Cisco IOS XE Bengaluru 17.6.1

Route Leaking between EVPN and Global Routing Table

The route leaking feature provides the import and export of routes between an EVPN-enabled VRF and the Global Routing Table (GRT). By enabling the import and export of the EVPN learned routes into the GRT, the border node provides access to services such as DNS or DHCP to the hosts in the fabric.

Cisco IOS XE Cupertino 17.8.1

Optimized Layer 2 Overlay Multicast for IPv4 and IPv6 traffic

Optimized Layer 2 Overlay Multicast forwards multicast traffic within the Layer 2 Virtual Network Instance (L2VNI). IPv4 and IPv6 Layer 2 overlay multicast traffic is optimized both at the access level and within the VXLAN fabric.

Cisco IOS XE Dublin 17.10.1

BGP EVPN VXLAN with IPv6 in the Underlay (VXLANv6)

Introduced support for IPv6 addressing in the underlay of a BGP EVPN VXLAN fabric. In a new deployment, you can build your BGP EVPN VXLAN fabric with IPv6 underlay. For an existing BGP EVPN VXLAN fabric with IPv4 underlay, you can seamlessly migrate to an IPv6 or dual stack underlay.

Cisco IOS XE Dublin 17.11.1

EVPN Microsegmentation

BGP EVPN VXLAN integrates Cisco TrustSec to provide microsegmentation and end-to-end access control with the propagation of the security group tag (SGT). Using security group-based access control lists (SGACLs), you can control the operations that a user can perform, based on the security group assignments and destination resources in a VXLAN campus fabric.

EVPN VXLAN Multi-Homing

BGP EVPN is enhanced to restrict the ethernet segment operations to the EVPN-controlled VLANs on the trunk port. This allows traditional Layer 2 domains to co-exist with the Layer 2 VNI-enabled VLANs at access layer. It also allows selective VLAN migration to overlay VXLAN segmentation.

Dynamic BGP Peering for EVPN

Support for BGP dynamic neighbor sessions is extended to the L2VPN EVPN address family.

EVPN Route Map Support

The Leaf, Spine and Border nodes of a BGP EVPN fabric now support route map for the L2VPN address family.

With route map support, the BGP attributes and their values can be modified to customize the routing policy based on the requirement. The routing policy can be applied for both inbound and outbound EVPN routes.

Cisco IOS XE Dublin 17.11.99sw

TRM over BGP EVPN VXLANv6

TRM over BGP EVPN VXLANv6 follows the industry standard IETF RFCs 6513 and 6514 to support rich multicast applications over the BGP EVPN VXLAN fabric network.

The Cisco Catalyst 9000 series switches provide flexibility to transport IPv4 multicast applications in overlay networks while the underlay network can be built on single-stack IPv6 only.

Cisco IOS XE Dublin 17.12.1

BGP EVPN VRF Auto RD and Auto RT

BGP EVPN Layer 3 overlay VRF configuration is simplified with the introduction of new CLIs to auto generate the route distinguisher (RD) and route target (RT) for a VRF.

Dynamic ARP inspection (DAI) and DHCP Rogue Server Protection in BGP EVPN VXLAN fabric

BGP EVPN VXLAN fabric now supports ARP inspection and DHCP Rogue Server Protection. To configure these features, enable ARP inspection and DHCP Snooping on the VTEPs in the corresponding VLANs of the EVPN VXLAN fabric.

Cisco IOS XE Dublin 17.12.2

TRM over BGP EVPN VXLANv6

TRM over BGP EVPN VXLANv6 follows the industry standard IETF RFCs 6513 and 6514 to support rich multicast applications over the BGP EVPN VXLAN fabric network.

DHCP Relay on VTEPs in Layer 2 Overlay

In a BGP EVPN VXLAN Layer 2 overlay, DHCP Relay is configured on the centralized gateway (CGW). The CGW is configured either on an external router or on the Layer 2 border VTEP.

Cisco IOS XE 17.13.1

TRM over BGP EVPN VXLANv6

TRM over BGP EVPN VXLANv6 follows the industry standard IETF RFCs 6513 and 6514 to support rich multicast applications over the BGP EVPN VXLAN fabric network.

The Cisco Catalyst 9000 series switches provide flexibility to transport IPv4 and IPv6 multicast applications in overlay networks while the underlay network can be built on single-stack IPv6 only.

Simplified CLIs for the BGP EVPN VXLAN Layer 2 and Layer 3 Overlay Configuration

Layer 2 Overlay Configuration:

You can now configure a range of VLANs using a single CLI - vlan configuration vlan-id-range .

By defining the member evpn-instance command under the VLAN configuration, EVPN Instance (EVI) ID and VXLAN Layer 2 VNI ID (L2VNI) are autogenerated for each VLAN.

You also have the option of auto creating the EVI and L2VNI from a predefined service profile to simplify the provisioning of Layer 2 overlay.

Layer 3 Overlay Configuration:

BGP EVPN Layer 3 overlay VRF configuration is further simplified in this release with the introduction of new keywords in the vnid command in the VRF submode.

If you have enabled auto generation of route target for a VRF, Cisco IOS XE 17.13.1 provides you with the option of auto generating the Layer 3 VNI (L3VNI) or specifying a value for L3VNI. It also provides the option to automatically associate the NVE interface with the given VRF and acquire the core SVI and core VLAN, using the vnid vnid [ evpn-instance [vni{vni-id | auto} [core-vlan vlan-num]] ] command.