AOS-CX Simulator Lab - Campus 3-Tier IPv4 L2 Access With VSX and OSPF Lab Guide
AOS-CX Simulator Lab - Campus 3-Tier IPv4 L2 Access With VSX and OSPF Lab Guide
AOS-CX Simulator Lab - Campus 3-Tier IPv4 L2 Access With VSX and OSPF Lab Guide
TABLE OF CONTENTS
Lab Objective ......................................................................................................................................... 1
Lab Overview ......................................................................................................................................... 1
Lab Network Layout ............................................................................................................................... 2
Lab Tasks .............................................................................................................................................. 2
Task 1 – L2 Access and VSX................................................................................................................. 2
Task 2 – Transit VLAN and IP on VSX Fabric ....................................................................................... 3
Task 3 – IP and OSPF on VSX Fabric ................................................................................................... 3
Task 4 – Adding Tier 3 Core .................................................................................................................. 4
Task 5 – IP and OSPF on Tier 3 ............................................................................................................ 5
Task 6 – Test User Connectivity from Virtual PC (VPC) ......................................................................... 9
Appendix – Complete Configurations ................................................................................................... 10
Lab Objective
The lab will enable the user to gain hands on knowledge and experience in setup basic Campus 3 Tier Network with L2
Access VSX and OSPF
Switches such as the Aruba CX 6100 can be the L2 access switches with 6400 or 8000 series being the VSX and Campus
Core.
To simulate the L2 Access such as Aruba CX 6100 we will limit the features we use in the simulator to replicate this product,
such as using default VRF and static routing only.
For further details on Aruba CX switches and other features please refer to the latest Aruba documentation located on
https://asp.arubanetworks.com/
Lab Overview
This lab set up is as shown in Figure 1. This setup is of a Campus Three Tier network with L2 access to the VSX fabric and
then upstream to an OSPF core.
This lab builds upon the previous lab Part I Two Tier Layer 2 Access with VSX, and you will need the lab guide to this
previous network to help you complete this simulator lab.
1
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
At the end of the lab you will be able to observe a typical Three Tier Campus with the Layer 2 at the access with VSX and
OSPF . All User /End point VLANs functions will be attached to VSX Core with all VLANS trunked to the VSX Aggregation,
taking advantage of Multi Chassis LAG, and then we will use OSPF on the VSX Aggregation to provide reachability
upstream.
It is advisable to read the VSX best practice guide to gain a full understanding of this topology in conjunction to this lab guide
at https://support.hpe.com/hpesc/public/docDisplay?docId=a00094242en_us
Lab Tasks
2
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
SwitchA# SwitchB#
configure
vlan 4
vsx-sync
interface vlan 4 interface vlan 4
ip address 192.168.4.1/29 ip address 192.168.4.2/29
description Transit vlan description Transit vlan
In later tasks OSPF will be used, it is a best practice to create a dedicated Transit VLAN between the VSX primary and the
VSX secondary to exchange route information for subnets that are not attached to both VSX nodes. This dedicated Transit
VLAN 4 in this case provides better control and will not carry user data traffic in nominal situation or very limited in case of
east-west traffic between single-attached endpoints.
NOTE: For details of VSX best practice guide please refer to the following guide
https://support.hpe.com/hpesc/public/docDisplay?docId=a00094242en_us
Here we will introduce point to point OSPF links to upstream switches as well as OSPF transit vlan between the VSX
switches
• IP interfaces and OSPF, for OSPF we will create a single backbone area
SwitchA# SwitchB#
router ospf 1 router ospf 1
router-id 192.168.2.1 router-id 192.168.2.2
max-metric router-lsa on-startup OSPFv2 protocol will be reset.
passive-interface default Do you want to continue (y/n)? y
graceful-restart restart-interval 300
trap-enable
area 0
interface loopback 0 interface loopback 0
ip address 192.168.2.1/32 ip address 192.168.2.2/32
ip ospf 1 area 0
interface vlan 4
ip ospf 1 area 0
no ip ospf passive
ip ospf cost 50
ip ospf network point-to-point
interface vlan 100
ip ospf 1 area 0
interface vlan 200
ip ospf 1 area 0
interface 1/1/6
mtu 9198 interface 1/1/6
description to SwitchX mtu 9198
ip address 192.168.4.8/31 description to SwitchX
ip ospf 1 area 0 ip address 192.168.4.16/31
3
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
mypassword
interface 1/1/7
mtu 9198 interface 1/1/7
description to SwitchY mtu 9198
ip address 192.168.4.12/31 description to SwitchY
ip ospf 1 area 0 ip address 192.168.4.20/31
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
The best practice for OSPF cost is to have VSX primary <-> VSX secondary cost lower than Switch X <-> Switch Y cost, as
it is frequent that the ISL bandwidth is higher than the inter core devices bandwidth. In case of single-attachment subnet on
one of the VSX node and non-meshed topology, the traffic from core would be sent to the VSX peer closest to the attached
destination, avoiding consuming inter-core bandwidth. Same concept applies for south-to north traffic pattern. In the lab,
OSPF cost for Transit VLAN over ISL is set to 50, and 1000 for Core devices. OSPF cost is synchronized from the VSX
primary to the VSX secondary
Only OSPF neighbors between Switch A and B should be established at this stage as shown above
int 1/1/1-1/1/4
no shutdown
int 1/1/6-1/1/7
no shutdown
• Validate LLDP neighbors appear as expected on each switch. Here we show Switch X output only.
4
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
SwitchX#
configure
interface lag 256
no shutdown
ip address 192.168.4.24/31
lacp mode active
no shutdown
interface 1/1/3-1/1/4
no shutdown
description InterCoreLink
lag 256
SwitchY#
configure
interface lag 256
no shutdown
ip address 192.168.4.25/31
lacp mode active
no shutdown
interface 1/1/3-1/1/4
no shutdown
description InterCoreLink
lag 256
• Check RLAG, Ensure :LAG is UP and flags ALFNCD are valid. Here we show Switch X output only.
Aggregate lag256 is up
Admin state is up
Description :
MAC Address : 08:00:09:d8:64:e7
Aggregated-interfaces : 1/1/3 1/1/4
Aggregation-key : 256
Aggregate mode : active
IPv4 address 192.168.4.24/31
Speed : 2000 Mb/s
L3 Counters: Rx Disabled, Tx Disabled
qos trust none
Statistic RX TX Total
---------------- -------------------- -------------------- --------------------
Packets 154 198 0
Unicast 0 0 0
Multicast 0 0 0
Broadcast 0 0 0
Bytes 20407 25682 0
Jumbos 0 0 0
Dropped 0 0 0
Pause Frames 0 0 0
L3 Packets 0 0 0
L3 Bytes 0 0 0
Errors 0 0 0
CRC/FCS 0 n/a 0
Collision n/a 0 0
Runts 0 n/a 0
Giants 0 n/a 0
5
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
State abbreviations :
A - Active P - Passive F - Aggregable I - Individual
S - Short-timeout L - Long-timeout N - InSync O - OutofSync
C - Collecting D - Distributing
X - State m/c expired E - Default neighbor state
• Check reachability across the RLAG with a ping test. Here we ping from Switch X to Y
SwitchX#
ping 192.168.4.25
PING 192.168.4.25 (192.168.4.25) 100(128) bytes of data.
108 bytes from 192.168.4.25: icmp_seq=1 ttl=64 time=58.5 ms
108 bytes from 192.168.4.25: icmp_seq=2 ttl=64 time=11.4 ms
108 bytes from 192.168.4.25: icmp_seq=3 ttl=64 time=27.7 ms
108 bytes from 192.168.4.25: icmp_seq=4 ttl=64 time=8.75 ms
108 bytes from 192.168.4.25: icmp_seq=5 ttl=64 time=8.42 ms
SwitchX#
router ospf 1
router-id 192.168.2.3
max-metric router-lsa on-startup
passive-interface default
graceful-restart restart-interval 300
trap-enable
area 0
interface loopback 0
ip address 192.168.2.3/32
ip ospf 1 area 0
interface 1/1/1
mtu 9198
description to SwitchA_VSX_Pri
ip address 192.168.4.9/31
ip ospf 1 area 0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/2
mtu 9198
description to SwitchB_VSX_Sec
ip address 192.168.4.17/31
ip ospf 1 area 0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface lag 256
!ip configured in previous step
ip ospf 1 area 0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
SwitchY#
router ospf 1
router-id 192.168.2.4
6
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
• From SW X
• From SW Y
• From SW A
show ip ospf neighbors
VRF : default Process : 1
===================================================
7
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
• From SW B
show ip ospf neighbors
VRF : default Process : 1
===================================================
• Check OSPF routes. Here we check Switch A and X. Lab users can explore other nodes.
VRF: default
SwitchX#show ip route
VRF: default
8
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
Prior to this step it is assumed that Switch C and VPC have previously been configured and tested as in lab guide
“Part 1 Campus 2 Tier L2 Access and VSX”
Note: In real world networks hosts may be restricted for ICMP reachability. However, for the purposes of this lab no
restrictions are applied.
VPCS>
• The above connectivity is possible as both subnets are directly connected to the VSX Fabric
• The reader can test from VPC2 as required.
End of lab
9
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
• If configs are the same, try powering off/powering on the switches to reboot them.
Switch X
SwitchX#
!
!Version ArubaOS-CX Virtual.10.07.0010
!export-password: default
hostname SwitchX
user admin group administrators password plaintext <yourpassword>
led locator on
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
ssh server vrf mgmt
vlan 1
interface mgmt
no shutdown
ip dhcp
interface lag 256
no shutdown
ip address 192.168.4.24/31
lacp mode active
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/1
no shutdown
mtu 9198
description to SwitchA_VSX_Pri
ip address 192.168.4.9/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/2
no shutdown
mtu 9198
description to SwitchB_VSX_Sec
ip address 192.168.4.17/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/3
no shutdown
description InterCoreLink
lag 256
interface 1/1/4
no shutdown
description InterCoreLink
lag 256
interface loopback 0
ip address 192.168.2.3/32
ip ospf 1 area 0.0.0.0
!
!
router ospf 1
router-id 192.168.2.3
max-metric router-lsa on-startup
passive-interface default
graceful-restart restart-interval 300
trap-enable
area 0.0.0.0
https-server vrf mgmt
SwitchX#
10
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
Switch Y
SwitchY#
!
!Version ArubaOS-CX Virtual.10.07.0010
!export-password: default
hostname SwitchY
user admin group administrators password plaintext <yourpassword>
led locator on
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
ssh server vrf mgmt
vlan 1
interface mgmt
no shutdown
ip dhcp
interface lag 256
no shutdown
ip address 192.168.4.25/31
lacp mode active
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/1
no shutdown
mtu 9198
description to SwitchA_VSX_Pri
ip address 192.168.4.13/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/2
no shutdown
mtu 9198
description to SwitchB_VSX_Sec
ip address 192.168.4.21/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/3
no shutdown
description InterCoreLink
lag 256
interface 1/1/4
no shutdown
description InterCoreLink
lag 256
interface loopback 0
ip address 192.168.2.4/32
ip ospf 1 area 0.0.0.0
!
!
router ospf 1
router-id 192.168.2.4
max-metric router-lsa on-startup
passive-interface default
graceful-restart restart-interval 300
trap-enable
area 0.0.0.0
https-server vrf mgmt
SwitchY#
Switch A
SwitchA#
!
!Version ArubaOS-CX Virtual.10.07.0010
!export-password: default
hostname SwitchA
user admin group administrators password plaintext <yourpassword>
led locator on
no usb
11
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
vrf KA
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
ssh server vrf mgmt
vlan 1
vlan 4
vsx-sync
vlan 100
vsx-sync
vlan 200
vsx-sync
interface mgmt
no shutdown
ip dhcp
interface lag 1 multi-chassis
no shutdown
description SwitchC VSX-MCLAG
no routing
vlan trunk native 1
vlan trunk allowed 100,200
lacp mode active
interface lag 256
no shutdown
description ISL
no routing
vlan trunk native 1
vlan trunk allowed all
lacp mode active
interface 1/1/1
no shutdown
mtu 9198
description ISL link
lag 256
interface 1/1/2
no shutdown
mtu 9198
description ISL link
lag 256
interface 1/1/3
no shutdown
vrf attach KA
description VSX keepalive link
ip address 192.168.1.0/31
interface 1/1/4
no shutdown
description to SwitchC
lag 1
interface 1/1/6
no shutdown
mtu 9198
description to SwitchX
ip address 192.168.4.8/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/7
no shutdown
mtu 9198
description to SwitchY
ip address 192.168.4.12/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface loopback 0
ip address 192.168.2.1/32
ip ospf 1 area 0.0.0.0
interface vlan 4
description Transit vlan
ip address 192.168.4.1/29
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 50
ip ospf network point-to-point
interface vlan 100
12
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
vsx-sync active-gateways
ip mtu 9100
ip address 10.10.100.252/24
active-gateway ip mac 06:01:00:00:02:12
active-gateway ip 10.10.100.254
ip ospf 1 area 0.0.0.0
interface vlan 200
vsx-sync active-gateways
ip mtu 9100
ip address 10.10.200.252/24
active-gateway ip mac 06:02:00:00:02:12
active-gateway ip 10.10.200.254
ip ospf 1 area 0.0.0.0
vsx
system-mac 06:00:00:00:02:12
inter-switch-link lag 256
role primary
keepalive peer 192.168.1.1 source 192.168.1.0 vrf KA
vsx-sync aaa acl-log-timer arp-security bfd-global bgp control-plane-acls copp-policy dhcp-relay
dhcp-server dhcp-snooping dns evpn gbp hardware-high-capacity-tcam icmp-tcp keychain lldp loop-protect-
global mac-lockout macsec mclag-interfaces mgmd-global nd-snooping neighbor ospf qos-global rip route-
map sflow-global snmp ssh static-routes stp-global time udp-forwarder vrrp vsx-global
!
!
router ospf 1
router-id 192.168.2.1
max-metric router-lsa on-startup
passive-interface default
graceful-restart restart-interval 300
trap-enable
area 0.0.0.0
https-server vrf mgmt
SwitchA#
Switch B
SwitchB#
!
!Version ArubaOS-CX Virtual.10.07.0010
!export-password: default
hostname SwitchB
user admin group administrators password plaintext <yourpassword>
no usb
vrf KA
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
ssh server vrf mgmt
vlan 1
vlan 4
vsx-sync
vlan 100
vsx-sync
vlan 200
vsx-sync
interface mgmt
no shutdown
ip dhcp
interface lag 1 multi-chassis
no shutdown
description SwitchC VSX-MCLAG
no routing
vlan trunk native 1
vlan trunk allowed 100,200
lacp mode active
interface lag 256
no shutdown
description ISL
no routing
vlan trunk native 1
vlan trunk allowed all
lacp mode active
interface 1/1/1
no shutdown
mtu 9198
description ISL link
13
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
lag 256
interface 1/1/2
no shutdown
mtu 9198
description ISL link
lag 256
interface 1/1/3
no shutdown
vrf attach KA
description VSX keepalive link
ip address 192.168.1.1/31
interface 1/1/4
no shutdown
interface 1/1/5
no shutdown
description to SwitchC
lag 1
interface 1/1/6
no shutdown
mtu 9198
description to SwitchX
ip address 192.168.4.16/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/7
no shutdown
mtu 9198
description to SwitchY
ip address 192.168.4.20/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface loopback 0
ip address 192.168.2.2/32
ip ospf 1 area 0.0.0.0
interface vlan 4
description Transit vlan
ip address 192.168.4.2/29
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 50
ip ospf network point-to-point
interface vlan 100
vsx-sync active-gateways
ip mtu 9100
ip address 10.10.100.253/24
active-gateway ip mac 06:01:00:00:02:12
active-gateway ip 10.10.100.254
ip ospf 1 area 0.0.0.0
interface vlan 200
vsx-sync active-gateways
ip mtu 9100
ip address 10.10.200.253/24
active-gateway ip mac 06:02:00:00:02:12
active-gateway ip 10.10.200.254
ip ospf 1 area 0.0.0.0
vsx
system-mac 06:00:00:00:02:12
inter-switch-link lag 256
role secondary
keepalive peer 192.168.1.0 source 192.168.1.1 vrf KA
vsx-sync aaa acl-log-timer arp-security bfd-global bgp control-plane-acls copp-policy dhcp-relay
dhcp-server dhcp-snooping dns evpn gbp hardware-high-capacity-tcam icmp-tcp keychain lldp loop-protect-
global mac-lockout macsec mclag-interfaces mgmd-global nd-snooping neighbor ospf qos-global rip route-
map sflow-global snmp ssh static-routes stp-global time udp-forwarder vrrp vsx-global
!
!
router ospf 1
router-id 192.168.2.2
max-metric router-lsa on-startup
passive-interface default
graceful-restart restart-interval 300
trap-enable
area 0.0.0.0
https-server vrf mgmt
SwitchB#
14
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF
Switch C
SwitchC#
Current configuration:
!
!Version ArubaOS-CX Virtual.10.07.0010
!export-password: default
hostname SwitchC
user admin group administrators password plaintext <yourpassword>
led locator on
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
ssh server vrf mgmt
vlan 1,100,200
interface mgmt
no shutdown
ip dhcp
interface lag 1
no shutdown
no routing
vlan trunk native 1
vlan trunk allowed 100,200
lacp mode active
interface 1/1/4
no shutdown
description to SwitchA
lag 1
interface 1/1/5
no shutdown
description to SwitchB
lag 1
interface 1/1/8
no shutdown
no routing
vlan access 100
interface 1/1/9
no shutdown
no routing
vlan access 200
!
!
https-server vrf mgmt
SwitchC#
15
www.arubanetworks.com
3333 Scott Blvd. Santa Clara, CA 95054
1.844.472.2782 | T: 1.408.227.4500 | FAX: 1.408.227.4550 | [email protected]
16