Summary: Has enough positions to pass.
§10: It would help if the security considerations talked about how the security considerations from 7432 apply to the scenarios in this document, rather than just reference them.
Possible nit: sec 9.1.3: "It is worth noting that unless: a) control or management plane learning is performed through the entire EVI or b) all the EVI- attached devices signal their presence when they come up (GARPs or similar), unknown unicast flooding must be enabled." Is this "must be enabled" or "must not be enabled"?
Thanks for addressing the SecDir review.