메뉴
Guide complet de virtualisation réseau — VXLAN, EVPN (MP-BGP EVPN), VTEP, VNI, tunnellisation overlay, configuration Cisco/Nexus, FRR, et déploiement data center.
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/JohnNuwan/EVA_CORE --skill vxlan-evpn-networking명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
Concevoir et maintenir un watchdog auto-correcteur pour services HTTP — checks de santé, auto-restart, état persistant, rapports et pièges bash.
Serveur de messagerie sécurisé auto-hébergé (Signal-like) avec Flask + WebSocket + AES-256-GCM + pont EVA
ADAM-SENTINEL — Veilleur technologique 24h/24h. Scanne 10 domaines, cree des rapports, met a jour les skills, alerte sur les CVE et breaking changes.
SOC 직업 분류 기준
SKILL.md 표시 중
| name | vxlan-evpn-networking |
| description | Guide complet de virtualisation réseau — VXLAN, EVPN (MP-BGP EVPN), VTEP, VNI, tunnellisation overlay, configuration Cisco/Nexus, FRR, et déploiement data center. |
| tags | ["vxlan","evpn","network-virtualization","overlay","vxlan-gateway","vtep","nvo","bgp-evpn"] |
Technologies de superposition réseau (overlay) permettant de créer des réseaux virtuels de couche 2 sur une infrastructure de couche 3. VXLAN (VLAN eXtension) + EVPN (Ethernet VPN) sont le standard moderne des data centers.
| Terme | Description |
|---|---|
| VXLAN | Encapsulation MAC-in-UDP (RFC 7348) |
| VTEP | VXLAN Tunnel Endpoint — point d'encapsulation/décapsulation |
| VNI | VXLAN Network Identifier (24-bit) — segment virtuel (1-16M) |
| EVPN | MP-BGP pour distribuer les informations MAC/VTEP |
| NVE | Network Virtualization Edge — interface VTEP |
| VXLAN Gateway | Pont entre VXLAN et VLAN/VRF |
+-------------------------------+-------+-----+
| Paquet Original (Ethernet) | | |
| +----------+------+--------+ | | |
| | MAC_dst | MAC_src | Payload| | UDP | IP |
| +----------+------+--------+ | 4789 | |
+-------------------------------+-------+-----+
| |
Encapsulation VXLAN Port VXLAN
|
+----------------------------+-------+-----+----+
| VXLAN Header (VNI=10000) | UDP | IP | MAC |
| Outer Ethernet Header | 4789 | Out | Out |
+----------------------------+-------+-----+----+
Mode 1: VXLAN Multicast
┌────────┐ ┌────────┐
│ VTEP-1 │───────│ VTEP-2 │
└───┬────┘ └───┬────┘
│ │
┌───┴────┐ ┌───┴────┐
│ VTEP-3 │───────│ VTEP-4 │
└────────┘ └────────┘
Flux BUM via groupe multicast (239.1.1.x)
Mode 2: VXLAN EVPN (Control Plane)
┌────────┐ ┌────────┐
│ VTEP-1 │───────│ VTEP-2 │
└───┬────┘ └───┬────┘
│ │
┌───┴────┐ ┌───┴────┐
│ Spine │───────│ Spine │
└───┬────┘ └───┬────┘
│ │
┌───┴────┐ ┌───┴────┐
│ VTEP-3 │───────│ VTEP-4 │
└────────┘ └────────┘
BUM via ingress replication (Head-end)
Apprentissage MAC via MP-BGP EVPN
# Créer un VTEP local
ip link add vxlan10 type vxlan \
id 10000 \
dstport 4789 \
local 10.0.0.1 \
remote 10.0.0.2 \
dev eth0 \
ttl 64
# Activer
ip link set vxlan10 up
ip addr add 192.168.100.1/24 dev vxlan10
# Mode multicast
ip link add vxlan20 type vxlan \
id 10001 \
group 239.1.1.1 \
dev eth0 \
ttl 4
# Mode EVPN (apprentissage noyau)
ip link add vxlan30 type vxlan \
id 10002 \
local 10.0.0.1 \
dstport 4789 \
dev eth0 \
nolearning \
proxy_arp \
l2miss l3miss
# Bridge VXLAN
ip link add br0 type bridge
ip link set vxlan10 master br0
ip link set eth1 master br0
ip link set br0 up
# /etc/frr/frr.conf
!
router bgp 65001
bgp router-id 10.0.0.1
neighbor 10.0.1.1 remote-as 65001
neighbor 10.0.1.1 update-source lo
!
address-family l2vpn evpn
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 route-reflector-client
advertise-all-vni
exit-address-family
!
# Associer VNI à l'EVPN
router bgp 65001
address-family l2vpn evpn
vni 10000
rd 65001:10000
rt import 65001:10000
rt export 65001:10000
exit-vni
vni 10001
rd 65001:10001
rt import 65001:10001
rt export 65001:10001
exit-vni
exit-address-family
!
| Type | NLRI | Usage |
|---|---|---|
| 1 | Ethernet Auto-Discovery | Détection multi-homing |
| 2 | MAC/IP Advertisement | Annonce MAC + IP |
| 3 | Inclusive Multicast | Arbre multicast/ingress replication |
| 4 | Ethernet Segment | Multi-homing ESI |
| 5 | IP Prefix Route | Routes IP (type-5) — L3VNI |
NLRI:
Route Distinguisher: 65001:10000
Ethernet Segment ID: 0000.0000.0000.0000.0000
Ethernet Tag ID: 0
MAC Address: 00:1a:2b:3c:4d:5e
IP Address: 192.168.100.10
MPLS Label 1: 10000 (VNI)
MPLS Label 2: 0
# Routeur configuré pour le routage entre VNI
!
vrf BLUE
vni 50000
rd 65001:50000
rt both 65001:50000
!
router bgp 65001
address-family ipv4 unicast
vrf BLUE
redistribute connected
redistribute static
exit-vrf
!
address-family l2vpn evpn
vni 50000
rd 65001:50000
rt import 65001:50000
rt export 65001:50000
exit-vni
exit-address-family
!
feature ospf
feature bgp
feature interface-vlan
feature vn-segment-vlan-based
feature nv overlay
# Anycast Gateway
ip arp prefix-advertisement
ipv6 nd prefix-advertisement
# Interface loopback (VTEP)
interface loopback0
ip address 10.0.0.1/32
ip router ospf 1 area 0
# NVE (Network Virtualization Edge)
interface nve1
no shutdown
source-interface loopback0
host-reachability protocol bgp
member vni 10000 mcast-group 239.1.1.1
suppress-arp
member vni 20000
# VLAN -> VNI mapping
vlan 100
vn-segment 10000
vlan 200
vn-segment 20000
# SVI (Anycast Gateway)
interface vlan100
no shutdown
vrf member TENANT-A
ip address 192.168.100.1/24
fabric forwarding anycast-gateway
# VRF
vrf context TENANT-A
rd 65001:100
address-family ipv4 unicast
route-target both 65001:100
route-target both 65001:100 evpn
# BGP EVPN
router bgp 65001
router-id 10.0.0.1
neighbor 10.0.1.1 remote-as 65001
neighbor 10.0.1.1 update-source loopback0
address-family l2vpn evpn
neighbor 10.0.1.1 activate
send-community extended
vrf TENANT-A
address-family ipv4 unicast
advertise l2vpn evpn
show nve peers
show nve vni
show l2route evpn mac
show l2route evpn mac vni 10000
show l2route evpn ip
show bgp l2vpn evpn summary
show bgp l2vpn evpn route-type 2
show fabric forwarding ip 192.168.100.10
show vxlan
+-----------+ +-----------+ +-----------+
| Tenant A | | Tenant B | | Tenant C |
| VNI 10000 | | VNI 20000 | | VNI 30000 |
| VLAN 100 | | VLAN 200 | | VLAN 300 |
| 10.0.1.0/24| | 10.0.2.0/24| | 10.0.3.0/24|
+-----+-----+ +-----+-----+ +-----+-----+
| | |
+-----------------+-----------------+
|
+------+------+
| Spine 1/2 |
| (RR EVPN) |
+------+------+
|
+-------------+-------------+
| | |
+-----+------+ +---+-----+ +-----+------+
| Leaf 1 | | Leaf 2 | | Leaf 3 |
| VTEP 1 | | VTEP 2 | | VTEP 3 |
+-----+------+ +----+----+ +----+-------+
| | |
[Web1] [App1] [DB1] [Web2] [App2] [DB2]
# Même adresse IP VTEP sur deux leaves (Active/Active)
interface nve1
source-interface anycast1
!
interface anycast1
ip address 10.0.0.100/32
ip router ospf 1 area 0
# Pont entre VXLAN (overlay) et réseau physique
ip link add vxlan100 type vxlan id 10000 local 10.0.0.1 dstport 4789 dev eth0 nolearning
ip link set vxlan100 master br-vlan-vxlan
ip link set eth1 master br-vlan-vxlan
ip link set br-vlan-vxlan up
nolearning sur l'interface VXLAN en mode EVPN.