EVPN – Public VRF

Public VRF is built to provide connectivity with public peers (IP Transit) and the Outside Firewall Zone and is an example of L2/L3 VRFs extended over the backhaul.

Core VTEPs in each of the datacenters are configured with matching RTs allowing EVPN peers to carry the traffic across the backhaul with no need for additional BGP connectivity.

Layer three interfaces have been stood up on each of the core switches allowing for upstream/downstream BGP peering as needed (more on this in a respective chapter)