VXLAN STATIC PEER - VXLAN #1 ( CCNP )
VXLAN #1 :
VXLAN STATIC PEER
VXLAN TOPOLOGY :
boot nxos
bootflash:nxos.7.0.3.I7.4.bin
username admin password
Idn123$% username admin
role priv-15 end
copy run start
Aktifkan fitur yang akan digunakan pada saat lab :
Leaf-01 dan Leaf-02
Conf t
feature vn-segment-vlan-based
feature nv overlay
feature ospf
Konfigurasi basic ip address pada Leaf-01 :
Leaf-01
Leaf-01(config)# interface e1/1
Leaf-01(config-if)# no switchport
Leaf-01(config-if)# ip add 10.10.1.2/30
Leaf-01(config-if)# ip router ospf 1 area 0
Leaf-01(config-if)# no shutdown
Leaf-01(config-if)# exit
Leaf-01(config)# interface lo0
Leaf-01(config-if)# ip add 2.2.2.2/32
Leaf-01(config-if)# ip router ospf 1 area 0
Leaf-01(config-if)# no shutdown
Leaf-01(config-if)# exit
Leaf-01(config)# router ospf 1
Leaf-01(config-router)# router-id 2.2.2.2
Leaf-01(config-router)# exit
Konfigurasi basic ip address dan aktifkan beberapa fitur yang digunakan
Spine-01
Spine-01
Spine-01(config)# feature ospf
!
Spine-01(config)# interface lo0
Spine-01(config-if)# ip add 1.1.1.1/32
Spine-01(config-if)# ip router ospf 1 area 0
Spine-01(config-if)# no shutdown
Spine-01(config-if)# exit
!
Spine-01(config)# interface lo1
Spine-01(config-if)# ip add 10.1.1.1/32
Spine-01(config-if)# no shutdown
Spine-01(config-if)# ip router ospf 1 area 0
Spine-01(config-if)# exit
!
Spine-01(config)# interface e1/3
Spine-01(config-if)# no switchport
Spine-01(config-if)# ip add 10.10.1.1/30
Spine-01(config-if)# ip router ospf 1 area 0
Spine-01(config-if)# no shutdown
Spine-01(config-if)# exit
!
Spine-01(config)# interface e1/4
Spine-01(config-if)# no switchport
Spine-01(config-if)# ip add 10.10.2.2/30
Spine-01(config-if)# ip add 10.10.2.1/30
Spine-01(config-if)# no shutdown
Spine-01(config-if)# ip router ospf 1 area 0
Spine-01(config-if)# exit
!
Spine-01(config)# router ospf 1
Spine-01(config-router)# router-id 1.1.1.1
Spine-01(config-router)# exit
Buat vlan, daftarkan sesuai topology dan mapping VLAN ke VNI id
Leaf-01
Leaf-01(config)# vlan 201
Leaf-01(config-vlan)# vn-segment 30201
Leaf-01(config-vlan)# name Server
Leaf-01(config-vlan)# exit !
Leaf-01(config)# vlan 301
Leaf-01(config-vlan)# name VM-SERVER
Leaf-01(config-vlan)# vn-segment 30301
Leaf-01(config-vlan)# exit !
Leaf-01(config)# interface e1/2
Leaf-01(config-if)# switchport mode access
Leaf-01(config-if)# switchport access vlan 201
Leaf-01(config-if)# exit
!
Leaf-01(config)# interface e1/3
Leaf-01(config-if)# switchport mode access
Leaf-01(config-if)# switchport access vlan 301
Leaf-01(config-if)# exit
Leaf-02
Leaf-02(config)# vlan 201
Leaf-02(config-vlan)# vn-segment 30201
Leaf-02(config-vlan)# name server
Leaf-02(config-vlan)# exit
!
Leaf-02(config)# vlan 301
Leaf-02(config-vlan)# name VM-SERVER
Leaf-02(config-vlan)# vn-segment 30301
Leaf-02(config-vlan)# exit !
!
Leaf-02(config)# interface e1/2
Leaf-02(config-if)# switchport mode access
Leaf-02(config-if)# switchport access vlan 201
Leaf-02(config-if)# exit
!
Leaf-02(config)# interface e1/3
Leaf-02(config-if)# switchport mode access
Leaf-02(config-if)# switchport access vlan 301
Leaf-02(config-if)# exit
Buat interface VTEP, bawaanya setiap nexus bisa membuat 4 interface VTEP
namun, karena keterbatasan lisensi dalam lab ini kita hanya bisa membuat 1
interface VTEP saja :
Leaf-01
Leaf-01(config)# interface nve 1
Leaf-01(config-if-nve)# no shutdown
Leaf-01(config-if-nve)# source interface lo0
Leaf-01(config-if-nve)# member vni 30201
Leaf-01(config-if-nve-vni)# ingress-replication protocol static
Leaf-01(config-if-nve-vni-ingr-rep)# peer-ip 3.3.3.3
Leaf-01(config-if-nve-vni-ingr-rep)# exit
!
Leaf-01(config-if-nve-vni)# member vni 30301
Leaf-01(config-if-nve-vni)# ingress-replication protocol static
Leaf-01(config-if-nve-vni-ingr-rep)# peer-ip 3.3.3.3
Leaf-01(config-if-nve-vni-ingr-rep)# exit
Verifikasi interface VTEP pastikan sudah UP :
Leaf-02
Leaf-02(config)# show nve interface nve1
Interface: nve1, State: Up, encapsulation: VXLAN VPC
Capability: VPC-VIP-Only [not-notified] Local Router MAC: 5000.0003.0007
Host Learning Mode: Data-Plane
Source-Interface: loopback0 (primary: 3.3.3.3, secondary: 0.0.0.0)
Verifikasi nve peers
Leaf-01
Leaf-01(config)# show nve peers
Interface Peer-IP State LearnType Uptime Router-Mac
--------- --------------- ----- --------- -------- -----------------
nve1 3.3.3.3 Up DP 00:15:03 n/a
Leaf-02
Leaf-02(config)# show nve peers
Interface Peer-IP State LearnType Uptime Router-Mac
--------- --------------- ----- --------- -------- -----------------
nve1 2.2.2.2 Up DP 00:07:16 n/a
Lakukan verifikasi ping dari VLAN 201 sebelah kiri ke VLAN 201:
VPCS
VPCS> ip 192.168.21.2/24
Checking for duplicate address...
PC1 : 192.168.21.2 255.255.255.0
VPCS> ping 192.168.21.3
84 bytes from 192.168.21.3 icmp_seq=1 ttl=64 time=22.454 ms
84 bytes from 192.168.21.3 icmp_seq=2 ttl=64 time=21.101 ms
Leaf-01
Leaf-01(config)# show nve interface nve1
Interface: nve1, State: Up, encapsulation: VXLAN VPC
Capability: VPC-VIP-Only [not-notified] Local Router MAC: 5000.0002.0007
Host Learning Mode: Data-Plane
Source-Interface: loopback0 (primary: 2.2.2.2, secondary: 0.0.0.0)
84 bytes from 192.168.21.3 icmp_seq=3 ttl=64 time=22.571 ms
84 bytes from 192.168.21.3 icmp_seq=4 ttl=64 time=23.183 ms
84 bytes from 192.168.21.3 icmp_seq=5 ttl=64 time=28.719 ms
Lakukan verifikasi ping dari VLAN 301 sebelah kiri ke VLAN 301 di sebelah kanan :
VPCS
VPCS> ip 192.168.31.2/24
Checking for duplicate address...
PC1 : 192.168.31.2 255.255.255.0
VPCS> ping 192.168.31.3
84 bytes from 192.168.31.3 icmp_seq=1 ttl=64 time=24.557 ms
84 bytes from 192.168.31.3 icmp_seq=2 ttl=64 time=26.319 ms
84 bytes from 192.168.31.3 icmp_seq=3 ttl=64 time=27.558 ms
84 bytes from 192.168.31.3 icmp_seq=4 ttl=64 time=23.579 ms
84 bytes from 192.168.31.3 icmp_seq=5 ttl=64 time=20.858 ms
Komentar
Posting Komentar