Documentation A good point to start – Ansible User Guide. Network modules (ios/nxos/ios-xr, aci, junos etc) – Module Index – Network Modules IOS/NXOS Command Modules IOS NXOS IOS There is are a way to run multiple commands Very useful for debugging to show output in the terminal: – name: show output debug: var: output Some...
Automation is everywhere. I decided to take a quick look into Ansible Ansible is the simplest way to automate apps and IT infrastructure using SSH, with no agents to install on remote systems. Here is Intro to Ansible. Ansible – Open Source IT Automation Platform Notes: using SSH and does not require an agent written in Python push-based architecture Ansible Components...
By default: underlay – default VRF overlay – “tenant” VRF, hosts in VXLAN are isolated Border Leafs are used to connect the internal fabric to external networks. Not necessary a box, just configuration on the Leaf. It maintains the following routing control planes: MP-BGP L2VPN EVPN – inside VXLAN fabric “tenant” VRF BGP or IGP to external routes MP-BGP to BGP/IGP...
VxLAN and vPC Anycast VTEP Problem with VXLAN and vPC: in a vPC both vPC peers duplicate EVPN MAC/IP routes to spine RRs with other attributes equal, one vPC peer is always preferred for dual attached hosts (based on the normal BGP Best path selection) Result: egress traffic from vPC Member is load-balanced, but return ingress traffic is polarized Solution: Anycast VTEP...
EVPN Integrated Routing and Bridging (IRB) has two options: Asymmetric IRB (increased ARP cache and CAM table sizes and control plane scaling issue) Symmetric IRB Symmetric IRB Ingress VTEP does both L2 and L3 lookup Egress VTEp does both L3 and L2 lookup => Bridge – Route – Route – Bridge L3 VNI should be configured on all VTEPS, L2 VNIs...
Today I’ve received a badge from Cisco. I made the finalist for the IT Blog Awards 2019 by Cisco in the Best Newcomer category! Discover all the awesome podcasts and resources. There are a lot of great blogs out there. To vote click here. Best Analysis – Does this blog provide insightful discussions? Houman Asefi How Does Internet Work mrnCCIEW Network Defense...
EVPN Integrated Routing and Bridging (IRB) has two options: Asymmetric IRB Symmetric IRB Assymetric IRB Ingress VTEP does both L2 and L3 lookup Egress VTEP does L2 lookup only => Bridge – Route – Bridge Pros: “easy” to configure – just copy/paste. Identical config with the only difference in SVI IP addresses. Cons: on the way back, traffic will be reversed...
Two control planes for the VXLAN technology: Multicast control plane (flood-and learn) MP-BGP EVPN control plane MP-BGP EVPN is a standard-based VXLAN control protocol, that provides remote VTEP discovery and MAC/ARP learning. Ethernet Virtual Private Network (EVPN) reduces flooding in the network and resolves scalability concerns. MP-BGP is used to exchange information between VTEPs Devices might be MP-iBGP EVPN peers or...
Two control planes for the VXLAN technology: Multicast control plane (flood and learn) MP-BGP EVPN control plane Virtual Extensible Local Area Networks (VXLANs) allows to extend reachability of a VLAN within a data center over Layer 3. Every VTEP with specific VXLAN and certain VNI will join the same multicast group. To learn remote MAC addresses, the VTEP will use conversational...
VXLAN is a tunneling protocol that encapsulates Layer 2 Ethernet frames in Layer 3 UDP packets. Why VXLAN: VLAN Scalability – expands VLAN name space VLANs use 12 bit -4096 values VXLAN uses 24 bit – 16777216 values allows layer 2 multipathing no STP uses layer 3 ECMP over CLOS fabric (like FabricPath) allows for multi-tenancy separate of customer traffic over shared...
Recent Comments