Skip to content

Commit

Permalink
Test: WIP add molecule for EVPN on LAN
Browse files Browse the repository at this point in the history
  • Loading branch information
gmuloc committed Jan 15, 2025
1 parent db3656a commit 57455cf
Show file tree
Hide file tree
Showing 8 changed files with 884 additions and 148 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,240 @@
!
no enable password
no aaa root
!
agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1
!
flow tracking hardware
tracker FLOW-TRACKER
record export on inactive timeout 70000
record export on interval 300000
exporter CV-TELEMETRY
collector 127.0.0.1
local interface Loopback0
template interval 3600000
no shutdown
!
service routing protocols model multi-agent
!
hostname cv-pathfinder-edge-wan-use-evpn-on-lan
!
router adaptive-virtual-topology
topology role edge
region AVD_Land_West id 42
zone AVD_Land_West-ZONE id 1
site Site12 id 12
!
policy DEFAULT-POLICY
!
match application-profile default
avt profile DEFAULT-POLICY-DEFAULT
!
policy DEFAULT-POLICY-WITH-CP
!
match application-profile APP-PROFILE-CONTROL-PLANE
avt profile DEFAULT-POLICY-CONTROL-PLANE
!
match application-profile default
avt profile DEFAULT-POLICY-DEFAULT
!
profile DEFAULT-POLICY-CONTROL-PLANE
path-selection load-balance LB-DEFAULT-POLICY-CONTROL-PLANE
!
profile DEFAULT-POLICY-DEFAULT
path-selection load-balance LB-DEFAULT-POLICY-DEFAULT
!
vrf default
avt policy DEFAULT-POLICY-WITH-CP
avt profile DEFAULT-POLICY-DEFAULT id 1
avt profile DEFAULT-POLICY-CONTROL-PLANE id 254
!
vrf PROD
avt policy DEFAULT-POLICY
avt profile DEFAULT-POLICY-DEFAULT id 1
!
router path-selection
tcp mss ceiling ipv4 ingress
!
path-group INET id 101
ipsec profile CP-PROFILE
!
local interface Ethernet1
stun server-profile INET-cv-pathfinder-pathfinder-Ethernet1 INET-cv-pathfinder-pathfinder-Ethernet3
!
peer dynamic
!
peer static router-ip 192.168.144.1
name cv-pathfinder-pathfinder
ipv4 address 172.17.7.7
ipv4 address 10.9.9.9
!
load-balance policy LB-DEFAULT-POLICY-CONTROL-PLANE
path-group INET
!
load-balance policy LB-DEFAULT-POLICY-DEFAULT
path-group INET
!
spanning-tree mode none
!
vrf instance MGMT
!
vrf instance PROD
!
management api http-commands
protocol https
no shutdown
!
vrf MGMT
no shutdown
!
management security
!
ssl profile STUN-DTLS
tls versions 1.2
trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt
certificate STUN-DTLS.crt key STUN-DTLS.key
!
ip security
ike policy CP-IKE-POLICY
local-id 192.168.255.12
!
sa policy CP-SA-POLICY
esp encryption aes256gcm128
pfs dh-group 14
!
profile CP-PROFILE
ike-policy CP-IKE-POLICY
sa-policy CP-SA-POLICY
connection start
shared-key 7 ABCDEF1234567890
dpd 10 50 clear
mode transport
!
key controller
profile CP-PROFILE
!
interface Dps1
description DPS Interface
mtu 9194
flow tracker hardware FLOW-TRACKER
ip address 192.168.255.12/32
!
interface Ethernet1
description ATT_666
no shutdown
no switchport
ip address dhcp
dhcp client accept default-route
!
interface Loopback0
description ROUTER_ID
no shutdown
ip address 192.168.42.12/32
!
interface Vxlan1
description cv-pathfinder-edge-wan-use-evpn-on-lan_VTEP
vxlan source-interface Dps1
vxlan udp-port 4789
vxlan vrf default vni 1
vxlan vrf PROD vni 42
!
application traffic recognition
!
application ipv4 APP-CONTROL-PLANE
destination prefix field-set PFX-PATHFINDERS
!
application-profile APP-PROFILE-CONTROL-PLANE
application APP-CONTROL-PLANE
!
field-set ipv4 prefix PFX-PATHFINDERS
192.168.144.1/32
!
ip routing
no ip routing vrf MGMT
ip routing vrf PROD
!
ip extcommunity-list ECL-EVPN-SOO permit soo 192.168.42.12:12
!
ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY
seq 10 permit 192.168.42.0/24 eq 32
!
route-map RM-CONN-2-BGP permit 10
match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY
set extcommunity soo 192.168.42.12:12 additive
!
route-map RM-EVPN-EXPORT-VRF-DEFAULT permit 10
match extcommunity ECL-EVPN-SOO
!
router bfd
multihop interval 300 min-rx 300 multiplier 3
!
router bgp 65000
router-id 192.168.42.12
update wait-install
no bgp default ipv4-unicast
maximum-paths 16
neighbor EVPN-OVERLAY-PEERS peer group
neighbor EVPN-OVERLAY-PEERS update-source Loopback0
neighbor EVPN-OVERLAY-PEERS bfd
neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3
neighbor EVPN-OVERLAY-PEERS send-community
neighbor EVPN-OVERLAY-PEERS maximum-routes 0
neighbor WAN-OVERLAY-PEERS peer group
neighbor WAN-OVERLAY-PEERS remote-as 65000
neighbor WAN-OVERLAY-PEERS update-source Dps1
neighbor WAN-OVERLAY-PEERS bfd
neighbor WAN-OVERLAY-PEERS bfd interval 1000 min-rx 1000 multiplier 10
neighbor WAN-OVERLAY-PEERS ttl maximum-hops 42
neighbor WAN-OVERLAY-PEERS password 7 htm4AZe9mIQOO1uiMuGgYQ==
neighbor WAN-OVERLAY-PEERS send-community
neighbor WAN-OVERLAY-PEERS maximum-routes 0
neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS
neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1
redistribute connected route-map RM-CONN-2-BGP
!
address-family evpn
neighbor WAN-OVERLAY-PEERS activate
neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in
neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out
neighbor WAN-OVERLAY-PEERS encapsulation path-selection
!
address-family ipv4
no neighbor WAN-OVERLAY-PEERS activate
!
address-family ipv4 sr-te
neighbor WAN-OVERLAY-PEERS activate
!
address-family link-state
neighbor WAN-OVERLAY-PEERS activate
path-selection
!
address-family path-selection
bgp additional-paths receive
bgp additional-paths send any
neighbor WAN-OVERLAY-PEERS activate
!
vrf default
rd 192.168.42.12:1
route-target import evpn 1:1
route-target export evpn 1:1
route-target export evpn route-map RM-EVPN-EXPORT-VRF-DEFAULT
!
vrf PROD
rd 192.168.42.12:142
route-target import evpn 142:142
route-target export evpn 142:142
router-id 192.168.42.12
redistribute connected
!
router traffic-engineering
!
stun
client
server-profile INET-cv-pathfinder-pathfinder-Ethernet1
ip address 172.17.7.7
ssl profile STUN-DTLS
server-profile INET-cv-pathfinder-pathfinder-Ethernet3
ip address 10.9.9.9
ssl profile STUN-DTLS
!
end
Loading

0 comments on commit 57455cf

Please sign in to comment.