ceos lab fixes ...

Assisted-By: Claude (claude-4.5-sonnet)
Signed-off-by: Harald Jensås <hjensas@redhat.com>

Author: hjensas

scenarios/networking-lab/devstack-ceos-vxlan/TROUBLESHOOTING.md

@@ -22,7 +22,61 @@
 - Verify BGP is running: `show bgp summary`
 - Check BGP EVPN neighbors: `show bgp evpn summary`
 - Verify loopback reachability: `ping 10.255.255.1 source 10.255.255.3`
-- Check BGP configuration: `show running-config section bgp`
+- Check BGP configuration: `show running-config | section router bgp`
+- View all EVPN routes: `show bgp evpn`
+- Check EVPN Type 2 routes (MAC-IP): `show bgp evpn route-type mac-ip`
+- Check EVPN Type 3 routes (IMET): `show bgp evpn route-type imet`
+- View EVPN instance for VLAN: `show bgp evpn instance vlan <vlan-id>`
+- Check detailed EVPN routes: `show bgp evpn route-type mac-ip detail`
+
+## VXLAN/EVPN MAC Learning
+
+### Check Learned MACs via VXLAN
+```bash
+# View all MAC addresses learned via VXLAN (Arista equivalent of Cisco's "show l2route evpn mac all")
+show vxlan address-table
+
+# Check MACs for specific VLAN
+show vxlan address-table vlan <vlan-id>
+```
+
+### Check EVPN MAC-IP Routes
+```bash
+# View all EVPN Type 2 routes (MAC-IP advertisements)
+show bgp evpn route-type mac-ip
+
+# Check specific MAC or IP
+show bgp evpn route-type mac-ip <mac-address>
+show bgp evpn route-type mac-ip <ip-address>
+
+# View with details (includes route distinguishers, extended communities)
+show bgp evpn route-type mac-ip detail
+```
+
+### Check VXLAN VTEPs
+```bash
+# List remote VTEPs
+show vxlan vtep
+
+# Check VXLAN interface status
+show interface Vxlan1
+
+# View VXLAN flood lists for BUM traffic
+show vxlan flood vtep
+
+# Check VXLAN counters
+show vxlan counters
+```
+
+### Verify ARP Learning for EVPN
+```bash
+# Check if switch has learned IP-to-MAC bindings
+show ip arp
+
+# For MAC+IP to be advertised in EVPN Type 2 routes, the switch must have
+# ARP entries. If empty, only MAC-only routes will be advertised.
+# ARP suppression/proxy requires MAC+IP routes to function.
+```
 
 ## Devstack Deployment Issues
 - Check network connectivity on trunk0: `ip link show trunk0`

scenarios/networking-lab/devstack-ceos-vxlan/local.conf.j2

@@ -8,9 +8,10 @@ SERVICE_PASSWORD=$ADMIN_PASSWORD
 # Service timeouts
 SERVICE_TIMEOUT=120
 
-# MTU - running inside an encapsulated environment, restrict to 1442 on the
-# physical network so VXLAN tenant networks get 1442 - 50 = 1392 effective MTU.
-PUBLIC_BRIDGE_MTU=1442
+# MTU - running inside an encapsulated environment (cloud overlay on cloud underlay)
+# Undercloud networks have MTU 1442, so overlay needs to account for additional overhead
+# Setting to 1364 to ensure VXLAN packets fit within undercloud MTU constraints
+PUBLIC_BRIDGE_MTU=1364
 
 # Networking
 HOST_IP=192.168.32.20
@@ -106,7 +107,7 @@ enable_plugin ironic https://opendev.org/openstack/ironic
 enable_plugin networking-generic-switch https://opendev.org/openstack/networking-generic-switch
 
 # Enable networking-baremetal plugin
-enable_plugin networking-baremetal https://opendev.org/openstack/networking-baremetal
+enable_plugin networking-baremetal https://opendev.org/openstack/networking-baremetal refs/changes/92/981692/2
 
 
 
@@ -118,7 +119,7 @@ disable_service horizon
 
 [[post-config|$NEUTRON_CONF]]
 [DEFAULT]
-global_physnet_mtu = 1442
+global_physnet_mtu = 1364
 
 [baremetal_agent]
 enable_ha_chassis_group_alignment = False
@@ -150,6 +151,7 @@ ngs_mac_address = 22:57:f8:dd:03:01
 ngs_disable_inactive_ports = true
 ngs_physical_networks = public
 ngs_nve_interface = Vxlan1
+ngs_bgp_asn = 65001
 
 [genericswitch:leaf02]
 device_type = netmiko_arista_eos
@@ -160,3 +162,4 @@ ngs_mac_address = 22:57:f8:dd:04:01
 ngs_disable_inactive_ports = true
 ngs_physical_networks = public
 ngs_nve_interface = Vxlan1
+ngs_bgp_asn = 65001