv6 host to another IPv6 host through an EVPN-VXLAN network with an IPv4 underlay.