{"id":3782,"date":"2026-10-07T11:39:37","date_gmt":"2026-10-07T02:39:37","guid":{"rendered":"https:\/\/network-arekore.com\/?p=3782"},"modified":"2026-10-07T12:01:11","modified_gmt":"2026-10-07T03:01:11","slug":"post-3782","status":"publish","type":"post","link":"https:\/\/network-arekore.com\/?p=3782","title":{"rendered":"[Nexus9Kv] VXLAN EVPN\u306e\u5916\u90e8\u63a5\u7d9a\u65b9\u5f0f(VRF-Lite, Route Leak, Downstream VNI)\u3092\u78ba\u8a8d"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u306f\u3058\u3081\u306b<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">VXLAN EVPN\u30d5\u30a1\u30d6\u30ea\u30c3\u30af\u3067\u5916\u90e8\u63a5\u7d9a\u3092\u62c5\u3046\u30ea\u30fc\u30d5\u30b9\u30a4\u30c3\u30c1\u3092Border Leaf\u3068\u547c\u3073\u307e\u3059\u304c\u3001\u300cBorder Leaf\u3067\u3069\u3046\u5916\u90e8\u7d4c\u8def\u3092\u53d7\u3051\u3066\u3001\u3069\u3046\u30c6\u30ca\u30f3\u30c8VRF\u3078\u914d\u308b\u304b\u300d\u3067\u8a2d\u8a08\u304c\u5927\u304d\u304f\u5909\u308f\u308a\u307e\u3059\u3002\u672c\u8a18\u4e8b\u3067\u306f\u4ee3\u8868\u7684\u306a3\u65b9\u5f0f\uff08\uff0b\u756a\u59161\u65b9\u5f0f\uff09\u3092\u6574\u7406\u3057\u3001Nexus9000v\u306e\u5b9f\u6a5f\u3067\u7d4c\u8def\u4f1d\u642c\u3068\u758e\u901a\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4ee5\u524d\u306e\u8a18\u4e8b\uff08<a target=\"_blank\" rel=\"noreferrer noopener\" href=\"https:\/\/network-arekore.com\/?p=3710\">[Nexus9K] VXLAN EVPN \u30b5\u30fc\u30d3\u30b9\u30c1\u30a7\u30a4\u30cb\u30f3\u30b0 \u2013 GPO &amp; ePBR\u3092\u8a66\u3057\u3066\u307f\u305f<\/a>\uff09\u3068\u540c\u3058\u304f\u3001\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u306fIPv6 eBGP Unnumbered\u3067\u7d44\u3093\u3060\u30b9\u30d1\u30a4\u30f3\u30ea\u30fc\u30d5\u69cb\u6210\u3067\u3059\u3002\u4eca\u56de\u306f\u3053\u3053\u306bBorder Leaf\uff08BLeaf\uff09\u3068\u5916\u90e8\u30eb\u30fc\u30bf\uff08ExtRtr\uff09\u3092\u8ffd\u52a0\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8a66\u9a13\u3067\u306f\u5916\u90e8\u30eb\u30fc\u30bf\u304b\u3089 <strong>203.0.113.0\/24<\/strong> \u3068 <strong>2001:203:0:113::\/64<\/strong> \u3092\u5e83\u544a\u3057\u3001BLeaf\u3067\u53d7\u4fe1\u3057\u305f\u7d4c\u8def\u3092Leaf1\uff08Customer-A\uff09\u3068Leaf2\uff08Customer-B\uff09\u3078\u914d\u5e03\u3057\u3066\u3001\u914d\u4e0b\u306e\u30db\u30b9\u30c8\u304b\u3089\u5916\u90e8\u3078\u5230\u9054\u3067\u304d\u308b\u304b\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><th>\u65b9\u5f0f<\/th><th>\u6982\u8981<\/th><\/tr><tr><td>\u65b9\u5f0f1<\/td><td>Border Leaf\u3067\u306eVRF Lite\u63a5\u7d9a\uff08\u30c6\u30ca\u30f3\u30c8\u3054\u3068\u306b\u5916\u90e8\u63a5\u7d9a\uff09<\/td><\/tr><tr><td>\u65b9\u5f0f2<\/td><td>default VRF\uff08\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\uff09\u3067\u5916\u90e8\u63a5\u7d9a\u3057\u3001Border Leaf\u3067Route Leak\uff08Inband Management\u60f3\u5b9a\uff09<\/td><\/tr><tr><td>\u65b9\u5f0f3<\/td><td>Shared VRF\u3067\u5916\u90e8\u63a5\u7d9a\u3057\u3001DSVNI\uff08Downstream VNI\uff09\u3092\u4f7f\u3063\u3066\u5404Leaf\u3067Route Leak<\/td><\/tr><tr><td>\u756a\u5916<\/td><td>Border Leaf\u3067\u306eCentralized Route Leaking\u306b\u3088\u308b\u30c6\u30ca\u30f3\u30c8\u9593\u901a\u4fe1<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Tips! DSVNI\uff08Downstream VNI\uff09\u3068Asymmetric VNI<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u901a\u5e38\u306eSymmetric IRB\u3067\u306f\u3001\u540c\u3058VRF\u306b\u3064\u3044\u3066\u5168VTEP\u304c\u540c\u3058L3VNI\u3092\u4f7f\u3044\u307e\u3059\u3002\u9001\u4fe1\u5074\u3082\u53d7\u4fe1\u5074\u3082\u300cVRF = \u3053\u306eL3VNI\u300d\u3068\u3044\u3046\u524d\u63d0\u3067\u3001\u7570\u306a\u308bVRF\u306e\u7d4c\u8def\u3092\u4f7f\u3046\u306b\u306f\u305d\u306eVRF\uff08\u3068L3VNI\uff09\u3092\u81ea\u5206\u306b\u3082\u4f5c\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">DSVNI\u3067\u306f\u3001\u9001\u4fe1\u5074VTEP\u306f<strong>\u5b9b\u5148VTEP\u304cEVPN\u7d4c\u8def\u306b\u4ed8\u3051\u3066\u5e83\u544a\u3057\u305fVNI<\/strong>\u3067\u30ab\u30d7\u30bb\u30eb\u5316\u3057\u307e\u3059\u3002\u305f\u3068\u3048\u3070Leaf1\uff08Customer-A = L3VNI:50100\uff09\u304b\u3089BLeaf\uff08Shared = L3VNI:50999\uff09\u3078\u306f50999\u3067\u3001BLeaf\u304b\u3089Leaf1\u3078\u306f50100\u3067\u9001\u308a\u307e\u3059\u3002\u5f80\u8def\u3068\u5fa9\u8def\u3067VNI\u304c\u7570\u306a\u308b\u305f\u3081Asymmetric VNI\u3068\u547c\u3070\u308c\u3001NX-OS\u3067\u306f\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u30c6\u30fc\u30d6\u30eb\u306b <code>(Asymmetric)<\/code> \u3068\u8868\u793a\u3055\u308c\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u30e1\u30ea\u30c3\u30c8\u306f\u3001VTEP\u9593\u3067VRF\u3068L3VNI\u3092\u63c3\u3048\u306a\u304f\u3066\u3088\u3044\u3053\u3068\u3067\u3059\u3002\u5171\u6709\u30b5\u30fc\u30d3\u30b9\u7528\u306eVRF\u3092\u5404Leaf\u306b\u4f5c\u3089\u305a\u3001\u30c6\u30ca\u30f3\u30c8VRF\u3067RT\u3092import\u3059\u308b\u3060\u3051\u3067\u5230\u9054\u3067\u304d\u307e\u3059\u3002\u9006\u306bBorder Leaf\u306b\u3082\u30c6\u30ca\u30f3\u30c8VRF\u3092\u4f5c\u3089\u305a\u306b\u6e08\u307f\u3001VLAN\u30fbVRF\u30fbL3VNI\u306a\u3069\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u7bc0\u7d04\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">\u691c\u8a3c\u69cb\u6210<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Spine 1\u53f0\u3001Leaf 2\u53f0\u3001Border Leaf 1\u53f0\u306e\u30d5\u30a1\u30d6\u30ea\u30c3\u30af\u306b\u3001\u30c6\u30ca\u30f3\u30c8\u7528\u30db\u30b9\u30c82\u53f0\u3068\u5916\u90e8\u30eb\u30fc\u30bf1\u53f0\u3092\u63a5\u7d9a\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5168\u6a5f\u5668\u306e\u30b3\u30f3\u30d5\u30a3\u30b0\u306f\u3001\u65b9\u5f0f\u3054\u3068\u306b\u672b\u5c3e\u306e<a target=\"_blank\" rel=\"noreferrer noopener\" href=\"#mf5n0ba6c0p.16888\">Appendix<\/a>\u306b\u63b2\u8f09\u3057\u3066\u3044\u307e\u3059\u3002\u672c\u6587\u3067\u306f\u5404\u65b9\u5f0f\u306e\u30dd\u30a4\u30f3\u30c8\u3068\u306a\u308b\u90e8\u5206\u3060\u3051\u629c\u7c8b\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-1024x576.png\" alt=\"\" class=\"wp-image-3783\" style=\"width:700px;height:auto\" srcset=\"https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-1024x576.png 1024w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-300x169.png 300w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-768x432.png 768w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image.png 1467w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u30d5\u30a1\u30d6\u30ea\u30c3\u30af: Nexus9000v\uff08C9300v\uff09\u3001NX-OS 10.6(3)<\/li>\n\n\n\n<li>\u30db\u30b9\u30c8\u30fb\u5916\u90e8\u30eb\u30fc\u30bf: CSR1000v\uff08IOS-XE 17.3.2\uff09<\/li>\n\n\n\n<li>\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4: IPv6 eBGP Unnumbered\uff08\u30ea\u30f3\u30af\u30ed\u30fc\u30ab\u30eb\u306e\u307f\uff09\u3001VTEP\u3082IPv6\uff08Loopback0\uff09<\/li>\n\n\n\n<li>\u30aa\u30fc\u30d0\u30fc\u30ec\u30a4: BGP EVPN\uff08Spine\u3067 <code>retain route-target all<\/code> \uff0b <code>next-hop unchanged<\/code>\uff09<\/li>\n\n\n\n<li>RT: <code>65000:&lt;VNI&gt;<\/code> \u306e\u30b5\u30fc\u30d3\u30b9\u7d71\u4e00\u30d5\u30a9\u30fc\u30de\u30c3\u30c8\u3002eBGP\u30d9\u30fc\u30b9\u306e\u30d5\u30a1\u30d6\u30ea\u30c3\u30af\u3067\u306f\u6a5f\u5668\u3054\u3068\u306bAS\u304c\u7570\u306a\u308b\u305f\u3081\u3001<code>route-target auto<\/code>\uff08ASN:VNI\uff09\u3067\u306f\u4e00\u81f4\u3057\u307e\u305b\u3093<\/li>\n\n\n\n<li>RD: <code>rd auto<\/code>\uff08Router-ID:VRF ID\uff09<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\uff08\u30d5\u30a1\u30d6\u30ea\u30c3\u30af\uff09<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><th>\u6a5f\u5668<\/th><th>\u5f79\u5272<\/th><th>AS<\/th><th>Router-ID<\/th><th>Loopback0\uff08VTEP\uff09<\/th><\/tr><tr><td>Spine<\/td><td>Spine<\/td><td>65101<\/td><td>101.101.101.101<\/td><td>2001:db8:100::101\/128<\/td><\/tr><tr><td>Leaf1<\/td><td>Leaf\uff08Customer-A\u3092\u53ce\u5bb9\uff09<\/td><td>65102<\/td><td>102.102.102.102<\/td><td>2001:db8:100::102\/128<\/td><\/tr><tr><td>Leaf2<\/td><td>Leaf\uff08Customer-B\u3092\u53ce\u5bb9\uff09<\/td><td>65103<\/td><td>103.103.103.103<\/td><td>2001:db8:100::103\/128<\/td><\/tr><tr><td>BLeaf<\/td><td>Border Leaf<\/td><td>65104<\/td><td>104.104.104.104<\/td><td>2001:db8:100::104\/128<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">IPv6 Unnumbered\u3067\u306f\u30ea\u30f3\u30af\u30ed\u30fc\u30ab\u30eb\u30a2\u30c9\u30ec\u30b9\u304cBGP\u306e\u30cd\u30af\u30b9\u30c8\u30db\u30c3\u30d7\u306b\u306a\u308b\u305f\u3081\u3001\u5404Leaf\uff08BLeaf\u3082\u542b\u3080\uff09\u306fEVPN\u7d4c\u8def\u306e\u5e83\u544a\u6642\u306b\u30cd\u30af\u30b9\u30c8\u30db\u30c3\u30d7\u3092\u81ea\u8eab\u306eVTEP\u30a2\u30c9\u30ec\u30b9\u306b\u66f8\u304d\u63db\u3048\u3066\u3044\u307e\u3059\u3002Spine\u306f <code>next-hop unchanged<\/code> \u3067\u305d\u306e\u307e\u307e\u4e2d\u7d99\u3057\u307e\u3059\u3002\u4ee5\u4e0b\u306f\u53c2\u8003\u3068\u3057\u3066Leaf1\u306e\u8a2d\u5b9a\u3067\u3059\uff08Leaf2\u30fbBLeaf\u306f\u30a2\u30c9\u30ec\u30b9\u3060\u3051\u7570\u306a\u308a\u307e\u3059\uff09\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>! Leaf1\nroute-map RM_EVPN_NH permit 10\n  set ipv6 next-hop 2001:db8:100::102\n!\nrouter bgp 65102\n  neighbor Ethernet1\/1\n    remote-as 65101\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map RM_EVPN_NH out<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u30aa\u30fc\u30d0\u30fc\u30ec\u30a4\uff08\u30c6\u30ca\u30f3\u30c8\uff09<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u30c6\u30ca\u30f3\u30c8\u306fCustomer-A\u3068Customer-B\u306e2\u3064\u306eVRF\u3067\u3059\u3002CustomerA\u30fbCustomerB\u306f\u305d\u308c\u305e\u308c\u306eVRF\u306b\u5c5e\u3059\u308b\u30db\u30b9\u30c8\u3067\u3001\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u306e\u30a2\u30c9\u30ec\u30b9\u3068\u306f\u72ec\u7acb\u3057\u305f\u30aa\u30fc\u30d0\u30fc\u30ec\u30a4\u5074\u306e\u30a2\u30c9\u30ec\u30b9\u3092\u6301\u3061\u307e\u3059\u3002\u30c7\u30d5\u30a9\u30eb\u30c8\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306f\u5404Leaf\u306eAnycast Gateway\uff08.1 \/ ::1\uff09\u3067\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><th>VRF<\/th><th>L2VNI\uff08VLAN\uff09<\/th><th>L3VNI\uff08VLAN\uff09<\/th><th>RT<\/th><th>\u30b5\u30d6\u30cd\u30c3\u30c8<\/th><th>\u53ce\u5bb9Leaf<\/th><th>\u30db\u30b9\u30c8<\/th><\/tr><tr><td>Customer-A<\/td><td>10010\uff08VLAN10\uff09<\/td><td>50100\uff08VLAN100\uff09<\/td><td>65000:50100<\/td><td>10.10.10.0\/24, 2001:10:10:10::\/64<\/td><td>Leaf1<\/td><td>CustomerA: 10.10.10.100, 2001:10:10:10::100<\/td><\/tr><tr><td>Customer-B<\/td><td>10020\uff08VLAN20\uff09<\/td><td>50200\uff08VLAN200\uff09<\/td><td>65000:50200<\/td><td>10.20.20.0\/24, 2001:10:20:20::\/64<\/td><td>Leaf2<\/td><td>CustomerB: 10.20.20.100, 2001:10:20:20::100<\/td><\/tr><tr><td>Shared\uff08\u65b9\u5f0f3\u306e\u307f\uff09<\/td><td>&#8211;<\/td><td>50999\uff08VLAN999\uff09<\/td><td>65000:50999<\/td><td>\u5916\u90e8\u63a5\u7d9a\u7528<\/td><td>BLeaf<\/td><td>&#8211;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5916\u90e8\u63a5\u7d9a<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u5916\u90e8\u30eb\u30fc\u30bf\uff08ExtRtr\u3001AS 65100\uff09\u306fLoopback0\u306b 203.0.113.1\/24 \u3068 2001:203:0:113::1\/64 \u3092\u6301\u3061\u3001\u3053\u308c\u3092\u5916\u90e8\u7d4c\u8def\u3068\u3057\u3066BLeaf\u3078\u5e83\u544a\u3057\u307e\u3059\u3002BLeaf\u3068ExtRtr\u306f2\u672c\u306e\u7269\u7406\u30ea\u30f3\u30af\u3067\u3064\u306a\u304c\u308a\u3001IPv4\u3068IPv6\u305d\u308c\u305e\u308c\u306e\u30cd\u30a4\u30c6\u30a3\u30d6eBGP\u3067\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\u30ea\u30f3\u30af<\/th><th>BLeaf\u5074<\/th><th>ExtRtr\u5074<\/th><th>\u4f7f\u3046\u65b9\u5f0f<\/th><\/tr><tr><td>Eth1\/5 \u2013 Gi1<\/td><td>172.31.10.1\/30, 2001:172:31:10::1\/64<\/td><td>172.31.10.2, 2001:172:31:10::2<\/td><td>\u5168\u65b9\u5f0f\uff08\u65b9\u5f0f1\u3067\u306fCustomer-A\u7528\uff09<\/td><\/tr><tr><td>Eth1\/6 \u2013 Gi2<\/td><td>172.31.20.1\/30, 2001:172:31:20::1\/64<\/td><td>172.31.20.2, 2001:172:31:20::2<\/td><td>\u65b9\u5f0f1\u306eCustomer-B\u7528\u306e\u307f<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u65b9\u5f0f1: Border Leaf\u4e0a\u3067\u306eVRF Lite\u63a5\u7d9a<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u30c6\u30ca\u30f3\u30c8VRF\u3092\u305d\u306e\u307e\u307eBLeaf\u307e\u3067\u5ef6\u3070\u3057\u3001VRF\u3054\u3068\u306b\u5916\u90e8\u30eb\u30fc\u30bf\u3068eBGP\u3092\u5f35\u308b\u3001\u3082\u3063\u3068\u3082\u7d20\u76f4\u306a\u65b9\u5f0f\u3067\u3059\u3002\u5916\u90e8\u7d4c\u8def\u306fBLeaf\u306eVRF\u304b\u3089EVPN Type-5\u3068\u3057\u3066\u5404L3VNI\u306b\u305d\u306e\u307e\u307e\u5e83\u544a\u3055\u308c\u307e\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-1-1024x576.png\" alt=\"\" class=\"wp-image-3784\" style=\"width:652px;height:auto\" srcset=\"https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-1-1024x576.png 1024w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-1-300x169.png 300w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-1-768x432.png 768w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-1.png 1467w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><th>\u30e1\u30ea\u30c3\u30c8<\/th><th>\u30c7\u30e1\u30ea\u30c3\u30c8<\/th><\/tr><tr><td>\u69cb\u6210\u304c\u308f\u304b\u308a\u3084\u3059\u304f\u3001\u7279\u5225\u306a\u6a5f\u80fd\u304c\u3044\u3089\u306a\u3044<\/td><td>\u30c6\u30ca\u30f3\u30c8\u3054\u3068\u306bIF\uff08\u307e\u305f\u306f\u30b5\u30d6IF\uff09\u3068eBGP\u30bb\u30c3\u30b7\u30e7\u30f3\u304c\u5fc5\u8981\u3067\u3001\u30c6\u30ca\u30f3\u30c8\u6570\u306b\u6bd4\u4f8b\u3057\u3066\u63a5\u7d9a\u30b3\u30b9\u30c8\u3068\u8a2d\u5b9a\u91cf\u304c\u5897\u3048\u308b<\/td><\/tr><tr><td>\u30c6\u30ca\u30f3\u30c8\u304c\u7269\u7406\u30fb\u8ad6\u7406\u3068\u3082\u306b\u5206\u96e2\u3055\u308c\u3001\u969c\u5bb3\u3084\u30aa\u30da\u30df\u30b9\u306e\u5f71\u97ff\u304c\u305d\u306e\u30c6\u30ca\u30f3\u30c8\u306b\u9589\u3058\u308b<\/td><td>\u5916\u90e8\u30eb\u30fc\u30bf\u5074\u3082VRF\uff08\u307e\u305f\u306f\u30c6\u30ca\u30f3\u30c8\u3054\u3068\u306e\u63a5\u7d9a\u5148\uff09\u3092\u7528\u610f\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b<\/td><\/tr><tr><td>\u5916\u90e8\u5074\u3067\u3082\u30c6\u30ca\u30f3\u30c8\u3054\u3068\u306b\u30dd\u30ea\u30b7\u30fc\u3084QoS\u3001\u5e2f\u57df\u3092\u5206\u3051\u3084\u3059\u3044<\/td><td>BLeaf\u306b\u3082\u5168\u30c6\u30ca\u30f3\u30c8\u306eVRF\u30fbL3VNI\u304c\u5fc5\u8981\u3067\u3001\u30c6\u30ca\u30f3\u30c8\u8ffd\u52a0\u306e\u305f\u3073\u306bBLeaf\u306e\u8a2d\u5b9a\u3082\u5909\u3048\u308b<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u30b3\u30f3\u30d5\u30a3\u30b0\u306e\u30dd\u30a4\u30f3\u30c8\uff08BLeaf\uff09<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">BLeaf\u306b\u3082Leaf\u3068\u540c\u3058VRF\u30fbL3VNI\u30fbRT\u3092\u5b9a\u7fa9\u3057\u3001\u5916\u90e8\u5411\u3051IF\u3092VRF\u306b\u6240\u5c5e\u3055\u305b\u3066VRF\u914d\u4e0b\u3067eBGP\u3092\u5f35\u308a\u307e\u3059\u3002Customer-B\u3082\u540c\u69d8\uff08Eth1\/6\u3001L3VNI 50200\uff09\u3067\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vrf context Customer-A\n  vni 50100\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\n  address-family ipv6 unicast\n    (ipv4\u3068\u540c\u69d8)\n!\ninterface Vlan100\n  no shutdown\n  vrf member Customer-A\n  ip forward\n  ipv6 forward\n!\ninterface nve1\n  member vni 50100 associate-vrf\n  member vni 50200 associate-vrf\n!\ninterface Ethernet1\/5\n  no switchport\n  vrf member Customer-A\n  ip address 172.31.10.1\/30\n  ipv6 address 2001:172:31:10::1\/64\n!\nrouter bgp 65104\n  vrf Customer-A\n    neighbor 2001:172:31:10::2\n      remote-as 65100\n      address-family ipv6 unicast\n    neighbor 172.31.10.2\n      remote-as 65100\n      address-family ipv4 unicast<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u30ed\u30b0\u306e\u78ba\u8a8d\u30dd\u30a4\u30f3\u30c8<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>BLeaf: VRF\u3054\u3068\u306b\u5916\u90e8\u7d4c\u8def\u3092\u53d7\u4fe1<\/strong>\u3002Customer-A\u30fbCustomer-B\u305d\u308c\u305e\u308c\u306eeBGP\u30bb\u30c3\u30b7\u30e7\u30f3\u3067203.0.113.0\/24\u3092\u53d7\u4fe1\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>BLeaf# show bgp ipv4 unicast vrf Customer-A\n   Network            Next Hop            Metric     LocPrf     Weight Path\n*&gt;e10.10.10.0\/24      2001:db8:100::102                              0 65101 65102 i\n*&gt;e10.10.10.100\/32    2001:db8:100::102                              0 65101 65102 i\n*&gt;e203.0.113.0\/24     172.31.10.2              0                     0 65100 i\n\nBLeaf# show ipv6 route vrf Customer-B\n2001:203:0:113::\/64, ubest\/mbest: 1\/0\n    *via 2001:172:31:20::2, &#91;20\/0], 00:09:07, bgp-65104, external, tag 65100<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">EVPN\u30c6\u30fc\u30d6\u30eb\u3067\u306f\u3001\u53d7\u4fe1\u3057\u305f\u5916\u90e8\u7d4c\u8def\u304cVRF\u3054\u3068\u306eRD\uff08104.104.104.104:4 = L3VNI 50100\u3001:5 = L3VNI 50200\uff09\u3067Type-5\u3068\u3057\u3066\u751f\u6210\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>BLeaf# show bgp l2vpn evpn\nRoute Distinguisher: 104.104.104.104:4    (L3VNI 50100)\n*&gt;l&#91;5]:&#91;0]:&#91;0]:&#91;24]:&#91;203.0.113.0]\/224\n                      2001:db8:100::104        0                     0 65100 i\n*&gt;l&#91;5]:&#91;0]:&#91;0]:&#91;64]:&#91;2001:203:0:113::]\/416\n                      2001:db8:100::104        0                     0 65100 i\nRoute Distinguisher: 104.104.104.104:5    (L3VNI 50200)\n*&gt;l&#91;5]:&#91;0]:&#91;0]:&#91;24]:&#91;203.0.113.0]\/224\n                      2001:db8:100::104        0                     0 65100 i\n*&gt;l&#91;5]:&#91;0]:&#91;0]:&#91;64]:&#91;2001:203:0:113::]\/416\n                      2001:db8:100::104        0                     0 65100 i<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Leaf1: Customer-A\u306eVRF\u306b\u30a4\u30f3\u30dd\u30fc\u30c8<\/strong>\u3002\u5916\u90e8\u7d4c\u8def\u304cBLeaf\u306eVTEP\uff082001:db8:100::104\uff09\u5b9b\u3066\u3001L3VNI 50100\u3067\u30d5\u30a9\u30ef\u30fc\u30c7\u30a3\u30f3\u30b0\u30c6\u30fc\u30d6\u30eb\u307e\u3067\u5165\u3063\u3066\u3044\u307e\u3059\u3002Leaf2\u3082\u540c\u69d8\u306b Customer-B\uff08L3VNI 50200\uff09\u306b\u53d6\u308a\u8fbc\u307e\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Leaf1# show ip route vrf Customer-A\n203.0.113.0\/24, ubest\/mbest: 1\/0\n    *via 2001:db8:100::104%default, &#91;20\/0], 00:07:42, bgp-65102, external, tag 65101, segid: 50100 VTEP:(2001:db8:100::104, underlay_vrf: 1) encap: VXLAN\n\nLeaf1# show forwarding ipv4 route vrf Customer-A\n203.0.113.0\/24       2001:db8:100::104  nve1        vni:   50100<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u758e\u901a\u78ba\u8a8d<\/strong>\u3002CustomerA\u30fbCustomerB\u306e\u4e21\u65b9\u304b\u3089\u5916\u90e8\u30a2\u30c9\u30ec\u30b9\u3078IPv4\/IPv6\u3068\u3082\u306b\u5230\u9054\u3067\u304d\u307e\u3057\u305f\uff08CustomerB\u306eIPv6\u521d\u56de1\u30d1\u30b1\u30c3\u30c8\u306f\u8fd1\u96a3\u89e3\u6c7a\u3067\u843d\u3061\u305f\u3082\u306e\u3068\u601d\u308f\u308c\u307e\u3059\uff09\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>CustomerA#ping 203.0.113.1\nSuccess rate is 100 percent (5\/5), round-trip min\/avg\/max = 5\/6\/7 ms\nCustomerB#ping 2001:203:0:113::1\n.!!!!\nSuccess rate is 80 percent (4\/5), round-trip min\/avg\/max = 5\/6\/10 ms<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">\u65b9\u5f0f2: default VRF\u3067\u5916\u90e8\u63a5\u7d9a\u3057Border Leaf\u3067Route Leak<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5916\u90e8\u30eb\u30fc\u30bf\u3068\u306e\u63a5\u7d9a\u3092default VRF\uff08\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\uff09\u5074\u30671\u672c\u3060\u3051\u6301\u3061\u3001BLeaf\u4e0a\u3067\u5404\u30c6\u30ca\u30f3\u30c8VRF\u3068default VRF\u306e\u9593\u3067\u7d4c\u8def\u3092\u30ea\u30fc\u30af\u3059\u308b\u65b9\u5f0f\u3067\u3059\u3002Inband Management\u306e\u3088\u3046\u306b\u3001\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\uff08\u30b0\u30ed\u30fc\u30d0\u30eb\uff09\u5074\u306b\u3042\u308b\u5916\u90e8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3068\u5404\u30c6\u30ca\u30f3\u30c8\u3092\u7e4b\u3050\u7528\u9014\u3092\u60f3\u5b9a\u3057\u3066\u3044\u307e\u3059\u3002\u30ea\u30fc\u30af\u306b\u306fVRF\u914d\u4e0b\u306e <code>import vrf default<\/code> \/ <code>export vrf default<\/code> \u3092\u4f7f\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-2-1024x576.png\" alt=\"\" class=\"wp-image-3785\" style=\"width:649px;height:auto\" srcset=\"https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-2-1024x576.png 1024w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-2-300x169.png 300w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-2-768x432.png 768w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-2.png 1467w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><th>\u30e1\u30ea\u30c3\u30c8<\/th><th>\u30c7\u30e1\u30ea\u30c3\u30c8<\/th><\/tr><tr><td>\u5916\u90e8\u63a5\u7d9a\u30921\u672c\u306b\u96c6\u7d04\u3067\u304d\u3001\u30c6\u30ca\u30f3\u30c8\u304c\u5897\u3048\u3066\u3082\u63a5\u7d9a\u6570\u3082eBGP\u30bb\u30c3\u30b7\u30e7\u30f3\u3082\u5897\u3048\u306a\u3044<\/td><td>\u5916\u90e8\u7d4c\u8def\u3068\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u306e\u7d4c\u8def\u304c\u6df7\u3056\u308b\uff08\u5f8c\u8ff0\uff09\u3002\u5916\u90e8\u3068\u306eeBGP\u306b\u30d5\u30a3\u30eb\u30bf\u304c\u5fc5\u9808<\/td><\/tr><tr><td>Leaf\u5074\u306e\u8a2d\u5b9a\u5909\u66f4\u304c\u4e0d\u8981\u3067\u3001\u30ea\u30fc\u30af\u306e\u5236\u5fa1\u304cBLeaf\u306b\u96c6\u7d04\u3055\u308c\u308b<\/td><td>\u30c6\u30ca\u30f3\u30c8\u3092\u8ffd\u52a0\u3059\u308b\u305f\u3073\u306b\u3001BLeaf\u3067VRF\u30fbL3VNI\u306b\u52a0\u3048\u3066prefix-list\uff0froute-map\u3092\u8ffd\u52a0\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b<\/td><\/tr><tr><td>Inband Management\u306e\u3088\u3046\u306b\u3001\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u5074\u306b\u3042\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3068\u5404\u30c6\u30ca\u30f3\u30c8\u3092\u7e4b\u3050\u7528\u9014\u306b\u5411\u304f<\/td><td>\u5168\u30c6\u30ca\u30f3\u30c8\u306e\u7d4c\u8def\u304cdefault VRF\u306b\u96c6\u307e\u308b\u305f\u3081\u3001\u30c6\u30ca\u30f3\u30c8\u9593\u3067\u30a2\u30c9\u30ec\u30b9\u304c\u91cd\u8907\u3057\u3066\u3044\u308b\u3068\u4f7f\u3048\u306a\u3044<\/td><\/tr><tr><td><\/td><td>\u5171\u6709\u90e8\u5206\u306e\u969c\u5bb3\u3084\u30aa\u30da\u30df\u30b9\u304c\u5168\u30c6\u30ca\u30f3\u30c8\u306b\u5f71\u97ff\u3059\u308b<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u30b3\u30f3\u30d5\u30a3\u30b0\u306e\u30dd\u30a4\u30f3\u30c8\uff08BLeaf\uff09<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u5916\u90e8\u5411\u3051IF\uff08Eth1\/5\uff09\u3092default VRF\u306b\u623b\u3057\u3001eBGP\u3082default VRF\u3067\u5f35\u308a\u307e\u3059\uff08Eth1\/6\u306fshutdown\uff09\u3002\u5404\u30c6\u30ca\u30f3\u30c8VRF\u3067\u306f\u3001\u53d6\u308a\u8fbc\u3080\u5916\u90e8\u7d4c\u8def\u3068\u5916\u3078\u51fa\u3059\u81ea\u30c6\u30ca\u30f3\u30c8\u7d4c\u8def\u3092route-map\u3067\u7d5e\u3063\u3066\u30ea\u30fc\u30af\u3057\u307e\u3059\u3002IPv6\u3082 <code>rmapv6-global-*<\/code> \u3067\u540c\u69d8\u306b\u8a2d\u5b9a\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ip prefix-list plist-global-exportA seq 5 permit 10.10.10.0\/24\nip prefix-list plist-global-exportB seq 5 permit 10.20.20.0\/24\nip prefix-list plist-global-import  seq 5 permit 203.0.113.0\/24\n!\nroute-map rmap-global-exportA permit 10\n  match ip address prefix-list plist-global-exportA\nroute-map rmap-global-import permit 10\n  match ip address prefix-list plist-global-import\n!\nvrf context Customer-A\n  vni 50100\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\n    import vrf default map rmap-global-import advertise-vpn\n    export vrf default map rmap-global-exportA allow-vpn\n!\nrouter bgp 65104\n  neighbor 2001:172:31:10::2\n    remote-as 65100\n    address-family ipv6 unicast\n  neighbor 172.31.10.2\n    remote-as 65100\n    address-family ipv4 unicast<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><code>advertise-vpn<\/code> \u306fdefault VRF\u304b\u3089\u53d6\u308a\u8fbc\u3093\u3060\u7d4c\u8def\u3092\u3055\u3089\u306bEVPN\u3078\u5e83\u544a\u3059\u308b\u305f\u3081\u3001<code>allow-vpn<\/code> \u306fEVPN\u3067\u5b66\u7fd2\u3057\u305f\u30c6\u30ca\u30f3\u30c8\u7d4c\u8def\u3092default VRF\u3078\u51fa\u3059\u305f\u3081\u306b\u5fc5\u8981\u3067\u3059\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u30ed\u30b0\u306e\u78ba\u8a8d\u30dd\u30a4\u30f3\u30c8<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>BLeaf: default VRF\u306e\u5916\u90e8\u7d4c\u8def\u304c\u5404\u30c6\u30ca\u30f3\u30c8VRF\u306b\u30ea\u30fc\u30af<\/strong>\u3002\u30cd\u30af\u30b9\u30c8\u30db\u30c3\u30d7\u304c <code>%default<\/code> \u3068\u306a\u3063\u3066\u304a\u308a\u3001default VRF\u304b\u3089\u306e\u30ea\u30fc\u30af\u3067\u3042\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>BLeaf# show ip route vrf Customer-A\n203.0.113.0\/24, ubest\/mbest: 1\/0\n    *via 172.31.10.2%default, &#91;20\/0], 00:13:04, bgp-65104, external, tag 65100\n\nBLeaf# show ip route vrf Customer-B\n203.0.113.0\/24, ubest\/mbest: 1\/0\n    *via 172.31.10.2%default, &#91;20\/0], 00:09:53, bgp-65104, external, tag 65100<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u30ea\u30fc\u30af\u3057\u305f\u7d4c\u8def\u306f\u5404VRF\u306eRD\uff08104.104.104.104:4 \/ :5\uff09\u3067Type-5\u3068\u3057\u3066\u518d\u5e83\u544a\u3055\u308c\u3001\u65b9\u5f0f1\u3068\u540c\u3058\u5f62\u3067Leaf\u3078\u5c4a\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Leaf1# show ip route vrf Customer-A\n203.0.113.0\/24, ubest\/mbest: 1\/0\n    *via 2001:db8:100::104%default, &#91;20\/0], 00:10:50, bgp-65102, external, tag 65101, segid: 50100 VTEP:(2001:db8:100::104, underlay_vrf: 1) encap: VXLAN<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u9006\u65b9\u5411\u3082\u3001ExtRtr\u306f1\u672c\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u3067\u4e21\u30c6\u30ca\u30f3\u30c8\u306e\u7d4c\u8def\u3092\u53d7\u4fe1\u3057\u3066\u3044\u307e\u3059\u3002CustomerA\u30fbCustomerB\u304b\u3089\u306eping\u306fIPv4\/IPv6\u3068\u3082100%\u6210\u529f\u3057\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ExtRtr#show bgp ipv4 unicast\n *&gt;   10.10.10.0\/24    172.31.10.1                            0 65104 65101 65102 i\n *&gt;   10.20.20.0\/24    172.31.10.1                            0 65104 65101 65103 i\n *&gt;   203.0.113.0      0.0.0.0                  0         32768 i<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u6ce8\u610f: \u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u3068\u5916\u90e8\u306e\u7d4c\u8def\u304c\u6df7\u3056\u308b<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">default VRF\u3067\u5916\u90e8\u63a5\u7d9a\u3057\u3066\u3044\u308b\u305f\u3081\u3001\u5916\u90e8\u7d4c\u8def\u306f\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u306eIPv6\u30e6\u30cb\u30ad\u30e3\u30b9\u30c8\u306b\u3082\u305d\u306e\u307e\u307e\u6d41\u308c\u3001Spine\u3084Leaf\u306edefault VRF\u306b\u3082 2001:203:0:113::\/64 \u304c\u5165\u308a\u307e\u3057\u305f\uff08Spine\u304b\u3089\u5916\u90e8\u3078ping6\u3082\u901a\u308a\u307e\u3059\uff09\u3002\u9006\u306bExtRtr\u306b\u306fVTEP\u306eLoopback\uff082001:db8:100::101\u301c104\/128\uff09\u304c\u5e83\u544a\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Spine# show ipv6 route\n2001:203:0:113::\/64, ubest\/mbest: 1\/0\n    *via fe80::5209:ff:fe00:1b08, Eth1\/3, &#91;20\/0], 00:38:16, bgp-65101, external, tag 65104\n\nExtRtr#show bgp ipv6 unicast\n *&gt;   2001:DB8:100::101\/128  2001:172:31:10::1   0 65104 65101 i\n *&gt;   2001:DB8:100::104\/128  2001:172:31:10::1   0 65104 i<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Inband Management\u306e\u3088\u3046\u306b\u3001\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u3068\u5916\u90e8\u304c\u7e4b\u304c\u308b\u3053\u3068\u81ea\u4f53\u304c\u76ee\u7684\u306a\u3089\u60f3\u5b9a\u3069\u304a\u308a\u306e\u52d5\u304d\u3067\u3059\u3002\u305f\u3060\u3057\u5916\u90e8\u306b\u30d5\u30a1\u30d6\u30ea\u30c3\u30af\u306eVTEP\u30a2\u30c9\u30ec\u30b9\u304c\u898b\u3048\u3001\u5916\u90e8\u7d4c\u8def\u304c\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u306b\u5165\u308b\u306e\u3067\u3001\u5916\u90e8\u3068\u306eeBGP\u306b\u306f\u30a4\u30f3\u30d0\u30a6\u30f3\u30c9\uff0f\u30a2\u30a6\u30c8\u30d0\u30a6\u30f3\u30c9\u306e\u30d5\u30a3\u30eb\u30bf\u3092\u30bb\u30c3\u30c8\u3067\u8a2d\u8a08\u3057\u3066\u304a\u304f\u306e\u304c\u5b89\u5168\u3067\u3059\u3002\u30e6\u30fc\u30b6\u901a\u4fe1\u306e\u5916\u90e8\u63a5\u7d9a\u3067\u3042\u308c\u3070\u3001\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u3068\u5207\u308a\u96e2\u305b\u308b\u65b9\u5f0f1\u3084\u65b9\u5f0f3\u306e\u65b9\u304c\u5411\u3044\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u65b9\u5f0f3: Shared VRF\uff0bDSVNI\u3067\u5404Leaf\u304cRoute Leak<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">BLeaf\u306b\u306f\u5916\u90e8\u63a5\u7d9a\u7528\u306eShared VRF\uff08L3VNI 50999\uff09\u3060\u3051\u3092\u7f6e\u304d\u3001\u5404Leaf\u306f\u30c6\u30ca\u30f3\u30c8VRF\u3067Shared\u306eRT\u3092import\u3059\u308b\u3060\u3051\u306e\u65b9\u5f0f\u3067\u3059\u3002\u7570\u306a\u308bL3VNI\u9593\u306e\u901a\u4fe1\u306f\u3001DSVNI\uff08Downstream VNI\uff09\u306b\u3088\u308a\u300c\u5b9b\u5148VTEP\u304c\u5e83\u544a\u3057\u305fVNI\u3067\u30ab\u30d7\u30bb\u30eb\u5316\u3059\u308b\u300d\u3053\u3068\u3067\u6210\u7acb\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"blob\/5af11a25-19a6\" alt=\"\u65b9\u5f0f3: Route Leak with Shared VRF &amp; Downstream VNI\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><th>\u30e1\u30ea\u30c3\u30c8<\/th><th>\u30c7\u30e1\u30ea\u30c3\u30c8\u30fb\u6ce8\u610f\u70b9<\/th><\/tr><tr><td>BLeaf\u306b\u30c6\u30ca\u30f3\u30c8VRF\u304c\u4e0d\u8981\u3067\u3001VRF\u30fbVLAN\u30fbL3VNI\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u7bc0\u7d04\u3067\u304d\u308b<\/td><td>Shared VRF\u306f\u65b9\u5f0f2\u3068\u540c\u3058\u304f\u5171\u901a\u306e\u969c\u5bb3\u70b9\u306b\u306a\u308b<\/td><\/tr><tr><td>\u5404Leaf\u306fShared\u306eRT\u3092import\u3059\u308b\u3060\u3051\u3002prefix-list\u7b49\u306e\u7ba1\u7406\u3082\u4e0d\u8981<\/td><td>Shared VRF\u306b\u5168\u30c6\u30ca\u30f3\u30c8\u306e\u7d4c\u8def\u304c\u96c6\u307e\u308b\u305f\u3081\u3001\u30c6\u30ca\u30f3\u30c8\u9593\u3067\u30a2\u30c9\u30ec\u30b9\u304c\u91cd\u8907\u3057\u3066\u3044\u308b\u3068\u4f7f\u3048\u306a\u3044<\/td><\/tr><tr><td>\u5916\u90e8\u7d4c\u8def\u304c\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u306b\u5165\u3089\u305a\u3001\u65b9\u5f0f2\u306e\u3088\u3046\u306a\u7d4c\u8def\u306e\u6df7\u5728\u304c\u8d77\u304d\u306a\u3044<\/td><td>\u30c6\u30ca\u30f3\u30c8\u8ffd\u52a0\u6642\u306f\u3001Leaf\u5074\u306b\u52a0\u3048\u3066BLeaf\u306eShared VRF\u306b\u3082\u305d\u306e\u30c6\u30ca\u30f3\u30c8\u306eRT\u306eimport\u3092\u8ffd\u52a0\u3059\u308b<\/td><\/tr><tr><td>\u30c6\u30ca\u30f3\u30c8\u9593\u306e\u5206\u96e2\u306f\u4fdd\u305f\u308c\u308b\uff08\u5404Leaf\u306fShared\u306eRT\u3057\u304bimport\u3057\u306a\u3044\uff09<\/td><td>\u30c6\u30ca\u30f3\u30c8\u9593\u306e\u5206\u96e2\u304cRT\u8a2d\u8a08\u306b\u4f9d\u5b58\u3059\u308b\u3002Shared\u306b\u30c6\u30ca\u30f3\u30c8\u7d4c\u8def\u304c\u96c6\u307e\u308b\u306e\u3067\u3001\u5916\u90e8\u3078\u51fa\u3059\u7d4c\u8def\u306e\u30d5\u30a3\u30eb\u30bf\u3082\u691c\u8a0e\u304c\u5fc5\u8981<\/td><\/tr><tr><td><\/td><td>\u5168VTEP\u3067DSVNI\u3092\u30b5\u30dd\u30fc\u30c8\u3057\u3066\u3044\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u9001\u4fe1\u3068\u53d7\u4fe1\u3067VNI\u304c\u7570\u306a\u308b\u305f\u3081\u3001\u30c8\u30e9\u30d6\u30eb\u30b7\u30e5\u30fc\u30c8\u3067\u898b\u308b\u3079\u304d\u70b9\u304c\u5897\u3048\u308b<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u30b3\u30f3\u30d5\u30a3\u30b0\u306e\u30dd\u30a4\u30f3\u30c8<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">BLeaf\u306eShared VRF\u3067\u306f\u3001\u5404\u30c6\u30ca\u30f3\u30c8\u306eRT\uff0865000:50100 \/ 65000:50200\uff09\u3092import\u3057\u307e\u3059\u3002Customer-A\u30fbCustomer-B\u306eVRF\u81ea\u4f53\u306fBLeaf\u306b\u5b58\u5728\u3057\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vlan 999\n  vn-segment 50999\n!\nvrf context Shared\n  vni 50999\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target import 65000:50999\n    route-target import 65000:50999 evpn\n    route-target export 65000:50999\n    route-target export 65000:50999 evpn\n  address-family ipv6 unicast\n    (ipv4\u3068\u540c\u69d8)\n!\ninterface Ethernet1\/5\n  vrf member Shared\n  ip address 172.31.10.1\/30\n  ipv6 address 2001:172:31:10::1\/64\n!\ninterface nve1\n  member vni 50999 associate-vrf\n!\nrouter bgp 65104\n  vrf Shared\n    address-family ipv4 unicast\n      advertise l2vpn evpn\n    address-family ipv6 unicast\n      advertise l2vpn evpn\n    neighbor 172.31.10.2\n      remote-as 65100\n      address-family ipv4 unicast\n    neighbor 2001:172:31:10::2\n      remote-as 65100\n      address-family ipv6 unicast<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5404Leaf\u3067\u306f\u3001\u30c6\u30ca\u30f3\u30c8VRF\u306bShared\u306eRT\u3092\u8ffd\u52a0\u3059\u308b\u3060\u3051\u3067\u3059\uff08Leaf1\u306e\u4f8b\u3002Leaf2\u306eCustomer-B\u3082\u540c\u69d8\uff09\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vrf context Customer-A\n  vni 50100\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target import 65000:50999\n    route-target import 65000:50999 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\n  address-family ipv6 unicast\n    (ipv4\u3068\u540c\u69d8)<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u30ed\u30b0\u306e\u78ba\u8a8d\u30dd\u30a4\u30f3\u30c8<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Leaf1: \u5916\u90e8\u7d4c\u8def\u304cVNI 50999\uff08Asymmetric\uff09\u3067\u5165\u308b<\/strong>\u3002Leaf1\u81ea\u8eab\u306f50999\u3092\u6301\u3063\u3066\u3044\u307e\u305b\u3093\u304c\u3001BLeaf\u5b9b\u3066\u306f50999\u3067\u30ab\u30d7\u30bb\u30eb\u5316\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Leaf1# show ip route vrf Customer-A\n203.0.113.0\/24, ubest\/mbest: 1\/0\n    *via 2001:db8:100::104%default, &#91;20\/0], 00:16:17, bgp-65102, external, tag 65101, segid: 50999 (Asymmetric) VTEP:(2001:db8:100::104, underlay_vrf: 1) encap: VXLAN\n\nLeaf1# show forwarding ipv4 route vrf Customer-A\n203.0.113.0\/24       2001:db8:100::104  nve1        vni:   50999<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>BLeaf: \u5404Leaf\u306eL3VNI\u3092\u5236\u5fa1\u30d7\u30ec\u30fc\u30f3\u3067\u5b66\u7fd2<\/strong>\u3002<code>Configured VNIs<\/code> \u306f50999\u3060\u3051\u3067\u3059\u304c\u3001<code>Learnt CP VNIs<\/code> \u3068\u3057\u3066Leaf1\u304b\u308950100\u3001Leaf2\u304b\u308950200\u3092\u5b66\u7fd2\u3057\u3001\u623b\u308a\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306f\u305d\u306eVNI\u3067\u30ab\u30d7\u30bb\u30eb\u5316\u3055\u308c\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>BLeaf# show nve peers detail\nPeer-Ip: 2001:db8:100::102\n    Configured VNIs     : 50999\n    Learnt CP VNIs      : 50100\nPeer-Ip: 2001:db8:100::103\n    Configured VNIs     : 50999\n    Learnt CP VNIs      : 50200<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Shared VRF\uff08RD 104.104.104.104:6 = L3VNI 50999\uff09\u306b\u306f\u4e21\u30c6\u30ca\u30f3\u30c8\u306e\u7d4c\u8def\u3068\u5916\u90e8\u7d4c\u8def\u304c\u96c6\u307e\u3063\u3066\u3044\u307e\u3059\u3002\u4e00\u65b9\u3067Spine\u3084Leaf\u306edefault VRF\u306b\u5916\u90e8\u7d4c\u8def\u306f\u5165\u3063\u3066\u304a\u3089\u305a\u3001\u65b9\u5f0f2\u3067\u898b\u3089\u308c\u305f\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u3078\u306e\u6df7\u5165\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u758e\u901a\u78ba\u8a8d<\/strong>\u3002\u4e21\u30c6\u30ca\u30f3\u30c8\u304b\u3089\u5916\u90e8\u3078\u306fIPv4\/IPv6\u3068\u3082100%\u3002\u4e00\u65b9\u3001CustomerA\u3068CustomerB\u306e\u9593\u306f\u5c4a\u304d\u307e\u305b\u3093\u3002\u5404Leaf\u306fShared\u306eRT\u3057\u304bimport\u3057\u3066\u3044\u306a\u3044\u305f\u3081\u3001\u30c6\u30ca\u30f3\u30c8\u9593\u306e\u5206\u96e2\u306f\u4fdd\u305f\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>CustomerA#ping 203.0.113.1\nSuccess rate is 100 percent (5\/5), round-trip min\/avg\/max = 5\/6\/10 ms\nCustomerA#ping 10.20.20.100\n.....\nSuccess rate is 0 percent (0\/5)<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">\u756a\u5916: Border Leaf\u3067\u306eCentralized Leaking\u306b\u3088\u308b\u30c6\u30ca\u30f3\u30c8\u9593\u901a\u4fe1<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5916\u90e8\u63a5\u7d9a\u304b\u3089\u306f\u5c11\u3057\u5916\u308c\u307e\u3059\u304c\u3001\u30c6\u30ca\u30f3\u30c8\u9593\u306e\u30ea\u30fc\u30af\u3092BLeaf\u3060\u3051\u3067\u96c6\u4e2d\u7ba1\u7406\u3059\u308b\u65b9\u5f0f\u3082\u8a66\u3057\u307e\u3057\u305f\u3002\u65b9\u5f0f2\u306e\u69cb\u6210\u306e\u307e\u307e\u3001BLeaf\u4e0a\u3067Customer-A\u3068Customer-B\u306eRT\u3092\u76f8\u4e92import\u3057\u3001\u96c6\u7d04\u7d4c\u8def\u3068\u3057\u3066\u76f8\u624b\u30c6\u30ca\u30f3\u30c8\u3078\u518d\u5e83\u544a\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-3-1024x576.png\" alt=\"\" class=\"wp-image-3786\" style=\"width:571px;height:auto\" srcset=\"https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-3-1024x576.png 1024w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-3-300x169.png 300w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-3-768x432.png 768w, https:\/\/network-arekore.com\/wp-content\/uploads\/2026\/10\/image-3.png 1467w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><th>\u30e1\u30ea\u30c3\u30c8<\/th><th>\u30c7\u30e1\u30ea\u30c3\u30c8<\/th><\/tr><tr><td>\u30c6\u30ca\u30f3\u30c8\u9593\u306e\u30ea\u30fc\u30af\u3092BLeaf\u3067\u96c6\u4e2d\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u3067\u304d\u308b<\/td><td>\u30c6\u30ca\u30f3\u30c8\u9593\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304c\u5fc5\u305aBLeaf\u3092\u7d4c\u7531\u3059\u308b\uff08\u30d8\u30a2\u30d4\u30f3\uff09\u3002BLeaf\u306e\u5e2f\u57df\u3068\u969c\u5bb3\u304c\u30dc\u30c8\u30eb\u30cd\u30c3\u30af\u306b\u306a\u308a\u3046\u308b<\/td><\/tr><tr><td>\u5404Leaf\u306e\u8a2d\u5b9a\u5909\u66f4\u304c\u306a\u3044\u305f\u3081\u3001\u30aa\u30da\u30df\u30b9\u3092\u6e1b\u3089\u305b\u308b<\/td><td>BLeaf\u306e\u8ee2\u9001\u306f\u30db\u30b9\u30c8\u7d4c\u8def\uff08\/32\u30fb\/128\uff09\u306b\u4f9d\u5b58\u3059\u308b<\/td><\/tr><tr><td>\u53ef\u5426\u306e\u5909\u66f4\u30681\u7b87\u6240\u3067\u5b8c\u7d50\u3057\u3001\u7a3c\u50cd\u4e2d\u306e\u30c6\u30ca\u30f3\u30c8\u9593\u901a\u4fe1\u3092\u7ba1\u7406\u3057\u3084\u3059\u3044<\/td><td>\u76f8\u624b\u30c6\u30ca\u30f3\u30c8\u306e\u30b5\u30d6\u30cd\u30c3\u30c8\u3054\u3068\u306b\u96c6\u7d04\u7d4c\u8def\uff08aggregate-address\uff09\u3092\u8a2d\u8a08\u30fb\u8ffd\u52a0\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u30b3\u30f3\u30d5\u30a3\u30b0\u306e\u30dd\u30a4\u30f3\u30c8\uff08BLeaf\uff09<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">RT\u3092import\u3057\u305f\u3060\u3051\u3067\u306f\u3001\u53d6\u308a\u8fbc\u3093\u3060\u7d4c\u8def\u306f\u5225\u30c6\u30ca\u30f3\u30c8\u306eRT\u3067\u518d\u5e83\u544a\u3055\u308c\u307e\u305b\u3093\u3002\u305d\u3053\u3067\u5404VRF\u3067\u76f8\u624b\u30c6\u30ca\u30f3\u30c8\u306e\u30b5\u30d6\u30cd\u30c3\u30c8\u3092 <code>aggregate-address<\/code> \u3067\u518d\u751f\u6210\u3057\u3001\u81ea\u30c6\u30ca\u30f3\u30c8\u306eRT\u3067\u5e83\u544a\u3055\u305b\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u306e\u96c6\u7d04\u7d4c\u8def\u304c\u5fc5\u8981\u306a\u70b9\u306f\u3001\u30b3\u30f3\u30d5\u30a3\u30b0\u30ec\u30fc\u30b7\u30e7\u30f3\u30ac\u30a4\u30c9\u306eCentralized VRF Route-Leaking\u306e\u9805\u306b\u3082\u660e\u8a18\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">Configured less specific prefixes (aggregates) are advertised from the Routing-Block to the remaining VTEPs in the respective destination VRF.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">BGP EVPN does not export prefixes that were previously imported to prevent the occurrence of routing loops.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2014 <a target=\"_blank\" rel=\"noreferrer noopener\" href=\"https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/dcn\/nx-os\/nexus9000\/102x\/configuration\/vxlan\/cisco-nexus-9000-series-nx-os-vxlan-configuration-guide-release-102x\/m_configuring_external_vrf_connectivity_and_route_leaking_93x.html\">Cisco Nexus 9000 Series NX-OS VXLAN Configuration Guide, Release 10.2(x) \u2013 Configuring External VRF Connectivity and Route Leaking<\/a>\uff08Centralized VRF Route-Leaking Brief &#8211; Specific Prefixes Between Custom VRF\uff09<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u3064\u307e\u308a\u3001BGP EVPN\u306f\u30eb\u30fc\u30d7\u9632\u6b62\u306e\u305f\u3081\u300cimport\u3057\u305f\u7d4c\u8def\u3092\u305d\u306e\u307e\u307e\u5225VRF\u3078export\u3057\u306a\u3044\u300d\u306e\u3067\u3001Routing-Block\uff08\u4eca\u56de\u306fBLeaf\uff09\u3067\u96c6\u7d04\u7d4c\u8def\u3092\u751f\u6210\u3057\u3001\u305d\u308c\u3092\u5b9b\u5148VRF\u306b\u5e83\u544a\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u540c\u30ac\u30a4\u30c9\u306eGuidelines\u3067\u306f\u3001\u3053\u306e\u65b9\u5f0f\u306b\u306fVTEP\u3067\u306e\u30cf\u30fc\u30c9\u30a6\u30a7\u30a2VXLAN\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3068\u518d\u30ab\u30d7\u30bb\u30eb\u5316\uff08re-encapsulation\uff09\u304c\u5fc5\u8981\u3068\u3082\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vrf context Customer-A\n  address-family ipv4 unicast\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\nvrf context Customer-B\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n!\nrouter bgp 65104\n  vrf Customer-A\n    address-family ipv4 unicast\n      advertise l2vpn evpn\n      aggregate-address 10.20.20.0\/24\n    address-family ipv6 unicast\n      advertise l2vpn evpn\n      aggregate-address 2001:10:20:20::\/64\n  vrf Customer-B\n    address-family ipv4 unicast\n      advertise l2vpn evpn\n      aggregate-address 10.10.10.0\/24\n    address-family ipv6 unicast\n      advertise l2vpn evpn\n      aggregate-address 2001:10:10:10::\/64<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u30ed\u30b0\u306e\u78ba\u8a8d\u30dd\u30a4\u30f3\u30c8<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Leaf1: \u76f8\u624b\u30c6\u30ca\u30f3\u30c8\u306e\u7d4c\u8def\u304cBLeaf\u7d4c\u7531\u3067\u5165\u308b<\/strong>\u300210.20.20.0\/24\u306e\u30cd\u30af\u30b9\u30c8\u30db\u30c3\u30d7\u306fLeaf2\u3067\u306f\u306a\u304fBLeaf\uff082001:db8:100::104\uff09\u3067\u3001AS_PATH\u3082BLeaf\u767a\u306e\u96c6\u7d04\u7d4c\u8def\uff0865101 65104 i\uff09\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Leaf1# show bgp l2vpn evpn\nRoute Distinguisher: 104.104.104.104:4\n*&gt;e&#91;5]:&#91;0]:&#91;0]:&#91;24]:&#91;10.20.20.0]\/224\n                      2001:db8:100::104                              0 65101 65104 i\n\nLeaf1# show ip route vrf Customer-A\n10.20.20.0\/24, ubest\/mbest: 1\/0\n    *via 2001:db8:100::104%default, &#91;20\/0], 00:08:56, bgp-65102, external, tag 65101, segid: 50100 VTEP:(2001:db8:100::104, underlay_vrf: 1) encap: VXLAN<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>BLeaf: \u30db\u30b9\u30c8\u7d4c\u8def\u3067\u76f8\u624bLeaf\u3078\u8ee2\u9001<\/strong>\u3002\u96c6\u7d04\u7d4c\u8def\u81ea\u4f53\u306fNull0\u306a\u306e\u3067\u3001\u5b9f\u969b\u306e\u8ee2\u9001\u306fRT import\u3067\u53d6\u308a\u8fbc\u3093\u3060Type-2\u306e\u30db\u30b9\u30c8\u7d4c\u8def\u3067\u884c\u308f\u308c\u307e\u3059\u3002\u76f8\u624b\u30c6\u30ca\u30f3\u30c8\u306e\u30db\u30b9\u30c8\u306f\u5b9b\u5148\u5074\u306eVNI\uff0850200\uff09\u3067\u30ab\u30d7\u30bb\u30eb\u5316\u3055\u308c\u3001Asymmetric\u3068\u8868\u793a\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>BLeaf# show ip route vrf Customer-A\n10.20.20.0\/24, ubest\/mbest: 1\/0\n    *via Null0, &#91;220\/0], 00:10:31, bgp-65104, discard, tag 65104\n10.20.20.100\/32, ubest\/mbest: 1\/0\n    *via 2001:db8:100::103%default, &#91;20\/0], 00:19:05, bgp-65104, external, tag 65101, segid: 50200 (Asymmetric) VTEP:(2001:db8:100::103, underlay_vrf: 1) encap: VXLAN<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u758e\u901a\u78ba\u8a8d<\/strong>\u3002CustomerA\u3068CustomerB\u306e\u9593\u3067IPv4\/IPv6\u3068\u3082100%\u5230\u9054\u3057\u307e\u3057\u305f\u3002RTT\u306f7\u301c10 ms\u7a0b\u5ea6\u3067\u3001\u5916\u90e8\u5b9b\u3066\uff085\u301c6 ms\uff09\u3088\u308a\u5927\u304d\u304f\u3001BLeaf\u3092\u6298\u308a\u8fd4\u3057\u3066\u3044\u308b\u69d8\u5b50\u304c\u3046\u304b\u304c\u3048\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>CustomerA#ping 10.20.20.100\nSuccess rate is 100 percent (5\/5), round-trip min\/avg\/max = 7\/8\/10 ms\nCustomerB#ping 2001:10:10:10::100\nSuccess rate is 100 percent (5\/5), round-trip min\/avg\/max = 7\/8\/11 ms<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u306a\u304a\u3001BLeaf\u304c\u30db\u30b9\u30c8\u7d4c\u8def\u306b\u4f9d\u5b58\u3059\u308b\u305f\u3081\u3001\u901a\u4fe1\u3057\u306a\u3044\uff08ARP\/ND\u304c\u5b66\u7fd2\u3055\u308c\u3066\u3044\u306a\u3044\uff09\u30b5\u30a4\u30ec\u30f3\u30c8\u30db\u30b9\u30c8\u306f\u96c6\u7d04\u7d4c\u8def\u306eNull0\u3067\u843d\u3061\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u672c\u756a\u3067\u4f7f\u3046\u5834\u5408\u306f\u3053\u306e\u70b9\u306e\u8a55\u4fa1\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u307e\u3068\u3081<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">3\u65b9\u5f0f\u3068\u3082\u3001\u5916\u90e8\u7d4c\u8def\uff08203.0.113.0\/24\u30012001:203:0:113::\/64\uff09\u3092\u5404Leaf\u306e\u30c6\u30ca\u30f3\u30c8VRF\u307e\u3067\u914d\u5e03\u3067\u304d\u3001IPv4\/IPv6\u3068\u3082\u306b\u914d\u4e0b\u30db\u30b9\u30c8\u304b\u3089\u758e\u901a\u3067\u304d\u307e\u3057\u305f\u3002\u9055\u3044\u306f\u300c\u30ea\u30fc\u30af\u3092\u3069\u3053\u3067\u3084\u308b\u304b\u300d\u3068\u300c\u4f55\u3092\u5171\u6709\u3059\u308b\u304b\u300d\u306b\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><th>\u65b9\u5f0f<\/th><th>\u5916\u90e8\u63a5\u7d9a\u6570<\/th><th>BLeaf\u306e\u30c6\u30ca\u30f3\u30c8VRF<\/th><th>\u30ea\u30fc\u30af\u3059\u308b\u5834\u6240<\/th><th>Leaf\u306e\u8a2d\u5b9a\u5909\u66f4<\/th><th>\u969c\u5bb3\u30fb\u30aa\u30da\u30df\u30b9\u306e\u5f71\u97ff\u7bc4\u56f2<\/th><th>\u5411\u3044\u3066\u3044\u308b\u30b1\u30fc\u30b9<\/th><\/tr><tr><td>1. VRF Lite<\/td><td>\u30c6\u30ca\u30f3\u30c8\u6570\u5206<\/td><td>\u5fc5\u8981<\/td><td>\u306a\u3057<\/td><td>\u4e0d\u8981<\/td><td>\u30c6\u30ca\u30f3\u30c8\u5358\u4f4d<\/td><td>\u30c6\u30ca\u30f3\u30c8\u6570\u304c\u5c11\u306a\u3044\u3001\u5206\u96e2\u3092\u6700\u512a\u5148\u3057\u305f\u3044<\/td><\/tr><tr><td>2. default VRF\uff0bBLeaf\u3067\u30ea\u30fc\u30af\uff08Inband Management\uff09<\/td><td>1<\/td><td>\u5fc5\u8981<\/td><td>BLeaf<\/td><td>\u4e0d\u8981<\/td><td>\u5168\u30c6\u30ca\u30f3\u30c8\uff0b\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4<\/td><td>\u30a4\u30f3\u30d0\u30f3\u30c9\u7ba1\u7406\u306a\u3069\u3001\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u3068\u7e4b\u3050\u524d\u63d0\u306e\u7528\u9014<\/td><\/tr><tr><td>3. Shared VRF\uff0bDSVNI<\/td><td>1<\/td><td>\u4e0d\u8981<\/td><td>\u5404Leaf\uff08RT import\u306e\u307f\uff09<\/td><td>RT\u30921\u884c\u8ffd\u52a0<\/td><td>\u5168\u30c6\u30ca\u30f3\u30c8<\/td><td>\u30c6\u30ca\u30f3\u30c8\u304c\u591a\u304f\u3001\u30a2\u30c9\u30ec\u30b9\u91cd\u8907\u304c\u306a\u3044\u5171\u901a\u30b5\u30fc\u30d3\u30b9\u63a5\u7d9a<\/td><\/tr><tr><td>\u756a\u5916. Centralized Leaking<\/td><td>&#8211;<\/td><td>\u5fc5\u8981<\/td><td>BLeaf\uff08\u96c6\u7d04\u3067\u518d\u5e83\u544a\uff09<\/td><td>\u4e0d\u8981<\/td><td>\u30ea\u30fc\u30af\u5bfe\u8c61\u306e\u30c6\u30ca\u30f3\u30c8<\/td><td>\u30c6\u30ca\u30f3\u30c8\u9593\u901a\u4fe1\u3092\u96c6\u4e2d\u7ba1\u7406\u3057\u305f\u3044\uff08\u30d8\u30a2\u30d4\u30f3\u8a31\u5bb9\uff09<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u5206\u96e2\u3068\u308f\u304b\u308a\u3084\u3059\u3055\u3092\u91cd\u8996\u3059\u308b\u306a\u3089\u65b9\u5f0f1<\/strong>\u3002\u30c6\u30ca\u30f3\u30c8\u304c\u5897\u3048\u308b\u305f\u3073\u306bIF\u3068eBGP\u304c\u5897\u3048\u308b\u70b9\u3060\u3051\u304c\u8ab2\u984c\u3067\u3059\u3002<\/li>\n\n\n\n<li><strong>\u65b9\u5f0f2\u306f\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u5074\u306e\u5916\u90e8\uff08\u7ba1\u7406\u7db2\u306a\u3069\uff09\u3068\u5404\u30c6\u30ca\u30f3\u30c8\u3092\u7e4b\u3050\u65b9\u5f0f\u3067\u3001\u5916\u90e8\u7d4c\u8def\u3068\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u7d4c\u8def\u304c\u6df7\u3056\u308b<\/strong>\u3002\u4eca\u56de\u306e\u30ed\u30b0\u3067\u3082VTEP\u30a2\u30c9\u30ec\u30b9\u304c\u5916\u90e8\u3078\u3001\u5916\u90e8\u7d4c\u8def\u304cSpine\u3078\u6f0f\u308c\u3066\u3044\u307e\u3057\u305f\u3002\u30d5\u30a3\u30eb\u30bf\u8a2d\u8a08\u3068\u30bb\u30c3\u30c8\u3067\u8003\u3048\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/li>\n\n\n\n<li><strong>\u30c6\u30ca\u30f3\u30c8\u304c\u591a\u3044\u74b0\u5883\u3067\u306f\u65b9\u5f0f3\u304c\u3082\u3063\u3068\u3082\u30b7\u30f3\u30d7\u30eb<\/strong>\u3002BLeaf\u306fShared VRF\u3060\u3051\u3001Leaf\u306fRT\u3092import\u3059\u308b\u3060\u3051\u3067\u6e08\u307f\u3001\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u3082\u6c5a\u308c\u307e\u305b\u3093\u3002\u305f\u3060\u3057Shared VRF\u306b\u5168\u30c6\u30ca\u30f3\u30c8\u306e\u7d4c\u8def\u304c\u96c6\u307e\u308b\u306e\u3067\u3001\u30a2\u30c9\u30ec\u30b9\u91cd\u8907\u304c\u306a\u3044\u3053\u3068\u3068DSVNI\u3078\u306e\u5bfe\u5fdc\u304c\u524d\u63d0\u3067\u3059\u3002<\/li>\n\n\n\n<li><strong>\u756a\u5916\u306eCentralized Leaking<\/strong>\u306f\u3001\u30c6\u30ca\u30f3\u30c8\u9593\u901a\u4fe1\u306e\u53ef\u5426\u3092BLeaf 1\u53f0\u3067\u7ba1\u7406\u3067\u304d\u308b\u53cd\u9762\u3001\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304cBLeaf\u306b\u96c6\u4e2d\u3057\u3001\u30db\u30b9\u30c8\u7d4c\u8def\u3078\u306e\u4f9d\u5b58\u3082\u3042\u308a\u307e\u3059\u3002<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">RT\u3092 <code>65000:&lt;VNI&gt;<\/code> \u306e\u30b5\u30fc\u30d3\u30b9\u7d71\u4e00\u30d5\u30a9\u30fc\u30de\u30c3\u30c8\u306b\u3057\u3066\u304a\u3044\u305f\u3053\u3068\u3067\u3001eBGP\u30d5\u30a1\u30d6\u30ea\u30c3\u30af\u3067\u3082\u300c\u3069\u306eRT\u3092import\u3059\u308c\u3070\u3088\u3044\u304b\u300d\u304c\u4e00\u76ee\u3067\u5206\u304b\u308a\u3001\u65b9\u5f0f3\u3084\u756a\u5916\u306e\u3088\u3046\u306aRT\u30d9\u30fc\u30b9\u306e\u30ea\u30fc\u30af\u3082\u7d20\u76f4\u306b\u8a2d\u5b9a\u3067\u304d\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<!-- WordPress: \u300c\u30ab\u30b9\u30bf\u30e0HTML\u300d\u30d6\u30ed\u30c3\u30af\u306b\u3053\u306e\u307e\u307e\u8cbc\u308a\u4ed8\u3051\u3066\u304f\u3060\u3055\u3044 -->\n<h2>Appendix: \u30b3\u30f3\u30d5\u30a3\u30b0\u5168\u6587<\/h2>\n<p>\u65b9\u5f0f\u3054\u3068\u30fb\u6a5f\u5668\u3054\u3068\u306e <code>show running-config<\/code> \u3067\u3059\u3002show run\u3092\u53d6\u5f97\u3057\u3066\u3044\u306a\u3044\u6a5f\u5668\u306f\u3001\u524d\u306e\u65b9\u5f0f\u306e\u8a2d\u5b9a\u3092\u305d\u306e\u307e\u307e\u4f7f\u3063\u3066\u3044\u307e\u3059\u3002Nexus\u306f\u7a7a\u306eEthernet\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u3001description\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u30cf\u30c3\u30b7\u30e5\u3092\u7701\u7565\u3057\u3066\u3044\u307e\u3059\u3002CSR\uff08CustomerA\u30fbCustomerB\u30fbExtRtr\uff09\u306f\u30db\u30b9\u30c8\u540d\u3001IPv6\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3001\u4f7f\u7528\u3057\u3066\u3044\u308b\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u3001\u30b9\u30bf\u30c6\u30a3\u30c3\u30af\u30eb\u30fc\u30c8\u3001BGP\u306e\u307f\u629c\u7c8b\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<table>\n<thead><tr><th>\u65b9\u5f0f<\/th><th>show run\u3092\u53d6\u5f97\u3057\u305f\u6a5f\u5668<\/th><\/tr><\/thead>\n<tbody>\n<tr><td>\u65b9\u5f0f1: VRF Lite<\/td><td>Spine, Leaf1, Leaf2, BLeaf, CustomerA, CustomerB, ExtRtr<\/td><\/tr>\n<tr><td>\u65b9\u5f0f2: default VRF\uff0bBLeaf\u3067\u30ea\u30fc\u30af<\/td><td>BLeaf<\/td><\/tr>\n<tr><td>\u65b9\u5f0f3: Shared VRF\uff0bDSVNI<\/td><td>Leaf1, Leaf2, BLeaf<\/td><\/tr>\n<tr><td>\u756a\u5916: Centralized Route Leak<\/td><td>BLeaf<\/td><\/tr>\n<\/tbody>\n<\/table>\n\n<h3>\u65b9\u5f0f1: VRF Lite<\/h3>\n<details class=\"config-details\">\n  <summary>Spine<\/summary>\n  <pre><code>!Command: show running-config\n!No configuration change since last restart\n!Time: Sun Sep 27 05:38:04 2026\n\nversion 10.6(3) Bios:version\nhostname Spine\nvdc Spine id 1\n  limit-resource vlan minimum 16 maximum 4094\n  limit-resource vrf minimum 2 maximum 4096\n  limit-resource port-channel minimum 0 maximum 511\n  limit-resource m4route-mem minimum 58 maximum 58\n  limit-resource m6route-mem minimum 8 maximum 8\n\nnv overlay evpn\nfeature bgp\nfeature nv overlay\n\nno password strength-check\nusername admin password 5 &lt;removed&gt;  role network-admin\nip domain-lookup\ncopp profile strict\nsnmp-server user admin network-admin auth md5 &lt;removed&gt; priv aes-128 &lt;removed&gt; localizedV2key\nrmon event 1 log trap public description FATAL(1) owner PMON@FATAL\nrmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL\nrmon event 3 log trap public description ERROR(3) owner PMON@ERROR\nrmon event 4 log trap public description WARNING(4) owner PMON@WARNING\nrmon event 5 log trap public description INFORMATION(5) owner PMON@INFO\n\nvlan 1\n\nroute-map NEXT-HOP-UNCH permit 10\n  set ip next-hop unchanged\n  set ipv6 next-hop unchanged\nvrf context management\n\ninterface Ethernet1\/1\n  no switchport\n  ipv6 address use-link-local-only\n  ipv6 nd ra-interval 4 min 3\n  ipv6 nd ra-lifetime 10\n  no shutdown\n\ninterface Ethernet1\/2\n  no switchport\n  ipv6 address use-link-local-only\n  ipv6 nd ra-interval 4 min 3\n  ipv6 nd ra-lifetime 10\n  no shutdown\n\ninterface Ethernet1\/3\n  no switchport\n  ipv6 address use-link-local-only\n  ipv6 nd ra-interval 4 min 3\n  ipv6 nd ra-lifetime 10\n  no shutdown\n\ninterface mgmt0\n  vrf member management\n\ninterface loopback0\n  ipv6 address 2001:db8:100::101\/128\nicam monitor scale\n\nline console\nline vty\nboot nxos bootflash:\/nxos64-cs.10.6.3.F.bin\nrouter bgp 65101\n  router-id 101.101.101.101\n  bestpath as-path multipath-relax\n  address-family ipv6 unicast\n    network 2001:db8:100::101\/128\n  address-family l2vpn evpn\n    retain route-target all\n  neighbor Ethernet1\/1\n    remote-as 65102\n    address-family ipv6 unicast\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map NEXT-HOP-UNCH out\n  neighbor Ethernet1\/2\n    remote-as 65103\n    address-family ipv6 unicast\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map NEXT-HOP-UNCH out\n  neighbor Ethernet1\/3\n    remote-as 65104\n    address-family ipv6 unicast\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map NEXT-HOP-UNCH out\n<\/code><\/pre>\n<\/details>\n<details class=\"config-details\">\n  <summary>Leaf1<\/summary>\n  <pre><code>!Command: show running-config\n!No configuration change since last restart\n!Time: Sun Sep 27 05:34:17 2026\n\nversion 10.6(3) Bios:version\nhostname Leaf1\nvdc Leaf1 id 1\n  limit-resource vlan minimum 16 maximum 4094\n  limit-resource vrf minimum 2 maximum 4096\n  limit-resource port-channel minimum 0 maximum 511\n  limit-resource m4route-mem minimum 58 maximum 58\n  limit-resource m6route-mem minimum 8 maximum 8\n\nnv overlay evpn\nfeature bgp\nfeature interface-vlan\nfeature vn-segment-vlan-based\nfeature nv overlay\n\nno password strength-check\nusername admin password 5 &lt;removed&gt;  role network-admin\nip domain-lookup\ncopp profile strict\nsnmp-server user admin network-admin auth md5 &lt;removed&gt; priv aes-128 &lt;removed&gt; localizedV2key\nrmon event 1 log trap public description FATAL(1) owner PMON@FATAL\nrmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL\nrmon event 3 log trap public description ERROR(3) owner PMON@ERROR\nrmon event 4 log trap public description WARNING(4) owner PMON@WARNING\nrmon event 5 log trap public description INFORMATION(5) owner PMON@INFO\n\nfabric forwarding anycast-gateway-mac 0001.0001.0001\nvlan 1,10,100\nvlan 10\n  name Customer-A\n  vn-segment 10010\nvlan 100\n  name Customer-A-L3VNI\n  vn-segment 50100\n\nroute-map RM_EVPN_NH permit 10\n  set ipv6 next-hop 2001:db8:100::102\nvrf context Customer-A\n  vni 50100\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\n  address-family ipv6 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\nvrf context management\nsystem routing template-security-groups\n\ninterface Vlan1\n\ninterface Vlan10\n  no shutdown\n  vrf member Customer-A\n  ip address 10.10.10.1\/24\n  ipv6 address 2001:10:10:10::1\/64\n  fabric forwarding mode anycast-gateway\n\ninterface Vlan100\n  no shutdown\n  vrf member Customer-A\n  ip forward\n  ipv6 forward\n\ninterface nve1\n  no shutdown\n  host-reachability protocol bgp\n  source-interface loopback0\n  member vni 10010\n    ingress-replication protocol bgp\n  member vni 50100 associate-vrf\n\ninterface Ethernet1\/1\n  no switchport\n  ipv6 address use-link-local-only\n  ipv6 nd ra-interval 4 min 3\n  ipv6 nd ra-lifetime 10\n  no shutdown\n\ninterface Ethernet1\/5\n  switchport access vlan 10\n  spanning-tree port type edge\n\ninterface mgmt0\n  vrf member management\n\ninterface loopback0\n  ipv6 address 2001:db8:100::102\/128\nicam monitor scale\n\nline console\nline vty\nboot nxos bootflash:\/nxos64-cs.10.6.3.F.bin\nrouter bgp 65102\n  router-id 102.102.102.102\n  bestpath as-path multipath-relax\n  address-family ipv6 unicast\n    network 2001:db8:100::102\/128\n  address-family l2vpn evpn\n  neighbor Ethernet1\/1\n    remote-as 65101\n    address-family ipv6 unicast\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map RM_EVPN_NH out\n  vrf Customer-A\n    address-family ipv4 unicast\n      network 10.10.10.0\/24\n      advertise l2vpn evpn\n    address-family ipv6 unicast\n      network 2001:10:10:10::\/64\n      advertise l2vpn evpn\nevpn\n  vni 10010 l2\n    rd auto\n    route-target import 65000:10010\n    route-target export 65000:10010\n<\/code><\/pre>\n<\/details>\n<details class=\"config-details\">\n  <summary>Leaf2<\/summary>\n  <pre><code>!Command: show running-config\n!No configuration change since last restart\n!Time: Sun Sep 27 05:34:20 2026\n\nversion 10.6(3) Bios:version\nhostname Leaf2\nvdc Leaf2 id 1\n  limit-resource vlan minimum 16 maximum 4094\n  limit-resource vrf minimum 2 maximum 4096\n  limit-resource port-channel minimum 0 maximum 511\n  limit-resource m4route-mem minimum 58 maximum 58\n  limit-resource m6route-mem minimum 8 maximum 8\n\nnv overlay evpn\nfeature bgp\nfeature interface-vlan\nfeature vn-segment-vlan-based\nfeature nv overlay\n\nno password strength-check\nusername admin password 5 &lt;removed&gt;  role network-admin\nip domain-lookup\ncopp profile strict\nsnmp-server user admin network-admin auth md5 &lt;removed&gt; priv aes-128 &lt;removed&gt; localizedV2key\nrmon event 1 log trap public description FATAL(1) owner PMON@FATAL\nrmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL\nrmon event 3 log trap public description ERROR(3) owner PMON@ERROR\nrmon event 4 log trap public description WARNING(4) owner PMON@WARNING\nrmon event 5 log trap public description INFORMATION(5) owner PMON@INFO\n\nfabric forwarding anycast-gateway-mac 0001.0001.0001\nvlan 1,20,200\nvlan 20\n  name Customer-B\n  vn-segment 10020\nvlan 200\n  name Customer-B-L3VNI\n  vn-segment 50200\n\nroute-map RM_EVPN_NH permit 10\n  set ipv6 next-hop 2001:db8:100::103\nvrf context Customer-B\n  vni 50200\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target export 65000:50200\n    route-target export 65000:50200 evpn\n  address-family ipv6 unicast\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target export 65000:50200\n    route-target export 65000:50200 evpn\nvrf context management\nsystem routing template-security-groups\n\ninterface Vlan1\n\ninterface Vlan20\n  no shutdown\n  vrf member Customer-B\n  ip address 10.20.20.1\/24\n  ipv6 address 2001:10:20:20::1\/64\n  fabric forwarding mode anycast-gateway\n\ninterface Vlan200\n  no shutdown\n  vrf member Customer-B\n  ip forward\n  ipv6 forward\n\ninterface nve1\n  no shutdown\n  host-reachability protocol bgp\n  source-interface loopback0\n  member vni 10020\n    ingress-replication protocol bgp\n  member vni 50200 associate-vrf\n\ninterface Ethernet1\/1\n  no switchport\n  ipv6 address use-link-local-only\n  ipv6 nd ra-interval 4 min 3\n  ipv6 nd ra-lifetime 10\n  no shutdown\n\ninterface Ethernet1\/5\n  switchport access vlan 20\n  spanning-tree port type edge\n\ninterface Ethernet1\/7\n  shutdown\n\ninterface mgmt0\n  vrf member management\n\ninterface loopback0\n  ipv6 address 2001:db8:100::103\/128\nicam monitor scale\n\nline console\nline vty\nboot nxos bootflash:\/nxos64-cs.10.6.3.F.bin\nrouter bgp 65103\n  router-id 103.103.103.103\n  bestpath as-path multipath-relax\n  address-family ipv6 unicast\n    network 2001:db8:100::103\/128\n  address-family l2vpn evpn\n  neighbor Ethernet1\/1\n    remote-as 65101\n    address-family ipv6 unicast\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map RM_EVPN_NH out\n  vrf Customer-B\n    address-family ipv4 unicast\n      network 10.20.20.0\/24\n      advertise l2vpn evpn\n    address-family ipv6 unicast\n      network 2001:10:20:20::\/64\n      advertise l2vpn evpn\nevpn\n  vni 10020 l2\n    rd auto\n    route-target import 65000:10020\n    route-target export 65000:10020\n<\/code><\/pre>\n<\/details>\n<details class=\"config-details\">\n  <summary>BLeaf<\/summary>\n  <pre><code>!Command: show running-config\n!No configuration change since last restart\n!Time: Sun Sep 27 05:34:22 2026\n\nversion 10.6(3) Bios:version\nhostname BLeaf\nvdc BLeaf id 1\n  limit-resource vlan minimum 16 maximum 4094\n  limit-resource vrf minimum 2 maximum 4096\n  limit-resource port-channel minimum 0 maximum 511\n  limit-resource m4route-mem minimum 58 maximum 58\n  limit-resource m6route-mem minimum 8 maximum 8\n\nnv overlay evpn\nfeature bgp\nfeature interface-vlan\nfeature vn-segment-vlan-based\nfeature nv overlay\n\nno password strength-check\nusername admin password 5 &lt;removed&gt;  role network-admin\nip domain-lookup\ncopp profile strict\nsnmp-server user admin network-admin auth md5 &lt;removed&gt; priv aes-128 &lt;removed&gt; localizedV2key\nrmon event 1 log trap public description FATAL(1) owner PMON@FATAL\nrmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL\nrmon event 3 log trap public description ERROR(3) owner PMON@ERROR\nrmon event 4 log trap public description WARNING(4) owner PMON@WARNING\nrmon event 5 log trap public description INFORMATION(5) owner PMON@INFO\n\nvlan 1,100,200\nvlan 100\n  vn-segment 50100\nvlan 200\n  vn-segment 50200\n\nroute-map RM_EVPN_NH permit 10\n  set ipv6 next-hop 2001:db8:100::104\nvrf context Customer-A\n  vni 50100\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\n  address-family ipv6 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\nvrf context Customer-B\n  vni 50200\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target export 65000:50200\n    route-target export 65000:50200 evpn\n  address-family ipv6 unicast\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target export 65000:50200\n    route-target export 65000:50200 evpn\nvrf context management\n\ninterface Vlan1\n\ninterface Vlan100\n  no shutdown\n  vrf member Customer-A\n  ip forward\n  ipv6 forward\n\ninterface Vlan200\n  no shutdown\n  vrf member Customer-B\n  ip forward\n  ipv6 forward\n\ninterface nve1\n  no shutdown\n  host-reachability protocol bgp\n  source-interface loopback0\n  member vni 50100 associate-vrf\n  member vni 50200 associate-vrf\n\ninterface Ethernet1\/1\n  no switchport\n  ipv6 address use-link-local-only\n  ipv6 nd ra-interval 4 min 3\n  ipv6 nd ra-lifetime 10\n  no shutdown\n\ninterface Ethernet1\/5\n  no switchport\n  vrf member Customer-A\n  ip address 172.31.10.1\/30\n  ipv6 address 2001:172:31:10::1\/64\n  no shutdown\n\ninterface Ethernet1\/6\n  no switchport\n  vrf member Customer-B\n  ip address 172.31.20.1\/30\n  ipv6 address 2001:172:31:20::1\/64\n  no shutdown\n\ninterface mgmt0\n  vrf member management\n\ninterface loopback0\n  ipv6 address 2001:db8:100::104\/128\nicam monitor scale\n\nline console\nline vty\nboot nxos bootflash:\/nxos64-cs.10.6.3.F.bin\nrouter bgp 65104\n  router-id 104.104.104.104\n  bestpath as-path multipath-relax\n  address-family ipv6 unicast\n    network 2001:db8:100::104\/128\n  address-family l2vpn evpn\n  neighbor Ethernet1\/1\n    remote-as 65101\n    address-family ipv6 unicast\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map RM_EVPN_NH out\n  vrf Customer-A\n    neighbor 2001:172:31:10::2\n      remote-as 65100\n      address-family ipv6 unicast\n    neighbor 172.31.10.2\n      remote-as 65100\n      address-family ipv4 unicast\n  vrf Customer-B\n    neighbor 2001:172:31:20::2\n      remote-as 65100\n      address-family ipv6 unicast\n    neighbor 172.31.20.2\n      remote-as 65100\n      address-family ipv4 unicast\n<\/code><\/pre>\n<\/details>\n<details class=\"config-details\">\n  <summary>CustomerA<\/summary>\n  <pre><code>hostname CustomerA\n!\nipv6 unicast-routing\n!\ninterface GigabitEthernet1\n ip address 10.10.10.100 255.255.255.0\n negotiation auto\n ipv6 address 2001:10:10:10::100\/64\n no mop enabled\n no mop sysid\n!\nip route 0.0.0.0 0.0.0.0 10.10.10.1\n!\nipv6 route ::\/0 2001:10:10:10::1\n!\nend\n<\/code><\/pre>\n<\/details>\n<details class=\"config-details\">\n  <summary>CustomerB<\/summary>\n  <pre><code>hostname CustomerB\n!\nipv6 unicast-routing\n!\ninterface GigabitEthernet1\n ip address 10.20.20.100 255.255.255.0\n negotiation auto\n ipv6 address 2001:10:20:20::100\/64\n no mop enabled\n no mop sysid\n!\nip route 0.0.0.0 0.0.0.0 10.20.20.1\n!\nipv6 route ::\/0 2001:10:20:20::1\n!\nend\n<\/code><\/pre>\n<\/details>\n<details class=\"config-details\">\n  <summary>ExtRtr<\/summary>\n  <pre><code>hostname ExtRtr\n!\nipv6 unicast-routing\n!\ninterface Loopback0\n ip address 203.0.113.1 255.255.255.0\n ipv6 address 2001:203:0:113::1\/64\n!\ninterface GigabitEthernet1\n ip address 172.31.10.2 255.255.255.252\n negotiation auto\n ipv6 address 2001:172:31:10::2\/64\n no mop enabled\n no mop sysid\n!\ninterface GigabitEthernet2\n ip address 172.31.20.2 255.255.255.252\n negotiation auto\n ipv6 address 2001:172:31:20::2\/64\n no mop enabled\n no mop sysid\n!\nrouter bgp 65100\n bgp log-neighbor-changes\n neighbor 2001:172:31:10::1 remote-as 65104\n neighbor 2001:172:31:20::1 remote-as 65104\n neighbor 172.31.10.1 remote-as 65104\n neighbor 172.31.20.1 remote-as 65104\n !\n address-family ipv4\n  network 203.0.113.0\n  no neighbor 2001:172:31:10::1 activate\n  no neighbor 2001:172:31:20::1 activate\n  neighbor 172.31.10.1 activate\n  neighbor 172.31.20.1 activate\n exit-address-family\n !\n address-family ipv6\n  network 2001:203:0:113::\/64\n  neighbor 2001:172:31:10::1 activate\n  neighbor 2001:172:31:20::1 activate\n exit-address-family\n!\nend\n<\/code><\/pre>\n<\/details>\n\n<h3>\u65b9\u5f0f2: default VRF\uff0bBLeaf\u3067\u30ea\u30fc\u30af<\/h3>\n<details class=\"config-details\">\n  <summary>BLeaf<\/summary>\n  <pre><code>!Command: show running-config\n!Running configuration last done at: Sun Sep 27 06:18:04 2026\n!Time: Sun Sep 27 06:27:52 2026\n\nversion 10.6(3) Bios:version\nhostname BLeaf\nvdc BLeaf id 1\n  limit-resource vlan minimum 16 maximum 4094\n  limit-resource vrf minimum 2 maximum 4096\n  limit-resource port-channel minimum 0 maximum 511\n  limit-resource m4route-mem minimum 58 maximum 58\n  limit-resource m6route-mem minimum 8 maximum 8\n\nnv overlay evpn\nfeature bgp\nfeature interface-vlan\nfeature vn-segment-vlan-based\nfeature nv overlay\n\nno password strength-check\nusername admin password 5 &lt;removed&gt;  role network-admin\nip domain-lookup\ncopp profile strict\nsnmp-server user admin network-admin auth md5 &lt;removed&gt; priv aes-128 &lt;removed&gt; localizedV2key\nrmon event 1 log trap public description FATAL(1) owner PMON@FATAL\nrmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL\nrmon event 3 log trap public description ERROR(3) owner PMON@ERROR\nrmon event 4 log trap public description WARNING(4) owner PMON@WARNING\nrmon event 5 log trap public description INFORMATION(5) owner PMON@INFO\n\nvlan 1,100,200\nvlan 100\n  vn-segment 50100\nvlan 200\n  vn-segment 50200\n\nip prefix-list plist-global-exportA seq 5 permit 10.10.10.0\/24\nip prefix-list plist-global-exportB seq 5 permit 10.20.20.0\/24\nip prefix-list plist-global-import seq 5 permit 203.0.113.0\/24\nipv6 prefix-list plistv6-global-exportA seq 5 permit 2001:10:10:10::\/64\nipv6 prefix-list plistv6-global-exportB seq 5 permit 2001:10:20:20::\/64\nipv6 prefix-list plistv6-global-import seq 5 permit 2001:203:0:113::\/64\nroute-map RM_EVPN_NH permit 10\n  set ipv6 next-hop 2001:db8:100::104\nroute-map rmap-global-exportA permit 10\n  match ip address prefix-list plist-global-exportA\nroute-map rmap-global-exportB permit 10\n  match ip address prefix-list plist-global-exportB\nroute-map rmap-global-import permit 10\n  match ip address prefix-list plist-global-import\nroute-map rmapv6-global-exportA permit 10\n  match ipv6 address prefix-list plistv6-global-exportA\nroute-map rmapv6-global-exportB permit 10\n  match ipv6 address prefix-list plistv6-global-exportB\nroute-map rmapv6-global-import permit 10\n  match ipv6 address prefix-list plistv6-global-import\nvrf context Customer-A\n  vni 50100\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\n    import vrf default map rmap-global-import advertise-vpn\n    export vrf default map rmap-global-exportA allow-vpn\n  address-family ipv6 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\n    import vrf default map rmapv6-global-import advertise-vpn\n    export vrf default map rmapv6-global-exportA allow-vpn\nvrf context Customer-B\n  vni 50200\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target export 65000:50200\n    route-target export 65000:50200 evpn\n    import vrf default map rmap-global-import advertise-vpn\n    export vrf default map rmap-global-exportB allow-vpn\n  address-family ipv6 unicast\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target export 65000:50200\n    route-target export 65000:50200 evpn\n    import vrf default map rmapv6-global-import advertise-vpn\n    export vrf default map rmapv6-global-exportB allow-vpn\nvrf context management\n\ninterface Vlan1\n\ninterface Vlan100\n  no shutdown\n  vrf member Customer-A\n  ip forward\n  ipv6 forward\n\ninterface Vlan200\n  no shutdown\n  vrf member Customer-B\n  ip forward\n  ipv6 forward\n\ninterface nve1\n  no shutdown\n  host-reachability protocol bgp\n  source-interface loopback0\n  member vni 50100 associate-vrf\n  member vni 50200 associate-vrf\n\ninterface Ethernet1\/1\n  no switchport\n  ipv6 address use-link-local-only\n  ipv6 nd ra-interval 4 min 3\n  ipv6 nd ra-lifetime 10\n  no shutdown\n\ninterface Ethernet1\/5\n  no switchport\n  ip address 172.31.10.1\/30\n  ipv6 address 2001:172:31:10::1\/64\n  no shutdown\n\ninterface Ethernet1\/6\n  shutdown\n\ninterface mgmt0\n  vrf member management\n\ninterface loopback0\n  ipv6 address 2001:db8:100::104\/128\nicam monitor scale\n\nline console\nline vty\nboot nxos bootflash:\/nxos64-cs.10.6.3.F.bin\nrouter bgp 65104\n  router-id 104.104.104.104\n  bestpath as-path multipath-relax\n  address-family ipv6 unicast\n    network 2001:db8:100::104\/128\n  address-family l2vpn evpn\n  neighbor 2001:172:31:10::2\n    remote-as 65100\n    address-family ipv6 unicast\n  neighbor 172.31.10.2\n    remote-as 65100\n    address-family ipv4 unicast\n  neighbor Ethernet1\/1\n    remote-as 65101\n    address-family ipv6 unicast\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map RM_EVPN_NH out\n<\/code><\/pre>\n<\/details>\n\n<h3>\u65b9\u5f0f3: Shared VRF\uff0bDSVNI<\/h3>\n<details class=\"config-details\">\n  <summary>Leaf1<\/summary>\n  <pre><code>!Command: show running-config\n!Running configuration last done at: Sun Sep 27 07:50:23 2026\n!Time: Sun Sep 27 08:06:32 2026\n\nversion 10.6(3) Bios:version\nhostname Leaf1\nvdc Leaf1 id 1\n  limit-resource vlan minimum 16 maximum 4094\n  limit-resource vrf minimum 2 maximum 4096\n  limit-resource port-channel minimum 0 maximum 511\n  limit-resource m4route-mem minimum 58 maximum 58\n  limit-resource m6route-mem minimum 8 maximum 8\n\nnv overlay evpn\nfeature bgp\nfeature interface-vlan\nfeature vn-segment-vlan-based\nfeature nv overlay\n\nno password strength-check\nusername admin password 5 &lt;removed&gt;  role network-admin\nip domain-lookup\ncopp profile strict\nsnmp-server user admin network-admin auth md5 &lt;removed&gt; priv aes-128 &lt;removed&gt; localizedV2key\nrmon event 1 log trap public description FATAL(1) owner PMON@FATAL\nrmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL\nrmon event 3 log trap public description ERROR(3) owner PMON@ERROR\nrmon event 4 log trap public description WARNING(4) owner PMON@WARNING\nrmon event 5 log trap public description INFORMATION(5) owner PMON@INFO\n\nfabric forwarding anycast-gateway-mac 0001.0001.0001\nvlan 1,10,100\nvlan 10\n  name Customer-A\n  vn-segment 10010\nvlan 100\n  name Customer-A-L3VNI\n  vn-segment 50100\n\nroute-map RM_EVPN_NH permit 10\n  set ipv6 next-hop 2001:db8:100::102\nvrf context Customer-A\n  vni 50100\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target import 65000:50999\n    route-target import 65000:50999 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\n  address-family ipv6 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target import 65000:50999\n    route-target import 65000:50999 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\nvrf context management\nsystem routing template-security-groups\n\ninterface Vlan1\n\ninterface Vlan10\n  no shutdown\n  vrf member Customer-A\n  ip address 10.10.10.1\/24\n  ipv6 address 2001:10:10:10::1\/64\n  fabric forwarding mode anycast-gateway\n\ninterface Vlan100\n  no shutdown\n  vrf member Customer-A\n  ip forward\n  ipv6 forward\n\ninterface nve1\n  no shutdown\n  host-reachability protocol bgp\n  source-interface loopback0\n  member vni 10010\n    ingress-replication protocol bgp\n  member vni 50100 associate-vrf\n\ninterface Ethernet1\/1\n  no switchport\n  ipv6 address use-link-local-only\n  ipv6 nd ra-interval 4 min 3\n  ipv6 nd ra-lifetime 10\n  no shutdown\n\ninterface Ethernet1\/5\n  switchport access vlan 10\n  spanning-tree port type edge\n\ninterface mgmt0\n  vrf member management\n\ninterface loopback0\n  ipv6 address 2001:db8:100::102\/128\nicam monitor scale\n\nline console\nline vty\nboot nxos bootflash:\/nxos64-cs.10.6.3.F.bin\nrouter bgp 65102\n  router-id 102.102.102.102\n  bestpath as-path multipath-relax\n  address-family ipv6 unicast\n    network 2001:db8:100::102\/128\n  address-family l2vpn evpn\n  neighbor Ethernet1\/1\n    remote-as 65101\n    address-family ipv6 unicast\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map RM_EVPN_NH out\n  vrf Customer-A\n    address-family ipv4 unicast\n      network 10.10.10.0\/24\n      advertise l2vpn evpn\n    address-family ipv6 unicast\n      network 2001:10:10:10::\/64\n      advertise l2vpn evpn\nevpn\n  vni 10010 l2\n    rd auto\n    route-target import 65000:10010\n    route-target export 65000:10010\n<\/code><\/pre>\n<\/details>\n<details class=\"config-details\">\n  <summary>Leaf2<\/summary>\n  <pre><code>!Command: show running-config\n!Running configuration last done at: Sun Sep 27 07:51:27 2026\n!Time: Sun Sep 27 08:07:29 2026\n\nversion 10.6(3) Bios:version\nhostname Leaf2\nvdc Leaf2 id 1\n  limit-resource vlan minimum 16 maximum 4094\n  limit-resource vrf minimum 2 maximum 4096\n  limit-resource port-channel minimum 0 maximum 511\n  limit-resource m4route-mem minimum 58 maximum 58\n  limit-resource m6route-mem minimum 8 maximum 8\n\nnv overlay evpn\nfeature bgp\nfeature interface-vlan\nfeature vn-segment-vlan-based\nfeature nv overlay\n\nno password strength-check\nusername admin password 5 &lt;removed&gt;  role network-admin\nip domain-lookup\ncopp profile strict\nsnmp-server user admin network-admin auth md5 &lt;removed&gt; priv aes-128 &lt;removed&gt; localizedV2key\nrmon event 1 log trap public description FATAL(1) owner PMON@FATAL\nrmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL\nrmon event 3 log trap public description ERROR(3) owner PMON@ERROR\nrmon event 4 log trap public description WARNING(4) owner PMON@WARNING\nrmon event 5 log trap public description INFORMATION(5) owner PMON@INFO\n\nfabric forwarding anycast-gateway-mac 0001.0001.0001\nvlan 1,20,200\nvlan 20\n  name Customer-B\n  vn-segment 10020\nvlan 200\n  name Customer-B-L3VNI\n  vn-segment 50200\n\nroute-map RM_EVPN_NH permit 10\n  set ipv6 next-hop 2001:db8:100::103\nvrf context Customer-B\n  vni 50200\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target import 65000:50999\n    route-target import 65000:50999 evpn\n    route-target export 65000:50200\n    route-target export 65000:50200 evpn\n  address-family ipv6 unicast\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target import 65000:50999\n    route-target import 65000:50999 evpn\n    route-target export 65000:50200\n    route-target export 65000:50200 evpn\nvrf context management\nsystem routing template-security-groups\n\ninterface Vlan1\n\ninterface Vlan20\n\n  no shutdown\n  vrf member Customer-B\n  ip address 10.20.20.1\/24\n  ipv6 address 2001:10:20:20::1\/64\n  fabric forwarding mode anycast-gateway\n\ninterface Vlan200\n  no shutdown\n  vrf member Customer-B\n  ip forward\n  ipv6 forward\n\ninterface nve1\n  no shutdown\n  host-reachability protocol bgp\n  source-interface loopback0\n  member vni 10020\n    ingress-replication protocol bgp\n  member vni 50200 associate-vrf\n\ninterface Ethernet1\/1\n  no switchport\n  ipv6 address use-link-local-only\n  ipv6 nd ra-interval 4 min 3\n  ipv6 nd ra-lifetime 10\n  no shutdown\n\ninterface Ethernet1\/5\n  switchport access vlan 20\n  spanning-tree port type edge\n\ninterface Ethernet1\/7\n  shutdown\n\ninterface mgmt0\n  vrf member management\n\ninterface loopback0\n  ipv6 address 2001:db8:100::103\/128\nicam monitor scale\n\nline console\nline vty\nboot nxos bootflash:\/nxos64-cs.10.6.3.F.bin\nrouter bgp 65103\n  router-id 103.103.103.103\n  bestpath as-path multipath-relax\n  address-family ipv6 unicast\n    network 2001:db8:100::103\/128\n  address-family l2vpn evpn\n  neighbor Ethernet1\/1\n    remote-as 65101\n    address-family ipv6 unicast\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map RM_EVPN_NH out\n  vrf Customer-B\n    address-family ipv4 unicast\n      network 10.20.20.0\/24\n      advertise l2vpn evpn\n    address-family ipv6 unicast\n      network 2001:10:20:20::\/64\n      advertise l2vpn evpn\nevpn\n  vni 10020 l2\n    rd auto\n    route-target import 65000:10020\n    route-target export 65000:10020\n<\/code><\/pre>\n<\/details>\n<details class=\"config-details\">\n  <summary>BLeaf<\/summary>\n  <pre><code>!Command: show running-config\n!Running configuration last done at: Sun Sep 27 07:47:56 2026\n!Time: Sun Sep 27 08:08:08 2026\n\nversion 10.6(3) Bios:version\nhostname BLeaf\nvdc BLeaf id 1\n  limit-resource vlan minimum 16 maximum 4094\n  limit-resource vrf minimum 2 maximum 4096\n  limit-resource port-channel minimum 0 maximum 511\n  limit-resource m4route-mem minimum 58 maximum 58\n  limit-resource m6route-mem minimum 8 maximum 8\n\nnv overlay evpn\nfeature bgp\nfeature interface-vlan\nfeature vn-segment-vlan-based\nfeature nv overlay\n\nno password strength-check\nusername admin password 5 &lt;removed&gt;  role network-admin\nip domain-lookup\ncopp profile strict\nsnmp-server user admin network-admin auth md5 &lt;removed&gt; priv aes-128 &lt;removed&gt; localizedV2key\nrmon event 1 log trap public description FATAL(1) owner PMON@FATAL\nrmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL\nrmon event 3 log trap public description ERROR(3) owner PMON@ERROR\nrmon event 4 log trap public description WARNING(4) owner PMON@WARNING\nrmon event 5 log trap public description INFORMATION(5) owner PMON@INFO\n\nvlan 1,999\nvlan 999\n  vn-segment 50999\n\nroute-map RM_EVPN_NH permit 10\n  set ipv6 next-hop 2001:db8:100::104\nvrf context Shared\n  vni 50999\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target import 65000:50999\n    route-target import 65000:50999 evpn\n    route-target export 65000:50999\n    route-target export 65000:50999 evpn\n  address-family ipv6 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target import 65000:50999\n    route-target import 65000:50999 evpn\n    route-target export 65000:50999\n    route-target export 65000:50999 evpn\nvrf context management\n\ninterface Vlan1\n\ninterface Vlan999\n  no shutdown\n  vrf member Shared\n  ip forward\n  ipv6 forward\n\ninterface nve1\n  no shutdown\n  host-reachability protocol bgp\n  source-interface loopback0\n  member vni 50999 associate-vrf\n\ninterface Ethernet1\/1\n  no switchport\n  ipv6 address use-link-local-only\n  ipv6 nd ra-interval 4 min 3\n  ipv6 nd ra-lifetime 10\n  no shutdown\n\ninterface Ethernet1\/5\n  no switchport\n  vrf member Shared\n  ip address 172.31.10.1\/30\n  ipv6 address 2001:172:31:10::1\/64\n  no shutdown\n\ninterface Ethernet1\/6\n  shutdown\n\ninterface mgmt0\n  vrf member management\n\ninterface loopback0\n  ipv6 address 2001:db8:100::104\/128\nicam monitor scale\n\nline console\nline vty\nboot nxos bootflash:\/nxos64-cs.10.6.3.F.bin\nrouter bgp 65104\n  router-id 104.104.104.104\n  bestpath as-path multipath-relax\n  address-family ipv6 unicast\n    network 2001:db8:100::104\/128\n  address-family l2vpn evpn\n  neighbor Ethernet1\/1\n    remote-as 65101\n    address-family ipv6 unicast\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map RM_EVPN_NH out\n  vrf Shared\n    address-family ipv4 unicast\n      advertise l2vpn evpn\n    address-family ipv6 unicast\n      advertise l2vpn evpn\n    neighbor 2001:172:31:10::2\n      remote-as 65100\n      address-family ipv6 unicast\n    neighbor 172.31.10.2\n      remote-as 65100\n      address-family ipv4 unicast\n<\/code><\/pre>\n<\/details>\n\n<h3>\u756a\u5916: Centralized Route Leak<\/h3>\n<details class=\"config-details\">\n  <summary>BLeaf<\/summary>\n  <pre><code>!Command: show running-config\n!Running configuration last done at: Sun Sep 27 06:45:53 2026\n!Time: Sun Sep 27 06:53:31 2026\n\nversion 10.6(3) Bios:version\nhostname BLeaf\nvdc BLeaf id 1\n  limit-resource vlan minimum 16 maximum 4094\n  limit-resource vrf minimum 2 maximum 4096\n  limit-resource port-channel minimum 0 maximum 511\n  limit-resource m4route-mem minimum 58 maximum 58\n  limit-resource m6route-mem minimum 8 maximum 8\n\nnv overlay evpn\nfeature bgp\nfeature interface-vlan\nfeature vn-segment-vlan-based\nfeature nv overlay\n\nno password strength-check\nusername admin password 5 &lt;removed&gt;  role network-admin\nip domain-lookup\ncopp profile strict\nsnmp-server user admin network-admin auth md5 &lt;removed&gt; priv aes-128 &lt;removed&gt; localizedV2key\nrmon event 1 log trap public description FATAL(1) owner PMON@FATAL\nrmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL\nrmon event 3 log trap public description ERROR(3) owner PMON@ERROR\nrmon event 4 log trap public description WARNING(4) owner PMON@WARNING\nrmon event 5 log trap public description INFORMATION(5) owner PMON@INFO\n\nvlan 1,100,200\nvlan 100\n  vn-segment 50100\nvlan 200\n  vn-segment 50200\n\nip prefix-list plist-global-exportA seq 5 permit 10.10.10.0\/24\nip prefix-list plist-global-exportB seq 5 permit 10.20.20.0\/24\nip prefix-list plist-global-import seq 5 permit 203.0.113.0\/24\nipv6 prefix-list plistv6-global-exportA seq 5 permit 2001:10:10:10::\/64\nipv6 prefix-list plistv6-global-exportB seq 5 permit 2001:10:20:20::\/64\nipv6 prefix-list plistv6-global-import seq 5 permit 2001:203:0:113::\/64\nroute-map RM_EVPN_NH permit 10\n  set ipv6 next-hop 2001:db8:100::104\nroute-map rmap-global-exportA permit 10\n  match ip address prefix-list plist-global-exportA\nroute-map rmap-global-exportB permit 10\n  match ip address prefix-list plist-global-exportB\nroute-map rmap-global-import permit 10\n  match ip address prefix-list plist-global-import\nroute-map rmapv6-global-exportA permit 10\n  match ipv6 address prefix-list plistv6-global-exportA\nroute-map rmapv6-global-exportB permit 10\n  match ipv6 address prefix-list plistv6-global-exportB\nroute-map rmapv6-global-import permit 10\n  match ipv6 address prefix-list plistv6-global-import\nvrf context Customer-A\n  vni 50100\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\n    import vrf default map rmap-global-import advertise-vpn\n    export vrf default map rmap-global-exportA allow-vpn\n  address-family ipv6 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target export 65000:50100\n    route-target export 65000:50100 evpn\n    import vrf default map rmapv6-global-import advertise-vpn\n    export vrf default map rmapv6-global-exportA allow-vpn\nvrf context Customer-B\n  vni 50200\n  rd auto\n  address-family ipv4 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target export 65000:50200\n    route-target export 65000:50200 evpn\n    import vrf default map rmap-global-import advertise-vpn\n    export vrf default map rmap-global-exportB allow-vpn\n  address-family ipv6 unicast\n    route-target import 65000:50100\n    route-target import 65000:50100 evpn\n    route-target import 65000:50200\n    route-target import 65000:50200 evpn\n    route-target export 65000:50200\n    route-target export 65000:50200 evpn\n    import vrf default map rmapv6-global-import advertise-vpn\n    export vrf default map rmapv6-global-exportB allow-vpn\nvrf context management\n\ninterface Vlan1\n\ninterface Vlan100\n  no shutdown\n  vrf member Customer-A\n  ip forward\n  ipv6 forward\n\ninterface Vlan200\n  no shutdown\n  vrf member Customer-B\n  ip forward\n  ipv6 forward\n\ninterface nve1\n  no shutdown\n  host-reachability protocol bgp\n  source-interface loopback0\n  member vni 50100 associate-vrf\n  member vni 50200 associate-vrf\n\ninterface Ethernet1\/1\n  no switchport\n  ipv6 address use-link-local-only\n  ipv6 nd ra-interval 4 min 3\n  ipv6 nd ra-lifetime 10\n  no shutdown\n\ninterface Ethernet1\/5\n  no switchport\n  ip address 172.31.10.1\/30\n  ipv6 address 2001:172:31:10::1\/64\n  no shutdown\n\ninterface Ethernet1\/6\n  shutdown\n\ninterface mgmt0\n  vrf member management\n\ninterface loopback0\n  ipv6 address 2001:db8:100::104\/128\nicam monitor scale\n\nline console\nline vty\nboot nxos bootflash:\/nxos64-cs.10.6.3.F.bin\nrouter bgp 65104\n  router-id 104.104.104.104\n  bestpath as-path multipath-relax\n  address-family ipv6 unicast\n    network 2001:db8:100::104\/128\n  address-family l2vpn evpn\n  neighbor 2001:172:31:10::2\n    remote-as 65100\n    address-family ipv6 unicast\n  neighbor 172.31.10.2\n    remote-as 65100\n    address-family ipv4 unicast\n  neighbor Ethernet1\/1\n    remote-as 65101\n    address-family ipv6 unicast\n    address-family l2vpn evpn\n      send-community\n      send-community extended\n      route-map RM_EVPN_NH out\n  vrf Customer-A\n    address-family ipv4 unicast\n      advertise l2vpn evpn\n      aggregate-address 10.20.20.0\/24\n    address-family ipv6 unicast\n      advertise l2vpn evpn\n      aggregate-address 2001:10:20:20::\/64\n  vrf Customer-B\n    address-family ipv4 unicast\n      advertise l2vpn evpn\n      aggregate-address 10.10.10.0\/24\n    address-family ipv6 unicast\n      advertise l2vpn evpn\n      aggregate-address 2001:10:10:10::\/64\n<\/code><\/pre>\n<\/details>\n","protected":false},"excerpt":{"rendered":"<p>\u306f\u3058\u3081\u306b VXLAN EVPN\u30d5\u30a1\u30d6\u30ea\u30c3\u30af\u3067\u5916\u90e8\u63a5\u7d9a\u3092\u62c5\u3046\u30ea\u30fc\u30d5\u30b9\u30a4\u30c3\u30c1\u3092Border Leaf\u3068\u547c\u3073\u307e\u3059\u304c\u3001\u300cBorder Leaf\u3067\u3069\u3046\u5916\u90e8\u7d4c\u8def\u3092\u53d7\u3051\u3066\u3001\u3069\u3046\u30c6\u30ca\u30f3\u30c8VRF\u3078\u914d\u308b\u304b\u300d\u3067\u8a2d\u8a08\u304c\u5927\u304d\u304f\u5909\u308f\u308a\u307e\u3059\u3002\u672c\u8a18\u4e8b\u3067 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3606,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[187,183,185,174],"class_list":["post-3782","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nexus","tag-border-leaf","tag-downstream-vni","tag-dsvni","tag-ipv6-unnumbered-ebgp"],"_links":{"self":[{"href":"https:\/\/network-arekore.com\/index.php?rest_route=\/wp\/v2\/posts\/3782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/network-arekore.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/network-arekore.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/network-arekore.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/network-arekore.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3782"}],"version-history":[{"count":13,"href":"https:\/\/network-arekore.com\/index.php?rest_route=\/wp\/v2\/posts\/3782\/revisions"}],"predecessor-version":[{"id":3800,"href":"https:\/\/network-arekore.com\/index.php?rest_route=\/wp\/v2\/posts\/3782\/revisions\/3800"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/network-arekore.com\/index.php?rest_route=\/wp\/v2\/media\/3606"}],"wp:attachment":[{"href":"https:\/\/network-arekore.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/network-arekore.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3782"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/network-arekore.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}