Configuring Fabric Attach

An ExtremeXOS Fabric Attach device automatically detects and exchanges information with attached Fabric Attach devices, except that a proxy does not exchange information with another proxy).

The following are optional user-configurable items:

Static VLAN/NSI Assignments

You explicitly create static Fabric Attach VLANs. Static VLANs can be mapped to a Network Service Identifier (NSI) or Individual Service Identifier (ISID).

To map a VLAN to an NSI/ISID, use the following command:

configure [{vlan} vlan_name |vlan vlan_id] add [nsi nsi | isid isid]

Mappings created with this command are persistent across reboots, whereas mappings by Fabric Attach clients and mappings requested by RADIUS/Policy/NetLogin are not persistent.
Note

Note

While it is possible to configure an NSI mapping using the command configure virtual-network vn_name vxlan vni [ vni | none], it is not recommended to do so when using Fabric Attach.

To unmap a VLAN from an NSI/ISID, use the following command:

configure [{vlan} vlan_name |vlan vlan_id] delete [nsi nsi | isid isid]

To display VLAN to NSI/ISID information, use the following command:

show fabric attach {{vlan} | {vlan} vlan_name | vlan vlan_id} assignments

If the VLAN/NSI mappings of type offset is present, then the offset NSI mappings are given the least precedence to be sent to the server for approval regardless of the time the mappings were created.

Static NSI Offset

Beginning with version 33.1.1, you can associate tagged VLANs to be mapped with a NSI value using static NSI offset configuration. When the NSI offset value is configured, any tagged VLAN that does not have a NSI associated will be applied with a NSI value, which is the sum of the configured NSI offset value and VLAN ID.

The NSI offset applied to a VLAN will be removed if an NSI of higher precedence is applied to the VLAN.

Use the following command to configure the NSI offset value:

configure fabric attach isid-nsi-offset isid_nsi_offset

Use the following command to view configured NSI offset information:

show fabric attach {{vlan} | {vlan} vlan_name | vlan vlan_id} assignments

Use the following command to unconfigure the NSI offset value:

configure fabric attach isid-nsi-offset isid_nsi_offset none

Fabric Attach Authentication

To set up authentication, use the following command:

configure fabric attach ports [port_list | all] authentication [ disable | enable | key {key | default | encrypted encrypted_key}]

Note

Note

When Fabric Attach authentication is configured on ports that are part of an This command is available on all Universal switches supported in this document., all ports on that MLAG must have the same Fabric Attach authentication configuration.

To view authentication information, use the following command:

show fabric attach ports [port_list | all] authentication {detail}

Standalone Proxy/Uplink Port

If there is no Fabric Attach-capable server available, configuring an uplink makes the device a standalone proxy. This works like a proxy, but without having discovered a Fabric Attach server. The uplink port is treated as the server port.

To enable standalone proxy mode and specify the uplink port, use the following command using the port keyword:

configure fabric attach uplink [port | none]

To disable standalone proxy mode, use the following command using the none keyword:

configure fabric attach uplink [port | none]

configure fabric attach ports [port_list | all] enable | disable]

Management VLAN

To specify the VLAN advertised to Fabric Attach clients for them to use as the management VLAN, use the following command:

configure fabric attach management-vlan [vlan_id | vlan_name | untagged | none | forward [on | off] ]

configure fabric attach management-vlan ports [port_list | all] forward [on | off]

The specified VLAN configuration on the Fabric Attach server is restricted to only tagged VLANs.

Zero Touch Server Management VLAN

Zero Touch Server enhances FA by allowing a management VLAN to be automatically propagated to FA proxy and FA clients. FA proxy and FA clients use the VLAN to obtain an IP address via Dynamic Host Configuration Protocol (DHCP) and connect to a management device.

Viewing Fabric Attach Information

To display known fabric attach statistics information, use the following command:

show fabric attach statistics
Note

Note

To clear these statistics, use the clear counters command.

To display known fabric attach elements (neighbors) information, use the following command:

show fabric attach elements

To display known fabric attach assignments (mappings) information, use the following command:

show fabric attach {{vlan} | {vlan} vlan_name | vlan vlan_id} assignments

To display known fabric attach agent information, use the following command:

show fabric attach agent

To display known Fabric Attach authentication information, use the following command:

show fabric attach ports [port_list | all] authentication {detail}

Warnings for MLAG Ports

5.2.2.8-FASvr-DUT1-switch.110 # configure fabric attach ports 1 3 5 53 disable

Port 1:1 is a member port of 1:5. Configuring all members the same is recommended.
Port 1:3 is a member port of 1:5. Configuring all members the same is recommended.
Port 1:5 is a master port. Configuring all members the same is recommended.
Port 1:53 is a member port of 1:5. Configuring all members the same is recommended.