一、基础网络架构图

该拓扑图主要采用Spine-Leaf物理架构。Underlay采用OSPF协议,Overlay采用VXLAN协议。VXLAN网络中承载三个业务区,分别是10.0.0.0/24、20.0.0.0/24、30.0.0.0/24,所属的VLAN分别是VLAN10、VLAN20、VLAN30,VLAN到VNI的映射如图表格所示。网关设计采用较为简单的集中式网关部署,网关坐落在Border Leaf 1201-1202上,1201-1202将部署vPC和优化型FHRP。Server Leaf 1303-1304也将部署vPC,作为VXLAN with vPC模型实践,为V10-PC4和V20-PC2提供二层服务。Border Leaf 1201-1202连接外部网络,是VXLAN内部网络和外部通信的边界设备。基础网络构建的主要操作目标为打通二层网络以及三层网络,具体细节在后续章节。

二、基础网络规划

1、设备信息

Spine-Leaf物理架构要求规定至少配备一台Spine和一台Leaf。考虑到更加贴合现网的常规部署,案例设计了两台Spine、两台Server Leaf、两台Border Leaf。Spine和Leaf均由Nexus数据中心交换机担任,采用的系统版本为NX-OS 9.3.10。案例中设计模拟七台PC,为了降低资源消耗V10-PC1、V10-PC2、V10-PC3、V20-PC1、V30-PC1由desktop-simulator一并担任,V10-PC4和V20-PC2则分别由两台交换机模拟担任。External-Router作为VXLAN外部网络存在,后续测试需要用到。

2、接口规划

接口规划主要细化设备之间的互联情况。Leaf采用双上联到两台Spine,接口速率为10Gbps,每一台Leaf的E1/63连接至Spine 1101,每一台Leaf的E1/64连接至Spine 1102。两台Border Leaf额外全互联到External-Router。V10-PC1、V10-PC2、V10-PC3、V20-PC1、V30-PC1由desktop-simulator一并担任,通过VRF Lite技术将desktop-simulator分裂为五台PC,VRF Lite命名如下表VRF Lit列。V10-PC4和V20-PC2分别双上联到Server Leaf 1303和1304,并构建跨设备聚合链路(即vPC)。

vPC设备线路规划:涉及到vPC的设备主要是Server Leaf 1303、1304以及Border Leaf 1201、1202。设计E1/60作为vPC Pair的Keepalive链路,E1/61-62作为vPC Pair的Peer-Link链路。

3、地址规划

Underlay和Overlay的地址规划分别为Loopback和互联地址规划。所有的Spine、Leaf以及External-Router都拥有一个Loopback0,Loopback0用于Underlay OSPF Router-id。所有的Leaf都拥有一个Loopback1,关联到NVE接口,NVE作为VTEP地址。vPC Pair根据要求Loopback1需要配置Primary和Secondary地址,其中Secondary地址用于组播和单播流量的封装。vPC Peer-Link被关闭或故障后,NVE地址Primary IP用于VXLAN中的组播和单播流量封装。

互联地址分别Spine-Leaf互联和Border Leaf至External-Router互联。互联地址均采用30位子网掩码。互联地址的设计以序号1举例,11.31.1.1/30,第一个点分十进制11表示Spine的Node id即1101中的百位和个位;第二个点分十进制31表示Leaf的Node id即1301中的百位和个位;第三个点分十进制默认为1;第四个点分十进制1表示Spine端,2表示Leaf端;/30表示子网掩码为255.255.255.252。Border Leaf和External-Router互联,在第一个点分十进制和第二个点分十进制上有些区别。以201.1.1.1/30为例,第一个点分十进制201表示Border Leaf Node id即1201中的百位、十位、个位;第二个点分十进制默认为1;第四个点分十进制1表示Leaf端,2表示External-Router端。

4、业务规划

VXLAN网络中承载三个业务区,分别是10.0.0.0/24、20.0.0.0/24、30.0.0.0/24。对应VLAN ID为10、20、30,映射到VXLAN VNID为10010、10020、10030。三个网络的网关部署在Border Leaf 1201-1202上,网关分别为10.0.0.254(SVI 10)、20.0.0.254(SVI 20)、30.0.0.254(SVI 30)。由于Border Leaf 1201-1202为vPC Pair,根据集中式网关最佳实践部署HSRP,Border Leaf 1201的SVI 10、SVI 20、SVI30的实地址10.0.0.252、20.0.0.252、30.0.0.252,Border Leaf 1202的SVI 10、SVI 20、SVI30的实地址10.0.0.253、20.0.0.253、30.0.0.253。

三、配置脚本

1、业务终端配置

desktop-simulator#

hostname desktop-simulator

ip vrf V10-PC1
exit

ip vrf  V10-PC2
exit

ip vrf  V10-PC3
exit

ip vrf  V20-PC1
exit

ip vrf  V30-PC1
exit

interface G0/1
description To_X-VXLAN-SL-1301_E1/1
ip vrf forwarding V10-PC1
ip address 10.0.0.1 255.255.255.0
no shutdown

ip route vrf V10-PC1 0.0.0.0 0.0.0.0 10.0.0.254 

interface G0/2
description To_X-VXLAN-SL-1301_E1/2
ip vrf forwarding V10-PC2
ip address 10.0.0.2 255.255.255.0
no shutdown

ip route vrf V10-PC2 0.0.0.0 0.0.0.0 10.0.0.254 

interface G0/3
description To_X-VXLAN-SL-1302_E1/1
ip vrf forwarding V10-PC3
ip address 10.0.0.3 255.255.255.0
no shutdown

ip route vrf V10-PC3 0.0.0.0 0.0.0.0 10.0.0.254 

interface G0/4
description To_X-VXLAN-SL-1302_E1/2
ip vrf forwarding V20-PC1
ip address 20.0.0.1 255.255.255.0
no shutdown

ip route vrf V20-PC1 0.0.0.0 0.0.0.0 20.0.0.254 

interface G0/5
description To_X-VXLAN-SL-1302_E1/3
ip vrf forwarding V30-PC1
ip address 30.0.0.1 255.255.255.0
no shutdown

ip route vrf V30-PC1 0.0.0.0 0.0.0.0 30.0.0.254 

V10-PC4#

hostname V10-PC4

vlan 10
 name 10.0.0.0/24
 exit

interface range G0/0-1
channel-protocol lacp
channel-group 10 mode active
no shutdown

interface port-channel 10
switchport mode access
switchport access vlan 10
no shutdown

interface vlan 10
ip address 10.0.0.4 255.255.255.0
no shutdown

ip route 0.0.0.0 0.0.0.0 10.0.0.254

V20-PC2#

hostname V20-PC2

vlan 20
 name 20.0.0.0/24
 exit

interface range G0/0-1
channel-protocol lacp
channel-group 20 mode active
no shutdown

interface port-channel 20
switchport mode access
switchport access vlan 20
no shutdown

interface vlan 20
ip address 20.0.0.2 255.255.255.0
no shutdown

ip route 0.0.0.0 0.0.0.0 20.0.0.254

2、VXLAN矩阵Underlay配置&检查

1)Underlay配置

为了符合安全性原则,VXLAN Fabric线路需要进行加密,以保障合法安全的OSPF邻居相互传递路由。加密方式MD5、加密密码Cisco@123。为了建立更加高效的邻居建立和信息传递,OSPF网络链路类型更改为P2P。Underlay整体处于OSPF AREA 0。Underlay不配置组播。

X-VXLAN-SP-1101#

hostname X-VXLAN-SP-1101

feature ospf

interface loopback0
ip address 11.11.11.11/32

router ospf Underlay
  router-id 11.11.11.11
  passive-interface default

interface E1/1
no switchport
ip address 11.31.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/2
no switchport
ip address 11.32.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/3
no switchport
ip address 11.33.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/4
no switchport
ip address 11.34.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/5
no switchport
ip address 11.21.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/6
no switchport
ip address 11.22.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface loopback0
ip router ospf Underlay area 0

X-VXLAN-SP-1102#

hostname X-VXLAN-SP-1102

feature ospf

interface loopback0
ip address 12.12.12.12/32

router ospf Underlay
  router-id 12.12.12.12
  passive-interface default

interface E1/1
no switchport
ip address 12.31.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/2
no switchport
ip address 12.32.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/3
no switchport
ip address 12.33.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/4
no switchport
ip address 12.34.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/5
no switchport
ip address 12.21.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/6
no switchport
ip address 12.22.1.1/30
ip router ospf Underlay area 0
no ip ospf passive-interface
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface loopback0
ip router ospf Underlay area 0

X-VXLAN-SL-1301#

hostname X-VXLAN-SL-1301

feature ospf

interface loopback0
ip address 31.31.31.31/32

router ospf Underlay
  router-id 31.31.31.31
  passive-interface default

interface E1/63
no switchport
ip address 11.31.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/64
no switchport
ip address 12.31.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface loopback0
ip router ospf Underlay area 0

interface loopback1
description NVE
ip address 31.31.1.1/32
ip router ospf Underlay area 0

X-VXLAN-SL-1302#

hostname X-VXLAN-SL-1302

feature ospf

interface loopback0
ip address 32.32.32.32/32

router ospf Underlay
  router-id 32.32.32.32
  passive-interface default

interface E1/63
no switchport
ip address 11.32.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/64
no switchport
ip address 12.32.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface loopback0
ip router ospf Underlay area 0

interface loopback1
description NVE
ip address 32.32.1.1/32
ip router ospf Underlay area 0

X-VXLAN-SL-1303#

hostname X-VXLAN-SL-1303

feature ospf

interface loopback0
ip address 33.33.33.33/32

router ospf Underlay
  router-id 33.33.33.33
  passive-interface default

interface E1/63
no switchport
ip address 11.33.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/64
no switchport
ip address 12.33.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface loopback0
ip router ospf Underlay area 0

interface loopback1
description NVE
ip address 33.33.1.1/32
ip address 33.33.34.34/32 secondary
ip router ospf Underlay area 0

X-VXLAN-SL-1304#

hostname X-VXLAN-SL-1304

feature ospf

interface loopback0
ip address 34.34.34.34/32

router ospf Underlay
  router-id 34.34.34.34
  passive-interface default

interface E1/63
no switchport
ip address 11.34.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/64
no switchport
ip address 12.34.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface loopback0
ip router ospf Underlay area 0

interface loopback1
description NVE
ip address 34.34.1.1/32
ip address 33.33.34.34/32 secondary
ip router ospf Underlay area 0

X-VXLAN-BL-1201#

hostname X-VXLAN-BL-1201

feature ospf

interface loopback0
ip address 21.21.21.21/32

router ospf Underlay
  router-id 21.21.21.21
  passive-interface default

interface E1/63
no switchport
ip address 11.21.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/64
no switchport
ip address 12.21.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface loopback0
ip router ospf Underlay area 0

interface loopback1
description NVE
ip address 21.21.1.1/32
ip address 21.21.22.22/32 secondary
ip router ospf Underlay area 0

X-VXLAN-BL-1202#

hostname X-VXLAN-BL-1202

feature ospf

interface loopback0
ip address 22.22.22.22/32

router ospf Underlay
  router-id 22.22.22.22
  passive-interface default

interface E1/63
no switchport
ip address 11.22.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface E1/64
no switchport
ip address 12.22.1.2/30
no ip ospf passive-interface
ip router ospf Underlay area 0
ip ospf network point-to-point
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 0 Cisco@123
no shutdown

interface loopback0
ip router ospf Underlay area 0

interface loopback1
description NVE
ip address 22.22.1.1/32
ip address 21.21.22.22/32 secondary
ip router ospf Underlay area 0

2)状态检查

配置完成后,对所有Spine和Leaf的接口状态、接口IP、OSPF邻居以及路由学习情况进行检查。

X-VXLAN-SP-1101# show ip route ospf
IP Route Table for VRF "default"
'*' denotes best ucast next-hop
'**' denotes best mcast next-hop
'[x/y]' denotes [preference/metric]
'%<string>' in via output denotes VRF <string>

12.12.12.12/32, ubest/mbest: 6/0
    *via 11.21.1.2, Eth1/5, [110/81], 00:19:17, ospf-Underlay, intra
    *via 11.22.1.2, Eth1/6, [110/81], 00:18:46, ospf-Underlay, intra
    *via 11.31.1.2, Eth1/1, [110/81], 00:20:01, ospf-Underlay, intra
    *via 11.32.1.2, Eth1/2, [110/81], 01:15:46, ospf-Underlay, intra
    *via 11.33.1.2, Eth1/3, [110/81], 01:07:41, ospf-Underlay, intra
    *via 11.34.1.2, Eth1/4, [110/81], 01:08:14, ospf-Underlay, intra
12.21.1.0/30, ubest/mbest: 1/0
    *via 11.21.1.2, Eth1/5, [110/80], 00:19:17, ospf-Underlay, intra
12.22.1.0/30, ubest/mbest: 1/0
    *via 11.22.1.2, Eth1/6, [110/80], 00:18:46, ospf-Underlay, intra
12.31.1.0/30, ubest/mbest: 1/0
    *via 11.31.1.2, Eth1/1, [110/80], 00:20:01, ospf-Underlay, intra
12.32.1.0/30, ubest/mbest: 1/0
    *via 11.32.1.2, Eth1/2, [110/80], 01:15:47, ospf-Underlay, intra
12.33.1.0/30, ubest/mbest: 1/0
    *via 11.33.1.2, Eth1/3, [110/80], 01:07:41, ospf-Underlay, intra
12.34.1.0/30, ubest/mbest: 1/0
    *via 11.34.1.2, Eth1/4, [110/80], 01:08:14, ospf-Underlay, intra
21.21.1.1/32, ubest/mbest: 1/0
    *via 11.21.1.2, Eth1/5, [110/41], 00:05:11, ospf-Underlay, intra
21.21.21.21/32, ubest/mbest: 1/0
    *via 11.21.1.2, Eth1/5, [110/41], 00:19:17, ospf-Underlay, intra
21.21.22.22/32, ubest/mbest: 2/0
    *via 11.21.1.2, Eth1/5, [110/41], 00:05:11, ospf-Underlay, intra
    *via 11.22.1.2, Eth1/6, [110/41], 00:05:08, ospf-Underlay, intra
22.22.1.1/32, ubest/mbest: 1/0
    *via 11.22.1.2, Eth1/6, [110/41], 00:05:08, ospf-Underlay, intra
22.22.22.22/32, ubest/mbest: 1/0
    *via 11.22.1.2, Eth1/6, [110/41], 00:18:46, ospf-Underlay, intra
31.31.1.1/32, ubest/mbest: 1/0
    *via 11.31.1.2, Eth1/1, [110/41], 00:20:01, ospf-Underlay, intra
31.31.31.31/32, ubest/mbest: 1/0
    *via 11.31.1.2, Eth1/1, [110/41], 00:20:01, ospf-Underlay, intra
32.32.1.1/32, ubest/mbest: 1/0
    *via 11.32.1.2, Eth1/2, [110/41], 01:15:47, ospf-Underlay, intra
32.32.32.32/32, ubest/mbest: 1/0
    *via 11.32.1.2, Eth1/2, [110/41], 01:15:47, ospf-Underlay, intra
33.33.1.1/32, ubest/mbest: 1/0
    *via 11.33.1.2, Eth1/3, [110/41], 01:04:39, ospf-Underlay, intra
33.33.33.33/32, ubest/mbest: 1/0
    *via 11.33.1.2, Eth1/3, [110/41], 01:07:41, ospf-Underlay, intra
33.33.34.34/32, ubest/mbest: 2/0
    *via 11.33.1.2, Eth1/3, [110/41], 01:04:39, ospf-Underlay, intra
    *via 11.34.1.2, Eth1/4, [110/41], 01:04:39, ospf-Underlay, intra
34.34.1.1/32, ubest/mbest: 1/0
    *via 11.34.1.2, Eth1/4, [110/41], 01:04:39, ospf-Underlay, intra
34.34.34.34/32, ubest/mbest: 1/0
    *via 11.34.1.2, Eth1/4, [110/41], 01:08:14, ospf-Underlay, intra

X-VXLAN-SP-1102# show ip route ospf
IP Route Table for VRF "default"
'*' denotes best ucast next-hop
'**' denotes best mcast next-hop
'[x/y]' denotes [preference/metric]
'%<string>' in via output denotes VRF <string>

11.11.11.11/32, ubest/mbest: 6/0
    *via 12.21.1.2, Eth1/5, [110/81], 00:21:46, ospf-Underlay, intra
    *via 12.22.1.2, Eth1/6, [110/81], 00:21:19, ospf-Underlay, intra
    *via 12.31.1.2, Eth1/1, [110/81], 00:22:34, ospf-Underlay, intra
    *via 12.32.1.2, Eth1/2, [110/81], 01:18:19, ospf-Underlay, intra
    *via 12.33.1.2, Eth1/3, [110/81], 01:10:14, ospf-Underlay, intra
    *via 12.34.1.2, Eth1/4, [110/81], 01:10:48, ospf-Underlay, intra
11.21.1.0/30, ubest/mbest: 1/0
    *via 12.21.1.2, Eth1/5, [110/80], 00:21:51, ospf-Underlay, intra
11.22.1.0/30, ubest/mbest: 1/0
    *via 12.22.1.2, Eth1/6, [110/80], 00:21:19, ospf-Underlay, intra
11.31.1.0/30, ubest/mbest: 1/0
    *via 12.31.1.2, Eth1/1, [110/80], 00:22:34, ospf-Underlay, intra
11.32.1.0/30, ubest/mbest: 1/0
    *via 12.32.1.2, Eth1/2, [110/80], 01:18:20, ospf-Underlay, intra
11.33.1.0/30, ubest/mbest: 1/0
    *via 12.33.1.2, Eth1/3, [110/80], 01:10:14, ospf-Underlay, intra
11.34.1.0/30, ubest/mbest: 1/0
    *via 12.34.1.2, Eth1/4, [110/80], 01:10:48, ospf-Underlay, intra
21.21.1.1/32, ubest/mbest: 1/0
    *via 12.21.1.2, Eth1/5, [110/41], 00:07:45, ospf-Underlay, intra
21.21.21.21/32, ubest/mbest: 1/0
    *via 12.21.1.2, Eth1/5, [110/41], 00:21:51, ospf-Underlay, intra
21.21.22.22/32, ubest/mbest: 2/0
    *via 12.21.1.2, Eth1/5, [110/41], 00:07:45, ospf-Underlay, intra
    *via 12.22.1.2, Eth1/6, [110/41], 00:07:41, ospf-Underlay, intra
22.22.1.1/32, ubest/mbest: 1/0
    *via 12.22.1.2, Eth1/6, [110/41], 00:07:41, ospf-Underlay, intra
22.22.22.22/32, ubest/mbest: 1/0
    *via 12.22.1.2, Eth1/6, [110/41], 00:21:19, ospf-Underlay, intra
31.31.1.1/32, ubest/mbest: 1/0
    *via 12.31.1.2, Eth1/1, [110/41], 00:22:34, ospf-Underlay, intra
31.31.31.31/32, ubest/mbest: 1/0
    *via 12.31.1.2, Eth1/1, [110/41], 00:22:34, ospf-Underlay, intra
32.32.1.1/32, ubest/mbest: 1/0
    *via 12.32.1.2, Eth1/2, [110/41], 01:18:20, ospf-Underlay, intra
32.32.32.32/32, ubest/mbest: 1/0
    *via 12.32.1.2, Eth1/2, [110/41], 01:18:20, ospf-Underlay, intra
33.33.1.1/32, ubest/mbest: 1/0
    *via 12.33.1.2, Eth1/3, [110/41], 01:07:12, ospf-Underlay, intra
33.33.33.33/32, ubest/mbest: 1/0
    *via 12.33.1.2, Eth1/3, [110/41], 01:10:14, ospf-Underlay, intra
33.33.34.34/32, ubest/mbest: 2/0
    *via 12.33.1.2, Eth1/3, [110/41], 01:07:12, ospf-Underlay, intra
    *via 12.34.1.2, Eth1/4, [110/41], 01:07:12, ospf-Underlay, intra
34.34.1.1/32, ubest/mbest: 1/0
    *via 12.34.1.2, Eth1/4, [110/41], 01:07:12, ospf-Underlay, intra
34.34.34.34/32, ubest/mbest: 1/0
    *via 12.34.1.2, Eth1/4, [110/41], 01:10:48, ospf-Underlay, intra

3、VXLAN矩阵Overlay配置&检查

1)Overlay配置

VXLAN作为Overlay协议,具有在三层网络之上扩展二层网络的职责,本章节主要构建静态VXLAN。要配置VXLAN,需要先激活两个特性即vn-segment-vlan-based和nv overlay。作为Server Leaf,对上构建VXLAN,对下构建Ethernet,并对VID和VNID进行一比一映射。对下构建Ethernet和传统网络无异,对上构建VXLAN需要配置NVE接口。由于构建的是静态VXLAN,因此NVE接口的主要参数为关联Loopback1、配置VNI、配置对等VTEP。构建vPC Pair的配置稍有差异,Loopback1需要配置Primary和Secondary地址,否则vPC状态会出现问题!

X-VXLAN-SL-1301#

feature vn-segment-vlan-based
feature nv overlay

vlan 10
vn-segment 10010

interface E1/1
switchport mode access
switchport access vlan 10
no shutdown

interface E1/2
switchport mode access
switchport access vlan 10
no shutdown

interface nve1
no shutdown
source-interface loopback1
member vni 10010
ingress-replication protocol static
 peer-ip 32.32.1.1
 peer-ip 33.33.34.34
 peer-ip 21.21.22.22

X-VXLAN-SL-1302#

feature vn-segment-vlan-based
feature nv overlay

vlan 10
vn-segment 10010
vlan 20
vn-segment 10020
vlan 30
vn-segment 10030


interface E1/1
switchport mode access
switchport access vlan 10
no shutdown

interface E1/2
switchport mode access
switchport access vlan 20
no shutdown

interface E1/3
switchport mode access
switchport access vlan 30
no shutdown

interface nve1
no shutdown
source-interface loopback1
member vni 10010
ingress-replication protocol static
 peer-ip 31.31.1.1
 peer-ip 33.33.34.34
 peer-ip 21.21.22.22
member vni 10020
ingress-replication protocol static
 peer-ip 33.33.34.34
 peer-ip 21.21.22.22
member vni 10030
ingress-replication protocol static
 peer-ip 21.21.22.22

X-VXLAN-SL-1303#

feature vn-segment-vlan-based
feature nv overlay
feature lacp
feature vpc

vlan 10
vn-segment 10010
vlan 20
vn-segment 10020

vrf context vPC_Keepalive
exit

vpc domain 10
role priority 100
peer-keepalive destination 1.1.1.2 source 1.1.1.1 vrf vPC_Keepalive
peer-switch
peer-gateway
end

interface E1/60
no switchport
vrf member vPC_Keepalive
ip address 1.1.1.1/30
no shutdown

interface E1/61
channel-group 1 mode active
no shutdown

interface E1/62
channel-group 1 mode active
no shutdown

interface port-channel 1
switchport
switchport mode trunk
switchport trunk allowed vlan 10,20
vpc peer-link
no shutdown

interface E1/1
channel-group 10 mode active
no shutdown

interface port-channel 10
switchport
switchport mode access
switchport access vlan 10
vpc 10
no shutdown

interface E1/2
channel-group 20 mode active
no shutdown

interface port-channel 20
switchport
switchport mode access
switchport access vlan 20
vpc 20
no shutdown

#状态检查脚本
show int status
show ip interface brief vrf vPC_Keepalive
ping 1.1.1.2 vrf vPC_Keepalive
show run vpc
show port-channel summary
show vpc
show vpc consistency-parameters global
show vpc role
show vpc peer-keepalive
#

interface nve1
no shutdown
source-interface loopback1
member vni 10010
ingress-replication protocol static
 peer-ip 31.31.1.1
 peer-ip 32.32.1.1
 peer-ip 21.21.22.22
member vni 10020
ingress-replication protocol static
 peer-ip 32.32.1.1
 peer-ip 21.21.22.22

X-VXLAN-SL-1304#

feature vn-segment-vlan-based
feature nv overlay
feature lacp
feature vpc

vlan 10
vn-segment 10010
vlan 20
vn-segment 10020

vrf context vPC_Keepalive
exit

vpc domain 10
role priority 110
peer-keepalive destination 1.1.1.1 source 1.1.1.2 vrf vPC_Keepalive
peer-switch
peer-gateway
end

interface E1/60
no switchport
vrf member vPC_Keepalive
ip address 1.1.1.2/30
no shutdown

interface E1/61
channel-group 1 mode active
no shutdown

interface E1/62
channel-group 1 mode active
no shutdown

interface port-channel 1
switchport
switchport mode trunk
switchport trunk allowed vlan 10,20
vpc peer-link
no shutdown

interface E1/1
channel-group 10 mode active
no shutdown

interface port-channel 10
switchport
switchport mode access
switchport access vlan 10
vpc 10
no shutdown

interface E1/2
channel-group 20 mode active
no shutdown

interface port-channel 20
switchport
switchport mode access
switchport access vlan 20
vpc 20
no shutdown

show int status
show ip interface brief vrf vPC_Keepalive
ping 1.1.1.1 vrf vPC_Keepalive
show run vpc
show port-channel summary
show vpc
show vpc consistency-parameters global
show vpc role
show vpc peer-keepalive

interface nve1
no shutdown
source-interface loopback1
member vni 10010
ingress-replication protocol static
 peer-ip 31.31.1.1
 peer-ip 32.32.1.1
 peer-ip 21.21.22.22
member vni 10020
ingress-replication protocol static
 peer-ip 32.32.1.1
 peer-ip 21.21.22.22

X-VXLAN-BL-1201#

feature vn-segment-vlan-based
feature nv overlay
feature lacp
feature vpc

vlan 10
vn-segment 10010
vlan 20
vn-segment 10020
vlan 30
vn-segment 10030

vrf context vPC_Keepalive

vpc domain 10
role priority 100
peer-keepalive destination 1.1.1.2 source 1.1.1.1 vrf vPC_Keepalive
peer-switch
peer-gateway

interface E1/60
no switchport
vrf member vPC_Keepalive
ip address 1.1.1.1/30
no shutdown

interface E1/61
channel-group 1 mode active
no shutdown

interface E1/62
channel-group 1 mode active
no shutdown

interface port-channel 1
switchport
switchport mode trunk
switchport trunk allowed vlan 10,20,30
vpc peer-link
no shutdown

show int status
show ip interface brief vrf vPC_Keepalive
ping 1.1.1.2 vrf vPC_Keepalive
show run vpc
show port-channel summary
show vpc 
show vpc consistency-parameters global
show vpc role
show vpc peer-keepalive


interface nve1
no shutdown
source-interface loopback1
member vni 10010
ingress-replication protocol static
 peer-ip 31.31.1.1
 peer-ip 32.32.1.1
 peer-ip 33.33.34.34
member vni 10020
ingress-replication protocol static
 peer-ip 32.32.1.1
 peer-ip 33.33.34.34
member vni 10020
ingress-replication protocol static
 peer-ip 32.32.1.1

feature interface-vlan
feature hsrp

int vlan 10
description VXLAN-10010
ip address 10.0.0.252/24
hsrp version 2
hsrp 10
priority 120
ip 10.0.0.254
preempt delay minimum 60
no shutdown

int vlan 20
description VXLAN-10020
ip address 20.0.0.252/24
hsrp version 2
hsrp 20
priority 120
ip 20.0.0.254
preempt delay minimum 60
no shutdown

int vlan 30
description VXLAN-10030
ip address 30.0.0.252/24
hsrp version 2
hsrp 30
priority 120
ip 30.0.0.254
preempt delay minimum 60
no shutdown

show vlan brief
show ip interface brief
show hsrp brief
show nve peers
show nve vni

X-VXLAN-BL-1202#

feature vn-segment-vlan-based
feature nv overlay
feature lacp
feature vpc

vlan 10
vn-segment 10010
vlan 20
vn-segment 10020
vlan 30
vn-segment 10030

vrf context vPC_Keepalive

vpc domain 10
role priority 110
peer-keepalive destination 1.1.1.1 source 1.1.1.2 vrf vPC_Keepalive
peer-switch
peer-gateway

interface E1/60
no switchport
vrf member vPC_Keepalive
ip address 1.1.1.2/30
no shutdown

interface E1/61
channel-group 1 mode active
no shutdown

interface E1/62
channel-group 1 mode active
no shutdown

interface port-channel 1
switchport
switchport mode trunk
switchport trunk allowed vlan 10,20,30
vpc peer-link
no shutdown

show int status
show ip interface brief vrf vPC_Keepalive
ping 1.1.1.1 vrf vPC_Keepalive
show run vpc
show port-channel summary
show vpc 
show vpc consistency-parameters global
show vpc role
show vpc peer-keepalive


interface nve1
no shutdown
source-interface loopback1
member vni 10010
ingress-replication protocol static
 peer-ip 31.31.1.1
 peer-ip 32.32.1.1
 peer-ip 33.33.34.34
member vni 10020
ingress-replication protocol static
 peer-ip 32.32.1.1
 peer-ip 33.33.34.34
member vni 10020
ingress-replication protocol static
 peer-ip 32.32.1.1

feature interface-vlan
feature hsrp

int vlan 10
description VXLAN-10010
ip address 10.0.0.253/24
hsrp version 2
hsrp 10
priority 100
ip 10.0.0.254
preempt
no shutdown

int vlan 20
description VXLAN-10020
ip address 20.0.0.253/24
hsrp version 2
hsrp 20
priority 100
ip 20.0.0.254
preempt
no shutdown

int vlan 30
description VXLAN-10030
ip address 30.0.0.253/24
hsrp version 2
hsrp 30
priority 100
ip 30.0.0.254
preempt
no shutdown

show vlan brief
show ip interface brief
show hsrp brief
show nve peers
show nve vni

2)状态检查

针对1303-1304、1201-1202进行如下额外检查:检查vPC Keepalive情况、检查vPC配置、检查链路聚合情况、检查vPC状态、检查vPC一致性检查参数。

  1. show ip interface brief vrf vPC_Keepalive

  2. ping 1.1.1.x vrf vPC_Keepalive

  3. show run vpc

  4. show port-channel summary

  5. show vpc

  6. show vpc consistency-parameters global

  7. show vpc role

  8. show vpc peer-keepalive

状态检查应当包括:检查接口状态、检查接口IP配置、检查NVE对等体状态、检查NVE关联的VNI情况、检查NVE接口状态。

  1. show int status

  2. show ip int brief

  3. show nve peers

  4. show nve vni

  5. show nve interface

X-VXLAN-BL-1201# show vpc 
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                     : 10  
Peer status                       : peer adjacency formed ok      
vPC keep-alive status             : peer is alive                 
Configuration consistency status  : success 
Per-vlan consistency status       : success                       
Type-2 consistency status         : success 
vPC role                          : primary                       
Number of vPCs configured         : 0   
Peer Gateway                      : Enabled
Dual-active excluded VLANs        : -
Graceful Consistency Check        : Enabled
Auto-recovery status              : Disabled
Delay-restore status              : Timer is off.(timeout = 30s)
Delay-restore SVI status          : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router    : Disabled
Virtual-peerlink mode             : Disabled

vPC Peer-link status
---------------------------------------------------------------------
id    Port   Status Active vlans    
--    ----   ------ -------------------------------------------------
1     Po1    up     10,20,30                                                    
         
X-VXLAN-BL-1201# show port-channel summary
Flags:  D - Down        P - Up in port-channel (members)
        I - Individual  H - Hot-standby (LACP only)
        s - Suspended   r - Module-removed
        b - BFD Session Wait
        S - Switched    R - Routed
        U - Up (port-channel)
        p - Up in delay-lacp mode (member)
        M - Not in use. Min-links not met
--------------------------------------------------------------------------------
Group Port-       Type     Protocol  Member Ports
      Channel
--------------------------------------------------------------------------------
1     Po1(SU)     Eth      LACP      Eth1/61(P)   Eth1/62(P)   

X-VXLAN-BL-1202# show vpc
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                     : 10  
Peer status                       : peer adjacency formed ok      
vPC keep-alive status             : peer is alive                 
Configuration consistency status  : success 
Per-vlan consistency status       : success                       
Type-2 consistency status         : success 
vPC role                          : secondary                     
Number of vPCs configured         : 0   
Peer Gateway                      : Enabled
Dual-active excluded VLANs        : -
Graceful Consistency Check        : Enabled
Auto-recovery status              : Disabled
Delay-restore status              : Timer is off.(timeout = 30s)
Delay-restore SVI status          : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router    : Disabled
Virtual-peerlink mode             : Disabled

vPC Peer-link status
---------------------------------------------------------------------
id    Port   Status Active vlans    
--    ----   ------ -------------------------------------------------
1     Po1    up     10,20,30                                                    
         
X-VXLAN-BL-1202# show port-channel summary
Flags:  D - Down        P - Up in port-channel (members)
        I - Individual  H - Hot-standby (LACP only)
        s - Suspended   r - Module-removed
        b - BFD Session Wait
        S - Switched    R - Routed
        U - Up (port-channel)
        p - Up in delay-lacp mode (member)
        M - Not in use. Min-links not met
--------------------------------------------------------------------------------
Group Port-       Type     Protocol  Member Ports
      Channel
--------------------------------------------------------------------------------
1     Po1(SU)     Eth      LACP      Eth1/61(P)   Eth1/62(P)   

X-VXLAN-SL-1303# show vpc
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                     : 10  
Peer status                       : peer adjacency formed ok      
vPC keep-alive status             : peer is alive                 
Configuration consistency status  : success 
Per-vlan consistency status       : success                       
Type-2 consistency status         : success 
vPC role                          :                      
Number of vPCs configured         : 2   
Peer Gateway                      : Enabled
Dual-active excluded VLANs        : -
Graceful Consistency Check        : Enabled
Auto-recovery status              : Disabled
Delay-restore status              : Timer is off.(timeout = 30s)
Delay-restore SVI status          : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router    : Disabled
Virtual-peerlink mode             : Disabled

vPC Peer-link status
---------------------------------------------------------------------
id    Port   Status Active vlans    
--    ----   ------ -------------------------------------------------
1     Po1    up     10,20                                                       
         

vPC status
----------------------------------------------------------------------------
Id    Port          Status Consistency Reason                Active vlans
--    ------------  ------ ----------- ------                ---------------
10    Po10          up     success     success               10                 
         
                                                                                
         
20    Po20          up     success     success               20                 
         
                                                                                
         

Please check "show vpc consistency-parameters vpc <vpc-num>" for the 
consistency reason of down vpc and for type-2 consistency reasons for 
any vpc.

X-VXLAN-SL-1303# show port-channel summary
Flags:  D - Down        P - Up in port-channel (members)
        I - Individual  H - Hot-standby (LACP only)
        s - Suspended   r - Module-removed
        b - BFD Session Wait
        S - Switched    R - Routed
        U - Up (port-channel)
        p - Up in delay-lacp mode (member)
        M - Not in use. Min-links not met
--------------------------------------------------------------------------------
Group Port-       Type     Protocol  Member Ports
      Channel
--------------------------------------------------------------------------------
1     Po1(SU)     Eth      LACP      Eth1/61(P)   Eth1/62(P)   
10    Po10(SU)    Eth      LACP      Eth1/1(P)    
20    Po20(SU)    Eth      LACP      Eth1/2(P)    

X-VXLAN-SL-1304# show vpc
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                     : 10  
Peer status                       : peer adjacency formed ok      
vPC keep-alive status             : peer is alive                 
Configuration consistency status  : success 
Per-vlan consistency status       : success                       
Type-2 consistency status         : success 
vPC role                          : se                       
Number of vPCs configured         : 2   
Peer Gateway                      : Enabled
Dual-active excluded VLANs        : -
Graceful Consistency Check        : Enabled
Auto-recovery status              : Disabled
Delay-restore status              : Timer is off.(timeout = 30s)
Delay-restore SVI status          : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router    : Disabled
Virtual-peerlink mode             : Disabled

vPC Peer-link status
---------------------------------------------------------------------
id    Port   Status Active vlans    
--    ----   ------ -------------------------------------------------
1     Po1    up     10,20                                                       
         

vPC status
----------------------------------------------------------------------------
Id    Port          Status Consistency Reason                Active vlans
--    ------------  ------ ----------- ------                ---------------
10    Po10          up     success     success               10                 
         
                                                                                
         
20    Po20          up     success     success               20                 
         
                                                                                
         

Please check "show vpc consistency-parameters vpc <vpc-num>" for the 
consistency reason of down vpc and for type-2 consistency reasons for 
any vpc.

X-VXLAN-SL-1304# show port-channel summary
Flags:  D - Down        P - Up in port-channel (members)
        I - Individual  H - Hot-standby (LACP only)
        s - Suspended   r - Module-removed
        b - BFD Session Wait
        S - Switched    R - Routed
        U - Up (port-channel)
        p - Up in delay-lacp mode (member)
        M - Not in use. Min-links not met
--------------------------------------------------------------------------------
Group Port-       Type     Protocol  Member Ports
      Channel
--------------------------------------------------------------------------------
1     Po1(SU)     Eth      LACP      Eth1/61(P)   Eth1/62(P)   
10    Po10(SU)    Eth      LACP      Eth1/1(P)    
20    Po20(SU)    Eth      LACP      Eth1/2(P)    

单台VTEP NVE状态回显字段中VPC Capability后显示VPC-VIP-Only [not-notified],vPC VTEP NVE状态回显字段中VPC Capability后显示VPC-VIP-Only [notified]。

X-VXLAN-SL-1301# show nve peers 
Interface Peer-IP                                 State LearnType Uptime   Route
r-Mac       
--------- --------------------------------------  ----- --------- -------- -----
------------
nve1      21.21.22.22                             Up    DP        00:13:10 n/a  
            
nve1      32.32.1.1                               Up    DP        00:28:03 n/a  
            
nve1      33.33.34.34                             Up    DP        00:28:03 n/a  
            

X-VXLAN-SL-1301# show nve vni
Codes: CP - Control Plane        DP - Data Plane          
       UC - Unconfigured         SA - Suppress ARP        
       SU - Suppress Unknown Unicast 
       Xconn - Crossconnect      
       MS-IR - Multisite Ingress Replication
 
Interface VNI      Multicast-group   State Mode Type [BD/VRF]      Flags
--------- -------- ----------------- ----- ---- ------------------ -----
nve1      10010    UnicastStatic     Up    DP   L2 [10]       
          
X-VXLAN-SL-1301# show nve interface 
Interface: nve1, State: Up, encapsulation: VXLAN
 VPC Capability: VPC-VIP-Only [not-notified]
 Local Router MAC: 5211.706d.1b08
 Host Learning Mode: Data-Plane
 Source-Interface: loopback1 (primary: 31.31.1.1, secondary: 0.0.0.0)

X-VXLAN-SL-1302# show nve peers 
Interface Peer-IP                                 State LearnType Uptime   Route
r-Mac       
--------- --------------------------------------  ----- --------- -------- -----
------------
nve1      21.21.22.22                             Up    DP        00:14:38 n/a  
            
nve1      31.31.1.1                               Up    DP        00:29:28 n/a  
            
nve1      33.33.34.34                             Up    DP        01:14:06 n/a  
            

X-VXLAN-SL-1302# show nve vni 
Codes: CP - Control Plane        DP - Data Plane          
       UC - Unconfigured         SA - Suppress ARP        
       SU - Suppress Unknown Unicast 
       Xconn - Crossconnect      
       MS-IR - Multisite Ingress Replication
 
Interface VNI      Multicast-group   State Mode Type [BD/VRF]      Flags
--------- -------- ----------------- ----- ---- ------------------ -----
nve1      10010    UnicastStatic     Up    DP   L2 [10]                 
nve1      10020    UnicastStatic     Up    DP   L2 [20]                 
nve1      10030    UnicastStatic     Up    DP   L2 [30]         

X-VXLAN-SL-1302# show nve interface 
Interface: nve1, State: Up, encapsulation: VXLAN
 VPC Capability: VPC-VIP-Only [not-notified]
 Local Router MAC: 5206.5b57.1b08
 Host Learning Mode: Data-Plane
 Source-Interface: loopback1 (primary: 32.32.1.1, secondary: 0.0.0.0)     

X-VXLAN-SL-1303# show nve peers 
Interface Peer-IP                                 State LearnType Uptime   Route
r-Mac       
--------- --------------------------------------  ----- --------- -------- -----
------------
nve1      21.21.22.22                             Up    DP        00:15:18 n/a  
            
nve1      31.31.1.1                               Up    DP        00:30:08 n/a  
            
nve1      32.32.1.1                               Up    DP        01:17:51 n/a  
            

X-VXLAN-SL-1303# show nve vni 
Codes: CP - Control Plane        DP - Data Plane          
       UC - Unconfigured         SA - Suppress ARP        
       SU - Suppress Unknown Unicast 
       Xconn - Crossconnect      
       MS-IR - Multisite Ingress Replication
 
Interface VNI      Multicast-group   State Mode Type [BD/VRF]      Flags
--------- -------- ----------------- ----- ---- ------------------ -----
nve1      10010    UnicastStatic     Up    DP   L2 [10]                 
nve1      10020    UnicastStatic     Up    DP   L2 [20]                 

X-VXLAN-SL-1303# show nve interface 
Interface: nve1, State: Up, encapsulation: VXLAN
 VPC Capability: VPC-VIP-Only [notified]
 Local Router MAC: 52fd.cf88.1b08
 Host Learning Mode: Data-Plane
 Source-Interface: loopback1 (primary: 33.33.1.1, secondary: 33.33.34.34)

X-VXLAN-SL-1304# show nve peers 
Interface Peer-IP                                 State LearnType Uptime   Route
r-Mac       
--------- --------------------------------------  ----- --------- -------- -----
------------
nve1      21.21.22.22                             Up    DP        00:17:06 n/a  
            
nve1      31.31.1.1                               Up    DP        00:31:56 n/a  
            
nve1      32.32.1.1                               Up    DP        01:19:34 n/a  
            

X-VXLAN-SL-1304# show nve vni
Codes: CP - Control Plane        DP - Data Plane          
       UC - Unconfigured         SA - Suppress ARP        
       SU - Suppress Unknown Unicast 
       Xconn - Crossconnect      
       MS-IR - Multisite Ingress Replication
 
Interface VNI      Multicast-group   State Mode Type [BD/VRF]      Flags
--------- -------- ----------------- ----- ---- ------------------ -----
nve1      10010    UnicastStatic     Up    DP   L2 [10]                 
nve1      10020    UnicastStatic     Up    DP   L2 [20]                 
  
X-VXLAN-SL-1304# show nve interface 
Interface: nve1, State: Up, encapsulation: VXLAN
 VPC Capability: VPC-VIP-Only [notified]
 Local Router MAC: 5248.621d.1b08
 Host Learning Mode: Data-Plane
 Source-Interface: loopback1 (primary: 34.34.1.1, secondary: 33.33.34.34)

X-VXLAN-BL-1201# show nve peers 
Interface Peer-IP                                 State LearnType Uptime   Route
r-Mac       
--------- --------------------------------------  ----- --------- -------- -----
------------
nve1      31.31.1.1                               Up    DP        00:18:12 n/a  
            
nve1      32.32.1.1                               Up    DP        00:18:12 n/a  
            
nve1      33.33.34.34                             Up    DP        00:18:12 n/a  
            

X-VXLAN-BL-1201# show nve vni
Codes: CP - Control Plane        DP - Data Plane          
       UC - Unconfigured         SA - Suppress ARP        
       SU - Suppress Unknown Unicast 
       Xconn - Crossconnect      
       MS-IR - Multisite Ingress Replication
 
Interface VNI      Multicast-group   State Mode Type [BD/VRF]      Flags
--------- -------- ----------------- ----- ---- ------------------ -----
nve1      10010    UnicastStatic     Up    DP   L2 [10]                 
nve1      10020    UnicastStatic     Up    DP   L2 [20]                 

X-VXLAN-BL-1201# show nve interface
Interface: nve1, State: Up, encapsulation: VXLAN
 VPC Capability: VPC-VIP-Only [notified]
 Local Router MAC: 524d.19bd.1b08
 Host Learning Mode: Data-Plane
 Source-Interface: loopback1 (primary: 21.21.1.1, secondary: 21.21.22.22)

X-VXLAN-BL-1202# show nve peers
Interface Peer-IP                                 State LearnType Uptime   Route
r-Mac       
--------- --------------------------------------  ----- --------- -------- -----
------------
nve1      31.31.1.1                               Up    DP        00:27:19 n/a  
            
nve1      32.32.1.1                               Up    DP        00:27:19 n/a  
            
nve1      33.33.34.34                             Up    DP        00:27:19 n/a  
            

X-VXLAN-BL-1202# show nve vni
Codes: CP - Control Plane        DP - Data Plane          
       UC - Unconfigured         SA - Suppress ARP        
       SU - Suppress Unknown Unicast 
       Xconn - Crossconnect      
       MS-IR - Multisite Ingress Replication
 
Interface VNI      Multicast-group   State Mode Type [BD/VRF]      Flags
--------- -------- ----------------- ----- ---- ------------------ -----
nve1      10010    UnicastStatic     Up    DP   L2 [10]                 
nve1      10020    UnicastStatic     Up    DP   L2 [20]                 

X-VXLAN-BL-1202# show nve interface
Interface: nve1, State: Up, encapsulation: VXLAN
 VPC Capability: VPC-VIP-Only [notified]
 Local Router MAC: 5284.5089.1b08
 Host Learning Mode: Data-Plane
 Source-Interface: loopback1 (primary: 22.22.1.1, secondary: 21.21.22.22)

4、业务连通性测试

业务连通性测试包括业务网关ping测试、同网段主机ping测试(包括跨交换机以及本地交换)、跨网段主机ping测试。

1)业务网关ping测试

desktop-simulator#ping vrf V10-PC1 10.0.0.254 source 10.0.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.254, timeout is 2 seconds:
Packet sent with a source address of 10.0.0.1 
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 10/13/16 ms
desktop-simulator#ping vrf V20-PC1 20.0.0.254 source 20.0.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 20.0.0.254, timeout is 2 seconds:
Packet sent with a source address of 20.0.0.1 
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/14/17 ms
desktop-simulator#ping vrf V30-PC1 30.0.0.254 source 30.0.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 30.0.0.254, timeout is 2 seconds:
Packet sent with a source address of 30.0.0.1 
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 10/12/18 ms

2)同网段主机ping测试

desktop-simulator#ping vrf V10-PC1 10.0.0.2 source 10.0.0.1  
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.2, timeout is 2 seconds:
Packet sent with a source address of 10.0.0.1 
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 5/6/8 ms
desktop-simulator#ping vrf V10-PC1 10.0.0.4 source 10.0.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.4, timeout is 2 seconds:
Packet sent with a source address of 10.0.0.1 
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 11/12/13 ms
desktop-simulator#ping vrf V20-PC1 20.0.0.2 source 20.0.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 20.0.0.2, timeout is 2 seconds:
Packet sent with a source address of 20.0.0.1 
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 11/11/12 ms

3)跨网段主机ping测试

desktop-simulator#ping vrf V10-PC1 20.0.0.1 source 10.0.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 20.0.0.1, timeout is 2 seconds:
Packet sent with a source address of 10.0.0.1 
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 23/23/25 ms
desktop-simulator#ping vrf V10-PC1 20.0.0.2 source 10.0.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 20.0.0.2, timeout is 2 seconds:
Packet sent with a source address of 10.0.0.1 
..!!!
Success rate is 60 percent (3/5), round-trip min/avg/max = 20/21/23 ms
desktop-simulator#ping vrf V10-PC1 30.0.0.1 source 10.0.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 30.0.0.1, timeout is 2 seconds:
Packet sent with a source address of 10.0.0.1 
...!!
Success rate is 40 percent (2/5), round-trip min/avg/max = 24/25/26 ms

至此简单VXLAN网络构建完成!