Question

A data center runs VXLAN BGP EVPN across two leaf switches (Leaf1 and Leaf2) with ARP suppression enabled on the bridge domain's associated VLAN. Host A on Leaf1 attempts to reach Host B, a silent host connected to Leaf2 that has not yet sent any traffic. Host A sends an ARP request for Host B. Which behavior occurs?

Accepted Answer

Because Host B is silent and unknown to the EVPN control plane, Leaf1 has no cached entry and floods the ARP request across the VXLAN fabric to trigger Host B to respond.

Answer

Leaf1 replies to the ARP request locally using an entry already in its ARP suppression cache, so no flooding occurs and Host B is reached immediately.

Answer

The ARP request is dropped by Leaf1 because ARP suppression prohibits any Layer 2 broadcast from leaving the ingress leaf under all conditions.

Answer

Leaf1 forwards the ARP request as a unicast VXLAN packet directly to Leaf2 based on the underlay multicast group, bypassing the EVPN control plane.