# EVPN Hub-and-Spoke Layer-3 VPN

DevFeed: [EVPN Hub-and-Spoke Layer-3 VPN](<https://devfeed.tech/articles/evpn-hub-and-spoke-layer-3-vpn-11066.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2024/09/hub-spoke-evpn/>)

Published: 2024-09-18T05:59:00Z

Content type: tutorial

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [evpn](<https://devfeed.tech/topics/evpn.md>), [Virtual Private Network](<https://devfeed.tech/topics/vpn.md>), [BGP](<https://devfeed.tech/topics/bgp.md>), [VXLAN](<https://devfeed.tech/topics/vxlan.md>), [Network](<https://devfeed.tech/topics/network.md>)

Tags: [bgp](<https://devfeed.tech/tags/bgp.md>), [design](<https://devfeed.tech/tags/design.md>), [evpn](<https://devfeed.tech/tags/evpn.md>), [github](<https://devfeed.tech/tags/github.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [ospf](<https://devfeed.tech/tags/ospf.md>), [vpn](<https://devfeed.tech/tags/vpn.md>), [vxlan](<https://devfeed.tech/tags/vxlan.md>)

## AI overview

This tutorial expands a hub-and-spoke Layer 3 VPN design to EVPN using three PE devices and a core router. It configures VLANs, VXLAN, BGP, OSPF, and EVPN, and explains how a route propagates through the resulting topology.

## Source excerpt

Now that we figured out how to implement a hub-and-spoke VPN design on a single PE-router, let's do the same thing with EVPN. It turns out to be trivial: We'll split the single PE router into three PE devices (pe_a, pe_b, and pe_h) We'll add a core router (p) and connect it with all three PE devices. As we want to use EVPN and have a larger core network, we'll also have to enable VLANs, VXLAN, BGP, and OSPF on the PE devices. This is the topology of our expanded lab: Read more ...