AOS-CX Simulator Lab - Campus 3-Tier IPv4 L2 Access With VSX and OSPF Lab Guide

Download as pdf or txt
Download as pdf or txt
You are on page 1of 16

LAB GUIDE

Part II Campus 3 Tier. L2


Access with VSX and OSPF
IMPORTANT! THIS GUIDE ASSUMES THAT THE AOS-CX OVA HAS BEEN INSTALLED AND WORKS IN GNS3 OR EVE-NG.
PLEASE REFER TO GNS3/EVE-NG INITIAL SETUP LABS IF REQUIRED.
https://www.eve-ng.net/index.php/documentation/howtos/howto-add-aruba-cx-switch/

TABLE OF CONTENTS
Lab Objective ......................................................................................................................................... 1
Lab Overview ......................................................................................................................................... 1
Lab Network Layout ............................................................................................................................... 2
Lab Tasks .............................................................................................................................................. 2
Task 1 – L2 Access and VSX................................................................................................................. 2
Task 2 – Transit VLAN and IP on VSX Fabric ....................................................................................... 3
Task 3 – IP and OSPF on VSX Fabric ................................................................................................... 3
Task 4 – Adding Tier 3 Core .................................................................................................................. 4
Task 5 – IP and OSPF on Tier 3 ............................................................................................................ 5
Task 6 – Test User Connectivity from Virtual PC (VPC) ......................................................................... 9
Appendix – Complete Configurations ................................................................................................... 10

Lab Objective
The lab will enable the user to gain hands on knowledge and experience in setup basic Campus 3 Tier Network with L2
Access VSX and OSPF

Switches such as the Aruba CX 6100 can be the L2 access switches with 6400 or 8000 series being the VSX and Campus
Core.

To simulate the L2 Access such as Aruba CX 6100 we will limit the features we use in the simulator to replicate this product,
such as using default VRF and static routing only.

For further details on Aruba CX switches and other features please refer to the latest Aruba documentation located on
https://asp.arubanetworks.com/

Lab Overview
This lab set up is as shown in Figure 1. This setup is of a Campus Three Tier network with L2 access to the VSX fabric and
then upstream to an OSPF core.

This lab builds upon the previous lab Part I Two Tier Layer 2 Access with VSX, and you will need the lab guide to this
previous network to help you complete this simulator lab.

1
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

At the end of the lab you will be able to observe a typical Three Tier Campus with the Layer 2 at the access with VSX and
OSPF . All User /End point VLANs functions will be attached to VSX Core with all VLANS trunked to the VSX Aggregation,
taking advantage of Multi Chassis LAG, and then we will use OSPF on the VSX Aggregation to provide reachability
upstream.

It is advisable to read the VSX best practice guide to gain a full understanding of this topology in conjunction to this lab guide
at https://support.hpe.com/hpesc/public/docDisplay?docId=a00094242en_us

Lab Network Layout

Figure 1. Lab topology

Lab Tasks

Task 1 – L2 Access and VSX


Please complete the lab titled “ Part I Campus 2 Tier L2 Access with VSX” to set up Switch A, B and C as well as VPC 1 and
2

2
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

Task 2 – Transit VLAN and IP on VSX Fabric

On Switch A and B Core configure:

• Set up a transit VLAN 4

SwitchA# SwitchB#
configure
vlan 4
vsx-sync
interface vlan 4 interface vlan 4
ip address 192.168.4.1/29 ip address 192.168.4.2/29
description Transit vlan description Transit vlan

In later tasks OSPF will be used, it is a best practice to create a dedicated Transit VLAN between the VSX primary and the
VSX secondary to exchange route information for subnets that are not attached to both VSX nodes. This dedicated Transit
VLAN 4 in this case provides better control and will not carry user data traffic in nominal situation or very limited in case of
east-west traffic between single-attached endpoints.

NOTE: For details of VSX best practice guide please refer to the following guide
https://support.hpe.com/hpesc/public/docDisplay?docId=a00094242en_us

• Check IP connectivity between Switch A and B on Transit VLAN 4

SwitchA# ping 192.168.4.2


PING 192.168.4.2 (192.168.4.2) 100(128) bytes of data.
108 bytes from 192.168.4.2: icmp_seq=1 ttl=64 time=12.0 ms
108 bytes from 192.168.4.2: icmp_seq=2 ttl=64 time=1.47 ms
108 bytes from 192.168.4.2: icmp_seq=3 ttl=64 time=2.54 ms
108 bytes from 192.168.4.2: icmp_seq=4 ttl=64 time=2.08 ms
108 bytes from 192.168.4.2: icmp_seq=5 ttl=64 time=2.12 ms

Task 3 – IP and OSPF on VSX Fabric

Here we will introduce point to point OSPF links to upstream switches as well as OSPF transit vlan between the VSX
switches

On Switch A and B VSX Fabric configure :

• IP interfaces and OSPF, for OSPF we will create a single backbone area

SwitchA# SwitchB#
router ospf 1 router ospf 1
router-id 192.168.2.1 router-id 192.168.2.2
max-metric router-lsa on-startup OSPFv2 protocol will be reset.
passive-interface default Do you want to continue (y/n)? y
graceful-restart restart-interval 300
trap-enable
area 0
interface loopback 0 interface loopback 0
ip address 192.168.2.1/32 ip address 192.168.2.2/32
ip ospf 1 area 0
interface vlan 4
ip ospf 1 area 0
no ip ospf passive
ip ospf cost 50
ip ospf network point-to-point
interface vlan 100
ip ospf 1 area 0
interface vlan 200
ip ospf 1 area 0
interface 1/1/6
mtu 9198 interface 1/1/6
description to SwitchX mtu 9198
ip address 192.168.4.8/31 description to SwitchX
ip ospf 1 area 0 ip address 192.168.4.16/31

3
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
mypassword
interface 1/1/7
mtu 9198 interface 1/1/7
description to SwitchY mtu 9198
ip address 192.168.4.12/31 description to SwitchY
ip ospf 1 area 0 ip address 192.168.4.20/31
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point

The best practice for OSPF cost is to have VSX primary <-> VSX secondary cost lower than Switch X <-> Switch Y cost, as
it is frequent that the ISL bandwidth is higher than the inter core devices bandwidth. In case of single-attachment subnet on
one of the VSX node and non-meshed topology, the traffic from core would be sent to the VSX peer closest to the attached
destination, avoiding consuming inter-core bandwidth. Same concept applies for south-to north traffic pattern. In the lab,
OSPF cost for Transit VLAN over ISL is set to 50, and 1000 for Core devices. OSPF cost is synchronized from the VSX
primary to the VSX secondary

• Check OSPF status on the VSX Fabric

show ip ospf neighbors


VRF : default Process : 1
===================================================

Total Number of Neighbors : 1

Neighbor ID Priority State Nbr Address Interface


-------------------------------------------------------------------------
192.168.2.2 n/a FULL 192.168.4.2 vlan4

Only OSPF neighbors between Switch A and B should be established at this stage as shown above

Task 4 – Adding Tier 3 Core


Refer to Figure 1 for topology setup. Open switch X and Y consoles and log in with user “admin” and no password.
configure
hostname <device host name>

• On Switch X and Y bring up on 1/1/1-1/1/4:

int 1/1/1-1/1/4
no shutdown

use “exit” to go back a level

Open switch A and B bring up the following ports

• On Switch A and B bring up on 1/1/6-1/1/7

int 1/1/6-1/1/7
no shutdown

• Validate LLDP neighbors appear as expected on each switch. Here we show Switch X output only.

SwitchX#show lldp neighbor-info

LLDP Neighbor Information


=========================

Total Neighbor Entries : 4


Total Neighbor Entries Deleted : 0
Total Neighbor Entries Dropped : 0
Total Neighbor Entries Aged-Out : 0

4
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

LOCAL-PORT CHASSIS-ID PORT-ID PORT-DESC TTL SYS-NAME


-----------------------------------------------------------------------------------------------------------
1/1/1 08:00:09:9a:af:68 1/1/6 to SwitchX 120 SwitchA
1/1/2 08:00:09:6c:5c:9c 1/1/6 to SwitchX 120 SwitchB
1/1/3 08:00:09:49:0e:5a 1/1/3 120 SwitchY
1/1/4 08:00:09:49:0e:5a 1/1/4 120 SwitchY

Task 5 – IP and OSPF on Tier 3

On Switch X and Y configure :

• Routed Port Link Aggregation Group

SwitchX#
configure
interface lag 256
no shutdown
ip address 192.168.4.24/31
lacp mode active
no shutdown
interface 1/1/3-1/1/4
no shutdown
description InterCoreLink
lag 256

SwitchY#
configure
interface lag 256
no shutdown
ip address 192.168.4.25/31
lacp mode active
no shutdown
interface 1/1/3-1/1/4
no shutdown
description InterCoreLink
lag 256

• Check RLAG, Ensure :LAG is UP and flags ALFNCD are valid. Here we show Switch X output only.

SwitchX#show interface lag

Aggregate lag256 is up
Admin state is up
Description :
MAC Address : 08:00:09:d8:64:e7
Aggregated-interfaces : 1/1/3 1/1/4
Aggregation-key : 256
Aggregate mode : active
IPv4 address 192.168.4.24/31
Speed : 2000 Mb/s
L3 Counters: Rx Disabled, Tx Disabled
qos trust none

Statistic RX TX Total
---------------- -------------------- -------------------- --------------------
Packets 154 198 0
Unicast 0 0 0
Multicast 0 0 0
Broadcast 0 0 0
Bytes 20407 25682 0
Jumbos 0 0 0
Dropped 0 0 0
Pause Frames 0 0 0
L3 Packets 0 0 0
L3 Bytes 0 0 0
Errors 0 0 0
CRC/FCS 0 n/a 0
Collision n/a 0 0
Runts 0 n/a 0
Giants 0 n/a 0

5
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

show lacp interfaces

State abbreviations :
A - Active P - Passive F - Aggregable I - Individual
S - Short-timeout L - Long-timeout N - InSync O - OutofSync
C - Collecting D - Distributing
X - State m/c expired E - Default neighbor state

Actor details of all interfaces:


----------------------------------------------------------------------------------
Intf Aggr Port Port State System-ID System Aggr Forwarding
Name Id Pri Pri Key State
----------------------------------------------------------------------------------
1/1/3 lag256 4 1 ALFNCD 08:00:09:d8:64:e7 65534 256 up
1/1/4 lag256 5 1 ALFNCD 08:00:09:d8:64:e7 65534 256 up

Partner details of all interfaces:


----------------------------------------------------------------------------------
Intf Aggr Port Port State System-ID System Aggr
Name Id Pri Pri Key
----------------------------------------------------------------------------------
1/1/3 lag256 4 1 ALFNCD 08:00:09:49:0e:5a 65534 256
1/1/4 lag256 5 1 ALFNCD 08:00:09:49:0e:5a 65534 256

• Check reachability across the RLAG with a ping test. Here we ping from Switch X to Y
SwitchX#
ping 192.168.4.25
PING 192.168.4.25 (192.168.4.25) 100(128) bytes of data.
108 bytes from 192.168.4.25: icmp_seq=1 ttl=64 time=58.5 ms
108 bytes from 192.168.4.25: icmp_seq=2 ttl=64 time=11.4 ms
108 bytes from 192.168.4.25: icmp_seq=3 ttl=64 time=27.7 ms
108 bytes from 192.168.4.25: icmp_seq=4 ttl=64 time=8.75 ms
108 bytes from 192.168.4.25: icmp_seq=5 ttl=64 time=8.42 ms

• IP interfaces and OSPF for Switch X and Y

SwitchX#
router ospf 1
router-id 192.168.2.3
max-metric router-lsa on-startup
passive-interface default
graceful-restart restart-interval 300
trap-enable
area 0
interface loopback 0
ip address 192.168.2.3/32
ip ospf 1 area 0
interface 1/1/1
mtu 9198
description to SwitchA_VSX_Pri
ip address 192.168.4.9/31
ip ospf 1 area 0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/2
mtu 9198
description to SwitchB_VSX_Sec
ip address 192.168.4.17/31
ip ospf 1 area 0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface lag 256
!ip configured in previous step
ip ospf 1 area 0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point

SwitchY#
router ospf 1
router-id 192.168.2.4

6
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

max-metric router-lsa on-startup


passive-interface default
graceful-restart restart-interval 300
trap-enable
area 0
interface loopback 0
ip address 192.168.2.4/32
ip ospf 1 area 0
interface 1/1/1
mtu 9198
description to SwitchA_VSX_Pri
ip address 192.168.4.13/31
ip ospf 1 area 0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/2
mtu 9198
description to SwitchB_VSX_Sec
ip address 192.168.4.21/31
ip ospf 1 area 0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface lag 256
!ip configured in previous step
ip ospf 1 area 0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point

• Check OSPF neighbors here we show for Switch X, Y, A and B

• From SW X

show ip ospf neighbors


VRF : default Process : 1
===================================================

Total Number of Neighbors : 3

Neighbor ID Priority State Nbr Address Interface


-------------------------------------------------------------------------
192.168.2.1 n/a FULL 192.168.4.8 1/1/1

192.168.2.2 n/a FULL 192.168.4.16 1/1/2

192.168.2.4 n/a FULL 192.168.4.25 lag256

• From SW Y

show ip ospf neighbors


VRF : default Process : 1
===================================================

Total Number of Neighbors : 3

Neighbor ID Priority State Nbr Address Interface


-------------------------------------------------------------------------
192.168.2.1 n/a FULL 192.168.4.12 1/1/1

192.168.2.2 n/a FULL 192.168.4.20 1/1/2

192.168.2.3 n/a FULL 192.168.4.24 lag256

• From SW A
show ip ospf neighbors
VRF : default Process : 1
===================================================

Total Number of Neighbors : 3

Neighbor ID Priority State Nbr Address Interface


-------------------------------------------------------------------------

7
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

192.168.2.3 n/a FULL 192.168.4.9 1/1/6

192.168.2.4 n/a FULL 192.168.4.13 1/1/7

192.168.2.2 n/a FULL 192.168.4.2 vlan4

• From SW B
show ip ospf neighbors
VRF : default Process : 1
===================================================

Total Number of Neighbors : 3

Neighbor ID Priority State Nbr Address Interface


-------------------------------------------------------------------------
192.168.2.3 n/a FULL 192.168.4.17 1/1/6

192.168.2.4 n/a FULL 192.168.4.21 1/1/7

192.168.2.1 n/a FULL 192.168.4.1 vlan4

• Check OSPF routes. Here we check Switch A and X. Lab users can explore other nodes.

SwitchA# show ip route

Displaying ipv4 routes selected for forwarding

Origin Codes: C - connected, S - static, L - local


R - RIP, B - BGP, O - OSPF
Type Codes: E - External BGP, I - Internal BGP, V - VPN, EV - EVPN
IA - OSPF internal area, E1 - OSPF external type 1
E2 - OSPF external type 2

VRF: default

Prefix Nexthop Interface VRF(egress) Origin/ Distance/ Age


Type Metric
-------------------------------------------------------------------------------------------------------
10.10.100.0/24 - vlan100 - C [0/0] -
10.10.100.252/32 - vlan100 - L [0/0] -
10.10.200.0/24 - vlan200 - C [0/0] -
10.10.200.252/32 - vlan200 - L [0/0] -
192.168.2.1/32 - loopback0 - L [0/0] -
192.168.2.2/32 192.168.4.2 vlan4 - O [110/50] 02h:50m:53s
192.168.2.3/32 192.168.4.9 1/1/6 - O [110/1000] 00h:31m:20s
192.168.2.4/32 192.168.4.13 1/1/7 - O [110/1000] 00h:28m:00s
192.168.4.0/29 - vlan4 - C [0/0] -
192.168.4.1/32 - vlan4 - L [0/0] -
192.168.4.8/31 - 1/1/6 - C [0/0] -
192.168.4.8/32 - 1/1/6 - L [0/0] -
192.168.4.12/31 - 1/1/7 - C [0/0] -
192.168.4.12/32 - 1/1/7 - L [0/0] -
192.168.4.16/31 192.168.4.2 vlan4 - O [110/1050] 02h:50m:49s
192.168.4.20/31 192.168.4.2 vlan4 - O [110/1050] 02h:50m:49s
192.168.4.24/31 192.168.4.9 1/1/6 - O [110/2000] 00h:26m:05s
192.168.4.13 1/1/7 - [110/2000] 00h:26m:05s

Total Route Count : 17

SwitchX#show ip route

Displaying ipv4 routes selected for forwarding

Origin Codes: C - connected, S - static, L - local


R - RIP, B - BGP, O - OSPF
Type Codes: E - External BGP, I - Internal BGP, V - VPN, EV - EVPN
IA - OSPF internal area, E1 - OSPF external type 1
E2 - OSPF external type 2

VRF: default

Prefix Nexthop Interface VRF(egress) Origin/ Distance/ Age


Type Metric
-------------------------------------------------------------------------------------------------------
10.10.100.0/24 192.168.4.16 1/1/2 - O [110/1100] 00h:32m:11s

8
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

192.168.4.8 1/1/1 - [110/1100] 00h:32m:11s


10.10.200.0/24 192.168.4.16 1/1/2 - O [110/1100] 00h:32m:11s
192.168.4.8 1/1/1 - [110/1100] 00h:32m:11s
192.168.2.1/32 192.168.4.8 1/1/1 - O [110/1000] 00h:33m:21s
192.168.2.2/32 192.168.4.16 1/1/2 - O [110/1000] 00h:32m:11s
192.168.2.3/32 - loopback0 - L [0/0] -
192.168.2.4/32 192.168.4.25 lag256 - O [110/1000] 00h:27m:57s
192.168.4.0/29 192.168.4.16 1/1/2 - O [110/1050] 00h:32m:11s
192.168.4.8 1/1/1 - [110/1050] 00h:32m:12s
192.168.4.8/31 - 1/1/1 - C [0/0] -
192.168.4.9/32 - 1/1/1 - L [0/0] -
192.168.4.12/31 192.168.4.25 lag256 - O [110/2000] 00h:27m:58s
192.168.4.8 1/1/1 - [110/2000] 00h:27m:58s
192.168.4.16/31 - 1/1/2 - C [0/0] -
192.168.4.17/32 - 1/1/2 - L [0/0] -
192.168.4.20/31 192.168.4.25 lag256 - O [110/2000] 00h:27m:58s
192.168.4.16 1/1/2 - [110/2000] 00h:27m:58s
192.168.4.24/31 - lag256 - C [0/0] -
192.168.4.24/32 - lag256 - L [0/0] -

Total Route Count : 15

Task 6 – Test User Connectivity from Virtual PC (VPC)

Prior to this step it is assumed that Switch C and VPC have previously been configured and tested as in lab guide
“Part 1 Campus 2 Tier L2 Access and VSX”

Note: In real world networks hosts may be restricted for ICMP reachability. However, for the purposes of this lab no
restrictions are applied.

• From VPC1 ping various IP address in the Tier 3 Core


VPCS> ip 10.10.100.1/24 10.10.100.254
Checking for duplicate address...
PC1 : 10.10.100.1 255.255.255.0 gateway 10.10.100.254

VPCS> ping 10.10.100.254

84 bytes from 10.10.100.254 icmp_seq=1 ttl=64 time=70.997 ms


84 bytes from 10.10.100.254 icmp_seq=2 ttl=64 time=5.381 ms
84 bytes from 10.10.100.254 icmp_seq=3 ttl=64 time=23.235 ms
84 bytes from 10.10.100.254 icmp_seq=4 ttl=64 time=16.112 ms
84 bytes from 10.10.100.254 icmp_seq=5 ttl=64 time=33.197 ms

VPCS> ping 192.168.2.3

84 bytes from 192.168.2.3 icmp_seq=1 ttl=63 time=57.563 ms


84 bytes from 192.168.2.3 icmp_seq=2 ttl=63 time=103.694 ms
84 bytes from 192.168.2.3 icmp_seq=3 ttl=63 time=63.723 ms
84 bytes from 192.168.2.3 icmp_seq=4 ttl=63 time=14.053 ms
84 bytes from 192.168.2.3 icmp_seq=5 ttl=63 time=14.993 ms

VPCS> ping 192.168.2.4

84 bytes from 192.168.2.4 icmp_seq=1 ttl=63 time=21.286 ms


84 bytes from 192.168.2.4 icmp_seq=2 ttl=63 time=46.421 ms
84 bytes from 192.168.2.4 icmp_seq=3 ttl=63 time=12.440 ms
84 bytes from 192.168.2.4 icmp_seq=4 ttl=63 time=44.027 ms
84 bytes from 192.168.2.4 icmp_seq=5 ttl=63 time=17.334 ms

VPCS>
• The above connectivity is possible as both subnets are directly connected to the VSX Fabric
• The reader can test from VPC2 as required.

End of lab

9
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

Appendix – Complete Configurations


• If you face issues during your lab, you can verify your configs with the configs listed in this section

• If configs are the same, try powering off/powering on the switches to reboot them.

Switch X

SwitchX#
!
!Version ArubaOS-CX Virtual.10.07.0010
!export-password: default
hostname SwitchX
user admin group administrators password plaintext <yourpassword>
led locator on
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
ssh server vrf mgmt
vlan 1
interface mgmt
no shutdown
ip dhcp
interface lag 256
no shutdown
ip address 192.168.4.24/31
lacp mode active
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/1
no shutdown
mtu 9198
description to SwitchA_VSX_Pri
ip address 192.168.4.9/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/2
no shutdown
mtu 9198
description to SwitchB_VSX_Sec
ip address 192.168.4.17/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/3
no shutdown
description InterCoreLink
lag 256
interface 1/1/4
no shutdown
description InterCoreLink
lag 256
interface loopback 0
ip address 192.168.2.3/32
ip ospf 1 area 0.0.0.0
!
!
router ospf 1
router-id 192.168.2.3
max-metric router-lsa on-startup
passive-interface default
graceful-restart restart-interval 300
trap-enable
area 0.0.0.0
https-server vrf mgmt
SwitchX#

10
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

Switch Y

SwitchY#
!
!Version ArubaOS-CX Virtual.10.07.0010
!export-password: default
hostname SwitchY
user admin group administrators password plaintext <yourpassword>
led locator on
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
ssh server vrf mgmt
vlan 1
interface mgmt
no shutdown
ip dhcp
interface lag 256
no shutdown
ip address 192.168.4.25/31
lacp mode active
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/1
no shutdown
mtu 9198
description to SwitchA_VSX_Pri
ip address 192.168.4.13/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/2
no shutdown
mtu 9198
description to SwitchB_VSX_Sec
ip address 192.168.4.21/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/3
no shutdown
description InterCoreLink
lag 256
interface 1/1/4
no shutdown
description InterCoreLink
lag 256
interface loopback 0
ip address 192.168.2.4/32
ip ospf 1 area 0.0.0.0
!
!
router ospf 1
router-id 192.168.2.4
max-metric router-lsa on-startup
passive-interface default
graceful-restart restart-interval 300
trap-enable
area 0.0.0.0
https-server vrf mgmt
SwitchY#

Switch A

SwitchA#
!
!Version ArubaOS-CX Virtual.10.07.0010
!export-password: default
hostname SwitchA
user admin group administrators password plaintext <yourpassword>
led locator on
no usb

11
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

vrf KA
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
ssh server vrf mgmt
vlan 1
vlan 4
vsx-sync
vlan 100
vsx-sync
vlan 200
vsx-sync
interface mgmt
no shutdown
ip dhcp
interface lag 1 multi-chassis
no shutdown
description SwitchC VSX-MCLAG
no routing
vlan trunk native 1
vlan trunk allowed 100,200
lacp mode active
interface lag 256
no shutdown
description ISL
no routing
vlan trunk native 1
vlan trunk allowed all
lacp mode active
interface 1/1/1
no shutdown
mtu 9198
description ISL link
lag 256
interface 1/1/2
no shutdown
mtu 9198
description ISL link
lag 256
interface 1/1/3
no shutdown
vrf attach KA
description VSX keepalive link
ip address 192.168.1.0/31
interface 1/1/4
no shutdown
description to SwitchC
lag 1
interface 1/1/6
no shutdown
mtu 9198
description to SwitchX
ip address 192.168.4.8/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/7
no shutdown
mtu 9198
description to SwitchY
ip address 192.168.4.12/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface loopback 0
ip address 192.168.2.1/32
ip ospf 1 area 0.0.0.0
interface vlan 4
description Transit vlan
ip address 192.168.4.1/29
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 50
ip ospf network point-to-point
interface vlan 100

12
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

vsx-sync active-gateways
ip mtu 9100
ip address 10.10.100.252/24
active-gateway ip mac 06:01:00:00:02:12
active-gateway ip 10.10.100.254
ip ospf 1 area 0.0.0.0
interface vlan 200
vsx-sync active-gateways
ip mtu 9100
ip address 10.10.200.252/24
active-gateway ip mac 06:02:00:00:02:12
active-gateway ip 10.10.200.254
ip ospf 1 area 0.0.0.0
vsx
system-mac 06:00:00:00:02:12
inter-switch-link lag 256
role primary
keepalive peer 192.168.1.1 source 192.168.1.0 vrf KA
vsx-sync aaa acl-log-timer arp-security bfd-global bgp control-plane-acls copp-policy dhcp-relay
dhcp-server dhcp-snooping dns evpn gbp hardware-high-capacity-tcam icmp-tcp keychain lldp loop-protect-
global mac-lockout macsec mclag-interfaces mgmd-global nd-snooping neighbor ospf qos-global rip route-
map sflow-global snmp ssh static-routes stp-global time udp-forwarder vrrp vsx-global
!
!
router ospf 1
router-id 192.168.2.1
max-metric router-lsa on-startup
passive-interface default
graceful-restart restart-interval 300
trap-enable
area 0.0.0.0
https-server vrf mgmt
SwitchA#

Switch B

SwitchB#
!
!Version ArubaOS-CX Virtual.10.07.0010
!export-password: default
hostname SwitchB
user admin group administrators password plaintext <yourpassword>
no usb
vrf KA
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
ssh server vrf mgmt
vlan 1
vlan 4
vsx-sync
vlan 100
vsx-sync
vlan 200
vsx-sync
interface mgmt
no shutdown
ip dhcp
interface lag 1 multi-chassis
no shutdown
description SwitchC VSX-MCLAG
no routing
vlan trunk native 1
vlan trunk allowed 100,200
lacp mode active
interface lag 256
no shutdown
description ISL
no routing
vlan trunk native 1
vlan trunk allowed all
lacp mode active
interface 1/1/1
no shutdown
mtu 9198
description ISL link

13
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

lag 256
interface 1/1/2
no shutdown
mtu 9198
description ISL link
lag 256
interface 1/1/3
no shutdown
vrf attach KA
description VSX keepalive link
ip address 192.168.1.1/31
interface 1/1/4
no shutdown
interface 1/1/5
no shutdown
description to SwitchC
lag 1
interface 1/1/6
no shutdown
mtu 9198
description to SwitchX
ip address 192.168.4.16/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface 1/1/7
no shutdown
mtu 9198
description to SwitchY
ip address 192.168.4.20/31
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 1000
ip ospf network point-to-point
interface loopback 0
ip address 192.168.2.2/32
ip ospf 1 area 0.0.0.0
interface vlan 4
description Transit vlan
ip address 192.168.4.2/29
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip ospf cost 50
ip ospf network point-to-point
interface vlan 100
vsx-sync active-gateways
ip mtu 9100
ip address 10.10.100.253/24
active-gateway ip mac 06:01:00:00:02:12
active-gateway ip 10.10.100.254
ip ospf 1 area 0.0.0.0
interface vlan 200
vsx-sync active-gateways
ip mtu 9100
ip address 10.10.200.253/24
active-gateway ip mac 06:02:00:00:02:12
active-gateway ip 10.10.200.254
ip ospf 1 area 0.0.0.0
vsx
system-mac 06:00:00:00:02:12
inter-switch-link lag 256
role secondary
keepalive peer 192.168.1.0 source 192.168.1.1 vrf KA
vsx-sync aaa acl-log-timer arp-security bfd-global bgp control-plane-acls copp-policy dhcp-relay
dhcp-server dhcp-snooping dns evpn gbp hardware-high-capacity-tcam icmp-tcp keychain lldp loop-protect-
global mac-lockout macsec mclag-interfaces mgmd-global nd-snooping neighbor ospf qos-global rip route-
map sflow-global snmp ssh static-routes stp-global time udp-forwarder vrrp vsx-global
!
!
router ospf 1
router-id 192.168.2.2
max-metric router-lsa on-startup
passive-interface default
graceful-restart restart-interval 300
trap-enable
area 0.0.0.0
https-server vrf mgmt
SwitchB#

14
Lab Guide
Campus 3 Tier. L2 Access with VSX and OSPF

Switch C

SwitchC#
Current configuration:
!
!Version ArubaOS-CX Virtual.10.07.0010
!export-password: default
hostname SwitchC
user admin group administrators password plaintext <yourpassword>
led locator on
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
ssh server vrf mgmt
vlan 1,100,200
interface mgmt
no shutdown
ip dhcp
interface lag 1
no shutdown
no routing
vlan trunk native 1
vlan trunk allowed 100,200
lacp mode active
interface 1/1/4
no shutdown
description to SwitchA
lag 1
interface 1/1/5
no shutdown
description to SwitchB
lag 1
interface 1/1/8
no shutdown
no routing
vlan access 100
interface 1/1/9
no shutdown
no routing
vlan access 200
!
!
https-server vrf mgmt
SwitchC#

15
www.arubanetworks.com
3333 Scott Blvd. Santa Clara, CA 95054
1.844.472.2782 | T: 1.408.227.4500 | FAX: 1.408.227.4550 | [email protected]
16

You might also like