VXLAN L2GW CSR1KV

Posted 2020-11-20

First Vxlan Lab with csr1000v .......L2GW

Cisco ios Software, CSR1000V Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(3)S, RELEASE SOFTWARE (fc11)
CSR1#
ip multicast-routing distributed
!
bridge-domain 10
member vni 5010
member GigabitEthernet3 service-instance 1
!
interface Loopback0
ip address 10.1.1.1 255.255.255.255
ip pim sparse-mode
ip ospf 100 area 0
!
interface nve1
no ip address
member vni 5010 mcast-group 225.1.1.1
source-interface Loopback0
!
interface GigabitEthernet1
ip address 10.1.13.1 255.255.255.0
ip pim sparse-mode
ip ospf 100 area 0
negotiation auto
!
interface GigabitEthernet2
ip address 10.1.14.1 255.255.255.0
ip pim sparse-mode
ip ospf 100 area 0
negotiation auto
!
interface GigabitEthernet3
no ip address
negotiation auto
service instance 1 ethernet
encapsulation untagged
!
!
router ospf 100
router-id 10.1.1.1
!
!
ip pim bidir-enable
ip pim rp-address 10.1.1.3 bidir
！

##################CSR2######################
Cisco IOS Software, CSR1000V Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(3)S, RELEASE SOFTWARE (fc11)
！
ip multicast-routing distributed
!
bridge-domain 10
member vni 5010
member GigabitEthernet3 service-instance 1
!
interface Loopback0
ip address 10.1.1.2 255.255.255.255
ip pim sparse-mode
ip ospf 100 area 0
!
#
Interface NVE [network virtualization endpoint] is the one on which we configure the VNI and multicast mapping
We cannot assign an IP address to this interface, hence we use a Loopback interfaces as its source-interface
#
#[which once assigned immediately creates a tunnel interface, the VTEP]
#The Loopback IP address should be reachable
!
interface nve1
no ip address
member vni 5010 mcast-group 225.1.1.1
source-interface Loopback0
!
interface GigabitEthernet1
ip address 10.1.23.2 255.255.255.0
ip pim sparse-mode
ip ospf 100 area 0
negotiation auto
!
interface GigabitEthernet2
ip address 10.1.24.2 255.255.255.0
ip pim sparse-mode
ip ospf 100 area 0
negotiation auto
!
interface GigabitEthernet3
no ip address
negotiation auto
service instance 1 ethernet
encapsulation untagged
!
router ospf 100
router-id 10.1.1.2
!
ip pim bidir-enable
ip pim rp-address 10.1.1.3 bidir

######################R3######################RP##
Cisco IOS Software, Linux Software (I86BI_LINUX-ADVENTERPRISEK9-M), Version 15.4(1)T
!
ip multicast-routing
!
interface Loopback0
ip address 10.1.1.3 255.255.255.255
ip pim sparse-mode
ip ospf 100 area 0
!
interface Ethernet0/0
ip address 10.1.34.3 255.255.255.0
ip pim sparse-mode
ip ospf 100 area 0
!
interface Ethernet0/1
ip address 10.1.13.3 255.255.255.0
ip pim sparse-mode
ip ospf 100 area 0
!
interface Ethernet0/2
ip address 10.1.23.3 255.255.255.0
ip pim sparse-mode
ip ospf 100 area 0
!
router ospf 100
router-id 10.1.1.3
!
ip pim bidir-enable
ip pim rp-address 10.1.1.3 bidir
！

######################R4######################
Cisco IOS Software, Linux Software (I86BI_LINUX-ADVENTERPRISEK9-M), Version 15.4(1)T
！
ip multicast-routing
!
interface Loopback0
ip address 10.1.1.4 255.255.255.255
ip pim sparse-mode
ip ospf 100 area 0
!
interface Ethernet0/0
ip address 10.1.34.4 255.255.255.0
ip pim sparse-mode
ip ospf 100 area 0
!
interface Ethernet0/1
ip address 10.1.14.4 255.255.255.0
ip pim sparse-mode
ip ospf 100 area 0
!
interface Ethernet0/2
ip address 10.1.24.4 255.255.255.0
ip pim sparse-mode
ip ospf 100 area 0
!
router ospf 100
router-id 10.1.1.4
!
ip pim bidir-enable #
https://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/fsbidir.html

ip pim rp-address 10.1.1.3 bidir
!

A very basic level EPC

#monitor capture vxlan interface gigabitEthernet 2 both match any buffer size 200
#monitor capture vxlan start
#monitor capture vxlan stop
#show monitor capture vxlan buffer brief
#monitor capture vxlan export tftp://<IP_address>/<location>/<file_name>.pcap
!!
Exported Successfully

The port being used by VXLAN can be viewed using the show command "show platform software vxlan F0 udp-port". The same is displayed below:

#
CSR1#show platform software vxlan F0 udp-port
VXLAN UDP Port: 4789

#
CSR1(config)#VXLan Udp port ?
<1024-65535> Port number

CSR1(config)#VXLan Udp port

#
If we fail to configure CSR2 with the same port, peer not up.
需要VTEP都修改成相同的UDP端口号，否则邻居无法建立；

CSR1#SH NVE PEers
Interface Peer-IP VNI Peer state
CSR1#

CSR1#show nve interface nve 1 detail
Interface: nve1, State: Admin Up, Oper Up Encapsulation: Vxlan
source-interface: Loopback0 (primary:10.1.1.1 vrf:0)
Pkts In Bytes In Pkts Out Bytes Out
60 5941 102 9017
#
CSR1#show nve vni
Interface VNI Multicast-group VNI state
nve1 5010 225.1.1.1 Up
#

#
#
#

Cisco CSR 1000V VxLAN Support:

https://www.cisco.com/c/en/us/td/docs/routers/csr1000/software/vxlan/m_csr-vxlan-support-book.html