CloudLabBox
Try the free demo

Arista EOS lab 15 of 20

Capstone - a two-tenant EVPN-VXLAN fabric from a design

Turn a design document into a working fabric with nothing pre-built: eBGP underlay with ECMP and BFD, an EVPN overlay through route-server spines, tenant RED with VLAN-based services and tenant BLUE with a VLAN-aware bundle, symmetric IRB in both, and proof that the tenants are isolated.

Run this lab

It needs Standard: its 8 nodes are set to 8 vCPU and 10,240 MB in total.

In your workspace: Shared, then Arista EOS guided labs, then 15 - Capstone - a two-tenant EVPN-VXLAN fabric from a design

Run it on Standard from £5 a day

The free demo can’t run it: it has 6 vCPU and 8 GB, and this lab’s nodes need 8 vCPU and 10,240 MB together. Every lab plan includes every guided lab.

Level
Advanced
Time
About 120 minutes
Nodes need
8 vCPU, 10,240 MB
Smallest plan
Standard

The scenario

Northwind has won a hosting contract with two customers who must never see each other's traffic. You have four factory-fresh switches (only hostnames and descriptions are set), four test hosts and the design below. Build the whole fabric, validate it in stages, and hand over evidence that each tenant works and that the tenants are isolated. This is the kind of multi-stage build the Data Center Engineering practical exam asks for: read the tables carefully, then work methodically.

Underlay

LinkSpine sideLeaf side
spine1 Et1 – leaf1 Et110.1.1.0/3110.1.1.1/31
spine1 Et2 – leaf2 Et110.1.1.2/3110.1.1.3/31
spine2 Et1 – leaf1 Et210.1.2.0/3110.1.2.1/31
spine2 Et2 – leaf2 Et210.1.2.2/3110.1.2.3/31
SwitchASLoopback0 (router ID, overlay)Loopback1 (VTEP)
spine1 / spine26500010.255.0.1 / 10.255.0.2–
leaf16500110.255.0.1110.255.1.11
leaf26500210.255.0.1210.255.1.12

Rules: fabric MTU 9214; spines accept leaves dynamically (AS 65001–65099); ECMP up to 4 paths; BFD on underlay sessions; only loopbacks are advertised in the underlay; overlay sessions between Loopback0 addresses, EVPN only, spines keep next hops unchanged.

Tenants (anycast gateway MAC 00:1c:73:00:00:99 on both leaves; gateways are .1)

TenantVRF / L3 VNI / RTVLANVNISubnetWhereMAC-VRF
REDRED / 50100 / 50100:501001101011010.110.0.0/24leaf1 (red1 .11 on Et3)VLAN-based: RD <Lo0>:10110, RT 110:10110
RED1201012010.120.0.0/24leaf2 (red2 .12 on Et3)VLAN-based: RD <Lo0>:10120, RT 120:10120
BLUEBLUE / 50200 / 50200:502002101021010.210.0.0/24both leaves (blue1 .11 on leaf1 Et4, blue2 .12 on leaf2 Et4)VLAN-aware bundle BLUE: RD <Lo0>:2, RT 2:2

IP-VRF RDs: <Lo0>:50100 for RED, <Lo0>:50200 for BLUE.

HostLeaf / portVLANAddressGateway
red1leaf1 Et311010.110.0.11/2410.110.0.1
blue1leaf1 Et421010.210.0.11/2410.210.0.1
red2leaf2 Et312010.120.0.12/2410.120.0.1
blue2leaf2 Et421010.210.0.12/2410.210.0.1

What you’ll practise

  • Build a complete eBGP underlay from an addressing plan, with jumbo MTU, ECMP and BFD
  • Build an EVPN overlay through route-server spines
  • Deploy tenant RED with VLAN-based MAC-VRFs and tenant BLUE with a VLAN-aware bundle
  • Route inside each tenant with symmetric IRB and anycast gateways
  • Validate in stages and prove that the two tenants can't reach each other

The tasks

  1. Underlay
  2. Overlay
  3. Tenant RED (VLAN-based)
  4. Tenant BLUE (VLAN-aware bundle)
  5. Prove the handover

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Capstone - a two-tenant EVPN-VXLAN fabric from a design8 nodes, 8 links. Every link is listed as text below the diagram.spine1spine2leaf1leaf2red1blue1red2blue2Ethernet3eth0Ethernet4eth0Ethernet1Ethernet1Ethernet2Ethernet2Ethernet3eth0Ethernet4eth0Ethernet2Ethernet1Ethernet1Ethernet2
8 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • spine1 Ethernet1 to leaf1 Ethernet1
  • spine1 Ethernet2 to leaf2 Ethernet1
  • spine2 Ethernet1 to leaf1 Ethernet2
  • spine2 Ethernet2 to leaf2 Ethernet2
  • leaf1 Ethernet3 to red1 eth0
  • leaf1 Ethernet4 to blue1 eth0
  • leaf2 Ethernet3 to red2 eth0
  • leaf2 Ethernet4 to blue2 eth0
Nodes in Capstone - a two-tenant EVPN-VXLAN fabric from a design, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
spine1Arista vEOSveos-4.33.1.1F1 vCPU, 2,048 MB
spine2Arista vEOSveos-4.33.1.1F1 vCPU, 2,048 MB
leaf1Arista vEOSveos-4.33.1.1F1 vCPU, 2,048 MB
leaf2Arista vEOSveos-4.33.1.1F1 vCPU, 2,048 MB
red1Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB
blue1Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB
red2Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB
blue2Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder Arista EOS guided labs.

  3. Open 15 - Capstone - a two-tenant EVPN-VXLAN fabric from a design and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More Arista EOS labs

All Arista EOS labs

Related labs in other courses

CloudLabBox is independent of Arista Networks. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.