При переносе интерфейса из одного vrf в другой, все настройки ip будут сброшены.
SSH@SLV-CER(config-vif-80)#vrf forwarding RI-PUBLIC Warning: All IPv4 and IPv6 addresses (including link-local) on this interface have been removed
Есть так настроенный LAG c главным портом 2/1.
lag "LAG11" dynamic id 11 ports ethernet 2/1 to 2/2 primary-port 2/1 deploy port-name "TO-SW1/P5_WIRELABEL-1" ethernet 2/1 port-name "TO-SW2/P5_WIRELABEL-2" ethernet 2/2 !
Что бы сделать какое либо действие c LAG-портами, достаточно сделать это действие только с главным портом:
В результате в транк будут добавлены
vlan 80 name IPV6-PUBLIC-LINKNET-1 tagged ethe 2/1 to 2/2 router-interface ve 80
vlan 1 name DEFAULT-VLAN no untagged ethe 1/1 ethe 2/1 to 2/2
Удалять влан из транка тоже можно через главный порт - “no tagged ethernet 2/1”.
show inventory
Статический мак задается на уровне настройки vlan.
vlan 1037 name NAUKA-BGP untagged ethe 2/4 router-interface ve 1037 static-mac-address 0055.6665.777c ethernet 2/4
Статическая arp запись создаётся на глобальном уровне или на уровне vrf.
vrf INT address-family ipv4 arp 77.77.77.77 0055.6665.777c ethernet 2/4 exit-address-family exit-vrf
Есть LAG в котором праймари порт это “ethernet 2/4”.
lag "LAG3" dynamic id 3 ports ethernet 2/3 to 2/4 primary-port 2/4 deploy port-name "SW1/P1/1/1" ethernet 2/3 port-name "SW2/P1/1/1" ethernet 2/4
Включать сбор sflow статистики надо в секции настроек праймари порта.
SSH@cer#conf t SSH@cer(config)#interface ethernet 2/4 SSH@cer(config-if-e10000-2/4)#sflow forwarding SSH@cer(config-if-e10000-2/4)#sflow sample 512
Проверяем.
SSH@cer#sh sflow
...
Polling interval is 20 seconds.
Configured default sampling rate: 1 per 2048 packets.
84874390 UDP packets exported
199771655 sFlow samples collected.
15260 sFlow management-vrf UDP packets dropped
0 ACL sFlow samples collected.
sFlow ports Global Sample Rate Port Sample Rate Hardware Sample Rate
1/1 2048 512 512
2/1 2048 512 512
2/3 2048 512 512
2/4 2048 512 512
SSH@cer(config)#clear statistics ethernet 2/1
Нужны было выдать группе пользователей только возможность изменения настроек интерфейсов и смены пароля.
Для этого используются настройки role и rule.
Создаем новую роль int_role.
vdx1(config)#role name int_adm desc INTERFACE_MANAGE_ROLE
Создаем несколько правил которые разрешают определенные конфигурационные команды.
Разрешаем переход в конфигурационный режим.
vdx1(config)#rule 50 action accept operation read-write role int_adm command configure
Разрешаем менять настройки пользователей.
vdx1(config)#rule 51 action accept operation read-write role int_adm command username
Разрешаем менять настройки 10Г интерфейсов.
vdx1(config)#rule 51 action accept operation read-write role int_adm interface tengigabitethernet
Для инфо.
Список возможных команд.
vdx1(config)# rule 60 command ? Possible completions: aaa ag alias-config banner bp-rate-limit cee-map cidrecov clear clock configure copy debug debug1 delete df diag dir dot1x fabric fastboot fcoe fcsp filter-change-update-delay firmware interface ip ipv6 lacp lccli ldap-server license logging mac mac-address-table mac-rebalance management monitor nas no-operation nsx-controller nsx-controller-client ntp oscmd password-attributes port-profile prompt1 prompt2 protocol python qos radius-server reload rename rmon role rule secpolicy service sflow snmp-server ssh support switch-attributes system-monitor tacacs-server telnet terminal tnl unlock usb username vCenter vcs vlan vnetwork vrf
Так же можно наоборот, запретить конкретные команды дериктивой reject.
vdx1(config)# rule 60 action ? Possible completions: <TYPE:Action (accept/reject)> Configure Command action (Default:accept)
krv-vdx01# chassis fan airflow-direction port-side-intake 2019/04/04-12:40:10, [EM-1038], 10566, SW/0 | Active, INFO, KRV-VDX01_VDX6740-10G-FIBER, Chassis fan airflow-direction changed to port-side-intake Previous configuration : port-side-exhaust Current configuration : port-side-intake System fan airflow-direction changes will be effective after reboot!!
2019/04/04-12:41:08, [PLAT-1004], 11073, CRITICAL, KRV-VDX01_VDX6740-10G-FIBER, Turning off Fan 1 because of airflow direction mismatch. 2019/04/04-12:41:08, [PLAT-1004], 11074, CRITICAL, KRV-VDX01_VDX6740-10G-FIBER, Turning off Fan 2 because of airflow direction mismatch. ... 2019/04/04-12:43:17, [HIL-1511], 11114, SW/0 | Active, WARNING, KRV-VDX01_VDX6740-10G-FIBER, MISMATCH in Fan airflow direction. Replace FRU with fan airflow in same direction.
Доступные способы:
sw0# license add ?
Possible completions:
FTP-URL copy file from FTP server URL syntax
ftp://<username>:<password>@hostname/ <filepath>
SCP-URL copy file from SCP server URL syntax
scp://<username>:<password>@hostname/ <filepath>
licStr License string (Max Length 256)
rbridge-id Syntax: rbridge-id [rbridge-id]
Добавить лицензию руками:
sw0# license add licStr "лицензионный_ключ_обязательно_в_кавычках"
Пример:
sw0# license add licStr "*B ,k:ug...YbMCLH#"
2019/03/29-10:02:12, [SEC-3051], 9841, SW/0 | Active, INFO, VDX6740, The license key *B ,k:ug...YbMCLH# is Added.
License Added [*B ,k:ug...YbMCLH#]
For license change to take effect, it may be necessary to enable ports...
sw0# 2019/03/29-10:02:12, [SEC-3051], 9842, SW/1 | Standby, INFO, VDX6740, The license key *B ,k:ug...YbMCLH# is Added.
sw0# show license
rbridge-id: 2
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
40G Port Upgrade license
Feature name:PORT_40G_UPGRADE
License is valid
Capacity: 2
sw0# reload Warning: Unsaved configuration will be lost. Please run `copy running-config startup-config` to save the current configuration if not done already. Are you sure you want to reload the switch? [y/n]:
В режиме кластера.
krv-vdx01# reload rbridge-id 2 Operation aborted. The rbridge-id is used with "reload system" only. krv-vdx01# reload system rbridge-id 2 Warning: This operation will cause the chassis to reboot and requires all existing telnet, secure telnet and SSH sessions to be restarted. Are you sure you want to reboot the chassis on rbridge id 2 node [y/n]?
Разобраться - в режиме собраного кластера дало перегрузить принципал свитч.
krv-vdx01# reload Are you sure you want to reload the switch? [y/n]:y The system is going down for reload NOW !!
Что бы найти конкретный коммутатор в стойке можно им “помигать”.
Помигать всем коммутатором.
sw0# chassis beacon enable Chassis Beacon has been enabled
или
sw0# beacon enable chassis
После включения одновременно начнут зеленым мигать все индикаторы состояния портов.
Помигать портом.
sw0# beacon enable interface tengigabitethernet 1/0/2 sw0# beacon enable interface fortygigabitethernet 1/0/51
Буду мигать второй и пятьдесят первый индикаторы состояния портов.
(config)#lag LAG1 dynamic id 1 (config-lag-LAG1)#ports ethernet 2/4 (config-lag-LAG1)#primary-port 2/4 (config-lag-LAG1)#deploy (config-lag-LAG1)#port-name SLV-VDX23/P1 ethernet 2/4
#sh lag Total number of LAGs : 1, 100/40g : 0 Total number of deployed LAGs : 1, 100/40g : 0 Total number of trunks created : 1 (63 available), 100/40g : 0 (0 available) LACP System Priority / ID :1 / 748e.f8a9.4b01 LACP Long timeout :90, default: 90 LACP Short timeout :3, default: 3 === LAG "LAG1" ID 1 (dynamic Deployed) === LAG Configuration: Ports: e 2/4 Port Count: 1 Primary Port: 2/4 Trunk Type: hash-based forward_all_protocol: Disabled LACP Key: 100 Port Individual Configuration: Port Name 2/4 SLV-VDX23/P1 Deployment: Trunk ID 1, Active Primary none, base fid: 0x0000 Port Link Port-State Dupl Speed Trunk Tag Priori MAC Name Type 2/4 Disabled None None None 1 No level0 748e.f8a9.4b01 SLV-VDX23/P1 default-port Port [Sys P] [Port P] [ Key ] [Act][Tio][Agg][Syn][Col][Dis][Def][Exp][Ope] 2/4 1 1 100 Yes S Agg Syn No No Def No Dwn
(config-lag-LAG1)#ports ethernet 2/2 error - port 2/4 and port 2/2 do not have the same untagged vlan component Add ports to deployed LAG LAG1 failed!
(config)#lag LAG1 (config-lag-LAG1)#ports ethernet 2/2 #sh lag Total number of LAGs : 1, 100/40g : 0 Total number of deployed LAGs : 1, 100/40g : 0 Total number of trunks created : 1 (63 available), 100/40g : 0 (0 available) LACP System Priority / ID :1 / 748e.f8a9.4b01 LACP Long timeout :90, default: 90 LACP Short timeout :3, default: 3 === LAG "LAG1" ID 1 (dynamic Deployed) === LAG Configuration: Ports: e 2/2 e 2/4 Port Count: 2 Primary Port: 2/4 Trunk Type: hash-based forward_all_protocol: Disabled LACP Key: 100 Port Individual Configuration: Port Name 2/4 SLV-VDX23/P1 Deployment: Trunk ID 1, Active Primary none, base fid: 0x0000 Port Link Port-State Dupl Speed Trunk Tag Priori MAC Name Type 2/2 Disabled None None None 1 No level0 748e.f8a9.4b34 default-port 2/4 Disabled None None None 1 No level0 748e.f8a9.4b34 SLV-VDX23/P1 default-port Port [Sys P] [Port P] [ Key ] [Act][Tio][Agg][Syn][Col][Dis][Def][Exp][Ope] 2/2 1 1 100 Yes S Agg Syn No No Def No Dwn 2/4 1 1 100 Yes S Agg Syn No No Def No Dwn
SSH@m9-cer(config-lag-LAG1)#no ports ethernet 2/2 SSH@m9-cer(config-lag-LAG1)#exit
Дописать.
(config-vlan-1)#no untagged ethernet 2/3 Error: Cannot remove port 2/3 from default VLAN in non dual mode. Please associate with any other VLAN to remove from the default VLAN (config-vlan-1)#exit (config-lag-LAG1)#ports ethernet 2/3 error - VLAN: 13 does not contain all trunk members Add ports to deployed LAG LAG1 failed! (config)#interface ethernet 2/3 Error - cannot configure secondary ports of a LAG. SSH@m9-cer(config)#lag LAG1
Есть два оптических VDX6740 которые надо собрать в фабрику.
Шаги:
Процедура коротко.
krv-vdx01# show vcs Cluster formation is in progress. Please try after sometime. krv-vdx01# 2019/04/02-13:36:13, [VCS-1001], 10713, SW/0 | Active, INFO, KRV-VDX01_VDX6740-10G-FIBER, Event: VCS cluster create, Coordinator IP: (null), VCS ID: 70, Status: VCS cluster created with 1 member node(s ): Rbridge-id(s) 2 ().
vdx23# vcs vcsid 20 rbridge-id 23 logical-chassis enable vdx24# vcs vcsid 20 rbridge-id 24 logical-chassis enable vdx23(config)# rbridge-id 23 vdx23(config-rbridge-id-23)# logical-chassis principal-priority 20
sw0# vcs vcsid 20 ?
Possible completions:
enable Enables Local-only Config mode
logical-chassis Logical-chassis VCS mode
rbridge-id rbridge-id - Range 1 to 239 Warning: To change rbridge ID,
please use new keyword set-rbridge-id, the rbridge-id
keyword will soon be deprecated
set-rbridge-id set-rbridge-id - Range 1 to 239
| Output modifiers
<cr>
sw0# vcs vcsid 20 rbridge-id 23 ?
Possible completions:
enable Enables Local-only Config mode
logical-chassis Logical-chassis VCS mode
| Output modifiers
<cr>
sw0# vcs vcsid 20 rbridge-id 23 logical-chassis ?
Possible completions:
enable Enables Logical-chassis VCS mode
sw0# vcs vcsid 20 rbridge-id 23 logical-chassis enable ?
Possible completions:
| <cr>
sw0# vcs vcsid 20 rbridge-id 23 logical-chassis enable
This operation will perform a VCS cluster mode transition for this local node with new parameter settings. This will change the configuration to default and reboot the switch. Do you want to continue? [y/n]:
sw0# show vcs Config Mode : Distributed VCS Mode : Logical Chassis VCS ID : 20 VCS GUID : 00000000000000000000000000000000 Total Number of Nodes : 1 Rbridge-Id WWN Management IP VCS Status Fabric Status HostName -------------------------------------------------------------------------------------------------------------- 23 >10:00:50:EB:1A:E5:2B:90* 0.0.0.0 Online Online sw0 sw0# show license
sw0(config)# rbridge-id 23 sw0(config-rbridge-id-23)# switch-attributes chassis-name SLV-VDX23_VDX6740-10G-FIBER sw0# 10/25-12:14:47, [IPAD-1006], 15288, SW/0 | Active, INFO, SLV-VDX23_VDX6740-10G-FIBER, Chassis name has been successfully changed to SLV-VDX23_VDX6740-10G- BER. sw0# onfig-rbridge-id-23)# switch-attributes chassis-name SLV-VDX23_VDX6740-10G- sw0# sw0# sw0# conf t Entering configuration mode terminal sw0(config)# r Possible completions: radius-server RADIUS server configuration rbridge-id Rbridge Id for Node Specific configuration reserved-vlan Sets the range of vlans used for internal purposes rmon Remote Monitoring Protocol (RMON) role Role configuration router Configure Router rule Rule Configuration sw0(config)# rbridge-id 23 sw0(config-rbridge-id-23)# switch-attributes chassis-name ? Possible completions: <WORD:1-30> Chassis Name[SLV-VDX23_VDX6740-10G-FIBER] sw0(config-rbridge-id-23)# switch-attributes ? Possible completions: chassis-name Chassis name host-name Host name sw0(config-rbridge-id-23)# switch-attributes host-name slv-vdx23 2018/10/25-12:15:18, [IPAD-1002], 15289, SW/0 | Active, INFO, SLV-VDX23_VDX6740-10G-FIBER, Switch name has been successfully changed to slv-vdx23. slv-vdx23(config-rbridge-id-23)# slv-vdx23(config-rbridge-id-23)# slv-vdx23(config-rbridge-id-23)# slv-vdx23(config-rbridge-id-23)# exit
Есть коммутатор vdx который ранее работал в составе vsc фабрики, а теперь его надо перевести в standalone режим.
sw0# sh vcs Config Mode : Distributed VCS Mode : Logical Chassis VCS ID : 9 VCS GUID : 00000000000000000000000000000000 Total Number of Nodes : 1 Rbridge-Id WWN Management IP VCS Status Fabric Status HostName -------------------------------------------------------------------------------------------------------------- 14 >10:00:50:EB:1A:E6:23:B0* 0.0.0.0 Online Online sw0
Процедура коротко.
# no vcs logical-chassis enable rbridge-id 14 default-config # vcs vcsid 1 rbridge-id 1
Процедура подробнее.
1. Переводим коммутатор из режима “Logical сhassis” в режим “Fabric cluster”.
# no vcs logical-chassis enable rbridge-id 14 default-config This operation will perform a VCS cluster mode transition for the selected rbridge-ids and reboot the selected rbridge-ids. The default-config will be applied and any existing configurations will be lost during the transition. Do you want to continue? [y/n]:y VCS cluster will be transitioned from Logical-chassis mode to Local-only mode. 2018/10/23-18:00:25, [DCM-1301], 9679, SW/0 | Active, INFO, VDX6740, Bare-Metal state is disabled.
Коммутатор перегрузится, займет это 7-10 минут.
После перезагрузки коммутатор будет работать в режиме Fabric cluster, но rbridge-id и vсsid у него останутся от времен когда он работал как Logical сhassis.
Соответственно нумерация портов будет продолжать идти номера rbridge-id - interface TenGigabitEthernet 12/0/3.
sw0# show vcs Config Mode : Local-Only VCS Mode : Fabric Cluster VCS ID : 9 Total Number of Nodes : 1 Rbridge-Id WWN Management IP VCS Status Fabric Status HostName -------------------------------------------------------------------------------------------------------------- 14 >10:00:50:EB:1A:E6:23:B0* 0.0.0.0 Online Online sw0
2. Меняем vcsid и rbridge-id, ставим дефолтные единицы.
# vcs vcsid 1 rbridge-id 1 This operation will change the configuration to default and reboot the switch. Do you want to continue? [y/n]:y 2018/10/23-18:28:18, [DCM-1001], 9797, SW/0 | Active, INFO, VDX6740, VCS ID is changed from 9 to 1. 2018/10/23-18:28:18, [DCM-1301], 9798, SW/0 | Active, INFO, VDX6740, Bare-Metal state is disabled.
Коммутатор перегрузится, займет еще 7-10 минут.
После этого нумерация портов пойдет с единицы - interface TenGigabitEthernet 1/0/3.
SSH@SOME-CER(config)#ip prefix-list PL-DTLN-IX-IN seq 100 permit 0.0.0.0/0 ? ge Minimum prefix length to be matched le Maximum prefix length to be matched <cr>
ge - диапазон принимает значение от ge до 32.
le - диапазон принимает значение от 0 до le.
Примеры:
SSH@SOME-CER#wr memory .....Write startup-config done.
Когда коммутатор работает standalone, для сохранения конфига используется команда:
SOME-VDX# copy running-config startup-config
Когда коммутатор работает в составе фабрики конфиг сохраняется сам автоматическ
ONE-MORE-VDX# copy running-config startup-config This operation is not supported in logical chassis mode.
Выдержка из документации:
When the switch is in logical chassis cluster mode, the running-config file is saved automatically and it does not need to be copied