====== Migrate MC-LAG to OmniSwitch Virtual-Chassis ======
{{::a-titelbild.png?nolink|}}
In this TechTip we describe how to successfully migrate from Alcatel-Lucent MC-LAG to Virtual-Chassis. Our experience is that the migration (mainly reload of the switches) takes **less than 5 minutes**. We recommend to read through this document before you start.
**Please validate/check the configuration carefully before you reboot your switches!**
===== Prerequisites =====
We'll use VIM to automate many, otherwise error-prone, modifications of the configuration.
VIM is an amazing tool and should not be missing on any workstation.
* Download for MacOSX: http://code.google.com/p/macvim/
* Download for Windows: http://www.vim.org/download.php#pc
* Download for Linux: http://www.vim.org/download.php#unix
You should set the following in VIM to highlight the results of "Search & Replace" as we'll use it throughout the document:
:set hlsearch
* On OmniSwitch you'll need the "Advanced" license to use Virtual-Chassis
* Please read carefully through the u-boot / AOS dependencies! Details can be found in the "Upgrade Instructions".
===== Comparison of MC-LAG and Virtual-Chassis =====
^ MC-LAG ^ Virtual-Chassis ^
| Available in AOS 7.1.1.R01 | Available in AOS 7.3.1.R01 |
| L2-Learning in hardware\\ (MAC-ADDRESS table synchronised across chassis) | L2-Learning in hardware\\ (MAC-ADDRESS table synchronised across chassis) |
| Independent configuration with separate Management-IP for each switch | Configuration and management of Virtual Chassis is done through one unified IP-Adresse |
| Independent Bridge-IDs | **One** Bridge-ID |
| Independent Routers | **One** Router |
| Limited IPv4-L3-Support for MC-LAG (e.g. dynamic routing protocols) | Full support |
| No IPv6-L3-Support for MC-LAGs (e.g. gateway, dynamic routing) | Full support |
| Virtual Fabric Link (VFL), fault-tolerant and high-performance Link-Aggregate | Identical |
| Limited to two chassis | Currently two chassis, soon six |
| ISSU within the same chassis | ISSU across the chassis |
==== Reasons to migrate from MC-LAG to Virtual-Chassis ====
* simple, unified Management
* IPv6-Support
* IPv4/IPv6-Routing
===== Planning the migration =====
* vcsetup.cfg's need to be prepared
* MC-LAG and System/Session:
* "multi-chassis"-rows need to be completely removed from configuration
* "session prompt" needs to be removed from 2nd chassis
* "system name", "system location", "system contact" & "ip interface" needs to be removed from 2nd chassis
* Link-Aggregation:
* "linkagg range" row needs to be removed from configuration
* linkagg {lacp|static} agg size admin-state {enable|disable} "multi-chassis active" needs to be removed from configuration
* linkagg lacp agg "system-id xx:xx:xx:xx:xx:xx" needs to be removed from configuration
* linkagg {lacp|static} port "system-id xx:xx:xx:xx:xx:xx" needs to be removed from configuration
* Convert linkagg {lacp|static} port "slot/port" to "chassis/slot/port"
* VLAN:
* Convert multi-chassis vip-vlan to normal vlan
* Convert VLAN-Assignement of ports tagged/untagged "slot/port" to "chassis/slot/port"
* IP-Interface:
* Either re-use the former virtual IP address (VIP-ADDRESS) as VRRP **OR**
* Create and use IP-Interface with former "vip-address" (replace previous "physical IP" with "vip-address)
* (Remove IP Interfaces from 2nd chassis)
* LLDP:
* Convert "slot/port" to "chassis/slot/port"
* Additional configuration
* Verify if there are any configurations in your specific setup that are not handled during this migration?
===== Prepare for the migration =====
If not stated otherwise, VIM-commands need to be executed for "Chassis 1" and "Chassis 2" configuration.
==== Convert and remove the Multi-Chassis & VF-Link configuration ====
At this point we'll remove the multi-chassis configuration. You should store the parameters in a safe place and create new vcsetup.cfg files. In the following we'll see how those kind of files need to look like.
To ease the migration, the following VIM-commands will help us to create the two vcsetup.cfg's:
If you put a "c" (confirmation) after the "g" (global), VIM will request a confirmation before replacing each occurrence. If you don't want VIM to do that, simply remove the "c".
Chassis 1:
:%s/^multi-chassis\ chassis-id\ \(\d\+\)$/virtual-chassis chassis-id \1 configured-chassis-id \1/gc
:%s/^multi-chassis\ vf-link\ create$/virtual-chassis chassis-id 1 vf-link 0 create/gc
:%s/^multi-chassis\ vf-link\ member-port\ \(\d\+\/\S*\)$/virtual-chassis chassis-id 1 vf-link 0 member-port 1\/\1/gc
:%s/^multi-chassis\ chassis-group\ \(\d\+\)$/virtual-chassis chassis-id 1 chassis-group \1/gc
Chassis 2:
:%s/^multi-chassis\ chassis-id\ \(\d\+\)$/virtual-chassis chassis-id \1 configured-chassis-id \1/gc
:%s/^multi-chassis\ vf-link\ create$/virtual-chassis chassis-id 2 vf-link 0 create/gc
:%s/^multi-chassis\ vf-link\ member-port\ \(\d\+\/\S*\)$/virtual-chassis chassis-id 2 vf-link 0 member-port 2\/\1/gc
:%s/^multi-chassis\ chassis-group\ \(\d\+\)$/virtual-chassis chassis-id 2 chassis-group \1/gc
{{::mclag-migration-bild8.png?nolink|}}
(The German word "Magie" means "magic".)
**After you copied the lines and put them in the separate vcsetup.cfg's you can remove those rows from the configuration with the following command (removes both, multi-chassis and converted virtual-chassis commands)**
:g/^\(multi\|virtual\)-chassis\ \(cha\|vf-\).*$/d
==== Remove the "linkagg range" from configuration ====
:g/^linkagg\ range.*$/d
==== Remove "multi-chassis active" from the link-aggregate configuration ====
:%s/\ multi-chassis\ active.*$//gc
{{:mclag-migration-bild6.png?nolink|}}
==== Remove "system-id xx:xx:xx:xx:xx:xx"-rows from Link-Aggregation port/agg configuration ====
:g/^linkagg\ \(.*system-id\).*$/d
==== Convert Link-Aggregate configuration from "slot/port" to "chassis/slot/port" ====
Chassis 1:
:%s/^linkagg\ \(static\|lacp\)\ port\ \(\d\+\/\S*\)/linkagg \1 port 1\/\2/gc
Chassis 2:
:%s/^linkagg\ \(static\|lacp\)\ port\ \(\d\+\/\S*\)/linkagg \1 port 2\/\2/gc
{{:mclag-migration-bild7.png?nolink|}}
==== Replace "multi-chassis vip-vlan" with standard "vlan" ====
:%s/^multi-chassis\ vip-vlan/vlan/gc
==== Convert VLAN port assignment from "slot/port" to "chassis/slot/port" ====
Chassis 1:
:%s/^vlan\ \(\d\+\)\ members\ port\ \(\d\+\/\S*\)/vlan \1 members port 1\/\2/gc
Chassis 2:
:%s/^vlan\ \(\d\+\)\ members\ port\ \(\d\+\/\S*\)/vlan \1 members port 2\/\2/gc
==== Automate the convertion of IP-Interfaces ====
After the migration from MC-LAG to Virtual-Chassis our servers/clients should be able to use the same gateway as before, hence we convert the IP-Interfaces to represent the "VIP-ADDRESS" as new physical IP.
(If you don't want to do that automated convertion, but use e.g. VRRP you need to do this step manually.)
Chassis 1:
:%s/^ip\ interface\ \(\".*\"\)\ address \(\d\+\.\d\+\.\d\+\.\d\+\)\ mask\ \(\d\+\.\d\+\.\d\+\.\d\+\)\ vip-address\ \(\d\+\.\d\+\.\d\+\.\d\+\)/ip interface \1 address \4 mask \3/gc
Chassis 2:
:g/^ip\ interface.*$/d
{{::mclag-migration-bild9.png?nolink|}}
==== Convert LLDP configuration from "slot/port" to "chassis/slot/port" ====
Chassis 1:
:%s/^lldp\ \(nearest-bridge\|non-tpmr\|nearest-customer\)\ port \(\d\+\/\S*\)/lldp \1 port 1\/\2/gc
Chassis 2:
:%s/^lldp\ \(nearest-bridge\|non-tpmr\|nearest-customer\)\ port \(\d\+\/\S*\)/lldp \1 port 2\/\2/gc
{{:mclag-migration-bild5.png?nolink|}}
==== Remove unnecessary configuration/parameters ====
**You should remove unnecessary configuratin/parameters from __Chassis 2__ as otherwise the merge of the two configuration is not straight forward:**
:g/^system\ \(name\|contact\|location\)/d
:g/^session\ prompt/d
**Save the changes to both files and close them with VIM-command ":wq".**
==== Create the vcboot.cfg for Virtual Chassis ====
**In the following you can see that we opened the primary configuration (chassis-1):**
{{:mclag-migration-bild1.png?nolink|}}
**In the next step we open the configuration of the 2nd chassis and highlight the differences, so that we can easily copy them:**
:vert diffsplit CORE02.cfg
{{:mclag-migration-bild2.png?nolink|}}
You can jump between the windows with the VIM-command CTRL+WW.
You can select rows visually with the VIM-command Shift+V (as seen in the screenshot) and cut the selected rows with "d".
{{:mclag-migration-bild3.png?nolink|}}
We'll paste the rows that you just cut (after changing focus to the "primary configuration" with CTRL+WW) using the VIM-command "p" at the desired position of the configuration. This step needs to be repeated for VLAN port assignment, link-aggregate port assignment, LLDP port configuration etc.
{{:mclag-migration-bild4.png?nolink|}}
**After you have merged all relevant configuration, you can save the configuration with the following VIM-command to "vcboot.cfg":**
:w vcboot.cfg
===== Example Configuration =====
==== MC-LAG Node 1 (CORE01) ====
!========================================!
! File: /flash/working/boot.cfg !
!========================================!
! Chassis:
system name MC-Lag1
system contact myContact
system location "1. DC"
mac-retention admin-state enable
mac-retention dup-mac-trap admin-state enable
mac-retention timer 30
! Configuration:
! Capability Manager:
! Multi-Chassis:
multi-chassis chassis-id 1
multi-chassis vf-link create
multi-chassis vf-link member-port 1/1
multi-chassis vf-link member-port 1/20
multi-chassis chassis-group 9
! Virtual Chassis Manager:
! Virtual Flow Control:
! Interface:
! Link Aggregate:
linkagg range local 0-47 peer 48-95 multi-chassis 96-127
linkagg lacp agg 96 size 2 admin-state enable multi-chassis active
linkagg lacp agg 96 name "RACK01"
linkagg lacp agg 96 actor system-id 00:00:00:00:00:96
linkagg lacp agg 96 actor admin-key 96
linkagg lacp agg 97 size 2 admin-state enable multi-chassis active
linkagg lacp agg 97 name "RACK02"
linkagg lacp agg 97 actor system-id 00:00:00:00:00:97
linkagg lacp agg 97 actor admin-key 97
linkagg lacp agg 98 size 2 admin-state enable multi-chassis active
linkagg lacp agg 98 name "RACK03"
linkagg lacp agg 98 actor system-id 00:00:00:00:00:98
linkagg lacp agg 98 actor admin-key 98
linkagg lacp agg 99 size 2 admin-state enable multi-chassis active
linkagg lacp agg 99 name "RACK04"
linkagg lacp agg 99 actor system-id 00:00:00:00:00:99
linkagg lacp agg 99 actor admin-key 99
linkagg lacp agg 100 size 2 admin-state enable multi-chassis active
linkagg lacp agg 100 name "SW01"
linkagg lacp agg 100 actor system-id 00:00:00:00:01:00
linkagg lacp agg 100 actor admin-key 100
linkagg lacp agg 101 size 2 admin-state enable multi-chassis active
linkagg lacp agg 101 name "SW02"
linkagg lacp agg 101 actor system-id 00:00:00:00:01:01
linkagg lacp agg 101 actor admin-key 101
linkagg lacp agg 102 size 2 admin-state enable multi-chassis active
linkagg lacp agg 102 name "SW03"
linkagg lacp agg 102 actor system-id 00:00:00:00:01:02
linkagg lacp agg 102 actor admin-key 102
linkagg lacp agg 103 size 2 admin-state enable multi-chassis active
linkagg lacp agg 103 name "SW04"
linkagg lacp agg 103 actor system-id 00:00:00:00:01:03
linkagg lacp agg 103 actor admin-key 103
linkagg lacp agg 104 size 2 admin-state enable multi-chassis active
linkagg lacp agg 104 name "SW05"
linkagg lacp agg 104 actor system-id 00:00:00:00:01:04
linkagg lacp agg 104 actor admin-key 104
linkagg lacp agg 105 size 2 admin-state enable multi-chassis active
linkagg lacp agg 105 name "SW06"
linkagg lacp agg 105 actor system-id 00:00:00:00:01:05
linkagg lacp agg 105 actor admin-key 105
linkagg lacp agg 106 size 2 admin-state enable multi-chassis active
linkagg lacp agg 106 name "SW07"
linkagg lacp agg 106 actor system-id 00:00:00:00:01:06
linkagg lacp agg 106 actor admin-key 106
linkagg lacp port 1/2 actor admin-key 96
linkagg lacp port 1/2 actor system-id 00:00:00:00:00:96
linkagg lacp port 1/3 actor admin-key 97
linkagg lacp port 1/3 actor system-id 00:00:00:00:00:97
linkagg lacp port 1/4 actor admin-key 98
linkagg lacp port 1/4 actor system-id 00:00:00:00:00:98
linkagg lacp port 1/5 actor admin-key 99
linkagg lacp port 1/5 actor system-id 00:00:00:00:00:99
linkagg lacp port 1/6 actor admin-key 100
linkagg lacp port 1/6 actor system-id 00:00:00:00:01:00
linkagg lacp port 1/7 actor admin-key 101
linkagg lacp port 1/7 actor system-id 00:00:00:00:01:01
linkagg lacp port 1/8 actor admin-key 102
linkagg lacp port 1/8 actor system-id 00:00:00:00:01:02
linkagg lacp port 1/9 actor admin-key 103
linkagg lacp port 1/9 actor system-id 00:00:00:00:01:03
linkagg lacp port 1/10 actor admin-key 104
linkagg lacp port 1/10 actor system-id 00:00:00:00:01:04
linkagg lacp port 1/11 actor admin-key 105
linkagg lacp port 1/11 actor system-id 00:00:00:00:01:05
linkagg lacp port 1/12 actor admin-key 106
linkagg lacp port 1/12 actor system-id 00:00:00:00:01:06
! VLAN:
vlan 1 admin-state enable
vlan 1 name "Mgmt"
multi-chassis vip-vlan 100 admin-state enable
multi-chassis vip-vlan 100 name "Server"
vlan 102-104 admin-state enable
vlan 102 name "Guest"
vlan 103 name "VoIP"
vlan 104 name "Build"
vlan 106 admin-state enable
vlan 106 name "Dev"
multi-chassis vip-vlan 110-113 admin-state enable
multi-chassis vip-vlan 110 name "Client1"
multi-chassis vip-vlan 111 name "Client2"
multi-chassis vip-vlan 112 name "Client3"
multi-chassis vip-vlan 113 name "Client4"
multi-chassis vip-vlan 150 admin-state enable
multi-chassis vip-vlan 150 name "VIP VLAN"
vlan 100 members linkagg 96-99 tagged
vlan 102 members linkagg 100-106 tagged
vlan 103 members linkagg 96-106 tagged
vlan 104 members linkagg 96-106 tagged
vlan 106 members linkagg 96-106 tagged
vlan 110 members linkagg 100-101 tagged
vlan 111 members linkagg 102-103 tagged
vlan 112 members linkagg 104-105 tagged
vlan 113 members linkagg 106 tagged
vlan 150 members linkagg 96-99 tagged
! Spanning Tree:
spantree vlan 1 admin-state enable
spantree vlan 100 admin-state enable
spantree vlan 102 admin-state enable
spantree vlan 103 admin-state enable
spantree vlan 104 admin-state enable
spantree vlan 106 admin-state enable
spantree vlan 110 admin-state enable
spantree vlan 111 admin-state enable
spantree vlan 112 admin-state enable
spantree vlan 113 admin-state enable
spantree vlan 150 admin-state enable
! Bridging:
! Port Mirroring:
! Port Mapping:
! IP:
ip service port 21 admin-state enable
ip service port 22 admin-state enable
ip service port 23 admin-state enable
ip service port 80 admin-state enable
ip service port 123 admin-state enable
ip service port 443 admin-state enable
ip interface "Mgmt" address 192.168.130.197 mask 255.255.255.0 vlan 1 no forward ifindex 1
ip interface "Client1" address 10.2.140.197 mask 255.255.255.0 vip-address 10.2.140.1 vlan 110 ifindex 2
ip interface "Client2" address 10.2.141.197 mask 255.255.255.0 vip-address 10.2.141.1 vlan 111 ifindex 3
ip interface "Client3" address 10.2.142.197 mask 255.255.255.0 vip-address 10.2.142.1 vlan 112 ifindex 4
ip interface "Client4" address 10.2.143.197 mask 255.255.255.0 vip-address 10.2.143.1 vlan 113 ifindex 5
ip interface "Server" address 10.2.128.197 mask 255.255.255.0 vip-address 10.2.128.1 vlan 100 ifindex 6
ip interface "Transfer_Firewall" address 192.168.150.197 mask 255.255.255.0 vip-address 192.168.150.1 vlan 150 ifindex 7
! IPv6:
! IPSec:
! IPMS:
! AAA:
aaa authentication console "local"
aaa authentication ftp "local"
aaa authentication http "local"
aaa authentication snmp "local"
aaa authentication ssh "local"
user password-size min 6
! NTP:
ntp server 192.168.2.253
ntp client admin-state enable
! QOS:
policy condition from_voip source vlan 103
policy action set_dscp dscp 46
policy rule prio_voip condition from_voip action set_dscp
qos apply
! Policy Manager:
! VLAN Stacking:
! ERP:
! MVRP:
! LLDP:
lldp nearest-bridge port 1/1-20 tlv management system-capabilities enable
lldp nearest-bridge port 1/1-20 tlv management system-description enable
lldp nearest-bridge port 1/1-20 tlv management system-name enable
lldp nearest-bridge port 1/1-20 tlv management port-description enable
lldp non-tpmr port 1/1-20 tlv management system-capabilities enable
lldp non-tpmr port 1/1-20 tlv management system-description enable
lldp non-tpmr port 1/1-20 tlv management system-name enable
lldp non-tpmr port 1/1-20 tlv management port-description enable
lldp nearest-customer port 1/1-20 tlv management system-capabilities enable
lldp nearest-customer port 1/1-20 tlv management system-description enable
lldp nearest-customer port 1/1-20 tlv management system-name enable
lldp nearest-customer port 1/1-20 tlv management port-description enable
lldp nearest-bridge port 1/1-20 tlv management management-address enable
lldp non-tpmr port 1/1-20 tlv management management-address enable
lldp nearest-customer port 1/1-20 tlv management management-address enable
! UDLD:
! Server Load Balance:
! High Availability Vlan:
! Session Manager:
session cli timeout 30
session http timeout 30
session prompt default "CORE01 ->"
command-log enable
! Web:
! Trap Manager:
snmp station 192.168.2.203 162 "snmpv3" v3 enable
! Health Monitor:
! System Service:
swlog output socket 192.168.2.203
system timezone CET
! SNMP:
snmp security authentication set
snmp community-map mode enable
snmp community-map "public" user "snmp" enable
! BFD:
! IP Route Manager:
ip static-route 0.0.0.0/0 gateway 192.168.150.253 metric 1
! VRRP:
! UDP Relay:
! RIP:
! OSPF:
! ISIS:
! IP Multicast:
! DVMRP:
! IPMR:
! RIPng:
! OSPF3:
! BGP:
! Netsec:
! Module:
! RDP:
! DA-UNP:
! DHL:
! Ethernet-OAM:
! SAA:
! SPB-ISIS:
! SVCMGR:
! LDP:
! EVB:
==== Modified configuration of MC-LAG Node 1 (CORE01) ====
!========================================!
! File: /flash/working/boot.cfg !
!========================================!
! Chassis:
system name MC-Lag1
system contact myContact
system location "1. DC"
mac-retention admin-state enable
mac-retention dup-mac-trap admin-state enable
mac-retention timer 30
! Configuration:
! Capability Manager:
! Multi-Chassis:
! Virtual Chassis Manager:
! Virtual Flow Control:
! Interface:
! Link Aggregate:
linkagg lacp agg 96 size 2 admin-state enable
linkagg lacp agg 96 name "RACK01"
linkagg lacp agg 96 actor admin-key 96
linkagg lacp agg 97 size 2 admin-state enable
linkagg lacp agg 97 name "RACK02"
linkagg lacp agg 97 actor admin-key 97
linkagg lacp agg 98 size 2 admin-state enable
linkagg lacp agg 98 name "RACK03"
linkagg lacp agg 98 actor admin-key 98
linkagg lacp agg 99 size 2 admin-state enable
linkagg lacp agg 99 name "RACK04"
linkagg lacp agg 99 actor admin-key 99
linkagg lacp agg 100 size 2 admin-state enable
linkagg lacp agg 100 name "SW01"
linkagg lacp agg 100 actor admin-key 100
linkagg lacp agg 101 size 2 admin-state enable
linkagg lacp agg 101 name "SW02"
linkagg lacp agg 101 actor admin-key 101
linkagg lacp agg 102 size 2 admin-state enable
linkagg lacp agg 102 name "SW03"
linkagg lacp agg 102 actor admin-key 102
linkagg lacp agg 103 size 2 admin-state enable
linkagg lacp agg 103 name "SW04"
linkagg lacp agg 103 actor admin-key 103
linkagg lacp agg 104 size 2 admin-state enable
linkagg lacp agg 104 name "SW05"
linkagg lacp agg 104 actor admin-key 104
linkagg lacp agg 105 size 2 admin-state enable
linkagg lacp agg 105 name "SW06"
linkagg lacp agg 105 actor admin-key 105
linkagg lacp agg 106 size 2 admin-state enable
linkagg lacp agg 106 name "SW07"
linkagg lacp agg 106 actor admin-key 106
linkagg lacp port 1/1/2 actor admin-key 96
linkagg lacp port 1/1/3 actor admin-key 97
linkagg lacp port 1/1/4 actor admin-key 98
linkagg lacp port 1/1/5 actor admin-key 99
linkagg lacp port 1/1/6 actor admin-key 100
linkagg lacp port 1/1/7 actor admin-key 101
linkagg lacp port 1/1/8 actor admin-key 102
linkagg lacp port 1/1/9 actor admin-key 103
linkagg lacp port 1/1/10 actor admin-key 104
linkagg lacp port 1/1/11 actor admin-key 105
linkagg lacp port 1/1/12 actor admin-key 106
! VLAN:
vlan 1 admin-state enable
vlan 1 name "Mgmt"
vlan 100 admin-state enable
vlan 100 name "Server"
vlan 102-104 admin-state enable
vlan 102 name "Guest"
vlan 103 name "VoIP"
vlan 104 name "Build"
vlan 106 admin-state enable
vlan 106 name "Dev"
vlan 110-113 admin-state enable
vlan 110 name "Client1"
vlan 111 name "Client2"
vlan 112 name "Client3"
vlan 113 name "Client4"
vlan 150 admin-state enable
vlan 150 name "VIP VLAN"
vlan 100 members linkagg 96-99 tagged
vlan 102 members linkagg 100-106 tagged
vlan 103 members linkagg 96-106 tagged
vlan 104 members linkagg 96-106 tagged
vlan 106 members linkagg 96-106 tagged
vlan 110 members linkagg 100-101 tagged
vlan 111 members linkagg 102-103 tagged
vlan 112 members linkagg 104-105 tagged
vlan 113 members linkagg 106 tagged
vlan 150 members linkagg 96-99 tagged
! Spanning Tree:
spantree vlan 1 admin-state enable
spantree vlan 100 admin-state enable
spantree vlan 102 admin-state enable
spantree vlan 103 admin-state enable
spantree vlan 104 admin-state enable
spantree vlan 106 admin-state enable
spantree vlan 110 admin-state enable
spantree vlan 111 admin-state enable
spantree vlan 112 admin-state enable
spantree vlan 113 admin-state enable
spantree vlan 150 admin-state enable
! Bridging:
! Port Mirroring:
! Port Mapping:
! IP:
ip service port 21 admin-state enable
ip service port 22 admin-state enable
ip service port 23 admin-state enable
ip service port 80 admin-state enable
ip service port 123 admin-state enable
ip service port 443 admin-state enable
ip interface "Mgmt" address 192.168.130.197 mask 255.255.255.0 vlan 1 no forward ifindex 1
ip interface "Client1" address 10.2.140.1 mask 255.255.255.0 vlan 110 ifindex 2
ip interface "Client2" address 10.2.141.1 mask 255.255.255.0 vlan 111 ifindex 3
ip interface "Client3" address 10.2.142.1 mask 255.255.255.0 vlan 112 ifindex 4
ip interface "Client4" address 10.2.143.1 mask 255.255.255.0 vlan 113 ifindex 5
ip interface "Server" address 10.2.128.1 mask 255.255.255.0 vlan 100 ifindex 6
ip interface "Transfer_Firewall" address 192.168.150.1 mask 255.255.255.0 vlan 150 ifindex 7
! IPv6:
! IPSec:
! IPMS:
! AAA:
aaa authentication console "local"
aaa authentication ftp "local"
aaa authentication http "local"
aaa authentication snmp "local"
aaa authentication ssh "local"
user password-size min 6
! NTP:
ntp server 192.168.2.253
ntp client admin-state enable
! QOS:
policy condition from_voip source vlan 103
policy action set_dscp dscp 46
policy rule prio_voip condition from_voip action set_dscp
qos apply
! Policy Manager:
! VLAN Stacking:
! ERP:
! MVRP:
! LLDP:
lldp nearest-bridge port 1/1/1-20 tlv management system-capabilities enable
lldp nearest-bridge port 1/1/1-20 tlv management system-description enable
lldp nearest-bridge port 1/1/1-20 tlv management system-name enable
lldp nearest-bridge port 1/1/1-20 tlv management port-description enable
lldp non-tpmr port 1/1/1-20 tlv management system-capabilities enable
lldp non-tpmr port 1/1/1-20 tlv management system-description enable
lldp non-tpmr port 1/1/1-20 tlv management system-name enable
lldp non-tpmr port 1/1/1-20 tlv management port-description enable
lldp nearest-customer port 1/1/1-20 tlv management system-capabilities enable
lldp nearest-customer port 1/1/1-20 tlv management system-description enable
lldp nearest-customer port 1/1/1-20 tlv management system-name enable
lldp nearest-customer port 1/1/1-20 tlv management port-description enable
lldp nearest-bridge port 1/1/1-20 tlv management management-address enable
lldp non-tpmr port 1/1/1-20 tlv management management-address enable
lldp nearest-customer port 1/1/1-20 tlv management management-address enable
! UDLD:
! Server Load Balance:
! High Availability Vlan:
! Session Manager:
session cli timeout 30
session http timeout 30
session prompt default "CORE01 ->"
command-log enable
! Web:
! Trap Manager:
snmp station 192.168.2.203 162 "snmpv3" v3 enable
! Health Monitor:
! System Service:
swlog output socket 192.168.2.203
system timezone CET
! SNMP:
snmp security authentication set
snmp community-map mode enable
snmp community-map "public" user "snmp" enable
! BFD:
! IP Route Manager:
ip static-route 0.0.0.0/0 gateway 192.168.150.253 metric 1
! VRRP:
! UDP Relay:
! RIP:
! OSPF:
! ISIS:
! IP Multicast:
! DVMRP:
! IPMR:
! RIPng:
! OSPF3:
! BGP:
! Netsec:
! Module:
! RDP:
! DA-UNP:
! DHL:
! Ethernet-OAM:
! SAA:
! SPB-ISIS:
! SVCMGR:
! LDP:
! EVB:
==== MC-LAG Node 2 (CORE02) ====
!========================================!
! File: /flash/working/boot.cfg !
!========================================!
! Chassis:
system name MC-Lag2
system contact myContact
system location "1. DC"
mac-retention admin-state enable
mac-retention dup-mac-trap admin-state enable
mac-retention timer 30
! Configuration:
! Capability Manager:
! Multi-Chassis:
multi-chassis chassis-id 2
multi-chassis vf-link create
multi-chassis vf-link member-port 1/1
multi-chassis vf-link member-port 1/20
multi-chassis chassis-group 9
! Virtual Chassis Manager:
! Virtual Flow Control:
! Interface:
! Link Aggregate:
linkagg range local 48-95 peer 0-47 multi-chassis 96-127
linkagg lacp agg 96 size 2 admin-state enable multi-chassis active
linkagg lacp agg 96 name "RACK01"
linkagg lacp agg 96 actor system-id 00:00:00:00:00:96
linkagg lacp agg 96 actor admin-key 96
linkagg lacp agg 97 size 2 admin-state enable multi-chassis active
linkagg lacp agg 97 name "RACK02"
linkagg lacp agg 97 actor system-id 00:00:00:00:00:97
linkagg lacp agg 97 actor admin-key 97
linkagg lacp agg 98 size 2 admin-state enable multi-chassis active
linkagg lacp agg 98 name "RACK03"
linkagg lacp agg 98 actor system-id 00:00:00:00:00:98
linkagg lacp agg 98 actor admin-key 98
linkagg lacp agg 99 size 2 admin-state enable multi-chassis active
linkagg lacp agg 99 name "RACK04"
linkagg lacp agg 99 actor system-id 00:00:00:00:00:99
linkagg lacp agg 99 actor admin-key 99
linkagg lacp agg 100 size 2 admin-state enable multi-chassis active
linkagg lacp agg 100 name "SW01"
linkagg lacp agg 100 actor system-id 00:00:00:00:01:00
linkagg lacp agg 100 actor admin-key 100
linkagg lacp agg 101 size 2 admin-state enable multi-chassis active
linkagg lacp agg 101 name "SW02"
linkagg lacp agg 101 actor system-id 00:00:00:00:01:01
linkagg lacp agg 101 actor admin-key 101
linkagg lacp agg 102 size 2 admin-state enable multi-chassis active
linkagg lacp agg 102 name "SW03"
linkagg lacp agg 102 actor system-id 00:00:00:00:01:02
linkagg lacp agg 102 actor admin-key 102
linkagg lacp agg 103 size 2 admin-state enable multi-chassis active
linkagg lacp agg 103 name "SW04"
linkagg lacp agg 103 actor system-id 00:00:00:00:01:03
linkagg lacp agg 103 actor admin-key 103
linkagg lacp agg 104 size 2 admin-state enable multi-chassis active
linkagg lacp agg 104 name "SW05"
linkagg lacp agg 104 actor system-id 00:00:00:00:01:04
linkagg lacp agg 104 actor admin-key 104
linkagg lacp agg 105 size 2 admin-state enable multi-chassis active
linkagg lacp agg 105 name "SW06"
linkagg lacp agg 105 actor system-id 00:00:00:00:01:05
linkagg lacp agg 105 actor admin-key 105
linkagg lacp agg 106 size 2 admin-state enable multi-chassis active
linkagg lacp agg 106 name "SW07"
linkagg lacp agg 106 actor system-id 00:00:00:00:01:06
linkagg lacp agg 106 actor admin-key 106
linkagg lacp port 1/2 actor admin-key 96
linkagg lacp port 1/2 actor system-id 00:00:00:00:00:96
linkagg lacp port 1/3 actor admin-key 97
linkagg lacp port 1/3 actor system-id 00:00:00:00:00:97
linkagg lacp port 1/4 actor admin-key 98
linkagg lacp port 1/4 actor system-id 00:00:00:00:00:98
linkagg lacp port 1/5 actor admin-key 99
linkagg lacp port 1/5 actor system-id 00:00:00:00:00:99
linkagg lacp port 1/6 actor admin-key 100
linkagg lacp port 1/6 actor system-id 00:00:00:00:01:00
linkagg lacp port 1/7 actor admin-key 101
linkagg lacp port 1/7 actor system-id 00:00:00:00:01:01
linkagg lacp port 1/8 actor admin-key 102
linkagg lacp port 1/8 actor system-id 00:00:00:00:01:02
linkagg lacp port 1/9 actor admin-key 103
linkagg lacp port 1/9 actor system-id 00:00:00:00:01:03
linkagg lacp port 1/10 actor admin-key 104
linkagg lacp port 1/10 actor system-id 00:00:00:00:01:04
linkagg lacp port 1/11 actor admin-key 105
linkagg lacp port 1/11 actor system-id 00:00:00:00:01:05
linkagg lacp port 1/12 actor admin-key 106
linkagg lacp port 1/12 actor system-id 00:00:00:00:01:06
! VLAN:
vlan 1 admin-state enable
vlan 1 name "Mgmt"
multi-chassis vip-vlan 100 admin-state enable
multi-chassis vip-vlan 100 name "Server"
vlan 102-104 admin-state enable
vlan 102 name "Guest"
vlan 103 name "VoIP"
vlan 104 name "Build"
vlan 106 admin-state enable
vlan 106 name "Dev"
multi-chassis vip-vlan 110-113 admin-state enable
multi-chassis vip-vlan 110 name "Client1"
multi-chassis vip-vlan 111 name "Client2"
multi-chassis vip-vlan 112 name "Client3"
multi-chassis vip-vlan 113 name "Client4"
multi-chassis vip-vlan 150 admin-state enable
multi-chassis vip-vlan 150 name "VIP VLAN"
vlan 100 members linkagg 96-99 tagged
vlan 102 members linkagg 100-106 tagged
vlan 103 members linkagg 96-106 tagged
vlan 104 members linkagg 96-106 tagged
vlan 106 members linkagg 96-106 tagged
vlan 110 members linkagg 100-101 tagged
vlan 111 members linkagg 102-103 tagged
vlan 112 members linkagg 104-105 tagged
vlan 113 members linkagg 106 tagged
vlan 150 members linkagg 96-99 tagged
! Spanning Tree:
spantree vlan 1 admin-state enable
spantree vlan 100 admin-state enable
spantree vlan 102 admin-state enable
spantree vlan 103 admin-state enable
spantree vlan 104 admin-state enable
spantree vlan 106 admin-state enable
spantree vlan 110 admin-state enable
spantree vlan 111 admin-state enable
spantree vlan 112 admin-state enable
spantree vlan 113 admin-state enable
spantree vlan 150 admin-state enable
! Bridging:
! Port Mirroring:
! Port Mapping:
! IP:
ip service port 21 admin-state enable
ip service port 22 admin-state enable
ip service port 23 admin-state enable
ip service port 80 admin-state enable
ip service port 123 admin-state enable
ip service port 443 admin-state enable
ip interface "Mgmt" address 192.168.130.198 mask 255.255.255.0 vlan 1 no forward ifindex 1
ip interface "Client1" address 10.2.140.198 mask 255.255.255.0 vip-address 10.2.140.1 vlan 110 ifindex 2
ip interface "Client2" address 10.2.141.198 mask 255.255.255.0 vip-address 10.2.141.1 vlan 111 ifindex 3
ip interface "Client3" address 10.2.142.198 mask 255.255.255.0 vip-address 10.2.142.1 vlan 112 ifindex 4
ip interface "Client4" address 10.2.143.198 mask 255.255.255.0 vip-address 10.2.143.1 vlan 113 ifindex 5
ip interface "Server" address 10.2.128.198 mask 255.255.255.0 vip-address 10.2.128.1 vlan 100 ifindex 6
ip interface "Transfer_Firewall" address 192.168.150.198 mask 255.255.255.0 vip-address 192.168.150.1 vlan 150 ifindex 7
! IPv6:
! IPSec:
! IPMS:
! AAA:
aaa authentication console "local"
aaa authentication ftp "local"
aaa authentication http "local"
aaa authentication snmp "local"
aaa authentication ssh "local"
user password-size min 6
! NTP:
ntp server 192.168.2.253
ntp client admin-state enable
! QOS:
policy condition from_voip source vlan 103
policy action set_dscp dscp 46
policy rule prio_voip condition from_voip action set_dscp
qos apply
! Policy Manager:
! VLAN Stacking:
! ERP:
! MVRP:
! LLDP:
lldp nearest-bridge port 1/1-20 tlv management system-capabilities enable
lldp nearest-bridge port 1/1-20 tlv management system-description enable
lldp nearest-bridge port 1/1-20 tlv management system-name enable
lldp nearest-bridge port 1/1-20 tlv management port-description enable
lldp non-tpmr port 1/1-20 tlv management system-capabilities enable
lldp non-tpmr port 1/1-20 tlv management system-description enable
lldp non-tpmr port 1/1-20 tlv management system-name enable
lldp non-tpmr port 1/1-20 tlv management port-description enable
lldp nearest-customer port 1/1-20 tlv management system-capabilities enable
lldp nearest-customer port 1/1-20 tlv management system-description enable
lldp nearest-customer port 1/1-20 tlv management system-name enable
lldp nearest-customer port 1/1-20 tlv management port-description enable
lldp nearest-bridge port 1/1-20 tlv management management-address enable
lldp non-tpmr port 1/1-20 tlv management management-address enable
lldp nearest-customer port 1/1-20 tlv management management-address enable
! UDLD:
! Server Load Balance:
! High Availability Vlan:
! Session Manager:
session cli timeout 30
session http timeout 30
session prompt default "CORE02 ->"
command-log enable
! Web:
! Trap Manager:
snmp station 192.168.2.203 162 "snmpv3" v3 enable
! Health Monitor:
! System Service:
swlog output socket 192.168.2.203
system timezone CET
! SNMP:
snmp security authentication set
snmp community-map mode enable
snmp community-map "public" user "snmp" enable
! BFD:
! IP Route Manager:
ip static-route 0.0.0.0/0 gateway 192.168.150.253 metric 1
! VRRP:
! UDP Relay:
! RIP:
! OSPF:
! ISIS:
! IP Multicast:
! DVMRP:
! IPMR:
! RIPng:
! OSPF3:
! BGP:
! Netsec:
! Module:
! RDP:
! DA-UNP:
! DHL:
! Ethernet-OAM:
! SAA:
! SPB-ISIS:
! SVCMGR:
! LDP:
! EVB:
==== Modified configuration of MC-LAG Node 2 (CORE02) ====
!========================================!
! File: /flash/working/boot.cfg !
!========================================!
! Chassis:
mac-retention admin-state enable
mac-retention dup-mac-trap admin-state enable
mac-retention timer 30
! Configuration:
! Capability Manager:
! Multi-Chassis:
! Virtual Chassis Manager:
! Virtual Flow Control:
! Interface:
! Link Aggregate:
linkagg lacp agg 96 size 2 admin-state enable
linkagg lacp agg 96 name "RACK01"
linkagg lacp agg 96 actor admin-key 96
linkagg lacp agg 97 size 2 admin-state enable
linkagg lacp agg 97 name "RACK02"
linkagg lacp agg 97 actor admin-key 97
linkagg lacp agg 98 size 2 admin-state enable
linkagg lacp agg 98 name "RACK03"
linkagg lacp agg 98 actor admin-key 98
linkagg lacp agg 99 size 2 admin-state enable
linkagg lacp agg 99 name "RACK04"
linkagg lacp agg 99 actor admin-key 99
linkagg lacp agg 100 size 2 admin-state enable
linkagg lacp agg 100 name "SW01"
linkagg lacp agg 100 actor admin-key 100
linkagg lacp agg 101 size 2 admin-state enable
linkagg lacp agg 101 name "SW02"
linkagg lacp agg 101 actor admin-key 101
linkagg lacp agg 102 size 2 admin-state enable
linkagg lacp agg 102 name "SW03"
linkagg lacp agg 102 actor admin-key 102
linkagg lacp agg 103 size 2 admin-state enable
linkagg lacp agg 103 name "SW04"
linkagg lacp agg 103 actor admin-key 103
linkagg lacp agg 104 size 2 admin-state enable
linkagg lacp agg 104 name "SW05"
linkagg lacp agg 104 actor admin-key 104
linkagg lacp agg 105 size 2 admin-state enable
linkagg lacp agg 105 name "SW06"
linkagg lacp agg 105 actor admin-key 105
linkagg lacp agg 106 size 2 admin-state enable
linkagg lacp agg 106 name "SW07"
linkagg lacp agg 106 actor admin-key 106
linkagg lacp port 2/1/2 actor admin-key 96
linkagg lacp port 2/1/3 actor admin-key 97
linkagg lacp port 2/1/4 actor admin-key 98
linkagg lacp port 2/1/5 actor admin-key 99
linkagg lacp port 2/1/6 actor admin-key 100
linkagg lacp port 2/1/7 actor admin-key 101
linkagg lacp port 2/1/8 actor admin-key 102
linkagg lacp port 2/1/9 actor admin-key 103
linkagg lacp port 2/1/10 actor admin-key 104
linkagg lacp port 2/1/11 actor admin-key 105
linkagg lacp port 2/1/12 actor admin-key 106
! VLAN:
vlan 1 admin-state enable
vlan 1 name "Mgmt"
vlan 100 admin-state enable
vlan 100 name "Server"
vlan 102-104 admin-state enable
vlan 102 name "Guest"
vlan 103 name "VoIP"
vlan 104 name "Build"
vlan 106 admin-state enable
vlan 106 name "Dev"
vlan 110-113 admin-state enable
vlan 110 name "Client1"
vlan 111 name "Client2"
vlan 112 name "Client3"
vlan 113 name "Client4"
vlan 150 admin-state enable
vlan 150 name "VIP VLAN"
vlan 100 members linkagg 96-99 tagged
vlan 102 members linkagg 100-106 tagged
vlan 103 members linkagg 96-106 tagged
vlan 104 members linkagg 96-106 tagged
vlan 106 members linkagg 96-106 tagged
vlan 110 members linkagg 100-101 tagged
vlan 111 members linkagg 102-103 tagged
vlan 112 members linkagg 104-105 tagged
vlan 113 members linkagg 106 tagged
vlan 150 members linkagg 96-99 tagged
! Spanning Tree:
spantree vlan 1 admin-state enable
spantree vlan 100 admin-state enable
spantree vlan 102 admin-state enable
spantree vlan 103 admin-state enable
spantree vlan 104 admin-state enable
spantree vlan 106 admin-state enable
spantree vlan 110 admin-state enable
spantree vlan 111 admin-state enable
spantree vlan 112 admin-state enable
spantree vlan 113 admin-state enable
spantree vlan 150 admin-state enable
! Bridging:
! Port Mirroring:
! Port Mapping:
! IP:
ip service port 21 admin-state enable
ip service port 22 admin-state enable
ip service port 23 admin-state enable
ip service port 80 admin-state enable
ip service port 123 admin-state enable
ip service port 443 admin-state enable
! IPv6:
! IPSec:
! IPMS:
! AAA:
aaa authentication console "local"
aaa authentication ftp "local"
aaa authentication http "local"
aaa authentication snmp "local"
aaa authentication ssh "local"
user password-size min 6
! NTP:
ntp server 192.168.2.253
ntp client admin-state enable
! QOS:
policy condition from_voip source vlan 103
policy action set_dscp dscp 46
policy rule prio_voip condition from_voip action set_dscp
qos apply
! Policy Manager:
! VLAN Stacking:
! ERP:
! MVRP:
! LLDP:
lldp nearest-bridge port 2/1/1-20 tlv management system-capabilities enable
lldp nearest-bridge port 2/1/1-20 tlv management system-description enable
lldp nearest-bridge port 2/1/1-20 tlv management system-name enable
lldp nearest-bridge port 2/1/1-20 tlv management port-description enable
lldp non-tpmr port 2/1/1-20 tlv management system-capabilities enable
lldp non-tpmr port 2/1/1-20 tlv management system-description enable
lldp non-tpmr port 2/1/1-20 tlv management system-name enable
lldp non-tpmr port 2/1/1-20 tlv management port-description enable
lldp nearest-customer port 2/1/1-20 tlv management system-capabilities enable
lldp nearest-customer port 2/1/1-20 tlv management system-description enable
lldp nearest-customer port 2/1/1-20 tlv management system-name enable
lldp nearest-customer port 2/1/1-20 tlv management port-description enable
lldp nearest-bridge port 2/1/1-20 tlv management management-address enable
lldp non-tpmr port 2/1/1-20 tlv management management-address enable
lldp nearest-customer port 2/1/1-20 tlv management management-address enable
! UDLD:
! Server Load Balance:
! High Availability Vlan:
! Session Manager:
session cli timeout 30
session http timeout 30
command-log enable
! Web:
! Trap Manager:
snmp station 192.168.2.203 162 "snmpv3" v3 enable
! Health Monitor:
! System Service:
swlog output socket 192.168.2.203
system timezone CET
! SNMP:
snmp security authentication set
snmp community-map mode enable
snmp community-map "public" user "snmp" enable
! BFD:
! IP Route Manager:
ip static-route 0.0.0.0/0 gateway 192.168.150.253 metric 1
! VRRP:
! UDP Relay:
! RIP:
! OSPF:
! ISIS:
! IP Multicast:
! DVMRP:
! IPMR:
! RIPng:
! OSPF3:
! BGP:
! Netsec:
! Module:
! RDP:
! DA-UNP:
! DHL:
! Ethernet-OAM:
! SAA:
! SPB-ISIS:
! SVCMGR:
! LDP:
! EVB:
==== Final configuration (VC-CORE01, vcboot.cfg) ====
!========================================!
! File: /flash/working/boot.cfg !
!========================================!
! Chassis:
system name MC-Lag1
system contact myContact
system location "1. DC"
mac-retention admin-state enable
mac-retention dup-mac-trap admin-state enable
mac-retention timer 30
! Configuration:
! Capability Manager:
! Multi-Chassis:
! Virtual Chassis Manager:
! Virtual Flow Control:
! Interface:
! Link Aggregate:
linkagg lacp agg 96 size 2 admin-state enable
linkagg lacp agg 96 name "RACK01"
linkagg lacp agg 96 actor admin-key 96
linkagg lacp agg 97 size 2 admin-state enable
linkagg lacp agg 97 name "RACK02"
linkagg lacp agg 97 actor admin-key 97
linkagg lacp agg 98 size 2 admin-state enable
linkagg lacp agg 98 name "RACK03"
linkagg lacp agg 98 actor admin-key 98
linkagg lacp agg 99 size 2 admin-state enable
linkagg lacp agg 99 name "RACK04"
linkagg lacp agg 99 actor admin-key 99
linkagg lacp agg 100 size 2 admin-state enable
linkagg lacp agg 100 name "SW01"
linkagg lacp agg 100 actor admin-key 100
linkagg lacp agg 101 size 2 admin-state enable
linkagg lacp agg 101 name "SW02"
linkagg lacp agg 101 actor admin-key 101
linkagg lacp agg 102 size 2 admin-state enable
linkagg lacp agg 102 name "SW03"
linkagg lacp agg 102 actor admin-key 102
linkagg lacp agg 103 size 2 admin-state enable
linkagg lacp agg 103 name "SW04"
linkagg lacp agg 103 actor admin-key 103
linkagg lacp agg 104 size 2 admin-state enable
linkagg lacp agg 104 name "SW05"
linkagg lacp agg 104 actor admin-key 104
linkagg lacp agg 105 size 2 admin-state enable
linkagg lacp agg 105 name "SW06"
linkagg lacp agg 105 actor admin-key 105
linkagg lacp agg 106 size 2 admin-state enable
linkagg lacp agg 106 name "SW07"
linkagg lacp agg 106 actor admin-key 106
linkagg lacp port 1/1/2 actor admin-key 96
linkagg lacp port 1/1/3 actor admin-key 97
linkagg lacp port 1/1/4 actor admin-key 98
linkagg lacp port 1/1/5 actor admin-key 99
linkagg lacp port 1/1/6 actor admin-key 100
linkagg lacp port 1/1/7 actor admin-key 101
linkagg lacp port 1/1/8 actor admin-key 102
linkagg lacp port 1/1/9 actor admin-key 103
linkagg lacp port 1/1/10 actor admin-key 104
linkagg lacp port 1/1/11 actor admin-key 105
linkagg lacp port 1/1/12 actor admin-key 106
linkagg lacp port 2/1/2 actor admin-key 96
linkagg lacp port 2/1/3 actor admin-key 97
linkagg lacp port 2/1/4 actor admin-key 98
linkagg lacp port 2/1/5 actor admin-key 99
linkagg lacp port 2/1/6 actor admin-key 100
linkagg lacp port 2/1/7 actor admin-key 101
linkagg lacp port 2/1/8 actor admin-key 102
linkagg lacp port 2/1/9 actor admin-key 103
linkagg lacp port 2/1/10 actor admin-key 104
linkagg lacp port 2/1/11 actor admin-key 105
linkagg lacp port 2/1/12 actor admin-key 106
! VLAN:
vlan 1 admin-state enable
vlan 1 name "Mgmt"
vlan 100 admin-state enable
vlan 100 name "Server"
vlan 102-104 admin-state enable
vlan 102 name "Guest"
vlan 103 name "VoIP"
vlan 104 name "Build"
vlan 106 admin-state enable
vlan 106 name "Dev"
vlan 110-113 admin-state enable
vlan 110 name "Client1"
vlan 111 name "Client2"
vlan 112 name "Client3"
vlan 113 name "Client4"
vlan 150 admin-state enable
vlan 150 name "VIP VLAN"
vlan 100 members linkagg 96-99 tagged
vlan 102 members linkagg 100-106 tagged
vlan 103 members linkagg 96-106 tagged
vlan 104 members linkagg 96-106 tagged
vlan 106 members linkagg 96-106 tagged
vlan 110 members linkagg 100-101 tagged
vlan 111 members linkagg 102-103 tagged
vlan 112 members linkagg 104-105 tagged
vlan 113 members linkagg 106 tagged
vlan 150 members linkagg 96-99 tagged
! Spanning Tree:
spantree vlan 1 admin-state enable
spantree vlan 100 admin-state enable
spantree vlan 102 admin-state enable
spantree vlan 103 admin-state enable
spantree vlan 104 admin-state enable
spantree vlan 106 admin-state enable
spantree vlan 110 admin-state enable
spantree vlan 111 admin-state enable
spantree vlan 112 admin-state enable
spantree vlan 113 admin-state enable
spantree vlan 150 admin-state enable
! Bridging:
! Port Mirroring:
! Port Mapping:
! IP:
ip service port 21 admin-state enable
ip service port 22 admin-state enable
ip service port 23 admin-state enable
ip service port 80 admin-state enable
ip service port 123 admin-state enable
ip service port 443 admin-state enable
ip interface "Mgmt" address 192.168.130.197 mask 255.255.255.0 vlan 1 no forward ifindex 1
ip interface "Client1" address 10.2.140.1 mask 255.255.255.0 vlan 110 ifindex 2
ip interface "Client2" address 10.2.141.1 mask 255.255.255.0 vlan 111 ifindex 3
ip interface "Client3" address 10.2.142.1 mask 255.255.255.0 vlan 112 ifindex 4
ip interface "Client4" address 10.2.143.1 mask 255.255.255.0 vlan 113 ifindex 5
ip interface "Server" address 10.2.128.1 mask 255.255.255.0 vlan 100 ifindex 6
ip interface "Transfer_Firewall" address 192.168.150.1 mask 255.255.255.0 vlan 150 ifindex 7
! IPv6:
! IPSec:
! IPMS:
! AAA:
aaa authentication console "local"
aaa authentication ftp "local"
aaa authentication http "local"
aaa authentication snmp "local"
aaa authentication ssh "local"
user password-size min 6
! NTP:
ntp server 192.168.2.253
ntp client admin-state enable
! QOS:
policy condition from_voip source vlan 103
policy action set_dscp dscp 46
policy rule prio_voip condition from_voip action set_dscp
qos apply
! Policy Manager:
! VLAN Stacking:
! ERP:
! MVRP:
! LLDP:
lldp nearest-bridge port 1/1/1-20 tlv management system-capabilities enable
lldp nearest-bridge port 1/1/1-20 tlv management system-description enable
lldp nearest-bridge port 1/1/1-20 tlv management system-name enable
lldp nearest-bridge port 1/1/1-20 tlv management port-description enable
lldp non-tpmr port 1/1/1-20 tlv management system-capabilities enable
lldp non-tpmr port 1/1/1-20 tlv management system-description enable
lldp non-tpmr port 1/1/1-20 tlv management system-name enable
lldp non-tpmr port 1/1/1-20 tlv management port-description enable
lldp nearest-customer port 1/1/1-20 tlv management system-capabilities enable
lldp nearest-customer port 1/1/1-20 tlv management system-description enable
lldp nearest-customer port 1/1/1-20 tlv management system-name enable
lldp nearest-customer port 1/1/1-20 tlv management port-description enable
lldp nearest-bridge port 1/1/1-20 tlv management management-address enable
lldp non-tpmr port 1/1/1-20 tlv management management-address enable
lldp nearest-customer port 1/1/1-20 tlv management management-address enable
lldp nearest-bridge port 2/1/1-20 tlv management system-capabilities enable
lldp nearest-bridge port 2/1/1-20 tlv management system-description enable
lldp nearest-bridge port 2/1/1-20 tlv management system-name enable
lldp nearest-bridge port 2/1/1-20 tlv management port-description enable
lldp non-tpmr port 2/1/1-20 tlv management system-capabilities enable
lldp non-tpmr port 2/1/1-20 tlv management system-description enable
lldp non-tpmr port 2/1/1-20 tlv management system-name enable
lldp non-tpmr port 2/1/1-20 tlv management port-description enable
lldp nearest-customer port 2/1/1-20 tlv management system-capabilities enable
lldp nearest-customer port 2/1/1-20 tlv management system-description enable
lldp nearest-customer port 2/1/1-20 tlv management system-name enable
lldp nearest-customer port 2/1/1-20 tlv management port-description enable
lldp nearest-bridge port 2/1/1-20 tlv management management-address enable
lldp non-tpmr port 2/1/1-20 tlv management management-address enable
lldp nearest-customer port 2/1/1-20 tlv management management-address enable
! UDLD:
! Server Load Balance:
! High Availability Vlan:
! Session Manager:
session cli timeout 30
session http timeout 30
session prompt default "CORE01 ->"
command-log enable
! Web:
! Trap Manager:
snmp station 192.168.2.203 162 "snmpv3" v3 enable
! Health Monitor:
! System Service:
swlog output socket 192.168.2.203
system timezone CET
! SNMP:
snmp security authentication set
snmp community-map mode enable
snmp community-map "public" user "snmp" enable
! BFD:
! IP Route Manager:
ip static-route 0.0.0.0/0 gateway 192.168.150.253 metric 1
! VRRP:
! UDP Relay:
! RIP:
! OSPF:
! ISIS:
! IP Multicast:
! DVMRP:
! IPMR:
! RIPng:
! OSPF3:
! BGP:
! Netsec:
! Module:
! RDP:
! DA-UNP:
! DHL:
! Ethernet-OAM:
! SAA:
! SPB-ISIS:
! SVCMGR:
! LDP:
! EVB:
===== Carry out the MC-LAG to OmniSwitch Virtual-Chassis migration =====
==== Preparation of CORE01 ====
**Create the directories for Virtual-Chassis and open vcsetup.cfg:**
CORE01 -> mkdir vc-config
CORE01 -> cd vc-config
CORE01 -> vi vcsetup.cfg
(Edit file, like in the following example)
This example follows the previous configuration of the multi-chassis/VFL-ports, this is worthwhile in most cases.
!========================================!
! File: /flash/vc-config/vcsetup.cfg !
!========================================!
! Virtual Chassis Manager:
virtual-chassis chassis-id 1 configured-chassis-id 1
virtual-chassis chassis-id 1 vf-link 0 create
virtual-chassis chassis-id 1 vf-link 0 member-port 1/1/1
virtual-chassis chassis-id 1 vf-link 0 member-port 1/1/20
virtual-chassis chassis-id 1 chassis-group 9
! IP:
ip interface local chassis-id 1 emp address 192.168.1.1 mask 255.255.255.0
We **strongly** recommend to use and configure the EMP-port (Out-of-Band-Management), which is important to use "Remote-Chassis-Split-Detection" which avoids a "Split-Brain"-situation!
**Upload/Copy the Alcatel-Lucent Operating System (AOS):**
Upload the vcboot.cfg via FTP to the directory vc-config!
CORE01 ->
CORE01 -> ls
vcboot.cfg vcsetup.cfg
CORE01 -> cp ../732-344-GA/Tos.img .
CORE01 -> ls -l
-rw-r--r-- 1 admin user 126642216 Aug 16 09:51 Tos.img
-rw------- 1 admin user 8279 Aug 16 09:50 vcboot.cfg
-rw-r--r-- 1 admin user 497 Aug 16 09:49 vcsetup.cfg
CORE01 ->
==== Preparation of CORE02 ====
**Create the directories for Virtual-Chassis and open vcsetup.cfg:**
CORE02 -> mkdir vc-config
CORE02 -> cd vc-config
CORE02 -> vi vcsetup.cfg
(Edit file, like in the following example)
This example follows the previous configuration of the multi-chassis/VFL-ports, this is worthwhile in most cases.
!========================================!
! File: /flash/vc-config/vcsetup.cfg !
!========================================!
! Virtual Chassis Manager:
virtual-chassis chassis-id 2 configured-chassis-id 2
virtual-chassis chassis-id 2 vf-link 0 create
virtual-chassis chassis-id 2 vf-link 0 member-port 2/1/1
virtual-chassis chassis-id 2 vf-link 0 member-port 2/1/20
virtual-chassis chassis-id 2 chassis-group 9
! IP:
ip interface local chassis-id 2 emp address 192.168.1.2 mask 255.255.255.0
We **strongly** recommend to use and configure the EMP-port (Out-of-Band-Management), which is important to use "Remote-Chassis-Split-Detection" which avoids a "Split-Brain"-situation!
**Upload/Copy the Alcatel-Lucent Operating System (AOS):**
Upload the vcboot.cfg via FTP to the directory vc-config!
CORE02 ->
CORE02 -> ls
vcboot.cfg vcsetup.cfg
CORE02 -> cp ../732-344-GA/Tos.img .
CORE02 -> ls -l
-rw-r--r-- 1 admin user 126642216 Aug 16 09:51 Tos.img
-rw------- 1 admin user 8279 Aug 16 09:50 vcboot.cfg
-rw-r--r-- 1 admin user 497 Aug 16 09:49 vcsetup.cfg
CORE02 ->
==== Reboot the two nodes/chassis ====
**CORE01:**
CORE01 -> reload from vc-config no rollback-timeout
**CORE02:**
CORE02 -> reload from vc-config no rollback-timeout
==== Relevant output on console ====
We're waiting for **Chassis Supervision: CMM has reached the ready state [L8]**, in that moment the Virtual-Chassis is ready and starts to switch/forward traffic.
Fri Aug 16 10:03:44 : vcmCmm chas_sup info message:
+++ CMM:vcmCMM_cs_handle_chassis_ready@3602: Chassis 1 ready (data 0) [L1]
Fri Aug 16 10:04:05 : vcmCmm port_mgr info message:
+++ CMM:vcmCMM_client_rx_pm@1551: VFL link 1/0 up (pri 1/1/1:0x0) [L2]
Fri Aug 16 10:04:05 : vcmCmm protocol info message:
+++ CMM:vcmCMN_protocol_ready_update_cb@13348: Chassis 1, role Master, status Running, master 1 [L3]
Fri Aug 16 10:04:05 : vcmCmm ipc info message:
+++ CMM:vcmCMM_peer_connected@1792: Remote endpoint (chassis 2, slot 65) [L4]
Fri Aug 16 10:04:08 : vcmCmm node_sync info message:
+++ CMM:notify_sync_complete@757: Sync complete 'multi node' (peers 1, conn 1, sync 1) [L5]
Fri Aug 16 10:04:08 : ChassisSupervisor bootMgr info message:
+++ Sending VC Takeover to NIs and applications [L6]
Fri Aug 16 10:04:08 : isis_spb_0 TASK info message:
+++ VC Takeover: chassis_id:1
Fri Aug 16 10:04:08 : ipv4 itf info message:
+++ Interface EMP-CHAS1 192.168.1.1/255.255.255.0
Fri Aug 16 10:04:08 : SNMP aluSubagent_thread info message:
+++ snmp_vc_takeover_callback | VC Takeover complete
Fri Aug 16 10:04:10 : qosNi Info info message:
+++ VC Takeover in progress.
+++ VC Takeover complete.
Fri Aug 16 10:04:10 : ChassisSupervisor bootMgr info message:
+++ Received VC Takeover Complete event from all apps [L7]
Chassis Supervision: CMM has reached the ready state [L8]
Chassis Supervision: CMM has reached the ready state [L8]
Fri Aug 16 10:04:12 : ChassisSupervisor reloadMgr info message:
+++ Redundancy time expired - updating next running to vc-config
**The time it took since reload and "ready state"-message:**
{{:mclag-migrationszeit.jpg?nolink&300|}}
==== Verify the Virtual-Chassis topology ====
CORE01 -> show virtual-chassis topology
Local Chassis: 1
Config
Chas Role Status Chas ID Pri Group MAC-Address
-----+------------+-------------------+--------+-----+------+------------------
1 Master Running 1 100 9 e8:e7:32:11:ca:ed
2 Slave Running 2 100 9 e8:e7:32:11:ca:d1
==== Finalising the VC migration ====
After you've verified that everything works as expected, you should save and certify the configuration.
CORE01 -> write memory flash-synchro