ITC/3AV WIKI

User Tools

Site Tools

Trace:
aruba_networks:switch:6400:6400_configuration_example_script

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
aruba_networks:switch:6400:6400_configuration_example_script [2024/07/30 11:45] – aperezaruba_networks:switch:6400:6400_configuration_example_script [2024/09/22 10:58] (current) – aperez
Line 6: Line 6:
 ---- ----
 {{ youtube>1JKSd0HCRXg }} {{ youtube>1JKSd0HCRXg }}
 +
 +----
 +----
 +
 +====== Select a Product to View the List of Commands ======
 +
 +**[[https://www.arubanetworks.com/techdocs/AOS-CX/AOSCX-CLI-Bank/cli_832x/Content/aos-cx-home.htm|Select a Product to View the List of Commands]]
 +**
  
 ---- ----
Line 32: Line 40:
  
  
 +
 +----
 +
 +----
 +
 +====== AOS-CX 10.10 IP Services Guide 6300, 6400 Switch Series ======
 +
 +{{ :aruba_networks:switch:6400:ip_services_6300-6400.pdf |AOS-CX 10.10 IP Services Guide 6300, 6400 Switch Series}}
 +
 +{{pdfjs 46em >:aruba_networks:switch:6400:ip_services_6300-6400.pdf}}
 +
 +
 +
 +----
  
 ---- ----
Line 327: Line 349:
 {{ :aruba_networks:switch:igmp-snooping-overview_603x386.png?600 | }} {{ :aruba_networks:switch:igmp-snooping-overview_603x386.png?600 | }}
  
 +
 +----
 +----
 +
 +{{ :aruba_networks:switch:6400:multicast_6200-6300-6400-8xxx.pdf |}}
 +
 +
 +{{pdfjs 46em >:aruba_networks:switch:6400:multicast_6200-6300-6400-8xxx.pdf}}
 +
 +
 +----
 +----
 +
 +  access-list ip mygroup
 +  10 permit any any 239.1.1.1/24
 +  access-list ip mygroup1
 +  10 permit any any any
 +  
 +  
 +  
 +  vlan 1
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 500
 +      name ServerVM
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 501
 +      name ServerStack
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 502
 +      name ISP1
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 503
 +      name ISP2
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 504
 +      name ISP3
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 505
 +      name LAN-UTM
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 506
 +      name WIFI-AP
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 507
 +      name VIP
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 508
 +      name ST
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 509
 +      name Staff
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 510
 +      name Teacher
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 511
 +      name Students
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 512
 +      name Accounting
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 513
 +      name Printer
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 514
 +      name AC
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 515
 +      name iDRAC
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 516
 +      name KVM
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 517
 +      name Guest
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 518
 +      name VoIP
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +       ip igmp snooping apply access-list mygroup
 +  vlan 519
 +      name IoT
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 520
 +      name Cameras
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 521
 +      name VC
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 522
 +      name VPN
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 523
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 524
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  vlan 525
 +      ip igmp snooping enable
 +      ip igmp snooping version 2
 +      ip igmp snooping apply access-list mygroup
 +  
 +  
 +  interface vlan 511
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 512
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 513
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 514
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 515
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 516
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 517
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 518
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 519
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 520
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 521
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 522
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 523
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 524
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +  interface vlan 525
 +    ip igmp enable
 +    ip igmp version 2
 +    ip igmp querier
 +    ip igmp querier interval 100
 +  
 +    ip igmp query-max-response-time 30
 +    ip igmp robustness 5
 +    ip igmp last-member-query-interval 2
 +    ip igmp query-max-response-time 50
 +    ip igmp apply access-list mygroup1  
 +  
 +----
 +----
 +
 +
 +**DHCP relay** 
 +
 +DHCP relay is enabled by default. If it was previously disabled, enable it.
 +
 +  Switch A:
 +
 +  switch#config
 +  switch(config)#dhcp-relay
 +  switch(config)#dhcp-smart-relay
 +
 +  switch(config)#interface vlan 508
 +  switch(config-if-vlan)#description Vlan 508 ST
 +  switch(config-if-vlan)#vsx-sync active-gateways
 +  switch(config-if-vlan)#ip mtu 9100
 +  switch(config-if-vlan)#ip address 10.28.72.2/23
 +  switch(config-if-vlan)#active-gateway ip mac 12:01:00:00:01:00
 +  switch(config-if-vlan)#active-gateway ip 10.28.72.1
 +  switch(config-if-vlan)#ip helper-address 10.28.64.22
 +
 +  Switch B:
 +
 +  switch#config
 +  switch(config)#dhcp-relay
 +  switch(config)#dhcp-smart-relay
 +
 +  switch(config)#interface vlan 508
 +  switch(config-if-vlan)#description Vlan 508 ST
 +  switch(config-if-vlan)#vsx-sync active-gateways
 +  switch(config-if-vlan)#ip mtu 9100
 +  switch(config-if-vlan)#ip address 10.28.72.3/23
 +  switch(config-if-vlan)#active-gateway ip mac 12:01:00:00:01:00
 +  switch(config-if-vlan)#active-gateway ip 10.28.72.1
 +  switch(config-if-vlan)#ip helper-address 10.28.64.22
 +
 +  Other scenarios: 
 +
 +  switch#config
 +  switch(config)#dhcp-relay
 +  switch(config)#dhcp-smart-relay
 +    
 +  switch(config)#interface 1/1/1 
 +  switch(config-if)#ip address 192.168.2.11/24
 +  switch(config-if)#ip helper-address 192.168.1.1
 +  switch(config-if)#interface 1/1/2
 +  switch(config-if)#ip address 192.168.2.12/24
 +  switch(config-if)#ip helper-address1 92.168.1.1
 +
 +
 +  switch(config-if-vlan)#show dhcp-relay
 +  switch(config-if-vlan)#show ip helper-address
 +
 +
 +----
 +----
 +
 +====== DHCP-SERVER ======
 +
 +
 +**enabled the DHCPv4 server on VRF primary.**
 +
 +  Option1:  
 +   switch(config)# dhcp-server vrf primary 
 +   switch(config-dhcp-server)# enable
 +
 +  Option2:  
 +    switch(config)# dhcp-server vrf default 
 +    switch(config-dhcp-server)# enable
 +
 +**Disables the DHCPv4 server on VRF primary.**
 +
 +  Option1:  
 +    switch(config)# dhcp-server vrf primary 
 +    switch(config-dhcp-server)# disable
 +
 +  Option2:
 +    switch(config)# dhcp-server vrf default 
 +    switch(config-dhcp-server)# disable
 +
 +**show dhcp-server**
 +
 +   show dhcp-server [all-vrfs]
 +   show dhcp-server leases {all-vrfs | vrf <VRF-NAME>}
 +   show dhcp-server pool <POOL-NAME> [vrf <VRF-NAME>]
 +
 +----
 +
 +
 +  dhcp-server vrf default
 +      pool VLAN_523_10.28.196.0_23
 +          range 10.28.196.21 10.28.197.254 prefix-len 23
 +          default-router 10.28.196.1
 +          dns-server 45.90.28.15 45.90.30.15 8.8.8.8 8.8.4.4
 +          lease 00:00:30
 +          exit
 +      pool VLAN_524_10.28.200.0_23
 +          range 10.28.200.21 10.28.201.254 prefix-len 23
 +          default-router 10.28.200.1
 +          dns-server 45.90.28.15 45.90.30.15 8.8.8.8 8.8.4.4
 +          lease 00:00:30
 +          exit
 +      pool VLAN_525_10.28.204.0_23
 +          range 10.28.204.21 10.28.205.254 prefix-len 23
 +          default-router 10.28.204.1
 +          dns-server 45.90.28.15 45.90.30.15 8.8.8.8 8.8.4.4
 +          lease 00:00:30
 +          exit
 +    enable
 +
 +**When the DHCP-SERVER is local to the 6400 chassis, no relay is required for interfaces that require the service:**
 +
 +
 +  interface vlan 523
 +      description Vlan 523
 +      vsx-sync active-gateways
 +      ip mtu 9100
 +      ip address 10.28.196.2/23
 +      active-gateway ip mac 12:01:00:00:01:00
 +      active-gateway ip 10.28.196.1
 +  interface vlan 524
 +      description Vlan 524
 +      vsx-sync active-gateways
 +      ip mtu 9100
 +      ip address 10.28.200.2/23
 +      active-gateway ip mac 12:01:00:00:01:00
 +      active-gateway ip 10.28.200.1
 +  interface vlan 525
 +      description Vlan 525
 +      vsx-sync active-gateways
 +      ip mtu 9100
 +      ip address 10.28.204.2/23
 +      active-gateway ip mac 12:01:00:00:01:00
 +      active-gateway ip 10.28.204.1
 +
 +----
 ---- ----
 **Switch 8360-2** **Switch 8360-2**
Line 620: Line 1113:
  
 {{ :aruba_networks:switch:6400:figure_8-2_hpe_604x141.png?400 |}} {{ :aruba_networks:switch:6400:figure_8-2_hpe_604x141.png?400 |}}
 +
 +----
 +----
 +How do I disable VSF on 2930F switch?
 +
 +  vsf disable
 +  vsf member <MEMBER-ID> remove
 +
 +----
 +----
 ---- ----
 ---- ----
Line 673: Line 1176:
       link 2 2/1/26       link 2 2/1/26
   vlan 1   vlan 1
-      name ServerVM 
       ip igmp snooping enable       ip igmp snooping enable
   vlan 500                                                                vlan 500                                                             
Line 1197: Line 1699:
 ---- ----
 ---- ----
 +
 +====== 6300 Switch LAG errror:  State information : Disabled by aggregation ======
 +
 +
 +**State information : Disabled by LACP or LAG**
 +
 +  6400-SWITCH# show lag 1
 +  System-ID       : ec:67:94:f5:69:00
 +  System-priority : 65534
 +  
 +  Aggregate lag1 is down
 +  Admin state is up
 +  State information : Disabled by LACP or LAG
 +  Description : Access VSX LAG-1 to IDF-1 - 6300-24-PORT-SFP+ - IP: 172.16.28.21
 +  Type                        : multi-chassis
 +  Lacp Fallback               : Disabled
 +  MAC Address                 : 02:01:00:00:01:00
 +  Aggregated-interfaces       : 1/3/1
 +  Aggregation-key             : 1
 +  Aggregate mode              : active
 +  Hash                        : l3-src-dst
 +  LACP rate                   : slow
 +  Speed                       : 0 Mb/s
 +  Mode                        : trunk 
 +
 +
 +  Aggregate lag1 is down 
 +  Admin state is up 
 +  State information : Disabled by aggregation 
 +  Description : 
 +  MAC Address                 : bc:d7:a5:6a:e8:00 
 +  Aggregated-interfaces       : 1/1/1 1/1/2 
 +  Aggregation-key             : 1
 +  Aggregate mode              : active 
 +  Speed                       : 0 Mb/s 
 +  qos trust dscp
 +  VLAN Mode: native-untagged
 +  Native VLAN: 1
 +  Allowed VLAN List: all
 +  L3 Counters: Rx Disabled, Tx Disabled 
 +
 +  Note:  Usually when we see lacp_block on an interface in a LAG group, it is because the interface isn't receiving 
 +  LACP BPDUs from the link partner.  The reason could be the peer switch is not configured with LACP mode or BPDUs 
 +  are getting dropped due to link specific issues.  If it is the case where the link partner isn't sending LACP 
 +  BPDUs, a static LAG group assignment of ports should work and probably worth trying. 
 +
 +
 +**Some commands for support:**
 +
 +  - show interface brief
 +  - show lag brief
 +  - show lacp interfaces 
 +  - show lacp aggregates
 +  - show lacp interface 1/1/3
 +  - show lacp interface 1/1/4
 +  - show lldp neighbor-info
 +
 +  6300(config-lag-if)#  show lldp neighbor-info
 +   
 +  LLDP Neighbor Information
 +  =========================
 +  
 +  Total Neighbor Entries          : 2
 +  Total Neighbor Entries Deleted  : 3
 +  Total Neighbor Entries Dropped  : 0
 +  Total Neighbor Entries Aged-Out : 3
 +   
 +  LOCAL-PORT  CHASSIS-ID         PORT-ID                      PORT-DESC                    TTL      SYS-NAME
 +  -----------------------------------------------------------------------------------------------------------
 +  1/1/28      ec:67:94:f5:69:00  1/3/1                        Access VSX LAG-1 to IDF-...  120      CS-2P-MDFHA-A   
 +  2/1/28      ec:67:94:f5:89:00  1/3/1                        Access VSX LAG-1 to IDF-...  120      CS-2P-MDFHA-B
 +
 +
 +----
 +----
 +
 +
 +
 +
 +
 +
 +
 +
 +
 +
 +
 +
 +
 +
 +
 +
 +
aruba_networks/switch/6400/6400_configuration_example_script.1722357911.txt.gz · Last modified: 2024/07/30 11:45 by aperez
Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki