A method comprising: receiving, by a first provider edge, PE, device of an Ethernet segment and from a second PE device of the Ethernet segment that provides a customer edge, CE, device multi-homed to the first PE device and the second PE device with reachability to an Ethernet Virtual Private Network, EVPN, instance , a reroute tunnel endpoint address of the second PE device for a backup path to the second PE device, wherein the reroute tunnel endpoint address of the second PE device is associated with a second split-horizon group (Y) that is different than a tunnel endpoint address and a first split-horizon group (X) of the second PE device for another path to the second PE device; configuring, by a routing component of the first PE device and within a forwarding component of the first PE device, a backup path to the second PE device over a core network, wherein configuring the backup path comprises installing the reroute tunnel endpoint address within the forwarding component and one or more operations causing the forwarding component to encapsulate, to a packet received from the core network, a Virtualized eXtensible Local Area Network, VXLAN, header including the reroute tunnel endpoint address as a destination tunnel endpoint address of the VXLAN header; receiving, by the forwarding component of first PE device, a packet from the core network; and rerouting, by the forwarding component of the first PE device and when an access link from the first PE device to the CE device has failed, the packet on the backup path by encapsulating the VXLAN header including the reroute tunnel endpoint address and forwarding the packet including the reroute tunnel endpoint address on the backup path to the second PE device over the core network. receiving, by a first provider edge, PE, device of an Ethernet segment and from a second PE device of the Ethernet segment that provides a customer edge, CE, device multi-homed to the first PE device and the second PE device with reachability to an Ethernet Virtual Private Network, EVPN, instance , a reroute tunnel endpoint address of the second PE device for a backup path to the second PE device, wherein the reroute tunnel endpoint address of the second PE device is associated with a second split-horizon group (Y) that is different than a tunnel endpoint address and a first split-horizon group (X) of the second PE device for another path to the second PE device; configuring, by a routing component of the first PE device and within a forwarding component of the first PE device, a backup path to the second PE device over a core network, wherein configuring the backup path comprises installing the reroute tunnel endpoint address within the forwarding component and one or more operations causing the forwarding component to encapsulate, to a packet received from the core network, a Virtualized eXtensible Local Area Network, VXLAN, header including the reroute tunnel endpoint address as a destination tunnel endpoint address of the VXLAN header; receiving, by the forwarding component of first PE device, a packet from the core network; and rerouting, by the forwarding component of the first PE device and when an access link from the first PE device to the CE device has failed, the packet on the backup path by encapsulating the VXLAN header including the reroute tunnel endpoint address and forwarding the packet including the reroute tunnel endpoint address on the backup path to the second PE device over the core network. <EOS>