NVE

NVE (Network Virtualization Edge) interfaces serve as the VXLAN tunnel endpoint (VTEP) on NX-OS devices, encapsulating and decapsulating overlay traffic for data center fabric deployments with configurable source interface, host reachability protocol, and multicast group assignments. They support advanced VXLAN features including advertise virtual RMAC, anycast bundled interface for vPC VTEP redundancy, multisite border gateway interface and virtual RMAC for DCI (Data Center Interconnect), ARP/ND suppression, and MAC route suppression for optimized overlay control plane behavior. Per-VNI configuration controls associate-VRF mapping for L3VNI, multicast group assignment, ingress replication protocol (BGP/static), multisite ingress replication, and spine anycast gateway for flexible overlay network design.

Global VXLAN settings such as the VXLAN UDP destination port, the UDP source port mode, the NVE multicast index size, the NVE overlay and infra VLANs, and the Tenant Routed Multicast (TRM) settings (advertise evpn multicast, ip multicast overlay-spt-only and ip multicast overlay-distributed-dr) are configured under system.

NVE (Network Virtualization Edge) interfaces serve as the VXLAN tunnel endpoint (VTEP) on NX-OS devices, encapsulating and decapsulating overlay traffic for data center fabric deployments with configurable source interface, host reachability protocol, and multicast group assignments. They support advanced VXLAN features including advertise virtual RMAC, anycast bundled interface for vPC VTEP redundancy, multisite border gateway interface and virtual RMAC for DCI (Data Center Interconnect), ARP/ND suppression, and MAC route suppression for optimized overlay control plane behavior. Per-VNI configuration controls associate-VRF mapping for L3VNI, multicast group assignment, ingress replication protocol (BGP/static), multisite ingress replication, and spine anycast gateway for flexible overlay network design.

Diagram

Diagram

Classes

nxos

Name	Type	Constraint	Mandatory	Default Value
devices	List	devices	No
device_groups	List	device_groups	No
global	Class	global	No
templates	List	templates	No

devices (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

device_groups (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

global (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

templates (nxos)

Name	Type	Constraint	Mandatory	Default Value
configuration	Class	configuration	No

configuration (nxos.devices)

Name	Type	Constraint	Mandatory	Default Value
interfaces	Class	interfaces	No
system	Class	system	No

configuration (nxos.devices)

Name	Type	Constraint	Mandatory	Default Value
interfaces	Class	interfaces	No

interfaces (nxos.devices.configuration)

Name	Type	Constraint	Mandatory	Default Value
nve	Class	nve	No

system (nxos.devices.configuration)

Name	Type	Constraint	Mandatory	Default Value
nv_overlay_vxlan_udp_port	Integer	min: 1024, max: 65535	No
nv_overlay_vxlan_udp_source_port_mode	Choice	low, high, rfc	No
nve_ipmc_index_size	Integer	min: 0, max: 7000	No
nve_overlay_vlans	Class	nve_overlay_vlans	No
nve_infra_vlans	List	nve_infra_vlans	No
advertise_evpn_multicast	Boolean	true, false	No
ip_multicast_overlay_distributed_dr	Boolean	true, false	No
ip_multicast_overlay_spt_only	Boolean	true, false	No

nve (nxos.devices.configuration.interfaces)

Name	Type	Constraint	Mandatory	Default Value
shutdown	Boolean	true, false	No
advertise_virtual_rmac	Boolean	true, false	No
anycast_source_interface_type	Choice	ethernet, loopback, mgmt, port-channel, vlan, vni	No
anycast_source_interface_id	Any	String or Integer[min: 0]	No
description	String		No
fabric_ready_time	Integer	min: 0, max: 1200	No
source_interface_hold_down_time	Integer	min: 1, max: 1500	No
host_reachability_protocol	Choice	flood-and-learn, bgp, controller, openflow, openflow-ir	No
global_ingress_replication_protocol_bgp	Boolean	true, false	No
global_mcast_group_l2	IP		No
global_mcast_group_l3	IP		No
multicast_routing_source_interface_type	Choice	ethernet, loopback, mgmt, port-channel, vlan, vni	No
multicast_routing_source_interface_id	Any	String or Integer[min: 0]	No
multisite_border_gateway_interface_type	Choice	ethernet, loopback, mgmt, port-channel, vlan, vni	No
multisite_border_gateway_interface_id	Any	String or Integer[min: 0]	No
multisite_virtual_rmac	String		No
source_interface_type	Choice	ethernet, loopback, mgmt, port-channel, vlan, vni	No
source_interface_id	Any	String or Integer[min: 0]	No
global_suppress_arp	Boolean	true, false	No
suppress_mac_route	Boolean	true, false	No
suppress_nd	Boolean	true, false	No
virtual_rmac	String		No
service_policy_type_qos_input	String		No
service_policy_type_qos_input_statistics	Boolean	true, false	No
vnis	List	vnis	No

nve (nxos.devices.configuration.interfaces)

Name	Type	Constraint	Mandatory	Default Value
shutdown	Boolean	true, false	No
advertise_virtual_rmac	Boolean	true, false	No
anycast_source_interface_type	Choice	ethernet, loopback, mgmt, port-channel, vlan, vni	No
anycast_source_interface_id	Any	String or Integer[min: 0]	No
description	String		No
fabric_ready_time	Integer	min: 0, max: 1200	No
source_interface_hold_down_time	Integer	min: 1, max: 1500	No
host_reachability_protocol	Choice	flood-and-learn, bgp, controller, openflow, openflow-ir	No
global_ingress_replication_protocol_bgp	Boolean	true, false	No
global_mcast_group_l2	IP		No
global_mcast_group_l3	IP		No
multicast_routing_source_interface_type	Choice	ethernet, loopback, mgmt, port-channel, vlan, vni	No
multicast_routing_source_interface_id	Any	String or Integer[min: 0]	No
multisite_border_gateway_interface_type	Choice	ethernet, loopback, mgmt, port-channel, vlan, vni	No
multisite_border_gateway_interface_id	Any	String or Integer[min: 0]	No
multisite_virtual_rmac	String		No
source_interface_type	Choice	ethernet, loopback, mgmt, port-channel, vlan, vni	No
source_interface_id	Any	String or Integer[min: 0]	No
global_suppress_arp	Boolean	true, false	No
suppress_mac_route	Boolean	true, false	No
suppress_nd	Boolean	true, false	No
virtual_rmac	String		No
vnis	List	vnis	No

nve_overlay_vlans (nxos.devices.configuration.system)

Name	Type	Constraint	Mandatory	Default Value
ids	List	Integer[min: 1, max: 4094]	No
ranges	List	ranges	No

nve_infra_vlans (nxos.devices.configuration.system)

Name	Type	Constraint	Mandatory	Default Value
vlans	Class	vlans	Yes
force	Boolean	true, false	No

vnis (nxos.devices.configuration.interfaces.nve)

Name	Type	Constraint	Mandatory	Default Value
vni	Integer	min: 1, max: 16777215	Yes
associate_vrf	Boolean	true, false	No
mcast_group	IP		No
multisite_ingress_replication	Choice	enable, disable, optimized	No
multisite_mcast_group	IP		No
spine_anycast_gateway	Boolean	true, false	No
suppress_arp	Boolean	true, false	No
ingress_replication_protocol	Choice	bgp, static, unknown	No

ranges (nxos.devices.configuration.system.nve_overlay_vlans)

Name	Type	Constraint	Mandatory	Default Value
from	Integer	min: 1, max: 4094	Yes
to	Integer	min: 1, max: 4094	Yes

vlans (nxos.devices.configuration.system.nve_infra_vlans)

Name	Type	Constraint	Mandatory	Default Value
ids	List	Integer[min: 1, max: 4096]	No
ranges	List	ranges	No

ranges (nxos.devices.configuration.system.nve_infra_vlans.vlans)

Name	Type	Constraint	Mandatory	Default Value
from	Integer	min: 1, max: 4096	Yes
to	Integer	min: 1, max: 4096	Yes

Examples

Example 1: Basic NVE interface with BGP host reachability for a VXLAN leaf

nxos:
  devices:
    - name: LEAF1
      configuration:
        interfaces:
          nve:
            shutdown: false
            advertise_virtual_rmac: true
            host_reachability_protocol: bgp
            source_interface_type: loopback
            source_interface_id: "1"

Example 2: NVE with L2 VNI (ingress replication) and L3 VNI (associate VRF) mappings

nxos:
  devices:
    - name: LEAF1
      configuration:
        interfaces:
          nve:
            shutdown: false
            advertise_virtual_rmac: true
            host_reachability_protocol: bgp
            source_interface_type: loopback
            source_interface_id: "1"
            vnis:
              - vni: 10101
                ingress_replication_protocol: bgp
              - vni: 10102
                ingress_replication_protocol: bgp
              - vni: 11010
                associate_vrf: true
              - vni: 11020
                associate_vrf: true

Example 3: NVE with multicast groups, ARP suppression, and multisite DCI

nxos:
  devices:
    - name: BORDER-LEAF1
      configuration:
        interfaces:
          nve:
            shutdown: false
            advertise_virtual_rmac: true
            host_reachability_protocol: bgp
            source_interface_type: loopback
            source_interface_id: "1"
            global_suppress_arp: true
            multisite_border_gateway_interface_type: loopback
            multisite_border_gateway_interface_id: "100"
            multisite_virtual_rmac: 00:00:0c:aa:bb:cc
            vnis:
              - vni: 10101
                mcast_group: 239.1.1.1
                multisite_ingress_replication: optimized
              - vni: 10102
                mcast_group: 239.1.1.2
                multisite_ingress_replication: optimized
              - vni: 11010
                associate_vrf: true

Example 4: VXLAN UDP port and source port mode

nxos:
  devices:
    - name: LEAF1
      configuration:
        system:
          nv_overlay_vxlan_udp_port: 4789
          nv_overlay_vxlan_udp_source_port_mode: high

Example 5: NVE platform configuration with infra VLANs for bud-node VXLAN

nxos:
  devices:
    - name: LEAF1
      configuration:
        system:
          nve_ipmc_index_size: 4096
          nve_overlay_vlans:
            ranges:
              - from: 2
                to: 10
          nve_infra_vlans:
            - vlans:
                ids: [2]
              force: true
            - vlans:
                ids: [3]
              force: true

Example 6: NVE interface with an ingress QoS policy for decapsulated VXLAN traffic

nxos:
  devices:
    - name: LEAF1
      configuration:
        qos:
          class_maps:
            - name: CM-VOICE
              match_type: match-any
              match_dscp_values:
                - 46
          policy_maps:
            - name: PM-NVE-INGRESS
              classes:
                - name: CM-VOICE
                  set_qos_group: 5
        interfaces:
          nve:
            shutdown: false
            host_reachability_protocol: bgp
            source_interface_type: loopback
            source_interface_id: "1"
            service_policy_type_qos_input: PM-NVE-INGRESS
            service_policy_type_qos_input_statistics: true

Example 7: Tenant Routed Multicast (TRM) on a VXLAN EVPN leaf

nxos:
  devices:
    - name: LEAF1
      configuration:
        feature:
          bgp: true
          ngmvpn: true
          nv_overlay: true
        system:
          advertise_evpn_multicast: true
          ip_multicast_overlay_spt_only: true
        routing:
          bgp:
            asn: "65001"
            mvpn_vri_id: 100
        vrfs:
          - name: BLUE
            vni: 50001
            l3vni: true
            mdt_v4_vxlan: true
            mdt_v6_vxlan: false

Examples

Example 1: Basic NVE interface with BGP host reachability for a VXLAN leaf

nxos:
  devices:
    - name: LEAF1
      configuration:
        interfaces:
          nve:
            shutdown: false
            advertise_virtual_rmac: true
            host_reachability_protocol: bgp
            source_interface_type: loopback
            source_interface_id: "1"

Example 2: NVE with L2 VNI (ingress replication) and L3 VNI (associate VRF) mappings

nxos:
  devices:
    - name: LEAF1
      configuration:
        interfaces:
          nve:
            shutdown: false
            advertise_virtual_rmac: true
            host_reachability_protocol: bgp
            source_interface_type: loopback
            source_interface_id: "1"
            vnis:
              - vni: 10101
                ingress_replication_protocol: bgp
              - vni: 10102
                ingress_replication_protocol: bgp
              - vni: 11010
                associate_vrf: true
              - vni: 11020
                associate_vrf: true

Example 3: NVE with multicast groups, ARP suppression, and multisite DCI

nxos:
  devices:
    - name: BORDER-LEAF1
      configuration:
        interfaces:
          nve:
            shutdown: false
            advertise_virtual_rmac: true
            host_reachability_protocol: bgp
            source_interface_type: loopback
            source_interface_id: "1"
            global_suppress_arp: true
            multisite_border_gateway_interface_type: loopback
            multisite_border_gateway_interface_id: "100"
            multisite_virtual_rmac: 00:00:0c:aa:bb:cc
            vnis:
              - vni: 10101
                mcast_group: 239.1.1.1
                multisite_ingress_replication: enableOptimized
              - vni: 10102
                mcast_group: 239.1.1.2
                multisite_ingress_replication: enableOptimized
              - vni: 11010
                associate_vrf: true