What this overlay actually buys you on the security side, beyond writing firewall policies, plus an honest list of what it does not buy you, and an FAQ on VXLAN and EVPN versus plain VLANs.
Swapping the static VXLAN peer list for a BGP EVPN control plane across a FortiGate and a three node Proxmox cluster, and every place the two platforms tripped me up by disagreeing on what to state versus what to derive.
How I carve up the /56 that Cox delegates over DHCPv6-PD across a FortiGate edge and a Brocade ICX core, why the prefix keeps changing, and the plan for automating the renumbering.