Below is the configuration We will be user on the new switches and some modification that needs to be done on the core routers and the mgmt router as well
- IP addressing core
| Device side A | Interface | IPV4 | IPV6 | Device side B | Interface | IPV4 | IPV6 | Comments |
| cr3-ulsfo | et-0/0/1 | 198.35.26.142/31 | 2620:0:863:fe03::1/64 | asw1-22-ulsfo | ethernet-1/55 | 198.35.26.143/31 | 2620:0:863:fe03::2/64 | config done on asw |
| cr3-ulsfo | et-0/0/2 | 198.35.26.148/31 | 2620:0:863:fe09::1/64 | asw1-23-ulsfo | ethernet-1/55 | 198.35.26.149/31 | 2620:0:863:fe09::2/64 | config done on asw |
| cr4-ulsfo | et-0/0/1 | 198.35.26.146/31 | 2620:0:863:fe0a::1/64 | asw1-22-ulsfo | ethernet-1/56 | 198.35.26.147/31 | 2620:0:863:fe0a::2/64 | config done on asw |
| cr4-ulsfo | et-0/0/2 | 198.35.26.144/31 | 2620:0:863:fe0b::1/64 | asw1-23-ulsfo | ethernet-1/56 | 198.35.16.145/31 | 2620:0:863:fe0b::2/64 | config done on asw |
| cr3-ulsfo | et-0/0/0 | 198.35.26.136/31 | 2620:0:863:fe00::1/64 | cr4-ulsfo | et-0/0/0 | 198.35.26.137/3 | 2620:0:863:fe00::2/64 | |
| mr1-ulsfo | ge-0/0/3 | 10.128.127.3/31 | 2620:0:863:fe05::2/64 | asw1-22-ulsfo | ethernet-1/48 | 10.128.127.2/31 | 2620:0:863:fe05::1/64 | asw1-22 will take cr3 IPV6,mr1 keeps the same IPV6 |
| mr1-ulsfo | ge-0/0/4 | 10.128.127.5/31 | 2620:0:863:fe06::2/64 | asw1-23-ulsfo | ethernet-1/48 | 10.128.127.4/31 | 2620:0:863:fe06::1/64 | (asw1-23 will take cr4 IPV6, mr1 keeps the same IPV6) |
- Setup BGP on asw1-22 to core routers
- Setup BGP on asw1-23 to core routers
- Setup BGP on cr3 to asw1-22/23
- Setup BGP on cr4 to asw1-22/23
- Setup BGP on mr1 to asw1-22/23
- Note: Change et-0/0/1 speed to 100g on each routers after disconnecting it from the old switch
- Add both switches to monitoring
- IP addressing loopback
- cr3-ulsfo 198.35.26.128/32 - 2620:0:863:ffff::1/128
- cr4-ulsfo 198.35.26.129/32 - 2620:0:863:ffff::2/128
- mr1-ulsfo 198.35.26.130/32 - 2620:0:863:ffff::3/128
- asw1-22-ulsfo 198.35.26.131/32 - 2620:0:863:ffff::4/128
- asw1-23-ulsfo 198.35.26.132/32 - 2620:0:863:ffff::5/128
- irb configuration
Right now the default gateway is setup on the routers since we are using a Virtual chassis design.We will be moving the default gateway down to the switches
on asw1-22-ulsfo
- Create irb.411 public1-22-ulsfo = 198.35.26.1/27 2620:0:863:1::1/64 and change the /28 in Netbox to /27
- Create irb.421 private1-22-ulsfo = 10.128.0.1/24 2620:0:863:101::1/64
on asw1-23-ulsfo
- Create irb.412 public1-23-ulsfo = 198.35.26.33/27 2620:0:863:2::1/64
- Create irb.422 private1-23-ulsfo = 10.128.1.1/24 2620:0:863:102::1/64
-Some renaming
Private IPV4
- private1-ulsfo = 10.128.0.0/24 rename the vlan to private1-22-ulsfo vlan id 421
- create private1-23-ulsfo and assign it the prefix 10.128.1.0/24 vlan id 422
Private IPV6
- private1-ulsfo = 2620:0:863:101::/64 keep this rename the vlan to private1-22-ulsfo with vlan id 421
- create private1-23-ulsfo and assign it the prefix 2620:0:863:102::/64 with vlan id 422
Public IPV4
- public1-ulsfo = 198.35.26.0/28 change this to 198.35.26.0/27 and rename the vlan to public1-22-ulsfo with vlan id 411
- create public1-23-ulsfo and assign it the prefix 198.35.26.32/27 vlan id 412
Public IPV6
- public1-ulsfo = 2620:0:863:1::/64 keep this rename the vlan to public1-22-ulsfo with vlan id 411
- create public1-23-ulsfo and assign it the prefix 2620:0:863:2::/64 vlan id 412
- homer configuration
Devices.yaml
cr3-ulsfo.wikimedia.org:
config:
|
|
device_bgp:
sw_mr: # To be removed #
mr1-ulsfo: {4: 198.35.26.199, 6: 2620:0:863:fe05::2} # To be removed#
cr_switch:
asw1-22-ulsfo: {4: 198.35.26.143, 6: 2620:0:863:fe03::2, peer_as: 4265004001}
asw1-23-ulsfo: {4: 198.35.26.149, 6: 2620:0:863:fe09::2, peer_as: 4265004002}
cr4-ulsfo.wikimedia.org:
config:
|
|
device_bgp:
sw_mr: # To be removed #
mr1-ulsfo: {4: 198.35.26.201, 6: 2620:0:863:fe06::2} # To be removed #
cr_switch:
asw1-22-ulsfo: {4: 198.35.26.147, 6: 2620:0:863:fe0a::2, peer_as: 4265004001}
asw1-23-ulsfo: {4: 198.35.16.145, 6: 2620:0:863:fe0b::2, peer_as: 4265004002}
asw1-22-ulsfo.mgmt.ulsfo.wmnet:
config:
asn: 4265004001
capirca:
- srl-common-loopback
device_bgp:
sw_mr:
mr1-ulsfo: {4: 10.128.127.3, 6: 2620:0:863:fe05::2}
sw_external:
cr3-ulsfo: {4: 198.35.26.142, 6: 2620:0:863:fe03::1}
cr4-ulsfo: {4: 198.35.26.146, 6: 2620:0:863:fe0a::1}
asw1-23-ulsfo.mgmt.ulsfo.wmnet:
config:
asn: 4265004002
capirca:
- srl-common-loopback
device_bgp:
sw_mr:
mr1-ulsfo: {4: 10.128.127.5, 6: 2620:0:863:fe06::2}
sw_external:
cr3-ulsfo: {4: 198.35.26.148, 6: 2620:0:863:fe09::1 }
cr4-ulsfo: {4: 198.35.26.144, 6: 2620:0:863:fe0b::1}
#### mr1-ulsfo configuration ####
mr1-ulsfo.wikimedia.org:
timeout: 120
config:
security_zones:
- name: production
services: ['ssh', 'ping', 'traceroute', 'snmp', 'bgp']
interfaces: ['lo0.0', 'ge-0/0/3', 'ge-0/0/4']
- name: untrust
services: ['ssh', 'ping', 'traceroute']
interfaces: ['ge-0/0/0']
- name: mgmt
services: ['ssh', 'ping', 'traceroute', 'dhcp']
interfaces: ['irb.900']
capirca:
- mr-security-policies
device_bgp:
mr_sw:
cr3-ulsfo: {4: 198.35.26.198, 6: 2620:0:863:fe05::1, peer_as: 14907} # To be removed #
cr4-ulsfo: {4: 198.35.26.200, 6: 2620:0:863:fe06::1, peer_as: 14907} # To be removed #
asw1-22-drmrs: {4: 10.128.127.2, 6: 2620:0:863:fe05::1, peer_as: 4265004001}
asw1-23-drmrs: {4: 10.128.127.4, 6: 2620:0:863:fe06::1, peer_as: 4265004002}
----------------------------------------------------------------`
- Configuration generated in my LAB
- BGP verification in my LAB
- asw1-22-ulsfo
asw1-22-ulsfo> show bgp summary
Groups: 1 Peers: 4 Down peers: 0
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0
26 15 0 0 0 0
inet6.0
22 11 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
198.35.26.142 14907 104 95 0 0 41:48 Establ
inet.0: 7/13/13/0
198.35.26.146 14907 102 94 0 0 41:49 Establ
inet.0: 8/13/13/0
2620:0:863:fe03::1 14907 105 94 0 0 41:38 Establ
inet6.0: 5/11/11/0
2620:0:863:fe0a::1 14907 104 94 0 0 41:35 Establ
inet6.0: 6/11/11/0- asw1-23-ulsfo
sw1-23-ulsfo> show bgp summary
Threading mode: BGP I/O
Groups: 1 Peers: 4 Down peers: 0
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0
28 15 0 0 0 0
inet6.0
24 13 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
198.35.26.144 14907 83 77 0 0 33:25 Establ
inet.0: 8/14/14/0
198.35.26.148 14907 83 77 0 0 33:21 Establ
inet.0: 7/14/14/0
2620:0:863:fe09::1 14907 86 76 0 0 33:10 Establ
inet6.0: 6/12/12/0
2620:0:863:fe0b::1 14907 87 77 0 0 33:14 Establ
inet6.0: 7/12/12/0- cr3-ulsfo
cr3-ulsfo-dfw# run show bgp summary group Switch
Threading mode: BGP I/O
Default eBGP mode: advertise - accept, receive - accept
Groups: 6 Peers: 13 Down peers: 7
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0
11 6 0 0 0 0
inet6.0
10 3 0 0 0 0
inet.2
0 0 0 0 0 0
inet6.2
0 0 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
198.35.26.143 4265004001 86 92 0 0 37:13 Establ
inet.0: 3/3/3/0
198.35.26.149 4265004002 71 75 0 0 30:23 Establ
inet.0: 3/3/3/0
2620:0:863:fe03::2 4265004001 85 93 0 0 37:03 Establ
inet6.0: 2/4/4/0
2620:0:863:fe09::2 4265004002 71 79 0 0 30:12 Establ
inet6.0: 1/3/3/0- cr4-ulsfo
cr4-ulsfo-dfw> show bgp summary group Switch
Threading mode: BGP I/O
Default eBGP mode: advertise - accept, receive - accept
Groups: 6 Peers: 13 Down peers: 7
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0
11 6 0 0 0 0
inet6.0
10 3 0 0 0 0
inet.2
0 0 0 0 0 0
inet6.2
0 0 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
198.35.26.145 4265004002 170 173 0 0 1:15:00 Establ
inet.0: 3/3/3/0
198.35.26.147 4265004001 184 188 0 0 1:21:47 Establ
inet.0: 3/3/3/0
2620:0:863:fe0a::2 4265004001 183 190 0 0 1:21:33 Establ
inet6.0: 2/4/4/0
2620:0:863:fe0b::2 4265004002 170 177 0 0 1:14:49 Establ
inet6.0: 1/3/3/0- Verify asw1-22 can see the 2 new networks on asw1-23 and can reach them
asw1-22-ulsfo> show route 10.128.1.0/24
inet.0: 23 destinations, 39 routes (23 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.128.1.0/24 *[BGP/170] 00:05:05, MED 0, localpref 100
AS path: 14907 4265004002 I, validation-state: unverified
to 198.35.26.146 via xe-0/0/10.0
> to 198.35.26.142 via xe-0/0/11.0
[BGP/170] 01:37:52, MED 0, localpref 100
AS path: 14907 4265004002 I, validation-state: unverified
> to 198.35.26.146 via xe-0/0/10.0
{master:0}
ppaul@asw1-22-ulsfo> show route 198.35.26.32/27
inet.0: 23 destinations, 39 routes (23 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
198.35.26.32/27 *[BGP/170] 00:05:25, MED 0, localpref 100
AS path: 14907 4265004002 I, validation-state: unverified
to 198.35.26.146 via xe-0/0/10.0
> to 198.35.26.142 via xe-0/0/11.0
[BGP/170] 00:06:43, MED 0, localpref 100
AS path: 14907 4265004002 I, validation-state: unverified
> to 198.35.26.146 via xe-0/0/10.0asw1-22-ulsfo> ping 10.128.1.1 PING 10.128.1.1 (10.128.1.1): 56 data bytes 64 bytes from 10.128.1.1: icmp_seq=0 ttl=63 time=115.754 ms 64 bytes from 10.128.1.1: icmp_seq=1 ttl=63 time=110.220 ms