From ed087f3fc6e737b32c162168c4ff5d404fe40346 Mon Sep 17 00:00:00 2001 From: Pim van Pelt Date: Wed, 9 Apr 2025 23:17:57 -0500 Subject: [PATCH] Add configs --- content/articles/2025-04-09-frysix-evpn.md | 6 +- static/assets/frys-ix/arista-leaf.conf | 169 +++++++++++++++++++++ static/assets/frys-ix/equinix.conf | 90 +++++++++++ static/assets/frys-ix/nikhef.conf | 132 ++++++++++++++++ static/assets/frys-ix/nokia-leaf.conf | 105 +++++++++++++ 5 files changed, 501 insertions(+), 1 deletion(-) create mode 100644 static/assets/frys-ix/arista-leaf.conf create mode 100644 static/assets/frys-ix/equinix.conf create mode 100644 static/assets/frys-ix/nikhef.conf create mode 100644 static/assets/frys-ix/nokia-leaf.conf diff --git a/content/articles/2025-04-09-frysix-evpn.md b/content/articles/2025-04-09-frysix-evpn.md index 7f2e9ba..82ec74b 100644 --- a/content/articles/2025-04-09-frysix-evpn.md +++ b/content/articles/2025-04-09-frysix-evpn.md @@ -764,7 +764,6 @@ true`. This will glean the IP addresses based on intercepted ARP requests, and r as difficult as I thought, having some automation in place will avoid errors and mistakes. It would suck if the IXP collapsed because I botched a link drain or PNI configuration! - ### Acknowledgements I am relatively new to EVPN configurations, and wanted to give a shoutout to Andy Whitaker who @@ -783,3 +782,8 @@ Arend and me on a video call, giving a bunch of operational tips and tricks alon Finally, Arend and ERITAP are an absolute joy to work with. We took turns hacking on the lab, which Arend made available for me while I am traveling to Mississippi this week. Thanks for the kWh and OOB access, and for brainstorming the config with me! + +### Reference configurations + +Here's the configs for all machines in this demonstration: +[[nikhef](/assets/frys-ix/nikhef.conf)] | [[equinix](/assets/frys-ix/equinix.conf)] | [[nokia-leaf](/assets/frys-ix/nokia-leaf.conf)] | [[arista-leaf](/assets/frys-ix/arista-leaf.conf)] diff --git a/static/assets/frys-ix/arista-leaf.conf b/static/assets/frys-ix/arista-leaf.conf new file mode 100644 index 0000000..87564a3 --- /dev/null +++ b/static/assets/frys-ix/arista-leaf.conf @@ -0,0 +1,169 @@ +no aaa root +! +hardware counter feature vtep decap +hardware counter feature vtep encap +! +service routing protocols model multi-agent +! +hostname arista-leaf +! +router l2-vpn + arp learning bridged +! +spanning-tree mode mstp +! +system l1 + unsupported speed action error + unsupported error-correction action error +! +vlan 2604 + name v-peeringlan +! +interface Ethernet1/1 +! +interface Ethernet2/1 +! +interface Ethernet3/1 +! +interface Ethernet4/1 +! +interface Ethernet5/1 +! +interface Ethernet6/1 +! +interface Ethernet7/1 +! +interface Ethernet8/1 +! +interface Ethernet9/1 + shutdown + speed forced 10000full +! +interface Ethernet9/2 + shutdown +! +interface Ethernet9/3 + speed forced 10000full + switchport access vlan 2604 +! +interface Ethernet9/4 + shutdown +! +interface Ethernet10/1 +! +interface Ethernet10/2 + shutdown +! +interface Ethernet10/4 + shutdown +! +interface Ethernet11/1 +! +interface Ethernet12/1 +! +interface Ethernet13/1 +! +interface Ethernet14/1 +! +interface Ethernet15/1 +! +interface Ethernet16/1 +! +interface Ethernet17/1 +! +interface Ethernet18/1 +! +interface Ethernet19/1 +! +interface Ethernet20/1 +! +interface Ethernet21/1 +! +interface Ethernet22/1 +! +interface Ethernet23/1 +! +interface Ethernet24/1 +! +interface Ethernet25/1 +! +interface Ethernet26/1 +! +interface Ethernet27/1 +! +interface Ethernet28/1 +! +interface Ethernet29/1 + no switchport +! +interface Ethernet30/1 + load-interval 1 + mtu 9190 + no switchport + ip address 198.19.17.10/31 + ip ospf cost 10 + ip ospf network point-to-point + ip ospf area 0.0.0.0 +! +interface Ethernet31/1 + load-interval 1 + mtu 9190 + no switchport + ip address 198.19.17.3/31 + ip ospf cost 1000 + ip ospf network point-to-point + ip ospf area 0.0.0.0 +! +interface Ethernet32/1 + load-interval 1 + mtu 9190 + no switchport + ip address 198.19.17.5/31 + ip ospf cost 1000 + ip ospf network point-to-point + ip ospf area 0.0.0.0 +! +interface Loopback0 + ip address 198.19.16.2/32 + ip ospf area 0.0.0.0 +! +interface Loopback1 + ip address 198.19.18.2/32 +! +interface Management1 + ip address dhcp +! +interface Vxlan1 + vxlan source-interface Loopback1 + vxlan udp-port 4789 + vxlan vlan 2604 vni 2604 +! +ip routing +! +ip route 0.0.0.0/0 Management1 10.75.8.1 +! +router bgp 65500 + neighbor evpn peer group + neighbor evpn remote-as 65500 + neighbor evpn update-source Loopback0 + neighbor evpn ebgp-multihop 3 + neighbor evpn send-community extended + neighbor evpn maximum-routes 12000 warning-only + neighbor 198.19.16.0 peer group evpn + neighbor 198.19.16.1 peer group evpn + ! + vlan 2604 + rd 65500:2604 + route-target both 65500:2604 + redistribute learned + ! + address-family evpn + neighbor evpn activate +! +router ospf 65500 + router-id 198.19.16.2 + redistribute connected + network 198.19.0.0/16 area 0.0.0.0 + max-lsa 12000 +! +end diff --git a/static/assets/frys-ix/equinix.conf b/static/assets/frys-ix/equinix.conf new file mode 100644 index 0000000..f0bbbdf --- /dev/null +++ b/static/assets/frys-ix/equinix.conf @@ -0,0 +1,90 @@ +set / interface ethernet-1/1 admin-state disable +set / interface ethernet-1/9 admin-state enable +set / interface ethernet-1/9 breakout-mode num-breakout-ports 4 +set / interface ethernet-1/9 breakout-mode breakout-port-speed 10G +set / interface ethernet-1/9/3 admin-state enable +set / interface ethernet-1/9/3 vlan-tagging true +set / interface ethernet-1/9/3 subinterface 0 type bridged +set / interface ethernet-1/9/3 subinterface 0 admin-state enable +set / interface ethernet-1/9/3 subinterface 0 vlan encap untagged +set / interface ethernet-1/29 admin-state enable +set / interface ethernet-1/29 subinterface 0 type routed +set / interface ethernet-1/29 subinterface 0 admin-state enable +set / interface ethernet-1/29 subinterface 0 ip-mtu 9190 +set / interface ethernet-1/29 subinterface 0 ipv4 admin-state enable +set / interface ethernet-1/29 subinterface 0 ipv4 address 198.19.17.0/31 +set / interface ethernet-1/29 subinterface 0 ipv6 admin-state enable +set / interface lo0 admin-state enable +set / interface lo0 subinterface 0 admin-state enable +set / interface lo0 subinterface 0 ipv4 admin-state enable +set / interface lo0 subinterface 0 ipv4 address 198.19.16.0/32 +set / interface mgmt0 admin-state enable +set / interface mgmt0 subinterface 0 admin-state enable +set / interface mgmt0 subinterface 0 ipv4 admin-state enable +set / interface mgmt0 subinterface 0 ipv4 dhcp-client +set / interface mgmt0 subinterface 0 ipv6 admin-state enable +set / interface mgmt0 subinterface 0 ipv6 dhcp-client +set / interface system0 admin-state enable +set / interface system0 subinterface 0 admin-state enable +set / interface system0 subinterface 0 ipv4 admin-state enable +set / interface system0 subinterface 0 ipv4 address 198.19.18.0/32 +set / network-instance default type default +set / network-instance default admin-state enable +set / network-instance default description "fabric: dc2 role: spine" +set / network-instance default router-id 198.19.16.0 +set / network-instance default ip-forwarding receive-ipv4-check false +set / network-instance default interface ethernet-1/29.0 +set / network-instance default interface lo0.0 +set / network-instance default interface system0.0 +set / network-instance default protocols bgp admin-state enable +set / network-instance default protocols bgp autonomous-system 65500 +set / network-instance default protocols bgp router-id 198.19.16.0 +set / network-instance default protocols bgp dynamic-neighbors accept match 198.19.16.0/24 peer-group overlay +set / network-instance default protocols bgp afi-safi evpn admin-state enable +set / network-instance default protocols bgp preference ibgp 170 +set / network-instance default protocols bgp route-advertisement rapid-withdrawal true +set / network-instance default protocols bgp route-advertisement wait-for-fib-install false +set / network-instance default protocols bgp group overlay peer-as 65500 +set / network-instance default protocols bgp group overlay afi-safi evpn admin-state enable +set / network-instance default protocols bgp group overlay afi-safi ipv4-unicast admin-state disable +set / network-instance default protocols bgp group overlay local-as as-number 65500 +set / network-instance default protocols bgp group overlay route-reflector client true +set / network-instance default protocols bgp group overlay transport local-address 198.19.16.0 +set / network-instance default protocols bgp neighbor 198.19.16.1 admin-state enable +set / network-instance default protocols bgp neighbor 198.19.16.1 peer-group overlay +set / network-instance default protocols ospf instance default admin-state enable +set / network-instance default protocols ospf instance default version ospf-v2 +set / network-instance default protocols ospf instance default router-id 198.19.16.0 +set / network-instance default protocols ospf instance default export-policy ospf +set / network-instance default protocols ospf instance default area 0.0.0.0 interface ethernet-1/29.0 interface-type point-to-point +set / network-instance default protocols ospf instance default area 0.0.0.0 interface lo0.0 +set / network-instance default protocols ospf instance default area 0.0.0.0 interface system0.0 +set / network-instance mgmt type ip-vrf +set / network-instance mgmt admin-state enable +set / network-instance mgmt description "Management network instance" +set / network-instance mgmt interface mgmt0.0 +set / network-instance mgmt protocols linux import-routes true +set / network-instance mgmt protocols linux export-routes true +set / network-instance mgmt protocols linux export-neighbors true +set / network-instance peeringlan type mac-vrf +set / network-instance peeringlan admin-state enable +set / network-instance peeringlan interface ethernet-1/9/3.0 +set / network-instance peeringlan vxlan-interface vxlan1.2604 +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 admin-state enable +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 vxlan-interface vxlan1.2604 +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 evi 2604 +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 routes bridge-table mac-ip advertise true +set / network-instance peeringlan protocols bgp-vpn bgp-instance 1 route-distinguisher rd 65500:2604 +set / network-instance peeringlan protocols bgp-vpn bgp-instance 1 route-target export-rt target:65500:2604 +set / network-instance peeringlan protocols bgp-vpn bgp-instance 1 route-target import-rt target:65500:2604 +set / network-instance peeringlan bridge-table proxy-arp admin-state enable +set / network-instance peeringlan bridge-table proxy-arp dynamic-learning admin-state enable +set / network-instance peeringlan bridge-table proxy-arp dynamic-learning age-time 600 +set / network-instance peeringlan bridge-table proxy-arp dynamic-learning send-refresh 180 +set / routing-policy policy ospf statement 100 match protocol host +set / routing-policy policy ospf statement 100 action policy-result accept +set / routing-policy policy ospf statement 200 match protocol ospfv2 +set / routing-policy policy ospf statement 200 action policy-result accept +set / tunnel-interface vxlan1 vxlan-interface 2604 type bridged +set / tunnel-interface vxlan1 vxlan-interface 2604 ingress vni 2604 +set / tunnel-interface vxlan1 vxlan-interface 2604 egress source-ip use-system-ipv4-address diff --git a/static/assets/frys-ix/nikhef.conf b/static/assets/frys-ix/nikhef.conf new file mode 100644 index 0000000..bc405a0 --- /dev/null +++ b/static/assets/frys-ix/nikhef.conf @@ -0,0 +1,132 @@ +set / interface ethernet-1/1 admin-state enable +set / interface ethernet-1/1 ethernet forward-error-correction fec-option rs-528 +set / interface ethernet-1/1 subinterface 0 type routed +set / interface ethernet-1/1 subinterface 0 admin-state enable +set / interface ethernet-1/1 subinterface 0 ip-mtu 9190 +set / interface ethernet-1/1 subinterface 0 ipv4 admin-state enable +set / interface ethernet-1/1 subinterface 0 ipv4 address 198.19.17.2/31 +set / interface ethernet-1/1 subinterface 0 ipv6 admin-state enable +set / interface ethernet-1/2 admin-state enable +set / interface ethernet-1/2 ethernet forward-error-correction fec-option rs-528 +set / interface ethernet-1/2 subinterface 0 type routed +set / interface ethernet-1/2 subinterface 0 admin-state enable +set / interface ethernet-1/2 subinterface 0 ip-mtu 9190 +set / interface ethernet-1/2 subinterface 0 ipv4 admin-state enable +set / interface ethernet-1/2 subinterface 0 ipv4 address 198.19.17.4/31 +set / interface ethernet-1/2 subinterface 0 ipv6 admin-state enable +set / interface ethernet-1/3 admin-state enable +set / interface ethernet-1/3 ethernet forward-error-correction fec-option rs-528 +set / interface ethernet-1/3 subinterface 0 type routed +set / interface ethernet-1/3 subinterface 0 admin-state enable +set / interface ethernet-1/3 subinterface 0 ip-mtu 9190 +set / interface ethernet-1/3 subinterface 0 ipv4 admin-state enable +set / interface ethernet-1/3 subinterface 0 ipv4 address 198.19.17.6/31 +set / interface ethernet-1/3 subinterface 0 ipv6 admin-state enable +set / interface ethernet-1/4 admin-state enable +set / interface ethernet-1/4 ethernet forward-error-correction fec-option rs-528 +set / interface ethernet-1/4 subinterface 0 type routed +set / interface ethernet-1/4 subinterface 0 admin-state enable +set / interface ethernet-1/4 subinterface 0 ip-mtu 9190 +set / interface ethernet-1/4 subinterface 0 ipv4 admin-state enable +set / interface ethernet-1/4 subinterface 0 ipv4 address 198.19.17.8/31 +set / interface ethernet-1/4 subinterface 0 ipv6 admin-state enable +set / interface ethernet-1/9 admin-state enable +set / interface ethernet-1/9 breakout-mode num-breakout-ports 4 +set / interface ethernet-1/9 breakout-mode breakout-port-speed 10G +set / interface ethernet-1/9/1 admin-state disable +set / interface ethernet-1/9/2 admin-state disable +set / interface ethernet-1/9/3 admin-state enable +set / interface ethernet-1/9/3 vlan-tagging true +set / interface ethernet-1/9/3 subinterface 0 type bridged +set / interface ethernet-1/9/3 subinterface 0 admin-state enable +set / interface ethernet-1/9/3 subinterface 0 vlan encap untagged +set / interface ethernet-1/9/4 admin-state disable +set / interface ethernet-1/29 admin-state enable +set / interface ethernet-1/29 subinterface 0 type routed +set / interface ethernet-1/29 subinterface 0 admin-state enable +set / interface ethernet-1/29 subinterface 0 ip-mtu 9190 +set / interface ethernet-1/29 subinterface 0 ipv4 admin-state enable +set / interface ethernet-1/29 subinterface 0 ipv4 address 198.19.17.1/31 +set / interface ethernet-1/29 subinterface 0 ipv6 admin-state enable +set / interface lo0 admin-state enable +set / interface lo0 subinterface 0 admin-state enable +set / interface lo0 subinterface 0 ipv4 admin-state enable +set / interface lo0 subinterface 0 ipv4 address 198.19.16.1/32 +set / interface mgmt0 admin-state enable +set / interface mgmt0 subinterface 0 admin-state enable +set / interface mgmt0 subinterface 0 ipv4 admin-state enable +set / interface mgmt0 subinterface 0 ipv4 dhcp-client +set / interface mgmt0 subinterface 0 ipv6 admin-state enable +set / interface mgmt0 subinterface 0 ipv6 dhcp-client +set / interface system0 admin-state enable +set / interface system0 subinterface 0 admin-state enable +set / interface system0 subinterface 0 ipv4 admin-state enable +set / interface system0 subinterface 0 ipv4 address 198.19.18.1/32 +set / network-instance default type default +set / network-instance default admin-state enable +set / network-instance default description "fabric: dc1 role: spine" +set / network-instance default router-id 198.19.16.1 +set / network-instance default ip-forwarding receive-ipv4-check false +set / network-instance default interface ethernet-1/1.0 +set / network-instance default interface ethernet-1/2.0 +set / network-instance default interface ethernet-1/29.0 +set / network-instance default interface ethernet-1/3.0 +set / network-instance default interface ethernet-1/4.0 +set / network-instance default interface lo0.0 +set / network-instance default interface system0.0 +set / network-instance default protocols bgp admin-state enable +set / network-instance default protocols bgp autonomous-system 65500 +set / network-instance default protocols bgp router-id 198.19.16.1 +set / network-instance default protocols bgp dynamic-neighbors accept match 198.19.16.0/24 peer-group overlay +set / network-instance default protocols bgp afi-safi evpn admin-state enable +set / network-instance default protocols bgp preference ibgp 170 +set / network-instance default protocols bgp route-advertisement rapid-withdrawal true +set / network-instance default protocols bgp route-advertisement wait-for-fib-install false +set / network-instance default protocols bgp group overlay peer-as 65500 +set / network-instance default protocols bgp group overlay afi-safi evpn admin-state enable +set / network-instance default protocols bgp group overlay afi-safi ipv4-unicast admin-state disable +set / network-instance default protocols bgp group overlay local-as as-number 65500 +set / network-instance default protocols bgp group overlay route-reflector client true +set / network-instance default protocols bgp group overlay transport local-address 198.19.16.1 +set / network-instance default protocols bgp neighbor 198.19.16.0 admin-state enable +set / network-instance default protocols bgp neighbor 198.19.16.0 peer-group overlay +set / network-instance default protocols ospf instance default admin-state enable +set / network-instance default protocols ospf instance default version ospf-v2 +set / network-instance default protocols ospf instance default router-id 198.19.16.1 +set / network-instance default protocols ospf instance default export-policy ospf +set / network-instance default protocols ospf instance default area 0.0.0.0 interface ethernet-1/1.0 interface-type point-to-point +set / network-instance default protocols ospf instance default area 0.0.0.0 interface ethernet-1/2.0 interface-type point-to-point +set / network-instance default protocols ospf instance default area 0.0.0.0 interface ethernet-1/3.0 interface-type point-to-point +set / network-instance default protocols ospf instance default area 0.0.0.0 interface ethernet-1/4.0 interface-type point-to-point +set / network-instance default protocols ospf instance default area 0.0.0.0 interface ethernet-1/29.0 interface-type point-to-point +set / network-instance default protocols ospf instance default area 0.0.0.0 interface lo0.0 passive true +set / network-instance default protocols ospf instance default area 0.0.0.0 interface system0.0 +set / network-instance mgmt type ip-vrf +set / network-instance mgmt admin-state enable +set / network-instance mgmt description "Management network instance" +set / network-instance mgmt interface mgmt0.0 +set / network-instance mgmt protocols linux import-routes true +set / network-instance mgmt protocols linux export-routes true +set / network-instance mgmt protocols linux export-neighbors true +set / network-instance peeringlan type mac-vrf +set / network-instance peeringlan admin-state enable +set / network-instance peeringlan interface ethernet-1/9/3.0 +set / network-instance peeringlan vxlan-interface vxlan1.2604 +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 admin-state enable +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 vxlan-interface vxlan1.2604 +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 evi 2604 +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 routes bridge-table mac-ip advertise true +set / network-instance peeringlan protocols bgp-vpn bgp-instance 1 route-distinguisher rd 65500:2604 +set / network-instance peeringlan protocols bgp-vpn bgp-instance 1 route-target export-rt target:65500:2604 +set / network-instance peeringlan protocols bgp-vpn bgp-instance 1 route-target import-rt target:65500:2604 +set / network-instance peeringlan bridge-table proxy-arp admin-state enable +set / network-instance peeringlan bridge-table proxy-arp dynamic-learning admin-state enable +set / network-instance peeringlan bridge-table proxy-arp dynamic-learning age-time 600 +set / network-instance peeringlan bridge-table proxy-arp dynamic-learning send-refresh 180 +set / routing-policy policy ospf statement 100 match protocol host +set / routing-policy policy ospf statement 100 action policy-result accept +set / routing-policy policy ospf statement 200 match protocol ospfv2 +set / routing-policy policy ospf statement 200 action policy-result accept +set / tunnel-interface vxlan1 vxlan-interface 2604 type bridged +set / tunnel-interface vxlan1 vxlan-interface 2604 ingress vni 2604 +set / tunnel-interface vxlan1 vxlan-interface 2604 egress source-ip use-system-ipv4-address diff --git a/static/assets/frys-ix/nokia-leaf.conf b/static/assets/frys-ix/nokia-leaf.conf new file mode 100644 index 0000000..b0c94d2 --- /dev/null +++ b/static/assets/frys-ix/nokia-leaf.conf @@ -0,0 +1,105 @@ +set / interface ethernet-1/9 admin-state enable +set / interface ethernet-1/9 vlan-tagging true +set / interface ethernet-1/9 ethernet port-speed 10G +set / interface ethernet-1/9 subinterface 0 type bridged +set / interface ethernet-1/9 subinterface 0 admin-state enable +set / interface ethernet-1/9 subinterface 0 vlan encap untagged +set / interface ethernet-1/53 admin-state enable +set / interface ethernet-1/53 ethernet forward-error-correction fec-option rs-528 +set / interface ethernet-1/53 subinterface 0 admin-state enable +set / interface ethernet-1/53 subinterface 0 ip-mtu 9190 +set / interface ethernet-1/53 subinterface 0 ipv4 admin-state enable +set / interface ethernet-1/53 subinterface 0 ipv4 address 198.19.17.11/31 +set / interface ethernet-1/53 subinterface 0 ipv6 admin-state enable +set / interface ethernet-1/55 admin-state enable +set / interface ethernet-1/55 ethernet forward-error-correction fec-option rs-528 +set / interface ethernet-1/55 subinterface 0 admin-state enable +set / interface ethernet-1/55 subinterface 0 ip-mtu 9190 +set / interface ethernet-1/55 subinterface 0 ipv4 admin-state enable +set / interface ethernet-1/55 subinterface 0 ipv4 address 198.19.17.7/31 +set / interface ethernet-1/55 subinterface 0 ipv6 admin-state enable +set / interface ethernet-1/56 admin-state enable +set / interface ethernet-1/56 ethernet forward-error-correction fec-option rs-528 +set / interface ethernet-1/56 subinterface 0 admin-state enable +set / interface ethernet-1/56 subinterface 0 ip-mtu 9190 +set / interface ethernet-1/56 subinterface 0 ipv4 admin-state enable +set / interface ethernet-1/56 subinterface 0 ipv4 address 198.19.17.9/31 +set / interface ethernet-1/56 subinterface 0 ipv6 admin-state enable +set / interface lo0 admin-state enable +set / interface lo0 subinterface 0 admin-state enable +set / interface lo0 subinterface 0 ipv4 admin-state enable +set / interface lo0 subinterface 0 ipv4 address 198.19.16.3/32 +set / interface mgmt0 admin-state enable +set / interface mgmt0 subinterface 0 admin-state enable +set / interface mgmt0 subinterface 0 ipv4 admin-state enable +set / interface mgmt0 subinterface 0 ipv4 dhcp-client +set / interface mgmt0 subinterface 0 ipv6 admin-state enable +set / interface mgmt0 subinterface 0 ipv6 dhcp-client +set / interface system0 admin-state enable +set / interface system0 subinterface 0 admin-state enable +set / interface system0 subinterface 0 ipv4 admin-state enable +set / interface system0 subinterface 0 ipv4 address 198.19.18.3/32 +set / network-instance default type default +set / network-instance default admin-state enable +set / network-instance default description "fabric: dc1 role: leaf" +set / network-instance default router-id 198.19.16.3 +set / network-instance default ip-forwarding receive-ipv4-check false +set / network-instance default interface ethernet-1/53.0 +set / network-instance default interface ethernet-1/55.0 +set / network-instance default interface ethernet-1/56.0 +set / network-instance default interface lo0.0 +set / network-instance default interface system0.0 +set / network-instance default protocols bgp admin-state enable +set / network-instance default protocols bgp autonomous-system 65500 +set / network-instance default protocols bgp router-id 198.19.16.3 +set / network-instance default protocols bgp afi-safi evpn admin-state enable +set / network-instance default protocols bgp preference ibgp 170 +set / network-instance default protocols bgp route-advertisement rapid-withdrawal true +set / network-instance default protocols bgp route-advertisement wait-for-fib-install false +set / network-instance default protocols bgp group overlay peer-as 65500 +set / network-instance default protocols bgp group overlay afi-safi evpn admin-state enable +set / network-instance default protocols bgp group overlay afi-safi ipv4-unicast admin-state disable +set / network-instance default protocols bgp group overlay local-as as-number 65500 +set / network-instance default protocols bgp group overlay transport local-address 198.19.16.3 +set / network-instance default protocols bgp neighbor 198.19.16.0 admin-state enable +set / network-instance default protocols bgp neighbor 198.19.16.0 peer-group overlay +set / network-instance default protocols bgp neighbor 198.19.16.1 admin-state enable +set / network-instance default protocols bgp neighbor 198.19.16.1 peer-group overlay +set / network-instance default protocols ospf instance default admin-state enable +set / network-instance default protocols ospf instance default version ospf-v2 +set / network-instance default protocols ospf instance default router-id 198.19.16.3 +set / network-instance default protocols ospf instance default export-policy ospf +set / network-instance default protocols ospf instance default area 0.0.0.0 interface ethernet-1/53.0 interface-type point-to-point +set / network-instance default protocols ospf instance default area 0.0.0.0 interface ethernet-1/55.0 interface-type point-to-point +set / network-instance default protocols ospf instance default area 0.0.0.0 interface ethernet-1/56.0 interface-type point-to-point +set / network-instance default protocols ospf instance default area 0.0.0.0 interface lo0.0 passive true +set / network-instance default protocols ospf instance default area 0.0.0.0 interface system0.0 +set / network-instance mgmt type ip-vrf +set / network-instance mgmt admin-state enable +set / network-instance mgmt description "Management network instance" +set / network-instance mgmt interface mgmt0.0 +set / network-instance mgmt protocols linux import-routes true +set / network-instance mgmt protocols linux export-routes true +set / network-instance mgmt protocols linux export-neighbors true +set / network-instance peeringlan type mac-vrf +set / network-instance peeringlan admin-state enable +set / network-instance peeringlan interface ethernet-1/9.0 +set / network-instance peeringlan vxlan-interface vxlan1.2604 +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 admin-state enable +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 vxlan-interface vxlan1.2604 +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 evi 2604 +set / network-instance peeringlan protocols bgp-evpn bgp-instance 1 routes bridge-table mac-ip advertise true +set / network-instance peeringlan protocols bgp-vpn bgp-instance 1 route-distinguisher rd 65500:2604 +set / network-instance peeringlan protocols bgp-vpn bgp-instance 1 route-target export-rt target:65500:2604 +set / network-instance peeringlan protocols bgp-vpn bgp-instance 1 route-target import-rt target:65500:2604 +set / network-instance peeringlan bridge-table proxy-arp admin-state enable +set / network-instance peeringlan bridge-table proxy-arp dynamic-learning admin-state enable +set / network-instance peeringlan bridge-table proxy-arp dynamic-learning age-time 600 +set / network-instance peeringlan bridge-table proxy-arp dynamic-learning send-refresh 180 +set / routing-policy policy ospf statement 100 match protocol host +set / routing-policy policy ospf statement 100 action policy-result accept +set / routing-policy policy ospf statement 200 match protocol ospfv2 +set / routing-policy policy ospf statement 200 action policy-result accept +set / tunnel-interface vxlan1 vxlan-interface 2604 type bridged +set / tunnel-interface vxlan1 vxlan-interface 2604 ingress vni 2604 +set / tunnel-interface vxlan1 vxlan-interface 2604 egress source-ip use-system-ipv4-address