Adding vPC to VXLAN | Network Direction

[@NetworkDirection]

vPC videos: kzbin.info/aero/PLDQaRcbiSnqFByfVJrplYwGfArAMGqtp8 VXLAN videos: kzbin.info/aero/PLDQaRcbiSnqFe6pyaSy-Hwj8XRFPgZ5h8

[@austincarter1980]

Just gotta say I never leave comments or anything on youtube videos in particular but I love Network Direction and their collection of videos. Their VXLAN series in particular is excellent and helped me understand the concept. Thank you!

[@bidkarpaez8385]

Thank you for EVERYTHING, I finally understood VXLAN due to your videos. Please keep helping people with your knowledge.

[@blackknight5004]

This series has been really informative. I’ve been working on 3 teir for years and now have to design a spin and leaf.

[@NetworkDirection]

Thanks Black Knight!

[@toughhost5677]

You are awesome. Done all the training on VXLAN and VPC+VXLAN. good work. followed you on the tweets!!!!

[@alexhuthmacher]

First you incredibly good at explaining these technologies. Second I finished your VXLAN series and it was very good. I have been thinking about running VXLAN between our Datacenters and eliminating the layer two links between them. Is this a bad idea? The DC are about 20 miles apart from each other.

[@NetworkDirection]

I've done it between data centres in two different states before, and it was fine. Underlay needs to be very stable though

[@alexhuthmacher]

@@NetworkDirection Would you recommend an Isolated VRF for the underlay and overlay.

[@NetworkDirection]

@@alexhuthmacher If you can, an isolated underlay will help. You must consider if this is right for your network though

[@pedrotrigueira794]

I've spent a huge ammount of time troubleshooting vxlan evpn vPC without physical peer link. Leaving this finding here for future reference - if one of the host interfaces fail and you lose connectivity all together make sure the TCAM has suficient memory to reroute the packet via the virutal peer link - guidelines and limitation state "...vPC Fabric Peering requires the application of TCAM carving of region "ing-flow-redirect." TCAM carving requires saving the configuration and reloading the switch prior to using the feature. ..." for nexus C9336-FX2 at least

[@NetworkDirection]

This is good to know. Thanks for sharing your experience to help others.

[@manolo8241]

Great video. What about adveritising single homed devices using the secondary IP? In theory there should be no problem as long as the peerlink is up, but have u ever tried "advertise-pip"?

[@vincentvlk8289]

Great video series, thank you very much, for your hard work 🙂

[@Alexvideosama]

Amazing explanation of vPC with VXLAN. Am I wrong or with the latest version os NX-OS the vPC Peer Link is no more needed, instead Cisco introduced the vPC with Fabric Peering?

[@NetworkDirection]

Good question! I'm not sure on this one. I don't manage any Nexus switches anymore, so I'm a bit out of date

[@Alexvideosama]

@@NetworkDirection If I can get more info from my side I'll update the comment, for everyone who wants to know. On what kind of equip are you right now? Some kind of high level devices?

[@danielldf]

Hi thanks for the video. There are a few equipments that don't use the peer link between leaf's. They do this vpc on the spine?

[@NetworkDirection]

The spine should be used just for routing, so generally we would not run vPC on the spine. If you mean that there are VLANs that are not part of vPC (that is VLANs pruned from the peer-link), then this traffic will be handled in the same way as any VXLAN environment without vPC. Does that help?

[@DRZREALEST]

would it work the same if you create a non VPC vlan. (by removing it from the VPC) and connecting both switches thru layer3 ? i did this for an ASA that needed to establish OSFP with both switches and saw that the switches also starting passing L3 traffic thru that VLAN as well.

[@RanaShahid87]

I hope there was a 10k like button. And I would press it without giving second thought.

[@NetworkDirection]

Thanks Shahid

[@Devgrusome]

AWESOME!! So clear. Making these complex technologies simple to understand. TAKE MY MONEY.

[@NetworkDirection]

Thanks Josh! I aim to make it simple to understand, so I'm glad it's working!

[@guilhermetadeu790]

Amazing video. I'm from Brasil and I love this video. Thank u so much

[@NetworkDirection]

Glad you enjoyed it!

[@ACISData]

nice work mate. thank you heaps

[@Srqjan]

Such a great video! Are You going to lab EVPN all-active multihoming on NX9K as an alternative to vPC? It will be awesome.

[@veerakumardevireddy2884]

Thanks for your good effort. Excellent Video...

[@NetworkDirection]

Thanks for you comment, glad you like it

[@francescogalli4033]

Hi, First of all congrats for this amazing channel.. a Bible for a junior networker like me Watching vPC series, you said that when peer link fail, secondary switch shuts down its member ports, and that's clear But i didn't understand why in this case the secondary nexus shuts down the loopback interface, it is not part of vpc member port right ?

[@rendog311rendog2]

can‘t wait! 🔥😍

[@rohanprabhudesai3194]

Can i run a routing protocol on a VNI? I have 4 N9k switches across 2 data centres(DC). Each pair is running a vpc. There is a firewall and WAN router connected to the 9k pair using vpc in each DC. I need to create a L2 between the 2 DCs so that firewall can run routing protocol with each WAN router. Is this possible using VXLAN?

[@rohitsijoria7211]

Another great video and thanks for sharing your pain/experience :) Hope it wasn't in the production network.

[@NetworkDirection]

Unfortunately, it was in Prod

[@ayansh449]

great videos ... perfect

[@ashrafhelal9354]

Hi, I have been working with catalyst for 5 years, now I works with ACI. I don't understand anything of what you did in the vidoes even the command. what i should do to understand the concept and the command ?

[@acc1tester398]

Hi, just curious, will I have access to create my own lab topology specifically for vxlan when I sign up as patreon?

[@NetworkDirection]

I don't have any vxlan labs available. You could create your own labs based on the vxlan videos, but you wouldn't need to sign up through patreon for that

[@santhu457]

Folks, you are doing great..please keep doing:-)

[@NetworkDirection]

Thanks!

[@charlespearl2793]

Could you explain where the layer3 IP address for the default gateways exist in a spine-and-leaf topology? EG if there were (4) Class C networks for servers 10.1.1.0/24, 10.1.2.0/24 etc... Does the subnets exist on every leaf node? Also, how do there servers work with dual NICs with teaming if you are using non-VPC between the leafs?

[@NetworkDirection]

The L3 addresses would follow the VNI. So, each of your subnets would be in a VNI, and the VNI's would be bound to VTEPs. If you're using BGP/EVPN, you don't need to bind the VNI to every leaf. If you have dual-NIC and non-vPC, then you would use active/passive uplinks on the server side.

[@pedrotrigueira794]

on a different note .. do you plan to add a vxlan eVPN vPC without physical link to the series?

[@NetworkDirection]

I don't have any plans to add more vPC videos at this time. Right now, I'm not working on any networks with vPC implemented. If this changes, I might look into it

[@BrBr.93]

Hi, thank you for this explanation in case of vPC Fabric Peering peer-keepalive destination " " source " " virtual peer-link destination " " source " " dscp 56 what should be the Src and Dst ? is the LO of VTEP primary IP in both switches or what ??

[@NetworkDirection]

Yep, use a loopback interface, and let the routing protocol figure out the egress interface

[@BrBr.93]

peer-keepalive destination " " source " " in this command can i use Dst a loopback interface located in both spine in my topology i use 2 spine so how can use shared address in both spines @@NetworkDirection

[@SudhaGanapareddy]

does any one tried to configure vpc with vxlan in Nexus , i have tried but my loopback going down , after removing feature vpc the loopback is getting up not sure the issue is ?

[@brunmorevanrensburg8588]

im busy with this setup but once i add the vpc to my VXLAN my VXLAN stops working how can one fix this

[@NetworkDirection]

That really depends on what's wrong. Perhaps there will be a few tricks in this video you can try

[@ccielearner5435]

what is the use of 'vpc nve peer-link-vlan ' command in 5K's ?

[@NetworkDirection]

That's specific to the Nexus 5600 platform. I don't have any experience with them. Try this: www.cisco.com/c/en/us/td/docs/switches/datacenter/pf/configuration/guide/b-pf-configuration/Forwarding-Configurations.html

[@hkn7435]

This is a Great Video. Can you show live as you did before? I am using NX-OS 9.2.3v in GNS3

[@NetworkDirection]

I wasn't able to do live config this time. Before I had access to some real hardware for a time, but I didn't when I made this

[@brunmorevanrensburg8588]

if you have Nexus 9300 4 of them and runing BGP evpn vxlan with VPC should you be runing VPC Routing or not

[@NetworkDirection]

That depends on what you need to achieve. vPC with routing is used when an external device needs to peer with the Nexus switches, over the vPC links. So, it depends if you need to do that or not. If they're connected by orphan ports, then it's not really a worry

[@brunmorevanrensburg8588]

@@NetworkDirection hi i got the VXLAN and VPC to work now for the redundancy to work. i have 4 Nexus switches which are in pairs of two each with VPC between them no routers as im doing the routing on the nexus. So if the primary Nexu switch faileds the secondary should take over the VXLAN which goes to the other pair of nexus switches.

[@NetworkDirection]

@@brunmorevanrensburg8588 Well done!

[@PankajSharma-vi3vl]

Do I need to allow the vlans on VPC peer link port Chanel ?

[@NetworkDirection]

Any VLAN that's on a vPC should also be allowed on the peer-link

[@Devgrusome]

Can you do a/some video(s) on EVN please?

[@NetworkDirection]

Maybe. I have thought about it. I have a long request list, so I'll see if I can fit it in

[@simchanergens7917]

Hi Network Direction, actually peer-gateway is not necessary or even mandatory. if you can put a note, would worth it.

[@NetworkDirection]

Are you sure? Have a look at BRKDCN-3040. Cisco seem to think it's fairly important. clnv.s3.amazonaws.com/2018/anz/pdf/BRKDCN-3040.pdf It is a feature that supports 'special' packets, so if you can guarantee that your network doesn't have them, then yeah, you won't need it. But there's really no down side to enabling it, so it's safer on.

[@calascaadil4513]

i need this vidios how to get

[@musalyh]

English subtitle please i urgently need this

[@musalyh]

English subtitle please

[@khansheheyar]

Good example but and lots of buts. ..........

[@musalyh]

English subtitle please

[@NetworkDirection]

I'm trying to add more in as I go