Wired Intelligent Edge

 View Only

  • 1.  CX 6300 - not routing VXLAN type-5

    Posted Jul 27, 2025 06:56 AM

    Hi all,

    i have setup a lab with n°2 CX 8325 in VSX for the HQ side and one CX 6300 on the branch side.
    vxlan underaly is BGP.
    The setup seems to be correct. I have created the vni 10, mapped to vlan 10, all works fine, PC in HQ can see the PC in the branch.
    I want to redistribute networks using vxlan type-5. On the HQ side there is the vlan 30 with address 10.0.30.0/24 and one PC with address 10.0.30.10, that can ping the gw 10.0.30.1 (also .2 and .3), in the branch side there is the vlan 20 with address 10.0.20.0/24 and a PC with address 10.0.20.10 that can ping his default gateway 10.0.20.1.
    All the routes seem to be correct but both PC can't ping each others. 


    After a lot of troubleshooting i find out that the ping from PC 10.0.20.10 reach the PC 10.0.30.10, the replay come to the VSX, the packet is incapsulated with the l3 VNI 10000,  the CX 6300 reaceive the packet, that seem to be correct, but is not sending the packet out the the interface where the PC 10.0.20.10 is connected.


    The capture in the image below is taken from the CX 6300 for the traffic crossing the interfaces 1/1/49 and 1/1/3. So the Ping request from the PC 10.0.20.10 is shown two times, one incoming on the interface 1/1/3 and then exiting from the 1/1/49. The reply is coming on the 1/1/49 port (as like the request from the 10.0.30.10), but is seems that is not decapsulated.

    All the configuration are in attachment with the capture.

    Any clue about why the packet on the 6300 is not routed/decapsulated? 

    Attachment(s)

    txt
    6300.txt   16 KB 1 version
    txt
    8525-VSX1.txt   14 KB 1 version
    txt
    8525-VSX2.txt   15 KB 1 version


  • 2.  RE: CX 6300 - not routing VXLAN type-5
    Best Answer

    Posted Jul 27, 2025 08:49 AM

    First quick check on the configuration shows that the 6300 switch doesn't have the virtual-mac command present. Each (logical) VTEP needs to have an unique virtual-mac assigned in order to be able to route packets. Can you try to add that config?



    ------------------------------
    Willem Bargeman
    Systems Engineer Aruba
    ACEX #125
    ------------------------------



  • 3.  RE: CX 6300 - not routing VXLAN type-5

    Posted Jul 27, 2025 10:56 AM
    The 6300 is a standalone device, does it need to have a virtual mac address? I knew that the vsx couples need it. I'll try Monday.

    Christian Brasolin 




    Original Message


  • 4.  RE: CX 6300 - not routing VXLAN type-5

    Posted Jul 28, 2025 02:27 AM

    Yes, it's still needed. The virtual-mac command isn't related to the VSX system MAC. For VSX setups, the VSX system MAC and virtual-mac will be the same in most cases but it it not required.

    The virtual-mac is used as VTEP router MAC when routing between VLANs/VNIs in the overlay. CX is using symmetric IRB and the mac for the L3VNI will be the virtual-mac. 

    See below information from the documentation.

    For EVPN symmetric IRB to work, virtual-mac must be configured and it must be unique for all the VTEPs involved in EVPN except for VSX nodes. In case of VSX VTEP (logical VTEP), the same virtual-mac must be configured in both the VSX peers. For ease of troubleshooting, it is also recommended to configure the same value of VSX system MAC in VSX VTEP (logical VTEP) peers.



    ------------------------------
    Willem Bargeman
    Systems Engineer Aruba
    ACEX #125
    ------------------------------

    Original Message


  • 5.  RE: CX 6300 - not routing VXLAN type-5

    Posted Jul 28, 2025 02:36 AM

    Hi Willem,

     thank you for the explanation, indeed it was the problem. i configured the virtual-mac and now ping works:

    6300# sh run | inc virtual
    virtual-mac 02:00:00:00:02:00

    Thank you!  I owe you a beer. 
    I used all the free AIs available for check the configuration, no one has been usefull.

    Christian Brasolin


    Original Message


Related Content