L3-VXLAN + EVPN Symmetric IRB over MC-LAG

With the symmetric IRB routing model, the VTEPs do routing and bridging on both the ingress and egress sides of the VXLAN tunnel. As a result, VTEPs can do inter-subnet routing for the same virtual routing and forwarding (VRF) instance mapped to the same VNI in both directions. We implement this model for EVPN Type 2 routes the same way as for EVPN Type 5 routes. These VTEPs use dedicated Layer 3 traffic VNI in both directions for each tenant VRF instance.

configuration

Configuration

Configure VXLAN and EVPN

Set up VXLAN tunnel interfaces on the participating switches and routers to facilitate the creation of VXLAN overlays.
Enable EVPN on these devices to handle the MAC and IP reachability information distribution.

VXLAN VRF Mapping

Configure VRF-to-VNI (VXLAN Network Identifier) mapping. Each VRF in the Data Center will be mapped to a specific VNI to extend Layer 3 connectivity.

BGP EVPN Configuration

Configure BGP to run EVPN for the exchange of MAC and IP reachability information between Data Center sites.
Establish BGP peering between the participating switches and routers for the control plane establishment .

Symmetric IRB Configuration:

Set up the Layer 3 gateway IP address on the leaf switches for each L3 VNI. Ensure that this gateway IP address is consistent across all the interconnected data center sites.

Routing Configuration:

Set up eBGP routing protocols over all the Data Center fabric switches to ensure the routing information is exchanged between the interconnected data center sites.
This routing information will be used to direct traffic between the sites through the symmetric IRB gateway.

Scenarios for L3 VXLAN Symmetric Model

Network Operators looking for multi-tenancy for their VM applications in a data center fabric.
Advantage on scalability and efficiency of the Data center Fabric .

YAML Template

Inventory:
  SSpines: 0
  Spines: 2
  Leafs: 4
  Tors: 0
Connectivity:
  SSpine: []
  Spine:
    - switchId: 1
      switchName: "Spine-1"
      ipAddress: "x.x.x.11"
      ASN: 2001
      Credentials:
        user: "admin"
        password: "admin"
      mclag:
      Links:
        - link: "S1_Ethernet0 | L1_Ethernet48"
          staticLink: true
          properties:
        - link: "S1_Ethernet4 | L2_Ethernet48"
          staticLink: true
          properties:
        - link: "S1_Ethernet8 | L3_Ethernet48"
          staticLink: true
          properties:
        - link: "S1_Ethernet12 | L4_Ethernet48"
          staticLink: true
          properties:
    - switchId: 2
      switchName: "Spine-2"
      ipAddress: "x.x.x.12"
      ASN: 2002
      Credentials:
        user: "admin"
        password: "admin"
      mclag:
      Links:
        - link: "S2_Ethernet0 | L1_Ethernet52"
          staticLink: true
          properties:
        - link: "S2_Ethernet4 | L2_Ethernet52"
          staticLink: true
          properties:
        - link: "S2_Ethernet8 | L3_Ethernet52"
          staticLink: true
          properties:
        - link: "S2_Ethernet12 | L4_Ethernet52"
          staticLink: true
          properties:
  Leaf:
    - switchId: 1
      switchName: "Leaf-1"
      ipAddress: "x.x.x.13"
      ASN: 1001
      Credentials:
        user: "admin"
        password: "admin"
      mclag:
        enabled: true
        peer: "L2"
        keepalive_vlan: 10
      Links:
        - link: "L1_Ethernet48 | S1_Ethernet0"
          staticLink: true
          properties:
        - link: "L1_Ethernet52 | S2_Ethernet0"
          staticLink: true
          properties:
        - link: "L1_Ethernet56 |  L2_Ethernet56"
          staticLink: true
          properties:
            mode: "MC-LAG"
        - link: "L1_Ethernet0 |  H1_Ethernet0"
          staticLink: true
          properties:
            mode: "L2-Trunk"
            vlan: 200
            mc_po_group: 200
            vrf: 1
        - link: "L1_Ethernet4 |  H2_Ethernet0"
          staticLink: true
          properties:
            mode: "L2-Trunk"
            vlan: 201
            mc_po_group: 201
            vrf: 1
    - switchId: 2
      switchName: "Leaf-2"
      ipAddress: "x.x.x.14"
      ASN: 1001
      Credentials:
        user: "admin"
        password: "admin"
      mclag:
        enabled: true
        peer: "L1"
        keepalive_vlan: 10
      Links:
        - link: "L2_Ethernet48 | S1_Ethernet4"
          staticLink: true
          properties:
        - link: "L2_Ethernet52 | S2_Ethernet4"
          staticLink: true
          properties:
        - link: "L2_Ethernet56 | L1_Ethernet56"
          staticLink: true
          properties:
            mode: "MC-LAG"
        - link: "L2_Ethernet0 |  H1_Ethernet1"
          staticLink: true
          properties:
            mode: "L2-Trunk"
            vlan: 200
            mc_po_group: 200
            vrf: 1
        - link: "L2_Ethernet4 |  H2_Ethernet1"
          staticLink: true
          properties:
            mode: "L2-Trunk"
            vlan: 201
            mc_po_group: 201
            vrf: 1
    - switchId: 3
      switchName: "Leaf-3"
      ipAddress: "x.x.x.15"
      ASN: 1002
      Credentials:
        user: "admin"
        password: "YourPaSsWoRd"
      mclag:
        enabled: true
        peer: "L4"
        keepalive_vlan: 10
      Links:
        - link: "L3_Ethernet48 | S1_Ethernet8"
          staticLink: true
          properties:
        - link: "L3_Ethernet52 | S2_Ethernet8"
          staticLink: true
          properties:
        - link: "L3_Ethernet56 | L4_Ethernet56"
          staticLink: true
          properties:
            mode: "MC-LAG"
        - link: "L3_Ethernet0 |  H3_Ethernet0"
          staticLink: true
          properties:
            mode: "L2-Trunk"
            vlan: 200
            mc_po_group: 200
            vrf: 1
        - link: "L3_Ethernet4 |  H4_Ethernet0"
          staticLink: true
          properties:
            mode: "L2-Trunk"
            vlan: 201
            mc_po_group: 201
            vrf: 1
    - switchId: 4
      switchName: "Leaf-4"
      ipAddress: "x.x.x.16"
      ASN: 1002
      Credentials:
        user: "admin"
        password: "YourPaSsWoRd"
      mclag:
        enabled: true
        peer: "L3"
        keepalive_vlan: 10
      Links:
        - link: "L4_Ethernet48 | S1_Ethernet12"
          staticLink: true
          properties:
        - link: "L4_Ethernet52 | S2_Ethernet12"
          staticLink: true
          properties:
        - link: "L4_Ethernet56 | L3_Ethernet56"
          staticLink: true
          properties:
            mode: "MC-LAG"
        - link: "L4_Ethernet0 |  H3_Ethernet1"
          staticLink: true
          properties:
            mode: "L2-Trunk"
            vlan: 200
            mc_po_group: 200
            vrf: 1
        - link: "L4_Ethernet4 |  H4_Ethernet1"
          staticLink: true
          properties:
            mode: "L2-Trunk"
            vlan: 201
            mc_po_group: 201
            vrf: 1
  Tor: []
BGP:
  BGP_U: false
  ND_RA: 30
PhysicalIfCfg:
  FEC: "Off"
  MTU: 9000
  AdminStatus: "Up"
ASN:
  SSpine: "10000-20000"
  Spine: "21000-50000"
  Leaf: "51000-60000"
  Tor: "61000-70000"
IPv4Pool:
  Loopback: "10.10.10.0/24"
  LeafSpine: "40.0.0.0/24"
  LeafTor: "39.0.0.0/24"
  Host: "49.0.0.0/24"
IPv6Pool:
  LeafSpine:
  LeafTor:
  Host:
NTP:
  server: "x.x.x.10"
  timezone: "Asia/Kolkata"
SYSLOG:
  server: "x.x.x.10"
SNMP:
  trapserver: "x.x.x.10"
Parameters:
  vlan: "200-205"
  vni: "20000-20005"
  anycast_gateway: "x.x.x.0/23"
  anycast_mac: "00:11:22:33:44:55"
  hosts_per_vlan: 10
  routing_symmetric: true
  irb_vlan: "300-305"
  irb_vni: "30000-30005"
  sag: true

Config Applied and Validated

configuration

Applied Configuration on Switches

Leaf1Leaf2Leaf3Leaf4Spine1Spine2

configure terminal
router-id 10.10.10.3
ntp add 100.100.10.10
clock timezone Asia/Kolkata
syslog add 100.100.10.10
snmp-server trap modify 2 100.100.10.10 port 161 vrf None community Public
hostname Leaf-1
ip protocol bgp route-map RM_SET_SRC
!
route-map FMCLI_IPV6_NH_GLOBAL permit 1
on-match next
set ipv6 next-hop prefer-global
!
route-map RM_SET_SRC permit 10
set src 10.10.10.3
!
vlan 10
!
vlan 200
vrf member Vrf1
!
vlan 201
vrf member Vrf1
!
vlan 300
vrf member Vrf1
!
vxlan vtep
loopback-ip 10.10.10.2
evpn_nvo nvo
map vlan 200 vni 20000
map vlan 201 vni 20001
map vlan 300 vni 30000
!
vrf context Vrf1
vni 30000
!
interface port-channel 200
switchport mode trunk
switchport trunk allowed vlan add 200
mtu 9000
!
interface port-channel 201
switchport mode trunk
switchport trunk allowed vlan add 201
mtu 9000
!
interface port-channel 999
switchport mode trunk
switchport trunk allowed vlan add 10
switchport trunk allowed vlan add 200
switchport trunk allowed vlan add 201
mtu 9000
!
interface ethernet Ethernet0
channel-group 200 mode active
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet4
channel-group 201 mode active
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet48
ip address 40.0.0.1/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet52
ip address 40.0.0.9/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet56
channel-group 999 mode active
mtu 9000
forward-error-correction none
!
interface vlan 10
ip address 192.168.0.0/31
!
interface vlan 200
anycast-gateway 100.10.0.1/27
!
interface vlan 201
anycast-gateway 100.10.0.33/27
!
interface loopback 1
ip address 10.10.10.3/32
!
interface loopback 2
ip address 10.10.10.2/32
!
router bgp 1001
neighbor 40.0.0.0 remote-as 2001
neighbor 40.0.0.8 remote-as 2002
neighbor 40.0.0.0 capability extended-nexthop
neighbor 40.0.0.8 capability extended-nexthop
bgp bestpath as-path multipath-relax
no bgp ebgp-requires-policy
  vrf Vrf1
address-family ipv4 unicast
  neighbor 40.0.0.0 allowas-in 1
  neighbor 40.0.0.8 allowas-in 1
  network 40.0.0.0/31
  network 40.0.0.8/31
  redistribute connected
  redistribute static
!
address-family ipv6 unicast
  redistribute connected
  redistribute static
!
address-family l2vpn evpn
neighbor 40.0.0.0 activate
neighbor 40.0.0.8 activate
neighbor 40.0.0.0 allowas-in 1
neighbor 40.0.0.8 allowas-in 1
advertise-all-vni
!
mlag domain-id 1
peer-address 192.168.0.1
peer-link port-channel 999
src-address 192.168.0.0
member port-channel 200
member port-channel 201
local-interface vlan 10
!
sag
anycast-gateway-mac 00:11:22:33:44:55
enable ip
enable ipv6
!

configure terminal
router-id 10.10.10.4
ntp add 100.100.10.10
clock timezone Asia/Kolkata
syslog add 100.100.10.10
snmp-server trap modify 2 100.100.10.10 port 161 vrf None community Public
hostname Leaf-2
ip protocol bgp route-map RM_SET_SRC
!
route-map FMCLI_IPV6_NH_GLOBAL permit 1
on-match next
set ipv6 next-hop prefer-global
!
route-map RM_SET_SRC permit 10
set src 10.10.10.4
!
vlan 10
!
vlan 200
vrf member Vrf1
!
vlan 201
vrf member Vrf1
!
vlan 300
vrf member Vrf1
!
vxlan vtep
loopback-ip 10.10.10.2
evpn_nvo nvo
map vlan 200 vni 20000
map vlan 201 vni 20001
map vlan 300 vni 30000
!
vrf context Vrf1
vni 30000
!
interface port-channel 200
switchport mode trunk
switchport trunk allowed vlan add 200
mtu 9000
!
interface port-channel 201
switchport mode trunk
switchport trunk allowed vlan add 201
mtu 9000
!
interface port-channel 999
switchport mode trunk
switchport trunk allowed vlan add 10
switchport trunk allowed vlan add 200
switchport trunk allowed vlan add 201
mtu 9000
!
interface ethernet Ethernet0
channel-group 200 mode active
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet4
channel-group 201 mode active
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet48
ip address 40.0.0.3/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet52
ip address 40.0.0.11/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet56
channel-group 999 mode active
mtu 9000
forward-error-correction none
!
interface vlan 10
ip address 192.168.0.1/31
!
interface vlan 200
anycast-gateway 100.10.0.1/27
!
interface vlan 201
anycast-gateway 100.10.0.33/27
!
interface loopback 1
ip address 10.10.10.4/32
!
interface loopback 2
ip address 10.10.10.2/32
!
router bgp 1001
neighbor 40.0.0.10 remote-as 2002
neighbor 40.0.0.2 remote-as 2001
neighbor 40.0.0.10 capability extended-nexthop
neighbor 40.0.0.2 capability extended-nexthop
bgp bestpath as-path multipath-relax
no bgp ebgp-requires-policy
  vrf Vrf1
address-family ipv4 unicast
  neighbor 40.0.0.10 allowas-in 1
  neighbor 40.0.0.2 allowas-in 1
  network 40.0.0.10/31
  network 40.0.0.2/31
  redistribute connected
  redistribute static
!
address-family ipv6 unicast
  redistribute connected
  redistribute static
!
address-family l2vpn evpn
neighbor 40.0.0.10 activate
neighbor 40.0.0.2 activate
neighbor 40.0.0.10 allowas-in 1
neighbor 40.0.0.2 allowas-in 1
advertise-all-vni
!
mlag domain-id 1
peer-address 192.168.0.0
peer-link port-channel 999
src-address 192.168.0.1
member port-channel 200
member port-channel 201
local-interface vlan 10
!
sag
anycast-gateway-mac 00:11:22:33:44:55
enable ip
enable ipv6
!

configure terminal
router-id 10.10.10.6
ntp add 100.100.10.10
clock timezone Asia/Kolkata
syslog add 100.100.10.10
snmp-server trap modify 2 100.100.10.10 port 161 vrf None community Public
hostname Leaf-3
ip protocol bgp route-map RM_SET_SRC
!
route-map FMCLI_IPV6_NH_GLOBAL permit 1
on-match next
set ipv6 next-hop prefer-global
!
route-map RM_SET_SRC permit 10
set src 10.10.10.6
!
vlan 10
!
vlan 200
vrf member Vrf1
!
vlan 201
vrf member Vrf1
!
vlan 300
vrf member Vrf1
!
vxlan vtep
loopback-ip 10.10.10.5
evpn_nvo nvo
map vlan 200 vni 20000
map vlan 201 vni 20001
map vlan 300 vni 30000
!
vrf context Vrf1
vni 30000
!
interface port-channel 200
switchport mode trunk
switchport trunk allowed vlan add 200
mtu 9000
!
interface port-channel 201
switchport mode trunk
switchport trunk allowed vlan add 201
mtu 9000
!
interface port-channel 999
switchport mode trunk
switchport trunk allowed vlan add 10
switchport trunk allowed vlan add 200
switchport trunk allowed vlan add 201
mtu 9000
!
interface ethernet Ethernet0
channel-group 200 mode active
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet4
channel-group 201 mode active
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet48
ip address 40.0.0.5/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet52
ip address 40.0.0.13/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet56
channel-group 999 mode active
mtu 9000
forward-error-correction none
!
interface vlan 10
ip address 192.168.0.2/31
!
interface vlan 200
anycast-gateway 100.10.0.1/27
!
interface vlan 201
anycast-gateway 100.10.0.33/27
!
interface loopback 1
ip address 10.10.10.6/32
!
interface loopback 2
ip address 10.10.10.5/32
!
router bgp 1002
neighbor 40.0.0.12 remote-as 2002
neighbor 40.0.0.4 remote-as 2001
neighbor 40.0.0.12 capability extended-nexthop
neighbor 40.0.0.4 capability extended-nexthop
bgp bestpath as-path multipath-relax
no bgp ebgp-requires-policy
  vrf Vrf1
address-family ipv4 unicast
  neighbor 40.0.0.12 allowas-in 1
  neighbor 40.0.0.4 allowas-in 1
  network 40.0.0.12/31
  network 40.0.0.4/31
  redistribute connected
  redistribute static
!
address-family ipv6 unicast
  redistribute connected
  redistribute static
!
address-family l2vpn evpn
neighbor 40.0.0.12 activate
neighbor 40.0.0.4 activate
neighbor 40.0.0.12 allowas-in 1
neighbor 40.0.0.4 allowas-in 1
advertise-all-vni
!
mlag domain-id 1
peer-address 192.168.0.3
peer-link port-channel 999
src-address 192.168.0.2
member port-channel 200
member port-channel 201
local-interface vlan 10
!
sag
anycast-gateway-mac 00:11:22:33:44:55
enable ip
enable ipv6
!

configure terminal
router-id 10.10.10.7
ntp add 100.100.10.10
clock timezone Asia/Kolkata
syslog add 100.100.10.10
snmp-server trap modify 2 100.100.10.10 port 161 vrf None community Public
hostname Leaf-4
ip protocol bgp route-map RM_SET_SRC
!
route-map FMCLI_IPV6_NH_GLOBAL permit 1
on-match next
set ipv6 next-hop prefer-global
!
route-map RM_SET_SRC permit 10
set src 10.10.10.7
!
vlan 10
!
vlan 200
vrf member Vrf1
!
vlan 201
vrf member Vrf1
!
vlan 300
vrf member Vrf1
!
vxlan vtep
loopback-ip 10.10.10.5
evpn_nvo nvo
map vlan 200 vni 20000
map vlan 201 vni 20001
map vlan 300 vni 30000
!
vrf context Vrf1
vni 30000
!
interface port-channel 200
switchport mode trunk
switchport trunk allowed vlan add 200
mtu 9000
!
interface port-channel 201
switchport mode trunk
switchport trunk allowed vlan add 201
mtu 9000
!
interface port-channel 999
switchport mode trunk
switchport trunk allowed vlan add 10
switchport trunk allowed vlan add 200
switchport trunk allowed vlan add 201
mtu 9000
!
interface ethernet Ethernet0
channel-group 200 mode active
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet4
channel-group 201 mode active
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet48
ip address 40.0.0.7/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet52
ip address 40.0.0.15/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet56
channel-group 999 mode active
mtu 9000
forward-error-correction none
!
interface vlan 10
ip address 192.168.0.3/31
!
interface vlan 200
anycast-gateway 100.10.0.1/27
!
interface vlan 201
anycast-gateway 100.10.0.33/27
!
interface loopback 1
ip address 10.10.10.7/32
!
interface loopback 2
ip address 10.10.10.5/32
!
router bgp 1002
neighbor 40.0.0.14 remote-as 2002
neighbor 40.0.0.6 remote-as 2001
neighbor 40.0.0.14 capability extended-nexthop
neighbor 40.0.0.6 capability extended-nexthop
bgp bestpath as-path multipath-relax
no bgp ebgp-requires-policy
  vrf Vrf1
address-family ipv4 unicast
  neighbor 40.0.0.14 allowas-in 1
  neighbor 40.0.0.6 allowas-in 1
  network 40.0.0.14/31
  network 40.0.0.6/31
  redistribute connected
  redistribute static
!
address-family ipv6 unicast
  redistribute connected
  redistribute static
!
address-family l2vpn evpn
neighbor 40.0.0.14 activate
neighbor 40.0.0.6 activate
neighbor 40.0.0.14 allowas-in 1
neighbor 40.0.0.6 allowas-in 1
advertise-all-vni
!
mlag domain-id 1
peer-address 192.168.0.2
peer-link port-channel 999
src-address 192.168.0.3
member port-channel 200
member port-channel 201
local-interface vlan 10
!
sag
anycast-gateway-mac 00:11:22:33:44:55
enable ip
enable ipv6
!

configure terminal
router-id 10.10.10.0
ntp add 100.100.10.10
clock timezone Asia/Kolkata
syslog add 100.100.10.10
snmp-server trap modify 2 100.100.10.10 port 161 vrf None community Public
hostname Spine-1
ip protocol bgp route-map RM_SET_SRC
!
route-map FMCLI_IPV6_NH_GLOBAL permit 1
on-match next
set ipv6 next-hop prefer-global
!
route-map RM_SET_SRC permit 10
set src 10.10.10.0
!
interface ethernet Ethernet0
ip address 40.0.0.0/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet12
ip address 40.0.0.6/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet4
ip address 40.0.0.2/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet8
ip address 40.0.0.4/31
mtu 9000
forward-error-correction none
!
interface loopback 1
ip address 10.10.10.0/32
!
router bgp 2001
neighbor 40.0.0.1 remote-as 1001
neighbor 40.0.0.3 remote-as 1001
neighbor 40.0.0.5 remote-as 1002
neighbor 40.0.0.7 remote-as 1002
neighbor 40.0.0.1 capability extended-nexthop
neighbor 40.0.0.3 capability extended-nexthop
neighbor 40.0.0.5 capability extended-nexthop
neighbor 40.0.0.7 capability extended-nexthop
bgp bestpath as-path multipath-relax
no bgp ebgp-requires-policy
address-family ipv4 unicast
  neighbor 40.0.0.1 allowas-in 1
  neighbor 40.0.0.3 allowas-in 1
  neighbor 40.0.0.5 allowas-in 1
  neighbor 40.0.0.7 allowas-in 1
  network 40.0.0.0/31
  network 40.0.0.2/31
  network 40.0.0.4/31
  network 40.0.0.6/31
  redistribute connected
  redistribute static
!
address-family ipv6 unicast
  redistribute connected
  redistribute static
!
address-family l2vpn evpn
neighbor 40.0.0.1 activate
neighbor 40.0.0.3 activate
neighbor 40.0.0.5 activate
neighbor 40.0.0.7 activate
neighbor 40.0.0.1 allowas-in 1
neighbor 40.0.0.3 allowas-in 1
neighbor 40.0.0.5 allowas-in 1
neighbor 40.0.0.7 allowas-in 1
!

configure terminal
router-id 10.10.10.1
ntp add 100.100.10.10
clock timezone Asia/Kolkata
syslog add 100.100.10.10
snmp-server trap modify 2 100.100.10.10 port 161 vrf None community Public
hostname Spine-2
ip protocol bgp route-map RM_SET_SRC
!
route-map FMCLI_IPV6_NH_GLOBAL permit 1
on-match next
set ipv6 next-hop prefer-global
!
route-map RM_SET_SRC permit 10
set src 10.10.10.1
!
interface ethernet Ethernet0
ip address 40.0.0.8/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet12
ip address 40.0.0.14/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet4
ip address 40.0.0.10/31
mtu 9000
forward-error-correction none
!
interface ethernet Ethernet8
ip address 40.0.0.12/31
mtu 9000
forward-error-correction none
!
interface loopback 1
ip address 10.10.10.1/32
!
router bgp 2002
neighbor 40.0.0.11 remote-as 1001
neighbor 40.0.0.13 remote-as 1002
neighbor 40.0.0.15 remote-as 1002
neighbor 40.0.0.9 remote-as 1001
neighbor 40.0.0.11 capability extended-nexthop
neighbor 40.0.0.13 capability extended-nexthop
neighbor 40.0.0.15 capability extended-nexthop
neighbor 40.0.0.9 capability extended-nexthop
bgp bestpath as-path multipath-relax
no bgp ebgp-requires-policy
address-family ipv4 unicast
  neighbor 40.0.0.11 allowas-in 1
  neighbor 40.0.0.13 allowas-in 1
  neighbor 40.0.0.15 allowas-in 1
  neighbor 40.0.0.9 allowas-in 1
  network 40.0.0.10/31
  network 40.0.0.12/31
  network 40.0.0.14/31
  network 40.0.0.8/31
  redistribute connected
  redistribute static
!
address-family ipv6 unicast
  redistribute connected
  redistribute static
!
address-family l2vpn evpn
neighbor 40.0.0.11 activate
neighbor 40.0.0.13 activate
neighbor 40.0.0.15 activate
neighbor 40.0.0.9 activate
neighbor 40.0.0.11 allowas-in 1
neighbor 40.0.0.13 allowas-in 1
neighbor 40.0.0.15 allowas-in 1
neighbor 40.0.0.9 allowas-in 1
!