FA Clients Connected to BPEs with Extended Edge Switching Ring MLAG-Connected CBs FA Server Peers

This configuration example shows how to configure a Fabric Attach (FA) server Controlling Bridge (CB) to receive and approve VLAN/NSI mappings from an FA client connected to a bridge port extender (BPE).

In the following example:
Click to expand in new window
FA Clients Connect to BPE with Ring MLAG-Connected FA Server Peers

FA Client/Proxy Connected to BPE

Create VLAN/NSI mappings on the FA client switch connected to a BPE:

create vlan "VLAN_0505"
configure vlan VLAN_0505 tag 505
create vlan "VLAN_0707"
configure vlan VLAN_0707 tag 707
create vlan "VLAN_4004"
configure vlan VLAN_4004 tag 4004
configure vlan VLAN_0505 add nsi 5050
configure vlan VLAN_0707 add nsi 70707
configure vlan VLAN_4004 add nsi 41414 
FAClient-450G2.5 # show fabric attach elements 
Fabric Attach Mode: Proxy
                                                       Mgmt     Auto
System Id                     Port    Type             VLAN Tag Provision
----------------------------- ------- ---------------- ---- --- --------------
00-11-88-fe-f3-66-00-8f-00-06 17      Server (No Auth) 2002 Mix Disabled      
* (CIT_30.4.0.524) FAClient-switch_model.6 #
 * (CIT_30.4.0.524) FAClient-switch_model.4 # show fabric attach assignments 
Fabric Attach Mode: Proxy
Port     VLAN  VLAN Name                         Type     ISID/NSI  Status
-------  ----  --------------------------------  -------  --------  --------
          505  VLAN_0505                         Static       5050  Active  
          707  VLAN_0707                         Static      70707  Active  
         4004  VLAN_4004                         Static      41414  Active  
FAClient-switch_model.5 # show lldp neighbors 

        Neighbor           Neighbor                           Neighbor
Port    Chassis ID         Port ID            TTL     Age     System Name
===============================================================================
17      00:11:88:FE:F3:66  143:6              120     1       CB1-465
===============================================================================
NOTE: The Chassis ID and/or Port ID might be truncated to fit the screen.

Controlling Bridge 1 FA Server

Slot-1 CB1-465.57 # show fabric attach elements 
Fabric Attach Mode: Server
                                                       Mgmt     Auto
System Id                     Port    Type             VLAN Tag Provision
----------------------------- ------- ---------------- ---- --- --------------
00-04-96-9a-8d-6c-00-01-00-0f 1:25    Proxy (No Auth)  2002 Mix Disabled      
00-04-96-9c-d4-5a-00-01-00-12 1:26    Proxy (No Auth)  2002 Mix Disabled      
00-04-96-9a-8d-45-00-01-00-2f 1:27    Server (No Auth) 2002 Mix Disabled      
00-04-96-9a-8d-45-00-8f-00-19 1:28    Server (No Auth) 2002 Mix Disabled      
00-04-96-98-a9-1a-00-01-00-11 143:6   Proxy (No Auth)  2002 Mix Disabled
Slot-1 CB1-465.59 # show fabric attach assignments 
Fabric Attach Mode: Server
Port     VLAN  VLAN Name                         Type     ISID/NSI  Status
-------  ----  --------------------------------  -------  --------  --------
1:25      606  SYS_VLAN_0606                     Dynamic      6060  Active  
1:25      756  SYS_VLAN_0756                     Dynamic     89002  Active  
1:25      808  SYS_VLAN_0808                     Dynamic       808  Active  
143:6     505  SYS_VLAN_0505                     Dynamic      5050  Active  
143:6     707  SYS_VLAN_0707                     Dynamic     70707  Active  
143:6    4004  SYS_VLAN_4004                     Dynamic     41414  Active  
Slot-1 CB1-465.60 # show configuration vsm 
#
# Module vsm configuration.
#
create mlag peer "Left-Peer-1" 
configure mlag peer "Left-Peer-1" ipaddress 100.100.100.2 vr VR-Default 
enable mlag port 1:25 peer "Left-Peer-1" id 200 
enable mlag port 1:28 peer "Left-Peer-1" id 2001 
(pacman debug) Slot-1 VPEX CB1-465.61 # show mlag peer 
Multi-switch Link Aggregation Peers:

MLAG Peer         : Left-Peer-1
VLAN              : isc                    Virtual Router    : VR-Default  
Local IP Address  : 100.100.100.1          Peer IP Address   : 100.100.100.2
MLAG ports        : 3                      Tx-Interval       : 1000 ms
Checkpoint Status : Up                     Peer Tx-Interval  : 1000 ms
Rx-Hellos         : 101274                 Tx-Hellos         : 101373      
Rx-Checkpoint Msgs: 283537                 Tx-Checkpoint Msgs: 294709      
Rx-Hello Errors   : 0                      Tx-Hello Errors   : 1408        
Hello Timeouts    : 1                      Checkpoint Errors : 0           
Up Time           : 1d:0h:28m:56s          Peer Conn.Failures: 1           
Local MAC         : 00:11:88:fe:f3:66      Peer MAC          : 00:04:96:9a:8d:45
Config'd LACP MAC : None                   Current LACP MAC  : 00:04:96:9a:8d:45
Authentication    : None                   

Alternate path information: None
Slot-1 CB1-465.62 # show mlag ports 

                Local                                             Local   Remote 
MLAG    Local   Link     Remote                           Peer    Fail    Fail   
Id      Port    State    Link    Peer                     Status  Count   Count  
================================================================================ 
200     1:25    A        Up      Left-Peer-1              Up          0       0
2001    1:28    A        Virtual Left-Peer-1              Up          0       1
================================================================================ 
Local Link State: A - Active, D - Disabled, R - Ready, NP - Port not present
Remote Link     : Up - One or more links are active on the remote switch,
                  Down - No links are active on the remote switch,
                  N/A - The peer has not communicated link state for this MLAG port,
                  Virtual - MLAG peer switch does not have physical port.

Number of Multi-switch Link Aggregation Groups  : 2
Convergence control                             : Conserve Access Lists
Reload Delay Interval                           : 30 seconds
Reload Delay                                    : Disabled
Link Up Isolation                               : Off
(pacman debug) Slot-1 VPEX CB1-465.63 #
* (pacman debug) Slot-1 VPEX CB1-465.13 # show virtual-network 
Virtual Network                      Flags     Tenant VLAN                      
              Encap       ID     Encap Flags         
================================================================================
SYS_VNET_00000808                    --S       SYS_VLAN_0808                    
              VXLAN      808     L-X                 
SYS_VNET_00005050                    --S       SYS_VLAN_0505                    
              VXLAN      5050    L-X                 
SYS_VNET_00006060                    --S       SYS_VLAN_0606                    
              VXLAN      6060    L-X                 
SYS_VNET_00041414                    --S       SYS_VLAN_4004                    
              VXLAN     41414    L-X                 
SYS_VNET_00070707                    --S       SYS_VLAN_0707                    
              VXLAN     70707    L-X                 
SYS_VNET_00089002                    --S       SYS_VLAN_0756                    
              VXLAN     89002    L-X                 
================================================================================
Flags: (S) System Configured, (T) OTM Configured, (V) OVSDB Configured 
Encap Flags: (L) Local Endpoints Configured,
       (R) Remote Endpoints Associated,
       (X) Exclude Tag
----------------------------------------
Total number of Virtual Networks  : 6
Local Endpoints                   : 89.9.9.10 (VR-Default)
Network Ports [VXLAN]             : 1:1-32
Dynamic Virtual Networks          : On

Controlling Bridge 2 FA Server

Slot-1 CB2-670.35 # show fabric attach elements 
Fabric Attach Mode: Server
                                                       Mgmt     Auto
System Id                     Port    Type             VLAN Tag Provision
----------------------------- ------- ---------------- ---- --- --------------
00-11-88-fe-f3-66-00-7b-00-19 1:5     Server (No Auth) 2002 Mix Disabled      
00-04-96-9a-8d-6c-00-01-00-21 1:16    Proxy (No Auth)  2002 Mix Disabled      
00-04-96-9a-8d-6c-00-01-00-0f 1:24    Proxy (No Auth)  2002 Mix Disabled      
00-04-96-99-9e-31-00-01-00-33 1:33    Proxy (No Auth)  2002 Mix Disabled      
00-11-88-fe-f3-66-00-01-00-1b 1:47    Server (No Auth) 2002 Mix Disabled      
00-04-96-98-a9-1a-00-01-00-11 143:6   Proxy (No Auth)  2002 Mix Disabled      
(pacman debug) Slot-1 VPEX CB2-670.36 
#(pacman debug) Slot-1 VPEX CB2-670.36 # show fabric attach assignments 
Fabric Attach Mode: Server
Port     VLAN  VLAN Name                         Type     ISID/NSI  Status
-------  ----  --------------------------------  -------  --------  --------
1:24      606  SYS_VLAN_0606                     Dynamic      6060  Active  
1:24      756  SYS_VLAN_0756                     Dynamic     89002  Active  
1:24      808  SYS_VLAN_0808                     Dynamic       808  Active  
143:6     505  SYS_VLAN_0505                     Dynamic      5050  Active  
143:6     707  SYS_VLAN_0707                     Dynamic     70707  Active  
143:6    4004  SYS_VLAN_4004                     Dynamic     41414  Active  
Slot-1 CB2-670.37 # show configuration vsm 
#
# Module vsm configuration.
#
create mlag peer "Right-Peer-1" 
configure mlag peer "Right-Peer-1" ipaddress 100.100.100.1 vr VR-Default 
enable mlag port 1:5 peer "Right-Peer-1" id 1001 
enable mlag port 1:24 peer "Right-Peer-1" id 200 
(pacman debug) Slot-1 VPEX CB2-670.38 # show mlag peer 
Multi-switch Link Aggregation Peers:

MLAG Peer         : Right-Peer-1
VLAN              : isc                    Virtual Router    : VR-Default  
Local IP Address  : 100.100.100.2          Peer IP Address   : 100.100.100.1
MLAG ports        : 3                      Tx-Interval       : 1000 ms
Checkpoint Status : Up                     Peer Tx-Interval  : 1000 ms
Rx-Hellos         : 101309                 Tx-Hellos         : 101408      
Rx-Checkpoint Msgs: 294793                 Tx-Checkpoint Msgs: 283640      
Rx-Hello Errors   : 0                      Tx-Hello Errors   : 883         
Hello Timeouts    : 1                      Checkpoint Errors : 0           
Up Time           : 1d:0h:29m:29s          Peer Conn.Failures: 1           
Local MAC         : 00:04:96:9a:8d:45      Peer MAC          : 00:11:88:fe:f3:66
Config'd LACP MAC : None                   Current LACP MAC  : 00:04:96:9a:8d:45
Authentication    : None                   

Alternate path information: None
Slot-1 CB2-670.39 # show mlag ports 

                Local                                             Local   Remote 
MLAG    Local   Link     Remote                           Peer    Fail    Fail   
Id      Port    State    Link    Peer                     Status  Count   Count  
================================================================================ 
1001    1:5     A        Virtual Right-Peer-1             Up          0       1
200     1:24    A        Up      Right-Peer-1             Up          0       0
================================================================================ 
Local Link State: A - Active, D - Disabled, R - Ready, NP - Port not present
Remote Link     : Up - One or more links are active on the remote switch,
                  Down - No links are active on the remote switch,
                  N/A - The peer has not communicated link state for this MLAG port,
                  Virtual - MLAG peer switch does not have physical port.

Number of Multi-switch Link Aggregation Groups  : 2
Convergence control                             : Conserve Access Lists
Reload Delay Interval                           : 30 seconds
Reload Delay                                    : Disabled
Link Up Isolation                               : Off
Slot-1 CB2-670.15 # show virtual-network 
Virtual Network                      Flags     Tenant VLAN                      
              Encap       ID     Encap Flags         
================================================================================
SYS_VNET_00000808                    --S       SYS_VLAN_0808                    
              VXLAN      808     L-X                 
SYS_VNET_00005050                    --S       SYS_VLAN_0505                    
              VXLAN      5050    L-X                 
SYS_VNET_00006060                    --S       SYS_VLAN_0606                    
              VXLAN      6060    L-X                 
SYS_VNET_00041414                    --S       SYS_VLAN_4004                    
              VXLAN     41414    L-X                 
SYS_VNET_00070707                    --S       SYS_VLAN_0707                    
              VXLAN     70707    L-X                 
SYS_VNET_00089002                    --S       SYS_VLAN_0756                    
              VXLAN     89002    L-X                 
================================================================================
Flags: (S) System Configured, (T) OTM Configured, (V) OVSDB Configured 
Encap Flags: (L) Local Endpoints Configured,
       (R) Remote Endpoints Associated,
       (X) Exclude Tag
----------------------------------------
Total number of Virtual Networks  : 6
Local Endpoints                   : 89.9.9.10 (VR-Default)
Network Ports [VXLAN]             : 1:1-64
Dynamic Virtual Networks          : On