VyOS mit OmniSwitch verbinden

VyOS ist ein sehr umfangreicher, auf Debian Linux basierender, Softwarerouter. Unter normalen Nutzungsumständen bekommt man vom ursprünglichen Debian Linux aber nicht mehr viel mit. Es wird davon abgeraten die Konfiguration des darunterliegenden Systems manuell zu verändern, da die Einstellungen bei jedem Neustart neu aus der Textkonfiguration erzeugt werden (und dadurch überschrieben werden).

LLDP Interoperabilität

VyOS

vyos@vyos:~$ show lldp neighbors
Capability Codes: R - Router, B - Bridge, W - Wlan r - Repeater, S - Station
                  D - Docsis, T - Telephone, O - Other

Device ID                 Local  Proto  Cap   Platform             Port ID 
---------                 -----  -----  ---   --------             ------- 
OS6450-P10                eth1   LLDP   BR    Alcatel-Lucent OS645 Alcatel-Lucent 1/8

vyos@vyos:~$ show lldp neighbors detail 
-------------------------------------------------------------------------------
LLDP neighbors:
-------------------------------------------------------------------------------
Interface:    eth1, via: LLDP, RID: 1, Time: 0 day, 00:11:16
  Chassis:     
    ChassisID:    mac e8:e7:32:3f:de:e6
    SysName:      OS6450-P10
    SysDescr:     Alcatel-Lucent OS6450-P10 6.7.1.108.R04 Service Release, January 04, 2017.
    MgmtIP:       192.168.10.2
    Capability:   Bridge, on
    Capability:   Router, on
  Port:        
    PortID:       mac e8:e7:32:3f:de:ef
    PortDescr:    Alcatel-Lucent 1/8
    PMD autoneg:  supported: yes, enabled: yes
      Adv:          1000Base-X, HD: yes, FD: yes
      Adv:          1000Base-T, HD: yes, FD: yes
      MAU oper type: 1000BaseTFD - Four-pair Category 5 UTP, full duplex mode
  VLAN:         1, pvid: yes VLAN 1
  PPVID:        supported: no, enabled: no
  PI:           88 cc
  LLDP-MED:    
    Device Type:  Network Connectivity Device
    Capability:   Capabilities
    Capability:   Policy
    Capability:   MDI/PSE
-------------------------------------------------------------------------------

OmniSwitch

OS6450-P10-> show lldp remote-system
Remote LLDP Agents on Local Slot/Port 1/8:

    Chassis 52:54:00:3b:af:9e, Port 00:25:90:XX:XX:XX:
      Remote ID                   = 4,
      Chassis Subtype             = 4 (MAC Address),
      Port Subtype                = 3 (MAC address),
      Port Description            = VyOS-Lab eth1,
      System Name                 = VyOS-Lab,
      System Description          = VyOS unknown,
      Capabilities Supported      = Bridge WLAN AP Router Station Only,
      Capabilities Enabled        = Router Station Only,
      Management IP Address       = 192.168.0.229,
      MED Device Type             = Network Connectivity,
      MED Capabilities            = Capabilities | Location Identification| Power via MDI-PSE| Power via MDI-PD(3f),
      MED Extension TLVs Present  = Network Policy| Inventory,
      Vlan ID                     = 20,
      Vlan Name                   = eth1.20,
      Remote port MAC/PHY AutoNeg = Supported Enabled Capability 0x8136,
      Mau Type                    = 1000BaseTFD - Four-pair Category 5 UTP full duplex mode

VyOS Konfiguration

vyos@VyOS-Lab# run show config
interfaces {
    ethernet eth0 {
        /* dhcp */
        address dhcp
        description WAN
        duplex auto
        hw-id 52:54:00:3b:af:9e
        smp-affinity auto
        speed auto
    }
    ethernet eth1 {
        description "VyOS-Lab eth1"
        duplex auto
        hw-id 00:25:90:XX:XX:XX
        smp-affinity auto
        speed auto
        vif 20 {
            address 192.168.20.1/24
            description "VyOS-Lab eth1.20"
        }
    }
    loopback lo {
    }
}
nat {
    source {
        rule 100 {
            log disable
            outbound-interface eth0
            source {
                address 192.168.20.0/24
            }
            translation {
                address masquerade
            }
        }
    }
}
service {
    dhcp-server {
        disabled false
        shared-network-name VyOS-Lab {
            authoritative disable
            subnet 192.168.20.0/24 {
                default-router 192.168.20.1
                dns-server 192.168.0.1
                domain-name vlan20.home
                lease 86400
                start 192.168.20.10 {
                    stop 192.168.20.50
                }
            }
        }
    }
    dns {
    }
    lldp {
        management-address 192.168.0.229
    }
    ssh {
        /* 192.168.0.229 */
        listen-address 192.168.0.229
        port 22
    }
}
system {
    config-management {
        commit-revisions 20
    }
    host-name VyOS-Lab
    login {
        user vyos {
            authentication {
                encrypted-password ****************
                plaintext-password ****************
            }
            level admin
        }
    }
    ntp {
        server 0.pool.ntp.org {
        }
        server 1.pool.ntp.org {
        }
        server 2.pool.ntp.org {
        }
    }
    options {
        ctrl-alt-del-action ignore
        reboot-on-panic true
    }
    package {
        auto-sync 1
        repository community {
            components main
            distribution helium
            password ****************
            url http://packages.vyos.net/vyos
            username ""
        }
    }
    syslog {
        global {
            facility all {
                level notice
            }
            facility protocols {
                level debug
            }
        }
        host 192.168.0.177 {
            facility all {
                /* info */
                level info
            }
        }
    }
    time-zone Europe/Berlin
}

OmniSwitch Konfiguration

! Stack Manager :
! Chassis :
system name OS6450-P10
system contact "Benny Eggerstedt"
system location "Benny's Lab"
system timezone CET
system daylight savings time enable
! Configuration:
! VLAN :
vlan 1 disable name "VLAN 1"
vlan 10 enable name "SW Mgmt"
vlan 10 port default 1/1
vlan 10 port default 1/3
vlan 10 port default 1/5
vlan 10 port default 1/10
vlan 10 port default 1/11
vlan 10 port default 1/12
vlan 11 enable name "Client Network V11"
vlan 12 enable name "Client Network V12"
vlan 20 enable name "VyOS Lab"
vlan 20 port default 1/7
! VLAN SL:
! IP :
ip service all
ip interface "vlan-10" address 192.168.10.2 mask 255.255.255.0 vlan 10 ifindex 1
ip interface "vlan-20" address 192.168.20.2 mask 255.255.255.0 vlan 20 ifindex 2
! IPMS :
! AAA :
aaa authentication default "local" 
user password-size min 9
user password-policy min-uppercase 1
user password-policy min-lowercase 1
user password-policy min-digit 1
user password-policy min-nonalpha 1
aaa switch-access mode enhanced
! PARTM :
! 802.1x :
! QOS :
! Policy manager :
! Session manager :
session timeout cli 999
session prompt default "OS6450-P10->"
! SNMP :
snmp security no security
snmp authentication trap enable
snmp community map "public" user "snmp" on
snmp station 192.168.0.61 162 "snmp" v2 enable
snmp trap filter 192.168.0.61 47
! RIP :
! IPv6 :
! IP multicast :
! IPRM :
ip static-route 0.0.0.0/0 gateway 192.168.10.1 metric 1
! RIPng :
! Health monitor :
! Interface :
interfaces 1/1 alias "AP1101 00:12:70"
interfaces 1/3 alias "AP1101 00:10:50"
interfaces 1/5 alias "AP1101 00:18:e0"
interfaces 1/8 alias "Uplink to VyOS-Lab"
interfaces 1/9 alias "Uplink to Watchtux"
! Udld :
! Port Mapping :
! Link Aggregate :
! VLAN AGG:
! 802.1Q :
vlan 11 802.1q 1/1 "TAG PORT 1/1 VLAN 11"
vlan 12 802.1q 1/1 "TAG PORT 1/1 VLAN 12"
vlan 11 802.1q 1/3 "TAG PORT 1/3 VLAN 11"
vlan 12 802.1q 1/3 "TAG PORT 1/3 VLAN 12"
vlan 11 802.1q 1/5 "TAG PORT 1/5 VLAN 11"
vlan 12 802.1q 1/5 "TAG PORT 1/5 VLAN 12"
vlan 20 802.1q 1/8 "TAG PORT 1/8 VLAN 20"
vlan 10 802.1q 1/9 "TAG PORT 1/9 VLAN 10"
vlan 11 802.1q 1/9 "TAG PORT 1/9 VLAN 11"
vlan 12 802.1q 1/9 "TAG PORT 1/9 VLAN 12"
! Spanning tree :
bridge mode 1x1 
! Bridging :
! Bridging :
! Port mirroring :
sflow receiver 1 name ovAnalyticService address 192.168.0.61 udp-port 6343 packet-size 1400 version 5 timeout 0
sflow sampler 1 1/1 receiver 1 rate 128 sample-hdr-size 128
sflow sampler 1 1/2 receiver 1 rate 128 sample-hdr-size 128
sflow sampler 1 1/3 receiver 1 rate 128 sample-hdr-size 128
sflow sampler 1 1/4 receiver 1 rate 128 sample-hdr-size 128
sflow sampler 1 1/5 receiver 1 rate 128 sample-hdr-size 128
sflow sampler 1 1/6 receiver 1 rate 128 sample-hdr-size 128
sflow sampler 1 1/7 receiver 1 rate 128 sample-hdr-size 128
sflow sampler 1 1/8 receiver 1 rate 128 sample-hdr-size 128
sflow sampler 1 1/9 receiver 1 rate 128 sample-hdr-size 128
sflow sampler 1 1/10 receiver 1 rate 128 sample-hdr-size 128
sflow sampler 1 1/11 receiver 1 rate 128 sample-hdr-size 128
sflow sampler 1 1/12 receiver 1 rate 128 sample-hdr-size 128
! UDP Relay :
! System service :
ip name-server 192.168.10.1
ip domain-lookup
swlog output socket 192.168.10.1
swlog console level info
! SSH :
! VRRP :
! Web :
! AMAP :
! Lan  Power :
lanpower stop 1/7
lanpower stop 1/8
lanpower start 1
! NTP :
ntp server 192.168.10.1 key 0 version 4 minpoll 6 prefer
ntp client enable
! RDP :
! VLAN STACKING:
! Ethernet-OAM :
! EFM-OAM :
! SAA :
! Loopback-detection :
! ERP :
! TEST-OAM :
! PPPOE-IA :
! DHL :
! LLDP :
lldp chassis tlv management  port-description enable system-name enable system-description enable system-capabilities enable
lldp chassis tlv management  management-address enable
lldp chassis tlv dot1 vlan-name enable port-vlan enable
lldp chassis tlv dot3  mac-phy enable
lldp chassis tlv med  capability enable
! DHCP Server :
! Stack Split-Protection Helper :
! Openflow :
! DHCPv6 :
! TWAMP :