{"id":20324574,"url":"https://github.com/netascode/terraform-iosxe-evpn-overlay","last_synced_at":"2026-05-29T21:31:28.753Z","repository":{"id":38207898,"uuid":"492891026","full_name":"netascode/terraform-iosxe-evpn-overlay","owner":"netascode","description":"Terraform Cisco IOS-XE EVPN Overlay Module","archived":false,"fork":false,"pushed_at":"2024-02-10T12:05:11.000Z","size":41,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-01-14T14:14:06.949Z","etag":null,"topics":["catalyst","cisco","evpn","iac","ios-xe","iosxe","overlay","terraform","terraform-module"],"latest_commit_sha":null,"homepage":"https://registry.terraform.io/modules/netascode/evpn-overlay/iosxe","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/netascode.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2022-05-16T15:19:39.000Z","updated_at":"2022-05-16T15:48:26.000Z","dependencies_parsed_at":"2023-10-11T10:43:32.486Z","dependency_job_id":"70f86d12-abfa-42a0-ac2a-9e784bc7920f","html_url":"https://github.com/netascode/terraform-iosxe-evpn-overlay","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netascode%2Fterraform-iosxe-evpn-overlay","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netascode%2Fterraform-iosxe-evpn-overlay/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netascode%2Fterraform-iosxe-evpn-overlay/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netascode%2Fterraform-iosxe-evpn-overlay/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/netascode","download_url":"https://codeload.github.com/netascode/terraform-iosxe-evpn-overlay/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":241827465,"owners_count":20026693,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["catalyst","cisco","evpn","iac","ios-xe","iosxe","overlay","terraform","terraform-module"],"created_at":"2024-11-14T19:34:34.024Z","updated_at":"2026-05-29T21:31:28.747Z","avatar_url":"https://github.com/netascode.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003c!-- BEGIN_TF_DOCS --\u003e\n[![Tests](https://github.com/netascode/terraform-iosxe-evpn-overlay/actions/workflows/test.yml/badge.svg)](https://github.com/netascode/terraform-iosxe-evpn-overlay/actions/workflows/test.yml)\n\n# Terraform Cisco IOS-XE EVPN Overlay Module\n\nThis module can manage a Catalyst 9000 EVPN fabric overlay.\n\nThe following assumptions have been made:\n\n- A working underlay network including VTEP loopbacks is pre-configured (e.g., using the [EVPN OSPF Underlay Terraform Module](https://registry.terraform.io/modules/netascode/evpn-ospf-underlay/iosxe))\n- A single BGP AS is used for all devices with spines acting as route reflectors\n- All services will be provisioned on all leafs\n- No L2 or L3 access interfaces will be provisioned\n- A `l2_service` refers to a single L2 VNI\n- A `l3_service` refers to a single VRF and L3 VNI\n- A `l3_service` SVI will be provisioned as an anycast gateway on all leafs with a corresponding L2 VNI\n- If no `ipv4_multicast_group` is configured ingress replication will be used\n\n## Examples\n\n```hcl\nmodule \"iosxe_evpn_overlay\" {\n  source  = \"netascode/evpn-overlay/iosxe\"\n  version = \"\u003e= 0.1.0\"\n\n  leafs                = [\"LEAF-1\", \"LEAF-2\"]\n  spines               = [\"SPINE-1\", \"SPINE-2\"]\n  underlay_loopback_id = 0\n\n  underlay_loopbacks = [\n    {\n      device       = \"SPINE-1\",\n      ipv4_address = \"10.1.100.1\"\n    },\n    {\n      device       = \"SPINE-2\",\n      ipv4_address = \"10.1.100.2\"\n    },\n    {\n      device       = \"LEAF-1\",\n      ipv4_address = \"10.1.100.3\"\n    },\n    {\n      device       = \"LEAF-2\",\n      ipv4_address = \"10.1.100.4\"\n    }\n  ]\n\n  bgp_asn = 65000\n\n  l3_services = [\n    {\n      name = \"GREEN\"\n      id   = 1000\n    },\n    {\n      name = \"BLUE\"\n      id   = 1010\n    }\n  ]\n\n  l2_services = [\n    {\n      name                 = \"L2_101\"\n      id                   = 101\n      ipv4_multicast_group = \"225.0.0.101\"\n      ip_learning          = true\n    },\n    {\n      name = \"L2_102\"\n      id   = 102\n    },\n    {\n      name                     = \"GREEN_1001\"\n      id                       = 1001\n      ipv4_multicast_group     = \"225.0.1.1\"\n      l3_service               = \"GREEN\"\n      ipv4_address             = \"172.16.1.1\"\n      ipv4_mask                = \"255.255.255.0\"\n      ip_learning              = true\n      re_originate_route_type5 = true\n    },\n    {\n      name         = \"BLUE_1011\"\n      id           = 1011\n      l3_service   = \"BLUE\"\n      ipv4_address = \"172.17.1.1\"\n      ipv4_mask    = \"255.255.255.0\"\n    }\n  ]\n}\n```\n\n## Requirements\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"requirement_terraform\"\u003e\u003c/a\u003e [terraform](#requirement\\_terraform) | \u003e= 1.3.0 |\n| \u003ca name=\"requirement_iosxe\"\u003e\u003c/a\u003e [iosxe](#requirement\\_iosxe) | \u003e= 0.3.0 |\n\n## Providers\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"provider_iosxe\"\u003e\u003c/a\u003e [iosxe](#provider\\_iosxe) | \u003e= 0.3.0 |\n\n## Inputs\n\n| Name | Description | Type | Default | Required |\n|------|-------------|------|---------|:--------:|\n| \u003ca name=\"input_leafs\"\u003e\u003c/a\u003e [leafs](#input\\_leafs) | List of leaf device names. This list of devices must also be added to the provider configuration. | `set(string)` | `[]` | no |\n| \u003ca name=\"input_spines\"\u003e\u003c/a\u003e [spines](#input\\_spines) | List of spine device names. This list of devices must also be added to the provider configuration. | `set(string)` | `[]` | no |\n| \u003ca name=\"input_underlay_loopback_id\"\u003e\u003c/a\u003e [underlay\\_loopback\\_id](#input\\_underlay\\_loopback\\_id) | Loopback ID used for underlay routing and BGP. | `number` | `0` | no |\n| \u003ca name=\"input_underlay_loopbacks\"\u003e\u003c/a\u003e [underlay\\_loopbacks](#input\\_underlay\\_loopbacks) | List of underlay loopback interfaces. These loopbacks are assumed to be pre-configured on every device. | \u003cpre\u003elist(object({\u003cbr\u003e    device       = string\u003cbr\u003e    ipv4_address = string\u003cbr\u003e  }))\u003c/pre\u003e | `[]` | no |\n| \u003ca name=\"input_vtep_loopback_id\"\u003e\u003c/a\u003e [vtep\\_loopback\\_id](#input\\_vtep\\_loopback\\_id) | Loopback ID used for VTEP loopbacks. These loopbacks are assumed to be pre-configured on all leafs. | `number` | `1` | no |\n| \u003ca name=\"input_bgp_asn\"\u003e\u003c/a\u003e [bgp\\_asn](#input\\_bgp\\_asn) | BGP AS number. | `number` | `65000` | no |\n| \u003ca name=\"input_l3_services\"\u003e\u003c/a\u003e [l3\\_services](#input\\_l3\\_services) | List of L3 services. `name` is the VRF name. `id` is the core-facing SVI VLAN ID. If no `ipv4_multicast_group` is specified, ingress replication will be used. | \u003cpre\u003elist(object({\u003cbr\u003e    name = string\u003cbr\u003e    id   = number\u003cbr\u003e  }))\u003c/pre\u003e | `[]` | no |\n| \u003ca name=\"input_l2_services\"\u003e\u003c/a\u003e [l2\\_services](#input\\_l2\\_services) | List of L2 services. `id` is the access VLAN ID. If no `ipv4_multicast_group` is specified, ingress replication will be used. | \u003cpre\u003elist(object({\u003cbr\u003e    name                     = string\u003cbr\u003e    id                       = number\u003cbr\u003e    ipv4_multicast_group     = optional(string)\u003cbr\u003e    l3_service               = optional(string)\u003cbr\u003e    ipv4_address             = optional(string)\u003cbr\u003e    ipv4_mask                = optional(string)\u003cbr\u003e    ip_learning              = optional(bool)\u003cbr\u003e    re_originate_route_type5 = optional(bool)\u003cbr\u003e  }))\u003c/pre\u003e | `[]` | no |\n\n## Outputs\n\nNo outputs.\n\n## Resources\n\n| Name | Type |\n|------|------|\n| [iosxe_bgp.bgp](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/bgp) | resource |\n| [iosxe_bgp_address_family_ipv4_vrf.bgp_af_ipv4_vrf](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/bgp_address_family_ipv4_vrf) | resource |\n| [iosxe_bgp_address_family_ipv6_vrf.bgp_af_ipv6_vrf](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/bgp_address_family_ipv6_vrf) | resource |\n| [iosxe_bgp_address_family_l2vpn.bgp_l2vpn](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/bgp_address_family_l2vpn) | resource |\n| [iosxe_bgp_l2vpn_evpn_neighbor.bgp_l2vpn_evpn_neighbor_leaf](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/bgp_l2vpn_evpn_neighbor) | resource |\n| [iosxe_bgp_l2vpn_evpn_neighbor.bgp_l2vpn_evpn_neighbor_spine](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/bgp_l2vpn_evpn_neighbor) | resource |\n| [iosxe_bgp_neighbor.bgp_neighbor_leaf](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/bgp_neighbor) | resource |\n| [iosxe_bgp_neighbor.bgp_neighbor_spine](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/bgp_neighbor) | resource |\n| [iosxe_evpn.evpn](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/evpn) | resource |\n| [iosxe_evpn_instance.l2_evpn_instance](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/evpn_instance) | resource |\n| [iosxe_interface_nve.nve](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/interface_nve) | resource |\n| [iosxe_interface_vlan.l2_svi](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/interface_vlan) | resource |\n| [iosxe_interface_vlan.l3_core_svi](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/interface_vlan) | resource |\n| [iosxe_vlan_configuration.l2_vlan_configuration](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/vlan_configuration) | resource |\n| [iosxe_vlan_configuration.l3_vlan_configuration](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/vlan_configuration) | resource |\n| [iosxe_vrf.vrf](https://registry.terraform.io/providers/CiscoDevNet/iosxe/latest/docs/resources/vrf) | resource |\n\u003c!-- END_TF_DOCS --\u003e","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnetascode%2Fterraform-iosxe-evpn-overlay","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnetascode%2Fterraform-iosxe-evpn-overlay","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnetascode%2Fterraform-iosxe-evpn-overlay/lists"}