Configure Fabric Extend Tunnels

Use the following procedure to configure Fabric Extend (FE) between a Main office to a Branch office. This is a typical deployment. However, if your deployment creates tunnels between two switches that support Fabric Extend natively, then repeat those steps and ignore the steps for switches that require an ONA.

Note

Note

VRF is an optional parameter. If a VRF is not configured, then FE uses the GRT.

Before you begin

The tunnel source IP address can be either a brouter port IP, a CLIP IP, or a VLAN IP.

Note

Note

Product Notice: Except VSP 8600 Series, all product series support a VLAN IP as the Fabric Extend tunnel source IP address.

If using the tunnel originating address on the GRT, Fabric Extend has the following requirements:
  • The tunnel source IP address must be on the GRT, not on a VRF.

    Note

    Note

    A best practice is to use separate IP addresses for the SPBM IP Shortcuts ip-source-address command and the Fabric Extend ip-tunnel-source-address command. However, if you want these IP addresses to be the same, you MUST exclude the ip-source-address address with an IS-IS accept policy. You cannot use the redistribute command with a route map exclusion.

    Specify a CLIP interface to use as the source address for SPBM IP shortcuts.

  • If IP Shortcuts is enabled, you must configure an IS-IS accept policy or exclude route-map to ensure that tunnel destination IP addresses are not learned through IS-IS.

If you are using the tunnel originating address on a VRF, Fabric Extend has the following requirements:
  • Configure a CLIP and tunnel source IP address on the VRF.

  • Remote management of the VSP 4450 Series is possible after establishing IP Shortcut over IS-IS. (Alternatively, you can enable GRT-VRF redistribution locally.)

About this task

Configuring Fabric Extend consists of two primary tasks: configuring the tunnel source address and configuring the logical interface. These tasks must be completed on both ends of the tunnel.

Note that the VSP 4450 Series source address command is different than other platforms. Also note that the logical interface commands are different between Layer 2 and Layer 3 networks.

Procedure

The following steps are for platforms that support FE natively:

  1. In the navigation pane, expand Configuration > IS-IS.
  2. Select IS-IS.
  3. Select the Globals tab.
  4. In the IpTunnelSourceAddress field, enter the IP tunnel source address.
  5. If you are using a VRF, select IpTunnelVrf field.
  6. Select Apply.

The following steps are for platforms that require an ONA to support FE:

Note

Note

The interface VLAN connecting to the ONA network port is always in the GRT and the member port that the VLAN is part of is always an access port.

  1. In the navigation pane, expand Configuration > IS-IS.
  2. Select IS-IS.
  3. Select the Globals tab.
  4. In the IpTunnelSourceAddress field, enter the IP tunnel source address.
  5. In the IpTunnelPort field, select the physical port that the logical interface is connected to in an L2 network.
  6. If you are using a VRF, select its name from the list for IpTunnelVrf.
  7. In the IpTunnelMtu field, enter a value between 750 and 1950 to specify the size of the maximum transmission unit (MTU).
  8. Select Apply.

Fabric Extend Field Descriptions

Use the data in the following table to use the Globals tab.

Name

Description

IpTunnelSourceAddress

Specifies the IS-IS IPv4 tunnel source address.

IpTunnelPort

Specifies the physical port that the logical interface is connected to in an L2 network.

The parameter is for the VSP 4450 Series only.

IpTunnelVrf

Specifies the VRF name associated with the IP tunnel.

IpTunnelMtu

Specifies the size of the maximum transmission unit (MTU). The default is 1950.

This parameter applies to an ONA configuration only.