Switch2# net add vxlan vni200 stp portbpdufilter Switch2# net add vxlan vni200 stp bpduguard Switch2# net add vxlan vni200 bridge learning off Switch2# net add vxlan vni200 bridge access 200 Switch2# net add vxlan vni200 vxlan id 200 Switch1# net add vxlan vni200 bridge arp-nd-suppress on Switch1# net add vxlan vni200 vxlan local-tunnelip 10.1.1.1

Switch1# net add vxlan vni200 stp portbpdufilter

Switch1# net add vxlan vni200 stp bpduguard Switch1# net add vxlan vni200 bridge learning off Switch1# net add vxlan vni200 bridge access 200 Switch1# net add vxlan vni200 vxlan id 200 As we have configured VRR for VLAN 100 on switches Cumulus 1 and 2, we only have to do it for VLAN 100 on switch 5.įor VLAN 200, as this is a new VLAN, we need to add the anycast IP/MAC on all 3 switches.įor example, VLAN 100 needs to have this on switches Cumulus 1,2 and 5 (switches with VTEPs): The SVI for each VLAN needs to be configured with an anycast IP/MAC address. ” (source: )Ĭonsidering that we already have one VLAN and VXLAN configured in the previous post, we need to add another VLAN and VXLAN.

However, each VTEP must be provisioned with all VLANs/VNIs – the subnets between which communication can take place this is required even if there are no locally-attached hosts for a particular VLAN. Asymmetric routing is easy to deploy as it can be achieved with only host routing and does not involve any interconnecting VNIs. The routing is called asymmetric because only the ingress VTEP performs routing, the egress VTEP only performs the bridging. ” In distributed asymmetric routing, each VTEP acts as a layer 3 gateway, performing routing for its attached hosts.

Distributed symmetric routing: Every VTEP participates in routing and routing is done at both the ingress VTEP and the egress VTEP.įor my topology, I’ve chosen Distributed asymmetric routing.

Distributed asymmetric routing: Every VTEP participates in routing, but all routing is done at the ingress VTEP the egress VTEP only performs bridging.

Centralized routing: Specific VTEPs act as designated layer 3 gateways and perform routing between subnets other VTEPs just perform bridging.

Now that we have configured a VXLAN (see the previous post: ), the next step would be to configure another one and also route traffic between them.įor routing VXLANs on Cumulus switches there are 3 options:

Cumulus linux show mac address table