静态VXLAN实验

一：背景

因正在学习VLXAN，在网上学习了些视频，做了些实验，故而记录下

二：环境

华为模拟器eNSP

三：实验TOP

四：实验步骤

1.三台CE基础配置（Underlay配置）

CE1

interface GE1/0/0
 undo portswitch
 undo shutdown
 ip address 10.0.12.1 255.255.255.0
#               
interface GE1/0/1
 undo portswitch
 undo shutdown
 ip address 10.0.13.1 255.255.255.0
#
interface LoopBack0
 ip address 1.1.1.1 255.255.255.255
#
ospf 100
 area 0.0.0.0
  network 1.1.1.1 0.0.0.0
  network 10.0.12.0 0.0.0.255
  network 10.0.13.0 0.0.0.255

CE2

interface GE1/0/0
 undo portswitch
 undo shutdown
 ip address 10.0.12.2 255.255.255.0
#
interface LoopBack0
 ip address 2.2.2.2 255.255.255.255
#
ospf 100
 area 0.0.0.0
  network 2.2.2.2 0.0.0.0
  network 10.0.12.0 0.0.0.255

CE3

interface LoopBack0
 ip address 3.3.3.3 255.255.255.255
#
interface MEth0/0/0
 undo shutdown
#
interface GE1/0/0
 undo portswitch
 undo shutdown
 ip address 10.0.13.3 255.255.255.0
#
ospf 100
 area 0.0.0.0
  network 3.3.3.3 0.0.0.0
  network 10.0.13.0 0.0.0.255

2.静态VXLAN配置

CE1配置

#创建BD，并与VNI关联
bridge-domain 10
 vxlan vni 10
#
bridge-domain 20
 vxlan vni 20
#
bridge-domain 30
 vxlan vni 30

#创建BDIF，VM网关
interface Vbdif10
 ip address 192.168.10.254 255.255.255.0
#
interface Vbdif20
 ip address 192.168.20.254 255.255.255.0
#
interface Vbdif30
 ip address 192.168.30.254 255.255.255.0
#

#创建NVE接口
interface Nve1
 source 1.1.1.1  //配置VXLAN隧道封装的源地址
 vni 10 head-end peer-list 2.2.2.2   //配置头端复制列表，针对BUM报文
 vni 20 head-end peer-list 2.2.2.2
 vni 30 head-end peer-list 3.3.3.3

CE2配置

bridge-domain 10
 vxlan vni 10
#
bridge-domain 20
 vxlan vni 20
#
interface Nve1
 source 2.2.2.2
 vni 10 head-end peer-list 1.1.1.1
 vni 20 head-end peer-list 1.1.1.1
#
interface GE1/0/1
 undo shutdown
#
interface GE1/0/1.10 mode l2
 encapsulation dot1q vid 10
 bridge-domain 10
#
interface GE1/0/1.20 mode l2
 encapsulation dot1q vid 20
 bridge-domain 20
#
interface GE1/0/2
 undo shutdown
#
interface GE1/0/2.20 mode l2
 encapsulation dot1q vid 20
 bridge-domain 20

CE3配置

bridge-domain 30
 vxlan vni 30
#
interface Nve1
 source 3.3.3.3
 vni 30 head-end peer-list 1.1.1.1
#
interface GE1/0/1
 undo portswitch
 undo shutdown
#
interface GE1/0/1.30 mode l2
 encapsulation dot1q vid 30
 bridge-domain 30

SW1配置

sysname SW1
#
vlan batch 10 20
#
interface GigabitEthernet0/0/1
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 10 20
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 10
#
interface GigabitEthernet0/0/3
 port link-type access
 port default vlan 20

SW2配置

sysname SW2
#
vlan batch 20
#
interface GigabitEthernet0/0/1
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 20
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 20

SW3配置

vlan batch 30
#
interface GigabitEthernet0/0/1
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 30
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 30

模拟终端PC地址：

三：在PC1，PC2,PC3,PC4上Ping同网段网关，Ping不同网段网关

抓包看到PC1-PING 192.168.30.254，在CE2上进行了VXLAN封装，发送给CE1，VNI隧道为10.

我们再看看PC1-ping 192.168.10.254的截图，隧道没变，源目地址变了。

我们在CE1上查看VXLAN隧道情况，发现CE1上为两条隧道，状态为静态。

总结：静态VXLAN，再没有EVPN建隧道的情况下，手动建隧道，每个Leaf与Spine间均建一个隧道，隧道起点为Leaf上的NVE接口，隧道终点为Spine上NVE配置。