Enterprise networks around the world are adopting cloud and cloud-based applications to improve their competitiveness, lower IT costs, and provide users with anytime, anywhere access to resources and data. This trend, driven largely by the widespread use of mobile devices, social media, and collaboration tools, along with the growing number of Internet of Things (IoT) devices, is having a significant impact on enterprise campus networks. A growing number of network endpoints, coupled with rapidly evolving business needs, is driving demand for highly scalable networks that are not only simple, scalable, and programmable, but also built on a standards-based architecture that is common across the campus and data centers. The increasing use of IoT devices also means that these networks are expected to scale rapidly and since many of these IoT devices have limited networking capabilities, they mandate unconventional requirements from the network without adding complexity and resources.
Most traditional campus architectures are based on proprietary vendor lock-in technologies designed to address the needs of traditional campuses with static requirements and single vendor deployments. While these architectures work well in small campuses that are static, they are simply too rigid to support the scalability and ever-changing needs of modern large enterprises.
Juniper’s EVPN-VXLAN based campus architecture uses a Layer 3 IP-based underlay with EVPN-VXLAN overlay. This architecture addresses the needs of the modern enterprise by decoupling virtual topology from the physical topology. This enables simple IP based layer 3 network underlay that limits the layer 2 broadcast domain and a flexible overlay with efficient layer 3 or layer 2 connectivity depending on business needs. Endpoints that require layer 2 adjacency like some IoT devices can be placed anywhere in the network and remain connected to the same logical L2 network with consistent network access policies.
Juniper’s EVPN-VXLAN based campus architecture supports multiple deployment models. Enterprise can deploy IP fabric with EVPN-VXLAN overlay only at the core/distribution layer and the access layer can be a layer 2 Virtual Chassis. Or enterprises can deploy end-to-end IP fabric underlay with EVPN-VXLAN overlay across core, distribution and access layers.
With control plane based L2/L3 learning, this architecture reduces the flood and learn issues associated with data plane learning in traditional architectures. Juniper’s EVPN-VXLAN based campus architecture allows enterprises to easily add additional core, distribution, and access layer devices as the business grows without having to redesign the network or perform a forklift upgrade. This is a big shift from the rigid chassis based traditional architectures. This vendor-agnostic solution allows enterprises to utilize their existing access layer infrastructure and gradually migrate to access layer switches from Juniper.
Juniper’s EVPN-VXLAN based campus networks provide the following benefits:
- Consistent architecture for any scale
- Enterprises typically have multiple campuses or sites with different size requirements. These requirements can be met with a common EVPN-VXLAN based campus architecture that is consistent across all sites, irrespective of the size of the site. The architecture also provides the flexibility to scale out or scale in as the requirements of a site change
- Non-proprietary architecture, enabling multi-vendor deployment
- The architecture is uses standards-based protocols like EVPN and VXLAN enabling Enterprises to deploy campus networks using best-in-class multi-vendor network equipment
- Control plane L2/L3 learning reduces flood and learn
- Learning MAC addresses in the forwarding plane has an adverse impact on network performance as the number of endpoints grow in large enterprise networks. Juniper’s EVPN-VXLAN campus architecture uses an EVPN control plane for exchange and learning of routes, avoiding exchanging newly learned MAC addresses in the forwarding plane.
- Location agnostic connectivity enables L2 mobility and consistent user/endpoint experience
- Some endpoints require L2 adjacency. For example, legacy building security systems or some IoT devices are L2-based. Juniper’s EVPN-VXLAN campus architecture can easily provide layer 2 adjacency inside a campus and across campuses with an L2 VXLAN overlay without any changes to the underlay. With Juniper’s standards-based NAC integration, an endpoint can be connected anywhere in the network allowing that endpoint to have the same level of access to the network
- Flexible WAN overlay design because VXLAN is underlay agnostic
- One of the key benefits of VXLAN is that it is underlay agnostic. You can connect multiple campuses using an L2VPN or L3VPN service from a WAN provider or connect campuses using IPSec over Internet and still provide a VXLAN overlay on top of these WAN connections
- Consistent network segmentation across campuses and datacenters
- With a consistent EVPN-VXLAN based architecture across campuses and datacenters, Enterprises can now easily provide consistent end-to-end network segmentation for endpoints and applications
- Common design means common skillsets and tools to manage datacenter and campus
- When enterprises design campuses and datacenters based on a common EVPN-VXLAN design, they can use common tools and common network teams to deploy and manage campus and datacenter networks
Juniper’s Evolved Campus solution based on VXLAN overlay with EVPN control plane is an efficient and scalable way to build campuses and interconnect multiple campuses, datacenters and public cloud. With a robust BGP/EVPN implementation on all platforms, Juniper is uniquely positioned to bring EVPN technology to its full potential by providing optimized, seamless, and standards-compliant L2 or L3 connectivity, both within and across today’s evolving campuses, data centers and cloud infrastructure.
Learn More
The Evolved Campus Core Solution Brief
What is EVPN-VXLAN?
