u/NichLilla

Hi all,

I've just finished building a multi-tenant EVPN/VXLAN lab on EVE-NG using Cisco NX-OSv.

The lab includes:

• BGP EVPN control plane
• VXLAN data plane
• Symmetric IRB with L3VNIs
• Multi-tenant segmentation
• Distributed Anycast Gateway
• Classic vPC and vPC Fabric Peering (Anycast VTEP)
• PIP vs VIP behavior for orphan and dual-homed hosts

One limitation I found is that NX-OSv doesn't support native EVPN Multi-Homing (ESI), so that's next on the list using physical hardware.

I wrote a LinkedIn post with more details and the complete topology diagram. I'd love to hear feedback from anyone working with EVPN/VXLAN in production or in the lab.

https://www.linkedin.com/posts/nicholas-lilla_evpn-vxlan-nxos-share-7478860375971540992-9zcm/?utm_source=share&utm_medium=member_desktop&rcm=ACoAADoheFkBiLd7Sv2O2GEP6PInjjGOjhaScyQ

Have a good day! :)

Hey everyone!

I wanted to share something I’ve been working on and hopefully get some feedback from people more experienced than me.

https://www.linkedin.com/feed/update/urn:li:activity:7448679308778348544/

I’ve been diving pretty deep into BGP lately, especially in multi-AS environments and IXP-like scenarios, and I’m really enjoying it.

In this project/post I’m exploring things like:

• Multi-AS design and interconnection (simulating real-world ISP/IXP behavior)
• Advanced BGP policy control (communities, filtering, path selection tuning)
• RTBH (Remote Triggered Black Hole) for DoS/DDoS mitigation
• RPKI validation and route origin security
• General BGP security best practices (prefix filtering, max-prefix, etc.)
• Building a full FIRT workflow using GoBGP

The goal is to better understand how real networks handle routing, security, and incident response at scale, not just basic BGP peering.

Also, if you’ve worked in IXPs or multi-AS environments, I’d love to hear how this compares to real-world setups.

Thanks a lot!