Add Core router configs (AS 65500, iBGP + VRF gold transit)
core1/core2 provide L3 transit between DC and Campus fabrics. Each physical link toward a Border Leaf is subinterfaced (.100 default, .200 VRF gold). OSPF area 0 in default VRF, eBGP to DC BLs (65005) and Campus BLs (66005), iBGP between core1 and core2 via Loopback0. VRF gold uses redistribute connected and VRF-aware eBGP sessions on .200 subinterfaces to stitch VRF gold end-to-end across fabrics.
This commit is contained in:
224
configs/core1.cfg
Normal file
224
configs/core1.cfg
Normal file
@@ -0,0 +1,224 @@
|
|||||||
|
! Core1 Configuration
|
||||||
|
! Core Router - AS 65500
|
||||||
|
! Transit between DC Border Leafs and Campus Border Leafs
|
||||||
|
!
|
||||||
|
hostname core1
|
||||||
|
!
|
||||||
|
! LLDP Management0
|
||||||
|
lldp management-address Management0
|
||||||
|
!
|
||||||
|
! enable gNMI API
|
||||||
|
management api gnmi
|
||||||
|
transport grpc default
|
||||||
|
provider eos-native
|
||||||
|
!
|
||||||
|
! admin/admin for ssh access
|
||||||
|
username admin privilege 15 role network-admin secret sha512 $6$xQktFrbdeqEhVzLM$.1wOJB25nw2fqYaSXDu6y4mo6AP9hngMCFe2vGDl84hWoz00Q.4unoEBqspNI0HEoRz.OZhdBHqQv12KABf0B0
|
||||||
|
!
|
||||||
|
! Enable IP routing
|
||||||
|
ip routing
|
||||||
|
!
|
||||||
|
! Enable routing protocols
|
||||||
|
service routing protocols model multi-agent
|
||||||
|
!
|
||||||
|
! VRF Definition
|
||||||
|
vrf instance gold
|
||||||
|
!
|
||||||
|
! Management interface
|
||||||
|
interface Management0
|
||||||
|
ip address 172.16.0.10/24
|
||||||
|
!
|
||||||
|
! Loopback for BGP Router-ID (default VRF)
|
||||||
|
interface Loopback0
|
||||||
|
description Router-ID
|
||||||
|
ip address 10.0.200.1/32
|
||||||
|
!
|
||||||
|
! Loopback in VRF Gold (router-id and health)
|
||||||
|
interface Loopback1
|
||||||
|
description VRF-Gold-RouterID
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.200.101/32
|
||||||
|
!
|
||||||
|
! Link to DC Border Leaf 1 (subinterfaced: .100 default VRF, .200 VRF gold)
|
||||||
|
interface Ethernet1
|
||||||
|
description border-leaf-dc1
|
||||||
|
no switchport
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet1.100
|
||||||
|
description border-leaf-dc1-underlay
|
||||||
|
encapsulation dot1q vlan 100
|
||||||
|
ip address 10.0.4.0/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet1.200
|
||||||
|
description border-leaf-dc1-vrf-gold
|
||||||
|
encapsulation dot1q vlan 200
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.14.0/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
! Link to DC Border Leaf 2
|
||||||
|
interface Ethernet2
|
||||||
|
description border-leaf-dc2
|
||||||
|
no switchport
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet2.100
|
||||||
|
description border-leaf-dc2-underlay
|
||||||
|
encapsulation dot1q vlan 100
|
||||||
|
ip address 10.0.4.2/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet2.200
|
||||||
|
description border-leaf-dc2-vrf-gold
|
||||||
|
encapsulation dot1q vlan 200
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.14.2/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
! Link to Campus Border Leaf 1
|
||||||
|
interface Ethernet3
|
||||||
|
description border-leaf-campus1
|
||||||
|
no switchport
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet3.100
|
||||||
|
description border-leaf-campus1-underlay
|
||||||
|
encapsulation dot1q vlan 100
|
||||||
|
ip address 10.0.5.0/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet3.200
|
||||||
|
description border-leaf-campus1-vrf-gold
|
||||||
|
encapsulation dot1q vlan 200
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.15.0/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
! Link to Campus Border Leaf 2
|
||||||
|
interface Ethernet4
|
||||||
|
description border-leaf-campus2
|
||||||
|
no switchport
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet4.100
|
||||||
|
description border-leaf-campus2-underlay
|
||||||
|
encapsulation dot1q vlan 100
|
||||||
|
ip address 10.0.5.2/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet4.200
|
||||||
|
description border-leaf-campus2-vrf-gold
|
||||||
|
encapsulation dot1q vlan 200
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.15.2/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
! Inter-Core link
|
||||||
|
interface Ethernet5
|
||||||
|
description core2
|
||||||
|
no switchport
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet5.100
|
||||||
|
description core2-underlay
|
||||||
|
encapsulation dot1q vlan 100
|
||||||
|
ip address 10.0.200.128/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet5.200
|
||||||
|
description core2-vrf-gold
|
||||||
|
encapsulation dot1q vlan 200
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.200.130/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
! IP Routing
|
||||||
|
ip routing
|
||||||
|
ip routing vrf gold
|
||||||
|
ip route 100.64.0.0/10 172.16.0.254
|
||||||
|
!
|
||||||
|
! OSPF for loopback reachability (default VRF)
|
||||||
|
router ospf 1
|
||||||
|
router-id 10.0.200.1
|
||||||
|
passive-interface default
|
||||||
|
no passive-interface Ethernet1.100
|
||||||
|
no passive-interface Ethernet2.100
|
||||||
|
no passive-interface Ethernet3.100
|
||||||
|
no passive-interface Ethernet4.100
|
||||||
|
no passive-interface Ethernet5.100
|
||||||
|
network 10.0.200.1/32 area 0
|
||||||
|
network 10.0.4.0/31 area 0
|
||||||
|
network 10.0.4.2/31 area 0
|
||||||
|
network 10.0.5.0/31 area 0
|
||||||
|
network 10.0.5.2/31 area 0
|
||||||
|
network 10.0.200.128/31 area 0
|
||||||
|
max-lsa 12000
|
||||||
|
!
|
||||||
|
! BGP Configuration
|
||||||
|
router bgp 65500
|
||||||
|
router-id 10.0.200.1
|
||||||
|
no bgp default ipv4-unicast
|
||||||
|
bgp log-neighbor-changes
|
||||||
|
distance bgp 20 200 200
|
||||||
|
maximum-paths 4 ecmp 64
|
||||||
|
!
|
||||||
|
! iBGP to core2 (loopback-based, default VRF)
|
||||||
|
neighbor core_ibgp peer group
|
||||||
|
neighbor core_ibgp remote-as 65500
|
||||||
|
neighbor core_ibgp update-source Loopback0
|
||||||
|
neighbor core_ibgp next-hop-self
|
||||||
|
neighbor core_ibgp send-community extended
|
||||||
|
neighbor core_ibgp maximum-routes 12000 warning-only
|
||||||
|
neighbor 10.0.200.2 peer group core_ibgp
|
||||||
|
!
|
||||||
|
! eBGP to DC Border Leafs (default VRF)
|
||||||
|
neighbor dc_bl peer group
|
||||||
|
neighbor dc_bl remote-as 65005
|
||||||
|
neighbor dc_bl send-community extended
|
||||||
|
neighbor dc_bl maximum-routes 12000 warning-only
|
||||||
|
neighbor 10.0.4.1 peer group dc_bl
|
||||||
|
neighbor 10.0.4.3 peer group dc_bl
|
||||||
|
!
|
||||||
|
! eBGP to Campus Border Leafs (default VRF)
|
||||||
|
neighbor campus_bl peer group
|
||||||
|
neighbor campus_bl remote-as 66005
|
||||||
|
neighbor campus_bl send-community extended
|
||||||
|
neighbor campus_bl maximum-routes 12000 warning-only
|
||||||
|
neighbor 10.0.5.1 peer group campus_bl
|
||||||
|
neighbor 10.0.5.3 peer group campus_bl
|
||||||
|
!
|
||||||
|
! IPv4 address family (default VRF)
|
||||||
|
address-family ipv4
|
||||||
|
neighbor core_ibgp activate
|
||||||
|
neighbor dc_bl activate
|
||||||
|
neighbor campus_bl activate
|
||||||
|
network 10.0.200.1/32
|
||||||
|
!
|
||||||
|
! VRF Gold configuration - transit for inter-fabric routing
|
||||||
|
vrf gold
|
||||||
|
rd 10.0.200.1:100001
|
||||||
|
router-id 10.0.200.1
|
||||||
|
! iBGP to core2 in VRF gold (P2P)
|
||||||
|
neighbor 10.0.200.131 remote-as 65500
|
||||||
|
neighbor 10.0.200.131 next-hop-self
|
||||||
|
neighbor 10.0.200.131 send-community extended
|
||||||
|
neighbor 10.0.200.131 maximum-routes 12000 warning-only
|
||||||
|
! eBGP to DC Border Leafs in VRF gold
|
||||||
|
neighbor 10.0.14.1 remote-as 65005
|
||||||
|
neighbor 10.0.14.1 send-community extended
|
||||||
|
neighbor 10.0.14.1 maximum-routes 12000 warning-only
|
||||||
|
neighbor 10.0.14.3 remote-as 65005
|
||||||
|
neighbor 10.0.14.3 send-community extended
|
||||||
|
neighbor 10.0.14.3 maximum-routes 12000 warning-only
|
||||||
|
! eBGP to Campus Border Leafs in VRF gold
|
||||||
|
neighbor 10.0.15.1 remote-as 66005
|
||||||
|
neighbor 10.0.15.1 send-community extended
|
||||||
|
neighbor 10.0.15.1 maximum-routes 12000 warning-only
|
||||||
|
neighbor 10.0.15.3 remote-as 66005
|
||||||
|
neighbor 10.0.15.3 send-community extended
|
||||||
|
neighbor 10.0.15.3 maximum-routes 12000 warning-only
|
||||||
|
redistribute connected
|
||||||
|
!
|
||||||
|
end
|
||||||
224
configs/core2.cfg
Normal file
224
configs/core2.cfg
Normal file
@@ -0,0 +1,224 @@
|
|||||||
|
! Core2 Configuration
|
||||||
|
! Core Router - AS 65500
|
||||||
|
! Transit between DC Border Leafs and Campus Border Leafs
|
||||||
|
!
|
||||||
|
hostname core2
|
||||||
|
!
|
||||||
|
! LLDP Management0
|
||||||
|
lldp management-address Management0
|
||||||
|
!
|
||||||
|
! enable gNMI API
|
||||||
|
management api gnmi
|
||||||
|
transport grpc default
|
||||||
|
provider eos-native
|
||||||
|
!
|
||||||
|
! admin/admin for ssh access
|
||||||
|
username admin privilege 15 role network-admin secret sha512 $6$xQktFrbdeqEhVzLM$.1wOJB25nw2fqYaSXDu6y4mo6AP9hngMCFe2vGDl84hWoz00Q.4unoEBqspNI0HEoRz.OZhdBHqQv12KABf0B0
|
||||||
|
!
|
||||||
|
! Enable IP routing
|
||||||
|
ip routing
|
||||||
|
!
|
||||||
|
! Enable routing protocols
|
||||||
|
service routing protocols model multi-agent
|
||||||
|
!
|
||||||
|
! VRF Definition
|
||||||
|
vrf instance gold
|
||||||
|
!
|
||||||
|
! Management interface
|
||||||
|
interface Management0
|
||||||
|
ip address 172.16.0.11/24
|
||||||
|
!
|
||||||
|
! Loopback for BGP Router-ID (default VRF)
|
||||||
|
interface Loopback0
|
||||||
|
description Router-ID
|
||||||
|
ip address 10.0.200.2/32
|
||||||
|
!
|
||||||
|
! Loopback in VRF Gold (router-id and health)
|
||||||
|
interface Loopback1
|
||||||
|
description VRF-Gold-RouterID
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.200.102/32
|
||||||
|
!
|
||||||
|
! Link to DC Border Leaf 1
|
||||||
|
interface Ethernet1
|
||||||
|
description border-leaf-dc1
|
||||||
|
no switchport
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet1.100
|
||||||
|
description border-leaf-dc1-underlay
|
||||||
|
encapsulation dot1q vlan 100
|
||||||
|
ip address 10.0.4.4/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet1.200
|
||||||
|
description border-leaf-dc1-vrf-gold
|
||||||
|
encapsulation dot1q vlan 200
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.14.4/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
! Link to DC Border Leaf 2
|
||||||
|
interface Ethernet2
|
||||||
|
description border-leaf-dc2
|
||||||
|
no switchport
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet2.100
|
||||||
|
description border-leaf-dc2-underlay
|
||||||
|
encapsulation dot1q vlan 100
|
||||||
|
ip address 10.0.4.6/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet2.200
|
||||||
|
description border-leaf-dc2-vrf-gold
|
||||||
|
encapsulation dot1q vlan 200
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.14.6/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
! Link to Campus Border Leaf 1
|
||||||
|
interface Ethernet3
|
||||||
|
description border-leaf-campus1
|
||||||
|
no switchport
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet3.100
|
||||||
|
description border-leaf-campus1-underlay
|
||||||
|
encapsulation dot1q vlan 100
|
||||||
|
ip address 10.0.5.4/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet3.200
|
||||||
|
description border-leaf-campus1-vrf-gold
|
||||||
|
encapsulation dot1q vlan 200
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.15.4/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
! Link to Campus Border Leaf 2
|
||||||
|
interface Ethernet4
|
||||||
|
description border-leaf-campus2
|
||||||
|
no switchport
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet4.100
|
||||||
|
description border-leaf-campus2-underlay
|
||||||
|
encapsulation dot1q vlan 100
|
||||||
|
ip address 10.0.5.6/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet4.200
|
||||||
|
description border-leaf-campus2-vrf-gold
|
||||||
|
encapsulation dot1q vlan 200
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.15.6/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
! Inter-Core link
|
||||||
|
interface Ethernet5
|
||||||
|
description core1
|
||||||
|
no switchport
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet5.100
|
||||||
|
description core1-underlay
|
||||||
|
encapsulation dot1q vlan 100
|
||||||
|
ip address 10.0.200.129/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
interface Ethernet5.200
|
||||||
|
description core1-vrf-gold
|
||||||
|
encapsulation dot1q vlan 200
|
||||||
|
vrf gold
|
||||||
|
ip address 10.0.200.131/31
|
||||||
|
mtu 9214
|
||||||
|
!
|
||||||
|
! IP Routing
|
||||||
|
ip routing
|
||||||
|
ip routing vrf gold
|
||||||
|
ip route 100.64.0.0/10 172.16.0.254
|
||||||
|
!
|
||||||
|
! OSPF for loopback reachability (default VRF)
|
||||||
|
router ospf 1
|
||||||
|
router-id 10.0.200.2
|
||||||
|
passive-interface default
|
||||||
|
no passive-interface Ethernet1.100
|
||||||
|
no passive-interface Ethernet2.100
|
||||||
|
no passive-interface Ethernet3.100
|
||||||
|
no passive-interface Ethernet4.100
|
||||||
|
no passive-interface Ethernet5.100
|
||||||
|
network 10.0.200.2/32 area 0
|
||||||
|
network 10.0.4.4/31 area 0
|
||||||
|
network 10.0.4.6/31 area 0
|
||||||
|
network 10.0.5.4/31 area 0
|
||||||
|
network 10.0.5.6/31 area 0
|
||||||
|
network 10.0.200.128/31 area 0
|
||||||
|
max-lsa 12000
|
||||||
|
!
|
||||||
|
! BGP Configuration
|
||||||
|
router bgp 65500
|
||||||
|
router-id 10.0.200.2
|
||||||
|
no bgp default ipv4-unicast
|
||||||
|
bgp log-neighbor-changes
|
||||||
|
distance bgp 20 200 200
|
||||||
|
maximum-paths 4 ecmp 64
|
||||||
|
!
|
||||||
|
! iBGP to core1 (loopback-based, default VRF)
|
||||||
|
neighbor core_ibgp peer group
|
||||||
|
neighbor core_ibgp remote-as 65500
|
||||||
|
neighbor core_ibgp update-source Loopback0
|
||||||
|
neighbor core_ibgp next-hop-self
|
||||||
|
neighbor core_ibgp send-community extended
|
||||||
|
neighbor core_ibgp maximum-routes 12000 warning-only
|
||||||
|
neighbor 10.0.200.1 peer group core_ibgp
|
||||||
|
!
|
||||||
|
! eBGP to DC Border Leafs (default VRF)
|
||||||
|
neighbor dc_bl peer group
|
||||||
|
neighbor dc_bl remote-as 65005
|
||||||
|
neighbor dc_bl send-community extended
|
||||||
|
neighbor dc_bl maximum-routes 12000 warning-only
|
||||||
|
neighbor 10.0.4.5 peer group dc_bl
|
||||||
|
neighbor 10.0.4.7 peer group dc_bl
|
||||||
|
!
|
||||||
|
! eBGP to Campus Border Leafs (default VRF)
|
||||||
|
neighbor campus_bl peer group
|
||||||
|
neighbor campus_bl remote-as 66005
|
||||||
|
neighbor campus_bl send-community extended
|
||||||
|
neighbor campus_bl maximum-routes 12000 warning-only
|
||||||
|
neighbor 10.0.5.5 peer group campus_bl
|
||||||
|
neighbor 10.0.5.7 peer group campus_bl
|
||||||
|
!
|
||||||
|
! IPv4 address family (default VRF)
|
||||||
|
address-family ipv4
|
||||||
|
neighbor core_ibgp activate
|
||||||
|
neighbor dc_bl activate
|
||||||
|
neighbor campus_bl activate
|
||||||
|
network 10.0.200.2/32
|
||||||
|
!
|
||||||
|
! VRF Gold configuration - transit for inter-fabric routing
|
||||||
|
vrf gold
|
||||||
|
rd 10.0.200.2:100001
|
||||||
|
router-id 10.0.200.2
|
||||||
|
! iBGP to core1 in VRF gold (P2P)
|
||||||
|
neighbor 10.0.200.130 remote-as 65500
|
||||||
|
neighbor 10.0.200.130 next-hop-self
|
||||||
|
neighbor 10.0.200.130 send-community extended
|
||||||
|
neighbor 10.0.200.130 maximum-routes 12000 warning-only
|
||||||
|
! eBGP to DC Border Leafs in VRF gold
|
||||||
|
neighbor 10.0.14.5 remote-as 65005
|
||||||
|
neighbor 10.0.14.5 send-community extended
|
||||||
|
neighbor 10.0.14.5 maximum-routes 12000 warning-only
|
||||||
|
neighbor 10.0.14.7 remote-as 65005
|
||||||
|
neighbor 10.0.14.7 send-community extended
|
||||||
|
neighbor 10.0.14.7 maximum-routes 12000 warning-only
|
||||||
|
! eBGP to Campus Border Leafs in VRF gold
|
||||||
|
neighbor 10.0.15.5 remote-as 66005
|
||||||
|
neighbor 10.0.15.5 send-community extended
|
||||||
|
neighbor 10.0.15.5 maximum-routes 12000 warning-only
|
||||||
|
neighbor 10.0.15.7 remote-as 66005
|
||||||
|
neighbor 10.0.15.7 send-community extended
|
||||||
|
neighbor 10.0.15.7 maximum-routes 12000 warning-only
|
||||||
|
redistribute connected
|
||||||
|
!
|
||||||
|
end
|
||||||
Reference in New Issue
Block a user