Configure VXLAN for EVPN

Overview

This guide explains how to configure VXLAN tunnels for tenant traffic encapsulation in F5 BIG-IP Next for Kubernetes (BNK). VXLAN tunnels carry tenant traffic between VTEPs, and EVPN provides the control plane for dynamic discovery of remote endpoints.

Before you begin

  • You have created a Vrf resource for the tenant (see Configure VRF isolation.

  • You have created an underlay VLAN CR for the VXLAN tunnel endpoint.

  • Your fabric supports BGP EVPN and VXLAN encapsulation.

Procedure

  1. Create a VXLAN resource. Create a VXLAN resource for the tenant:

    apiVersion: k8s.f5net.com/v1
kind: Vxlan
metadata:
  name: vni100
spec:
  evpn: true
  mtu: 1450
  port: 4789
  vni: 100
  localIpSubnet: "100.63.0.0"
  localIpPrefixlen: 18 
  vrf: red

  2. Verify the VXLAN tunnel.

    sh nvo vxlan tunnel
sh bgp l2vpn evpn