Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

PDF

Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

Troubleshoot EVPN type-2 route distribution to a DCIG

Updated: April 17, 2026

Want to summarize with AI?

Log in

Troubleshoots EVPN type-2 route distribution to a DCIG by verifying the host-leak configuration, spine route advertisements, and route import into the destination VRF.

Fabric spine switches can advertise host routes to a DCIG as EVPN type-2 MAC-IP routes and public BD subnets as EVPN type-5 IP prefix routes. The hostleak object enables this behavior. Use this procedure when the routes are not advertised or imported as expected.

Procedure

  1. On the spine switch, verify that the hostleak object is enabled for the affected VRF address family. For example, run the following command:

    Example:

    spine1# ls /mit/sys/bgp/inst/dom-apple/af-ipv4-ucast/
                        ctrl-l2vpn-evpn  ctrl-vpnv4-ucast  hostleak  summary

    The output includes hostleak.

  2. Verify that BGP processed the host-leak configuration managed object. For example, run the following command on the spine switch:

    Example:

    spine1# show bgp process vrf apple
                        Information for address family IPv4 Unicast in VRF apple
                        Table Id                   : 0
                        Table state                : UP
                        Table refcount             : 3
                        Peers      Active-peers    Routes     Paths      Networks   Aggregates
                        0          0               0          0          0          0
                        Redistribution
                        None
                        Wait for IGP convergence is not configured
                        GOLF EVPN MAC-IP route is enabled
                        EVPN network next-hop 192.41.1.1
                        EVPN network route-map map_pfxleakctrl_v4
                        Import route-map rtctrlmap-apple-v4
                        EVPN import route-map rtctrlmap-evpn-apple-v4

    Confirm that the output includes GOLF EVPN MAC-IP route is enabled and shows the expected EVPN next hop and route maps.

  3. Verify that the spine switch advertises the public BD subnet to the DCIG as an EVPN type-5 route. For example, run the following command:

    Example:

    spine1# show bgp l2vpn evpn 10.6.0.0 vrf overlay-1
                        Route Distinguisher: 192.41.1.5:4123    (L3VNI 2097154)
                        BGP routing table entry for [5]:[0]:[0]:[16]:[10.6.0.0]:[0.0.0.0]/224, version 2088
                        Paths: (1 available, best #1)
                        Flags: (0x000002 00000000) on xmit-list, is not in rib/evpn
                        Multipath: eBGP iBGP
                        Advertised path-id 1
                        Path type: local 0x4000008c 0x0 ref 1, path is valid, is best path
                        AS-Path: NONE, path locally originated
                        192.41.1.1 (metric 0) from 0.0.0.0 (192.41.1.5)
                        Origin IGP, MED not set, localpref 100, weight 32768
                        Received label 2097154
                        Community: 1234:444
                        Extcommunity:
                        RT:1234:5101
                        4BYTEAS-GENERIC:T:1234:444
                        Path-id 1 advertised to peers:
                        50.41.50.1

    In the Path type entry, ref 1 indicates that the spine switch sent one route.

  4. Verify that the spine switch advertises the host route to the EVPN peer as an EVPN type-2 MAC-IP route. For example, run the following command:

    Example:

    spine1# show bgp l2vpn evpn 10.6.41.1 vrf overlay-1
                        Route Distinguisher: 10.10.41.2:100    (L2VNI 100)
                        BGP routing table entry for [2]:[0]:[2097154]:[48]:[0200.0000.0002]:[32]:[10.6.41.1]/272, version 1146
                        Shared RD: 192.41.1.5:4123    (L3VNI 2097154)
                        Paths: (1 available, best #1)
                        Flags: (0x00010a 00000000) on xmit-list, is not in rib/evpn
                        Multipath: eBGP iBGP
                        Advertised path-id 1
                        Path type: local 0x4000008c 0x0 ref 0, path is valid, is best path
                        AS-Path: NONE, path locally originated
                        EVPN network: [5]:[0]:[0]:[16]:[10.6.0.0]:[0.0.0.0] (VRF apple)
                        10.10.41.2 (metric 0) from 0.0.0.0 (192.41.1.5)
                        Origin IGP, MED not set, localpref 100, weight 32768
                        Received label 2097154 2097154
                        Extcommunity:
                        RT:1234:16777216
                        Path-id 1 advertised to peers:
                        50.41.50.1

    Shared RD identifies the RD and VNI shared by the EVPN type-2 route and the BD subnet.

    EVPN network identifies the EVPN type-5 route for the BD subnet.

    Path-id 1 advertised to peers identifies the path advertised to the EVPN peer.

  5. On the DCIG, verify that the device received the EVPN type-2 MAC-IP route and imported the host route into the destination VRF. For a Cisco ASR 9000 router, run a command such as the following:

    Example:

    RP/0/RSP0/CPU0:asr9k# show bgp vrf apple-2887482362-8-1 10.6.41.1
                        Tue Sep  6 23:38:50.034 UTC
                        BGP routing table entry for 10.6.41.1/32, Route Distinguisher: 44.55.66.77:51
                        Versions:
                        Process           bRIB/RIB  SendTblVer
                        Speaker               2088        2088
                        Last Modified: Feb 21 08:30:36.850 for 28w2d
                        Paths: (1 available, best #1)
                        Not advertised to any peer
                        Path #1: Received by speaker 0
                        Not advertised to any peer
                        Local
                        192.41.1.1 (metric 42) from 10.10.41.1 (192.41.1.5)
                        Received Label 2097154
                        Origin IGP, localpref 100, valid, internal, best, group-best, import-candidate, imported
                        Received Path ID 0, Local Path ID 1, version 2088
                        Community: 1234:444
                        Extended community: 0x0204:1234:444 Encapsulation Type:8 Router
                        MAC:0200.c029.0101 RT:1234:5101
                        RIB RNH: table_id 0xe0000190, Encap 8, VNI 2097154, MAC Address: 0200.c029.0101,
                        IP Address: 192.41.1.1, IP table_id 0x00000000
                        Source AFI: L2VPN EVPN, Source VRF: default,
                        Source Route Distinguisher: 192.41.1.5:4123

    Confirm that the received RD, next hop, and route attributes match the EVPN type-2 route and the BD subnet. The route status must include imported.

The host-leak configuration is enabled, the spine switch advertises the expected EVPN type-2 and type-5 routes, and the DCIG imports the host route into the destination VRF.