This EVPN VXLAN training hub helps you choose the right course for your starting point: overlay fundamentals, EVPN route-type theory, Cisco Nexus CLI deployment, Nexus Dashboard operations, advanced Multi-Site engineering, or migration from a classical Ethernet data center.
All 6 courses, about 43 hours of video, are included in one membership. You can compare the paths below and start with the course that matches your current fabric, lab access, and design responsibility through membership access.
EVPN-VXLAN is a modern network architecture commonly used in data centers. It combines VXLAN as the data planewith BGP EVPN as the control plane.
VXLAN creates scalable Layer 2 and Layer 3 overlay networks across an IP-based underlay. It uses VTEPs (VXLAN Tunnel Endpoints) to encapsulate traffic and transport it across the network.
BGP EVPN distributes MAC and IP reachability information between VTEPs. Instead of relying only on traditional flood-and-learn behavior, EVPN provides a more scalable and efficient control plane.
VXLAN separates the tenant Layer 2 or Layer 3 service from the physical IP fabric. Instead of stretching VLANs across a large Spanning Tree domain, you build a routed spine-leaf underlay and use VTEPs to encapsulate tenant traffic into VXLAN packets. The underlay only needs IP reachability between VTEP loopbacks; the overlay carries tenant segmentation through VNIs.
EVPN changes the learning model. Traditional Ethernet learns MAC addresses reactively in the data plane by flooding unknown traffic. BGP EVPN advertises MAC, IP, Ethernet segment, inclusive multicast, and prefix information in the control plane, so the fabric can reduce flooding, support multihoming, and make forwarding decisions before traffic arrives.
The operational model also changes. You troubleshoot two networks at the same time: the underlay that must provide stable reachability and ECMP, and the overlay that must import the correct Route Targets, install L2RIB and L3RIB entries, build NVE adjacencies, and map VLANs to VNIs correctly. Many production failures are not caused by VXLAN encapsulation itself; they come from inconsistent VNIs, wrong RD/RT policy, MTU mismatch, underlay multicast or ingress replication design, external routing leaks, vPC or ESI multihoming behavior, and migration boundaries.
EVPN route types matter because each one solves a different fabric problem. Route Type 1 supports Ethernet Auto-Discovery and mass withdrawal for multihomed segments. Route Type 2 advertises MAC and MAC/IP reachability. Route Type 3 builds the inclusive multicast tree used for BUM replication. Route Type 4 discovers Ethernet Segment members and supports Designated Forwarder election. Route Type 5 advertises IP prefixes for routed connectivity, firewall insertion, and external networks.
| Design area | Classical Ethernet / 3-tier data center | VXLAN EVPN fabric |
|---|---|---|
| Layer 2 scale | VLANs are tied to local switching domains and often constrained by STP, vPC, and aggregation boundaries. | Layer 2 segments are mapped to VNIs and can exist as overlay services across routed leaf-spine paths. |
| Learning model | MAC learning is reactive and data-plane driven; unknown unicast and ARP create flooding pressure. | BGP EVPN distributes MAC, MAC/IP, multicast, Ethernet Segment, and prefix reachability through route types. |
| Underlay forwarding | Redundancy often depends on blocked links, chassis virtualization, or carefully constrained Layer 2 domains. | The underlay is routed and can use ECMP across spines with OSPF, IS-IS, or BGP depending on design. |
| Default gateway | First-hop routing often uses HSRP/VRRP at aggregation or core layers. | Distributed anycast gateway places the default gateway on each leaf for local routing and symmetric IRB. |
| Multitenancy | Segmentation is commonly VLAN and VRF based but harder to stretch consistently at scale. | L2 VNIs, L3 VNIs, VRFs, RD/RT policy, and BGP EVPN imports define tenant reachability. |
| External connectivity | Routing usually exits through core or aggregation devices with fewer overlay considerations. | Border leafs, L3Out-style models, route-maps, prefix-lists, Route Type 5, and VRF route control become design points. |
| Migration risk | Existing HSRP, vPC, STP, and VLAN numbering are already operational but may block scale. | Cutover requires gateway strategy, L2/L3 interconnects, loop prevention, VLAN-to-VNI mapping, and coexistence planning. |
EVPN is also used outside VXLAN, including MPLS VPN-style provider designs, but the data center use case is different. MPLS VPN normally builds routed VPN services across an MPLS transport; VXLAN EVPN usually builds tenant Layer 2 and Layer 3 overlays across an IP fabric. If your work is data center fabric design, focus on VTEPs, VNIs, anycast gateways, symmetric IRB, BUM handling, and the EVPN route types used by Nexus and similar switching platforms.
Pick the path that matches your current responsibility: learning the model, building a Cisco fabric, operating it with Nexus Dashboard, or migrating a live data center.
Foundation
Start here if you need a clean mental model for what an overlay is, how a tunnel differs from a service abstraction, and why MTU, scale, resiliency, and visibility become design issues before you touch VXLAN.
Start with this courseGeneral EVPN/VXLAN design
Use this path if you are a network engineer, designer, or solution architect who wants the protocol and design view: EVPN proactive learning, underlay and overlay models, Route Types 1 through 5, vPC, ESI multihoming, firewall insertion, and exit leaf options.
Start with this courseCisco Nexus CLI
Choose this path if you want a beginner-friendly Cisco Nexus sequence that maps CCNA-level routing and switching knowledge to underlay, MP-BGP EVPN, VNIs, anycast gateway, vPC, border leafs, route control, and Multi-Site.
Start with this courseCisco Nexus Dashboard
Take this after you can read and build a VXLAN EVPN fabric on NX-OS. It covers Nexus Dashboard 4.2 cluster deployment, Fabric Builder, POAP onboarding, L3Out, brownfield import, Multi-Site parent fabrics, and endpoint tracing.
Start with this courseAdvanced engineering
Use this track when the basics are clear and you need deeper engineering practice across underlay protocols, Flood and Learn to EVPN migration, vPC integration, ARP suppression, VXLANv6, VRF leaking, default route advertisement, TRM, and Multi-Site.
Start with this courseMigration
Choose this path if the hard problem is not greenfield deployment but cutover. It focuses on HSRP/vPC brownfield environments, L2 and L3 interconnects, STP control, gateway migration, VLAN-to-VNI mapping, workload moves, and NX-OS 10.2(3)+ coexistence mechanics.
Start with this courseUse the course cards below to compare level, duration, instructor, lab focus, and whether the course is stronger for theory, Cisco CLI deployment, Nexus Dashboard operations, advanced engineering, or migration.
Best first full VXLAN EVPN course for engineers with CCNA-level routing and switching. You build a Cisco Nexus fabric with underlay, MP-BGP EVPN, VNIs, vPC, border leaf routing, route control, and Multi-Site.
For engineers, designers, and solution architects who need EVPN/VXLAN theory in depth. Strongest course for route types, BUM behavior, underlay and overlay options, vPC, ESI multihoming, firewall insertion, and exit designs.
For engineers who already understand VXLAN EVPN on NX-OS and need Nexus Dashboard 4.2 operations. You deploy ND, build greenfield fabrics, import brownfield fabrics, configure L3Out, and validate Multi-Site.
For senior engineers and consultants migrating HSRP/vPC 3-tier data centers to VXLAN EVPN. It focuses on cutover planning, L2/L3 interconnects, STP control, gateway migration, VLAN-to-VNI mapping, and workload mobility.
For engineers who know the basics and need deeper deployment practice. It covers underlay options, Flood and Learn to EVPN, symmetric IRB, vPC, ARP suppression, VXLANv6, VRF leaking, default routes, Multi-Site, and TRM.
For learners who want the overlay and tunnel model before VXLAN EVPN. It explains overlay versus tunnel, control-plane and data-plane considerations, MTU and fragmentation, resiliency, scale, and visibility trade-offs.
EVPN Route Type 1 – Ethernet Auto-Discovery (A-D)
Route Type 1 is mainly used for EVPN multihoming. It helps advertise Ethernet Segment information and supports functions such as aliasing, fast convergence, and mass withdrawal when a link or PE/VTEP fails.
EVPN Route Type 2 – MAC/IP Advertisement
Route Type 2 advertises MAC addresses and, optionally, their associated IP addresses between VTEPs. It is one of the most important EVPN route types because it enables control-plane MAC/IP learning and helps reduce traditional data-plane flooding. It also supports features such as ARP and Neighbor Discovery suppression.
EVPN Route Type 3 – Inclusive Multicast Ethernet Tag (IMET)
Route Type 3 is used to build the distribution mechanism for BUM traffic: Broadcast, Unknown Unicast, and Multicast. VTEPs advertise their participation in a VNI so that BUM traffic can be delivered to the required remote VTEPs.
EVPN Route Type 4 – Ethernet Segment
Route Type 4 is used in EVPN multihoming environments. It advertises Ethernet Segment information between EVPN devices and plays an important role in Designated Forwarder (DF) election and multihoming operations.
EVPN Route Type 5 – IP Prefix
Route Type 5 advertises IP prefixes through the EVPN control plane. It is primarily used for Layer 3 connectivity and allows IP networks to be exchanged between VTEPs without advertising every destination as a MAC/IP route.
Together, these EVPN route types provide the control-plane information required for scalable MAC learning, IP routing, multihoming, BUM traffic handling, and Layer 2/Layer 3 services in an EVPN-VXLAN network.
You do not need to buy separate VXLAN, EVPN, migration, and Nexus Dashboard courses. Use one membership to move from overlay theory to fabric deployment and operations.
Learning EVPN-VXLAN is easier when the technologies are studied in the correct order. Network engineers should first understand traditional IP networking and BGP before moving into VXLAN encapsulation and the BGP EVPN control plane.
A practical EVPN-VXLAN learning path can follow these steps:
1. Networking Fundamentals
Start with IP addressing, routing, switching, VLANs, and trunking. These concepts provide the foundation for understanding data center fabrics.
2. BGP Fundamentals
Learn BGP neighbors, route advertisements, route policies, iBGP versus eBGP, route reflectors, and BGP attributes. BGP becomes especially important because MP-BGP EVPN provides the control plane for EVPN-VXLAN.
3. Data Center Underlay
Understand spine-leaf architecture and how OSPF, IS-IS, or eBGP can provide IP reachability between VTEPs. The underlay must provide reliable and scalable connectivity before the VXLAN overlay can operate.
4. VXLAN Fundamentals
Learn VXLAN encapsulation, VTEPs, VNIs, UDP-based tunneling, and how Layer 2 and Layer 3 networks can be transported across an IP fabric.
5. BGP EVPN Control Plane
Study EVPN route types, MAC/IP advertisement, Route Distinguishers, Route Targets, and control-plane learning. This explains how VTEPs discover remote endpoints and exchange reachability information.
6. L2VNI, L3VNI and IRB
Understand the difference between Layer 2 VNIs and Layer 3 VNIs, tenant VRFs, Anycast Gateway, inter-subnet routing, and symmetric versus asymmetric IRB.
7. EVPN Multihoming, Design and Troubleshooting
Finally, study Ethernet Segments, ESI, Designated Forwarder election, all-active multihoming, redundancy, scalability, failure scenarios, and EVPN-VXLAN troubleshooting.
Hands-on labs should be used throughout the learning path. Engineers should be able to build an EVPN-VXLAN fabric, verify BGP EVPN routes, examine VXLAN tunnels and VNIs, configure L2/L3 services, and troubleshoot both the underlay and overlay networks.
Use these recommendations when two courses look similar. The right first course depends on whether you need theory, configuration, controller operations, advanced design, or migration planning.
If you are new to overlays and tunnels
→ Understanding Overlays and Tunnels
Take this short course first because VXLAN is easier when you already understand the difference between an overlay service and a tunnel, and when you know why MTU, scale, resiliency, and operational visibility matter.
If you know routing and switching but not VXLAN EVPN
→ Building VXLAN EVPN Fabrics Course
Start here if you have CCNA-level knowledge and can read OSPF and BGP. It builds the mental model and then walks through Cisco Nexus underlay, MP-BGP EVPN, L2 and L3 VNIs, vPC, border leafs, route control, and Multi-Site.
If you need the EVPN route-type and design deep dive
→ EVPN - VXLAN Training by Toni Pasanen
Choose this course when you need protocol-level detail: proactive versus reactive learning, underlay and overlay design options, Route Types 1 through 5, BUM handling, L2RIB and L3RIB behavior, ESI multihoming, firewall placement, and exit designs.
If you are designing a deeper production fabric
→ VXLAN EVPN Engineering: From Core Underlay to Multi-Site Fabric
Use this advanced course when you need more than a basic fabric. It covers underlay choices, Flood and Learn to EVPN, symmetric IRB, vPC, ingress replication and multicast, second-tier leafs, ARP suppression, VXLANv6, VRF leaking, default routes, Multi-Site, and TRM.
The instructors are listed only where they appear in the supplied course data. Each card reflects the courses they teach in this hub.
Teaches the Cisco Nexus VXLAN EVPN build course and the Nexus Dashboard 4.2 operations course. His courses focus on underlay and overlay deployment, vPC, border leaf routing, Multi-Site, brownfield import, and verification with production-style show commands.
View main courseTeaches the EVPN - VXLAN design course with Orhan Ergun. The course focuses on EVPN/VXLAN theory, underlay and overlay design options, BUM handling, route types, vPC, ESI multihoming, firewall implementation, and external connectivity.
View main courseAppears in the EVPN - VXLAN Training by Toni Pasanen course and goes through the course agenda with Toni. The course is aimed at engineers, designers, and solution architects who need detailed EVPN/VXLAN design understanding.
View main courseTeaches the advanced VXLAN EVPN engineering course and the migration course. His topics include underlay construction, Flood and Learn to EVPN, symmetric IRB, vPC, IPv6 VXLAN, VRF leaking, Multi-Site, HSRP/vPC migration, and gateway cutover strategy.
View main courseTeaches the overlay and tunnel fundamentals course. His course focuses on overlay theory, the distinction between overlays and tunnels, and design challenges such as scale, resiliency, MTU, fragmentation, and operational visibility.
View main courseIf you are not comfortable with overlays and tunnels, start with Understanding Overlays and Tunnels. It gives you the terminology and design problems behind encapsulation, MTU, scale, and visibility.
If you already understand basic routing, switching, VLANs, OSPF, and BGP, start with Building VXLAN EVPN Fabrics Course. It is the best first full VXLAN BGP EVPN build course in this hub.
Building VXLAN EVPN Fabrics Course is the better starting point if you want to build and verify a Cisco Nexus fabric end to end. It maps existing routing and switching knowledge to underlay, MP-BGP EVPN, VNIs, vPC, border leaf routing, route control, and Multi-Site.
EVPN - VXLAN Training by Toni Pasanen is stronger for theory and design depth. It spends more time on EVPN route types, underlay and overlay design models, BUM handling, L2RIB and L3RIB behavior, vPC, ESI multihoming, firewall implementation, and external connectivity design.
Several courses are explicitly lab-focused. The Cisco fabric build course includes single-site and Multi-Site labs, the Nexus Dashboard course includes a lab workbook and lab setup guidance, the migration course includes a workbook and PNETLab files, and the advanced engineering course lists hands-on lab exercises across underlay, overlay, vPC, VXLANv6, VRF leaking, and Multi-Site topics.
The Toni Pasanen EVPN - VXLAN course is different: the catalogue states that it does not come with lab configurations or lab workbooks. Treat it as a theory and design deep-dive rather than the main hands-on lab course.
For the beginner Cisco VXLAN EVPN course, you should have CCNA-level networking: IP addressing, VLANs, trunking, basic routing, OSPF and BGP fundamentals, and the ability to read Cisco CLI configurations. You do not need prior VXLAN, EVPN, or NX-OS experience for that course.
For Nexus Dashboard, you should already understand VXLAN EVPN on NX-OS through the CLI, including underlay routing, MP-BGP EVPN, VNIs, VRFs, symmetric IRB, and anycast gateway. For the migration and advanced engineering courses, experience with OSPF, BGP, traditional data center architectures, vPC, HSRP, VLANs, STP, and NX-OS operations is useful.
Building VXLAN EVPN Fabrics Course explicitly lists EVPN Route Types 1 through 5 as an outcome and explains what each route type carries and when it is used. It is the most direct route if you want route types tied to a Cisco Nexus fabric build.
EVPN - VXLAN Training by Toni Pasanen also goes deep on route types, including Route Type 2 for MAC advertisement, Route Type 3 for inclusive multicast, Route Type 4 for Ethernet Segment discovery, Route Type 1 for Ethernet AD, and Route Type 5 for prefix advertisement.
Take Deploying VXLAN EVPN Fabrics with Cisco Nexus Dashboard 4.2 if you already understand a VXLAN EVPN fabric built on NX-OS. It is not the best first VXLAN course because it assumes you can read outputs such as show ip route and show bgp l2vpn evpn.
The course covers Nexus Dashboard cluster deployment, Fabric Builder, POAP switch onboarding, device roles, vPC domains, VRFs and networks, overlay verification, L3Out external connectivity, route control, brownfield import, and Multi-Site fabric groups.
Use Design and Migrate Modern Data Centers with VXLAN EVPN. It is built around the hard production problem: moving from legacy 3-tier designs with HSRP, vPC, STP, and VLAN boundaries into a Cisco Nexus VXLAN BGP EVPN fabric.
The course covers discovery, L2 and L3 interconnects, gateway movement, STP control, VLAN selection, 12-bit VLAN to 24-bit VNI mapping, MAC table stability, workload mobility, and NX-OS 10.2(3)+ coexistence mechanics.
You do not need to deploy Flood and Learn in production before learning BGP EVPN, but it is useful to understand what EVPN improves. Flood and Learn shows the limitation of data-plane learning and BUM replication without a stronger control plane.
VXLAN EVPN Engineering: From Core Underlay to Multi-Site Fabric explicitly walks from VXLAN Flood and Learn to EVPN. The migration course also treats Flood and Learn as a possible beginning state before moving to BGP EVPN.
Several courses cover Multi-Site, but with different angles. Building VXLAN EVPN Fabrics Course introduces VXLAN EVPN Multi-Site with Border Gateways and includes a Multi-Site deployment lab.
Deploying VXLAN EVPN Fabrics with Cisco Nexus Dashboard 4.2 covers Multi-Site through Nexus Dashboard, including a parent fabric, child fabrics, Inter-Site Network modeling, stretched VRFs, and endpoint tracing. VXLAN EVPN Engineering includes Multi-Site as part of its advanced deployment topics.
Membership gives you access to the 6 courses in this EVPN VXLAN hub, totaling about 43 hours of video training. The path includes overlay fundamentals, EVPN/VXLAN design, Cisco Nexus CLI fabric deployment, Nexus Dashboard 4.2 operations, advanced engineering, and migration-focused content.
You can start with one course and continue into the others without choosing a separate purchase path. See the current membership options at /pricing.
Choose the course that matches your starting point, then work forward into Cisco Nexus deployment, Nexus Dashboard operations, advanced engineering, or migration. One membership gives you access to the full EVPN VXLAN path in this hub.
Start your membership
