Hey everyone,

Municipal utility with water/wastewater, gas, electric, and telecommunication services. Telco network is Arista SR-MPLS with BGP EVPN for services overlay for L2VPN/pseudowires and L3VPN. I am working on a proof or concept refresh of the campus network using Arista hardware and deploying an EVPN VXLAN campus fabric for zero-trust macro-segmentation. A large business use-case for this design is using EVPN to build overlay networks to provide segmentation of OT/SCADA networks.

I haven't been able to find any use-case/vendor validated designs. Curious if anyone has implemented a similar solution, and interested to hear other network operators thoughts.

Edit to add context of specific business challenge:

As most here have probably experienced, IT costs have exploded recently. 4 different SCADA networks = 8 firewalls (4 x 2 at each site). A similar challenge exist for server hardware and broadcomm licensing.…