VXLAN EVPN lab 12 of 14
Troubleshooting the overlay
Four tickets, four overlay faults: a route target, a VNI and an ESI that do not match, and a silent host with no route to it.
Run this lab
It needs Standard: its 9 nodes are set to 9 vCPU and 10,752 MB in total.
In your workspace: Shared, then VXLAN EVPN fabrics guided labs, then 12 - Troubleshooting the overlay
- Level
- Advanced
- Time
- About 75 minutes
- Nodes need
- 9 vCPU, 10,752 MB
- Smallest plan
- Standard
The scenario
The underlay at Calder Freight is healthy now: every session is up and every VTEP is reachable. But four tickets came in after last week's change, and all of them are in the overlay.
| Ticket | Complaint |
|---|---|
| 1 | h1 (VLAN 10) and h3 (VLAN 10) can't reach each other |
| 2 | h2 and h5 (VLAN 30) can't reach each other |
| 3 | h1's bond is only using one of its two links |
| 4 | h4, a licence server in VLAN 20, can't be reached from h3 |
| Item | Correct design |
|---|---|
| VLAN 10 | VNI 10010, RT 65000:10010, anycast gateway 10.10.10.1 |
| VLAN 20 (leaf2 only) | Not stretched, gateway 10.20.20.1 |
| VLAN 30 | VNI 10030, RT 65000:10030, bridged only |
| VRF RED | L3 VNI 50001, RT 65000:50001 |
| h1's segment | local-id 1, MAC 44:38:39:be:ef:aa on both leaves |
Hosts: h1 10.10.10.11 (bond to leaf1 and leaf2), h2 10.30.30.12 (leaf2 swp4), h3 10.10.10.13 (leaf3 Ethernet3), h4 10.20.20.14 (leaf2 swp5), h5 10.30.30.15 (leaf3 Ethernet4).
What you’ll practise
- Find a route target mismatch
- Find a VNI mismatch
- Find an ESI mismatch from the host side and the leaf side
- Explain how type 5 routes reach a silent host
The tasks
- Start the lab
- Ticket 1, routes that never get imported
- Ticket 2, the wrong VNI
- Ticket 3, an ESI that doesn't match
- Ticket 4, the silent host
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- spine1
Ethernet1to leaf1swp1 - spine1
Ethernet2to leaf2swp1 - spine1
Ethernet3to leaf3Ethernet1 - leaf1
swp3to h1eth0 - leaf2
swp3to h1eth1 - leaf2
swp4to h2eth0 - leaf2
swp5to h4eth0 - leaf3
Ethernet3to h3eth0 - leaf3
Ethernet4to h5eth0
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| spine1 | Arista vEOS | veos-4.33.1.1F | 1 vCPU, 2,048 MB |
| leaf1 | NVIDIA Cumulus VX | cumulus-vx-5.9.1 | 1 vCPU, 2,048 MB |
| leaf2 | NVIDIA Cumulus VX | cumulus-vx-5.9.1 | 1 vCPU, 2,048 MB |
| leaf3 | Arista vEOS | veos-4.33.1.1F | 1 vCPU, 2,048 MB |
| h1 | Alpine Linux | clbalpinebase-alpine-base-3-20-3 | 1 vCPU, 512 MB |
| h2 | Alpine Linux | clbalpinebase-alpine-base-3-20-3 | 1 vCPU, 512 MB |
| h4 | Alpine Linux | clbalpinebase-alpine-base-3-20-3 | 1 vCPU, 512 MB |
| h3 | Alpine Linux | clbalpinebase-alpine-base-3-20-3 | 1 vCPU, 512 MB |
| h5 | Alpine Linux | clbalpinebase-alpine-base-3-20-3 | 1 vCPU, 512 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
VXLAN EVPN fabrics guided labs.Open
12 - Troubleshooting the overlayand start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More VXLAN EVPN labs
CloudLabBox is independent of Arista Networks, Cisco, HPE, Juniper Networks and NVIDIA. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.