DHCP configureren en controleren in een VxLAN-fabric voor Nexus 9000 met NX-OS en Windows Server 2022

Inleiding

Dit document beschrijft hoe u DHCP kunt configureren en oplossen in een VLAN-fabric met Nexus 9000 switches.

Voorwaarden

Vereisten

Cisco raadt kennis van de volgende onderwerpen aan:

• Nexus NX-OS-software.
• Virtual-poortkanaal (vPC).
• VxLAN BGP L2VPN-VPN VPN
• BGP-adresfamilie voor IPv4
• OSPF
• Multicast PIM (sparse-mode)
• DHCP

Gebruikte componenten

De informatie in dit document is gebaseerd op de volgende software- en hardware-versies:

• Cisco Nexus 9000 met Cisco NX-OS. 
  • N9K-C93180YC-EX
  • N9K-C93180YC-FX switch
  • NX-OS 10.3(4a)
• Windows Server 2022-datacenter

De informatie in dit document is gebaseerd op de apparaten in een specifieke laboratoriumomgeving. Alle apparaten die in dit document worden beschreven, hadden een opgeschoonde (standaard)configuratie. Als uw netwerk live is, moet u zorgen dat u de potentiële impact van elke opdracht begrijpt.

Achtergrondinformatie

Configuratie van onderlay en overlay voor VxLAN in laboratorium

VXLAN Fabric Diagram in laboratorium

• RUGGENGRAAT:
  • Deze Nexus switch verstuurt DHCP-pakketten (Discover, Offer, Verzoek, Ack) zonder dat deze in dit scenario worden gedecapsuleerd. Alleen de kop buiten wordt gebruikt.
  • Handelt als centrale routeringspunten in de netwerkstof.
  • Verantwoordelijk voor het onderling verbinden van alle LEAF-switches en het faciliteren van de gegevensstroom tussen hen.
  • Neemt deel aan BGP om EVPN-routes naar de LEAF-switches te distribueren.
  • Voert IP-routing uit en kan verkeer tussen verschillende subnetten of VxLAN-segmenten routeren door naar de buitenste IP-headers te kijken.
  • Scheidt het overlay-netwerk (VxLAN) van het fysieke netwerk onder de afdekking.
  • Beheert de onderlaag met traditionele IP-routingprotocollen, terwijl de overlay wordt beheerd door VxLAN met BGP EVPN, waardoor een schaalbare en flexibele netwerkarchitectuur wordt geboden.

• BLADZIJDE 1:
  • LEAF-switches bieden fysieke connectiviteit voor endpoints zoals servers, opslagapparaten en andere netwerkapparaten.
  • LEAF-switches fungeren als VTEP's, wat betekent dat ze de VxLAN-pakketten inkapselen en deencapsuleren.
  • In dit scenario doet HOST#1 het IP-adresverzoek.
  • LEAF-1 is verantwoordelijk voor het inkapselen van de DCHP-pakketten binnen VxLAN-header.
  • HOST#1 ontvangt DCHP-pakketten transparant als klassieke Ethernet.

• LEAF-1-vPC en LEAF-2-vPC:
  • LEAF-switches nemen deel aan het EVPN-besturingsplane door BGP te runnen en routegegevens uit te wisselen. Dit maakt de distributie van MAC- en IP-adresinformatie mogelijk, waardoor verkeer efficiënt over de VxLAN-structuur kan worden gerouteerd.
  • In dit scenario wordt de DHCP-server geassocieerd met VLAN 10 met VNI 101010 zoals HOST#1 is. Dit betekent dat het alleen VxLAN-overbrugging is.
  • Als de DHCP-server was gekoppeld aan een VNI anders dan HOST#1, dan zou een L3VNI strikt noodzakelijk zijn voor routing. Het bron- en doelbestand VNI moet worden gemaakt.
  • DCHP-server ontvangt DCHP-pakketten transparant als klassieke Ethernet.
  • Het BUM-verkeer wordt door beide Nexus-switches in vPC ontvangen, maar alleen de operationeel primaire Nexus-switch in vPC stuurt het verkeer. De tweede Nexus switch laat het verkeer vallen. In dit scenario is LEAF-1-vPC operationeel primair.
  • Het gebruik van infra-vlans is verplicht omdat als de interface op LEAF-2-vPC naar SPINE daalt, DCHP-pakketten niet kunnen worden verzonden. Om VxLAN-ingesloten verkeer naar LEAF-1-vPC te verzenden, is deze back-up van VLAN vereist. Op deze manier kan LEAF-1-vPC DCHP-pakketten naar de ruggengraat sturen.

• N9K-ACCESS:
  • Deze Nexus switch biedt alleen connectiviteit met beide blades met behulp van een vPC-poortkanaal voor redundantiedoeleinden naar HOST#2

RUGGENGRAAT

nv overlay evpn
feature ospf
feature bgp
feature pim
feature netconf
feature nv overlay

ip pim rp-address 192.168.11.11 group-list 224.10.10.0/24
ip pim ssm range 232.0.0.0/8
ip pim anycast-rp 192.168.11.11 192.168.0.11

ip prefix-list direct_routes seq 5 permit 10.104.11.0/30 le 32 
route-map redistribution permit 10
  match ip address prefix-list direct_routes

interface Ethernet1/1
  speed 1000
  ip address 10.104.11.1/30
  ip ospf network point-to-point
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/2
  ip address 10.102.11.1/30
  ip ospf network point-to-point
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/3
  speed 1000
  ip address 10.103.11.1/30
  ip ospf network point-to-point
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface loopback0
  description ANYCAST-RP
  ip address 192.168.0.11/32
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode

interface loopback1
  description ANYCAST-RP-CANDIDATE
  ip address 192.168.11.11/32
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode

router ospf 1

router bgp 65000
  neighbor 192.168.3.3
    remote-as 65000
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
      route-reflector-client
  neighbor 192.168.4.4
    remote-as 65000
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
      route-reflector-client
  neighbor 192.168.5.5
    remote-as 65000
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
      route-reflector-client

BLAD-1

nv overlay evpn
feature ospf
feature bgp
feature pim
feature interface-vlan
feature vn-segment-vlan-based
feature dhcp
feature nv overlay

fabric forwarding anycast-gateway-mac 0000.0a0a.0a0a

ip pim rp-address 192.168.11.11 group-list 224.10.10.0/24
ip pim ssm range 232.0.0.0/8

vlan 1,10,20,300
vlan 10
  vn-segment 101010
vlan 20
  vn-segment 202020
vlan 300
  vn-segment 303030

spanning-tree vlan 10 priority 4096

ip prefix-list host_subnets seq 5 permit 10.10.10.0/24 le 32 
ip prefix-list host_subnets seq 10 permit 192.168.20.0/24 le 32 
ip prefix-list host_subnets seq 15 permit 172.16.10.8/32 
route-map direct_routes_tenant-a permit 10
  match ip address prefix-list host_subnets

vrf context tenant-a
  vni 303030
  rd auto
  address-family ipv4 unicast
    route-target both auto
    route-target both auto evpn

interface Vlan10
  no shutdown
  vrf member tenant-a
  no ip redirects
  ip address 10.10.10.1/24
  no ipv6 redirects
  fabric forwarding mode anycast-gateway
  ip dhcp relay address 10.10.10.150 
  ip dhcp relay source-interface loopback100

interface Vlan20
  no shutdown
  vrf member tenant-a
  no ip redirects
  ip address 192.168.20.1/24
  no ipv6 redirects
  fabric forwarding mode anycast-gateway

interface Vlan300
  no shutdown
  vrf member tenant-a
  no ip redirects
  ip forward
  no ipv6 redirects

interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback0
  member vni 101010
    suppress-arp
    mcast-group 224.10.10.10
  member vni 202020
    suppress-arp
    mcast-group 224.10.10.10
  member vni 303030 associate-vrf

interface Ethernet1/1
  ip address 10.104.11.2/30
  ip ospf network point-to-point
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface loopback0
  description UNDERLAY-VERIFICATION
  ip address 192.168.5.5/32
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode

interface loopback100
  vrf member tenant-a
  ip address 172.16.10.8/32

router ospf 1

router bgp 65000
  address-family ipv4 unicast
  neighbor 192.168.0.11
    remote-as 65000
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
  vrf tenant-a
    address-family ipv4 unicast
      redistribute direct route-map direct_routes_tenant-a
evpn
  vni 101010 l2
    rd auto
    route-target import auto
    route-target export auto
  vni 202020 l2
    rd auto
    route-target import auto
    route-target export auto

LEAF-1-vPC-software

nv overlay evpn
feature ospf
feature bgp
feature pim
feature interface-vlan
feature vn-segment-vlan-based
feature lacp
feature dhcp
feature vpc
feature nv overlay

fabric forwarding anycast-gateway-mac 0000.0a0a.0a0a

ip pim rp-address 192.168.11.11 group-list 224.10.10.0/24
ip pim ssm range 232.0.0.0/8

vlan 1,10,300,777
vlan 10
  vn-segment 101010
vlan 300
  vn-segment 303030
vlan 777
  name BACKUP_VLAN_ROUTING_NVE_INFRA
spanning-tree vlan 1,10,300 hello-time 4

ip prefix-list host_subnets seq 5 permit 10.10.10.0/24 le 32
ip prefix-list host_subnets seq 15 permit 172.16.10.9/32
route-map direct_routes_tenant-a permit 10
  match ip address prefix-list host_subnets

vrf context tenant-a
  vni 303030
  rd auto
  address-family ipv4 unicast
    route-target both auto
    route-target both auto evpn
system nve infra-vlans 777

vpc domain 1
  peer-switch
  peer-keepalive destination 10.88.238.195
  peer-gateway
  layer3 peer-router
  ip arp synchronize

interface Ethernet1/3
  switchport
  switchport mode trunk
  switchport trunk allowed vlan 1,10,20
  channel-group 10 mode active
  no shutdown

interface Ethernet1/19
  switchport
  switchport mode trunk
  channel-group 1 mode active
  no shutdown

interface port-channel1
  switchport
  switchport mode trunk
  spanning-tree port type network
  vpc peer-link

interface port-channel10
  switchport
  switchport mode trunk
  switchport trunk allowed vlan 1,10
  vpc 10

interface mgmt0
  vrf member management
  ip address 10.88.238.194/29

interface loopback0
  description UNDERLAY-VERIFICATION
  ip address 192.168.3.3/32
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode

interface loopback1
  description OVERLAY-NVE
  ip address 192.168.13.1/32
  ip address 192.168.13.254/32 secondary
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode

interface loopback10
  vrf member tenant-a
  ip address 172.16.10.1/32

interface loopback100
  vrf member tenant-a
  ip address 172.16.10.9/32

interface Vlan10
  no shutdown
  vrf member tenant-a
  no ip redirects
  ip address 10.10.10.1/24
  no ipv6 redirects
  fabric forwarding mode anycast-gateway
  ip dhcp relay address 10.10.10.150
  ip dhcp relay source-interface loopback100

interface Vlan300
  no shutdown
  vrf member tenant-a
  no ip redirects
  ip forward
  no ipv6 redirects

interface Vlan777
  description BACKUP_UNDERLAY_INFRA-VLAN
  no shutdown
  no ip redirects
  ip address 10.255.77.1/30
  no ipv6 redirects
  ip ospf network point-to-point
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode

interface Ethernet1/2
  ip address 10.102.11.2/30
  ip ospf network point-to-point
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface nve1
  no shutdown
  host-reachability protocol bgp
  advertise virtual-rmac
  source-interface loopback1
  member vni 101010
    suppress-arp
    mcast-group 224.10.10.10
  member vni 303030 associate-vrf

router ospf 1

router bgp 65000
  address-family ipv4 unicast
  address-family l2vpn evpn
    advertise-pip
  neighbor 192.168.0.11
    remote-as 65000
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
  neighbor 192.168.88.2
    remote-as 65000
    description OVERLAY_BACKUP
    update-source Vlan888
    address-family l2vpn evpn
      send-community
      send-community extended
  vrf tenant-a
    address-family ipv4 unicast
      redistribute direct route-map direct_routes_tenant-a
evpn
  vni 101010 l2
    rd auto
    route-target import auto
    route-target export auto
  vni 202020 l2
    rd auto
    route-target import auto
    route-target export auto

LEAF-2-vPC-software

nv overlay evpn
feature ospf
feature bgp
feature pim
feature interface-vlan
feature vn-segment-vlan-based
feature lacp
feature dhcp
feature vpc
feature nv overlay

fabric forwarding anycast-gateway-mac 0000.0a0a.0a0a

ip pim rp-address 192.168.11.11 group-list 224.10.10.0/24
ip pim ssm range 232.0.0.0/8

vlan 1,10,20,300,777
vlan 10
  vn-segment 101010
vlan 20
  vn-segment 202020
vlan 300
  vn-segment 303030
vlan 777
  name BACKUP_VLAN_ROUTING_NVE_INFRA

spanning-tree vlan 1,10,20,300 hello-time 4

ip prefix-list host_subnets seq 5 permit 10.10.10.0/24 le 32 
ip prefix-list host_subnets seq 10 permit 192.168.20.0/24 le 32 
ip prefix-list host_subnets seq 15 permit 172.16.10.10/32 
route-map direct_routes_tenant-a permit 10
  match ip address prefix-list host_subnets

vrf context tenant-a
  vni 303030
  rd auto
  address-family ipv4 unicast
    route-target both auto
    route-target both auto evpn

system nve infra-vlans 777

vpc domain 1
  peer-switch
  peer-keepalive destination 10.88.238.194
  peer-gateway
  layer3 peer-router
  ip arp synchronize

interface Ethernet1/1
  ip address 10.103.11.2/30
  ip ospf network point-to-point
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/19
  switchport
  switchport mode trunk
  channel-group 1 mode active
  no shutdown
interface port-channel1
  switchport
  switchport mode trunk
  spanning-tree port type network
  vpc peer-link

interface port-channel10
  switchport
  switchport mode trunk
  switchport trunk allowed vlan 1,10,20
  vpc 10

interface mgmt0
  vrf member management
  ip address 10.88.238.195/29

interface loopback0
  description UNDERLAY-VERIFICATION
  ip address 192.168.4.4/32
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode

interface loopback1
  description OVERLAY-NVE
  ip address 192.168.13.2/32
  ip address 192.168.13.254/32 secondary
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode

interface loopback10
  vrf member tenant-a
  ip address 172.16.10.2/32

interface loopback100
  vrf member tenant-a
  ip address 172.16.10.10/32

interface Vlan10
  no shutdown
  vrf member tenant-a
  no ip redirects
  ip address 10.10.10.1/24
  no ipv6 redirects
  fabric forwarding mode anycast-gateway
  ip dhcp relay address 10.10.10.150 
  ip dhcp relay source-interface loopback100

interface Vlan20
  no shutdown
  vrf member tenant-a
  no ip redirects
  ip address 192.168.20.1/24
  no ipv6 redirects
  fabric forwarding mode anycast-gateway

interface Vlan300
  no shutdown
  vrf member tenant-a
  no ip redirects
  ip forward
  no ipv6 redirects

interface Vlan777
  description BACKUP_UNDERLAY_INFRA-VLAN
  no shutdown
  no ip redirects
  ip address 10.255.77.2/30
  no ipv6 redirects
  ip ospf network point-to-point
  ip router ospf 1 area 0.0.0.0
  ip pim sparse-mode

interface nve1
  no shutdown
  host-reachability protocol bgp
  advertise virtual-rmac
  source-interface loopback1
  member vni 101010
    suppress-arp
    mcast-group 224.10.10.10
  member vni 202020
    suppress-arp
    mcast-group 224.10.10.10
  member vni 303030 associate-vrf

router ospf 1

router bgp 65000
  address-family ipv4 unicast
  address-family l2vpn evpn
    advertise-pip
  neighbor 192.168.0.11
    remote-as 65000
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
  neighbor 192.168.88.1
    remote-as 65000
    description OVERLAY_BACKUP
    update-source Vlan888
    address-family l2vpn evpn
      send-community
      send-community extended
  vrf tenant-a
    address-family ipv4 unicast
      redistribute direct route-map direct_routes_tenant-a
evpn
  vni 101010 l2
    rd auto
    route-target import auto
    route-target export auto
  vni 202020 l2
    rd auto
    route-target import auto
    route-target export auto

N9K-ACCESS

feature lacp

vlan 1,10

interface port-channel10
  switchport
  switchport mode trunk

interface Ethernet1/11
  switchport
  switchport access vlan 10
  no shutdown

interface Ethernet1/45
  switchport
  switchport mode trunk
  channel-group 10 mode active
  no shutdown

interface Ethernet1/46
  switchport
  switchport mode trunk
  channel-group 10 mode active
  no shutdown

DHCP-configuratie op Nexus-switches

BLAD-1

Stap 1. Schakel de functie DCHP in.

LEAF-1(config)# feature dhcp

Stap 2. Pas de optie van de bevelip DHCP relay informatie toe.

LEAF-1(config)# ip dhcp relay information option

Stap 3. Pas de optieoptie VPN toe op opdrachtip DHCP Relay.

LEAF-1(config)# ip dhcp relay information option vpn

Stap 4. Pas het commando "ip dhcp relay address [ip adres van DCHP server]" toe.

LEAF-1(config)# interface vlan 10
LEAF-1(config-if)# ip dhcp relay address 10.10.10.150

Stap 5. Pas de opdracht "ip DHCP Relay bron-interface [unieke loopback]"toe.

LEAF-1(config)# interface vlan 10
LEAF-1(config-if)# ip dhcp relay source-interface loopback100

Stap 6. In de VRF corresponderende huurder binnen BGP, directe routeherdistributie met een prefix-lijst en route-kaart die het IP-adres van de loopback-interface omvat.

LEAF-1(config)# show running-config interface loopback 100
interface loopback100
  vrf member tenant-a
  ip address 172.16.10.8/32

LEAF-1(config)# ip prefix-list host_subnets seq 15 permit 172.16.10.8/32
LEAF-1(config)# route-map direct_routes_tenant-a permit 10
LEAF-1(config-route-map)# match ip address prefix-list host_subnets
LEAF-1(config-route-map)# router bgp 65000
LEAF-1(config-router)# vrf tenant-a
LEAF-1(config-router-vrf)# address-family ipv4 unicast
LEAF-1(config-router-vrf-af)# redistribute direct route-map direct_routes_tenant-a

Stap 7. Controleer dat het IP-adres van de loopback-interface in BGP L2VPN EVPN naar de Spines wordt geadverteerd met de opdracht: toon bgp l2vpn evpn [loopback IP] vrf [tenant vrf].

LEAF-1(config)# show bgp l2vpn evpn 172.16.10.8 vrf tenant-a
BGP routing table information for VRF default, address family L2VPN EVPN
Route Distinguisher: 192.168.5.5:4    (L3VNI 303030)
BGP routing table entry for [5]:[0]:[0]:[32]:[172.16.10.8]/224, version 421
Paths: (1 available, best #1)
Flags: (0x000002) (high32 00000000) on xmit-list, is not in l2rib/evpn

  Advertised path-id 1
  Path type: local, path is valid, is best path, no labeled nexthop
  Gateway IP: 0.0.0.0
  AS-Path: NONE, path locally originated
    192.168.5.5 (metric 0) from 0.0.0.0 (192.168.5.5)
      Origin incomplete, MED 0, localpref 100, weight 32768
      Received label 303030
      Extcommunity: RT:65000:303030 ENCAP:8 Router MAC:707d.b9b8.4daf

  Path-id 1 advertised to peers:
    192.168.0.11 <<<< Spine

Stap 8. Controleer dat het IP-adres van de loopback-interface is ingespoten in BGP L2VPN EVPN waar DHCP-server is gevestigd.

LEAF-1# show bgp l2vpn evpn 172.16.10.8
BGP routing table information for VRF default, address family L2VPN EVPN
Route Distinguisher: 192.168.5.5:4
BGP routing table entry for [5]:[0]:[0]:[32]:[172.16.10.8]/224, version 754
Paths: (1 available, best #1)
Flags: (0x000002) (high32 00000000) on xmit-list, is not in l2rib/evpn, is not in HW

  Advertised path-id 1
  Path type: internal, path is valid, is best path, no labeled nexthop
             Imported to 2 destination(s)
             Imported paths list: tenant-a L3-303030
  Gateway IP: 0.0.0.0
  AS-Path: NONE, path sourced internal to AS
    192.168.5.5 (metric 45) from 192.168.0.11 (192.168.0.11)
      Origin incomplete, MED 0, localpref 100, weight 0
      Received label 303030
      Extcommunity: RT:65000:303030 ENCAP:8 Router MAC:707d.b9b8.4daf
      Originator: 192.168.5.5 Cluster list: 192.168.0.11

  Path-id 1 not advertised to any peer

Route Distinguisher: 192.168.3.3:4    (L3VNI 303030)
BGP routing table entry for [5]:[0]:[0]:[32]:[172.16.10.8]/224, version 761
Paths: (1 available, best #1)
Flags: (0x000002) (high32 00000000) on xmit-list, is not in l2rib/evpn, is not in HW

  Advertised path-id 1
  Path type: internal, path is valid, is best path, no labeled nexthop
             Imported from 192.168.5.5:4:[5]:[0]:[0]:[32]:[172.16.10.8]/224
  Gateway IP: 0.0.0.0
  AS-Path: NONE, path sourced internal to AS
    192.168.5.5 (metric 45) from 192.168.0.11 (192.168.0.11)
      Origin incomplete, MED 0, localpref 100, weight 0
      Received label 303030
      Extcommunity: RT:65000:303030 ENCAP:8 Router MAC:707d.b9b8.4daf
      Originator: 192.168.5.5 Cluster list: 192.168.0.11

  Path-id 1 not advertised to any peer

Stap 9. Controleer dat er een route is voor de DHCP-server op de bronhuurder met de opdracht toon ip route [DHCP server IP] vrf [tenant vrf].

LEAF-1# show running-config interface vlan 10
interface Vlan10
  no shutdown
  vrf member tenant-a <<<< source tenant
  no ip redirects
  ip address 10.10.10.1/24
  no ipv6 redirects
  fabric forwarding mode anycast-gateway
  ip dhcp relay address 10.10.10.150 <<<< DHCP server
  ip dhcp relay source-interface loopback100

LEAF-1# show ip route 10.10.10.150 vrf tenant-a
10.10.10.150/32, ubest/mbest: 1/0
    *via 192.168.13.254%default, [200/0], 2w0d, bgp-65000, internal, tag 65000, segid: 303030 tunnelid: 0xd0d0dfe encap: VXLAN

Stap 10. Controleer dat de DCHP server IP bereikbaar is met de loopback-interface en de corresponderende VRF als een VRF-bron met de opdracht ping [DHCP server IP] bron-interface loopback [x] vrf [tenant vrf].

LEAF-1# ping 10.10.10.150 source-interface loopback 100 vrf tenant-a
PING 10.10.10.150 (10.10.10.150): 56 data bytes
64 bytes from 10.10.10.150: icmp_seq=0 ttl=126 time=1.262 ms
64 bytes from 10.10.10.150: icmp_seq=1 ttl=126 time=0.833 ms
64 bytes from 10.10.10.150: icmp_seq=2 ttl=126 time=0.808 ms
64 bytes from 10.10.10.150: icmp_seq=3 ttl=126 time=0.795 ms
64 bytes from 10.10.10.150: icmp_seq=4 ttl=126 time=0.78 ms

--- 10.10.10.150 ping statistics ---
5 packets transmitted, 5 packets received, 0.00% packet loss

Stap 11. Controleer de status van de DHCP-relay-agent.

LEAF-1# show ip dhcp status 
Current CLI Operation: show ip dhcp status
Last CLI Operation: DME: ip dhcp relay information option enable
Last CLI Operation Status: SUCCESS

Stap 12. Controleer optie 82, zoals de VPN-optie en het juiste IP-adres van de relay onder de relay-agent.

LEAF-1# show ip dhcp relay 
DHCP relay service is enabled   <<<<<<
Insertion of option 82 is enabled  <<<<<<
Insertion of option 82 customize circuitid is disabled
TLV format in CircuitId and RemoteId suboptions is enabled
Insertion of VPN suboptions is enabled  <<<<<<<
Insertion of cisco suboptions is disabled
Global smart-relay is disabled
Relay Trusted functionality is disabled
Relay Trusted Port is Globally disabled
V4 Relay Source Address HSRP is Globally disabled
Server-ID-override-disable is disabled

Smart-relay is enabled on the following interfaces:
------------------------------------------------------ 


Subnet-broadcast is enabled on the following interfaces:
------------------------------------------------------ 


Relay Trusted Port is enabled on the following interfaces:
---------------------------------------------------------- 


Relay Source Address HSRP is enabled on the following interfaces:
-------------------------------------------------------------------

Helper addresses are configured on the following interfaces:
 Interface        Relay Address     VRF Name
 -------------    -------------     --------
 Vlan10            10.10.10.150   <<<<<<<<<

Stap 13. Controleer de statistieken van de verwerkte en verzonden pakketten.

LEAF-1# show ip dhcp global statistics 
Packets processed 1297177
Packets received through cfsoe 0
Packets forwarded 1297175
Packets forwarded on cfsoe 0
Total packets dropped 0
Packets dropped from untrusted ports 0
Packets dropped due to MAC address check failure 0
Packets dropped due to Option 82 insertion failure 0
Packets dropped due to o/p intf unknown 0
Packets dropped which were unknown 0
Packets dropped due to no trusted ports 0
Packets dropped due to dhcp relay not enabled 0
Packets dropped due to no binding entry 0
Packets dropped due to interface error/no interface 0
Packets dropped due to max hops exceeded 0
Packets dropped due to Queue full 0

Stap 14. Controleer de statistieken van relay-pakketten.

LEAF-1# show ip dhcp relay statistics 
----------------------------------------------------------------------
Message Type             Rx              Tx           Drops  
----------------------------------------------------------------------
Discover             260521          260520               0
Offer                289330          289330               0
Request(*)           267162          267161               0
Ack                    8322            8322               0
Release(*)           181121          181121               0
Decline                   1               1               0
Inform(*)                 0               0               0
Nack                 289280          289280               0
----------------------------------------------------------------------
Total               1295737         1295735               0
----------------------------------------------------------------------

DHCP L3 FWD:
Total Packets Received                           :         0
Total Packets Forwarded                          :         0
Total Packets Dropped                            :         0
Non DHCP:
Total Packets Received                           :         0
Total Packets Forwarded                          :         0
Total Packets Dropped                            :         0
DROP:
DHCP Relay not enabled                           :         0
Invalid DHCP message type                        :         0
Interface error                                  :         0
Tx failure towards server                        :         0
Tx failure towards client                        :         0
Unknown output interface                         :         0
Unknown vrf or interface for server              :         0
Max hops exceeded                                :         0
Option 82 validation failed                      :         0
Packet Malformed                                 :         0
DHCP Request dropped on MCT                      :         0
Relay Trusted port not configured                :         0
*  -  These counters will show correct value when switch 
receives DHCP request packet with destination ip as broadcast
address. If request is unicast it will be HW switched

LEAF-1-vPC DHCP

Stap 1. Schakel de functie DCHP in.

LEAF-1-VPC(config)#feature dhcp

Stap 2. Pas de optie van de bevelip DHCP relay informatie toe.

LEAF-1-VPC(config)#ip dhcp relay information option

Stap 3. Pas de opdracht "ip DHCP Relay information option vpn" toe.

LEAF-1-VPC(config)# ip dhcp relay information option vpn

Stap 4. Pas het commando ip dhcp relay adres [ip adres van DCHP server].

LEAF-1-VPC(config)#interface vlan 10
LEAF-1-VPC(config-if)#ip dhcp relay address 10.10.10.150

Stap 5. Pas de opdracht "ip DHCP Relay bron-interface [unieke loopback]"toe.

LEAF-1-VPC(config)#interface vlan 10
LEAF-1-VPC(config-if)# ip dhcp relay source-interface loopback100

Stap 6. In de VRF corresponderende huurder binnen BGP, directe routeherdistributie met een prefix-lijst en route-kaart die het IP-adres van de loopback-interface omvat.

LEAF-1-VPC(config)# show running-config interface loopback 100
interface loopback100
  vrf member tenant-a
  ip address 172.16.10.9/32

LEAF-1-VPC(config)# ip prefix-list host_subnets seq 15 permit 172.16.10.9/32
LEAF-1-VPC(config)# route-map direct_routes_tenant-a permit 10
LEAF-1-VPC(config-route-map)# match ip address prefix-list host_subnets
LEAF-1-VPC(config-route-map)# router bgp 65000
LEAF-1-VPC(config-router)# vrf tenant-a
LEAF-1-VPC(config-router-vrf)# address-family ipv4 unicast
LEAF-1-VPC(config-router-vrf-af)# redistribute direct route-map direct_routes_tenant-a

Stap 7. Controleer dat het IP-adres van de loopback-interface in BGP L2VPN EVPN naar de Spines wordt geadverteerd met de opdracht: toon bgp l2vpn evpn [loopback IP] vrf [tenant vrf].

LEAF-1-VPC# show bgp l2vpn evpn 172.16.10.9 vrf tenant-a 
BGP routing table information for VRF default, address family L2VPN EVPN
Route Distinguisher: 192.168.3.3:4    (L3VNI 303030)
BGP routing table entry for [5]:[0]:[0]:[32]:[172.16.10.9]/224, version 637
Paths: (1 available, best #1)
Flags: (0x000002) (high32 00000000) on xmit-list, is not in l2rib/evpn

  Advertised path-id 1
  Path type: local, path is valid, is best path, no labeled nexthop
  Gateway IP: 0.0.0.0
  AS-Path: NONE, path locally originated
    192.168.13.1 (metric 0) from 0.0.0.0 (192.168.3.3)
      Origin incomplete, MED 0, localpref 100, weight 32768
      Received label 303030
      Extcommunity: RT:65000:303030 ENCAP:8 Router MAC:6026.aa85.9887

  Path-id 1 advertised to peers:
    192.168.0.11       

Stap 8. Controleer dat het IP-adres van de loopback-interface is ingespoten in BGP L2VPN EVPN waar DHCP-server is gevestigd.

LEAF-1-VPC# show bgp l2vpn evpn 172.16.10.9
BGP routing table information for VRF default, address family L2VPN EVPN
Route Distinguisher: 192.168.3.3:4    (L3VNI 303030)
BGP routing table entry for [5]:[0]:[0]:[32]:[172.16.10.9]/224, version 637
Paths: (1 available, best #1)
Flags: (0x000002) (high32 00000000) on xmit-list, is not in l2rib/evpn

  Advertised path-id 1
  Path type: local, path is valid, is best path, no labeled nexthop
  Gateway IP: 0.0.0.0
  AS-Path: NONE, path locally originated
    192.168.13.1 (metric 0) from 0.0.0.0 (192.168.3.3)
      Origin incomplete, MED 0, localpref 100, weight 32768
      Received label 303030
      Extcommunity: RT:65000:303030 ENCAP:8 Router MAC:6026.aa85.9887

  Path-id 1 advertised to peers:
    192.168.0.11       

Stap 9. Controleer dat er een route is voor de DHCP-server op de bronhuurder met de opdracht toon ip route [DHCP server IP] vrf[tenant vrf].

LEAF-1-VPC# show running-config interface vlan 10
interface Vlan10
  no shutdown
  vrf member tenant-a  <<<< source tenant
  no ip redirects
  ip address 10.10.10.1/24
  no ipv6 redirects
  fabric forwarding mode anycast-gateway
  ip dhcp relay address 10.10.10.150 
  ip dhcp relay source-interface loopback100

LEAF-1-VPC# show ip route 10.10.10.150 vrf tenant-a 
10.10.10.150/32, ubest/mbest: 1/0, attached
    *via 10.10.10.150, Vlan10, [190/0], 6d07h, hmm

Stap 10. Controleer of de DCHP server IP bereikbaar is met de loopback-interface en de corresponderende VRF als een VRF-bron met de opdracht ping [DHCP server IP] bron-interface loopback [x] vrf [tenvrf].

LEAF-1-VPC# ping 10.10.10.150 source-interface loopback 100 vrf tenant-a 
PING 10.10.10.150 (10.10.10.150): 56 data bytes
64 bytes from 10.10.10.150: icmp_seq=0 ttl=126 time=0.965 ms
64 bytes from 10.10.10.150: icmp_seq=1 ttl=126 time=0.57 ms
64 bytes from 10.10.10.150: icmp_seq=2 ttl=126 time=0.488 ms
64 bytes from 10.10.10.150: icmp_seq=3 ttl=126 time=0.524 ms
64 bytes from 10.10.10.150: icmp_seq=4 ttl=126 time=0.502 ms

--- 10.10.10.150 ping statistics ---

Stap 11. Controleer de status van de DHCP-relay-agent.

LEAF-1-VPC# show ip dhcp status
Current CLI Operation: show ip dhcp status
Last CLI Operation: DME: ip dhcp relay information option vpn enable
Last CLI Operation Status: SUCCESS

Stap 12. Controleer optie 82, zoals de VPN-optie en het juiste IP-adres van de relay onder de relay-agent.

LEAF-1-VPC# show ip dhcp relay
DHCP relay service is enabled  <<<<<<
Insertion of option 82 is enabled  <<<<<<<
Insertion of option 82 customize circuitid is disabled
TLV format in CircuitId and RemoteId suboptions is enabled
Insertion of VPN suboptions is enabled  <<<<<<<
Insertion of cisco suboptions is disabled
Global smart-relay is disabled
Relay Trusted functionality is disabled
Relay Trusted Port is Globally disabled
V4 Relay Source Address HSRP is Globally disabled
Server-ID-override-disable is disabled

Smart-relay is enabled on the following interfaces:
------------------------------------------------------ 


Subnet-broadcast is enabled on the following interfaces:
------------------------------------------------------ 


Relay Trusted Port is enabled on the following interfaces:
---------------------------------------------------------- 


Relay Source Address HSRP is enabled on the following interfaces:
-------------------------------------------------------------------

Helper addresses are configured on the following interfaces:
 Interface        Relay Address     VRF Name
 -------------    -------------     --------
 Vlan10            10.10.10.150      <<<<<<<<<

Stap 13. Controleer de statistieken van verwerkte en verzonden pakketten.

LEAF-1-VPC# show ip dhcp global statistics 
Packets processed 263162
Packets received through cfsoe 0
Packets forwarded 263161
Packets forwarded on cfsoe 0
Total packets dropped 0
Packets dropped from untrusted ports 0
Packets dropped due to MAC address check failure 0
Packets dropped due to Option 82 insertion failure 0
Packets dropped due to o/p intf unknown 0
Packets dropped which were unknown 0
Packets dropped due to no trusted ports 0
Packets dropped due to dhcp relay not enabled 0
Packets dropped due to no binding entry 0
Packets dropped due to interface error/no interface 0
Packets dropped due to max hops exceeded 0
Packets dropped due to Queue full 0

Stap 14. Controleer de statistieken van relay-pakketten.

LEAF-1-VPC# show ip dhcp relay statistics 
----------------------------------------------------------------------
Message Type             Rx              Tx           Drops  
----------------------------------------------------------------------
Discover                  8               7               0
Offer                 29304           29304               0
Request(*)             5029            5029               0
Ack                    6535            6535               0
Release(*)           191482          191482               0
Decline                   0               0               0
Inform(*)                 3               3               0
Nack                  29281           29281               0
----------------------------------------------------------------------
Total                261642          261641               0
----------------------------------------------------------------------

DHCP L3 FWD:
Total Packets Received                           :         0
Total Packets Forwarded                          :         0
Total Packets Dropped                            :         0
Non DHCP:
Total Packets Received                           :         0
Total Packets Forwarded                          :         0
Total Packets Dropped                            :         0
DROP:
DHCP Relay not enabled                           :         0
Invalid DHCP message type                        :         0
Interface error                                  :         0
Tx failure towards server                        :         0
Tx failure towards client                        :         0
Unknown output interface                         :         0
Unknown vrf or interface for server              :         0
Max hops exceeded                                :         0
Option 82 validation failed                      :         0
Packet Malformed                                 :         0
DHCP Request dropped on MCT                      :         0
Relay Trusted port not configured                :         0
*  -  These counters will show correct value when switch 
receives DHCP request packet with destination ip as broadcast
address. If request is unicast it will be HW switched

LEAF-2-vPC DHCP

Stap 1. Schakel de functie DCHP in.

LEAF-2-VPC(config)# feature dhcp

Stap 2. Pas de opdracht "ip DHCP Relay Information Option" toe.

LEAF-2-VPC(config)# ip dhcp relay information option

Stap 3. Pas de opdracht "ip DHCP Relay information option vpn" toe.

LEAF-2-VPC(config)# ip dhcp relay information option vpn

Stap 4. Pas het commando "ip dhcp relay address [ip adres van DCHP server]" toe.

LEAF-2-VPC(config)# interface vlan 10
LEAF-2-VPC(config-if)# ip dhcp relay address 10.10.10.150

Stap 5. Pas de opdracht "ip DHCP Relay bron-interface [unieke loopback]"toe.

LEAF-2-VPC(config)# interface vlan 10
LEAF-2-VPC(config-if)# ip dhcp relay source-interface loopback 100

Stap 6. In de VRF corresponderende huurder binnen BGP, directe routeherdistributie met een prefix-lijst en route-kaart die het IP-adres van de loopback-interface omvat.

LEAF-2-VPC(config-if)# show running-config interface loopback 100
interface loopback100
  vrf member tenant-a
  ip address 172.16.10.10/32

LEAF-2-VPC(config)# ip prefix-list host_subnets seq 15 permit 172.16.10.10/32
LEAF-2-VPC(config)# route-map direct_routes_tenant-a permit 10
LEAF-2-VPC(config-route-map)# match ip address prefix-list host_subnets
LEAF-2-VPC(config-route-map)# router bgp 65000
LEAF-2-VPC(config-router)# vrf tenant-a
LEAF-2-VPC(config-router-vrf)# address-family ipv4 unicast
LEAF-2-VPC(config-router-vrf-af)# redistribute direct route-map direct_routes_tenant-a

Stap 7. Controleer dat het IP-adres van de loopback-interface in BGP L2VPN EVPN naar de Spines wordt geadverteerd met de opdracht: toon bgp l2vpn evpn [loopback IP] vrf [tenant vrf].

LEAF-2-VPC(config-if)# show bgp l2vpn evpn 172.16.10.10 vrf tenant-a 
BGP routing table information for VRF default, address family L2VPN EVPN
Route Distinguisher: 192.168.4.4:4    (L3VNI 303030)
BGP routing table entry for [5]:[0]:[0]:[32]:[172.16.10.10]/224, version 49
5
Paths: (1 available, best #1)
Flags: (0x000002) (high32 00000000) on xmit-list, is not in l2rib/evpn

  Advertised path-id 1
  Path type: local, path is valid, is best path, no labeled nexthop
  Gateway IP: 0.0.0.0
  AS-Path: NONE, path locally originated
    192.168.13.2 (metric 0) from 0.0.0.0 (192.168.4.4)
      Origin incomplete, MED 0, localpref 100, weight 32768
      Received label 303030
      Extcommunity: RT:65000:303030 ENCAP:8 Router MAC:6026.aa85.9587

  Path-id 1 advertised to peers:
    192.168.0.11 <<<<< Spine 

Stap 8. Controleer dat het IP-adres van de loopback-interface is ingespoten in BGP L2VPN EVPN waar DHCP-server is gevestigd.

LEAF-2-VPC(config-if)# show bgp l2vpn evpn 172.16.10.10 
BGP routing table information for VRF default, address family L2VPN EVPN
Route Distinguisher: 192.168.4.4:4    (L3VNI 303030)
BGP routing table entry for [5]:[0]:[0]:[32]:[172.16.10.10]/224, version 49
5
Paths: (1 available, best #1)
Flags: (0x000002) (high32 00000000) on xmit-list, is not in l2rib/evpn

  Advertised path-id 1
  Path type: local, path is valid, is best path, no labeled nexthop
  Gateway IP: 0.0.0.0
  AS-Path: NONE, path locally originated
    192.168.13.2 (metric 0) from 0.0.0.0 (192.168.4.4)
      Origin incomplete, MED 0, localpref 100, weight 32768
      Received label 303030
      Extcommunity: RT:65000:303030 ENCAP:8 Router MAC:6026.aa85.9587

  Path-id 1 advertised to peers:
    192.168.0.11      

Stap 9. Controleer dat er een route is voor de DHCP-server op de bronhuurder met de opdracht toon ip route [DHCP server IP] vrf[tenvrf].

LEAF-2-VPC(config-if)# show running-config interface vlan 10
interface Vlan10
  no shutdown
  vrf member tenant-a
  no ip redirects
  ip address 10.10.10.1/24
  no ipv6 redirects
  fabric forwarding mode anycast-gateway
  ip dhcp relay address 10.10.10.150 
  ip dhcp relay source-interface loopback100

LEAF-2-VPC(config-if)# show ip route 10.10.10.150 vrf tenant-a
10.10.10.150/32, ubest/mbest: 1/0, attached
    *via 10.10.10.150, Vlan10, [190/0], 01:01:28, hmm

Stap 10. Controleer dat de DCHP server IP bereikbaar is met de loopback-interface en de corresponderende VRF als een VRF-bron met de opdracht ping [DHCP server IP] bron-interface loopback [x] vrf [tenant vrf].

LEAF-2-VPC(config-if)# ping 10.10.10.150 source-interface loopback 100 vrf tenant-a 
PING 10.10.10.150 (10.10.10.150): 56 data bytes
64 bytes from 10.10.10.150: icmp_seq=0 ttl=127 time=0.928 ms
64 bytes from 10.10.10.150: icmp_seq=1 ttl=127 time=0.475 ms
64 bytes from 10.10.10.150: icmp_seq=2 ttl=127 time=0.455 ms
64 bytes from 10.10.10.150: icmp_seq=3 ttl=127 time=0.409 ms
64 bytes from 10.10.10.150: icmp_seq=4 ttl=127 time=0.465 ms

--- 10.10.10.150 ping statistics ---

Stap 11. Controleer de status van de DHCP-relay-agent.

LEAF-2-VPC(config)# show ip dhcp status
Current CLI Operation: show ip dhcp status
Last CLI Operation: DME: ip dhcp relay information option vpn enable
Last CLI Operation Status: SUCCESS

Stap 12. Controleer optie 82, zoals de VPN-optie en het juiste IP-adres van de relay onder de relay-agent.

LEAF-2-VPC(config)# show ip dhcp relay
DHCP relay service is enabled    <<<<<<<
Insertion of option 82 is enabled   <<<<<<<<<
Insertion of option 82 customize circuitid is disabled
TLV format in CircuitId and RemoteId suboptions is enabled
Insertion of VPN suboptions is enabled  <<<<<<<
Insertion of cisco suboptions is disabled
Global smart-relay is disabled
Relay Trusted functionality is disabled
Relay Trusted Port is Globally disabled
V4 Relay Source Address HSRP is Globally disabled
Server-ID-override-disable is disabled

Smart-relay is enabled on the following interfaces:
------------------------------------------------------ 


Subnet-broadcast is enabled on the following interfaces:
------------------------------------------------------ 


Relay Trusted Port is enabled on the following interfaces:
---------------------------------------------------------- 


Relay Source Address HSRP is enabled on the following interfaces:
-------------------------------------------------------------------

Helper addresses are configured on the following interfaces:
 Interface        Relay Address     VRF Name
 -------------    -------------     --------
 Vlan10            10.10.10.150 <<<<

Stap 13. Controleer de statistieken van verwerkte en verzonden pakketten.

LEAF-2-VPC(config)# show ip dhcp global statistics
Packets processed 103030
Packets received through cfsoe 0
Packets forwarded 103030
Packets forwarded on cfsoe 0
Total packets dropped 0
Packets dropped from untrusted ports 0
Packets dropped due to MAC address check failure 0
Packets dropped due to Option 82 insertion failure 0
Packets dropped due to o/p intf unknown 0
Packets dropped which were unknown 0
Packets dropped due to no trusted ports 0
Packets dropped due to dhcp relay not enabled 0
Packets dropped due to no binding entry 0
Packets dropped due to interface error/no interface 0
Packets dropped due to max hops exceeded 0
Packets dropped due to Queue full 0

Stap 14. Controleer de statistieken van relay-pakketten.

LEAF-2-VPC# show ip dhcp relay statistics 
----------------------------------------------------------------------
Message Type             Rx              Tx           Drops  
----------------------------------------------------------------------
Discover              29312           29311               0
Offer                300001          300001               0
Request(*)            29324           29324               0
Ack                    1574            1574               0
Release(*)           191493          191493               0
Decline                   0               0               0
Inform(*)              1540            1540               0
Nack                 472890          472890               0
----------------------------------------------------------------------
Total               1026134         1026133               0
----------------------------------------------------------------------

DHCP L3 FWD:
Total Packets Received                           :         0
Total Packets Forwarded                          :         0
Total Packets Dropped                            :         0
Non DHCP:
Total Packets Received                           :         0
Total Packets Forwarded                          :         0
Total Packets Dropped                            :         0
DROP:
DHCP Relay not enabled                           :         0
Invalid DHCP message type                        :         0
Interface error                                  :         0
Tx failure towards server                        :         0
Tx failure towards client                        :         0
Unknown output interface                         :         0
Unknown vrf or interface for server              :         0
Max hops exceeded                                :         0
Option 82 validation failed                      :         0
Packet Malformed                                 :         0
DHCP Request dropped on MCT                      :         0
Relay Trusted port not configured                :         0
*  -  These counters will show correct value when switch 
receives DHCP request packet with destination ip as broadcast
address. If request is unicast it will be HW switched

DHCP-serverconfiguratie op Windows Server 2022

IP-adresseringstoepassingsconfiguratie voor hosts.

Stap 1. Open Server Manager en bevestig dat er geen alarmen op DCHP Server in het Dashboard zijn.

Dashboard van Server Manager op Windows Server 2022

Stap 2. Open DHCP-servertoepassing.

DHCP-server op Windows Server 2022

Stap 3. Klik met de rechtermuisknop op IPv4 en klik op Nieuw bereik.

Nieuw toepassingsgebied in DCHP

Stap 4. Klik op Next (Volgende).

Stap 5. Schrijf een naam en een beschrijving. In dit voorbeeld is de naam het subnet dat tot VLAN 10 behoort en de beschrijving is L2VNI als L2VNI vermeld aan VLAN 10.

Stap 6. Configureer het IP-adresbereik. Dit is het zwembad voor gastheren.

Stap 6. Sluit het gedeelde IP-adres uit van de SVI-configuratie in de VTEP's. In dit voorbeeld heeft interface VLAN 10 adres IP.10.10.1/24.

LEAF-1# show running-config interface vlan 10
<snip>
interface Vlan10
  no shutdown
  vrf member tenant-a
  no ip redirects
  ip address 10.10.10.1/24
  no ipv6 redirects
  fabric forwarding mode anycast-gateway
  ip dhcp relay address 10.10.10.150
  ip dhcp relay source-interface loopback100

Stap 7. Configureer de leaseduur van IP-adres. Dit verwijst naar de hoeveelheid tijd die een host kan gebruiken het toegewezen IP-adres voordat het wordt verlengd.

Stap 8. Selecteer Ja, ik wil deze opties nu configureren.

Stap 9. Configureer het standaard-gateway IP-adres.

Stap 10. Domeinnaam en DNS-server configureren.

Stap 11. Configureer de WINS-server indien van toepassing. Dit kan worden overgeslagen als de informatie niet bekend is.

Stap 12. Selecteer Ja, ik wil deze scope nu activeren.

Het instellen van de scope voor unieke IP-adressen van loopbacks in SVI als DCHP relay agent.

Stap 1. Klik met de rechtermuisknop op IPv4 en selecteer IPv4Scope.

Nieuw toepassingsgebied in DCHP

Stap 2. Schrijf een naam en een beschrijving. In dit voorbeeld, is de naam het subnetnet dat voor Subnet met loopbackadres wordt gebruikt. 

LEAF-1# show running-config interface loopback 100
<snip>
interface loopback100
  vrf member tenant-a
  ip address 172.16.10.8/32

Stap 3. Configureer het IP-adresbereikIP. Dit is het zwembad voor loopbacks. 

Stap 4. Configureer uitsluitingen (optioneel omdat de DHCP-server IP-adressen die tot dit subnetnummer behoren, niet leaset).

Stap 5. Sla de leaseduur over en klik op Volgende.

Stap 6. Selecteer Nee, ik configureer deze opties later.

Stap 7. Klik op Finish (Voltooien).

Stap 8. Klik met de rechtermuisknop op de gedefinieerde scope en selecteer Activeren.

Superscope voor VxLAN-fabric configureren.

Stap 1. Klik met de rechtermuisknop in IPv4 en selecteer Nieuwe superscope.

Stap 2. Klik op Next (Volgende).

Stap 3. Schrijf de superscope naam.

Stap 4. Selecteer alle scènes die bij VxLAN Fabric horen.

Stap 5. Selecteer alle scènes die bij VxLAN Fabric horen.

Stap 6. Controleer of alle VxLAN-fabric superscope aanwezig is en klik op Voltooien.

Configureer optie 82 in hostscopen.

Stap 1. Klik met de rechtermuisknop op Beleid (laatste optie) binnen het bereik voor host en klik op Nieuw beleid.

Stap 2. Schrijf een naam en een beschrijving en klik op Volgende.

Stap 3. Klik op Add (Toevoegen). Selecteer in Criteria de optie Relay Agent Information. Selecteer in Operator de optie Gelijken. Selecteer vervolgens Agent Remote ID en typ de waarde. Klik op OK en vervolgens op Volgende.

LEAF-1# show interface vlan 10
Vlan10 is up, line protocol is up, autostate enabled
  Hardware is EtherSVI, address is  707d.b9b8.4daf <<<<
  Internet Address is 10.10.10.1/24
 <snip>

Stap 4. Configureer de IP-adressering die bestaande IP kan gebruiken op de VPN’s die door de ID zijn geselecteerd en klik vervolgens op Volgende.

Stap 5. Selecteer het vakje links van 003 router onder DCHP Standard Option. Schrijf vervolgens het IP-adres van de standaardgateway voor de hosts die tot dit beleid behoren en druk op Add. Klik op Next (Volgende).

Stap 6. Controleer de beleidsvoorwaarden en klik op Voltooien.

DCHP-pakketwandeling van begin tot eind in VxLAN Fabric.

Detectie verzenden via HOST-1

Detectie op LEAF-1

Ontvangen ontdekking op LEAF-1	Detectie verzenden via LEAF-1

Detectie op RUGGENGRAAT

Ontvangen ontdekking op RUGGENGRAAT	Detectie verzenden via SPINE

Detectie op LEAF-1-vPC

Detectie ontvangen op LEAF-1-vPC	Detectie verzenden via LEAF-1-vPC

Detectie ontvangen op DCHP-server

DCHP-aanbieding verzenden via DCHP Server

DCHP-aanbieding op LEAF-2-vPC

Aanbieding ontvangen op LEAF-2-vPC	Aanbieding verzenden via LEAF-2-vPC

DHCP-aanbieding vPC SPINE

Aanbieding ontvangen op SPINE	Aanbieding verzenden via SPINE

DHCP-aanbieding op LEAF-1

Aanbieding ontvangen op LEAF-1	Aanbieding verzenden op LEAF-1

DHCP-aanbieding ontvangen op HOST-1

Verzoek verzenden door HOST-1

Verzoek op LEAF-1

Verzoek ontvangen op LEAF-1	Verzoek verzenden via LEAF-1

Verzoek op SPINE

Aanvraag ontvangen op SPINE	Aanvraag verzenden via SPINE

Verzoek op LEAF-2-vPC

RecevPCd aanvragen op LEAF-2-vPC	Aanvraag verzenden via vPCAF-2-vPC

Aanvraag ontvangen op DCHP-server

ACK verzenden via DCHP Server

ACK op LEAF-2-vPC

ACK ontvangen op LEAF-2-vPC	ACK verzenden via LEAF-2-vPC

ACK op RUGGENGRAAT

ACK ontvangen op RUGGENGRAAT	ACK verzenden via SPINE

ACK op LEAF-1

ACK ontvangen op LEAF-1	ACK versturen met LEAF-1

ACK op HOST-1

Gerelateerde informatie

VXLAN BGP EVPN configureren

VXLAN configureren

DHCP-gerelateerde problemen oplossen bij Nexus 9000

Cisco Nexus 9000 Series NX-OS VXLAN-configuratiehandleiding, release 10.4(x)