Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Mohamed Anees Mohammed Abdulla
08-28-2017
Stats
Member since
07-19-2006
52
Posts
93
Helpful
3
Solutions
Created by
Mohamed Anees Mohammed Abdulla
in Data Center Documents
in Data Center Documents
10-07-2013
10:06 PM
10-07-2013
10:06 PM
Introduction This document describes options for deployment of vPC Peer Switch. When a Virtual Port Channel (vPC) is configured and operational, the Spanning Tree Protocol (STP) continues running on both vPC peer devices. The vPC peer switch is introduced to address performance concerns around these STP convergence events. Prerequisites Familiarity and understanding of Nexus switches and Spanning tree protocol. Related Information Nexus 1000v Port-Channel Best Practices
... View more
Labels:
Created by
Mohamed Anees Mohammed Abdulla
in Data Center Documents
in Data Center Documents
10-07-2013
10:00 PM
10-07-2013
10:00 PM
Labels:
Created by
Mohamed Anees Mohammed Abdulla
in Server Networking
in Server Networking
08-20-2013
09:02 PM
08-20-2013
09:02 PM
Hi Raviraj, Please review this document and let me know if that answers your question. https://supportforums.cisco.com/docs/DOC-35772 Thanks, Anees.
... View more
Created by
Mohamed Anees Mohammed Abdulla
in Server Networking
in Server Networking
08-20-2013
09:01 PM
08-20-2013
09:01 PM
Hi Jerry, I have published this document. https://supportforums.cisco.com/docs/DOC-35772 Please let me know if you have any questions. Thanks, Anees.
... View more
Created by
Mohamed Anees Mohammed Abdulla
in Data Center Documents
in Data Center Documents
08-20-2013
07:13 PM
08-20-2013
07:13 PM
This document provides the configuration example for deploying OTV in the Data Centers having multiple VRFs. Topology There are two Aggregation VDCs in each data center having three VRFs Web, App and DB. Both the Data Centers are connected via two 10 Gig circuits connected directly to the Aggregation Layer switches. Configuration Main purpose of this document is to show OTV related configuration both at the OTV VDC and at the Aggregation VDCs. There are three vlans 701, 750 and 775 are extended between the two Data Centers through OTV. These VLANs have SVIs at the aggregation layer corresponds to the three different VRFs. OTV join interface in the OTV VDC is configured in the default VRF. OTV join interface in the Aggregation VDC is configured in the App VRF. The choice of VRF is depends on the customer network. The Layer 3 VRFs are extended between the two Data Centers and OSPF is the IGP protocol. OTV Adjacency Server Unicast is used in this configuration example. Data Center 1 - Aggregation - 1 hostname DC1-N7K-AGG-01 ! vrf context web vrf context app vrf context db vrf context vpckeepalive ! vlan 900 name native-vlan ! vlan 453 name otv-site-vlan ! vlan 701 name web ! vlan 750 name app ! vlan 775 name db ! interface port-channel3 description vPC Peer Keep Alive vrf member vpckeepalive no ip redirects ip address 192.168.1.1/30 ! interface Ethernet1/1 description vPC Peer Keep Alive channel-group 3 mode active no shutdown ! interface Ethernet2/1 description vPC Peer Keep Alive channel-group 3 mode active no shutdown ! vpc domain 11 peer-switch role priority 10 system-priority 4096 peer-keepalive destination 192.168.1.2 source 192.168.1.1 vrf vpckeepalive peer-gateway auto-recovery ip arp synchronize ! interface port-channel2 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 900 spanning-tree port type network vpc peer-link ! interface Ethernet3/1 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 900 rate-mode dedicated force channel-group 2 mode active no shutdown ! interface Ethernet4/1 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 900 rate-mode dedicated force channel-group 2 mode active no shutdown ! interface port-channel13 description OTV Internal Interface – OTV-VDC-1 switchport switchport mode trunk switchport trunk native vlan 900 vpc 13 ! interface Ethernet7/25 switchport switchport mode trunk switchport trunk native vlan 900 channel-group 13 mode active no shutdown ! interface port-channel14 description OTV Internal Interface – OTV-VDC-2 switchport switchport mode trunk switchport trunk native vlan 900 vpc 14 ! interface Ethernet8/25 switchport switchport mode trunk switchport trunk native vlan 900 channel-group 14 mode active no shutdown ! interface Vlan701 no shutdown description Web VLAN vrf member web no ip redirects ip address 10.16.1.2/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 701 preempt priority 200 ip 10.16.1.1 ! interface Vlan750 no shutdown description App VLAN vrf member app no ip redirects ip address 10.17.1.2/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 750 preempt priority 200 ip 10.17.1.1 ! interface Vlan775 no shutdown description DB VLAN vrf member db no ip redirects ip address 10.18.1.2/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 775 preempt priority 200 ip 10.18.1.1 ! interface port-channel12 description OTV Join Interface – OTV-VDC-1 mtu 9216 vrf member app no ip redirects ip address 10.3.0.49/30 ip router ospf 100 area 0.0.0.0 ! interface Ethernet8/18 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet9/18 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet3/17 description To Data-Center-2 Aggregation-1 VDC mtu 9216 no shutdown ! interface Ethernet3/17.725 encapsulation dot1q 725 vrf member web ip address 10.16.0.13/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/17.750 mtu 9216 encapsulation dot1q 750 vrf member app ip address 10.17.0.13/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/17.775 encapsulation dot1q 775 vrf member db ip address 10.18.0.13/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1 description Layer 3 Between Nexus 7ks mtu 9216 no shutdown ! interface port-channel1.725 encapsulation dot1q 725 vrf member web no ip redirects ip address 10.16.0.9/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1.750 mtu 9216 encapsulation dot1q 750 vrf member app no ip redirects ip address 10.17.0.9/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1.775 encapsulation dot1q 775 vrf member db no ip redirects ip address 10.18.0.9/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/25 description Layer 3 Between Nexus 7ks mtu 9216 channel-group 1 mode active no shutdown ! interface Ethernet4/25 description Layer 3 Between Nexus 7ks mtu 9216 channel-group 1 mode active no shutdown ! interface loopback1 description web-loopback vrf member web ip address 10.16.0.254/32 ip router ospf 100 area 0.0.0.0 ! interface loopback2 description app-loopback vrf member app ip address 10.17.0.254/32 ip router ospf 100 area 0.0.0.0 interface loopback3 description db-loopback vrf member db ip address 10.18.0.254/32 ip router ospf 100 area 0.0.0.0 ! router ospf 100 vrf web router-id 10.16.0.254 passive-interface default vrf app router-id 10.17.0.254 passive-interface default vrf db router-id 10.18.0.254 passive-interface default Data Center 1 - Aggregation - 2 hostname DC1-N7K-AGG-02 ! vrf context web vrf context app vrf context db vrf context vpckeepalive ! vlan 900 name native-vlan ! vlan 453 name otv-site-vlan ! vlan 701 name web ! vlan 750 name app ! vlan 775 name db ! interface port-channel3 description vPC Peer Keep Alive vrf member vpckeepalive no ip redirects ip address 192.168.1.2/30 ! interface Ethernet1/1 description vPC Peer Keep Alive channel-group 3 mode active no shutdown ! interface Ethernet2/1 description vPC Peer Keep Alive channel-group 3 mode active no shutdown ! vpc domain 11 peer-switch role priority 100 system-priority 4096 peer-keepalive destination 192.168.1.1 source 192.168.1.2 vrf vpckeepalive peer-gateway auto-recovery ip arp synchronize ! interface port-channel2 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 900 spanning-tree port type network vpc peer-link ! interface Ethernet3/1 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 900 rate-mode dedicated force channel-group 2 mode active no shutdown ! interface Ethernet4/1 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 900 rate-mode dedicated force channel-group 2 mode active no shutdown ! interface port-channel13 description OTV Internal Interface – OTV-VDC-1 switchport switchport mode trunk switchport trunk native vlan 900 vpc 13 ! interface Ethernet7/25 switchport switchport mode trunk switchport trunk native vlan 900 channel-group 13 mode active no shutdown ! interface port-channel14 description OTV Internal Interface – OTV-VDC-2 switchport switchport mode trunk switchport trunk native vlan 900 vpc 14 ! interface Ethernet8/25 switchport switchport mode trunk switchport trunk native vlan 900 channel-group 14 mode active no shutdown ! interface Vlan701 no shutdown description Web VLAN vrf member web no ip redirects ip address 10.16.1.3/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 701 ip 10.16.1.1 ! interface Vlan750 no shutdown description App VLAN vrf member app no ip redirects ip address 10.17.1.3/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 750 ip 10.17.1.1 ! interface Vlan775 no shutdown description DB VLAN vrf member db no ip redirects ip address 10.18.1.3/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 775 ip 10.18.1.1 ! interface port-channel12 description OTV Join Interface – OTV-VDC-2 mtu 9216 vrf member trusted no ip redirects ip address 10.3.0.53/30 ip router ospf 100 area 0.0.0.0 ! interface Ethernet8/18 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet9/18 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet3/17 description To Data-Center-2 Aggregation-2 VDC mtu 9216 no shutdown ! interface Ethernet3/17.725 encapsulation dot1q 725 vrf member web ip address 10.16.0.17/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/17.750 mtu 9216 encapsulation dot1q 750 vrf member app ip address 10.17.0.17/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/17.775 encapsulation dot1q 775 vrf member db ip address 10.18.0.17/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1 description Layer 3 Between Nexus 7ks mtu 9216 no shutdown ! interface port-channel1.725 encapsulation dot1q 725 vrf member web no ip redirects ip address 10.16.0.10/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1.750 mtu 9216 encapsulation dot1q 750 vrf member app no ip redirects ip address 10.17.0.10/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1.775 encapsulation dot1q 775 vrf member db no ip redirects ip address 10.18.0.10/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/25 description Layer 3 Between Nexus 7ks mtu 9216 channel-group 1 mode active no shutdown ! interface Ethernet4/25 description Layer 3 Between Nexus 7ks mtu 9216 channel-group 1 mode active no shutdown ! interface loopback1 description web-loopback vrf member web ip address 10.16.0.253/32 ip router ospf 100 area 0.0.0.0 ! interface loopback2 description app-loopback vrf member app ip address 10.17.0.253/32 ip router ospf 100 area 0.0.0.0 ! interface loopback3 description db-loopback vrf member db ip address 10.18.0.253/32 ip router ospf 100 area 0.0.0.0 ! router ospf 100 vrf web router-id 10.16.0.253 passive-interface default vrf app router-id 10.17.0.253 passive-interface default vrf db router-id 10.18.0.253 passive-interface default Data Center 1 - OTV - 1 hostname DC1-N7K-OTV-01 ! feature otv feature lacp ! vlan 900 name native-vlan ! vlan 453 name otv-site-vlan ! vlan 701 name web ! vlan 750 name app ! vlan 775 name db ! interface port-channel12 description Join Interface L3 mtu 9216 no ip redirects ip address 10.3.0.50/30 ! interface Ethernet8/26 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet9/26 mtu 9216 channel-group 12 mode active no shutdown ! ip route 0.0.0.0/0 10.3.0.49 ! otv site-identifier 0x1 ! otv site-vlan 453 ! interface Overlay100 description OTV Data-Center-1 otv join-interface port-channel12 otv extend-vlan 701, 750, 775 otv use-adjacency-server 10.3.0.50 10.35.0.50 unicast-only otv adjacency-server unicast-only no shutdown ! interface port-channel13 description Internal Interface L2 Port-Channel switchport switchport mode trunk switchport trunk native vlan 900 ! interface Ethernet8/25 switchport switchport mode trunk switchport trunk native vlan 900 channel-group 13 mode active no shutdown ! interface Ethernet9/25 switchport switchport mode trunk switchport trunk native vlan 900 channel-group 13 mode active no shutdown ! ip access-list ALL_IPs 10 permit ip any any mac access-list ALL_MACs 10 permit any any ip access-list HSRP_IP 10 permit udp any 224.0.0.2/32 eq 1985 20 permit udp any 224.0.0.102/32 eq 1985 mac access-list HSRP_VMAC 10 permit 0000.0c07.ac00 0000.0000.00ff any 20 permit 0000.0c9f.f000 0000.0000.0fff any arp access-list HSRP_VMAC_ARP 10 deny ip any mac 0000.0c07.ac00 ffff.ffff.ff00 20 deny ip any mac 0000.0c9f.f000 ffff.ffff.f000 30 permit ip any mac any ! vlan access-map HSRP_Localization 10 match mac address HSRP_VMAC match ip address HSRP_IP action drop vlan access-map HSRP_Localization 20 match mac address ALL_MACs match ip address ALL_IPs action forward ! vlan filter HSRP_Localization vlan-list 2-452,454-800,1151-1200 ! ip arp inspection filter HSRP_VMAC_ARP vlan 701,750,775 ! mac-list OTV_HSRP_VMAC_deny seq 10 deny 0000.0c07.ac00 ffff.ffff.ff00 mac-list OTV_HSRP_VMAC_deny seq 11 deny 0000.0c9f.f000 ffff.ffff.f000 mac-list OTV_HSRP_VMAC_deny seq 20 permit 0000.0000.0000 0000.0000.0000 ! route-map OTV_HSRP_filter permit 10 match mac-list OTV_HSRP_VMAC_deny ! otv-isis default vpn Overlay100 redistribute filter route-map OTV_HSRP_filter Data Center 1 - OTV - 2 hostname DC1-N7K-OTV-02 ! feature otv feature lacp ! vlan 900 name native-vlan ! vlan 453 name otv-site-vlan ! vlan 701 name web ! vlan 750 name app ! vlan 775 name db ! interface port-channel12 description Join Interface L3 mtu 9216 no ip redirects ip address 10.3.0.54/30 ! interface Ethernet8/26 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet9/26 mtu 9216 channel-group 12 mode active no shutdown ! ip route 0.0.0.0/0 10.3.0.53 ! otv site-identifier 0x1 ! otv site-vlan 453 ! interface Overlay100 description OTV Data-Center-1 otv join-interface port-channel12 otv extend-vlan 701, 750, 775 otv use-adjacency-server 10.3.0.50 10.35.0.50 unicast-only otv adjacency-server unicast-only no shutdown ! interface port-channel13 description Internal Interface L2 Port-Channel switchport switchport mode trunk switchport trunk native vlan 900 ! interface Ethernet8/25 switchport switchport mode trunk switchport trunk native vlan 900 channel-group 13 mode active no shutdown ! interface Ethernet9/25 switchport switchport mode trunk switchport trunk native vlan 900 channel-group 13 mode active no shutdown ! ip access-list ALL_IPs 10 permit ip any any mac access-list ALL_MACs 10 permit any any ip access-list HSRP_IP 10 permit udp any 224.0.0.2/32 eq 1985 20 permit udp any 224.0.0.102/32 eq 1985 mac access-list HSRP_VMAC 10 permit 0000.0c07.ac00 0000.0000.00ff any 20 permit 0000.0c9f.f000 0000.0000.0fff any arp access-list HSRP_VMAC_ARP 10 deny ip any mac 0000.0c07.ac00 ffff.ffff.ff00 20 deny ip any mac 0000.0c9f.f000 ffff.ffff.f000 30 permit ip any mac any ! vlan access-map HSRP_Localization 10 match mac address HSRP_VMAC match ip address HSRP_IP action drop vlan access-map HSRP_Localization 20 match mac address ALL_MACs match ip address ALL_IPs action forward ! vlan filter HSRP_Localization vlan-list 2-452,454-800,1151-1200 ! ip arp inspection filter HSRP_VMAC_ARP vlan 701,750,775 ! mac-list OTV_HSRP_VMAC_deny seq 10 deny 0000.0c07.ac00 ffff.ffff.ff00 mac-list OTV_HSRP_VMAC_deny seq 11 deny 0000.0c9f.f000 ffff.ffff.f000 mac-list OTV_HSRP_VMAC_deny seq 20 permit 0000.0000.0000 0000.0000.0000 ! route-map OTV_HSRP_filter permit 10 match mac-list OTV_HSRP_VMAC_deny ! otv-isis default vpn Overlay100 redistribute filter route-map OTV_HSRP_filter Data Center 2 - Aggregation - 1 hostname DC2-N7K-AGG-01 vrf context web vrf context app vrf context db vrf context vpckeepalive ! vlan 1900 name native-vlan ! vlan 1600 name otv-site-vlan ! vlan 701 name web ! vlan 750 name app ! vlan 775 name db ! interface port-channel3 description vPC Peer Keep Alive vrf member vpckeepalive no ip redirects ip address 192.168.2.1/30 ! interface Ethernet1/1 description vPC Peer Keep Alive channel-group 3 mode active no shutdown ! interface Ethernet2/1 description vPC Peer Keep Alive channel-group 3 mode active no shutdown ! vpc domain 12 peer-switch role priority 10 system-priority 4096 peer-keepalive destination 192.168.2.2 source 192.168.2.1 vrf vpckeepalive peer-gateway auto-recovery ip arp synchronize ! interface port-channel2 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 1900 spanning-tree port type network vpc peer-link ! interface Ethernet3/1 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 1900 rate-mode dedicated force channel-group 2 mode active no shutdown ! interface Ethernet4/1 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 1900 rate-mode dedicated force channel-group 2 mode active no shutdown ! interface port-channel13 description OTV Internal Interface – OTV-VDC-1 switchport switchport mode trunk switchport trunk native vlan 1900 vpc 13 ! interface Ethernet7/25 switchport switchport mode trunk switchport trunk native vlan 1900 channel-group 13 mode active no shutdown ! interface port-channel14 description OTV Internal Interface – OTV-VDC-2 switchport switchport mode trunk switchport trunk native vlan 1900 vpc 14 ! interface Ethernet8/25 switchport switchport mode trunk switchport trunk native vlan 1900 channel-group 14 mode active no shutdown ! interface Vlan701 no shutdown description Web VLAN vrf member web no ip redirects ip address 10.16.1.4/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 701 preempt priority 200 ip 10.16.1.1 ! interface Vlan750 no shutdown description App VLAN vrf member app no ip redirects ip address 10.17.1.4/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 750 preempt priority 200 ip 10.17.1.1 ! interface Vlan775 no shutdown description DB VLAN vrf member db no ip redirects ip address 10.18.1.4/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 775 preempt priority 200 ip 10.18.1.1 ! interface port-channel12 description OTV Join Interface – OTV-VDC-1 mtu 9216 vrf member app no ip redirects ip address 10.35.0.49/30 ip router ospf 100 area 0.0.0.0 ! interface Ethernet3/25 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet4/25 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet3/17 description To Data-Center-1 Aggregation-1 VDC mtu 9216 no shutdown ! interface Ethernet3/17.725 encapsulation dot1q 725 vrf member web ip address 10.16.0.14/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/17.750 mtu 9216 encapsulation dot1q 750 vrf member app ip address 10.17.0.14/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/17.775 encapsulation dot1q 775 vrf member db ip address 10.18.0.14/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1 description Layer 3 Between Nexus 7ks mtu 9216 no shutdown ! interface port-channel1.725 encapsulation dot1q 725 vrf member web no ip redirects ip address 10.26.0.9/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1.750 mtu 9216 encapsulation dot1q 750 vrf member app no ip redirects ip address 10.27.0.9/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1.775 encapsulation dot1q 775 vrf member db no ip redirects ip address 10.28.0.9/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/25 description Layer 3 Between Nexus 7ks mtu 9216 channel-group 1 mode active no shutdown ! interface Ethernet4/25 description Layer 3 Between Nexus 7ks mtu 9216 channel-group 1 mode active no shutdown ! interface loopback1 description web-loopback vrf member web ip address 10.26.0.254/32 ip router ospf 100 area 0.0.0.0 ! interface loopback2 description app-loopback vrf member app ip address 10.27.0.254/32 ip router ospf 100 area 0.0.0.0 ! interface loopback3 description db-loopback vrf member db ip address 10.28.0.254/32 ip router ospf 100 area 0.0.0.0 ! router ospf 100 vrf web router-id 10.26.0.254 passive-interface default vrf app router-id 10.27.0.254 passive-interface default vrf db router-id 10.28.0.254 passive-interface default Data Center 2 - Aggregation - 2 hostname DC2-N7K-AGG-02 vrf context web vrf context app vrf context db vrf context vpckeepalive ! vlan 1900 name native-vlan ! vlan 1600 name otv-site-vlan ! vlan 701 name web ! vlan 750 name app ! vlan 775 name db ! interface port-channel3 description vPC Peer Keep Alive vrf member vpckeepalive no ip redirects ip address 192.168.2.2/30 ! interface Ethernet1/1 description vPC Peer Keep Alive channel-group 3 mode active no shutdown ! interface Ethernet2/1 description vPC Peer Keep Alive channel-group 3 mode active no shutdown ! vpc domain 12 peer-switch role priority 100 system-priority 4096 peer-keepalive destination 192.168.2.1 source 192.168.2.2 vrf vpckeepalive peer-gateway auto-recovery ip arp synchronize ! interface port-channel2 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 1900 spanning-tree port type network vpc peer-link ! interface Ethernet3/1 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 1900 rate-mode dedicated force channel-group 2 mode active no shutdown ! interface Ethernet4/1 description vPC Peer Link switchport switchport mode trunk switchport trunk native vlan 1900 rate-mode dedicated force channel-group 2 mode active no shutdown ! interface port-channel13 description OTV Internal Interface – OTV-VDC-1 switchport switchport mode trunk switchport trunk native vlan 1900 vpc 13 ! interface Ethernet7/25 switchport switchport mode trunk switchport trunk native vlan 1900 channel-group 13 mode active no shutdown ! interface port-channel14 description OTV Internal Interface – OTV-VDC-2 switchport switchport mode trunk switchport trunk native vlan 1900 vpc 14 ! interface Ethernet8/25 switchport switchport mode trunk switchport trunk native vlan 1900 channel-group 14 mode active no shutdown ! interface Vlan701 no shutdown description Web VLAN vrf member web no ip redirects ip address 10.16.1.5/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 701 ip 10.16.1.1 ! interface Vlan750 no shutdown description App VLAN vrf member app no ip redirects ip address 10.17.1.5/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 750 ip 10.17.1.1 ! interface Vlan775 no shutdown description DB VLAN vrf member db no ip redirects ip address 10.18.1.5/24 ip router ospf 100 area 0.0.0.0 hsrp version 2 hsrp 775 ip 10.18.1.1 ! interface port-channel12 description OTV Join Interface – OTV-VDC-2 mtu 9216 vrf member app no ip redirects ip address 10.35.0.53/30 ip router ospf 100 area 0.0.0.0 ! interface Ethernet3/25 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet4/25 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet3/17 description To Data-Center-1 Aggregation-2 VDC mtu 9216 no shutdown ! interface Ethernet3/17.725 encapsulation dot1q 725 vrf member web ip address 10.16.0.18/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/17.750 mtu 9216 encapsulation dot1q 750 vrf member app ip address 10.17.0.18/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/17.775 encapsulation dot1q 775 vrf member db ip address 10.18.0.18/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1 description Layer 3 Between Nexus 7ks mtu 9216 no shutdown ! interface port-channel1.725 encapsulation dot1q 725 vrf member web no ip redirects ip address 10.26.0.10/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1.750 mtu 9216 encapsulation dot1q 750 vrf member app no ip redirects ip address 10.27.0.10/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface port-channel1.775 encapsulation dot1q 775 vrf member db no ip redirects ip address 10.28.0.10/30 ip ospf network point-to-point no ip ospf passive-interface ip router ospf 100 area 0.0.0.0 no shutdown ! interface Ethernet3/25 description Layer 3 Between Nexus 7ks mtu 9216 channel-group 1 mode active no shutdown ! interface Ethernet4/25 description Layer 3 Between Nexus 7ks mtu 9216 channel-group 1 mode active no shutdown ! interface loopback1 description web-loopback vrf member web ip address 10.26.0.253/32 ip router ospf 100 area 0.0.0.0 ! interface loopback2 description app-loopback vrf member app ip address 10.27.0.253/32 ip router ospf 100 area 0.0.0.0 ! interface loopback3 description db-loopback vrf member db ip address 10.28.0.253/32 ip router ospf 100 area 0.0.0.0 ! router ospf 100 vrf web router-id 10.26.0.253 passive-interface default vrf app router-id 10.27.0.253 passive-interface default vrf db router-id 10.28.0.253 passive-interface default Data Center 2 - OTV - 1 hostname DC2-N7K-OTV-01 ! feature otv feature lacp ! vlan 1900 name native-vlan ! vlan 1600 name otv-site-vlan ! vlan 701 name web ! vlan 750 name app ! vlan 775 name db ! interface port-channel12 description Join Interface L3 mtu 9216 no ip redirects ip address 10.35.0.50/30 ! interface Ethernet8/26 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet9/26 mtu 9216 channel-group 12 mode active no shutdown ! ip route 0.0.0.0/0 10.35.0.49 ! otv site-identifier 0x2 ! otv site-vlan 1600 ! interface Overlay100 description OTV Data-Center-2 otv join-interface port-channel12 otv extend-vlan 701, 750, 775 otv use-adjacency-server 10.3.0.50 10.35.0.50 unicast-only otv adjacency-server unicast-only no shutdown ! interface port-channel13 description Internal Interface L2 Port-Channel switchport switchport mode trunk switchport trunk native vlan 1900 ! interface Ethernet8/25 switchport switchport mode trunk switchport trunk native vlan 1900 channel-group 13 mode active no shutdown ! interface Ethernet9/25 switchport switchport mode trunk switchport trunk native vlan 1900 channel-group 13 mode active no shutdown ! ip access-list ALL_IPs 10 permit ip any any mac access-list ALL_MACs 10 permit any any ip access-list HSRP_IP 10 permit udp any 224.0.0.2/32 eq 1985 20 permit udp any 224.0.0.102/32 eq 1985 mac access-list HSRP_VMAC 10 permit 0000.0c07.ac00 0000.0000.00ff any 20 permit 0000.0c9f.f000 0000.0000.0fff any arp access-list HSRP_VMAC_ARP 10 deny ip any mac 0000.0c07.ac00 ffff.ffff.ff00 20 deny ip any mac 0000.0c9f.f000 ffff.ffff.f000 30 permit ip any mac any ! vlan access-map HSRP_Localization 10 match mac address HSRP_VMAC match ip address HSRP_IP action drop vlan access-map HSRP_Localization 20 match mac address ALL_MACs match ip address ALL_IPs action forward ! vlan filter HSRP_Localization vlan-list 2-452,454-800,1151-1200 ! ip arp inspection filter HSRP_VMAC_ARP vlan 701,750,775 ! mac-list OTV_HSRP_VMAC_deny seq 10 deny 0000.0c07.ac00 ffff.ffff.ff00 mac-list OTV_HSRP_VMAC_deny seq 11 deny 0000.0c9f.f000 ffff.ffff.f000 mac-list OTV_HSRP_VMAC_deny seq 20 permit 0000.0000.0000 0000.0000.0000 ! route-map OTV_HSRP_filter permit 10 match mac-list OTV_HSRP_VMAC_deny ! otv-isis default vpn Overlay100 redistribute filter route-map OTV_HSRP_filter Data Center 2 - OTV - 2 hostname DC2-N7K-OTV-02 ! feature otv feature lacp ! vlan 1900 name native-vlan ! vlan 1600 name otv-site-vlan ! vlan 701 name web ! vlan 750 name app ! vlan 775 name db ! interface port-channel12 description Join Interface L3 mtu 9216 no ip redirects ip address 10.35.0.54/30 ! interface Ethernet8/26 mtu 9216 channel-group 12 mode active no shutdown ! interface Ethernet9/26 mtu 9216 channel-group 12 mode active no shutdown ! ip route 0.0.0.0/0 10.35.0.53 ! otv site-identifier 0x2 ! otv site-vlan 1600 ! interface Overlay100 description OTV Data-Center-2 otv join-interface port-channel12 otv extend-vlan 701, 750, 775 otv use-adjacency-server 10.3.0.50 10.35.0.50 unicast-only otv adjacency-server unicast-only no shutdown ! interface port-channel13 description Internal Interface L2 Port-Channel switchport switchport mode trunk switchport trunk native vlan 1900 ! interface Ethernet8/25 switchport switchport mode trunk switchport trunk native vlan 1900 channel-group 13 mode active no shutdown ! interface Ethernet9/25 switchport switchport mode trunk switchport trunk native vlan 1900 channel-group 13 mode active no shutdown ! ip access-list ALL_IPs 10 permit ip any any mac access-list ALL_MACs 10 permit any any ip access-list HSRP_IP 10 permit udp any 224.0.0.2/32 eq 1985 20 permit udp any 224.0.0.102/32 eq 1985 mac access-list HSRP_VMAC 10 permit 0000.0c07.ac00 0000.0000.00ff any 20 permit 0000.0c9f.f000 0000.0000.0fff any arp access-list HSRP_VMAC_ARP 10 deny ip any mac 0000.0c07.ac00 ffff.ffff.ff00 20 deny ip any mac 0000.0c9f.f000 ffff.ffff.f000 30 permit ip any mac any ! vlan access-map HSRP_Localization 10 match mac address HSRP_VMAC match ip address HSRP_IP action drop vlan access-map HSRP_Localization 20 match mac address ALL_MACs match ip address ALL_IPs action forward ! vlan filter HSRP_Localization vlan-list 2-452,454-800,1151-1200 ! ip arp inspection filter HSRP_VMAC_ARP vlan 701,750,775 ! mac-list OTV_HSRP_VMAC_deny seq 10 deny 0000.0c07.ac00 ffff.ffff.ff00 mac-list OTV_HSRP_VMAC_deny seq 11 deny 0000.0c9f.f000 ffff.ffff.f000 mac-list OTV_HSRP_VMAC_deny seq 20 permit 0000.0000.0000 0000.0000.0000 ! route-map OTV_HSRP_filter permit 10 match mac-list OTV_HSRP_VMAC_deny ! otv-isis default vpn Overlay100 redistribute filter route-map OTV_HSRP_filter
... View more
Labels:
Created by
Mohamed Anees Mohammed Abdulla
in Server Networking
in Server Networking
08-20-2013
02:18 PM
08-20-2013
02:18 PM
Hi, you are correct. If you use virtual Data centers with VXLAN and you don't have vlans extended to physical network, then you don't have the requirement to use OTV. Thanks, Anees.
... View more
Created by
Mohamed Anees Mohammed Abdulla
in Server Networking
in Server Networking
08-19-2013
02:21 PM
08-19-2013
02:21 PM
Hi Jerry, I am unable to see any public facing document with the specific configuration you are looking for. But please give me a day, I will publish the config fromone of my deployment. Thanks, Anees.
... View more
Created by
Mohamed Anees Mohammed Abdulla
in Server Networking
in Server Networking
08-17-2013
12:48 PM
08-17-2013
12:48 PM
Hi Richard, http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9402/guide_c07-728315.pdf Can I Mix a Cisco Nexus 7000 and a Cisco ASR 1000 for OTV? Mixing the two types of devices is not supported at this time when the devices will be placed within the same site. However, using Cisco Nexus 7000s in one site and Cisco ASR 1000s at another site for OTV is fully supported. For this scenario, please keep the separate scalability numbers in mind for the two different devices, because you will have to account for the lowest common denominator. Thanks, Anees.
... View more
Created by
Mohamed Anees Mohammed Abdulla
in Server Networking
in Server Networking
08-17-2013
12:37 PM
08-17-2013
12:37 PM
Hi Jerry, Please check the below link and I believe it will answer your question.. http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/DCI/whitepaper/DCI_1.html#wp1186215 I took a diagram and paragraph from the above URL and pasted below: The use of VDCs must be introduced in this case, even if the SVIs are not defined on the DCI layer devices. The basic requirement for OTV to be functional is in fact that every OTV control packet originated by the Join interface of an OTV edge device must be received on the Join interface of all the other edge devices being part of the same OTV overlay. Since OTV will be on a dedicated VDC and the DCI circuits will be on another Router or VDC, OTV adjacency will be formed by all OTV Edge devices. Please let me know if this answers your question..
... View more
Created by
Mohamed Anees Mohammed Abdulla
in Server Networking
in Server Networking
08-15-2013
01:33 PM
08-15-2013
01:33 PM
http://www.cisco.com/en/US/docs/ios-xml/ios/wan/command/wan-m1.html#wp1501508090
... View more
Created by
Mohamed Anees Mohammed Abdulla
in Server Networking
in Server Networking
08-14-2013
09:06 PM
08-14-2013
09:06 PM
Hi Sophia, It is nothing specific to OTV. ASR 1k can do packet fragmentation and reassembly. But in N7k, fragmentation occurs in software and we don't want that to happen in software due to performance issues. Hence in N7k when you run OTV we mark the OTV packets with DF bit set. Thanks, Anees.
... View more
Created by
Mohamed Anees Mohammed Abdulla
in Server Networking
in Server Networking
08-12-2013
03:00 PM
08-12-2013
03:00 PM
Hi Sophia, I don't see any reason to say why OTV is not the Layer 2 extension solution if you have the required hardware. The crictical component of Fault Isolation which is supported by OTV is a key element for its successful in the DCI domain. OTV does require MTU size of the layer 3 interfaces between Data Centers to be increased to 42 bytes. And the same limitation is there for EoMPLS and VPLS as well. I don't see this would be a major issue for most of the customers. Thanks, Anees.
... View more
Created by
Mohamed Anees Mohammed Abdulla
in Server Networking
in Server Networking
08-12-2013
02:42 PM
08-12-2013
02:42 PM
Hi Dennis, All those Layer 2 extension technologies require STP to be extended between Data Centers if you need to have multiple paths between Data Centers. OTV does not extend STP rather it has its own mechanism (AED election) to avoid loop when multiple paths are enabled. It means any STP control plane issue, we don't carry to the other Data Center. OTV natively suppresses Unknown Unicast Flooding across the OTV overlay. Unknown unicast flooding is a painful problem in layer 2 network and difficult to troubleshoot to identify the root cause if you don't have proper network monitoring tool. It has ARP optimization which eliminates flooding ARP packets across Data Center by responding locally with cached ARP messages. One of the common issues I have seen in Data Center is some server or device in the network sends continuous ARP packets which hits Control plane in the Aggregation layer which in turn causes network connectivity issue. The above three points proves the Layer 2 domain isolation between data centers. If you have redundant Data Centers with Layer 2 extended without OTV, the above explained layer 2 issue which happens in one Data Center carries the same failure to the second data center which creates the question of what is the point of having two different Data Centers if we can not isolate the failure domain. OTV natively supports HSRP localization with few command lines. This is a very important requirement in building Active/Active Data Center. Even though your question is related to L2TP, OTV deserves the comparison with VPLS and those comparison will also be applicable for L2TP. The below link explains in detail... http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9402/white_paper_c11-574984.html Thanks, Anees.
... View more
Created by
Mohamed Anees Mohammed Abdulla
in Unified Computing System Discussions
in Unified Computing System Discussions
05-31-2013
09:40 AM
05-31-2013
09:40 AM
A. For the Data Centers running Spanning tree (vPC) within the Data Center Network FabricPath Pros 1. Does not extend Spanning tree (BPDUs) between the two data centers 2. On the FabricPath DCI switches, you need to create only the VLANs that are required to be extended between the two Data Centers 3. Both the links between the Data Center is utilized. Efficient load balancing. You can add more Dark Fibers between the data centers and all the link can be used by the FabricPath load balancing algorithm. 4. VLAN scalability for FabricPath is higher than OTV as of this content writing. 5. Resiliency is better than OTV in some failover scenarios. Cons 1. Spanning Tree Root for the vlans extended needs to be configured on the FabricPath switches in the DCI layer. This may not be a problem. But need to understand the stp states in your network when you deploy this solution. 2. HSRP localization can not be implemented as OTV. However You can have two differnet Gateways at the Data Center 1 and 2 using two different HSRP groups. If server is moved dynamically from one Data Center to another Data Center, you need to change the default gateway on the servers. 3. If there is an unknown unicast flooding on one Data Center, FabricPath also carries the flooding to the second Data Center. 4. No ARP optimization across the Data Centers OTV Pros 1. Does not extend Spanning tree (BPDUs) between the two data centers 2. On the OTV DCI switches, you need to create only the VLANs that are required to be extended between the two Data Centers 3. Spanning Tree Root for the vlans can be at the Data Center Aggregation Layer switches and OTV solution does not influence the STP Root placement. 4. unknown Unicast Flooding is not propagated across the Data Center. 5. ARP optimization between Data Center is available on OTV. If a host is punting tons of ARP requests which again impacts the ocntrol plane of Nexus devices and so it can drop the good arp requests. With the ARP optimization, these ARP flood may not be flooded across the OTV to the Data Center 2 and so Data Center 2 Nexus Control plane may not be impacted. 6. HSRP localication is configurable and so you can keep the same HSRP IP (Default Gateway) on both the Data Centers. Cons 1. Typically two flows (Odd VLANs by OTV-VDC-1 and even vlans by OTV-VDC-2) carry the entire layer 2 traffic flow between the two Data Centes. Hence the load balancing the links is not efficient. 2. VLAN scalability for OTV is lower than FabricPath as of this content writing. 3. Resiliency of FabricPath network is better than OTV in some failure scenarios. B. For the Data Centers running FabricPath within the Data Center network FabricPath Pros 1. Both the links between the Data Center is utilized. Efficient load balancing. You can add more Dark Fibers between the data centers and all the link can be used by the FabricPath load balancing algorithm. 2. VLAN scalability for FabricPath is higher than OTV as of this content writing. Cons 1. Since both the Data Centers are already running FabriCPath, connecting them via the FabricPath makes both the Data Center in a single FabricPath Topology. This means all the switches in both the Data Center Network MUST have all the VLANs configured. 2. HSRP localization can not be implemented as OTV. However You can have two differnet Gateways at the Data Center 1 and 2 using two different HSRP groups. If server is moved dynamically from one Data Center to another Data Center, you need to change the default gateway on the servers. 3. If there is an unknown unicast flooding on one Data Center, FabricPath also carries the flooding to the second Data Center. 4. NO ARP optimization across the Data Centers OTV Pros 1. Does not extend FabricPath between the two Data Centers. Hence there are two independant FabricPath domains (Data Center 1 and Data Center 2). Only the vlans that are need to be extended between the data centers can be configured and extended via OTV. 2. unknown Unicast Flooding is not propagated across the Data Center. 3. ARP optimization between Data Center is available on OTV. If a host is punting tons of ARP requests which again impacts the ocntrol plane of Nexus devices and so it can drop the good arp requests. With the ARP optimization, these ARP flood may not be flooded across the OTV to the Data Center 2 and so Data Center 2 Nexus Control plane may not be impacted. 4. HSRP localication is configurable and so you can keep the same HSRP IP (Default Gateway) on both the Data Centers. Cons 1. Typically two flows (Odd VLANs by OTV-VDC-1 and even vlans by OTV-VDC-2) carry the entire layer 2 traffic flow between the two Data Centes. Hence the load balancing the links is not efficient. 2. VLAN scalability for OTV is lower than FabricPath as of this content writing. 3. Resiliency of FabricPath network is better than OTV in some failure scenarios.
... View more
Created by
Mohamed Anees Mohammed Abdulla
in Other Data Center Subjects
in Other Data Center Subjects
05-28-2013
07:31 PM
05-28-2013
07:31 PM
Is it correct to state that when frame arrives on leaf's CE-port which is in access mode of VLAN X, leaf will also insert 801.Q tag in original frame before adding an FabricPath header to frame? Yes. Will it also happen with frame of native (untagged) VLAN? Yes.
... View more
Latest Contributions by Mohamed Anees Mohammed Abdulla
- Latest Contributions by Mohamed Anees Mohammed Abdulla
- Discussions Mohamed Anees Mohammed Abdulla has Participated In
- TKBs Mohamed Anees Mohammed Abdulla has Participated In
- Blogs Mohamed Anees Mohammed Abdulla has Participated In
- Events Mohamed Anees Mohammed Abdulla has Participated In
- Videos Mohamed Anees Mohammed Abdulla has Participated In
Created by
Mohamed Anees Mohammed Abdulla
in Data Center Documents
10-07-2013
10-07-2013
IntroductionPrerequisitesRelated Information IntroductionThis document
describes options for deploym...
08-20-2013
Hi Raviraj, Please review this document and let me know if that answers
your
question.https://suppor...
08-20-2013
Hi Jerry, I have published this document.
https://supportforums.cisco.com/docs/DOC-35772 Please let ...
Created by
Mohamed Anees Mohammed Abdulla
in Data Center Documents
08-20-2013
08-20-2013
This document provides the configuration example for deploying OTV in
the Data Centers having multip...
08-20-2013
Hi, you are correct. If you use virtual Data centers with VXLAN and you
don't have vlans extended to...
08-19-2013
Hi Jerry, I am unable to see any public facing document with the
specific configuration you are look...
08-17-2013
Hi
Richard,http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9402/guide_c07-728315.pdfCan...
08-17-2013
Hi Jerry, Please check the below link and I believe it will answer your
question..
http://www.cisco....
08-14-2013
Hi Sophia, It is nothing specific to OTV. ASR 1k can do packet
fragmentation and reassembly. But in ...
08-12-2013
Hi Sophia, I don't see any reason to say why OTV is not the Layer 2
extension solution if you have t...
08-12-2013
Hi Dennis, All those Layer 2 extension technologies require STP to be
extended between Data Centers ...
05-31-2013
A. For the Data Centers running Spanning tree (vPC) within the Data
Center NetworkFabricPathPros 1. ...
Created by
Mohamed Anees Mohammed Abdulla
in Other Data Center Subjects
05-28-2013
05-28-2013
Is it correct to state that when frame arrives on leaf's CE-port which
is in access mode of VLAN X, ...
Public Statistics
| Date Registered | 07-19-2006 11:34 AM |
| Date Last Visited | 08-28-2017 01:22 AM |
| Total Messages Posted | 52 |
| Total Helpful Votes Received | 93 |
Helpful Votes From
