evpn l3 type-5 routes without vrf and bridge?

[Ilyaemma]

Hi.
Someone can share config for evpn\vxlan with routes type-5 without using vrf and bridge (using default vrf)?
I tried this, but it doens't work, unfortunately

test-vm4(config-router-af)# do sho bgp l2vpn evpn 
BGP table version is 10, local router ID is 10.11.2.7
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal
Origin codes: i - IGP, e - EGP, ? - incomplete
EVPN type-1 prefix: [1]:[EthTag]:[ESI]:[IPlen]:[VTEP-IP]:[Frag-id]
EVPN type-2 prefix: [2]:[EthTag]:[MAClen]:[MAC]:[IPlen]:[IP]
EVPN type-3 prefix: [3]:[EthTag]:[IPlen]:[OrigIP]
EVPN type-4 prefix: [4]:[ESI]:[IPlen]:[OrigIP]
EVPN type-5 prefix: [5]:[EthTag]:[IPlen]:[IP]

   Network          Next Hop            Metric LocPrf Weight Path
Route Distinguisher: 10.11.2.6:1
 *>i [5]:[0]:[32]:[1.2.3.8]
                    10.11.2.6                0    100      0 ?
                    RT:100:100 ET:8 Rmac:26:62:a6:76:df:59
 *>i [5]:[0]:[32]:[10.11.2.6]
                    10.11.2.6              100    100      0 ?
                    RT:100:100 ET:8 Rmac:26:62:a6:76:df:59
Route Distinguisher: 10.11.2.6:2
 *>i [3]:[0]:[32]:[10.11.2.6]
                    10.11.2.6                0    100      0 i
                    RT:100:100 ET:8
Route Distinguisher: 10.11.2.7:1
 *>  [5]:[0]:[32]:[4.4.4.4]
                    10.11.2.7                0         32768 ?
                    ET:8 RT:100:100 Rmac:3e:91:0f:11:05:84
 *>  [5]:[0]:[32]:[10.11.2.7]
                    10.11.2.7              100         32768 ?
                    ET:8 RT:100:100 Rmac:3e:91:0f:11:05:84
Route Distinguisher: 10.11.2.7:2
 *>  [3]:[0]:[32]:[10.11.2.7]
                    10.11.2.7                          32768 i
                    ET:8 RT:100:100
Route Distinguisher: 10.11.2.7:3
 *>  [3]:[0]:[32]:[10.11.2.7]
                    10.11.2.7                          32768 i
                    ET:8 RT:100:100

Displayed 7 out of 7 total prefixes

 test-vm4(config-router-af)# do sho run
Building configuration...

Current configuration:
!
frr version 10.4.0
frr defaults traditional
hostname test-vm4
vni 100
service integrated-vtysh-config
!
router bgp 100
 bgp router-id 10.11.2.7
 no bgp default ipv4-unicast
 neighbor 10.11.2.8 remote-as 100
 neighbor 10.11.2.8 description RR
 neighbor 10.11.2.8 update-source 10.11.2.7
 neighbor 10.11.2.8 capability extended-nexthop
 !
 address-family ipv4 unicast
  redistribute connected
 exit-address-family
 !
 address-family l2vpn evpn
  neighbor 10.11.2.8 activate
  advertise-all-vni
  vni 100
   route-target import 100:100
   route-target export 100:100
  exit-vni
  advertise ipv4 unicast
 exit-address-family
exit
!
end

 test-vm4(config-router-af)# do sho evpn vni
VNI        Type VxLAN IF              # MACs   # ARPs   # Remote VTEPs  Tenant VRF                           
100        L3   vxlan100              1        1        n/a             default  
       
 test-vm4(config-router-af)# do sho bgp l2vpn evpn neighbors 10.11.2.8 advertised-routes 
BGP table version is 0, local router ID is 10.11.2.7
Default local pref 100, local AS 100
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal
Origin codes: i - IGP, e - EGP, ? - incomplete

   Network          Next Hop            Metric LocPrf Weight Path
Route Distinguisher: 10.11.2.7:1
 *> [5]:[0]:[32]:[4.4.4.4]
                             0    100  32768 ?
 *> [5]:[0]:[32]:[10.11.2.7]
                           100    100  32768 ?
Route Distinguisher: 10.11.2.7:2
 *> [3]:[0]:[32]:[10.11.2.7]
                                  100  32768 i
Route Distinguisher: 10.11.2.7:3
 *> [3]:[0]:[32]:[10.11.2.7]
                                  100  32768 i

Total number of prefixes 4

   Network          Next Hop            Metric LocPrf Weight Path
Route Distinguisher: 10.11.2.7:1
 *> [5]:[0]:[32]:[4.4.4.4]
                             0    100  32768 ?
 *> [5]:[0]:[32]:[10.11.2.7]
                           100    100  32768 ?
Route Distinguisher: 10.11.2.7:2
 *> [3]:[0]:[32]:[10.11.2.7]
                                  100  32768 i
Route Distinguisher: 10.11.2.7:3
 *> [3]:[0]:[32]:[10.11.2.7]
                                  100  32768 i

Total number of prefixes 4

[Ilyaemma]

is it possible to get working evpn type-5 without bridge?

[Ilyaemma]

because I found that config should be like:

ip link add name br100 type bridge stp_state 0
ip link add vxlan100 type vxlan id 100 dstport 4789 local 10.11.2.7 nolearning

set up
 ip link set vxlan100 master br100



root@test-vm4:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet 4.4.4.4/32 scope global lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute 
       valid_lft forever preferred_lft forever
2: ens4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1460 qdisc mq state UP group default qlen 1000
    link/ether 42:01:0a:0b:02:07 brd ff:ff:ff:ff:ff:ff
    altname enp0s4
    inet 10.11.2.7/32 metric 100 scope global dynamic ens4
       valid_lft 2176sec preferred_lft 2176sec
    inet6 fe80::4001:aff:fe0b:207/64 scope link 
       valid_lft forever preferred_lft forever
7: vxlan100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br100 state UNKNOWN group default qlen 1000
    link/ether 7e:62:8e:6c:7e:88 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::7c62:8eff:fe6c:7e88/64 scope link 
       valid_lft forever preferred_lft forever
10: br100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 3e:91:0f:11:05:84 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::3c91:fff:fe11:584/64 scope link 
       valid_lft forever preferred_lft forever


root@test-vm4:~# ip r
default via 10.11.2.1 dev ens4 proto dhcp src 10.11.2.7 metric 100 
1.2.3.8 nhid 48 via 10.11.2.6 dev br100 proto bgp metric 20 onlink 
10.11.2.1 dev ens4 proto dhcp scope link src 10.11.2.7 metric 100 
169.254.169.254 via 10.11.2.1 dev ens4 proto dhcp src 10.11.2.7 metric 100 


frr version 10.4.0
frr defaults traditional
hostname test-vm4
log syslog informational
vni 100
service integrated-vtysh-config
!
ip prefix-list PL_evpn-5 seq 10 permit 0.0.0.0/0 ge 32
!
route-map RMAP permit 10
 match interface lo
 match ip address prefix-list PL_evpn-5
exit
!
router bgp 100
 bgp router-id 10.11.2.7
 no bgp default ipv4-unicast
 neighbor 10.11.2.8 remote-as 100
 neighbor 10.11.2.8 description RR
 neighbor 10.11.2.8 update-source 10.11.2.7
 neighbor 10.11.2.8 capability extended-nexthop
 !
 address-family ipv4 unicast
  redistribute connected route-map RMAP
 exit-address-family
 !
 address-family l2vpn evpn
  neighbor 10.11.2.8 activate
  advertise-all-vni
  vni 100
   route-target import 100:100
   route-target export 100:100
  exit-vni
  advertise ipv4 unicast
 exit-address-family
exit
!
end

test-vm4# show evpn vni 
VNI        Type VxLAN IF              # MACs   # ARPs   # Remote VTEPs  Tenant VRF                           
100        L3   vxlan100              1        1        n/a             default     



test-vm4# show bgp l2vpn evpn 
BGP table version is 7, local router ID is 10.11.2.7
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal
Origin codes: i - IGP, e - EGP, ? - incomplete
EVPN type-1 prefix: [1]:[EthTag]:[ESI]:[IPlen]:[VTEP-IP]:[Frag-id]
EVPN type-2 prefix: [2]:[EthTag]:[MAClen]:[MAC]:[IPlen]:[IP]
EVPN type-3 prefix: [3]:[EthTag]:[IPlen]:[OrigIP]
EVPN type-4 prefix: [4]:[ESI]:[IPlen]:[OrigIP]
EVPN type-5 prefix: [5]:[EthTag]:[IPlen]:[IP]

   Network          Next Hop            Metric LocPrf Weight Path
Route Distinguisher: 10.11.2.6:1
 *>i [5]:[0]:[32]:[1.2.3.8]
                    10.11.2.6                0    100      0 ?
                    RT:100:100 ET:8 Rmac:26:62:a6:76:df:59
Route Distinguisher: 10.11.2.6:2
 *>i [3]:[0]:[32]:[10.11.2.6]
                    10.11.2.6                0    100      0 i
                    RT:100:100 ET:8
Route Distinguisher: 10.11.2.7:1
 *>  [5]:[0]:[32]:[4.4.4.4]
                    10.11.2.7                0         32768 ?
                    ET:8 RT:100:100 Rmac:3e:91:0f:11:05:84
Route Distinguisher: 10.11.2.7:2
 *>  [3]:[0]:[32]:[10.11.2.7]
                    10.11.2.7                          32768 i
                    ET:8 RT:100:100
Route Distinguisher: 10.11.2.7:3
 *>  [3]:[0]:[32]:[10.11.2.7]
                    10.11.2.7                          32768 i
                    ET:8 RT:100:100

Displayed 5 out of 5 total prefixes

[kniteli]

I think the vni 100 section in this address-family config is meant for l2vnis

 address-family l2vpn evpn
  neighbor 10.11.2.8 activate
  advertise-all-vni
  vni 100
   route-target import 100:100
   route-target export 100:100
  exit-vni
  advertise ipv4 unicast
 exit-address-family

Here's my config for where I'm importing and exporting routes to the default vrf. This vtep terminates and routes all my wireguard and vpn traffic so it's l3 only

 address-family l2vpn evpn
  neighbor EVPN activate
  advertise-all-vni
  advertise ipv4 unicast
  advertise ipv6 unicast
  rd 10.0.0.96:10
  route-target import 65000:10
  route-target import 65000:201
  route-target export 65000:10
 exit-address-family

For my standard vteps with l2vnis it looks like this:

 address-family l2vpn evpn
  neighbor EVPN activate
  advertise-all-vni
  vni 160010
   rd 10.0.0.50:1601
   route-target import 65000:1601
   route-target export 65000:1601
  exit-vni
  ! ...and so on for each l2vni on this vtep
 exit-address-family

For you I would suggest trying this first (remove the vni 100 directive and just import/export the RTs directly):

 address-family l2vpn evpn
  neighbor 10.11.2.8 activate
  advertise-all-vni
  route-target import 100:100
  route-target export 100:100
  advertise ipv4 unicast
 exit-address-family