1. External – Layer3 Use Cases

2. Advertise BD Subnet Through OSPF Step 1: Configure Vlan Domain. apic1(config)# vlan-domain dom400 apic1(config-vlan)# vlan 400-600 apic1(config-vlan)# exit Step 2: Configure Tenant VRF apic1(config)# tenant Nubecentro apic1(config-tenant)# vrf context vrf400 apic1(config-tenant-vrf)# contract enforce apic1(config-tenant-vrf)# exit Step 3: Configure Tenant BD and mark gateway IP as “public” for route export. apic1(config-tenant)# bridge-domain bd400 apic1(config-tenant-bd)# vrf member vrf400 apic1(config-tenant-bd)# exit apic1(config-tenant)# interface bridge-domain bd400 apic1(config-tenant-interface)# ip address 78.10.10.1/24 scope public apic1(config-tenant-interface)# exit

3. Advertise BD Subnet Through OSPF (cont.) Step 4: apic1(config-tenant)# application web apic1(config-tenant-app)# epg appepg400 apic1(config-tenant-app-epg)# bridge-domain member bd400 apic1(config-tenant-app-epg)# contract provider web_contract Step 5: Configure VRF on Leaf apic1(config)# leaf 101 apic1(config-leaf)# vrf context tenant Nubecentro vrf vrf400 Step 6: Configure Route Map apic1(config-leaf-vrf)# route-map map400 apic1(config-leaf-vrf-route-map)# match bridge-domain bd400 apic1(config-leaf-vrf-route-map)# exit apic1(config-leaf-vrf)# exit Step 7: Configure OSPF area and add route-map apic1(config-leaf)# router ospf default apic1(config-leaf-ospf)# vrf member tenant Nubecentro vrf vrf400 apic1(config-leaf-ospf-vrf)# area 0.0.0.1 route-map map400 out apic1(config-leaf-ospf-vrf)# exit apic1(config-leaf-ospf)# exit

4. Advertise BD Subnet Through OSPF (cont.) Step 8: Assign VRF to Interface(Sub-Interface in this example) and enable OSPF Area apic1(config-leaf)# interface ethernet 1/20 apic1(config-leaf-if)# no switchport apic1(config-leaf-if)# vlan-domain member dom400 apic1(config-leaf-if)# exit apic1(config-leaf)# interface ethernet 1/20.500 apic1(config-leaf-if)# vrf member tenant Nubecentro vrf vrf400 apic1(config-leaf-if)# ip address 78.10.1.1/24 apic1(config-leaf-if)# ip router ospf default area 0.0.0.1 Step 9: Configure External-L3 EPG Policy. apic1(config)# tenant Nubecentro apic1(config-tenant)# external-l3 epg l3epg400 apic1(config-tenant-l3ext-epg)# vrf member vrf400 apic1(config-tenant-l3ext-epg)# match ip 159.10.1.0/24 apic1(config-tenant-l3ext-epg)# contract consumer web_contract apic1(config-tenant-l3ext-epg)# exit apic1(config-tenant)#exit

5. Advertise BD Subnet Through OSPF (cont.) Step 10: Deploy the EPG on the Leaf Switch. apic1(config)# leaf 101 apic1(config-leaf)# vrf context tenant Nubecentro vrf vrf400 apic1(config-leaf-vrf)# external-l3 epg l3epg400

6. Transit Between BGP And EIGRP Configure Vlan Domain. apic1(config)# vlan-domain dom400 apic1(config-vlan)# vlan 400-600 apic1(config-vlan)# exit Configure Tenant VRF apic1(config)# tenant Nubecentro apic1(config-tenant)# vrf context vrf400 apic1(config-tenant-vrf)# contract enforce apic1(config-tenant-vrf)# exit Create External-l3 EPG to match subnets corresponding to Transit Site 1 apic1(config-tenant)# external-l3 epg site1_epg apic1(config-tenant-l3ext-epg)# vrf member vrf400 apic1(config-tenant-l3ext-epg)# match ip 210.1.1.0/24 apic1(config-tenant-l3ext-epg)# contract provider transit_site1_site2 apic1(config-tenant-l3ext-epg)# exit

7. Transit Between BGP And EIGRP Create External-l3 EPG to match subnets corresponding to Transit Site 2 apic1(config-tenant)# external-l3 epg site2_epg apic1(config-tenant-l3ext-epg)# vrf member vrf400 apic1(config-tenant-l3ext-epg)# match ip 210.1.1.0/24 apic1(config-tenant-l3ext-epg)# no match ip 201.1.1.0/24 apic1(config-tenant-l3ext-epg)# match ip 211.1.1.0/24 apic1(config-tenant-l3ext-epg)# contract consumer transit_site1_site2

8. Transit Between BGP And EIGRP (BGP Site1) apic1(config)# leaf 102 Deploy VRF on Leaf apic1(config-leaf)# vrf context tenant Nubecentro vrf vrf200 Deploy External-l3 EPG for site1 on Leaf. apic1(config-leaf-vrf)# external-l3 epg site1_epg apic1(config-leaf-vrf)#route-map site1 Create RouteMap to represent site2’s prefix. apic1(config-leaf-vrf-route-map)# ip prefix-list p1 permit 211.1.1.0/24 apic1(config-leaf-vrf-route-map)# match prefix-list pl1 apic1(config-leaf-vrf-route-map-match)# set community regular 100:1 replace apic1(config-leaf-vrf-route-map-match)# exit apic1(config-leaf-vrf-route-map)# exit Create Static Route for BGP connectivity. apic1(config-leaf-vrf)# ip route 211.1.1.0/24 80.1.1.2 apic1(config-leaf-vrf)# exit

9. Transit Between BGP And EIGRP (BGP Site1) (cont.) Configure Main Interface/L3 Port for BGP connectivity. apic1(config-leaf)# interface ethernet 1/12 apic1(config-leaf-if)# no switchport apic1(config-leaf-if)# vlan-domain member dom400 apic1(config-leaf-if)# vrf member tenant Nubecentro vrf vrf400 apic1(config-leaf-if)# ip address 80.1.1.1/24 apic1(config-leaf-if)# exit Configure EBGP Session to go out of Eth 1/14. apic1(config-leaf)#router bgp 100 apic1(config-bgp)# vrf member tenant Nubecentro vrf vrf400 apic1(config-leaf-bgp-vrf)# neighbor 79.10.1.2 apic1(config-leaf-bgp-vrf-neighbor)# remote-as 100 apic1(config-leaf-bgp-vrf-neighbor)# update-source ethernet 1/12 apic1(config-leaf-bgp-vrf-neighbor)# route-map site1 out

10. Transit Between BGP And EIGRP (EIGRP Site2) apic1(config)# leaf 103 Deploy VRF on Leaf apic1(config-leaf)# vrf context tenant Nubecentro vrf vrf400 Deploy External-l3 EPG for site2 on Leaf. apic1(config-leaf-vrf)# external-l3 epg site2_epg Create RouteMap to represent site1’s prefix. apic1(config-leaf-vrf)# route-map site2 apic1(config-leaf-vrf-route-map)# ip prefix-list p1 permit 210.1.1.0/24 apic1(config-leaf-vrf-route-map)# match prefix-list pl1 apic1(config-leaf-vrf-route-map-match)# set metric 100 apic1(config-leaf-vrf-route-map-match)# exit apic1(config-leaf-vrf-route-map)# exit apic1(config-leaf-vrf)# exit

11. Transit Between BGP And EIGRP (EIGRP Site2) (cont.) apic1(config)# leaf 103 Configure EIGRP ASN. apic1(config-leaf)# router eigrp default apic1(config-eigrp)# vrf member tenant Nubecentro vrf vrf400 apic1(config-eigrp-vrf)# autonomous-system 100 apic1(config-eigrp-vrf)# exit apic1(config-eigrp)# exit Configure SVI and enable EIGRP on the interface with route-map. apic1(config-leaf)# interface vlan 450 apic1(config-leaf-if)# vrf member tenant Nubecentro vrf vrf400 apic1(config-leaf-if)# ip address 170.1.1.1/24 apic1(config-leaf-if)# ip router eigrp default apic1(config-leaf-if)# ip distribute-list eigrp default route-map site2 out apic1(config-leaf-if)# exit Configure L2 Port for the SVI. apic1(config-leaf)# interface ethernet 1/22 apic1(config-leaf-if)# vlan-domain member dom400 apic1(config-leaf-if)# switchport trunk allowed vlan 450 tenant Nubecentro external-svi