Configure L3VPN gateway's static route to L2 gateway

[phuochoang]

Hi all,

In our in frastructure, we configure HP5940 as L3VPN for private cloud (OpenStack). However, because of legacy infrastructure, we still use a switch as gateway for VLAN networks. In a computer in fabric (the underlay with a specific VLAN), we want to connect (ping) to a VM on private cloud through Switch ---> HP 5940 ---> to VM and vice versa.

I checked tcpdump in VM, the echo request reached out VM and VM replied to sender. However, VXLAN rely package can reach out HP5940 but it stucks on HP5940 and can not relay the package to the switch to send rely message to computer in fabric.

Here are our configuration in HP5940:

[HP5940.LEAF.01-vpn-instance-rHP5940-LEAF-01-GATE]display this
#
ip vpn-instance rHP5940-LEAF-01-GATE
route-distinguisher 64512:30
#
address-family ipv4
vpn-target 64512:8000025 import-extcommunity
vpn-target 64512:8000025 export-extcommunity
#
address-family evpn
vpn-target 64512:8000025 import-extcommunity
vpn-target 64512:8000025 export-extcommunity

Vsi interface

#
interface Vsi-interface7
ip binding vpn-instance rHP5940-LEAF-01-GATE
l3-vni 333

I tried to add static route in HP5940 to route traffic to the switch but it doesn't work

ip route-static vpn-instance rHP5940-LEAF-01-GATE 0.0.0.0 0 Route-Aggregation47 10.10.50.254

I think problem is in "vpn-instance rHP5940-LEAF-01-GATE", it can not reach IP 10.10.50.254 on switch.

The topology looks like this:

Private Cloud <--------------------> HP5940 router <--------------------> Switch (VLAN)

(OpenStack)

In my opinion, the problem can be fixed when the route in public can be leak to rHP5940-LEAF-01-GATE vpn instance and vice versa. I tried few approaches but not work by now.

I hope you guys can help me to go through this problem. Thank you in advanced ^^

[jmpk]

Hello ,

Did you find the way to fix it ? If not i, would request you to check below VXLAN configuration gudie 

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-c05212350

https://techhub.hpe.com/eginfolib/networking/docs/switches/5940/5200-1037b_vxlan_cg/content/index.htm

[phuochoang]

I fixed this problem by running this command:
ip route-static vpn-instance rHLC9105IT-LEAF-01-GATE 0.0.0.0 0 Vsi-interface21 10.240.231.193

When traffic goes out gateway, it will route as normal VLAN traffic.

Thank jmpk for your kind ^^