Creating a BGP EVPN Route Reflector Profile

Create a BGP EVPN Route Reflector Profile to centralize distribution of client EVPN routes among VTEPs.

Route Reflector (RR) is a BGP design approach used to simplify the management of iBGP sessions in large networks. Instead of requiring a full mesh of iBGP peers, where each router must establish a BGP session to every other router, a route reflector server centralizes route distribution. The RR server receives routes from its clients and reflects them to other clients and non-client peers.

Route Reflector Server-Client Profile

By using a Route Reflector setup, the complexity of maintaining a full mesh of iBGP sessions is significantly reduced, which simplifies network management and enhances scalability.

The Route Reflector server acts as a central point for distributing EVPN routes among the VXLAN Tunnel Endpoints (VTEPs). This ensures that all VTEPs have the necessary route information to establish VXLAN tunnels and forward traffic efficiently. The BGP EVPN Route Reflector profile defines the specific configurations and policies required to enable this functionality, including the establishment of BGP sessions, route advertisement rules, and route filtering mechanisms.

Complete the following steps to configure a BGP EVPN Route Reflector (RR) Server/Client profile.

Attention:

Before creating the BGP EVPN RR Server/Client profile, ensure all the switches involved in the profile are online in the controller.

Before creating a BGP EVPN RR Server/Client profile, ensure the VLANs assigned to the EVPN instances already exist in the configurations for the switches to be selected as the reflector server and the client server. Otherwise, the profile creation will fail due to conflicts.

From the main menu, navigate to Network > Wired > Switches.
The Switches window is displayed.

In the left navigation pane, select a switch group.

Click the Configuration tab.

Under the Configuration tab, click the BGP EVPN button.

Configuration - BGP EVPN

The BGP EVPN page is displayed.
Note: The BGP EVPN page lists BGP EVPN profiles for all switch groups in the System domain, irrespective of the currently selected switch group.

BGP EVPN Page

In the BGP EVPN page, click Create Route Reflector Server/Client Profile to create a new RR profile.

Configuring the Route Reflector Server

(Optionally) Click the icon in the upper right corner illustrating the RR Profile setup with two RR Clients and access switches, including configurations with and without Dual Homing.

Configure the following fields.
1. Name: Enter the name for the Route Reflector Profile.
2. Local-As: Enter the Autonomous System (AS) number you want to use for the BGP EVPN fabric. All the routers participating in this fabric should share the same AS number.
3. Router Reflector Server Switch: Click the Select button; in the Route Reflector Server Switch pop-up window, select a switch to designate as the Route Reflector Server, then click OK.
  
  Choosing a Switch
  
  Note: If the switch is already configured as a RR Server, RR Client, or has Network Segmentation settings, the function to select it will be deactivated.
4. Source Interface for BGP: Select the source interface for BGP from the switch's pre-existing loopback interfaces in the drop-down list or click to create a new Source Interface.
  
  Creating a Source Interface for BGP
  If creating a new Source Interface, configure the following parameters and click OK.
  - ID: Enter a unique identifier for the source interface within the range of 1 through 255.
  - IP Address: Enter the IP address assigned to the source interface.
  - Subnet Mask: Enter the subnet mask associated with the IP address.
  - OSPF Area: Enter the Open Shortest Path First (OSPF) area to which the interface belongs. This area should correspond to the OSPF area assignment of the underlay network.
  Note: When creating a new Source Interface, the new interface will be created and saved in the switch configuration as soon as you enter the parameters for the interface and click OK. The switch will keep this configuration even if this profile is discarded.
5. Source Interface for Overlay Gateway: Select the switch's pre-existing loopback interface for the Overlay Gateway from the drop-down list, or select the Same as BGP check-box if you want to retain the same source interface, or click to create a new source interface in the switch.
  
  Note: If you are selecting the source interface from the pre-existing loopback interfaces of the switch, make sure the interface has been assigned to the appropriate OSPF area for the BGP EVPN profile.
6. Overlay Gateway Name: Enter the name of the overlay gateway for the VTEP. Provide a descriptive name to differentiate it from other overlay gateways in your network.
  
  Note: The Overlay Gateway is the logical component that intercepts the overlay and underlay networks of the configured BGP EVPN fabric (VLANs-to-VNIs mapping). You must use loopback interfaces for this function.
7. VLAN List: Enter the VLAN numbers. Use a comma to separate individual VLAN numbers or a dash to specify a range of VLANs.
8. VNI Start: Enter the starting Virtual Network Identifier (VNI) of the VxLAN to map with the VLAN numbers. The system automatically assigns subsequent VNIs to the VLANs in ascending order.

In the EVPN Instance for VNI section, click Load Default. This option automatically assigns VLAN-to-VNI mappings in ascending order, starting from the configured VNI Start.

Loading the Default Mappings

To configure a VNI, select a specific VNI row in the table and click Configure.

Editing an EVPN Instance for a VNI
1. VLAN: Displays the associated VLAN identifier.
2. Route Target Export: Tags export routes to adjacent BGP domains. Optionally, to manually configure the settings, select Manual from the list. Enter the AS number followed by a colon and the VLAN ID for the exported routes.
  
  Note: By default, the setting for Route Target Export is set to Auto. The switch automatically calculates the necessary information based on a BGP algorithm when the settings are set to Auto.
3. Route Target Import: Configure up to three tags for importing routes from adjacent BGP domains. Optionally, select Manual and type the AS number followed by a colon and the VLAN ID for the imported routes.
  - By default, the setting for Route Target Import is set to Auto. The switch automatically calculates the necessary information based on a BGP algorithm when the settings are set to Auto.
  - If the initial Route Target Import setting is Auto, you cannot add another Route Target Import setting. Conversely, if the first setting is Manual, adding an Auto setting is not allowed.
4. Route Distinguisher: Optionally, select Manual from the list and enter the IP address followed by a colon and the VLAN ID in the adjacent textbox.
  
  The Route Distinguisher is a unique identifier that distinguishes identical IP prefixes across different BGP domains.
  
  Note: By default, the setting for Route Distinguisher is set to Auto. The switch automatically calculates the necessary information based on a BGP algorithm when the settings are set to Auto.
5. ARP Suppression Enable: Optionally, when ARP Suppression is enabled, the VTEP responds to ARP requests on behalf of the end devices, thereby minimizing broadcast traffic and improving network efficiency.
6. MAC Duplication Limit: Suppresses processing and advertisement of Type-2 routes related to MAC addresses that have moved more times than the configured limit, within a specified timeout value (Expiry Timer). Valid values for this limit range from 1 through 1000 MAC movements.
  
  Note: The default value is 5.
7. Expiry Timer (Seconds): Specifies the MAC duplicate detection timeout interval. Valid values range from 2 through 36000 seconds.
  
  Note: The default value is 180 seconds.
8. Click OK to close the EVPN Instance for VNI pop-up window.

In the Route Reflector Client section, click Create.
The Route Reflector Client page is displayed.

Note: The configured VLANs in the Route Reflector Clients must also exist in the Route Reflector Server. Any Server-Client VLAN membership mismatch causes an error, preventing the profile from being saved until resolved.

Configuring a Route Reflector Client

Configure the below parameters and click OK.
1. Route Reflector Client Switch: Click the Select button; in the Route Reflector Client Switch pop-up window, select a switch to designate as the Route Reflector Client Switch, then click OK.
  
  Note: If the switch is already configured as a Route Reflector Server, Route Reflector Client, or has Network Segmentation settings, it cannot be selected as a Route Reflector Client.
2. Source Interface for BGP: Select the source interface for BGP from the switch's pre-existing loopback interfaces in the drop-down list or click to create a new Source Interface.
  
  Creating a Source Interface for BGP
  If creating a new Source Interface, configure the following parameters and click OK.
  - ID: Enter a unique identifier for the source interface within the range of 1 through 255.
  - IP Address: Enter the IP address assigned to the source interface.
  - Subnet Mask: Enter the subnet mask associated with the IP address.
  - OSPF Area: Enter the Open Shortest Path First (OSPF) area to which the interface belongs. This area should correspond to the OSPF area assignment of the underlay network.
  Note: When creating a new Source Interface, the new interface will be created and saved in the switch configuration as soon as you enter the parameters for the interface and click OK. The switch will keep this configuration even if this profile is discarded.
3. Source Interface for Overlay Gateway: Select the switch's pre-existing loopback interface for the Overlay Gateway from the drop-down list, or select the Same as BGP check-box if you want to retain the same source interface, or click to create a new source interface in the switch.
  
  Note: If you are selecting the source interface from the pre-existing loopback interfaces of the switch, make sure the interface has been assigned to the appropriate OSPF area for the BGP EVPN profile.
4. Overlay Gateway Name: Enter the name of the overlay gateway for the VTEP. Provide a descriptive name to differentiate it from other overlay gateways in your network.
  
  Note: The Overlay Gateway is the logical component that intercepts the overlay and underlay networks of the configured BGP EVPN fabric (VLANs-to-VNIs mapping). You must use loopback interfaces for this function.
5. VLAN List: Enter the VLAN numbers. Use a comma to separate individual VLAN numbers or a dash to specify a range of VLANs.
6. VNI Start: Enter the starting Virtual Network Identifier (VNI) of the VxLAN to map with the VLAN numbers. The system automatically assigns subsequent VNIs to the VLANs in ascending order.

In the EVPN Instance for VNI section, click Load Default. This option automatically assigns VLAN-to-VNI mappings in ascending order, starting from the configured VNI Start.

Loading the Default Mappings

To configure a VNI, select a specific VNI row in the table and click Configure.

Editing an EVPN Instance for a VNI
1. VLAN: Displays the associated VLAN identifier.
2. Route Target Export: Tags export routes to adjacent BGP domains. Optionally, to manually configure the settings, select Manual from the list. Enter the AS number followed by a colon and the VLAN ID for the exported routes.
  
  Note: By default, the setting for Route Target Export is set to Auto. The switch automatically calculates the necessary information based on a BGP algorithm when the settings are set to Auto.
3. Route Target Import: Configure up to three tags for importing routes from adjacent BGP domains. Optionally, select Manual and type the AS number followed by a colon and the VLAN ID for the imported routes.
  - By default, the setting for Route Target Import is set to Auto. The switch automatically calculates the necessary information based on a BGP algorithm when the settings are set to Auto.
  - If the initial Route Target Import setting is Auto, you cannot add another Route Target Import setting. Conversely, if the first setting is Manual, adding an Auto setting is not allowed.
4. Route Distinguisher: Optionally, select Manual from the list and enter the IP address followed by a colon and the VLAN ID in the adjacent textbox.
  
  The Route Distinguisher is a unique identifier that distinguishes identical IP prefixes across different BGP domains.
  
  Note: By default, the setting for Route Distinguisher is set to Auto. The switch automatically calculates the necessary information based on a BGP algorithm when the settings are set to Auto.
5. ARP Suppression Enable: Optionally, when ARP Suppression is enabled, the VTEP responds to ARP requests on behalf of the end devices, thereby minimizing broadcast traffic and improving network efficiency.
6. MAC Duplication Limit: Suppresses processing and advertisement of Type-2 routes related to MAC addresses that have moved more times than the configured limit, within a specified timeout value (Expiry Timer). Valid values for this limit range from 1 through 1000 MAC movements.
  
  Note: The default value is 5.
7. Expiry Timer (Seconds): Specifies the MAC duplicate detection timeout interval. Valid values range from 2 through 36000 seconds.
  
  Note: The default value is 180 seconds.
8. Click OK to close the EVPN Instance for VNI pop-up window.

(Optional) Toggle the switch for enabling Dual Homing to ON.

Note: The BGP EVPN RR Server/Client profile has Dual Homing turned off by default, and you must enable it manually if needed. When the Dual Homing feature is disabled, the list of Ethernet Segments will be empty and non-editable.

Enabling Dual Homing

In the Ethernet Segment (ESIs) pop-up window, click Create to create new Ethernet segment.

Note: To edit an existing Ethernet Segment, select it in the table and click Configure. To remove an Ethernet Segment, select it in the table and click Delete.

Creating an Ethernet Segment for a Route Reflector Client Switch

Configure the following fields and click OK to save the ESI configuration and close the Ethernet Segment (ESIs) pop-up window.
1. Route Reflector Client Switch: Select two Route Reflector Client switches from the list. Click the x icon next to the switch name to remove it from the list.
2. ID: The ID for the ES. It should be a unique identifier within this BGP EVPN profile. Choose a number between 1 and 63.
  
  Note: The Ethernet Segment ID cannot be duplicated for any switch.
3. LAG ID: Enter the LAG ID. Obtain this info from the switch CLI with the command show lag. Enter a number between 1 and 350.
  
  Note: Each switch supports up to 63 ES-LAGs, with a maximum of 100 tagged VLANs per ES-LAG.
4. Redundancy Mode: Select either Single-active or All-active redundancy mode from the list. In All-Active mode, all member links of the LAG are operational. In Single-Active mode, only one member link is operational.
  
  Note: In All-active mode, the ES remains active across all member VTEPs, distributing traffic for load balancing and redundancy. In Single-active mode, only one ES member is active, while others are set to DOWN. If the ES of the active VTEP fails, another VTEP activates and restores the ES member port to UP status. For more information refer to BGP EVPN Multihoming Overview.
5. Type: Select an Ethernet type from the list.
  Note: For more information about how the ESI value is calculated, refer to BGP EVPN Multihoming Overview.
  
  Use type 0 for scenarios with a static LAG. Ensure the following fields are configured:
  - ESI: Manually enter an arbitrary ESI value in the format of “11:22:33:44:55:66:77:88:99”. This value is to identify the ES between the two VTEP switches.
  - MAC Address: Enter the MAC address in the format of “11:22:33:44:55:66”. The MAC address is the address of the system. This value is used to identify the LAG in front of the CE device.
  - Local Discriminator: Enter a unique value for the local discriminator. Choose a number between 1 and 16777215.
  Use type 1 for scenarios where the LAG is using LACP. Ensure the following fields are configured.
  - LACP MAC Address: The MAC Address to be shared with Customer Edge (CE) device.
  - LACP Port Key: This key is shared with the CE device.
  Use type 3 to derive the ESI from the system MAC address of the device and a unique local discriminator value. Ensure the following fields are configured:
  - MAC Address: Enter a MAC address value to identify the ES in front of the CE device.
  - Local Discriminator: This value is shared with the CE device.