Damien
a6754de9d6
Critical fix to enable BGP initialization on all leaf switches. Without this command, BGP stays disabled and EVPN neighbors cannot establish sessions.
176 lines
3.8 KiB
INI
176 lines
3.8 KiB
INI
! Leaf3 Configuration
|
|
! VTEP2 - AS 65002
|
|
!
|
|
hostname leaf3
|
|
!
|
|
! admin/admin for ssh access
|
|
username admin privilege 15 role network-admin secret sha512 $6$xQktFrbdeqEhVzLM$.1wOJB25nw2fqYaSXDu6y4mo6AP9hngMCFe2vGDl84hWoz00Q.4unoEBqspNI0HEoRz.OZhdBHqQv12KABf0B0
|
|
|
|
! Enable IP routing - CRITICAL for BGP
|
|
ip routing
|
|
!
|
|
!
|
|
! Enable routing protocols
|
|
service routing protocols model multi-agent
|
|
!
|
|
! VRF Definition
|
|
vrf instance gold
|
|
!
|
|
! VLANs
|
|
vlan 34
|
|
name vrf-gold-subnet
|
|
!
|
|
vlan 4090
|
|
name mlag-peer
|
|
trunk group mlag-peer
|
|
!
|
|
vlan 4091
|
|
name mlag-ibgp
|
|
trunk group mlag-peer
|
|
!
|
|
! Management interface
|
|
interface Management1
|
|
vrf mgmt
|
|
ip address 172.16.0.27/24
|
|
!
|
|
! MLAG Peer-link SVI
|
|
interface Vlan4090
|
|
description MLAG Peer-Link
|
|
ip address 10.0.199.252/31
|
|
no autostate
|
|
!
|
|
! iBGP Peering SVI
|
|
interface Vlan4091
|
|
description MLAG iBGP Peering
|
|
ip address 10.0.3.2/31
|
|
mtu 9214
|
|
!
|
|
! VRF VLAN Interface
|
|
interface Vlan34
|
|
vrf gold
|
|
ip address 10.34.34.2/24
|
|
ip virtual-router address 10.34.34.1
|
|
!
|
|
! Loopbacks
|
|
interface Loopback0
|
|
description Router-ID
|
|
ip address 10.0.250.13/32
|
|
!
|
|
interface Loopback1
|
|
description VTEP
|
|
ip address 10.0.255.12/32
|
|
!
|
|
! MLAG Peer-link
|
|
interface Ethernet10
|
|
description mlag peer link
|
|
channel-group 999 mode active
|
|
!
|
|
interface Port-Channel999
|
|
description MLAG Peer
|
|
switchport mode trunk
|
|
switchport trunk group mlag-peer
|
|
spanning-tree link-type point-to-point
|
|
!
|
|
! Underlay P2P interfaces to Spines
|
|
interface Ethernet11
|
|
description spine1
|
|
no switchport
|
|
ip address 10.0.1.5/31
|
|
mtu 9214
|
|
!
|
|
interface Ethernet12
|
|
description spine2
|
|
no switchport
|
|
ip address 10.0.2.5/31
|
|
mtu 9214
|
|
!
|
|
! Host-facing interface (MLAG)
|
|
interface Ethernet1
|
|
description host2
|
|
channel-group 1 mode on
|
|
!
|
|
interface Port-Channel1
|
|
description host2
|
|
switchport mode trunk
|
|
switchport trunk allowed vlan 34
|
|
mlag 1
|
|
!
|
|
! Spanning-tree
|
|
no spanning-tree vlan 4090
|
|
no spanning-tree vlan 4091
|
|
!
|
|
! Virtual MAC for Anycast Gateway
|
|
ip virtual-router mac-address c001.cafe.babe
|
|
!
|
|
! MLAG Configuration
|
|
mlag configuration
|
|
domain-id leafs
|
|
local-interface Vlan4090
|
|
peer-address 10.0.199.253
|
|
peer-link Port-Channel999
|
|
dual-primary detection delay 10 action errdisable all-interfaces
|
|
peer-address heartbeat 172.16.0.28 vrf mgmt
|
|
!
|
|
! VXLAN Interface
|
|
interface Vxlan1
|
|
vxlan source-interface Loopback1
|
|
vxlan udp-port 4789
|
|
vxlan learn-restrict any
|
|
vxlan vrf gold vni 100001
|
|
!
|
|
! IP Routing
|
|
ip routing
|
|
ip routing vrf gold
|
|
!
|
|
! BGP Configuration
|
|
router bgp 65002
|
|
router-id 10.0.250.13
|
|
no bgp default ipv4-unicast
|
|
bgp log-neighbor-changes
|
|
distance bgp 20 200 200
|
|
maximum-paths 4 ecmp 64
|
|
!
|
|
! Underlay peer-group
|
|
neighbor underlay peer group
|
|
neighbor underlay remote-as 65000
|
|
neighbor underlay maximum-routes 12000 warning-only
|
|
neighbor 10.0.1.4 peer group underlay
|
|
neighbor 10.0.2.4 peer group underlay
|
|
!
|
|
! iBGP peer-group
|
|
neighbor underlay_ibgp peer group
|
|
neighbor underlay_ibgp remote-as 65002
|
|
neighbor underlay_ibgp maximum-routes 12000 warning-only
|
|
neighbor underlay_ibgp next-hop-self
|
|
neighbor 10.0.3.3 peer group underlay_ibgp
|
|
!
|
|
! EVPN peer-group
|
|
neighbor evpn peer group
|
|
neighbor evpn remote-as 65000
|
|
neighbor evpn update-source Loopback0
|
|
neighbor evpn ebgp-multihop 3
|
|
neighbor evpn send-community extended
|
|
neighbor evpn maximum-routes 12000 warning-only
|
|
neighbor 10.0.250.1 peer group evpn
|
|
neighbor 10.0.250.2 peer group evpn
|
|
!
|
|
! VRF Gold configuration
|
|
vrf gold
|
|
rd 10.0.250.13:1
|
|
route-target import evpn 1:100001
|
|
route-target export evpn 1:100001
|
|
redistribute connected
|
|
!
|
|
! IPv4 address family
|
|
address-family ipv4
|
|
neighbor underlay activate
|
|
neighbor underlay_ibgp activate
|
|
network 10.0.250.13/32
|
|
network 10.0.255.12/32
|
|
!
|
|
! EVPN address family
|
|
address-family evpn
|
|
neighbor evpn activate
|
|
!
|
|
end
|