Funtime With JunOS - The Saga Begins

While going through my CV recently I was wondering how many Network OS skills I had to develop throughout my career in Network Industry and how many yet to learn. The list starts from our plain old IOS of Cisco followed by other flavors that Cisco offers for different set of platforms like IOS-XE, IOS-XR, CAT-OS & NX-OS.

While I can only wish that Cisco will give a thought to come up with a Unified sort of Network OS for their different set of platforms, but that don't seem to be happening anytime soon considering different platforms are designed around different set of needs based on different set of Operating Environments like Enterprise Vs Service Provider Vs Data Center etc...

In the mean while I decided to have fun with Juniper's Unified Network OS called JunOS. I am planning to go for JNCIA JUNOS exam in next 45-60 days time to begin with considering no prior experience with JunOS. But depending upon how much I fall in love with this new exiting Juniper world, I may go further with their certification tracks.

At the same time reason behind choosing JunOS or JNCIA is to develop skill set around Vendor Interoperability which is a crucial and part of long term career plans I have for myself.

 As I just got my first JunOS device boot in GNS3 today, plan is to use following material in conjunction to prepare for the JNCIA-JunOS exam:

 
  1. Book : Junos OS For Dummies

2. INE's Introduction To JunOS Video Course

3. CBT Nuggets's JNCIA JunOS Video Course

So expect some cool posts not only around Juniper and JunOS stuff but also I'll try to add another element into this with interoperability part.

HTH...
Deepak Arora
Evil CCIE

OTV Multicast-Mode Configuration Example Using OTV On Stick Design - OTV Series Part 3

 

Configuration Template Used In Demo:

DC1-N7K-1
+++++++++

!
en
!
conf t
!
vlan 100
 name OTV-SITE-VLAN
vlan 200
 name OTV-EXTEND-VLAN
!
int lo0
 ip add 11.11.11.11/32
 exit
!
int e1/7
 ip add 1.1.1.1 255.255.255.0
 no sh
 exit
!
int e1/5
 switchport
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 no sh
 exit
!
feature interface
!
feature pim
!
int vlan 200
 ip add 200.0.0.1/24
 no sh
 exit
!
int e1/1,e1/7
 ip igmp ver 2
 ip pim sp
 exit
!
ip pim rp-add 30.0.0.1
!


DC2-N7K-1
+++++++++

!
en
!
conf t
!
vlan 100
 name OTV-SITE-VLAN
vlan 200
 name OTV-EXTEND-VLAN
!
int lo0
 ip add 22.22.22.21/32
 exit
!
int e1/14
 ip add 2.2.2.1 255.255.255.0
 no sh
 exit
!
int e1/12
 switchport
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 no sh
 exit
!
feature interface
!
feature pim
!
int vlan 200
 ip add 200.0.0.2/24
 no sh
 exit
!
int e1/10,e1/14
 ip igmp ver 2
 ip pim sp
 exit
!
ip pim rp-add 30.0.0.1
!



DC1-N7K-2
+++++++++

!
en
!
conf t
!
vlan 100
 name OTV-SITE-VLAN
vlan 200
 name OTV-EXTEND-VLAN
!
int lo0
 ip add 111.111.111.111/32
 exit
!
feature otv
!
int e1/11
 ip add 1.1.1.2 255.255.255.0
 ip igmp ver 3
 no sh
 exit
!
int e1/9
 sw
 sw mode tr
 sw tr all vlan 100,200
 no sh
 exit
!
otv site-vlan 100
 exit
!
otv site-iden 0x001
!
int overlay 1
 otv join-interface e1/11
 otv control-group 235.0.0.1
 otv data-group 232.0.0.0/4
 otv extend-vlan 200
 no sh
exit
!


DC2-N7K-1
+++++++++
!
vlan 100
 name OTV-SITE-VLAN
vlan 200
 name OTV-EXTEND-VLAN
!
int lo0
 ip add 222.222.222.222/32
 exit
!
feature otv
!
int e1/20
 ip add 2.2.2.2 255.255.255.0
 no sh
 ip igmp ver 3
 no sh
 exit
!
int e1/18
 sw
 sw mode tr
 sw tr all vlan 100,200
 no sh
 exit
!
otv site-vlan 100
 exit
!
otv site-iden 0x002
!
int overlay 1
 otv join-interface e1/20
 otv control-group 235.0.0.1
 otv data-group 232.0.0.0/4
 otv extend-vlan 200
 no sh
exit
!

Further Readings:

http://routing-bits.com/2011/06/16/cisco-otv-part-i/

http://routing-bits.com/2011/06/28/cisco-otv-part-ii/

http://routing-bits.com/2011/07/06/cisco-otv-part-iii/

http://blog.ine.com/2010/02/15/what-is-overlay-transport-virtualization/

http://blog.ine.com/2012/08/17/otv-decoded-a-fancy-gre-tunnel/

http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/DCI/5.0/OTVmulticast.pdf

http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/DCI/whitepaper/DCI3_OTV_Intro_WP.pdf

http://www.netcraftsmen.net/user-group/c-mug-archive/904-overlay-transport-virtualization.html

http://www.netcraftsmen.net/blogs/entry/spanning-layer-2-between-data-centers.html

http://www.netcraftsmen.net/blogs/entry/understanding-layer-2-over-layer-3-part-1.html

http://www.netcraftsmen.net/blogs/entry/understanding-layer-2-over-layer-3-part-2.html

http://www.netcraftsmen.net/blogs/entry/exploiting-layer-2-over-layer-3.html

http://www.netcraftsmen.net/blogs/entry/otv-optimal-routing.html

http://www.netcraftsmen.net/blogs/entry/cisco-overlay-transport-virtualization-otv.html

http://www.netcraftsmen.net/blogs/entry/data-center-l2-interconnect-and-failover.html

http://www.netcraftsmen.net/blogs/entry/designing-an-otv-deployment.html

http://www.netcraftsmen.net/blogs/entry/otv-and-dci-require-stp-defenses.html

http://packetpushers.net/pq-show-24-cisco-otv-deep-dive-part-1/

http://packetpushers.net/pq-show-25-cisco-otv-deep-dive-part-2/

http://packetpushers.net/show-155-integrating-otv-fabricpath-lisp-sponsored/

http://packetpushers.net/cisco-otv-101-legacy-multicast-mode-mac-learning-process-walk/

http://packetpushers.net/anycast-hsrp-design-considerations/

HTH...
Deepak Arora
Evil CCIE

OTV Unicast-Mode Configuration Example Using OTV On Stick Design - OTV Series Part 2

Note: DC1-N7K-2 Is Playing Role Of OTV Unicast Adj. Server

Configuration Template Used In Demo:

Getting Infrastructure Ready
############################

DC1-N7K-1
+++++++++

!
en
!
conf t
!
feature interface-vlan
!
vlan 100
 name OTV-SITE-VLAN
 exit
!
vlan 200
 name OTV-EXTEND-VLAN
 exit
!
int vlan 200
 ip add 200.0.0.1/24
 no sh
 exit
!
int e1/5
 switchport
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 no sh
 exit
!
int e1/7
 ip add 1.1.1.1/24
 < Enable Routing Of Your Choice >
 no sh
 exit
!
int e1/1
 ip add 10.1.13.3/24
 < Enable Routing Of Your Choice >
 no sh
 exit
!

DC2-N7K-1
+++++++++

!
en
!
conf t
!
feature interface-vlan
!
vlan 100
 name OTV-SITE-VLAN
 exit
!
vlan 200
 name OTV-EXTEND-VLAN
 exit
!
int vlan 200
 ip add 200.0.0.2/24
 no sh
 exit
!
int e1/12
 switchport
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 no sh
 exit
!
int e1/14
 ip add 2.2.2.1/24
 < Enable Routing Of Your Choice >
 no sh
 exit
!
int e1/10
 ip add 10.1.23.3/24
 < Enable Routing Of Your Choice >
 no sh
 exit
!


DC1-N7K-2
+++++++++

!
en
!
conf t
!
vlan 100
 name OTV-SITE-VLAN
 exit
!
vlan 200
 name OTV-EXTEND-VLAN
 exit
!
int e1/9
 des "OTV-INTERNAL-INTERFACE"
 switchport
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 no sh
 exit
!
int e1/11
 des "OTV-JOIN-INTERFACE"
 ip add 1.1.1.2/24
 < Enable Routing Of Your Choice >
 no sh
 exit
!


DC2-N7K-2
+++++++++

!
en
!
conf t
!
vlan 100
 name OTV-SITE-VLAN
 exit
!
vlan 200
 name OTV-EXTEND-VLAN
 exit
!
int e1/18
 des "OTV-INTERNAL-INTERFACE"
 switchport
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 no sh
 exit
!
int e1/11
 des "OTV-JOIN-INTERFACE"
 ip add 2.2.2.2/24
 < Enable Routing Of Your Choice >
 no sh
 exit
!

****************************************

OTV Configurations
##################


DC1-N7K-2
+++++++++

!
en
!
conf t
!
feature otv
!
otv site-vlan 100
 exit
!
otv site-identifier 0x01
!
int overlay 1
 otv join-interface e1/11
 otv adjacency-server unicast-only
 otv extend-vlan 200
 no sh
 exit
!


DC2-N7K-2
+++++++++

!
en
!
conf t
!
feature otv
!
otv site-vlan 100
 exit
!
otv site-identifier 0x02
!
int overlay 1
 otv join-interface e1/20
 otv use-adjacency-server 1.1.1.2 unicast-only
 otv extend-vlan 200
 no sh
 exit
!

Further Readings:

http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/DCI/whitepaper/DCI3_OTV_Intro_WP.pdf

HTH...
Deepak Arora
Evil CCIE

OTV Unicast-Mode Configuration Example Using OTV In Path Design - OTV Series Part 1

Note:- 100.100.100.100 is Redundant Unicast Adjacency Server In This Configuration Example & DC1-N7K-1 Is Primary Unicast Adj. Server In This Configuration Example.

Configuration Template Used In Demo:

DC1-N7K-2
+++++++++

!
en
!
conf t
!
vlan 100
 name OTV-SITE-VLAN
 exit
!
vlan 200
 name OTV-EXTEND-VLAN
 exit
!
int e1/9
 switchport
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 no sh
 exit
!
feature interface-vlan
!
int vlan 200
 ip add 200.0.0.1/24
 no sh
 exit
!
end
!


DC2-N7K-2
+++++++++

!
en
!
conf t
!
vlan 100
 name OTV-SITE-VLAN
 exit
!
vlan 200
 name OTV-EXTEND-VLAN
 exit
!
int e1/18
 switchport
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 no sh
 exit
!
feature interface-vlan
!
int vlan 200
 ip add 200.0.0.2/24
 no sh
 exit
!
end
!


DC1-N7K-1
+++++++++

!
en
!
conf t
!
vlan 100
 name OTV-SITE-VLAN
 exit
!
vlan 200
 name OTV-EXTEND-VLAN
 exit
!
system jumbo 9216
!
feature otv
!
int e1/5
 switchport
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 no sh
 exit
!
otv site-identifier 0x01
!
otv site-vlan 100
 exit
!
interface overlay 1
 otv join-interface e1/1
 otv adjacency-server unicast-only
 otv use-adjacency-server 10.1.13.3 100.100.100.100 unicast-only
 otv extend-vlan 200
 no sh
 exit
!


DC2-N7K-1
+++++++++

!
en
!
conf t
!
vlan 100
 name OTV-SITE-VLAN
 exit
!
vlan 200
 name OTV-EXTEND-VLAN
 exit
!
system jumbo 9216
!
feature otv
!
int e1/12
 switchport
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 no sh
 exit
!
otv site-identifier 0x02
!
otv site-vlan 100
 exit
!
interface overlay 1
 otv join-interface e1/10
 otv use-adjacency-server 10.1.13.3 100.100.100.100 unicast-only
 otv extend-vlan 200
 no sh
 exit
!

Further Readings:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/wan_otv/configuration/xe-3s/wan-otv-xe-3s-book/wan-otv-adj-server.html

http://www.cisco.com/c/en/us/products/collateral/switches/nexus-7000-series-switches/white_paper_c11-644634.html

http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/DCI/5.0/OTVunicast.pdf

https://supportforums.cisco.com/document/64881/troubleshooting-arp-issues-across-otv

https://supportforums.cisco.com/document/65531/otv-silent-host-connectivity-problem

HTH...
Deepak Arora
Evil CCIE

Nexus 5K FEX, vPC & EvPC - All In One

Note: During the Video Demo the topology shown was little incorrect. Refer topology posted above during video demo.

N5K-1
+++++

!
en
!
conf t
!
vlan 100,200
 exit
!
feature vpc
!
feature lacp
!
feature fex
!
vpc domain 100
 role priority 1
 peer-keepalive dest 10.1.1.52 sou 10.1.1.51 vrf management
 exit
!
int e1/14-15
 channel-group 200 mode active
 no sh
 exit
!
interface port-channel 200
 switchport mode trunk
 vpc peer-link
 no sh
 exit
!
int e1/17
 channel-group 100
 no sh
 exit
!
int port-channel 100
 switchport mode fex
 fex associate 100
 vpc 100
 no sh
 exit
!
int e1/16
 channel-group 199
 no sh
 exit
!
int port-channel 199
 switchport mode fex
 fex associate 199
 vpc 199
 no sh
 exit
!
int e100/1/1,e109/1/1
 no sh
 channel-group 300
 exit
!
int port-channel 300
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 spanning-tree port type edge trunk
 no sh
 exit
!
end
!
===========================================================

N5K-2
+++++

!
en
!
conf t
!
vlan 100,200
 exit
!
feature vpc
!
feature lacp
!
feature fex
!
vpc domain 100
 role priority 1
 peer-keepalive dest 10.1.1.51 sou 10.1.1.52 vrf management
 exit
!
int e1/14-15
 channel-group 200 mode active
 no sh
 exit
!
interface port-channel 200
 switchport mode trunk
 vpc peer-link
 no sh
 exit
!
int e1/16
 channel-group 100
 no sh
 exit
!
int port-channel 100
 switchport mode fex
 fex associate 100
 vpc 100
 no sh
 exit
!
int e1/17
 channel-group 199
 no sh
 exit
!
int port-channel 199
 switchport mode fex
 fex associate 199
 vpc 199
 no sh
 exit
!
int e100/1/1,e109/1/1
 no sh
 channel-group 300
 exit
!
int port-channel 300
 switchport mode trunk
 switchport trunk allowed vlan 100,200
 spanning-tree port type edge trunk
 no sh
 exit
!
end
!

Further Readings:
==============

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/interfaces/7x/b_5500_Interfaces_Config_Guide_Release_7x/b_5500_Interfaces_Config_Guide_Release_7x_chapter_0101.html

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/layer2/7x/b_5500_Layer2_Config_7x/b_5500_Layer2_Config_7x_chapter_01111.html

http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/mkt_ops_guides/513_n1_1/n5k_enhanced_vpc.html

http://www.cisco.com/c/en/us/support/docs/switches/nexus-5000-series-switches/116271-problem-vpc-00.html

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/troubleshooting/guide/n5500_trouble/n5500_ts_vpc.html

HTH...
Deepak Arora
Evil CCIE