Set up multi-tenancy with BGP-EVPN: Worked Example — NVIDIA Spectrum Networking (NVIDIA-Certified Professional: AI Networking)
Setting Up Multi-Tenancy with BGP-EVPN in NVIDIA Spectrum Networking Multi-tenancy is a critical feature in modern AI networking environments...
Setting Up Multi-Tenancy with BGP-EVPN in NVIDIA Spectrum Networking
Multi-tenancy is a critical feature in modern AI networking environments, enabling multiple isolated virtual networks to coexist on shared physical infrastructure. NVIDIA Spectrum switches support multi-tenancy through Border Gateway Protocol Ethernet VPN (BGP-EVPN), which provides scalable Layer 2 and Layer 3 VPN services. This worked example guides you through configuring multi-tenancy using BGP-EVPN on NVIDIA Spectrum switches, illustrating key steps and reasoning.
Scenario Overview
Consider a data center hosting two AI tenants, TenantA and TenantB, each requiring isolated Layer 2 networks across multiple racks. The goal is to configure BGP-EVPN on NVIDIA Spectrum switches to enable these tenants to operate independent virtual networks with secure segmentation and efficient routing.
Step 1: Prepare the Physical Network
- Ensure firmware and software: Verify that the NVIDIA Spectrum switches run the required NOS version supporting BGP-EVPN and related features.
- Physical connectivity: Confirm that switches are interconnected with high-speed links and that IP reachability exists between them for BGP peering.
Step 2: Enable BGP and EVPN on the Switches
Begin by enabling the BGP routing process and configuring EVPN address family for multi-tenancy support.
Example Commands
- Enable BGP with ASN 65000: router bgp 65000
- Activate EVPN address family: address-family l2vpn evpn
Step 3: Configure Tenant VRFs and VLANs
Create Virtual Routing and Forwarding (VRF) instances for each tenant to isolate routing tables, and assign VLANs that represent tenant segments.
Example Commands
- Create VRFs: vrf TenantAvrf TenantB
- Define VLANs and associate with VRFs: vlan 100 name TenantA_VLAN vrf TenantAvlan 200 name TenantB_VLAN vrf TenantB
Step 4: Configure BGP Neighbors and EVPN Peering
Establish BGP peering between switches for EVPN routes to propagate tenant information.
Example Commands
- Configure BGP neighbors: neighbor 192.0.2.2 remote-as 65000neighbor 192.0.2.2 update-source loopback0
- Activate EVPN for neighbor: address-family l2vpn evpn neighbor 192.0.2.2 activate
Step 5: Map EVPN Instances to VLANs
Define EVPN instances that bind tenant VLANs to BGP EVPN, enabling tenant traffic encapsulation and forwarding.
Example Commands
- Configure EVPN instance for TenantA: evpn instance TenantA vlan 100
- Configure EVPN instance for TenantB: evpn instance TenantB vlan 200
Step 6: Verify Configuration and Connectivity
Use show commands to verify BGP EVPN sessions, tenant VRF routing tables, and VLAN mappings.
Verification Commands
- Show BGP EVPN neighbors: show bgp l2vpn evpn summary
- Show VRF routing tables: show ip route vrf TenantAshow ip route vrf TenantB
- Show VLAN and EVPN bindings: show evpn instance
Step 7: Test Tenant Isolation
Perform ping and traceroute tests within each tenant VRF to confirm isolation and correct forwarding.
Testing Commands
- Ping within TenantA VRF: ping vrf TenantA 10.1.1.10
- Ping within TenantB VRF: ping vrf TenantB 10.2.2.20
Summary
This step-by-step example demonstrates how to configure multi-tenancy on NVIDIA Spectrum switches using BGP-EVPN. By creating VRFs, VLANs, and EVPN instances, and establishing BGP peering, network administrators can securely segment AI workloads for multiple tenants on shared infrastructure. This configuration supports scalable, high-performance AI networking environments essential for NVIDIA-Certified Professional: AI Networking certification candidates.
More in this topic
Ready to test your knowledge?
Put what you've learned into practice with a quick quiz and track your progress.
Test your knowledge →