BookMyFabricBookMyFabric
All courses
Hands-on course

Campus SONiC EVPN-VXLAN Fabric

A compact enterprise pod — 2 spines, 2 leaves, 2 PCs — that builds the same EVPN-VXLAN overlay at campus scale. Its own topology (distinct from the AI fabric): book this course and its dedicated fabric is deployed for your session — the AI fabric is torn down and the campus pod stands up automatically.

4 modules · about ~2h of guided work · 12-device fabric
The topology

Enterprise Campus EVPN-VXLAN

An access/distribution campus on an EVPN-VXLAN fabric: workstations, IP phones, PoE cameras, and wireless APs, each segmented onto its own stretched VLAN with anycast gateways and DHCP.

DISTRIBUTIONACCESSENDPOINTScspine1cspine2cleaf1cleaf2cws1cphone1ccam1cap1cws2cphone2ccam2cap2
  • EVPN-VXLAN
  • Per-class VLAN segmentation
  • Anycast gateway
  • Voice VLAN
  • DHCP relay
What you'll learn

Modules

  1. 1

    Campus EVPN-VXLAN Pod

    · 20 min

    Stand up a compact enterprise EVPN-VXLAN pod — 2 spines, 2 leaves, 2 PCs — and watch two hosts on different leaves reach each other across a stretched L2 overlay. Same EVPN-VXLAN building blocks as the AI fabric, at campus scale, on its own dedicated topology.

    • EVPN-VXLAN at campus scale — the same overlay primitives as a hyperscale fabric, 2x2
    • A stretched L2 segment (VNI 10100) across two leaves
    • Reading Type-2/Type-3 EVPN routes on a small pod
    • Proving overlay reachability with a cross-leaf host ping
  2. 2

    Campus Access Segmentation

    · 30 min

    Carve the campus access layer into per-device-class VLANs — workstations, IP phones, PoE cameras, and wireless APs — each stretched as its own EVPN-VXLAN segment across both leaves. Same-VLAN devices reach each other across the fabric; the classes stay isolated from one another (no inter-VLAN routing yet — that's the next module's anycast gateway).

    • Per-device-class VLAN segmentation (data / voice / camera / wireless)
    • Stretching multiple L2VNIs across leaves with advertise-all-vni
    • Access ports as untagged PVID members of a vlan-aware bridge
    • Why isolation is the default — and what it takes to cross VLANs (next module)
  3. 3

    Campus Anycast Gateway

    · 30 min

    Give the segmented campus a distributed anycast gateway — a per-VLAN SVI carrying the same gateway IP and MAC on every leaf — so each endpoint's default gateway is local on its own switch and the device classes can route to one another, same-leaf and across leaves, over the EVPN-VXLAN fabric.

    • Distributed anycast gateway — same gateway IP + MAC on every leaf
    • Inter-VLAN routing at the ingress leaf, then bridge over EVPN
    • Why a local-everywhere gateway beats a single centralized router
    • Controlled reachability between device classes (vs. module 2's isolation)
  4. 4

    Campus DHCP Relay

    · 25 min

    Hand out addresses dynamically: turn each leaf into a DHCP relay agent that forwards the access endpoints' requests across the L3 boundary to a central DHCP server, and watch workstations, phones, cameras, and APs lease their address — and the right gateway — through the relay.

    • Why DHCP needs a relay across subnets — the broadcast boundary
    • giaddr: how the relay tells the server which subnet to serve
    • Configuring a leaf as a DHCP relay agent to a central server
    • Dynamic addressing per device class, with the correct gateway option

Prefer reading first? The written guides are free: Build a campus EVPN-VXLAN pod on SONiC · Campus access segmentation with EVPN-VXLAN · Campus anycast gateways on an EVPN-VXLAN fabric · DHCP relay across a campus EVPN-VXLAN overlay

Ready to go hands-on?

Book the fabric, then launch Campus SONiC EVPN-VXLAN Fabric.

Your booking reserves the whole fabric for the window. Launch this course to deploy its topology and work the modules above hands-on.

Stuck on a module? Read the in-lab solution, or reach the community for help.

Join the Discord