1. What Is EVPN?

EVPN stands for Ethernet VPN. It is a network control-plane solution that uses Border Gateway Protocol (BGP) to distribute reachability information for Ethernet services.

EVPN was standardized for providing Ethernet services across networks and is now commonly used as the control plane for VXLAN-based data-center fabrics.

EVPN can advertise information such as:

• MAC address reachability.
• IP-to-MAC associations, where applicable.
• Information used to discover participating VTEPs.
• IP prefix reachability in supported EVPN routing designs.
• Multi-homing and Ethernet-segment information in supported deployments.

EVPN is not itself the VXLAN packet encapsulation. It provides control-plane information that helps network devices learn how to reach endpoints and network segments.

2. Why Do Networks Need EVPN?

Imagine a data center with hundreds of virtual machines distributed across multiple racks. A switch needs to know which endpoint is reachable through which remote network device.

Without a suitable control plane, a network may rely more heavily on flooding and data-plane learning to discover endpoint locations. At larger scales, that can create additional traffic and operational complexity.

EVPN helps by providing:

• Control-plane learning: BGP distributes endpoint reachability information between participating devices.
• Scalability: Supports large overlay networks when designed and operated correctly.
• Reduced unnecessary flooding: Known reachability information can reduce reliance on some flood-and-learn behavior.
• Multi-tenancy: Supports separate logical network services.
• Mobility support: Can advertise updated endpoint reachability when workloads move.
• Integrated routing: Supports Layer 3 services and IP prefix advertisements in appropriate EVPN designs.

3. How Does EVPN Work?

EVPN uses BGP to distribute information about network endpoints and services. Participating switches or routers exchange EVPN routes over BGP sessions.

             BGP EVPN Control Plane

       +------------------+
       | Leaf Switch A    |
       | VTEP A           |
       +------------------+
                 |
                 | BGP EVPN Routes
                 |
                 v
       +------------------+
       | Leaf Switch B    |
       | VTEP B           |
       +------------------+

        VXLAN Data Plane

 VM A ---- VTEP A ===== VXLAN ===== VTEP B ---- VM B
                   IP Underlay
        

There are two important parts:

• Control plane: EVPN uses BGP to advertise reachability information and other network service details.
• Data plane: VXLAN or another supported forwarding technology carries the actual user traffic.

In a common VXLAN EVPN data center, BGP EVPN helps VTEPs learn where remote MAC addresses and relevant IP information are reachable. When traffic needs to cross the fabric, the data plane forwards it using the programmed forwarding state.

4. What Is the Relationship Between EVPN and VXLAN?

EVPN and VXLAN solve different but complementary problems.

Easy way to remember: VXLAN carries the encapsulated traffic; EVPN tells the participating network devices how endpoints and services are reachable.

VXLAN can operate without EVPN using other learning and replication mechanisms. EVPN can also be used with data-plane technologies other than VXLAN.

5. What Is BGP EVPN?

BGP EVPN is the use of BGP to advertise EVPN routes. BGP is a routing protocol commonly associated with exchanging reachability information between autonomous systems, but it can also carry additional address families for services such as EVPN.

EVPN uses specific route types to advertise different kinds of information. The exact routes exchanged depend on the design, configuration, and features supported by the platform.

Common EVPN route types

These route types are standardized concepts. Not every deployment uses every type, and implementation details vary between vendors and architectures.

6. EVPN Type 2 Routes: MAC/IP Advertisement

Type 2 routes are particularly important in VXLAN EVPN fabrics because they advertise MAC address reachability and may include associated IP information.

Example

Suppose Virtual Machine A has IP address 10.10.10.11 and MAC address 00:11:22:33:44:55. It is connected to Leaf Switch A.

1. Leaf A learns the endpoint information through its local attachment and supported learning process.
2. Leaf A advertises the relevant EVPN MAC/IP reachability using BGP.
3. Other participating switches receive and process the route according to their import policies.
4. A remote leaf can use this information to build forwarding state toward Leaf A.
5. Traffic can then be forwarded across the VXLAN overlay when required.

Advertising IP information can also help supported designs perform more efficient ARP or Neighbor Discovery handling. Exact behavior depends on the platform and configuration.

7. What Is an EVPN Type 5 Route?

EVPN Type 5 routes advertise IP prefixes. They are useful in EVPN architectures that provide Layer 3 connectivity between networks or tenants.

For example, a data center may have separate IP subnets for web servers, application servers, and databases. Type 5 routes can be used in supported designs to advertise prefixes between EVPN routing domains.

Web Subnet
10.10.10.0/24
       |
       v
+--------------------+
| Leaf / EVPN Router |
+--------------------+
       |
       | EVPN Type 5
       | IP Prefix Route
       v
+--------------------+
| Remote EVPN Router |
+--------------------+
       |
       v
Application Subnet
10.10.20.0/24
        

Type 5 routes are not simply a replacement for all other routing methods. Their use depends on the chosen EVPN architecture, route-target policy, VRF design, and supported platform features.

8. What Is EVPN Multi-Homing?

EVPN supports multi-homing designs in which a customer device, server, or Layer 2 segment is connected to more than one network device. This can improve resilience and support traffic distribution.

               Server or L2 Segment
                    /       \
                   /         \
                  v           v
           +----------+  +----------+
           | Leaf A   |  | Leaf B   |
           +----------+  +----------+
                  \         /
                   \       /
                EVPN Control Plane
        

In supported Ethernet VPN designs, Ethernet-segment identifiers and EVPN route types help participating devices coordinate multi-homed connectivity.

Multi-homing is more advanced than simply connecting two cables. The physical topology, Layer 2 behavior, designated-forwarder procedures, failure handling, and vendor implementation must be designed correctly.

9. What Is an EVPN-VXLAN Fabric?

An EVPN-VXLAN fabric combines a routed IP underlay, a VXLAN overlay, and BGP EVPN as a control plane. Leaf-and-spine is a common physical topology used in data centers.

                    Spine 1       Spine 2
                      |\             /|
                      | \           / |
                      |  \         /  |
                      |   \       /   |
                    Leaf 1       Leaf 2
                    VTEP A       VTEP B
                      |             |
                     VM A          VM B

          Underlay: Routed IP connectivity
          Overlay: VXLAN logical networks
          Control plane: BGP EVPN
        

Roles of the main components

• Spine switches: Provide routed connectivity between leaf switches in a typical leaf-and-spine design.
• Leaf switches: Connect workloads and may act as VXLAN VTEPs.
• VXLAN: Carries encapsulated overlay traffic between VTEPs.
• BGP EVPN: Advertises reachability information between participating network devices.
• VRFs and VNIs: Help implement logical separation and routing according to the network design.

Not every EVPN deployment uses the same topology or control-plane arrangement. The architecture depends on the requirements and platform.

10. Benefits of EVPN

• Scalable endpoint learning: Uses a control plane to distribute reachability information.
• Reduced flooding in appropriate designs: Known endpoint information can reduce some unnecessary traffic.
• Workload mobility: Supports advertising updated endpoint locations.
• Multi-tenancy: Enables separate logical network services.
• Layer 2 and Layer 3 services: Supports different Ethernet and IP connectivity designs.
• Resilient connectivity: Supports multi-homing designs and associated failure-handling mechanisms.
• Automation potential: Works well with repeatable data-center fabric provisioning when supported by the platform.

11. EVPN Troubleshooting Checklist

When a VXLAN EVPN network does not behave as expected, check both the control plane and the data plane.

1. Verify underlay routing: Confirm IP reachability between the relevant VTEPs.
2. Check BGP sessions: Verify that the required BGP neighbors are established.
3. Confirm EVPN address-family support: Check that EVPN routes are being exchanged as intended.
4. Inspect advertised routes: Confirm that the expected MAC/IP or IP prefix routes exist.
5. Review route targets: Verify that routes are imported into the intended network instances or VRFs.
6. Check VNI and VLAN mappings: Confirm that local and remote mappings match the design.
7. Inspect forwarding tables: Verify that the device has programmed the expected MAC, IP, and next-hop information.
8. Check MTU and UDP transport: Ensure VXLAN packets can traverse the underlay.
9. Review policies and filters: Investigate ACLs, firewall rules, and route policies that may block traffic or advertisements.

Command syntax differs between vendors and operating systems. Use the documentation for your platform to inspect BGP EVPN neighbors, EVPN routes, VXLAN interfaces, and forwarding tables.

12. EVPN vs Traditional Flood-and-Learn VXLAN

EVPN does not eliminate every form of flooding. Broadcast, unknown-unicast, and multicast traffic still require appropriate handling according to the deployment design.

13. Quick Quiz

14. Key Takeaways

• EVPN is a control-plane technology that uses BGP to distribute reachability information.
• EVPN and VXLAN have different roles but are commonly used together.
• Type 2 routes advertise MAC reachability and optional associated IP information.
• Type 5 routes advertise IP prefixes for supported Layer 3 services.
• EVPN supports scalable overlay designs and multi-homing capabilities.
• Successful operation depends on correct underlay routing, BGP configuration, route policies, and data-plane forwarding.

Remember: VXLAN provides the overlay encapsulation, while EVPN helps the network learn where endpoints and services are reachable.