Troubleshooting shows EVPN reachability to a remote VTEP is healthy, yet application flows between two groups still fail. What GBP-related explanation should be considered?
Select an answer to reveal the explanation.
Short Explanation
The map says the road exists, but the badge reader still says no. Routing reachability and GBP permission are different gates—fix both when apps fail with healthy EVPN.
Full Explanation
EVPN can provide MAC/IP and IP-prefix reachability while GBP still denies the session based on group policy. Operators must separate “can the fabric route?” from “does group policy allow?” Type-5 or other route presence does not inherently override GBP denies, and GBP is not gated on underlay TTL expiry.