02-03-2022 11:58 AM - edited 02-03-2022 12:08 PM
I am designing a lab topology within EVE-NG that mimic's a prod environment.. ..of course, in the real world, the prod environment uplinks are managed by BGP uplinks. My uplinks however to the WAN must be handled by my local home router. Because of this, My BGP peering ends at the Spine Routers where I advertised the default route 0.0.0.0/0 down stream, and I can confirm my Leaf switches are receiving the advertised 0.0.0.0/0 route through BGP, however; they cannot ping out to the WAN while the spine switches can.. ..I was assuming because I need to NAT-POOL the aggregation of addresses to the interfaces carrying my local private IP (192.168.0.X) to my PHYSICAL router.. ..However; I'm finding these switches do not support NAT and I must use these switches.. ..Is there another way I can provide WAN access to my leaf switches?
02-03-2022 01:11 PM
Hello,
keep in mind that we have no idea what the configurations of your routers and switches look like, all we see is a picture of a fairly large network. Post the full running configurations of all devices involved in your issue, and indicate what connectivity you want to establish.
02-03-2022 02:22 PM - edited 02-03-2022 02:35 PM
It's not clear from your description what the issue is.
If the WAN is the internet via your home router and the IPs are private IPs something has to NAT them but not clear why your router can't do that ?
As Georg says all we can see is a picture of a large network where half the devices aren't connected to anything and there is very little IP addressing so it's difficult to give any guidance.
Jon
02-03-2022 05:04 PM
if this is eve-ng, then add one more IOL router to topology do the NAT there.
example :
NET(hope this has internet access)---IOL---- 4 spine connection.
02-03-2022 05:11 PM - edited 02-03-2022 05:11 PM
Hello. I will confess that these are DellOS10 switches and unfortunately I confirmed they do not support NATTING, while the CLI is largely based on Cisco, the OS is entirely different. I was thinking of putting a Cisco router in the topology just before my physical router (the cloud) and connecting the Spine switches to it with a public IP between the Spines and the Cisco's, but I'm unsure if that will work...
Basically I am currently only worried about Spine1_G1, Spine2_G1, sw1001a and sw1001b
In short, Both Spine1 and Spine2 are able to connect to my home router and ping the WAN (8.8.8.8)
sw1001a and sw1001b are receiving the default route 0.0.0.0/0 through BGP into their routing table but those cannot ping 8.8.8.8 -- I was assuming that my Spine switches will need some sort of NATTING in this scenario:
Configs posted and also attached as attachments:
sw1001a
sw1001a# show running-configuration ! Version 10.5.2.3 ! Last configuration change at Feb 03 23:37:47 2022 ! ip vrf default ! system-user linuxadmin password **** iscsi target port 860 iscsi target port 3260 hostname sw1001a username admin password **** role sysadmin priv-lvl 15 aaa authentication login default local aaa authentication login console local ! class-map type application class-iscsi ! policy-map type application policy-iscsi ! virtual-network 10101 ! virtual-network 10201 ! virtual-network 10301 ! virtual-network 10401 ! virtual-network 10501 ! virtual-network 10601 ! virtual-network 11000 ! virtual-network 11001 ! virtual-network 13939 ! port-group 1/1/1 mode Eth 25g-4x ! port-group 1/1/2 mode Eth 25g-4x ! port-group 1/1/3 mode Eth 25g-4x ! port-group 1/1/4 mode Eth 25g-4x ! port-group 1/1/5 mode Eth 25g-4x ! port-group 1/1/6 mode Eth 25g-4x ! port-group 1/1/7 mode Eth 25g-4x ! port-group 1/1/8 mode Eth 25g-4x ! port-group 1/1/9 mode Eth 25g-4x ! port-group 1/1/10 mode Eth 25g-4x ! port-group 1/1/11 mode Eth 25g-4x ! port-group 1/1/12 mode Eth 25g-4x ! port-group 1/1/13 mode Eth 100g-2x ! port-group 1/1/14 mode Eth 100g-2x ! port-group 1/1/15 mode Eth 100g-1x ! port-group 1/1/16 mode Eth 100g-1x ! port-group 1/1/17 mode Eth 100g-1x ! port-group 1/1/18 mode Eth 100g-1x ! interface vlan1 no shutdown ip address dhcp vendor-class ZTD ! interface vlan101 virtual-network 10101 description Management_Vlan no shutdown mtu 9128 ! interface vlan201 virtual-network 10201 description VSAN_Vlan no shutdown mtu 9128 ! interface vlan301 virtual-network 10301 description vMotion_Vlan no shutdown mtu 9128 ! interface vlan401 virtual-network 10401 description NSX_T_Virtual_Edge_Tep no shutdown mtu 9128 ! interface vlan501 virtual-network 10501 description Host_TEP_Vlan no shutdown mtu 9128 ! interface vlan601 virtual-network 10601 description Edge_TEP_Vlan no shutdown mtu 9128 ! interface vlan901 description VCF_BGP_Peering no shutdown mtu 9216 ip address 10.60.100.129/27 ipv6 address xxxx:xxx:xxxx:d0:2::1/80 ! interface vlan1000 virtual-network 11000 description "NSX-T Virtual edge peering local VLAN" no shutdown mtu 9216 ! interface vlan1001 virtual-network 11001 description "NSX-T Virtual edge peering local VLAN" no shutdown mtu 9128 ! interface vlan3939 virtual-network 13939 description VxRail_Discovery_Vlan no shutdown ! interface vlan4000 description "VLT Peer L3 Underlay Path" no shutdown mtu 9128 ip address 10.60.96.128/31 ipv6 address xxxx:xxx:xxxx:d0:1::128/127 ! interface port-channel17 description Connected_to_Spine_s5g1_13.1 no shutdown no switchport mtu 9178 ip address 10.210.10.97/31 ipv6 address xxxx:xxx:xxx:b46::a61/127 ! interface port-channel18 description Connected_to_Spine_s13g1_14.1 no shutdown no switchport mtu 9178 ip address 10.210.14.97/31 ipv6 address xxxx:xxx:xxx:b46::e61/127 ! interface port-channel19 description Connected_to_Spine_s5g2_13.1 no shutdown no switchport mtu 9178 ip address 10.210.18.97/31 ipv6 address xxxx:xxx:xxx:b46::1261/127 ! interface port-channel20 description Connected_to_Spine_s13g2_29.1 no shutdown no switchport mtu 9178 ip address 10.210.22.97/31 ipv6 address xxxx:xxx:xxx:b46::1661/127 ! interface loopback0 description Loopback no shutdown mtu 9178 ip address 96.109.93.151/32 ipv6 address xxxx:xxx:xxx::2:0:197/128 ! interface loopback1 description HARDWARE_VXLAN no shutdown ip address 10.60.96.1/32 ! nve source-interface loopback1 ! interface mgmt1/1/1 no shutdown ip address dhcp vendor-class ZTD ipv6 address autoconfig ! interface ethernet1/1/1 description VLTi-link1 no shutdown no switchport flowcontrol receive off ! interface ethernet1/1/2 description VLTi-link1 no shutdown switchport mode trunk switchport access vlan 1 switchport trunk allowed vlan 101,201,301,401,501,601,901,1000-1001,3939 mtu 9216 flowcontrol receive off ! interface ethernet1/1/3 no shutdown switchport mode trunk switchport access vlan 1 switchport trunk allowed vlan 101,201,301,401,501,601,901,1000-1001,3939 mtu 9216 flowcontrol receive off ! interface ethernet1/1/4 no shutdown switchport mode trunk switchport access vlan 1 switchport trunk allowed vlan 101,201,301,401,501,601,901,1000-1001,3939 mtu 9216 flowcontrol receive off ! interface ethernet1/1/5 no shutdown switchport mode trunk switchport access vlan 1 switchport trunk allowed vlan 101,201,301,401,501,601,901,1000-1001,3939 mtu 9216 flowcontrol receive off ! interface ethernet1/1/6 no shutdown switchport mode trunk switchport access vlan 1 switchport trunk allowed vlan 101,201,301,401,501,601,901,1000-1001,3939 mtu 9216 flowcontrol receive off ! interface ethernet1/1/7 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/8 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/9 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/10 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/11 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/12 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/13 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/14 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/15 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/16 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/17 no shutdown channel-group 17 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/18 no shutdown channel-group 18 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/19 no shutdown channel-group 19 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/20 no shutdown channel-group 20 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/21 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/22 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/23 description "VLTi link1" no shutdown no switchport mtu 9216 flowcontrol receive off ! interface ethernet1/1/24 description "VLTi link1" no shutdown no switchport mtu 9216 flowcontrol receive off ! interface ethernet1/1/25 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/26 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/27 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/28 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/29 shutdown switchport access vlan 1 flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/30 shutdown switchport access vlan 1 flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/31 shutdown switchport access vlan 1 flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/32 shutdown switchport access vlan 1 flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/33 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/34 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/35 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/36 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/37 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/38 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/39 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/40 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/41 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/42 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/43 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/44 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/45 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/46 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/47 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/48 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/49 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/50 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/51 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/52 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/53 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/54 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/55 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/56 no shutdown switchport access vlan 1 flowcontrol receive off ! interface virtual-network10101 description Managment_VNI no shutdown mtu 9128 ip address 10.60.97.2/24 ip virtual-router address 10.60.97.1 ipv6 address xxxx:xxx:xxxx:d0:a::2/80 ipv6 virtual-router address xxxx:xxx:xxxx:d0:a::1 ! interface virtual-network10201 description VSAN_VNI no shutdown mtu 9128 ip address 10.60.100.34/27 ip virtual-router address 10.60.100.33 ! interface virtual-network10301 description vMotion_VNI no shutdown mtu 9128 ip address 10.60.100.2/27 ip virtual-router address 10.60.100.1 ! interface virtual-network10401 description VTEP_VNI no shutdown mtu 9128 ip address 10.60.98.2/26 ip virtual-router address 10.60.98.1 ! interface virtual-network10501 no shutdown mtu 9128 ip address 10.60.98.66/26 ip virtual-router address 10.60.98.65 ! interface virtual-network10601 description Edge_TEP_Vlan no shutdown mtu 9128 ip address 10.60.103.66/26 ip virtual-router address 10.60.103.65 ! interface virtual-network11000 description "NSX-T Virtual Edge Peering VLAN 1000" no shutdown mtu 9128 ip address 10.60.100.97/28 ipv6 address xxxx:xxx:xxxx:d0:8::1/80 ! interface virtual-network11001 description "NSX-T Virtual Edge Peering VLAN 1001" no shutdown mtu 9128 ip address 10.60.100.113/28 ipv6 address xxxx:xxx:xxxx:d0:9::1/80 ! logging source-interface mgmt1/1/1 ! management route 0.0.0.0/0 10.60.92.1 ! ip access-list XCLOUD-VTY-ACCESS seq 10 permit ip 10.54.35.208/32 any seq 20 permit ip 10.124.71.105/32 any seq 30 permit ip 68.87.23.34/32 any seq 40 permit ip 10.41.192.122/32 any seq 50 permit ip 165.137.122.210/32 any seq 60 permit ip 10.60.97.0/24 any seq 70 permit ip 10.60.98.0/26 any seq 80 permit ip 10.60.105.0/24 any seq 90 permit ip 10.60.106.0/26 any seq 100 permit ip 10.60.177.0/24 any seq 110 permit ip 10.60.178.0/26 any seq 120 permit ip 10.60.161.0/24 any seq 130 permit ip 10.60.162.0/26 any seq 140 permit ip 10.60.113.0/24 any seq 150 permit ip 10.60.114.0/26 any seq 160 permit ip 10.60.121.0/24 any seq 170 permit ip 10.60.122.0/26 any seq 200 permit ip 10.60.39.55/32 any seq 210 permit ip 10.30.0.0/16 any seq 220 permit ip 10.53.0.0/16 any seq 230 permit ip 10.166.0.0/16 any seq 240 permit ip 10.132.0.0/16 any seq 250 permit ip 10.6.28.0/22 any seq 260 permit ip 96.116.133.104/32 any seq 270 permit ip 96.118.251.70/32 any seq 280 permit ip 96.118.251.38/32 any seq 290 permit ip 96.116.134.8/32 any seq 1000 deny ip any any ! ipv6 access-list V6-XCLOUD-VTY-ACCESS seq 10 permit ipv6 xxxx:xxx::/35 any seq 11 permit ipv6 xxxx:xxx:1031:13::a36:23d0/128 any seq 20 permit ipv6 xxxx:xxx:1436:4:10:124:71:105/128 any seq 30 permit ipv6 xxxx:xxx:fc0c:0:f816:3eff:fe2b:7e9f/128 any seq 40 permit ipv6 xxxx:xxx:fc0c:0:f816:3eff:fe2d:f8c0/128 any seq 50 permit ipv6 xxxx:xxx:fc18:2:f816:3eff:fea9:fec9/128 any seq 60 permit ipv6 xxxx:xxx:fc18:2:f816:3eff:fe86:aa73/128 any seq 1000 deny ipv6 any any ! ip access-list XXXXXXX-ACCESS seq 10 permit ip 10.0.0.0/8 any seq 16 permit ip 100.88.0.0/13 any seq 20 permit ip 24.40.0.0/18 any seq 30 permit ip 24.40.64.0/20 any seq 35 permit ip 24.153.0.0/16 any seq 40 permit ip 68.85.0.0/16 any seq 50 permit ip 68.86.0.0/15 any seq 60 permit ip 69.139.128.0/17 any seq 65 permit ip 69.252.80.0/23 any seq 70 permit ip 69.252.194.14/32 any seq 80 permit ip 76.96.0.0/17 any seq 90 permit ip 96.108.0.0/14 any seq 100 permit ip 96.112.8.20/32 any seq 105 permit ip 96.112.192.26/32 any seq 110 permit ip 96.112.246.0/23 any seq 120 permit ip 96.114.8.133/32 any seq 125 permit ip 96.114.67.22/32 any seq 130 permit ip 96.114.153.101/32 any seq 140 permit ip 96.115.208.0/23 any seq 150 permit ip 147.191.0.0/16 any seq 160 permit ip 162.151.0.0/16 any seq 170 permit ip 165.137.0.0/16 any seq 180 permit ip 169.152.0.0/16 any seq 190 permit ip 172.16.0.0/12 any seq 210 permit udp any any eq 67 seq 220 permit udp any any eq 68 seq 230 permit udp any any eq 123 seq 1000 deny ip any any ! ipv6 access-list V6-XXXXXXX-ACCESS seq 5 permit ipv6 fe80::/10 any seq 10 permit ipv6 xxxx:xxx::/35 any seq 20 permit ipv6 xxxx:xxx:fe16:103:69:252:194:14/128 any seq 30 permit ipv6 xxxx:xxx:fe16:10c:96:114:8:133/128 any seq 40 permit ipv6 xxxx:xxx:fe33:1001:f816:3eff:fed3:5d7a/128 any seq 50 permit ipv6 2600:1f14:e0f:af00::/64 any seq 60 permit ipv6 2600:1f18:6de:e800::/64 any seq 70 deny ipv6 any any ! route-map local_origin_only permit 10 match as-path local_origin ! route-map V4_CORE_OUT permit 10 match ip address prefix-list V4-CONNECTED-PFX ! route-map V6_CORE_OUT permit 10 match ipv6 address prefix-list V6-CONNECTED-PFX ! router bgp xxxxxx6692 router-id x.x.x.x ! address-family ipv4 unicast aggregate-address 10.60.96.0/21 redistribute connected route-map V4_CORE_OUT ! address-family ipv6 unicast aggregate-address xxxx:xxx:xxxx:d0::/64 redistribute connected route-map V6_CORE_OUT ! neighbor 10.210.10.96 description Connected_To_Spine_s5g1 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast route-map local_origin_only out ! address-family ipv6 unicast ! neighbor 10.210.14.96 description Connected_To_Spine_s13g1 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast route-map local_origin_only out ! address-family ipv6 unicast ! neighbor 10.210.18.96 description Connected_To_Spine_s5g2 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast route-map local_origin_only out ! address-family ipv6 unicast ! neighbor 10.210.22.96 description Connected_To_Spine_s13g2 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast route-map local_origin_only out ! address-family ipv6 unicast ! neighbor xxxx:xxx:xxx:b46::a60 description Connected_To_Spine_s5g1 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate route-map local_origin_only out ! neighbor xxxx:xxx:xxx:b46::e60 description Connected_To_Spine_s13g1 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate route-map local_origin_only out ! neighbor xxxx:xxx:xxx:b46::1260 description Connected_To_Spine_s5g2 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate route-map local_origin_only out ! neighbor xxxx:xxx:xxx:b46::1660 description Connected_To_Spine_s13g2 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate route-map local_origin_only out ! neighbor 10.60.96.129 description Connected_To_Mgmt_Rack1_Leaf2 bfd remote-as xxxxxx6692 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:1::129 description Connected_To_Mgmt_Rack1_Leaf2 bfd remote-as xxxxxx6692 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate ! neighbor 10.60.100.130 description Connected_To_ESG1_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:2::2 description Connected_To_ESG1_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate ! neighbor 10.60.100.131 description Connected_To_ESG2_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:2::3 description Connected_To_ESG2_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate ! neighbor 10.60.100.132 description Connected_To_ESG3_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:2::4 description Connected_To_ESG3_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate ! neighbor 10.60.100.133 description Connected_To_ESG4_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:2::5 description Connected_To_ESG4_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate ! neighbor 10.60.100.110 description Connected_To_VirtualEdge1_Uplink1 bfd remote-as xxxxxx5107 timers 4 12 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:8::7 description Connected_To_VirtualEdge1_Uplink1 bfd remote-as xxxxxx5107 timers 4 12 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast ! vlt-domain 1 backup destination 10.60.92.5 discovery-interface ethernet1/1/23-1/1/24 peer-routing primary-priority 1 vlt-mac 00:00:00:11:11:11 ! line vty ip access-class XCLOUD-VTY-ACCESS ipv6 access-class V6-XCLOUD-VTY-ACCESS ! virtual-network 10101 description Management_VNI_10101 ! vxlan-vni 10101 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 10201 description VSAN_VNI_10201 ! vxlan-vni 10201 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 10301 description vMotion_VNI_10301 ! vxlan-vni 10301 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 10401 description NSX_VTEP_VNI_10401 ! vxlan-vni 10401 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 10501 description Host_TEP_VNI_10501 ! vxlan-vni 10501 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 10601 description Edge_TEP_VNI_10601 ! vxlan-vni 10601 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 11000 description NSX_T_Virtual_Edge_VNI ! vxlan-vni 11000 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 11001 description NSX_T_Virtual_Edge_VNI ! vxlan-vni 11001 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 13939 description VxRail_Discovery_VNI_13939 ! vxlan-vni 13939 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! snmp-server contact "Contact Support" ! telemetry
sw1001b
sw1001b# show running-configuration ! Version 10.5.2.3 ! Last configuration change at Feb 04 00:23:27 2022 ! ip vrf default ! system-user linuxadmin password **** iscsi target port 860 iscsi target port 3260 hostname sw1001b username admin password **** role sysadmin priv-lvl 15 aaa authentication login default local aaa authentication login console local ! class-map type application class-iscsi ! policy-map type application policy-iscsi ! virtual-network 10101 ! virtual-network 10201 ! virtual-network 10301 ! virtual-network 10401 ! virtual-network 10501 ! virtual-network 10601 ! virtual-network 11000 ! virtual-network 11001 ! virtual-network 13939 ! port-group 1/1/1 mode Eth 25g-4x ! port-group 1/1/2 mode Eth 25g-4x ! port-group 1/1/3 mode Eth 25g-4x ! port-group 1/1/4 mode Eth 25g-4x ! port-group 1/1/5 mode Eth 25g-4x ! port-group 1/1/6 mode Eth 25g-4x ! port-group 1/1/7 mode Eth 25g-4x ! port-group 1/1/8 mode Eth 25g-4x ! port-group 1/1/9 mode Eth 25g-4x ! port-group 1/1/10 mode Eth 25g-4x ! port-group 1/1/11 mode Eth 25g-4x ! port-group 1/1/12 mode Eth 25g-4x ! port-group 1/1/13 mode Eth 100g-2x ! port-group 1/1/14 mode Eth 100g-2x ! port-group 1/1/15 mode Eth 100g-1x ! port-group 1/1/16 mode Eth 100g-1x ! port-group 1/1/17 mode Eth 100g-1x ! port-group 1/1/18 mode Eth 100g-1x ! interface vlan1 shutdown ! interface vlan101 virtual-network 10101 description Management_Vlan no shutdown mtu 9128 ! interface vlan201 virtual-network 10201 description VSAN_Vlan no shutdown mtu 9128 ! interface vlan301 virtual-network 10301 description vMotion_Vlan no shutdown mtu 9128 ! interface vlan401 virtual-network 10401 description NSX_T_Virtual_Edge_Tep no shutdown mtu 9128 ! interface vlan501 virtual-network 10501 description Host_TEP_Vlan no shutdown mtu 9128 ! interface vlan601 virtual-network 10601 description Edge_TEP_Vlan no shutdown mtu 9128 ! interface vlan901 description VCF_BGP_Peering no shutdown mtu 9216 ip address 10.60.100.161/27 ipv6 address xxxx:xxx:xxxx:d0:3::1/80 ! interface vlan1000 virtual-network 11000 description "NSX-T Virtual edge peering local VLAN" no shutdown mtu 9216 ! interface vlan1001 virtual-network 11001 description "NSX-T Virtual edge peering local VLAN" no shutdown mtu 9128 ! interface vlan3939 virtual-network 13939 description VxRail_Discovery_Vlan no shutdown ! interface vlan4000 description "VLT Peer L3 Underlay Path" no shutdown mtu 9128 ip address 10.60.96.129/31 ipv6 address xxxx:xxx:xxxx:d0:1::129/127 ! interface port-channel17 description Connected_to_Spine_s5g1_13.1 no shutdown no switchport mtu 9178 ip address 10.210.10.99/31 ipv6 address xxxx:xxx:280:b46::a63/127 ! interface port-channel18 description Connected_to_Spine_s13g1_14.1 no shutdown no switchport mtu 9178 ip address 10.210.14.99/31 ipv6 address xxxx:xxx:280:b46::e63/127 ! interface port-channel19 description Connected_to_Spine_s5g2_13.1 no shutdown no switchport mtu 9178 ip address 10.210.18.99/31 ipv6 address xxxx:xxx:280:b46::1263/127 ! interface port-channel20 description Connected_to_Spine_s13g2_14.1 no shutdown no switchport mtu 9178 ip address 10.210.22.99/31 ipv6 address xxxx:xxx:280:b46::1663/127 ! interface loopback0 description Loopback no shutdown mtu 9178 ip address 96.109.93.152/31 ! interface loopback1 description HARDWARE_VXLAN no shutdown ip address 10.60.96.1/32 ! nve source-interface loopback1 ! interface mgmt1/1/1 no shutdown ipv6 address autoconfig ! interface ethernet1/1/1 description VLTi-link1 no shutdown no switchport mtu 9216 flowcontrol receive off ! interface ethernet1/1/2 description VLTi-link1 no shutdown switchport mode trunk switchport access vlan 1 switchport trunk allowed vlan 101,201,301,401,501,601,901,1000-1001,3939 mtu 9216 flowcontrol receive off ! interface ethernet1/1/3 no shutdown switchport mode trunk switchport access vlan 1 switchport trunk allowed vlan 101,201,301,401,501,601,901,1000-1001,3939 mtu 9216 flowcontrol receive off ! interface ethernet1/1/4 no shutdown switchport mode trunk switchport access vlan 1 switchport trunk allowed vlan 101,201,301,401,501,601,901,1000-1001,3939 mtu 9216 flowcontrol receive off ! interface ethernet1/1/5 no shutdown switchport mode trunk switchport access vlan 1 switchport trunk allowed vlan 101,201,301,401,501,601,901,1000-1001,3939 mtu 9216 flowcontrol receive off ! interface ethernet1/1/6 no shutdown switchport mode trunk switchport access vlan 1 switchport trunk allowed vlan 101,201,301,401,501,601,901,1000-1001,3939 mtu 9216 flowcontrol receive off ! interface ethernet1/1/7 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/8 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/9 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/10 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/11 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/12 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/13 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/14 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/15 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/16 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/17 no shutdown channel-group 17 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/18 no shutdown channel-group 18 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/19 no shutdown channel-group 19 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/20 no shutdown channel-group 20 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/21 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/22 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/23 description "VLTi link1" no shutdown no switchport mtu 9216 flowcontrol receive off ! interface ethernet1/1/24 description "VLTi link1" no shutdown no switchport mtu 9216 flowcontrol receive off ! interface ethernet1/1/25 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/26 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/27 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/28 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/29 shutdown switchport access vlan 1 flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/30 shutdown switchport access vlan 1 flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/31 shutdown switchport access vlan 1 flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/32 shutdown switchport access vlan 1 flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/33 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/34 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/35 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/36 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/37 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/38 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/39 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/40 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/41 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/42 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/43 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/44 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/45 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/46 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/47 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/48 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/49 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/50 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/51 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/52 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/53 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/54 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/55 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/56 no shutdown switchport access vlan 1 flowcontrol receive off ! interface virtual-network10101 description Managment_VNI no shutdown mtu 9128 ip address 10.60.97.3/24 ip virtual-router address 10.60.97.1 ipv6 address xxxx:xxx:xxxx:d0:a::3/80 ipv6 virtual-router address xxxx:xxx:xxxx:d0:a::1 ! interface virtual-network10201 description VSAN_VNI no shutdown mtu 9128 ip address 10.60.100.35/27 ip virtual-router address 10.60.100.33 ! interface virtual-network10301 description vMotion_VNI no shutdown mtu 9128 ip address 10.60.100.3/27 ip virtual-router address 10.60.100.1 ! interface virtual-network10401 description VTEP_VNI no shutdown mtu 9128 ip address 10.60.98.3/26 ip virtual-router address 10.60.98.1 ! interface virtual-network10501 no shutdown mtu 9128 ip address 10.60.98.67/26 ip virtual-router address 10.60.98.65 ! interface virtual-network10601 description Edge_TEP_Vlan no shutdown mtu 9128 ip address 10.60.103.67/26 ip virtual-router address 10.60.103.65 ! interface virtual-network11000 description "NSX-T Virtual Edge Peering VLAN 1000" no shutdown mtu 9128 ip address 10.60.100.98/28 ipv6 address xxxx:xxx:xxxx:d0:8::2/80 ! interface virtual-network11001 description "NSX-T Virtual Edge Peering VLAN 1001" no shutdown mtu 9128 ip address 10.60.100.114/28 ipv6 address xxxx:xxx:xxxx:d0:9::2/80 ! logging source-interface mgmt1/1/1 ! management route 0.0.0.0/0 10.60.92.1 ! ip access-list XCLOUD-VTY-ACCESS seq 10 permit ip 10.54.35.208/32 any seq 20 permit ip 10.124.71.105/32 any seq 30 permit ip 68.87.23.34/32 any seq 40 permit ip 10.41.192.122/32 any seq 50 permit ip 165.137.122.210/32 any seq 60 permit ip 10.60.97.0/24 any seq 70 permit ip 10.60.98.0/26 any seq 80 permit ip 10.60.105.0/24 any seq 90 permit ip 10.60.106.0/26 any seq 100 permit ip 10.60.177.0/24 any seq 110 permit ip 10.60.178.0/26 any seq 120 permit ip 10.60.161.0/24 any seq 130 permit ip 10.60.162.0/26 any seq 140 permit ip 10.60.113.0/24 any seq 150 permit ip 10.60.114.0/26 any seq 160 permit ip 10.60.121.0/24 any seq 170 permit ip 10.60.122.0/26 any seq 200 permit ip 10.60.39.55/32 any seq 210 permit ip 10.30.0.0/16 any seq 220 permit ip 10.53.0.0/16 any seq 230 permit ip 10.166.0.0/16 any seq 240 permit ip 10.132.0.0/16 any seq 250 permit ip 10.6.28.0/22 any seq 260 permit ip 96.116.133.104/32 any seq 270 permit ip 96.118.251.70/32 any seq 280 permit ip 96.118.251.38/32 any seq 290 permit ip 96.116.134.8/32 any seq 1000 deny ip any any ! ipv6 access-list V6-XCLOUD-VTY-ACCESS seq 10 permit ipv6 xxxx:xxx::/35 any seq 11 permit ipv6 xxxx:xxx:1031:13::a36:23d0/128 any seq 20 permit ipv6 xxxx:xxx:1436:4:10:124:71:105/128 any seq 30 permit ipv6 xxxx:xxx:fc0c:0:f816:3eff:fe2b:7e9f/128 any seq 40 permit ipv6 xxxx:xxx:fc0c:0:f816:3eff:fe2d:f8c0/128 any seq 50 permit ipv6 xxxx:xxx:fc18:2:f816:3eff:fea9:fec9/128 any seq 60 permit ipv6 xxxx:xxx:fc18:2:f816:3eff:fe86:aa73/128 any seq 1000 deny ipv6 any any ! ip access-list XXXXXX-ACCESS seq 10 permit ip 10.0.0.0/8 any seq 16 permit ip 100.88.0.0/13 any seq 20 permit ip 24.40.0.0/18 any seq 30 permit ip 24.40.64.0/20 any seq 35 permit ip 24.153.0.0/16 any seq 40 permit ip 68.85.0.0/16 any seq 50 permit ip 68.86.0.0/15 any seq 60 permit ip 69.139.128.0/17 any seq 65 permit ip 69.252.80.0/23 any seq 70 permit ip 69.252.194.14/32 any seq 80 permit ip 76.96.0.0/17 any seq 90 permit ip 96.108.0.0/14 any seq 100 permit ip 96.112.8.20/32 any seq 105 permit ip 96.112.192.26/32 any seq 110 permit ip 96.112.246.0/23 any seq 120 permit ip 96.114.8.133/32 any seq 125 permit ip 96.114.67.22/32 any seq 130 permit ip 96.114.153.101/32 any seq 140 permit ip 96.115.208.0/23 any seq 150 permit ip 147.191.0.0/16 any seq 160 permit ip 162.151.0.0/16 any seq 170 permit ip 165.137.0.0/16 any seq 180 permit ip 169.152.0.0/16 any seq 190 permit ip 172.16.0.0/12 any seq 210 permit udp any any eq 67 seq 220 permit udp any any eq 68 seq 230 permit udp any any eq 123 seq 1000 deny ip any any ! ipv6 access-list V6-XXXXXX-ACCESS seq 5 permit ipv6 fe80::/10 any seq 10 permit ipv6 xxxx:xxx::/35 any seq 20 permit ipv6 xxxx:xxx:fe16:103:69:252:194:14/128 any seq 30 permit ipv6 xxxx:xxx:fe16:10c:96:114:8:133/128 any seq 40 permit ipv6 xxxx:xxx:fe33:1001:f816:3eff:fed3:5d7a/128 any seq 50 permit ipv6 2600:1f14:e0f:af00::/64 any seq 60 permit ipv6 2600:1f18:6de:e800::/64 any seq 70 deny ipv6 any any ! route-map local_origin_only permit 10 match as-path local_origin ! route-map V4_CORE_OUT permit 10 match ip address prefix-list V4-CONNECTED-PFX ! route-map V6_CORE_OUT permit 10 match ipv6 address prefix-list V6-CONNECTED-PFX ! router bgp xxxxxx6692 router-id 96.109.93.152 ! address-family ipv4 unicast aggregate-address 10.60.96.0/21 redistribute connected route-map V4_CORE_OUT ! address-family ipv6 unicast aggregate-address xxxx:xxx:xxxx:d0::/64 redistribute connected route-map V6_CORE_OUT ! neighbor 10.210.14.96 description Connected_To_Spine_s13g1 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast route-map local_origin_only out ! address-family ipv6 unicast ! neighbor 10.210.22.96 description Connected_To_Spine_s13g2 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast route-map local_origin_only out ! address-family ipv6 unicast ! neighbor xxxx:xxx:280:b46::a60 description Connected_To_Spine_s5g1 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate route-map local_origin_only out ! neighbor xxxx:xxx:280:b46::e60 description Connected_To_Spine_s13g1 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate route-map local_origin_only out ! neighbor xxxx:xxx:280:b46::1260 description Connected_To_Spine_s5g2 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate route-map local_origin_only out ! neighbor xxxx:xxx:280:b46::1660 description Connected_To_Spine_s13g2 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate route-map local_origin_only out ! neighbor 10.60.100.130 description Connected_To_ESG1_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:2::2 description Connected_To_ESG1_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate ! neighbor 10.60.100.131 description Connected_To_ESG2_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:2::3 description Connected_To_ESG2_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate ! neighbor 10.60.100.132 description Connected_To_ESG3_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:2::4 description Connected_To_ESG3_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate ! neighbor 10.60.100.133 description Connected_To_ESG4_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:2::5 description Connected_To_ESG4_Uplink1 bfd remote-as xxxxxx5108 timers 4 12 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate ! neighbor 10.60.100.110 description Connected_To_VirtualEdge1_Uplink1 bfd remote-as xxxxxx5107 timers 4 12 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:8::7 description Connected_To_VirtualEdge1_Uplink1 bfd remote-as xxxxxx5107 timers 4 12 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast ! neighbor 10.60.96.128 description Connected_To_Mgmt_Rack1_Leaf1 bfd remote-as xxxxxx6692 no shutdown ! address-family ipv4 unicast ! neighbor xxxx:xxx:xxxx:d0:1::128 description Connected_To_Mgmt_Rack1_Leaf1 bfd remote-as xxxxxx6692 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate ! neighbor 10.210.10.98 description Connected_To_Spine_s5g1 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast route-map local_origin_only out ! address-family ipv6 unicast ! neighbor 10.210.18.98 description Connected_To_Spine_s5g2 remote-as xxxxxx6528 timers 3 10 no shutdown ! address-family ipv4 unicast route-map local_origin_only out ! address-family ipv6 unicast ! vlt-domain 1 backup destination 10.60.92.4 discovery-interface ethernet1/1/23-1/1/24 peer-routing primary-priority 1 vlt-mac 00:00:00:11:11:11 ! line vty ip access-class XCLOUD-VTY-ACCESS ipv6 access-class V6-XCLOUD-VTY-ACCESS ! virtual-network 10101 description Management_VNI_10101 ! vxlan-vni 10101 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 10201 description VSAN_VNI_10201 ! vxlan-vni 10201 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 10301 description vMotion_VNI_10301 ! vxlan-vni 10301 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 10401 description NSX_VTEP_VNI_10401 ! vxlan-vni 10401 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 10501 description Host_TEP_VNI_10501 ! vxlan-vni 10501 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 10601 description Edge_TEP_VNI_10601 ! vxlan-vni 10601 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 11000 description NSX_T_Virtual_Edge_VNI ! vxlan-vni 11000 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 11001 description NSX_T_Virtual_Edge_VNI ! vxlan-vni 11001 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! virtual-network 13939 description VxRail_Discovery_VNI_13939 ! vxlan-vni 13939 ! remote-vtep 10.60.96.2 ! remote-vtep 10.60.96.3 ! snmp-server contact "Contact Support" ! telemetry sw1001b#
Spine1_G1
s5g1# show running-configuration ! Version 10.5.2.3 ! Last configuration change at Feb 03 23:38:11 2022 ! ip vrf default ! system-user linux++++admin password **** iscsi target port 860 iscsi target port 3260 hostname s5g1 username admin password **** role sysadmin priv-lvl 15 aaa authentication login default local aaa authentication login console local ! class-map type application class-iscsi ! policy-map type application policy-iscsi ! port-group 1/1/1 mode Eth 25g-4x ! port-group 1/1/2 mode Eth 25g-4x ! port-group 1/1/3 mode Eth 25g-4x ! port-group 1/1/4 mode Eth 25g-4x ! port-group 1/1/5 mode Eth 25g-4x ! port-group 1/1/6 mode Eth 25g-4x ! port-group 1/1/7 mode Eth 25g-4x ! port-group 1/1/8 mode Eth 25g-4x ! port-group 1/1/9 mode Eth 25g-4x ! port-group 1/1/10 mode Eth 25g-4x ! port-group 1/1/11 mode Eth 25g-4x ! port-group 1/1/12 mode Eth 25g-4x ! port-group 1/1/13 mode Eth 100g-2x ! port-group 1/1/14 mode Eth 100g-2x ! port-group 1/1/15 mode Eth 100g-1x ! port-group 1/1/16 mode Eth 100g-1x ! port-group 1/1/17 mode Eth 100g-1x ! port-group 1/1/18 mode Eth 100g-1x ! interface vlan1 no shutdown ! interface port-channel13 description Connected_to_Leaf_sw1001a_17.1 no shutdown no switchport mtu 9178 ip address 10.210.10.96/31 ipv6 address xxxx:xxx:xxx:b46::a60/127 ! interface port-channel14 description Connected_to_Leaf_sw1001b_17.1 no shutdown no switchport mtu 9178 ip address 10.210.10.98/31 ipv6 address xxxx:xxx:xxx:b46::a62/127 ! interface mgmt1/1/1 no shutdown ip address dhcp ipv6 address autoconfig ! interface ethernet1/1/1 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/2 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/3 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/4 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/5 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/6 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/7 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/8 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/9 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/10 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/11 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/12 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/13 no shutdown channel-group 13 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/14 no shutdown channel-group 14 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/15 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/16 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/17 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/18 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/19 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/20 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/21 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/22 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/23 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/24 no shutdown no switchport ip address dhcp flowcontrol receive off ! interface ethernet1/1/25 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/26 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/27 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/28 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/29 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/30 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/31 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/32 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/33 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/34 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/35 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/36 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/37 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/38 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/39 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/40 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/41 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/42 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/43 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/44 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/45 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/46 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/47 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/48 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/49 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/50 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/51 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/52 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/53 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/54 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/55 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/56 no shutdown switchport access vlan 1 flowcontrol receive off ! ip route 0.0.0.0/0 192.168.0.1 ! router bgp xxxxxx6528 ! address-family ipv4 unicast network 192.168.0.0/24 ! neighbor 10.210.10.97 description Connected_To_Leaf_sw1001a remote-as xxxxxx6692 timers 3 10 no shutdown ! address-family ipv4 unicast default-originate ! address-family ipv6 unicast ! neighbor 10.210.10.99 description Connected_To_Leaf_sw1001b remote-as xxxxxx6692 timers 3 10 no shutdown ! address-family ipv4 unicast default-originate ! address-family ipv6 unicast ! snmp-server contact "Contact Support" ! telemetry
Spine2_G1
s5g2# show running-configuration ! Version 10.5.2.3 ! Last configuration change at Feb 04 00:45:09 2022 ! ip vrf default ! system-user linuxadmin password **** iscsi target port 860 iscsi target port 3260 hostname s5g2 username admin password **** role sysadmin priv-lvl 15 aaa authentication login default local aaa authentication login console local ! class-map type application class-iscsi ! policy-map type application policy-iscsi ! port-group 1/1/1 mode Eth 25g-4x ! port-group 1/1/2 mode Eth 25g-4x ! port-group 1/1/3 mode Eth 25g-4x ! port-group 1/1/4 mode Eth 25g-4x ! port-group 1/1/5 mode Eth 25g-4x ! port-group 1/1/6 mode Eth 25g-4x ! port-group 1/1/7 mode Eth 25g-4x ! port-group 1/1/8 mode Eth 25g-4x ! port-group 1/1/9 mode Eth 25g-4x ! port-group 1/1/10 mode Eth 25g-4x ! port-group 1/1/11 mode Eth 25g-4x ! port-group 1/1/12 mode Eth 25g-4x ! port-group 1/1/13 mode Eth 100g-2x ! port-group 1/1/14 mode Eth 100g-2x ! port-group 1/1/15 mode Eth 100g-1x ! port-group 1/1/16 mode Eth 100g-1x ! port-group 1/1/17 mode Eth 100g-1x ! port-group 1/1/18 mode Eth 100g-1x ! interface vlan1 no shutdown ! interface port-channel13 description Connected-to-Leaf-sw1001a-19.1 no shutdown no switchport mtu 9178 ip address 10.210.18.96/31 ipv6 address xxxx:xxx:xxx:b46::1660/127 ! interface port-channel14 description Connected-to-Leaf-sw1001b-19.1 no shutdown no switchport mtu 9178 ip address 10.210.18.98/31 ipv6 address xxxx:xxx:xxx:b46::1262/127 ! interface mgmt1/1/1 no shutdown ip address dhcp ipv6 address autoconfig ! interface ethernet1/1/1 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/2 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/3 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/4 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/5 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/6 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/7 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/8 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/9 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/10 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/11 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/12 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/13 no shutdown channel-group 13 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/14 no shutdown channel-group 14 mode active fec off no switchport mtu 9178 negotiation off flowcontrol receive off no lldp tlv-select basic-tlv management-address ipv4 no lldp tlv-select basic-tlv management-address ipv6 ! interface ethernet1/1/15 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/16 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/17 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/18 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/19 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/20 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/21 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/22 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/23 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/24 no shutdown no switchport ip address dhcp flowcontrol receive off ! interface ethernet1/1/25 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/26 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/27 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/28 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/29 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/30 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/31 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/32 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/33 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/34 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/35 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/36 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/37 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/38 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/39 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/40 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/41 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/42 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/43 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/44 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/45 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/46 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/47 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/48 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/49 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/50 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/51 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/52 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/53 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/54 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/55 no shutdown switchport access vlan 1 flowcontrol receive off ! interface ethernet1/1/56 no shutdown switchport access vlan 1 flowcontrol receive off ! ip route 0.0.0.0/0 192.168.0.1 ! router bgp xxxxxx6528 ! address-family ipv4 unicast network 10.60.0.0/16 network 192.168.0.0/24 ! neighbor 10.210.18.97 description Connected_To_Leaf_sw1001a remote-as xxxxxx6692 timers 3 10 no shutdown ! address-family ipv4 unicast default-originate ! address-family ipv6 unicast ! neighbor xxxx:xxx:xxx:b46::a61 description Connected_To_Leaf_sw1001a remote-as xxxxxx6692 timers 3 10 no shutdown ! address-family ipv4 unicast no activate ! address-family ipv6 unicast activate route-map local_origin_only out ! neighbor 10.210.18.99 description Connected_To_Leaf_sw1001b_19.1 remote-as xxxxxx6692 timers 3 10 no shutdown ! address-family ipv4 unicast default-originate ! address-family ipv6 unicast ! snmp-server contact "Contact Support" !
02-03-2022 05:27 PM
Too a big post to read, in short, since switches got IP addresses from your broadband router, it works. rest of the network it will not, that is the reason suggested IOL router can do NAT for all devices. (make sense ?)
02-03-2022 05:31 PM
Yes. Do I need to put a public subnet between the IOL and the Spine's ?
02-03-2022 11:16 PM
Hello
@MikeAW2010 wrote:
Basically I am currently only worried about Spine1_G1, Spine2_G1, sw1001a and sw1001b
In short, Both Spine1 and Spine2 are able to connect to my home router and ping the WAN (8.8.8.8
How can this be? All devices point via "NET" so what is spine1/2 being natted by , use whatever device that is to perform network translation for spine1_G1, Spine2_G1
02-04-2022 12:01 AM
IOL router does the router outside interface (which get IP address from your DSL router) , internally you can use any RFC 1918 address space - in short?
is that works /
02-04-2022 12:11 AM - edited 02-04-2022 12:15 AM
As Paul has said and I have already mentioned if the spines can ping the WAN then something must be doing the NAT for the 10.x.x.x IPs which I suspect is your home router so just use that device to NAT the leaf switches.
If you can't use the home router, perhaps because it only does NAT for directly connected subnets, then use an IOL router and no you don't need a public subnet, just make sure the WAN side of the IOL router is in the same subnet as the LAN side of your home router and NAT all devices to the WAN IP of your IOL device.
That should work but still not clear what is actually doing what in your lab.
Jon
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide