! Access3 Configuration
! L2-only access switch for VTEP3 (leaf5/leaf6)
!
hostname access3
!
! LLDP Management0
lldp management-address Management0
!
! enable gNMI API
management api gnmi
   transport grpc default
   provider eos-native
!
! admin/admin for ssh access
username admin privilege 15 role network-admin secret sha512 $6$xQktFrbdeqEhVzLM$.1wOJB25nw2fqYaSXDu6y4mo6AP9hngMCFe2vGDl84hWoz00Q.4unoEBqspNI0HEoRz.OZhdBHqQv12KABf0B0
!
! RADIUS server
radius-server host 172.16.0.200 key arista123
!
! AAA for dot1x
aaa authentication dot1x default group radius
!
! Enable 802.1X globally
dot1x system-auth-control
!
! VLANs
vlan 40
   name test-l2-vxlan
!
! Management interface
interface Management0
   ip address 172.16.0.43/24
!
! Spanning-tree
spanning-tree mode mstp
spanning-tree edge-port bpduguard default
!
! Uplink to leaf MLAG pair (Port-Channel 10)
interface Ethernet1
   description leaf5-uplink
   channel-group 10 mode active
!
interface Ethernet2
   description leaf6-uplink
   channel-group 10 mode active
!
interface Port-Channel10
   description uplink-to-leaf-mlag
   switchport mode trunk
   switchport trunk allowed vlan 40
   no shutdown
!
! Host-facing downlink (Port-Channel 1)
interface Ethernet3
   description host3
   channel-group 1 mode active
   dot1x pae authenticator
   dot1x port-control auto
   dot1x host-mode single-host
!
interface Ethernet4
   description host3
   channel-group 1 mode active
   dot1x pae authenticator
   dot1x port-control auto
   dot1x host-mode single-host
!
interface Port-Channel1
   description host3
   switchport mode access
   switchport access vlan 40
   port-channel lacp fallback timeout 5
   port-channel lacp fallback individual
   spanning-tree portfast
   no shutdown
!
! Default route for management
ip route 0.0.0.0/0 172.16.0.254
!
end