Configure Fabric Extend

Use the following procedure to configure Fabric Extend (FE) between a Main office to a Branch office. This is a typical deployment. However, if your deployment creates tunnels between two switches that support Fabric Extend natively, then repeat those steps and ignore the steps for switches that require an ONA.

Note

Note

VRF is an optional parameter. If a VRF is not configured, then FE uses the GRT.

Before you begin

The tunnel source IP address can be a brouter port IP, a CLIP IP, or a VLAN IP.

Note

Note

Product Notice: Except VSP 8600 Series, all product series support a VLAN IP as the Fabric Extend tunnel source IP address.

For information about product support, see Fabric Extend Considerations.

If using the tunnel originating address on the GRT, Fabric Extend has the following requirements:
  • The tunnel source IP address must be on the GRT, not on a VRF.

    Note

    Note

    A best practice is to use separate IP addresses for the SPBM IP Shortcuts ip-source-address command and the Fabric Extend ip-tunnel-source-address command. However, if you want these IP addresses to be the same, you MUST exclude the ip-source-address address with an IS-IS accept policy. You cannot use the redistribute command with a route map exclusion.

    Specify a CLIP interface to use as the source address for SPBM IP shortcuts.

  • If IP Shortcuts is enabled, you must configure an IS-IS accept policy or exclude route-map to ensure that tunnel destination IP addresses are not learned through IS-IS.

If you are using the tunnel originating address on a VRF, Fabric Extend has the following requirements:
  • Configure a CLIP and tunnel source IP address on the VRF.

  • Remote management of the VSP 4450 Series is only possible after establishing IP Shortcut over IS-IS. (Alternatively, you can enable GRT-VRF redistribution locally.)

About this task

Configuring Fabric Extend consists of two primary tasks: configuring the tunnel source address and configuring the logical interface. These tasks must be completed on both ends of the tunnel.

Note that the VSP 4450 Series source address command is different than other platforms. Also note that the logical interface commands are different between Layer 2 and Layer 3 networks.

Procedure

The following steps are for platforms that support FE natively:

  1. Enter IS-IS Router Configuration mode:

    enable

    configure terminal

    router isis

  2. Configure the IP tunnel source address:

    ip-tunnel-source-address <A.B.C.D> [vrf WORD<1–16>]

  3. Enter Global Configuration mode:

    exit

  4. Use one of the following commands to create a logical IS-IS interface:
    • In a network with a Layer 3 Core, enter logical-intf isis <1–255> dest-ip <A.B.C.D> [name WORD<1–64>] [mtu <750-9000>]

    • In a network with a Layer 2 Core, enter logical-intf isis <1–255> vid <list of vids> primary-vid <2–4059> port <slot/port> mlt <mltId> [name WORD<1–64>] [mtu <750-9000>]

      Note

      Note

      The primary VLAN ID (primary-vid must be one of the VIDs in the vid <list of vids>.

The following steps are for platforms that require an ONA to support FE:

Note

Note

The interface VLAN connecting to the ONA network port is always in the GRT and the member port that the VLAN is part of is always an access port.

  1. Enter IS-IS Router Configuration mode:

    enable

    configure terminal

    router isis

  2. Configure the IP tunnel source address on the port that connects to the Device side of the ONA:

    ip-tunnel-source-address <A.B.C.D> port <slot/port> [mtu <mtu_value>] [vrf WORD<1–16>]

  3. Exit back into Global Configuration mode:

    exit

  4. Use one of the following commands to create a logical IS-IS interface:
    • In a network with a Layer 3 Core, enter:

      logical-intf isis <1–255> dest-ip <A.B.C.D> [name WORD<1–64>]

    • In a network with a Layer 2 Core, enter:

      logical-intf isis <1–255> vid <list of vids> primary-vid <2–4059> port <slot/port> mlt <mltId> [name WORD<1–64>]

      Note

      Note

      The primary VLAN ID (primary-vid) must be one of the VIDs in the vid <list of vids>.

Variable Definitions

The following table defines parameters for the ip-tunnel-source-address command.

To delete an IS-IS IP tunnel source address, use the no ip-tunnel-source-address option.

Note

Note

The port parameter is for the VSP 4450 Series only.

Variable

Value

<A.B.C.D>

Specifies the IS-IS IPv4 tunnel source address, which can be a brouter interface IP, a CLIP IP, or a VLAN IP.

port <slot/port>

Specifies the port that is connected to the ONA's Device port.

vrf WORD<1–16>

Specifies the VRF name associated with the IP tunnel.

mtu <mtu_value>

Specifies the Maximum Transmission Unit (MTU) size for each packet. Different hardware platforms support different MTU ranges. Use the CLI Help to see the available range for the switch.

This parameter only applies to an ONA configuration.

The following table defines parameters for the logical-intf isis command, depending on whether you have a Layer 2 or Layer 3 core.

To delete a logical IS-IS interface, use the no logical-intf isis option.

Table 1. Layer 2 core

Variable

Value

<1–255>

Specifies the index number that uniquely identifies this logical interface.

port {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}

Specifies the physical port that the logical interface is connected to in a Layer 2 network.

vid <list of vids>

Specifies the list of VLANs that are associated with this logical interface.

primary-vid <2–4059>

Specifies the primary tunnel VLAN ID associated with this Layer 2 IS-IS logical interface.

mlt <mltId>

Specifies the MLT ID that the logical interface is connected to in a Layer 2 network.

name WORD<1–64>

Specifies the administratively-assigned name of this logical interface, which can be up to 64 characters.

mtu<750-9000>

Note:

Exception: only supported on XA1400 Series.

Specifies the Maximum Transmission Unit (MTU) size of each packet. The default MTU value is 1950.

Table 2. Layer 3 core

Variable

Value

<1–255>

Specifies the index number that uniquely identifies this logical interface.

dest-ip <A.B.C.D>

Specifies the tunnel destination IP address of the remote BEB.

name WORD<1–64>

Specifies the administratively-assigned name of this logical interface, which can be up to 64 characters.

mtu<750-9000>

Note:

Exception: only supported on XA1400 Series.

Specifies the Maximum Transmission Unit (MTU) size of each packet. The default MTU value is 1950.