CloudLabBox
Try the free demo

Arista EOS lab 9 of 20

EVPN layer 3 with anycast gateways and symmetric IRB

Add routing to the EVPN fabric: a tenant VRF with an L3 VNI, distributed anycast gateways on every leaf, symmetric IRB between subnets that exist on different leaves, and an external prefix advertised as an EVPN type 5 route.

Run this lab

It needs Standard: its 7 nodes are set to 7 vCPU and 9,728 MB in total.

In your workspace: Shared, then Arista EOS guided labs, then 09 - EVPN layer 3 with anycast gateways and symmetric IRB

Run it on Standard from £5 a day

The free demo can’t run it: it has 6 vCPU and 8 GB, and this lab’s nodes need 7 vCPU and 9,728 MB together. Every lab plan includes every guided lab.

Level
Advanced
Time
About 85 minutes
Nodes need
7 vCPU, 9,728 MB
Smallest plan
Standard

The scenario

The EVPN fabric from lab 8 stretches VLAN 10 between racks, but every inter-subnet packet still has to leave the fabric to be routed. Northwind's web tier (VLAN 10, on both leaves) must reach its database tier (VLAN 20, only behind leaf2) and a shared service at 10.99.99.1, all inside tenant VRF TENANT-A. You will make every leaf the default gateway for its local hosts (an anycast gateway) and route between leaves with symmetric IRB over an L3 VNI.

HostLeaf / portVLANAddressGateway
h1leaf1 Et310 WEB10.10.10.11/2410.10.10.1
h3leaf2 Et410 WEB10.10.10.13/2410.10.10.1
h2leaf2 Et320 DB10.20.20.12/2410.20.20.1
serviceleaf2 Loopback100 (VRF TENANT-A)–10.99.99.1/32–
ItemValue
VRF / L3 VNI / route targetTENANT-A / 50001 / 50001:50001
IP-VRF RDleaf1 10.255.0.11:50001 · leaf2 10.255.0.12:50001
VLAN 20 MAC-VRF (leaf2)VNI 10020 · RD 10.255.0.12:10020 · RT 20:10020
Anycast gateway MAC00:1c:73:00:00:99

What you’ll practise

  • Create a tenant VRF and map it to an L3 VNI on Vxlan1
  • Configure distributed anycast gateways with ip address virtual and a shared virtual-router MAC
  • Advertise the tenant's subnets and hosts with an IP-VRF (RD, import/export route targets, redistribute connected)
  • Explain symmetric versus asymmetric IRB and why a leaf doesn't need every VLAN
  • Read type 2 MAC-IP routes with two VNIs and type 5 IP-prefix routes
  • Route between hosts on different subnets and leaves, and reach an external prefix

The tasks

  1. Address the hosts and confirm the layer 2 service
  2. Create the tenant VRF and its L3 VNI
  3. Build the anycast gateways
  4. Advertise the tenant's routes: the IP-VRF
  5. Route across the fabric

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of EVPN layer 3 with anycast gateways and symmetric IRB7 nodes, 7 links. Every link is listed as text below the diagram.spine1spine2leaf1leaf2h1h2h3Ethernet3eth0Ethernet3eth0Ethernet1Ethernet1Ethernet2Ethernet2Ethernet4eth0Ethernet2Ethernet1Ethernet1Ethernet2
7 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • spine1 Ethernet1 to leaf1 Ethernet1
  • spine1 Ethernet2 to leaf2 Ethernet1
  • spine2 Ethernet1 to leaf1 Ethernet2
  • spine2 Ethernet2 to leaf2 Ethernet2
  • leaf1 Ethernet3 to h1 eth0
  • leaf2 Ethernet3 to h2 eth0
  • leaf2 Ethernet4 to h3 eth0
Nodes in EVPN layer 3 with anycast gateways and symmetric IRB, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
spine1Arista vEOSveos-4.33.1.1F1 vCPU, 2,048 MB
spine2Arista vEOSveos-4.33.1.1F1 vCPU, 2,048 MB
leaf1Arista vEOSveos-4.33.1.1F1 vCPU, 2,048 MB
leaf2Arista vEOSveos-4.33.1.1F1 vCPU, 2,048 MB
h1Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB
h2Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB
h3Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder Arista EOS guided labs.

  3. Open 09 - EVPN layer 3 with anycast gateways and symmetric IRB and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More Arista EOS labs

All Arista EOS labs

Related labs in other courses

CloudLabBox is independent of Arista Networks. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.