Hello Everyone,
I am trying to introduce into EVPN VXLAN E-W stretch of 3 leafs Type 5 connected SVI ( VLAN of the bridge ) , but having issue where are subnets is not advertised .
Router OS 7.21
Case
[ Local DHCP Hosts ]
│ (VLAN 10)
▼
[ bridge-access ] ──► SVI (vlan10-svi: 192.168.10.1/24 in 'main')
│
│ (Internal Route Leak via BGP Engine)
▼
[ bridge-transit ] ──► Standalone L3 VNI Interface (vxlan-vni5000)
│
▼
[ BGP EVPN Fabric ] ──► (Type 5 Route Advertised)
Config
Create the access bridge with VLAN filtering enabled
/interface bridge add name=bridge-access vlan-filtering=yes
Add the SVI VLAN interface on top of the access bridge
/interface vlan add name=vlan10-svi vlan-id=10 interface=bridge-access
Assign the gateway IP to the SVI (lives natively in the 'main' table)
/ip address add address=192.168.10.1/24 interface=vlan10-svi
Setup the local DHCP Server pool and instance bound to the SVI
/ip pool add name=pool-vlan10 ranges=192.168.10.10-192.168.10.250
/ip dhcp-server add address-pool=pool-vlan10 interface=vlan10-svi name=dhcp-vlan10 disabled=no
/ip dhcp-server network add address=192.168.10.0/24 gateway=192.168.10.1 dns-server=1.1.1.1# Create an empty bridge container (Do NOT add physical ports or SVIs here)
/interface bridge add name=bridge-transit vlan-filtering=no
# Create the Transit VXLAN interface for your L3 VNI and map it to the transit bridge
/interface vxlan add name=vxlan-vni5000 vni=5000 local-address=10.255.255.1 port=4789 bridge=bridge-transit
Define the BGP Instance
/routing bgp instance add name=bgp-evpn-inst as=65001 router-id=10.255.255.1
Establish the peer connection with EVPN enabled (and multi-hop for loopbacks)
/routing bgp connection add name=to-spine instance=bgp-evpn-inst
remote.address=10.255.255.254 remote.as=65001
afi=evpn multihop=yes local.role=ibgp
output.network=evpn-svi-export
output.filter-chain=evpn-svi-export
/routing bgp evpn add name=evpn-main-transit instance=bgp-evpn-inst \
vni=5000 vrf=main \
route-distinguisher=10.255.255.1:5000 \
route-target=65001:5000 \
export-route-targets=65001:5000 \
import-route-targets=65001:5000
# Match the connected SVI subnet payload
/routing filter rule add chain=evpn-svi-export \
rule="if (dst in 192.168.10.0/24 && protocol connected) { accept; }"
# Block everything else from leaking into the core data center fabric
/routing filter rule add chain=evpn-svi-export rule="reject;"