Access security support in EVPN-VXLAN overlay networks

Junos OS supports access security features on devices that function as Layer 2 VXLAN gateways in an EVPN-VXLAN centrally-routed overlay network (two-layer IP fabric). Devices support the following features on Layer 2 server-facing interfaces that are associated with VXLAN-mapped VLANs:

• DHCPv4 and DHCPv6 snooping.
• Dynamic ARP inspection (DAI).
• Neighbor discovery inspection (NDI).
• IPv4 and IPv6 source guard.
• Router advertisement (RA) guard. 

The access security features function the same and you configure them in the same way in an EVPN-VXLAN environment as you do in a non-EVPN-VXLAN environment. However, keep these differences in mind: 

1. We do not support these features on multihomed servers.
2. These features do not influence the VXLAN tunneling and encapsulation process.