Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About ulasinski
Stats
Member since
01-06-2018
12
Posts
0
Helpful
0
Solutions
02-23-2019
11:16 PM
after 2 months I wouldn't recommend this solution in the production environment because:
- there is a problem with the functioning of EVPN on the Cat9300 platform in the configuration stack (in same part of switches work, and on same part not. Configuration is the same.) - software 16.09.01 seems to be unstable. I have a problem with hanging ports, ports with only PoE and even switch reboots. - Cisco support is none (Over a month ago I req Tac with EVPN and zero reaction from Cisco TAC - priority 2). I intend to escalate him very much after the holidays in my country because it is a mockery. I take it as a lack of Cisco support skills
... View more
02-23-2019
11:02 PM
to build a network in middle size company as a whole based on VXLAN (Cisco VXLAN as a homogeneous company network (DC + Campus)), without the use of graphical Cisco managers:
- in DC without ACI (APIC-EM) or DCNM - in Campus without DNA (APIC-EM)
Remember that with VXLAN in DC you have the choice: - ACI - based on VXLAN BGP EVPN - Cisco Programmable Fabric - based on VXLAN BGP EVPN
With VXLAN in CAMPUS you have the choice: - DNA - based Geo/VXLAN and LISP - Campus Fabric - based Geo/VXLAN and LISP - and NEW - VXLAN BGP EVPN
ACI is not the same as Cisco Programmable Fabric.
DNA is not the same as Campus Fabric.
Check on Cisco websites for more information.
Default and recommended solution by Cisco in native configuration with CLI (DCNM) is Cisco Programmable Fabric in DC and Campus Fabric in CAMPUS.
But this solution has huge drawbacks for me. Namely:
Geo / VXLAN and VXLAN are not the same and there is no homogeneous combination of these structures.
So far, there is no dedicated LISP GeoVXLAN - MBGP VXLAN gateway. Cisco recommends native L3 connection between these fabrics.
lack of L2 connections between campus and DC (I failed to run it).
Hard to run DHCP relay from CAMPUS to DC.
It is highly likely that competitive solutions have forced Cisco to run competitions for the widely promoted LISP in CAMPUS.
From version IOS XE 16.09.01 in Catalyst 9300/9400/9500 VXLAN BGP EVPN is supported. This allows inserting these switches in the SPINE - LEAF architecture as LEAF and NEXUS 9000 as SPINE.
It is quite a nice idea to close both networks in one solution. At the same time, you gain all the advantages of the SPINE-LEAF architecture in the CAMPUS network.
Tested hardware:
SPINEs: Nexus 9363C + LAN Enterprise License
DC's LEAFs: NEXUS 93180YC-EX + LAN Enterprise License
CAMPUS LEAFs (EDGEs): Catalyst C9300-48UXM + ADV License
... View more
11-29-2018
08:42 AM
What do you think about that kind of connection between dc and campus?
The plus for me is that the whole structure is homogeneous.
Border's switch do only ip forwarding and terminal macsec link from campus access switches.
... View more
11-22-2018
06:20 AM
I am sorry for my language at the beginning...
From IOS-XE 10.9.2 VxLAN EVPN/BGP VTEP is implemented in Cat9300/9400/9500.
It's probably the result of competition moves. Arista and Mellanox are pushing the new model of campus based on VxLAN EVPN / BGP.
I would like to ask: in your opinion, what the architecture of the Cisco campus VxLAN EVPN/BGP network should look like? Is
Should the campus access leafs should have the same spines as dc leafs?
Should the connection be carried out through dedicated borders leafs on both networks?
Or maybe both networks spines (separated) should be connected to super spines?
My adventure Half a year ago I have deployed in DC N9300s with 100G uplinks based on VxLAN EVPN / BGP - Programmable Fabric (all N9300s support ACI which I could buy).
The time has come to upgrade the campus. I bought Cat9500s for aggregation and Cat9300s for access, but also without APIC. I wanted to run LISP with Geo-VXLAN by CLI. There were huge problems.
The most important for me:
I have networks which I am not allowed to touch inside and I have to have a connection L2(vlan) from DC to the campus. In the new campus model (Campus Fabric) as far as I know today it is't possible. Between you must have L3 connection.
Someone from Cisco told me that you could build an EPG relationship to SGT with APICs in both networks (but he was't sure).
For a month and a half I tried to connect these networks with L2 by port-to-port L2 trunk as physically separate networks without lack.
Also dynamic routing on the port in the anycast-gateway mode between DC and Campus with the L2 connector in the redundant systems is not understandable to me (probably not recommended and nowhere described).
Running the Fabric Campus itself is a feat for me of course :) - for today I can't run DHCP.
Instructions and translations to run Fabric Campus are weak. I have the impression that it would force you to buy APIC.
Now it's possible to attach the Cat9300 directly to the N9K spins witch VxLAN EVPN/BGP. I launched it within two days of work. Work good.
Only what worries me is that I can put away two pieces of cat9500-32c on the shelf. Unless Cisco would let the catalyst be SPINE.
... View more
Labels:
Created by
ulasinski
in Data Center Blogs
in Data Center Blogs
10-03-2018
10:53 PM
10-03-2018
10:53 PM
What the client's ospf configuration should look like for interface SVI in the anycast gateway mode. The client has a PA Firewall VM that can migrate between different Leaf pairs (vPC) and wants to distribute the default path for his endpoints.
... View more
Created by
ulasinski
in Data Center Blogs
in Data Center Blogs
03-01-2018
06:45 AM
03-01-2018
06:45 AM
I'm sorry for answering so late, Lukas thank you very much for the answer. I did as you wrote and everything works. I have the latest Cisco Nexus 9300 with 100Gbit uplinks with QSFP-40/100-SRBD. If someone would like to hear my opinion, especially about cooperation with CNFM (there is no cooperation because C9364C is not supported), or about a quite alternative approach to configuration in DCNM (not fan for me) and its broken stability, write to me. Why write about it. Because at every step, at each vendor in the case of VXLAN/EVPN fabric, it is recommended to leave the CLI and control fabric by Web Management Interface. However, I have a question for Lukas about how to solve the above task. In a specific VRF for a specific subnet, I have a L3 hop in nexus fabric. Subnetwork Y <--> VRF Z (SVI-A on N9K (anycast gateway)) <--> VXLAN EVPN fabric <--> VRF Z (SVI-B on N9K (anycast gateway)) <--> vSphere LACP LAG (VM GATEWAY INTERFACE) <--> Internet In the environment, each LEAF working in a vPC pair. at N9K-s for this VRF I have a "default route" via GATEWAY (static routing) This GATEWAY is PaloAlto VM that's why I used anycast mode from the gateway (theoretically gateway can change the place in the cluster). I'm going to the point Clients from subnet Y are sensitive but impoverished. I would like to use a different gateway for PA Maintenance's time. However, this gateway is not PA. Both support OSPF. Normally in 6509 with which I have the most experience I would change the default route based on IP SLA. Here, in that case of N9K SVI ANYCAST, the IP SLA mechanism will always be disappointing. This solution is eliminated. I think about OSPF with the default route. One of my supporters recommends assigning a dedicated n9k pair as a bordear Gateway and running HRRP on the PA side and run OSPF. How would you do it? Do you need hrrp in vpc mode? Do I need ospf on all Leafs (when I use non anysast Gateway mode on SVI from PA side)?
... View more
Created by
ulasinski
in Data Center Blogs
in Data Center Blogs
01-06-2018
04:03 PM
01-06-2018
04:03 PM
Hi Lukas, I'm not advanced. In the LEAF configuration, you have 2 loopback interfaces defined. You use Loopback 0 as a source of OSPF and BGP. Loopback 1 as the source of VTEP. Why do you separate them? If I would like to create a completely separated VRF without leaks with the associated 2 SVI (anycast-gateway mode) belonging to it, how to do it? 1. Create another VRF 2 2. Create 3 vlan's (in that + one for transit) 3. Create a second NVE 2 (should I use the same loopback interface as for nve 1?) 4. Advertise VRF by BGP Do I think correctly?
... View more
02-23-2019
after 2 months I wouldn't recommend this solution in the production
environment because: - there is ...
02-23-2019
to build a network in middle size company as a whole based on VXLAN
(Cisco VXLAN as a homogeneous co...
11-29-2018
What do you think about that kind of connection between dc and campus?
The plus for me is that the w...
Created by
ulasinski
in Data Center Switches
11-22-2018
11-22-2018
you're right you don't need multicast, Ingress replication should be
enough. "For BUM replication, e...
Created by
ulasinski
in Data Center Switches
11-22-2018
11-22-2018
I'm sorry but your configuration is not typical. VTEP is configured on
SPINE. I have both versions o...
Created by
ulasinski
in Data Center Switches
11-22-2018
11-22-2018
You should't use hrsp when you use anycast-gateway. Probably it will not
work at all (i think so). W...
11-22-2018
I have put two of c9500-32c in vStack in my network. What version of
c9500 do you have? Not all have...
Created by
ulasinski
in Cisco Digital Network Architecture (DNA)
11-22-2018
11-22-2018
You can build it but what about the optimization of such a solution.
Whether in campus fabric (LISP/...
11-22-2018
I am sorry for my language at the beginning... From IOS-XE 10.9.2 VxLAN
EVPN/BGP VTEP is implemented...
Created by
ulasinski
in Data Center Blogs
10-03-2018
10-03-2018
What the client's ospf configuration should look like for interface SVI
in the anycast gateway mode....
Created by
ulasinski
in Data Center Blogs
03-01-2018
03-01-2018
I'm sorry for answering so late,Lukas thank you very much for the
answer. I did as you wrote and eve...
Created by
ulasinski
in Data Center Blogs
01-06-2018
01-06-2018
Hi Lukas,I'm not advanced.In the LEAF configuration, you have 2 loopback
interfaces defined.You use ...
Public Statistics
| Date Registered | 01-06-2018 03:26 PM |
| Date Last Visited | 06-26-2019 12:04 AM |
| Total Messages Posted | 12 |
