Configure VXLAN static routing

Updated: June 17, 2026

Want to summarize with AI?

Provides instructions for configuring VXLAN static routing, detailing the procedural steps required to implement static routing within a VXLAN network.

Set up static routing over VXLAN on a provider edge router to enable efficient and secure connectivity between network segments

Perform the following tasks on the provider edge (PE) router to configure VXLAN static routing:

Configure VRF
Configure interface NVE for decapsulation
Configure static routing
Configure customized UDP destination port and UDP source port range

Before you begin

Plan the VRFs, NVE interface, VNIs, remote next hops, source MAC address, and UDP port values before you begin.

Procedure

	1.	Configure the VRF. Example: Router# configure Router(config)# vrf vrf1 Router(config-vrf)# address-family ipv4 unicast Router(config-vrf-af)# import route-target Router(config-vrf-import-rt)# 1:1 Router(config-vrf-import-rt)# exit Router(config-vrf-af)# export route-target Router(config-vrf-export-rt)# 1:1 Router(config-vrf-export-rt)# exit Router(config-vrf-af)# exit Router(config-vrf)# address-family ipv6 unicast Router(config-vrf-af)# import route-target Router(config-vrf-import-rt)# 1:1 Router(config-vrf-import-rt)# exit Router(config-vrf-af)# export route-target Router(config-vrf-export-rt)# 1:1 Router(config-vrf-export-rt)# root Router(config)# vrf vrf2 Router(config-vrf)# address-family ipv4 unicast Router(config-vrf-af)# import route-target Router(config-vrf-import-rt)# 1:2 Router(config-vrf-import-rt)# exit Router(config-vrf-af)# export route-target Router(config-vrf-export-rt)# 1:2 Router(config-vrf-export-rt)# exit Router(config-vrf-af)# exit Router(config-vrf)# address-family ipv6 unicast Router(config-vrf-af)# import route-target Router(config-vrf-import-rt)# 1:2 Router(config-vrf-import-rt)# exit Router(config-vrf-af)# export route-target Router(config-vrf-export-rt)# 1:2 Router(config-vrf-export-rt)# commit
	2.	Configure the NVE interface for decapsulation. Example: Router(config)# interface nve1 Router(config-if)# member vni 2 Router(config-nve-vni)# vrf vrf1 Router(config-nve-vni)# host-reachability protocol static Router(config-nve-vni)# exit Router(config-if)# member vni 6 Router(config-nve-vni)# vrf vrf2 Router(config-nve-vni)# host-reachability protocol static Router(config-nve-vni)# exit Router(config-if)# overlay-encapsulation vxlan Router(config-nve-encap-vxlan)# peer-ip lookup disable Router(config-nve-encap-vxlan)# exit Router(config-if)# source-interface Loopback1 Router(config-if)# commit
	3.	Configure static routing. Example: Router# configure Router(config)# router static Router(config-static)# address-family ipv4 unicast Router(config-static-afi)# 10.10.10.10/32 10.151.11.2 Router(config-static-afi)# 10.10.10.11/32 10.151.11.2 Router(config-static-afi)# exit Router(config-static)# vrf VRF1 Router(config-static-vrf)# address-family ipv4 unicast Router(config-static-vrf-afi)# 192.0.2.10/32 remote-next-hop 10.10.10.10 tunnel VXLAN index 1 nve 1 evni 1 src-mac aaa1.bbb1.ccc1 -> IPv4 over IPv4 Router(config-static-vrf-afi)# 192.0.2.11/32 remote-next-hop 10:10:10::10 tunnel VXLAN index 3 nve 1 evni 3 src-mac aaa1.bbb1.ccc1 -> IPv4 over IPv6 Router(config-static-vrf-afi)# exit Router(config-static-vrf)# exit Router(config-static)# address-family ipv6 unicast Router(config-static-afi)# 10:10:10::10/128 10:151:11::2 Router(config-static-afi)# 10:10:10::11/128 10:151:11::2 Router(config-static-afi)# exit Router(config-static)# vrf VRF1 Router(config-static-vrf)# address-family ipv6 unicast Router(config-static-vrf-afi)# 11:1:1::1/128 remote-next-hop 10.10.10.11 tunnel VXLAN index 2 nve 1 evni 2 src-mac aaa1.bbb1.ccc1 -> IPv6 over IPv4 Router(config-static-vrf-afi)# 11:1:1::2/128 remote-next-hop 10:10:10::11 tunnel VXLAN index 4 nve 2 evni 4 src-mac aaa1.bbb1.ccc1 -> IPv6 over IPv6 Router(config-static-vrf-afi)# commit
	4.	Configure UDP destination port and source port range for VXLAN. Example: `Router# configure Router(config)# nve Router(config-nve)# overlay-encap vxlan Router(config-vxlan)# udp-port destination 65330 Router(config-vxlan)# udp-port src-port start 1024 Router(config-vxlan)# commit`
	5.	Review the VXLAN static routing running configuration. Example: vrf vrf1 address-family ipv4 unicast import route-target 1:1 ! export route-target 1:1 ! ! address-family ipv6 unicast import route-target 1:1 ! export route-target 1:1 ! vrf vrf2 address-family ipv4 unicast import route-target 1:2 ! export route-target 1:2 ! ! address-family ipv6 unicast import route-target 1:2 ! export route-target 1:2 interface nve1 member vni 2 vrf vrf1 host-reachability protocol static ! member vni 6 vrf vrf2 host-reachability protocol static ! overlay-encapsulation vxlan peer-ip lookup disable ! source-interface Loopback0 router static address-family ipv4 unicast 10.10.10.10/32 10.151.11.2 10.10.10.11/32 10.151.11.2 ! address-family ipv6 unicast 10:10:10::10/128 10:151:11::2 10:10:10::11/128 10:151:11::2 vrf vrf1 address-family ipv4 unicast 192.0.2.10/32 remote-next-hop 10.10.10.10 tunnel VXLAN index 1 nve 1 evni 1 src-mac aaa1.bbb1.ccc1. ====> IPv4oIPv4 192.0.2.11/32 remote-next-hop 10:10:10::10 tunnel VXLAN index 3 nve 1 evni 3 src-mac aaa1.bbb1.ccc1 ====> IPv4oIPv6 ! address-family ipv6 unicast 11:1:1::1/128 remote-next-hop 10.10.10.11 tunnel VXLAN index 2 nve 1 evni 2 src-mac aaa1.bbb1.ccc1 ====> ipv6 over ipv4 11:1:1::2/128 remote-next-hop 10:10:10::11 tunnel VXLAN index 4 nve 2 evni 4 src-mac aaa1.bbb1.ccc1 ====> ipv6 over ipv6 configure nve overlay-encap vxlan udp-port destination 65330 udp-port src-port start 1024 ! ! This section shows VXLAN static routing running configuration.
	6.	Verify the NVE interface and static route state. Example: `Router# show nve interface nve 1 Interface: nve1 State: Up Encapsulation: VxLAN Source Interface: Loopback0 (primary: v4: 192.0.2.12 v6: 1:1:1::1) Router# show nve global NVE Global details VNI Scope Local : No VxLAN Src Port : 1024 VxLAN Destination Port : 65330 VxLAN interfaceless l3vni bring up: TRUE Count of NVE interfaces with mpls-udp encap: 0 Global system mac: 9c54.1643.f900` Example: Router# show route vrf VRF1 192.0.2.10 detail Routing entry for 192.0.2.10/32 Known via "static", distance 1, metric 0 Installed Nov 30 17:44:37.003 for 02:22:09 Routing Descriptor Blocks 10.10.10.10, via Bundle-Ether13.5 Nexthop in Vrf: "default", Table: "default", IPv4 Unicast, Table Id: 0xe0000000 Route metric is 0 Label: None Tunnel ID: None Binding Label: None Extended communities count: 0 NHID:0x0(Ref:0) IP Tunnel Info: Auto create: 1 Tunnel Type: vxlan-l3 eVNI: 0x1 Tunnel ID: 0x1 RTEP ID: 0x100000000000001 MPLS eid:0xfffffffffffffffd Route version is 0x1 (1) No local label IP Precedence: Not Set QoS Group ID: Not Set Flow-tag: Not Set Fwd-class: Not Set Route Priority: RIB_PRIORITY_RECURSIVE (9) SVD Type RIB_SVD_TYPE_LOCAL Download Priority 3, Download Version 12 Route eid: 0xfffffffffffffffd No advertising protos.

VXLAN static routing is configured and operational on the provider edge router. The NVE interface should be up, and the route detail output must display the expected VXLAN tunnel information.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Configure VXLAN static routing

Before you begin

Procedure

Example:

Example:

Example:

Example:

Example:

Example:

Example: