! PermitANY — Cisco NX-OS VXLAN EVPN (Leaf/Spine)
! VXLAN EVPN fabric configuration for Cisco Nexus: NVE interface, BGP EVPN address-family, L2VNI and L3VNI per tenant, with eBGP underlay (OSPF or iBGP).
! Generated: 2026-09-20
! These are EXAMPLE values. Replace with your actual config before deploying.
!
hostname NXOS-LEAF-01
!
feature ospf
feature bgp
feature pim
feature interface-vlan
feature vn-segment-vlan-based
feature nv overlay
nv overlay evpn
!
! ── Loopbacks ────────────────────────────────────────────────────────
interface loopback0
  description Router-ID
  ip address 10.100.0.1/32
  ip ospf network point-to-point
  ip router ospf UNDERLAY area 0
  no shutdown
!
interface loopback1
  description VTEP-NVE-Source
  ip address 10.200.0.1/32
  ip ospf network point-to-point
  ip router ospf UNDERLAY area 0
  no shutdown
!
! ── Underlay (OSPF) ──────────────────────────────────────────────────
router ospf UNDERLAY
  router-id 10.100.0.1/32
  bfd
!
! ── VLANs / VNI Mappings ─────────────────────────────────────────────

vlan 10
  vn-segment 10010


vlan 3001
  vn-segment 30001

!
! ── VRF / L3VNI ──────────────────────────────────────────────────────

vrf context TENANT-A
  vni 30001
  rd 65001:30001
  address-family ipv4 unicast
    route-target import 65001:30001 evpn
    route-target export 65001:30001 evpn
!
interface Vlan3001
  description L3VNI for TENANT-A
  vrf member TENANT-A
  ip forward
  no shutdown
!

! ── NVE Interface ────────────────────────────────────────────────────
interface nve1
  no shutdown
  source-interface loopback1
  host-reachability protocol bgp

  member vni 10010
    ingress-replication protocol bgp
    suppress-arp


  member vni 30001 associate-vrf

!
! ── BGP EVPN ─────────────────────────────────────────────────────────
router bgp 65001
  router-id 10.100.0.1/32
  log-neighbor-changes
  address-family l2vpn evpn
    advertise-pip

  neighbor 10.0.0.0
    remote-as 65000
    description SPINE-eBGP
    update-source loopback0
    ebgp-multihop 2
    address-family l2vpn evpn
      send-community extended
      rewrite-evpn-rt-asn


  evpn
    vni 10010 l2
      rd 65001:10010
      route-target import 65001:10010
      route-target export 65001:10010

!