--- title: Extend Layer 2 networks into Red Hat OpenShift... description: A step-by-step walkthrough shows how to extend Layer 2 networks into Red Hat OpenShift Virtualization using BGP and EVPN with MAC-VRFs. The approach lets teams... canonical: https://daily.dev/posts/extend-layer-2-networks-into-red-hat-openshift-virtualization-with-bgp-and-evpn-qkrbp4oft twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Extend Layer 2 networks into Red Hat OpenShift Virtualization with BGP and EVPN | daily.dev og:description: A step-by-step walkthrough shows how to extend Layer 2 networks into Red Hat OpenShift Virtualization using BGP and EVPN with MAC-VRFs. The approach lets teams... og:url: https://daily.dev/posts/extend-layer-2-networks-into-red-hat-openshift-virtualization-with-bgp-and-evpn-qkrbp4oft og:image: https://api.daily.dev/og/posts/qKrbp4OfT.png og:image:alt: Extend Layer 2 networks into Red Hat OpenShift Virtualization with BGP and EVPN og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Extend Layer 2 networks into Red Hat OpenShift Virtualization with BGP and EVPN **[Red Hat Developer](https://daily.dev/sources/rhdev)** · 11 min read · 0 upvotes · 0 comments ## Summary A step-by-step walkthrough shows how to extend Layer 2 networks into Red Hat OpenShift Virtualization using BGP and EVPN with MAC-VRFs. The approach lets teams import VMs from legacy bare-metal infrastructure without changing their IP or MAC addresses, and enforces strict multi-tenant network isolation even when tenant networks use overlapping IP spaces. The guide covers enabling BGP in the OpenShift network operator, configuring static IPs on secondary NICs, creating VTEP and FRRConfiguration custom resources, defining a ClusterUserDefinedNetwork with EVPN transport, setting up route advertisements, and verifying connectivity and live migration behavior against an external FRR-based router. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How can I migrate a VM to OpenShift Virtualization without changing its IP and MAC address? Extend the Layer 2 broadcast domain into OpenShift using EVPN with MAC-VRFs so the imported VM retains its original IP and MAC. Configure a ClusterUserDefinedNetwork with transport EVPN, a VTEP custom resource, and BGP route advertisements so the VM can boot on the new cluster and immediately communicate with legacy application tiers without re-addressing. _See how daily.dev surfaces practical networking guides for teams planning bare-metal-to-OpenShift VM migrations._ ### How does EVPN keep overlapping tenant IP address spaces isolated in a shared OpenShift cluster? EVPN enforces strict end-to-end network segmentation by mapping each tenant's ClusterUserDefinedNetwork to its own VXLAN VNI and MAC-VRF, so tenants like HR and Finance can use overlapping IP ranges without collisions. This extends isolation from the legacy physical network directly into the shared cluster without manual configuration drift. _Developers weighing multi-tenant network designs can track EVPN and OpenShift networking updates on daily.dev._ ### Does a VM's MAC address change when it live-migrates between OpenShift nodes with EVPN configured? No, the MAC address stays the same after live migration. In a tested example, a VM moved from node 3 to node 1 while keeping MAC address 0a:58:16:64:00:03; the external router received a BGP/EVPN update pointing the route to the new node's VTEP IP, so external connectivity continued without interruption. _daily.dev helps engineers verifying VM live-migration behavior stay current on OpenShift networking techniques._ ## Similar posts on daily.dev - [Exposing OpenShift networks using BGP](https://daily.dev/posts/exposing-openshift-networks-using-bgp-avwlypif7) · Red Hat Developer · 0 upvotes · 0 comments - [How to import provider network routes to OpenShift via BGP](https://daily.dev/posts/how-to-import-provider-network-routes-to-openshift-via-bgp-vgwd6yrjl) · Red Hat Developer · 1 upvotes · 0 comments --- Tags: [#kubernetes](https://daily.dev/tags/kubernetes), [#infrastructure](https://daily.dev/tags/infrastructure), [#openshift](https://daily.dev/tags/openshift), [#bgp](https://daily.dev/tags/bgp), [#evpn](https://daily.dev/tags/evpn) [View this post on daily.dev](https://daily.dev/posts/extend-layer-2-networks-into-red-hat-openshift-virtualization-with-bgp-and-evpn-qkrbp4oft) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Extend Layer 2 networks into Red Hat OpenShift Virtualization with BGP and EVPN","url":"https://daily.dev/posts/extend-layer-2-networks-into-red-hat-openshift-virtualization-with-bgp-and-evpn-qkrbp4oft","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/extend-layer-2-networks-into-red-hat-openshift-virtualization-with-bgp-and-evpn-qkrbp4oft"},"datePublished":"2026-09-03T03:24:56.125Z","dateModified":"2026-09-03T04:18:36.656Z","description":"A step-by-step walkthrough shows how to extend Layer 2 networks into Red Hat OpenShift Virtualization using BGP and EVPN with MAC-VRFs. The approach lets teams...","image":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","thumbnailUrl":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","isAccessibleForFree":true,"articleSection":"Red Hat Developer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Red Hat Developer","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/2a8895f3216c4900bdc455585a4ad3e4","url":"https://daily.dev/sources/rhdev"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/extend-layer-2-networks-into-red-hat-openshift-virtualization-with-bgp-and-evpn-qkrbp4oft","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"kubernetes,infrastructure,openshift,bgp,evpn","timeRequired":"PT11M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Red Hat Developer","item":"https://daily.dev/sources/rhdev"},{"@type":"ListItem","position":3,"name":"Extend Layer 2 networks into Red Hat OpenShift Virtualization with BGP and EVPN"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/extend-layer-2-networks-into-red-hat-openshift-virtualization-with-bgp-and-evpn-qkrbp4oft#faq","mainEntity":[{"@type":"Question","name":"How can I migrate a VM to OpenShift Virtualization without changing its IP and MAC address?","acceptedAnswer":{"@type":"Answer","text":"Extend the Layer 2 broadcast domain into OpenShift using EVPN with MAC-VRFs so the imported VM retains its original IP and MAC. Configure a ClusterUserDefinedNetwork with transport EVPN, a VTEP custom resource, and BGP route advertisements so the VM can boot on the new cluster and immediately communicate with legacy application tiers without re-addressing. See how daily.dev surfaces practical networking guides for teams planning bare-metal-to-OpenShift VM migrations."}},{"@type":"Question","name":"How does EVPN keep overlapping tenant IP address spaces isolated in a shared OpenShift cluster?","acceptedAnswer":{"@type":"Answer","text":"EVPN enforces strict end-to-end network segmentation by mapping each tenant's ClusterUserDefinedNetwork to its own VXLAN VNI and MAC-VRF, so tenants like HR and Finance can use overlapping IP ranges without collisions. This extends isolation from the legacy physical network directly into the shared cluster without manual configuration drift. Developers weighing multi-tenant network designs can track EVPN and OpenShift networking updates on daily.dev."}},{"@type":"Question","name":"Does a VM's MAC address change when it live-migrates between OpenShift nodes with EVPN configured?","acceptedAnswer":{"@type":"Answer","text":"No, the MAC address stays the same after live migration. In a tested example, a VM moved from node 3 to node 1 while keeping MAC address 0a:58:16:64:00:03; the external router received a BGP/EVPN update pointing the route to the new node's VTEP IP, so external connectivity continued without interruption. daily.dev helps engineers verifying VM live-migration behavior stay current on OpenShift networking techniques."}}]} ```