Side note: not able to open a bug via bug report. error message “You can not select this edit policy, because you would no longer be able to edit the object.”
It seems that, when configuring multiple L3 VPN with EVPN (and VXLAN transport), only the first VRF is configured correctly. any other vrf is missing frr configuration parts.
As example, the following configuration:
set interfaces bridge br5042 description 'Dummy Bridge for L3VNI 5042'
set interfaces bridge br5042 member interface vxlan5042
set interfaces bridge br5042 vrf 'customer'
set interfaces bridge br5067 description 'Dummy Bridge for L3VNI 5067'
set interfaces bridge br5067 member interface vxlan5067
set interfaces bridge br5067 vrf 'other'
set interfaces dummy dum0 address '10.0.0.5/32'
set interfaces ethernet eth1 address '10.1.0.1/30'
set interfaces ethernet eth1 description 'dut -> s2'
set interfaces ethernet eth1 mtu '1600'
set interfaces ethernet eth2 address '172.16.0.5/24'
set interfaces ethernet eth2 description 'dut -> hr1 [stub]'
set interfaces ethernet eth2 mtu '1500'
set interfaces ethernet eth2 vrf 'customer'
set interfaces ethernet eth3 address '172.16.2.5/24'
set interfaces ethernet eth3 description 'dut -> hb1 [stub]'
set interfaces ethernet eth3 mtu '1500'
set interfaces ethernet eth3 vrf 'other'
set interfaces vxlan vxlan5042 parameters nolearning
set interfaces vxlan vxlan5042 port '4789'
set interfaces vxlan vxlan5042 source-address '10.0.0.5'
set interfaces vxlan vxlan5042 vni '5042'
set interfaces vxlan vxlan5067 parameters nolearning
set interfaces vxlan vxlan5067 port '4789'
set interfaces vxlan vxlan5067 source-address '10.0.0.5'
set interfaces vxlan vxlan5067 vni '5067'
set protocols bgp address-family l2vpn-evpn advertise ipv4 unicast
set protocols bgp address-family l2vpn-evpn advertise-all-vni
set protocols bgp address-family l2vpn-evpn advertise-svi-ip
set protocols bgp neighbor 10.0.0.6 address-family l2vpn-evpn soft-reconfiguration inbound
set protocols bgp neighbor 10.0.0.6 description 's2'
set protocols bgp neighbor 10.0.0.6 remote-as '65000'
set protocols bgp neighbor 10.0.0.6 update-source 'dum0'
set protocols bgp parameters router-id '10.0.0.5'
set protocols bgp system-as '65000'
set protocols ospf interface dum0 area '0.0.0.0'
set protocols ospf interface dum0 passive
set protocols ospf interface eth1 area '0.0.0.0'
set protocols ospf interface eth1 network 'point-to-point'
set protocols ospf parameters router-id '10.0.0.5'
set vrf name customer protocols bgp address-family ipv4-unicast export vpn
set vrf name customer protocols bgp address-family ipv4-unicast import vpn
set vrf name customer protocols bgp address-family ipv4-unicast label vpn export 'auto'
set vrf name customer protocols bgp address-family ipv4-unicast network 172.16.0.0/24
set vrf name customer protocols bgp address-family ipv4-unicast rd vpn export '65000:1'
set vrf name customer protocols bgp address-family ipv4-unicast redistribute connected
set vrf name customer protocols bgp address-family ipv4-unicast route-target vpn export '65000:1'
set vrf name customer protocols bgp address-family ipv4-unicast route-target vpn import '65000:1'
set vrf name customer protocols bgp address-family l2vpn-evpn advertise ipv4 unicast
set vrf name customer protocols bgp address-family l2vpn-evpn rd '65000:1'
set vrf name customer protocols bgp address-family l2vpn-evpn route-target export '65000:1'
set vrf name customer protocols bgp address-family l2vpn-evpn route-target import '65000:1'
set vrf name customer protocols bgp address-family l2vpn-evpn vni 5042
set vrf name customer protocols bgp parameters router-id '10.0.0.5'
set vrf name customer protocols bgp system-as '65000'
set vrf name customer table '100'
set vrf name customer vni '5042'
set vrf name other protocols bgp address-family ipv4-unicast export vpn
set vrf name other protocols bgp address-family ipv4-unicast import vpn
set vrf name other protocols bgp address-family ipv4-unicast label vpn export 'auto'
set vrf name other protocols bgp address-family ipv4-unicast network 172.16.2.0/24
set vrf name other protocols bgp address-family ipv4-unicast rd vpn export '65000:2'
set vrf name other protocols bgp address-family ipv4-unicast redistribute connected
set vrf name other protocols bgp address-family ipv4-unicast route-target vpn export '65000:2'
set vrf name other protocols bgp address-family ipv4-unicast route-target vpn import '65000:2'
set vrf name other protocols bgp address-family l2vpn-evpn advertise ipv4 unicast
set vrf name other protocols bgp address-family l2vpn-evpn rd '65000:2'
set vrf name other protocols bgp address-family l2vpn-evpn route-target export '65000:2'
set vrf name other protocols bgp address-family l2vpn-evpn route-target import '65000:2'
set vrf name other protocols bgp address-family l2vpn-evpn vni 5067
set vrf name other protocols bgp parameters router-id '10.0.0.5'
set vrf name other protocols bgp system-as '65000'
set vrf name other table '101'
set vrf name other vni '5067'
is producing the following frr configuration (relevant parts only):
router bgp 65000 vrf customer
bgp router-id 10.0.0.5
no bgp ebgp-requires-policy
no bgp reject-as-sets
no bgp default ipv4-unicast
no bgp network import-check
!
address-family ipv4 unicast
network 172.16.0.0/24
redistribute connected
label vpn export auto
rd vpn export 65000:1
rt vpn both 65000:1
export vpn
import vpn
exit-address-family
!
address-family l2vpn evpn
advertise ipv4 unicast
rd 65000:1
route-target import 65000:1
route-target export 65000:1
exit-address-family
exit
!
router bgp 65000 vrf other
bgp router-id 10.0.0.5
no bgp ebgp-requires-policy
no bgp reject-as-sets
no bgp default ipv4-unicast
no bgp network import-check
!
address-family ipv4 unicast
network 172.16.2.0/24
redistribute connected
label vpn export auto
rd vpn export 65000:2
rt vpn both 65000:2
export vpn
import vpn
exit-address-family
exit
as you can see, the instance router bgp 65000 vrf other is completely missing the address-family l2vpn evpn configuration.
Verified on release 2026.03 and 2026.05.09-0042-rolling