EVPN

Learn about EVPN configurations on the ACX7000 family of routers. The ACX7000 family of routers includes ACX7020, ACX7024, ACX7024X, ACX7100, ACX7332, ACX7348, and ACX7509 routers.

EVPN provides scalable Layer 2 and Layer 3 VPN services over MPLS or VXLAN networks.

EVPN-MPLS

You configure EVPN-MPLS on provider edge (PE) routers, not on customer edge (CE) or core provider (P) routers. Use mac-vrf as the instance type to configure EVPN-MPLS.

Prerequisites

  • MPLS backbone (MPLS underlay) is fully operational, including:

    • IGP (OSPF or IS-IS) is configured and stable to handle routing between core P and PE routers.

    • LDP or RSVP is enabled to create LSPs between PE routers.

    • Multiprotocol BGP (MP‑BGP) is configured between PE routers.

  • Loopback interfaces and router IDs are configured.

  • VLANs and CE‑facing interfaces are defined.

Here is a sample EVPN-MPLS routing instance configuration on an ACX7000 family of routers using the vlan-based service. You might alternatively use the vlan-bundle service or vlan-aware service for this configuration.

The following table shows EVPN-MPLS configurations based on service type:

Table 1: EVPN-MPLS Configurations Based on Service Type
Service Type MAC-VRF Configuration Example
vlan-based
set routing-instances evpn instance-type mac-vrf
set routing-instances evpn protocols evpn
set routing-instances evpn protocols evpn normalization
set routing-instances evpn service-type vlan-based
set routing-instances evpn vrf-target target:62525:2001
set routing-instances evpn route-distinguisher 62525:2000
set routing-instances evpn vlans v100 vlan-id 100
set routing-instances evpn vlans v100 interface ae0.100
set routing-instances evpn vlans v100 l3-interface irb.100
vlan-bundle
set routing-instances evpn-bundle instance-type mac-vrf
set routing-instances evpn-bundle protocols evpn no-control-word
set routing-instances evpn-bundle service-type vlan-bundle
set routing-instances evpn-bundle interface ae0.100
set routing-instances evpn-bundle vrf-target target:62525:2001
set routing-instances evpn-bundle route-distinguisher 62525:2000
set routing-instances evpn-bundle vlans v100 interface ae0.100
vlan-aware
set routing-instances evpn-aware instance-type mac-vrf
set routing-instances evpn-aware protocols evpn no-control-word
set routing-instances evpn-aware service-type vlan-aware
set routing-instances evpn-aware vrf-target target:62525:2001
set routing-instances evpn-aware route-distinguisher 62525:2000
set routing-instances evpn-aware vlans v100 vlan-id 100
set routing-instances evpn-aware vlans v100 interface ae0.100
set routing-instances evpn-aware vlans v200 vlan-id 200
set routing-instances evpn-aware vlans v200 interface ae0.200
Note: On the ACX7000 family of routers, control word is enabled and VLAN normalization is disabled by default.
Note: For EVPN multihoming, you must also configure load balancing.

Here is a sample load-balancing configuration:

For additional information, see Overview of VLAN Services for EVPN about these service types.

EVPN-VPWS

You configure an Ethernet VPN-virtual private wire service (EVPN-VPWS) on the provider edge (PE) routers, not on customer edge (CE) or core provider (P) routers. Use evpn-vpws as the instance type to configure EVPN-VPWS.

Here is a sample EVPN-VPWS configuration on an ACX7000 family of routers to create point-to-point Layer-2 circuit (E-Line service).

EVPN-VPWS routing instance configuration on a PE router:

CE-facing interface (ae0.100) configuration on a PE router:

EVPN-VXLAN

You configure an EVPN-VXLAN routing instance on the provider edge (PE) routers, not on customer edge (CE) or core provider (P) routers. Use mac-vrf as the instance type and evpn as the protocol with vxlan encapsulation.

Prerequisites:

  • A stable IP underlay is configured with an interior gateway protocol (IGP)—OSPF or IS-IS with external BGP (EBGP) and provides full PE‑to‑PE reachability.

  • Loopback interfaces (lo0) are configured and reachable.

    lo0 is used as the virtual tunnel endpoint (VTEP) source.

  • Multiprotocol BGP (MP‑BGP) with EVPN address family (evpn signaling) is operational between PE devices.

  • VLAN and VXLAN network identifier (VNI) mapping is defined.

  • CE‑facing interfaces are configured with flexible VLAN tagging and flexible Ethernet services.

  • For multihoming, aggregated Ethernet (ae) interfaces, Link Aggregation Control Protocol (LACP), and Ethernet segment identifier (ESI) values are pre‑configured.

  • The device runs a Junos OS Evolved version that supports EVPN‑VXLAN on the target platform.

Here are some sample EVPN-VXLAN single-homed and multihomed configurations on an ACX7000 family of router.

Single Homing

EVPN-VXLAN single-homed configuration on a PE router:

Single-homed CE-facing interface configuration on a PE router:

Multihoming

EVPN-VXLAN multi-homed configuration on a PE router:

Multihomed CE-facing interface configuration on a PE router:

Note: For EVPN multihoming, you must also configure load balancing.

Here is a sample load-balancing configuration.