配置VXLAN在连结7K充斥并且学习
简介
本文提供在连结7000系列交换机将帮助您与配置虚拟可扩展LAN的信息(VXLAN)充斥并且学习。
先决条件
要求
Cisco 建议您了解以下主题：
- 组播路由概念例如聚合点(RP)和平台独立组播(PIM)。
- VXLAN概念
本文假设， IP路由和组播路由在VXLAN配置之前设立了。
使用的组件
N77-C7710
N77-F348XP-23
N77-F324FQ-25
N77K运行软件版本7.2(0)D1(1)。
配置
网络图
配置
这些配置是特定对配置的VXLAN部分。 这些配置假设全双工可接通性对所有L3接口在有您的选择路由协议的拓扑里。静态路由用于此示例。它也假设组播路由在这些同样L3接口设立了
VTEP-1
feature pimsystem bridge-domain 50,75feature nv overlay
feature interface-vlanfeature vnivni 5000
vni 7500ip route 10.10.10.2/32 Ethernet10/1 192.168.1.2ip pim rp-address 192.168.1.1 group-list 224.0.0.0/4bridge-domain 50
bridge-domain 75encapsulation profile vni VSI_50_TO_5000 dot1q 50 vni 5000
encapsulation profile vni VSI_75_TO_7500
dot1q 75 vni 7500bridge-domain 50 member vni 5000
bridge-domain 75
member vni 7500interface nve1 no shutdown source-interface loopback10 member vni 5000 mcast-group 225.1.1.1
member vni 7500 mcast-group 227.1.1.1
interface Bdi50
no shutdown
ip address 10.50.50.50/24
interface Bdi75
no shutdown
ip address 10.75.75.75/24interface Ethernet7/17
no switchport no shutdown service instance 1 vni no shutdown encapsulation profile VSI_50_TO_5000 default
service instance 2 vni
no shutdown
encapsulation profile VSI_75_TO_7500 defaultinterface Ethernet10/1
no switchport ip address 192.168.1.1/30 ip pim sparse-mode no shutdowninterface loopback10 ip address 10.10.10.1/32 ip pim sparse-mode
请注意在VTEP (Vxlan隧道终点)的“内部”接口配置作为第3层端口(没有switchport)。 然而，没有IP分配到它。 应该注意的是BD重视定义在VTEP不必须匹配用于发送流量到此设备的VLAN ID。 然而，对在封装配置文件定义的VNI (Vxlan网络标识)映射的dot1q，呼叫在“内部”接口的服务实例下，必须匹配VLAN ID。
VTEP-2
feature pimsystem bridge-domain 50,75feature nv overlay
feature interface-vlanfeature vnivni 5000
vni 7500ip route 10.10.10.1/32 Ethernet10/7 192.168.1.1ip pim rp-address 192.168.1.1 group-list 224.0.0.0/4bridge-domain 50
bridge-domain 75encapsulation profile vni VSI_50_TO_5000 dot1q 50 vni 5000
encapsulation profile vni VSI_75_TO_7500
dot1q 75 vni 7500bridge-domain 50 member vni 5000
bridge-domain 75
member vni 7500interface nve1 no shutdown source-interface loopback10 member vni 5000 mcast-group 225.1.1.1
member vni 7500 mcast-group 227.1.1.1
interface Bdi50
no shutdown
ip address 10.50.50.51/24
interface Bdi75
no shutdown
ip address 10.75.75.76/24interface Ethernet7/30
no switchport no shutdown service instance 1 vni no shutdown encapsulation profile VSI_50_TO_5000 default
service instance 2 vni
no shutdown
encapsulation profile VSI_75_TO_7500 defaultinterface Ethernet10/7
no switchport ip address 192.168.1.2/30 ip pim sparse-mode no shutdowninterface loopback10 ip address 10.10.10.2/32 ip pim sparse-mode
请注意在VTEP的“内部”接口配置作为第3层端口(没有switchport)。 然而，没有IP分配到它。 应该注意的是BD重视定义在VTEP不必须匹配用于发送流量到此设备的VLAN ID。 然而，对在封装配置文件定义的VNI映射的dot1q，呼叫在“内部”接口的服务实例下，必须匹配VLAN ID。
验证
示例输出
这些输出在稳定状态。VTEP对等体互相发现，并且流量通过在两个在encap和decap方向之间。
VTEP-1
VTEP-1# show nve vniCodes: CP - Control Plane DP - Data Plane UC - Unconfigured SA - Suppress ARPInterface VNI Multicast-group State Mode Type [BD/VRF] Flags--------- -------- ----------------- ----- ---- ------------------ -----nve1 5000 225.1.1.1 Up DP L2 [50]nve1 7500 227.1.1.1 Up DP L2 [75]VTEP-1# show running-config interface nve 1interface nve1 no shutdown source-interface loopback10 member vni 5000 mcast-group 225.1.1.1 member vni 7500 mcast-group 227.1.1.1VTEP-1# show service instance vni detailVSI: VSI-Ethernet7/17.1If-index: 0x35310001Admin Status: UpOper Status: UpAuto-configuration Mode: Noencapsulation profile vni VSI_50_TO_5000 dot1q 50 vni 5000Dot1q VNI BD------------------50 5000 50VSI: VSI-Ethernet7/17.2If-index: 0x35310002Admin Status: UpOper Status: UpAuto-configuration Mode: Noencapsulation profile vni TEST dot1q 100 vni 7500Dot1q VNI BD------------------100 7500 75VTEP-1# show bridge-domainBridge-domain 50 (2 ports in all)Name:: Bridge-Domain50 Administrative State: UP Operational State: UP VSI-Eth7/17.1 vni5000 nve1Bridge-domain 75 (2 ports in all)Name:: Bridge-Domain75 Administrative State: UP Operational State: UP VSI-Eth7/17.2 vni7500 nve1VTEP-1# show mac address-table dynamic Note: MAC table entries displayed are getting read from software. Use the 'hardware-age' keyword to get information related to 'Age' Legend: * - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC age - seconds since last seen,+ - primary entry using vPC Peer-Link, E - EVPN entry (T) - True, (F) - False , ~~~ - use 'hardware-age' keyword to retrieveage info VLAN/BD MAC Address Type age Secure NTFY Ports/SWID.SSID.LID---------+-----------------+--------+---------+------+----+------------------* 50 547f.eeec.af43 dynamic ~~~ F F nve1/10.10.10.2* 50 547f.eeec.af44 dynamic ~~~ F F VSI-Eth7/17.1* 50 547f.eeec.af45 dynamic ~~~ F F nve1/10.10.10.2* 75 547f.eeec.af44 dynamic ~~~ F F VSI-Eth7/17.2* 75 547f.eeec.af45 dynamic ~~~ F F nve1/10.10.10.2VTEP-1# show ip mroute detailIP Multicast Routing Table for VRF "default"Total number of routes: 7Total number of (*,G) routes: 2Total number of (S,G) routes: 4Total number of (*,G-prefix) routes: 1(*, 225.1.1.1/32), uptime: 19:51:28, nve(1) ip(0) pim(1) Data Created: No VXLAN Flags VXLAN Encap Stats: 0/0 [Packets/Bytes], 0.000 bps Incoming interface: Ethernet10/1, RPF nbr: 1.1.1.1 Outgoing interface list: (count: 2) Ethernet10/1, uptime: 19:51:09, pim, (RPF) nve1, uptime: 19:51:28, nve(10.10.10.1/32, 225.1.1.1/32), uptime: 19:51:28, nve(0) mrib(0) ip(0) pim(1) Data Created: No Received Register stop VXLAN Flags VXLAN Encap Stats: 19/2274 [Packets/Bytes], 0.000 bps Incoming interface: loopback10, RPF nbr: 10.10.10.1, internal Outgoing interface list: (count: 1) Ethernet10/1, uptime: 19:51:09, pim(10.10.10.2/32, 225.1.1.1/32), uptime: 18:10:06, pim(1) mrib(1) ip(0) Data Created: Yes VXLAN Flags VXLAN Decap Stats: 9/846 [Packets/Bytes], 0.000 bps Incoming interface: Ethernet10/1, RPF nbr: 1.1.1.2, internal Outgoing interface list: (count: 2) Ethernet10/1, uptime: 01:00:32, pim, (RPF) nve1, uptime: 18:10:06, mrib(*, 227.1.1.1/32), uptime: 12:52:13, nve(1) ip(0) pim(1) Data Created: No VXLAN Flags VXLAN Encap Stats: 0/0 [Packets/Bytes], 0.000 bps Incoming interface: Ethernet10/1, RPF nbr: 1.1.1.1 Outgoing interface list: (count: 2) Ethernet10/1, uptime: 12:51:52, pim, (RPF) nve1, uptime: 12:52:13, nve(10.10.10.1/32, 227.1.1.1/32), uptime: 12:52:13, nve(0) mrib(0) ip(0) pim(1) Data Created: No Received Register stop VXLAN Flags VXLAN Encap Stats: 300/39850 [Packets/Bytes], 0.000 bps Incoming interface: loopback10, RPF nbr: 10.10.10.1, internal Outgoing interface list: (count: 1) Ethernet10/1, uptime: 12:51:52, pim(10.10.10.2/32, 227.1.1.1/32), uptime: 12:51:34, pim(1) mrib(1) ip(0) Data Created: Yes VXLAN Flags VXLAN Decap Stats: 22/1928 [Packets/Bytes], 0.000 bps Incoming interface: Ethernet10/1, RPF nbr: 1.1.1.2, internal Outgoing interface list: (count: 2) Ethernet10/1, uptime: 00:52:14, pim, (RPF) nve1, uptime: 12:51:34, mrib(*, 232.0.0.0/8), uptime: 20:56:33, pim(0) ip(0) Data Created: No Stats: 0/0 [Packets/Bytes], 0.000 bps Incoming interface: Null, RPF nbr: 0.0.0.0 Outgoing interface list: (count: 0)VTEP-1# show ip arpFlags: * - Adjacencies learnt on non-active FHRP router + - Adjacencies synced via CFSoE # - Adjacencies Throttled for Glean D - Static Adjacencies attached to down interfaceIP ARP Table for context defaultTotal number of entries: 4Address Age MAC Address Interface10.50.50.1 00:11:32 547f.eeec.af44 Bdi50
10.50.50.2 00:11:14 547f.eeec.af44 Bdi5010.75.75.1 00:10:45 547f.eeec.af44 Bdi7510.75.75.2 00:15:04 547f.eeec.af45 Bdi75192.168.1.2 00:05:39 547f.eeec.af43 Ethernet10/1VTEP-1# show ip routeIP Route Table for VRF "default"'*' denotes best ucast next-hop'**' denotes best mcast next-hop'[x/y]' denotes [preference/metric]'%<string>' in via output denotes VRF <string>192.168.1.0/30, ubest/mbest: 1/0, attached *via 1.1.1.1, Eth10/1, [0/0], 20:25:13, direct192.168.1.1/32, ubest/mbest: 1/0, attached *via 1.1.1.1, Eth10/1, [0/0], 20:25:13, local10.10.10.1/32, ubest/mbest: 2/0, attached *via 10.10.10.1, Lo10, [0/0], 20:25:45, local *via 10.10.10.1, Lo10, [0/0], 20:25:45, direct10.10.10.2/32, ubest/mbest: 1/0 *via 1.1.1.2, Eth10/1, [1/0], 20:23:42, static50.50.50.0/24, ubest/mbest: 1/0, attached *via 50.50.50.50, Bdi50, [0/0], 01:18:47, direct50.50.50.50/32, ubest/mbest: 1/0, attached *via 50.50.50.50, Bdi50, [0/0], 01:18:47, local75.75.75.0/24, ubest/mbest: 1/0, attached *via 75.75.75.75, Bdi75, [0/0], 01:10:05, direct75.75.75.75/32, ubest/mbest: 1/0, attached *via 75.75.75.75, Bdi75, [0/0], 01:10:05, local
注意-所有上述输出采集了与数据流全网状在所有主机之间的在拓扑里。
VTEP-2
VTEP-2# show nve vniCodes: CP - Control Plane DP - Data Plane UC - Unconfigured SA - Suppress ARPInterface VNI Multicast-group State Mode Type [BD/VRF] Flags--------- -------- ----------------- ----- ---- ------------------ -----nve1 5000 225.1.1.1 Up DP L2 [50]nve1 7500 227.1.1.1 Up DP L2 [75]VTEP-2# show running-config interface nve 1interface nve1 no shutdown source-interface loopback10 member vni 5000 mcast-group 225.1.1.1 member vni 7500 mcast-group 227.1.1.1VTEP-2# show service instance vni detailVSI: VSI-Ethernet7/30.1If-index: 0x3531d001Admin Status: UpOper Status: UpAuto-configuration Mode: Noencapsulation profile vni VSI_50_TO_5000 dot1q 50 vni 5000Dot1q VNI BD------------------50 5000 50VSI: VSI-Ethernet7/30.2If-index: 0x3531d002Admin Status: UpOper Status: UpAuto-configuration Mode: Noencapsulation profile vni TEST dot1q 100 vni 7500Dot1q VNI BD------------------100 7500 75VTEP-2# show bridge-domainBridge-domain 50 (2 ports in all)Name:: Bridge-Domain50 Administrative State: UP Operational State: UP vni5000 VSI-Eth7/30.1 nve1Bridge-domain 75 (2 ports in all)Name:: Bridge-Domain75 Administrative State: UP Operational State: UP vni7500 VSI-Eth7/30.2 nve1VTEP-2# show mac address-table dynamic Note: MAC table entries displayed are getting read from software. Use the 'hardware-age' keyword to get information related to 'Age' Legend: * - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC age - seconds since last seen,+ - primary entry using vPC Peer-Link, E - EVPN entry (T) - True, (F) - False , ~~~ - use 'hardware-age' keyword to retrieveage info VLAN/BD MAC Address Type age Secure NTFY Ports/SWID.SSID.LID---------+-----------------+--------+---------+------+----+------------------* 50 547f.eeec.af44 dynamic ~~~ F F nve1/10.10.10.1* 50 547f.eeec.af45 dynamic ~~~ F F VSI-Eth7/30.1* 75 547f.eeec.af45 dynamic ~~~ F F VSI-Eth7/30.2* 75 547f.eeec.af48 dynamic ~~~ F F nve1/10.10.10.1VTEP-2# show ip mroute detailIP Multicast Routing Table for VRF "default"Total number of routes: 5Total number of (*,G) routes: 2Total number of (S,G) routes: 2Total number of (*,G-prefix) routes: 1(*, 225.1.1.1/32), uptime: 19:56:19, nve(1) ip(0) pim(0) Data Created: No VXLAN Flags VXLAN Encap Stats: 8/748 [Packets/Bytes], 0.000 bps Incoming interface: Ethernet10/7, RPF nbr: 1.1.1.1 Outgoing interface list: (count: 1) nve1, uptime: 19:56:19, nve(10.10.10.2/32, 225.1.1.1/32), uptime: 19:56:19, nve(0) mrib(0) pim(1) ip(0) Data Created: No Received Register stop VXLAN Flags VXLAN Encap Stats: 9/834 [Packets/Bytes], 0.000 bps Incoming interface: loopback10, RPF nbr: 10.10.10.2 Outgoing interface list: (count: 1) Ethernet10/7, uptime: 18:15:17, pim(*, 227.1.1.1/32), uptime: 12:57:03, nve(1) ip(0) pim(0) Data Created: No VXLAN Flags VXLAN Encap Stats: 10/864 [Packets/Bytes], 0.000 bps Incoming interface: Ethernet10/7, RPF nbr: 1.1.1.1 Outgoing interface list: (count: 1) nve1, uptime: 12:57:03, nve(10.10.10.2/32, 227.1.1.1/32), uptime: 12:57:03, nve(0) mrib(0) ip(0) pim(1) Data Created: No Received Register stop VXLAN Flags VXLAN Encap Stats: 30/2648 [Packets/Bytes], 0.000 bps Incoming interface: loopback10, RPF nbr: 10.10.10.2 Outgoing interface list: (count: 1) Ethernet10/7, uptime: 12:56:45, pim(*, 232.0.0.0/8), uptime: 18:20:36, pim(0) ip(0) Data Created: No Stats: 0/0 [Packets/Bytes], 0.000 bps Incoming interface: Null, RPF nbr: 0.0.0.0 Outgoing interface list: (count: 0)VTEP-2# show ip arpFlags: * - Adjacencies learnt on non-active FHRP router + - Adjacencies synced via CFSoE # - Adjacencies Throttled for Glean D - Static Adjacencies attached to down interfaceIP ARP Table for context defaultTotal number of entries: 4Address Age MAC Address Interface10.50.50.1 00:11:30 547f.eeec.af44 Bdi5010.50.50.2 00:17:07 547f.eeec.af45 Bdi50
10.75.75.1 00:04:14 547f.eeec.af45 Bdi7510.75.75.2 00:03:24 547f.eeec.af45 Bdi75192.168.1.1 00:10:52 547f.eeec.af48 Ethernet10/7VTEP-2# show ip routeIP Route Table for VRF "default"'*' denotes best ucast next-hop'**' denotes best mcast next-hop'[x/y]' denotes [preference/metric]'%<string>' in via output denotes VRF <string>192.168.1.0/30, ubest/mbest: 1/0, attached *via 1.1.1.2, Eth10/7, [0/0], 20:30:24, direct192.168.1.2/32, ubest/mbest: 1/0, attached *via 1.1.1.2, Eth10/7, [0/0], 20:30:24, local10.10.10.1/32, ubest/mbest: 1/0 *via 1.1.1.1, Eth10/7, [1/0], 20:29:48, static10.10.10.2/32, ubest/mbest: 2/0, attached *via 10.10.10.2, Lo10, [0/0], 20:29:39, local *via 10.10.10.2, Lo10, [0/0], 20:29:39, direct50.50.50.0/24, ubest/mbest: 1/0, attached *via 50.50.50.51, Bdi50, [0/0], 01:22:50, direct50.50.50.51/32, ubest/mbest: 1/0, attached *via 50.50.50.51, Bdi50, [0/0], 01:22:50, local75.75.75.0/24, ubest/mbest: 1/0, attached *via 75.75.75.76, Bdi75, [0/0], 01:14:50, direct75.75.75.76/32, ubest/mbest: 1/0, attached *via 75.75.75.76, Bdi75, [0/0], 01:14:50, local
注意-所有上述输出采集了与数据流全网状在所有主机之间的在拓扑里。
反馈