From d3845dd8baacf5e046f2dc440469793f73a54583 Mon Sep 17 00:00:00 2001 From: Werner Date: Fri, 7 Jan 2022 16:29:19 +0200 Subject: [PATCH 1/2] com --- inventory/inventory.yml | 60 +++++++++++++++++++---------------------- 1 file changed, 28 insertions(+), 32 deletions(-) diff --git a/inventory/inventory.yml b/inventory/inventory.yml index 3526a7442..c7d25054c 100644 --- a/inventory/inventory.yml +++ b/inventory/inventory.yml @@ -4,14 +4,14 @@ all: CVP: hosts: cv_ztp: - ansible_host: 10.83.28.164 + ansible_host: 172.16.47.11 ansible_user: root - ansible_password: ansible + ansible_password: '@rista123!' cv_server: - ansible_httpapi_host: 10.83.28.164 - ansible_host: 10.83.28.164 + ansible_httpapi_host: 172.16.47.11 + ansible_host: 172.16.47.11 ansible_user: ansible - ansible_password: ansible + ansible_password: '@rista123!' ansible_connection: httpapi ansible_httpapi_use_ssl: true ansible_httpapi_validate_certs: false @@ -28,44 +28,42 @@ all: vars: type: spine hosts: - DC1-SPINE1: - ansible_host: 10.255.0.11 - DC1-SPINE2: - ansible_host: 10.255.0.12 + DC1_SPINE-1: + ansible_host: 172.16.47.21 + DC1_SPINE-2: + ansible_host: 172.16.47.22 + DC1_SPINE-3: + ansible_host: 172.16.47.23 + DC1_SPINE-4: + ansible_host: 172.16.47.24 DC1_L3LEAFS: vars: type: l3leaf children: DC1_LEAF1: hosts: - DC1-LEAF1A: - ansible_host: 10.255.0.13 - DC1-LEAF1B: - ansible_host: 10.255.0.14 + DC1_LEAF-1A: + ansible_host: 172.16.47.31 + DC1_LEAF-1B: + ansible_host: 172.16.47.32 DC1_LEAF2: hosts: - DC1-LEAF2A: - ansible_host: 10.255.0.15 - DC1-LEAF2B: - ansible_host: 10.255.0.16 - DC1_L2LEAFS: - vars: - type: l2leaf - children: - DC1_L2LEAF1: + DC1_LEAF-2A: + ansible_host: 172.16.47.33 + DC1_LEAF-2B: + ansible_host: 172.16.47.34 + DC1_LEAF3: hosts: - DC1-L2LEAF1A: - ansible_host: 10.255.0.17 - DC1_L2LEAF2: - hosts: - DC1-L2LEAF2A: - ansible_host: 10.255.0.18 + DC1_LEAF-3A: + ansible_host: 172.16.47.35 + DC1_LEAF-3B: + ansible_host: 172.16.47.36 vars: ansible_connection: httpapi ansible_network_os: eos ansible_user: ansible # should use vault for passwords - ansible_ssh_pass: ansible + ansible_ssh_pass: '@rista123!' ansible_become: true ansible_become_method: enable ansible_httpapi_use_ssl: true @@ -73,8 +71,6 @@ all: DC1_TENANTS_NETWORKS: children: DC1_L3LEAFS: - DC1_L2LEAFS: DC1_SERVERS: children: - DC1_L3LEAFS: - DC1_L2LEAFS: + DC1_L3LEAFS: \ No newline at end of file From 5e18bd17ca779ec9ddc958519ef64af3e97372fa Mon Sep 17 00:00:00 2001 From: Werner Date: Fri, 7 Jan 2022 16:30:39 +0200 Subject: [PATCH 2/2] c --- .../documentation/devices/DC1_LEAF-1A.md | 1382 +++++++++++++++++ .../documentation/devices/DC1_LEAF-1B.md | 1382 +++++++++++++++++ .../documentation/devices/DC1_LEAF-2A.md | 1382 +++++++++++++++++ .../documentation/devices/DC1_LEAF-2B.md | 1382 +++++++++++++++++ .../documentation/devices/DC1_LEAF-3A.md | 1382 +++++++++++++++++ .../documentation/devices/DC1_LEAF-3B.md | 1382 +++++++++++++++++ .../documentation/devices/DC1_SPINE-1.md | 561 +++++++ .../documentation/devices/DC1_SPINE-2.md | 561 +++++++ .../documentation/devices/DC1_SPINE-3.md | 561 +++++++ .../documentation/devices/DC1_SPINE-4.md | 561 +++++++ .../fabric/DC1_FABRIC-documentation.md | 125 +- .../fabric/DC1_FABRIC-p2p-links.csv | 32 +- .../fabric/DC1_FABRIC-topology.csv | 88 +- inventory/group_vars/CVP.yml | 79 +- inventory/group_vars/DC1.yml | 14 +- inventory/group_vars/DC1_FABRIC.yml | 148 +- inventory/intended/configs/DC1-L2LEAF1A.cfg | 96 -- inventory/intended/configs/DC1-L2LEAF2A.cfg | 96 -- inventory/intended/configs/DC1-LEAF1A.cfg | 651 -------- inventory/intended/configs/DC1-LEAF1B.cfg | 651 -------- inventory/intended/configs/DC1-LEAF2A.cfg | 651 -------- inventory/intended/configs/DC1-LEAF2B.cfg | 651 -------- inventory/intended/configs/DC1-SPINE1.cfg | 144 -- inventory/intended/configs/DC1-SPINE2.cfg | 144 -- .../DC1-L2LEAF1A-debug-vars.yml | 736 --------- .../structured_configs/DC1-L2LEAF1A.yml | 130 -- .../DC1-L2LEAF2A-debug-vars.yml | 736 --------- .../structured_configs/DC1-L2LEAF2A.yml | 130 -- .../DC1-LEAF1A-debug-vars.yml | 872 ----------- .../structured_configs/DC1-LEAF1A.yml | 892 ----------- .../DC1-LEAF1B-debug-vars.yml | 872 ----------- .../structured_configs/DC1-LEAF1B.yml | 892 ----------- .../DC1-LEAF2A-debug-vars.yml | 872 ----------- .../structured_configs/DC1-LEAF2A.yml | 892 ----------- .../DC1-LEAF2B-debug-vars.yml | 872 ----------- .../structured_configs/DC1-LEAF2B.yml | 892 ----------- .../DC1-SPINE1-debug-vars.yml | 399 ----- .../structured_configs/DC1-SPINE1.yml | 195 --- .../DC1-SPINE2-debug-vars.yml | 399 ----- .../structured_configs/DC1-SPINE2.yml | 195 --- .../structured_configs/cvp/cv_server.yml | 80 +- .../cvp/cv_server_configlets.yml | 1005 +----------- playbooks/dc1-fabric-deploy-cvp.yml | 2 +- playbooks/dc1-fabric-reset-cvp.yml | 4 +- 44 files changed, 10896 insertions(+), 14277 deletions(-) create mode 100644 inventory/documentation/devices/DC1_LEAF-1A.md create mode 100644 inventory/documentation/devices/DC1_LEAF-1B.md create mode 100644 inventory/documentation/devices/DC1_LEAF-2A.md create mode 100644 inventory/documentation/devices/DC1_LEAF-2B.md create mode 100644 inventory/documentation/devices/DC1_LEAF-3A.md create mode 100644 inventory/documentation/devices/DC1_LEAF-3B.md create mode 100644 inventory/documentation/devices/DC1_SPINE-1.md create mode 100644 inventory/documentation/devices/DC1_SPINE-2.md create mode 100644 inventory/documentation/devices/DC1_SPINE-3.md create mode 100644 inventory/documentation/devices/DC1_SPINE-4.md delete mode 100644 inventory/intended/configs/DC1-L2LEAF1A.cfg delete mode 100644 inventory/intended/configs/DC1-L2LEAF2A.cfg delete mode 100644 inventory/intended/configs/DC1-LEAF1A.cfg delete mode 100644 inventory/intended/configs/DC1-LEAF1B.cfg delete mode 100644 inventory/intended/configs/DC1-LEAF2A.cfg delete mode 100644 inventory/intended/configs/DC1-LEAF2B.cfg delete mode 100644 inventory/intended/configs/DC1-SPINE1.cfg delete mode 100644 inventory/intended/configs/DC1-SPINE2.cfg delete mode 100644 inventory/intended/structured_configs/DC1-L2LEAF1A-debug-vars.yml delete mode 100644 inventory/intended/structured_configs/DC1-L2LEAF1A.yml delete mode 100644 inventory/intended/structured_configs/DC1-L2LEAF2A-debug-vars.yml delete mode 100644 inventory/intended/structured_configs/DC1-L2LEAF2A.yml delete mode 100644 inventory/intended/structured_configs/DC1-LEAF1A-debug-vars.yml delete mode 100644 inventory/intended/structured_configs/DC1-LEAF1A.yml delete mode 100644 inventory/intended/structured_configs/DC1-LEAF1B-debug-vars.yml delete mode 100644 inventory/intended/structured_configs/DC1-LEAF1B.yml delete mode 100644 inventory/intended/structured_configs/DC1-LEAF2A-debug-vars.yml delete mode 100644 inventory/intended/structured_configs/DC1-LEAF2A.yml delete mode 100644 inventory/intended/structured_configs/DC1-LEAF2B-debug-vars.yml delete mode 100644 inventory/intended/structured_configs/DC1-LEAF2B.yml delete mode 100644 inventory/intended/structured_configs/DC1-SPINE1-debug-vars.yml delete mode 100644 inventory/intended/structured_configs/DC1-SPINE1.yml delete mode 100644 inventory/intended/structured_configs/DC1-SPINE2-debug-vars.yml delete mode 100644 inventory/intended/structured_configs/DC1-SPINE2.yml diff --git a/inventory/documentation/devices/DC1_LEAF-1A.md b/inventory/documentation/devices/DC1_LEAF-1A.md new file mode 100644 index 000000000..ef0af4f35 --- /dev/null +++ b/inventory/documentation/devices/DC1_LEAF-1A.md @@ -0,0 +1,1382 @@ +# DC1_LEAF-1A +# Table of Contents + + +- [Management](#management) + - [Management Interfaces](#management-interfaces) + - [Name Servers](#name-servers) + - [NTP](#ntp) + - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Local Users](#local-users) +- [Monitoring](#monitoring) + - [TerminAttr Daemon](#terminattr-daemon) +- [MLAG](#mlag) + - [MLAG Summary](#mlag-summary) + - [MLAG Device Configuration](#mlag-device-configuration) +- [Spanning Tree](#spanning-tree) + - [Spanning Tree Summary](#spanning-tree-summary) + - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) +- [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) + - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) + - [Internal VLAN Allocation Policy Configuration](#internal-vlan-allocation-policy-configuration) +- [VLANs](#vlans) + - [VLANs Summary](#vlans-summary) + - [VLANs Device Configuration](#vlans-device-configuration) +- [Interfaces](#interfaces) + - [Ethernet Interfaces](#ethernet-interfaces) + - [Port-Channel Interfaces](#port-channel-interfaces) + - [Loopback Interfaces](#loopback-interfaces) + - [VLAN Interfaces](#vlan-interfaces) + - [VXLAN Interface](#vxlan-interface) +- [Routing](#routing) + - [Service Routing Protocols Model](#service-routing-protocols-model) + - [Virtual Router MAC Address](#virtual-router-mac-address) + - [IP Routing](#ip-routing) + - [IPv6 Routing](#ipv6-routing) + - [Static Routes](#static-routes) + - [Router BGP](#router-bgp) +- [BFD](#bfd) + - [Router BFD](#router-bfd) +- [Multicast](#multicast) + - [IP IGMP Snooping](#ip-igmp-snooping) +- [Filters](#filters) + - [Prefix-lists](#prefix-lists) + - [Route-maps](#route-maps) +- [ACL](#acl) +- [VRF Instances](#vrf-instances) + - [VRF Instances Summary](#vrf-instances-summary) + - [VRF Instances Device Configuration](#vrf-instances-device-configuration) +- [Virtual Source NAT](#virtual-source-nat) + - [Virtual Source NAT Summary](#virtual-source-nat-summary) + - [Virtual Source NAT Configuration](#virtual-source-nat-configuration) +- [Quality Of Service](#quality-of-service) + + +# Management + +## Management Interfaces + +### Management Interfaces Summary + +#### IPv4 + +| Management Interface | description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | oob_management | oob | MGMT | 172.16.47.31/24 | 172.16.47.1 | + +#### IPv6 + +| Management Interface | description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | oob_management | oob | MGMT | - | - | + +### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description oob_management + no shutdown + vrf MGMT + ip address 172.16.47.31/24 +``` + +## Name Servers + +### Name Servers Summary + +| Name Server | Source VRF | +| ----------- | ---------- | +| 172.16.47.12 | MGMT | +| 8.8.8.8 | MGMT | + +### Name Servers Device Configuration + +```eos +ip name-server vrf MGMT 8.8.8.8 +ip name-server vrf MGMT 172.16.47.12 +``` + +## NTP + +### NTP Summary + +#### NTP Local Interface + +| Interface | VRF | +| --------- | --- | +| Management1 | MGMT | + +#### NTP Servers + +| Server | VRF | Preferred | Burst | iBurst | Version | Min Poll | Max Poll | Local-interface | Key | +| ------ | --- | --------- | ----- | ------ | ------- | -------- | -------- | --------------- | --- | +| time.google.com | MGMT | True | - | - | - | - | - | - | - | + +### NTP Device Configuration + +```eos +! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT time.google.com prefer +``` + +## Management API HTTP + +### Management API HTTP Summary + +| HTTP | HTTPS | +| ---------- | ---------- | +| default | true | + +### Management API VRF Access + +| VRF Name | IPv4 ACL | IPv6 ACL | +| -------- | -------- | -------- | +| MGMT | - | - | + + +### Management API HTTP Configuration + +```eos +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +``` + +# Authentication + +## Local Users + +### Local Users Summary + +| User | Privilege | Role | +| ---- | --------- | ---- | +| admin | 15 | network-admin | +| ansible | 15 | network-admin | +| cvpadmin | 15 | network-admin | + +### Local Users Device Configuration + +```eos +! +username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 +username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +``` + +# Monitoring + +## TerminAttr Daemon + +### TerminAttr Daemon Summary + +| CV Compression | CloudVision Servers | VRF | Authentication | Smash Excludes | Ingest Exclude | Bypass AAA | +| -------------- | ------------------- | --- | -------------- | -------------- | -------------- | ---------- | +| gzip | 172.16.47.11:9910 | MGMT | key,@rista123! | ale,flexCounter,hardware,kni,pulse,strata | /Sysdb/cell/1/agent,/Sysdb/cell/2/agent | False | + +### TerminAttr Daemon Device Configuration + +```eos +! +daemon TerminAttr + exec /usr/bin/TerminAttr -cvaddr=172.16.47.11:9910 -cvauth=key,@rista123! -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs + no shutdown +``` + +# MLAG + +## MLAG Summary + +| Domain-id | Local-interface | Peer-address | Peer-link | +| --------- | --------------- | ------------ | --------- | +| DC1_LEAF1 | Vlan4094 | 10.255.252.1 | Port-Channel5 | + +Dual primary detection is disabled. + +## MLAG Device Configuration + +```eos +! +mlag configuration + domain-id DC1_LEAF1 + local-interface Vlan4094 + peer-address 10.255.252.1 + peer-link Port-Channel5 + reload-delay mlag 300 + reload-delay non-mlag 330 +``` + +# Spanning Tree + +## Spanning Tree Summary + +STP mode: **mstp** + +### MSTP Instance and Priority + +| Instance(s) | Priority | +| -------- | -------- | +| 0 | 16384 | + +### Global Spanning-Tree Settings + +Spanning Tree disabled for VLANs: **4093-4094** + +## Spanning Tree Device Configuration + +```eos +! +spanning-tree mode mstp +no spanning-tree vlan-id 4093-4094 +spanning-tree mst 0 priority 16384 +``` + +# Internal VLAN Allocation Policy + +## Internal VLAN Allocation Policy Summary + +| Policy Allocation | Range Beginning | Range Ending | +| ------------------| --------------- | ------------ | +| ascending | 1006 | 1199 | + +## Internal VLAN Allocation Policy Configuration + +```eos +! +vlan internal order ascending range 1006 1199 +``` + +# VLANs + +## VLANs Summary + +| VLAN ID | Name | Trunk Groups | +| ------- | ---- | ------------ | +| 110 | Tenant_A_OP_Zone_1 | - | +| 111 | Tenant_A_OP_Zone_2 | - | +| 112 | Tenant_A_OP_Zone_3 | - | +| 120 | Tenant_A_WEB_Zone_1 | - | +| 121 | Tenant_A_WEBZone_2 | - | +| 130 | Tenant_A_APP_Zone_1 | - | +| 131 | Tenant_A_APP_Zone_2 | - | +| 140 | Tenant_A_DB_BZone_1 | - | +| 141 | Tenant_A_DB_Zone_2 | - | +| 150 | Tenant_A_WAN_Zone_1 | - | +| 160 | Tenant_A_VMOTION | - | +| 161 | Tenant_A_NFS | - | +| 210 | Tenant_B_OP_Zone_1 | - | +| 211 | Tenant_B_OP_Zone_2 | - | +| 250 | Tenant_B_WAN_Zone_1 | - | +| 310 | Tenant_C_OP_Zone_1 | - | +| 311 | Tenant_C_OP_Zone_2 | - | +| 350 | Tenant_C_WAN_Zone_1 | - | +| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | +| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | +| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | +| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | +| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | +| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | +| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | +| 3029 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | +| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | +| 4094 | MLAG_PEER | MLAG | + +## VLANs Device Configuration + +```eos +! +vlan 110 + name Tenant_A_OP_Zone_1 +! +vlan 111 + name Tenant_A_OP_Zone_2 +! +vlan 112 + name Tenant_A_OP_Zone_3 +! +vlan 120 + name Tenant_A_WEB_Zone_1 +! +vlan 121 + name Tenant_A_WEBZone_2 +! +vlan 130 + name Tenant_A_APP_Zone_1 +! +vlan 131 + name Tenant_A_APP_Zone_2 +! +vlan 140 + name Tenant_A_DB_BZone_1 +! +vlan 141 + name Tenant_A_DB_Zone_2 +! +vlan 150 + name Tenant_A_WAN_Zone_1 +! +vlan 160 + name Tenant_A_VMOTION +! +vlan 161 + name Tenant_A_NFS +! +vlan 210 + name Tenant_B_OP_Zone_1 +! +vlan 211 + name Tenant_B_OP_Zone_2 +! +vlan 250 + name Tenant_B_WAN_Zone_1 +! +vlan 310 + name Tenant_C_OP_Zone_1 +! +vlan 311 + name Tenant_C_OP_Zone_2 +! +vlan 350 + name Tenant_C_WAN_Zone_1 +! +vlan 3009 + name MLAG_iBGP_Tenant_A_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3010 + name MLAG_iBGP_Tenant_A_WEB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3011 + name MLAG_iBGP_Tenant_A_APP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3012 + name MLAG_iBGP_Tenant_A_DB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3013 + name MLAG_iBGP_Tenant_A_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3019 + name MLAG_iBGP_Tenant_B_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3020 + name MLAG_iBGP_Tenant_B_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3029 + name MLAG_iBGP_Tenant_C_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3030 + name MLAG_iBGP_Tenant_C_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 4093 + name LEAF_PEER_L3 + trunk group LEAF_PEER_L3 +! +vlan 4094 + name MLAG_PEER + trunk group MLAG +``` + +# Interfaces + +## Ethernet Interfaces + +### Ethernet Interfaces Summary + +#### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | +| --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | +| Ethernet5 | MLAG_PEER_DC1_LEAF-1B_Ethernet5 | *trunk | *2-4094 | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | + +*Inherited from Port-Channel Interface + +#### IPv4 + +| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1_SPINE-1_Ethernet1 | routed | - | 172.31.255.1/31 | default | 9000 | false | - | - | +| Ethernet2 | P2P_LINK_TO_DC1_SPINE-2_Ethernet1 | routed | - | 172.31.255.3/31 | default | 9000 | false | - | - | +| Ethernet3 | P2P_LINK_TO_DC1_SPINE-3_Ethernet1 | routed | - | 172.31.255.5/31 | default | 9000 | false | - | - | +| Ethernet4 | P2P_LINK_TO_DC1_SPINE-4_Ethernet1 | routed | - | 172.31.255.7/31 | default | 9000 | false | - | - | + +### Ethernet Interfaces Device Configuration + +```eos +! +interface Ethernet1 + description P2P_LINK_TO_DC1_SPINE-1_Ethernet1 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.1/31 +! +interface Ethernet2 + description P2P_LINK_TO_DC1_SPINE-2_Ethernet1 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.3/31 +! +interface Ethernet3 + description P2P_LINK_TO_DC1_SPINE-3_Ethernet1 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.5/31 +! +interface Ethernet4 + description P2P_LINK_TO_DC1_SPINE-4_Ethernet1 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.7/31 +! +interface Ethernet5 + description MLAG_PEER_DC1_LEAF-1B_Ethernet5 + no shutdown + channel-group 5 mode active +``` + +## Port-Channel Interfaces + +### Port-Channel Interfaces Summary + +#### L2 + +| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_PEER_DC1_LEAF-1B_Po5 | switched | trunk | 2-4094 | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | + +### Port-Channel Interfaces Device Configuration + +```eos +! +interface Port-Channel5 + description MLAG_PEER_DC1_LEAF-1B_Po5 + no shutdown + switchport + switchport trunk allowed vlan 2-4094 + switchport mode trunk + switchport trunk group LEAF_PEER_L3 + switchport trunk group MLAG +``` + +## Loopback Interfaces + +### Loopback Interfaces Summary + +#### IPv4 + +| Interface | Description | VRF | IP Address | +| --------- | ----------- | --- | ---------- | +| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.3/32 | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.3/32 | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.3/32 | + +#### IPv6 + +| Interface | Description | VRF | IPv6 Address | +| --------- | ----------- | --- | ------------ | +| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | + + +### Loopback Interfaces Device Configuration + +```eos +! +interface Loopback0 + description EVPN_Overlay_Peering + no shutdown + ip address 192.168.255.3/32 +! +interface Loopback1 + description VTEP_VXLAN_Tunnel_Source + no shutdown + ip address 192.168.254.3/32 +! +interface Loopback100 + description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS + no shutdown + vrf Tenant_A_OP_Zone + ip address 10.255.1.3/32 +``` + +## VLAN Interfaces + +### VLAN Interfaces Summary + +| Interface | Description | VRF | MTU | Shutdown | +| --------- | ----------- | --- | ---- | -------- | +| Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | false | +| Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | false | +| Vlan112 | Tenant_A_OP_Zone_3 | Tenant_A_OP_Zone | - | false | +| Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | false | +| Vlan121 | Tenant_A_WEBZone_2 | Tenant_A_WEB_Zone | - | false | +| Vlan130 | Tenant_A_APP_Zone_1 | Tenant_A_APP_Zone | - | false | +| Vlan131 | Tenant_A_APP_Zone_2 | Tenant_A_APP_Zone | - | false | +| Vlan140 | Tenant_A_DB_BZone_1 | Tenant_A_DB_Zone | - | false | +| Vlan141 | Tenant_A_DB_Zone_2 | Tenant_A_DB_Zone | - | false | +| Vlan150 | Tenant_A_WAN_Zone_1 | Tenant_A_WAN_Zone | - | false | +| Vlan210 | Tenant_B_OP_Zone_1 | Tenant_B_OP_Zone | - | false | +| Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | false | +| Vlan250 | Tenant_B_WAN_Zone_1 | Tenant_B_WAN_Zone | - | false | +| Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | false | +| Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | false | +| Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | false | +| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 9000 | false | +| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 9000 | false | +| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 9000 | false | +| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 9000 | false | +| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 9000 | false | +| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 9000 | false | +| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 9000 | false | +| Vlan3029 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 9000 | false | +| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 9000 | false | +| Vlan4093 | MLAG_PEER_L3_PEERING | default | 9000 | false | +| Vlan4094 | MLAG_PEER | default | 9000 | false | + +#### IPv4 + +| Interface | VRF | IP Address | IP Address Virtual | IP Router Virtual Address | VRRP | ACL In | ACL Out | +| --------- | --- | ---------- | ------------------ | ------------------------- | ---- | ------ | ------- | +| Vlan110 | Tenant_A_OP_Zone | - | 10.1.10.1/24 | - | - | - | - | +| Vlan111 | Tenant_A_OP_Zone | - | 10.1.11.1/24 | - | - | - | - | +| Vlan112 | Tenant_A_OP_Zone | - | 10.1.12.254/24 | - | - | - | - | +| Vlan120 | Tenant_A_WEB_Zone | - | - | - | - | - | - | +| Vlan121 | Tenant_A_WEB_Zone | - | 10.1.21.1/24 | - | - | - | - | +| Vlan130 | Tenant_A_APP_Zone | - | - | - | - | - | - | +| Vlan131 | Tenant_A_APP_Zone | - | 10.1.31.254/24 | - | - | - | - | +| Vlan140 | Tenant_A_DB_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan141 | Tenant_A_DB_Zone | - | 10.1.41.1/24 | - | - | - | - | +| Vlan150 | Tenant_A_WAN_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan210 | Tenant_B_OP_Zone | - | - | - | - | - | - | +| Vlan211 | Tenant_B_OP_Zone | - | 10.2.11.1/24 | - | - | - | - | +| Vlan250 | Tenant_B_WAN_Zone | - | 10.2.50.1/24 | - | - | - | - | +| Vlan310 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan311 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan350 | Tenant_C_WAN_Zone | - | - | - | - | - | - | +| Vlan3009 | Tenant_A_OP_Zone | 10.255.251.0/31 | - | - | - | - | - | +| Vlan3010 | Tenant_A_WEB_Zone | 10.255.251.0/31 | - | - | - | - | - | +| Vlan3011 | Tenant_A_APP_Zone | 10.255.251.0/31 | - | - | - | - | - | +| Vlan3012 | Tenant_A_DB_Zone | 10.255.251.0/31 | - | - | - | - | - | +| Vlan3013 | Tenant_A_WAN_Zone | 10.255.251.0/31 | - | - | - | - | - | +| Vlan3019 | Tenant_B_OP_Zone | 10.255.251.0/31 | - | - | - | - | - | +| Vlan3020 | Tenant_B_WAN_Zone | 10.255.251.0/31 | - | - | - | - | - | +| Vlan3029 | Tenant_C_OP_Zone | 10.255.251.0/31 | - | - | - | - | - | +| Vlan3030 | Tenant_C_WAN_Zone | 10.255.251.0/31 | - | - | - | - | - | +| Vlan4093 | default | 10.255.251.0/31 | - | - | - | - | - | +| Vlan4094 | default | 10.255.252.0/31 | - | - | - | - | - | + + +### VLAN Interfaces Device Configuration + +```eos +! +interface Vlan110 + description Tenant_A_OP_Zone_1 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.10.1/24 +! +interface Vlan111 + description Tenant_A_OP_Zone_2 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.11.1/24 +! +interface Vlan112 + description Tenant_A_OP_Zone_3 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.12.254/24 +! +interface Vlan120 + description Tenant_A_WEB_Zone_1 + no shutdown + vrf Tenant_A_WEB_Zone +! +interface Vlan121 + description Tenant_A_WEBZone_2 + no shutdown + vrf Tenant_A_WEB_Zone + ip address virtual 10.1.21.1/24 +! +interface Vlan130 + description Tenant_A_APP_Zone_1 + no shutdown + vrf Tenant_A_APP_Zone +! +interface Vlan131 + description Tenant_A_APP_Zone_2 + no shutdown + vrf Tenant_A_APP_Zone + ip address virtual 10.1.31.254/24 +! +interface Vlan140 + description Tenant_A_DB_BZone_1 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan141 + description Tenant_A_DB_Zone_2 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.41.1/24 +! +interface Vlan150 + description Tenant_A_WAN_Zone_1 + no shutdown + vrf Tenant_A_WAN_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan210 + description Tenant_B_OP_Zone_1 + no shutdown + vrf Tenant_B_OP_Zone +! +interface Vlan211 + description Tenant_B_OP_Zone_2 + no shutdown + vrf Tenant_B_OP_Zone + ip address virtual 10.2.11.1/24 +! +interface Vlan250 + description Tenant_B_WAN_Zone_1 + no shutdown + vrf Tenant_B_WAN_Zone + ip address virtual 10.2.50.1/24 +! +interface Vlan310 + description Tenant_C_OP_Zone_1 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan311 + description Tenant_C_OP_Zone_2 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan350 + description Tenant_C_WAN_Zone_1 + no shutdown + vrf Tenant_C_WAN_Zone +! +interface Vlan3009 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_OP_Zone + ip address 10.255.251.0/31 +! +interface Vlan3010 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WEB_Zone + ip address 10.255.251.0/31 +! +interface Vlan3011 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_APP_Zone + ip address 10.255.251.0/31 +! +interface Vlan3012 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_DB_Zone + ip address 10.255.251.0/31 +! +interface Vlan3013 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WAN_Zone + ip address 10.255.251.0/31 +! +interface Vlan3019 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_B_OP_Zone + ip address 10.255.251.0/31 +! +interface Vlan3020 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_B_WAN_Zone + ip address 10.255.251.0/31 +! +interface Vlan3029 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_C_OP_Zone + ip address 10.255.251.0/31 +! +interface Vlan3030 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_C_WAN_Zone + ip address 10.255.251.0/31 +! +interface Vlan4093 + description MLAG_PEER_L3_PEERING + no shutdown + mtu 9000 + ip address 10.255.251.0/31 +! +interface Vlan4094 + description MLAG_PEER + no shutdown + mtu 9000 + no autostate + ip address 10.255.252.0/31 +``` + +## VXLAN Interface + +### VXLAN Interface Summary + +#### Source Interface: Loopback1 + +#### UDP port: 4789 + +#### EVPN MLAG Shared Router MAC : mlag-system-id + +#### VLAN to VNI and Flood List Mappings + +| VLAN | VNI | Flood List | +| ---- | --- | ---------- | +| 110 | 10110 | - | +| 111 | 50111 | - | +| 112 | 50112 | - | +| 120 | 10120 | - | +| 121 | 10121 | - | +| 130 | 10130 | - | +| 131 | 10131 | - | +| 140 | 10140 | - | +| 141 | 10141 | - | +| 150 | 10150 | - | +| 160 | 55160 | - | +| 161 | 10161 | - | +| 210 | 20210 | - | +| 211 | 20211 | - | +| 250 | 20250 | - | +| 310 | 30310 | - | +| 311 | 30311 | - | +| 350 | 30350 | - | + +#### VRF to VNI Mappings + +| VLAN | VNI | +| ---- | --- | +| Tenant_A_APP_Zone | 12 | +| Tenant_A_DB_Zone | 13 | +| Tenant_A_OP_Zone | 10 | +| Tenant_A_WAN_Zone | 14 | +| Tenant_A_WEB_Zone | 11 | +| Tenant_B_OP_Zone | 20 | +| Tenant_B_WAN_Zone | 21 | +| Tenant_C_OP_Zone | 30 | +| Tenant_C_WAN_Zone | 31 | + +### VXLAN Interface Device Configuration + +```eos +! +interface Vxlan1 + description DC1_LEAF-1A_VTEP + vxlan source-interface Loopback1 + vxlan virtual-router encapsulation mac-address mlag-system-id + vxlan udp-port 4789 + vxlan vlan 110 vni 10110 + vxlan vlan 111 vni 50111 + vxlan vlan 112 vni 50112 + vxlan vlan 120 vni 10120 + vxlan vlan 121 vni 10121 + vxlan vlan 130 vni 10130 + vxlan vlan 131 vni 10131 + vxlan vlan 140 vni 10140 + vxlan vlan 141 vni 10141 + vxlan vlan 150 vni 10150 + vxlan vlan 160 vni 55160 + vxlan vlan 161 vni 10161 + vxlan vlan 210 vni 20210 + vxlan vlan 211 vni 20211 + vxlan vlan 250 vni 20250 + vxlan vlan 310 vni 30310 + vxlan vlan 311 vni 30311 + vxlan vlan 350 vni 30350 + vxlan vrf Tenant_A_APP_Zone vni 12 + vxlan vrf Tenant_A_DB_Zone vni 13 + vxlan vrf Tenant_A_OP_Zone vni 10 + vxlan vrf Tenant_A_WAN_Zone vni 14 + vxlan vrf Tenant_A_WEB_Zone vni 11 + vxlan vrf Tenant_B_OP_Zone vni 20 + vxlan vrf Tenant_B_WAN_Zone vni 21 + vxlan vrf Tenant_C_OP_Zone vni 30 + vxlan vrf Tenant_C_WAN_Zone vni 31 +``` + +# Routing +## Service Routing Protocols Model + +Multi agent routing protocol model enabled + +```eos +! +service routing protocols model multi-agent +``` + +## Virtual Router MAC Address + +### Virtual Router MAC Address Summary + +#### Virtual Router MAC Address: 00:1c:73:00:dc:01 + +### Virtual Router MAC Address Configuration + +```eos +! +ip virtual-router mac-address 00:1c:73:00:dc:01 +``` + +## IP Routing + +### IP Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | true|| MGMT | false | +| Tenant_A_APP_Zone | true | +| Tenant_A_DB_Zone | true | +| Tenant_A_OP_Zone | true | +| Tenant_A_WAN_Zone | true | +| Tenant_A_WEB_Zone | true | +| Tenant_B_OP_Zone | true | +| Tenant_B_WAN_Zone | true | +| Tenant_C_OP_Zone | true | +| Tenant_C_WAN_Zone | true | + +### IP Routing Device Configuration + +```eos +! +ip routing +no ip routing vrf MGMT +ip routing vrf Tenant_A_APP_Zone +ip routing vrf Tenant_A_DB_Zone +ip routing vrf Tenant_A_OP_Zone +ip routing vrf Tenant_A_WAN_Zone +ip routing vrf Tenant_A_WEB_Zone +ip routing vrf Tenant_B_OP_Zone +ip routing vrf Tenant_B_WAN_Zone +ip routing vrf Tenant_C_OP_Zone +ip routing vrf Tenant_C_WAN_Zone +``` +## IPv6 Routing + +### IPv6 Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | false || MGMT | false | +| Tenant_A_APP_Zone | false | +| Tenant_A_DB_Zone | false | +| Tenant_A_OP_Zone | false | +| Tenant_A_WAN_Zone | false | +| Tenant_A_WEB_Zone | false | +| Tenant_B_OP_Zone | false | +| Tenant_B_WAN_Zone | false | +| Tenant_C_OP_Zone | false | +| Tenant_C_WAN_Zone | false | + + +## Static Routes + +### Static Routes Summary + +| VRF | Destination Prefix | Next Hop IP | Exit interface | Administrative Distance | Tag | Route Name | Metric | +| --- | ------------------ | ----------------------- | ------------------- | ----------------------------- | ----------------- | ----------------------------- | -------------- | +| MGMT | 0.0.0.0/0 | 172.16.47.1 | - | 1 | - | - | - | + +### Static Routes Device Configuration + +```eos +! +ip route vrf MGMT 0.0.0.0/0 172.16.47.1 +``` + +## Router BGP + +### Router BGP Summary + +| BGP AS | Router ID | +| ------ | --------- | +| 65101| 192.168.255.3 | + +| BGP Tuning | +| ---------- | +| no bgp default ipv4-unicast | +| distance bgp 20 200 200 | +| graceful-restart restart-time 300 | +| graceful-restart | +| maximum-paths 4 ecmp 4 | + +### Router BGP Peer Groups + +#### EVPN-OVERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | evpn | +| Source | Loopback0 | +| Bfd | true | +| Ebgp multihop | 3 | +| Send community | all | +| Maximum routes | 0 (no limit) | + +#### IPv4-UNDERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Send community | all | +| Maximum routes | 12000 | + +#### MLAG-IPv4-UNDERLAY-PEER + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Remote AS | 65101 | +| Next-hop self | True | +| Send community | all | +| Maximum routes | 12000 | + +### BGP Neighbors + +| Neighbor | Remote AS | VRF | Send-community | Maximum-routes | +| -------- | --------- | --- | -------------- | -------------- | +| 10.255.251.1 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | default | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 172.31.255.0 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.2 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.4 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.6 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 192.168.255.1 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.2 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.3 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.4 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 10.255.251.1 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_APP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.1 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_DB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.1 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.1 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.1 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WEB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.1 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.1 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.1 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.1 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | + +### Router BGP EVPN Address Family + +#### Router BGP EVPN MAC-VRFs + +##### VLAN aware bundles + +| VLAN Aware Bundle | Route-Distinguisher | Both Route-Target | Import Route Target | Export Route-Target | Redistribute | VLANs | +| ----------------- | ------------------- | ----------------- | ------------------- | ------------------- | ------------ | ----- | +| Tenant_A_APP_Zone | 192.168.255.3:12 | 12:12 | - | - | learned | 130-131 | +| Tenant_A_DB_Zone | 192.168.255.3:13 | 13:13 | - | - | learned | 140-141 | +| Tenant_A_NFS | 192.168.255.3:10161 | 10161:10161 | - | - | learned | 161 | +| Tenant_A_OP_Zone | 192.168.255.3:10 | 10:10 | - | - | learned | 110-112 | +| Tenant_A_VMOTION | 192.168.255.3:55160 | 55160:55160 | - | - | learned | 160 | +| Tenant_A_WAN_Zone | 192.168.255.3:14 | 14:14 | - | - | learned | 150 | +| Tenant_A_WEB_Zone | 192.168.255.3:11 | 11:11 | - | - | learned | 120-121 | +| Tenant_B_OP_Zone | 192.168.255.3:20 | 20:20 | - | - | learned | 210-211 | +| Tenant_B_WAN_Zone | 192.168.255.3:21 | 21:21 | - | - | learned | 250 | +| Tenant_C_OP_Zone | 192.168.255.3:30 | 30:30 | - | - | learned | 310-311 | +| Tenant_C_WAN_Zone | 192.168.255.3:31 | 31:31 | - | - | learned | 350 | + +#### Router BGP EVPN VRFs + +| VRF | Route-Distinguisher | Redistribute | +| --- | ------------------- | ------------ | +| Tenant_A_APP_Zone | 192.168.255.3:12 | connected | +| Tenant_A_DB_Zone | 192.168.255.3:13 | connected | +| Tenant_A_OP_Zone | 192.168.255.3:10 | connected | +| Tenant_A_WAN_Zone | 192.168.255.3:14 | connected | +| Tenant_A_WEB_Zone | 192.168.255.3:11 | connected | +| Tenant_B_OP_Zone | 192.168.255.3:20 | connected | +| Tenant_B_WAN_Zone | 192.168.255.3:21 | connected | +| Tenant_C_OP_Zone | 192.168.255.3:30 | connected | +| Tenant_C_WAN_Zone | 192.168.255.3:31 | connected | + +### Router BGP Device Configuration + +```eos +! +router bgp 65101 + router-id 192.168.255.3 + no bgp default ipv4-unicast + distance bgp 20 200 200 + graceful-restart restart-time 300 + graceful-restart + maximum-paths 4 ecmp 4 + neighbor EVPN-OVERLAY-PEERS peer group + neighbor EVPN-OVERLAY-PEERS update-source Loopback0 + neighbor EVPN-OVERLAY-PEERS bfd + neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 + neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== + neighbor EVPN-OVERLAY-PEERS send-community + neighbor EVPN-OVERLAY-PEERS maximum-routes 0 + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER peer group + neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65101 + neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self + neighbor MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ== + neighbor MLAG-IPv4-UNDERLAY-PEER send-community + neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in + neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description DC1_LEAF-1B + neighbor 172.31.255.0 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.0 remote-as 65001 + neighbor 172.31.255.0 description DC1_SPINE-1_Ethernet1 + neighbor 172.31.255.2 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.2 remote-as 65001 + neighbor 172.31.255.2 description DC1_SPINE-2_Ethernet1 + neighbor 172.31.255.4 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.4 remote-as 65001 + neighbor 172.31.255.4 description DC1_SPINE-3_Ethernet1 + neighbor 172.31.255.6 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.6 remote-as 65001 + neighbor 172.31.255.6 description DC1_SPINE-4_Ethernet1 + neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.1 remote-as 65001 + neighbor 192.168.255.1 description DC1_SPINE-1 + neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.2 remote-as 65001 + neighbor 192.168.255.2 description DC1_SPINE-2 + neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.3 remote-as 65001 + neighbor 192.168.255.3 description DC1_SPINE-3 + neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.4 remote-as 65001 + neighbor 192.168.255.4 description DC1_SPINE-4 + redistribute connected route-map RM-CONN-2-BGP + ! + vlan-aware-bundle Tenant_A_APP_Zone + rd 192.168.255.3:12 + route-target both 12:12 + redistribute learned + vlan 130-131 + ! + vlan-aware-bundle Tenant_A_DB_Zone + rd 192.168.255.3:13 + route-target both 13:13 + redistribute learned + vlan 140-141 + ! + vlan-aware-bundle Tenant_A_NFS + rd 192.168.255.3:10161 + route-target both 10161:10161 + redistribute learned + vlan 161 + ! + vlan-aware-bundle Tenant_A_OP_Zone + rd 192.168.255.3:10 + route-target both 10:10 + redistribute learned + vlan 110-112 + ! + vlan-aware-bundle Tenant_A_VMOTION + rd 192.168.255.3:55160 + route-target both 55160:55160 + redistribute learned + vlan 160 + ! + vlan-aware-bundle Tenant_A_WAN_Zone + rd 192.168.255.3:14 + route-target both 14:14 + redistribute learned + vlan 150 + ! + vlan-aware-bundle Tenant_A_WEB_Zone + rd 192.168.255.3:11 + route-target both 11:11 + redistribute learned + vlan 120-121 + ! + vlan-aware-bundle Tenant_B_OP_Zone + rd 192.168.255.3:20 + route-target both 20:20 + redistribute learned + vlan 210-211 + ! + vlan-aware-bundle Tenant_B_WAN_Zone + rd 192.168.255.3:21 + route-target both 21:21 + redistribute learned + vlan 250 + ! + vlan-aware-bundle Tenant_C_OP_Zone + rd 192.168.255.3:30 + route-target both 30:30 + redistribute learned + vlan 310-311 + ! + vlan-aware-bundle Tenant_C_WAN_Zone + rd 192.168.255.3:31 + route-target both 31:31 + redistribute learned + vlan 350 + ! + address-family evpn + neighbor EVPN-OVERLAY-PEERS activate + ! + address-family ipv4 + no neighbor EVPN-OVERLAY-PEERS activate + neighbor IPv4-UNDERLAY-PEERS activate + neighbor MLAG-IPv4-UNDERLAY-PEER activate + ! + vrf Tenant_A_APP_Zone + rd 192.168.255.3:12 + route-target import evpn 12:12 + route-target export evpn 12:12 + router-id 192.168.255.3 + neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_DB_Zone + rd 192.168.255.3:13 + route-target import evpn 13:13 + route-target export evpn 13:13 + router-id 192.168.255.3 + neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_OP_Zone + rd 192.168.255.3:10 + route-target import evpn 10:10 + route-target export evpn 10:10 + router-id 192.168.255.3 + neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WAN_Zone + rd 192.168.255.3:14 + route-target import evpn 14:14 + route-target export evpn 14:14 + router-id 192.168.255.3 + neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WEB_Zone + rd 192.168.255.3:11 + route-target import evpn 11:11 + route-target export evpn 11:11 + router-id 192.168.255.3 + neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_OP_Zone + rd 192.168.255.3:20 + route-target import evpn 20:20 + route-target export evpn 20:20 + router-id 192.168.255.3 + neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_WAN_Zone + rd 192.168.255.3:21 + route-target import evpn 21:21 + route-target export evpn 21:21 + router-id 192.168.255.3 + neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_OP_Zone + rd 192.168.255.3:30 + route-target import evpn 30:30 + route-target export evpn 30:30 + router-id 192.168.255.3 + neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_WAN_Zone + rd 192.168.255.3:31 + route-target import evpn 31:31 + route-target export evpn 31:31 + router-id 192.168.255.3 + neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected +``` + +# BFD + +## Router BFD + +### Router BFD Multihop Summary + +| Interval | Minimum RX | Multiplier | +| -------- | ---------- | ---------- | +| 1200 | 1200 | 3 | + +### Router BFD Multihop Device Configuration + +```eos +! +router bfd + multihop interval 1200 min-rx 1200 multiplier 3 +``` + +# Multicast + +## IP IGMP Snooping + +### IP IGMP Snooping Summary + +IGMP snooping is globally enabled. + + +### IP IGMP Snooping Device Configuration + +```eos +``` + +# Filters + +## Prefix-lists + +### Prefix-lists Summary + +#### PL-LOOPBACKS-EVPN-OVERLAY + +| Sequence | Action | +| -------- | ------ | +| 10 | permit 192.168.255.0/24 eq 32 | +| 20 | permit 192.168.254.0/24 eq 32 | + +### Prefix-lists Device Configuration + +```eos +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +``` + +## Route-maps + +### Route-maps Summary + +#### RM-CONN-2-BGP + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY | + +#### RM-MLAG-PEER-IN + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | set origin incomplete | + +### Route-maps Device Configuration + +```eos +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY +! +route-map RM-MLAG-PEER-IN permit 10 + description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing + set origin incomplete +``` + +# ACL + +# VRF Instances + +## VRF Instances Summary + +| VRF Name | IP Routing | +| -------- | ---------- | +| MGMT | disabled | +| Tenant_A_APP_Zone | enabled | +| Tenant_A_DB_Zone | enabled | +| Tenant_A_OP_Zone | enabled | +| Tenant_A_WAN_Zone | enabled | +| Tenant_A_WEB_Zone | enabled | +| Tenant_B_OP_Zone | enabled | +| Tenant_B_WAN_Zone | enabled | +| Tenant_C_OP_Zone | enabled | +| Tenant_C_WAN_Zone | enabled | + +## VRF Instances Device Configuration + +```eos +! +vrf instance MGMT +! +vrf instance Tenant_A_APP_Zone +! +vrf instance Tenant_A_DB_Zone +! +vrf instance Tenant_A_OP_Zone +! +vrf instance Tenant_A_WAN_Zone +! +vrf instance Tenant_A_WEB_Zone +! +vrf instance Tenant_B_OP_Zone +! +vrf instance Tenant_B_WAN_Zone +! +vrf instance Tenant_C_OP_Zone +! +vrf instance Tenant_C_WAN_Zone +``` + +# Virtual Source NAT + +## Virtual Source NAT Summary + +| Source NAT VRF | Source NAT IP Address | +| -------------- | --------------------- | +| Tenant_A_OP_Zone | 10.255.1.3 | + +## Virtual Source NAT Configuration + +```eos +! +ip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.3 +``` + +# Quality Of Service diff --git a/inventory/documentation/devices/DC1_LEAF-1B.md b/inventory/documentation/devices/DC1_LEAF-1B.md new file mode 100644 index 000000000..8dea00b8b --- /dev/null +++ b/inventory/documentation/devices/DC1_LEAF-1B.md @@ -0,0 +1,1382 @@ +# DC1_LEAF-1B +# Table of Contents + + +- [Management](#management) + - [Management Interfaces](#management-interfaces) + - [Name Servers](#name-servers) + - [NTP](#ntp) + - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Local Users](#local-users) +- [Monitoring](#monitoring) + - [TerminAttr Daemon](#terminattr-daemon) +- [MLAG](#mlag) + - [MLAG Summary](#mlag-summary) + - [MLAG Device Configuration](#mlag-device-configuration) +- [Spanning Tree](#spanning-tree) + - [Spanning Tree Summary](#spanning-tree-summary) + - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) +- [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) + - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) + - [Internal VLAN Allocation Policy Configuration](#internal-vlan-allocation-policy-configuration) +- [VLANs](#vlans) + - [VLANs Summary](#vlans-summary) + - [VLANs Device Configuration](#vlans-device-configuration) +- [Interfaces](#interfaces) + - [Ethernet Interfaces](#ethernet-interfaces) + - [Port-Channel Interfaces](#port-channel-interfaces) + - [Loopback Interfaces](#loopback-interfaces) + - [VLAN Interfaces](#vlan-interfaces) + - [VXLAN Interface](#vxlan-interface) +- [Routing](#routing) + - [Service Routing Protocols Model](#service-routing-protocols-model) + - [Virtual Router MAC Address](#virtual-router-mac-address) + - [IP Routing](#ip-routing) + - [IPv6 Routing](#ipv6-routing) + - [Static Routes](#static-routes) + - [Router BGP](#router-bgp) +- [BFD](#bfd) + - [Router BFD](#router-bfd) +- [Multicast](#multicast) + - [IP IGMP Snooping](#ip-igmp-snooping) +- [Filters](#filters) + - [Prefix-lists](#prefix-lists) + - [Route-maps](#route-maps) +- [ACL](#acl) +- [VRF Instances](#vrf-instances) + - [VRF Instances Summary](#vrf-instances-summary) + - [VRF Instances Device Configuration](#vrf-instances-device-configuration) +- [Virtual Source NAT](#virtual-source-nat) + - [Virtual Source NAT Summary](#virtual-source-nat-summary) + - [Virtual Source NAT Configuration](#virtual-source-nat-configuration) +- [Quality Of Service](#quality-of-service) + + +# Management + +## Management Interfaces + +### Management Interfaces Summary + +#### IPv4 + +| Management Interface | description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | oob_management | oob | MGMT | 172.16.47.32/24 | 172.16.47.1 | + +#### IPv6 + +| Management Interface | description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | oob_management | oob | MGMT | - | - | + +### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description oob_management + no shutdown + vrf MGMT + ip address 172.16.47.32/24 +``` + +## Name Servers + +### Name Servers Summary + +| Name Server | Source VRF | +| ----------- | ---------- | +| 172.16.47.12 | MGMT | +| 8.8.8.8 | MGMT | + +### Name Servers Device Configuration + +```eos +ip name-server vrf MGMT 8.8.8.8 +ip name-server vrf MGMT 172.16.47.12 +``` + +## NTP + +### NTP Summary + +#### NTP Local Interface + +| Interface | VRF | +| --------- | --- | +| Management1 | MGMT | + +#### NTP Servers + +| Server | VRF | Preferred | Burst | iBurst | Version | Min Poll | Max Poll | Local-interface | Key | +| ------ | --- | --------- | ----- | ------ | ------- | -------- | -------- | --------------- | --- | +| time.google.com | MGMT | True | - | - | - | - | - | - | - | + +### NTP Device Configuration + +```eos +! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT time.google.com prefer +``` + +## Management API HTTP + +### Management API HTTP Summary + +| HTTP | HTTPS | +| ---------- | ---------- | +| default | true | + +### Management API VRF Access + +| VRF Name | IPv4 ACL | IPv6 ACL | +| -------- | -------- | -------- | +| MGMT | - | - | + + +### Management API HTTP Configuration + +```eos +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +``` + +# Authentication + +## Local Users + +### Local Users Summary + +| User | Privilege | Role | +| ---- | --------- | ---- | +| admin | 15 | network-admin | +| ansible | 15 | network-admin | +| cvpadmin | 15 | network-admin | + +### Local Users Device Configuration + +```eos +! +username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 +username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +``` + +# Monitoring + +## TerminAttr Daemon + +### TerminAttr Daemon Summary + +| CV Compression | CloudVision Servers | VRF | Authentication | Smash Excludes | Ingest Exclude | Bypass AAA | +| -------------- | ------------------- | --- | -------------- | -------------- | -------------- | ---------- | +| gzip | 172.16.47.11:9910 | MGMT | key,@rista123! | ale,flexCounter,hardware,kni,pulse,strata | /Sysdb/cell/1/agent,/Sysdb/cell/2/agent | False | + +### TerminAttr Daemon Device Configuration + +```eos +! +daemon TerminAttr + exec /usr/bin/TerminAttr -cvaddr=172.16.47.11:9910 -cvauth=key,@rista123! -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs + no shutdown +``` + +# MLAG + +## MLAG Summary + +| Domain-id | Local-interface | Peer-address | Peer-link | +| --------- | --------------- | ------------ | --------- | +| DC1_LEAF1 | Vlan4094 | 10.255.252.0 | Port-Channel5 | + +Dual primary detection is disabled. + +## MLAG Device Configuration + +```eos +! +mlag configuration + domain-id DC1_LEAF1 + local-interface Vlan4094 + peer-address 10.255.252.0 + peer-link Port-Channel5 + reload-delay mlag 300 + reload-delay non-mlag 330 +``` + +# Spanning Tree + +## Spanning Tree Summary + +STP mode: **mstp** + +### MSTP Instance and Priority + +| Instance(s) | Priority | +| -------- | -------- | +| 0 | 16384 | + +### Global Spanning-Tree Settings + +Spanning Tree disabled for VLANs: **4093-4094** + +## Spanning Tree Device Configuration + +```eos +! +spanning-tree mode mstp +no spanning-tree vlan-id 4093-4094 +spanning-tree mst 0 priority 16384 +``` + +# Internal VLAN Allocation Policy + +## Internal VLAN Allocation Policy Summary + +| Policy Allocation | Range Beginning | Range Ending | +| ------------------| --------------- | ------------ | +| ascending | 1006 | 1199 | + +## Internal VLAN Allocation Policy Configuration + +```eos +! +vlan internal order ascending range 1006 1199 +``` + +# VLANs + +## VLANs Summary + +| VLAN ID | Name | Trunk Groups | +| ------- | ---- | ------------ | +| 110 | Tenant_A_OP_Zone_1 | - | +| 111 | Tenant_A_OP_Zone_2 | - | +| 112 | Tenant_A_OP_Zone_3 | - | +| 120 | Tenant_A_WEB_Zone_1 | - | +| 121 | Tenant_A_WEBZone_2 | - | +| 130 | Tenant_A_APP_Zone_1 | - | +| 131 | Tenant_A_APP_Zone_2 | - | +| 140 | Tenant_A_DB_BZone_1 | - | +| 141 | Tenant_A_DB_Zone_2 | - | +| 150 | Tenant_A_WAN_Zone_1 | - | +| 160 | Tenant_A_VMOTION | - | +| 161 | Tenant_A_NFS | - | +| 210 | Tenant_B_OP_Zone_1 | - | +| 211 | Tenant_B_OP_Zone_2 | - | +| 250 | Tenant_B_WAN_Zone_1 | - | +| 310 | Tenant_C_OP_Zone_1 | - | +| 311 | Tenant_C_OP_Zone_2 | - | +| 350 | Tenant_C_WAN_Zone_1 | - | +| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | +| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | +| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | +| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | +| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | +| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | +| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | +| 3029 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | +| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | +| 4094 | MLAG_PEER | MLAG | + +## VLANs Device Configuration + +```eos +! +vlan 110 + name Tenant_A_OP_Zone_1 +! +vlan 111 + name Tenant_A_OP_Zone_2 +! +vlan 112 + name Tenant_A_OP_Zone_3 +! +vlan 120 + name Tenant_A_WEB_Zone_1 +! +vlan 121 + name Tenant_A_WEBZone_2 +! +vlan 130 + name Tenant_A_APP_Zone_1 +! +vlan 131 + name Tenant_A_APP_Zone_2 +! +vlan 140 + name Tenant_A_DB_BZone_1 +! +vlan 141 + name Tenant_A_DB_Zone_2 +! +vlan 150 + name Tenant_A_WAN_Zone_1 +! +vlan 160 + name Tenant_A_VMOTION +! +vlan 161 + name Tenant_A_NFS +! +vlan 210 + name Tenant_B_OP_Zone_1 +! +vlan 211 + name Tenant_B_OP_Zone_2 +! +vlan 250 + name Tenant_B_WAN_Zone_1 +! +vlan 310 + name Tenant_C_OP_Zone_1 +! +vlan 311 + name Tenant_C_OP_Zone_2 +! +vlan 350 + name Tenant_C_WAN_Zone_1 +! +vlan 3009 + name MLAG_iBGP_Tenant_A_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3010 + name MLAG_iBGP_Tenant_A_WEB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3011 + name MLAG_iBGP_Tenant_A_APP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3012 + name MLAG_iBGP_Tenant_A_DB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3013 + name MLAG_iBGP_Tenant_A_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3019 + name MLAG_iBGP_Tenant_B_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3020 + name MLAG_iBGP_Tenant_B_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3029 + name MLAG_iBGP_Tenant_C_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3030 + name MLAG_iBGP_Tenant_C_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 4093 + name LEAF_PEER_L3 + trunk group LEAF_PEER_L3 +! +vlan 4094 + name MLAG_PEER + trunk group MLAG +``` + +# Interfaces + +## Ethernet Interfaces + +### Ethernet Interfaces Summary + +#### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | +| --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | +| Ethernet5 | MLAG_PEER_DC1_LEAF-1A_Ethernet5 | *trunk | *2-4094 | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | + +*Inherited from Port-Channel Interface + +#### IPv4 + +| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1_SPINE-1_Ethernet2 | routed | - | 172.31.255.9/31 | default | 9000 | false | - | - | +| Ethernet2 | P2P_LINK_TO_DC1_SPINE-2_Ethernet2 | routed | - | 172.31.255.11/31 | default | 9000 | false | - | - | +| Ethernet3 | P2P_LINK_TO_DC1_SPINE-3_Ethernet2 | routed | - | 172.31.255.13/31 | default | 9000 | false | - | - | +| Ethernet4 | P2P_LINK_TO_DC1_SPINE-4_Ethernet2 | routed | - | 172.31.255.15/31 | default | 9000 | false | - | - | + +### Ethernet Interfaces Device Configuration + +```eos +! +interface Ethernet1 + description P2P_LINK_TO_DC1_SPINE-1_Ethernet2 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.9/31 +! +interface Ethernet2 + description P2P_LINK_TO_DC1_SPINE-2_Ethernet2 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.11/31 +! +interface Ethernet3 + description P2P_LINK_TO_DC1_SPINE-3_Ethernet2 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.13/31 +! +interface Ethernet4 + description P2P_LINK_TO_DC1_SPINE-4_Ethernet2 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.15/31 +! +interface Ethernet5 + description MLAG_PEER_DC1_LEAF-1A_Ethernet5 + no shutdown + channel-group 5 mode active +``` + +## Port-Channel Interfaces + +### Port-Channel Interfaces Summary + +#### L2 + +| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_PEER_DC1_LEAF-1A_Po5 | switched | trunk | 2-4094 | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | + +### Port-Channel Interfaces Device Configuration + +```eos +! +interface Port-Channel5 + description MLAG_PEER_DC1_LEAF-1A_Po5 + no shutdown + switchport + switchport trunk allowed vlan 2-4094 + switchport mode trunk + switchport trunk group LEAF_PEER_L3 + switchport trunk group MLAG +``` + +## Loopback Interfaces + +### Loopback Interfaces Summary + +#### IPv4 + +| Interface | Description | VRF | IP Address | +| --------- | ----------- | --- | ---------- | +| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.4/32 | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.3/32 | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.4/32 | + +#### IPv6 + +| Interface | Description | VRF | IPv6 Address | +| --------- | ----------- | --- | ------------ | +| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | + + +### Loopback Interfaces Device Configuration + +```eos +! +interface Loopback0 + description EVPN_Overlay_Peering + no shutdown + ip address 192.168.255.4/32 +! +interface Loopback1 + description VTEP_VXLAN_Tunnel_Source + no shutdown + ip address 192.168.254.3/32 +! +interface Loopback100 + description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS + no shutdown + vrf Tenant_A_OP_Zone + ip address 10.255.1.4/32 +``` + +## VLAN Interfaces + +### VLAN Interfaces Summary + +| Interface | Description | VRF | MTU | Shutdown | +| --------- | ----------- | --- | ---- | -------- | +| Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | false | +| Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | false | +| Vlan112 | Tenant_A_OP_Zone_3 | Tenant_A_OP_Zone | - | false | +| Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | false | +| Vlan121 | Tenant_A_WEBZone_2 | Tenant_A_WEB_Zone | - | false | +| Vlan130 | Tenant_A_APP_Zone_1 | Tenant_A_APP_Zone | - | false | +| Vlan131 | Tenant_A_APP_Zone_2 | Tenant_A_APP_Zone | - | false | +| Vlan140 | Tenant_A_DB_BZone_1 | Tenant_A_DB_Zone | - | false | +| Vlan141 | Tenant_A_DB_Zone_2 | Tenant_A_DB_Zone | - | false | +| Vlan150 | Tenant_A_WAN_Zone_1 | Tenant_A_WAN_Zone | - | false | +| Vlan210 | Tenant_B_OP_Zone_1 | Tenant_B_OP_Zone | - | false | +| Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | false | +| Vlan250 | Tenant_B_WAN_Zone_1 | Tenant_B_WAN_Zone | - | false | +| Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | false | +| Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | false | +| Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | false | +| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 9000 | false | +| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 9000 | false | +| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 9000 | false | +| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 9000 | false | +| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 9000 | false | +| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 9000 | false | +| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 9000 | false | +| Vlan3029 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 9000 | false | +| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 9000 | false | +| Vlan4093 | MLAG_PEER_L3_PEERING | default | 9000 | false | +| Vlan4094 | MLAG_PEER | default | 9000 | false | + +#### IPv4 + +| Interface | VRF | IP Address | IP Address Virtual | IP Router Virtual Address | VRRP | ACL In | ACL Out | +| --------- | --- | ---------- | ------------------ | ------------------------- | ---- | ------ | ------- | +| Vlan110 | Tenant_A_OP_Zone | - | 10.1.10.1/24 | - | - | - | - | +| Vlan111 | Tenant_A_OP_Zone | - | 10.1.11.1/24 | - | - | - | - | +| Vlan112 | Tenant_A_OP_Zone | - | 10.1.12.254/24 | - | - | - | - | +| Vlan120 | Tenant_A_WEB_Zone | - | - | - | - | - | - | +| Vlan121 | Tenant_A_WEB_Zone | - | 10.1.21.1/24 | - | - | - | - | +| Vlan130 | Tenant_A_APP_Zone | - | - | - | - | - | - | +| Vlan131 | Tenant_A_APP_Zone | - | 10.1.31.254/24 | - | - | - | - | +| Vlan140 | Tenant_A_DB_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan141 | Tenant_A_DB_Zone | - | 10.1.41.1/24 | - | - | - | - | +| Vlan150 | Tenant_A_WAN_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan210 | Tenant_B_OP_Zone | - | - | - | - | - | - | +| Vlan211 | Tenant_B_OP_Zone | - | 10.2.11.1/24 | - | - | - | - | +| Vlan250 | Tenant_B_WAN_Zone | - | 10.2.50.1/24 | - | - | - | - | +| Vlan310 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan311 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan350 | Tenant_C_WAN_Zone | - | - | - | - | - | - | +| Vlan3009 | Tenant_A_OP_Zone | 10.255.251.1/31 | - | - | - | - | - | +| Vlan3010 | Tenant_A_WEB_Zone | 10.255.251.1/31 | - | - | - | - | - | +| Vlan3011 | Tenant_A_APP_Zone | 10.255.251.1/31 | - | - | - | - | - | +| Vlan3012 | Tenant_A_DB_Zone | 10.255.251.1/31 | - | - | - | - | - | +| Vlan3013 | Tenant_A_WAN_Zone | 10.255.251.1/31 | - | - | - | - | - | +| Vlan3019 | Tenant_B_OP_Zone | 10.255.251.1/31 | - | - | - | - | - | +| Vlan3020 | Tenant_B_WAN_Zone | 10.255.251.1/31 | - | - | - | - | - | +| Vlan3029 | Tenant_C_OP_Zone | 10.255.251.1/31 | - | - | - | - | - | +| Vlan3030 | Tenant_C_WAN_Zone | 10.255.251.1/31 | - | - | - | - | - | +| Vlan4093 | default | 10.255.251.1/31 | - | - | - | - | - | +| Vlan4094 | default | 10.255.252.1/31 | - | - | - | - | - | + + +### VLAN Interfaces Device Configuration + +```eos +! +interface Vlan110 + description Tenant_A_OP_Zone_1 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.10.1/24 +! +interface Vlan111 + description Tenant_A_OP_Zone_2 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.11.1/24 +! +interface Vlan112 + description Tenant_A_OP_Zone_3 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.12.254/24 +! +interface Vlan120 + description Tenant_A_WEB_Zone_1 + no shutdown + vrf Tenant_A_WEB_Zone +! +interface Vlan121 + description Tenant_A_WEBZone_2 + no shutdown + vrf Tenant_A_WEB_Zone + ip address virtual 10.1.21.1/24 +! +interface Vlan130 + description Tenant_A_APP_Zone_1 + no shutdown + vrf Tenant_A_APP_Zone +! +interface Vlan131 + description Tenant_A_APP_Zone_2 + no shutdown + vrf Tenant_A_APP_Zone + ip address virtual 10.1.31.254/24 +! +interface Vlan140 + description Tenant_A_DB_BZone_1 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan141 + description Tenant_A_DB_Zone_2 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.41.1/24 +! +interface Vlan150 + description Tenant_A_WAN_Zone_1 + no shutdown + vrf Tenant_A_WAN_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan210 + description Tenant_B_OP_Zone_1 + no shutdown + vrf Tenant_B_OP_Zone +! +interface Vlan211 + description Tenant_B_OP_Zone_2 + no shutdown + vrf Tenant_B_OP_Zone + ip address virtual 10.2.11.1/24 +! +interface Vlan250 + description Tenant_B_WAN_Zone_1 + no shutdown + vrf Tenant_B_WAN_Zone + ip address virtual 10.2.50.1/24 +! +interface Vlan310 + description Tenant_C_OP_Zone_1 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan311 + description Tenant_C_OP_Zone_2 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan350 + description Tenant_C_WAN_Zone_1 + no shutdown + vrf Tenant_C_WAN_Zone +! +interface Vlan3009 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_OP_Zone + ip address 10.255.251.1/31 +! +interface Vlan3010 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WEB_Zone + ip address 10.255.251.1/31 +! +interface Vlan3011 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_APP_Zone + ip address 10.255.251.1/31 +! +interface Vlan3012 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_DB_Zone + ip address 10.255.251.1/31 +! +interface Vlan3013 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WAN_Zone + ip address 10.255.251.1/31 +! +interface Vlan3019 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_B_OP_Zone + ip address 10.255.251.1/31 +! +interface Vlan3020 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_B_WAN_Zone + ip address 10.255.251.1/31 +! +interface Vlan3029 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_C_OP_Zone + ip address 10.255.251.1/31 +! +interface Vlan3030 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_C_WAN_Zone + ip address 10.255.251.1/31 +! +interface Vlan4093 + description MLAG_PEER_L3_PEERING + no shutdown + mtu 9000 + ip address 10.255.251.1/31 +! +interface Vlan4094 + description MLAG_PEER + no shutdown + mtu 9000 + no autostate + ip address 10.255.252.1/31 +``` + +## VXLAN Interface + +### VXLAN Interface Summary + +#### Source Interface: Loopback1 + +#### UDP port: 4789 + +#### EVPN MLAG Shared Router MAC : mlag-system-id + +#### VLAN to VNI and Flood List Mappings + +| VLAN | VNI | Flood List | +| ---- | --- | ---------- | +| 110 | 10110 | - | +| 111 | 50111 | - | +| 112 | 50112 | - | +| 120 | 10120 | - | +| 121 | 10121 | - | +| 130 | 10130 | - | +| 131 | 10131 | - | +| 140 | 10140 | - | +| 141 | 10141 | - | +| 150 | 10150 | - | +| 160 | 55160 | - | +| 161 | 10161 | - | +| 210 | 20210 | - | +| 211 | 20211 | - | +| 250 | 20250 | - | +| 310 | 30310 | - | +| 311 | 30311 | - | +| 350 | 30350 | - | + +#### VRF to VNI Mappings + +| VLAN | VNI | +| ---- | --- | +| Tenant_A_APP_Zone | 12 | +| Tenant_A_DB_Zone | 13 | +| Tenant_A_OP_Zone | 10 | +| Tenant_A_WAN_Zone | 14 | +| Tenant_A_WEB_Zone | 11 | +| Tenant_B_OP_Zone | 20 | +| Tenant_B_WAN_Zone | 21 | +| Tenant_C_OP_Zone | 30 | +| Tenant_C_WAN_Zone | 31 | + +### VXLAN Interface Device Configuration + +```eos +! +interface Vxlan1 + description DC1_LEAF-1B_VTEP + vxlan source-interface Loopback1 + vxlan virtual-router encapsulation mac-address mlag-system-id + vxlan udp-port 4789 + vxlan vlan 110 vni 10110 + vxlan vlan 111 vni 50111 + vxlan vlan 112 vni 50112 + vxlan vlan 120 vni 10120 + vxlan vlan 121 vni 10121 + vxlan vlan 130 vni 10130 + vxlan vlan 131 vni 10131 + vxlan vlan 140 vni 10140 + vxlan vlan 141 vni 10141 + vxlan vlan 150 vni 10150 + vxlan vlan 160 vni 55160 + vxlan vlan 161 vni 10161 + vxlan vlan 210 vni 20210 + vxlan vlan 211 vni 20211 + vxlan vlan 250 vni 20250 + vxlan vlan 310 vni 30310 + vxlan vlan 311 vni 30311 + vxlan vlan 350 vni 30350 + vxlan vrf Tenant_A_APP_Zone vni 12 + vxlan vrf Tenant_A_DB_Zone vni 13 + vxlan vrf Tenant_A_OP_Zone vni 10 + vxlan vrf Tenant_A_WAN_Zone vni 14 + vxlan vrf Tenant_A_WEB_Zone vni 11 + vxlan vrf Tenant_B_OP_Zone vni 20 + vxlan vrf Tenant_B_WAN_Zone vni 21 + vxlan vrf Tenant_C_OP_Zone vni 30 + vxlan vrf Tenant_C_WAN_Zone vni 31 +``` + +# Routing +## Service Routing Protocols Model + +Multi agent routing protocol model enabled + +```eos +! +service routing protocols model multi-agent +``` + +## Virtual Router MAC Address + +### Virtual Router MAC Address Summary + +#### Virtual Router MAC Address: 00:1c:73:00:dc:01 + +### Virtual Router MAC Address Configuration + +```eos +! +ip virtual-router mac-address 00:1c:73:00:dc:01 +``` + +## IP Routing + +### IP Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | true|| MGMT | false | +| Tenant_A_APP_Zone | true | +| Tenant_A_DB_Zone | true | +| Tenant_A_OP_Zone | true | +| Tenant_A_WAN_Zone | true | +| Tenant_A_WEB_Zone | true | +| Tenant_B_OP_Zone | true | +| Tenant_B_WAN_Zone | true | +| Tenant_C_OP_Zone | true | +| Tenant_C_WAN_Zone | true | + +### IP Routing Device Configuration + +```eos +! +ip routing +no ip routing vrf MGMT +ip routing vrf Tenant_A_APP_Zone +ip routing vrf Tenant_A_DB_Zone +ip routing vrf Tenant_A_OP_Zone +ip routing vrf Tenant_A_WAN_Zone +ip routing vrf Tenant_A_WEB_Zone +ip routing vrf Tenant_B_OP_Zone +ip routing vrf Tenant_B_WAN_Zone +ip routing vrf Tenant_C_OP_Zone +ip routing vrf Tenant_C_WAN_Zone +``` +## IPv6 Routing + +### IPv6 Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | false || MGMT | false | +| Tenant_A_APP_Zone | false | +| Tenant_A_DB_Zone | false | +| Tenant_A_OP_Zone | false | +| Tenant_A_WAN_Zone | false | +| Tenant_A_WEB_Zone | false | +| Tenant_B_OP_Zone | false | +| Tenant_B_WAN_Zone | false | +| Tenant_C_OP_Zone | false | +| Tenant_C_WAN_Zone | false | + + +## Static Routes + +### Static Routes Summary + +| VRF | Destination Prefix | Next Hop IP | Exit interface | Administrative Distance | Tag | Route Name | Metric | +| --- | ------------------ | ----------------------- | ------------------- | ----------------------------- | ----------------- | ----------------------------- | -------------- | +| MGMT | 0.0.0.0/0 | 172.16.47.1 | - | 1 | - | - | - | + +### Static Routes Device Configuration + +```eos +! +ip route vrf MGMT 0.0.0.0/0 172.16.47.1 +``` + +## Router BGP + +### Router BGP Summary + +| BGP AS | Router ID | +| ------ | --------- | +| 65101| 192.168.255.4 | + +| BGP Tuning | +| ---------- | +| no bgp default ipv4-unicast | +| distance bgp 20 200 200 | +| graceful-restart restart-time 300 | +| graceful-restart | +| maximum-paths 4 ecmp 4 | + +### Router BGP Peer Groups + +#### EVPN-OVERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | evpn | +| Source | Loopback0 | +| Bfd | true | +| Ebgp multihop | 3 | +| Send community | all | +| Maximum routes | 0 (no limit) | + +#### IPv4-UNDERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Send community | all | +| Maximum routes | 12000 | + +#### MLAG-IPv4-UNDERLAY-PEER + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Remote AS | 65101 | +| Next-hop self | True | +| Send community | all | +| Maximum routes | 12000 | + +### BGP Neighbors + +| Neighbor | Remote AS | VRF | Send-community | Maximum-routes | +| -------- | --------- | --- | -------------- | -------------- | +| 10.255.251.0 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | default | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 172.31.255.8 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.10 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.12 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.14 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 192.168.255.1 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.2 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.3 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.4 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 10.255.251.0 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_APP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.0 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_DB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.0 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.0 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.0 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WEB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.0 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.0 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.0 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.0 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | + +### Router BGP EVPN Address Family + +#### Router BGP EVPN MAC-VRFs + +##### VLAN aware bundles + +| VLAN Aware Bundle | Route-Distinguisher | Both Route-Target | Import Route Target | Export Route-Target | Redistribute | VLANs | +| ----------------- | ------------------- | ----------------- | ------------------- | ------------------- | ------------ | ----- | +| Tenant_A_APP_Zone | 192.168.255.4:12 | 12:12 | - | - | learned | 130-131 | +| Tenant_A_DB_Zone | 192.168.255.4:13 | 13:13 | - | - | learned | 140-141 | +| Tenant_A_NFS | 192.168.255.4:10161 | 10161:10161 | - | - | learned | 161 | +| Tenant_A_OP_Zone | 192.168.255.4:10 | 10:10 | - | - | learned | 110-112 | +| Tenant_A_VMOTION | 192.168.255.4:55160 | 55160:55160 | - | - | learned | 160 | +| Tenant_A_WAN_Zone | 192.168.255.4:14 | 14:14 | - | - | learned | 150 | +| Tenant_A_WEB_Zone | 192.168.255.4:11 | 11:11 | - | - | learned | 120-121 | +| Tenant_B_OP_Zone | 192.168.255.4:20 | 20:20 | - | - | learned | 210-211 | +| Tenant_B_WAN_Zone | 192.168.255.4:21 | 21:21 | - | - | learned | 250 | +| Tenant_C_OP_Zone | 192.168.255.4:30 | 30:30 | - | - | learned | 310-311 | +| Tenant_C_WAN_Zone | 192.168.255.4:31 | 31:31 | - | - | learned | 350 | + +#### Router BGP EVPN VRFs + +| VRF | Route-Distinguisher | Redistribute | +| --- | ------------------- | ------------ | +| Tenant_A_APP_Zone | 192.168.255.4:12 | connected | +| Tenant_A_DB_Zone | 192.168.255.4:13 | connected | +| Tenant_A_OP_Zone | 192.168.255.4:10 | connected | +| Tenant_A_WAN_Zone | 192.168.255.4:14 | connected | +| Tenant_A_WEB_Zone | 192.168.255.4:11 | connected | +| Tenant_B_OP_Zone | 192.168.255.4:20 | connected | +| Tenant_B_WAN_Zone | 192.168.255.4:21 | connected | +| Tenant_C_OP_Zone | 192.168.255.4:30 | connected | +| Tenant_C_WAN_Zone | 192.168.255.4:31 | connected | + +### Router BGP Device Configuration + +```eos +! +router bgp 65101 + router-id 192.168.255.4 + no bgp default ipv4-unicast + distance bgp 20 200 200 + graceful-restart restart-time 300 + graceful-restart + maximum-paths 4 ecmp 4 + neighbor EVPN-OVERLAY-PEERS peer group + neighbor EVPN-OVERLAY-PEERS update-source Loopback0 + neighbor EVPN-OVERLAY-PEERS bfd + neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 + neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== + neighbor EVPN-OVERLAY-PEERS send-community + neighbor EVPN-OVERLAY-PEERS maximum-routes 0 + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER peer group + neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65101 + neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self + neighbor MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ== + neighbor MLAG-IPv4-UNDERLAY-PEER send-community + neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in + neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description DC1_LEAF-1A + neighbor 172.31.255.8 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.8 remote-as 65001 + neighbor 172.31.255.8 description DC1_SPINE-1_Ethernet2 + neighbor 172.31.255.10 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.10 remote-as 65001 + neighbor 172.31.255.10 description DC1_SPINE-2_Ethernet2 + neighbor 172.31.255.12 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.12 remote-as 65001 + neighbor 172.31.255.12 description DC1_SPINE-3_Ethernet2 + neighbor 172.31.255.14 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.14 remote-as 65001 + neighbor 172.31.255.14 description DC1_SPINE-4_Ethernet2 + neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.1 remote-as 65001 + neighbor 192.168.255.1 description DC1_SPINE-1 + neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.2 remote-as 65001 + neighbor 192.168.255.2 description DC1_SPINE-2 + neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.3 remote-as 65001 + neighbor 192.168.255.3 description DC1_SPINE-3 + neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.4 remote-as 65001 + neighbor 192.168.255.4 description DC1_SPINE-4 + redistribute connected route-map RM-CONN-2-BGP + ! + vlan-aware-bundle Tenant_A_APP_Zone + rd 192.168.255.4:12 + route-target both 12:12 + redistribute learned + vlan 130-131 + ! + vlan-aware-bundle Tenant_A_DB_Zone + rd 192.168.255.4:13 + route-target both 13:13 + redistribute learned + vlan 140-141 + ! + vlan-aware-bundle Tenant_A_NFS + rd 192.168.255.4:10161 + route-target both 10161:10161 + redistribute learned + vlan 161 + ! + vlan-aware-bundle Tenant_A_OP_Zone + rd 192.168.255.4:10 + route-target both 10:10 + redistribute learned + vlan 110-112 + ! + vlan-aware-bundle Tenant_A_VMOTION + rd 192.168.255.4:55160 + route-target both 55160:55160 + redistribute learned + vlan 160 + ! + vlan-aware-bundle Tenant_A_WAN_Zone + rd 192.168.255.4:14 + route-target both 14:14 + redistribute learned + vlan 150 + ! + vlan-aware-bundle Tenant_A_WEB_Zone + rd 192.168.255.4:11 + route-target both 11:11 + redistribute learned + vlan 120-121 + ! + vlan-aware-bundle Tenant_B_OP_Zone + rd 192.168.255.4:20 + route-target both 20:20 + redistribute learned + vlan 210-211 + ! + vlan-aware-bundle Tenant_B_WAN_Zone + rd 192.168.255.4:21 + route-target both 21:21 + redistribute learned + vlan 250 + ! + vlan-aware-bundle Tenant_C_OP_Zone + rd 192.168.255.4:30 + route-target both 30:30 + redistribute learned + vlan 310-311 + ! + vlan-aware-bundle Tenant_C_WAN_Zone + rd 192.168.255.4:31 + route-target both 31:31 + redistribute learned + vlan 350 + ! + address-family evpn + neighbor EVPN-OVERLAY-PEERS activate + ! + address-family ipv4 + no neighbor EVPN-OVERLAY-PEERS activate + neighbor IPv4-UNDERLAY-PEERS activate + neighbor MLAG-IPv4-UNDERLAY-PEER activate + ! + vrf Tenant_A_APP_Zone + rd 192.168.255.4:12 + route-target import evpn 12:12 + route-target export evpn 12:12 + router-id 192.168.255.4 + neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_DB_Zone + rd 192.168.255.4:13 + route-target import evpn 13:13 + route-target export evpn 13:13 + router-id 192.168.255.4 + neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_OP_Zone + rd 192.168.255.4:10 + route-target import evpn 10:10 + route-target export evpn 10:10 + router-id 192.168.255.4 + neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WAN_Zone + rd 192.168.255.4:14 + route-target import evpn 14:14 + route-target export evpn 14:14 + router-id 192.168.255.4 + neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WEB_Zone + rd 192.168.255.4:11 + route-target import evpn 11:11 + route-target export evpn 11:11 + router-id 192.168.255.4 + neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_OP_Zone + rd 192.168.255.4:20 + route-target import evpn 20:20 + route-target export evpn 20:20 + router-id 192.168.255.4 + neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_WAN_Zone + rd 192.168.255.4:21 + route-target import evpn 21:21 + route-target export evpn 21:21 + router-id 192.168.255.4 + neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_OP_Zone + rd 192.168.255.4:30 + route-target import evpn 30:30 + route-target export evpn 30:30 + router-id 192.168.255.4 + neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_WAN_Zone + rd 192.168.255.4:31 + route-target import evpn 31:31 + route-target export evpn 31:31 + router-id 192.168.255.4 + neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected +``` + +# BFD + +## Router BFD + +### Router BFD Multihop Summary + +| Interval | Minimum RX | Multiplier | +| -------- | ---------- | ---------- | +| 1200 | 1200 | 3 | + +### Router BFD Multihop Device Configuration + +```eos +! +router bfd + multihop interval 1200 min-rx 1200 multiplier 3 +``` + +# Multicast + +## IP IGMP Snooping + +### IP IGMP Snooping Summary + +IGMP snooping is globally enabled. + + +### IP IGMP Snooping Device Configuration + +```eos +``` + +# Filters + +## Prefix-lists + +### Prefix-lists Summary + +#### PL-LOOPBACKS-EVPN-OVERLAY + +| Sequence | Action | +| -------- | ------ | +| 10 | permit 192.168.255.0/24 eq 32 | +| 20 | permit 192.168.254.0/24 eq 32 | + +### Prefix-lists Device Configuration + +```eos +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +``` + +## Route-maps + +### Route-maps Summary + +#### RM-CONN-2-BGP + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY | + +#### RM-MLAG-PEER-IN + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | set origin incomplete | + +### Route-maps Device Configuration + +```eos +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY +! +route-map RM-MLAG-PEER-IN permit 10 + description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing + set origin incomplete +``` + +# ACL + +# VRF Instances + +## VRF Instances Summary + +| VRF Name | IP Routing | +| -------- | ---------- | +| MGMT | disabled | +| Tenant_A_APP_Zone | enabled | +| Tenant_A_DB_Zone | enabled | +| Tenant_A_OP_Zone | enabled | +| Tenant_A_WAN_Zone | enabled | +| Tenant_A_WEB_Zone | enabled | +| Tenant_B_OP_Zone | enabled | +| Tenant_B_WAN_Zone | enabled | +| Tenant_C_OP_Zone | enabled | +| Tenant_C_WAN_Zone | enabled | + +## VRF Instances Device Configuration + +```eos +! +vrf instance MGMT +! +vrf instance Tenant_A_APP_Zone +! +vrf instance Tenant_A_DB_Zone +! +vrf instance Tenant_A_OP_Zone +! +vrf instance Tenant_A_WAN_Zone +! +vrf instance Tenant_A_WEB_Zone +! +vrf instance Tenant_B_OP_Zone +! +vrf instance Tenant_B_WAN_Zone +! +vrf instance Tenant_C_OP_Zone +! +vrf instance Tenant_C_WAN_Zone +``` + +# Virtual Source NAT + +## Virtual Source NAT Summary + +| Source NAT VRF | Source NAT IP Address | +| -------------- | --------------------- | +| Tenant_A_OP_Zone | 10.255.1.4 | + +## Virtual Source NAT Configuration + +```eos +! +ip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.4 +``` + +# Quality Of Service diff --git a/inventory/documentation/devices/DC1_LEAF-2A.md b/inventory/documentation/devices/DC1_LEAF-2A.md new file mode 100644 index 000000000..97bfbc432 --- /dev/null +++ b/inventory/documentation/devices/DC1_LEAF-2A.md @@ -0,0 +1,1382 @@ +# DC1_LEAF-2A +# Table of Contents + + +- [Management](#management) + - [Management Interfaces](#management-interfaces) + - [Name Servers](#name-servers) + - [NTP](#ntp) + - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Local Users](#local-users) +- [Monitoring](#monitoring) + - [TerminAttr Daemon](#terminattr-daemon) +- [MLAG](#mlag) + - [MLAG Summary](#mlag-summary) + - [MLAG Device Configuration](#mlag-device-configuration) +- [Spanning Tree](#spanning-tree) + - [Spanning Tree Summary](#spanning-tree-summary) + - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) +- [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) + - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) + - [Internal VLAN Allocation Policy Configuration](#internal-vlan-allocation-policy-configuration) +- [VLANs](#vlans) + - [VLANs Summary](#vlans-summary) + - [VLANs Device Configuration](#vlans-device-configuration) +- [Interfaces](#interfaces) + - [Ethernet Interfaces](#ethernet-interfaces) + - [Port-Channel Interfaces](#port-channel-interfaces) + - [Loopback Interfaces](#loopback-interfaces) + - [VLAN Interfaces](#vlan-interfaces) + - [VXLAN Interface](#vxlan-interface) +- [Routing](#routing) + - [Service Routing Protocols Model](#service-routing-protocols-model) + - [Virtual Router MAC Address](#virtual-router-mac-address) + - [IP Routing](#ip-routing) + - [IPv6 Routing](#ipv6-routing) + - [Static Routes](#static-routes) + - [Router BGP](#router-bgp) +- [BFD](#bfd) + - [Router BFD](#router-bfd) +- [Multicast](#multicast) + - [IP IGMP Snooping](#ip-igmp-snooping) +- [Filters](#filters) + - [Prefix-lists](#prefix-lists) + - [Route-maps](#route-maps) +- [ACL](#acl) +- [VRF Instances](#vrf-instances) + - [VRF Instances Summary](#vrf-instances-summary) + - [VRF Instances Device Configuration](#vrf-instances-device-configuration) +- [Virtual Source NAT](#virtual-source-nat) + - [Virtual Source NAT Summary](#virtual-source-nat-summary) + - [Virtual Source NAT Configuration](#virtual-source-nat-configuration) +- [Quality Of Service](#quality-of-service) + + +# Management + +## Management Interfaces + +### Management Interfaces Summary + +#### IPv4 + +| Management Interface | description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | oob_management | oob | MGMT | 172.16.47.33/24 | 172.16.47.1 | + +#### IPv6 + +| Management Interface | description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | oob_management | oob | MGMT | - | - | + +### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description oob_management + no shutdown + vrf MGMT + ip address 172.16.47.33/24 +``` + +## Name Servers + +### Name Servers Summary + +| Name Server | Source VRF | +| ----------- | ---------- | +| 172.16.47.12 | MGMT | +| 8.8.8.8 | MGMT | + +### Name Servers Device Configuration + +```eos +ip name-server vrf MGMT 8.8.8.8 +ip name-server vrf MGMT 172.16.47.12 +``` + +## NTP + +### NTP Summary + +#### NTP Local Interface + +| Interface | VRF | +| --------- | --- | +| Management1 | MGMT | + +#### NTP Servers + +| Server | VRF | Preferred | Burst | iBurst | Version | Min Poll | Max Poll | Local-interface | Key | +| ------ | --- | --------- | ----- | ------ | ------- | -------- | -------- | --------------- | --- | +| time.google.com | MGMT | True | - | - | - | - | - | - | - | + +### NTP Device Configuration + +```eos +! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT time.google.com prefer +``` + +## Management API HTTP + +### Management API HTTP Summary + +| HTTP | HTTPS | +| ---------- | ---------- | +| default | true | + +### Management API VRF Access + +| VRF Name | IPv4 ACL | IPv6 ACL | +| -------- | -------- | -------- | +| MGMT | - | - | + + +### Management API HTTP Configuration + +```eos +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +``` + +# Authentication + +## Local Users + +### Local Users Summary + +| User | Privilege | Role | +| ---- | --------- | ---- | +| admin | 15 | network-admin | +| ansible | 15 | network-admin | +| cvpadmin | 15 | network-admin | + +### Local Users Device Configuration + +```eos +! +username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 +username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +``` + +# Monitoring + +## TerminAttr Daemon + +### TerminAttr Daemon Summary + +| CV Compression | CloudVision Servers | VRF | Authentication | Smash Excludes | Ingest Exclude | Bypass AAA | +| -------------- | ------------------- | --- | -------------- | -------------- | -------------- | ---------- | +| gzip | 172.16.47.11:9910 | MGMT | key,@rista123! | ale,flexCounter,hardware,kni,pulse,strata | /Sysdb/cell/1/agent,/Sysdb/cell/2/agent | False | + +### TerminAttr Daemon Device Configuration + +```eos +! +daemon TerminAttr + exec /usr/bin/TerminAttr -cvaddr=172.16.47.11:9910 -cvauth=key,@rista123! -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs + no shutdown +``` + +# MLAG + +## MLAG Summary + +| Domain-id | Local-interface | Peer-address | Peer-link | +| --------- | --------------- | ------------ | --------- | +| DC1_LEAF2 | Vlan4094 | 10.255.252.5 | Port-Channel5 | + +Dual primary detection is disabled. + +## MLAG Device Configuration + +```eos +! +mlag configuration + domain-id DC1_LEAF2 + local-interface Vlan4094 + peer-address 10.255.252.5 + peer-link Port-Channel5 + reload-delay mlag 300 + reload-delay non-mlag 330 +``` + +# Spanning Tree + +## Spanning Tree Summary + +STP mode: **mstp** + +### MSTP Instance and Priority + +| Instance(s) | Priority | +| -------- | -------- | +| 0 | 16384 | + +### Global Spanning-Tree Settings + +Spanning Tree disabled for VLANs: **4093-4094** + +## Spanning Tree Device Configuration + +```eos +! +spanning-tree mode mstp +no spanning-tree vlan-id 4093-4094 +spanning-tree mst 0 priority 16384 +``` + +# Internal VLAN Allocation Policy + +## Internal VLAN Allocation Policy Summary + +| Policy Allocation | Range Beginning | Range Ending | +| ------------------| --------------- | ------------ | +| ascending | 1006 | 1199 | + +## Internal VLAN Allocation Policy Configuration + +```eos +! +vlan internal order ascending range 1006 1199 +``` + +# VLANs + +## VLANs Summary + +| VLAN ID | Name | Trunk Groups | +| ------- | ---- | ------------ | +| 110 | Tenant_A_OP_Zone_1 | - | +| 111 | Tenant_A_OP_Zone_2 | - | +| 112 | Tenant_A_OP_Zone_3 | - | +| 120 | Tenant_A_WEB_Zone_1 | - | +| 121 | Tenant_A_WEBZone_2 | - | +| 130 | Tenant_A_APP_Zone_1 | - | +| 131 | Tenant_A_APP_Zone_2 | - | +| 140 | Tenant_A_DB_BZone_1 | - | +| 141 | Tenant_A_DB_Zone_2 | - | +| 150 | Tenant_A_WAN_Zone_1 | - | +| 160 | Tenant_A_VMOTION | - | +| 161 | Tenant_A_NFS | - | +| 210 | Tenant_B_OP_Zone_1 | - | +| 211 | Tenant_B_OP_Zone_2 | - | +| 250 | Tenant_B_WAN_Zone_1 | - | +| 310 | Tenant_C_OP_Zone_1 | - | +| 311 | Tenant_C_OP_Zone_2 | - | +| 350 | Tenant_C_WAN_Zone_1 | - | +| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | +| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | +| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | +| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | +| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | +| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | +| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | +| 3029 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | +| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | +| 4094 | MLAG_PEER | MLAG | + +## VLANs Device Configuration + +```eos +! +vlan 110 + name Tenant_A_OP_Zone_1 +! +vlan 111 + name Tenant_A_OP_Zone_2 +! +vlan 112 + name Tenant_A_OP_Zone_3 +! +vlan 120 + name Tenant_A_WEB_Zone_1 +! +vlan 121 + name Tenant_A_WEBZone_2 +! +vlan 130 + name Tenant_A_APP_Zone_1 +! +vlan 131 + name Tenant_A_APP_Zone_2 +! +vlan 140 + name Tenant_A_DB_BZone_1 +! +vlan 141 + name Tenant_A_DB_Zone_2 +! +vlan 150 + name Tenant_A_WAN_Zone_1 +! +vlan 160 + name Tenant_A_VMOTION +! +vlan 161 + name Tenant_A_NFS +! +vlan 210 + name Tenant_B_OP_Zone_1 +! +vlan 211 + name Tenant_B_OP_Zone_2 +! +vlan 250 + name Tenant_B_WAN_Zone_1 +! +vlan 310 + name Tenant_C_OP_Zone_1 +! +vlan 311 + name Tenant_C_OP_Zone_2 +! +vlan 350 + name Tenant_C_WAN_Zone_1 +! +vlan 3009 + name MLAG_iBGP_Tenant_A_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3010 + name MLAG_iBGP_Tenant_A_WEB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3011 + name MLAG_iBGP_Tenant_A_APP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3012 + name MLAG_iBGP_Tenant_A_DB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3013 + name MLAG_iBGP_Tenant_A_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3019 + name MLAG_iBGP_Tenant_B_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3020 + name MLAG_iBGP_Tenant_B_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3029 + name MLAG_iBGP_Tenant_C_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3030 + name MLAG_iBGP_Tenant_C_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 4093 + name LEAF_PEER_L3 + trunk group LEAF_PEER_L3 +! +vlan 4094 + name MLAG_PEER + trunk group MLAG +``` + +# Interfaces + +## Ethernet Interfaces + +### Ethernet Interfaces Summary + +#### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | +| --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | +| Ethernet5 | MLAG_PEER_DC1_LEAF-2B_Ethernet5 | *trunk | *2-4094 | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | + +*Inherited from Port-Channel Interface + +#### IPv4 + +| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1_SPINE-1_Ethernet3 | routed | - | 172.31.255.17/31 | default | 9000 | false | - | - | +| Ethernet2 | P2P_LINK_TO_DC1_SPINE-2_Ethernet3 | routed | - | 172.31.255.19/31 | default | 9000 | false | - | - | +| Ethernet3 | P2P_LINK_TO_DC1_SPINE-3_Ethernet3 | routed | - | 172.31.255.21/31 | default | 9000 | false | - | - | +| Ethernet4 | P2P_LINK_TO_DC1_SPINE-4_Ethernet3 | routed | - | 172.31.255.23/31 | default | 9000 | false | - | - | + +### Ethernet Interfaces Device Configuration + +```eos +! +interface Ethernet1 + description P2P_LINK_TO_DC1_SPINE-1_Ethernet3 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.17/31 +! +interface Ethernet2 + description P2P_LINK_TO_DC1_SPINE-2_Ethernet3 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.19/31 +! +interface Ethernet3 + description P2P_LINK_TO_DC1_SPINE-3_Ethernet3 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.21/31 +! +interface Ethernet4 + description P2P_LINK_TO_DC1_SPINE-4_Ethernet3 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.23/31 +! +interface Ethernet5 + description MLAG_PEER_DC1_LEAF-2B_Ethernet5 + no shutdown + channel-group 5 mode active +``` + +## Port-Channel Interfaces + +### Port-Channel Interfaces Summary + +#### L2 + +| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_PEER_DC1_LEAF-2B_Po5 | switched | trunk | 2-4094 | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | + +### Port-Channel Interfaces Device Configuration + +```eos +! +interface Port-Channel5 + description MLAG_PEER_DC1_LEAF-2B_Po5 + no shutdown + switchport + switchport trunk allowed vlan 2-4094 + switchport mode trunk + switchport trunk group LEAF_PEER_L3 + switchport trunk group MLAG +``` + +## Loopback Interfaces + +### Loopback Interfaces Summary + +#### IPv4 + +| Interface | Description | VRF | IP Address | +| --------- | ----------- | --- | ---------- | +| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.5/32 | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.5/32 | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.5/32 | + +#### IPv6 + +| Interface | Description | VRF | IPv6 Address | +| --------- | ----------- | --- | ------------ | +| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | + + +### Loopback Interfaces Device Configuration + +```eos +! +interface Loopback0 + description EVPN_Overlay_Peering + no shutdown + ip address 192.168.255.5/32 +! +interface Loopback1 + description VTEP_VXLAN_Tunnel_Source + no shutdown + ip address 192.168.254.5/32 +! +interface Loopback100 + description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS + no shutdown + vrf Tenant_A_OP_Zone + ip address 10.255.1.5/32 +``` + +## VLAN Interfaces + +### VLAN Interfaces Summary + +| Interface | Description | VRF | MTU | Shutdown | +| --------- | ----------- | --- | ---- | -------- | +| Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | false | +| Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | false | +| Vlan112 | Tenant_A_OP_Zone_3 | Tenant_A_OP_Zone | - | false | +| Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | false | +| Vlan121 | Tenant_A_WEBZone_2 | Tenant_A_WEB_Zone | - | false | +| Vlan130 | Tenant_A_APP_Zone_1 | Tenant_A_APP_Zone | - | false | +| Vlan131 | Tenant_A_APP_Zone_2 | Tenant_A_APP_Zone | - | false | +| Vlan140 | Tenant_A_DB_BZone_1 | Tenant_A_DB_Zone | - | false | +| Vlan141 | Tenant_A_DB_Zone_2 | Tenant_A_DB_Zone | - | false | +| Vlan150 | Tenant_A_WAN_Zone_1 | Tenant_A_WAN_Zone | - | false | +| Vlan210 | Tenant_B_OP_Zone_1 | Tenant_B_OP_Zone | - | false | +| Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | false | +| Vlan250 | Tenant_B_WAN_Zone_1 | Tenant_B_WAN_Zone | - | false | +| Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | false | +| Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | false | +| Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | false | +| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 9000 | false | +| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 9000 | false | +| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 9000 | false | +| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 9000 | false | +| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 9000 | false | +| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 9000 | false | +| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 9000 | false | +| Vlan3029 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 9000 | false | +| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 9000 | false | +| Vlan4093 | MLAG_PEER_L3_PEERING | default | 9000 | false | +| Vlan4094 | MLAG_PEER | default | 9000 | false | + +#### IPv4 + +| Interface | VRF | IP Address | IP Address Virtual | IP Router Virtual Address | VRRP | ACL In | ACL Out | +| --------- | --- | ---------- | ------------------ | ------------------------- | ---- | ------ | ------- | +| Vlan110 | Tenant_A_OP_Zone | - | 10.1.10.1/24 | - | - | - | - | +| Vlan111 | Tenant_A_OP_Zone | - | 10.1.11.1/24 | - | - | - | - | +| Vlan112 | Tenant_A_OP_Zone | - | 10.1.12.254/24 | - | - | - | - | +| Vlan120 | Tenant_A_WEB_Zone | - | - | - | - | - | - | +| Vlan121 | Tenant_A_WEB_Zone | - | 10.1.21.1/24 | - | - | - | - | +| Vlan130 | Tenant_A_APP_Zone | - | - | - | - | - | - | +| Vlan131 | Tenant_A_APP_Zone | - | 10.1.31.254/24 | - | - | - | - | +| Vlan140 | Tenant_A_DB_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan141 | Tenant_A_DB_Zone | - | 10.1.41.1/24 | - | - | - | - | +| Vlan150 | Tenant_A_WAN_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan210 | Tenant_B_OP_Zone | - | - | - | - | - | - | +| Vlan211 | Tenant_B_OP_Zone | - | 10.2.11.1/24 | - | - | - | - | +| Vlan250 | Tenant_B_WAN_Zone | - | 10.2.50.1/24 | - | - | - | - | +| Vlan310 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan311 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan350 | Tenant_C_WAN_Zone | - | - | - | - | - | - | +| Vlan3009 | Tenant_A_OP_Zone | 10.255.251.4/31 | - | - | - | - | - | +| Vlan3010 | Tenant_A_WEB_Zone | 10.255.251.4/31 | - | - | - | - | - | +| Vlan3011 | Tenant_A_APP_Zone | 10.255.251.4/31 | - | - | - | - | - | +| Vlan3012 | Tenant_A_DB_Zone | 10.255.251.4/31 | - | - | - | - | - | +| Vlan3013 | Tenant_A_WAN_Zone | 10.255.251.4/31 | - | - | - | - | - | +| Vlan3019 | Tenant_B_OP_Zone | 10.255.251.4/31 | - | - | - | - | - | +| Vlan3020 | Tenant_B_WAN_Zone | 10.255.251.4/31 | - | - | - | - | - | +| Vlan3029 | Tenant_C_OP_Zone | 10.255.251.4/31 | - | - | - | - | - | +| Vlan3030 | Tenant_C_WAN_Zone | 10.255.251.4/31 | - | - | - | - | - | +| Vlan4093 | default | 10.255.251.4/31 | - | - | - | - | - | +| Vlan4094 | default | 10.255.252.4/31 | - | - | - | - | - | + + +### VLAN Interfaces Device Configuration + +```eos +! +interface Vlan110 + description Tenant_A_OP_Zone_1 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.10.1/24 +! +interface Vlan111 + description Tenant_A_OP_Zone_2 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.11.1/24 +! +interface Vlan112 + description Tenant_A_OP_Zone_3 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.12.254/24 +! +interface Vlan120 + description Tenant_A_WEB_Zone_1 + no shutdown + vrf Tenant_A_WEB_Zone +! +interface Vlan121 + description Tenant_A_WEBZone_2 + no shutdown + vrf Tenant_A_WEB_Zone + ip address virtual 10.1.21.1/24 +! +interface Vlan130 + description Tenant_A_APP_Zone_1 + no shutdown + vrf Tenant_A_APP_Zone +! +interface Vlan131 + description Tenant_A_APP_Zone_2 + no shutdown + vrf Tenant_A_APP_Zone + ip address virtual 10.1.31.254/24 +! +interface Vlan140 + description Tenant_A_DB_BZone_1 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan141 + description Tenant_A_DB_Zone_2 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.41.1/24 +! +interface Vlan150 + description Tenant_A_WAN_Zone_1 + no shutdown + vrf Tenant_A_WAN_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan210 + description Tenant_B_OP_Zone_1 + no shutdown + vrf Tenant_B_OP_Zone +! +interface Vlan211 + description Tenant_B_OP_Zone_2 + no shutdown + vrf Tenant_B_OP_Zone + ip address virtual 10.2.11.1/24 +! +interface Vlan250 + description Tenant_B_WAN_Zone_1 + no shutdown + vrf Tenant_B_WAN_Zone + ip address virtual 10.2.50.1/24 +! +interface Vlan310 + description Tenant_C_OP_Zone_1 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan311 + description Tenant_C_OP_Zone_2 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan350 + description Tenant_C_WAN_Zone_1 + no shutdown + vrf Tenant_C_WAN_Zone +! +interface Vlan3009 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_OP_Zone + ip address 10.255.251.4/31 +! +interface Vlan3010 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WEB_Zone + ip address 10.255.251.4/31 +! +interface Vlan3011 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_APP_Zone + ip address 10.255.251.4/31 +! +interface Vlan3012 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_DB_Zone + ip address 10.255.251.4/31 +! +interface Vlan3013 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WAN_Zone + ip address 10.255.251.4/31 +! +interface Vlan3019 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_B_OP_Zone + ip address 10.255.251.4/31 +! +interface Vlan3020 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_B_WAN_Zone + ip address 10.255.251.4/31 +! +interface Vlan3029 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_C_OP_Zone + ip address 10.255.251.4/31 +! +interface Vlan3030 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_C_WAN_Zone + ip address 10.255.251.4/31 +! +interface Vlan4093 + description MLAG_PEER_L3_PEERING + no shutdown + mtu 9000 + ip address 10.255.251.4/31 +! +interface Vlan4094 + description MLAG_PEER + no shutdown + mtu 9000 + no autostate + ip address 10.255.252.4/31 +``` + +## VXLAN Interface + +### VXLAN Interface Summary + +#### Source Interface: Loopback1 + +#### UDP port: 4789 + +#### EVPN MLAG Shared Router MAC : mlag-system-id + +#### VLAN to VNI and Flood List Mappings + +| VLAN | VNI | Flood List | +| ---- | --- | ---------- | +| 110 | 10110 | - | +| 111 | 50111 | - | +| 112 | 50112 | - | +| 120 | 10120 | - | +| 121 | 10121 | - | +| 130 | 10130 | - | +| 131 | 10131 | - | +| 140 | 10140 | - | +| 141 | 10141 | - | +| 150 | 10150 | - | +| 160 | 55160 | - | +| 161 | 10161 | - | +| 210 | 20210 | - | +| 211 | 20211 | - | +| 250 | 20250 | - | +| 310 | 30310 | - | +| 311 | 30311 | - | +| 350 | 30350 | - | + +#### VRF to VNI Mappings + +| VLAN | VNI | +| ---- | --- | +| Tenant_A_APP_Zone | 12 | +| Tenant_A_DB_Zone | 13 | +| Tenant_A_OP_Zone | 10 | +| Tenant_A_WAN_Zone | 14 | +| Tenant_A_WEB_Zone | 11 | +| Tenant_B_OP_Zone | 20 | +| Tenant_B_WAN_Zone | 21 | +| Tenant_C_OP_Zone | 30 | +| Tenant_C_WAN_Zone | 31 | + +### VXLAN Interface Device Configuration + +```eos +! +interface Vxlan1 + description DC1_LEAF-2A_VTEP + vxlan source-interface Loopback1 + vxlan virtual-router encapsulation mac-address mlag-system-id + vxlan udp-port 4789 + vxlan vlan 110 vni 10110 + vxlan vlan 111 vni 50111 + vxlan vlan 112 vni 50112 + vxlan vlan 120 vni 10120 + vxlan vlan 121 vni 10121 + vxlan vlan 130 vni 10130 + vxlan vlan 131 vni 10131 + vxlan vlan 140 vni 10140 + vxlan vlan 141 vni 10141 + vxlan vlan 150 vni 10150 + vxlan vlan 160 vni 55160 + vxlan vlan 161 vni 10161 + vxlan vlan 210 vni 20210 + vxlan vlan 211 vni 20211 + vxlan vlan 250 vni 20250 + vxlan vlan 310 vni 30310 + vxlan vlan 311 vni 30311 + vxlan vlan 350 vni 30350 + vxlan vrf Tenant_A_APP_Zone vni 12 + vxlan vrf Tenant_A_DB_Zone vni 13 + vxlan vrf Tenant_A_OP_Zone vni 10 + vxlan vrf Tenant_A_WAN_Zone vni 14 + vxlan vrf Tenant_A_WEB_Zone vni 11 + vxlan vrf Tenant_B_OP_Zone vni 20 + vxlan vrf Tenant_B_WAN_Zone vni 21 + vxlan vrf Tenant_C_OP_Zone vni 30 + vxlan vrf Tenant_C_WAN_Zone vni 31 +``` + +# Routing +## Service Routing Protocols Model + +Multi agent routing protocol model enabled + +```eos +! +service routing protocols model multi-agent +``` + +## Virtual Router MAC Address + +### Virtual Router MAC Address Summary + +#### Virtual Router MAC Address: 00:1c:73:00:dc:01 + +### Virtual Router MAC Address Configuration + +```eos +! +ip virtual-router mac-address 00:1c:73:00:dc:01 +``` + +## IP Routing + +### IP Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | true|| MGMT | false | +| Tenant_A_APP_Zone | true | +| Tenant_A_DB_Zone | true | +| Tenant_A_OP_Zone | true | +| Tenant_A_WAN_Zone | true | +| Tenant_A_WEB_Zone | true | +| Tenant_B_OP_Zone | true | +| Tenant_B_WAN_Zone | true | +| Tenant_C_OP_Zone | true | +| Tenant_C_WAN_Zone | true | + +### IP Routing Device Configuration + +```eos +! +ip routing +no ip routing vrf MGMT +ip routing vrf Tenant_A_APP_Zone +ip routing vrf Tenant_A_DB_Zone +ip routing vrf Tenant_A_OP_Zone +ip routing vrf Tenant_A_WAN_Zone +ip routing vrf Tenant_A_WEB_Zone +ip routing vrf Tenant_B_OP_Zone +ip routing vrf Tenant_B_WAN_Zone +ip routing vrf Tenant_C_OP_Zone +ip routing vrf Tenant_C_WAN_Zone +``` +## IPv6 Routing + +### IPv6 Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | false || MGMT | false | +| Tenant_A_APP_Zone | false | +| Tenant_A_DB_Zone | false | +| Tenant_A_OP_Zone | false | +| Tenant_A_WAN_Zone | false | +| Tenant_A_WEB_Zone | false | +| Tenant_B_OP_Zone | false | +| Tenant_B_WAN_Zone | false | +| Tenant_C_OP_Zone | false | +| Tenant_C_WAN_Zone | false | + + +## Static Routes + +### Static Routes Summary + +| VRF | Destination Prefix | Next Hop IP | Exit interface | Administrative Distance | Tag | Route Name | Metric | +| --- | ------------------ | ----------------------- | ------------------- | ----------------------------- | ----------------- | ----------------------------- | -------------- | +| MGMT | 0.0.0.0/0 | 172.16.47.1 | - | 1 | - | - | - | + +### Static Routes Device Configuration + +```eos +! +ip route vrf MGMT 0.0.0.0/0 172.16.47.1 +``` + +## Router BGP + +### Router BGP Summary + +| BGP AS | Router ID | +| ------ | --------- | +| 65102| 192.168.255.5 | + +| BGP Tuning | +| ---------- | +| no bgp default ipv4-unicast | +| distance bgp 20 200 200 | +| graceful-restart restart-time 300 | +| graceful-restart | +| maximum-paths 4 ecmp 4 | + +### Router BGP Peer Groups + +#### EVPN-OVERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | evpn | +| Source | Loopback0 | +| Bfd | true | +| Ebgp multihop | 3 | +| Send community | all | +| Maximum routes | 0 (no limit) | + +#### IPv4-UNDERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Send community | all | +| Maximum routes | 12000 | + +#### MLAG-IPv4-UNDERLAY-PEER + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Remote AS | 65102 | +| Next-hop self | True | +| Send community | all | +| Maximum routes | 12000 | + +### BGP Neighbors + +| Neighbor | Remote AS | VRF | Send-community | Maximum-routes | +| -------- | --------- | --- | -------------- | -------------- | +| 10.255.251.5 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | default | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 172.31.255.16 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.18 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.20 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.22 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 192.168.255.1 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.2 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.3 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.4 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 10.255.251.5 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_APP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.5 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_DB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.5 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.5 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.5 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WEB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.5 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.5 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.5 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.5 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | + +### Router BGP EVPN Address Family + +#### Router BGP EVPN MAC-VRFs + +##### VLAN aware bundles + +| VLAN Aware Bundle | Route-Distinguisher | Both Route-Target | Import Route Target | Export Route-Target | Redistribute | VLANs | +| ----------------- | ------------------- | ----------------- | ------------------- | ------------------- | ------------ | ----- | +| Tenant_A_APP_Zone | 192.168.255.5:12 | 12:12 | - | - | learned | 130-131 | +| Tenant_A_DB_Zone | 192.168.255.5:13 | 13:13 | - | - | learned | 140-141 | +| Tenant_A_NFS | 192.168.255.5:10161 | 10161:10161 | - | - | learned | 161 | +| Tenant_A_OP_Zone | 192.168.255.5:10 | 10:10 | - | - | learned | 110-112 | +| Tenant_A_VMOTION | 192.168.255.5:55160 | 55160:55160 | - | - | learned | 160 | +| Tenant_A_WAN_Zone | 192.168.255.5:14 | 14:14 | - | - | learned | 150 | +| Tenant_A_WEB_Zone | 192.168.255.5:11 | 11:11 | - | - | learned | 120-121 | +| Tenant_B_OP_Zone | 192.168.255.5:20 | 20:20 | - | - | learned | 210-211 | +| Tenant_B_WAN_Zone | 192.168.255.5:21 | 21:21 | - | - | learned | 250 | +| Tenant_C_OP_Zone | 192.168.255.5:30 | 30:30 | - | - | learned | 310-311 | +| Tenant_C_WAN_Zone | 192.168.255.5:31 | 31:31 | - | - | learned | 350 | + +#### Router BGP EVPN VRFs + +| VRF | Route-Distinguisher | Redistribute | +| --- | ------------------- | ------------ | +| Tenant_A_APP_Zone | 192.168.255.5:12 | connected | +| Tenant_A_DB_Zone | 192.168.255.5:13 | connected | +| Tenant_A_OP_Zone | 192.168.255.5:10 | connected | +| Tenant_A_WAN_Zone | 192.168.255.5:14 | connected | +| Tenant_A_WEB_Zone | 192.168.255.5:11 | connected | +| Tenant_B_OP_Zone | 192.168.255.5:20 | connected | +| Tenant_B_WAN_Zone | 192.168.255.5:21 | connected | +| Tenant_C_OP_Zone | 192.168.255.5:30 | connected | +| Tenant_C_WAN_Zone | 192.168.255.5:31 | connected | + +### Router BGP Device Configuration + +```eos +! +router bgp 65102 + router-id 192.168.255.5 + no bgp default ipv4-unicast + distance bgp 20 200 200 + graceful-restart restart-time 300 + graceful-restart + maximum-paths 4 ecmp 4 + neighbor EVPN-OVERLAY-PEERS peer group + neighbor EVPN-OVERLAY-PEERS update-source Loopback0 + neighbor EVPN-OVERLAY-PEERS bfd + neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 + neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== + neighbor EVPN-OVERLAY-PEERS send-community + neighbor EVPN-OVERLAY-PEERS maximum-routes 0 + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER peer group + neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65102 + neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self + neighbor MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ== + neighbor MLAG-IPv4-UNDERLAY-PEER send-community + neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in + neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.5 description DC1_LEAF-2B + neighbor 172.31.255.16 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.16 remote-as 65001 + neighbor 172.31.255.16 description DC1_SPINE-1_Ethernet3 + neighbor 172.31.255.18 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.18 remote-as 65001 + neighbor 172.31.255.18 description DC1_SPINE-2_Ethernet3 + neighbor 172.31.255.20 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.20 remote-as 65001 + neighbor 172.31.255.20 description DC1_SPINE-3_Ethernet3 + neighbor 172.31.255.22 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.22 remote-as 65001 + neighbor 172.31.255.22 description DC1_SPINE-4_Ethernet3 + neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.1 remote-as 65001 + neighbor 192.168.255.1 description DC1_SPINE-1 + neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.2 remote-as 65001 + neighbor 192.168.255.2 description DC1_SPINE-2 + neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.3 remote-as 65001 + neighbor 192.168.255.3 description DC1_SPINE-3 + neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.4 remote-as 65001 + neighbor 192.168.255.4 description DC1_SPINE-4 + redistribute connected route-map RM-CONN-2-BGP + ! + vlan-aware-bundle Tenant_A_APP_Zone + rd 192.168.255.5:12 + route-target both 12:12 + redistribute learned + vlan 130-131 + ! + vlan-aware-bundle Tenant_A_DB_Zone + rd 192.168.255.5:13 + route-target both 13:13 + redistribute learned + vlan 140-141 + ! + vlan-aware-bundle Tenant_A_NFS + rd 192.168.255.5:10161 + route-target both 10161:10161 + redistribute learned + vlan 161 + ! + vlan-aware-bundle Tenant_A_OP_Zone + rd 192.168.255.5:10 + route-target both 10:10 + redistribute learned + vlan 110-112 + ! + vlan-aware-bundle Tenant_A_VMOTION + rd 192.168.255.5:55160 + route-target both 55160:55160 + redistribute learned + vlan 160 + ! + vlan-aware-bundle Tenant_A_WAN_Zone + rd 192.168.255.5:14 + route-target both 14:14 + redistribute learned + vlan 150 + ! + vlan-aware-bundle Tenant_A_WEB_Zone + rd 192.168.255.5:11 + route-target both 11:11 + redistribute learned + vlan 120-121 + ! + vlan-aware-bundle Tenant_B_OP_Zone + rd 192.168.255.5:20 + route-target both 20:20 + redistribute learned + vlan 210-211 + ! + vlan-aware-bundle Tenant_B_WAN_Zone + rd 192.168.255.5:21 + route-target both 21:21 + redistribute learned + vlan 250 + ! + vlan-aware-bundle Tenant_C_OP_Zone + rd 192.168.255.5:30 + route-target both 30:30 + redistribute learned + vlan 310-311 + ! + vlan-aware-bundle Tenant_C_WAN_Zone + rd 192.168.255.5:31 + route-target both 31:31 + redistribute learned + vlan 350 + ! + address-family evpn + neighbor EVPN-OVERLAY-PEERS activate + ! + address-family ipv4 + no neighbor EVPN-OVERLAY-PEERS activate + neighbor IPv4-UNDERLAY-PEERS activate + neighbor MLAG-IPv4-UNDERLAY-PEER activate + ! + vrf Tenant_A_APP_Zone + rd 192.168.255.5:12 + route-target import evpn 12:12 + route-target export evpn 12:12 + router-id 192.168.255.5 + neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_DB_Zone + rd 192.168.255.5:13 + route-target import evpn 13:13 + route-target export evpn 13:13 + router-id 192.168.255.5 + neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_OP_Zone + rd 192.168.255.5:10 + route-target import evpn 10:10 + route-target export evpn 10:10 + router-id 192.168.255.5 + neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WAN_Zone + rd 192.168.255.5:14 + route-target import evpn 14:14 + route-target export evpn 14:14 + router-id 192.168.255.5 + neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WEB_Zone + rd 192.168.255.5:11 + route-target import evpn 11:11 + route-target export evpn 11:11 + router-id 192.168.255.5 + neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_OP_Zone + rd 192.168.255.5:20 + route-target import evpn 20:20 + route-target export evpn 20:20 + router-id 192.168.255.5 + neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_WAN_Zone + rd 192.168.255.5:21 + route-target import evpn 21:21 + route-target export evpn 21:21 + router-id 192.168.255.5 + neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_OP_Zone + rd 192.168.255.5:30 + route-target import evpn 30:30 + route-target export evpn 30:30 + router-id 192.168.255.5 + neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_WAN_Zone + rd 192.168.255.5:31 + route-target import evpn 31:31 + route-target export evpn 31:31 + router-id 192.168.255.5 + neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected +``` + +# BFD + +## Router BFD + +### Router BFD Multihop Summary + +| Interval | Minimum RX | Multiplier | +| -------- | ---------- | ---------- | +| 1200 | 1200 | 3 | + +### Router BFD Multihop Device Configuration + +```eos +! +router bfd + multihop interval 1200 min-rx 1200 multiplier 3 +``` + +# Multicast + +## IP IGMP Snooping + +### IP IGMP Snooping Summary + +IGMP snooping is globally enabled. + + +### IP IGMP Snooping Device Configuration + +```eos +``` + +# Filters + +## Prefix-lists + +### Prefix-lists Summary + +#### PL-LOOPBACKS-EVPN-OVERLAY + +| Sequence | Action | +| -------- | ------ | +| 10 | permit 192.168.255.0/24 eq 32 | +| 20 | permit 192.168.254.0/24 eq 32 | + +### Prefix-lists Device Configuration + +```eos +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +``` + +## Route-maps + +### Route-maps Summary + +#### RM-CONN-2-BGP + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY | + +#### RM-MLAG-PEER-IN + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | set origin incomplete | + +### Route-maps Device Configuration + +```eos +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY +! +route-map RM-MLAG-PEER-IN permit 10 + description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing + set origin incomplete +``` + +# ACL + +# VRF Instances + +## VRF Instances Summary + +| VRF Name | IP Routing | +| -------- | ---------- | +| MGMT | disabled | +| Tenant_A_APP_Zone | enabled | +| Tenant_A_DB_Zone | enabled | +| Tenant_A_OP_Zone | enabled | +| Tenant_A_WAN_Zone | enabled | +| Tenant_A_WEB_Zone | enabled | +| Tenant_B_OP_Zone | enabled | +| Tenant_B_WAN_Zone | enabled | +| Tenant_C_OP_Zone | enabled | +| Tenant_C_WAN_Zone | enabled | + +## VRF Instances Device Configuration + +```eos +! +vrf instance MGMT +! +vrf instance Tenant_A_APP_Zone +! +vrf instance Tenant_A_DB_Zone +! +vrf instance Tenant_A_OP_Zone +! +vrf instance Tenant_A_WAN_Zone +! +vrf instance Tenant_A_WEB_Zone +! +vrf instance Tenant_B_OP_Zone +! +vrf instance Tenant_B_WAN_Zone +! +vrf instance Tenant_C_OP_Zone +! +vrf instance Tenant_C_WAN_Zone +``` + +# Virtual Source NAT + +## Virtual Source NAT Summary + +| Source NAT VRF | Source NAT IP Address | +| -------------- | --------------------- | +| Tenant_A_OP_Zone | 10.255.1.5 | + +## Virtual Source NAT Configuration + +```eos +! +ip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.5 +``` + +# Quality Of Service diff --git a/inventory/documentation/devices/DC1_LEAF-2B.md b/inventory/documentation/devices/DC1_LEAF-2B.md new file mode 100644 index 000000000..ad149a168 --- /dev/null +++ b/inventory/documentation/devices/DC1_LEAF-2B.md @@ -0,0 +1,1382 @@ +# DC1_LEAF-2B +# Table of Contents + + +- [Management](#management) + - [Management Interfaces](#management-interfaces) + - [Name Servers](#name-servers) + - [NTP](#ntp) + - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Local Users](#local-users) +- [Monitoring](#monitoring) + - [TerminAttr Daemon](#terminattr-daemon) +- [MLAG](#mlag) + - [MLAG Summary](#mlag-summary) + - [MLAG Device Configuration](#mlag-device-configuration) +- [Spanning Tree](#spanning-tree) + - [Spanning Tree Summary](#spanning-tree-summary) + - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) +- [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) + - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) + - [Internal VLAN Allocation Policy Configuration](#internal-vlan-allocation-policy-configuration) +- [VLANs](#vlans) + - [VLANs Summary](#vlans-summary) + - [VLANs Device Configuration](#vlans-device-configuration) +- [Interfaces](#interfaces) + - [Ethernet Interfaces](#ethernet-interfaces) + - [Port-Channel Interfaces](#port-channel-interfaces) + - [Loopback Interfaces](#loopback-interfaces) + - [VLAN Interfaces](#vlan-interfaces) + - [VXLAN Interface](#vxlan-interface) +- [Routing](#routing) + - [Service Routing Protocols Model](#service-routing-protocols-model) + - [Virtual Router MAC Address](#virtual-router-mac-address) + - [IP Routing](#ip-routing) + - [IPv6 Routing](#ipv6-routing) + - [Static Routes](#static-routes) + - [Router BGP](#router-bgp) +- [BFD](#bfd) + - [Router BFD](#router-bfd) +- [Multicast](#multicast) + - [IP IGMP Snooping](#ip-igmp-snooping) +- [Filters](#filters) + - [Prefix-lists](#prefix-lists) + - [Route-maps](#route-maps) +- [ACL](#acl) +- [VRF Instances](#vrf-instances) + - [VRF Instances Summary](#vrf-instances-summary) + - [VRF Instances Device Configuration](#vrf-instances-device-configuration) +- [Virtual Source NAT](#virtual-source-nat) + - [Virtual Source NAT Summary](#virtual-source-nat-summary) + - [Virtual Source NAT Configuration](#virtual-source-nat-configuration) +- [Quality Of Service](#quality-of-service) + + +# Management + +## Management Interfaces + +### Management Interfaces Summary + +#### IPv4 + +| Management Interface | description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | oob_management | oob | MGMT | 172.16.47.34/24 | 172.16.47.1 | + +#### IPv6 + +| Management Interface | description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | oob_management | oob | MGMT | - | - | + +### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description oob_management + no shutdown + vrf MGMT + ip address 172.16.47.34/24 +``` + +## Name Servers + +### Name Servers Summary + +| Name Server | Source VRF | +| ----------- | ---------- | +| 172.16.47.12 | MGMT | +| 8.8.8.8 | MGMT | + +### Name Servers Device Configuration + +```eos +ip name-server vrf MGMT 8.8.8.8 +ip name-server vrf MGMT 172.16.47.12 +``` + +## NTP + +### NTP Summary + +#### NTP Local Interface + +| Interface | VRF | +| --------- | --- | +| Management1 | MGMT | + +#### NTP Servers + +| Server | VRF | Preferred | Burst | iBurst | Version | Min Poll | Max Poll | Local-interface | Key | +| ------ | --- | --------- | ----- | ------ | ------- | -------- | -------- | --------------- | --- | +| time.google.com | MGMT | True | - | - | - | - | - | - | - | + +### NTP Device Configuration + +```eos +! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT time.google.com prefer +``` + +## Management API HTTP + +### Management API HTTP Summary + +| HTTP | HTTPS | +| ---------- | ---------- | +| default | true | + +### Management API VRF Access + +| VRF Name | IPv4 ACL | IPv6 ACL | +| -------- | -------- | -------- | +| MGMT | - | - | + + +### Management API HTTP Configuration + +```eos +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +``` + +# Authentication + +## Local Users + +### Local Users Summary + +| User | Privilege | Role | +| ---- | --------- | ---- | +| admin | 15 | network-admin | +| ansible | 15 | network-admin | +| cvpadmin | 15 | network-admin | + +### Local Users Device Configuration + +```eos +! +username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 +username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +``` + +# Monitoring + +## TerminAttr Daemon + +### TerminAttr Daemon Summary + +| CV Compression | CloudVision Servers | VRF | Authentication | Smash Excludes | Ingest Exclude | Bypass AAA | +| -------------- | ------------------- | --- | -------------- | -------------- | -------------- | ---------- | +| gzip | 172.16.47.11:9910 | MGMT | key,@rista123! | ale,flexCounter,hardware,kni,pulse,strata | /Sysdb/cell/1/agent,/Sysdb/cell/2/agent | False | + +### TerminAttr Daemon Device Configuration + +```eos +! +daemon TerminAttr + exec /usr/bin/TerminAttr -cvaddr=172.16.47.11:9910 -cvauth=key,@rista123! -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs + no shutdown +``` + +# MLAG + +## MLAG Summary + +| Domain-id | Local-interface | Peer-address | Peer-link | +| --------- | --------------- | ------------ | --------- | +| DC1_LEAF2 | Vlan4094 | 10.255.252.4 | Port-Channel5 | + +Dual primary detection is disabled. + +## MLAG Device Configuration + +```eos +! +mlag configuration + domain-id DC1_LEAF2 + local-interface Vlan4094 + peer-address 10.255.252.4 + peer-link Port-Channel5 + reload-delay mlag 300 + reload-delay non-mlag 330 +``` + +# Spanning Tree + +## Spanning Tree Summary + +STP mode: **mstp** + +### MSTP Instance and Priority + +| Instance(s) | Priority | +| -------- | -------- | +| 0 | 16384 | + +### Global Spanning-Tree Settings + +Spanning Tree disabled for VLANs: **4093-4094** + +## Spanning Tree Device Configuration + +```eos +! +spanning-tree mode mstp +no spanning-tree vlan-id 4093-4094 +spanning-tree mst 0 priority 16384 +``` + +# Internal VLAN Allocation Policy + +## Internal VLAN Allocation Policy Summary + +| Policy Allocation | Range Beginning | Range Ending | +| ------------------| --------------- | ------------ | +| ascending | 1006 | 1199 | + +## Internal VLAN Allocation Policy Configuration + +```eos +! +vlan internal order ascending range 1006 1199 +``` + +# VLANs + +## VLANs Summary + +| VLAN ID | Name | Trunk Groups | +| ------- | ---- | ------------ | +| 110 | Tenant_A_OP_Zone_1 | - | +| 111 | Tenant_A_OP_Zone_2 | - | +| 112 | Tenant_A_OP_Zone_3 | - | +| 120 | Tenant_A_WEB_Zone_1 | - | +| 121 | Tenant_A_WEBZone_2 | - | +| 130 | Tenant_A_APP_Zone_1 | - | +| 131 | Tenant_A_APP_Zone_2 | - | +| 140 | Tenant_A_DB_BZone_1 | - | +| 141 | Tenant_A_DB_Zone_2 | - | +| 150 | Tenant_A_WAN_Zone_1 | - | +| 160 | Tenant_A_VMOTION | - | +| 161 | Tenant_A_NFS | - | +| 210 | Tenant_B_OP_Zone_1 | - | +| 211 | Tenant_B_OP_Zone_2 | - | +| 250 | Tenant_B_WAN_Zone_1 | - | +| 310 | Tenant_C_OP_Zone_1 | - | +| 311 | Tenant_C_OP_Zone_2 | - | +| 350 | Tenant_C_WAN_Zone_1 | - | +| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | +| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | +| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | +| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | +| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | +| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | +| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | +| 3029 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | +| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | +| 4094 | MLAG_PEER | MLAG | + +## VLANs Device Configuration + +```eos +! +vlan 110 + name Tenant_A_OP_Zone_1 +! +vlan 111 + name Tenant_A_OP_Zone_2 +! +vlan 112 + name Tenant_A_OP_Zone_3 +! +vlan 120 + name Tenant_A_WEB_Zone_1 +! +vlan 121 + name Tenant_A_WEBZone_2 +! +vlan 130 + name Tenant_A_APP_Zone_1 +! +vlan 131 + name Tenant_A_APP_Zone_2 +! +vlan 140 + name Tenant_A_DB_BZone_1 +! +vlan 141 + name Tenant_A_DB_Zone_2 +! +vlan 150 + name Tenant_A_WAN_Zone_1 +! +vlan 160 + name Tenant_A_VMOTION +! +vlan 161 + name Tenant_A_NFS +! +vlan 210 + name Tenant_B_OP_Zone_1 +! +vlan 211 + name Tenant_B_OP_Zone_2 +! +vlan 250 + name Tenant_B_WAN_Zone_1 +! +vlan 310 + name Tenant_C_OP_Zone_1 +! +vlan 311 + name Tenant_C_OP_Zone_2 +! +vlan 350 + name Tenant_C_WAN_Zone_1 +! +vlan 3009 + name MLAG_iBGP_Tenant_A_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3010 + name MLAG_iBGP_Tenant_A_WEB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3011 + name MLAG_iBGP_Tenant_A_APP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3012 + name MLAG_iBGP_Tenant_A_DB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3013 + name MLAG_iBGP_Tenant_A_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3019 + name MLAG_iBGP_Tenant_B_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3020 + name MLAG_iBGP_Tenant_B_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3029 + name MLAG_iBGP_Tenant_C_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3030 + name MLAG_iBGP_Tenant_C_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 4093 + name LEAF_PEER_L3 + trunk group LEAF_PEER_L3 +! +vlan 4094 + name MLAG_PEER + trunk group MLAG +``` + +# Interfaces + +## Ethernet Interfaces + +### Ethernet Interfaces Summary + +#### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | +| --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | +| Ethernet5 | MLAG_PEER_DC1_LEAF-2A_Ethernet5 | *trunk | *2-4094 | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | + +*Inherited from Port-Channel Interface + +#### IPv4 + +| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1_SPINE-1_Ethernet4 | routed | - | 172.31.255.25/31 | default | 9000 | false | - | - | +| Ethernet2 | P2P_LINK_TO_DC1_SPINE-2_Ethernet4 | routed | - | 172.31.255.27/31 | default | 9000 | false | - | - | +| Ethernet3 | P2P_LINK_TO_DC1_SPINE-3_Ethernet4 | routed | - | 172.31.255.29/31 | default | 9000 | false | - | - | +| Ethernet4 | P2P_LINK_TO_DC1_SPINE-4_Ethernet4 | routed | - | 172.31.255.31/31 | default | 9000 | false | - | - | + +### Ethernet Interfaces Device Configuration + +```eos +! +interface Ethernet1 + description P2P_LINK_TO_DC1_SPINE-1_Ethernet4 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.25/31 +! +interface Ethernet2 + description P2P_LINK_TO_DC1_SPINE-2_Ethernet4 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.27/31 +! +interface Ethernet3 + description P2P_LINK_TO_DC1_SPINE-3_Ethernet4 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.29/31 +! +interface Ethernet4 + description P2P_LINK_TO_DC1_SPINE-4_Ethernet4 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.31/31 +! +interface Ethernet5 + description MLAG_PEER_DC1_LEAF-2A_Ethernet5 + no shutdown + channel-group 5 mode active +``` + +## Port-Channel Interfaces + +### Port-Channel Interfaces Summary + +#### L2 + +| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_PEER_DC1_LEAF-2A_Po5 | switched | trunk | 2-4094 | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | + +### Port-Channel Interfaces Device Configuration + +```eos +! +interface Port-Channel5 + description MLAG_PEER_DC1_LEAF-2A_Po5 + no shutdown + switchport + switchport trunk allowed vlan 2-4094 + switchport mode trunk + switchport trunk group LEAF_PEER_L3 + switchport trunk group MLAG +``` + +## Loopback Interfaces + +### Loopback Interfaces Summary + +#### IPv4 + +| Interface | Description | VRF | IP Address | +| --------- | ----------- | --- | ---------- | +| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.6/32 | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.5/32 | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.6/32 | + +#### IPv6 + +| Interface | Description | VRF | IPv6 Address | +| --------- | ----------- | --- | ------------ | +| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | + + +### Loopback Interfaces Device Configuration + +```eos +! +interface Loopback0 + description EVPN_Overlay_Peering + no shutdown + ip address 192.168.255.6/32 +! +interface Loopback1 + description VTEP_VXLAN_Tunnel_Source + no shutdown + ip address 192.168.254.5/32 +! +interface Loopback100 + description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS + no shutdown + vrf Tenant_A_OP_Zone + ip address 10.255.1.6/32 +``` + +## VLAN Interfaces + +### VLAN Interfaces Summary + +| Interface | Description | VRF | MTU | Shutdown | +| --------- | ----------- | --- | ---- | -------- | +| Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | false | +| Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | false | +| Vlan112 | Tenant_A_OP_Zone_3 | Tenant_A_OP_Zone | - | false | +| Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | false | +| Vlan121 | Tenant_A_WEBZone_2 | Tenant_A_WEB_Zone | - | false | +| Vlan130 | Tenant_A_APP_Zone_1 | Tenant_A_APP_Zone | - | false | +| Vlan131 | Tenant_A_APP_Zone_2 | Tenant_A_APP_Zone | - | false | +| Vlan140 | Tenant_A_DB_BZone_1 | Tenant_A_DB_Zone | - | false | +| Vlan141 | Tenant_A_DB_Zone_2 | Tenant_A_DB_Zone | - | false | +| Vlan150 | Tenant_A_WAN_Zone_1 | Tenant_A_WAN_Zone | - | false | +| Vlan210 | Tenant_B_OP_Zone_1 | Tenant_B_OP_Zone | - | false | +| Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | false | +| Vlan250 | Tenant_B_WAN_Zone_1 | Tenant_B_WAN_Zone | - | false | +| Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | false | +| Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | false | +| Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | false | +| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 9000 | false | +| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 9000 | false | +| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 9000 | false | +| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 9000 | false | +| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 9000 | false | +| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 9000 | false | +| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 9000 | false | +| Vlan3029 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 9000 | false | +| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 9000 | false | +| Vlan4093 | MLAG_PEER_L3_PEERING | default | 9000 | false | +| Vlan4094 | MLAG_PEER | default | 9000 | false | + +#### IPv4 + +| Interface | VRF | IP Address | IP Address Virtual | IP Router Virtual Address | VRRP | ACL In | ACL Out | +| --------- | --- | ---------- | ------------------ | ------------------------- | ---- | ------ | ------- | +| Vlan110 | Tenant_A_OP_Zone | - | 10.1.10.1/24 | - | - | - | - | +| Vlan111 | Tenant_A_OP_Zone | - | 10.1.11.1/24 | - | - | - | - | +| Vlan112 | Tenant_A_OP_Zone | - | 10.1.12.254/24 | - | - | - | - | +| Vlan120 | Tenant_A_WEB_Zone | - | - | - | - | - | - | +| Vlan121 | Tenant_A_WEB_Zone | - | 10.1.21.1/24 | - | - | - | - | +| Vlan130 | Tenant_A_APP_Zone | - | - | - | - | - | - | +| Vlan131 | Tenant_A_APP_Zone | - | 10.1.31.254/24 | - | - | - | - | +| Vlan140 | Tenant_A_DB_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan141 | Tenant_A_DB_Zone | - | 10.1.41.1/24 | - | - | - | - | +| Vlan150 | Tenant_A_WAN_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan210 | Tenant_B_OP_Zone | - | - | - | - | - | - | +| Vlan211 | Tenant_B_OP_Zone | - | 10.2.11.1/24 | - | - | - | - | +| Vlan250 | Tenant_B_WAN_Zone | - | 10.2.50.1/24 | - | - | - | - | +| Vlan310 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan311 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan350 | Tenant_C_WAN_Zone | - | - | - | - | - | - | +| Vlan3009 | Tenant_A_OP_Zone | 10.255.251.5/31 | - | - | - | - | - | +| Vlan3010 | Tenant_A_WEB_Zone | 10.255.251.5/31 | - | - | - | - | - | +| Vlan3011 | Tenant_A_APP_Zone | 10.255.251.5/31 | - | - | - | - | - | +| Vlan3012 | Tenant_A_DB_Zone | 10.255.251.5/31 | - | - | - | - | - | +| Vlan3013 | Tenant_A_WAN_Zone | 10.255.251.5/31 | - | - | - | - | - | +| Vlan3019 | Tenant_B_OP_Zone | 10.255.251.5/31 | - | - | - | - | - | +| Vlan3020 | Tenant_B_WAN_Zone | 10.255.251.5/31 | - | - | - | - | - | +| Vlan3029 | Tenant_C_OP_Zone | 10.255.251.5/31 | - | - | - | - | - | +| Vlan3030 | Tenant_C_WAN_Zone | 10.255.251.5/31 | - | - | - | - | - | +| Vlan4093 | default | 10.255.251.5/31 | - | - | - | - | - | +| Vlan4094 | default | 10.255.252.5/31 | - | - | - | - | - | + + +### VLAN Interfaces Device Configuration + +```eos +! +interface Vlan110 + description Tenant_A_OP_Zone_1 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.10.1/24 +! +interface Vlan111 + description Tenant_A_OP_Zone_2 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.11.1/24 +! +interface Vlan112 + description Tenant_A_OP_Zone_3 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.12.254/24 +! +interface Vlan120 + description Tenant_A_WEB_Zone_1 + no shutdown + vrf Tenant_A_WEB_Zone +! +interface Vlan121 + description Tenant_A_WEBZone_2 + no shutdown + vrf Tenant_A_WEB_Zone + ip address virtual 10.1.21.1/24 +! +interface Vlan130 + description Tenant_A_APP_Zone_1 + no shutdown + vrf Tenant_A_APP_Zone +! +interface Vlan131 + description Tenant_A_APP_Zone_2 + no shutdown + vrf Tenant_A_APP_Zone + ip address virtual 10.1.31.254/24 +! +interface Vlan140 + description Tenant_A_DB_BZone_1 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan141 + description Tenant_A_DB_Zone_2 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.41.1/24 +! +interface Vlan150 + description Tenant_A_WAN_Zone_1 + no shutdown + vrf Tenant_A_WAN_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan210 + description Tenant_B_OP_Zone_1 + no shutdown + vrf Tenant_B_OP_Zone +! +interface Vlan211 + description Tenant_B_OP_Zone_2 + no shutdown + vrf Tenant_B_OP_Zone + ip address virtual 10.2.11.1/24 +! +interface Vlan250 + description Tenant_B_WAN_Zone_1 + no shutdown + vrf Tenant_B_WAN_Zone + ip address virtual 10.2.50.1/24 +! +interface Vlan310 + description Tenant_C_OP_Zone_1 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan311 + description Tenant_C_OP_Zone_2 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan350 + description Tenant_C_WAN_Zone_1 + no shutdown + vrf Tenant_C_WAN_Zone +! +interface Vlan3009 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_OP_Zone + ip address 10.255.251.5/31 +! +interface Vlan3010 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WEB_Zone + ip address 10.255.251.5/31 +! +interface Vlan3011 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_APP_Zone + ip address 10.255.251.5/31 +! +interface Vlan3012 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_DB_Zone + ip address 10.255.251.5/31 +! +interface Vlan3013 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WAN_Zone + ip address 10.255.251.5/31 +! +interface Vlan3019 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_B_OP_Zone + ip address 10.255.251.5/31 +! +interface Vlan3020 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_B_WAN_Zone + ip address 10.255.251.5/31 +! +interface Vlan3029 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_C_OP_Zone + ip address 10.255.251.5/31 +! +interface Vlan3030 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_C_WAN_Zone + ip address 10.255.251.5/31 +! +interface Vlan4093 + description MLAG_PEER_L3_PEERING + no shutdown + mtu 9000 + ip address 10.255.251.5/31 +! +interface Vlan4094 + description MLAG_PEER + no shutdown + mtu 9000 + no autostate + ip address 10.255.252.5/31 +``` + +## VXLAN Interface + +### VXLAN Interface Summary + +#### Source Interface: Loopback1 + +#### UDP port: 4789 + +#### EVPN MLAG Shared Router MAC : mlag-system-id + +#### VLAN to VNI and Flood List Mappings + +| VLAN | VNI | Flood List | +| ---- | --- | ---------- | +| 110 | 10110 | - | +| 111 | 50111 | - | +| 112 | 50112 | - | +| 120 | 10120 | - | +| 121 | 10121 | - | +| 130 | 10130 | - | +| 131 | 10131 | - | +| 140 | 10140 | - | +| 141 | 10141 | - | +| 150 | 10150 | - | +| 160 | 55160 | - | +| 161 | 10161 | - | +| 210 | 20210 | - | +| 211 | 20211 | - | +| 250 | 20250 | - | +| 310 | 30310 | - | +| 311 | 30311 | - | +| 350 | 30350 | - | + +#### VRF to VNI Mappings + +| VLAN | VNI | +| ---- | --- | +| Tenant_A_APP_Zone | 12 | +| Tenant_A_DB_Zone | 13 | +| Tenant_A_OP_Zone | 10 | +| Tenant_A_WAN_Zone | 14 | +| Tenant_A_WEB_Zone | 11 | +| Tenant_B_OP_Zone | 20 | +| Tenant_B_WAN_Zone | 21 | +| Tenant_C_OP_Zone | 30 | +| Tenant_C_WAN_Zone | 31 | + +### VXLAN Interface Device Configuration + +```eos +! +interface Vxlan1 + description DC1_LEAF-2B_VTEP + vxlan source-interface Loopback1 + vxlan virtual-router encapsulation mac-address mlag-system-id + vxlan udp-port 4789 + vxlan vlan 110 vni 10110 + vxlan vlan 111 vni 50111 + vxlan vlan 112 vni 50112 + vxlan vlan 120 vni 10120 + vxlan vlan 121 vni 10121 + vxlan vlan 130 vni 10130 + vxlan vlan 131 vni 10131 + vxlan vlan 140 vni 10140 + vxlan vlan 141 vni 10141 + vxlan vlan 150 vni 10150 + vxlan vlan 160 vni 55160 + vxlan vlan 161 vni 10161 + vxlan vlan 210 vni 20210 + vxlan vlan 211 vni 20211 + vxlan vlan 250 vni 20250 + vxlan vlan 310 vni 30310 + vxlan vlan 311 vni 30311 + vxlan vlan 350 vni 30350 + vxlan vrf Tenant_A_APP_Zone vni 12 + vxlan vrf Tenant_A_DB_Zone vni 13 + vxlan vrf Tenant_A_OP_Zone vni 10 + vxlan vrf Tenant_A_WAN_Zone vni 14 + vxlan vrf Tenant_A_WEB_Zone vni 11 + vxlan vrf Tenant_B_OP_Zone vni 20 + vxlan vrf Tenant_B_WAN_Zone vni 21 + vxlan vrf Tenant_C_OP_Zone vni 30 + vxlan vrf Tenant_C_WAN_Zone vni 31 +``` + +# Routing +## Service Routing Protocols Model + +Multi agent routing protocol model enabled + +```eos +! +service routing protocols model multi-agent +``` + +## Virtual Router MAC Address + +### Virtual Router MAC Address Summary + +#### Virtual Router MAC Address: 00:1c:73:00:dc:01 + +### Virtual Router MAC Address Configuration + +```eos +! +ip virtual-router mac-address 00:1c:73:00:dc:01 +``` + +## IP Routing + +### IP Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | true|| MGMT | false | +| Tenant_A_APP_Zone | true | +| Tenant_A_DB_Zone | true | +| Tenant_A_OP_Zone | true | +| Tenant_A_WAN_Zone | true | +| Tenant_A_WEB_Zone | true | +| Tenant_B_OP_Zone | true | +| Tenant_B_WAN_Zone | true | +| Tenant_C_OP_Zone | true | +| Tenant_C_WAN_Zone | true | + +### IP Routing Device Configuration + +```eos +! +ip routing +no ip routing vrf MGMT +ip routing vrf Tenant_A_APP_Zone +ip routing vrf Tenant_A_DB_Zone +ip routing vrf Tenant_A_OP_Zone +ip routing vrf Tenant_A_WAN_Zone +ip routing vrf Tenant_A_WEB_Zone +ip routing vrf Tenant_B_OP_Zone +ip routing vrf Tenant_B_WAN_Zone +ip routing vrf Tenant_C_OP_Zone +ip routing vrf Tenant_C_WAN_Zone +``` +## IPv6 Routing + +### IPv6 Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | false || MGMT | false | +| Tenant_A_APP_Zone | false | +| Tenant_A_DB_Zone | false | +| Tenant_A_OP_Zone | false | +| Tenant_A_WAN_Zone | false | +| Tenant_A_WEB_Zone | false | +| Tenant_B_OP_Zone | false | +| Tenant_B_WAN_Zone | false | +| Tenant_C_OP_Zone | false | +| Tenant_C_WAN_Zone | false | + + +## Static Routes + +### Static Routes Summary + +| VRF | Destination Prefix | Next Hop IP | Exit interface | Administrative Distance | Tag | Route Name | Metric | +| --- | ------------------ | ----------------------- | ------------------- | ----------------------------- | ----------------- | ----------------------------- | -------------- | +| MGMT | 0.0.0.0/0 | 172.16.47.1 | - | 1 | - | - | - | + +### Static Routes Device Configuration + +```eos +! +ip route vrf MGMT 0.0.0.0/0 172.16.47.1 +``` + +## Router BGP + +### Router BGP Summary + +| BGP AS | Router ID | +| ------ | --------- | +| 65102| 192.168.255.6 | + +| BGP Tuning | +| ---------- | +| no bgp default ipv4-unicast | +| distance bgp 20 200 200 | +| graceful-restart restart-time 300 | +| graceful-restart | +| maximum-paths 4 ecmp 4 | + +### Router BGP Peer Groups + +#### EVPN-OVERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | evpn | +| Source | Loopback0 | +| Bfd | true | +| Ebgp multihop | 3 | +| Send community | all | +| Maximum routes | 0 (no limit) | + +#### IPv4-UNDERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Send community | all | +| Maximum routes | 12000 | + +#### MLAG-IPv4-UNDERLAY-PEER + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Remote AS | 65102 | +| Next-hop self | True | +| Send community | all | +| Maximum routes | 12000 | + +### BGP Neighbors + +| Neighbor | Remote AS | VRF | Send-community | Maximum-routes | +| -------- | --------- | --- | -------------- | -------------- | +| 10.255.251.4 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | default | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 172.31.255.24 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.26 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.28 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.30 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 192.168.255.1 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.2 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.3 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.4 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 10.255.251.4 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_APP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.4 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_DB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.4 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.4 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.4 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WEB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.4 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.4 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.4 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.4 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | + +### Router BGP EVPN Address Family + +#### Router BGP EVPN MAC-VRFs + +##### VLAN aware bundles + +| VLAN Aware Bundle | Route-Distinguisher | Both Route-Target | Import Route Target | Export Route-Target | Redistribute | VLANs | +| ----------------- | ------------------- | ----------------- | ------------------- | ------------------- | ------------ | ----- | +| Tenant_A_APP_Zone | 192.168.255.6:12 | 12:12 | - | - | learned | 130-131 | +| Tenant_A_DB_Zone | 192.168.255.6:13 | 13:13 | - | - | learned | 140-141 | +| Tenant_A_NFS | 192.168.255.6:10161 | 10161:10161 | - | - | learned | 161 | +| Tenant_A_OP_Zone | 192.168.255.6:10 | 10:10 | - | - | learned | 110-112 | +| Tenant_A_VMOTION | 192.168.255.6:55160 | 55160:55160 | - | - | learned | 160 | +| Tenant_A_WAN_Zone | 192.168.255.6:14 | 14:14 | - | - | learned | 150 | +| Tenant_A_WEB_Zone | 192.168.255.6:11 | 11:11 | - | - | learned | 120-121 | +| Tenant_B_OP_Zone | 192.168.255.6:20 | 20:20 | - | - | learned | 210-211 | +| Tenant_B_WAN_Zone | 192.168.255.6:21 | 21:21 | - | - | learned | 250 | +| Tenant_C_OP_Zone | 192.168.255.6:30 | 30:30 | - | - | learned | 310-311 | +| Tenant_C_WAN_Zone | 192.168.255.6:31 | 31:31 | - | - | learned | 350 | + +#### Router BGP EVPN VRFs + +| VRF | Route-Distinguisher | Redistribute | +| --- | ------------------- | ------------ | +| Tenant_A_APP_Zone | 192.168.255.6:12 | connected | +| Tenant_A_DB_Zone | 192.168.255.6:13 | connected | +| Tenant_A_OP_Zone | 192.168.255.6:10 | connected | +| Tenant_A_WAN_Zone | 192.168.255.6:14 | connected | +| Tenant_A_WEB_Zone | 192.168.255.6:11 | connected | +| Tenant_B_OP_Zone | 192.168.255.6:20 | connected | +| Tenant_B_WAN_Zone | 192.168.255.6:21 | connected | +| Tenant_C_OP_Zone | 192.168.255.6:30 | connected | +| Tenant_C_WAN_Zone | 192.168.255.6:31 | connected | + +### Router BGP Device Configuration + +```eos +! +router bgp 65102 + router-id 192.168.255.6 + no bgp default ipv4-unicast + distance bgp 20 200 200 + graceful-restart restart-time 300 + graceful-restart + maximum-paths 4 ecmp 4 + neighbor EVPN-OVERLAY-PEERS peer group + neighbor EVPN-OVERLAY-PEERS update-source Loopback0 + neighbor EVPN-OVERLAY-PEERS bfd + neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 + neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== + neighbor EVPN-OVERLAY-PEERS send-community + neighbor EVPN-OVERLAY-PEERS maximum-routes 0 + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER peer group + neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65102 + neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self + neighbor MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ== + neighbor MLAG-IPv4-UNDERLAY-PEER send-community + neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in + neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.4 description DC1_LEAF-2A + neighbor 172.31.255.24 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.24 remote-as 65001 + neighbor 172.31.255.24 description DC1_SPINE-1_Ethernet4 + neighbor 172.31.255.26 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.26 remote-as 65001 + neighbor 172.31.255.26 description DC1_SPINE-2_Ethernet4 + neighbor 172.31.255.28 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.28 remote-as 65001 + neighbor 172.31.255.28 description DC1_SPINE-3_Ethernet4 + neighbor 172.31.255.30 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.30 remote-as 65001 + neighbor 172.31.255.30 description DC1_SPINE-4_Ethernet4 + neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.1 remote-as 65001 + neighbor 192.168.255.1 description DC1_SPINE-1 + neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.2 remote-as 65001 + neighbor 192.168.255.2 description DC1_SPINE-2 + neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.3 remote-as 65001 + neighbor 192.168.255.3 description DC1_SPINE-3 + neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.4 remote-as 65001 + neighbor 192.168.255.4 description DC1_SPINE-4 + redistribute connected route-map RM-CONN-2-BGP + ! + vlan-aware-bundle Tenant_A_APP_Zone + rd 192.168.255.6:12 + route-target both 12:12 + redistribute learned + vlan 130-131 + ! + vlan-aware-bundle Tenant_A_DB_Zone + rd 192.168.255.6:13 + route-target both 13:13 + redistribute learned + vlan 140-141 + ! + vlan-aware-bundle Tenant_A_NFS + rd 192.168.255.6:10161 + route-target both 10161:10161 + redistribute learned + vlan 161 + ! + vlan-aware-bundle Tenant_A_OP_Zone + rd 192.168.255.6:10 + route-target both 10:10 + redistribute learned + vlan 110-112 + ! + vlan-aware-bundle Tenant_A_VMOTION + rd 192.168.255.6:55160 + route-target both 55160:55160 + redistribute learned + vlan 160 + ! + vlan-aware-bundle Tenant_A_WAN_Zone + rd 192.168.255.6:14 + route-target both 14:14 + redistribute learned + vlan 150 + ! + vlan-aware-bundle Tenant_A_WEB_Zone + rd 192.168.255.6:11 + route-target both 11:11 + redistribute learned + vlan 120-121 + ! + vlan-aware-bundle Tenant_B_OP_Zone + rd 192.168.255.6:20 + route-target both 20:20 + redistribute learned + vlan 210-211 + ! + vlan-aware-bundle Tenant_B_WAN_Zone + rd 192.168.255.6:21 + route-target both 21:21 + redistribute learned + vlan 250 + ! + vlan-aware-bundle Tenant_C_OP_Zone + rd 192.168.255.6:30 + route-target both 30:30 + redistribute learned + vlan 310-311 + ! + vlan-aware-bundle Tenant_C_WAN_Zone + rd 192.168.255.6:31 + route-target both 31:31 + redistribute learned + vlan 350 + ! + address-family evpn + neighbor EVPN-OVERLAY-PEERS activate + ! + address-family ipv4 + no neighbor EVPN-OVERLAY-PEERS activate + neighbor IPv4-UNDERLAY-PEERS activate + neighbor MLAG-IPv4-UNDERLAY-PEER activate + ! + vrf Tenant_A_APP_Zone + rd 192.168.255.6:12 + route-target import evpn 12:12 + route-target export evpn 12:12 + router-id 192.168.255.6 + neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_DB_Zone + rd 192.168.255.6:13 + route-target import evpn 13:13 + route-target export evpn 13:13 + router-id 192.168.255.6 + neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_OP_Zone + rd 192.168.255.6:10 + route-target import evpn 10:10 + route-target export evpn 10:10 + router-id 192.168.255.6 + neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WAN_Zone + rd 192.168.255.6:14 + route-target import evpn 14:14 + route-target export evpn 14:14 + router-id 192.168.255.6 + neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WEB_Zone + rd 192.168.255.6:11 + route-target import evpn 11:11 + route-target export evpn 11:11 + router-id 192.168.255.6 + neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_OP_Zone + rd 192.168.255.6:20 + route-target import evpn 20:20 + route-target export evpn 20:20 + router-id 192.168.255.6 + neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_WAN_Zone + rd 192.168.255.6:21 + route-target import evpn 21:21 + route-target export evpn 21:21 + router-id 192.168.255.6 + neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_OP_Zone + rd 192.168.255.6:30 + route-target import evpn 30:30 + route-target export evpn 30:30 + router-id 192.168.255.6 + neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_WAN_Zone + rd 192.168.255.6:31 + route-target import evpn 31:31 + route-target export evpn 31:31 + router-id 192.168.255.6 + neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected +``` + +# BFD + +## Router BFD + +### Router BFD Multihop Summary + +| Interval | Minimum RX | Multiplier | +| -------- | ---------- | ---------- | +| 1200 | 1200 | 3 | + +### Router BFD Multihop Device Configuration + +```eos +! +router bfd + multihop interval 1200 min-rx 1200 multiplier 3 +``` + +# Multicast + +## IP IGMP Snooping + +### IP IGMP Snooping Summary + +IGMP snooping is globally enabled. + + +### IP IGMP Snooping Device Configuration + +```eos +``` + +# Filters + +## Prefix-lists + +### Prefix-lists Summary + +#### PL-LOOPBACKS-EVPN-OVERLAY + +| Sequence | Action | +| -------- | ------ | +| 10 | permit 192.168.255.0/24 eq 32 | +| 20 | permit 192.168.254.0/24 eq 32 | + +### Prefix-lists Device Configuration + +```eos +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +``` + +## Route-maps + +### Route-maps Summary + +#### RM-CONN-2-BGP + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY | + +#### RM-MLAG-PEER-IN + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | set origin incomplete | + +### Route-maps Device Configuration + +```eos +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY +! +route-map RM-MLAG-PEER-IN permit 10 + description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing + set origin incomplete +``` + +# ACL + +# VRF Instances + +## VRF Instances Summary + +| VRF Name | IP Routing | +| -------- | ---------- | +| MGMT | disabled | +| Tenant_A_APP_Zone | enabled | +| Tenant_A_DB_Zone | enabled | +| Tenant_A_OP_Zone | enabled | +| Tenant_A_WAN_Zone | enabled | +| Tenant_A_WEB_Zone | enabled | +| Tenant_B_OP_Zone | enabled | +| Tenant_B_WAN_Zone | enabled | +| Tenant_C_OP_Zone | enabled | +| Tenant_C_WAN_Zone | enabled | + +## VRF Instances Device Configuration + +```eos +! +vrf instance MGMT +! +vrf instance Tenant_A_APP_Zone +! +vrf instance Tenant_A_DB_Zone +! +vrf instance Tenant_A_OP_Zone +! +vrf instance Tenant_A_WAN_Zone +! +vrf instance Tenant_A_WEB_Zone +! +vrf instance Tenant_B_OP_Zone +! +vrf instance Tenant_B_WAN_Zone +! +vrf instance Tenant_C_OP_Zone +! +vrf instance Tenant_C_WAN_Zone +``` + +# Virtual Source NAT + +## Virtual Source NAT Summary + +| Source NAT VRF | Source NAT IP Address | +| -------------- | --------------------- | +| Tenant_A_OP_Zone | 10.255.1.6 | + +## Virtual Source NAT Configuration + +```eos +! +ip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.6 +``` + +# Quality Of Service diff --git a/inventory/documentation/devices/DC1_LEAF-3A.md b/inventory/documentation/devices/DC1_LEAF-3A.md new file mode 100644 index 000000000..9f87840f5 --- /dev/null +++ b/inventory/documentation/devices/DC1_LEAF-3A.md @@ -0,0 +1,1382 @@ +# DC1_LEAF-3A +# Table of Contents + + +- [Management](#management) + - [Management Interfaces](#management-interfaces) + - [Name Servers](#name-servers) + - [NTP](#ntp) + - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Local Users](#local-users) +- [Monitoring](#monitoring) + - [TerminAttr Daemon](#terminattr-daemon) +- [MLAG](#mlag) + - [MLAG Summary](#mlag-summary) + - [MLAG Device Configuration](#mlag-device-configuration) +- [Spanning Tree](#spanning-tree) + - [Spanning Tree Summary](#spanning-tree-summary) + - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) +- [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) + - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) + - [Internal VLAN Allocation Policy Configuration](#internal-vlan-allocation-policy-configuration) +- [VLANs](#vlans) + - [VLANs Summary](#vlans-summary) + - [VLANs Device Configuration](#vlans-device-configuration) +- [Interfaces](#interfaces) + - [Ethernet Interfaces](#ethernet-interfaces) + - [Port-Channel Interfaces](#port-channel-interfaces) + - [Loopback Interfaces](#loopback-interfaces) + - [VLAN Interfaces](#vlan-interfaces) + - [VXLAN Interface](#vxlan-interface) +- [Routing](#routing) + - [Service Routing Protocols Model](#service-routing-protocols-model) + - [Virtual Router MAC Address](#virtual-router-mac-address) + - [IP Routing](#ip-routing) + - [IPv6 Routing](#ipv6-routing) + - [Static Routes](#static-routes) + - [Router BGP](#router-bgp) +- [BFD](#bfd) + - [Router BFD](#router-bfd) +- [Multicast](#multicast) + - [IP IGMP Snooping](#ip-igmp-snooping) +- [Filters](#filters) + - [Prefix-lists](#prefix-lists) + - [Route-maps](#route-maps) +- [ACL](#acl) +- [VRF Instances](#vrf-instances) + - [VRF Instances Summary](#vrf-instances-summary) + - [VRF Instances Device Configuration](#vrf-instances-device-configuration) +- [Virtual Source NAT](#virtual-source-nat) + - [Virtual Source NAT Summary](#virtual-source-nat-summary) + - [Virtual Source NAT Configuration](#virtual-source-nat-configuration) +- [Quality Of Service](#quality-of-service) + + +# Management + +## Management Interfaces + +### Management Interfaces Summary + +#### IPv4 + +| Management Interface | description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | oob_management | oob | MGMT | 172.16.47.35/24 | 172.16.47.1 | + +#### IPv6 + +| Management Interface | description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | oob_management | oob | MGMT | - | - | + +### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description oob_management + no shutdown + vrf MGMT + ip address 172.16.47.35/24 +``` + +## Name Servers + +### Name Servers Summary + +| Name Server | Source VRF | +| ----------- | ---------- | +| 172.16.47.12 | MGMT | +| 8.8.8.8 | MGMT | + +### Name Servers Device Configuration + +```eos +ip name-server vrf MGMT 8.8.8.8 +ip name-server vrf MGMT 172.16.47.12 +``` + +## NTP + +### NTP Summary + +#### NTP Local Interface + +| Interface | VRF | +| --------- | --- | +| Management1 | MGMT | + +#### NTP Servers + +| Server | VRF | Preferred | Burst | iBurst | Version | Min Poll | Max Poll | Local-interface | Key | +| ------ | --- | --------- | ----- | ------ | ------- | -------- | -------- | --------------- | --- | +| time.google.com | MGMT | True | - | - | - | - | - | - | - | + +### NTP Device Configuration + +```eos +! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT time.google.com prefer +``` + +## Management API HTTP + +### Management API HTTP Summary + +| HTTP | HTTPS | +| ---------- | ---------- | +| default | true | + +### Management API VRF Access + +| VRF Name | IPv4 ACL | IPv6 ACL | +| -------- | -------- | -------- | +| MGMT | - | - | + + +### Management API HTTP Configuration + +```eos +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +``` + +# Authentication + +## Local Users + +### Local Users Summary + +| User | Privilege | Role | +| ---- | --------- | ---- | +| admin | 15 | network-admin | +| ansible | 15 | network-admin | +| cvpadmin | 15 | network-admin | + +### Local Users Device Configuration + +```eos +! +username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 +username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +``` + +# Monitoring + +## TerminAttr Daemon + +### TerminAttr Daemon Summary + +| CV Compression | CloudVision Servers | VRF | Authentication | Smash Excludes | Ingest Exclude | Bypass AAA | +| -------------- | ------------------- | --- | -------------- | -------------- | -------------- | ---------- | +| gzip | 172.16.47.11:9910 | MGMT | key,@rista123! | ale,flexCounter,hardware,kni,pulse,strata | /Sysdb/cell/1/agent,/Sysdb/cell/2/agent | False | + +### TerminAttr Daemon Device Configuration + +```eos +! +daemon TerminAttr + exec /usr/bin/TerminAttr -cvaddr=172.16.47.11:9910 -cvauth=key,@rista123! -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs + no shutdown +``` + +# MLAG + +## MLAG Summary + +| Domain-id | Local-interface | Peer-address | Peer-link | +| --------- | --------------- | ------------ | --------- | +| DC1_LEAF3 | Vlan4094 | 10.255.252.9 | Port-Channel5 | + +Dual primary detection is disabled. + +## MLAG Device Configuration + +```eos +! +mlag configuration + domain-id DC1_LEAF3 + local-interface Vlan4094 + peer-address 10.255.252.9 + peer-link Port-Channel5 + reload-delay mlag 300 + reload-delay non-mlag 330 +``` + +# Spanning Tree + +## Spanning Tree Summary + +STP mode: **mstp** + +### MSTP Instance and Priority + +| Instance(s) | Priority | +| -------- | -------- | +| 0 | 16384 | + +### Global Spanning-Tree Settings + +Spanning Tree disabled for VLANs: **4093-4094** + +## Spanning Tree Device Configuration + +```eos +! +spanning-tree mode mstp +no spanning-tree vlan-id 4093-4094 +spanning-tree mst 0 priority 16384 +``` + +# Internal VLAN Allocation Policy + +## Internal VLAN Allocation Policy Summary + +| Policy Allocation | Range Beginning | Range Ending | +| ------------------| --------------- | ------------ | +| ascending | 1006 | 1199 | + +## Internal VLAN Allocation Policy Configuration + +```eos +! +vlan internal order ascending range 1006 1199 +``` + +# VLANs + +## VLANs Summary + +| VLAN ID | Name | Trunk Groups | +| ------- | ---- | ------------ | +| 110 | Tenant_A_OP_Zone_1 | - | +| 111 | Tenant_A_OP_Zone_2 | - | +| 112 | Tenant_A_OP_Zone_3 | - | +| 120 | Tenant_A_WEB_Zone_1 | - | +| 121 | Tenant_A_WEBZone_2 | - | +| 130 | Tenant_A_APP_Zone_1 | - | +| 131 | Tenant_A_APP_Zone_2 | - | +| 140 | Tenant_A_DB_BZone_1 | - | +| 141 | Tenant_A_DB_Zone_2 | - | +| 150 | Tenant_A_WAN_Zone_1 | - | +| 160 | Tenant_A_VMOTION | - | +| 161 | Tenant_A_NFS | - | +| 210 | Tenant_B_OP_Zone_1 | - | +| 211 | Tenant_B_OP_Zone_2 | - | +| 250 | Tenant_B_WAN_Zone_1 | - | +| 310 | Tenant_C_OP_Zone_1 | - | +| 311 | Tenant_C_OP_Zone_2 | - | +| 350 | Tenant_C_WAN_Zone_1 | - | +| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | +| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | +| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | +| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | +| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | +| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | +| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | +| 3029 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | +| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | +| 4094 | MLAG_PEER | MLAG | + +## VLANs Device Configuration + +```eos +! +vlan 110 + name Tenant_A_OP_Zone_1 +! +vlan 111 + name Tenant_A_OP_Zone_2 +! +vlan 112 + name Tenant_A_OP_Zone_3 +! +vlan 120 + name Tenant_A_WEB_Zone_1 +! +vlan 121 + name Tenant_A_WEBZone_2 +! +vlan 130 + name Tenant_A_APP_Zone_1 +! +vlan 131 + name Tenant_A_APP_Zone_2 +! +vlan 140 + name Tenant_A_DB_BZone_1 +! +vlan 141 + name Tenant_A_DB_Zone_2 +! +vlan 150 + name Tenant_A_WAN_Zone_1 +! +vlan 160 + name Tenant_A_VMOTION +! +vlan 161 + name Tenant_A_NFS +! +vlan 210 + name Tenant_B_OP_Zone_1 +! +vlan 211 + name Tenant_B_OP_Zone_2 +! +vlan 250 + name Tenant_B_WAN_Zone_1 +! +vlan 310 + name Tenant_C_OP_Zone_1 +! +vlan 311 + name Tenant_C_OP_Zone_2 +! +vlan 350 + name Tenant_C_WAN_Zone_1 +! +vlan 3009 + name MLAG_iBGP_Tenant_A_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3010 + name MLAG_iBGP_Tenant_A_WEB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3011 + name MLAG_iBGP_Tenant_A_APP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3012 + name MLAG_iBGP_Tenant_A_DB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3013 + name MLAG_iBGP_Tenant_A_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3019 + name MLAG_iBGP_Tenant_B_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3020 + name MLAG_iBGP_Tenant_B_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3029 + name MLAG_iBGP_Tenant_C_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3030 + name MLAG_iBGP_Tenant_C_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 4093 + name LEAF_PEER_L3 + trunk group LEAF_PEER_L3 +! +vlan 4094 + name MLAG_PEER + trunk group MLAG +``` + +# Interfaces + +## Ethernet Interfaces + +### Ethernet Interfaces Summary + +#### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | +| --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | +| Ethernet5 | MLAG_PEER_DC1_LEAF-3B_Ethernet5 | *trunk | *2-4094 | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | + +*Inherited from Port-Channel Interface + +#### IPv4 + +| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1_SPINE-1_Ethernet5 | routed | - | 172.31.255.33/31 | default | 9000 | false | - | - | +| Ethernet2 | P2P_LINK_TO_DC1_SPINE-2_Ethernet5 | routed | - | 172.31.255.35/31 | default | 9000 | false | - | - | +| Ethernet3 | P2P_LINK_TO_DC1_SPINE-3_Ethernet5 | routed | - | 172.31.255.37/31 | default | 9000 | false | - | - | +| Ethernet4 | P2P_LINK_TO_DC1_SPINE-4_Ethernet5 | routed | - | 172.31.255.39/31 | default | 9000 | false | - | - | + +### Ethernet Interfaces Device Configuration + +```eos +! +interface Ethernet1 + description P2P_LINK_TO_DC1_SPINE-1_Ethernet5 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.33/31 +! +interface Ethernet2 + description P2P_LINK_TO_DC1_SPINE-2_Ethernet5 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.35/31 +! +interface Ethernet3 + description P2P_LINK_TO_DC1_SPINE-3_Ethernet5 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.37/31 +! +interface Ethernet4 + description P2P_LINK_TO_DC1_SPINE-4_Ethernet5 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.39/31 +! +interface Ethernet5 + description MLAG_PEER_DC1_LEAF-3B_Ethernet5 + no shutdown + channel-group 5 mode active +``` + +## Port-Channel Interfaces + +### Port-Channel Interfaces Summary + +#### L2 + +| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_PEER_DC1_LEAF-3B_Po5 | switched | trunk | 2-4094 | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | + +### Port-Channel Interfaces Device Configuration + +```eos +! +interface Port-Channel5 + description MLAG_PEER_DC1_LEAF-3B_Po5 + no shutdown + switchport + switchport trunk allowed vlan 2-4094 + switchport mode trunk + switchport trunk group LEAF_PEER_L3 + switchport trunk group MLAG +``` + +## Loopback Interfaces + +### Loopback Interfaces Summary + +#### IPv4 + +| Interface | Description | VRF | IP Address | +| --------- | ----------- | --- | ---------- | +| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.7/32 | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.7/32 | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.7/32 | + +#### IPv6 + +| Interface | Description | VRF | IPv6 Address | +| --------- | ----------- | --- | ------------ | +| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | + + +### Loopback Interfaces Device Configuration + +```eos +! +interface Loopback0 + description EVPN_Overlay_Peering + no shutdown + ip address 192.168.255.7/32 +! +interface Loopback1 + description VTEP_VXLAN_Tunnel_Source + no shutdown + ip address 192.168.254.7/32 +! +interface Loopback100 + description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS + no shutdown + vrf Tenant_A_OP_Zone + ip address 10.255.1.7/32 +``` + +## VLAN Interfaces + +### VLAN Interfaces Summary + +| Interface | Description | VRF | MTU | Shutdown | +| --------- | ----------- | --- | ---- | -------- | +| Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | false | +| Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | false | +| Vlan112 | Tenant_A_OP_Zone_3 | Tenant_A_OP_Zone | - | false | +| Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | false | +| Vlan121 | Tenant_A_WEBZone_2 | Tenant_A_WEB_Zone | - | false | +| Vlan130 | Tenant_A_APP_Zone_1 | Tenant_A_APP_Zone | - | false | +| Vlan131 | Tenant_A_APP_Zone_2 | Tenant_A_APP_Zone | - | false | +| Vlan140 | Tenant_A_DB_BZone_1 | Tenant_A_DB_Zone | - | false | +| Vlan141 | Tenant_A_DB_Zone_2 | Tenant_A_DB_Zone | - | false | +| Vlan150 | Tenant_A_WAN_Zone_1 | Tenant_A_WAN_Zone | - | false | +| Vlan210 | Tenant_B_OP_Zone_1 | Tenant_B_OP_Zone | - | false | +| Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | false | +| Vlan250 | Tenant_B_WAN_Zone_1 | Tenant_B_WAN_Zone | - | false | +| Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | false | +| Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | false | +| Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | false | +| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 9000 | false | +| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 9000 | false | +| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 9000 | false | +| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 9000 | false | +| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 9000 | false | +| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 9000 | false | +| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 9000 | false | +| Vlan3029 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 9000 | false | +| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 9000 | false | +| Vlan4093 | MLAG_PEER_L3_PEERING | default | 9000 | false | +| Vlan4094 | MLAG_PEER | default | 9000 | false | + +#### IPv4 + +| Interface | VRF | IP Address | IP Address Virtual | IP Router Virtual Address | VRRP | ACL In | ACL Out | +| --------- | --- | ---------- | ------------------ | ------------------------- | ---- | ------ | ------- | +| Vlan110 | Tenant_A_OP_Zone | - | 10.1.10.1/24 | - | - | - | - | +| Vlan111 | Tenant_A_OP_Zone | - | 10.1.11.1/24 | - | - | - | - | +| Vlan112 | Tenant_A_OP_Zone | - | 10.1.12.254/24 | - | - | - | - | +| Vlan120 | Tenant_A_WEB_Zone | - | - | - | - | - | - | +| Vlan121 | Tenant_A_WEB_Zone | - | 10.1.21.1/24 | - | - | - | - | +| Vlan130 | Tenant_A_APP_Zone | - | - | - | - | - | - | +| Vlan131 | Tenant_A_APP_Zone | - | 10.1.31.254/24 | - | - | - | - | +| Vlan140 | Tenant_A_DB_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan141 | Tenant_A_DB_Zone | - | 10.1.41.1/24 | - | - | - | - | +| Vlan150 | Tenant_A_WAN_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan210 | Tenant_B_OP_Zone | - | - | - | - | - | - | +| Vlan211 | Tenant_B_OP_Zone | - | 10.2.11.1/24 | - | - | - | - | +| Vlan250 | Tenant_B_WAN_Zone | - | 10.2.50.1/24 | - | - | - | - | +| Vlan310 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan311 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan350 | Tenant_C_WAN_Zone | - | - | - | - | - | - | +| Vlan3009 | Tenant_A_OP_Zone | 10.255.251.8/31 | - | - | - | - | - | +| Vlan3010 | Tenant_A_WEB_Zone | 10.255.251.8/31 | - | - | - | - | - | +| Vlan3011 | Tenant_A_APP_Zone | 10.255.251.8/31 | - | - | - | - | - | +| Vlan3012 | Tenant_A_DB_Zone | 10.255.251.8/31 | - | - | - | - | - | +| Vlan3013 | Tenant_A_WAN_Zone | 10.255.251.8/31 | - | - | - | - | - | +| Vlan3019 | Tenant_B_OP_Zone | 10.255.251.8/31 | - | - | - | - | - | +| Vlan3020 | Tenant_B_WAN_Zone | 10.255.251.8/31 | - | - | - | - | - | +| Vlan3029 | Tenant_C_OP_Zone | 10.255.251.8/31 | - | - | - | - | - | +| Vlan3030 | Tenant_C_WAN_Zone | 10.255.251.8/31 | - | - | - | - | - | +| Vlan4093 | default | 10.255.251.8/31 | - | - | - | - | - | +| Vlan4094 | default | 10.255.252.8/31 | - | - | - | - | - | + + +### VLAN Interfaces Device Configuration + +```eos +! +interface Vlan110 + description Tenant_A_OP_Zone_1 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.10.1/24 +! +interface Vlan111 + description Tenant_A_OP_Zone_2 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.11.1/24 +! +interface Vlan112 + description Tenant_A_OP_Zone_3 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.12.254/24 +! +interface Vlan120 + description Tenant_A_WEB_Zone_1 + no shutdown + vrf Tenant_A_WEB_Zone +! +interface Vlan121 + description Tenant_A_WEBZone_2 + no shutdown + vrf Tenant_A_WEB_Zone + ip address virtual 10.1.21.1/24 +! +interface Vlan130 + description Tenant_A_APP_Zone_1 + no shutdown + vrf Tenant_A_APP_Zone +! +interface Vlan131 + description Tenant_A_APP_Zone_2 + no shutdown + vrf Tenant_A_APP_Zone + ip address virtual 10.1.31.254/24 +! +interface Vlan140 + description Tenant_A_DB_BZone_1 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan141 + description Tenant_A_DB_Zone_2 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.41.1/24 +! +interface Vlan150 + description Tenant_A_WAN_Zone_1 + no shutdown + vrf Tenant_A_WAN_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan210 + description Tenant_B_OP_Zone_1 + no shutdown + vrf Tenant_B_OP_Zone +! +interface Vlan211 + description Tenant_B_OP_Zone_2 + no shutdown + vrf Tenant_B_OP_Zone + ip address virtual 10.2.11.1/24 +! +interface Vlan250 + description Tenant_B_WAN_Zone_1 + no shutdown + vrf Tenant_B_WAN_Zone + ip address virtual 10.2.50.1/24 +! +interface Vlan310 + description Tenant_C_OP_Zone_1 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan311 + description Tenant_C_OP_Zone_2 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan350 + description Tenant_C_WAN_Zone_1 + no shutdown + vrf Tenant_C_WAN_Zone +! +interface Vlan3009 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_OP_Zone + ip address 10.255.251.8/31 +! +interface Vlan3010 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WEB_Zone + ip address 10.255.251.8/31 +! +interface Vlan3011 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_APP_Zone + ip address 10.255.251.8/31 +! +interface Vlan3012 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_DB_Zone + ip address 10.255.251.8/31 +! +interface Vlan3013 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WAN_Zone + ip address 10.255.251.8/31 +! +interface Vlan3019 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_B_OP_Zone + ip address 10.255.251.8/31 +! +interface Vlan3020 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_B_WAN_Zone + ip address 10.255.251.8/31 +! +interface Vlan3029 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_C_OP_Zone + ip address 10.255.251.8/31 +! +interface Vlan3030 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_C_WAN_Zone + ip address 10.255.251.8/31 +! +interface Vlan4093 + description MLAG_PEER_L3_PEERING + no shutdown + mtu 9000 + ip address 10.255.251.8/31 +! +interface Vlan4094 + description MLAG_PEER + no shutdown + mtu 9000 + no autostate + ip address 10.255.252.8/31 +``` + +## VXLAN Interface + +### VXLAN Interface Summary + +#### Source Interface: Loopback1 + +#### UDP port: 4789 + +#### EVPN MLAG Shared Router MAC : mlag-system-id + +#### VLAN to VNI and Flood List Mappings + +| VLAN | VNI | Flood List | +| ---- | --- | ---------- | +| 110 | 10110 | - | +| 111 | 50111 | - | +| 112 | 50112 | - | +| 120 | 10120 | - | +| 121 | 10121 | - | +| 130 | 10130 | - | +| 131 | 10131 | - | +| 140 | 10140 | - | +| 141 | 10141 | - | +| 150 | 10150 | - | +| 160 | 55160 | - | +| 161 | 10161 | - | +| 210 | 20210 | - | +| 211 | 20211 | - | +| 250 | 20250 | - | +| 310 | 30310 | - | +| 311 | 30311 | - | +| 350 | 30350 | - | + +#### VRF to VNI Mappings + +| VLAN | VNI | +| ---- | --- | +| Tenant_A_APP_Zone | 12 | +| Tenant_A_DB_Zone | 13 | +| Tenant_A_OP_Zone | 10 | +| Tenant_A_WAN_Zone | 14 | +| Tenant_A_WEB_Zone | 11 | +| Tenant_B_OP_Zone | 20 | +| Tenant_B_WAN_Zone | 21 | +| Tenant_C_OP_Zone | 30 | +| Tenant_C_WAN_Zone | 31 | + +### VXLAN Interface Device Configuration + +```eos +! +interface Vxlan1 + description DC1_LEAF-3A_VTEP + vxlan source-interface Loopback1 + vxlan virtual-router encapsulation mac-address mlag-system-id + vxlan udp-port 4789 + vxlan vlan 110 vni 10110 + vxlan vlan 111 vni 50111 + vxlan vlan 112 vni 50112 + vxlan vlan 120 vni 10120 + vxlan vlan 121 vni 10121 + vxlan vlan 130 vni 10130 + vxlan vlan 131 vni 10131 + vxlan vlan 140 vni 10140 + vxlan vlan 141 vni 10141 + vxlan vlan 150 vni 10150 + vxlan vlan 160 vni 55160 + vxlan vlan 161 vni 10161 + vxlan vlan 210 vni 20210 + vxlan vlan 211 vni 20211 + vxlan vlan 250 vni 20250 + vxlan vlan 310 vni 30310 + vxlan vlan 311 vni 30311 + vxlan vlan 350 vni 30350 + vxlan vrf Tenant_A_APP_Zone vni 12 + vxlan vrf Tenant_A_DB_Zone vni 13 + vxlan vrf Tenant_A_OP_Zone vni 10 + vxlan vrf Tenant_A_WAN_Zone vni 14 + vxlan vrf Tenant_A_WEB_Zone vni 11 + vxlan vrf Tenant_B_OP_Zone vni 20 + vxlan vrf Tenant_B_WAN_Zone vni 21 + vxlan vrf Tenant_C_OP_Zone vni 30 + vxlan vrf Tenant_C_WAN_Zone vni 31 +``` + +# Routing +## Service Routing Protocols Model + +Multi agent routing protocol model enabled + +```eos +! +service routing protocols model multi-agent +``` + +## Virtual Router MAC Address + +### Virtual Router MAC Address Summary + +#### Virtual Router MAC Address: 00:1c:73:00:dc:01 + +### Virtual Router MAC Address Configuration + +```eos +! +ip virtual-router mac-address 00:1c:73:00:dc:01 +``` + +## IP Routing + +### IP Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | true|| MGMT | false | +| Tenant_A_APP_Zone | true | +| Tenant_A_DB_Zone | true | +| Tenant_A_OP_Zone | true | +| Tenant_A_WAN_Zone | true | +| Tenant_A_WEB_Zone | true | +| Tenant_B_OP_Zone | true | +| Tenant_B_WAN_Zone | true | +| Tenant_C_OP_Zone | true | +| Tenant_C_WAN_Zone | true | + +### IP Routing Device Configuration + +```eos +! +ip routing +no ip routing vrf MGMT +ip routing vrf Tenant_A_APP_Zone +ip routing vrf Tenant_A_DB_Zone +ip routing vrf Tenant_A_OP_Zone +ip routing vrf Tenant_A_WAN_Zone +ip routing vrf Tenant_A_WEB_Zone +ip routing vrf Tenant_B_OP_Zone +ip routing vrf Tenant_B_WAN_Zone +ip routing vrf Tenant_C_OP_Zone +ip routing vrf Tenant_C_WAN_Zone +``` +## IPv6 Routing + +### IPv6 Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | false || MGMT | false | +| Tenant_A_APP_Zone | false | +| Tenant_A_DB_Zone | false | +| Tenant_A_OP_Zone | false | +| Tenant_A_WAN_Zone | false | +| Tenant_A_WEB_Zone | false | +| Tenant_B_OP_Zone | false | +| Tenant_B_WAN_Zone | false | +| Tenant_C_OP_Zone | false | +| Tenant_C_WAN_Zone | false | + + +## Static Routes + +### Static Routes Summary + +| VRF | Destination Prefix | Next Hop IP | Exit interface | Administrative Distance | Tag | Route Name | Metric | +| --- | ------------------ | ----------------------- | ------------------- | ----------------------------- | ----------------- | ----------------------------- | -------------- | +| MGMT | 0.0.0.0/0 | 172.16.47.1 | - | 1 | - | - | - | + +### Static Routes Device Configuration + +```eos +! +ip route vrf MGMT 0.0.0.0/0 172.16.47.1 +``` + +## Router BGP + +### Router BGP Summary + +| BGP AS | Router ID | +| ------ | --------- | +| 65103| 192.168.255.7 | + +| BGP Tuning | +| ---------- | +| no bgp default ipv4-unicast | +| distance bgp 20 200 200 | +| graceful-restart restart-time 300 | +| graceful-restart | +| maximum-paths 4 ecmp 4 | + +### Router BGP Peer Groups + +#### EVPN-OVERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | evpn | +| Source | Loopback0 | +| Bfd | true | +| Ebgp multihop | 3 | +| Send community | all | +| Maximum routes | 0 (no limit) | + +#### IPv4-UNDERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Send community | all | +| Maximum routes | 12000 | + +#### MLAG-IPv4-UNDERLAY-PEER + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Remote AS | 65103 | +| Next-hop self | True | +| Send community | all | +| Maximum routes | 12000 | + +### BGP Neighbors + +| Neighbor | Remote AS | VRF | Send-community | Maximum-routes | +| -------- | --------- | --- | -------------- | -------------- | +| 10.255.251.9 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | default | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 172.31.255.32 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.34 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.36 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.38 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 192.168.255.1 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.2 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.3 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.4 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 10.255.251.9 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_APP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.9 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_DB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.9 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.9 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.9 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WEB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.9 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.9 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.9 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.9 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | + +### Router BGP EVPN Address Family + +#### Router BGP EVPN MAC-VRFs + +##### VLAN aware bundles + +| VLAN Aware Bundle | Route-Distinguisher | Both Route-Target | Import Route Target | Export Route-Target | Redistribute | VLANs | +| ----------------- | ------------------- | ----------------- | ------------------- | ------------------- | ------------ | ----- | +| Tenant_A_APP_Zone | 192.168.255.7:12 | 12:12 | - | - | learned | 130-131 | +| Tenant_A_DB_Zone | 192.168.255.7:13 | 13:13 | - | - | learned | 140-141 | +| Tenant_A_NFS | 192.168.255.7:10161 | 10161:10161 | - | - | learned | 161 | +| Tenant_A_OP_Zone | 192.168.255.7:10 | 10:10 | - | - | learned | 110-112 | +| Tenant_A_VMOTION | 192.168.255.7:55160 | 55160:55160 | - | - | learned | 160 | +| Tenant_A_WAN_Zone | 192.168.255.7:14 | 14:14 | - | - | learned | 150 | +| Tenant_A_WEB_Zone | 192.168.255.7:11 | 11:11 | - | - | learned | 120-121 | +| Tenant_B_OP_Zone | 192.168.255.7:20 | 20:20 | - | - | learned | 210-211 | +| Tenant_B_WAN_Zone | 192.168.255.7:21 | 21:21 | - | - | learned | 250 | +| Tenant_C_OP_Zone | 192.168.255.7:30 | 30:30 | - | - | learned | 310-311 | +| Tenant_C_WAN_Zone | 192.168.255.7:31 | 31:31 | - | - | learned | 350 | + +#### Router BGP EVPN VRFs + +| VRF | Route-Distinguisher | Redistribute | +| --- | ------------------- | ------------ | +| Tenant_A_APP_Zone | 192.168.255.7:12 | connected | +| Tenant_A_DB_Zone | 192.168.255.7:13 | connected | +| Tenant_A_OP_Zone | 192.168.255.7:10 | connected | +| Tenant_A_WAN_Zone | 192.168.255.7:14 | connected | +| Tenant_A_WEB_Zone | 192.168.255.7:11 | connected | +| Tenant_B_OP_Zone | 192.168.255.7:20 | connected | +| Tenant_B_WAN_Zone | 192.168.255.7:21 | connected | +| Tenant_C_OP_Zone | 192.168.255.7:30 | connected | +| Tenant_C_WAN_Zone | 192.168.255.7:31 | connected | + +### Router BGP Device Configuration + +```eos +! +router bgp 65103 + router-id 192.168.255.7 + no bgp default ipv4-unicast + distance bgp 20 200 200 + graceful-restart restart-time 300 + graceful-restart + maximum-paths 4 ecmp 4 + neighbor EVPN-OVERLAY-PEERS peer group + neighbor EVPN-OVERLAY-PEERS update-source Loopback0 + neighbor EVPN-OVERLAY-PEERS bfd + neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 + neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== + neighbor EVPN-OVERLAY-PEERS send-community + neighbor EVPN-OVERLAY-PEERS maximum-routes 0 + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER peer group + neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65103 + neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self + neighbor MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ== + neighbor MLAG-IPv4-UNDERLAY-PEER send-community + neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in + neighbor 10.255.251.9 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.9 description DC1_LEAF-3B + neighbor 172.31.255.32 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.32 remote-as 65001 + neighbor 172.31.255.32 description DC1_SPINE-1_Ethernet5 + neighbor 172.31.255.34 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.34 remote-as 65001 + neighbor 172.31.255.34 description DC1_SPINE-2_Ethernet5 + neighbor 172.31.255.36 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.36 remote-as 65001 + neighbor 172.31.255.36 description DC1_SPINE-3_Ethernet5 + neighbor 172.31.255.38 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.38 remote-as 65001 + neighbor 172.31.255.38 description DC1_SPINE-4_Ethernet5 + neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.1 remote-as 65001 + neighbor 192.168.255.1 description DC1_SPINE-1 + neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.2 remote-as 65001 + neighbor 192.168.255.2 description DC1_SPINE-2 + neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.3 remote-as 65001 + neighbor 192.168.255.3 description DC1_SPINE-3 + neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.4 remote-as 65001 + neighbor 192.168.255.4 description DC1_SPINE-4 + redistribute connected route-map RM-CONN-2-BGP + ! + vlan-aware-bundle Tenant_A_APP_Zone + rd 192.168.255.7:12 + route-target both 12:12 + redistribute learned + vlan 130-131 + ! + vlan-aware-bundle Tenant_A_DB_Zone + rd 192.168.255.7:13 + route-target both 13:13 + redistribute learned + vlan 140-141 + ! + vlan-aware-bundle Tenant_A_NFS + rd 192.168.255.7:10161 + route-target both 10161:10161 + redistribute learned + vlan 161 + ! + vlan-aware-bundle Tenant_A_OP_Zone + rd 192.168.255.7:10 + route-target both 10:10 + redistribute learned + vlan 110-112 + ! + vlan-aware-bundle Tenant_A_VMOTION + rd 192.168.255.7:55160 + route-target both 55160:55160 + redistribute learned + vlan 160 + ! + vlan-aware-bundle Tenant_A_WAN_Zone + rd 192.168.255.7:14 + route-target both 14:14 + redistribute learned + vlan 150 + ! + vlan-aware-bundle Tenant_A_WEB_Zone + rd 192.168.255.7:11 + route-target both 11:11 + redistribute learned + vlan 120-121 + ! + vlan-aware-bundle Tenant_B_OP_Zone + rd 192.168.255.7:20 + route-target both 20:20 + redistribute learned + vlan 210-211 + ! + vlan-aware-bundle Tenant_B_WAN_Zone + rd 192.168.255.7:21 + route-target both 21:21 + redistribute learned + vlan 250 + ! + vlan-aware-bundle Tenant_C_OP_Zone + rd 192.168.255.7:30 + route-target both 30:30 + redistribute learned + vlan 310-311 + ! + vlan-aware-bundle Tenant_C_WAN_Zone + rd 192.168.255.7:31 + route-target both 31:31 + redistribute learned + vlan 350 + ! + address-family evpn + neighbor EVPN-OVERLAY-PEERS activate + ! + address-family ipv4 + no neighbor EVPN-OVERLAY-PEERS activate + neighbor IPv4-UNDERLAY-PEERS activate + neighbor MLAG-IPv4-UNDERLAY-PEER activate + ! + vrf Tenant_A_APP_Zone + rd 192.168.255.7:12 + route-target import evpn 12:12 + route-target export evpn 12:12 + router-id 192.168.255.7 + neighbor 10.255.251.9 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_DB_Zone + rd 192.168.255.7:13 + route-target import evpn 13:13 + route-target export evpn 13:13 + router-id 192.168.255.7 + neighbor 10.255.251.9 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_OP_Zone + rd 192.168.255.7:10 + route-target import evpn 10:10 + route-target export evpn 10:10 + router-id 192.168.255.7 + neighbor 10.255.251.9 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WAN_Zone + rd 192.168.255.7:14 + route-target import evpn 14:14 + route-target export evpn 14:14 + router-id 192.168.255.7 + neighbor 10.255.251.9 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WEB_Zone + rd 192.168.255.7:11 + route-target import evpn 11:11 + route-target export evpn 11:11 + router-id 192.168.255.7 + neighbor 10.255.251.9 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_OP_Zone + rd 192.168.255.7:20 + route-target import evpn 20:20 + route-target export evpn 20:20 + router-id 192.168.255.7 + neighbor 10.255.251.9 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_WAN_Zone + rd 192.168.255.7:21 + route-target import evpn 21:21 + route-target export evpn 21:21 + router-id 192.168.255.7 + neighbor 10.255.251.9 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_OP_Zone + rd 192.168.255.7:30 + route-target import evpn 30:30 + route-target export evpn 30:30 + router-id 192.168.255.7 + neighbor 10.255.251.9 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_WAN_Zone + rd 192.168.255.7:31 + route-target import evpn 31:31 + route-target export evpn 31:31 + router-id 192.168.255.7 + neighbor 10.255.251.9 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected +``` + +# BFD + +## Router BFD + +### Router BFD Multihop Summary + +| Interval | Minimum RX | Multiplier | +| -------- | ---------- | ---------- | +| 1200 | 1200 | 3 | + +### Router BFD Multihop Device Configuration + +```eos +! +router bfd + multihop interval 1200 min-rx 1200 multiplier 3 +``` + +# Multicast + +## IP IGMP Snooping + +### IP IGMP Snooping Summary + +IGMP snooping is globally enabled. + + +### IP IGMP Snooping Device Configuration + +```eos +``` + +# Filters + +## Prefix-lists + +### Prefix-lists Summary + +#### PL-LOOPBACKS-EVPN-OVERLAY + +| Sequence | Action | +| -------- | ------ | +| 10 | permit 192.168.255.0/24 eq 32 | +| 20 | permit 192.168.254.0/24 eq 32 | + +### Prefix-lists Device Configuration + +```eos +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +``` + +## Route-maps + +### Route-maps Summary + +#### RM-CONN-2-BGP + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY | + +#### RM-MLAG-PEER-IN + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | set origin incomplete | + +### Route-maps Device Configuration + +```eos +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY +! +route-map RM-MLAG-PEER-IN permit 10 + description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing + set origin incomplete +``` + +# ACL + +# VRF Instances + +## VRF Instances Summary + +| VRF Name | IP Routing | +| -------- | ---------- | +| MGMT | disabled | +| Tenant_A_APP_Zone | enabled | +| Tenant_A_DB_Zone | enabled | +| Tenant_A_OP_Zone | enabled | +| Tenant_A_WAN_Zone | enabled | +| Tenant_A_WEB_Zone | enabled | +| Tenant_B_OP_Zone | enabled | +| Tenant_B_WAN_Zone | enabled | +| Tenant_C_OP_Zone | enabled | +| Tenant_C_WAN_Zone | enabled | + +## VRF Instances Device Configuration + +```eos +! +vrf instance MGMT +! +vrf instance Tenant_A_APP_Zone +! +vrf instance Tenant_A_DB_Zone +! +vrf instance Tenant_A_OP_Zone +! +vrf instance Tenant_A_WAN_Zone +! +vrf instance Tenant_A_WEB_Zone +! +vrf instance Tenant_B_OP_Zone +! +vrf instance Tenant_B_WAN_Zone +! +vrf instance Tenant_C_OP_Zone +! +vrf instance Tenant_C_WAN_Zone +``` + +# Virtual Source NAT + +## Virtual Source NAT Summary + +| Source NAT VRF | Source NAT IP Address | +| -------------- | --------------------- | +| Tenant_A_OP_Zone | 10.255.1.7 | + +## Virtual Source NAT Configuration + +```eos +! +ip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.7 +``` + +# Quality Of Service diff --git a/inventory/documentation/devices/DC1_LEAF-3B.md b/inventory/documentation/devices/DC1_LEAF-3B.md new file mode 100644 index 000000000..6efd7689c --- /dev/null +++ b/inventory/documentation/devices/DC1_LEAF-3B.md @@ -0,0 +1,1382 @@ +# DC1_LEAF-3B +# Table of Contents + + +- [Management](#management) + - [Management Interfaces](#management-interfaces) + - [Name Servers](#name-servers) + - [NTP](#ntp) + - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Local Users](#local-users) +- [Monitoring](#monitoring) + - [TerminAttr Daemon](#terminattr-daemon) +- [MLAG](#mlag) + - [MLAG Summary](#mlag-summary) + - [MLAG Device Configuration](#mlag-device-configuration) +- [Spanning Tree](#spanning-tree) + - [Spanning Tree Summary](#spanning-tree-summary) + - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) +- [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) + - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) + - [Internal VLAN Allocation Policy Configuration](#internal-vlan-allocation-policy-configuration) +- [VLANs](#vlans) + - [VLANs Summary](#vlans-summary) + - [VLANs Device Configuration](#vlans-device-configuration) +- [Interfaces](#interfaces) + - [Ethernet Interfaces](#ethernet-interfaces) + - [Port-Channel Interfaces](#port-channel-interfaces) + - [Loopback Interfaces](#loopback-interfaces) + - [VLAN Interfaces](#vlan-interfaces) + - [VXLAN Interface](#vxlan-interface) +- [Routing](#routing) + - [Service Routing Protocols Model](#service-routing-protocols-model) + - [Virtual Router MAC Address](#virtual-router-mac-address) + - [IP Routing](#ip-routing) + - [IPv6 Routing](#ipv6-routing) + - [Static Routes](#static-routes) + - [Router BGP](#router-bgp) +- [BFD](#bfd) + - [Router BFD](#router-bfd) +- [Multicast](#multicast) + - [IP IGMP Snooping](#ip-igmp-snooping) +- [Filters](#filters) + - [Prefix-lists](#prefix-lists) + - [Route-maps](#route-maps) +- [ACL](#acl) +- [VRF Instances](#vrf-instances) + - [VRF Instances Summary](#vrf-instances-summary) + - [VRF Instances Device Configuration](#vrf-instances-device-configuration) +- [Virtual Source NAT](#virtual-source-nat) + - [Virtual Source NAT Summary](#virtual-source-nat-summary) + - [Virtual Source NAT Configuration](#virtual-source-nat-configuration) +- [Quality Of Service](#quality-of-service) + + +# Management + +## Management Interfaces + +### Management Interfaces Summary + +#### IPv4 + +| Management Interface | description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | oob_management | oob | MGMT | 172.16.47.36/24 | 172.16.47.1 | + +#### IPv6 + +| Management Interface | description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | oob_management | oob | MGMT | - | - | + +### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description oob_management + no shutdown + vrf MGMT + ip address 172.16.47.36/24 +``` + +## Name Servers + +### Name Servers Summary + +| Name Server | Source VRF | +| ----------- | ---------- | +| 172.16.47.12 | MGMT | +| 8.8.8.8 | MGMT | + +### Name Servers Device Configuration + +```eos +ip name-server vrf MGMT 8.8.8.8 +ip name-server vrf MGMT 172.16.47.12 +``` + +## NTP + +### NTP Summary + +#### NTP Local Interface + +| Interface | VRF | +| --------- | --- | +| Management1 | MGMT | + +#### NTP Servers + +| Server | VRF | Preferred | Burst | iBurst | Version | Min Poll | Max Poll | Local-interface | Key | +| ------ | --- | --------- | ----- | ------ | ------- | -------- | -------- | --------------- | --- | +| time.google.com | MGMT | True | - | - | - | - | - | - | - | + +### NTP Device Configuration + +```eos +! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT time.google.com prefer +``` + +## Management API HTTP + +### Management API HTTP Summary + +| HTTP | HTTPS | +| ---------- | ---------- | +| default | true | + +### Management API VRF Access + +| VRF Name | IPv4 ACL | IPv6 ACL | +| -------- | -------- | -------- | +| MGMT | - | - | + + +### Management API HTTP Configuration + +```eos +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +``` + +# Authentication + +## Local Users + +### Local Users Summary + +| User | Privilege | Role | +| ---- | --------- | ---- | +| admin | 15 | network-admin | +| ansible | 15 | network-admin | +| cvpadmin | 15 | network-admin | + +### Local Users Device Configuration + +```eos +! +username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 +username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +``` + +# Monitoring + +## TerminAttr Daemon + +### TerminAttr Daemon Summary + +| CV Compression | CloudVision Servers | VRF | Authentication | Smash Excludes | Ingest Exclude | Bypass AAA | +| -------------- | ------------------- | --- | -------------- | -------------- | -------------- | ---------- | +| gzip | 172.16.47.11:9910 | MGMT | key,@rista123! | ale,flexCounter,hardware,kni,pulse,strata | /Sysdb/cell/1/agent,/Sysdb/cell/2/agent | False | + +### TerminAttr Daemon Device Configuration + +```eos +! +daemon TerminAttr + exec /usr/bin/TerminAttr -cvaddr=172.16.47.11:9910 -cvauth=key,@rista123! -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs + no shutdown +``` + +# MLAG + +## MLAG Summary + +| Domain-id | Local-interface | Peer-address | Peer-link | +| --------- | --------------- | ------------ | --------- | +| DC1_LEAF3 | Vlan4094 | 10.255.252.8 | Port-Channel5 | + +Dual primary detection is disabled. + +## MLAG Device Configuration + +```eos +! +mlag configuration + domain-id DC1_LEAF3 + local-interface Vlan4094 + peer-address 10.255.252.8 + peer-link Port-Channel5 + reload-delay mlag 300 + reload-delay non-mlag 330 +``` + +# Spanning Tree + +## Spanning Tree Summary + +STP mode: **mstp** + +### MSTP Instance and Priority + +| Instance(s) | Priority | +| -------- | -------- | +| 0 | 16384 | + +### Global Spanning-Tree Settings + +Spanning Tree disabled for VLANs: **4093-4094** + +## Spanning Tree Device Configuration + +```eos +! +spanning-tree mode mstp +no spanning-tree vlan-id 4093-4094 +spanning-tree mst 0 priority 16384 +``` + +# Internal VLAN Allocation Policy + +## Internal VLAN Allocation Policy Summary + +| Policy Allocation | Range Beginning | Range Ending | +| ------------------| --------------- | ------------ | +| ascending | 1006 | 1199 | + +## Internal VLAN Allocation Policy Configuration + +```eos +! +vlan internal order ascending range 1006 1199 +``` + +# VLANs + +## VLANs Summary + +| VLAN ID | Name | Trunk Groups | +| ------- | ---- | ------------ | +| 110 | Tenant_A_OP_Zone_1 | - | +| 111 | Tenant_A_OP_Zone_2 | - | +| 112 | Tenant_A_OP_Zone_3 | - | +| 120 | Tenant_A_WEB_Zone_1 | - | +| 121 | Tenant_A_WEBZone_2 | - | +| 130 | Tenant_A_APP_Zone_1 | - | +| 131 | Tenant_A_APP_Zone_2 | - | +| 140 | Tenant_A_DB_BZone_1 | - | +| 141 | Tenant_A_DB_Zone_2 | - | +| 150 | Tenant_A_WAN_Zone_1 | - | +| 160 | Tenant_A_VMOTION | - | +| 161 | Tenant_A_NFS | - | +| 210 | Tenant_B_OP_Zone_1 | - | +| 211 | Tenant_B_OP_Zone_2 | - | +| 250 | Tenant_B_WAN_Zone_1 | - | +| 310 | Tenant_C_OP_Zone_1 | - | +| 311 | Tenant_C_OP_Zone_2 | - | +| 350 | Tenant_C_WAN_Zone_1 | - | +| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | +| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | +| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | +| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | +| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | +| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | +| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | +| 3029 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | +| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | +| 4094 | MLAG_PEER | MLAG | + +## VLANs Device Configuration + +```eos +! +vlan 110 + name Tenant_A_OP_Zone_1 +! +vlan 111 + name Tenant_A_OP_Zone_2 +! +vlan 112 + name Tenant_A_OP_Zone_3 +! +vlan 120 + name Tenant_A_WEB_Zone_1 +! +vlan 121 + name Tenant_A_WEBZone_2 +! +vlan 130 + name Tenant_A_APP_Zone_1 +! +vlan 131 + name Tenant_A_APP_Zone_2 +! +vlan 140 + name Tenant_A_DB_BZone_1 +! +vlan 141 + name Tenant_A_DB_Zone_2 +! +vlan 150 + name Tenant_A_WAN_Zone_1 +! +vlan 160 + name Tenant_A_VMOTION +! +vlan 161 + name Tenant_A_NFS +! +vlan 210 + name Tenant_B_OP_Zone_1 +! +vlan 211 + name Tenant_B_OP_Zone_2 +! +vlan 250 + name Tenant_B_WAN_Zone_1 +! +vlan 310 + name Tenant_C_OP_Zone_1 +! +vlan 311 + name Tenant_C_OP_Zone_2 +! +vlan 350 + name Tenant_C_WAN_Zone_1 +! +vlan 3009 + name MLAG_iBGP_Tenant_A_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3010 + name MLAG_iBGP_Tenant_A_WEB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3011 + name MLAG_iBGP_Tenant_A_APP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3012 + name MLAG_iBGP_Tenant_A_DB_Zone + trunk group LEAF_PEER_L3 +! +vlan 3013 + name MLAG_iBGP_Tenant_A_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3019 + name MLAG_iBGP_Tenant_B_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3020 + name MLAG_iBGP_Tenant_B_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 3029 + name MLAG_iBGP_Tenant_C_OP_Zone + trunk group LEAF_PEER_L3 +! +vlan 3030 + name MLAG_iBGP_Tenant_C_WAN_Zone + trunk group LEAF_PEER_L3 +! +vlan 4093 + name LEAF_PEER_L3 + trunk group LEAF_PEER_L3 +! +vlan 4094 + name MLAG_PEER + trunk group MLAG +``` + +# Interfaces + +## Ethernet Interfaces + +### Ethernet Interfaces Summary + +#### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | +| --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | +| Ethernet5 | MLAG_PEER_DC1_LEAF-3A_Ethernet5 | *trunk | *2-4094 | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | + +*Inherited from Port-Channel Interface + +#### IPv4 + +| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1_SPINE-1_Ethernet6 | routed | - | 172.31.255.41/31 | default | 9000 | false | - | - | +| Ethernet2 | P2P_LINK_TO_DC1_SPINE-2_Ethernet6 | routed | - | 172.31.255.43/31 | default | 9000 | false | - | - | +| Ethernet3 | P2P_LINK_TO_DC1_SPINE-3_Ethernet6 | routed | - | 172.31.255.45/31 | default | 9000 | false | - | - | +| Ethernet4 | P2P_LINK_TO_DC1_SPINE-4_Ethernet6 | routed | - | 172.31.255.47/31 | default | 9000 | false | - | - | + +### Ethernet Interfaces Device Configuration + +```eos +! +interface Ethernet1 + description P2P_LINK_TO_DC1_SPINE-1_Ethernet6 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.41/31 +! +interface Ethernet2 + description P2P_LINK_TO_DC1_SPINE-2_Ethernet6 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.43/31 +! +interface Ethernet3 + description P2P_LINK_TO_DC1_SPINE-3_Ethernet6 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.45/31 +! +interface Ethernet4 + description P2P_LINK_TO_DC1_SPINE-4_Ethernet6 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.47/31 +! +interface Ethernet5 + description MLAG_PEER_DC1_LEAF-3A_Ethernet5 + no shutdown + channel-group 5 mode active +``` + +## Port-Channel Interfaces + +### Port-Channel Interfaces Summary + +#### L2 + +| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_PEER_DC1_LEAF-3A_Po5 | switched | trunk | 2-4094 | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | + +### Port-Channel Interfaces Device Configuration + +```eos +! +interface Port-Channel5 + description MLAG_PEER_DC1_LEAF-3A_Po5 + no shutdown + switchport + switchport trunk allowed vlan 2-4094 + switchport mode trunk + switchport trunk group LEAF_PEER_L3 + switchport trunk group MLAG +``` + +## Loopback Interfaces + +### Loopback Interfaces Summary + +#### IPv4 + +| Interface | Description | VRF | IP Address | +| --------- | ----------- | --- | ---------- | +| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.8/32 | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.7/32 | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.8/32 | + +#### IPv6 + +| Interface | Description | VRF | IPv6 Address | +| --------- | ----------- | --- | ------------ | +| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | + + +### Loopback Interfaces Device Configuration + +```eos +! +interface Loopback0 + description EVPN_Overlay_Peering + no shutdown + ip address 192.168.255.8/32 +! +interface Loopback1 + description VTEP_VXLAN_Tunnel_Source + no shutdown + ip address 192.168.254.7/32 +! +interface Loopback100 + description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS + no shutdown + vrf Tenant_A_OP_Zone + ip address 10.255.1.8/32 +``` + +## VLAN Interfaces + +### VLAN Interfaces Summary + +| Interface | Description | VRF | MTU | Shutdown | +| --------- | ----------- | --- | ---- | -------- | +| Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | false | +| Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | false | +| Vlan112 | Tenant_A_OP_Zone_3 | Tenant_A_OP_Zone | - | false | +| Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | false | +| Vlan121 | Tenant_A_WEBZone_2 | Tenant_A_WEB_Zone | - | false | +| Vlan130 | Tenant_A_APP_Zone_1 | Tenant_A_APP_Zone | - | false | +| Vlan131 | Tenant_A_APP_Zone_2 | Tenant_A_APP_Zone | - | false | +| Vlan140 | Tenant_A_DB_BZone_1 | Tenant_A_DB_Zone | - | false | +| Vlan141 | Tenant_A_DB_Zone_2 | Tenant_A_DB_Zone | - | false | +| Vlan150 | Tenant_A_WAN_Zone_1 | Tenant_A_WAN_Zone | - | false | +| Vlan210 | Tenant_B_OP_Zone_1 | Tenant_B_OP_Zone | - | false | +| Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | false | +| Vlan250 | Tenant_B_WAN_Zone_1 | Tenant_B_WAN_Zone | - | false | +| Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | false | +| Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | false | +| Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | false | +| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 9000 | false | +| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 9000 | false | +| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 9000 | false | +| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 9000 | false | +| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 9000 | false | +| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 9000 | false | +| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 9000 | false | +| Vlan3029 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 9000 | false | +| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 9000 | false | +| Vlan4093 | MLAG_PEER_L3_PEERING | default | 9000 | false | +| Vlan4094 | MLAG_PEER | default | 9000 | false | + +#### IPv4 + +| Interface | VRF | IP Address | IP Address Virtual | IP Router Virtual Address | VRRP | ACL In | ACL Out | +| --------- | --- | ---------- | ------------------ | ------------------------- | ---- | ------ | ------- | +| Vlan110 | Tenant_A_OP_Zone | - | 10.1.10.1/24 | - | - | - | - | +| Vlan111 | Tenant_A_OP_Zone | - | 10.1.11.1/24 | - | - | - | - | +| Vlan112 | Tenant_A_OP_Zone | - | 10.1.12.254/24 | - | - | - | - | +| Vlan120 | Tenant_A_WEB_Zone | - | - | - | - | - | - | +| Vlan121 | Tenant_A_WEB_Zone | - | 10.1.21.1/24 | - | - | - | - | +| Vlan130 | Tenant_A_APP_Zone | - | - | - | - | - | - | +| Vlan131 | Tenant_A_APP_Zone | - | 10.1.31.254/24 | - | - | - | - | +| Vlan140 | Tenant_A_DB_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan141 | Tenant_A_DB_Zone | - | 10.1.41.1/24 | - | - | - | - | +| Vlan150 | Tenant_A_WAN_Zone | - | 10.1.40.1/24 | - | - | - | - | +| Vlan210 | Tenant_B_OP_Zone | - | - | - | - | - | - | +| Vlan211 | Tenant_B_OP_Zone | - | 10.2.11.1/24 | - | - | - | - | +| Vlan250 | Tenant_B_WAN_Zone | - | 10.2.50.1/24 | - | - | - | - | +| Vlan310 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan311 | Tenant_C_OP_Zone | - | - | - | - | - | - | +| Vlan350 | Tenant_C_WAN_Zone | - | - | - | - | - | - | +| Vlan3009 | Tenant_A_OP_Zone | 10.255.251.9/31 | - | - | - | - | - | +| Vlan3010 | Tenant_A_WEB_Zone | 10.255.251.9/31 | - | - | - | - | - | +| Vlan3011 | Tenant_A_APP_Zone | 10.255.251.9/31 | - | - | - | - | - | +| Vlan3012 | Tenant_A_DB_Zone | 10.255.251.9/31 | - | - | - | - | - | +| Vlan3013 | Tenant_A_WAN_Zone | 10.255.251.9/31 | - | - | - | - | - | +| Vlan3019 | Tenant_B_OP_Zone | 10.255.251.9/31 | - | - | - | - | - | +| Vlan3020 | Tenant_B_WAN_Zone | 10.255.251.9/31 | - | - | - | - | - | +| Vlan3029 | Tenant_C_OP_Zone | 10.255.251.9/31 | - | - | - | - | - | +| Vlan3030 | Tenant_C_WAN_Zone | 10.255.251.9/31 | - | - | - | - | - | +| Vlan4093 | default | 10.255.251.9/31 | - | - | - | - | - | +| Vlan4094 | default | 10.255.252.9/31 | - | - | - | - | - | + + +### VLAN Interfaces Device Configuration + +```eos +! +interface Vlan110 + description Tenant_A_OP_Zone_1 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.10.1/24 +! +interface Vlan111 + description Tenant_A_OP_Zone_2 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.11.1/24 +! +interface Vlan112 + description Tenant_A_OP_Zone_3 + no shutdown + vrf Tenant_A_OP_Zone + ip address virtual 10.1.12.254/24 +! +interface Vlan120 + description Tenant_A_WEB_Zone_1 + no shutdown + vrf Tenant_A_WEB_Zone +! +interface Vlan121 + description Tenant_A_WEBZone_2 + no shutdown + vrf Tenant_A_WEB_Zone + ip address virtual 10.1.21.1/24 +! +interface Vlan130 + description Tenant_A_APP_Zone_1 + no shutdown + vrf Tenant_A_APP_Zone +! +interface Vlan131 + description Tenant_A_APP_Zone_2 + no shutdown + vrf Tenant_A_APP_Zone + ip address virtual 10.1.31.254/24 +! +interface Vlan140 + description Tenant_A_DB_BZone_1 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan141 + description Tenant_A_DB_Zone_2 + no shutdown + vrf Tenant_A_DB_Zone + ip address virtual 10.1.41.1/24 +! +interface Vlan150 + description Tenant_A_WAN_Zone_1 + no shutdown + vrf Tenant_A_WAN_Zone + ip address virtual 10.1.40.1/24 +! +interface Vlan210 + description Tenant_B_OP_Zone_1 + no shutdown + vrf Tenant_B_OP_Zone +! +interface Vlan211 + description Tenant_B_OP_Zone_2 + no shutdown + vrf Tenant_B_OP_Zone + ip address virtual 10.2.11.1/24 +! +interface Vlan250 + description Tenant_B_WAN_Zone_1 + no shutdown + vrf Tenant_B_WAN_Zone + ip address virtual 10.2.50.1/24 +! +interface Vlan310 + description Tenant_C_OP_Zone_1 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan311 + description Tenant_C_OP_Zone_2 + no shutdown + vrf Tenant_C_OP_Zone +! +interface Vlan350 + description Tenant_C_WAN_Zone_1 + no shutdown + vrf Tenant_C_WAN_Zone +! +interface Vlan3009 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_OP_Zone + ip address 10.255.251.9/31 +! +interface Vlan3010 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WEB_Zone + ip address 10.255.251.9/31 +! +interface Vlan3011 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + no shutdown + mtu 9000 + vrf Tenant_A_APP_Zone + ip address 10.255.251.9/31 +! +interface Vlan3012 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + no shutdown + mtu 9000 + vrf Tenant_A_DB_Zone + ip address 10.255.251.9/31 +! +interface Vlan3013 + description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_A_WAN_Zone + ip address 10.255.251.9/31 +! +interface Vlan3019 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_B_OP_Zone + ip address 10.255.251.9/31 +! +interface Vlan3020 + description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_B_WAN_Zone + ip address 10.255.251.9/31 +! +interface Vlan3029 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + no shutdown + mtu 9000 + vrf Tenant_C_OP_Zone + ip address 10.255.251.9/31 +! +interface Vlan3030 + description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + no shutdown + mtu 9000 + vrf Tenant_C_WAN_Zone + ip address 10.255.251.9/31 +! +interface Vlan4093 + description MLAG_PEER_L3_PEERING + no shutdown + mtu 9000 + ip address 10.255.251.9/31 +! +interface Vlan4094 + description MLAG_PEER + no shutdown + mtu 9000 + no autostate + ip address 10.255.252.9/31 +``` + +## VXLAN Interface + +### VXLAN Interface Summary + +#### Source Interface: Loopback1 + +#### UDP port: 4789 + +#### EVPN MLAG Shared Router MAC : mlag-system-id + +#### VLAN to VNI and Flood List Mappings + +| VLAN | VNI | Flood List | +| ---- | --- | ---------- | +| 110 | 10110 | - | +| 111 | 50111 | - | +| 112 | 50112 | - | +| 120 | 10120 | - | +| 121 | 10121 | - | +| 130 | 10130 | - | +| 131 | 10131 | - | +| 140 | 10140 | - | +| 141 | 10141 | - | +| 150 | 10150 | - | +| 160 | 55160 | - | +| 161 | 10161 | - | +| 210 | 20210 | - | +| 211 | 20211 | - | +| 250 | 20250 | - | +| 310 | 30310 | - | +| 311 | 30311 | - | +| 350 | 30350 | - | + +#### VRF to VNI Mappings + +| VLAN | VNI | +| ---- | --- | +| Tenant_A_APP_Zone | 12 | +| Tenant_A_DB_Zone | 13 | +| Tenant_A_OP_Zone | 10 | +| Tenant_A_WAN_Zone | 14 | +| Tenant_A_WEB_Zone | 11 | +| Tenant_B_OP_Zone | 20 | +| Tenant_B_WAN_Zone | 21 | +| Tenant_C_OP_Zone | 30 | +| Tenant_C_WAN_Zone | 31 | + +### VXLAN Interface Device Configuration + +```eos +! +interface Vxlan1 + description DC1_LEAF-3B_VTEP + vxlan source-interface Loopback1 + vxlan virtual-router encapsulation mac-address mlag-system-id + vxlan udp-port 4789 + vxlan vlan 110 vni 10110 + vxlan vlan 111 vni 50111 + vxlan vlan 112 vni 50112 + vxlan vlan 120 vni 10120 + vxlan vlan 121 vni 10121 + vxlan vlan 130 vni 10130 + vxlan vlan 131 vni 10131 + vxlan vlan 140 vni 10140 + vxlan vlan 141 vni 10141 + vxlan vlan 150 vni 10150 + vxlan vlan 160 vni 55160 + vxlan vlan 161 vni 10161 + vxlan vlan 210 vni 20210 + vxlan vlan 211 vni 20211 + vxlan vlan 250 vni 20250 + vxlan vlan 310 vni 30310 + vxlan vlan 311 vni 30311 + vxlan vlan 350 vni 30350 + vxlan vrf Tenant_A_APP_Zone vni 12 + vxlan vrf Tenant_A_DB_Zone vni 13 + vxlan vrf Tenant_A_OP_Zone vni 10 + vxlan vrf Tenant_A_WAN_Zone vni 14 + vxlan vrf Tenant_A_WEB_Zone vni 11 + vxlan vrf Tenant_B_OP_Zone vni 20 + vxlan vrf Tenant_B_WAN_Zone vni 21 + vxlan vrf Tenant_C_OP_Zone vni 30 + vxlan vrf Tenant_C_WAN_Zone vni 31 +``` + +# Routing +## Service Routing Protocols Model + +Multi agent routing protocol model enabled + +```eos +! +service routing protocols model multi-agent +``` + +## Virtual Router MAC Address + +### Virtual Router MAC Address Summary + +#### Virtual Router MAC Address: 00:1c:73:00:dc:01 + +### Virtual Router MAC Address Configuration + +```eos +! +ip virtual-router mac-address 00:1c:73:00:dc:01 +``` + +## IP Routing + +### IP Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | true|| MGMT | false | +| Tenant_A_APP_Zone | true | +| Tenant_A_DB_Zone | true | +| Tenant_A_OP_Zone | true | +| Tenant_A_WAN_Zone | true | +| Tenant_A_WEB_Zone | true | +| Tenant_B_OP_Zone | true | +| Tenant_B_WAN_Zone | true | +| Tenant_C_OP_Zone | true | +| Tenant_C_WAN_Zone | true | + +### IP Routing Device Configuration + +```eos +! +ip routing +no ip routing vrf MGMT +ip routing vrf Tenant_A_APP_Zone +ip routing vrf Tenant_A_DB_Zone +ip routing vrf Tenant_A_OP_Zone +ip routing vrf Tenant_A_WAN_Zone +ip routing vrf Tenant_A_WEB_Zone +ip routing vrf Tenant_B_OP_Zone +ip routing vrf Tenant_B_WAN_Zone +ip routing vrf Tenant_C_OP_Zone +ip routing vrf Tenant_C_WAN_Zone +``` +## IPv6 Routing + +### IPv6 Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | false || MGMT | false | +| Tenant_A_APP_Zone | false | +| Tenant_A_DB_Zone | false | +| Tenant_A_OP_Zone | false | +| Tenant_A_WAN_Zone | false | +| Tenant_A_WEB_Zone | false | +| Tenant_B_OP_Zone | false | +| Tenant_B_WAN_Zone | false | +| Tenant_C_OP_Zone | false | +| Tenant_C_WAN_Zone | false | + + +## Static Routes + +### Static Routes Summary + +| VRF | Destination Prefix | Next Hop IP | Exit interface | Administrative Distance | Tag | Route Name | Metric | +| --- | ------------------ | ----------------------- | ------------------- | ----------------------------- | ----------------- | ----------------------------- | -------------- | +| MGMT | 0.0.0.0/0 | 172.16.47.1 | - | 1 | - | - | - | + +### Static Routes Device Configuration + +```eos +! +ip route vrf MGMT 0.0.0.0/0 172.16.47.1 +``` + +## Router BGP + +### Router BGP Summary + +| BGP AS | Router ID | +| ------ | --------- | +| 65103| 192.168.255.8 | + +| BGP Tuning | +| ---------- | +| no bgp default ipv4-unicast | +| distance bgp 20 200 200 | +| graceful-restart restart-time 300 | +| graceful-restart | +| maximum-paths 4 ecmp 4 | + +### Router BGP Peer Groups + +#### EVPN-OVERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | evpn | +| Source | Loopback0 | +| Bfd | true | +| Ebgp multihop | 3 | +| Send community | all | +| Maximum routes | 0 (no limit) | + +#### IPv4-UNDERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Send community | all | +| Maximum routes | 12000 | + +#### MLAG-IPv4-UNDERLAY-PEER + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Remote AS | 65103 | +| Next-hop self | True | +| Send community | all | +| Maximum routes | 12000 | + +### BGP Neighbors + +| Neighbor | Remote AS | VRF | Send-community | Maximum-routes | +| -------- | --------- | --- | -------------- | -------------- | +| 10.255.251.8 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | default | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 172.31.255.40 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.42 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.44 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.46 | 65001 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 192.168.255.1 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.2 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.3 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.4 | 65001 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 10.255.251.8 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_APP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.8 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_DB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.8 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.8 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.8 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_A_WEB_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.8 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.8 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_B_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.8 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_OP_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | +| 10.255.251.8 | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Tenant_C_WAN_Zone | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | Inherited from peer group MLAG-IPv4-UNDERLAY-PEER | + +### Router BGP EVPN Address Family + +#### Router BGP EVPN MAC-VRFs + +##### VLAN aware bundles + +| VLAN Aware Bundle | Route-Distinguisher | Both Route-Target | Import Route Target | Export Route-Target | Redistribute | VLANs | +| ----------------- | ------------------- | ----------------- | ------------------- | ------------------- | ------------ | ----- | +| Tenant_A_APP_Zone | 192.168.255.8:12 | 12:12 | - | - | learned | 130-131 | +| Tenant_A_DB_Zone | 192.168.255.8:13 | 13:13 | - | - | learned | 140-141 | +| Tenant_A_NFS | 192.168.255.8:10161 | 10161:10161 | - | - | learned | 161 | +| Tenant_A_OP_Zone | 192.168.255.8:10 | 10:10 | - | - | learned | 110-112 | +| Tenant_A_VMOTION | 192.168.255.8:55160 | 55160:55160 | - | - | learned | 160 | +| Tenant_A_WAN_Zone | 192.168.255.8:14 | 14:14 | - | - | learned | 150 | +| Tenant_A_WEB_Zone | 192.168.255.8:11 | 11:11 | - | - | learned | 120-121 | +| Tenant_B_OP_Zone | 192.168.255.8:20 | 20:20 | - | - | learned | 210-211 | +| Tenant_B_WAN_Zone | 192.168.255.8:21 | 21:21 | - | - | learned | 250 | +| Tenant_C_OP_Zone | 192.168.255.8:30 | 30:30 | - | - | learned | 310-311 | +| Tenant_C_WAN_Zone | 192.168.255.8:31 | 31:31 | - | - | learned | 350 | + +#### Router BGP EVPN VRFs + +| VRF | Route-Distinguisher | Redistribute | +| --- | ------------------- | ------------ | +| Tenant_A_APP_Zone | 192.168.255.8:12 | connected | +| Tenant_A_DB_Zone | 192.168.255.8:13 | connected | +| Tenant_A_OP_Zone | 192.168.255.8:10 | connected | +| Tenant_A_WAN_Zone | 192.168.255.8:14 | connected | +| Tenant_A_WEB_Zone | 192.168.255.8:11 | connected | +| Tenant_B_OP_Zone | 192.168.255.8:20 | connected | +| Tenant_B_WAN_Zone | 192.168.255.8:21 | connected | +| Tenant_C_OP_Zone | 192.168.255.8:30 | connected | +| Tenant_C_WAN_Zone | 192.168.255.8:31 | connected | + +### Router BGP Device Configuration + +```eos +! +router bgp 65103 + router-id 192.168.255.8 + no bgp default ipv4-unicast + distance bgp 20 200 200 + graceful-restart restart-time 300 + graceful-restart + maximum-paths 4 ecmp 4 + neighbor EVPN-OVERLAY-PEERS peer group + neighbor EVPN-OVERLAY-PEERS update-source Loopback0 + neighbor EVPN-OVERLAY-PEERS bfd + neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 + neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== + neighbor EVPN-OVERLAY-PEERS send-community + neighbor EVPN-OVERLAY-PEERS maximum-routes 0 + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER peer group + neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65103 + neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self + neighbor MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ== + neighbor MLAG-IPv4-UNDERLAY-PEER send-community + neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in + neighbor 10.255.251.8 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.8 description DC1_LEAF-3A + neighbor 172.31.255.40 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.40 remote-as 65001 + neighbor 172.31.255.40 description DC1_SPINE-1_Ethernet6 + neighbor 172.31.255.42 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.42 remote-as 65001 + neighbor 172.31.255.42 description DC1_SPINE-2_Ethernet6 + neighbor 172.31.255.44 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.44 remote-as 65001 + neighbor 172.31.255.44 description DC1_SPINE-3_Ethernet6 + neighbor 172.31.255.46 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.46 remote-as 65001 + neighbor 172.31.255.46 description DC1_SPINE-4_Ethernet6 + neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.1 remote-as 65001 + neighbor 192.168.255.1 description DC1_SPINE-1 + neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.2 remote-as 65001 + neighbor 192.168.255.2 description DC1_SPINE-2 + neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.3 remote-as 65001 + neighbor 192.168.255.3 description DC1_SPINE-3 + neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.4 remote-as 65001 + neighbor 192.168.255.4 description DC1_SPINE-4 + redistribute connected route-map RM-CONN-2-BGP + ! + vlan-aware-bundle Tenant_A_APP_Zone + rd 192.168.255.8:12 + route-target both 12:12 + redistribute learned + vlan 130-131 + ! + vlan-aware-bundle Tenant_A_DB_Zone + rd 192.168.255.8:13 + route-target both 13:13 + redistribute learned + vlan 140-141 + ! + vlan-aware-bundle Tenant_A_NFS + rd 192.168.255.8:10161 + route-target both 10161:10161 + redistribute learned + vlan 161 + ! + vlan-aware-bundle Tenant_A_OP_Zone + rd 192.168.255.8:10 + route-target both 10:10 + redistribute learned + vlan 110-112 + ! + vlan-aware-bundle Tenant_A_VMOTION + rd 192.168.255.8:55160 + route-target both 55160:55160 + redistribute learned + vlan 160 + ! + vlan-aware-bundle Tenant_A_WAN_Zone + rd 192.168.255.8:14 + route-target both 14:14 + redistribute learned + vlan 150 + ! + vlan-aware-bundle Tenant_A_WEB_Zone + rd 192.168.255.8:11 + route-target both 11:11 + redistribute learned + vlan 120-121 + ! + vlan-aware-bundle Tenant_B_OP_Zone + rd 192.168.255.8:20 + route-target both 20:20 + redistribute learned + vlan 210-211 + ! + vlan-aware-bundle Tenant_B_WAN_Zone + rd 192.168.255.8:21 + route-target both 21:21 + redistribute learned + vlan 250 + ! + vlan-aware-bundle Tenant_C_OP_Zone + rd 192.168.255.8:30 + route-target both 30:30 + redistribute learned + vlan 310-311 + ! + vlan-aware-bundle Tenant_C_WAN_Zone + rd 192.168.255.8:31 + route-target both 31:31 + redistribute learned + vlan 350 + ! + address-family evpn + neighbor EVPN-OVERLAY-PEERS activate + ! + address-family ipv4 + no neighbor EVPN-OVERLAY-PEERS activate + neighbor IPv4-UNDERLAY-PEERS activate + neighbor MLAG-IPv4-UNDERLAY-PEER activate + ! + vrf Tenant_A_APP_Zone + rd 192.168.255.8:12 + route-target import evpn 12:12 + route-target export evpn 12:12 + router-id 192.168.255.8 + neighbor 10.255.251.8 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_DB_Zone + rd 192.168.255.8:13 + route-target import evpn 13:13 + route-target export evpn 13:13 + router-id 192.168.255.8 + neighbor 10.255.251.8 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_OP_Zone + rd 192.168.255.8:10 + route-target import evpn 10:10 + route-target export evpn 10:10 + router-id 192.168.255.8 + neighbor 10.255.251.8 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WAN_Zone + rd 192.168.255.8:14 + route-target import evpn 14:14 + route-target export evpn 14:14 + router-id 192.168.255.8 + neighbor 10.255.251.8 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_A_WEB_Zone + rd 192.168.255.8:11 + route-target import evpn 11:11 + route-target export evpn 11:11 + router-id 192.168.255.8 + neighbor 10.255.251.8 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_OP_Zone + rd 192.168.255.8:20 + route-target import evpn 20:20 + route-target export evpn 20:20 + router-id 192.168.255.8 + neighbor 10.255.251.8 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_B_WAN_Zone + rd 192.168.255.8:21 + route-target import evpn 21:21 + route-target export evpn 21:21 + router-id 192.168.255.8 + neighbor 10.255.251.8 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_OP_Zone + rd 192.168.255.8:30 + route-target import evpn 30:30 + route-target export evpn 30:30 + router-id 192.168.255.8 + neighbor 10.255.251.8 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected + ! + vrf Tenant_C_WAN_Zone + rd 192.168.255.8:31 + route-target import evpn 31:31 + route-target export evpn 31:31 + router-id 192.168.255.8 + neighbor 10.255.251.8 peer group MLAG-IPv4-UNDERLAY-PEER + redistribute connected +``` + +# BFD + +## Router BFD + +### Router BFD Multihop Summary + +| Interval | Minimum RX | Multiplier | +| -------- | ---------- | ---------- | +| 1200 | 1200 | 3 | + +### Router BFD Multihop Device Configuration + +```eos +! +router bfd + multihop interval 1200 min-rx 1200 multiplier 3 +``` + +# Multicast + +## IP IGMP Snooping + +### IP IGMP Snooping Summary + +IGMP snooping is globally enabled. + + +### IP IGMP Snooping Device Configuration + +```eos +``` + +# Filters + +## Prefix-lists + +### Prefix-lists Summary + +#### PL-LOOPBACKS-EVPN-OVERLAY + +| Sequence | Action | +| -------- | ------ | +| 10 | permit 192.168.255.0/24 eq 32 | +| 20 | permit 192.168.254.0/24 eq 32 | + +### Prefix-lists Device Configuration + +```eos +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +``` + +## Route-maps + +### Route-maps Summary + +#### RM-CONN-2-BGP + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY | + +#### RM-MLAG-PEER-IN + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | set origin incomplete | + +### Route-maps Device Configuration + +```eos +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY +! +route-map RM-MLAG-PEER-IN permit 10 + description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing + set origin incomplete +``` + +# ACL + +# VRF Instances + +## VRF Instances Summary + +| VRF Name | IP Routing | +| -------- | ---------- | +| MGMT | disabled | +| Tenant_A_APP_Zone | enabled | +| Tenant_A_DB_Zone | enabled | +| Tenant_A_OP_Zone | enabled | +| Tenant_A_WAN_Zone | enabled | +| Tenant_A_WEB_Zone | enabled | +| Tenant_B_OP_Zone | enabled | +| Tenant_B_WAN_Zone | enabled | +| Tenant_C_OP_Zone | enabled | +| Tenant_C_WAN_Zone | enabled | + +## VRF Instances Device Configuration + +```eos +! +vrf instance MGMT +! +vrf instance Tenant_A_APP_Zone +! +vrf instance Tenant_A_DB_Zone +! +vrf instance Tenant_A_OP_Zone +! +vrf instance Tenant_A_WAN_Zone +! +vrf instance Tenant_A_WEB_Zone +! +vrf instance Tenant_B_OP_Zone +! +vrf instance Tenant_B_WAN_Zone +! +vrf instance Tenant_C_OP_Zone +! +vrf instance Tenant_C_WAN_Zone +``` + +# Virtual Source NAT + +## Virtual Source NAT Summary + +| Source NAT VRF | Source NAT IP Address | +| -------------- | --------------------- | +| Tenant_A_OP_Zone | 10.255.1.8 | + +## Virtual Source NAT Configuration + +```eos +! +ip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.8 +``` + +# Quality Of Service diff --git a/inventory/documentation/devices/DC1_SPINE-1.md b/inventory/documentation/devices/DC1_SPINE-1.md new file mode 100644 index 000000000..11a1d6165 --- /dev/null +++ b/inventory/documentation/devices/DC1_SPINE-1.md @@ -0,0 +1,561 @@ +# DC1_SPINE-1 +# Table of Contents + + +- [Management](#management) + - [Management Interfaces](#management-interfaces) + - [Name Servers](#name-servers) + - [NTP](#ntp) + - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Local Users](#local-users) +- [Monitoring](#monitoring) + - [TerminAttr Daemon](#terminattr-daemon) +- [Spanning Tree](#spanning-tree) + - [Spanning Tree Summary](#spanning-tree-summary) + - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) +- [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) + - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) + - [Internal VLAN Allocation Policy Configuration](#internal-vlan-allocation-policy-configuration) +- [Interfaces](#interfaces) + - [Ethernet Interfaces](#ethernet-interfaces) + - [Loopback Interfaces](#loopback-interfaces) +- [Routing](#routing) + - [Service Routing Protocols Model](#service-routing-protocols-model) + - [IP Routing](#ip-routing) + - [IPv6 Routing](#ipv6-routing) + - [Static Routes](#static-routes) + - [Router BGP](#router-bgp) +- [BFD](#bfd) + - [Router BFD](#router-bfd) +- [Multicast](#multicast) +- [Filters](#filters) + - [Prefix-lists](#prefix-lists) + - [Route-maps](#route-maps) +- [ACL](#acl) +- [VRF Instances](#vrf-instances) + - [VRF Instances Summary](#vrf-instances-summary) + - [VRF Instances Device Configuration](#vrf-instances-device-configuration) +- [Quality Of Service](#quality-of-service) + + +# Management + +## Management Interfaces + +### Management Interfaces Summary + +#### IPv4 + +| Management Interface | description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | oob_management | oob | MGMT | 172.16.47.21/24 | 172.16.47.1 | + +#### IPv6 + +| Management Interface | description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | oob_management | oob | MGMT | - | - | + +### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description oob_management + no shutdown + vrf MGMT + ip address 172.16.47.21/24 +``` + +## Name Servers + +### Name Servers Summary + +| Name Server | Source VRF | +| ----------- | ---------- | +| 172.16.47.12 | MGMT | +| 8.8.8.8 | MGMT | + +### Name Servers Device Configuration + +```eos +ip name-server vrf MGMT 8.8.8.8 +ip name-server vrf MGMT 172.16.47.12 +``` + +## NTP + +### NTP Summary + +#### NTP Local Interface + +| Interface | VRF | +| --------- | --- | +| Management1 | MGMT | + +#### NTP Servers + +| Server | VRF | Preferred | Burst | iBurst | Version | Min Poll | Max Poll | Local-interface | Key | +| ------ | --- | --------- | ----- | ------ | ------- | -------- | -------- | --------------- | --- | +| time.google.com | MGMT | True | - | - | - | - | - | - | - | + +### NTP Device Configuration + +```eos +! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT time.google.com prefer +``` + +## Management API HTTP + +### Management API HTTP Summary + +| HTTP | HTTPS | +| ---------- | ---------- | +| default | true | + +### Management API VRF Access + +| VRF Name | IPv4 ACL | IPv6 ACL | +| -------- | -------- | -------- | +| MGMT | - | - | + + +### Management API HTTP Configuration + +```eos +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +``` + +# Authentication + +## Local Users + +### Local Users Summary + +| User | Privilege | Role | +| ---- | --------- | ---- | +| admin | 15 | network-admin | +| ansible | 15 | network-admin | +| cvpadmin | 15 | network-admin | + +### Local Users Device Configuration + +```eos +! +username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 +username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +``` + +# Monitoring + +## TerminAttr Daemon + +### TerminAttr Daemon Summary + +| CV Compression | CloudVision Servers | VRF | Authentication | Smash Excludes | Ingest Exclude | Bypass AAA | +| -------------- | ------------------- | --- | -------------- | -------------- | -------------- | ---------- | +| gzip | 172.16.47.11:9910 | MGMT | key,@rista123! | ale,flexCounter,hardware,kni,pulse,strata | /Sysdb/cell/1/agent,/Sysdb/cell/2/agent | False | + +### TerminAttr Daemon Device Configuration + +```eos +! +daemon TerminAttr + exec /usr/bin/TerminAttr -cvaddr=172.16.47.11:9910 -cvauth=key,@rista123! -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs + no shutdown +``` + +# Spanning Tree + +## Spanning Tree Summary + +STP mode: **none** + +### Global Spanning-Tree Settings + + +## Spanning Tree Device Configuration + +```eos +! +spanning-tree mode none +``` + +# Internal VLAN Allocation Policy + +## Internal VLAN Allocation Policy Summary + +| Policy Allocation | Range Beginning | Range Ending | +| ------------------| --------------- | ------------ | +| ascending | 1006 | 1199 | + +## Internal VLAN Allocation Policy Configuration + +```eos +! +vlan internal order ascending range 1006 1199 +``` + +# Interfaces + +## Ethernet Interfaces + +### Ethernet Interfaces Summary + +#### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | +| --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | + +*Inherited from Port-Channel Interface + +#### IPv4 + +| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1_LEAF-1A_Ethernet1 | routed | - | 172.31.255.0/31 | default | 9000 | false | - | - | +| Ethernet2 | P2P_LINK_TO_DC1_LEAF-1B_Ethernet1 | routed | - | 172.31.255.8/31 | default | 9000 | false | - | - | +| Ethernet3 | P2P_LINK_TO_DC1_LEAF-2A_Ethernet1 | routed | - | 172.31.255.16/31 | default | 9000 | false | - | - | +| Ethernet4 | P2P_LINK_TO_DC1_LEAF-2B_Ethernet1 | routed | - | 172.31.255.24/31 | default | 9000 | false | - | - | +| Ethernet5 | P2P_LINK_TO_DC1_LEAF-3A_Ethernet1 | routed | - | 172.31.255.32/31 | default | 9000 | false | - | - | +| Ethernet6 | P2P_LINK_TO_DC1_LEAF-3B_Ethernet1 | routed | - | 172.31.255.40/31 | default | 9000 | false | - | - | + +### Ethernet Interfaces Device Configuration + +```eos +! +interface Ethernet1 + description P2P_LINK_TO_DC1_LEAF-1A_Ethernet1 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.0/31 +! +interface Ethernet2 + description P2P_LINK_TO_DC1_LEAF-1B_Ethernet1 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.8/31 +! +interface Ethernet3 + description P2P_LINK_TO_DC1_LEAF-2A_Ethernet1 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.16/31 +! +interface Ethernet4 + description P2P_LINK_TO_DC1_LEAF-2B_Ethernet1 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.24/31 +! +interface Ethernet5 + description P2P_LINK_TO_DC1_LEAF-3A_Ethernet1 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.32/31 +! +interface Ethernet6 + description P2P_LINK_TO_DC1_LEAF-3B_Ethernet1 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.40/31 +``` + +## Loopback Interfaces + +### Loopback Interfaces Summary + +#### IPv4 + +| Interface | Description | VRF | IP Address | +| --------- | ----------- | --- | ---------- | +| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.1/32 | + +#### IPv6 + +| Interface | Description | VRF | IPv6 Address | +| --------- | ----------- | --- | ------------ | +| Loopback0 | EVPN_Overlay_Peering | default | - | + + +### Loopback Interfaces Device Configuration + +```eos +! +interface Loopback0 + description EVPN_Overlay_Peering + no shutdown + ip address 192.168.255.1/32 +``` + +# Routing +## Service Routing Protocols Model + +Multi agent routing protocol model enabled + +```eos +! +service routing protocols model multi-agent +``` + +## IP Routing + +### IP Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | true|| MGMT | false | + +### IP Routing Device Configuration + +```eos +! +ip routing +no ip routing vrf MGMT +``` +## IPv6 Routing + +### IPv6 Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | false || MGMT | false | + + +## Static Routes + +### Static Routes Summary + +| VRF | Destination Prefix | Next Hop IP | Exit interface | Administrative Distance | Tag | Route Name | Metric | +| --- | ------------------ | ----------------------- | ------------------- | ----------------------------- | ----------------- | ----------------------------- | -------------- | +| MGMT | 0.0.0.0/0 | 172.16.47.1 | - | 1 | - | - | - | + +### Static Routes Device Configuration + +```eos +! +ip route vrf MGMT 0.0.0.0/0 172.16.47.1 +``` + +## Router BGP + +### Router BGP Summary + +| BGP AS | Router ID | +| ------ | --------- | +| 65001| 192.168.255.1 | + +| BGP Tuning | +| ---------- | +| no bgp default ipv4-unicast | +| distance bgp 20 200 200 | +| graceful-restart restart-time 300 | +| graceful-restart | +| maximum-paths 4 ecmp 4 | + +### Router BGP Peer Groups + +#### EVPN-OVERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | evpn | +| Next-hop unchanged | True | +| Source | Loopback0 | +| Bfd | true | +| Ebgp multihop | 3 | +| Send community | all | +| Maximum routes | 0 (no limit) | + +#### IPv4-UNDERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Send community | all | +| Maximum routes | 12000 | + +### BGP Neighbors + +| Neighbor | Remote AS | VRF | Send-community | Maximum-routes | +| -------- | --------- | --- | -------------- | -------------- | +| 172.31.255.1 | 65101 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.9 | 65101 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.17 | 65102 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.25 | 65102 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.33 | 65103 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.41 | 65103 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 192.168.255.3 | 65101 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.4 | 65101 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.5 | 65102 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.6 | 65102 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.7 | 65103 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.8 | 65103 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | + +### Router BGP EVPN Address Family + +#### Router BGP EVPN MAC-VRFs + +#### Router BGP EVPN VRFs + +### Router BGP Device Configuration + +```eos +! +router bgp 65001 + router-id 192.168.255.1 + no bgp default ipv4-unicast + distance bgp 20 200 200 + graceful-restart restart-time 300 + graceful-restart + maximum-paths 4 ecmp 4 + neighbor EVPN-OVERLAY-PEERS peer group + neighbor EVPN-OVERLAY-PEERS next-hop-unchanged + neighbor EVPN-OVERLAY-PEERS update-source Loopback0 + neighbor EVPN-OVERLAY-PEERS bfd + neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 + neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== + neighbor EVPN-OVERLAY-PEERS send-community + neighbor EVPN-OVERLAY-PEERS maximum-routes 0 + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor 172.31.255.1 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.1 remote-as 65101 + neighbor 172.31.255.1 description DC1_LEAF-1A_Ethernet1 + neighbor 172.31.255.9 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.9 remote-as 65101 + neighbor 172.31.255.9 description DC1_LEAF-1B_Ethernet1 + neighbor 172.31.255.17 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.17 remote-as 65102 + neighbor 172.31.255.17 description DC1_LEAF-2A_Ethernet1 + neighbor 172.31.255.25 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.25 remote-as 65102 + neighbor 172.31.255.25 description DC1_LEAF-2B_Ethernet1 + neighbor 172.31.255.33 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.33 remote-as 65103 + neighbor 172.31.255.33 description DC1_LEAF-3A_Ethernet1 + neighbor 172.31.255.41 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.41 remote-as 65103 + neighbor 172.31.255.41 description DC1_LEAF-3B_Ethernet1 + neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.3 remote-as 65101 + neighbor 192.168.255.3 description DC1_LEAF-1A + neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.4 remote-as 65101 + neighbor 192.168.255.4 description DC1_LEAF-1B + neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.5 remote-as 65102 + neighbor 192.168.255.5 description DC1_LEAF-2A + neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.6 remote-as 65102 + neighbor 192.168.255.6 description DC1_LEAF-2B + neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.7 remote-as 65103 + neighbor 192.168.255.7 description DC1_LEAF-3A + neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.8 remote-as 65103 + neighbor 192.168.255.8 description DC1_LEAF-3B + redistribute connected route-map RM-CONN-2-BGP + ! + address-family evpn + neighbor EVPN-OVERLAY-PEERS activate + ! + address-family ipv4 + no neighbor EVPN-OVERLAY-PEERS activate + neighbor IPv4-UNDERLAY-PEERS activate +``` + +# BFD + +## Router BFD + +### Router BFD Multihop Summary + +| Interval | Minimum RX | Multiplier | +| -------- | ---------- | ---------- | +| 1200 | 1200 | 3 | + +### Router BFD Multihop Device Configuration + +```eos +! +router bfd + multihop interval 1200 min-rx 1200 multiplier 3 +``` + +# Multicast + +# Filters + +## Prefix-lists + +### Prefix-lists Summary + +#### PL-LOOPBACKS-EVPN-OVERLAY + +| Sequence | Action | +| -------- | ------ | +| 10 | permit 192.168.255.0/24 eq 32 | + +### Prefix-lists Device Configuration + +```eos +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 +``` + +## Route-maps + +### Route-maps Summary + +#### RM-CONN-2-BGP + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY | + +### Route-maps Device Configuration + +```eos +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY +``` + +# ACL + +# VRF Instances + +## VRF Instances Summary + +| VRF Name | IP Routing | +| -------- | ---------- | +| MGMT | disabled | + +## VRF Instances Device Configuration + +```eos +! +vrf instance MGMT +``` + +# Quality Of Service diff --git a/inventory/documentation/devices/DC1_SPINE-2.md b/inventory/documentation/devices/DC1_SPINE-2.md new file mode 100644 index 000000000..c7ed7e85f --- /dev/null +++ b/inventory/documentation/devices/DC1_SPINE-2.md @@ -0,0 +1,561 @@ +# DC1_SPINE-2 +# Table of Contents + + +- [Management](#management) + - [Management Interfaces](#management-interfaces) + - [Name Servers](#name-servers) + - [NTP](#ntp) + - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Local Users](#local-users) +- [Monitoring](#monitoring) + - [TerminAttr Daemon](#terminattr-daemon) +- [Spanning Tree](#spanning-tree) + - [Spanning Tree Summary](#spanning-tree-summary) + - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) +- [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) + - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) + - [Internal VLAN Allocation Policy Configuration](#internal-vlan-allocation-policy-configuration) +- [Interfaces](#interfaces) + - [Ethernet Interfaces](#ethernet-interfaces) + - [Loopback Interfaces](#loopback-interfaces) +- [Routing](#routing) + - [Service Routing Protocols Model](#service-routing-protocols-model) + - [IP Routing](#ip-routing) + - [IPv6 Routing](#ipv6-routing) + - [Static Routes](#static-routes) + - [Router BGP](#router-bgp) +- [BFD](#bfd) + - [Router BFD](#router-bfd) +- [Multicast](#multicast) +- [Filters](#filters) + - [Prefix-lists](#prefix-lists) + - [Route-maps](#route-maps) +- [ACL](#acl) +- [VRF Instances](#vrf-instances) + - [VRF Instances Summary](#vrf-instances-summary) + - [VRF Instances Device Configuration](#vrf-instances-device-configuration) +- [Quality Of Service](#quality-of-service) + + +# Management + +## Management Interfaces + +### Management Interfaces Summary + +#### IPv4 + +| Management Interface | description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | oob_management | oob | MGMT | 172.16.47.22/24 | 172.16.47.1 | + +#### IPv6 + +| Management Interface | description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | oob_management | oob | MGMT | - | - | + +### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description oob_management + no shutdown + vrf MGMT + ip address 172.16.47.22/24 +``` + +## Name Servers + +### Name Servers Summary + +| Name Server | Source VRF | +| ----------- | ---------- | +| 172.16.47.12 | MGMT | +| 8.8.8.8 | MGMT | + +### Name Servers Device Configuration + +```eos +ip name-server vrf MGMT 8.8.8.8 +ip name-server vrf MGMT 172.16.47.12 +``` + +## NTP + +### NTP Summary + +#### NTP Local Interface + +| Interface | VRF | +| --------- | --- | +| Management1 | MGMT | + +#### NTP Servers + +| Server | VRF | Preferred | Burst | iBurst | Version | Min Poll | Max Poll | Local-interface | Key | +| ------ | --- | --------- | ----- | ------ | ------- | -------- | -------- | --------------- | --- | +| time.google.com | MGMT | True | - | - | - | - | - | - | - | + +### NTP Device Configuration + +```eos +! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT time.google.com prefer +``` + +## Management API HTTP + +### Management API HTTP Summary + +| HTTP | HTTPS | +| ---------- | ---------- | +| default | true | + +### Management API VRF Access + +| VRF Name | IPv4 ACL | IPv6 ACL | +| -------- | -------- | -------- | +| MGMT | - | - | + + +### Management API HTTP Configuration + +```eos +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +``` + +# Authentication + +## Local Users + +### Local Users Summary + +| User | Privilege | Role | +| ---- | --------- | ---- | +| admin | 15 | network-admin | +| ansible | 15 | network-admin | +| cvpadmin | 15 | network-admin | + +### Local Users Device Configuration + +```eos +! +username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 +username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +``` + +# Monitoring + +## TerminAttr Daemon + +### TerminAttr Daemon Summary + +| CV Compression | CloudVision Servers | VRF | Authentication | Smash Excludes | Ingest Exclude | Bypass AAA | +| -------------- | ------------------- | --- | -------------- | -------------- | -------------- | ---------- | +| gzip | 172.16.47.11:9910 | MGMT | key,@rista123! | ale,flexCounter,hardware,kni,pulse,strata | /Sysdb/cell/1/agent,/Sysdb/cell/2/agent | False | + +### TerminAttr Daemon Device Configuration + +```eos +! +daemon TerminAttr + exec /usr/bin/TerminAttr -cvaddr=172.16.47.11:9910 -cvauth=key,@rista123! -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs + no shutdown +``` + +# Spanning Tree + +## Spanning Tree Summary + +STP mode: **none** + +### Global Spanning-Tree Settings + + +## Spanning Tree Device Configuration + +```eos +! +spanning-tree mode none +``` + +# Internal VLAN Allocation Policy + +## Internal VLAN Allocation Policy Summary + +| Policy Allocation | Range Beginning | Range Ending | +| ------------------| --------------- | ------------ | +| ascending | 1006 | 1199 | + +## Internal VLAN Allocation Policy Configuration + +```eos +! +vlan internal order ascending range 1006 1199 +``` + +# Interfaces + +## Ethernet Interfaces + +### Ethernet Interfaces Summary + +#### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | +| --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | + +*Inherited from Port-Channel Interface + +#### IPv4 + +| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1_LEAF-1A_Ethernet2 | routed | - | 172.31.255.2/31 | default | 9000 | false | - | - | +| Ethernet2 | P2P_LINK_TO_DC1_LEAF-1B_Ethernet2 | routed | - | 172.31.255.10/31 | default | 9000 | false | - | - | +| Ethernet3 | P2P_LINK_TO_DC1_LEAF-2A_Ethernet2 | routed | - | 172.31.255.18/31 | default | 9000 | false | - | - | +| Ethernet4 | P2P_LINK_TO_DC1_LEAF-2B_Ethernet2 | routed | - | 172.31.255.26/31 | default | 9000 | false | - | - | +| Ethernet5 | P2P_LINK_TO_DC1_LEAF-3A_Ethernet2 | routed | - | 172.31.255.34/31 | default | 9000 | false | - | - | +| Ethernet6 | P2P_LINK_TO_DC1_LEAF-3B_Ethernet2 | routed | - | 172.31.255.42/31 | default | 9000 | false | - | - | + +### Ethernet Interfaces Device Configuration + +```eos +! +interface Ethernet1 + description P2P_LINK_TO_DC1_LEAF-1A_Ethernet2 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.2/31 +! +interface Ethernet2 + description P2P_LINK_TO_DC1_LEAF-1B_Ethernet2 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.10/31 +! +interface Ethernet3 + description P2P_LINK_TO_DC1_LEAF-2A_Ethernet2 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.18/31 +! +interface Ethernet4 + description P2P_LINK_TO_DC1_LEAF-2B_Ethernet2 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.26/31 +! +interface Ethernet5 + description P2P_LINK_TO_DC1_LEAF-3A_Ethernet2 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.34/31 +! +interface Ethernet6 + description P2P_LINK_TO_DC1_LEAF-3B_Ethernet2 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.42/31 +``` + +## Loopback Interfaces + +### Loopback Interfaces Summary + +#### IPv4 + +| Interface | Description | VRF | IP Address | +| --------- | ----------- | --- | ---------- | +| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.2/32 | + +#### IPv6 + +| Interface | Description | VRF | IPv6 Address | +| --------- | ----------- | --- | ------------ | +| Loopback0 | EVPN_Overlay_Peering | default | - | + + +### Loopback Interfaces Device Configuration + +```eos +! +interface Loopback0 + description EVPN_Overlay_Peering + no shutdown + ip address 192.168.255.2/32 +``` + +# Routing +## Service Routing Protocols Model + +Multi agent routing protocol model enabled + +```eos +! +service routing protocols model multi-agent +``` + +## IP Routing + +### IP Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | true|| MGMT | false | + +### IP Routing Device Configuration + +```eos +! +ip routing +no ip routing vrf MGMT +``` +## IPv6 Routing + +### IPv6 Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | false || MGMT | false | + + +## Static Routes + +### Static Routes Summary + +| VRF | Destination Prefix | Next Hop IP | Exit interface | Administrative Distance | Tag | Route Name | Metric | +| --- | ------------------ | ----------------------- | ------------------- | ----------------------------- | ----------------- | ----------------------------- | -------------- | +| MGMT | 0.0.0.0/0 | 172.16.47.1 | - | 1 | - | - | - | + +### Static Routes Device Configuration + +```eos +! +ip route vrf MGMT 0.0.0.0/0 172.16.47.1 +``` + +## Router BGP + +### Router BGP Summary + +| BGP AS | Router ID | +| ------ | --------- | +| 65001| 192.168.255.2 | + +| BGP Tuning | +| ---------- | +| no bgp default ipv4-unicast | +| distance bgp 20 200 200 | +| graceful-restart restart-time 300 | +| graceful-restart | +| maximum-paths 4 ecmp 4 | + +### Router BGP Peer Groups + +#### EVPN-OVERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | evpn | +| Next-hop unchanged | True | +| Source | Loopback0 | +| Bfd | true | +| Ebgp multihop | 3 | +| Send community | all | +| Maximum routes | 0 (no limit) | + +#### IPv4-UNDERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Send community | all | +| Maximum routes | 12000 | + +### BGP Neighbors + +| Neighbor | Remote AS | VRF | Send-community | Maximum-routes | +| -------- | --------- | --- | -------------- | -------------- | +| 172.31.255.3 | 65101 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.11 | 65101 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.19 | 65102 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.27 | 65102 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.35 | 65103 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.43 | 65103 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 192.168.255.3 | 65101 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.4 | 65101 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.5 | 65102 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.6 | 65102 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.7 | 65103 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.8 | 65103 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | + +### Router BGP EVPN Address Family + +#### Router BGP EVPN MAC-VRFs + +#### Router BGP EVPN VRFs + +### Router BGP Device Configuration + +```eos +! +router bgp 65001 + router-id 192.168.255.2 + no bgp default ipv4-unicast + distance bgp 20 200 200 + graceful-restart restart-time 300 + graceful-restart + maximum-paths 4 ecmp 4 + neighbor EVPN-OVERLAY-PEERS peer group + neighbor EVPN-OVERLAY-PEERS next-hop-unchanged + neighbor EVPN-OVERLAY-PEERS update-source Loopback0 + neighbor EVPN-OVERLAY-PEERS bfd + neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 + neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== + neighbor EVPN-OVERLAY-PEERS send-community + neighbor EVPN-OVERLAY-PEERS maximum-routes 0 + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor 172.31.255.3 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.3 remote-as 65101 + neighbor 172.31.255.3 description DC1_LEAF-1A_Ethernet2 + neighbor 172.31.255.11 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.11 remote-as 65101 + neighbor 172.31.255.11 description DC1_LEAF-1B_Ethernet2 + neighbor 172.31.255.19 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.19 remote-as 65102 + neighbor 172.31.255.19 description DC1_LEAF-2A_Ethernet2 + neighbor 172.31.255.27 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.27 remote-as 65102 + neighbor 172.31.255.27 description DC1_LEAF-2B_Ethernet2 + neighbor 172.31.255.35 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.35 remote-as 65103 + neighbor 172.31.255.35 description DC1_LEAF-3A_Ethernet2 + neighbor 172.31.255.43 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.43 remote-as 65103 + neighbor 172.31.255.43 description DC1_LEAF-3B_Ethernet2 + neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.3 remote-as 65101 + neighbor 192.168.255.3 description DC1_LEAF-1A + neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.4 remote-as 65101 + neighbor 192.168.255.4 description DC1_LEAF-1B + neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.5 remote-as 65102 + neighbor 192.168.255.5 description DC1_LEAF-2A + neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.6 remote-as 65102 + neighbor 192.168.255.6 description DC1_LEAF-2B + neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.7 remote-as 65103 + neighbor 192.168.255.7 description DC1_LEAF-3A + neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.8 remote-as 65103 + neighbor 192.168.255.8 description DC1_LEAF-3B + redistribute connected route-map RM-CONN-2-BGP + ! + address-family evpn + neighbor EVPN-OVERLAY-PEERS activate + ! + address-family ipv4 + no neighbor EVPN-OVERLAY-PEERS activate + neighbor IPv4-UNDERLAY-PEERS activate +``` + +# BFD + +## Router BFD + +### Router BFD Multihop Summary + +| Interval | Minimum RX | Multiplier | +| -------- | ---------- | ---------- | +| 1200 | 1200 | 3 | + +### Router BFD Multihop Device Configuration + +```eos +! +router bfd + multihop interval 1200 min-rx 1200 multiplier 3 +``` + +# Multicast + +# Filters + +## Prefix-lists + +### Prefix-lists Summary + +#### PL-LOOPBACKS-EVPN-OVERLAY + +| Sequence | Action | +| -------- | ------ | +| 10 | permit 192.168.255.0/24 eq 32 | + +### Prefix-lists Device Configuration + +```eos +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 +``` + +## Route-maps + +### Route-maps Summary + +#### RM-CONN-2-BGP + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY | + +### Route-maps Device Configuration + +```eos +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY +``` + +# ACL + +# VRF Instances + +## VRF Instances Summary + +| VRF Name | IP Routing | +| -------- | ---------- | +| MGMT | disabled | + +## VRF Instances Device Configuration + +```eos +! +vrf instance MGMT +``` + +# Quality Of Service diff --git a/inventory/documentation/devices/DC1_SPINE-3.md b/inventory/documentation/devices/DC1_SPINE-3.md new file mode 100644 index 000000000..3bb641173 --- /dev/null +++ b/inventory/documentation/devices/DC1_SPINE-3.md @@ -0,0 +1,561 @@ +# DC1_SPINE-3 +# Table of Contents + + +- [Management](#management) + - [Management Interfaces](#management-interfaces) + - [Name Servers](#name-servers) + - [NTP](#ntp) + - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Local Users](#local-users) +- [Monitoring](#monitoring) + - [TerminAttr Daemon](#terminattr-daemon) +- [Spanning Tree](#spanning-tree) + - [Spanning Tree Summary](#spanning-tree-summary) + - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) +- [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) + - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) + - [Internal VLAN Allocation Policy Configuration](#internal-vlan-allocation-policy-configuration) +- [Interfaces](#interfaces) + - [Ethernet Interfaces](#ethernet-interfaces) + - [Loopback Interfaces](#loopback-interfaces) +- [Routing](#routing) + - [Service Routing Protocols Model](#service-routing-protocols-model) + - [IP Routing](#ip-routing) + - [IPv6 Routing](#ipv6-routing) + - [Static Routes](#static-routes) + - [Router BGP](#router-bgp) +- [BFD](#bfd) + - [Router BFD](#router-bfd) +- [Multicast](#multicast) +- [Filters](#filters) + - [Prefix-lists](#prefix-lists) + - [Route-maps](#route-maps) +- [ACL](#acl) +- [VRF Instances](#vrf-instances) + - [VRF Instances Summary](#vrf-instances-summary) + - [VRF Instances Device Configuration](#vrf-instances-device-configuration) +- [Quality Of Service](#quality-of-service) + + +# Management + +## Management Interfaces + +### Management Interfaces Summary + +#### IPv4 + +| Management Interface | description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | oob_management | oob | MGMT | 172.16.47.23/24 | 172.16.47.1 | + +#### IPv6 + +| Management Interface | description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | oob_management | oob | MGMT | - | - | + +### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description oob_management + no shutdown + vrf MGMT + ip address 172.16.47.23/24 +``` + +## Name Servers + +### Name Servers Summary + +| Name Server | Source VRF | +| ----------- | ---------- | +| 172.16.47.12 | MGMT | +| 8.8.8.8 | MGMT | + +### Name Servers Device Configuration + +```eos +ip name-server vrf MGMT 8.8.8.8 +ip name-server vrf MGMT 172.16.47.12 +``` + +## NTP + +### NTP Summary + +#### NTP Local Interface + +| Interface | VRF | +| --------- | --- | +| Management1 | MGMT | + +#### NTP Servers + +| Server | VRF | Preferred | Burst | iBurst | Version | Min Poll | Max Poll | Local-interface | Key | +| ------ | --- | --------- | ----- | ------ | ------- | -------- | -------- | --------------- | --- | +| time.google.com | MGMT | True | - | - | - | - | - | - | - | + +### NTP Device Configuration + +```eos +! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT time.google.com prefer +``` + +## Management API HTTP + +### Management API HTTP Summary + +| HTTP | HTTPS | +| ---------- | ---------- | +| default | true | + +### Management API VRF Access + +| VRF Name | IPv4 ACL | IPv6 ACL | +| -------- | -------- | -------- | +| MGMT | - | - | + + +### Management API HTTP Configuration + +```eos +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +``` + +# Authentication + +## Local Users + +### Local Users Summary + +| User | Privilege | Role | +| ---- | --------- | ---- | +| admin | 15 | network-admin | +| ansible | 15 | network-admin | +| cvpadmin | 15 | network-admin | + +### Local Users Device Configuration + +```eos +! +username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 +username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +``` + +# Monitoring + +## TerminAttr Daemon + +### TerminAttr Daemon Summary + +| CV Compression | CloudVision Servers | VRF | Authentication | Smash Excludes | Ingest Exclude | Bypass AAA | +| -------------- | ------------------- | --- | -------------- | -------------- | -------------- | ---------- | +| gzip | 172.16.47.11:9910 | MGMT | key,@rista123! | ale,flexCounter,hardware,kni,pulse,strata | /Sysdb/cell/1/agent,/Sysdb/cell/2/agent | False | + +### TerminAttr Daemon Device Configuration + +```eos +! +daemon TerminAttr + exec /usr/bin/TerminAttr -cvaddr=172.16.47.11:9910 -cvauth=key,@rista123! -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs + no shutdown +``` + +# Spanning Tree + +## Spanning Tree Summary + +STP mode: **none** + +### Global Spanning-Tree Settings + + +## Spanning Tree Device Configuration + +```eos +! +spanning-tree mode none +``` + +# Internal VLAN Allocation Policy + +## Internal VLAN Allocation Policy Summary + +| Policy Allocation | Range Beginning | Range Ending | +| ------------------| --------------- | ------------ | +| ascending | 1006 | 1199 | + +## Internal VLAN Allocation Policy Configuration + +```eos +! +vlan internal order ascending range 1006 1199 +``` + +# Interfaces + +## Ethernet Interfaces + +### Ethernet Interfaces Summary + +#### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | +| --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | + +*Inherited from Port-Channel Interface + +#### IPv4 + +| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1_LEAF-1A_Ethernet3 | routed | - | 172.31.255.4/31 | default | 9000 | false | - | - | +| Ethernet2 | P2P_LINK_TO_DC1_LEAF-1B_Ethernet3 | routed | - | 172.31.255.12/31 | default | 9000 | false | - | - | +| Ethernet3 | P2P_LINK_TO_DC1_LEAF-2A_Ethernet3 | routed | - | 172.31.255.20/31 | default | 9000 | false | - | - | +| Ethernet4 | P2P_LINK_TO_DC1_LEAF-2B_Ethernet3 | routed | - | 172.31.255.28/31 | default | 9000 | false | - | - | +| Ethernet5 | P2P_LINK_TO_DC1_LEAF-3A_Ethernet3 | routed | - | 172.31.255.36/31 | default | 9000 | false | - | - | +| Ethernet6 | P2P_LINK_TO_DC1_LEAF-3B_Ethernet3 | routed | - | 172.31.255.44/31 | default | 9000 | false | - | - | + +### Ethernet Interfaces Device Configuration + +```eos +! +interface Ethernet1 + description P2P_LINK_TO_DC1_LEAF-1A_Ethernet3 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.4/31 +! +interface Ethernet2 + description P2P_LINK_TO_DC1_LEAF-1B_Ethernet3 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.12/31 +! +interface Ethernet3 + description P2P_LINK_TO_DC1_LEAF-2A_Ethernet3 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.20/31 +! +interface Ethernet4 + description P2P_LINK_TO_DC1_LEAF-2B_Ethernet3 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.28/31 +! +interface Ethernet5 + description P2P_LINK_TO_DC1_LEAF-3A_Ethernet3 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.36/31 +! +interface Ethernet6 + description P2P_LINK_TO_DC1_LEAF-3B_Ethernet3 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.44/31 +``` + +## Loopback Interfaces + +### Loopback Interfaces Summary + +#### IPv4 + +| Interface | Description | VRF | IP Address | +| --------- | ----------- | --- | ---------- | +| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.3/32 | + +#### IPv6 + +| Interface | Description | VRF | IPv6 Address | +| --------- | ----------- | --- | ------------ | +| Loopback0 | EVPN_Overlay_Peering | default | - | + + +### Loopback Interfaces Device Configuration + +```eos +! +interface Loopback0 + description EVPN_Overlay_Peering + no shutdown + ip address 192.168.255.3/32 +``` + +# Routing +## Service Routing Protocols Model + +Multi agent routing protocol model enabled + +```eos +! +service routing protocols model multi-agent +``` + +## IP Routing + +### IP Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | true|| MGMT | false | + +### IP Routing Device Configuration + +```eos +! +ip routing +no ip routing vrf MGMT +``` +## IPv6 Routing + +### IPv6 Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | false || MGMT | false | + + +## Static Routes + +### Static Routes Summary + +| VRF | Destination Prefix | Next Hop IP | Exit interface | Administrative Distance | Tag | Route Name | Metric | +| --- | ------------------ | ----------------------- | ------------------- | ----------------------------- | ----------------- | ----------------------------- | -------------- | +| MGMT | 0.0.0.0/0 | 172.16.47.1 | - | 1 | - | - | - | + +### Static Routes Device Configuration + +```eos +! +ip route vrf MGMT 0.0.0.0/0 172.16.47.1 +``` + +## Router BGP + +### Router BGP Summary + +| BGP AS | Router ID | +| ------ | --------- | +| 65001| 192.168.255.3 | + +| BGP Tuning | +| ---------- | +| no bgp default ipv4-unicast | +| distance bgp 20 200 200 | +| graceful-restart restart-time 300 | +| graceful-restart | +| maximum-paths 4 ecmp 4 | + +### Router BGP Peer Groups + +#### EVPN-OVERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | evpn | +| Next-hop unchanged | True | +| Source | Loopback0 | +| Bfd | true | +| Ebgp multihop | 3 | +| Send community | all | +| Maximum routes | 0 (no limit) | + +#### IPv4-UNDERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Send community | all | +| Maximum routes | 12000 | + +### BGP Neighbors + +| Neighbor | Remote AS | VRF | Send-community | Maximum-routes | +| -------- | --------- | --- | -------------- | -------------- | +| 172.31.255.5 | 65101 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.13 | 65101 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.21 | 65102 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.29 | 65102 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.37 | 65103 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.45 | 65103 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 192.168.255.3 | 65101 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.4 | 65101 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.5 | 65102 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.6 | 65102 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.7 | 65103 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.8 | 65103 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | + +### Router BGP EVPN Address Family + +#### Router BGP EVPN MAC-VRFs + +#### Router BGP EVPN VRFs + +### Router BGP Device Configuration + +```eos +! +router bgp 65001 + router-id 192.168.255.3 + no bgp default ipv4-unicast + distance bgp 20 200 200 + graceful-restart restart-time 300 + graceful-restart + maximum-paths 4 ecmp 4 + neighbor EVPN-OVERLAY-PEERS peer group + neighbor EVPN-OVERLAY-PEERS next-hop-unchanged + neighbor EVPN-OVERLAY-PEERS update-source Loopback0 + neighbor EVPN-OVERLAY-PEERS bfd + neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 + neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== + neighbor EVPN-OVERLAY-PEERS send-community + neighbor EVPN-OVERLAY-PEERS maximum-routes 0 + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor 172.31.255.5 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.5 remote-as 65101 + neighbor 172.31.255.5 description DC1_LEAF-1A_Ethernet3 + neighbor 172.31.255.13 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.13 remote-as 65101 + neighbor 172.31.255.13 description DC1_LEAF-1B_Ethernet3 + neighbor 172.31.255.21 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.21 remote-as 65102 + neighbor 172.31.255.21 description DC1_LEAF-2A_Ethernet3 + neighbor 172.31.255.29 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.29 remote-as 65102 + neighbor 172.31.255.29 description DC1_LEAF-2B_Ethernet3 + neighbor 172.31.255.37 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.37 remote-as 65103 + neighbor 172.31.255.37 description DC1_LEAF-3A_Ethernet3 + neighbor 172.31.255.45 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.45 remote-as 65103 + neighbor 172.31.255.45 description DC1_LEAF-3B_Ethernet3 + neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.3 remote-as 65101 + neighbor 192.168.255.3 description DC1_LEAF-1A + neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.4 remote-as 65101 + neighbor 192.168.255.4 description DC1_LEAF-1B + neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.5 remote-as 65102 + neighbor 192.168.255.5 description DC1_LEAF-2A + neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.6 remote-as 65102 + neighbor 192.168.255.6 description DC1_LEAF-2B + neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.7 remote-as 65103 + neighbor 192.168.255.7 description DC1_LEAF-3A + neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.8 remote-as 65103 + neighbor 192.168.255.8 description DC1_LEAF-3B + redistribute connected route-map RM-CONN-2-BGP + ! + address-family evpn + neighbor EVPN-OVERLAY-PEERS activate + ! + address-family ipv4 + no neighbor EVPN-OVERLAY-PEERS activate + neighbor IPv4-UNDERLAY-PEERS activate +``` + +# BFD + +## Router BFD + +### Router BFD Multihop Summary + +| Interval | Minimum RX | Multiplier | +| -------- | ---------- | ---------- | +| 1200 | 1200 | 3 | + +### Router BFD Multihop Device Configuration + +```eos +! +router bfd + multihop interval 1200 min-rx 1200 multiplier 3 +``` + +# Multicast + +# Filters + +## Prefix-lists + +### Prefix-lists Summary + +#### PL-LOOPBACKS-EVPN-OVERLAY + +| Sequence | Action | +| -------- | ------ | +| 10 | permit 192.168.255.0/24 eq 32 | + +### Prefix-lists Device Configuration + +```eos +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 +``` + +## Route-maps + +### Route-maps Summary + +#### RM-CONN-2-BGP + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY | + +### Route-maps Device Configuration + +```eos +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY +``` + +# ACL + +# VRF Instances + +## VRF Instances Summary + +| VRF Name | IP Routing | +| -------- | ---------- | +| MGMT | disabled | + +## VRF Instances Device Configuration + +```eos +! +vrf instance MGMT +``` + +# Quality Of Service diff --git a/inventory/documentation/devices/DC1_SPINE-4.md b/inventory/documentation/devices/DC1_SPINE-4.md new file mode 100644 index 000000000..d2310a17c --- /dev/null +++ b/inventory/documentation/devices/DC1_SPINE-4.md @@ -0,0 +1,561 @@ +# DC1_SPINE-4 +# Table of Contents + + +- [Management](#management) + - [Management Interfaces](#management-interfaces) + - [Name Servers](#name-servers) + - [NTP](#ntp) + - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Local Users](#local-users) +- [Monitoring](#monitoring) + - [TerminAttr Daemon](#terminattr-daemon) +- [Spanning Tree](#spanning-tree) + - [Spanning Tree Summary](#spanning-tree-summary) + - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) +- [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) + - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) + - [Internal VLAN Allocation Policy Configuration](#internal-vlan-allocation-policy-configuration) +- [Interfaces](#interfaces) + - [Ethernet Interfaces](#ethernet-interfaces) + - [Loopback Interfaces](#loopback-interfaces) +- [Routing](#routing) + - [Service Routing Protocols Model](#service-routing-protocols-model) + - [IP Routing](#ip-routing) + - [IPv6 Routing](#ipv6-routing) + - [Static Routes](#static-routes) + - [Router BGP](#router-bgp) +- [BFD](#bfd) + - [Router BFD](#router-bfd) +- [Multicast](#multicast) +- [Filters](#filters) + - [Prefix-lists](#prefix-lists) + - [Route-maps](#route-maps) +- [ACL](#acl) +- [VRF Instances](#vrf-instances) + - [VRF Instances Summary](#vrf-instances-summary) + - [VRF Instances Device Configuration](#vrf-instances-device-configuration) +- [Quality Of Service](#quality-of-service) + + +# Management + +## Management Interfaces + +### Management Interfaces Summary + +#### IPv4 + +| Management Interface | description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | oob_management | oob | MGMT | 172.16.47.24/24 | 172.16.47.1 | + +#### IPv6 + +| Management Interface | description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | oob_management | oob | MGMT | - | - | + +### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description oob_management + no shutdown + vrf MGMT + ip address 172.16.47.24/24 +``` + +## Name Servers + +### Name Servers Summary + +| Name Server | Source VRF | +| ----------- | ---------- | +| 172.16.47.12 | MGMT | +| 8.8.8.8 | MGMT | + +### Name Servers Device Configuration + +```eos +ip name-server vrf MGMT 8.8.8.8 +ip name-server vrf MGMT 172.16.47.12 +``` + +## NTP + +### NTP Summary + +#### NTP Local Interface + +| Interface | VRF | +| --------- | --- | +| Management1 | MGMT | + +#### NTP Servers + +| Server | VRF | Preferred | Burst | iBurst | Version | Min Poll | Max Poll | Local-interface | Key | +| ------ | --- | --------- | ----- | ------ | ------- | -------- | -------- | --------------- | --- | +| time.google.com | MGMT | True | - | - | - | - | - | - | - | + +### NTP Device Configuration + +```eos +! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT time.google.com prefer +``` + +## Management API HTTP + +### Management API HTTP Summary + +| HTTP | HTTPS | +| ---------- | ---------- | +| default | true | + +### Management API VRF Access + +| VRF Name | IPv4 ACL | IPv6 ACL | +| -------- | -------- | -------- | +| MGMT | - | - | + + +### Management API HTTP Configuration + +```eos +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +``` + +# Authentication + +## Local Users + +### Local Users Summary + +| User | Privilege | Role | +| ---- | --------- | ---- | +| admin | 15 | network-admin | +| ansible | 15 | network-admin | +| cvpadmin | 15 | network-admin | + +### Local Users Device Configuration + +```eos +! +username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 +username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +``` + +# Monitoring + +## TerminAttr Daemon + +### TerminAttr Daemon Summary + +| CV Compression | CloudVision Servers | VRF | Authentication | Smash Excludes | Ingest Exclude | Bypass AAA | +| -------------- | ------------------- | --- | -------------- | -------------- | -------------- | ---------- | +| gzip | 172.16.47.11:9910 | MGMT | key,@rista123! | ale,flexCounter,hardware,kni,pulse,strata | /Sysdb/cell/1/agent,/Sysdb/cell/2/agent | False | + +### TerminAttr Daemon Device Configuration + +```eos +! +daemon TerminAttr + exec /usr/bin/TerminAttr -cvaddr=172.16.47.11:9910 -cvauth=key,@rista123! -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs + no shutdown +``` + +# Spanning Tree + +## Spanning Tree Summary + +STP mode: **none** + +### Global Spanning-Tree Settings + + +## Spanning Tree Device Configuration + +```eos +! +spanning-tree mode none +``` + +# Internal VLAN Allocation Policy + +## Internal VLAN Allocation Policy Summary + +| Policy Allocation | Range Beginning | Range Ending | +| ------------------| --------------- | ------------ | +| ascending | 1006 | 1199 | + +## Internal VLAN Allocation Policy Configuration + +```eos +! +vlan internal order ascending range 1006 1199 +``` + +# Interfaces + +## Ethernet Interfaces + +### Ethernet Interfaces Summary + +#### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | +| --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | + +*Inherited from Port-Channel Interface + +#### IPv4 + +| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1_LEAF-1A_Ethernet4 | routed | - | 172.31.255.6/31 | default | 9000 | false | - | - | +| Ethernet2 | P2P_LINK_TO_DC1_LEAF-1B_Ethernet4 | routed | - | 172.31.255.14/31 | default | 9000 | false | - | - | +| Ethernet3 | P2P_LINK_TO_DC1_LEAF-2A_Ethernet4 | routed | - | 172.31.255.22/31 | default | 9000 | false | - | - | +| Ethernet4 | P2P_LINK_TO_DC1_LEAF-2B_Ethernet4 | routed | - | 172.31.255.30/31 | default | 9000 | false | - | - | +| Ethernet5 | P2P_LINK_TO_DC1_LEAF-3A_Ethernet4 | routed | - | 172.31.255.38/31 | default | 9000 | false | - | - | +| Ethernet6 | P2P_LINK_TO_DC1_LEAF-3B_Ethernet4 | routed | - | 172.31.255.46/31 | default | 9000 | false | - | - | + +### Ethernet Interfaces Device Configuration + +```eos +! +interface Ethernet1 + description P2P_LINK_TO_DC1_LEAF-1A_Ethernet4 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.6/31 +! +interface Ethernet2 + description P2P_LINK_TO_DC1_LEAF-1B_Ethernet4 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.14/31 +! +interface Ethernet3 + description P2P_LINK_TO_DC1_LEAF-2A_Ethernet4 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.22/31 +! +interface Ethernet4 + description P2P_LINK_TO_DC1_LEAF-2B_Ethernet4 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.30/31 +! +interface Ethernet5 + description P2P_LINK_TO_DC1_LEAF-3A_Ethernet4 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.38/31 +! +interface Ethernet6 + description P2P_LINK_TO_DC1_LEAF-3B_Ethernet4 + no shutdown + mtu 9000 + no switchport + ip address 172.31.255.46/31 +``` + +## Loopback Interfaces + +### Loopback Interfaces Summary + +#### IPv4 + +| Interface | Description | VRF | IP Address | +| --------- | ----------- | --- | ---------- | +| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.4/32 | + +#### IPv6 + +| Interface | Description | VRF | IPv6 Address | +| --------- | ----------- | --- | ------------ | +| Loopback0 | EVPN_Overlay_Peering | default | - | + + +### Loopback Interfaces Device Configuration + +```eos +! +interface Loopback0 + description EVPN_Overlay_Peering + no shutdown + ip address 192.168.255.4/32 +``` + +# Routing +## Service Routing Protocols Model + +Multi agent routing protocol model enabled + +```eos +! +service routing protocols model multi-agent +``` + +## IP Routing + +### IP Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | true|| MGMT | false | + +### IP Routing Device Configuration + +```eos +! +ip routing +no ip routing vrf MGMT +``` +## IPv6 Routing + +### IPv6 Routing Summary + +| VRF | Routing Enabled | +| --- | --------------- | +| default | false || MGMT | false | + + +## Static Routes + +### Static Routes Summary + +| VRF | Destination Prefix | Next Hop IP | Exit interface | Administrative Distance | Tag | Route Name | Metric | +| --- | ------------------ | ----------------------- | ------------------- | ----------------------------- | ----------------- | ----------------------------- | -------------- | +| MGMT | 0.0.0.0/0 | 172.16.47.1 | - | 1 | - | - | - | + +### Static Routes Device Configuration + +```eos +! +ip route vrf MGMT 0.0.0.0/0 172.16.47.1 +``` + +## Router BGP + +### Router BGP Summary + +| BGP AS | Router ID | +| ------ | --------- | +| 65001| 192.168.255.4 | + +| BGP Tuning | +| ---------- | +| no bgp default ipv4-unicast | +| distance bgp 20 200 200 | +| graceful-restart restart-time 300 | +| graceful-restart | +| maximum-paths 4 ecmp 4 | + +### Router BGP Peer Groups + +#### EVPN-OVERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | evpn | +| Next-hop unchanged | True | +| Source | Loopback0 | +| Bfd | true | +| Ebgp multihop | 3 | +| Send community | all | +| Maximum routes | 0 (no limit) | + +#### IPv4-UNDERLAY-PEERS + +| Settings | Value | +| -------- | ----- | +| Address Family | ipv4 | +| Send community | all | +| Maximum routes | 12000 | + +### BGP Neighbors + +| Neighbor | Remote AS | VRF | Send-community | Maximum-routes | +| -------- | --------- | --- | -------------- | -------------- | +| 172.31.255.7 | 65101 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.15 | 65101 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.23 | 65102 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.31 | 65102 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.39 | 65103 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 172.31.255.47 | 65103 | default | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | +| 192.168.255.3 | 65101 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.4 | 65101 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.5 | 65102 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.6 | 65102 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.7 | 65103 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | +| 192.168.255.8 | 65103 | default | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | + +### Router BGP EVPN Address Family + +#### Router BGP EVPN MAC-VRFs + +#### Router BGP EVPN VRFs + +### Router BGP Device Configuration + +```eos +! +router bgp 65001 + router-id 192.168.255.4 + no bgp default ipv4-unicast + distance bgp 20 200 200 + graceful-restart restart-time 300 + graceful-restart + maximum-paths 4 ecmp 4 + neighbor EVPN-OVERLAY-PEERS peer group + neighbor EVPN-OVERLAY-PEERS next-hop-unchanged + neighbor EVPN-OVERLAY-PEERS update-source Loopback0 + neighbor EVPN-OVERLAY-PEERS bfd + neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 + neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== + neighbor EVPN-OVERLAY-PEERS send-community + neighbor EVPN-OVERLAY-PEERS maximum-routes 0 + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor 172.31.255.7 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.7 remote-as 65101 + neighbor 172.31.255.7 description DC1_LEAF-1A_Ethernet4 + neighbor 172.31.255.15 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.15 remote-as 65101 + neighbor 172.31.255.15 description DC1_LEAF-1B_Ethernet4 + neighbor 172.31.255.23 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.23 remote-as 65102 + neighbor 172.31.255.23 description DC1_LEAF-2A_Ethernet4 + neighbor 172.31.255.31 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.31 remote-as 65102 + neighbor 172.31.255.31 description DC1_LEAF-2B_Ethernet4 + neighbor 172.31.255.39 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.39 remote-as 65103 + neighbor 172.31.255.39 description DC1_LEAF-3A_Ethernet4 + neighbor 172.31.255.47 peer group IPv4-UNDERLAY-PEERS + neighbor 172.31.255.47 remote-as 65103 + neighbor 172.31.255.47 description DC1_LEAF-3B_Ethernet4 + neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.3 remote-as 65101 + neighbor 192.168.255.3 description DC1_LEAF-1A + neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.4 remote-as 65101 + neighbor 192.168.255.4 description DC1_LEAF-1B + neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.5 remote-as 65102 + neighbor 192.168.255.5 description DC1_LEAF-2A + neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.6 remote-as 65102 + neighbor 192.168.255.6 description DC1_LEAF-2B + neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.7 remote-as 65103 + neighbor 192.168.255.7 description DC1_LEAF-3A + neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS + neighbor 192.168.255.8 remote-as 65103 + neighbor 192.168.255.8 description DC1_LEAF-3B + redistribute connected route-map RM-CONN-2-BGP + ! + address-family evpn + neighbor EVPN-OVERLAY-PEERS activate + ! + address-family ipv4 + no neighbor EVPN-OVERLAY-PEERS activate + neighbor IPv4-UNDERLAY-PEERS activate +``` + +# BFD + +## Router BFD + +### Router BFD Multihop Summary + +| Interval | Minimum RX | Multiplier | +| -------- | ---------- | ---------- | +| 1200 | 1200 | 3 | + +### Router BFD Multihop Device Configuration + +```eos +! +router bfd + multihop interval 1200 min-rx 1200 multiplier 3 +``` + +# Multicast + +# Filters + +## Prefix-lists + +### Prefix-lists Summary + +#### PL-LOOPBACKS-EVPN-OVERLAY + +| Sequence | Action | +| -------- | ------ | +| 10 | permit 192.168.255.0/24 eq 32 | + +### Prefix-lists Device Configuration + +```eos +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 +``` + +## Route-maps + +### Route-maps Summary + +#### RM-CONN-2-BGP + +| Sequence | Type | Match and/or Set | +| -------- | ---- | ---------------- | +| 10 | permit | match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY | + +### Route-maps Device Configuration + +```eos +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY +``` + +# ACL + +# VRF Instances + +## VRF Instances Summary + +| VRF Name | IP Routing | +| -------- | ---------- | +| MGMT | disabled | + +## VRF Instances Device Configuration + +```eos +! +vrf instance MGMT +``` + +# Quality Of Service diff --git a/inventory/documentation/fabric/DC1_FABRIC-documentation.md b/inventory/documentation/fabric/DC1_FABRIC-documentation.md index 8f431d930..c26797ebe 100644 --- a/inventory/documentation/fabric/DC1_FABRIC-documentation.md +++ b/inventory/documentation/fabric/DC1_FABRIC-documentation.md @@ -19,14 +19,16 @@ | POD | Type | Node | Management IP | Platform | Provisioned in CloudVision | | --- | ---- | ---- | ------------- | -------- | -------------------------- | -| DC1_FABRIC | l2leaf | DC1-L2LEAF1A | 10.255.0.17/24 | vEOS-LAB | Provisioned | -| DC1_FABRIC | l2leaf | DC1-L2LEAF2A | 10.255.0.18/24 | vEOS-LAB | Provisioned | -| DC1_FABRIC | l3leaf | DC1-LEAF1A | 10.255.0.13/24 | vEOS-LAB | Provisioned | -| DC1_FABRIC | l3leaf | DC1-LEAF1B | 10.255.0.14/24 | vEOS-LAB | Provisioned | -| DC1_FABRIC | l3leaf | DC1-LEAF2A | 10.255.0.15/24 | vEOS-LAB | Provisioned | -| DC1_FABRIC | l3leaf | DC1-LEAF2B | 10.255.0.16/24 | vEOS-LAB | Provisioned | -| DC1_FABRIC | spine | DC1-SPINE1 | 10.255.0.11/24 | vEOS-LAB | Provisioned | -| DC1_FABRIC | spine | DC1-SPINE2 | 10.255.0.12/24 | vEOS-LAB | Provisioned | +| DC1_FABRIC | l3leaf | DC1_LEAF-1A | 172.16.47.31/24 | vEOS | Provisioned | +| DC1_FABRIC | l3leaf | DC1_LEAF-1B | 172.16.47.32/24 | vEOS | Provisioned | +| DC1_FABRIC | l3leaf | DC1_LEAF-2A | 172.16.47.33/24 | vEOS | Provisioned | +| DC1_FABRIC | l3leaf | DC1_LEAF-2B | 172.16.47.34/24 | vEOS | Provisioned | +| DC1_FABRIC | l3leaf | DC1_LEAF-3A | 172.16.47.35/24 | vEOS | Provisioned | +| DC1_FABRIC | l3leaf | DC1_LEAF-3B | 172.16.47.36/24 | vEOS | Provisioned | +| DC1_FABRIC | spine | DC1_SPINE-1 | 172.16.47.21/24 | vEOS | Provisioned | +| DC1_FABRIC | spine | DC1_SPINE-2 | 172.16.47.22/24 | vEOS | Provisioned | +| DC1_FABRIC | spine | DC1_SPINE-3 | 172.16.47.23/24 | vEOS | Provisioned | +| DC1_FABRIC | spine | DC1_SPINE-4 | 172.16.47.24/24 | vEOS | Provisioned | > Provision status is based on Ansible inventory declaration and do not represent real status from CloudVision. @@ -38,22 +40,33 @@ | Type | Node | Node Interface | Peer Type | Peer Node | Peer Interface | | ---- | ---- | -------------- | --------- | ----------| -------------- | -| l2leaf | DC1-L2LEAF1A | Ethernet1 | l3leaf | DC1-LEAF1A | Ethernet5 | -| l2leaf | DC1-L2LEAF1A | Ethernet2 | l3leaf | DC1-LEAF1B | Ethernet5 | -| l2leaf | DC1-L2LEAF2A | Ethernet1 | l3leaf | DC1-LEAF2A | Ethernet5 | -| l2leaf | DC1-L2LEAF2A | Ethernet2 | l3leaf | DC1-LEAF2B | Ethernet5 | -| l3leaf | DC1-LEAF1A | Ethernet1 | spine | DC1-SPINE1 | Ethernet1 | -| l3leaf | DC1-LEAF1A | Ethernet2 | spine | DC1-SPINE2 | Ethernet1 | -| l3leaf | DC1-LEAF1A | Ethernet3 | mlag_peer | DC1-LEAF1B | Ethernet3 | -| l3leaf | DC1-LEAF1A | Ethernet4 | mlag_peer | DC1-LEAF1B | Ethernet4 | -| l3leaf | DC1-LEAF1B | Ethernet1 | spine | DC1-SPINE1 | Ethernet2 | -| l3leaf | DC1-LEAF1B | Ethernet2 | spine | DC1-SPINE2 | Ethernet2 | -| l3leaf | DC1-LEAF2A | Ethernet1 | spine | DC1-SPINE1 | Ethernet3 | -| l3leaf | DC1-LEAF2A | Ethernet2 | spine | DC1-SPINE2 | Ethernet3 | -| l3leaf | DC1-LEAF2A | Ethernet3 | mlag_peer | DC1-LEAF2B | Ethernet3 | -| l3leaf | DC1-LEAF2A | Ethernet4 | mlag_peer | DC1-LEAF2B | Ethernet4 | -| l3leaf | DC1-LEAF2B | Ethernet1 | spine | DC1-SPINE1 | Ethernet4 | -| l3leaf | DC1-LEAF2B | Ethernet2 | spine | DC1-SPINE2 | Ethernet4 | +| l3leaf | DC1_LEAF-1A | Ethernet1 | spine | DC1_SPINE-1 | Ethernet1 | +| l3leaf | DC1_LEAF-1A | Ethernet2 | spine | DC1_SPINE-2 | Ethernet1 | +| l3leaf | DC1_LEAF-1A | Ethernet3 | spine | DC1_SPINE-3 | Ethernet1 | +| l3leaf | DC1_LEAF-1A | Ethernet4 | spine | DC1_SPINE-4 | Ethernet1 | +| l3leaf | DC1_LEAF-1A | Ethernet5 | mlag_peer | DC1_LEAF-1B | Ethernet5 | +| l3leaf | DC1_LEAF-1B | Ethernet1 | spine | DC1_SPINE-1 | Ethernet2 | +| l3leaf | DC1_LEAF-1B | Ethernet2 | spine | DC1_SPINE-2 | Ethernet2 | +| l3leaf | DC1_LEAF-1B | Ethernet3 | spine | DC1_SPINE-3 | Ethernet2 | +| l3leaf | DC1_LEAF-1B | Ethernet4 | spine | DC1_SPINE-4 | Ethernet2 | +| l3leaf | DC1_LEAF-2A | Ethernet1 | spine | DC1_SPINE-1 | Ethernet3 | +| l3leaf | DC1_LEAF-2A | Ethernet2 | spine | DC1_SPINE-2 | Ethernet3 | +| l3leaf | DC1_LEAF-2A | Ethernet3 | spine | DC1_SPINE-3 | Ethernet3 | +| l3leaf | DC1_LEAF-2A | Ethernet4 | spine | DC1_SPINE-4 | Ethernet3 | +| l3leaf | DC1_LEAF-2A | Ethernet5 | mlag_peer | DC1_LEAF-2B | Ethernet5 | +| l3leaf | DC1_LEAF-2B | Ethernet1 | spine | DC1_SPINE-1 | Ethernet4 | +| l3leaf | DC1_LEAF-2B | Ethernet2 | spine | DC1_SPINE-2 | Ethernet4 | +| l3leaf | DC1_LEAF-2B | Ethernet3 | spine | DC1_SPINE-3 | Ethernet4 | +| l3leaf | DC1_LEAF-2B | Ethernet4 | spine | DC1_SPINE-4 | Ethernet4 | +| l3leaf | DC1_LEAF-3A | Ethernet1 | spine | DC1_SPINE-1 | Ethernet5 | +| l3leaf | DC1_LEAF-3A | Ethernet2 | spine | DC1_SPINE-2 | Ethernet5 | +| l3leaf | DC1_LEAF-3A | Ethernet3 | spine | DC1_SPINE-3 | Ethernet5 | +| l3leaf | DC1_LEAF-3A | Ethernet4 | spine | DC1_SPINE-4 | Ethernet5 | +| l3leaf | DC1_LEAF-3A | Ethernet5 | mlag_peer | DC1_LEAF-3B | Ethernet5 | +| l3leaf | DC1_LEAF-3B | Ethernet1 | spine | DC1_SPINE-1 | Ethernet6 | +| l3leaf | DC1_LEAF-3B | Ethernet2 | spine | DC1_SPINE-2 | Ethernet6 | +| l3leaf | DC1_LEAF-3B | Ethernet3 | spine | DC1_SPINE-3 | Ethernet6 | +| l3leaf | DC1_LEAF-3B | Ethernet4 | spine | DC1_SPINE-4 | Ethernet6 | # Fabric IP Allocation @@ -61,49 +74,71 @@ | Uplink IPv4 Pool | Available Addresses | Assigned addresses | Assigned Address % | | ---------------- | ------------------- | ------------------ | ------------------ | -| 172.31.255.0/24 | 256 | 16 | 6.25 % | +| 172.31.255.0/24 | 256 | 48 | 18.75 % | ## Point-To-Point Links Node Allocation | Node | Node Interface | Node IP Address | Peer Node | Peer Interface | Peer IP Address | | ---- | -------------- | --------------- | --------- | -------------- | --------------- | -| DC1-LEAF1A | Ethernet1 | 172.31.255.1/31 | DC1-SPINE1 | Ethernet1 | 172.31.255.0/31 | -| DC1-LEAF1A | Ethernet2 | 172.31.255.3/31 | DC1-SPINE2 | Ethernet1 | 172.31.255.2/31 | -| DC1-LEAF1B | Ethernet1 | 172.31.255.5/31 | DC1-SPINE1 | Ethernet2 | 172.31.255.4/31 | -| DC1-LEAF1B | Ethernet2 | 172.31.255.7/31 | DC1-SPINE2 | Ethernet2 | 172.31.255.6/31 | -| DC1-LEAF2A | Ethernet1 | 172.31.255.9/31 | DC1-SPINE1 | Ethernet3 | 172.31.255.8/31 | -| DC1-LEAF2A | Ethernet2 | 172.31.255.11/31 | DC1-SPINE2 | Ethernet3 | 172.31.255.10/31 | -| DC1-LEAF2B | Ethernet1 | 172.31.255.13/31 | DC1-SPINE1 | Ethernet4 | 172.31.255.12/31 | -| DC1-LEAF2B | Ethernet2 | 172.31.255.15/31 | DC1-SPINE2 | Ethernet4 | 172.31.255.14/31 | +| DC1_LEAF-1A | Ethernet1 | 172.31.255.1/31 | DC1_SPINE-1 | Ethernet1 | 172.31.255.0/31 | +| DC1_LEAF-1A | Ethernet2 | 172.31.255.3/31 | DC1_SPINE-2 | Ethernet1 | 172.31.255.2/31 | +| DC1_LEAF-1A | Ethernet3 | 172.31.255.5/31 | DC1_SPINE-3 | Ethernet1 | 172.31.255.4/31 | +| DC1_LEAF-1A | Ethernet4 | 172.31.255.7/31 | DC1_SPINE-4 | Ethernet1 | 172.31.255.6/31 | +| DC1_LEAF-1B | Ethernet1 | 172.31.255.9/31 | DC1_SPINE-1 | Ethernet2 | 172.31.255.8/31 | +| DC1_LEAF-1B | Ethernet2 | 172.31.255.11/31 | DC1_SPINE-2 | Ethernet2 | 172.31.255.10/31 | +| DC1_LEAF-1B | Ethernet3 | 172.31.255.13/31 | DC1_SPINE-3 | Ethernet2 | 172.31.255.12/31 | +| DC1_LEAF-1B | Ethernet4 | 172.31.255.15/31 | DC1_SPINE-4 | Ethernet2 | 172.31.255.14/31 | +| DC1_LEAF-2A | Ethernet1 | 172.31.255.17/31 | DC1_SPINE-1 | Ethernet3 | 172.31.255.16/31 | +| DC1_LEAF-2A | Ethernet2 | 172.31.255.19/31 | DC1_SPINE-2 | Ethernet3 | 172.31.255.18/31 | +| DC1_LEAF-2A | Ethernet3 | 172.31.255.21/31 | DC1_SPINE-3 | Ethernet3 | 172.31.255.20/31 | +| DC1_LEAF-2A | Ethernet4 | 172.31.255.23/31 | DC1_SPINE-4 | Ethernet3 | 172.31.255.22/31 | +| DC1_LEAF-2B | Ethernet1 | 172.31.255.25/31 | DC1_SPINE-1 | Ethernet4 | 172.31.255.24/31 | +| DC1_LEAF-2B | Ethernet2 | 172.31.255.27/31 | DC1_SPINE-2 | Ethernet4 | 172.31.255.26/31 | +| DC1_LEAF-2B | Ethernet3 | 172.31.255.29/31 | DC1_SPINE-3 | Ethernet4 | 172.31.255.28/31 | +| DC1_LEAF-2B | Ethernet4 | 172.31.255.31/31 | DC1_SPINE-4 | Ethernet4 | 172.31.255.30/31 | +| DC1_LEAF-3A | Ethernet1 | 172.31.255.33/31 | DC1_SPINE-1 | Ethernet5 | 172.31.255.32/31 | +| DC1_LEAF-3A | Ethernet2 | 172.31.255.35/31 | DC1_SPINE-2 | Ethernet5 | 172.31.255.34/31 | +| DC1_LEAF-3A | Ethernet3 | 172.31.255.37/31 | DC1_SPINE-3 | Ethernet5 | 172.31.255.36/31 | +| DC1_LEAF-3A | Ethernet4 | 172.31.255.39/31 | DC1_SPINE-4 | Ethernet5 | 172.31.255.38/31 | +| DC1_LEAF-3B | Ethernet1 | 172.31.255.41/31 | DC1_SPINE-1 | Ethernet6 | 172.31.255.40/31 | +| DC1_LEAF-3B | Ethernet2 | 172.31.255.43/31 | DC1_SPINE-2 | Ethernet6 | 172.31.255.42/31 | +| DC1_LEAF-3B | Ethernet3 | 172.31.255.45/31 | DC1_SPINE-3 | Ethernet6 | 172.31.255.44/31 | +| DC1_LEAF-3B | Ethernet4 | 172.31.255.47/31 | DC1_SPINE-4 | Ethernet6 | 172.31.255.46/31 | ## Loopback Interfaces (BGP EVPN Peering) | Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | | ------------- | ------------------- | ------------------ | ------------------ | -| 192.168.255.0/24 | 256 | 6 | 2.35 % | +| 192.168.255.0/24 | 256 | 10 | 3.91 % | ## Loopback0 Interfaces Node Allocation | POD | Node | Loopback0 | | --- | ---- | --------- | -| DC1_FABRIC | DC1-LEAF1A | 192.168.255.3/32 | -| DC1_FABRIC | DC1-LEAF1B | 192.168.255.4/32 | -| DC1_FABRIC | DC1-LEAF2A | 192.168.255.5/32 | -| DC1_FABRIC | DC1-LEAF2B | 192.168.255.6/32 | -| DC1_FABRIC | DC1-SPINE1 | 192.168.255.1/32 | -| DC1_FABRIC | DC1-SPINE2 | 192.168.255.2/32 | +| DC1_FABRIC | DC1_LEAF-1A | 192.168.255.3/32 | +| DC1_FABRIC | DC1_LEAF-1B | 192.168.255.4/32 | +| DC1_FABRIC | DC1_LEAF-2A | 192.168.255.5/32 | +| DC1_FABRIC | DC1_LEAF-2B | 192.168.255.6/32 | +| DC1_FABRIC | DC1_LEAF-3A | 192.168.255.7/32 | +| DC1_FABRIC | DC1_LEAF-3B | 192.168.255.8/32 | +| DC1_FABRIC | DC1_SPINE-1 | 192.168.255.1/32 | +| DC1_FABRIC | DC1_SPINE-2 | 192.168.255.2/32 | +| DC1_FABRIC | DC1_SPINE-3 | 192.168.255.3/32 | +| DC1_FABRIC | DC1_SPINE-4 | 192.168.255.4/32 | ## VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | | --------------------- | ------------------- | ------------------ | ------------------ | -| 192.168.254.0/24 | 256 | 4 | 1.57 % | +| 192.168.254.0/24 | 256 | 6 | 2.35 % | ## VTEP Loopback Node allocation | POD | Node | Loopback1 | | --- | ---- | --------- | -| DC1_FABRIC | DC1-LEAF1A | 192.168.254.3/32 | -| DC1_FABRIC | DC1-LEAF1B | 192.168.254.3/32 | -| DC1_FABRIC | DC1-LEAF2A | 192.168.254.5/32 | -| DC1_FABRIC | DC1-LEAF2B | 192.168.254.5/32 | +| DC1_FABRIC | DC1_LEAF-1A | 192.168.254.3/32 | +| DC1_FABRIC | DC1_LEAF-1B | 192.168.254.3/32 | +| DC1_FABRIC | DC1_LEAF-2A | 192.168.254.5/32 | +| DC1_FABRIC | DC1_LEAF-2B | 192.168.254.5/32 | +| DC1_FABRIC | DC1_LEAF-3A | 192.168.254.7/32 | +| DC1_FABRIC | DC1_LEAF-3B | 192.168.254.7/32 | diff --git a/inventory/documentation/fabric/DC1_FABRIC-p2p-links.csv b/inventory/documentation/fabric/DC1_FABRIC-p2p-links.csv index fad6fbcf5..8cf2cd0be 100644 --- a/inventory/documentation/fabric/DC1_FABRIC-p2p-links.csv +++ b/inventory/documentation/fabric/DC1_FABRIC-p2p-links.csv @@ -1,9 +1,25 @@ Type, Node,Node Interface,Leaf IP Address,Peer Type,Peer Node,Peer Interface,Peer IP Address -l3leaf,DC1-LEAF1A,Ethernet1,172.31.255.1/31,spine,DC1-SPINE1,Ethernet1,172.31.255.0/31 -l3leaf,DC1-LEAF1A,Ethernet2,172.31.255.3/31,spine,DC1-SPINE2,Ethernet1,172.31.255.2/31 -l3leaf,DC1-LEAF1B,Ethernet1,172.31.255.5/31,spine,DC1-SPINE1,Ethernet2,172.31.255.4/31 -l3leaf,DC1-LEAF1B,Ethernet2,172.31.255.7/31,spine,DC1-SPINE2,Ethernet2,172.31.255.6/31 -l3leaf,DC1-LEAF2A,Ethernet1,172.31.255.9/31,spine,DC1-SPINE1,Ethernet3,172.31.255.8/31 -l3leaf,DC1-LEAF2A,Ethernet2,172.31.255.11/31,spine,DC1-SPINE2,Ethernet3,172.31.255.10/31 -l3leaf,DC1-LEAF2B,Ethernet1,172.31.255.13/31,spine,DC1-SPINE1,Ethernet4,172.31.255.12/31 -l3leaf,DC1-LEAF2B,Ethernet2,172.31.255.15/31,spine,DC1-SPINE2,Ethernet4,172.31.255.14/31 +l3leaf,DC1_LEAF-1A,Ethernet1,172.31.255.1/31,spine,DC1_SPINE-1,Ethernet1,172.31.255.0/31 +l3leaf,DC1_LEAF-1A,Ethernet2,172.31.255.3/31,spine,DC1_SPINE-2,Ethernet1,172.31.255.2/31 +l3leaf,DC1_LEAF-1A,Ethernet3,172.31.255.5/31,spine,DC1_SPINE-3,Ethernet1,172.31.255.4/31 +l3leaf,DC1_LEAF-1A,Ethernet4,172.31.255.7/31,spine,DC1_SPINE-4,Ethernet1,172.31.255.6/31 +l3leaf,DC1_LEAF-1B,Ethernet1,172.31.255.9/31,spine,DC1_SPINE-1,Ethernet2,172.31.255.8/31 +l3leaf,DC1_LEAF-1B,Ethernet2,172.31.255.11/31,spine,DC1_SPINE-2,Ethernet2,172.31.255.10/31 +l3leaf,DC1_LEAF-1B,Ethernet3,172.31.255.13/31,spine,DC1_SPINE-3,Ethernet2,172.31.255.12/31 +l3leaf,DC1_LEAF-1B,Ethernet4,172.31.255.15/31,spine,DC1_SPINE-4,Ethernet2,172.31.255.14/31 +l3leaf,DC1_LEAF-2A,Ethernet1,172.31.255.17/31,spine,DC1_SPINE-1,Ethernet3,172.31.255.16/31 +l3leaf,DC1_LEAF-2A,Ethernet2,172.31.255.19/31,spine,DC1_SPINE-2,Ethernet3,172.31.255.18/31 +l3leaf,DC1_LEAF-2A,Ethernet3,172.31.255.21/31,spine,DC1_SPINE-3,Ethernet3,172.31.255.20/31 +l3leaf,DC1_LEAF-2A,Ethernet4,172.31.255.23/31,spine,DC1_SPINE-4,Ethernet3,172.31.255.22/31 +l3leaf,DC1_LEAF-2B,Ethernet1,172.31.255.25/31,spine,DC1_SPINE-1,Ethernet4,172.31.255.24/31 +l3leaf,DC1_LEAF-2B,Ethernet2,172.31.255.27/31,spine,DC1_SPINE-2,Ethernet4,172.31.255.26/31 +l3leaf,DC1_LEAF-2B,Ethernet3,172.31.255.29/31,spine,DC1_SPINE-3,Ethernet4,172.31.255.28/31 +l3leaf,DC1_LEAF-2B,Ethernet4,172.31.255.31/31,spine,DC1_SPINE-4,Ethernet4,172.31.255.30/31 +l3leaf,DC1_LEAF-3A,Ethernet1,172.31.255.33/31,spine,DC1_SPINE-1,Ethernet5,172.31.255.32/31 +l3leaf,DC1_LEAF-3A,Ethernet2,172.31.255.35/31,spine,DC1_SPINE-2,Ethernet5,172.31.255.34/31 +l3leaf,DC1_LEAF-3A,Ethernet3,172.31.255.37/31,spine,DC1_SPINE-3,Ethernet5,172.31.255.36/31 +l3leaf,DC1_LEAF-3A,Ethernet4,172.31.255.39/31,spine,DC1_SPINE-4,Ethernet5,172.31.255.38/31 +l3leaf,DC1_LEAF-3B,Ethernet1,172.31.255.41/31,spine,DC1_SPINE-1,Ethernet6,172.31.255.40/31 +l3leaf,DC1_LEAF-3B,Ethernet2,172.31.255.43/31,spine,DC1_SPINE-2,Ethernet6,172.31.255.42/31 +l3leaf,DC1_LEAF-3B,Ethernet3,172.31.255.45/31,spine,DC1_SPINE-3,Ethernet6,172.31.255.44/31 +l3leaf,DC1_LEAF-3B,Ethernet4,172.31.255.47/31,spine,DC1_SPINE-4,Ethernet6,172.31.255.46/31 diff --git a/inventory/documentation/fabric/DC1_FABRIC-topology.csv b/inventory/documentation/fabric/DC1_FABRIC-topology.csv index 16244c496..e312bcd07 100644 --- a/inventory/documentation/fabric/DC1_FABRIC-topology.csv +++ b/inventory/documentation/fabric/DC1_FABRIC-topology.csv @@ -1,35 +1,55 @@ Node Type,Node,Node Interface,Peer Type,Peer,Peer Interface -l2leaf,DC1-L2LEAF1A,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet5 -l2leaf,DC1-L2LEAF1A,Ethernet2,l3leaf,DC1-LEAF1B,Ethernet5 -l2leaf,DC1-L2LEAF1A,Ethernet5,server,server01,Eth0 -l2leaf,DC1-L2LEAF2A,Ethernet1,l3leaf,DC1-LEAF2A,Ethernet5 -l2leaf,DC1-L2LEAF2A,Ethernet2,l3leaf,DC1-LEAF2B,Ethernet5 -l2leaf,DC1-L2LEAF2A,Ethernet5,server,server02,Eth0 -l3leaf,DC1-LEAF1A,Ethernet1,spine,DC1-SPINE1,Ethernet1 -l3leaf,DC1-LEAF1A,Ethernet2,spine,DC1-SPINE2,Ethernet1 -l3leaf,DC1-LEAF1A,Ethernet3,mlag_peer,DC1-LEAF1B,Ethernet3 -l3leaf,DC1-LEAF1A,Ethernet4,mlag_peer,DC1-LEAF1B,Ethernet4 -l3leaf,DC1-LEAF1A,Ethernet5,l2leaf,DC1-L2LEAF1A,Ethernet1 -l3leaf,DC1-LEAF1B,Ethernet1,spine,DC1-SPINE1,Ethernet2 -l3leaf,DC1-LEAF1B,Ethernet2,spine,DC1-SPINE2,Ethernet2 -l3leaf,DC1-LEAF1B,Ethernet3,mlag_peer,DC1-LEAF1A,Ethernet3 -l3leaf,DC1-LEAF1B,Ethernet4,mlag_peer,DC1-LEAF1A,Ethernet4 -l3leaf,DC1-LEAF1B,Ethernet5,l2leaf,DC1-L2LEAF1A,Ethernet2 -l3leaf,DC1-LEAF2A,Ethernet1,spine,DC1-SPINE1,Ethernet3 -l3leaf,DC1-LEAF2A,Ethernet2,spine,DC1-SPINE2,Ethernet3 -l3leaf,DC1-LEAF2A,Ethernet3,mlag_peer,DC1-LEAF2B,Ethernet3 -l3leaf,DC1-LEAF2A,Ethernet4,mlag_peer,DC1-LEAF2B,Ethernet4 -l3leaf,DC1-LEAF2A,Ethernet5,l2leaf,DC1-L2LEAF2A,Ethernet1 -l3leaf,DC1-LEAF2B,Ethernet1,spine,DC1-SPINE1,Ethernet4 -l3leaf,DC1-LEAF2B,Ethernet2,spine,DC1-SPINE2,Ethernet4 -l3leaf,DC1-LEAF2B,Ethernet3,mlag_peer,DC1-LEAF2A,Ethernet3 -l3leaf,DC1-LEAF2B,Ethernet4,mlag_peer,DC1-LEAF2A,Ethernet4 -l3leaf,DC1-LEAF2B,Ethernet5,l2leaf,DC1-L2LEAF2A,Ethernet2 -spine,DC1-SPINE1,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet1 -spine,DC1-SPINE1,Ethernet2,l3leaf,DC1-LEAF1B,Ethernet1 -spine,DC1-SPINE1,Ethernet3,l3leaf,DC1-LEAF2A,Ethernet1 -spine,DC1-SPINE1,Ethernet4,l3leaf,DC1-LEAF2B,Ethernet1 -spine,DC1-SPINE2,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet2 -spine,DC1-SPINE2,Ethernet2,l3leaf,DC1-LEAF1B,Ethernet2 -spine,DC1-SPINE2,Ethernet3,l3leaf,DC1-LEAF2A,Ethernet2 -spine,DC1-SPINE2,Ethernet4,l3leaf,DC1-LEAF2B,Ethernet2 +l3leaf,DC1_LEAF-1A,Ethernet1,spine,DC1_SPINE-1,Ethernet1 +l3leaf,DC1_LEAF-1A,Ethernet2,spine,DC1_SPINE-2,Ethernet1 +l3leaf,DC1_LEAF-1A,Ethernet3,spine,DC1_SPINE-3,Ethernet1 +l3leaf,DC1_LEAF-1A,Ethernet4,spine,DC1_SPINE-4,Ethernet1 +l3leaf,DC1_LEAF-1A,Ethernet5,mlag_peer,DC1_LEAF-1B,Ethernet5 +l3leaf,DC1_LEAF-1B,Ethernet1,spine,DC1_SPINE-1,Ethernet2 +l3leaf,DC1_LEAF-1B,Ethernet2,spine,DC1_SPINE-2,Ethernet2 +l3leaf,DC1_LEAF-1B,Ethernet3,spine,DC1_SPINE-3,Ethernet2 +l3leaf,DC1_LEAF-1B,Ethernet4,spine,DC1_SPINE-4,Ethernet2 +l3leaf,DC1_LEAF-1B,Ethernet5,mlag_peer,DC1_LEAF-1A,Ethernet5 +l3leaf,DC1_LEAF-2A,Ethernet1,spine,DC1_SPINE-1,Ethernet3 +l3leaf,DC1_LEAF-2A,Ethernet2,spine,DC1_SPINE-2,Ethernet3 +l3leaf,DC1_LEAF-2A,Ethernet3,spine,DC1_SPINE-3,Ethernet3 +l3leaf,DC1_LEAF-2A,Ethernet4,spine,DC1_SPINE-4,Ethernet3 +l3leaf,DC1_LEAF-2A,Ethernet5,mlag_peer,DC1_LEAF-2B,Ethernet5 +l3leaf,DC1_LEAF-2B,Ethernet1,spine,DC1_SPINE-1,Ethernet4 +l3leaf,DC1_LEAF-2B,Ethernet2,spine,DC1_SPINE-2,Ethernet4 +l3leaf,DC1_LEAF-2B,Ethernet3,spine,DC1_SPINE-3,Ethernet4 +l3leaf,DC1_LEAF-2B,Ethernet4,spine,DC1_SPINE-4,Ethernet4 +l3leaf,DC1_LEAF-2B,Ethernet5,mlag_peer,DC1_LEAF-2A,Ethernet5 +l3leaf,DC1_LEAF-3A,Ethernet1,spine,DC1_SPINE-1,Ethernet5 +l3leaf,DC1_LEAF-3A,Ethernet2,spine,DC1_SPINE-2,Ethernet5 +l3leaf,DC1_LEAF-3A,Ethernet3,spine,DC1_SPINE-3,Ethernet5 +l3leaf,DC1_LEAF-3A,Ethernet4,spine,DC1_SPINE-4,Ethernet5 +l3leaf,DC1_LEAF-3A,Ethernet5,mlag_peer,DC1_LEAF-3B,Ethernet5 +l3leaf,DC1_LEAF-3B,Ethernet1,spine,DC1_SPINE-1,Ethernet6 +l3leaf,DC1_LEAF-3B,Ethernet2,spine,DC1_SPINE-2,Ethernet6 +l3leaf,DC1_LEAF-3B,Ethernet3,spine,DC1_SPINE-3,Ethernet6 +l3leaf,DC1_LEAF-3B,Ethernet4,spine,DC1_SPINE-4,Ethernet6 +l3leaf,DC1_LEAF-3B,Ethernet5,mlag_peer,DC1_LEAF-3A,Ethernet5 +spine,DC1_SPINE-1,Ethernet1,l3leaf,DC1_LEAF-1A,Ethernet1 +spine,DC1_SPINE-1,Ethernet2,l3leaf,DC1_LEAF-1B,Ethernet1 +spine,DC1_SPINE-1,Ethernet3,l3leaf,DC1_LEAF-2A,Ethernet1 +spine,DC1_SPINE-1,Ethernet4,l3leaf,DC1_LEAF-2B,Ethernet1 +spine,DC1_SPINE-1,Ethernet5,l3leaf,DC1_LEAF-3A,Ethernet1 +spine,DC1_SPINE-1,Ethernet6,l3leaf,DC1_LEAF-3B,Ethernet1 +spine,DC1_SPINE-2,Ethernet1,l3leaf,DC1_LEAF-1A,Ethernet2 +spine,DC1_SPINE-2,Ethernet2,l3leaf,DC1_LEAF-1B,Ethernet2 +spine,DC1_SPINE-2,Ethernet3,l3leaf,DC1_LEAF-2A,Ethernet2 +spine,DC1_SPINE-2,Ethernet4,l3leaf,DC1_LEAF-2B,Ethernet2 +spine,DC1_SPINE-2,Ethernet5,l3leaf,DC1_LEAF-3A,Ethernet2 +spine,DC1_SPINE-2,Ethernet6,l3leaf,DC1_LEAF-3B,Ethernet2 +spine,DC1_SPINE-3,Ethernet1,l3leaf,DC1_LEAF-1A,Ethernet3 +spine,DC1_SPINE-3,Ethernet2,l3leaf,DC1_LEAF-1B,Ethernet3 +spine,DC1_SPINE-3,Ethernet3,l3leaf,DC1_LEAF-2A,Ethernet3 +spine,DC1_SPINE-3,Ethernet4,l3leaf,DC1_LEAF-2B,Ethernet3 +spine,DC1_SPINE-3,Ethernet5,l3leaf,DC1_LEAF-3A,Ethernet3 +spine,DC1_SPINE-3,Ethernet6,l3leaf,DC1_LEAF-3B,Ethernet3 +spine,DC1_SPINE-4,Ethernet1,l3leaf,DC1_LEAF-1A,Ethernet4 +spine,DC1_SPINE-4,Ethernet2,l3leaf,DC1_LEAF-1B,Ethernet4 +spine,DC1_SPINE-4,Ethernet3,l3leaf,DC1_LEAF-2A,Ethernet4 +spine,DC1_SPINE-4,Ethernet4,l3leaf,DC1_LEAF-2B,Ethernet4 +spine,DC1_SPINE-4,Ethernet5,l3leaf,DC1_LEAF-3A,Ethernet4 +spine,DC1_SPINE-4,Ethernet6,l3leaf,DC1_LEAF-3B,Ethernet4 diff --git a/inventory/group_vars/CVP.yml b/inventory/group_vars/CVP.yml index 706f92830..f33040a8a 100644 --- a/inventory/group_vars/CVP.yml +++ b/inventory/group_vars/CVP.yml @@ -1,47 +1,52 @@ --- ztp: default: - registration: 'http://10.255.0.1/ztp/bootstrap' - gateway: 10.255.0.3 + registration: 'http://172.16.47.11/ztp/bootstrap' + gateway: 172.16.47.1 nameservers: - - '10.255.0.3' + - '172.16.47.12' general: subnets: - - network: 10.255.0.0 + - network: 172.16.47.0 netmask: 255.255.255.0 - gateway: 10.255.0.3 + gateway: 172.16.47.1 nameservers: - - '10.255.0.3' - start: 10.255.0.200 - end: 10.255.0.250 - lease_time: 300 + - '172.16.47.12' + start: 172.16.47.21 + end: 172.16.47.61 + lease_time: 86400 clients: - # GNS3 VM Request - - name: gns3 - mac: '00:50:56:86:8b:2f' - ip4: 10.255.0.2 # AVD/CVP Integration - - name: DC1-SPINE1 - mac: '0c:1d:c0:1d:62:01' - ip4: 10.255.0.11 - - name: DC1-SPINE2 - mac: '0c:1d:c0:1d:62:02' - ip4: 10.255.0.12 - - name: DC1-LEAF1A - mac: '0c:1d:c0:1d:62:11' - ip4: 10.255.0.13 - - name: DC1-LEAF1B - mac: '0c:1d:c0:1d:62:12' - ip4: 10.255.0.14 - - name: DC1-LEAF2A - mac: '0c:1d:c0:1d:62:21' - ip4: 10.255.0.15 - - name: DC1-LEAF2B - mac: '0c:1d:c0:1d:62:22' - ip4: 10.255.0.16 - - name: DC1-L2LEAF1A - mac: '0c:1d:c0:1d:62:13' - ip4: 10.255.0.17 - - name: DC1-L2LEAF2A - mac: '0c:1d:c0:1d:62:23' - ip4: 10.255.0.18 + - name: DC1_SPINE-1 + mac: '28:99:3a:00:01:00' + ip4: 172.16.47.21 + - name: DC1_SPINE-2 + mac: '28:99:3a:00:02:00' + ip4: 172.16.47.22 + - name: DC1_SPINE-3 + mac: '28:99:3a:00:03:00' + ip4: 172.16.47.23 + - name: DC1_SPINE-4 + mac: '28:99:3a:00:04:00' + ip4: 172.16.47.24 + - name: DC1_LEAF-1A + mac: '28:99:3A:00:11:00' + ip4: 172.16.47.31 + - name: DC1_LEAF-1B + mac: '28:99:3A:00:12:00' + ip4: 172.16.47.32 + - name: DC1_LEAF-2A + mac: '28:99:3A:00:13:00' + ip4: 172.16.47.33 + - name: DC1_LEAF-2B + mac: '28:99:3A:00:14:00' + ip4: 172.16.47.34 + - name: DC1_LEAF-3A + mac: '28:99:3A:00:15:00' + ip4: 172.16.47.35 + - name: DC1_LEAF-3B + mac: '28:99:3A:00:16:00' + ip4: 172.16.47.36 + - name: DUT-1 + mac: '28:99:3A:00:50:00' + ip4: 172.16.47.60 \ No newline at end of file diff --git a/inventory/group_vars/DC1.yml b/inventory/group_vars/DC1.yml index 0220f906f..a38cd4208 100644 --- a/inventory/group_vars/DC1.yml +++ b/inventory/group_vars/DC1.yml @@ -10,7 +10,7 @@ local_users: cvpadmin: privilege: 15 role: network-admin - sha512_password: "$6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj." + sha512_password: "$6$qDjBp7wpEvJ6jQFw$0.hVna8IW8ksCWLGosaLANrwW8xGGSV6on1YiZHN6npE/Pi2vAYPYtrCcPE7uy217e/ArEoYDoKjHFkHN0pGb0" ansible: privilege: 15 @@ -18,18 +18,18 @@ local_users: sha512_password: "$6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/" # Cloud Vision server information -cvp_instance_ip: 10.255.0.1 -cvp_ingestauth_key: '' +cvp_instance_ip: 172.16.47.11 +cvp_ingestauth_key: '@rista123!' # cvp_ingestauth_key: telarista # OOB Management network default gateway. mgmt_interface: Management1 mgmt_interface_vrf: MGMT -mgmt_gateway: 10.255.0.1 +mgmt_gateway: 172.16.47.1 # dns servers. name_servers: - - 192.168.2.1 + - 172.16.47.12 - 8.8.8.8 # NTP Servers IP or DNS name, first NTP server will be prefered, and sourced from Managment VRF @@ -38,8 +38,6 @@ custom_structured_configuration_ntp: name: Management1 vrf: MGMT servers: - - name: 0.fr.pool.ntp.org + - name: time.google.com preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org vrf: MGMT \ No newline at end of file diff --git a/inventory/group_vars/DC1_FABRIC.yml b/inventory/group_vars/DC1_FABRIC.yml index 5e9f128fd..899c4b731 100644 --- a/inventory/group_vars/DC1_FABRIC.yml +++ b/inventory/group_vars/DC1_FABRIC.yml @@ -16,10 +16,30 @@ bgp_peer_groups: MLAG_IPv4_UNDERLAY_PEER: password: "vnEaG8gMeQf3d3cN6PktXQ==" +# Point to Point Network Summary range, assigned as /31 for each +# uplink interfaces +# Assign range larger then total [spines * total potential leafs * 2] +#underlay_p2p_network_summary: 172.31.255.0/24 + +# IP address range for evpn loopback for all switches in fabric, +# assigned as /32s +# Assign range larger then total spines + total leafs switches +#overlay_loopback_network_summary: 192.168.255.0/24 + +# VTEP VXLAN Tunnel source loopback IP for leaf switches, assigned in /32s +# Assign range larger then total leaf switches +#vtep_loopback_network_summary: 192.168.254.0/24 + +# mlag pair IP assignment - assign blocks - Assign range larger then +# total spines + total leafs switches +#mlag_ips: +# leaf_peer_l3: 10.255.251.0/24 +# mlag_peer: 10.255.252.0/24 + # Spine Switches spine: defaults: - platform: vEOS-LAB + platform: vEOS bgp_as: 65001 loopback_ipv4_pool: 192.168.255.0/24 bgp_defaults: @@ -30,12 +50,18 @@ spine: mlag_peer_ipv4_pool: 10.255.252.0/24 mlag_peer_l3_ipv4_pool: 10.255.251.0/24 nodes: - DC1-SPINE1: + DC1_SPINE-1: id: 1 - mgmt_ip: 10.255.0.11/24 - DC1-SPINE2: + mgmt_ip: 172.16.47.21/24 + DC1_SPINE-2: id: 2 - mgmt_ip: 10.255.0.12/24 + mgmt_ip: 172.16.47.22/24 + DC1_SPINE-3: + id: 3 + mgmt_ip: 172.16.47.23/24 + DC1_SPINE-4: + id: 4 + mgmt_ip: 172.16.47.24/24 # Leaf switch groups # A maximum of two nodes can form a leaf group @@ -43,14 +69,14 @@ spine: l3leaf: defaults: - platform: vEOS-LAB + platform: vEOS loopback_ipv4_pool: 192.168.255.0/24 loopback_ipv4_offset: 2 vtep_loopback_ipv4_pool: 192.168.254.0/24 - uplink_interfaces: ['Ethernet1', 'Ethernet2'] - uplink_switches: ['DC1-SPINE1', 'DC1-SPINE2'] + uplink_interfaces: ['Ethernet1', 'Ethernet2', 'Ethernet3', 'Ethernet4'] + uplink_switches: ['DC1_SPINE-1', 'DC1_SPINE-2', 'DC1_SPINE-3', 'DC1_SPINE-4'] uplink_ipv4_pool: 172.31.255.0/24 - mlag_interfaces: [ Ethernet3, Ethernet4 ] + mlag_interfaces: [ Ethernet5 ] mlag_peer_ipv4_pool: 10.255.252.0/24 mlag_peer_l3_ipv4_pool: 10.255.251.0/24 virtual_router_mac_address: 00:1c:73:00:dc:01 @@ -65,60 +91,71 @@ l3leaf: DC1_LEAF1: bgp_as: 65101 nodes: - DC1-LEAF1A: + DC1_LEAF-1A: id: 1 - mgmt_ip: 10.255.0.13/24 - uplink_switch_interfaces: [Ethernet1, Ethernet1] - DC1-LEAF1B: + mgmt_ip: 172.16.47.31/24 + uplink_switch_interfaces: [Ethernet1, Ethernet1, Ethernet1, Ethernet1] + DC1_LEAF-1B: id: 2 - mgmt_ip: 10.255.0.14/24 - uplink_switch_interfaces: [Ethernet2, Ethernet2] + mgmt_ip: 172.16.47.32/24 + uplink_switch_interfaces: [Ethernet2, Ethernet2, Ethernet2, Ethernet2] DC1_LEAF2: bgp_as: 65102 nodes: - DC1-LEAF2A: + DC1_LEAF-2A: id: 3 - mgmt_ip: 10.255.0.15/24 - uplink_switch_interfaces: [Ethernet3, Ethernet3] - DC1-LEAF2B: + mgmt_ip: 172.16.47.33/24 + uplink_switch_interfaces: [Ethernet3, Ethernet3, Ethernet3, Ethernet3] + DC1_LEAF-2B: id: 4 - mgmt_ip: 10.255.0.16/24 - uplink_switch_interfaces: [Ethernet4, Ethernet4] - - -l2leaf: - defaults: - platform: vEOS-LAB - uplink_switches: ['DC1-LEAF1A', 'DC1-LEAF1B'] - uplink_interfaces: [ Ethernet1, Ethernet2 ] - mlag_interfaces: [ Ethernet3, Ethernet4 ] - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - mlag: false - node_groups: - DC1_L2LEAF1: - uplink_switches: [ DC1-LEAF1A, DC1-LEAF1B ] - filter: - tenants: [ Tenant_A ] - tags: [ opzone, web, app ] + mgmt_ip: 172.16.47.34/24 + uplink_switch_interfaces: [Ethernet4, Ethernet4, Ethernet4, Ethernet4] + DC1_LEAF3: + bgp_as: 65103 nodes: - DC1-L2LEAF1A: + DC1_LEAF-3A: id: 5 - mgmt_ip: 10.255.0.17/24 - uplink_switch_interfaces: [ Ethernet5, Ethernet5 ] - DC1_L2LEAF2: - uplink_switches: [ DC1-LEAF2A, DC1-LEAF2B ] - filter: - tenants: [ Tenant_A ] - tags: [ opzone, web, app ] - nodes: - DC1-L2LEAF2A: - id: 7 - mgmt_ip: 10.255.0.18/24 - uplink_switch_interfaces: [ Ethernet5, Ethernet5 ] + mgmt_ip: 172.16.47.35/24 + uplink_switch_interfaces: [Ethernet5, Ethernet5, Ethernet5, Ethernet5] + DC1_LEAF-3B: + id: 6 + mgmt_ip: 172.16.47.36/24 + uplink_switch_interfaces: [Ethernet6, Ethernet6, Ethernet6, Ethernet6] + + +#l2leaf: +# defaults: +# platform: vEOS-LAB +# uplink_switches: ['DC1-LEAF1A', 'DC1-LEAF1B'] +# uplink_interfaces: [ Ethernet1, Ethernet2 ] +# mlag_interfaces: [ Ethernet3, Ethernet4 ] +# mlag_peer_ipv4_pool: 10.255.252.0/24 +# mlag_peer_l3_ipv4_pool: 10.255.251.0/24 +# virtual_router_mac_address: 00:1c:73:00:dc:01 +# spanning_tree_mode: mstp +# spanning_tree_priority: 16384 +# mlag: false +# node_groups: +# DC1_L2LEAF1: +# uplink_switches: [ DC1-LEAF1A, DC1-LEAF1B ] +# filter: +# tenants: [ Tenant_A ] +# tags: [ opzone, web, app ] +# nodes: +# DC1-L2LEAF1A: +# id: 5 +# mgmt_ip: 10.255.0.17/24 +# uplink_switch_interfaces: [ Ethernet5, Ethernet5 ] +# DC1_L2LEAF2: +# uplink_switches: [ DC1-LEAF2A, DC1-LEAF2B ] +# filter: +# tenants: [ Tenant_A ] +# tags: [ opzone, web, app ] +# nodes: +# DC1-L2LEAF2A: +# id: 7 +# mgmt_ip: 10.255.0.18/24 +# uplink_switch_interfaces: [ Ethernet5, Ethernet5 ] #### Override for vEOS Lab Caveats #### @@ -127,7 +164,8 @@ l2leaf: # Refer to design guide # Update p2p mtu 9000 -> 1500 -p2p_uplinks_mtu: 1500 +# p2p_uplinks_mtu: 1500 +p2p_uplinks_mtu: 9000 # Adjust default bfd values bfd_multihop: diff --git a/inventory/intended/configs/DC1-L2LEAF1A.cfg b/inventory/intended/configs/DC1-L2LEAF1A.cfg deleted file mode 100644 index 465a31462..000000000 --- a/inventory/intended/configs/DC1-L2LEAF1A.cfg +++ /dev/null @@ -1,96 +0,0 @@ -!RANCID-CONTENT-TYPE: arista -! -daemon TerminAttr - exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs - no shutdown -! -vlan internal order ascending range 1006 1199 -! -transceiver qsfp default-mode 4x10G -! -service routing protocols model multi-agent -! -hostname DC1-L2LEAF1A -ip name-server vrf MGMT 8.8.8.8 -ip name-server vrf MGMT 192.168.2.1 -! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.fr.pool.ntp.org prefer -ntp server vrf MGMT 1.fr.pool.ntp.org -! -spanning-tree mode mstp -spanning-tree mst 0 priority 16384 -! -no aaa root -no enable password -! -username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 -username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! -vlan 110 - name Tenant_A_OP_Zone_1 -! -vlan 111 - name Tenant_A_OP_Zone_2 -! -vlan 112 - name Tenant_A_OP_Zone_3 -! -vlan 120 - name Tenant_A_WEB_Zone_1 -! -vlan 121 - name Tenant_A_WEBZone_2 -! -vlan 130 - name Tenant_A_APP_Zone_1 -! -vlan 131 - name Tenant_A_APP_Zone_2 -! -vrf instance MGMT -! -interface Port-Channel1 - description DC1_LEAF1_Po5 - no shutdown - switchport - switchport trunk allowed vlan 110-112,120-121,130-131 - switchport mode trunk -! -interface Ethernet1 - description DC1-LEAF1A_Ethernet5 - no shutdown - channel-group 1 mode active -! -interface Ethernet2 - description DC1-LEAF1B_Ethernet5 - no shutdown - channel-group 1 mode active -! -interface Ethernet5 - description server01_Eth0 - no shutdown - switchport - switchport access vlan 110 - switchport mode access -! -interface Management1 - description oob_management - no shutdown - vrf MGMT - ip address 10.255.0.17/24 -! -ip routing -no ip routing vrf MGMT -! -ip route vrf MGMT 0.0.0.0/0 10.255.0.1 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -end diff --git a/inventory/intended/configs/DC1-L2LEAF2A.cfg b/inventory/intended/configs/DC1-L2LEAF2A.cfg deleted file mode 100644 index 52a85eb80..000000000 --- a/inventory/intended/configs/DC1-L2LEAF2A.cfg +++ /dev/null @@ -1,96 +0,0 @@ -!RANCID-CONTENT-TYPE: arista -! -daemon TerminAttr - exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs - no shutdown -! -vlan internal order ascending range 1006 1199 -! -transceiver qsfp default-mode 4x10G -! -service routing protocols model multi-agent -! -hostname DC1-L2LEAF2A -ip name-server vrf MGMT 8.8.8.8 -ip name-server vrf MGMT 192.168.2.1 -! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.fr.pool.ntp.org prefer -ntp server vrf MGMT 1.fr.pool.ntp.org -! -spanning-tree mode mstp -spanning-tree mst 0 priority 16384 -! -no aaa root -no enable password -! -username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 -username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! -vlan 110 - name Tenant_A_OP_Zone_1 -! -vlan 111 - name Tenant_A_OP_Zone_2 -! -vlan 112 - name Tenant_A_OP_Zone_3 -! -vlan 120 - name Tenant_A_WEB_Zone_1 -! -vlan 121 - name Tenant_A_WEBZone_2 -! -vlan 130 - name Tenant_A_APP_Zone_1 -! -vlan 131 - name Tenant_A_APP_Zone_2 -! -vrf instance MGMT -! -interface Port-Channel1 - description DC1_LEAF2_Po5 - no shutdown - switchport - switchport trunk allowed vlan 110-112,120-121,130-131 - switchport mode trunk -! -interface Ethernet1 - description DC1-LEAF2A_Ethernet5 - no shutdown - channel-group 1 mode active -! -interface Ethernet2 - description DC1-LEAF2B_Ethernet5 - no shutdown - channel-group 1 mode active -! -interface Ethernet5 - description server02_Eth0 - no shutdown - switchport - switchport access vlan 110 - switchport mode access -! -interface Management1 - description oob_management - no shutdown - vrf MGMT - ip address 10.255.0.18/24 -! -ip routing -no ip routing vrf MGMT -! -ip route vrf MGMT 0.0.0.0/0 10.255.0.1 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -end diff --git a/inventory/intended/configs/DC1-LEAF1A.cfg b/inventory/intended/configs/DC1-LEAF1A.cfg deleted file mode 100644 index 9b2651712..000000000 --- a/inventory/intended/configs/DC1-LEAF1A.cfg +++ /dev/null @@ -1,651 +0,0 @@ -!RANCID-CONTENT-TYPE: arista -! -daemon TerminAttr - exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs - no shutdown -! -vlan internal order ascending range 1006 1199 -! -transceiver qsfp default-mode 4x10G -! -service routing protocols model multi-agent -! -hostname DC1-LEAF1A -ip name-server vrf MGMT 8.8.8.8 -ip name-server vrf MGMT 192.168.2.1 -! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.fr.pool.ntp.org prefer -ntp server vrf MGMT 1.fr.pool.ntp.org -! -spanning-tree mode mstp -no spanning-tree vlan-id 4093-4094 -spanning-tree mst 0 priority 16384 -! -no aaa root -no enable password -! -username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 -username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! -vlan 110 - name Tenant_A_OP_Zone_1 -! -vlan 111 - name Tenant_A_OP_Zone_2 -! -vlan 112 - name Tenant_A_OP_Zone_3 -! -vlan 120 - name Tenant_A_WEB_Zone_1 -! -vlan 121 - name Tenant_A_WEBZone_2 -! -vlan 130 - name Tenant_A_APP_Zone_1 -! -vlan 131 - name Tenant_A_APP_Zone_2 -! -vlan 140 - name Tenant_A_DB_BZone_1 -! -vlan 141 - name Tenant_A_DB_Zone_2 -! -vlan 150 - name Tenant_A_WAN_Zone_1 -! -vlan 160 - name Tenant_A_VMOTION -! -vlan 161 - name Tenant_A_NFS -! -vlan 210 - name Tenant_B_OP_Zone_1 -! -vlan 211 - name Tenant_B_OP_Zone_2 -! -vlan 250 - name Tenant_B_WAN_Zone_1 -! -vlan 310 - name Tenant_C_OP_Zone_1 -! -vlan 311 - name Tenant_C_OP_Zone_2 -! -vlan 350 - name Tenant_C_WAN_Zone_1 -! -vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 -! -vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 -! -vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 -! -vlan 4094 - name MLAG_PEER - trunk group MLAG -! -vrf instance MGMT -! -vrf instance Tenant_A_APP_Zone -! -vrf instance Tenant_A_DB_Zone -! -vrf instance Tenant_A_OP_Zone -! -vrf instance Tenant_A_WAN_Zone -! -vrf instance Tenant_A_WEB_Zone -! -vrf instance Tenant_B_OP_Zone -! -vrf instance Tenant_B_WAN_Zone -! -vrf instance Tenant_C_OP_Zone -! -vrf instance Tenant_C_WAN_Zone -! -interface Port-Channel3 - description MLAG_PEER_DC1-LEAF1B_Po3 - no shutdown - switchport - switchport trunk allowed vlan 2-4094 - switchport mode trunk - switchport trunk group LEAF_PEER_L3 - switchport trunk group MLAG -! -interface Port-Channel5 - description DC1-L2LEAF1A_Po1 - no shutdown - switchport - switchport trunk allowed vlan 110-112,120-121,130-131 - switchport mode trunk - mlag 5 -! -interface Ethernet1 - description P2P_LINK_TO_DC1-SPINE1_Ethernet1 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.1/31 -! -interface Ethernet2 - description P2P_LINK_TO_DC1-SPINE2_Ethernet1 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.3/31 -! -interface Ethernet3 - description MLAG_PEER_DC1-LEAF1B_Ethernet3 - no shutdown - channel-group 3 mode active -! -interface Ethernet4 - description MLAG_PEER_DC1-LEAF1B_Ethernet4 - no shutdown - channel-group 3 mode active -! -interface Ethernet5 - description DC1-L2LEAF1A_Ethernet1 - no shutdown - channel-group 5 mode active -! -interface Loopback0 - description EVPN_Overlay_Peering - no shutdown - ip address 192.168.255.3/32 -! -interface Loopback1 - description VTEP_VXLAN_Tunnel_Source - no shutdown - ip address 192.168.254.3/32 -! -interface Loopback100 - description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS - no shutdown - vrf Tenant_A_OP_Zone - ip address 10.255.1.3/32 -! -interface Management1 - description oob_management - no shutdown - vrf MGMT - ip address 10.255.0.13/24 -! -interface Vlan110 - description Tenant_A_OP_Zone_1 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.10.1/24 -! -interface Vlan111 - description Tenant_A_OP_Zone_2 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.11.1/24 -! -interface Vlan112 - description Tenant_A_OP_Zone_3 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.12.254/24 -! -interface Vlan120 - description Tenant_A_WEB_Zone_1 - no shutdown - vrf Tenant_A_WEB_Zone -! -interface Vlan121 - description Tenant_A_WEBZone_2 - no shutdown - vrf Tenant_A_WEB_Zone - ip address virtual 10.1.21.1/24 -! -interface Vlan130 - description Tenant_A_APP_Zone_1 - no shutdown - vrf Tenant_A_APP_Zone -! -interface Vlan131 - description Tenant_A_APP_Zone_2 - no shutdown - vrf Tenant_A_APP_Zone - ip address virtual 10.1.31.254/24 -! -interface Vlan140 - description Tenant_A_DB_BZone_1 - no shutdown - vrf Tenant_A_DB_Zone - ip address virtual 10.1.40.1/24 -! -interface Vlan141 - description Tenant_A_DB_Zone_2 - no shutdown - vrf Tenant_A_DB_Zone - ip address virtual 10.1.41.1/24 -! -interface Vlan150 - description Tenant_A_WAN_Zone_1 - no shutdown - vrf Tenant_A_WAN_Zone - ip address virtual 10.1.40.1/24 -! -interface Vlan210 - description Tenant_B_OP_Zone_1 - no shutdown - vrf Tenant_B_OP_Zone -! -interface Vlan211 - description Tenant_B_OP_Zone_2 - no shutdown - vrf Tenant_B_OP_Zone - ip address virtual 10.2.11.1/24 -! -interface Vlan250 - description Tenant_B_WAN_Zone_1 - no shutdown - vrf Tenant_B_WAN_Zone - ip address virtual 10.2.50.1/24 -! -interface Vlan310 - description Tenant_C_OP_Zone_1 - no shutdown - vrf Tenant_C_OP_Zone -! -interface Vlan311 - description Tenant_C_OP_Zone_2 - no shutdown - vrf Tenant_C_OP_Zone -! -interface Vlan350 - description Tenant_C_WAN_Zone_1 - no shutdown - vrf Tenant_C_WAN_Zone -! -interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_A_OP_Zone - ip address 10.255.251.0/31 -! -interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone - no shutdown - mtu 1500 - vrf Tenant_A_WEB_Zone - ip address 10.255.251.0/31 -! -interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone - no shutdown - mtu 1500 - vrf Tenant_A_APP_Zone - ip address 10.255.251.0/31 -! -interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone - no shutdown - mtu 1500 - vrf Tenant_A_DB_Zone - ip address 10.255.251.0/31 -! -interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_A_WAN_Zone - ip address 10.255.251.0/31 -! -interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_B_OP_Zone - ip address 10.255.251.0/31 -! -interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_B_WAN_Zone - ip address 10.255.251.0/31 -! -interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_C_OP_Zone - ip address 10.255.251.0/31 -! -interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_C_WAN_Zone - ip address 10.255.251.0/31 -! -interface Vlan4093 - description MLAG_PEER_L3_PEERING - no shutdown - mtu 1500 - ip address 10.255.251.0/31 -! -interface Vlan4094 - description MLAG_PEER - no shutdown - mtu 1500 - no autostate - ip address 10.255.252.0/31 -! -interface Vxlan1 - description DC1-LEAF1A_VTEP - vxlan source-interface Loopback1 - vxlan virtual-router encapsulation mac-address mlag-system-id - vxlan udp-port 4789 - vxlan vlan 110 vni 10110 - vxlan vlan 111 vni 50111 - vxlan vlan 112 vni 50112 - vxlan vlan 120 vni 10120 - vxlan vlan 121 vni 10121 - vxlan vlan 130 vni 10130 - vxlan vlan 131 vni 10131 - vxlan vlan 140 vni 10140 - vxlan vlan 141 vni 10141 - vxlan vlan 150 vni 10150 - vxlan vlan 160 vni 55160 - vxlan vlan 161 vni 10161 - vxlan vlan 210 vni 20210 - vxlan vlan 211 vni 20211 - vxlan vlan 250 vni 20250 - vxlan vlan 310 vni 30310 - vxlan vlan 311 vni 30311 - vxlan vlan 350 vni 30350 - vxlan vrf Tenant_A_APP_Zone vni 12 - vxlan vrf Tenant_A_DB_Zone vni 13 - vxlan vrf Tenant_A_OP_Zone vni 10 - vxlan vrf Tenant_A_WAN_Zone vni 14 - vxlan vrf Tenant_A_WEB_Zone vni 11 - vxlan vrf Tenant_B_OP_Zone vni 20 - vxlan vrf Tenant_B_WAN_Zone vni 21 - vxlan vrf Tenant_C_OP_Zone vni 30 - vxlan vrf Tenant_C_WAN_Zone vni 31 -! -ip virtual-router mac-address 00:1c:73:00:dc:01 -! -ip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.3 -! -ip routing -no ip routing vrf MGMT -ip routing vrf Tenant_A_APP_Zone -ip routing vrf Tenant_A_DB_Zone -ip routing vrf Tenant_A_OP_Zone -ip routing vrf Tenant_A_WAN_Zone -ip routing vrf Tenant_A_WEB_Zone -ip routing vrf Tenant_B_OP_Zone -ip routing vrf Tenant_B_WAN_Zone -ip routing vrf Tenant_C_OP_Zone -ip routing vrf Tenant_C_WAN_Zone -! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 - seq 20 permit 192.168.254.0/24 eq 32 -! -mlag configuration - domain-id DC1_LEAF1 - local-interface Vlan4094 - peer-address 10.255.252.1 - peer-link Port-Channel3 - reload-delay mlag 300 - reload-delay non-mlag 330 -! -ip route vrf MGMT 0.0.0.0/0 10.255.0.1 -! -route-map RM-CONN-2-BGP permit 10 - match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -! -route-map RM-MLAG-PEER-IN permit 10 - description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing - set origin incomplete -! -router bfd - multihop interval 1200 min-rx 1200 multiplier 3 -! -router bgp 65101 - router-id 192.168.255.3 - no bgp default ipv4-unicast - distance bgp 20 200 200 - graceful-restart restart-time 300 - graceful-restart - maximum-paths 4 ecmp 4 - neighbor EVPN-OVERLAY-PEERS peer group - neighbor EVPN-OVERLAY-PEERS update-source Loopback0 - neighbor EVPN-OVERLAY-PEERS bfd - neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 - neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== - neighbor EVPN-OVERLAY-PEERS send-community - neighbor EVPN-OVERLAY-PEERS maximum-routes 0 - neighbor IPv4-UNDERLAY-PEERS peer group - neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== - neighbor IPv4-UNDERLAY-PEERS send-community - neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 - neighbor MLAG-IPv4-UNDERLAY-PEER peer group - neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65101 - neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self - neighbor MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ== - neighbor MLAG-IPv4-UNDERLAY-PEER send-community - neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 - neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in - neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.1 description DC1-LEAF1B - neighbor 172.31.255.0 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.0 remote-as 65001 - neighbor 172.31.255.0 description DC1-SPINE1_Ethernet1 - neighbor 172.31.255.2 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.2 remote-as 65001 - neighbor 172.31.255.2 description DC1-SPINE2_Ethernet1 - neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 - neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 - redistribute connected route-map RM-CONN-2-BGP - ! - vlan-aware-bundle Tenant_A_APP_Zone - rd 192.168.255.3:12 - route-target both 12:12 - redistribute learned - vlan 130-131 - ! - vlan-aware-bundle Tenant_A_DB_Zone - rd 192.168.255.3:13 - route-target both 13:13 - redistribute learned - vlan 140-141 - ! - vlan-aware-bundle Tenant_A_NFS - rd 192.168.255.3:10161 - route-target both 10161:10161 - redistribute learned - vlan 161 - ! - vlan-aware-bundle Tenant_A_OP_Zone - rd 192.168.255.3:10 - route-target both 10:10 - redistribute learned - vlan 110-112 - ! - vlan-aware-bundle Tenant_A_VMOTION - rd 192.168.255.3:55160 - route-target both 55160:55160 - redistribute learned - vlan 160 - ! - vlan-aware-bundle Tenant_A_WAN_Zone - rd 192.168.255.3:14 - route-target both 14:14 - redistribute learned - vlan 150 - ! - vlan-aware-bundle Tenant_A_WEB_Zone - rd 192.168.255.3:11 - route-target both 11:11 - redistribute learned - vlan 120-121 - ! - vlan-aware-bundle Tenant_B_OP_Zone - rd 192.168.255.3:20 - route-target both 20:20 - redistribute learned - vlan 210-211 - ! - vlan-aware-bundle Tenant_B_WAN_Zone - rd 192.168.255.3:21 - route-target both 21:21 - redistribute learned - vlan 250 - ! - vlan-aware-bundle Tenant_C_OP_Zone - rd 192.168.255.3:30 - route-target both 30:30 - redistribute learned - vlan 310-311 - ! - vlan-aware-bundle Tenant_C_WAN_Zone - rd 192.168.255.3:31 - route-target both 31:31 - redistribute learned - vlan 350 - ! - address-family evpn - neighbor EVPN-OVERLAY-PEERS activate - ! - address-family ipv4 - no neighbor EVPN-OVERLAY-PEERS activate - neighbor IPv4-UNDERLAY-PEERS activate - neighbor MLAG-IPv4-UNDERLAY-PEER activate - ! - vrf Tenant_A_APP_Zone - rd 192.168.255.3:12 - route-target import evpn 12:12 - route-target export evpn 12:12 - router-id 192.168.255.3 - neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_DB_Zone - rd 192.168.255.3:13 - route-target import evpn 13:13 - route-target export evpn 13:13 - router-id 192.168.255.3 - neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_OP_Zone - rd 192.168.255.3:10 - route-target import evpn 10:10 - route-target export evpn 10:10 - router-id 192.168.255.3 - neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_WAN_Zone - rd 192.168.255.3:14 - route-target import evpn 14:14 - route-target export evpn 14:14 - router-id 192.168.255.3 - neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_WEB_Zone - rd 192.168.255.3:11 - route-target import evpn 11:11 - route-target export evpn 11:11 - router-id 192.168.255.3 - neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_B_OP_Zone - rd 192.168.255.3:20 - route-target import evpn 20:20 - route-target export evpn 20:20 - router-id 192.168.255.3 - neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_B_WAN_Zone - rd 192.168.255.3:21 - route-target import evpn 21:21 - route-target export evpn 21:21 - router-id 192.168.255.3 - neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_C_OP_Zone - rd 192.168.255.3:30 - route-target import evpn 30:30 - route-target export evpn 30:30 - router-id 192.168.255.3 - neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_C_WAN_Zone - rd 192.168.255.3:31 - route-target import evpn 31:31 - route-target export evpn 31:31 - router-id 192.168.255.3 - neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -end diff --git a/inventory/intended/configs/DC1-LEAF1B.cfg b/inventory/intended/configs/DC1-LEAF1B.cfg deleted file mode 100644 index ced0b9a8e..000000000 --- a/inventory/intended/configs/DC1-LEAF1B.cfg +++ /dev/null @@ -1,651 +0,0 @@ -!RANCID-CONTENT-TYPE: arista -! -daemon TerminAttr - exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs - no shutdown -! -vlan internal order ascending range 1006 1199 -! -transceiver qsfp default-mode 4x10G -! -service routing protocols model multi-agent -! -hostname DC1-LEAF1B -ip name-server vrf MGMT 8.8.8.8 -ip name-server vrf MGMT 192.168.2.1 -! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.fr.pool.ntp.org prefer -ntp server vrf MGMT 1.fr.pool.ntp.org -! -spanning-tree mode mstp -no spanning-tree vlan-id 4093-4094 -spanning-tree mst 0 priority 16384 -! -no aaa root -no enable password -! -username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 -username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! -vlan 110 - name Tenant_A_OP_Zone_1 -! -vlan 111 - name Tenant_A_OP_Zone_2 -! -vlan 112 - name Tenant_A_OP_Zone_3 -! -vlan 120 - name Tenant_A_WEB_Zone_1 -! -vlan 121 - name Tenant_A_WEBZone_2 -! -vlan 130 - name Tenant_A_APP_Zone_1 -! -vlan 131 - name Tenant_A_APP_Zone_2 -! -vlan 140 - name Tenant_A_DB_BZone_1 -! -vlan 141 - name Tenant_A_DB_Zone_2 -! -vlan 150 - name Tenant_A_WAN_Zone_1 -! -vlan 160 - name Tenant_A_VMOTION -! -vlan 161 - name Tenant_A_NFS -! -vlan 210 - name Tenant_B_OP_Zone_1 -! -vlan 211 - name Tenant_B_OP_Zone_2 -! -vlan 250 - name Tenant_B_WAN_Zone_1 -! -vlan 310 - name Tenant_C_OP_Zone_1 -! -vlan 311 - name Tenant_C_OP_Zone_2 -! -vlan 350 - name Tenant_C_WAN_Zone_1 -! -vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 -! -vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 -! -vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 -! -vlan 4094 - name MLAG_PEER - trunk group MLAG -! -vrf instance MGMT -! -vrf instance Tenant_A_APP_Zone -! -vrf instance Tenant_A_DB_Zone -! -vrf instance Tenant_A_OP_Zone -! -vrf instance Tenant_A_WAN_Zone -! -vrf instance Tenant_A_WEB_Zone -! -vrf instance Tenant_B_OP_Zone -! -vrf instance Tenant_B_WAN_Zone -! -vrf instance Tenant_C_OP_Zone -! -vrf instance Tenant_C_WAN_Zone -! -interface Port-Channel3 - description MLAG_PEER_DC1-LEAF1A_Po3 - no shutdown - switchport - switchport trunk allowed vlan 2-4094 - switchport mode trunk - switchport trunk group LEAF_PEER_L3 - switchport trunk group MLAG -! -interface Port-Channel5 - description DC1-L2LEAF1A_Po1 - no shutdown - switchport - switchport trunk allowed vlan 110-112,120-121,130-131 - switchport mode trunk - mlag 5 -! -interface Ethernet1 - description P2P_LINK_TO_DC1-SPINE1_Ethernet2 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.5/31 -! -interface Ethernet2 - description P2P_LINK_TO_DC1-SPINE2_Ethernet2 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.7/31 -! -interface Ethernet3 - description MLAG_PEER_DC1-LEAF1A_Ethernet3 - no shutdown - channel-group 3 mode active -! -interface Ethernet4 - description MLAG_PEER_DC1-LEAF1A_Ethernet4 - no shutdown - channel-group 3 mode active -! -interface Ethernet5 - description DC1-L2LEAF1A_Ethernet2 - no shutdown - channel-group 5 mode active -! -interface Loopback0 - description EVPN_Overlay_Peering - no shutdown - ip address 192.168.255.4/32 -! -interface Loopback1 - description VTEP_VXLAN_Tunnel_Source - no shutdown - ip address 192.168.254.3/32 -! -interface Loopback100 - description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS - no shutdown - vrf Tenant_A_OP_Zone - ip address 10.255.1.4/32 -! -interface Management1 - description oob_management - no shutdown - vrf MGMT - ip address 10.255.0.14/24 -! -interface Vlan110 - description Tenant_A_OP_Zone_1 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.10.1/24 -! -interface Vlan111 - description Tenant_A_OP_Zone_2 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.11.1/24 -! -interface Vlan112 - description Tenant_A_OP_Zone_3 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.12.254/24 -! -interface Vlan120 - description Tenant_A_WEB_Zone_1 - no shutdown - vrf Tenant_A_WEB_Zone -! -interface Vlan121 - description Tenant_A_WEBZone_2 - no shutdown - vrf Tenant_A_WEB_Zone - ip address virtual 10.1.21.1/24 -! -interface Vlan130 - description Tenant_A_APP_Zone_1 - no shutdown - vrf Tenant_A_APP_Zone -! -interface Vlan131 - description Tenant_A_APP_Zone_2 - no shutdown - vrf Tenant_A_APP_Zone - ip address virtual 10.1.31.254/24 -! -interface Vlan140 - description Tenant_A_DB_BZone_1 - no shutdown - vrf Tenant_A_DB_Zone - ip address virtual 10.1.40.1/24 -! -interface Vlan141 - description Tenant_A_DB_Zone_2 - no shutdown - vrf Tenant_A_DB_Zone - ip address virtual 10.1.41.1/24 -! -interface Vlan150 - description Tenant_A_WAN_Zone_1 - no shutdown - vrf Tenant_A_WAN_Zone - ip address virtual 10.1.40.1/24 -! -interface Vlan210 - description Tenant_B_OP_Zone_1 - no shutdown - vrf Tenant_B_OP_Zone -! -interface Vlan211 - description Tenant_B_OP_Zone_2 - no shutdown - vrf Tenant_B_OP_Zone - ip address virtual 10.2.11.1/24 -! -interface Vlan250 - description Tenant_B_WAN_Zone_1 - no shutdown - vrf Tenant_B_WAN_Zone - ip address virtual 10.2.50.1/24 -! -interface Vlan310 - description Tenant_C_OP_Zone_1 - no shutdown - vrf Tenant_C_OP_Zone -! -interface Vlan311 - description Tenant_C_OP_Zone_2 - no shutdown - vrf Tenant_C_OP_Zone -! -interface Vlan350 - description Tenant_C_WAN_Zone_1 - no shutdown - vrf Tenant_C_WAN_Zone -! -interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_A_OP_Zone - ip address 10.255.251.1/31 -! -interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone - no shutdown - mtu 1500 - vrf Tenant_A_WEB_Zone - ip address 10.255.251.1/31 -! -interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone - no shutdown - mtu 1500 - vrf Tenant_A_APP_Zone - ip address 10.255.251.1/31 -! -interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone - no shutdown - mtu 1500 - vrf Tenant_A_DB_Zone - ip address 10.255.251.1/31 -! -interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_A_WAN_Zone - ip address 10.255.251.1/31 -! -interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_B_OP_Zone - ip address 10.255.251.1/31 -! -interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_B_WAN_Zone - ip address 10.255.251.1/31 -! -interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_C_OP_Zone - ip address 10.255.251.1/31 -! -interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_C_WAN_Zone - ip address 10.255.251.1/31 -! -interface Vlan4093 - description MLAG_PEER_L3_PEERING - no shutdown - mtu 1500 - ip address 10.255.251.1/31 -! -interface Vlan4094 - description MLAG_PEER - no shutdown - mtu 1500 - no autostate - ip address 10.255.252.1/31 -! -interface Vxlan1 - description DC1-LEAF1B_VTEP - vxlan source-interface Loopback1 - vxlan virtual-router encapsulation mac-address mlag-system-id - vxlan udp-port 4789 - vxlan vlan 110 vni 10110 - vxlan vlan 111 vni 50111 - vxlan vlan 112 vni 50112 - vxlan vlan 120 vni 10120 - vxlan vlan 121 vni 10121 - vxlan vlan 130 vni 10130 - vxlan vlan 131 vni 10131 - vxlan vlan 140 vni 10140 - vxlan vlan 141 vni 10141 - vxlan vlan 150 vni 10150 - vxlan vlan 160 vni 55160 - vxlan vlan 161 vni 10161 - vxlan vlan 210 vni 20210 - vxlan vlan 211 vni 20211 - vxlan vlan 250 vni 20250 - vxlan vlan 310 vni 30310 - vxlan vlan 311 vni 30311 - vxlan vlan 350 vni 30350 - vxlan vrf Tenant_A_APP_Zone vni 12 - vxlan vrf Tenant_A_DB_Zone vni 13 - vxlan vrf Tenant_A_OP_Zone vni 10 - vxlan vrf Tenant_A_WAN_Zone vni 14 - vxlan vrf Tenant_A_WEB_Zone vni 11 - vxlan vrf Tenant_B_OP_Zone vni 20 - vxlan vrf Tenant_B_WAN_Zone vni 21 - vxlan vrf Tenant_C_OP_Zone vni 30 - vxlan vrf Tenant_C_WAN_Zone vni 31 -! -ip virtual-router mac-address 00:1c:73:00:dc:01 -! -ip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.4 -! -ip routing -no ip routing vrf MGMT -ip routing vrf Tenant_A_APP_Zone -ip routing vrf Tenant_A_DB_Zone -ip routing vrf Tenant_A_OP_Zone -ip routing vrf Tenant_A_WAN_Zone -ip routing vrf Tenant_A_WEB_Zone -ip routing vrf Tenant_B_OP_Zone -ip routing vrf Tenant_B_WAN_Zone -ip routing vrf Tenant_C_OP_Zone -ip routing vrf Tenant_C_WAN_Zone -! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 - seq 20 permit 192.168.254.0/24 eq 32 -! -mlag configuration - domain-id DC1_LEAF1 - local-interface Vlan4094 - peer-address 10.255.252.0 - peer-link Port-Channel3 - reload-delay mlag 300 - reload-delay non-mlag 330 -! -ip route vrf MGMT 0.0.0.0/0 10.255.0.1 -! -route-map RM-CONN-2-BGP permit 10 - match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -! -route-map RM-MLAG-PEER-IN permit 10 - description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing - set origin incomplete -! -router bfd - multihop interval 1200 min-rx 1200 multiplier 3 -! -router bgp 65101 - router-id 192.168.255.4 - no bgp default ipv4-unicast - distance bgp 20 200 200 - graceful-restart restart-time 300 - graceful-restart - maximum-paths 4 ecmp 4 - neighbor EVPN-OVERLAY-PEERS peer group - neighbor EVPN-OVERLAY-PEERS update-source Loopback0 - neighbor EVPN-OVERLAY-PEERS bfd - neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 - neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== - neighbor EVPN-OVERLAY-PEERS send-community - neighbor EVPN-OVERLAY-PEERS maximum-routes 0 - neighbor IPv4-UNDERLAY-PEERS peer group - neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== - neighbor IPv4-UNDERLAY-PEERS send-community - neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 - neighbor MLAG-IPv4-UNDERLAY-PEER peer group - neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65101 - neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self - neighbor MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ== - neighbor MLAG-IPv4-UNDERLAY-PEER send-community - neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 - neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in - neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.0 description DC1-LEAF1A - neighbor 172.31.255.4 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.4 remote-as 65001 - neighbor 172.31.255.4 description DC1-SPINE1_Ethernet2 - neighbor 172.31.255.6 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.6 remote-as 65001 - neighbor 172.31.255.6 description DC1-SPINE2_Ethernet2 - neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 - neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 - redistribute connected route-map RM-CONN-2-BGP - ! - vlan-aware-bundle Tenant_A_APP_Zone - rd 192.168.255.4:12 - route-target both 12:12 - redistribute learned - vlan 130-131 - ! - vlan-aware-bundle Tenant_A_DB_Zone - rd 192.168.255.4:13 - route-target both 13:13 - redistribute learned - vlan 140-141 - ! - vlan-aware-bundle Tenant_A_NFS - rd 192.168.255.4:10161 - route-target both 10161:10161 - redistribute learned - vlan 161 - ! - vlan-aware-bundle Tenant_A_OP_Zone - rd 192.168.255.4:10 - route-target both 10:10 - redistribute learned - vlan 110-112 - ! - vlan-aware-bundle Tenant_A_VMOTION - rd 192.168.255.4:55160 - route-target both 55160:55160 - redistribute learned - vlan 160 - ! - vlan-aware-bundle Tenant_A_WAN_Zone - rd 192.168.255.4:14 - route-target both 14:14 - redistribute learned - vlan 150 - ! - vlan-aware-bundle Tenant_A_WEB_Zone - rd 192.168.255.4:11 - route-target both 11:11 - redistribute learned - vlan 120-121 - ! - vlan-aware-bundle Tenant_B_OP_Zone - rd 192.168.255.4:20 - route-target both 20:20 - redistribute learned - vlan 210-211 - ! - vlan-aware-bundle Tenant_B_WAN_Zone - rd 192.168.255.4:21 - route-target both 21:21 - redistribute learned - vlan 250 - ! - vlan-aware-bundle Tenant_C_OP_Zone - rd 192.168.255.4:30 - route-target both 30:30 - redistribute learned - vlan 310-311 - ! - vlan-aware-bundle Tenant_C_WAN_Zone - rd 192.168.255.4:31 - route-target both 31:31 - redistribute learned - vlan 350 - ! - address-family evpn - neighbor EVPN-OVERLAY-PEERS activate - ! - address-family ipv4 - no neighbor EVPN-OVERLAY-PEERS activate - neighbor IPv4-UNDERLAY-PEERS activate - neighbor MLAG-IPv4-UNDERLAY-PEER activate - ! - vrf Tenant_A_APP_Zone - rd 192.168.255.4:12 - route-target import evpn 12:12 - route-target export evpn 12:12 - router-id 192.168.255.4 - neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_DB_Zone - rd 192.168.255.4:13 - route-target import evpn 13:13 - route-target export evpn 13:13 - router-id 192.168.255.4 - neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_OP_Zone - rd 192.168.255.4:10 - route-target import evpn 10:10 - route-target export evpn 10:10 - router-id 192.168.255.4 - neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_WAN_Zone - rd 192.168.255.4:14 - route-target import evpn 14:14 - route-target export evpn 14:14 - router-id 192.168.255.4 - neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_WEB_Zone - rd 192.168.255.4:11 - route-target import evpn 11:11 - route-target export evpn 11:11 - router-id 192.168.255.4 - neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_B_OP_Zone - rd 192.168.255.4:20 - route-target import evpn 20:20 - route-target export evpn 20:20 - router-id 192.168.255.4 - neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_B_WAN_Zone - rd 192.168.255.4:21 - route-target import evpn 21:21 - route-target export evpn 21:21 - router-id 192.168.255.4 - neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_C_OP_Zone - rd 192.168.255.4:30 - route-target import evpn 30:30 - route-target export evpn 30:30 - router-id 192.168.255.4 - neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_C_WAN_Zone - rd 192.168.255.4:31 - route-target import evpn 31:31 - route-target export evpn 31:31 - router-id 192.168.255.4 - neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -end diff --git a/inventory/intended/configs/DC1-LEAF2A.cfg b/inventory/intended/configs/DC1-LEAF2A.cfg deleted file mode 100644 index ada0dd791..000000000 --- a/inventory/intended/configs/DC1-LEAF2A.cfg +++ /dev/null @@ -1,651 +0,0 @@ -!RANCID-CONTENT-TYPE: arista -! -daemon TerminAttr - exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs - no shutdown -! -vlan internal order ascending range 1006 1199 -! -transceiver qsfp default-mode 4x10G -! -service routing protocols model multi-agent -! -hostname DC1-LEAF2A -ip name-server vrf MGMT 8.8.8.8 -ip name-server vrf MGMT 192.168.2.1 -! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.fr.pool.ntp.org prefer -ntp server vrf MGMT 1.fr.pool.ntp.org -! -spanning-tree mode mstp -no spanning-tree vlan-id 4093-4094 -spanning-tree mst 0 priority 16384 -! -no aaa root -no enable password -! -username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 -username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! -vlan 110 - name Tenant_A_OP_Zone_1 -! -vlan 111 - name Tenant_A_OP_Zone_2 -! -vlan 112 - name Tenant_A_OP_Zone_3 -! -vlan 120 - name Tenant_A_WEB_Zone_1 -! -vlan 121 - name Tenant_A_WEBZone_2 -! -vlan 130 - name Tenant_A_APP_Zone_1 -! -vlan 131 - name Tenant_A_APP_Zone_2 -! -vlan 140 - name Tenant_A_DB_BZone_1 -! -vlan 141 - name Tenant_A_DB_Zone_2 -! -vlan 150 - name Tenant_A_WAN_Zone_1 -! -vlan 160 - name Tenant_A_VMOTION -! -vlan 161 - name Tenant_A_NFS -! -vlan 210 - name Tenant_B_OP_Zone_1 -! -vlan 211 - name Tenant_B_OP_Zone_2 -! -vlan 250 - name Tenant_B_WAN_Zone_1 -! -vlan 310 - name Tenant_C_OP_Zone_1 -! -vlan 311 - name Tenant_C_OP_Zone_2 -! -vlan 350 - name Tenant_C_WAN_Zone_1 -! -vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 -! -vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 -! -vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 -! -vlan 4094 - name MLAG_PEER - trunk group MLAG -! -vrf instance MGMT -! -vrf instance Tenant_A_APP_Zone -! -vrf instance Tenant_A_DB_Zone -! -vrf instance Tenant_A_OP_Zone -! -vrf instance Tenant_A_WAN_Zone -! -vrf instance Tenant_A_WEB_Zone -! -vrf instance Tenant_B_OP_Zone -! -vrf instance Tenant_B_WAN_Zone -! -vrf instance Tenant_C_OP_Zone -! -vrf instance Tenant_C_WAN_Zone -! -interface Port-Channel3 - description MLAG_PEER_DC1-LEAF2B_Po3 - no shutdown - switchport - switchport trunk allowed vlan 2-4094 - switchport mode trunk - switchport trunk group LEAF_PEER_L3 - switchport trunk group MLAG -! -interface Port-Channel5 - description DC1-L2LEAF2A_Po1 - no shutdown - switchport - switchport trunk allowed vlan 110-112,120-121,130-131 - switchport mode trunk - mlag 5 -! -interface Ethernet1 - description P2P_LINK_TO_DC1-SPINE1_Ethernet3 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.9/31 -! -interface Ethernet2 - description P2P_LINK_TO_DC1-SPINE2_Ethernet3 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.11/31 -! -interface Ethernet3 - description MLAG_PEER_DC1-LEAF2B_Ethernet3 - no shutdown - channel-group 3 mode active -! -interface Ethernet4 - description MLAG_PEER_DC1-LEAF2B_Ethernet4 - no shutdown - channel-group 3 mode active -! -interface Ethernet5 - description DC1-L2LEAF2A_Ethernet1 - no shutdown - channel-group 5 mode active -! -interface Loopback0 - description EVPN_Overlay_Peering - no shutdown - ip address 192.168.255.5/32 -! -interface Loopback1 - description VTEP_VXLAN_Tunnel_Source - no shutdown - ip address 192.168.254.5/32 -! -interface Loopback100 - description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS - no shutdown - vrf Tenant_A_OP_Zone - ip address 10.255.1.5/32 -! -interface Management1 - description oob_management - no shutdown - vrf MGMT - ip address 10.255.0.15/24 -! -interface Vlan110 - description Tenant_A_OP_Zone_1 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.10.1/24 -! -interface Vlan111 - description Tenant_A_OP_Zone_2 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.11.1/24 -! -interface Vlan112 - description Tenant_A_OP_Zone_3 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.12.254/24 -! -interface Vlan120 - description Tenant_A_WEB_Zone_1 - no shutdown - vrf Tenant_A_WEB_Zone -! -interface Vlan121 - description Tenant_A_WEBZone_2 - no shutdown - vrf Tenant_A_WEB_Zone - ip address virtual 10.1.21.1/24 -! -interface Vlan130 - description Tenant_A_APP_Zone_1 - no shutdown - vrf Tenant_A_APP_Zone -! -interface Vlan131 - description Tenant_A_APP_Zone_2 - no shutdown - vrf Tenant_A_APP_Zone - ip address virtual 10.1.31.254/24 -! -interface Vlan140 - description Tenant_A_DB_BZone_1 - no shutdown - vrf Tenant_A_DB_Zone - ip address virtual 10.1.40.1/24 -! -interface Vlan141 - description Tenant_A_DB_Zone_2 - no shutdown - vrf Tenant_A_DB_Zone - ip address virtual 10.1.41.1/24 -! -interface Vlan150 - description Tenant_A_WAN_Zone_1 - no shutdown - vrf Tenant_A_WAN_Zone - ip address virtual 10.1.40.1/24 -! -interface Vlan210 - description Tenant_B_OP_Zone_1 - no shutdown - vrf Tenant_B_OP_Zone -! -interface Vlan211 - description Tenant_B_OP_Zone_2 - no shutdown - vrf Tenant_B_OP_Zone - ip address virtual 10.2.11.1/24 -! -interface Vlan250 - description Tenant_B_WAN_Zone_1 - no shutdown - vrf Tenant_B_WAN_Zone - ip address virtual 10.2.50.1/24 -! -interface Vlan310 - description Tenant_C_OP_Zone_1 - no shutdown - vrf Tenant_C_OP_Zone -! -interface Vlan311 - description Tenant_C_OP_Zone_2 - no shutdown - vrf Tenant_C_OP_Zone -! -interface Vlan350 - description Tenant_C_WAN_Zone_1 - no shutdown - vrf Tenant_C_WAN_Zone -! -interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_A_OP_Zone - ip address 10.255.251.4/31 -! -interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone - no shutdown - mtu 1500 - vrf Tenant_A_WEB_Zone - ip address 10.255.251.4/31 -! -interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone - no shutdown - mtu 1500 - vrf Tenant_A_APP_Zone - ip address 10.255.251.4/31 -! -interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone - no shutdown - mtu 1500 - vrf Tenant_A_DB_Zone - ip address 10.255.251.4/31 -! -interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_A_WAN_Zone - ip address 10.255.251.4/31 -! -interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_B_OP_Zone - ip address 10.255.251.4/31 -! -interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_B_WAN_Zone - ip address 10.255.251.4/31 -! -interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_C_OP_Zone - ip address 10.255.251.4/31 -! -interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_C_WAN_Zone - ip address 10.255.251.4/31 -! -interface Vlan4093 - description MLAG_PEER_L3_PEERING - no shutdown - mtu 1500 - ip address 10.255.251.4/31 -! -interface Vlan4094 - description MLAG_PEER - no shutdown - mtu 1500 - no autostate - ip address 10.255.252.4/31 -! -interface Vxlan1 - description DC1-LEAF2A_VTEP - vxlan source-interface Loopback1 - vxlan virtual-router encapsulation mac-address mlag-system-id - vxlan udp-port 4789 - vxlan vlan 110 vni 10110 - vxlan vlan 111 vni 50111 - vxlan vlan 112 vni 50112 - vxlan vlan 120 vni 10120 - vxlan vlan 121 vni 10121 - vxlan vlan 130 vni 10130 - vxlan vlan 131 vni 10131 - vxlan vlan 140 vni 10140 - vxlan vlan 141 vni 10141 - vxlan vlan 150 vni 10150 - vxlan vlan 160 vni 55160 - vxlan vlan 161 vni 10161 - vxlan vlan 210 vni 20210 - vxlan vlan 211 vni 20211 - vxlan vlan 250 vni 20250 - vxlan vlan 310 vni 30310 - vxlan vlan 311 vni 30311 - vxlan vlan 350 vni 30350 - vxlan vrf Tenant_A_APP_Zone vni 12 - vxlan vrf Tenant_A_DB_Zone vni 13 - vxlan vrf Tenant_A_OP_Zone vni 10 - vxlan vrf Tenant_A_WAN_Zone vni 14 - vxlan vrf Tenant_A_WEB_Zone vni 11 - vxlan vrf Tenant_B_OP_Zone vni 20 - vxlan vrf Tenant_B_WAN_Zone vni 21 - vxlan vrf Tenant_C_OP_Zone vni 30 - vxlan vrf Tenant_C_WAN_Zone vni 31 -! -ip virtual-router mac-address 00:1c:73:00:dc:01 -! -ip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.5 -! -ip routing -no ip routing vrf MGMT -ip routing vrf Tenant_A_APP_Zone -ip routing vrf Tenant_A_DB_Zone -ip routing vrf Tenant_A_OP_Zone -ip routing vrf Tenant_A_WAN_Zone -ip routing vrf Tenant_A_WEB_Zone -ip routing vrf Tenant_B_OP_Zone -ip routing vrf Tenant_B_WAN_Zone -ip routing vrf Tenant_C_OP_Zone -ip routing vrf Tenant_C_WAN_Zone -! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 - seq 20 permit 192.168.254.0/24 eq 32 -! -mlag configuration - domain-id DC1_LEAF2 - local-interface Vlan4094 - peer-address 10.255.252.5 - peer-link Port-Channel3 - reload-delay mlag 300 - reload-delay non-mlag 330 -! -ip route vrf MGMT 0.0.0.0/0 10.255.0.1 -! -route-map RM-CONN-2-BGP permit 10 - match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -! -route-map RM-MLAG-PEER-IN permit 10 - description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing - set origin incomplete -! -router bfd - multihop interval 1200 min-rx 1200 multiplier 3 -! -router bgp 65102 - router-id 192.168.255.5 - no bgp default ipv4-unicast - distance bgp 20 200 200 - graceful-restart restart-time 300 - graceful-restart - maximum-paths 4 ecmp 4 - neighbor EVPN-OVERLAY-PEERS peer group - neighbor EVPN-OVERLAY-PEERS update-source Loopback0 - neighbor EVPN-OVERLAY-PEERS bfd - neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 - neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== - neighbor EVPN-OVERLAY-PEERS send-community - neighbor EVPN-OVERLAY-PEERS maximum-routes 0 - neighbor IPv4-UNDERLAY-PEERS peer group - neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== - neighbor IPv4-UNDERLAY-PEERS send-community - neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 - neighbor MLAG-IPv4-UNDERLAY-PEER peer group - neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65102 - neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self - neighbor MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ== - neighbor MLAG-IPv4-UNDERLAY-PEER send-community - neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 - neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in - neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.5 description DC1-LEAF2B - neighbor 172.31.255.8 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.8 remote-as 65001 - neighbor 172.31.255.8 description DC1-SPINE1_Ethernet3 - neighbor 172.31.255.10 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.10 remote-as 65001 - neighbor 172.31.255.10 description DC1-SPINE2_Ethernet3 - neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 - neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 - redistribute connected route-map RM-CONN-2-BGP - ! - vlan-aware-bundle Tenant_A_APP_Zone - rd 192.168.255.5:12 - route-target both 12:12 - redistribute learned - vlan 130-131 - ! - vlan-aware-bundle Tenant_A_DB_Zone - rd 192.168.255.5:13 - route-target both 13:13 - redistribute learned - vlan 140-141 - ! - vlan-aware-bundle Tenant_A_NFS - rd 192.168.255.5:10161 - route-target both 10161:10161 - redistribute learned - vlan 161 - ! - vlan-aware-bundle Tenant_A_OP_Zone - rd 192.168.255.5:10 - route-target both 10:10 - redistribute learned - vlan 110-112 - ! - vlan-aware-bundle Tenant_A_VMOTION - rd 192.168.255.5:55160 - route-target both 55160:55160 - redistribute learned - vlan 160 - ! - vlan-aware-bundle Tenant_A_WAN_Zone - rd 192.168.255.5:14 - route-target both 14:14 - redistribute learned - vlan 150 - ! - vlan-aware-bundle Tenant_A_WEB_Zone - rd 192.168.255.5:11 - route-target both 11:11 - redistribute learned - vlan 120-121 - ! - vlan-aware-bundle Tenant_B_OP_Zone - rd 192.168.255.5:20 - route-target both 20:20 - redistribute learned - vlan 210-211 - ! - vlan-aware-bundle Tenant_B_WAN_Zone - rd 192.168.255.5:21 - route-target both 21:21 - redistribute learned - vlan 250 - ! - vlan-aware-bundle Tenant_C_OP_Zone - rd 192.168.255.5:30 - route-target both 30:30 - redistribute learned - vlan 310-311 - ! - vlan-aware-bundle Tenant_C_WAN_Zone - rd 192.168.255.5:31 - route-target both 31:31 - redistribute learned - vlan 350 - ! - address-family evpn - neighbor EVPN-OVERLAY-PEERS activate - ! - address-family ipv4 - no neighbor EVPN-OVERLAY-PEERS activate - neighbor IPv4-UNDERLAY-PEERS activate - neighbor MLAG-IPv4-UNDERLAY-PEER activate - ! - vrf Tenant_A_APP_Zone - rd 192.168.255.5:12 - route-target import evpn 12:12 - route-target export evpn 12:12 - router-id 192.168.255.5 - neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_DB_Zone - rd 192.168.255.5:13 - route-target import evpn 13:13 - route-target export evpn 13:13 - router-id 192.168.255.5 - neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_OP_Zone - rd 192.168.255.5:10 - route-target import evpn 10:10 - route-target export evpn 10:10 - router-id 192.168.255.5 - neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_WAN_Zone - rd 192.168.255.5:14 - route-target import evpn 14:14 - route-target export evpn 14:14 - router-id 192.168.255.5 - neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_WEB_Zone - rd 192.168.255.5:11 - route-target import evpn 11:11 - route-target export evpn 11:11 - router-id 192.168.255.5 - neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_B_OP_Zone - rd 192.168.255.5:20 - route-target import evpn 20:20 - route-target export evpn 20:20 - router-id 192.168.255.5 - neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_B_WAN_Zone - rd 192.168.255.5:21 - route-target import evpn 21:21 - route-target export evpn 21:21 - router-id 192.168.255.5 - neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_C_OP_Zone - rd 192.168.255.5:30 - route-target import evpn 30:30 - route-target export evpn 30:30 - router-id 192.168.255.5 - neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_C_WAN_Zone - rd 192.168.255.5:31 - route-target import evpn 31:31 - route-target export evpn 31:31 - router-id 192.168.255.5 - neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -end diff --git a/inventory/intended/configs/DC1-LEAF2B.cfg b/inventory/intended/configs/DC1-LEAF2B.cfg deleted file mode 100644 index 178d1df49..000000000 --- a/inventory/intended/configs/DC1-LEAF2B.cfg +++ /dev/null @@ -1,651 +0,0 @@ -!RANCID-CONTENT-TYPE: arista -! -daemon TerminAttr - exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs - no shutdown -! -vlan internal order ascending range 1006 1199 -! -transceiver qsfp default-mode 4x10G -! -service routing protocols model multi-agent -! -hostname DC1-LEAF2B -ip name-server vrf MGMT 8.8.8.8 -ip name-server vrf MGMT 192.168.2.1 -! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.fr.pool.ntp.org prefer -ntp server vrf MGMT 1.fr.pool.ntp.org -! -spanning-tree mode mstp -no spanning-tree vlan-id 4093-4094 -spanning-tree mst 0 priority 16384 -! -no aaa root -no enable password -! -username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 -username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! -vlan 110 - name Tenant_A_OP_Zone_1 -! -vlan 111 - name Tenant_A_OP_Zone_2 -! -vlan 112 - name Tenant_A_OP_Zone_3 -! -vlan 120 - name Tenant_A_WEB_Zone_1 -! -vlan 121 - name Tenant_A_WEBZone_2 -! -vlan 130 - name Tenant_A_APP_Zone_1 -! -vlan 131 - name Tenant_A_APP_Zone_2 -! -vlan 140 - name Tenant_A_DB_BZone_1 -! -vlan 141 - name Tenant_A_DB_Zone_2 -! -vlan 150 - name Tenant_A_WAN_Zone_1 -! -vlan 160 - name Tenant_A_VMOTION -! -vlan 161 - name Tenant_A_NFS -! -vlan 210 - name Tenant_B_OP_Zone_1 -! -vlan 211 - name Tenant_B_OP_Zone_2 -! -vlan 250 - name Tenant_B_WAN_Zone_1 -! -vlan 310 - name Tenant_C_OP_Zone_1 -! -vlan 311 - name Tenant_C_OP_Zone_2 -! -vlan 350 - name Tenant_C_WAN_Zone_1 -! -vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 -! -vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 -! -vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 -! -vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 -! -vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 -! -vlan 4094 - name MLAG_PEER - trunk group MLAG -! -vrf instance MGMT -! -vrf instance Tenant_A_APP_Zone -! -vrf instance Tenant_A_DB_Zone -! -vrf instance Tenant_A_OP_Zone -! -vrf instance Tenant_A_WAN_Zone -! -vrf instance Tenant_A_WEB_Zone -! -vrf instance Tenant_B_OP_Zone -! -vrf instance Tenant_B_WAN_Zone -! -vrf instance Tenant_C_OP_Zone -! -vrf instance Tenant_C_WAN_Zone -! -interface Port-Channel3 - description MLAG_PEER_DC1-LEAF2A_Po3 - no shutdown - switchport - switchport trunk allowed vlan 2-4094 - switchport mode trunk - switchport trunk group LEAF_PEER_L3 - switchport trunk group MLAG -! -interface Port-Channel5 - description DC1-L2LEAF2A_Po1 - no shutdown - switchport - switchport trunk allowed vlan 110-112,120-121,130-131 - switchport mode trunk - mlag 5 -! -interface Ethernet1 - description P2P_LINK_TO_DC1-SPINE1_Ethernet4 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.13/31 -! -interface Ethernet2 - description P2P_LINK_TO_DC1-SPINE2_Ethernet4 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.15/31 -! -interface Ethernet3 - description MLAG_PEER_DC1-LEAF2A_Ethernet3 - no shutdown - channel-group 3 mode active -! -interface Ethernet4 - description MLAG_PEER_DC1-LEAF2A_Ethernet4 - no shutdown - channel-group 3 mode active -! -interface Ethernet5 - description DC1-L2LEAF2A_Ethernet2 - no shutdown - channel-group 5 mode active -! -interface Loopback0 - description EVPN_Overlay_Peering - no shutdown - ip address 192.168.255.6/32 -! -interface Loopback1 - description VTEP_VXLAN_Tunnel_Source - no shutdown - ip address 192.168.254.5/32 -! -interface Loopback100 - description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS - no shutdown - vrf Tenant_A_OP_Zone - ip address 10.255.1.6/32 -! -interface Management1 - description oob_management - no shutdown - vrf MGMT - ip address 10.255.0.16/24 -! -interface Vlan110 - description Tenant_A_OP_Zone_1 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.10.1/24 -! -interface Vlan111 - description Tenant_A_OP_Zone_2 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.11.1/24 -! -interface Vlan112 - description Tenant_A_OP_Zone_3 - no shutdown - vrf Tenant_A_OP_Zone - ip address virtual 10.1.12.254/24 -! -interface Vlan120 - description Tenant_A_WEB_Zone_1 - no shutdown - vrf Tenant_A_WEB_Zone -! -interface Vlan121 - description Tenant_A_WEBZone_2 - no shutdown - vrf Tenant_A_WEB_Zone - ip address virtual 10.1.21.1/24 -! -interface Vlan130 - description Tenant_A_APP_Zone_1 - no shutdown - vrf Tenant_A_APP_Zone -! -interface Vlan131 - description Tenant_A_APP_Zone_2 - no shutdown - vrf Tenant_A_APP_Zone - ip address virtual 10.1.31.254/24 -! -interface Vlan140 - description Tenant_A_DB_BZone_1 - no shutdown - vrf Tenant_A_DB_Zone - ip address virtual 10.1.40.1/24 -! -interface Vlan141 - description Tenant_A_DB_Zone_2 - no shutdown - vrf Tenant_A_DB_Zone - ip address virtual 10.1.41.1/24 -! -interface Vlan150 - description Tenant_A_WAN_Zone_1 - no shutdown - vrf Tenant_A_WAN_Zone - ip address virtual 10.1.40.1/24 -! -interface Vlan210 - description Tenant_B_OP_Zone_1 - no shutdown - vrf Tenant_B_OP_Zone -! -interface Vlan211 - description Tenant_B_OP_Zone_2 - no shutdown - vrf Tenant_B_OP_Zone - ip address virtual 10.2.11.1/24 -! -interface Vlan250 - description Tenant_B_WAN_Zone_1 - no shutdown - vrf Tenant_B_WAN_Zone - ip address virtual 10.2.50.1/24 -! -interface Vlan310 - description Tenant_C_OP_Zone_1 - no shutdown - vrf Tenant_C_OP_Zone -! -interface Vlan311 - description Tenant_C_OP_Zone_2 - no shutdown - vrf Tenant_C_OP_Zone -! -interface Vlan350 - description Tenant_C_WAN_Zone_1 - no shutdown - vrf Tenant_C_WAN_Zone -! -interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_A_OP_Zone - ip address 10.255.251.5/31 -! -interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone - no shutdown - mtu 1500 - vrf Tenant_A_WEB_Zone - ip address 10.255.251.5/31 -! -interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone - no shutdown - mtu 1500 - vrf Tenant_A_APP_Zone - ip address 10.255.251.5/31 -! -interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone - no shutdown - mtu 1500 - vrf Tenant_A_DB_Zone - ip address 10.255.251.5/31 -! -interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_A_WAN_Zone - ip address 10.255.251.5/31 -! -interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_B_OP_Zone - ip address 10.255.251.5/31 -! -interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_B_WAN_Zone - ip address 10.255.251.5/31 -! -interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone - no shutdown - mtu 1500 - vrf Tenant_C_OP_Zone - ip address 10.255.251.5/31 -! -interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone - no shutdown - mtu 1500 - vrf Tenant_C_WAN_Zone - ip address 10.255.251.5/31 -! -interface Vlan4093 - description MLAG_PEER_L3_PEERING - no shutdown - mtu 1500 - ip address 10.255.251.5/31 -! -interface Vlan4094 - description MLAG_PEER - no shutdown - mtu 1500 - no autostate - ip address 10.255.252.5/31 -! -interface Vxlan1 - description DC1-LEAF2B_VTEP - vxlan source-interface Loopback1 - vxlan virtual-router encapsulation mac-address mlag-system-id - vxlan udp-port 4789 - vxlan vlan 110 vni 10110 - vxlan vlan 111 vni 50111 - vxlan vlan 112 vni 50112 - vxlan vlan 120 vni 10120 - vxlan vlan 121 vni 10121 - vxlan vlan 130 vni 10130 - vxlan vlan 131 vni 10131 - vxlan vlan 140 vni 10140 - vxlan vlan 141 vni 10141 - vxlan vlan 150 vni 10150 - vxlan vlan 160 vni 55160 - vxlan vlan 161 vni 10161 - vxlan vlan 210 vni 20210 - vxlan vlan 211 vni 20211 - vxlan vlan 250 vni 20250 - vxlan vlan 310 vni 30310 - vxlan vlan 311 vni 30311 - vxlan vlan 350 vni 30350 - vxlan vrf Tenant_A_APP_Zone vni 12 - vxlan vrf Tenant_A_DB_Zone vni 13 - vxlan vrf Tenant_A_OP_Zone vni 10 - vxlan vrf Tenant_A_WAN_Zone vni 14 - vxlan vrf Tenant_A_WEB_Zone vni 11 - vxlan vrf Tenant_B_OP_Zone vni 20 - vxlan vrf Tenant_B_WAN_Zone vni 21 - vxlan vrf Tenant_C_OP_Zone vni 30 - vxlan vrf Tenant_C_WAN_Zone vni 31 -! -ip virtual-router mac-address 00:1c:73:00:dc:01 -! -ip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.6 -! -ip routing -no ip routing vrf MGMT -ip routing vrf Tenant_A_APP_Zone -ip routing vrf Tenant_A_DB_Zone -ip routing vrf Tenant_A_OP_Zone -ip routing vrf Tenant_A_WAN_Zone -ip routing vrf Tenant_A_WEB_Zone -ip routing vrf Tenant_B_OP_Zone -ip routing vrf Tenant_B_WAN_Zone -ip routing vrf Tenant_C_OP_Zone -ip routing vrf Tenant_C_WAN_Zone -! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 - seq 20 permit 192.168.254.0/24 eq 32 -! -mlag configuration - domain-id DC1_LEAF2 - local-interface Vlan4094 - peer-address 10.255.252.4 - peer-link Port-Channel3 - reload-delay mlag 300 - reload-delay non-mlag 330 -! -ip route vrf MGMT 0.0.0.0/0 10.255.0.1 -! -route-map RM-CONN-2-BGP permit 10 - match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -! -route-map RM-MLAG-PEER-IN permit 10 - description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing - set origin incomplete -! -router bfd - multihop interval 1200 min-rx 1200 multiplier 3 -! -router bgp 65102 - router-id 192.168.255.6 - no bgp default ipv4-unicast - distance bgp 20 200 200 - graceful-restart restart-time 300 - graceful-restart - maximum-paths 4 ecmp 4 - neighbor EVPN-OVERLAY-PEERS peer group - neighbor EVPN-OVERLAY-PEERS update-source Loopback0 - neighbor EVPN-OVERLAY-PEERS bfd - neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 - neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== - neighbor EVPN-OVERLAY-PEERS send-community - neighbor EVPN-OVERLAY-PEERS maximum-routes 0 - neighbor IPv4-UNDERLAY-PEERS peer group - neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== - neighbor IPv4-UNDERLAY-PEERS send-community - neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 - neighbor MLAG-IPv4-UNDERLAY-PEER peer group - neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65102 - neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self - neighbor MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ== - neighbor MLAG-IPv4-UNDERLAY-PEER send-community - neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 - neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in - neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.4 description DC1-LEAF2A - neighbor 172.31.255.12 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.12 remote-as 65001 - neighbor 172.31.255.12 description DC1-SPINE1_Ethernet4 - neighbor 172.31.255.14 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.14 remote-as 65001 - neighbor 172.31.255.14 description DC1-SPINE2_Ethernet4 - neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 - neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 - redistribute connected route-map RM-CONN-2-BGP - ! - vlan-aware-bundle Tenant_A_APP_Zone - rd 192.168.255.6:12 - route-target both 12:12 - redistribute learned - vlan 130-131 - ! - vlan-aware-bundle Tenant_A_DB_Zone - rd 192.168.255.6:13 - route-target both 13:13 - redistribute learned - vlan 140-141 - ! - vlan-aware-bundle Tenant_A_NFS - rd 192.168.255.6:10161 - route-target both 10161:10161 - redistribute learned - vlan 161 - ! - vlan-aware-bundle Tenant_A_OP_Zone - rd 192.168.255.6:10 - route-target both 10:10 - redistribute learned - vlan 110-112 - ! - vlan-aware-bundle Tenant_A_VMOTION - rd 192.168.255.6:55160 - route-target both 55160:55160 - redistribute learned - vlan 160 - ! - vlan-aware-bundle Tenant_A_WAN_Zone - rd 192.168.255.6:14 - route-target both 14:14 - redistribute learned - vlan 150 - ! - vlan-aware-bundle Tenant_A_WEB_Zone - rd 192.168.255.6:11 - route-target both 11:11 - redistribute learned - vlan 120-121 - ! - vlan-aware-bundle Tenant_B_OP_Zone - rd 192.168.255.6:20 - route-target both 20:20 - redistribute learned - vlan 210-211 - ! - vlan-aware-bundle Tenant_B_WAN_Zone - rd 192.168.255.6:21 - route-target both 21:21 - redistribute learned - vlan 250 - ! - vlan-aware-bundle Tenant_C_OP_Zone - rd 192.168.255.6:30 - route-target both 30:30 - redistribute learned - vlan 310-311 - ! - vlan-aware-bundle Tenant_C_WAN_Zone - rd 192.168.255.6:31 - route-target both 31:31 - redistribute learned - vlan 350 - ! - address-family evpn - neighbor EVPN-OVERLAY-PEERS activate - ! - address-family ipv4 - no neighbor EVPN-OVERLAY-PEERS activate - neighbor IPv4-UNDERLAY-PEERS activate - neighbor MLAG-IPv4-UNDERLAY-PEER activate - ! - vrf Tenant_A_APP_Zone - rd 192.168.255.6:12 - route-target import evpn 12:12 - route-target export evpn 12:12 - router-id 192.168.255.6 - neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_DB_Zone - rd 192.168.255.6:13 - route-target import evpn 13:13 - route-target export evpn 13:13 - router-id 192.168.255.6 - neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_OP_Zone - rd 192.168.255.6:10 - route-target import evpn 10:10 - route-target export evpn 10:10 - router-id 192.168.255.6 - neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_WAN_Zone - rd 192.168.255.6:14 - route-target import evpn 14:14 - route-target export evpn 14:14 - router-id 192.168.255.6 - neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_A_WEB_Zone - rd 192.168.255.6:11 - route-target import evpn 11:11 - route-target export evpn 11:11 - router-id 192.168.255.6 - neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_B_OP_Zone - rd 192.168.255.6:20 - route-target import evpn 20:20 - route-target export evpn 20:20 - router-id 192.168.255.6 - neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_B_WAN_Zone - rd 192.168.255.6:21 - route-target import evpn 21:21 - route-target export evpn 21:21 - router-id 192.168.255.6 - neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_C_OP_Zone - rd 192.168.255.6:30 - route-target import evpn 30:30 - route-target export evpn 30:30 - router-id 192.168.255.6 - neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected - ! - vrf Tenant_C_WAN_Zone - rd 192.168.255.6:31 - route-target import evpn 31:31 - route-target export evpn 31:31 - router-id 192.168.255.6 - neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER - redistribute connected -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -end diff --git a/inventory/intended/configs/DC1-SPINE1.cfg b/inventory/intended/configs/DC1-SPINE1.cfg deleted file mode 100644 index f76715fe2..000000000 --- a/inventory/intended/configs/DC1-SPINE1.cfg +++ /dev/null @@ -1,144 +0,0 @@ -!RANCID-CONTENT-TYPE: arista -! -daemon TerminAttr - exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs - no shutdown -! -vlan internal order ascending range 1006 1199 -! -transceiver qsfp default-mode 4x10G -! -service routing protocols model multi-agent -! -hostname DC1-SPINE1 -ip name-server vrf MGMT 8.8.8.8 -ip name-server vrf MGMT 192.168.2.1 -! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.fr.pool.ntp.org prefer -ntp server vrf MGMT 1.fr.pool.ntp.org -! -spanning-tree mode none -! -no aaa root -no enable password -! -username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 -username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! -vrf instance MGMT -! -interface Ethernet1 - description P2P_LINK_TO_DC1-LEAF1A_Ethernet1 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.0/31 -! -interface Ethernet2 - description P2P_LINK_TO_DC1-LEAF1B_Ethernet1 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.4/31 -! -interface Ethernet3 - description P2P_LINK_TO_DC1-LEAF2A_Ethernet1 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.8/31 -! -interface Ethernet4 - description P2P_LINK_TO_DC1-LEAF2B_Ethernet1 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.12/31 -! -interface Loopback0 - description EVPN_Overlay_Peering - no shutdown - ip address 192.168.255.1/32 -! -interface Management1 - description oob_management - no shutdown - vrf MGMT - ip address 10.255.0.11/24 -! -ip routing -no ip routing vrf MGMT -! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 -! -ip route vrf MGMT 0.0.0.0/0 10.255.0.1 -! -route-map RM-CONN-2-BGP permit 10 - match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -! -router bfd - multihop interval 1200 min-rx 1200 multiplier 3 -! -router bgp 65001 - router-id 192.168.255.1 - no bgp default ipv4-unicast - distance bgp 20 200 200 - graceful-restart restart-time 300 - graceful-restart - maximum-paths 4 ecmp 4 - neighbor EVPN-OVERLAY-PEERS peer group - neighbor EVPN-OVERLAY-PEERS next-hop-unchanged - neighbor EVPN-OVERLAY-PEERS update-source Loopback0 - neighbor EVPN-OVERLAY-PEERS bfd - neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 - neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== - neighbor EVPN-OVERLAY-PEERS send-community - neighbor EVPN-OVERLAY-PEERS maximum-routes 0 - neighbor IPv4-UNDERLAY-PEERS peer group - neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== - neighbor IPv4-UNDERLAY-PEERS send-community - neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 - neighbor 172.31.255.1 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.1 remote-as 65101 - neighbor 172.31.255.1 description DC1-LEAF1A_Ethernet1 - neighbor 172.31.255.5 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.5 remote-as 65101 - neighbor 172.31.255.5 description DC1-LEAF1B_Ethernet1 - neighbor 172.31.255.9 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.9 remote-as 65102 - neighbor 172.31.255.9 description DC1-LEAF2A_Ethernet1 - neighbor 172.31.255.13 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.13 remote-as 65102 - neighbor 172.31.255.13 description DC1-LEAF2B_Ethernet1 - neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.3 remote-as 65101 - neighbor 192.168.255.3 description DC1-LEAF1A - neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.4 remote-as 65101 - neighbor 192.168.255.4 description DC1-LEAF1B - neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.5 remote-as 65102 - neighbor 192.168.255.5 description DC1-LEAF2A - neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2B - redistribute connected route-map RM-CONN-2-BGP - ! - address-family evpn - neighbor EVPN-OVERLAY-PEERS activate - ! - address-family ipv4 - no neighbor EVPN-OVERLAY-PEERS activate - neighbor IPv4-UNDERLAY-PEERS activate -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -end diff --git a/inventory/intended/configs/DC1-SPINE2.cfg b/inventory/intended/configs/DC1-SPINE2.cfg deleted file mode 100644 index d8a47a98c..000000000 --- a/inventory/intended/configs/DC1-SPINE2.cfg +++ /dev/null @@ -1,144 +0,0 @@ -!RANCID-CONTENT-TYPE: arista -! -daemon TerminAttr - exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs - no shutdown -! -vlan internal order ascending range 1006 1199 -! -transceiver qsfp default-mode 4x10G -! -service routing protocols model multi-agent -! -hostname DC1-SPINE2 -ip name-server vrf MGMT 8.8.8.8 -ip name-server vrf MGMT 192.168.2.1 -! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.fr.pool.ntp.org prefer -ntp server vrf MGMT 1.fr.pool.ntp.org -! -spanning-tree mode none -! -no aaa root -no enable password -! -username admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 -username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! -vrf instance MGMT -! -interface Ethernet1 - description P2P_LINK_TO_DC1-LEAF1A_Ethernet2 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.2/31 -! -interface Ethernet2 - description P2P_LINK_TO_DC1-LEAF1B_Ethernet2 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.6/31 -! -interface Ethernet3 - description P2P_LINK_TO_DC1-LEAF2A_Ethernet2 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.10/31 -! -interface Ethernet4 - description P2P_LINK_TO_DC1-LEAF2B_Ethernet2 - no shutdown - mtu 1500 - no switchport - ip address 172.31.255.14/31 -! -interface Loopback0 - description EVPN_Overlay_Peering - no shutdown - ip address 192.168.255.2/32 -! -interface Management1 - description oob_management - no shutdown - vrf MGMT - ip address 10.255.0.12/24 -! -ip routing -no ip routing vrf MGMT -! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 -! -ip route vrf MGMT 0.0.0.0/0 10.255.0.1 -! -route-map RM-CONN-2-BGP permit 10 - match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -! -router bfd - multihop interval 1200 min-rx 1200 multiplier 3 -! -router bgp 65001 - router-id 192.168.255.2 - no bgp default ipv4-unicast - distance bgp 20 200 200 - graceful-restart restart-time 300 - graceful-restart - maximum-paths 4 ecmp 4 - neighbor EVPN-OVERLAY-PEERS peer group - neighbor EVPN-OVERLAY-PEERS next-hop-unchanged - neighbor EVPN-OVERLAY-PEERS update-source Loopback0 - neighbor EVPN-OVERLAY-PEERS bfd - neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 - neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA== - neighbor EVPN-OVERLAY-PEERS send-community - neighbor EVPN-OVERLAY-PEERS maximum-routes 0 - neighbor IPv4-UNDERLAY-PEERS peer group - neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w== - neighbor IPv4-UNDERLAY-PEERS send-community - neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 - neighbor 172.31.255.3 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.3 remote-as 65101 - neighbor 172.31.255.3 description DC1-LEAF1A_Ethernet2 - neighbor 172.31.255.7 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.7 remote-as 65101 - neighbor 172.31.255.7 description DC1-LEAF1B_Ethernet2 - neighbor 172.31.255.11 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.11 remote-as 65102 - neighbor 172.31.255.11 description DC1-LEAF2A_Ethernet2 - neighbor 172.31.255.15 peer group IPv4-UNDERLAY-PEERS - neighbor 172.31.255.15 remote-as 65102 - neighbor 172.31.255.15 description DC1-LEAF2B_Ethernet2 - neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.3 remote-as 65101 - neighbor 192.168.255.3 description DC1-LEAF1A - neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.4 remote-as 65101 - neighbor 192.168.255.4 description DC1-LEAF1B - neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.5 remote-as 65102 - neighbor 192.168.255.5 description DC1-LEAF2A - neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2B - redistribute connected route-map RM-CONN-2-BGP - ! - address-family evpn - neighbor EVPN-OVERLAY-PEERS activate - ! - address-family ipv4 - no neighbor EVPN-OVERLAY-PEERS activate - neighbor IPv4-UNDERLAY-PEERS activate -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -end diff --git a/inventory/intended/structured_configs/DC1-L2LEAF1A-debug-vars.yml b/inventory/intended/structured_configs/DC1-L2LEAF1A-debug-vars.yml deleted file mode 100644 index 9752ea512..000000000 --- a/inventory/intended/structured_configs/DC1-L2LEAF1A-debug-vars.yml +++ /dev/null @@ -1,736 +0,0 @@ -ansible_connection: httpapi -ansible_network_os: eos -ansible_user: ansible -ansible_ssh_pass: ansible -ansible_become: true -ansible_become_method: enable -ansible_httpapi_use_ssl: true -ansible_httpapi_validate_certs: false -type: l2leaf -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -cvp_instance_ip: 10.255.0.1 -cvp_ingestauth_key: '' -mgmt_interface: Management1 -mgmt_interface_vrf: MGMT -mgmt_gateway: 10.255.0.1 -name_servers: -- 192.168.2.1 -- 8.8.8.8 -custom_structured_configuration_ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT -fabric_name: DC1_FABRIC -vxlan_vlan_aware_bundles: true -bgp_peer_groups: - IPv4_UNDERLAY_PEERS: - password: AQQvKeimxJu+uGQ/yYvv9w== - EVPN_OVERLAY_PEERS: - password: q+VNViP5i4rVjW1cxFv2wA== - MLAG_IPv4_UNDERLAY_PEER: - password: vnEaG8gMeQf3d3cN6PktXQ== -spine: - defaults: - platform: vEOS-LAB - bgp_as: 65001 - loopback_ipv4_pool: 192.168.255.0/24 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - nodes: - DC1-SPINE1: - id: 1 - mgmt_ip: 10.255.0.11/24 - DC1-SPINE2: - id: 2 - mgmt_ip: 10.255.0.12/24 -l3leaf: - defaults: - platform: vEOS-LAB - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_ipv4_pool: 172.31.255.0/24 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - node_groups: - DC1_LEAF1: - bgp_as: 65101 - nodes: - DC1-LEAF1A: - id: 1 - mgmt_ip: 10.255.0.13/24 - uplink_switch_interfaces: - - Ethernet1 - - Ethernet1 - DC1-LEAF1B: - id: 2 - mgmt_ip: 10.255.0.14/24 - uplink_switch_interfaces: - - Ethernet2 - - Ethernet2 - DC1_LEAF2: - bgp_as: 65102 - nodes: - DC1-LEAF2A: - id: 3 - mgmt_ip: 10.255.0.15/24 - uplink_switch_interfaces: - - Ethernet3 - - Ethernet3 - DC1-LEAF2B: - id: 4 - mgmt_ip: 10.255.0.16/24 - uplink_switch_interfaces: - - Ethernet4 - - Ethernet4 -l2leaf: - defaults: - platform: vEOS-LAB - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - mlag: false - node_groups: - DC1_L2LEAF1: - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF1A: - id: 5 - mgmt_ip: 10.255.0.17/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - DC1_L2LEAF2: - uplink_switches: - - DC1-LEAF2A - - DC1-LEAF2B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF2A: - id: 7 - mgmt_ip: 10.255.0.18/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 -p2p_uplinks_mtu: 1500 -bfd_multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -port_profiles: - TENANT_A_B: - mode: trunk - vlans: 110-111,210-211 - TENANT_A: - mode: access - vlans: '110' - TENANT_B: - mode: trunk - vlans: 210-211 -servers: - server01: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF1A - profile: TENANT_A - server02: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF2A - profile: TENANT_A -tenants: - Tenant_A: - mac_vrf_vni_base: 10000 - vrfs: - Tenant_A_OP_Zone: - vrf_vni: 10 - vtep_diagnostic: - loopback: 100 - loopback_ip_range: 10.255.1.0/24 - svis: - 110: - name: Tenant_A_OP_Zone_1 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.10.1/24 - 111: - vni_override: 50111 - name: Tenant_A_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.11.1/24 - 112: - vni_override: 50112 - name: Tenant_A_OP_Zone_3 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.12.254/24 - Tenant_A_WEB_Zone: - vrf_vni: 11 - svis: - 120: - name: Tenant_A_WEB_Zone_1 - tags: - - web - - erp1 - enabled: true - ip_subnet: 10.1.20.0/24 - 121: - name: Tenant_A_WEBZone_2 - tags: - - web - enabled: true - ip_address_virtual: 10.1.21.1/24 - Tenant_A_APP_Zone: - vrf_vni: 12 - svis: - 130: - name: Tenant_A_APP_Zone_1 - tags: - - app - - erp1 - enabled: true - ip_subnet: 10.1.30.0/24 - 131: - name: Tenant_A_APP_Zone_2 - tags: - - app - enabled: true - ip_address_virtual: 10.1.31.254/24 - Tenant_A_DB_Zone: - vrf_vni: 13 - svis: - 140: - name: Tenant_A_DB_BZone_1 - tags: - - db - - erp1 - enabled: true - ip_address_virtual: 10.1.40.1/24 - 141: - name: Tenant_A_DB_Zone_2 - tags: - - db - enabled: true - ip_address_virtual: 10.1.41.1/24 - Tenant_A_WAN_Zone: - vrf_vni: 14 - svis: - 150: - name: Tenant_A_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.1.40.1/24 - l2vlans: - 160: - vni_override: 55160 - name: Tenant_A_VMOTION - tags: - - vmotion - 161: - name: Tenant_A_NFS - tags: - - nfs - Tenant_B: - mac_vrf_vni_base: 20000 - vrfs: - Tenant_B_OP_Zone: - vrf_vni: 20 - svis: - 210: - name: Tenant_B_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.2.10.0/24 - 211: - name: Tenant_B_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.2.11.1/24 - Tenant_B_WAN_Zone: - vrf_vni: 21 - svis: - 250: - name: Tenant_B_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.2.50.1/24 - Tenant_C: - mac_vrf_vni_base: 30000 - vrfs: - Tenant_C_OP_Zone: - vrf_vni: 30 - svis: - 310: - name: Tenant_C_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.3.10.0/24 - 311: - name: Tenant_C_OP_Zone_2 - tags: - - opzone - enabled: true - ip_subnet: 10.3.11.1/24 - Tenant_C_WAN_Zone: - vrf_vni: 31 - svis: - 350: - name: Tenant_C_WAN_Zone_1 - tags: - - wan - enabled: true - ip_subnet: 10.3.50.1/24 -inventory_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -inventory_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory -ansible_host: 10.255.0.17 -inventory_hostname: DC1-L2LEAF1A -inventory_hostname_short: DC1-L2LEAF1A -group_names: -- DC1 -- DC1_FABRIC -- DC1_L2LEAF1 -- DC1_L2LEAFS -- DC1_SERVERS -- DC1_TENANTS_NETWORKS -ansible_facts: - switch: - type: l2leaf - node_type_key: l2leaf - connected_endpoints: true - default_evpn_role: none - mlag_support: true - network_services_l2: true - network_services_l3: false - underlay_router: false - uplink_type: port-channel - vtep: false - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_L2LEAF1 - id: 5 - mgmt_ip: 10.255.0.17/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - Tenant_A - filter_tags: - - opzone - - web - - app - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: [] - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 - topology: - links: - Ethernet1: - peer: DC1-LEAF1A - peer_interface: Ethernet5 - peer_type: l3leaf - type: underlay_l2 - channel_description: DC1_LEAF1 - channel_group_id: 1 - peer_channel_group_id: 5 - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 - Ethernet2: - peer: DC1-LEAF1B - peer_interface: Ethernet5 - peer_type: l3leaf - type: underlay_l2 - channel_description: DC1_LEAF1 - channel_group_id: 1 - peer_channel_group_id: 5 - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 - peers: - - DC1-LEAF1A - - DC1-LEAF1B - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 -switch: - type: l2leaf - node_type_key: l2leaf - connected_endpoints: true - default_evpn_role: none - mlag_support: true - network_services_l2: true - network_services_l3: false - underlay_router: false - uplink_type: port-channel - vtep: false - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_L2LEAF1 - id: 5 - mgmt_ip: 10.255.0.17/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - Tenant_A - filter_tags: - - opzone - - web - - app - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: [] - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 -topology: - links: - Ethernet1: - peer: DC1-LEAF1A - peer_interface: Ethernet5 - peer_type: l3leaf - type: underlay_l2 - channel_description: DC1_LEAF1 - channel_group_id: 1 - peer_channel_group_id: 5 - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 - Ethernet2: - peer: DC1-LEAF1B - peer_interface: Ethernet5 - peer_type: l3leaf - type: underlay_l2 - channel_description: DC1_LEAF1 - channel_group_id: 1 - peer_channel_group_id: 5 - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 - peers: - - DC1-LEAF1A - - DC1-LEAF1B - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 -playbook_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/playbooks -ansible_playbook_python: /Users/tgrimonet/.pyenv/versions/3.9.7/envs/arista-avd-demo/bin/python3.9 -ansible_config_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/ansible.cfg -groups: - all: - - cv_ztp - - cv_server - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - ungrouped: [] - CVP: - - cv_ztp - - cv_server - DC1: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-L2LEAF1A - - DC1-L2LEAF2A - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_FABRIC: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SPINES: - - DC1-SPINE1 - - DC1-SPINE2 - DC1_L3LEAFS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_LEAF1: - - DC1-LEAF1A - - DC1-LEAF1B - DC1_LEAF2: - - DC1-LEAF2A - - DC1-LEAF2B - DC1_L2LEAFS: - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_L2LEAF1: - - DC1-L2LEAF1A - DC1_L2LEAF2: - - DC1-L2LEAF2A - DC1_TENANTS_NETWORKS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SERVERS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A -omit: __omit_place_holder__977da4f00604c643da39a9f2175c10b09f0b2380 -ansible_version: - string: 2.10.14 - full: 2.10.14 - major: 2 - minor: 10 - revision: 14 -ansible_check_mode: false -ansible_diff_mode: false -ansible_forks: 5 -ansible_inventory_sources: -- /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -ansible_skip_tags: [] -ansible_run_tags: -- build -ansible_verbosity: 0 diff --git a/inventory/intended/structured_configs/DC1-L2LEAF1A.yml b/inventory/intended/structured_configs/DC1-L2LEAF1A.yml deleted file mode 100644 index a4079755c..000000000 --- a/inventory/intended/structured_configs/DC1-L2LEAF1A.yml +++ /dev/null @@ -1,130 +0,0 @@ -static_routes: -- vrf: MGMT - destination_address_prefix: 0.0.0.0/0 - gateway: 10.255.0.1 -service_routing_protocols_model: multi-agent -ip_routing: true -daemon_terminattr: - cvaddrs: - - 10.255.0.1:9910 - cvauth: - method: key - cvvrf: MGMT - smashexcludes: ale,flexCounter,hardware,kni,pulse,strata - ingestexclude: /Sysdb/cell/1/agent,/Sysdb/cell/2/agent - disable_aaa: false -vlan_internal_order: - allocation: ascending - range: - beginning: 1006 - ending: 1199 -name_server: - source: - vrf: MGMT - nodes: - - 192.168.2.1 - - 8.8.8.8 -spanning_tree: - mode: mstp - mst_instances: - '0': - priority: 16384 -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -vrfs: - MGMT: - ip_routing: false -management_interfaces: - Management1: - description: oob_management - shutdown: false - vrf: MGMT - ip_address: 10.255.0.17/24 - gateway: 10.255.0.1 - type: oob -management_api_http: - enable_vrfs: - MGMT: {} - enable_https: true -ethernet_interfaces: - Ethernet1: - peer: DC1-LEAF1A - peer_interface: Ethernet5 - peer_type: l3leaf - description: DC1-LEAF1A_Ethernet5 - type: switched - shutdown: false - channel_group: - id: 1 - mode: active - Ethernet2: - peer: DC1-LEAF1B - peer_interface: Ethernet5 - peer_type: l3leaf - description: DC1-LEAF1B_Ethernet5 - type: switched - shutdown: false - channel_group: - id: 1 - mode: active - Ethernet5: - peer: server01 - peer_interface: Eth0 - peer_type: server - description: server01_Eth0 - type: switched - shutdown: false - mode: access - vlans: 110 -port_channel_interfaces: - Port-Channel1: - description: DC1_LEAF1_Po5 - type: switched - shutdown: false - vlans: 110-112,120-121,130-131 - mode: trunk -vlans: - 130: - tenant: Tenant_A - name: Tenant_A_APP_Zone_1 - 131: - tenant: Tenant_A - name: Tenant_A_APP_Zone_2 - 110: - tenant: Tenant_A - name: Tenant_A_OP_Zone_1 - 111: - tenant: Tenant_A - name: Tenant_A_OP_Zone_2 - 112: - tenant: Tenant_A - name: Tenant_A_OP_Zone_3 - 120: - tenant: Tenant_A - name: Tenant_A_WEB_Zone_1 - 121: - tenant: Tenant_A - name: Tenant_A_WEBZone_2 -ip_igmp_snooping: - globally_enabled: true -ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT diff --git a/inventory/intended/structured_configs/DC1-L2LEAF2A-debug-vars.yml b/inventory/intended/structured_configs/DC1-L2LEAF2A-debug-vars.yml deleted file mode 100644 index c9c4dc984..000000000 --- a/inventory/intended/structured_configs/DC1-L2LEAF2A-debug-vars.yml +++ /dev/null @@ -1,736 +0,0 @@ -ansible_connection: httpapi -ansible_network_os: eos -ansible_user: ansible -ansible_ssh_pass: ansible -ansible_become: true -ansible_become_method: enable -ansible_httpapi_use_ssl: true -ansible_httpapi_validate_certs: false -type: l2leaf -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -cvp_instance_ip: 10.255.0.1 -cvp_ingestauth_key: '' -mgmt_interface: Management1 -mgmt_interface_vrf: MGMT -mgmt_gateway: 10.255.0.1 -name_servers: -- 192.168.2.1 -- 8.8.8.8 -custom_structured_configuration_ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT -fabric_name: DC1_FABRIC -vxlan_vlan_aware_bundles: true -bgp_peer_groups: - IPv4_UNDERLAY_PEERS: - password: AQQvKeimxJu+uGQ/yYvv9w== - EVPN_OVERLAY_PEERS: - password: q+VNViP5i4rVjW1cxFv2wA== - MLAG_IPv4_UNDERLAY_PEER: - password: vnEaG8gMeQf3d3cN6PktXQ== -spine: - defaults: - platform: vEOS-LAB - bgp_as: 65001 - loopback_ipv4_pool: 192.168.255.0/24 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - nodes: - DC1-SPINE1: - id: 1 - mgmt_ip: 10.255.0.11/24 - DC1-SPINE2: - id: 2 - mgmt_ip: 10.255.0.12/24 -l3leaf: - defaults: - platform: vEOS-LAB - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_ipv4_pool: 172.31.255.0/24 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - node_groups: - DC1_LEAF1: - bgp_as: 65101 - nodes: - DC1-LEAF1A: - id: 1 - mgmt_ip: 10.255.0.13/24 - uplink_switch_interfaces: - - Ethernet1 - - Ethernet1 - DC1-LEAF1B: - id: 2 - mgmt_ip: 10.255.0.14/24 - uplink_switch_interfaces: - - Ethernet2 - - Ethernet2 - DC1_LEAF2: - bgp_as: 65102 - nodes: - DC1-LEAF2A: - id: 3 - mgmt_ip: 10.255.0.15/24 - uplink_switch_interfaces: - - Ethernet3 - - Ethernet3 - DC1-LEAF2B: - id: 4 - mgmt_ip: 10.255.0.16/24 - uplink_switch_interfaces: - - Ethernet4 - - Ethernet4 -l2leaf: - defaults: - platform: vEOS-LAB - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - mlag: false - node_groups: - DC1_L2LEAF1: - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF1A: - id: 5 - mgmt_ip: 10.255.0.17/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - DC1_L2LEAF2: - uplink_switches: - - DC1-LEAF2A - - DC1-LEAF2B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF2A: - id: 7 - mgmt_ip: 10.255.0.18/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 -p2p_uplinks_mtu: 1500 -bfd_multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -port_profiles: - TENANT_A_B: - mode: trunk - vlans: 110-111,210-211 - TENANT_A: - mode: access - vlans: '110' - TENANT_B: - mode: trunk - vlans: 210-211 -servers: - server01: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF1A - profile: TENANT_A - server02: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF2A - profile: TENANT_A -tenants: - Tenant_A: - mac_vrf_vni_base: 10000 - vrfs: - Tenant_A_OP_Zone: - vrf_vni: 10 - vtep_diagnostic: - loopback: 100 - loopback_ip_range: 10.255.1.0/24 - svis: - 110: - name: Tenant_A_OP_Zone_1 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.10.1/24 - 111: - vni_override: 50111 - name: Tenant_A_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.11.1/24 - 112: - vni_override: 50112 - name: Tenant_A_OP_Zone_3 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.12.254/24 - Tenant_A_WEB_Zone: - vrf_vni: 11 - svis: - 120: - name: Tenant_A_WEB_Zone_1 - tags: - - web - - erp1 - enabled: true - ip_subnet: 10.1.20.0/24 - 121: - name: Tenant_A_WEBZone_2 - tags: - - web - enabled: true - ip_address_virtual: 10.1.21.1/24 - Tenant_A_APP_Zone: - vrf_vni: 12 - svis: - 130: - name: Tenant_A_APP_Zone_1 - tags: - - app - - erp1 - enabled: true - ip_subnet: 10.1.30.0/24 - 131: - name: Tenant_A_APP_Zone_2 - tags: - - app - enabled: true - ip_address_virtual: 10.1.31.254/24 - Tenant_A_DB_Zone: - vrf_vni: 13 - svis: - 140: - name: Tenant_A_DB_BZone_1 - tags: - - db - - erp1 - enabled: true - ip_address_virtual: 10.1.40.1/24 - 141: - name: Tenant_A_DB_Zone_2 - tags: - - db - enabled: true - ip_address_virtual: 10.1.41.1/24 - Tenant_A_WAN_Zone: - vrf_vni: 14 - svis: - 150: - name: Tenant_A_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.1.40.1/24 - l2vlans: - 160: - vni_override: 55160 - name: Tenant_A_VMOTION - tags: - - vmotion - 161: - name: Tenant_A_NFS - tags: - - nfs - Tenant_B: - mac_vrf_vni_base: 20000 - vrfs: - Tenant_B_OP_Zone: - vrf_vni: 20 - svis: - 210: - name: Tenant_B_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.2.10.0/24 - 211: - name: Tenant_B_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.2.11.1/24 - Tenant_B_WAN_Zone: - vrf_vni: 21 - svis: - 250: - name: Tenant_B_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.2.50.1/24 - Tenant_C: - mac_vrf_vni_base: 30000 - vrfs: - Tenant_C_OP_Zone: - vrf_vni: 30 - svis: - 310: - name: Tenant_C_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.3.10.0/24 - 311: - name: Tenant_C_OP_Zone_2 - tags: - - opzone - enabled: true - ip_subnet: 10.3.11.1/24 - Tenant_C_WAN_Zone: - vrf_vni: 31 - svis: - 350: - name: Tenant_C_WAN_Zone_1 - tags: - - wan - enabled: true - ip_subnet: 10.3.50.1/24 -inventory_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -inventory_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory -ansible_host: 10.255.0.18 -inventory_hostname: DC1-L2LEAF2A -inventory_hostname_short: DC1-L2LEAF2A -group_names: -- DC1 -- DC1_FABRIC -- DC1_L2LEAF2 -- DC1_L2LEAFS -- DC1_SERVERS -- DC1_TENANTS_NETWORKS -ansible_facts: - switch: - type: l2leaf - node_type_key: l2leaf - connected_endpoints: true - default_evpn_role: none - mlag_support: true - network_services_l2: true - network_services_l3: false - underlay_router: false - uplink_type: port-channel - vtep: false - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_L2LEAF2 - id: 7 - mgmt_ip: 10.255.0.18/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - Tenant_A - filter_tags: - - opzone - - web - - app - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-LEAF2A - - DC1-LEAF2B - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: [] - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 - topology: - links: - Ethernet1: - peer: DC1-LEAF2A - peer_interface: Ethernet5 - peer_type: l3leaf - type: underlay_l2 - channel_description: DC1_LEAF2 - channel_group_id: 1 - peer_channel_group_id: 5 - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 - Ethernet2: - peer: DC1-LEAF2B - peer_interface: Ethernet5 - peer_type: l3leaf - type: underlay_l2 - channel_description: DC1_LEAF2 - channel_group_id: 1 - peer_channel_group_id: 5 - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 - peers: - - DC1-LEAF2A - - DC1-LEAF2B - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 -switch: - type: l2leaf - node_type_key: l2leaf - connected_endpoints: true - default_evpn_role: none - mlag_support: true - network_services_l2: true - network_services_l3: false - underlay_router: false - uplink_type: port-channel - vtep: false - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_L2LEAF2 - id: 7 - mgmt_ip: 10.255.0.18/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - Tenant_A - filter_tags: - - opzone - - web - - app - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-LEAF2A - - DC1-LEAF2B - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: [] - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 -topology: - links: - Ethernet1: - peer: DC1-LEAF2A - peer_interface: Ethernet5 - peer_type: l3leaf - type: underlay_l2 - channel_description: DC1_LEAF2 - channel_group_id: 1 - peer_channel_group_id: 5 - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 - Ethernet2: - peer: DC1-LEAF2B - peer_interface: Ethernet5 - peer_type: l3leaf - type: underlay_l2 - channel_description: DC1_LEAF2 - channel_group_id: 1 - peer_channel_group_id: 5 - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 - peers: - - DC1-LEAF2A - - DC1-LEAF2B - vlans: - - 130 - - 131 - - 110 - - 111 - - 112 - - 120 - - 121 -playbook_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/playbooks -ansible_playbook_python: /Users/tgrimonet/.pyenv/versions/3.9.7/envs/arista-avd-demo/bin/python3.9 -ansible_config_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/ansible.cfg -groups: - all: - - cv_ztp - - cv_server - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - ungrouped: [] - CVP: - - cv_ztp - - cv_server - DC1: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-L2LEAF1A - - DC1-L2LEAF2A - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_FABRIC: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SPINES: - - DC1-SPINE1 - - DC1-SPINE2 - DC1_L3LEAFS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_LEAF1: - - DC1-LEAF1A - - DC1-LEAF1B - DC1_LEAF2: - - DC1-LEAF2A - - DC1-LEAF2B - DC1_L2LEAFS: - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_L2LEAF1: - - DC1-L2LEAF1A - DC1_L2LEAF2: - - DC1-L2LEAF2A - DC1_TENANTS_NETWORKS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SERVERS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A -omit: __omit_place_holder__977da4f00604c643da39a9f2175c10b09f0b2380 -ansible_version: - string: 2.10.14 - full: 2.10.14 - major: 2 - minor: 10 - revision: 14 -ansible_check_mode: false -ansible_diff_mode: false -ansible_forks: 5 -ansible_inventory_sources: -- /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -ansible_skip_tags: [] -ansible_run_tags: -- build -ansible_verbosity: 0 diff --git a/inventory/intended/structured_configs/DC1-L2LEAF2A.yml b/inventory/intended/structured_configs/DC1-L2LEAF2A.yml deleted file mode 100644 index 4140ad92f..000000000 --- a/inventory/intended/structured_configs/DC1-L2LEAF2A.yml +++ /dev/null @@ -1,130 +0,0 @@ -static_routes: -- vrf: MGMT - destination_address_prefix: 0.0.0.0/0 - gateway: 10.255.0.1 -service_routing_protocols_model: multi-agent -ip_routing: true -daemon_terminattr: - cvaddrs: - - 10.255.0.1:9910 - cvauth: - method: key - cvvrf: MGMT - smashexcludes: ale,flexCounter,hardware,kni,pulse,strata - ingestexclude: /Sysdb/cell/1/agent,/Sysdb/cell/2/agent - disable_aaa: false -vlan_internal_order: - allocation: ascending - range: - beginning: 1006 - ending: 1199 -name_server: - source: - vrf: MGMT - nodes: - - 192.168.2.1 - - 8.8.8.8 -spanning_tree: - mode: mstp - mst_instances: - '0': - priority: 16384 -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -vrfs: - MGMT: - ip_routing: false -management_interfaces: - Management1: - description: oob_management - shutdown: false - vrf: MGMT - ip_address: 10.255.0.18/24 - gateway: 10.255.0.1 - type: oob -management_api_http: - enable_vrfs: - MGMT: {} - enable_https: true -ethernet_interfaces: - Ethernet1: - peer: DC1-LEAF2A - peer_interface: Ethernet5 - peer_type: l3leaf - description: DC1-LEAF2A_Ethernet5 - type: switched - shutdown: false - channel_group: - id: 1 - mode: active - Ethernet2: - peer: DC1-LEAF2B - peer_interface: Ethernet5 - peer_type: l3leaf - description: DC1-LEAF2B_Ethernet5 - type: switched - shutdown: false - channel_group: - id: 1 - mode: active - Ethernet5: - peer: server02 - peer_interface: Eth0 - peer_type: server - description: server02_Eth0 - type: switched - shutdown: false - mode: access - vlans: 110 -port_channel_interfaces: - Port-Channel1: - description: DC1_LEAF2_Po5 - type: switched - shutdown: false - vlans: 110-112,120-121,130-131 - mode: trunk -vlans: - 130: - tenant: Tenant_A - name: Tenant_A_APP_Zone_1 - 131: - tenant: Tenant_A - name: Tenant_A_APP_Zone_2 - 110: - tenant: Tenant_A - name: Tenant_A_OP_Zone_1 - 111: - tenant: Tenant_A - name: Tenant_A_OP_Zone_2 - 112: - tenant: Tenant_A - name: Tenant_A_OP_Zone_3 - 120: - tenant: Tenant_A - name: Tenant_A_WEB_Zone_1 - 121: - tenant: Tenant_A - name: Tenant_A_WEBZone_2 -ip_igmp_snooping: - globally_enabled: true -ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT diff --git a/inventory/intended/structured_configs/DC1-LEAF1A-debug-vars.yml b/inventory/intended/structured_configs/DC1-LEAF1A-debug-vars.yml deleted file mode 100644 index e73308926..000000000 --- a/inventory/intended/structured_configs/DC1-LEAF1A-debug-vars.yml +++ /dev/null @@ -1,872 +0,0 @@ -ansible_connection: httpapi -ansible_network_os: eos -ansible_user: ansible -ansible_ssh_pass: ansible -ansible_become: true -ansible_become_method: enable -ansible_httpapi_use_ssl: true -ansible_httpapi_validate_certs: false -type: l3leaf -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -cvp_instance_ip: 10.255.0.1 -cvp_ingestauth_key: '' -mgmt_interface: Management1 -mgmt_interface_vrf: MGMT -mgmt_gateway: 10.255.0.1 -name_servers: -- 192.168.2.1 -- 8.8.8.8 -custom_structured_configuration_ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT -fabric_name: DC1_FABRIC -vxlan_vlan_aware_bundles: true -bgp_peer_groups: - IPv4_UNDERLAY_PEERS: - password: AQQvKeimxJu+uGQ/yYvv9w== - EVPN_OVERLAY_PEERS: - password: q+VNViP5i4rVjW1cxFv2wA== - MLAG_IPv4_UNDERLAY_PEER: - password: vnEaG8gMeQf3d3cN6PktXQ== -spine: - defaults: - platform: vEOS-LAB - bgp_as: 65001 - loopback_ipv4_pool: 192.168.255.0/24 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - nodes: - DC1-SPINE1: - id: 1 - mgmt_ip: 10.255.0.11/24 - DC1-SPINE2: - id: 2 - mgmt_ip: 10.255.0.12/24 -l3leaf: - defaults: - platform: vEOS-LAB - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_ipv4_pool: 172.31.255.0/24 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - node_groups: - DC1_LEAF1: - bgp_as: 65101 - nodes: - DC1-LEAF1A: - id: 1 - mgmt_ip: 10.255.0.13/24 - uplink_switch_interfaces: - - Ethernet1 - - Ethernet1 - DC1-LEAF1B: - id: 2 - mgmt_ip: 10.255.0.14/24 - uplink_switch_interfaces: - - Ethernet2 - - Ethernet2 - DC1_LEAF2: - bgp_as: 65102 - nodes: - DC1-LEAF2A: - id: 3 - mgmt_ip: 10.255.0.15/24 - uplink_switch_interfaces: - - Ethernet3 - - Ethernet3 - DC1-LEAF2B: - id: 4 - mgmt_ip: 10.255.0.16/24 - uplink_switch_interfaces: - - Ethernet4 - - Ethernet4 -l2leaf: - defaults: - platform: vEOS-LAB - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - mlag: false - node_groups: - DC1_L2LEAF1: - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF1A: - id: 5 - mgmt_ip: 10.255.0.17/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - DC1_L2LEAF2: - uplink_switches: - - DC1-LEAF2A - - DC1-LEAF2B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF2A: - id: 7 - mgmt_ip: 10.255.0.18/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 -p2p_uplinks_mtu: 1500 -bfd_multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -port_profiles: - TENANT_A_B: - mode: trunk - vlans: 110-111,210-211 - TENANT_A: - mode: access - vlans: '110' - TENANT_B: - mode: trunk - vlans: 210-211 -servers: - server01: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF1A - profile: TENANT_A - server02: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF2A - profile: TENANT_A -tenants: - Tenant_A: - mac_vrf_vni_base: 10000 - vrfs: - Tenant_A_OP_Zone: - vrf_vni: 10 - vtep_diagnostic: - loopback: 100 - loopback_ip_range: 10.255.1.0/24 - svis: - 110: - name: Tenant_A_OP_Zone_1 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.10.1/24 - 111: - vni_override: 50111 - name: Tenant_A_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.11.1/24 - 112: - vni_override: 50112 - name: Tenant_A_OP_Zone_3 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.12.254/24 - Tenant_A_WEB_Zone: - vrf_vni: 11 - svis: - 120: - name: Tenant_A_WEB_Zone_1 - tags: - - web - - erp1 - enabled: true - ip_subnet: 10.1.20.0/24 - 121: - name: Tenant_A_WEBZone_2 - tags: - - web - enabled: true - ip_address_virtual: 10.1.21.1/24 - Tenant_A_APP_Zone: - vrf_vni: 12 - svis: - 130: - name: Tenant_A_APP_Zone_1 - tags: - - app - - erp1 - enabled: true - ip_subnet: 10.1.30.0/24 - 131: - name: Tenant_A_APP_Zone_2 - tags: - - app - enabled: true - ip_address_virtual: 10.1.31.254/24 - Tenant_A_DB_Zone: - vrf_vni: 13 - svis: - 140: - name: Tenant_A_DB_BZone_1 - tags: - - db - - erp1 - enabled: true - ip_address_virtual: 10.1.40.1/24 - 141: - name: Tenant_A_DB_Zone_2 - tags: - - db - enabled: true - ip_address_virtual: 10.1.41.1/24 - Tenant_A_WAN_Zone: - vrf_vni: 14 - svis: - 150: - name: Tenant_A_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.1.40.1/24 - l2vlans: - 160: - vni_override: 55160 - name: Tenant_A_VMOTION - tags: - - vmotion - 161: - name: Tenant_A_NFS - tags: - - nfs - Tenant_B: - mac_vrf_vni_base: 20000 - vrfs: - Tenant_B_OP_Zone: - vrf_vni: 20 - svis: - 210: - name: Tenant_B_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.2.10.0/24 - 211: - name: Tenant_B_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.2.11.1/24 - Tenant_B_WAN_Zone: - vrf_vni: 21 - svis: - 250: - name: Tenant_B_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.2.50.1/24 - Tenant_C: - mac_vrf_vni_base: 30000 - vrfs: - Tenant_C_OP_Zone: - vrf_vni: 30 - svis: - 310: - name: Tenant_C_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.3.10.0/24 - 311: - name: Tenant_C_OP_Zone_2 - tags: - - opzone - enabled: true - ip_subnet: 10.3.11.1/24 - Tenant_C_WAN_Zone: - vrf_vni: 31 - svis: - 350: - name: Tenant_C_WAN_Zone_1 - tags: - - wan - enabled: true - ip_subnet: 10.3.50.1/24 -inventory_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -inventory_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory -ansible_host: 10.255.0.13 -inventory_hostname: DC1-LEAF1A -inventory_hostname_short: DC1-LEAF1A -group_names: -- DC1 -- DC1_FABRIC -- DC1_L3LEAFS -- DC1_LEAF1 -- DC1_SERVERS -- DC1_TENANTS_NETWORKS -ansible_facts: - switch: - type: l3leaf - node_type_key: l3leaf - connected_endpoints: true - default_evpn_role: client - mlag_support: true - network_services_l2: true - network_services_l3: true - underlay_router: true - uplink_type: p2p - vtep: true - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_LEAF1 - id: 1 - mgmt_ip: 10.255.0.13/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - all - filter_tags: - - all - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - virtual_router_mac_address: 00:1c:73:00:dc:01 - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_switch_interfaces: - - Ethernet1 - - Ethernet1 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - uplink_ipv4_pool: 172.31.255.0/24 - router_id: 192.168.255.3 - bgp_as: '65101' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: client - evpn_route_servers: - - DC1-SPINE1 - - DC1-SPINE2 - mlag: true - mlag_group: DC1_LEAF1 - mlag_ibgp_origin_incomplete: true - mlag_peer_vlan: 4094 - mlag_dual_primary_detection: false - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_l3: true - mlag_peer_l3_vlan: 4093 - mlag_role: primary - mlag_peer: DC1-LEAF1B - mlag_peer_mgmt_ip: 10.255.0.14 - mlag_ip: 10.255.252.0 - mlag_peer_ip: 10.255.252.1 - mlag_l3_ip: 10.255.251.0 - mlag_peer_l3_ip: 10.255.251.1 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - vtep_loopback: Loopback1 - vtep_ip: 192.168.254.3 - evpn_services_l2_only: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_DB_Zone: - svis: - - 140 - - 141 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WAN_Zone: - svis: - - 150 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: - - 160 - - 161 - Tenant_B: - vrfs: - Tenant_B_OP_Zone: - svis: - - 210 - - 211 - Tenant_B_WAN_Zone: - svis: - - 250 - l2vlans: [] - Tenant_C: - vrfs: - Tenant_C_OP_Zone: - svis: - - 310 - - 311 - Tenant_C_WAN_Zone: - svis: - - 350 - l2vlans: [] - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 - topology: - links: - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet1 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.1 - peer_ip_address: 172.31.255.0 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet1 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.3 - peer_ip_address: 172.31.255.2 - peers: - - DC1-SPINE1 - - DC1-SPINE2 - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -switch: - type: l3leaf - node_type_key: l3leaf - connected_endpoints: true - default_evpn_role: client - mlag_support: true - network_services_l2: true - network_services_l3: true - underlay_router: true - uplink_type: p2p - vtep: true - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_LEAF1 - id: 1 - mgmt_ip: 10.255.0.13/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - all - filter_tags: - - all - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - virtual_router_mac_address: 00:1c:73:00:dc:01 - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_switch_interfaces: - - Ethernet1 - - Ethernet1 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - uplink_ipv4_pool: 172.31.255.0/24 - router_id: 192.168.255.3 - bgp_as: '65101' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: client - evpn_route_servers: - - DC1-SPINE1 - - DC1-SPINE2 - mlag: true - mlag_group: DC1_LEAF1 - mlag_ibgp_origin_incomplete: true - mlag_peer_vlan: 4094 - mlag_dual_primary_detection: false - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_l3: true - mlag_peer_l3_vlan: 4093 - mlag_role: primary - mlag_peer: DC1-LEAF1B - mlag_peer_mgmt_ip: 10.255.0.14 - mlag_ip: 10.255.252.0 - mlag_peer_ip: 10.255.252.1 - mlag_l3_ip: 10.255.251.0 - mlag_peer_l3_ip: 10.255.251.1 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - vtep_loopback: Loopback1 - vtep_ip: 192.168.254.3 - evpn_services_l2_only: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_DB_Zone: - svis: - - 140 - - 141 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WAN_Zone: - svis: - - 150 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: - - 160 - - 161 - Tenant_B: - vrfs: - Tenant_B_OP_Zone: - svis: - - 210 - - 211 - Tenant_B_WAN_Zone: - svis: - - 250 - l2vlans: [] - Tenant_C: - vrfs: - Tenant_C_OP_Zone: - svis: - - 310 - - 311 - Tenant_C_WAN_Zone: - svis: - - 350 - l2vlans: [] - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -topology: - links: - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet1 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.1 - peer_ip_address: 172.31.255.0 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet1 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.3 - peer_ip_address: 172.31.255.2 - peers: - - DC1-SPINE1 - - DC1-SPINE2 - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -playbook_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/playbooks -ansible_playbook_python: /Users/tgrimonet/.pyenv/versions/3.9.7/envs/arista-avd-demo/bin/python3.9 -ansible_config_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/ansible.cfg -groups: - all: - - cv_ztp - - cv_server - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - ungrouped: [] - CVP: - - cv_ztp - - cv_server - DC1: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-L2LEAF1A - - DC1-L2LEAF2A - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_FABRIC: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SPINES: - - DC1-SPINE1 - - DC1-SPINE2 - DC1_L3LEAFS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_LEAF1: - - DC1-LEAF1A - - DC1-LEAF1B - DC1_LEAF2: - - DC1-LEAF2A - - DC1-LEAF2B - DC1_L2LEAFS: - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_L2LEAF1: - - DC1-L2LEAF1A - DC1_L2LEAF2: - - DC1-L2LEAF2A - DC1_TENANTS_NETWORKS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SERVERS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A -omit: __omit_place_holder__977da4f00604c643da39a9f2175c10b09f0b2380 -ansible_version: - string: 2.10.14 - full: 2.10.14 - major: 2 - minor: 10 - revision: 14 -ansible_check_mode: false -ansible_diff_mode: false -ansible_forks: 5 -ansible_inventory_sources: -- /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -ansible_skip_tags: [] -ansible_run_tags: -- build -ansible_verbosity: 0 diff --git a/inventory/intended/structured_configs/DC1-LEAF1A.yml b/inventory/intended/structured_configs/DC1-LEAF1A.yml deleted file mode 100644 index f75c5c943..000000000 --- a/inventory/intended/structured_configs/DC1-LEAF1A.yml +++ /dev/null @@ -1,892 +0,0 @@ -router_bgp: - as: '65101' - router_id: 192.168.255.3 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - - maximum-paths 4 ecmp 4 - peer_groups: - MLAG-IPv4-UNDERLAY-PEER: - type: ipv4 - remote_as: '65101' - next_hop_self: true - password: vnEaG8gMeQf3d3cN6PktXQ== - maximum_routes: 12000 - send_community: all - route_map_in: RM-MLAG-PEER-IN - IPv4-UNDERLAY-PEERS: - type: ipv4 - password: AQQvKeimxJu+uGQ/yYvv9w== - maximum_routes: 12000 - send_community: all - EVPN-OVERLAY-PEERS: - type: evpn - update_source: Loopback0 - bfd: true - ebgp_multihop: '3' - password: q+VNViP5i4rVjW1cxFv2wA== - send_community: all - maximum_routes: 0 - address_family_ipv4: - peer_groups: - MLAG-IPv4-UNDERLAY-PEER: - activate: true - IPv4-UNDERLAY-PEERS: - activate: true - EVPN-OVERLAY-PEERS: - activate: false - neighbors: - 10.255.251.1: - peer_group: MLAG-IPv4-UNDERLAY-PEER - description: DC1-LEAF1B - 172.31.255.0: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65001' - description: DC1-SPINE1_Ethernet1 - 172.31.255.2: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65001' - description: DC1-SPINE2_Ethernet1 - 192.168.255.1: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-SPINE1 - remote_as: '65001' - 192.168.255.2: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-SPINE2 - remote_as: '65001' - redistribute_routes: - connected: - route_map: RM-CONN-2-BGP - address_family_evpn: - peer_groups: - EVPN-OVERLAY-PEERS: - activate: true - vrfs: - Tenant_A_APP_Zone: - router_id: 192.168.255.3 - rd: 192.168.255.3:12 - route_targets: - import: - evpn: - - '12:12' - export: - evpn: - - '12:12' - neighbors: - 10.255.251.1: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_DB_Zone: - router_id: 192.168.255.3 - rd: 192.168.255.3:13 - route_targets: - import: - evpn: - - '13:13' - export: - evpn: - - '13:13' - neighbors: - 10.255.251.1: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_OP_Zone: - router_id: 192.168.255.3 - rd: 192.168.255.3:10 - route_targets: - import: - evpn: - - '10:10' - export: - evpn: - - '10:10' - neighbors: - 10.255.251.1: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_WAN_Zone: - router_id: 192.168.255.3 - rd: 192.168.255.3:14 - route_targets: - import: - evpn: - - '14:14' - export: - evpn: - - '14:14' - neighbors: - 10.255.251.1: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_WEB_Zone: - router_id: 192.168.255.3 - rd: 192.168.255.3:11 - route_targets: - import: - evpn: - - '11:11' - export: - evpn: - - '11:11' - neighbors: - 10.255.251.1: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_B_OP_Zone: - router_id: 192.168.255.3 - rd: 192.168.255.3:20 - route_targets: - import: - evpn: - - '20:20' - export: - evpn: - - '20:20' - neighbors: - 10.255.251.1: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_B_WAN_Zone: - router_id: 192.168.255.3 - rd: 192.168.255.3:21 - route_targets: - import: - evpn: - - '21:21' - export: - evpn: - - '21:21' - neighbors: - 10.255.251.1: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_C_OP_Zone: - router_id: 192.168.255.3 - rd: 192.168.255.3:30 - route_targets: - import: - evpn: - - '30:30' - export: - evpn: - - '30:30' - neighbors: - 10.255.251.1: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_C_WAN_Zone: - router_id: 192.168.255.3 - rd: 192.168.255.3:31 - route_targets: - import: - evpn: - - '31:31' - export: - evpn: - - '31:31' - neighbors: - 10.255.251.1: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - vlan_aware_bundles: - Tenant_A_APP_Zone: - rd: 192.168.255.3:12 - route_targets: - both: - - '12:12' - redistribute_routes: - - learned - vlan: 130-131 - Tenant_A_DB_Zone: - rd: 192.168.255.3:13 - route_targets: - both: - - '13:13' - redistribute_routes: - - learned - vlan: 140-141 - Tenant_A_OP_Zone: - rd: 192.168.255.3:10 - route_targets: - both: - - '10:10' - redistribute_routes: - - learned - vlan: 110-112 - Tenant_A_WAN_Zone: - rd: 192.168.255.3:14 - route_targets: - both: - - '14:14' - redistribute_routes: - - learned - vlan: 150 - Tenant_A_WEB_Zone: - rd: 192.168.255.3:11 - route_targets: - both: - - '11:11' - redistribute_routes: - - learned - vlan: 120-121 - Tenant_A_VMOTION: - tenant: Tenant_A - rd: 192.168.255.3:55160 - route_targets: - both: - - 55160:55160 - redistribute_routes: - - learned - vlan: 160 - Tenant_A_NFS: - tenant: Tenant_A - rd: 192.168.255.3:10161 - route_targets: - both: - - 10161:10161 - redistribute_routes: - - learned - vlan: 161 - Tenant_B_OP_Zone: - rd: 192.168.255.3:20 - route_targets: - both: - - '20:20' - redistribute_routes: - - learned - vlan: 210-211 - Tenant_B_WAN_Zone: - rd: 192.168.255.3:21 - route_targets: - both: - - '21:21' - redistribute_routes: - - learned - vlan: 250 - Tenant_C_OP_Zone: - rd: 192.168.255.3:30 - route_targets: - both: - - '30:30' - redistribute_routes: - - learned - vlan: 310-311 - Tenant_C_WAN_Zone: - rd: 192.168.255.3:31 - route_targets: - both: - - '31:31' - redistribute_routes: - - learned - vlan: 350 -static_routes: -- vrf: MGMT - destination_address_prefix: 0.0.0.0/0 - gateway: 10.255.0.1 -service_routing_protocols_model: multi-agent -ip_routing: true -daemon_terminattr: - cvaddrs: - - 10.255.0.1:9910 - cvauth: - method: key - cvvrf: MGMT - smashexcludes: ale,flexCounter,hardware,kni,pulse,strata - ingestexclude: /Sysdb/cell/1/agent,/Sysdb/cell/2/agent - disable_aaa: false -vlan_internal_order: - allocation: ascending - range: - beginning: 1006 - ending: 1199 -name_server: - source: - vrf: MGMT - nodes: - - 192.168.2.1 - - 8.8.8.8 -spanning_tree: - mode: mstp - mst_instances: - '0': - priority: 16384 - no_spanning_tree_vlan: 4093-4094 -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -vrfs: - MGMT: - ip_routing: false - Tenant_A_APP_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_DB_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_OP_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_WAN_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_WEB_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_B_OP_Zone: - tenant: Tenant_B - ip_routing: true - Tenant_B_WAN_Zone: - tenant: Tenant_B - ip_routing: true - Tenant_C_OP_Zone: - tenant: Tenant_C - ip_routing: true - Tenant_C_WAN_Zone: - tenant: Tenant_C - ip_routing: true -management_interfaces: - Management1: - description: oob_management - shutdown: false - vrf: MGMT - ip_address: 10.255.0.13/24 - gateway: 10.255.0.1 - type: oob -management_api_http: - enable_vrfs: - MGMT: {} - enable_https: true -vlans: - 4093: - tenant: system - name: LEAF_PEER_L3 - trunk_groups: - - LEAF_PEER_L3 - 4094: - tenant: system - name: MLAG_PEER - trunk_groups: - - MLAG - 130: - tenant: Tenant_A - name: Tenant_A_APP_Zone_1 - 131: - tenant: Tenant_A - name: Tenant_A_APP_Zone_2 - 3011: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_APP_Zone - trunk_groups: - - LEAF_PEER_L3 - 140: - tenant: Tenant_A - name: Tenant_A_DB_BZone_1 - 141: - tenant: Tenant_A - name: Tenant_A_DB_Zone_2 - 3012: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_DB_Zone - trunk_groups: - - LEAF_PEER_L3 - 110: - tenant: Tenant_A - name: Tenant_A_OP_Zone_1 - 111: - tenant: Tenant_A - name: Tenant_A_OP_Zone_2 - 112: - tenant: Tenant_A - name: Tenant_A_OP_Zone_3 - 3009: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 150: - tenant: Tenant_A - name: Tenant_A_WAN_Zone_1 - 3013: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 - 120: - tenant: Tenant_A - name: Tenant_A_WEB_Zone_1 - 121: - tenant: Tenant_A - name: Tenant_A_WEBZone_2 - 3010: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_WEB_Zone - trunk_groups: - - LEAF_PEER_L3 - 160: - tenant: Tenant_A - name: Tenant_A_VMOTION - 161: - tenant: Tenant_A - name: Tenant_A_NFS - 210: - tenant: Tenant_B - name: Tenant_B_OP_Zone_1 - 211: - tenant: Tenant_B - name: Tenant_B_OP_Zone_2 - 3019: - tenant: Tenant_B - name: MLAG_iBGP_Tenant_B_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 250: - tenant: Tenant_B - name: Tenant_B_WAN_Zone_1 - 3020: - tenant: Tenant_B - name: MLAG_iBGP_Tenant_B_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 - 310: - tenant: Tenant_C - name: Tenant_C_OP_Zone_1 - 311: - tenant: Tenant_C - name: Tenant_C_OP_Zone_2 - 3029: - tenant: Tenant_C - name: MLAG_iBGP_Tenant_C_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 350: - tenant: Tenant_C - name: Tenant_C_WAN_Zone_1 - 3030: - tenant: Tenant_C - name: MLAG_iBGP_Tenant_C_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 -vlan_interfaces: - Vlan4093: - description: MLAG_PEER_L3_PEERING - shutdown: false - ip_address: 10.255.251.0/31 - mtu: 1500 - Vlan4094: - description: MLAG_PEER - shutdown: false - ip_address: 10.255.252.0/31 - no_autostate: true - mtu: 1500 - Vlan130: - tenant: Tenant_A - tags: - - app - - erp1 - description: Tenant_A_APP_Zone_1 - shutdown: false - vrf: Tenant_A_APP_Zone - Vlan131: - tenant: Tenant_A - tags: - - app - description: Tenant_A_APP_Zone_2 - shutdown: false - vrf: Tenant_A_APP_Zone - ip_address_virtual: 10.1.31.254/24 - Vlan3011: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' - vrf: Tenant_A_APP_Zone - ip_address: 10.255.251.0/31 - mtu: 1500 - Vlan140: - tenant: Tenant_A - tags: - - db - - erp1 - description: Tenant_A_DB_BZone_1 - shutdown: false - vrf: Tenant_A_DB_Zone - ip_address_virtual: 10.1.40.1/24 - Vlan141: - tenant: Tenant_A - tags: - - db - description: Tenant_A_DB_Zone_2 - shutdown: false - vrf: Tenant_A_DB_Zone - ip_address_virtual: 10.1.41.1/24 - Vlan3012: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' - vrf: Tenant_A_DB_Zone - ip_address: 10.255.251.0/31 - mtu: 1500 - Vlan110: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_1 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.10.1/24 - Vlan111: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_2 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.11.1/24 - Vlan112: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_3 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.12.254/24 - Vlan3009: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' - vrf: Tenant_A_OP_Zone - ip_address: 10.255.251.0/31 - mtu: 1500 - Vlan150: - tenant: Tenant_A - tags: - - wan - description: Tenant_A_WAN_Zone_1 - shutdown: false - vrf: Tenant_A_WAN_Zone - ip_address_virtual: 10.1.40.1/24 - Vlan3013: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' - vrf: Tenant_A_WAN_Zone - ip_address: 10.255.251.0/31 - mtu: 1500 - Vlan120: - tenant: Tenant_A - tags: - - web - - erp1 - description: Tenant_A_WEB_Zone_1 - shutdown: false - vrf: Tenant_A_WEB_Zone - Vlan121: - tenant: Tenant_A - tags: - - web - description: Tenant_A_WEBZone_2 - shutdown: false - vrf: Tenant_A_WEB_Zone - ip_address_virtual: 10.1.21.1/24 - Vlan3010: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' - vrf: Tenant_A_WEB_Zone - ip_address: 10.255.251.0/31 - mtu: 1500 - Vlan210: - tenant: Tenant_B - tags: - - opzone - description: Tenant_B_OP_Zone_1 - shutdown: false - vrf: Tenant_B_OP_Zone - Vlan211: - tenant: Tenant_B - tags: - - opzone - description: Tenant_B_OP_Zone_2 - shutdown: false - vrf: Tenant_B_OP_Zone - ip_address_virtual: 10.2.11.1/24 - Vlan3019: - tenant: Tenant_B - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' - vrf: Tenant_B_OP_Zone - ip_address: 10.255.251.0/31 - mtu: 1500 - Vlan250: - tenant: Tenant_B - tags: - - wan - description: Tenant_B_WAN_Zone_1 - shutdown: false - vrf: Tenant_B_WAN_Zone - ip_address_virtual: 10.2.50.1/24 - Vlan3020: - tenant: Tenant_B - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' - vrf: Tenant_B_WAN_Zone - ip_address: 10.255.251.0/31 - mtu: 1500 - Vlan310: - tenant: Tenant_C - tags: - - opzone - description: Tenant_C_OP_Zone_1 - shutdown: false - vrf: Tenant_C_OP_Zone - Vlan311: - tenant: Tenant_C - tags: - - opzone - description: Tenant_C_OP_Zone_2 - shutdown: false - vrf: Tenant_C_OP_Zone - Vlan3029: - tenant: Tenant_C - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' - vrf: Tenant_C_OP_Zone - ip_address: 10.255.251.0/31 - mtu: 1500 - Vlan350: - tenant: Tenant_C - tags: - - wan - description: Tenant_C_WAN_Zone_1 - shutdown: false - vrf: Tenant_C_WAN_Zone - Vlan3030: - tenant: Tenant_C - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' - vrf: Tenant_C_WAN_Zone - ip_address: 10.255.251.0/31 - mtu: 1500 -port_channel_interfaces: - Port-Channel3: - description: MLAG_PEER_DC1-LEAF1B_Po3 - type: switched - shutdown: false - vlans: 2-4094 - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - Port-Channel5: - description: DC1-L2LEAF1A_Po1 - type: switched - shutdown: false - vlans: 110-112,120-121,130-131 - mode: trunk - mlag: 5 -ethernet_interfaces: - Ethernet3: - peer: DC1-LEAF1B - peer_interface: Ethernet3 - peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF1B_Ethernet3 - type: switched - shutdown: false - channel_group: - id: 3 - mode: active - Ethernet4: - peer: DC1-LEAF1B - peer_interface: Ethernet4 - peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF1B_Ethernet4 - type: switched - shutdown: false - channel_group: - id: 3 - mode: active - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet1 - peer_type: spine - description: P2P_LINK_TO_DC1-SPINE1_Ethernet1 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.1/31 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet1 - peer_type: spine - description: P2P_LINK_TO_DC1-SPINE2_Ethernet1 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.3/31 - Ethernet5: - peer: DC1-L2LEAF1A - peer_interface: Ethernet1 - peer_type: l2leaf - description: DC1-L2LEAF1A_Ethernet1 - type: switched - shutdown: false - channel_group: - id: 5 - mode: active -mlag_configuration: - domain_id: DC1_LEAF1 - local_interface: Vlan4094 - peer_address: 10.255.252.1 - peer_link: Port-Channel3 - reload_delay_mlag: 300 - reload_delay_non_mlag: 330 -route_maps: - RM-MLAG-PEER-IN: - sequence_numbers: - 10: - type: permit - set: - - origin incomplete - description: Make routes learned over MLAG Peer-link less preferred on spines - to ensure optimal routing - RM-CONN-2-BGP: - sequence_numbers: - 10: - type: permit - match: - - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -loopback_interfaces: - Loopback0: - description: EVPN_Overlay_Peering - shutdown: false - ip_address: 192.168.255.3/32 - Loopback1: - description: VTEP_VXLAN_Tunnel_Source - shutdown: false - ip_address: 192.168.254.3/32 - Loopback100: - description: Tenant_A_OP_Zone_VTEP_DIAGNOSTICS - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address: 10.255.1.3/32 -prefix_lists: - PL-LOOPBACKS-EVPN-OVERLAY: - sequence_numbers: - 10: - action: permit 192.168.255.0/24 eq 32 - 20: - action: permit 192.168.254.0/24 eq 32 -router_bfd: - multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -ip_igmp_snooping: - globally_enabled: true -vxlan_interface: - Vxlan1: - description: DC1-LEAF1A_VTEP - vxlan: - source_interface: Loopback1 - virtual_router_encapsulation_mac_address: mlag-system-id - udp_port: 4789 - vlans: - 130: - vni: 10130 - 131: - vni: 10131 - 140: - vni: 10140 - 141: - vni: 10141 - 110: - vni: 10110 - 111: - vni: 50111 - 112: - vni: 50112 - 150: - vni: 10150 - 120: - vni: 10120 - 121: - vni: 10121 - 160: - vni: 55160 - 161: - vni: 10161 - 210: - vni: 20210 - 211: - vni: 20211 - 250: - vni: 20250 - 310: - vni: 30310 - 311: - vni: 30311 - 350: - vni: 30350 - vrfs: - Tenant_A_APP_Zone: - vni: 12 - Tenant_A_DB_Zone: - vni: 13 - Tenant_A_OP_Zone: - vni: 10 - Tenant_A_WAN_Zone: - vni: 14 - Tenant_A_WEB_Zone: - vni: 11 - Tenant_B_OP_Zone: - vni: 20 - Tenant_B_WAN_Zone: - vni: 21 - Tenant_C_OP_Zone: - vni: 30 - Tenant_C_WAN_Zone: - vni: 31 -virtual_source_nat_vrfs: - Tenant_A_OP_Zone: - ip_address: 10.255.1.3 -ip_virtual_router_mac_address: 00:1c:73:00:dc:01 -ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT diff --git a/inventory/intended/structured_configs/DC1-LEAF1B-debug-vars.yml b/inventory/intended/structured_configs/DC1-LEAF1B-debug-vars.yml deleted file mode 100644 index e93e5dbaa..000000000 --- a/inventory/intended/structured_configs/DC1-LEAF1B-debug-vars.yml +++ /dev/null @@ -1,872 +0,0 @@ -ansible_connection: httpapi -ansible_network_os: eos -ansible_user: ansible -ansible_ssh_pass: ansible -ansible_become: true -ansible_become_method: enable -ansible_httpapi_use_ssl: true -ansible_httpapi_validate_certs: false -type: l3leaf -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -cvp_instance_ip: 10.255.0.1 -cvp_ingestauth_key: '' -mgmt_interface: Management1 -mgmt_interface_vrf: MGMT -mgmt_gateway: 10.255.0.1 -name_servers: -- 192.168.2.1 -- 8.8.8.8 -custom_structured_configuration_ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT -fabric_name: DC1_FABRIC -vxlan_vlan_aware_bundles: true -bgp_peer_groups: - IPv4_UNDERLAY_PEERS: - password: AQQvKeimxJu+uGQ/yYvv9w== - EVPN_OVERLAY_PEERS: - password: q+VNViP5i4rVjW1cxFv2wA== - MLAG_IPv4_UNDERLAY_PEER: - password: vnEaG8gMeQf3d3cN6PktXQ== -spine: - defaults: - platform: vEOS-LAB - bgp_as: 65001 - loopback_ipv4_pool: 192.168.255.0/24 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - nodes: - DC1-SPINE1: - id: 1 - mgmt_ip: 10.255.0.11/24 - DC1-SPINE2: - id: 2 - mgmt_ip: 10.255.0.12/24 -l3leaf: - defaults: - platform: vEOS-LAB - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_ipv4_pool: 172.31.255.0/24 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - node_groups: - DC1_LEAF1: - bgp_as: 65101 - nodes: - DC1-LEAF1A: - id: 1 - mgmt_ip: 10.255.0.13/24 - uplink_switch_interfaces: - - Ethernet1 - - Ethernet1 - DC1-LEAF1B: - id: 2 - mgmt_ip: 10.255.0.14/24 - uplink_switch_interfaces: - - Ethernet2 - - Ethernet2 - DC1_LEAF2: - bgp_as: 65102 - nodes: - DC1-LEAF2A: - id: 3 - mgmt_ip: 10.255.0.15/24 - uplink_switch_interfaces: - - Ethernet3 - - Ethernet3 - DC1-LEAF2B: - id: 4 - mgmt_ip: 10.255.0.16/24 - uplink_switch_interfaces: - - Ethernet4 - - Ethernet4 -l2leaf: - defaults: - platform: vEOS-LAB - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - mlag: false - node_groups: - DC1_L2LEAF1: - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF1A: - id: 5 - mgmt_ip: 10.255.0.17/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - DC1_L2LEAF2: - uplink_switches: - - DC1-LEAF2A - - DC1-LEAF2B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF2A: - id: 7 - mgmt_ip: 10.255.0.18/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 -p2p_uplinks_mtu: 1500 -bfd_multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -port_profiles: - TENANT_A_B: - mode: trunk - vlans: 110-111,210-211 - TENANT_A: - mode: access - vlans: '110' - TENANT_B: - mode: trunk - vlans: 210-211 -servers: - server01: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF1A - profile: TENANT_A - server02: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF2A - profile: TENANT_A -tenants: - Tenant_A: - mac_vrf_vni_base: 10000 - vrfs: - Tenant_A_OP_Zone: - vrf_vni: 10 - vtep_diagnostic: - loopback: 100 - loopback_ip_range: 10.255.1.0/24 - svis: - 110: - name: Tenant_A_OP_Zone_1 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.10.1/24 - 111: - vni_override: 50111 - name: Tenant_A_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.11.1/24 - 112: - vni_override: 50112 - name: Tenant_A_OP_Zone_3 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.12.254/24 - Tenant_A_WEB_Zone: - vrf_vni: 11 - svis: - 120: - name: Tenant_A_WEB_Zone_1 - tags: - - web - - erp1 - enabled: true - ip_subnet: 10.1.20.0/24 - 121: - name: Tenant_A_WEBZone_2 - tags: - - web - enabled: true - ip_address_virtual: 10.1.21.1/24 - Tenant_A_APP_Zone: - vrf_vni: 12 - svis: - 130: - name: Tenant_A_APP_Zone_1 - tags: - - app - - erp1 - enabled: true - ip_subnet: 10.1.30.0/24 - 131: - name: Tenant_A_APP_Zone_2 - tags: - - app - enabled: true - ip_address_virtual: 10.1.31.254/24 - Tenant_A_DB_Zone: - vrf_vni: 13 - svis: - 140: - name: Tenant_A_DB_BZone_1 - tags: - - db - - erp1 - enabled: true - ip_address_virtual: 10.1.40.1/24 - 141: - name: Tenant_A_DB_Zone_2 - tags: - - db - enabled: true - ip_address_virtual: 10.1.41.1/24 - Tenant_A_WAN_Zone: - vrf_vni: 14 - svis: - 150: - name: Tenant_A_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.1.40.1/24 - l2vlans: - 160: - vni_override: 55160 - name: Tenant_A_VMOTION - tags: - - vmotion - 161: - name: Tenant_A_NFS - tags: - - nfs - Tenant_B: - mac_vrf_vni_base: 20000 - vrfs: - Tenant_B_OP_Zone: - vrf_vni: 20 - svis: - 210: - name: Tenant_B_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.2.10.0/24 - 211: - name: Tenant_B_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.2.11.1/24 - Tenant_B_WAN_Zone: - vrf_vni: 21 - svis: - 250: - name: Tenant_B_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.2.50.1/24 - Tenant_C: - mac_vrf_vni_base: 30000 - vrfs: - Tenant_C_OP_Zone: - vrf_vni: 30 - svis: - 310: - name: Tenant_C_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.3.10.0/24 - 311: - name: Tenant_C_OP_Zone_2 - tags: - - opzone - enabled: true - ip_subnet: 10.3.11.1/24 - Tenant_C_WAN_Zone: - vrf_vni: 31 - svis: - 350: - name: Tenant_C_WAN_Zone_1 - tags: - - wan - enabled: true - ip_subnet: 10.3.50.1/24 -inventory_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -inventory_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory -ansible_host: 10.255.0.14 -inventory_hostname: DC1-LEAF1B -inventory_hostname_short: DC1-LEAF1B -group_names: -- DC1 -- DC1_FABRIC -- DC1_L3LEAFS -- DC1_LEAF1 -- DC1_SERVERS -- DC1_TENANTS_NETWORKS -ansible_facts: - switch: - type: l3leaf - node_type_key: l3leaf - connected_endpoints: true - default_evpn_role: client - mlag_support: true - network_services_l2: true - network_services_l3: true - underlay_router: true - uplink_type: p2p - vtep: true - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_LEAF1 - id: 2 - mgmt_ip: 10.255.0.14/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - all - filter_tags: - - all - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - virtual_router_mac_address: 00:1c:73:00:dc:01 - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_switch_interfaces: - - Ethernet2 - - Ethernet2 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - uplink_ipv4_pool: 172.31.255.0/24 - router_id: 192.168.255.4 - bgp_as: '65101' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: client - evpn_route_servers: - - DC1-SPINE1 - - DC1-SPINE2 - mlag: true - mlag_group: DC1_LEAF1 - mlag_ibgp_origin_incomplete: true - mlag_peer_vlan: 4094 - mlag_dual_primary_detection: false - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_l3: true - mlag_peer_l3_vlan: 4093 - mlag_role: secondary - mlag_peer: DC1-LEAF1A - mlag_peer_mgmt_ip: 10.255.0.13 - mlag_ip: 10.255.252.1 - mlag_peer_ip: 10.255.252.0 - mlag_l3_ip: 10.255.251.1 - mlag_peer_l3_ip: 10.255.251.0 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - vtep_loopback: Loopback1 - vtep_ip: 192.168.254.3 - evpn_services_l2_only: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_DB_Zone: - svis: - - 140 - - 141 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WAN_Zone: - svis: - - 150 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: - - 160 - - 161 - Tenant_B: - vrfs: - Tenant_B_OP_Zone: - svis: - - 210 - - 211 - Tenant_B_WAN_Zone: - svis: - - 250 - l2vlans: [] - Tenant_C: - vrfs: - Tenant_C_OP_Zone: - svis: - - 310 - - 311 - Tenant_C_WAN_Zone: - svis: - - 350 - l2vlans: [] - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 - topology: - links: - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet2 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.5 - peer_ip_address: 172.31.255.4 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet2 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.7 - peer_ip_address: 172.31.255.6 - peers: - - DC1-SPINE1 - - DC1-SPINE2 - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -switch: - type: l3leaf - node_type_key: l3leaf - connected_endpoints: true - default_evpn_role: client - mlag_support: true - network_services_l2: true - network_services_l3: true - underlay_router: true - uplink_type: p2p - vtep: true - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_LEAF1 - id: 2 - mgmt_ip: 10.255.0.14/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - all - filter_tags: - - all - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - virtual_router_mac_address: 00:1c:73:00:dc:01 - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_switch_interfaces: - - Ethernet2 - - Ethernet2 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - uplink_ipv4_pool: 172.31.255.0/24 - router_id: 192.168.255.4 - bgp_as: '65101' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: client - evpn_route_servers: - - DC1-SPINE1 - - DC1-SPINE2 - mlag: true - mlag_group: DC1_LEAF1 - mlag_ibgp_origin_incomplete: true - mlag_peer_vlan: 4094 - mlag_dual_primary_detection: false - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_l3: true - mlag_peer_l3_vlan: 4093 - mlag_role: secondary - mlag_peer: DC1-LEAF1A - mlag_peer_mgmt_ip: 10.255.0.13 - mlag_ip: 10.255.252.1 - mlag_peer_ip: 10.255.252.0 - mlag_l3_ip: 10.255.251.1 - mlag_peer_l3_ip: 10.255.251.0 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - vtep_loopback: Loopback1 - vtep_ip: 192.168.254.3 - evpn_services_l2_only: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_DB_Zone: - svis: - - 140 - - 141 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WAN_Zone: - svis: - - 150 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: - - 160 - - 161 - Tenant_B: - vrfs: - Tenant_B_OP_Zone: - svis: - - 210 - - 211 - Tenant_B_WAN_Zone: - svis: - - 250 - l2vlans: [] - Tenant_C: - vrfs: - Tenant_C_OP_Zone: - svis: - - 310 - - 311 - Tenant_C_WAN_Zone: - svis: - - 350 - l2vlans: [] - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -topology: - links: - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet2 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.5 - peer_ip_address: 172.31.255.4 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet2 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.7 - peer_ip_address: 172.31.255.6 - peers: - - DC1-SPINE1 - - DC1-SPINE2 - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -playbook_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/playbooks -ansible_playbook_python: /Users/tgrimonet/.pyenv/versions/3.9.7/envs/arista-avd-demo/bin/python3.9 -ansible_config_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/ansible.cfg -groups: - all: - - cv_ztp - - cv_server - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - ungrouped: [] - CVP: - - cv_ztp - - cv_server - DC1: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-L2LEAF1A - - DC1-L2LEAF2A - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_FABRIC: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SPINES: - - DC1-SPINE1 - - DC1-SPINE2 - DC1_L3LEAFS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_LEAF1: - - DC1-LEAF1A - - DC1-LEAF1B - DC1_LEAF2: - - DC1-LEAF2A - - DC1-LEAF2B - DC1_L2LEAFS: - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_L2LEAF1: - - DC1-L2LEAF1A - DC1_L2LEAF2: - - DC1-L2LEAF2A - DC1_TENANTS_NETWORKS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SERVERS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A -omit: __omit_place_holder__977da4f00604c643da39a9f2175c10b09f0b2380 -ansible_version: - string: 2.10.14 - full: 2.10.14 - major: 2 - minor: 10 - revision: 14 -ansible_check_mode: false -ansible_diff_mode: false -ansible_forks: 5 -ansible_inventory_sources: -- /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -ansible_skip_tags: [] -ansible_run_tags: -- build -ansible_verbosity: 0 diff --git a/inventory/intended/structured_configs/DC1-LEAF1B.yml b/inventory/intended/structured_configs/DC1-LEAF1B.yml deleted file mode 100644 index e8bfc2f63..000000000 --- a/inventory/intended/structured_configs/DC1-LEAF1B.yml +++ /dev/null @@ -1,892 +0,0 @@ -router_bgp: - as: '65101' - router_id: 192.168.255.4 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - - maximum-paths 4 ecmp 4 - peer_groups: - MLAG-IPv4-UNDERLAY-PEER: - type: ipv4 - remote_as: '65101' - next_hop_self: true - password: vnEaG8gMeQf3d3cN6PktXQ== - maximum_routes: 12000 - send_community: all - route_map_in: RM-MLAG-PEER-IN - IPv4-UNDERLAY-PEERS: - type: ipv4 - password: AQQvKeimxJu+uGQ/yYvv9w== - maximum_routes: 12000 - send_community: all - EVPN-OVERLAY-PEERS: - type: evpn - update_source: Loopback0 - bfd: true - ebgp_multihop: '3' - password: q+VNViP5i4rVjW1cxFv2wA== - send_community: all - maximum_routes: 0 - address_family_ipv4: - peer_groups: - MLAG-IPv4-UNDERLAY-PEER: - activate: true - IPv4-UNDERLAY-PEERS: - activate: true - EVPN-OVERLAY-PEERS: - activate: false - neighbors: - 10.255.251.0: - peer_group: MLAG-IPv4-UNDERLAY-PEER - description: DC1-LEAF1A - 172.31.255.4: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65001' - description: DC1-SPINE1_Ethernet2 - 172.31.255.6: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65001' - description: DC1-SPINE2_Ethernet2 - 192.168.255.1: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-SPINE1 - remote_as: '65001' - 192.168.255.2: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-SPINE2 - remote_as: '65001' - redistribute_routes: - connected: - route_map: RM-CONN-2-BGP - address_family_evpn: - peer_groups: - EVPN-OVERLAY-PEERS: - activate: true - vrfs: - Tenant_A_APP_Zone: - router_id: 192.168.255.4 - rd: 192.168.255.4:12 - route_targets: - import: - evpn: - - '12:12' - export: - evpn: - - '12:12' - neighbors: - 10.255.251.0: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_DB_Zone: - router_id: 192.168.255.4 - rd: 192.168.255.4:13 - route_targets: - import: - evpn: - - '13:13' - export: - evpn: - - '13:13' - neighbors: - 10.255.251.0: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_OP_Zone: - router_id: 192.168.255.4 - rd: 192.168.255.4:10 - route_targets: - import: - evpn: - - '10:10' - export: - evpn: - - '10:10' - neighbors: - 10.255.251.0: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_WAN_Zone: - router_id: 192.168.255.4 - rd: 192.168.255.4:14 - route_targets: - import: - evpn: - - '14:14' - export: - evpn: - - '14:14' - neighbors: - 10.255.251.0: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_WEB_Zone: - router_id: 192.168.255.4 - rd: 192.168.255.4:11 - route_targets: - import: - evpn: - - '11:11' - export: - evpn: - - '11:11' - neighbors: - 10.255.251.0: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_B_OP_Zone: - router_id: 192.168.255.4 - rd: 192.168.255.4:20 - route_targets: - import: - evpn: - - '20:20' - export: - evpn: - - '20:20' - neighbors: - 10.255.251.0: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_B_WAN_Zone: - router_id: 192.168.255.4 - rd: 192.168.255.4:21 - route_targets: - import: - evpn: - - '21:21' - export: - evpn: - - '21:21' - neighbors: - 10.255.251.0: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_C_OP_Zone: - router_id: 192.168.255.4 - rd: 192.168.255.4:30 - route_targets: - import: - evpn: - - '30:30' - export: - evpn: - - '30:30' - neighbors: - 10.255.251.0: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_C_WAN_Zone: - router_id: 192.168.255.4 - rd: 192.168.255.4:31 - route_targets: - import: - evpn: - - '31:31' - export: - evpn: - - '31:31' - neighbors: - 10.255.251.0: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - vlan_aware_bundles: - Tenant_A_APP_Zone: - rd: 192.168.255.4:12 - route_targets: - both: - - '12:12' - redistribute_routes: - - learned - vlan: 130-131 - Tenant_A_DB_Zone: - rd: 192.168.255.4:13 - route_targets: - both: - - '13:13' - redistribute_routes: - - learned - vlan: 140-141 - Tenant_A_OP_Zone: - rd: 192.168.255.4:10 - route_targets: - both: - - '10:10' - redistribute_routes: - - learned - vlan: 110-112 - Tenant_A_WAN_Zone: - rd: 192.168.255.4:14 - route_targets: - both: - - '14:14' - redistribute_routes: - - learned - vlan: 150 - Tenant_A_WEB_Zone: - rd: 192.168.255.4:11 - route_targets: - both: - - '11:11' - redistribute_routes: - - learned - vlan: 120-121 - Tenant_A_VMOTION: - tenant: Tenant_A - rd: 192.168.255.4:55160 - route_targets: - both: - - 55160:55160 - redistribute_routes: - - learned - vlan: 160 - Tenant_A_NFS: - tenant: Tenant_A - rd: 192.168.255.4:10161 - route_targets: - both: - - 10161:10161 - redistribute_routes: - - learned - vlan: 161 - Tenant_B_OP_Zone: - rd: 192.168.255.4:20 - route_targets: - both: - - '20:20' - redistribute_routes: - - learned - vlan: 210-211 - Tenant_B_WAN_Zone: - rd: 192.168.255.4:21 - route_targets: - both: - - '21:21' - redistribute_routes: - - learned - vlan: 250 - Tenant_C_OP_Zone: - rd: 192.168.255.4:30 - route_targets: - both: - - '30:30' - redistribute_routes: - - learned - vlan: 310-311 - Tenant_C_WAN_Zone: - rd: 192.168.255.4:31 - route_targets: - both: - - '31:31' - redistribute_routes: - - learned - vlan: 350 -static_routes: -- vrf: MGMT - destination_address_prefix: 0.0.0.0/0 - gateway: 10.255.0.1 -service_routing_protocols_model: multi-agent -ip_routing: true -daemon_terminattr: - cvaddrs: - - 10.255.0.1:9910 - cvauth: - method: key - cvvrf: MGMT - smashexcludes: ale,flexCounter,hardware,kni,pulse,strata - ingestexclude: /Sysdb/cell/1/agent,/Sysdb/cell/2/agent - disable_aaa: false -vlan_internal_order: - allocation: ascending - range: - beginning: 1006 - ending: 1199 -name_server: - source: - vrf: MGMT - nodes: - - 192.168.2.1 - - 8.8.8.8 -spanning_tree: - mode: mstp - mst_instances: - '0': - priority: 16384 - no_spanning_tree_vlan: 4093-4094 -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -vrfs: - MGMT: - ip_routing: false - Tenant_A_APP_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_DB_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_OP_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_WAN_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_WEB_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_B_OP_Zone: - tenant: Tenant_B - ip_routing: true - Tenant_B_WAN_Zone: - tenant: Tenant_B - ip_routing: true - Tenant_C_OP_Zone: - tenant: Tenant_C - ip_routing: true - Tenant_C_WAN_Zone: - tenant: Tenant_C - ip_routing: true -management_interfaces: - Management1: - description: oob_management - shutdown: false - vrf: MGMT - ip_address: 10.255.0.14/24 - gateway: 10.255.0.1 - type: oob -management_api_http: - enable_vrfs: - MGMT: {} - enable_https: true -vlans: - 4093: - tenant: system - name: LEAF_PEER_L3 - trunk_groups: - - LEAF_PEER_L3 - 4094: - tenant: system - name: MLAG_PEER - trunk_groups: - - MLAG - 130: - tenant: Tenant_A - name: Tenant_A_APP_Zone_1 - 131: - tenant: Tenant_A - name: Tenant_A_APP_Zone_2 - 3011: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_APP_Zone - trunk_groups: - - LEAF_PEER_L3 - 140: - tenant: Tenant_A - name: Tenant_A_DB_BZone_1 - 141: - tenant: Tenant_A - name: Tenant_A_DB_Zone_2 - 3012: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_DB_Zone - trunk_groups: - - LEAF_PEER_L3 - 110: - tenant: Tenant_A - name: Tenant_A_OP_Zone_1 - 111: - tenant: Tenant_A - name: Tenant_A_OP_Zone_2 - 112: - tenant: Tenant_A - name: Tenant_A_OP_Zone_3 - 3009: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 150: - tenant: Tenant_A - name: Tenant_A_WAN_Zone_1 - 3013: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 - 120: - tenant: Tenant_A - name: Tenant_A_WEB_Zone_1 - 121: - tenant: Tenant_A - name: Tenant_A_WEBZone_2 - 3010: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_WEB_Zone - trunk_groups: - - LEAF_PEER_L3 - 160: - tenant: Tenant_A - name: Tenant_A_VMOTION - 161: - tenant: Tenant_A - name: Tenant_A_NFS - 210: - tenant: Tenant_B - name: Tenant_B_OP_Zone_1 - 211: - tenant: Tenant_B - name: Tenant_B_OP_Zone_2 - 3019: - tenant: Tenant_B - name: MLAG_iBGP_Tenant_B_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 250: - tenant: Tenant_B - name: Tenant_B_WAN_Zone_1 - 3020: - tenant: Tenant_B - name: MLAG_iBGP_Tenant_B_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 - 310: - tenant: Tenant_C - name: Tenant_C_OP_Zone_1 - 311: - tenant: Tenant_C - name: Tenant_C_OP_Zone_2 - 3029: - tenant: Tenant_C - name: MLAG_iBGP_Tenant_C_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 350: - tenant: Tenant_C - name: Tenant_C_WAN_Zone_1 - 3030: - tenant: Tenant_C - name: MLAG_iBGP_Tenant_C_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 -vlan_interfaces: - Vlan4093: - description: MLAG_PEER_L3_PEERING - shutdown: false - ip_address: 10.255.251.1/31 - mtu: 1500 - Vlan4094: - description: MLAG_PEER - shutdown: false - ip_address: 10.255.252.1/31 - no_autostate: true - mtu: 1500 - Vlan130: - tenant: Tenant_A - tags: - - app - - erp1 - description: Tenant_A_APP_Zone_1 - shutdown: false - vrf: Tenant_A_APP_Zone - Vlan131: - tenant: Tenant_A - tags: - - app - description: Tenant_A_APP_Zone_2 - shutdown: false - vrf: Tenant_A_APP_Zone - ip_address_virtual: 10.1.31.254/24 - Vlan3011: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' - vrf: Tenant_A_APP_Zone - ip_address: 10.255.251.1/31 - mtu: 1500 - Vlan140: - tenant: Tenant_A - tags: - - db - - erp1 - description: Tenant_A_DB_BZone_1 - shutdown: false - vrf: Tenant_A_DB_Zone - ip_address_virtual: 10.1.40.1/24 - Vlan141: - tenant: Tenant_A - tags: - - db - description: Tenant_A_DB_Zone_2 - shutdown: false - vrf: Tenant_A_DB_Zone - ip_address_virtual: 10.1.41.1/24 - Vlan3012: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' - vrf: Tenant_A_DB_Zone - ip_address: 10.255.251.1/31 - mtu: 1500 - Vlan110: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_1 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.10.1/24 - Vlan111: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_2 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.11.1/24 - Vlan112: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_3 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.12.254/24 - Vlan3009: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' - vrf: Tenant_A_OP_Zone - ip_address: 10.255.251.1/31 - mtu: 1500 - Vlan150: - tenant: Tenant_A - tags: - - wan - description: Tenant_A_WAN_Zone_1 - shutdown: false - vrf: Tenant_A_WAN_Zone - ip_address_virtual: 10.1.40.1/24 - Vlan3013: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' - vrf: Tenant_A_WAN_Zone - ip_address: 10.255.251.1/31 - mtu: 1500 - Vlan120: - tenant: Tenant_A - tags: - - web - - erp1 - description: Tenant_A_WEB_Zone_1 - shutdown: false - vrf: Tenant_A_WEB_Zone - Vlan121: - tenant: Tenant_A - tags: - - web - description: Tenant_A_WEBZone_2 - shutdown: false - vrf: Tenant_A_WEB_Zone - ip_address_virtual: 10.1.21.1/24 - Vlan3010: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' - vrf: Tenant_A_WEB_Zone - ip_address: 10.255.251.1/31 - mtu: 1500 - Vlan210: - tenant: Tenant_B - tags: - - opzone - description: Tenant_B_OP_Zone_1 - shutdown: false - vrf: Tenant_B_OP_Zone - Vlan211: - tenant: Tenant_B - tags: - - opzone - description: Tenant_B_OP_Zone_2 - shutdown: false - vrf: Tenant_B_OP_Zone - ip_address_virtual: 10.2.11.1/24 - Vlan3019: - tenant: Tenant_B - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' - vrf: Tenant_B_OP_Zone - ip_address: 10.255.251.1/31 - mtu: 1500 - Vlan250: - tenant: Tenant_B - tags: - - wan - description: Tenant_B_WAN_Zone_1 - shutdown: false - vrf: Tenant_B_WAN_Zone - ip_address_virtual: 10.2.50.1/24 - Vlan3020: - tenant: Tenant_B - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' - vrf: Tenant_B_WAN_Zone - ip_address: 10.255.251.1/31 - mtu: 1500 - Vlan310: - tenant: Tenant_C - tags: - - opzone - description: Tenant_C_OP_Zone_1 - shutdown: false - vrf: Tenant_C_OP_Zone - Vlan311: - tenant: Tenant_C - tags: - - opzone - description: Tenant_C_OP_Zone_2 - shutdown: false - vrf: Tenant_C_OP_Zone - Vlan3029: - tenant: Tenant_C - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' - vrf: Tenant_C_OP_Zone - ip_address: 10.255.251.1/31 - mtu: 1500 - Vlan350: - tenant: Tenant_C - tags: - - wan - description: Tenant_C_WAN_Zone_1 - shutdown: false - vrf: Tenant_C_WAN_Zone - Vlan3030: - tenant: Tenant_C - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' - vrf: Tenant_C_WAN_Zone - ip_address: 10.255.251.1/31 - mtu: 1500 -port_channel_interfaces: - Port-Channel3: - description: MLAG_PEER_DC1-LEAF1A_Po3 - type: switched - shutdown: false - vlans: 2-4094 - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - Port-Channel5: - description: DC1-L2LEAF1A_Po1 - type: switched - shutdown: false - vlans: 110-112,120-121,130-131 - mode: trunk - mlag: 5 -ethernet_interfaces: - Ethernet3: - peer: DC1-LEAF1A - peer_interface: Ethernet3 - peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF1A_Ethernet3 - type: switched - shutdown: false - channel_group: - id: 3 - mode: active - Ethernet4: - peer: DC1-LEAF1A - peer_interface: Ethernet4 - peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF1A_Ethernet4 - type: switched - shutdown: false - channel_group: - id: 3 - mode: active - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet2 - peer_type: spine - description: P2P_LINK_TO_DC1-SPINE1_Ethernet2 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.5/31 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet2 - peer_type: spine - description: P2P_LINK_TO_DC1-SPINE2_Ethernet2 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.7/31 - Ethernet5: - peer: DC1-L2LEAF1A - peer_interface: Ethernet2 - peer_type: l2leaf - description: DC1-L2LEAF1A_Ethernet2 - type: switched - shutdown: false - channel_group: - id: 5 - mode: active -mlag_configuration: - domain_id: DC1_LEAF1 - local_interface: Vlan4094 - peer_address: 10.255.252.0 - peer_link: Port-Channel3 - reload_delay_mlag: 300 - reload_delay_non_mlag: 330 -route_maps: - RM-MLAG-PEER-IN: - sequence_numbers: - 10: - type: permit - set: - - origin incomplete - description: Make routes learned over MLAG Peer-link less preferred on spines - to ensure optimal routing - RM-CONN-2-BGP: - sequence_numbers: - 10: - type: permit - match: - - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -loopback_interfaces: - Loopback0: - description: EVPN_Overlay_Peering - shutdown: false - ip_address: 192.168.255.4/32 - Loopback1: - description: VTEP_VXLAN_Tunnel_Source - shutdown: false - ip_address: 192.168.254.3/32 - Loopback100: - description: Tenant_A_OP_Zone_VTEP_DIAGNOSTICS - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address: 10.255.1.4/32 -prefix_lists: - PL-LOOPBACKS-EVPN-OVERLAY: - sequence_numbers: - 10: - action: permit 192.168.255.0/24 eq 32 - 20: - action: permit 192.168.254.0/24 eq 32 -router_bfd: - multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -ip_igmp_snooping: - globally_enabled: true -vxlan_interface: - Vxlan1: - description: DC1-LEAF1B_VTEP - vxlan: - source_interface: Loopback1 - virtual_router_encapsulation_mac_address: mlag-system-id - udp_port: 4789 - vlans: - 130: - vni: 10130 - 131: - vni: 10131 - 140: - vni: 10140 - 141: - vni: 10141 - 110: - vni: 10110 - 111: - vni: 50111 - 112: - vni: 50112 - 150: - vni: 10150 - 120: - vni: 10120 - 121: - vni: 10121 - 160: - vni: 55160 - 161: - vni: 10161 - 210: - vni: 20210 - 211: - vni: 20211 - 250: - vni: 20250 - 310: - vni: 30310 - 311: - vni: 30311 - 350: - vni: 30350 - vrfs: - Tenant_A_APP_Zone: - vni: 12 - Tenant_A_DB_Zone: - vni: 13 - Tenant_A_OP_Zone: - vni: 10 - Tenant_A_WAN_Zone: - vni: 14 - Tenant_A_WEB_Zone: - vni: 11 - Tenant_B_OP_Zone: - vni: 20 - Tenant_B_WAN_Zone: - vni: 21 - Tenant_C_OP_Zone: - vni: 30 - Tenant_C_WAN_Zone: - vni: 31 -virtual_source_nat_vrfs: - Tenant_A_OP_Zone: - ip_address: 10.255.1.4 -ip_virtual_router_mac_address: 00:1c:73:00:dc:01 -ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT diff --git a/inventory/intended/structured_configs/DC1-LEAF2A-debug-vars.yml b/inventory/intended/structured_configs/DC1-LEAF2A-debug-vars.yml deleted file mode 100644 index f265a25d6..000000000 --- a/inventory/intended/structured_configs/DC1-LEAF2A-debug-vars.yml +++ /dev/null @@ -1,872 +0,0 @@ -ansible_connection: httpapi -ansible_network_os: eos -ansible_user: ansible -ansible_ssh_pass: ansible -ansible_become: true -ansible_become_method: enable -ansible_httpapi_use_ssl: true -ansible_httpapi_validate_certs: false -type: l3leaf -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -cvp_instance_ip: 10.255.0.1 -cvp_ingestauth_key: '' -mgmt_interface: Management1 -mgmt_interface_vrf: MGMT -mgmt_gateway: 10.255.0.1 -name_servers: -- 192.168.2.1 -- 8.8.8.8 -custom_structured_configuration_ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT -fabric_name: DC1_FABRIC -vxlan_vlan_aware_bundles: true -bgp_peer_groups: - IPv4_UNDERLAY_PEERS: - password: AQQvKeimxJu+uGQ/yYvv9w== - EVPN_OVERLAY_PEERS: - password: q+VNViP5i4rVjW1cxFv2wA== - MLAG_IPv4_UNDERLAY_PEER: - password: vnEaG8gMeQf3d3cN6PktXQ== -spine: - defaults: - platform: vEOS-LAB - bgp_as: 65001 - loopback_ipv4_pool: 192.168.255.0/24 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - nodes: - DC1-SPINE1: - id: 1 - mgmt_ip: 10.255.0.11/24 - DC1-SPINE2: - id: 2 - mgmt_ip: 10.255.0.12/24 -l3leaf: - defaults: - platform: vEOS-LAB - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_ipv4_pool: 172.31.255.0/24 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - node_groups: - DC1_LEAF1: - bgp_as: 65101 - nodes: - DC1-LEAF1A: - id: 1 - mgmt_ip: 10.255.0.13/24 - uplink_switch_interfaces: - - Ethernet1 - - Ethernet1 - DC1-LEAF1B: - id: 2 - mgmt_ip: 10.255.0.14/24 - uplink_switch_interfaces: - - Ethernet2 - - Ethernet2 - DC1_LEAF2: - bgp_as: 65102 - nodes: - DC1-LEAF2A: - id: 3 - mgmt_ip: 10.255.0.15/24 - uplink_switch_interfaces: - - Ethernet3 - - Ethernet3 - DC1-LEAF2B: - id: 4 - mgmt_ip: 10.255.0.16/24 - uplink_switch_interfaces: - - Ethernet4 - - Ethernet4 -l2leaf: - defaults: - platform: vEOS-LAB - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - mlag: false - node_groups: - DC1_L2LEAF1: - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF1A: - id: 5 - mgmt_ip: 10.255.0.17/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - DC1_L2LEAF2: - uplink_switches: - - DC1-LEAF2A - - DC1-LEAF2B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF2A: - id: 7 - mgmt_ip: 10.255.0.18/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 -p2p_uplinks_mtu: 1500 -bfd_multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -port_profiles: - TENANT_A_B: - mode: trunk - vlans: 110-111,210-211 - TENANT_A: - mode: access - vlans: '110' - TENANT_B: - mode: trunk - vlans: 210-211 -servers: - server01: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF1A - profile: TENANT_A - server02: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF2A - profile: TENANT_A -tenants: - Tenant_A: - mac_vrf_vni_base: 10000 - vrfs: - Tenant_A_OP_Zone: - vrf_vni: 10 - vtep_diagnostic: - loopback: 100 - loopback_ip_range: 10.255.1.0/24 - svis: - 110: - name: Tenant_A_OP_Zone_1 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.10.1/24 - 111: - vni_override: 50111 - name: Tenant_A_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.11.1/24 - 112: - vni_override: 50112 - name: Tenant_A_OP_Zone_3 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.12.254/24 - Tenant_A_WEB_Zone: - vrf_vni: 11 - svis: - 120: - name: Tenant_A_WEB_Zone_1 - tags: - - web - - erp1 - enabled: true - ip_subnet: 10.1.20.0/24 - 121: - name: Tenant_A_WEBZone_2 - tags: - - web - enabled: true - ip_address_virtual: 10.1.21.1/24 - Tenant_A_APP_Zone: - vrf_vni: 12 - svis: - 130: - name: Tenant_A_APP_Zone_1 - tags: - - app - - erp1 - enabled: true - ip_subnet: 10.1.30.0/24 - 131: - name: Tenant_A_APP_Zone_2 - tags: - - app - enabled: true - ip_address_virtual: 10.1.31.254/24 - Tenant_A_DB_Zone: - vrf_vni: 13 - svis: - 140: - name: Tenant_A_DB_BZone_1 - tags: - - db - - erp1 - enabled: true - ip_address_virtual: 10.1.40.1/24 - 141: - name: Tenant_A_DB_Zone_2 - tags: - - db - enabled: true - ip_address_virtual: 10.1.41.1/24 - Tenant_A_WAN_Zone: - vrf_vni: 14 - svis: - 150: - name: Tenant_A_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.1.40.1/24 - l2vlans: - 160: - vni_override: 55160 - name: Tenant_A_VMOTION - tags: - - vmotion - 161: - name: Tenant_A_NFS - tags: - - nfs - Tenant_B: - mac_vrf_vni_base: 20000 - vrfs: - Tenant_B_OP_Zone: - vrf_vni: 20 - svis: - 210: - name: Tenant_B_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.2.10.0/24 - 211: - name: Tenant_B_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.2.11.1/24 - Tenant_B_WAN_Zone: - vrf_vni: 21 - svis: - 250: - name: Tenant_B_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.2.50.1/24 - Tenant_C: - mac_vrf_vni_base: 30000 - vrfs: - Tenant_C_OP_Zone: - vrf_vni: 30 - svis: - 310: - name: Tenant_C_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.3.10.0/24 - 311: - name: Tenant_C_OP_Zone_2 - tags: - - opzone - enabled: true - ip_subnet: 10.3.11.1/24 - Tenant_C_WAN_Zone: - vrf_vni: 31 - svis: - 350: - name: Tenant_C_WAN_Zone_1 - tags: - - wan - enabled: true - ip_subnet: 10.3.50.1/24 -inventory_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -inventory_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory -ansible_host: 10.255.0.15 -inventory_hostname: DC1-LEAF2A -inventory_hostname_short: DC1-LEAF2A -group_names: -- DC1 -- DC1_FABRIC -- DC1_L3LEAFS -- DC1_LEAF2 -- DC1_SERVERS -- DC1_TENANTS_NETWORKS -ansible_facts: - switch: - type: l3leaf - node_type_key: l3leaf - connected_endpoints: true - default_evpn_role: client - mlag_support: true - network_services_l2: true - network_services_l3: true - underlay_router: true - uplink_type: p2p - vtep: true - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_LEAF2 - id: 3 - mgmt_ip: 10.255.0.15/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - all - filter_tags: - - all - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - virtual_router_mac_address: 00:1c:73:00:dc:01 - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_switch_interfaces: - - Ethernet3 - - Ethernet3 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - uplink_ipv4_pool: 172.31.255.0/24 - router_id: 192.168.255.5 - bgp_as: '65102' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: client - evpn_route_servers: - - DC1-SPINE1 - - DC1-SPINE2 - mlag: true - mlag_group: DC1_LEAF2 - mlag_ibgp_origin_incomplete: true - mlag_peer_vlan: 4094 - mlag_dual_primary_detection: false - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_l3: true - mlag_peer_l3_vlan: 4093 - mlag_role: primary - mlag_peer: DC1-LEAF2B - mlag_peer_mgmt_ip: 10.255.0.16 - mlag_ip: 10.255.252.4 - mlag_peer_ip: 10.255.252.5 - mlag_l3_ip: 10.255.251.4 - mlag_peer_l3_ip: 10.255.251.5 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - vtep_loopback: Loopback1 - vtep_ip: 192.168.254.5 - evpn_services_l2_only: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_DB_Zone: - svis: - - 140 - - 141 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WAN_Zone: - svis: - - 150 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: - - 160 - - 161 - Tenant_B: - vrfs: - Tenant_B_OP_Zone: - svis: - - 210 - - 211 - Tenant_B_WAN_Zone: - svis: - - 250 - l2vlans: [] - Tenant_C: - vrfs: - Tenant_C_OP_Zone: - svis: - - 310 - - 311 - Tenant_C_WAN_Zone: - svis: - - 350 - l2vlans: [] - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 - topology: - links: - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet3 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.9 - peer_ip_address: 172.31.255.8 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet3 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.11 - peer_ip_address: 172.31.255.10 - peers: - - DC1-SPINE1 - - DC1-SPINE2 - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -switch: - type: l3leaf - node_type_key: l3leaf - connected_endpoints: true - default_evpn_role: client - mlag_support: true - network_services_l2: true - network_services_l3: true - underlay_router: true - uplink_type: p2p - vtep: true - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_LEAF2 - id: 3 - mgmt_ip: 10.255.0.15/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - all - filter_tags: - - all - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - virtual_router_mac_address: 00:1c:73:00:dc:01 - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_switch_interfaces: - - Ethernet3 - - Ethernet3 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - uplink_ipv4_pool: 172.31.255.0/24 - router_id: 192.168.255.5 - bgp_as: '65102' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: client - evpn_route_servers: - - DC1-SPINE1 - - DC1-SPINE2 - mlag: true - mlag_group: DC1_LEAF2 - mlag_ibgp_origin_incomplete: true - mlag_peer_vlan: 4094 - mlag_dual_primary_detection: false - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_l3: true - mlag_peer_l3_vlan: 4093 - mlag_role: primary - mlag_peer: DC1-LEAF2B - mlag_peer_mgmt_ip: 10.255.0.16 - mlag_ip: 10.255.252.4 - mlag_peer_ip: 10.255.252.5 - mlag_l3_ip: 10.255.251.4 - mlag_peer_l3_ip: 10.255.251.5 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - vtep_loopback: Loopback1 - vtep_ip: 192.168.254.5 - evpn_services_l2_only: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_DB_Zone: - svis: - - 140 - - 141 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WAN_Zone: - svis: - - 150 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: - - 160 - - 161 - Tenant_B: - vrfs: - Tenant_B_OP_Zone: - svis: - - 210 - - 211 - Tenant_B_WAN_Zone: - svis: - - 250 - l2vlans: [] - Tenant_C: - vrfs: - Tenant_C_OP_Zone: - svis: - - 310 - - 311 - Tenant_C_WAN_Zone: - svis: - - 350 - l2vlans: [] - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -topology: - links: - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet3 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.9 - peer_ip_address: 172.31.255.8 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet3 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.11 - peer_ip_address: 172.31.255.10 - peers: - - DC1-SPINE1 - - DC1-SPINE2 - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -playbook_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/playbooks -ansible_playbook_python: /Users/tgrimonet/.pyenv/versions/3.9.7/envs/arista-avd-demo/bin/python3.9 -ansible_config_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/ansible.cfg -groups: - all: - - cv_ztp - - cv_server - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - ungrouped: [] - CVP: - - cv_ztp - - cv_server - DC1: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-L2LEAF1A - - DC1-L2LEAF2A - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_FABRIC: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SPINES: - - DC1-SPINE1 - - DC1-SPINE2 - DC1_L3LEAFS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_LEAF1: - - DC1-LEAF1A - - DC1-LEAF1B - DC1_LEAF2: - - DC1-LEAF2A - - DC1-LEAF2B - DC1_L2LEAFS: - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_L2LEAF1: - - DC1-L2LEAF1A - DC1_L2LEAF2: - - DC1-L2LEAF2A - DC1_TENANTS_NETWORKS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SERVERS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A -omit: __omit_place_holder__977da4f00604c643da39a9f2175c10b09f0b2380 -ansible_version: - string: 2.10.14 - full: 2.10.14 - major: 2 - minor: 10 - revision: 14 -ansible_check_mode: false -ansible_diff_mode: false -ansible_forks: 5 -ansible_inventory_sources: -- /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -ansible_skip_tags: [] -ansible_run_tags: -- build -ansible_verbosity: 0 diff --git a/inventory/intended/structured_configs/DC1-LEAF2A.yml b/inventory/intended/structured_configs/DC1-LEAF2A.yml deleted file mode 100644 index ea0e2cebe..000000000 --- a/inventory/intended/structured_configs/DC1-LEAF2A.yml +++ /dev/null @@ -1,892 +0,0 @@ -router_bgp: - as: '65102' - router_id: 192.168.255.5 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - - maximum-paths 4 ecmp 4 - peer_groups: - MLAG-IPv4-UNDERLAY-PEER: - type: ipv4 - remote_as: '65102' - next_hop_self: true - password: vnEaG8gMeQf3d3cN6PktXQ== - maximum_routes: 12000 - send_community: all - route_map_in: RM-MLAG-PEER-IN - IPv4-UNDERLAY-PEERS: - type: ipv4 - password: AQQvKeimxJu+uGQ/yYvv9w== - maximum_routes: 12000 - send_community: all - EVPN-OVERLAY-PEERS: - type: evpn - update_source: Loopback0 - bfd: true - ebgp_multihop: '3' - password: q+VNViP5i4rVjW1cxFv2wA== - send_community: all - maximum_routes: 0 - address_family_ipv4: - peer_groups: - MLAG-IPv4-UNDERLAY-PEER: - activate: true - IPv4-UNDERLAY-PEERS: - activate: true - EVPN-OVERLAY-PEERS: - activate: false - neighbors: - 10.255.251.5: - peer_group: MLAG-IPv4-UNDERLAY-PEER - description: DC1-LEAF2B - 172.31.255.8: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65001' - description: DC1-SPINE1_Ethernet3 - 172.31.255.10: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65001' - description: DC1-SPINE2_Ethernet3 - 192.168.255.1: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-SPINE1 - remote_as: '65001' - 192.168.255.2: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-SPINE2 - remote_as: '65001' - redistribute_routes: - connected: - route_map: RM-CONN-2-BGP - address_family_evpn: - peer_groups: - EVPN-OVERLAY-PEERS: - activate: true - vrfs: - Tenant_A_APP_Zone: - router_id: 192.168.255.5 - rd: 192.168.255.5:12 - route_targets: - import: - evpn: - - '12:12' - export: - evpn: - - '12:12' - neighbors: - 10.255.251.5: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_DB_Zone: - router_id: 192.168.255.5 - rd: 192.168.255.5:13 - route_targets: - import: - evpn: - - '13:13' - export: - evpn: - - '13:13' - neighbors: - 10.255.251.5: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_OP_Zone: - router_id: 192.168.255.5 - rd: 192.168.255.5:10 - route_targets: - import: - evpn: - - '10:10' - export: - evpn: - - '10:10' - neighbors: - 10.255.251.5: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_WAN_Zone: - router_id: 192.168.255.5 - rd: 192.168.255.5:14 - route_targets: - import: - evpn: - - '14:14' - export: - evpn: - - '14:14' - neighbors: - 10.255.251.5: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_WEB_Zone: - router_id: 192.168.255.5 - rd: 192.168.255.5:11 - route_targets: - import: - evpn: - - '11:11' - export: - evpn: - - '11:11' - neighbors: - 10.255.251.5: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_B_OP_Zone: - router_id: 192.168.255.5 - rd: 192.168.255.5:20 - route_targets: - import: - evpn: - - '20:20' - export: - evpn: - - '20:20' - neighbors: - 10.255.251.5: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_B_WAN_Zone: - router_id: 192.168.255.5 - rd: 192.168.255.5:21 - route_targets: - import: - evpn: - - '21:21' - export: - evpn: - - '21:21' - neighbors: - 10.255.251.5: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_C_OP_Zone: - router_id: 192.168.255.5 - rd: 192.168.255.5:30 - route_targets: - import: - evpn: - - '30:30' - export: - evpn: - - '30:30' - neighbors: - 10.255.251.5: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_C_WAN_Zone: - router_id: 192.168.255.5 - rd: 192.168.255.5:31 - route_targets: - import: - evpn: - - '31:31' - export: - evpn: - - '31:31' - neighbors: - 10.255.251.5: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - vlan_aware_bundles: - Tenant_A_APP_Zone: - rd: 192.168.255.5:12 - route_targets: - both: - - '12:12' - redistribute_routes: - - learned - vlan: 130-131 - Tenant_A_DB_Zone: - rd: 192.168.255.5:13 - route_targets: - both: - - '13:13' - redistribute_routes: - - learned - vlan: 140-141 - Tenant_A_OP_Zone: - rd: 192.168.255.5:10 - route_targets: - both: - - '10:10' - redistribute_routes: - - learned - vlan: 110-112 - Tenant_A_WAN_Zone: - rd: 192.168.255.5:14 - route_targets: - both: - - '14:14' - redistribute_routes: - - learned - vlan: 150 - Tenant_A_WEB_Zone: - rd: 192.168.255.5:11 - route_targets: - both: - - '11:11' - redistribute_routes: - - learned - vlan: 120-121 - Tenant_A_VMOTION: - tenant: Tenant_A - rd: 192.168.255.5:55160 - route_targets: - both: - - 55160:55160 - redistribute_routes: - - learned - vlan: 160 - Tenant_A_NFS: - tenant: Tenant_A - rd: 192.168.255.5:10161 - route_targets: - both: - - 10161:10161 - redistribute_routes: - - learned - vlan: 161 - Tenant_B_OP_Zone: - rd: 192.168.255.5:20 - route_targets: - both: - - '20:20' - redistribute_routes: - - learned - vlan: 210-211 - Tenant_B_WAN_Zone: - rd: 192.168.255.5:21 - route_targets: - both: - - '21:21' - redistribute_routes: - - learned - vlan: 250 - Tenant_C_OP_Zone: - rd: 192.168.255.5:30 - route_targets: - both: - - '30:30' - redistribute_routes: - - learned - vlan: 310-311 - Tenant_C_WAN_Zone: - rd: 192.168.255.5:31 - route_targets: - both: - - '31:31' - redistribute_routes: - - learned - vlan: 350 -static_routes: -- vrf: MGMT - destination_address_prefix: 0.0.0.0/0 - gateway: 10.255.0.1 -service_routing_protocols_model: multi-agent -ip_routing: true -daemon_terminattr: - cvaddrs: - - 10.255.0.1:9910 - cvauth: - method: key - cvvrf: MGMT - smashexcludes: ale,flexCounter,hardware,kni,pulse,strata - ingestexclude: /Sysdb/cell/1/agent,/Sysdb/cell/2/agent - disable_aaa: false -vlan_internal_order: - allocation: ascending - range: - beginning: 1006 - ending: 1199 -name_server: - source: - vrf: MGMT - nodes: - - 192.168.2.1 - - 8.8.8.8 -spanning_tree: - mode: mstp - mst_instances: - '0': - priority: 16384 - no_spanning_tree_vlan: 4093-4094 -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -vrfs: - MGMT: - ip_routing: false - Tenant_A_APP_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_DB_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_OP_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_WAN_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_WEB_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_B_OP_Zone: - tenant: Tenant_B - ip_routing: true - Tenant_B_WAN_Zone: - tenant: Tenant_B - ip_routing: true - Tenant_C_OP_Zone: - tenant: Tenant_C - ip_routing: true - Tenant_C_WAN_Zone: - tenant: Tenant_C - ip_routing: true -management_interfaces: - Management1: - description: oob_management - shutdown: false - vrf: MGMT - ip_address: 10.255.0.15/24 - gateway: 10.255.0.1 - type: oob -management_api_http: - enable_vrfs: - MGMT: {} - enable_https: true -vlans: - 4093: - tenant: system - name: LEAF_PEER_L3 - trunk_groups: - - LEAF_PEER_L3 - 4094: - tenant: system - name: MLAG_PEER - trunk_groups: - - MLAG - 130: - tenant: Tenant_A - name: Tenant_A_APP_Zone_1 - 131: - tenant: Tenant_A - name: Tenant_A_APP_Zone_2 - 3011: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_APP_Zone - trunk_groups: - - LEAF_PEER_L3 - 140: - tenant: Tenant_A - name: Tenant_A_DB_BZone_1 - 141: - tenant: Tenant_A - name: Tenant_A_DB_Zone_2 - 3012: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_DB_Zone - trunk_groups: - - LEAF_PEER_L3 - 110: - tenant: Tenant_A - name: Tenant_A_OP_Zone_1 - 111: - tenant: Tenant_A - name: Tenant_A_OP_Zone_2 - 112: - tenant: Tenant_A - name: Tenant_A_OP_Zone_3 - 3009: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 150: - tenant: Tenant_A - name: Tenant_A_WAN_Zone_1 - 3013: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 - 120: - tenant: Tenant_A - name: Tenant_A_WEB_Zone_1 - 121: - tenant: Tenant_A - name: Tenant_A_WEBZone_2 - 3010: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_WEB_Zone - trunk_groups: - - LEAF_PEER_L3 - 160: - tenant: Tenant_A - name: Tenant_A_VMOTION - 161: - tenant: Tenant_A - name: Tenant_A_NFS - 210: - tenant: Tenant_B - name: Tenant_B_OP_Zone_1 - 211: - tenant: Tenant_B - name: Tenant_B_OP_Zone_2 - 3019: - tenant: Tenant_B - name: MLAG_iBGP_Tenant_B_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 250: - tenant: Tenant_B - name: Tenant_B_WAN_Zone_1 - 3020: - tenant: Tenant_B - name: MLAG_iBGP_Tenant_B_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 - 310: - tenant: Tenant_C - name: Tenant_C_OP_Zone_1 - 311: - tenant: Tenant_C - name: Tenant_C_OP_Zone_2 - 3029: - tenant: Tenant_C - name: MLAG_iBGP_Tenant_C_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 350: - tenant: Tenant_C - name: Tenant_C_WAN_Zone_1 - 3030: - tenant: Tenant_C - name: MLAG_iBGP_Tenant_C_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 -vlan_interfaces: - Vlan4093: - description: MLAG_PEER_L3_PEERING - shutdown: false - ip_address: 10.255.251.4/31 - mtu: 1500 - Vlan4094: - description: MLAG_PEER - shutdown: false - ip_address: 10.255.252.4/31 - no_autostate: true - mtu: 1500 - Vlan130: - tenant: Tenant_A - tags: - - app - - erp1 - description: Tenant_A_APP_Zone_1 - shutdown: false - vrf: Tenant_A_APP_Zone - Vlan131: - tenant: Tenant_A - tags: - - app - description: Tenant_A_APP_Zone_2 - shutdown: false - vrf: Tenant_A_APP_Zone - ip_address_virtual: 10.1.31.254/24 - Vlan3011: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' - vrf: Tenant_A_APP_Zone - ip_address: 10.255.251.4/31 - mtu: 1500 - Vlan140: - tenant: Tenant_A - tags: - - db - - erp1 - description: Tenant_A_DB_BZone_1 - shutdown: false - vrf: Tenant_A_DB_Zone - ip_address_virtual: 10.1.40.1/24 - Vlan141: - tenant: Tenant_A - tags: - - db - description: Tenant_A_DB_Zone_2 - shutdown: false - vrf: Tenant_A_DB_Zone - ip_address_virtual: 10.1.41.1/24 - Vlan3012: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' - vrf: Tenant_A_DB_Zone - ip_address: 10.255.251.4/31 - mtu: 1500 - Vlan110: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_1 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.10.1/24 - Vlan111: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_2 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.11.1/24 - Vlan112: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_3 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.12.254/24 - Vlan3009: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' - vrf: Tenant_A_OP_Zone - ip_address: 10.255.251.4/31 - mtu: 1500 - Vlan150: - tenant: Tenant_A - tags: - - wan - description: Tenant_A_WAN_Zone_1 - shutdown: false - vrf: Tenant_A_WAN_Zone - ip_address_virtual: 10.1.40.1/24 - Vlan3013: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' - vrf: Tenant_A_WAN_Zone - ip_address: 10.255.251.4/31 - mtu: 1500 - Vlan120: - tenant: Tenant_A - tags: - - web - - erp1 - description: Tenant_A_WEB_Zone_1 - shutdown: false - vrf: Tenant_A_WEB_Zone - Vlan121: - tenant: Tenant_A - tags: - - web - description: Tenant_A_WEBZone_2 - shutdown: false - vrf: Tenant_A_WEB_Zone - ip_address_virtual: 10.1.21.1/24 - Vlan3010: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' - vrf: Tenant_A_WEB_Zone - ip_address: 10.255.251.4/31 - mtu: 1500 - Vlan210: - tenant: Tenant_B - tags: - - opzone - description: Tenant_B_OP_Zone_1 - shutdown: false - vrf: Tenant_B_OP_Zone - Vlan211: - tenant: Tenant_B - tags: - - opzone - description: Tenant_B_OP_Zone_2 - shutdown: false - vrf: Tenant_B_OP_Zone - ip_address_virtual: 10.2.11.1/24 - Vlan3019: - tenant: Tenant_B - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' - vrf: Tenant_B_OP_Zone - ip_address: 10.255.251.4/31 - mtu: 1500 - Vlan250: - tenant: Tenant_B - tags: - - wan - description: Tenant_B_WAN_Zone_1 - shutdown: false - vrf: Tenant_B_WAN_Zone - ip_address_virtual: 10.2.50.1/24 - Vlan3020: - tenant: Tenant_B - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' - vrf: Tenant_B_WAN_Zone - ip_address: 10.255.251.4/31 - mtu: 1500 - Vlan310: - tenant: Tenant_C - tags: - - opzone - description: Tenant_C_OP_Zone_1 - shutdown: false - vrf: Tenant_C_OP_Zone - Vlan311: - tenant: Tenant_C - tags: - - opzone - description: Tenant_C_OP_Zone_2 - shutdown: false - vrf: Tenant_C_OP_Zone - Vlan3029: - tenant: Tenant_C - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' - vrf: Tenant_C_OP_Zone - ip_address: 10.255.251.4/31 - mtu: 1500 - Vlan350: - tenant: Tenant_C - tags: - - wan - description: Tenant_C_WAN_Zone_1 - shutdown: false - vrf: Tenant_C_WAN_Zone - Vlan3030: - tenant: Tenant_C - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' - vrf: Tenant_C_WAN_Zone - ip_address: 10.255.251.4/31 - mtu: 1500 -port_channel_interfaces: - Port-Channel3: - description: MLAG_PEER_DC1-LEAF2B_Po3 - type: switched - shutdown: false - vlans: 2-4094 - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - Port-Channel5: - description: DC1-L2LEAF2A_Po1 - type: switched - shutdown: false - vlans: 110-112,120-121,130-131 - mode: trunk - mlag: 5 -ethernet_interfaces: - Ethernet3: - peer: DC1-LEAF2B - peer_interface: Ethernet3 - peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2B_Ethernet3 - type: switched - shutdown: false - channel_group: - id: 3 - mode: active - Ethernet4: - peer: DC1-LEAF2B - peer_interface: Ethernet4 - peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2B_Ethernet4 - type: switched - shutdown: false - channel_group: - id: 3 - mode: active - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet3 - peer_type: spine - description: P2P_LINK_TO_DC1-SPINE1_Ethernet3 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.9/31 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet3 - peer_type: spine - description: P2P_LINK_TO_DC1-SPINE2_Ethernet3 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.11/31 - Ethernet5: - peer: DC1-L2LEAF2A - peer_interface: Ethernet1 - peer_type: l2leaf - description: DC1-L2LEAF2A_Ethernet1 - type: switched - shutdown: false - channel_group: - id: 5 - mode: active -mlag_configuration: - domain_id: DC1_LEAF2 - local_interface: Vlan4094 - peer_address: 10.255.252.5 - peer_link: Port-Channel3 - reload_delay_mlag: 300 - reload_delay_non_mlag: 330 -route_maps: - RM-MLAG-PEER-IN: - sequence_numbers: - 10: - type: permit - set: - - origin incomplete - description: Make routes learned over MLAG Peer-link less preferred on spines - to ensure optimal routing - RM-CONN-2-BGP: - sequence_numbers: - 10: - type: permit - match: - - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -loopback_interfaces: - Loopback0: - description: EVPN_Overlay_Peering - shutdown: false - ip_address: 192.168.255.5/32 - Loopback1: - description: VTEP_VXLAN_Tunnel_Source - shutdown: false - ip_address: 192.168.254.5/32 - Loopback100: - description: Tenant_A_OP_Zone_VTEP_DIAGNOSTICS - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address: 10.255.1.5/32 -prefix_lists: - PL-LOOPBACKS-EVPN-OVERLAY: - sequence_numbers: - 10: - action: permit 192.168.255.0/24 eq 32 - 20: - action: permit 192.168.254.0/24 eq 32 -router_bfd: - multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -ip_igmp_snooping: - globally_enabled: true -vxlan_interface: - Vxlan1: - description: DC1-LEAF2A_VTEP - vxlan: - source_interface: Loopback1 - virtual_router_encapsulation_mac_address: mlag-system-id - udp_port: 4789 - vlans: - 130: - vni: 10130 - 131: - vni: 10131 - 140: - vni: 10140 - 141: - vni: 10141 - 110: - vni: 10110 - 111: - vni: 50111 - 112: - vni: 50112 - 150: - vni: 10150 - 120: - vni: 10120 - 121: - vni: 10121 - 160: - vni: 55160 - 161: - vni: 10161 - 210: - vni: 20210 - 211: - vni: 20211 - 250: - vni: 20250 - 310: - vni: 30310 - 311: - vni: 30311 - 350: - vni: 30350 - vrfs: - Tenant_A_APP_Zone: - vni: 12 - Tenant_A_DB_Zone: - vni: 13 - Tenant_A_OP_Zone: - vni: 10 - Tenant_A_WAN_Zone: - vni: 14 - Tenant_A_WEB_Zone: - vni: 11 - Tenant_B_OP_Zone: - vni: 20 - Tenant_B_WAN_Zone: - vni: 21 - Tenant_C_OP_Zone: - vni: 30 - Tenant_C_WAN_Zone: - vni: 31 -virtual_source_nat_vrfs: - Tenant_A_OP_Zone: - ip_address: 10.255.1.5 -ip_virtual_router_mac_address: 00:1c:73:00:dc:01 -ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT diff --git a/inventory/intended/structured_configs/DC1-LEAF2B-debug-vars.yml b/inventory/intended/structured_configs/DC1-LEAF2B-debug-vars.yml deleted file mode 100644 index ad26eebe0..000000000 --- a/inventory/intended/structured_configs/DC1-LEAF2B-debug-vars.yml +++ /dev/null @@ -1,872 +0,0 @@ -ansible_connection: httpapi -ansible_network_os: eos -ansible_user: ansible -ansible_ssh_pass: ansible -ansible_become: true -ansible_become_method: enable -ansible_httpapi_use_ssl: true -ansible_httpapi_validate_certs: false -type: l3leaf -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -cvp_instance_ip: 10.255.0.1 -cvp_ingestauth_key: '' -mgmt_interface: Management1 -mgmt_interface_vrf: MGMT -mgmt_gateway: 10.255.0.1 -name_servers: -- 192.168.2.1 -- 8.8.8.8 -custom_structured_configuration_ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT -fabric_name: DC1_FABRIC -vxlan_vlan_aware_bundles: true -bgp_peer_groups: - IPv4_UNDERLAY_PEERS: - password: AQQvKeimxJu+uGQ/yYvv9w== - EVPN_OVERLAY_PEERS: - password: q+VNViP5i4rVjW1cxFv2wA== - MLAG_IPv4_UNDERLAY_PEER: - password: vnEaG8gMeQf3d3cN6PktXQ== -spine: - defaults: - platform: vEOS-LAB - bgp_as: 65001 - loopback_ipv4_pool: 192.168.255.0/24 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - nodes: - DC1-SPINE1: - id: 1 - mgmt_ip: 10.255.0.11/24 - DC1-SPINE2: - id: 2 - mgmt_ip: 10.255.0.12/24 -l3leaf: - defaults: - platform: vEOS-LAB - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_ipv4_pool: 172.31.255.0/24 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - node_groups: - DC1_LEAF1: - bgp_as: 65101 - nodes: - DC1-LEAF1A: - id: 1 - mgmt_ip: 10.255.0.13/24 - uplink_switch_interfaces: - - Ethernet1 - - Ethernet1 - DC1-LEAF1B: - id: 2 - mgmt_ip: 10.255.0.14/24 - uplink_switch_interfaces: - - Ethernet2 - - Ethernet2 - DC1_LEAF2: - bgp_as: 65102 - nodes: - DC1-LEAF2A: - id: 3 - mgmt_ip: 10.255.0.15/24 - uplink_switch_interfaces: - - Ethernet3 - - Ethernet3 - DC1-LEAF2B: - id: 4 - mgmt_ip: 10.255.0.16/24 - uplink_switch_interfaces: - - Ethernet4 - - Ethernet4 -l2leaf: - defaults: - platform: vEOS-LAB - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - mlag: false - node_groups: - DC1_L2LEAF1: - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF1A: - id: 5 - mgmt_ip: 10.255.0.17/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - DC1_L2LEAF2: - uplink_switches: - - DC1-LEAF2A - - DC1-LEAF2B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF2A: - id: 7 - mgmt_ip: 10.255.0.18/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 -p2p_uplinks_mtu: 1500 -bfd_multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -port_profiles: - TENANT_A_B: - mode: trunk - vlans: 110-111,210-211 - TENANT_A: - mode: access - vlans: '110' - TENANT_B: - mode: trunk - vlans: 210-211 -servers: - server01: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF1A - profile: TENANT_A - server02: - rack: RackA - adapters: - - type: nic - server_ports: - - Eth0 - switch_ports: - - Ethernet5 - switches: - - DC1-L2LEAF2A - profile: TENANT_A -tenants: - Tenant_A: - mac_vrf_vni_base: 10000 - vrfs: - Tenant_A_OP_Zone: - vrf_vni: 10 - vtep_diagnostic: - loopback: 100 - loopback_ip_range: 10.255.1.0/24 - svis: - 110: - name: Tenant_A_OP_Zone_1 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.10.1/24 - 111: - vni_override: 50111 - name: Tenant_A_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.11.1/24 - 112: - vni_override: 50112 - name: Tenant_A_OP_Zone_3 - tags: - - opzone - enabled: true - ip_address_virtual: 10.1.12.254/24 - Tenant_A_WEB_Zone: - vrf_vni: 11 - svis: - 120: - name: Tenant_A_WEB_Zone_1 - tags: - - web - - erp1 - enabled: true - ip_subnet: 10.1.20.0/24 - 121: - name: Tenant_A_WEBZone_2 - tags: - - web - enabled: true - ip_address_virtual: 10.1.21.1/24 - Tenant_A_APP_Zone: - vrf_vni: 12 - svis: - 130: - name: Tenant_A_APP_Zone_1 - tags: - - app - - erp1 - enabled: true - ip_subnet: 10.1.30.0/24 - 131: - name: Tenant_A_APP_Zone_2 - tags: - - app - enabled: true - ip_address_virtual: 10.1.31.254/24 - Tenant_A_DB_Zone: - vrf_vni: 13 - svis: - 140: - name: Tenant_A_DB_BZone_1 - tags: - - db - - erp1 - enabled: true - ip_address_virtual: 10.1.40.1/24 - 141: - name: Tenant_A_DB_Zone_2 - tags: - - db - enabled: true - ip_address_virtual: 10.1.41.1/24 - Tenant_A_WAN_Zone: - vrf_vni: 14 - svis: - 150: - name: Tenant_A_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.1.40.1/24 - l2vlans: - 160: - vni_override: 55160 - name: Tenant_A_VMOTION - tags: - - vmotion - 161: - name: Tenant_A_NFS - tags: - - nfs - Tenant_B: - mac_vrf_vni_base: 20000 - vrfs: - Tenant_B_OP_Zone: - vrf_vni: 20 - svis: - 210: - name: Tenant_B_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.2.10.0/24 - 211: - name: Tenant_B_OP_Zone_2 - tags: - - opzone - enabled: true - ip_address_virtual: 10.2.11.1/24 - Tenant_B_WAN_Zone: - vrf_vni: 21 - svis: - 250: - name: Tenant_B_WAN_Zone_1 - tags: - - wan - enabled: true - ip_address_virtual: 10.2.50.1/24 - Tenant_C: - mac_vrf_vni_base: 30000 - vrfs: - Tenant_C_OP_Zone: - vrf_vni: 30 - svis: - 310: - name: Tenant_C_OP_Zone_1 - tags: - - opzone - enabled: true - ip_subnet: 10.3.10.0/24 - 311: - name: Tenant_C_OP_Zone_2 - tags: - - opzone - enabled: true - ip_subnet: 10.3.11.1/24 - Tenant_C_WAN_Zone: - vrf_vni: 31 - svis: - 350: - name: Tenant_C_WAN_Zone_1 - tags: - - wan - enabled: true - ip_subnet: 10.3.50.1/24 -inventory_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -inventory_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory -ansible_host: 10.255.0.16 -inventory_hostname: DC1-LEAF2B -inventory_hostname_short: DC1-LEAF2B -group_names: -- DC1 -- DC1_FABRIC -- DC1_L3LEAFS -- DC1_LEAF2 -- DC1_SERVERS -- DC1_TENANTS_NETWORKS -ansible_facts: - switch: - type: l3leaf - node_type_key: l3leaf - connected_endpoints: true - default_evpn_role: client - mlag_support: true - network_services_l2: true - network_services_l3: true - underlay_router: true - uplink_type: p2p - vtep: true - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_LEAF2 - id: 4 - mgmt_ip: 10.255.0.16/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - all - filter_tags: - - all - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - virtual_router_mac_address: 00:1c:73:00:dc:01 - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_switch_interfaces: - - Ethernet4 - - Ethernet4 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - uplink_ipv4_pool: 172.31.255.0/24 - router_id: 192.168.255.6 - bgp_as: '65102' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: client - evpn_route_servers: - - DC1-SPINE1 - - DC1-SPINE2 - mlag: true - mlag_group: DC1_LEAF2 - mlag_ibgp_origin_incomplete: true - mlag_peer_vlan: 4094 - mlag_dual_primary_detection: false - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_l3: true - mlag_peer_l3_vlan: 4093 - mlag_role: secondary - mlag_peer: DC1-LEAF2A - mlag_peer_mgmt_ip: 10.255.0.15 - mlag_ip: 10.255.252.5 - mlag_peer_ip: 10.255.252.4 - mlag_l3_ip: 10.255.251.5 - mlag_peer_l3_ip: 10.255.251.4 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - vtep_loopback: Loopback1 - vtep_ip: 192.168.254.5 - evpn_services_l2_only: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_DB_Zone: - svis: - - 140 - - 141 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WAN_Zone: - svis: - - 150 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: - - 160 - - 161 - Tenant_B: - vrfs: - Tenant_B_OP_Zone: - svis: - - 210 - - 211 - Tenant_B_WAN_Zone: - svis: - - 250 - l2vlans: [] - Tenant_C: - vrfs: - Tenant_C_OP_Zone: - svis: - - 310 - - 311 - Tenant_C_WAN_Zone: - svis: - - 350 - l2vlans: [] - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 - topology: - links: - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet4 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.13 - peer_ip_address: 172.31.255.12 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet4 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.15 - peer_ip_address: 172.31.255.14 - peers: - - DC1-SPINE1 - - DC1-SPINE2 - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -switch: - type: l3leaf - node_type_key: l3leaf - connected_endpoints: true - default_evpn_role: client - mlag_support: true - network_services_l2: true - network_services_l3: true - underlay_router: true - uplink_type: p2p - vtep: true - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - group: DC1_LEAF2 - id: 4 - mgmt_ip: 10.255.0.16/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - filter_tenants: - - all - filter_tags: - - all - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - igmp_snooping_enabled: true - virtual_router_mac_address: 00:1c:73:00:dc:01 - max_uplink_switches: 2 - max_parallel_uplinks: 1 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_switch_interfaces: - - Ethernet4 - - Ethernet4 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - uplink_ipv4_pool: 172.31.255.0/24 - router_id: 192.168.255.6 - bgp_as: '65102' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: client - evpn_route_servers: - - DC1-SPINE1 - - DC1-SPINE2 - mlag: true - mlag_group: DC1_LEAF2 - mlag_ibgp_origin_incomplete: true - mlag_peer_vlan: 4094 - mlag_dual_primary_detection: false - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_l3: true - mlag_peer_l3_vlan: 4093 - mlag_role: secondary - mlag_peer: DC1-LEAF2A - mlag_peer_mgmt_ip: 10.255.0.15 - mlag_ip: 10.255.252.5 - mlag_peer_ip: 10.255.252.4 - mlag_l3_ip: 10.255.251.5 - mlag_peer_l3_ip: 10.255.251.4 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - vtep_loopback: Loopback1 - vtep_ip: 192.168.254.5 - evpn_services_l2_only: false - tenants: - Tenant_A: - vrfs: - Tenant_A_APP_Zone: - svis: - - 130 - - 131 - Tenant_A_DB_Zone: - svis: - - 140 - - 141 - Tenant_A_OP_Zone: - svis: - - 110 - - 111 - - 112 - Tenant_A_WAN_Zone: - svis: - - 150 - Tenant_A_WEB_Zone: - svis: - - 120 - - 121 - l2vlans: - - 160 - - 161 - Tenant_B: - vrfs: - Tenant_B_OP_Zone: - svis: - - 210 - - 211 - Tenant_B_WAN_Zone: - svis: - - 250 - l2vlans: [] - Tenant_C: - vrfs: - Tenant_C_OP_Zone: - svis: - - 310 - - 311 - Tenant_C_WAN_Zone: - svis: - - 350 - l2vlans: [] - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -topology: - links: - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet4 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.13 - peer_ip_address: 172.31.255.12 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet4 - peer_type: spine - peer_bgp_as: '65001' - type: underlay_p2p - ip_address: 172.31.255.15 - peer_ip_address: 172.31.255.14 - peers: - - DC1-SPINE1 - - DC1-SPINE2 - vlans: - - 130 - - 131 - - 140 - - 141 - - 110 - - 111 - - 112 - - 150 - - 120 - - 121 - - 160 - - 161 - - 210 - - 211 - - 250 - - 310 - - 311 - - 350 -playbook_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/playbooks -ansible_playbook_python: /Users/tgrimonet/.pyenv/versions/3.9.7/envs/arista-avd-demo/bin/python3.9 -ansible_config_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/ansible.cfg -groups: - all: - - cv_ztp - - cv_server - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - ungrouped: [] - CVP: - - cv_ztp - - cv_server - DC1: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-L2LEAF1A - - DC1-L2LEAF2A - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_FABRIC: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SPINES: - - DC1-SPINE1 - - DC1-SPINE2 - DC1_L3LEAFS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_LEAF1: - - DC1-LEAF1A - - DC1-LEAF1B - DC1_LEAF2: - - DC1-LEAF2A - - DC1-LEAF2B - DC1_L2LEAFS: - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_L2LEAF1: - - DC1-L2LEAF1A - DC1_L2LEAF2: - - DC1-L2LEAF2A - DC1_TENANTS_NETWORKS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SERVERS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A -omit: __omit_place_holder__977da4f00604c643da39a9f2175c10b09f0b2380 -ansible_version: - string: 2.10.14 - full: 2.10.14 - major: 2 - minor: 10 - revision: 14 -ansible_check_mode: false -ansible_diff_mode: false -ansible_forks: 5 -ansible_inventory_sources: -- /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -ansible_skip_tags: [] -ansible_run_tags: -- build -ansible_verbosity: 0 diff --git a/inventory/intended/structured_configs/DC1-LEAF2B.yml b/inventory/intended/structured_configs/DC1-LEAF2B.yml deleted file mode 100644 index b9644c7e1..000000000 --- a/inventory/intended/structured_configs/DC1-LEAF2B.yml +++ /dev/null @@ -1,892 +0,0 @@ -router_bgp: - as: '65102' - router_id: 192.168.255.6 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - - maximum-paths 4 ecmp 4 - peer_groups: - MLAG-IPv4-UNDERLAY-PEER: - type: ipv4 - remote_as: '65102' - next_hop_self: true - password: vnEaG8gMeQf3d3cN6PktXQ== - maximum_routes: 12000 - send_community: all - route_map_in: RM-MLAG-PEER-IN - IPv4-UNDERLAY-PEERS: - type: ipv4 - password: AQQvKeimxJu+uGQ/yYvv9w== - maximum_routes: 12000 - send_community: all - EVPN-OVERLAY-PEERS: - type: evpn - update_source: Loopback0 - bfd: true - ebgp_multihop: '3' - password: q+VNViP5i4rVjW1cxFv2wA== - send_community: all - maximum_routes: 0 - address_family_ipv4: - peer_groups: - MLAG-IPv4-UNDERLAY-PEER: - activate: true - IPv4-UNDERLAY-PEERS: - activate: true - EVPN-OVERLAY-PEERS: - activate: false - neighbors: - 10.255.251.4: - peer_group: MLAG-IPv4-UNDERLAY-PEER - description: DC1-LEAF2A - 172.31.255.12: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65001' - description: DC1-SPINE1_Ethernet4 - 172.31.255.14: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65001' - description: DC1-SPINE2_Ethernet4 - 192.168.255.1: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-SPINE1 - remote_as: '65001' - 192.168.255.2: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-SPINE2 - remote_as: '65001' - redistribute_routes: - connected: - route_map: RM-CONN-2-BGP - address_family_evpn: - peer_groups: - EVPN-OVERLAY-PEERS: - activate: true - vrfs: - Tenant_A_APP_Zone: - router_id: 192.168.255.6 - rd: 192.168.255.6:12 - route_targets: - import: - evpn: - - '12:12' - export: - evpn: - - '12:12' - neighbors: - 10.255.251.4: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_DB_Zone: - router_id: 192.168.255.6 - rd: 192.168.255.6:13 - route_targets: - import: - evpn: - - '13:13' - export: - evpn: - - '13:13' - neighbors: - 10.255.251.4: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_OP_Zone: - router_id: 192.168.255.6 - rd: 192.168.255.6:10 - route_targets: - import: - evpn: - - '10:10' - export: - evpn: - - '10:10' - neighbors: - 10.255.251.4: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_WAN_Zone: - router_id: 192.168.255.6 - rd: 192.168.255.6:14 - route_targets: - import: - evpn: - - '14:14' - export: - evpn: - - '14:14' - neighbors: - 10.255.251.4: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_A_WEB_Zone: - router_id: 192.168.255.6 - rd: 192.168.255.6:11 - route_targets: - import: - evpn: - - '11:11' - export: - evpn: - - '11:11' - neighbors: - 10.255.251.4: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_B_OP_Zone: - router_id: 192.168.255.6 - rd: 192.168.255.6:20 - route_targets: - import: - evpn: - - '20:20' - export: - evpn: - - '20:20' - neighbors: - 10.255.251.4: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_B_WAN_Zone: - router_id: 192.168.255.6 - rd: 192.168.255.6:21 - route_targets: - import: - evpn: - - '21:21' - export: - evpn: - - '21:21' - neighbors: - 10.255.251.4: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_C_OP_Zone: - router_id: 192.168.255.6 - rd: 192.168.255.6:30 - route_targets: - import: - evpn: - - '30:30' - export: - evpn: - - '30:30' - neighbors: - 10.255.251.4: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - Tenant_C_WAN_Zone: - router_id: 192.168.255.6 - rd: 192.168.255.6:31 - route_targets: - import: - evpn: - - '31:31' - export: - evpn: - - '31:31' - neighbors: - 10.255.251.4: - peer_group: MLAG-IPv4-UNDERLAY-PEER - redistribute_routes: - - connected - vlan_aware_bundles: - Tenant_A_APP_Zone: - rd: 192.168.255.6:12 - route_targets: - both: - - '12:12' - redistribute_routes: - - learned - vlan: 130-131 - Tenant_A_DB_Zone: - rd: 192.168.255.6:13 - route_targets: - both: - - '13:13' - redistribute_routes: - - learned - vlan: 140-141 - Tenant_A_OP_Zone: - rd: 192.168.255.6:10 - route_targets: - both: - - '10:10' - redistribute_routes: - - learned - vlan: 110-112 - Tenant_A_WAN_Zone: - rd: 192.168.255.6:14 - route_targets: - both: - - '14:14' - redistribute_routes: - - learned - vlan: 150 - Tenant_A_WEB_Zone: - rd: 192.168.255.6:11 - route_targets: - both: - - '11:11' - redistribute_routes: - - learned - vlan: 120-121 - Tenant_A_VMOTION: - tenant: Tenant_A - rd: 192.168.255.6:55160 - route_targets: - both: - - 55160:55160 - redistribute_routes: - - learned - vlan: 160 - Tenant_A_NFS: - tenant: Tenant_A - rd: 192.168.255.6:10161 - route_targets: - both: - - 10161:10161 - redistribute_routes: - - learned - vlan: 161 - Tenant_B_OP_Zone: - rd: 192.168.255.6:20 - route_targets: - both: - - '20:20' - redistribute_routes: - - learned - vlan: 210-211 - Tenant_B_WAN_Zone: - rd: 192.168.255.6:21 - route_targets: - both: - - '21:21' - redistribute_routes: - - learned - vlan: 250 - Tenant_C_OP_Zone: - rd: 192.168.255.6:30 - route_targets: - both: - - '30:30' - redistribute_routes: - - learned - vlan: 310-311 - Tenant_C_WAN_Zone: - rd: 192.168.255.6:31 - route_targets: - both: - - '31:31' - redistribute_routes: - - learned - vlan: 350 -static_routes: -- vrf: MGMT - destination_address_prefix: 0.0.0.0/0 - gateway: 10.255.0.1 -service_routing_protocols_model: multi-agent -ip_routing: true -daemon_terminattr: - cvaddrs: - - 10.255.0.1:9910 - cvauth: - method: key - cvvrf: MGMT - smashexcludes: ale,flexCounter,hardware,kni,pulse,strata - ingestexclude: /Sysdb/cell/1/agent,/Sysdb/cell/2/agent - disable_aaa: false -vlan_internal_order: - allocation: ascending - range: - beginning: 1006 - ending: 1199 -name_server: - source: - vrf: MGMT - nodes: - - 192.168.2.1 - - 8.8.8.8 -spanning_tree: - mode: mstp - mst_instances: - '0': - priority: 16384 - no_spanning_tree_vlan: 4093-4094 -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -vrfs: - MGMT: - ip_routing: false - Tenant_A_APP_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_DB_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_OP_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_WAN_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_A_WEB_Zone: - tenant: Tenant_A - ip_routing: true - Tenant_B_OP_Zone: - tenant: Tenant_B - ip_routing: true - Tenant_B_WAN_Zone: - tenant: Tenant_B - ip_routing: true - Tenant_C_OP_Zone: - tenant: Tenant_C - ip_routing: true - Tenant_C_WAN_Zone: - tenant: Tenant_C - ip_routing: true -management_interfaces: - Management1: - description: oob_management - shutdown: false - vrf: MGMT - ip_address: 10.255.0.16/24 - gateway: 10.255.0.1 - type: oob -management_api_http: - enable_vrfs: - MGMT: {} - enable_https: true -vlans: - 4093: - tenant: system - name: LEAF_PEER_L3 - trunk_groups: - - LEAF_PEER_L3 - 4094: - tenant: system - name: MLAG_PEER - trunk_groups: - - MLAG - 130: - tenant: Tenant_A - name: Tenant_A_APP_Zone_1 - 131: - tenant: Tenant_A - name: Tenant_A_APP_Zone_2 - 3011: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_APP_Zone - trunk_groups: - - LEAF_PEER_L3 - 140: - tenant: Tenant_A - name: Tenant_A_DB_BZone_1 - 141: - tenant: Tenant_A - name: Tenant_A_DB_Zone_2 - 3012: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_DB_Zone - trunk_groups: - - LEAF_PEER_L3 - 110: - tenant: Tenant_A - name: Tenant_A_OP_Zone_1 - 111: - tenant: Tenant_A - name: Tenant_A_OP_Zone_2 - 112: - tenant: Tenant_A - name: Tenant_A_OP_Zone_3 - 3009: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 150: - tenant: Tenant_A - name: Tenant_A_WAN_Zone_1 - 3013: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 - 120: - tenant: Tenant_A - name: Tenant_A_WEB_Zone_1 - 121: - tenant: Tenant_A - name: Tenant_A_WEBZone_2 - 3010: - tenant: Tenant_A - name: MLAG_iBGP_Tenant_A_WEB_Zone - trunk_groups: - - LEAF_PEER_L3 - 160: - tenant: Tenant_A - name: Tenant_A_VMOTION - 161: - tenant: Tenant_A - name: Tenant_A_NFS - 210: - tenant: Tenant_B - name: Tenant_B_OP_Zone_1 - 211: - tenant: Tenant_B - name: Tenant_B_OP_Zone_2 - 3019: - tenant: Tenant_B - name: MLAG_iBGP_Tenant_B_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 250: - tenant: Tenant_B - name: Tenant_B_WAN_Zone_1 - 3020: - tenant: Tenant_B - name: MLAG_iBGP_Tenant_B_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 - 310: - tenant: Tenant_C - name: Tenant_C_OP_Zone_1 - 311: - tenant: Tenant_C - name: Tenant_C_OP_Zone_2 - 3029: - tenant: Tenant_C - name: MLAG_iBGP_Tenant_C_OP_Zone - trunk_groups: - - LEAF_PEER_L3 - 350: - tenant: Tenant_C - name: Tenant_C_WAN_Zone_1 - 3030: - tenant: Tenant_C - name: MLAG_iBGP_Tenant_C_WAN_Zone - trunk_groups: - - LEAF_PEER_L3 -vlan_interfaces: - Vlan4093: - description: MLAG_PEER_L3_PEERING - shutdown: false - ip_address: 10.255.251.5/31 - mtu: 1500 - Vlan4094: - description: MLAG_PEER - shutdown: false - ip_address: 10.255.252.5/31 - no_autostate: true - mtu: 1500 - Vlan130: - tenant: Tenant_A - tags: - - app - - erp1 - description: Tenant_A_APP_Zone_1 - shutdown: false - vrf: Tenant_A_APP_Zone - Vlan131: - tenant: Tenant_A - tags: - - app - description: Tenant_A_APP_Zone_2 - shutdown: false - vrf: Tenant_A_APP_Zone - ip_address_virtual: 10.1.31.254/24 - Vlan3011: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' - vrf: Tenant_A_APP_Zone - ip_address: 10.255.251.5/31 - mtu: 1500 - Vlan140: - tenant: Tenant_A - tags: - - db - - erp1 - description: Tenant_A_DB_BZone_1 - shutdown: false - vrf: Tenant_A_DB_Zone - ip_address_virtual: 10.1.40.1/24 - Vlan141: - tenant: Tenant_A - tags: - - db - description: Tenant_A_DB_Zone_2 - shutdown: false - vrf: Tenant_A_DB_Zone - ip_address_virtual: 10.1.41.1/24 - Vlan3012: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' - vrf: Tenant_A_DB_Zone - ip_address: 10.255.251.5/31 - mtu: 1500 - Vlan110: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_1 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.10.1/24 - Vlan111: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_2 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.11.1/24 - Vlan112: - tenant: Tenant_A - tags: - - opzone - description: Tenant_A_OP_Zone_3 - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address_virtual: 10.1.12.254/24 - Vlan3009: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' - vrf: Tenant_A_OP_Zone - ip_address: 10.255.251.5/31 - mtu: 1500 - Vlan150: - tenant: Tenant_A - tags: - - wan - description: Tenant_A_WAN_Zone_1 - shutdown: false - vrf: Tenant_A_WAN_Zone - ip_address_virtual: 10.1.40.1/24 - Vlan3013: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' - vrf: Tenant_A_WAN_Zone - ip_address: 10.255.251.5/31 - mtu: 1500 - Vlan120: - tenant: Tenant_A - tags: - - web - - erp1 - description: Tenant_A_WEB_Zone_1 - shutdown: false - vrf: Tenant_A_WEB_Zone - Vlan121: - tenant: Tenant_A - tags: - - web - description: Tenant_A_WEBZone_2 - shutdown: false - vrf: Tenant_A_WEB_Zone - ip_address_virtual: 10.1.21.1/24 - Vlan3010: - tenant: Tenant_A - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' - vrf: Tenant_A_WEB_Zone - ip_address: 10.255.251.5/31 - mtu: 1500 - Vlan210: - tenant: Tenant_B - tags: - - opzone - description: Tenant_B_OP_Zone_1 - shutdown: false - vrf: Tenant_B_OP_Zone - Vlan211: - tenant: Tenant_B - tags: - - opzone - description: Tenant_B_OP_Zone_2 - shutdown: false - vrf: Tenant_B_OP_Zone - ip_address_virtual: 10.2.11.1/24 - Vlan3019: - tenant: Tenant_B - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' - vrf: Tenant_B_OP_Zone - ip_address: 10.255.251.5/31 - mtu: 1500 - Vlan250: - tenant: Tenant_B - tags: - - wan - description: Tenant_B_WAN_Zone_1 - shutdown: false - vrf: Tenant_B_WAN_Zone - ip_address_virtual: 10.2.50.1/24 - Vlan3020: - tenant: Tenant_B - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' - vrf: Tenant_B_WAN_Zone - ip_address: 10.255.251.5/31 - mtu: 1500 - Vlan310: - tenant: Tenant_C - tags: - - opzone - description: Tenant_C_OP_Zone_1 - shutdown: false - vrf: Tenant_C_OP_Zone - Vlan311: - tenant: Tenant_C - tags: - - opzone - description: Tenant_C_OP_Zone_2 - shutdown: false - vrf: Tenant_C_OP_Zone - Vlan3029: - tenant: Tenant_C - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' - vrf: Tenant_C_OP_Zone - ip_address: 10.255.251.5/31 - mtu: 1500 - Vlan350: - tenant: Tenant_C - tags: - - wan - description: Tenant_C_WAN_Zone_1 - shutdown: false - vrf: Tenant_C_WAN_Zone - Vlan3030: - tenant: Tenant_C - type: underlay_peering - shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' - vrf: Tenant_C_WAN_Zone - ip_address: 10.255.251.5/31 - mtu: 1500 -port_channel_interfaces: - Port-Channel3: - description: MLAG_PEER_DC1-LEAF2A_Po3 - type: switched - shutdown: false - vlans: 2-4094 - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - Port-Channel5: - description: DC1-L2LEAF2A_Po1 - type: switched - shutdown: false - vlans: 110-112,120-121,130-131 - mode: trunk - mlag: 5 -ethernet_interfaces: - Ethernet3: - peer: DC1-LEAF2A - peer_interface: Ethernet3 - peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2A_Ethernet3 - type: switched - shutdown: false - channel_group: - id: 3 - mode: active - Ethernet4: - peer: DC1-LEAF2A - peer_interface: Ethernet4 - peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2A_Ethernet4 - type: switched - shutdown: false - channel_group: - id: 3 - mode: active - Ethernet1: - peer: DC1-SPINE1 - peer_interface: Ethernet4 - peer_type: spine - description: P2P_LINK_TO_DC1-SPINE1_Ethernet4 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.13/31 - Ethernet2: - peer: DC1-SPINE2 - peer_interface: Ethernet4 - peer_type: spine - description: P2P_LINK_TO_DC1-SPINE2_Ethernet4 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.15/31 - Ethernet5: - peer: DC1-L2LEAF2A - peer_interface: Ethernet2 - peer_type: l2leaf - description: DC1-L2LEAF2A_Ethernet2 - type: switched - shutdown: false - channel_group: - id: 5 - mode: active -mlag_configuration: - domain_id: DC1_LEAF2 - local_interface: Vlan4094 - peer_address: 10.255.252.4 - peer_link: Port-Channel3 - reload_delay_mlag: 300 - reload_delay_non_mlag: 330 -route_maps: - RM-MLAG-PEER-IN: - sequence_numbers: - 10: - type: permit - set: - - origin incomplete - description: Make routes learned over MLAG Peer-link less preferred on spines - to ensure optimal routing - RM-CONN-2-BGP: - sequence_numbers: - 10: - type: permit - match: - - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -loopback_interfaces: - Loopback0: - description: EVPN_Overlay_Peering - shutdown: false - ip_address: 192.168.255.6/32 - Loopback1: - description: VTEP_VXLAN_Tunnel_Source - shutdown: false - ip_address: 192.168.254.5/32 - Loopback100: - description: Tenant_A_OP_Zone_VTEP_DIAGNOSTICS - shutdown: false - vrf: Tenant_A_OP_Zone - ip_address: 10.255.1.6/32 -prefix_lists: - PL-LOOPBACKS-EVPN-OVERLAY: - sequence_numbers: - 10: - action: permit 192.168.255.0/24 eq 32 - 20: - action: permit 192.168.254.0/24 eq 32 -router_bfd: - multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -ip_igmp_snooping: - globally_enabled: true -vxlan_interface: - Vxlan1: - description: DC1-LEAF2B_VTEP - vxlan: - source_interface: Loopback1 - virtual_router_encapsulation_mac_address: mlag-system-id - udp_port: 4789 - vlans: - 130: - vni: 10130 - 131: - vni: 10131 - 140: - vni: 10140 - 141: - vni: 10141 - 110: - vni: 10110 - 111: - vni: 50111 - 112: - vni: 50112 - 150: - vni: 10150 - 120: - vni: 10120 - 121: - vni: 10121 - 160: - vni: 55160 - 161: - vni: 10161 - 210: - vni: 20210 - 211: - vni: 20211 - 250: - vni: 20250 - 310: - vni: 30310 - 311: - vni: 30311 - 350: - vni: 30350 - vrfs: - Tenant_A_APP_Zone: - vni: 12 - Tenant_A_DB_Zone: - vni: 13 - Tenant_A_OP_Zone: - vni: 10 - Tenant_A_WAN_Zone: - vni: 14 - Tenant_A_WEB_Zone: - vni: 11 - Tenant_B_OP_Zone: - vni: 20 - Tenant_B_WAN_Zone: - vni: 21 - Tenant_C_OP_Zone: - vni: 30 - Tenant_C_WAN_Zone: - vni: 31 -virtual_source_nat_vrfs: - Tenant_A_OP_Zone: - ip_address: 10.255.1.6 -ip_virtual_router_mac_address: 00:1c:73:00:dc:01 -ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT diff --git a/inventory/intended/structured_configs/DC1-SPINE1-debug-vars.yml b/inventory/intended/structured_configs/DC1-SPINE1-debug-vars.yml deleted file mode 100644 index 3730b2546..000000000 --- a/inventory/intended/structured_configs/DC1-SPINE1-debug-vars.yml +++ /dev/null @@ -1,399 +0,0 @@ -ansible_connection: httpapi -ansible_network_os: eos -ansible_user: ansible -ansible_ssh_pass: ansible -ansible_become: true -ansible_become_method: enable -ansible_httpapi_use_ssl: true -ansible_httpapi_validate_certs: false -type: spine -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -cvp_instance_ip: 10.255.0.1 -cvp_ingestauth_key: '' -mgmt_interface: Management1 -mgmt_interface_vrf: MGMT -mgmt_gateway: 10.255.0.1 -name_servers: -- 192.168.2.1 -- 8.8.8.8 -custom_structured_configuration_ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT -fabric_name: DC1_FABRIC -vxlan_vlan_aware_bundles: true -bgp_peer_groups: - IPv4_UNDERLAY_PEERS: - password: AQQvKeimxJu+uGQ/yYvv9w== - EVPN_OVERLAY_PEERS: - password: q+VNViP5i4rVjW1cxFv2wA== - MLAG_IPv4_UNDERLAY_PEER: - password: vnEaG8gMeQf3d3cN6PktXQ== -spine: - defaults: - platform: vEOS-LAB - bgp_as: 65001 - loopback_ipv4_pool: 192.168.255.0/24 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - nodes: - DC1-SPINE1: - id: 1 - mgmt_ip: 10.255.0.11/24 - DC1-SPINE2: - id: 2 - mgmt_ip: 10.255.0.12/24 -l3leaf: - defaults: - platform: vEOS-LAB - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_ipv4_pool: 172.31.255.0/24 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - node_groups: - DC1_LEAF1: - bgp_as: 65101 - nodes: - DC1-LEAF1A: - id: 1 - mgmt_ip: 10.255.0.13/24 - uplink_switch_interfaces: - - Ethernet1 - - Ethernet1 - DC1-LEAF1B: - id: 2 - mgmt_ip: 10.255.0.14/24 - uplink_switch_interfaces: - - Ethernet2 - - Ethernet2 - DC1_LEAF2: - bgp_as: 65102 - nodes: - DC1-LEAF2A: - id: 3 - mgmt_ip: 10.255.0.15/24 - uplink_switch_interfaces: - - Ethernet3 - - Ethernet3 - DC1-LEAF2B: - id: 4 - mgmt_ip: 10.255.0.16/24 - uplink_switch_interfaces: - - Ethernet4 - - Ethernet4 -l2leaf: - defaults: - platform: vEOS-LAB - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - mlag: false - node_groups: - DC1_L2LEAF1: - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF1A: - id: 5 - mgmt_ip: 10.255.0.17/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - DC1_L2LEAF2: - uplink_switches: - - DC1-LEAF2A - - DC1-LEAF2B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF2A: - id: 7 - mgmt_ip: 10.255.0.18/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 -p2p_uplinks_mtu: 1500 -bfd_multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -inventory_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -inventory_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory -ansible_host: 10.255.0.11 -inventory_hostname: DC1-SPINE1 -inventory_hostname_short: DC1-SPINE1 -group_names: -- DC1 -- DC1_FABRIC -- DC1_SPINES -ansible_facts: - switch: - type: spine - node_type_key: spine - connected_endpoints: false - default_evpn_role: server - mlag_support: false - network_services_l2: false - network_services_l3: false - underlay_router: true - uplink_type: p2p - vtep: false - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - id: 1 - mgmt_ip: 10.255.0.11/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - spanning_tree_mode: none - max_uplink_switches: 0 - max_parallel_uplinks: 1 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 0 - router_id: 192.168.255.1 - bgp_as: '65001' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: server - mlag: false - topology: - peers: [] - vlans: [] -switch: - type: spine - node_type_key: spine - connected_endpoints: false - default_evpn_role: server - mlag_support: false - network_services_l2: false - network_services_l3: false - underlay_router: true - uplink_type: p2p - vtep: false - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - id: 1 - mgmt_ip: 10.255.0.11/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - spanning_tree_mode: none - max_uplink_switches: 0 - max_parallel_uplinks: 1 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 0 - router_id: 192.168.255.1 - bgp_as: '65001' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: server - mlag: false -topology: - peers: [] - vlans: [] -playbook_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/playbooks -ansible_playbook_python: /Users/tgrimonet/.pyenv/versions/3.9.7/envs/arista-avd-demo/bin/python3.9 -ansible_config_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/ansible.cfg -groups: - all: - - cv_ztp - - cv_server - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - ungrouped: [] - CVP: - - cv_ztp - - cv_server - DC1: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-L2LEAF1A - - DC1-L2LEAF2A - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_FABRIC: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SPINES: - - DC1-SPINE1 - - DC1-SPINE2 - DC1_L3LEAFS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_LEAF1: - - DC1-LEAF1A - - DC1-LEAF1B - DC1_LEAF2: - - DC1-LEAF2A - - DC1-LEAF2B - DC1_L2LEAFS: - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_L2LEAF1: - - DC1-L2LEAF1A - DC1_L2LEAF2: - - DC1-L2LEAF2A - DC1_TENANTS_NETWORKS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SERVERS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A -omit: __omit_place_holder__977da4f00604c643da39a9f2175c10b09f0b2380 -ansible_version: - string: 2.10.14 - full: 2.10.14 - major: 2 - minor: 10 - revision: 14 -ansible_check_mode: false -ansible_diff_mode: false -ansible_forks: 5 -ansible_inventory_sources: -- /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -ansible_skip_tags: [] -ansible_run_tags: -- build -ansible_verbosity: 0 diff --git a/inventory/intended/structured_configs/DC1-SPINE1.yml b/inventory/intended/structured_configs/DC1-SPINE1.yml deleted file mode 100644 index 9a98fa014..000000000 --- a/inventory/intended/structured_configs/DC1-SPINE1.yml +++ /dev/null @@ -1,195 +0,0 @@ -router_bgp: - as: '65001' - router_id: 192.168.255.1 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - - maximum-paths 4 ecmp 4 - peer_groups: - IPv4-UNDERLAY-PEERS: - type: ipv4 - password: AQQvKeimxJu+uGQ/yYvv9w== - maximum_routes: 12000 - send_community: all - EVPN-OVERLAY-PEERS: - type: evpn - update_source: Loopback0 - bfd: true - ebgp_multihop: '3' - password: q+VNViP5i4rVjW1cxFv2wA== - send_community: all - maximum_routes: 0 - next_hop_unchanged: true - address_family_ipv4: - peer_groups: - IPv4-UNDERLAY-PEERS: - activate: true - EVPN-OVERLAY-PEERS: - activate: false - redistribute_routes: - connected: - route_map: RM-CONN-2-BGP - neighbors: - 172.31.255.1: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65101' - description: DC1-LEAF1A_Ethernet1 - 172.31.255.5: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65101' - description: DC1-LEAF1B_Ethernet1 - 172.31.255.9: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65102' - description: DC1-LEAF2A_Ethernet1 - 172.31.255.13: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65102' - description: DC1-LEAF2B_Ethernet1 - 192.168.255.3: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-LEAF1A - remote_as: '65101' - 192.168.255.4: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-LEAF1B - remote_as: '65101' - 192.168.255.5: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-LEAF2A - remote_as: '65102' - 192.168.255.6: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-LEAF2B - remote_as: '65102' - address_family_evpn: - peer_groups: - EVPN-OVERLAY-PEERS: - activate: true -static_routes: -- vrf: MGMT - destination_address_prefix: 0.0.0.0/0 - gateway: 10.255.0.1 -service_routing_protocols_model: multi-agent -ip_routing: true -daemon_terminattr: - cvaddrs: - - 10.255.0.1:9910 - cvauth: - method: key - cvvrf: MGMT - smashexcludes: ale,flexCounter,hardware,kni,pulse,strata - ingestexclude: /Sysdb/cell/1/agent,/Sysdb/cell/2/agent - disable_aaa: false -vlan_internal_order: - allocation: ascending - range: - beginning: 1006 - ending: 1199 -name_server: - source: - vrf: MGMT - nodes: - - 192.168.2.1 - - 8.8.8.8 -spanning_tree: - mode: none -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -vrfs: - MGMT: - ip_routing: false -management_interfaces: - Management1: - description: oob_management - shutdown: false - vrf: MGMT - ip_address: 10.255.0.11/24 - gateway: 10.255.0.1 - type: oob -management_api_http: - enable_vrfs: - MGMT: {} - enable_https: true -ethernet_interfaces: - Ethernet1: - peer: DC1-LEAF1A - peer_interface: Ethernet1 - peer_type: l3leaf - description: P2P_LINK_TO_DC1-LEAF1A_Ethernet1 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.0/31 - Ethernet2: - peer: DC1-LEAF1B - peer_interface: Ethernet1 - peer_type: l3leaf - description: P2P_LINK_TO_DC1-LEAF1B_Ethernet1 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.4/31 - Ethernet3: - peer: DC1-LEAF2A - peer_interface: Ethernet1 - peer_type: l3leaf - description: P2P_LINK_TO_DC1-LEAF2A_Ethernet1 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.8/31 - Ethernet4: - peer: DC1-LEAF2B - peer_interface: Ethernet1 - peer_type: l3leaf - description: P2P_LINK_TO_DC1-LEAF2B_Ethernet1 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.12/31 -loopback_interfaces: - Loopback0: - description: EVPN_Overlay_Peering - shutdown: false - ip_address: 192.168.255.1/32 -prefix_lists: - PL-LOOPBACKS-EVPN-OVERLAY: - sequence_numbers: - 10: - action: permit 192.168.255.0/24 eq 32 -route_maps: - RM-CONN-2-BGP: - sequence_numbers: - 10: - type: permit - match: - - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -router_bfd: - multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT diff --git a/inventory/intended/structured_configs/DC1-SPINE2-debug-vars.yml b/inventory/intended/structured_configs/DC1-SPINE2-debug-vars.yml deleted file mode 100644 index ea9a96c17..000000000 --- a/inventory/intended/structured_configs/DC1-SPINE2-debug-vars.yml +++ /dev/null @@ -1,399 +0,0 @@ -ansible_connection: httpapi -ansible_network_os: eos -ansible_user: ansible -ansible_ssh_pass: ansible -ansible_become: true -ansible_become_method: enable -ansible_httpapi_use_ssl: true -ansible_httpapi_validate_certs: false -type: spine -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ -cvp_instance_ip: 10.255.0.1 -cvp_ingestauth_key: '' -mgmt_interface: Management1 -mgmt_interface_vrf: MGMT -mgmt_gateway: 10.255.0.1 -name_servers: -- 192.168.2.1 -- 8.8.8.8 -custom_structured_configuration_ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT -fabric_name: DC1_FABRIC -vxlan_vlan_aware_bundles: true -bgp_peer_groups: - IPv4_UNDERLAY_PEERS: - password: AQQvKeimxJu+uGQ/yYvv9w== - EVPN_OVERLAY_PEERS: - password: q+VNViP5i4rVjW1cxFv2wA== - MLAG_IPv4_UNDERLAY_PEER: - password: vnEaG8gMeQf3d3cN6PktXQ== -spine: - defaults: - platform: vEOS-LAB - bgp_as: 65001 - loopback_ipv4_pool: 192.168.255.0/24 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - nodes: - DC1-SPINE1: - id: 1 - mgmt_ip: 10.255.0.11/24 - DC1-SPINE2: - id: 2 - mgmt_ip: 10.255.0.12/24 -l3leaf: - defaults: - platform: vEOS-LAB - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 2 - vtep_loopback_ipv4_pool: 192.168.254.0/24 - uplink_interfaces: - - Ethernet1 - - Ethernet2 - uplink_switches: - - DC1-SPINE1 - - DC1-SPINE2 - uplink_ipv4_pool: 172.31.255.0/24 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - node_groups: - DC1_LEAF1: - bgp_as: 65101 - nodes: - DC1-LEAF1A: - id: 1 - mgmt_ip: 10.255.0.13/24 - uplink_switch_interfaces: - - Ethernet1 - - Ethernet1 - DC1-LEAF1B: - id: 2 - mgmt_ip: 10.255.0.14/24 - uplink_switch_interfaces: - - Ethernet2 - - Ethernet2 - DC1_LEAF2: - bgp_as: 65102 - nodes: - DC1-LEAF2A: - id: 3 - mgmt_ip: 10.255.0.15/24 - uplink_switch_interfaces: - - Ethernet3 - - Ethernet3 - DC1-LEAF2B: - id: 4 - mgmt_ip: 10.255.0.16/24 - uplink_switch_interfaces: - - Ethernet4 - - Ethernet4 -l2leaf: - defaults: - platform: vEOS-LAB - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - uplink_interfaces: - - Ethernet1 - - Ethernet2 - mlag_interfaces: - - Ethernet3 - - Ethernet4 - mlag_peer_ipv4_pool: 10.255.252.0/24 - mlag_peer_l3_ipv4_pool: 10.255.251.0/24 - virtual_router_mac_address: 00:1c:73:00:dc:01 - spanning_tree_mode: mstp - spanning_tree_priority: 16384 - mlag: false - node_groups: - DC1_L2LEAF1: - uplink_switches: - - DC1-LEAF1A - - DC1-LEAF1B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF1A: - id: 5 - mgmt_ip: 10.255.0.17/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 - DC1_L2LEAF2: - uplink_switches: - - DC1-LEAF2A - - DC1-LEAF2B - filter: - tenants: - - Tenant_A - tags: - - opzone - - web - - app - nodes: - DC1-L2LEAF2A: - id: 7 - mgmt_ip: 10.255.0.18/24 - uplink_switch_interfaces: - - Ethernet5 - - Ethernet5 -p2p_uplinks_mtu: 1500 -bfd_multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -inventory_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -inventory_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory -ansible_host: 10.255.0.12 -inventory_hostname: DC1-SPINE2 -inventory_hostname_short: DC1-SPINE2 -group_names: -- DC1 -- DC1_FABRIC -- DC1_SPINES -ansible_facts: - switch: - type: spine - node_type_key: spine - connected_endpoints: false - default_evpn_role: server - mlag_support: false - network_services_l2: false - network_services_l3: false - underlay_router: true - uplink_type: p2p - vtep: false - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - id: 2 - mgmt_ip: 10.255.0.12/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - spanning_tree_mode: none - max_uplink_switches: 0 - max_parallel_uplinks: 1 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 0 - router_id: 192.168.255.2 - bgp_as: '65001' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: server - mlag: false - topology: - peers: [] - vlans: [] -switch: - type: spine - node_type_key: spine - connected_endpoints: false - default_evpn_role: server - mlag_support: false - network_services_l2: false - network_services_l3: false - underlay_router: true - uplink_type: p2p - vtep: false - ip_addressing: - router_id: designs/l3ls-evpn/ip-addressing/router-id.j2 - mlag_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-ip-primary.j2 - mlag_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-ip-secondary.j2 - mlag_l3_ip_primary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-primary.j2 - mlag_l3_ip_secondary: designs/l3ls-evpn/ip-addressing/mlag-l3-ip-secondary.j2 - p2p_uplinks_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-ip.j2 - p2p_uplinks_peer_ip: designs/l3ls-evpn/ip-addressing/p2p-uplinks-peer-ip.j2 - vtep_ip_mlag: designs/l3ls-evpn/ip-addressing/vtep-ip-mlag.j2 - vtep_ip: designs/l3ls-evpn/ip-addressing/vtep-ip.j2 - interface_descriptions: - underlay_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/ethernet-interfaces.j2 - underlay_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/underlay/port-channel-interfaces.j2 - connected_endpoints_ethernet_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/ethernet-interfaces.j2 - connected_endpoints_port_channel_interfaces: designs/l3ls-evpn/interface-descriptions/connected-endpoints/port-channel-interfaces.j2 - overlay_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/overlay-loopback.j2 - vtep_loopback_interface: designs/l3ls-evpn/interface-descriptions/loopback-interfaces/vtep-loopback.j2 - underlay_routing_protocol: ebgp - overlay_routing_protocol: ebgp - id: 2 - mgmt_ip: 10.255.0.12/24 - platform: vEOS-LAB - platform_settings: - platforms: - - default - reload_delay: - mlag: 300 - non_mlag: 330 - feature_support: - queue_monitor_length_notify: false - spanning_tree_mode: none - max_uplink_switches: 0 - max_parallel_uplinks: 1 - loopback_ipv4_pool: 192.168.255.0/24 - loopback_ipv4_offset: 0 - router_id: 192.168.255.2 - bgp_as: '65001' - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - evpn_role: server - mlag: false -topology: - peers: [] - vlans: [] -playbook_dir: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/playbooks -ansible_playbook_python: /Users/tgrimonet/.pyenv/versions/3.9.7/envs/arista-avd-demo/bin/python3.9 -ansible_config_file: /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/ansible.cfg -groups: - all: - - cv_ztp - - cv_server - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - ungrouped: [] - CVP: - - cv_ztp - - cv_server - DC1: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-L2LEAF1A - - DC1-L2LEAF2A - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_FABRIC: - - DC1-SPINE1 - - DC1-SPINE2 - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SPINES: - - DC1-SPINE1 - - DC1-SPINE2 - DC1_L3LEAFS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - DC1_LEAF1: - - DC1-LEAF1A - - DC1-LEAF1B - DC1_LEAF2: - - DC1-LEAF2A - - DC1-LEAF2B - DC1_L2LEAFS: - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_L2LEAF1: - - DC1-L2LEAF1A - DC1_L2LEAF2: - - DC1-L2LEAF2A - DC1_TENANTS_NETWORKS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A - DC1_SERVERS: - - DC1-LEAF1A - - DC1-LEAF1B - - DC1-LEAF2A - - DC1-LEAF2B - - DC1-L2LEAF1A - - DC1-L2LEAF2A -omit: __omit_place_holder__977da4f00604c643da39a9f2175c10b09f0b2380 -ansible_version: - string: 2.10.14 - full: 2.10.14 - major: 2 - minor: 10 - revision: 14 -ansible_check_mode: false -ansible_diff_mode: false -ansible_forks: 5 -ansible_inventory_sources: -- /Users/tgrimonet/Projects/arista-community/ansible-avd-cloudvision-demo/inventory/inventory.yml -ansible_skip_tags: [] -ansible_run_tags: -- build -ansible_verbosity: 0 diff --git a/inventory/intended/structured_configs/DC1-SPINE2.yml b/inventory/intended/structured_configs/DC1-SPINE2.yml deleted file mode 100644 index a922d8acc..000000000 --- a/inventory/intended/structured_configs/DC1-SPINE2.yml +++ /dev/null @@ -1,195 +0,0 @@ -router_bgp: - as: '65001' - router_id: 192.168.255.2 - bgp_defaults: - - no bgp default ipv4-unicast - - distance bgp 20 200 200 - - graceful-restart restart-time 300 - - graceful-restart - - maximum-paths 4 ecmp 4 - peer_groups: - IPv4-UNDERLAY-PEERS: - type: ipv4 - password: AQQvKeimxJu+uGQ/yYvv9w== - maximum_routes: 12000 - send_community: all - EVPN-OVERLAY-PEERS: - type: evpn - update_source: Loopback0 - bfd: true - ebgp_multihop: '3' - password: q+VNViP5i4rVjW1cxFv2wA== - send_community: all - maximum_routes: 0 - next_hop_unchanged: true - address_family_ipv4: - peer_groups: - IPv4-UNDERLAY-PEERS: - activate: true - EVPN-OVERLAY-PEERS: - activate: false - redistribute_routes: - connected: - route_map: RM-CONN-2-BGP - neighbors: - 172.31.255.3: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65101' - description: DC1-LEAF1A_Ethernet2 - 172.31.255.7: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65101' - description: DC1-LEAF1B_Ethernet2 - 172.31.255.11: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65102' - description: DC1-LEAF2A_Ethernet2 - 172.31.255.15: - peer_group: IPv4-UNDERLAY-PEERS - remote_as: '65102' - description: DC1-LEAF2B_Ethernet2 - 192.168.255.3: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-LEAF1A - remote_as: '65101' - 192.168.255.4: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-LEAF1B - remote_as: '65101' - 192.168.255.5: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-LEAF2A - remote_as: '65102' - 192.168.255.6: - peer_group: EVPN-OVERLAY-PEERS - description: DC1-LEAF2B - remote_as: '65102' - address_family_evpn: - peer_groups: - EVPN-OVERLAY-PEERS: - activate: true -static_routes: -- vrf: MGMT - destination_address_prefix: 0.0.0.0/0 - gateway: 10.255.0.1 -service_routing_protocols_model: multi-agent -ip_routing: true -daemon_terminattr: - cvaddrs: - - 10.255.0.1:9910 - cvauth: - method: key - cvvrf: MGMT - smashexcludes: ale,flexCounter,hardware,kni,pulse,strata - ingestexclude: /Sysdb/cell/1/agent,/Sysdb/cell/2/agent - disable_aaa: false -vlan_internal_order: - allocation: ascending - range: - beginning: 1006 - ending: 1199 -name_server: - source: - vrf: MGMT - nodes: - - 192.168.2.1 - - 8.8.8.8 -spanning_tree: - mode: none -local_users: - admin: - privilege: 15 - role: network-admin - sha512_password: $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1 - ansible: - privilege: 15 - role: network-admin - sha512_password: $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/ - cvpadmin: - privilege: 15 - role: network-admin - sha512_password: $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -vrfs: - MGMT: - ip_routing: false -management_interfaces: - Management1: - description: oob_management - shutdown: false - vrf: MGMT - ip_address: 10.255.0.12/24 - gateway: 10.255.0.1 - type: oob -management_api_http: - enable_vrfs: - MGMT: {} - enable_https: true -ethernet_interfaces: - Ethernet1: - peer: DC1-LEAF1A - peer_interface: Ethernet2 - peer_type: l3leaf - description: P2P_LINK_TO_DC1-LEAF1A_Ethernet2 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.2/31 - Ethernet2: - peer: DC1-LEAF1B - peer_interface: Ethernet2 - peer_type: l3leaf - description: P2P_LINK_TO_DC1-LEAF1B_Ethernet2 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.6/31 - Ethernet3: - peer: DC1-LEAF2A - peer_interface: Ethernet2 - peer_type: l3leaf - description: P2P_LINK_TO_DC1-LEAF2A_Ethernet2 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.10/31 - Ethernet4: - peer: DC1-LEAF2B - peer_interface: Ethernet2 - peer_type: l3leaf - description: P2P_LINK_TO_DC1-LEAF2B_Ethernet2 - mtu: 1500 - type: routed - shutdown: false - ip_address: 172.31.255.14/31 -loopback_interfaces: - Loopback0: - description: EVPN_Overlay_Peering - shutdown: false - ip_address: 192.168.255.2/32 -prefix_lists: - PL-LOOPBACKS-EVPN-OVERLAY: - sequence_numbers: - 10: - action: permit 192.168.255.0/24 eq 32 -route_maps: - RM-CONN-2-BGP: - sequence_numbers: - 10: - type: permit - match: - - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY -router_bfd: - multihop: - interval: 1200 - min_rx: 1200 - multiplier: 3 -ntp: - local_interface: - name: Management1 - vrf: MGMT - servers: - - name: 0.fr.pool.ntp.org - preferred: true - vrf: MGMT - - name: 1.fr.pool.ntp.org - vrf: MGMT diff --git a/inventory/intended/structured_configs/cvp/cv_server.yml b/inventory/intended/structured_configs/cvp/cv_server.yml index ef3e2de41..df8e0a6a6 100644 --- a/inventory/intended/structured_configs/cvp/cv_server.yml +++ b/inventory/intended/structured_configs/cvp/cv_server.yml @@ -1,67 +1,75 @@ --- CVP_DEVICES: - DC1-L2LEAF1A: - name: DC1-L2LEAF1A - parentContainerName: DC1_L2LEAF1 - configlets: - - DC1-AVD_DC1-L2LEAF1A - imageBundle: [] - DC1-L2LEAF2A: - name: DC1-L2LEAF2A - parentContainerName: DC1_L2LEAF2 - configlets: - - DC1-AVD_DC1-L2LEAF2A - imageBundle: [] - DC1-LEAF1A: - name: DC1-LEAF1A + DC1_LEAF-1A: + name: DC1_LEAF-1A parentContainerName: DC1_LEAF1 configlets: - - DC1-AVD_DC1-LEAF1A + - DC1-AVD_DC1_LEAF-1A imageBundle: [] - DC1-LEAF1B: - name: DC1-LEAF1B + DC1_LEAF-1B: + name: DC1_LEAF-1B parentContainerName: DC1_LEAF1 configlets: - - DC1-AVD_DC1-LEAF1B + - DC1-AVD_DC1_LEAF-1B imageBundle: [] - DC1-LEAF2A: - name: DC1-LEAF2A + DC1_LEAF-2A: + name: DC1_LEAF-2A parentContainerName: DC1_LEAF2 configlets: - - DC1-AVD_DC1-LEAF2A + - DC1-AVD_DC1_LEAF-2A imageBundle: [] - DC1-LEAF2B: - name: DC1-LEAF2B + DC1_LEAF-2B: + name: DC1_LEAF-2B parentContainerName: DC1_LEAF2 configlets: - - DC1-AVD_DC1-LEAF2B + - DC1-AVD_DC1_LEAF-2B + imageBundle: [] + DC1_LEAF-3A: + name: DC1_LEAF-3A + parentContainerName: DC1_LEAF3 + configlets: + - DC1-AVD_DC1_LEAF-3A + imageBundle: [] + DC1_LEAF-3B: + name: DC1_LEAF-3B + parentContainerName: DC1_LEAF3 + configlets: + - DC1-AVD_DC1_LEAF-3B imageBundle: [] - DC1-SPINE1: - name: DC1-SPINE1 + DC1_SPINE-1: + name: DC1_SPINE-1 parentContainerName: DC1_SPINES configlets: - - DC1-AVD_DC1-SPINE1 + - DC1-AVD_DC1_SPINE-1 imageBundle: [] - DC1-SPINE2: - name: DC1-SPINE2 + DC1_SPINE-2: + name: DC1_SPINE-2 parentContainerName: DC1_SPINES configlets: - - DC1-AVD_DC1-SPINE2 + - DC1-AVD_DC1_SPINE-2 + imageBundle: [] + DC1_SPINE-3: + name: DC1_SPINE-3 + parentContainerName: DC1_SPINES + configlets: + - DC1-AVD_DC1_SPINE-3 + imageBundle: [] + DC1_SPINE-4: + name: DC1_SPINE-4 + parentContainerName: DC1_SPINES + configlets: + - DC1-AVD_DC1_SPINE-4 imageBundle: [] CVP_CONTAINERS: DC1_FABRIC: parent_container: Tenant - DC1_L2LEAF1: - parent_container: DC1_L2LEAFS - DC1_L2LEAF2: - parent_container: DC1_L2LEAFS - DC1_L2LEAFS: - parent_container: DC1_FABRIC DC1_L3LEAFS: parent_container: DC1_FABRIC DC1_LEAF1: parent_container: DC1_L3LEAFS DC1_LEAF2: parent_container: DC1_L3LEAFS + DC1_LEAF3: + parent_container: DC1_L3LEAFS DC1_SPINES: parent_container: DC1_FABRIC diff --git a/inventory/intended/structured_configs/cvp/cv_server_configlets.yml b/inventory/intended/structured_configs/cvp/cv_server_configlets.yml index 1be3d9442..3fa6e13e6 100644 --- a/inventory/intended/structured_configs/cvp/cv_server_configlets.yml +++ b/inventory/intended/structured_configs/cvp/cv_server_configlets.yml @@ -1,1006 +1,29 @@ -CVP_CONFIGLETS: - DC1-AVD_DC1-L2LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-L2LEAF1A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0\ - \ priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege\ - \ 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ - username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ - username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ - !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ - !\nvlan 112\n name Tenant_A_OP_Zone_3\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n\ - !\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n\ - !\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvrf instance MGMT\n!\ninterface Port-Channel1\n\ - \ description DC1_LEAF1_Po5\n no shutdown\n switchport\n switchport trunk\ - \ allowed vlan 110-112,120-121,130-131\n switchport mode trunk\n!\ninterface\ - \ Ethernet1\n description DC1-LEAF1A_Ethernet5\n no shutdown\n channel-group\ - \ 1 mode active\n!\ninterface Ethernet2\n description DC1-LEAF1B_Ethernet5\n\ - \ no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description\ - \ server01_Eth0\n no shutdown\n switchport\n switchport access vlan 110\n\ - \ switchport mode access\n!\ninterface Management1\n description oob_management\n\ - \ no shutdown\n vrf MGMT\n ip address 10.255.0.17/24\n!\nip routing\nno\ - \ ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement\ - \ api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n \ - \ no shutdown\n!\nend\n" - DC1-AVD_DC1-L2LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-L2LEAF2A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0\ - \ priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege\ - \ 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ - username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ - username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ - !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ - !\nvlan 112\n name Tenant_A_OP_Zone_3\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n\ - !\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n\ - !\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvrf instance MGMT\n!\ninterface Port-Channel1\n\ - \ description DC1_LEAF2_Po5\n no shutdown\n switchport\n switchport trunk\ - \ allowed vlan 110-112,120-121,130-131\n switchport mode trunk\n!\ninterface\ - \ Ethernet1\n description DC1-LEAF2A_Ethernet5\n no shutdown\n channel-group\ - \ 1 mode active\n!\ninterface Ethernet2\n description DC1-LEAF2B_Ethernet5\n\ - \ no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description\ - \ server02_Eth0\n no shutdown\n switchport\n switchport access vlan 110\n\ - \ switchport mode access\n!\ninterface Management1\n description oob_management\n\ - \ no shutdown\n vrf MGMT\n ip address 10.255.0.18/24\n!\nip routing\nno\ - \ ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement\ - \ api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n \ - \ no shutdown\n!\nend\n" - DC1-AVD_DC1-LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF1A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ - username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ - username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ - !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ - !\nvlan 112\n name Tenant_A_OP_Zone_3\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n\ - !\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n\ - !\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan 140\n name Tenant_A_DB_BZone_1\n\ - !\nvlan 141\n name Tenant_A_DB_Zone_2\n!\nvlan 150\n name Tenant_A_WAN_Zone_1\n\ - !\nvlan 160\n name Tenant_A_VMOTION\n!\nvlan 161\n name Tenant_A_NFS\n!\n\ - vlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n\ - !\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n\ - !\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan 350\n name Tenant_C_WAN_Zone_1\n\ - !\nvlan 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 4093\n name LEAF_PEER_L3\n trunk group LEAF_PEER_L3\n!\nvlan 4094\n\ - \ name MLAG_PEER\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance\ - \ Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n\ - !\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance Tenant_A_WEB_Zone\n!\nvrf instance\ - \ Tenant_B_OP_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_OP_Zone\n\ - !\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel3\n description\ - \ MLAG_PEER_DC1-LEAF1B_Po3\n no shutdown\n switchport\n switchport trunk\ - \ allowed vlan 2-4094\n switchport mode trunk\n switchport trunk group LEAF_PEER_L3\n\ - \ switchport trunk group MLAG\n!\ninterface Port-Channel5\n description DC1-L2LEAF1A_Po1\n\ - \ no shutdown\n switchport\n switchport trunk allowed vlan 110-112,120-121,130-131\n\ - \ switchport mode trunk\n mlag 5\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet1\n\ - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.1/31\n\ - !\ninterface Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet1\n no\ - \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.3/31\n!\n\ - interface Ethernet3\n description MLAG_PEER_DC1-LEAF1B_Ethernet3\n no shutdown\n\ - \ channel-group 3 mode active\n!\ninterface Ethernet4\n description MLAG_PEER_DC1-LEAF1B_Ethernet4\n\ - \ no shutdown\n channel-group 3 mode active\n!\ninterface Ethernet5\n description\ - \ DC1-L2LEAF1A_Ethernet1\n no shutdown\n channel-group 5 mode active\n!\n\ - interface Loopback0\n description EVPN_Overlay_Peering\n no shutdown\n ip\ - \ address 192.168.255.3/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ - \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n \ - \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.3/32\n!\ninterface Management1\n description oob_management\n\ - \ no shutdown\n vrf MGMT\n ip address 10.255.0.13/24\n!\ninterface Vlan110\n\ - \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.11.1/24\n\ - !\ninterface Vlan112\n description Tenant_A_OP_Zone_3\n no shutdown\n vrf\ - \ Tenant_A_OP_Zone\n ip address virtual 10.1.12.254/24\n!\ninterface Vlan120\n\ - \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n\ - !\ninterface Vlan121\n description Tenant_A_WEBZone_2\n no shutdown\n vrf\ - \ Tenant_A_WEB_Zone\n ip address virtual 10.1.21.1/24\n!\ninterface Vlan130\n\ - \ description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n\ - !\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf\ - \ Tenant_A_APP_Zone\n ip address virtual 10.1.31.254/24\n!\ninterface Vlan140\n\ - \ description Tenant_A_DB_BZone_1\n no shutdown\n vrf Tenant_A_DB_Zone\n\ - \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan141\n description Tenant_A_DB_Zone_2\n\ - \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.41.1/24\n\ - !\ninterface Vlan150\n description Tenant_A_WAN_Zone_1\n no shutdown\n vrf\ - \ Tenant_A_WAN_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface Vlan210\n\ - \ description Tenant_B_OP_Zone_1\n no shutdown\n vrf Tenant_B_OP_Zone\n\ - !\ninterface Vlan211\n description Tenant_B_OP_Zone_2\n no shutdown\n vrf\ - \ Tenant_B_OP_Zone\n ip address virtual 10.2.11.1/24\n!\ninterface Vlan250\n\ - \ description Tenant_B_WAN_Zone_1\n no shutdown\n vrf Tenant_B_WAN_Zone\n\ - \ ip address virtual 10.2.50.1/24\n!\ninterface Vlan310\n description Tenant_C_OP_Zone_1\n\ - \ no shutdown\n vrf Tenant_C_OP_Zone\n!\ninterface Vlan311\n description\ - \ Tenant_C_OP_Zone_2\n no shutdown\n vrf Tenant_C_OP_Zone\n!\ninterface Vlan350\n\ - \ description Tenant_C_WAN_Zone_1\n no shutdown\n vrf Tenant_C_WAN_Zone\n\ - !\ninterface Vlan3009\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.0/31\n\ - !\ninterface Vlan3010\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_WEB_Zone\n ip address 10.255.251.0/31\n\ - !\ninterface Vlan3011\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n ip address 10.255.251.0/31\n\ - !\ninterface Vlan3012\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip address 10.255.251.0/31\n\ - !\ninterface Vlan3013\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.0/31\n\ - !\ninterface Vlan3019\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.0/31\n\ - !\ninterface Vlan3020\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_B_WAN_Zone\n ip address 10.255.251.0/31\n\ - !\ninterface Vlan3029\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n ip address 10.255.251.0/31\n\ - !\ninterface Vlan3030\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.0/31\n\ - !\ninterface Vlan4093\n description MLAG_PEER_L3_PEERING\n no shutdown\n \ - \ mtu 1500\n ip address 10.255.251.0/31\n!\ninterface Vlan4094\n description\ - \ MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.0/31\n\ - !\ninterface Vxlan1\n description DC1-LEAF1A_VTEP\n vxlan source-interface\ - \ Loopback1\n vxlan virtual-router encapsulation mac-address mlag-system-id\n\ - \ vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n\ - \ vxlan vlan 112 vni 50112\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni\ - \ 10121\n vxlan vlan 130 vni 10130\n vxlan vlan 131 vni 10131\n vxlan vlan\ - \ 140 vni 10140\n vxlan vlan 141 vni 10141\n vxlan vlan 150 vni 10150\n \ - \ vxlan vlan 160 vni 55160\n vxlan vlan 161 vni 10161\n vxlan vlan 210 vni\ - \ 20210\n vxlan vlan 211 vni 20211\n vxlan vlan 250 vni 20250\n vxlan vlan\ - \ 310 vni 30310\n vxlan vlan 311 vni 30311\n vxlan vlan 350 vni 30350\n \ - \ vxlan vrf Tenant_A_APP_Zone vni 12\n vxlan vrf Tenant_A_DB_Zone vni 13\n \ - \ vxlan vrf Tenant_A_OP_Zone vni 10\n vxlan vrf Tenant_A_WAN_Zone vni 14\n\ - \ vxlan vrf Tenant_A_WEB_Zone vni 11\n vxlan vrf Tenant_B_OP_Zone vni 20\n\ - \ vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_OP_Zone vni 30\n\ - \ vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address 00:1c:73:00:dc:01\n\ - !\nip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.3\n!\n\ - ip routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip routing\ - \ vrf Tenant_A_DB_Zone\nip routing vrf Tenant_A_OP_Zone\nip routing vrf Tenant_A_WAN_Zone\n\ - ip routing vrf Tenant_A_WEB_Zone\nip routing vrf Tenant_B_OP_Zone\nip routing\ - \ vrf Tenant_B_WAN_Zone\nip routing vrf Tenant_C_OP_Zone\nip routing vrf Tenant_C_WAN_Zone\n\ - !\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24\ - \ eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id\ - \ DC1_LEAF1\n local-interface Vlan4094\n peer-address 10.255.252.1\n peer-link\ - \ Port-Channel3\n reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip\ - \ route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP permit 10\n\ - \ match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN\ - \ permit 10\n description Make routes learned over MLAG Peer-link less preferred\ - \ on spines to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n\ - \ multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65101\n router-id\ - \ 192.168.255.3\n no bgp default ipv4-unicast\n distance bgp 20 200 200\n\ - \ graceful-restart restart-time 300\n graceful-restart\n maximum-paths 4\ - \ ecmp 4\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS\ - \ update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS\ - \ ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n\ - \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS\ - \ maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS\ - \ password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n\ - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ peer group\n neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65101\n neighbor\ - \ MLAG-IPv4-UNDERLAY-PEER next-hop-self\n neighbor MLAG-IPv4-UNDERLAY-PEER password\ - \ 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n\ - \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ neighbor 10.255.251.1 description DC1-LEAF1B\n neighbor 172.31.255.0 peer\ - \ group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.0 remote-as 65001\n neighbor\ - \ 172.31.255.0 description DC1-SPINE1_Ethernet1\n neighbor 172.31.255.2 peer\ - \ group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.2 remote-as 65001\n neighbor\ - \ 172.31.255.2 description DC1-SPINE2_Ethernet1\n neighbor 192.168.255.1 peer\ - \ group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor\ - \ 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n\ - \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description\ - \ DC1-SPINE2\n redistribute connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle\ - \ Tenant_A_APP_Zone\n rd 192.168.255.3:12\n route-target both 12:12\n\ - \ redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n\ - \ rd 192.168.255.3:13\n route-target both 13:13\n redistribute\ - \ learned\n vlan 140-141\n !\n vlan-aware-bundle Tenant_A_NFS\n \ - \ rd 192.168.255.3:10161\n route-target both 10161:10161\n redistribute\ - \ learned\n vlan 161\n !\n vlan-aware-bundle Tenant_A_OP_Zone\n \ - \ rd 192.168.255.3:10\n route-target both 10:10\n redistribute learned\n\ - \ vlan 110-112\n !\n vlan-aware-bundle Tenant_A_VMOTION\n rd 192.168.255.3:55160\n\ - \ route-target both 55160:55160\n redistribute learned\n vlan 160\n\ - \ !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd 192.168.255.3:14\n \ - \ route-target both 14:14\n redistribute learned\n vlan 150\n !\n\ - \ vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.3:11\n route-target\ - \ both 11:11\n redistribute learned\n vlan 120-121\n !\n vlan-aware-bundle\ - \ Tenant_B_OP_Zone\n rd 192.168.255.3:20\n route-target both 20:20\n\ - \ redistribute learned\n vlan 210-211\n !\n vlan-aware-bundle Tenant_B_WAN_Zone\n\ - \ rd 192.168.255.3:21\n route-target both 21:21\n redistribute\ - \ learned\n vlan 250\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n \ - \ rd 192.168.255.3:30\n route-target both 30:30\n redistribute learned\n\ - \ vlan 310-311\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.3:31\n\ - \ route-target both 31:31\n redistribute learned\n vlan 350\n \ - \ !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n\ - \ address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n \ - \ neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.3:12\n route-target\ - \ import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.3\n\ - \ neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.3:13\n route-target\ - \ import evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.3\n\ - \ neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.3:10\n route-target\ - \ import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.3\n\ - \ neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.3:14\n \ - \ route-target import evpn 14:14\n route-target export evpn 14:14\n \ - \ router-id 192.168.255.3\n neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.3:11\n\ - \ route-target import evpn 11:11\n route-target export evpn 11:11\n\ - \ router-id 192.168.255.3\n neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.3:20\n\ - \ route-target import evpn 20:20\n route-target export evpn 20:20\n\ - \ router-id 192.168.255.3\n neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.3:21\n\ - \ route-target import evpn 21:21\n route-target export evpn 21:21\n\ - \ router-id 192.168.255.3\n neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.3:30\n\ - \ route-target import evpn 30:30\n route-target export evpn 30:30\n\ - \ router-id 192.168.255.3\n neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.3:31\n\ - \ route-target import evpn 31:31\n route-target export evpn 31:31\n\ - \ router-id 192.168.255.3\n neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ - \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - DC1-AVD_DC1-LEAF1B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF1B\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ - username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ - username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ - !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ - !\nvlan 112\n name Tenant_A_OP_Zone_3\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n\ - !\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n\ - !\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan 140\n name Tenant_A_DB_BZone_1\n\ - !\nvlan 141\n name Tenant_A_DB_Zone_2\n!\nvlan 150\n name Tenant_A_WAN_Zone_1\n\ - !\nvlan 160\n name Tenant_A_VMOTION\n!\nvlan 161\n name Tenant_A_NFS\n!\n\ - vlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n\ - !\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n\ - !\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan 350\n name Tenant_C_WAN_Zone_1\n\ - !\nvlan 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 4093\n name LEAF_PEER_L3\n trunk group LEAF_PEER_L3\n!\nvlan 4094\n\ - \ name MLAG_PEER\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance\ - \ Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n\ - !\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance Tenant_A_WEB_Zone\n!\nvrf instance\ - \ Tenant_B_OP_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_OP_Zone\n\ - !\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel3\n description\ - \ MLAG_PEER_DC1-LEAF1A_Po3\n no shutdown\n switchport\n switchport trunk\ - \ allowed vlan 2-4094\n switchport mode trunk\n switchport trunk group LEAF_PEER_L3\n\ - \ switchport trunk group MLAG\n!\ninterface Port-Channel5\n description DC1-L2LEAF1A_Po1\n\ - \ no shutdown\n switchport\n switchport trunk allowed vlan 110-112,120-121,130-131\n\ - \ switchport mode trunk\n mlag 5\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet2\n\ - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.5/31\n\ - !\ninterface Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet2\n no\ - \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.7/31\n!\n\ - interface Ethernet3\n description MLAG_PEER_DC1-LEAF1A_Ethernet3\n no shutdown\n\ - \ channel-group 3 mode active\n!\ninterface Ethernet4\n description MLAG_PEER_DC1-LEAF1A_Ethernet4\n\ - \ no shutdown\n channel-group 3 mode active\n!\ninterface Ethernet5\n description\ - \ DC1-L2LEAF1A_Ethernet2\n no shutdown\n channel-group 5 mode active\n!\n\ - interface Loopback0\n description EVPN_Overlay_Peering\n no shutdown\n ip\ - \ address 192.168.255.4/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ - \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n \ - \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.4/32\n!\ninterface Management1\n description oob_management\n\ - \ no shutdown\n vrf MGMT\n ip address 10.255.0.14/24\n!\ninterface Vlan110\n\ - \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.11.1/24\n\ - !\ninterface Vlan112\n description Tenant_A_OP_Zone_3\n no shutdown\n vrf\ - \ Tenant_A_OP_Zone\n ip address virtual 10.1.12.254/24\n!\ninterface Vlan120\n\ - \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n\ - !\ninterface Vlan121\n description Tenant_A_WEBZone_2\n no shutdown\n vrf\ - \ Tenant_A_WEB_Zone\n ip address virtual 10.1.21.1/24\n!\ninterface Vlan130\n\ - \ description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n\ - !\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf\ - \ Tenant_A_APP_Zone\n ip address virtual 10.1.31.254/24\n!\ninterface Vlan140\n\ - \ description Tenant_A_DB_BZone_1\n no shutdown\n vrf Tenant_A_DB_Zone\n\ - \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan141\n description Tenant_A_DB_Zone_2\n\ - \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.41.1/24\n\ - !\ninterface Vlan150\n description Tenant_A_WAN_Zone_1\n no shutdown\n vrf\ - \ Tenant_A_WAN_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface Vlan210\n\ - \ description Tenant_B_OP_Zone_1\n no shutdown\n vrf Tenant_B_OP_Zone\n\ - !\ninterface Vlan211\n description Tenant_B_OP_Zone_2\n no shutdown\n vrf\ - \ Tenant_B_OP_Zone\n ip address virtual 10.2.11.1/24\n!\ninterface Vlan250\n\ - \ description Tenant_B_WAN_Zone_1\n no shutdown\n vrf Tenant_B_WAN_Zone\n\ - \ ip address virtual 10.2.50.1/24\n!\ninterface Vlan310\n description Tenant_C_OP_Zone_1\n\ - \ no shutdown\n vrf Tenant_C_OP_Zone\n!\ninterface Vlan311\n description\ - \ Tenant_C_OP_Zone_2\n no shutdown\n vrf Tenant_C_OP_Zone\n!\ninterface Vlan350\n\ - \ description Tenant_C_WAN_Zone_1\n no shutdown\n vrf Tenant_C_WAN_Zone\n\ - !\ninterface Vlan3009\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.1/31\n\ - !\ninterface Vlan3010\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_WEB_Zone\n ip address 10.255.251.1/31\n\ - !\ninterface Vlan3011\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n ip address 10.255.251.1/31\n\ - !\ninterface Vlan3012\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip address 10.255.251.1/31\n\ - !\ninterface Vlan3013\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.1/31\n\ - !\ninterface Vlan3019\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.1/31\n\ - !\ninterface Vlan3020\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_B_WAN_Zone\n ip address 10.255.251.1/31\n\ - !\ninterface Vlan3029\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n ip address 10.255.251.1/31\n\ - !\ninterface Vlan3030\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.1/31\n\ - !\ninterface Vlan4093\n description MLAG_PEER_L3_PEERING\n no shutdown\n \ - \ mtu 1500\n ip address 10.255.251.1/31\n!\ninterface Vlan4094\n description\ - \ MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.1/31\n\ - !\ninterface Vxlan1\n description DC1-LEAF1B_VTEP\n vxlan source-interface\ - \ Loopback1\n vxlan virtual-router encapsulation mac-address mlag-system-id\n\ - \ vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n\ - \ vxlan vlan 112 vni 50112\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni\ - \ 10121\n vxlan vlan 130 vni 10130\n vxlan vlan 131 vni 10131\n vxlan vlan\ - \ 140 vni 10140\n vxlan vlan 141 vni 10141\n vxlan vlan 150 vni 10150\n \ - \ vxlan vlan 160 vni 55160\n vxlan vlan 161 vni 10161\n vxlan vlan 210 vni\ - \ 20210\n vxlan vlan 211 vni 20211\n vxlan vlan 250 vni 20250\n vxlan vlan\ - \ 310 vni 30310\n vxlan vlan 311 vni 30311\n vxlan vlan 350 vni 30350\n \ - \ vxlan vrf Tenant_A_APP_Zone vni 12\n vxlan vrf Tenant_A_DB_Zone vni 13\n \ - \ vxlan vrf Tenant_A_OP_Zone vni 10\n vxlan vrf Tenant_A_WAN_Zone vni 14\n\ - \ vxlan vrf Tenant_A_WEB_Zone vni 11\n vxlan vrf Tenant_B_OP_Zone vni 20\n\ - \ vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_OP_Zone vni 30\n\ - \ vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address 00:1c:73:00:dc:01\n\ - !\nip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.4\n!\n\ - ip routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip routing\ - \ vrf Tenant_A_DB_Zone\nip routing vrf Tenant_A_OP_Zone\nip routing vrf Tenant_A_WAN_Zone\n\ - ip routing vrf Tenant_A_WEB_Zone\nip routing vrf Tenant_B_OP_Zone\nip routing\ - \ vrf Tenant_B_WAN_Zone\nip routing vrf Tenant_C_OP_Zone\nip routing vrf Tenant_C_WAN_Zone\n\ - !\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24\ - \ eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id\ - \ DC1_LEAF1\n local-interface Vlan4094\n peer-address 10.255.252.0\n peer-link\ - \ Port-Channel3\n reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip\ - \ route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP permit 10\n\ - \ match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN\ - \ permit 10\n description Make routes learned over MLAG Peer-link less preferred\ - \ on spines to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n\ - \ multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65101\n router-id\ - \ 192.168.255.4\n no bgp default ipv4-unicast\n distance bgp 20 200 200\n\ - \ graceful-restart restart-time 300\n graceful-restart\n maximum-paths 4\ - \ ecmp 4\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS\ - \ update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS\ - \ ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n\ - \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS\ - \ maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS\ - \ password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n\ - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ peer group\n neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65101\n neighbor\ - \ MLAG-IPv4-UNDERLAY-PEER next-hop-self\n neighbor MLAG-IPv4-UNDERLAY-PEER password\ - \ 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n\ - \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ neighbor 10.255.251.0 description DC1-LEAF1A\n neighbor 172.31.255.4 peer\ - \ group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.4 remote-as 65001\n neighbor\ - \ 172.31.255.4 description DC1-SPINE1_Ethernet2\n neighbor 172.31.255.6 peer\ - \ group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.6 remote-as 65001\n neighbor\ - \ 172.31.255.6 description DC1-SPINE2_Ethernet2\n neighbor 192.168.255.1 peer\ - \ group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor\ - \ 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n\ - \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description\ - \ DC1-SPINE2\n redistribute connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle\ - \ Tenant_A_APP_Zone\n rd 192.168.255.4:12\n route-target both 12:12\n\ - \ redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n\ - \ rd 192.168.255.4:13\n route-target both 13:13\n redistribute\ - \ learned\n vlan 140-141\n !\n vlan-aware-bundle Tenant_A_NFS\n \ - \ rd 192.168.255.4:10161\n route-target both 10161:10161\n redistribute\ - \ learned\n vlan 161\n !\n vlan-aware-bundle Tenant_A_OP_Zone\n \ - \ rd 192.168.255.4:10\n route-target both 10:10\n redistribute learned\n\ - \ vlan 110-112\n !\n vlan-aware-bundle Tenant_A_VMOTION\n rd 192.168.255.4:55160\n\ - \ route-target both 55160:55160\n redistribute learned\n vlan 160\n\ - \ !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd 192.168.255.4:14\n \ - \ route-target both 14:14\n redistribute learned\n vlan 150\n !\n\ - \ vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.4:11\n route-target\ - \ both 11:11\n redistribute learned\n vlan 120-121\n !\n vlan-aware-bundle\ - \ Tenant_B_OP_Zone\n rd 192.168.255.4:20\n route-target both 20:20\n\ - \ redistribute learned\n vlan 210-211\n !\n vlan-aware-bundle Tenant_B_WAN_Zone\n\ - \ rd 192.168.255.4:21\n route-target both 21:21\n redistribute\ - \ learned\n vlan 250\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n \ - \ rd 192.168.255.4:30\n route-target both 30:30\n redistribute learned\n\ - \ vlan 310-311\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.4:31\n\ - \ route-target both 31:31\n redistribute learned\n vlan 350\n \ - \ !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n\ - \ address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n \ - \ neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.4:12\n route-target\ - \ import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.4\n\ - \ neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.4:13\n route-target\ - \ import evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.4\n\ - \ neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.4:10\n route-target\ - \ import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.4\n\ - \ neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.4:14\n \ - \ route-target import evpn 14:14\n route-target export evpn 14:14\n \ - \ router-id 192.168.255.4\n neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.4:11\n\ - \ route-target import evpn 11:11\n route-target export evpn 11:11\n\ - \ router-id 192.168.255.4\n neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.4:20\n\ - \ route-target import evpn 20:20\n route-target export evpn 20:20\n\ - \ router-id 192.168.255.4\n neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.4:21\n\ - \ route-target import evpn 21:21\n route-target export evpn 21:21\n\ - \ router-id 192.168.255.4\n neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.4:30\n\ - \ route-target import evpn 30:30\n route-target export evpn 30:30\n\ - \ router-id 192.168.255.4\n neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.4:31\n\ - \ route-target import evpn 31:31\n route-target export evpn 31:31\n\ - \ router-id 192.168.255.4\n neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ - \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - DC1-AVD_DC1-LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF2A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ - username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ - username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ - !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ - !\nvlan 112\n name Tenant_A_OP_Zone_3\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n\ - !\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n\ - !\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan 140\n name Tenant_A_DB_BZone_1\n\ - !\nvlan 141\n name Tenant_A_DB_Zone_2\n!\nvlan 150\n name Tenant_A_WAN_Zone_1\n\ - !\nvlan 160\n name Tenant_A_VMOTION\n!\nvlan 161\n name Tenant_A_NFS\n!\n\ - vlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n\ - !\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n\ - !\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan 350\n name Tenant_C_WAN_Zone_1\n\ - !\nvlan 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 4093\n name LEAF_PEER_L3\n trunk group LEAF_PEER_L3\n!\nvlan 4094\n\ - \ name MLAG_PEER\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance\ - \ Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n\ - !\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance Tenant_A_WEB_Zone\n!\nvrf instance\ - \ Tenant_B_OP_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_OP_Zone\n\ - !\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel3\n description\ - \ MLAG_PEER_DC1-LEAF2B_Po3\n no shutdown\n switchport\n switchport trunk\ - \ allowed vlan 2-4094\n switchport mode trunk\n switchport trunk group LEAF_PEER_L3\n\ - \ switchport trunk group MLAG\n!\ninterface Port-Channel5\n description DC1-L2LEAF2A_Po1\n\ - \ no shutdown\n switchport\n switchport trunk allowed vlan 110-112,120-121,130-131\n\ - \ switchport mode trunk\n mlag 5\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet3\n\ - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.9/31\n\ - !\ninterface Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet3\n no\ - \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.11/31\n!\n\ - interface Ethernet3\n description MLAG_PEER_DC1-LEAF2B_Ethernet3\n no shutdown\n\ - \ channel-group 3 mode active\n!\ninterface Ethernet4\n description MLAG_PEER_DC1-LEAF2B_Ethernet4\n\ - \ no shutdown\n channel-group 3 mode active\n!\ninterface Ethernet5\n description\ - \ DC1-L2LEAF2A_Ethernet1\n no shutdown\n channel-group 5 mode active\n!\n\ - interface Loopback0\n description EVPN_Overlay_Peering\n no shutdown\n ip\ - \ address 192.168.255.5/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ - \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n \ - \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.5/32\n!\ninterface Management1\n description oob_management\n\ - \ no shutdown\n vrf MGMT\n ip address 10.255.0.15/24\n!\ninterface Vlan110\n\ - \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.11.1/24\n\ - !\ninterface Vlan112\n description Tenant_A_OP_Zone_3\n no shutdown\n vrf\ - \ Tenant_A_OP_Zone\n ip address virtual 10.1.12.254/24\n!\ninterface Vlan120\n\ - \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n\ - !\ninterface Vlan121\n description Tenant_A_WEBZone_2\n no shutdown\n vrf\ - \ Tenant_A_WEB_Zone\n ip address virtual 10.1.21.1/24\n!\ninterface Vlan130\n\ - \ description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n\ - !\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf\ - \ Tenant_A_APP_Zone\n ip address virtual 10.1.31.254/24\n!\ninterface Vlan140\n\ - \ description Tenant_A_DB_BZone_1\n no shutdown\n vrf Tenant_A_DB_Zone\n\ - \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan141\n description Tenant_A_DB_Zone_2\n\ - \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.41.1/24\n\ - !\ninterface Vlan150\n description Tenant_A_WAN_Zone_1\n no shutdown\n vrf\ - \ Tenant_A_WAN_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface Vlan210\n\ - \ description Tenant_B_OP_Zone_1\n no shutdown\n vrf Tenant_B_OP_Zone\n\ - !\ninterface Vlan211\n description Tenant_B_OP_Zone_2\n no shutdown\n vrf\ - \ Tenant_B_OP_Zone\n ip address virtual 10.2.11.1/24\n!\ninterface Vlan250\n\ - \ description Tenant_B_WAN_Zone_1\n no shutdown\n vrf Tenant_B_WAN_Zone\n\ - \ ip address virtual 10.2.50.1/24\n!\ninterface Vlan310\n description Tenant_C_OP_Zone_1\n\ - \ no shutdown\n vrf Tenant_C_OP_Zone\n!\ninterface Vlan311\n description\ - \ Tenant_C_OP_Zone_2\n no shutdown\n vrf Tenant_C_OP_Zone\n!\ninterface Vlan350\n\ - \ description Tenant_C_WAN_Zone_1\n no shutdown\n vrf Tenant_C_WAN_Zone\n\ - !\ninterface Vlan3009\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.4/31\n\ - !\ninterface Vlan3010\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_WEB_Zone\n ip address 10.255.251.4/31\n\ - !\ninterface Vlan3011\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n ip address 10.255.251.4/31\n\ - !\ninterface Vlan3012\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip address 10.255.251.4/31\n\ - !\ninterface Vlan3013\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.4/31\n\ - !\ninterface Vlan3019\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.4/31\n\ - !\ninterface Vlan3020\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_B_WAN_Zone\n ip address 10.255.251.4/31\n\ - !\ninterface Vlan3029\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n ip address 10.255.251.4/31\n\ - !\ninterface Vlan3030\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.4/31\n\ - !\ninterface Vlan4093\n description MLAG_PEER_L3_PEERING\n no shutdown\n \ - \ mtu 1500\n ip address 10.255.251.4/31\n!\ninterface Vlan4094\n description\ - \ MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.4/31\n\ - !\ninterface Vxlan1\n description DC1-LEAF2A_VTEP\n vxlan source-interface\ - \ Loopback1\n vxlan virtual-router encapsulation mac-address mlag-system-id\n\ - \ vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n\ - \ vxlan vlan 112 vni 50112\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni\ - \ 10121\n vxlan vlan 130 vni 10130\n vxlan vlan 131 vni 10131\n vxlan vlan\ - \ 140 vni 10140\n vxlan vlan 141 vni 10141\n vxlan vlan 150 vni 10150\n \ - \ vxlan vlan 160 vni 55160\n vxlan vlan 161 vni 10161\n vxlan vlan 210 vni\ - \ 20210\n vxlan vlan 211 vni 20211\n vxlan vlan 250 vni 20250\n vxlan vlan\ - \ 310 vni 30310\n vxlan vlan 311 vni 30311\n vxlan vlan 350 vni 30350\n \ - \ vxlan vrf Tenant_A_APP_Zone vni 12\n vxlan vrf Tenant_A_DB_Zone vni 13\n \ - \ vxlan vrf Tenant_A_OP_Zone vni 10\n vxlan vrf Tenant_A_WAN_Zone vni 14\n\ - \ vxlan vrf Tenant_A_WEB_Zone vni 11\n vxlan vrf Tenant_B_OP_Zone vni 20\n\ - \ vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_OP_Zone vni 30\n\ - \ vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address 00:1c:73:00:dc:01\n\ - !\nip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.5\n!\n\ - ip routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip routing\ - \ vrf Tenant_A_DB_Zone\nip routing vrf Tenant_A_OP_Zone\nip routing vrf Tenant_A_WAN_Zone\n\ - ip routing vrf Tenant_A_WEB_Zone\nip routing vrf Tenant_B_OP_Zone\nip routing\ - \ vrf Tenant_B_WAN_Zone\nip routing vrf Tenant_C_OP_Zone\nip routing vrf Tenant_C_WAN_Zone\n\ - !\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24\ - \ eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id\ - \ DC1_LEAF2\n local-interface Vlan4094\n peer-address 10.255.252.5\n peer-link\ - \ Port-Channel3\n reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip\ - \ route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP permit 10\n\ - \ match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN\ - \ permit 10\n description Make routes learned over MLAG Peer-link less preferred\ - \ on spines to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n\ - \ multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65102\n router-id\ - \ 192.168.255.5\n no bgp default ipv4-unicast\n distance bgp 20 200 200\n\ - \ graceful-restart restart-time 300\n graceful-restart\n maximum-paths 4\ - \ ecmp 4\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS\ - \ update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS\ - \ ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n\ - \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS\ - \ maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS\ - \ password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n\ - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ peer group\n neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65102\n neighbor\ - \ MLAG-IPv4-UNDERLAY-PEER next-hop-self\n neighbor MLAG-IPv4-UNDERLAY-PEER password\ - \ 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n\ - \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ neighbor 10.255.251.5 description DC1-LEAF2B\n neighbor 172.31.255.8 peer\ - \ group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.8 remote-as 65001\n neighbor\ - \ 172.31.255.8 description DC1-SPINE1_Ethernet3\n neighbor 172.31.255.10 peer\ - \ group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.10 remote-as 65001\n neighbor\ - \ 172.31.255.10 description DC1-SPINE2_Ethernet3\n neighbor 192.168.255.1 peer\ - \ group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor\ - \ 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n\ - \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description\ - \ DC1-SPINE2\n redistribute connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle\ - \ Tenant_A_APP_Zone\n rd 192.168.255.5:12\n route-target both 12:12\n\ - \ redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n\ - \ rd 192.168.255.5:13\n route-target both 13:13\n redistribute\ - \ learned\n vlan 140-141\n !\n vlan-aware-bundle Tenant_A_NFS\n \ - \ rd 192.168.255.5:10161\n route-target both 10161:10161\n redistribute\ - \ learned\n vlan 161\n !\n vlan-aware-bundle Tenant_A_OP_Zone\n \ - \ rd 192.168.255.5:10\n route-target both 10:10\n redistribute learned\n\ - \ vlan 110-112\n !\n vlan-aware-bundle Tenant_A_VMOTION\n rd 192.168.255.5:55160\n\ - \ route-target both 55160:55160\n redistribute learned\n vlan 160\n\ - \ !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd 192.168.255.5:14\n \ - \ route-target both 14:14\n redistribute learned\n vlan 150\n !\n\ - \ vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.5:11\n route-target\ - \ both 11:11\n redistribute learned\n vlan 120-121\n !\n vlan-aware-bundle\ - \ Tenant_B_OP_Zone\n rd 192.168.255.5:20\n route-target both 20:20\n\ - \ redistribute learned\n vlan 210-211\n !\n vlan-aware-bundle Tenant_B_WAN_Zone\n\ - \ rd 192.168.255.5:21\n route-target both 21:21\n redistribute\ - \ learned\n vlan 250\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n \ - \ rd 192.168.255.5:30\n route-target both 30:30\n redistribute learned\n\ - \ vlan 310-311\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.5:31\n\ - \ route-target both 31:31\n redistribute learned\n vlan 350\n \ - \ !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n\ - \ address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n \ - \ neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.5:12\n route-target\ - \ import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.5\n\ - \ neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.5:13\n route-target\ - \ import evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.5\n\ - \ neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.5:10\n route-target\ - \ import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.5\n\ - \ neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.5:14\n \ - \ route-target import evpn 14:14\n route-target export evpn 14:14\n \ - \ router-id 192.168.255.5\n neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.5:11\n\ - \ route-target import evpn 11:11\n route-target export evpn 11:11\n\ - \ router-id 192.168.255.5\n neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.5:20\n\ - \ route-target import evpn 20:20\n route-target export evpn 20:20\n\ - \ router-id 192.168.255.5\n neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.5:21\n\ - \ route-target import evpn 21:21\n route-target export evpn 21:21\n\ - \ router-id 192.168.255.5\n neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.5:30\n\ - \ route-target import evpn 30:30\n route-target export evpn 30:30\n\ - \ router-id 192.168.255.5\n neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.5:31\n\ - \ route-target import evpn 31:31\n route-target export evpn 31:31\n\ - \ router-id 192.168.255.5\n neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ - \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - DC1-AVD_DC1-LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF2B\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ - username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ - username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ - !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ - !\nvlan 112\n name Tenant_A_OP_Zone_3\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n\ - !\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n\ - !\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan 140\n name Tenant_A_DB_BZone_1\n\ - !\nvlan 141\n name Tenant_A_DB_Zone_2\n!\nvlan 150\n name Tenant_A_WAN_Zone_1\n\ - !\nvlan 160\n name Tenant_A_VMOTION\n!\nvlan 161\n name Tenant_A_NFS\n!\n\ - vlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n\ - !\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n\ - !\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan 350\n name Tenant_C_WAN_Zone_1\n\ - !\nvlan 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n trunk group LEAF_PEER_L3\n\ - !\nvlan 4093\n name LEAF_PEER_L3\n trunk group LEAF_PEER_L3\n!\nvlan 4094\n\ - \ name MLAG_PEER\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance\ - \ Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n\ - !\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance Tenant_A_WEB_Zone\n!\nvrf instance\ - \ Tenant_B_OP_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_OP_Zone\n\ - !\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel3\n description\ - \ MLAG_PEER_DC1-LEAF2A_Po3\n no shutdown\n switchport\n switchport trunk\ - \ allowed vlan 2-4094\n switchport mode trunk\n switchport trunk group LEAF_PEER_L3\n\ - \ switchport trunk group MLAG\n!\ninterface Port-Channel5\n description DC1-L2LEAF2A_Po1\n\ - \ no shutdown\n switchport\n switchport trunk allowed vlan 110-112,120-121,130-131\n\ - \ switchport mode trunk\n mlag 5\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet4\n\ - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.13/31\n\ - !\ninterface Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet4\n no\ - \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.15/31\n!\n\ - interface Ethernet3\n description MLAG_PEER_DC1-LEAF2A_Ethernet3\n no shutdown\n\ - \ channel-group 3 mode active\n!\ninterface Ethernet4\n description MLAG_PEER_DC1-LEAF2A_Ethernet4\n\ - \ no shutdown\n channel-group 3 mode active\n!\ninterface Ethernet5\n description\ - \ DC1-L2LEAF2A_Ethernet2\n no shutdown\n channel-group 5 mode active\n!\n\ - interface Loopback0\n description EVPN_Overlay_Peering\n no shutdown\n ip\ - \ address 192.168.255.6/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ - \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n \ - \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.6/32\n!\ninterface Management1\n description oob_management\n\ - \ no shutdown\n vrf MGMT\n ip address 10.255.0.16/24\n!\ninterface Vlan110\n\ - \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.11.1/24\n\ - !\ninterface Vlan112\n description Tenant_A_OP_Zone_3\n no shutdown\n vrf\ - \ Tenant_A_OP_Zone\n ip address virtual 10.1.12.254/24\n!\ninterface Vlan120\n\ - \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n\ - !\ninterface Vlan121\n description Tenant_A_WEBZone_2\n no shutdown\n vrf\ - \ Tenant_A_WEB_Zone\n ip address virtual 10.1.21.1/24\n!\ninterface Vlan130\n\ - \ description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n\ - !\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf\ - \ Tenant_A_APP_Zone\n ip address virtual 10.1.31.254/24\n!\ninterface Vlan140\n\ - \ description Tenant_A_DB_BZone_1\n no shutdown\n vrf Tenant_A_DB_Zone\n\ - \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan141\n description Tenant_A_DB_Zone_2\n\ - \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.41.1/24\n\ - !\ninterface Vlan150\n description Tenant_A_WAN_Zone_1\n no shutdown\n vrf\ - \ Tenant_A_WAN_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface Vlan210\n\ - \ description Tenant_B_OP_Zone_1\n no shutdown\n vrf Tenant_B_OP_Zone\n\ - !\ninterface Vlan211\n description Tenant_B_OP_Zone_2\n no shutdown\n vrf\ - \ Tenant_B_OP_Zone\n ip address virtual 10.2.11.1/24\n!\ninterface Vlan250\n\ - \ description Tenant_B_WAN_Zone_1\n no shutdown\n vrf Tenant_B_WAN_Zone\n\ - \ ip address virtual 10.2.50.1/24\n!\ninterface Vlan310\n description Tenant_C_OP_Zone_1\n\ - \ no shutdown\n vrf Tenant_C_OP_Zone\n!\ninterface Vlan311\n description\ - \ Tenant_C_OP_Zone_2\n no shutdown\n vrf Tenant_C_OP_Zone\n!\ninterface Vlan350\n\ - \ description Tenant_C_WAN_Zone_1\n no shutdown\n vrf Tenant_C_WAN_Zone\n\ - !\ninterface Vlan3009\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.5/31\n\ - !\ninterface Vlan3010\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_WEB_Zone\n ip address 10.255.251.5/31\n\ - !\ninterface Vlan3011\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n ip address 10.255.251.5/31\n\ - !\ninterface Vlan3012\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip address 10.255.251.5/31\n\ - !\ninterface Vlan3013\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.5/31\n\ - !\ninterface Vlan3019\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.5/31\n\ - !\ninterface Vlan3020\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_B_WAN_Zone\n ip address 10.255.251.5/31\n\ - !\ninterface Vlan3029\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n ip address 10.255.251.5/31\n\ - !\ninterface Vlan3030\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone\n\ - \ no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.5/31\n\ - !\ninterface Vlan4093\n description MLAG_PEER_L3_PEERING\n no shutdown\n \ - \ mtu 1500\n ip address 10.255.251.5/31\n!\ninterface Vlan4094\n description\ - \ MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.5/31\n\ - !\ninterface Vxlan1\n description DC1-LEAF2B_VTEP\n vxlan source-interface\ - \ Loopback1\n vxlan virtual-router encapsulation mac-address mlag-system-id\n\ - \ vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n\ - \ vxlan vlan 112 vni 50112\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni\ - \ 10121\n vxlan vlan 130 vni 10130\n vxlan vlan 131 vni 10131\n vxlan vlan\ - \ 140 vni 10140\n vxlan vlan 141 vni 10141\n vxlan vlan 150 vni 10150\n \ - \ vxlan vlan 160 vni 55160\n vxlan vlan 161 vni 10161\n vxlan vlan 210 vni\ - \ 20210\n vxlan vlan 211 vni 20211\n vxlan vlan 250 vni 20250\n vxlan vlan\ - \ 310 vni 30310\n vxlan vlan 311 vni 30311\n vxlan vlan 350 vni 30350\n \ - \ vxlan vrf Tenant_A_APP_Zone vni 12\n vxlan vrf Tenant_A_DB_Zone vni 13\n \ - \ vxlan vrf Tenant_A_OP_Zone vni 10\n vxlan vrf Tenant_A_WAN_Zone vni 14\n\ - \ vxlan vrf Tenant_A_WEB_Zone vni 11\n vxlan vrf Tenant_B_OP_Zone vni 20\n\ - \ vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_OP_Zone vni 30\n\ - \ vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address 00:1c:73:00:dc:01\n\ - !\nip address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.6\n!\n\ - ip routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip routing\ - \ vrf Tenant_A_DB_Zone\nip routing vrf Tenant_A_OP_Zone\nip routing vrf Tenant_A_WAN_Zone\n\ - ip routing vrf Tenant_A_WEB_Zone\nip routing vrf Tenant_B_OP_Zone\nip routing\ - \ vrf Tenant_B_WAN_Zone\nip routing vrf Tenant_C_OP_Zone\nip routing vrf Tenant_C_WAN_Zone\n\ - !\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24\ - \ eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id\ - \ DC1_LEAF2\n local-interface Vlan4094\n peer-address 10.255.252.4\n peer-link\ - \ Port-Channel3\n reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip\ - \ route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP permit 10\n\ - \ match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN\ - \ permit 10\n description Make routes learned over MLAG Peer-link less preferred\ - \ on spines to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n\ - \ multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65102\n router-id\ - \ 192.168.255.6\n no bgp default ipv4-unicast\n distance bgp 20 200 200\n\ - \ graceful-restart restart-time 300\n graceful-restart\n maximum-paths 4\ - \ ecmp 4\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS\ - \ update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS\ - \ ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n\ - \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS\ - \ maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS\ - \ password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n\ - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ peer group\n neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65102\n neighbor\ - \ MLAG-IPv4-UNDERLAY-PEER next-hop-self\n neighbor MLAG-IPv4-UNDERLAY-PEER password\ - \ 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n\ - \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ neighbor 10.255.251.4 description DC1-LEAF2A\n neighbor 172.31.255.12 peer\ - \ group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.12 remote-as 65001\n neighbor\ - \ 172.31.255.12 description DC1-SPINE1_Ethernet4\n neighbor 172.31.255.14 peer\ - \ group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.14 remote-as 65001\n neighbor\ - \ 172.31.255.14 description DC1-SPINE2_Ethernet4\n neighbor 192.168.255.1 peer\ - \ group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor\ - \ 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n\ - \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description\ - \ DC1-SPINE2\n redistribute connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle\ - \ Tenant_A_APP_Zone\n rd 192.168.255.6:12\n route-target both 12:12\n\ - \ redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n\ - \ rd 192.168.255.6:13\n route-target both 13:13\n redistribute\ - \ learned\n vlan 140-141\n !\n vlan-aware-bundle Tenant_A_NFS\n \ - \ rd 192.168.255.6:10161\n route-target both 10161:10161\n redistribute\ - \ learned\n vlan 161\n !\n vlan-aware-bundle Tenant_A_OP_Zone\n \ - \ rd 192.168.255.6:10\n route-target both 10:10\n redistribute learned\n\ - \ vlan 110-112\n !\n vlan-aware-bundle Tenant_A_VMOTION\n rd 192.168.255.6:55160\n\ - \ route-target both 55160:55160\n redistribute learned\n vlan 160\n\ - \ !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd 192.168.255.6:14\n \ - \ route-target both 14:14\n redistribute learned\n vlan 150\n !\n\ - \ vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.6:11\n route-target\ - \ both 11:11\n redistribute learned\n vlan 120-121\n !\n vlan-aware-bundle\ - \ Tenant_B_OP_Zone\n rd 192.168.255.6:20\n route-target both 20:20\n\ - \ redistribute learned\n vlan 210-211\n !\n vlan-aware-bundle Tenant_B_WAN_Zone\n\ - \ rd 192.168.255.6:21\n route-target both 21:21\n redistribute\ - \ learned\n vlan 250\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n \ - \ rd 192.168.255.6:30\n route-target both 30:30\n redistribute learned\n\ - \ vlan 310-311\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.6:31\n\ - \ route-target both 31:31\n redistribute learned\n vlan 350\n \ - \ !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n\ - \ address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n \ - \ neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER\ - \ activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.6:12\n route-target\ - \ import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.6\n\ - \ neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.6:13\n route-target\ - \ import evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.6\n\ - \ neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.6:10\n route-target\ - \ import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.6\n\ - \ neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute\ - \ connected\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.6:14\n \ - \ route-target import evpn 14:14\n route-target export evpn 14:14\n \ - \ router-id 192.168.255.6\n neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.6:11\n\ - \ route-target import evpn 11:11\n route-target export evpn 11:11\n\ - \ router-id 192.168.255.6\n neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.6:20\n\ - \ route-target import evpn 20:20\n route-target export evpn 20:20\n\ - \ router-id 192.168.255.6\n neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.6:21\n\ - \ route-target import evpn 21:21\n route-target export evpn 21:21\n\ - \ router-id 192.168.255.6\n neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.6:30\n\ - \ route-target import evpn 30:30\n route-target export evpn 30:30\n\ - \ router-id 192.168.255.6\n neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.6:31\n\ - \ route-target import evpn 31:31\n route-target export evpn 31:31\n\ - \ router-id 192.168.255.6\n neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n\ - \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ - \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - DC1-AVD_DC1-SPINE1: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE1\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno enable\ - \ password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ - username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ - username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ - !\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet1\n\ - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.0/31\n\ - !\ninterface Ethernet2\n description P2P_LINK_TO_DC1-LEAF1B_Ethernet1\n no\ - \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.4/31\n!\n\ - interface Ethernet3\n description P2P_LINK_TO_DC1-LEAF2A_Ethernet1\n no shutdown\n\ - \ mtu 1500\n no switchport\n ip address 172.31.255.8/31\n!\ninterface Ethernet4\n\ - \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet1\n no shutdown\n mtu 1500\n\ - \ no switchport\n ip address 172.31.255.12/31\n!\ninterface Loopback0\n \ - \ description EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.1/32\n\ - !\ninterface Management1\n description oob_management\n no shutdown\n vrf\ - \ MGMT\n ip address 10.255.0.11/24\n!\nip routing\nno ip routing vrf MGMT\n\ - !\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24\ - \ eq 32\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP\ - \ permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter\ - \ bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n\ - \ router-id 192.168.255.1\n no bgp default ipv4-unicast\n distance bgp 20\ - \ 200 200\n graceful-restart restart-time 300\n graceful-restart\n maximum-paths\ - \ 4 ecmp 4\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS\ - \ next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS update-source Loopback0\n\ - \ neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop\ - \ 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor\ - \ EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes\ - \ 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS\ - \ password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n\ - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor 172.31.255.1\ - \ peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.1 remote-as 65101\n \ - \ neighbor 172.31.255.1 description DC1-LEAF1A_Ethernet1\n neighbor 172.31.255.5\ - \ peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.5 remote-as 65101\n \ - \ neighbor 172.31.255.5 description DC1-LEAF1B_Ethernet1\n neighbor 172.31.255.9\ - \ peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.9 remote-as 65102\n \ - \ neighbor 172.31.255.9 description DC1-LEAF2A_Ethernet1\n neighbor 172.31.255.13\ - \ peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.13 remote-as 65102\n\ - \ neighbor 172.31.255.13 description DC1-LEAF2B_Ethernet1\n neighbor 192.168.255.3\ - \ peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65101\n \ - \ neighbor 192.168.255.3 description DC1-LEAF1A\n neighbor 192.168.255.4 peer\ - \ group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65101\n neighbor\ - \ 192.168.255.4 description DC1-LEAF1B\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n\ - \ neighbor 192.168.255.5 remote-as 65102\n neighbor 192.168.255.5 description\ - \ DC1-LEAF2A\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n neighbor\ - \ 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description DC1-LEAF2B\n\ - \ redistribute connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n\ - \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n \ - \ no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS\ - \ activate\n!\nmanagement api http-commands\n protocol https\n no shutdown\n\ - \ !\n vrf MGMT\n no shutdown\n!\nend\n" - DC1-AVD_DC1-SPINE2: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE2\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno enable\ - \ password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ - username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ - username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ - !\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet2\n\ - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.2/31\n\ - !\ninterface Ethernet2\n description P2P_LINK_TO_DC1-LEAF1B_Ethernet2\n no\ - \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.6/31\n!\n\ - interface Ethernet3\n description P2P_LINK_TO_DC1-LEAF2A_Ethernet2\n no shutdown\n\ - \ mtu 1500\n no switchport\n ip address 172.31.255.10/31\n!\ninterface Ethernet4\n\ - \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet2\n no shutdown\n mtu 1500\n\ - \ no switchport\n ip address 172.31.255.14/31\n!\ninterface Loopback0\n \ - \ description EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.2/32\n\ - !\ninterface Management1\n description oob_management\n no shutdown\n vrf\ - \ MGMT\n ip address 10.255.0.12/24\n!\nip routing\nno ip routing vrf MGMT\n\ - !\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24\ - \ eq 32\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP\ - \ permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter\ - \ bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n\ - \ router-id 192.168.255.2\n no bgp default ipv4-unicast\n distance bgp 20\ - \ 200 200\n graceful-restart restart-time 300\n graceful-restart\n maximum-paths\ - \ 4 ecmp 4\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS\ - \ next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS update-source Loopback0\n\ - \ neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop\ - \ 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor\ - \ EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes\ - \ 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS\ - \ password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n\ - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor 172.31.255.3\ - \ peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.3 remote-as 65101\n \ - \ neighbor 172.31.255.3 description DC1-LEAF1A_Ethernet2\n neighbor 172.31.255.7\ - \ peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.7 remote-as 65101\n \ - \ neighbor 172.31.255.7 description DC1-LEAF1B_Ethernet2\n neighbor 172.31.255.11\ - \ peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.11 remote-as 65102\n\ - \ neighbor 172.31.255.11 description DC1-LEAF2A_Ethernet2\n neighbor 172.31.255.15\ - \ peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.15 remote-as 65102\n\ - \ neighbor 172.31.255.15 description DC1-LEAF2B_Ethernet2\n neighbor 192.168.255.3\ - \ peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65101\n \ - \ neighbor 192.168.255.3 description DC1-LEAF1A\n neighbor 192.168.255.4 peer\ - \ group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65101\n neighbor\ - \ 192.168.255.4 description DC1-LEAF1B\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n\ - \ neighbor 192.168.255.5 remote-as 65102\n neighbor 192.168.255.5 description\ - \ DC1-LEAF2A\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n neighbor\ - \ 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description DC1-LEAF2B\n\ - \ redistribute connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n\ - \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n \ - \ no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS\ - \ activate\n!\nmanagement api http-commands\n protocol https\n no shutdown\n\ - \ !\n vrf MGMT\n no shutdown\n!\nend\n" +CVP_CONFIGLETS: {} CVP_TOPOLOGY: DC1_FABRIC: parent_container: Tenant - DC1_L2LEAF1: - devices: - - DC1-L2LEAF1A - parent_container: DC1_L2LEAFS - DC1_L2LEAF2: - devices: - - DC1-L2LEAF2A - parent_container: DC1_L2LEAFS - DC1_L2LEAFS: - parent_container: DC1_FABRIC DC1_L3LEAFS: parent_container: DC1_FABRIC DC1_LEAF1: devices: - - DC1-LEAF1A - - DC1-LEAF1B + - DC1_LEAF-1A + - DC1_LEAF-1B parent_container: DC1_L3LEAFS DC1_LEAF2: devices: - - DC1-LEAF2A - - DC1-LEAF2B + - DC1_LEAF-2A + - DC1_LEAF-2B + parent_container: DC1_L3LEAFS + DC1_LEAF3: + devices: + - DC1_LEAF-3A + - DC1_LEAF-3B parent_container: DC1_L3LEAFS DC1_SPINES: devices: - - DC1-SPINE1 - - DC1-SPINE2 + - DC1_SPINE-1 + - DC1_SPINE-2 + - DC1_SPINE-3 + - DC1_SPINE-4 parent_container: DC1_FABRIC changed: false diff --git a/playbooks/dc1-fabric-deploy-cvp.yml b/playbooks/dc1-fabric-deploy-cvp.yml index 005ca01f7..8329c67b0 100644 --- a/playbooks/dc1-fabric-deploy-cvp.yml +++ b/playbooks/dc1-fabric-deploy-cvp.yml @@ -36,6 +36,6 @@ vars: container_root: 'DC1_FABRIC' configlets_prefix: 'DC1-AVD' - device_filter: 'DC1' + device_filter: 'DC1_' state: present cv_collection: v3 diff --git a/playbooks/dc1-fabric-reset-cvp.yml b/playbooks/dc1-fabric-reset-cvp.yml index bc3df7949..35e540fcf 100644 --- a/playbooks/dc1-fabric-reset-cvp.yml +++ b/playbooks/dc1-fabric-reset-cvp.yml @@ -1,5 +1,5 @@ --- -- name: Clenup CVP in default configuration +- name: Cleanup CVP in default configuration hosts: cv_server connection: local gather_facts: false @@ -13,5 +13,5 @@ vars: container_root: 'DC1_FABRIC' configlets_prefix: 'DC1-AVD' - device_filter: 'DC1-' + device_filter: 'DC1_' state: absent