Staff

Troubleshooting Tip: Useful commands for Troubleshooting VXLAN EVPN on FortiOS

Forum|Forum|9 months ago
October 30, 2025
0 replies
1162 views

Description

This article provides a consolidated list of useful FortiOS commands for verifying and troubleshooting a VXLAN deployment that uses an EVPN-MP-BGP control plane.

These commands allow an administrator to check the BGP neighbor status, verify MAC address learning, and inspect the EVPN tables.

Scope

FortiGate.

Solution

The following commands can be used from the FortiGate CLI to diagnose and validate the VXLAN EVPN configuration:

Command	Purpose	Check/observe
diagnose sys vxlan fdb list <vxlan1>	Show the VXLAN forwarding database	Verify MAC addresses learned from remote VTEPs.
diagnose netlink brctl name host <sw1>	Show the bridge MAC table	Confirm local and remote MACs are learned in the bridge domain.
get router info bgp evpn summary	Display the BGP EVPN neighbor summary	Check the BGP session state and uptime.
get router info bgp evpn network	Show the EVPN MAC/IP routes.	Verify Route Type 2 and 3 advertisements
get router info bgp evpn context	Show EVPN context / VNI info.	Validate the bridge domain, VNI, and source interface
get router info bgp neighbors <IP> routes evpn	Show EVPN routes from a specific neighbor	Check MAC/IP routes advertised/received from the peer
get l2vpn evpn instance	Show EVPN instance information	Confirm IP learning, ARP suppression, and VNI/bridge mapping.
get l2vpn evpn table	Show the EVPN MAC/IP tables.	Verify local/remote MACs, IPs, and VNI binding.
diagnose ip parp list	Show the proxy ARP table.	Check for ARP proxy entries for remote hosts (if ARP suppression is enabled).

Sign up

Login with SSO

Login to the community

Login with SSO