Table Of Contents
VSS-Enabled Campus Best Practice Configuration Example
End-to-End Device Configurations
VSS Specific
Layer-2 Domain
Layer-3 Domain
EIGRP MEC
EIGRP ECMP
OSPF MEC
OSPF ECMP
VSS-Enabled Campus Best Practice Configuration Example
Figure A-1 illustrates the baseline best practice configuration required to set up basic VSS enabled network. The circle indicates the essential steps required to create the VSS systems from standalone. The red text highlights the important CLI information with VSS configuration. Comments are provided in blue italic font.
Figure A-1 Overall VSS-Enabled Campus Best Practice Configuration Summary
End-to-End Device Configurations
The end-to-end devices configuration is categorized into three major sections. Each section configuration contains specific CLI which is a required as part of best practice configuration and corresponding explanation.
•
VSS and L2 Domain- Includes above base configuration as well as L2 domain configuration
•
Access-layer- Sample L2 domain configuration
•
L3 Domain - Includes global L3 configuration for VSS and core routers. Then separate section for specifics topologies (ECMP and MEC) for EIGRP and OSPF. In addition, the core devices configuration shown below are standalone router/devices.
VSS Specific
VSS Global Configuration
switch virtual domain 10 ! Must configure unique domain ID
switch 1 priority 110 ! Not needed, helps in operational mgmt
switch 2 priority 100 ! Not needed, helps in operational mgmt
dual-active exclude interface GigabitEthernet1/5/3 ! Connectivity to VSS during dual
active
mac-address use-virtual ! Required for consistent MAC address
dual-active detection pagp trust channel-group 202 ! Enhanced PAgP based dual active
detection
redundancy ! Default SSO Enabled
Switch 1
interface Port-channel1 ! Unique port-channel number for SW 1
description VSL Link from Switch 1
switch virtual link 1 ! Defines switch ID for SW 1
no mls qos channel-consistency
channel-group 1 mode on ! EC mode is ON - EtherChannel Managemeent Protocol off
Switch 2
interface Port-channel2 ! Unique port-channel number for SW 1
description VSL Link from Switch 2
switch virtual link 2 ! Defines switch ID for SW 2
no mls qos channel-consistency
channel-group 2 mode on ! EC mode is ON - EtherChannel Managemeent Protocoloff
Layer-2 Domain
VSS
spanning-tree mode rapid-pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
spanning-tree vlan 2-999 priority 24576 ! STP Root
port-channel load-balance src-dst-mixed-ip-port ! Enhanced hash algorithem
vlan 400 ! VLANs spanning multiple access-layer SWs
name L2_ Spaned_VLAN _400
name L2_ Spaned_VLAN _450
name L2_ Spaned_VLAN _500
name L2_ Spaned_VLAN _550
name L2_ Spaned_VLAN _600
name Unused_Port_VLAN_999
name cr7-3750-Stack-Data-VLAN
name cr7-3750-Stack-Voice-VLAN
interface Vlan2 ! Sample VLAN interface configuration
ip address 10.120.2.1 255.255.255.0
logging event link-status
VSS—Multi-Chassis EtherChannel
PAgP
interface GigabitEthernet1/8/23 ! Interface on SW 1
description Access Switch Facing Interface
switchport trunk encapsulation dot1q
switchport trunk native vlan 202
switchport mode dynamic desirable ! Trunk mod dynamic and desirable
switchport trunk allowed vlan 2,102,400,450,500,550,600,650,900 ! Only allow need VLANs
for a given trunk
logging event link-status ! Logging for link status
logging event trunk-status ! Logging for trunk status
logging event bundle-status ! Logging for port-channel status
channel-group 202 mode desirable ! Define Port-channel, PAgP mode desirable
interface GigabitEthernet2/8/23 ! Interface on SW 2
description Access Switch Facing Interface
switchport trunk encapsulation dot1q
switchport trunk native vlan 202
switchport mode dynamic desirable
switchport trunk allowed vlan 2,102,400,450,500,550,600,650,900
logging event link-status
logging event trunk-status
logging event bundle-status
channel-group 202 mode desirable
interface Port-channel202 ! Automatically created by defining at interfaces
description Access Switch MEC
switchport trunk encapsulation dot1q
switchport trunk native vlan 202
switchport trunk allowed vlan 2,102,400,450,500,550,600,650,900
logging event link-status
logging event spanning-tree status ! STP logging enabled on port-channel
spanning-tree portfast ! Optional - helps during initialization
LACP
LACP Sample Configuration
interface GigabitEthernet1/8/23
description Access Switch Facing Interface
switchport trunk encapsulation dot1q
switchport trunk native vlan 202
switchport mode dynamic desirable
switchport trunk allowed vlan 2,102,400,450,500,550,600,650,900
logging event link-status
logging event trunk-status
logging event bundle-status
channel-group 202 mode active
interface GigabitEthernet2/8/23
description Access Switch Facing Interface
switchport trunk encapsulation dot1q
switchport trunk native vlan 202
switchport mode dynamic desirable
switchport trunk allowed vlan 2,102,400,450,500,550,600,650,900
logging event link-status
logging event trunk-status
logging event bundle-status
channel-group 202 mode active
interface Port-channel202 ! Automatically created by defining at interfaces
description Access Switch MEC
switchport trunk encapsulation dot1q
switchport trunk native vlan 202
switchport trunk allowed vlan 2,102,400,450,500,550,600,650,900
logging event link-status
logging event spanning-tree status
spanning-tree portfast ! Optional - helps during initialization
Access-Layer Switch
Sample Configuration (Platform Specific Configuration Varies)
interface GigabitEthernet0/27
description Uplink to VSS Switch Gig 1/8/24
switchport trunk encapsulation dot1q
switchport trunk native vlan 203
switchport mode dynamic desirable
switchport trunk allowed vlan 3,103,400,450,500,550,600,650,900
logging event link-status
logging event trunk-status
logging event bundle-status
srr-queue bandwidth share 1 70 25 5
srr-queue bandwidth shape 3 0 0 0
channel-group 1 mode desirable
interface GigabitEthernet0/28
description Uplink to VSS Switch Gig 2/8/24
switchport trunk encapsulation dot1q
switchport trunk native vlan 203
switchport trunk allowed vlan 3,103,400,450,500,550,600,650,900
switchport mode dynamic desirable
logging event link-status
logging event trunk-status
logging event bundle-status
srr-queue bandwidth share 1 70 25 5
srr-queue bandwidth shape 3 0 0 0
channel-group 1 mode desirable
interface Port-channel1 ! Automatically created by defining at interfaces
description EC Uplink to VSS
switchport trunk encapsulation dot1q
switchport trunk native vlan 203
switchport trunk allowed vlan 3,103,400,450,500,550,600,650,900
switchport mode dynamic desirable
logging event link-status
logging event spanning-tree status
spanning-tree portfast ! Optional - helps during initialization
Layer-3 Domain
The Layer 3 domain represents VSS interconnection to the core-layer. The core-layer devices configuration shown below are standalone router/switch.
Global Configuration
mls ip cef load-sharing <option> ! Apply Campus Best Practices
Multicast
VSS
ip pim rp-address 10.122.100.1 GOOD-IPMC override ! RP mapping with filter
ip access-list standard GOOD-IPMC
permit 239.192.240.0 0.0.3.255
permit 239.192.248.0 0.0.3.255
Core 1 Standalone Router (No VSS)
Core RP ANYCAST - Primary
description MSDP PEER INT ! MSDP Loopback
ip address 10.122.10.1 255.255.255.255
description ANYCAST RP ADDRESS (PRIMARY) ! Anycast RP Primary
ip address 10.122.100.1 255.255.255.255
description Garbage-CAN RP
ip address 2.2.2.2 255.255.255.255
interface Port-channel1 ! Core 1- Core2 L3 for MSDP
description Channel to Peer Core Node
ip address 10.122.0.18 255.255.255.254
ip access-list standard GOOD-IPMC
permit 239.192.240.0 0.0.3.255
permit 239.192.248.0 0.0.3.255
ip msdp peer 10.122.10.2 connect -source Loopback0 ! MSDP Configuration
ip msdp description 10.122.10.2 ANYCAST-PEER-6k-core-2
ip msdp originator-id Loopback0
Core 2 Standalone Router (No VSS)
description MSDP PEER INT
ip address 10.122.10.2 255.255.255.255
description ANYCAST RP ADDRESS
ip address 10.122.100.1 255.255.255.255 ! Secondary ANYCAST RP
description Garbage-CAN RP
ip address 2.2.2.2 255.255.255.255
description Channel to Peer Core node
ip address 10.122.0.19 255.255.255.254
ip pim rp-address 10.122.100.1 GOOD-IPMC override
ip access-list standard GOOD-IPMC
permit 239.192.240.0 0.0.3.255
permit 239.192.248.0 0.0.3.255
ip msdp peer 10.122.10.1 connect-source Loopback0
ip msdp description 10.122.10.1 ANYCAST-PEER-6k-core-1
ip msdp originator-id Loopback0
EIGRP MEC
VSS
passive-interface default
no passive-interface Port-channel200
no passive-interface Port-channel201
eigrp log-neighbor-warnings
eigrp log-neighbor-changes
eigrp router-id 10.122.102.1
eigrp event-log-size 3000
nsf ! Enable NSF Capability
interface Port-channel200 ! Create L3 MEC Interface first
description 20 Gig MEC to CORE-1 (cr2-6500-1 4/1-4/3)
ip address 10.122.0.26 255.255.255.254
ip summary-address eigrp 100 10.125.0.0 255.255.0.0 5 ! Summarization for Access-subnets
ip summary-address eigrp 100 10.120.0.0 255.255.0.0 5
logging event link-status
interface Port-channel201
description 20 Gig to CORE-2 (cr2-6500-1 4/1-4/3)
ip address 10.122.0.21 255.255.255.254
ip summary-address eigrp 100 10.125.0.0 255.255.0.0 5
ip summary-address eigrp 100 10.120.0.0 255.255.0.0 5
logging event link-status
interface TenGigabitEthernet1/2/1
description 10 GigE to Core 1
logging event link-status
logging event bundle-status
channel-group 200 mode desirable
interface TenGigabitEthernet1/2/2
description 10 GigE to Core 2
logging event link-status
logging event bundle-status
channel-group 201 mode desirable
interface TenGigabitEthernet2/2/1
logging event link-status
logging event bundle-status
logging event spanning-tree status
channel-group 200 mode desirable
interface TenGigabitEthernet2/2/2
description 10 GigE to Core 2
logging event link-status
logging event bundle-status
channel-group 201 mode desirable
Core 1 Standalone Router (No VSS)
passive-interface default
no passive-interface Port-channel1
no passive-interface Port-channel20
no passive-interface Port-channel221
eigrp log-neighbor-warnings
eigrp log-neighbor-changes
eigrp event-log-size 3000
description 20 Gig MEC to VSS 1/2/1 2/2/1
ip address 10.122.0.27 255.255.255.254
logging event link-status
Core 2 Standalone Router (No VSS)
passive-interface default
no passive-interface Port-channel1
no passive-interface Port-channel20
no passive-interface Port-channel221
eigrp log-neighbor-warnings
eigrp log-neighbor-changes
eigrp event-log-size 3000
description 20 Gig to VSS 1/2/2-2/2/2
ip address 10.122.0.20 255.255.255.254
logging event link-status
EIGRP ECMP
VSS
passive-interface default
no passive-interface TenGigabitEthernet1/2/1
no passive-interface TenGigabitEthernet1/2/2
no passive-interface TenGigabitEthernet2/2/1
no passive-interface TenGigabitEthernet2/2/2
eigrp router-id 10.122.102.1
eigrp log-neighbor-warnings
eigrp log-neighbor-changes
eigrp event-log-size 3000
nsf ! Enable NSF Capability
interface TenGigabitEthernet1/2/1
description 10 GigE to Core 1
ip address 10.122.0.26 255.255.255.254
ip summary-address eigrp 100 10.120.0.0 255.255.0.0 5
logging event link-status
interface TenGigabitEthernet1/2/2
description 10 GigE to Core 2
ip address 10.122.0.23 255.255.255.254
ip summary-address eigrp 100 10.120.0.0 255.255.0.0 5
logging event link-status
interface TenGigabitEthernet2/2/1
ip address 10.122.0.32 255.255.255.254
ip summary-address eigrp 100 10.120.0.0 255.255.0.0 5
logging event link-status
interface TenGigabitEthernet2/2/2
description 10 GigE to Core 2
ip address 10.122.0.20 255.255.255.254
ip summary-address eigrp 100 10.120.0.0 255.255.0.0 5
logging event link-status
Core 1 Standalone Router (No VSS)
passive-interface default
no passive-interface TenGigabitEthernet4/1
no passive-interface TenGigabitEthernet4/3
eigrp log-neighbor-warnings
eigrp log-neighbor-changes
eigrp event-log-size 3000
interface TenGigabitEthernet4/1
description To VSS Ten1/2/1
ip address 10.122.0.27 255.255.255.254
logging event link-status
interface TenGigabitEthernet4/3
description To VSS Ten2/2/1
ip address 10.122.0.33 255.255.255.254
logging event link-status
logging event bundle-status
Core 2 Standalone Router (No VSS)
passive-interface default
no passive-interface TenGigabitEthernet4/1
no passive-interface TenGigabitEthernet4/3
eigrp log-neighbor-warnings
eigrp log-neighbor-changes
eigrp event-log-size 3000
interface TenGigabitEthernet4/1
description To VSS Ten 1/2/2
ip address 10.122.0.22 255.255.255.254
logging event link-status
interface TenGigabitEthernet4/3
description To VSS Ten 2/2/2
ip address 10.122.0.21 255.255.255.254
logging event link-status
OSPF MEC
VSS
log-adjacency-changes detail
auto-cost reference-bandwidth 20000 ! Optional
nsf ! Enable NSF Capability
area 120 range 10.120.0.0 255.255.0.0 cost 10
area 120 range 10.125.0.0 255.255.0.0 cost 10
passive-interface default
no passive-interface Port-channel200
no passive-interface Port-channel201
network 10.120.0.0 0.0.255.255 area 120
network 10.122.0.0 0.0.255.255 area 0
network 10.125.0.0 0.0.255.255 area 120
interface Port-channel200
description 20 Gig MEC to VSS (cr2-6500-1 4/1-4/3)
ip address 10.122.0.26 255.255.255.254
ip ospf network point-to-point
logging event link-status
interface Port-channel201
description 20 Gig to VSS (cr2-6500-1 4/1-4/3)
ip address 10.122.0.21 255.255.255.254
ip ospf network point-to-point
logging event link-status
Core 1 Standalone Router No VSS)
log-adjacency-changes detail ! Helps in NSF Restart Activities
auto-cost reference-bandwidth 20000 ! Optional
passive-interface default
no passive-interface Port-channel1
no passive-interface Port-channel20
network 10.122.0.0 0.0.255.255 area 0
description 20 Gig MEC to VSS 1/2/1 2/2/1
ip address 10.122.0.27 255.255.255.254
ip ospf network point-to-point
logging event link-status
Core 2 Standalone Router (No VSS)
log-adjacency-changes detail
auto-cost reference-bandwidth 20000 ! Optional
passive-interface default
no passive-interface Port-channel1
no passive-interface Port-channel20
network 10.122.0.0 0.0.255.255 area 0
description 20 Gig to VSS 1/2/2-2/2/2
ip address 10.122.0.20 255.255.255.254
ip ospf network point-to-point
logging event link-status
OSPF ECMP
VSS
log-adjacency-changes detail
auto-cost reference-bandwidth 20000 ! Optional
nsf ! Enable NSF Capability
area 120 range 10.120.0.0 255.255.0.0 cost 10
area 120 range 10.125.0.0 255.255.0.0 cost 10
passive-interface default
no passive-interface TenGigabitEthernet1/2/1
no passive-interface TenGigabitEthernet1/2/2
no passive-interface TenGigabitEthernet2/2/1
no passive-interface TenGigabitEthernet2/2/2
network 10.120.0.0 0.0.255.255 area 120
network 10.122.0.0 0.0.255.255 area 0
network 10.125.0.0 0.0.255.255 area 120
interface TenGigabitEthernet1/2/1
description 10 GigE to Core 1
ip address 10.122.0.26 255.255.255.254
ip ospf network point-to-point
logging event link-status
interface TenGigabitEthernet1/2/2
description 10 GigE to Core 2
ip address 10.122.0.23 255.255.255.254
ip ospf network point-to-point
logging event link-status
interface TenGigabitEthernet2/2/1
ip address 10.122.0.32 255.255.255.254
ip ospf network point-to-point
logging event link-status
interface TenGigabitEthernet2/2/2
description 10 GigE to Core 2
ip address 10.122.0.20 255.255.255.254
ip ospf network point-to-point
logging event link-status
Core 1 Standalone Router (No VSS)
log-adjacency-changes detail
auto-cost reference-bandwidth 20000 ! Optional
passive-interface default
no passive-interface GigabitEthernet2/5
no passive-interface TenGigabitEthernet4/1
no passive-interface TenGigabitEthernet4/3
no passive-interface Port-channel1
network 10.122.0.0 0.0.255.255 area 0
interface TenGigabitEthernet4/1
description To VSS Ten1/2/1
ip address 10.122.0.27 255.255.255.254
ip ospf network point-to-point
logging event link-status
interface TenGigabitEthernet4/3
description To VSS Ten2/2/1
ip address 10.122.0.33 255.255.255.254
ip ospf network point-to-point
logging event link-status
Core 2 Standalone Router (No VSS)
log-adjacency-changes detail
auto-cost reference-bandwidth 20000 ! Optional
passive-interface default
no passive-interface GigabitEthernet2/5
no passive-interface TenGigabitEthernet4/1
no passive-interface TenGigabitEthernet4/3
no passive-interface Port-channel1
network 10.122.0.0 0.0.255.255 area 0
interface TenGigabitEthernet4/1
description To VSS Ten 1/2/2
ip address 10.122.0.22 255.255.255.254
ip ospf network point-to-point
logging event link-status
interface TenGigabitEthernet4/3
description To VSS Ten 2/2/2
ip address 10.122.0.21 255.255.255.254
ip ospf network point-to-point
logging event link-status