VXLAN BGP EVPN on OS10 - Firewalling and Routing

Hello,

we have configured a VXLAN BGP EVPN on our OS10 switches. The configuration is working so far. All VTEPs learn the other VTEPS over the control plane and with the command "show evpn mac" we can see the remote and local Mac Addresses. A ping between different Servers in the same subnet is also working. 

What do we have to do that the command "show evpn mac-ip" is working? Right now there are no results for this command.

We also have to find a way for the routing and firewalling between different VNIs. One solution for routing in the guides is to work with symmetric IRB. How do you realize the firewalling then between the different VNIs? Do you work with Access Control Lists on your switches? Do you have an idea for a central firewalling? 

Kind regards 

Sven