0% found this document useful (0 votes)
5 views161 pages

ISIS ExternalRoute Tests and Use Cases

The document outlines the compatibility and use cases for ISIS External Routes in VOSS 5.0, detailing the necessary software versions for various network devices. It explores five specific use cases involving routing between ISIS (SPB) and other IP routing protocols, emphasizing redundancy and traffic management strategies. Additionally, it includes configuration examples and challenges related to routing loops in a multi-protocol environment.

Uploaded by

Antonio Isip Jr
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
5 views161 pages

ISIS ExternalRoute Tests and Use Cases

The document outlines the compatibility and use cases for ISIS External Routes in VOSS 5.0, detailing the necessary software versions for various network devices. It explores five specific use cases involving routing between ISIS (SPB) and other IP routing protocols, emphasizing redundancy and traffic management strategies. Additionally, it includes configuration examples and challenges related to routing loops in a multi-protocol environment.

Uploaded by

Antonio Isip Jr
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 161

IS-IS External IP Route

Test & Use Cases

Ludovico Stevens
February 2018
Version 4 (pdf version)

©2017 Extreme Networks, Inc. All rights reserved


Compatibility Warning

▪ ISIS External Routes are new in VOSS 5.0


▪ The following nodes can co-exist in an SPB Fabric using ISIS External
routes, but they will treat ISIS External routes just as if they were Internal
Routes; they must however have these minimal software versions:
▪ VOSS VPS with software versions 4.2.1.x
▪ VSP9000 with software version 4.1.0.0 or later
▪ ERS8600 or ERS8800 with software version 7.2.23.0 or later
▪ ERS4900/5900 running IP Shortcuts with software version 7.2.0 or later
▪ ERS4800 running IP Shortcuts since version 5.10.0
– These older devices thus cannot be used as border routers in use case
examples 1,2,3,5 but can operate as non-border routers just fine (as illustrated
in example 3); in the use case 4 they can operate though only if the Primary
Firewall BEB is the only BEB to announce the ISIS default route

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Summary of Use Cases Explored

▪ ISIS Accept Policies and ISIS 1. Routing between ISIS (SPB)


External Routes are leveraged in and other IP routing protocols
the following 5 use cases with redundant border routers
▪ In the first 3 cases both border 2. Routing between ISIS (SPB)
routers IP route between the two and other IP routing protocols
clouds in an active-active fashion with many redundant
▪ In the last 2 cases the requirement boundaries
is that all traffic be IP routed over a
Primary path, and only fail over to 3. Routing between two
the Secondary path in case of separate SPB Fabrics
Primary path failure
▪ It is quite possible that there is more
than one way to achieve the desired
goal in each use case 4. Routing towards a Primary
▪ The objective of this deck is also to Firewall
show the different approaches we
have in our armory now (e.g. match
or set external metric in either
redistribution or accept policies); 5. Routing between ISIS (SPB)
flexibility is key and BGP(MPLS) using
Primary & Backup paths

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Routing between ISIS (SPB) and other IP
routing protocols with redundant border routers

Leveraging IS-IS Accept policies + IS-IS External routes

©2017 Extreme Networks, Inc. All rights reserved


Routing between ISIS (SPB) and other IP routing protocols

IP routes
IP routes

SPB IS-IS OSPF, RIP or BGP


Fabric IP Routes External IP Routes

IP routes
IP routes

▪ GOAL = IP route between the two clouds


– SPB (ISIS) Fabric IP routes are redistributed to OSPF, RIP or BGP in one direction
– OSPF, RIP or BGP routes are redistributed into ISIS in the opposite direction
– Two border routers are used for redundancy, and both can forward traffic at the same time
▪ CHALLENGE = not to get into routing loops where the IP routes redistributed by one
router in one direction end up being re-redistributed to the same cloud where they came
from by the other router
▪ These slides will use an OSPF Cloud; but the same config and principles will equally work
for BGP & RIP
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Setup, Equipment & Software used

VSP8000-1

VSP4000 1/13 1/17 ERS8800


1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2

▪ VSP4000 ▪ VSP8000-2
– VSP 4850GTS-PWR+ /
6.1.0.0_B021 – VSP 8242XSQ / 6.1.0.0_B021
▪ VSP8000-1 ▪ ERS8800
– VSP 8404 / 6.1.0.0_B021 – 7.2.25.0GA
▪ Slot1 8424GT
▪ Slot2 8418XSQ
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Port & MLT Config

VSP8000-1

VSP4000 1/13 1/17 ERS8800


1/47 3/1

2/15 2/16

1/48 3/2

1/13 1/17

vlan members remove 1 1/47,1/48 no spanning-tree stp 1 ports 3/1,3/2


interface gigabitEthernet 1/47,1/48 VSP8000-2 interface gigabitEthernet 3/1,3/2
no shutdown no shutdown
no spanning-tree mstp exit
exit

vlan members remove 1 1/13,1/17,2/15,2/16


interface gigabitEthernet 1/13,1/17,2/15,2/16
no shutdown
no spanning-tree mstp
exit
mlt 1 enable
mlt 1 member 2/15,2/16

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
SPB Global Config

VSP8000-1

VSP4000 1/13 1/17 ERS8800


1/47 3/1
SPB
IS-IS 2/15 2/16

1/48 3/2

1/13 1/17

VSP8000-2

prompt VSP4000 prompt VSP8000-2 prompt VSP8000-1


interface loopback 1 interface loopback 1 interface loopback 1
ip address 10.0.0.40/32 ip address 10.0.0.82/32 ip address 10.0.0.81/32
exit exit exit
spbm spbm spbm
router isis router isis router isis
system-id 00bb.0000.4000 system-id 00bb.0000.8200 system-id 00bb.0000.8100
manual-area 49.0000 manual-area 49.0000 manual-area 49.0000
ip-source-address 10.0.0.40 ip-source-address 10.0.0.82 ip-source-address 10.0.0.81
spbm 1 spbm 1 spbm 1
spbm 1 nick-name 0.00.40 spbm 1 nick-name 0.00.82 spbm 1 nick-name 0.00.81
spbm 1 b-vid 4051-4052 primary 4051 spbm 1 b-vid 4051-4052 primary 4051 spbm 1 b-vid 4051-4052 primary 4051
spbm 1 ip enable spbm 1 ip enable spbm 1 ip enable
exit exit exit
vlan create 4051 name "B-VLAN-1" type spbm-bvlan vlan create 4051 name "B-VLAN-1" type spbm-bvlan vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan vlan create 4052 name "B-VLAN-2" type spbm-bvlan vlan create 4052 name "B-VLAN-2" type spbm-bvlan
router isis enable router isis enable router isis enable
cfm spbm mepid 40 cfm spbm mepid 82 cfm spbm mepid 81
cfm spbm enable cfm spbm enable cfm spbm enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
SPB Interface Config

VSP8000-1

VSP4000 1/13 1/17 ERS8800


1/47 3/1
SPB
IS-IS 2/15 2/16

1/48 3/2

1/13 1/17

VSP8000-2

interface GigabitEthernet 1/47,1/48 interface GigabitEthernet 1/13


isis isis
isis spbm 1 isis spbm 1
isis hello-auth type hmac-md5 key fabricisspb key-id 111 isis hello-auth type hmac-md5 key fabricisspb key-id 111
isis enable isis enable
exit exit
interface mlt 1
isis
isis spbm 1
isis hello-auth type hmac-md5 key fabricisspb key-id 111
isis enable
exit

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
OSPF Config

VSP8000-1

VSP4000 1/13 1/17 ERS8800


1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
interface GigabitEthernet 1/17 1/17
1/13
brouter vlan 3902 subnet 192.168.255.5/30
ip ospf enable
exit VSP8000-2
router ospf prompt ERS8800
router-id 10.0.0.81 interface GigabitEthernet 3/1,3/2
exit brouter port 3/1 vlan 3902 subnet 192.168.255.6/30
router ospf enable brouter port 3/2 vlan 3901 subnet 192.168.255.2/30
ip ospf enable
interface GigabitEthernet 1/17 exit
brouter vlan 3901 subnet 192.168.255.1/30 interface loopback 1
ip ospf enable ip address 10.0.0.88/32
exit ip ospf
router ospf exit
router-id 10.0.0.82 router ospf
exit router-id 10.0.0.88
router ospf enable exit
router ospf enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Test networks config using CLIPs

VSP8000-1

VSP4000 1/13 1/17 ERS8800


1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

interface loopback 2 VSP8000-2


ip address 172.16.10.1/24
exit router isis interface loopback 2
router isis redistribute direct ip address 192.168.10.1/24
redistribute direct redistribute direct enable ip ospf
redistribute direct enable exit exit
exit isis apply redistribute direct interface loopback 3
isis apply redistribute direct ip address 192.168.20.1/24
exit
▪ Net 192.168.10.0/24 will be an OSPF intra-area route router ospf
as-boundary-router enable
▪ Net 192.168.20.0/24 will be an OSPF AS external route redistribute direct
redistribute direct enable
▪ We also redistribute directs on the VSP8000 border exit
ip ospf apply redistribute direct
routers since this will typically be the case anyway
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
ISIS & OSPF link metrics
ERS8800:5#% show ip ospf interface
================================================================================
OSPF Interface - GlobalRouter
================================================================================
INTERFACE AREA ADM IFST MET PRI DR/ TYPE AUTH MTU
ID BDR TYPE IGNO
--------------------------------------------------------------------------------
VSP8000-1 192.168.10.1 0.0.0.0 en DR 10 1 192.168.10.1 pass none dis
0.0.0.0
10.0.0.88 0.0.0.0 en DR 10 1 10.0.0.88 pass none dis
0.0.0.0
VSP4000 1/13 1/17 192.168.255.2 0.0.0.0 en DR 1 1 192.168.255.2 brdc none dis
ERS8800 192.168.255.1
1/47 10 192.168.255.6 0.0.0.0 en DR 1 1 192.168.255.6 brdc none dis
1 3/1 192.168.255.5

SPB
OSPF
IS-IS 2/15 10 2/16
1/48 10
1 3/2
10 Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP4000:1#% show isis interface


VSP8000-2 VSP8000-2:1#% show isis interface
====================================================================================================
====================================================================================================
ISIS Interfaces
ISIS Interfaces
====================================================================================================
====================================================================================================
IFIDX TYPE LEVEL OP-STATE ADM-STATE ADJ UP-ADJ SPBM-L1-METRIC
IFIDX TYPE LEVEL OP-STATE ADM-STATE ADJ UP-ADJ SPBM-L1-METRIC
----------------------------------------------------------------------------------------------------
----------------------------------------------------------------------------------------------------
Port1/47 pt-pt Level 1 UP UP 1 1 10
Port1/13 pt-pt Level 1 UP UP 1 1 10
Port1/48 pt-pt Level 1 UP UP 1 1 10
Mlt1 pt-pt Level 1 UP UP 1 1 10

VSP8000-2:1#% show ip ospf interface


VSP8000-1:1#% show isis interface ====================================================================================================
==================================================================================================== OSPF Interface - GlobalRouter
ISIS Interfaces ====================================================================================================
==================================================================================================== INTERFACE AREA ADM IFST MET PRI DR/ TYPE AUTH MTU
IFIDX TYPE LEVEL OP-STATE ADM-STATE ADJ UP-ADJ SPBM-L1-METRIC ID BDR TYPE IGNO
---------------------------------------------------------------------------------------------------- ----------------------------------------------------------------------------------------------------
Port1/13 pt-pt Level 1 UP UP 1 1 10 192.168.255.1 0.0.0.0 en BDR 1 1 192.168.255.2 brdc none dis
Mlt1 pt-pt Level 1 UP UP 1 1 10 192.168.255.1

VSP8000-1:1#% show ip ospf interface


====================================================================================================
OSPF Interface - GlobalRouter
==================================================================================================== ▪ ISIS NNI links use default SPBM L1-metric of 10
INTERFACE AREA ADM IFST MET PRI DR/ TYPE AUTH MTU
ID BDR TYPE IGNO
----------------------------------------------------------------------------------------------------
▪ OSPF interface metrics at default 1 (for Gig Ethernet)
192.168.255.5 0.0.0.0 en BDR 1 1 192.168.255.6 brdc none
192.168.255.5
dis
and 10 for CLIPs
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IP routes before ISIS  OSPF redistribution

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82


VSP4000:1#% show ip route
===================================================================================================== ERS8800:5#% show ip route
IP Route - GlobalRouter ===========================================================================================
===================================================================================================== IP Route - GlobalRouter
NH INTER ===========================================================================================
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF NH INTER
----------------------------------------------------------------------------------------------------- DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
10.0.0.40 255.255.255.255 10.0.0.40 - 1 0 LOC 0 DB 0 -------------------------------------------------------------------------------------------
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
172.16.10.0 255.255.255.0 172.16.10.1 - 1 0 LOC 0 DB 0 192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.4 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IP routes before ISIS  OSPF redistribution

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS  OSPF Redistribution - Config

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82

router isis
redistribute ospf
redistribute ospf metric-type external
redistribute ospf enable
exit
isis apply redistribute ospf

▪ We redistribute all OSPF routes into ISIS and make them of metric-type
“External”

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS  OSPF Redistribution - Checking

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82

VSP4000:1#% show ip route


=====================================================================================================
IP Route - GlobalRouter
=====================================================================================================
NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
-----------------------------------------------------------------------------------------------------

▪ So far so good 10.0.0.40


10.0.0.81
255.255.255.255 10.0.0.40
255.255.255.255 VSP8000-1
-
GlobalRouter
1
10
0
4051
LOC 0
ISIS 0
DB
IBS 7
0

10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7


10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 172.16.10.1 - 1 0 LOC 0 DB 0
192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IBS 7
192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 1 4051 ISIS 0 IBS 7
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS  OSPF Redistribution - Checking

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
ISIS Pref 7
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24 OSPF Pref 20 & 125

VSP8000-2 Clip1: 10.0.0.82


VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IBS 7
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 1 4051 ISIS 0 IBS 7
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Ok, so what’s happening here is that VSP8000-1 was slightly quicker than ▪ So VSP8000-2 replaces in its routing table the OSPF routes with the ISIS ones
VSP8000-2 in redistributing OSPF routes into ISIS ▪ Now VSP8000-2 is no longer redistributing the OSPF routes into ISIS, since it
▪ So VSP8000-2 now sees the same IP routes from both OSPF & ISIS has none in its routing table
▪ ISIS has a higher protocol preference (7 is lower than OSPF’s 20 or 125) ▪ This state of affairs remains stable in the current state, but it clearly is not
optimal
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS  OSPF Redistribution - Fixing

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

route-map "peer-externals" 1 VSP8000-2 Clip1: 10.0.0.82


match metric-type-isis external
set ip-preference 130
enable
exit
router isis
accept route-map "peer-externals"
exit
isis apply accept

▪ This ISIS Accept policy ensures that the 2 VSP8000 border routers will only accept ISIS “External” routes with a
modified preference of 130 (instead of SPB’s default preference 7)
▪ OSPF routes have preference levels ranging between 20, 25,120 or 125 (depending on OSPF route type)
▪ Hence we are ensuring that the border routers will never install ISIS External routes (from each other) as long as
they have the original OSPF routes
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS  OSPF Redistribution – Checking again

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Looking good now for both VSP8000 border routers


©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS  OSPF Redistribution – Checking accepted ISIS External
routes
VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82


VSP8000-1:1#% show ip route alternative VSP8000-2:1#% show ip route alternative
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
10.0.0.88 255.255.255.255 VSP8000-2 GlobalRouter 11 4051 ISIS 0 IAS 130 10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IAS 130
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.10.0 255.255.255.0 VSP8000-2 GlobalRouter 11 4051 ISIS 0 IAS 130 192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IAS 130
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.20.0 255.255.255.0 VSP8000-2 GlobalRouter 1 4051 ISIS 0 IAS 130 192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 1 4051 ISIS 0 IAS 130
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.0 255.255.255.252 192.168.255.6 GlobalRouter 2 1/17 OSPF 0 IA 20 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 192.168.255.2 GlobalRouter 2 1/17 OSPF 0 IA 20

▪ Here we see that the border VSP8000s learn from each other the already redistributed OSPF routes as ISIS External routes, but
our Accept policy ensures they get a preference of 130 (in orange) which ensures that these will not displace the preferred OSPF
route
©2017 Extreme(in green)
Networks, Inc. All and
©2017 rights
Extremeremain
reserved thus
Networks, Inc. asreserved
All rights alternative routes; we will come back to alternative routes as they present problems…
IS-IS  OSPF Redistribution – Checking

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82

VSP4000:1#% show ip route


=====================================================================================================
IP Route - GlobalRouter
=====================================================================================================

▪ No change here,
NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
-----------------------------------------------------------------------------------------------------
still looking good 10.0.0.40
10.0.0.81
255.255.255.255 10.0.0.40
255.255.255.255 VSP8000-1
-
GlobalRouter
1
10
0
4051
LOC 0
ISIS 0
DB
IBS 7
0

10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7


▪ We will enable 10.0.0.88
172.16.10.0
255.255.255.255 VSP8000-1
255.255.255.0 172.16.10.1
GlobalRouter
-
11
1
4051
0
ISIS 0
LOC 0
IBS 7
DB 0
192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IBS 7
IP ECMP later 192.168.20.0
192.168.255.0
255.255.255.0 VSP8000-1
255.255.255.252 VSP8000-2
GlobalRouter
GlobalRouter
1
10
4051
4051
ISIS 0
ISIS 0
IBS 7
IBS 7
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS  OSPF Redistribution – Checking

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
VSP4000:1#% show isis lsdb ip-unicast
====================================================================================================
ISIS IP-UNICAST-ROUTE SUMMARY VSP8000-2 Clip1: 10.0.0.82
====================================================================================================
PREFIX METRIC TLV LSP HOST VSP8000-1:1#% show ip route
I-SID ADDRESS LENGTH METRIC TYPE TYPE FRAG NAME =====================================================================================================
-------------------------------------------------------------------------------- IP Route - GlobalRouter
- 10.0.0.40 32 1 Internal 135 0x2 VSP4000 =====================================================================================================
- 172.16.10.0 24 1 Internal 135 0x2 VSP4000 NH INTER
- 10.0.0.81 32 1 Internal 135 0x2 VSP8000-1 DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
- 192.168.255.4 30 1 Internal 135 0x2 VSP8000-1 -----------------------------------------------------------------------------------------------------
- 10.0.0.88 32 11 External 135 0x2 VSP8000-1 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
- 192.168.10.0 24 11 External 135 0x2 VSP8000-1 VSP8000-2:1#% 10.0.0.81
show ip route 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0
- 192.168.20.0 24 1 External 135 0x2 VSP8000-1 =====================================================================================================
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
- 10.0.0.82 32 1 Internal 135 0x2 VSP8000-2 10.0.0.88 IP Route
255.255.255.255 - GlobalRouter
192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20
- 192.168.255.0 30 1 Internal 135 0x2 VSP8000-2 =====================================================================================================
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
- 10.0.0.88 32 11 External 135 0x2 VSP8000-2 192.168.10.0 255.255.255.0 NH
192.168.255.6 INTER 11
GlobalRouter 1/17 OSPF 0 IB 20
- 192.168.10.0 24 11 External 135 0x2 VSP8000-2 DST MASK
192.168.20.0 NEXT
255.255.255.0 VRF/ISID
192.168.255.6 COST FACE
GlobalRouter 1 PROT 1/17
AGE TYPE OSPF
PRF 0 IB 125
- 192.168.20.0 24 1 External 135 0x2 VSP8000-2 -----------------------------------------------------------------------------------------------------
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.40 255.255.255.255
192.168.255.4 VSP4000
255.255.255.252 GlobalRouter - 10
192.168.255.5 4051 1 ISIS 1/17
0 IBS LOC
7 0 DB 0
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
▪ OSPF routes are marked as External routes in the ISIS LSDB 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
▪ Note how the original route cost is used as the ISIS route metric 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
– This metric is only used as a tie breaker for Internal routes, but 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
becomes the primary route selection metric for External routes
192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
(though not relevant to this particular use case) 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS  OSPF Redistribution – Checking

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
IP routes Net 192.168.20.0/24
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24
VSP4000:1#% show isis spbm ip-unicast-fib all
==================================================================================================================================
VSP8000-2 Clip1: 10.0.0.82 SPBM IP-UNICAST FIB ENTRY INFO
==================================================================================================================================

▪ This table shows all the ISIS IP VRF


VRF
ISID
DEST
ISID Destination NH BEB
OUTGOING
VLAN INTERFACE
SPBM
COST
PREFIX
COST
PREFIX
TYPE
IP ROUTE
PREFERENCE
----------------------------------------------------------------------------------------------------------------------------------
routes installed in the VSP4000 GRT - - 10.0.0.81/32 VSP8000-1 4051 1/47 10 1 Internal 7
GRT - - 10.0.0.81/32 VSP8000-1 4052 1/47 10 1 Internal 7
IP routing table GRT - - 10.0.0.82/32 VSP8000-2 4051 1/48 10 1 Internal 7
GRT - - 10.0.0.82/32 VSP8000-2 4052 1/48 10 1 Internal 7
▪ For each route the SPB shortest GRT
GRT
-
-
-
-
10.0.0.88/32
10.0.0.88/32
VSP8000-1
VSP8000-1
4051 1/47
4052 1/47
10
10
11
11
External 7
External 7
path outgoing interface is shown GRT
GRT
-
-
-
-
10.0.0.88/32
10.0.0.88/32
VSP8000-2
VSP8000-2
4051 1/48
4052 1/48
10
10
11
11
External 7
External 7
as well as metrics: GRT
GRT
-
-
-
-
192.168.10.0/24
192.168.10.0/24
VSP8000-1
VSP8000-1
4051 1/47
4052 1/47
10
10
11
11
External 7
External 7
– SPBM Cost = Internal Metric GRT
GRT
-
-
-
-
192.168.10.0/24
192.168.10.0/24
VSP8000-2
VSP8000-2
4051 1/48
4052 1/48
10
10
11
11
External 7
External 7

– Prefix Cost = External Metric GRT


GRT
-
-
-
-
192.168.20.0/24
192.168.20.0/24
VSP8000-1
VSP8000-1
4051 1/47
4052 1/47
10
10
1
1
External 7
External 7

– Prefix Type = Internal / GRT


GRT
-
-
-
-
192.168.20.0/24
192.168.20.0/24
VSP8000-2
VSP8000-2
4051 1/48
4052 1/48
10
10
1
1
External 7
External 7
GRT - - 192.168.255.0/30 VSP8000-2 4051 1/48 10 1 Internal 7
External GRT - - 192.168.255.0/30 VSP8000-2 4052 1/48 10 1 Internal 7

– Route Preference GRT


GRT
-
-
-
-
192.168.255.4/30
192.168.255.4/30
VSP8000-1
VSP8000-1
4051 1/47
4052 1/47
10
10
1
1
Internal 7
Internal 7

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ OSPF Redistribution - Config

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 IP routes 1/17


ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82 route-map isis-internal 1


match metric-type-isis internal
enable
exit
router ospf
▪ In the reverse direction, we now redistribute only IS-IS Internal routes into as-boundary-router enable
OSPF redistribute isis
– OSPF routes were redistributed into ISIS as External routes, so by redistributing redistribute isis route-map isis-internal
only ISIS Internal routes into OSPF we can be sure that no IP route which redistribute isis enable
originated from OSPF will ever be reflected back into OSPF exit
▪ NOTE: VSP8000-1 & VSP8000-2 need to be OSPF ASBRs ip ospf apply redistribute isis

▪ NOTE: In older versions of VOSS software the command to assign a route-


map to an OSPF redistribution was “redistribute <proto> route-policy” and not
“redistribute <proto> route-map”

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ OSPF Redistribution - Checking

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 IP routes 1/17


ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

▪ Looking good on OSPF side VSP8000-2 Clip1: 10.0.0.82


▪ Note how all the ISIS redistributed routes
are seen as OSPF LSA5 external routes
ERS8800:5#% show ip route
===========================================================================================
IP Route - GlobalRouter
ERS8800:5#% show ip ospf ase ===========================================================================================
================================================================================ NH INTER
OSPF AsExternal Lsas - GlobalRouter DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
================================================================================ -------------------------------------------------------------------------------------------
LSTYPE LINKSTATEID ADV_ROUTER ETYPE METRIC ASE_FWD_ADDR AGE SEQ_NBR CSUM
10.0.0.40 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IB 125
-------------------------------------------------------------------------------- 10.0.0.81 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
AsExternal 10.0.0.40 10.0.0.81 2 10 0.0.0.0 359 0x80000001 0xf04a
10.0.0.82 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IB 125
AsExternal 10.0.0.40 10.0.0.82 2 10 0.0.0.0 349 0x80000001 0xea4f
10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
AsExternal 10.0.0.81 10.0.0.82 2 10 0.0.0.0 349 0x80000001 0x4fc1
172.16.10.0 255.255.255.0 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IB 125
AsExternal 10.0.0.82 10.0.0.81 2 10 0.0.0.0 359 0x80000001 0x4bc5
192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
AsExternal 172.16.10.0 10.0.0.81 2 10 0.0.0.0 359 0x80000001 0x1195
192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
AsExternal 172.16.10.0 10.0.0.82 2 10 0.0.0.0 349 0x80000001 0xb9a
192.168.255.0 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
AsExternal 192.168.20.0 10.0.0.88 2 1 0.0.0.0 333 0x80000002 0x3bf4
192.168.255.4 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0
AsExternal 192.168.255.0 10.0.0.81 2 10 0.0.0.0 359 0x80000001 0x41c5
AsExternal 192.168.255.4 10.0.0.82 2 10 0.0.0.0 349 0x80000001 0x13ee
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ OSPF Redistribution - Checking

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 IP routes 1/17


ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ It would seem all is looking good on the border routers… but not quite….
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ OSPF Redistribution - Checking

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 IP routes 1/17


ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82


VSP8000-1:1#% show ip route alternative VSP8000-2:1#% show ip route alternative
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.40 255.255.255.255 192.168.255.6 GlobalRouter 10 1/17 OSPF 0 IA 125 10.0.0.40 255.255.255.255 192.168.255.2 GlobalRouter 10 1/17 OSPF 0 IA 125
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
10.0.0.88 255.255.255.255 VSP8000-2 GlobalRouter 11 4051 ISIS 0 IAS 130 10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IAS 130
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 192.168.255.6 GlobalRouter 10 1/17 OSPF 0 IA 125 172.16.10.0 255.255.255.0 192.168.255.2 GlobalRouter 10 1/17 OSPF 0 IA 125
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.10.0 255.255.255.0 VSP8000-2 GlobalRouter 11 4051 ISIS 0 IAS 130 192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IAS 130
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.20.0 255.255.255.0 VSP8000-2 GlobalRouter 1 4051 ISIS 0 IAS 130 192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 1 4051 ISIS 0 IAS 130
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.0 255.255.255.252 192.168.255.6 GlobalRouter 2 1/17 OSPF 0 IA 20 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

192.168.255.4 Alternative routes are kept ready to be installed should the active route go away
255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 192.168.255.2 GlobalRouter 2 1/17 OSPF 0 IA 20

▪ The alternative routes in red are not good to have, because they will simply result in rapid route flapping (more on next slide)
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ OSPF Redistribution - Fixing

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 IP routes 1/17


ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

no ip alternative-route VSP8000-2 Clip1: 10.0.0.82

▪ ISIS routes are preferred over OSPF ones, so the “alternative” OSPF routes that the VSP8000s learn
from each other for ISIS networks that have been re-distributed into OSPF will not get installed
▪ However, if those ISIS routes were to become unavailable (e.g. reboot of VSP4000) then both
VSP8000s would immediately remove the ISIS routes and replace them with these alternative OSPF
routes, which would cause a temporary route flapping, with both VSP8000s temporarily announcing
those routes back into ISIS (which is where they originated from!)
– Same applies in reverse, for OSPF routes advertised into ISIS, for which we have upped the preference
to 130
▪ The best approach is to simply disable alternative IP routes on the border routers, which is what we
are doing here. This approach will also work with a RIP or BGP cloud
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ OSPF Redistribution – Checking again

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 IP routes 1/17


ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
IP routes
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82


VSP8000-1:1#% show ip route alternative VSP8000-2:1#% show ip route alternative
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Looking much better now (we got rid of all alternative routes)
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Enabling ECMP - Config

VSP8000-1 Clip1: 10.0.0.81

IP routes
Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88
IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
IP routes
Net 172.16.10.0/24 1/13 IP routes 1/17 Net 192.168.10.0/24

VSP8000-2 Clip1: 10.0.0.82

ip ecmp

▪ Cherry on the cake, lets turn on IP ECMP

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Enabling ECMP - Checking

VSP8000-1 Clip1: 10.0.0.81

IP routes
Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88
IP routes
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
IP routes
Net 172.16.10.0/24 1/13 IP routes 1/17 Net 192.168.10.0/24
VSP4000:1#% show ip route
=====================================================================================================
IP Route - GlobalRouter VSP8000-2 Clip1: 10.0.0.82
=====================================================================================================
NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF ERS8800:5#% show ip route
----------------------------------------------------------------------------------------------------- ===========================================================================================
10.0.0.40 255.255.255.255 10.0.0.40 - 1 0 LOC 0 DB 0 IP Route - GlobalRouter
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBSE 7 ===========================================================================================
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4052 ISIS 0 IBSE 7 NH INTER
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBSE 7 DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4052 ISIS 0 IBSE 7 -------------------------------------------------------------------------------------------
10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IBSE 7 10.0.0.40 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IBE 125
10.0.0.88 255.255.255.255 VSP8000-2 GlobalRouter 11 4051 ISIS 0 IBSE 7 10.0.0.40 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IBE 125
10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 11 4052 ISIS 0 IBSE 7 10.0.0.81 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
10.0.0.88 255.255.255.255 VSP8000-2 GlobalRouter 11 4052 ISIS 0 IBSE 7 10.0.0.82 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IB 125
172.16.10.0 255.255.255.0 172.16.10.1 - 1 0 LOC 0 DB 0 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IBSE 7 172.16.10.0 255.255.255.0 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IBE 125
192.168.10.0 255.255.255.0 VSP8000-2 GlobalRouter 11 4051 ISIS 0 IBSE 7 172.16.10.0 255.255.255.0 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IBE 125
192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 11 4052 ISIS 0 IBSE 7 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
192.168.10.0 255.255.255.0 VSP8000-2 GlobalRouter 11 4052 ISIS 0 IBSE 7 192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 1 4051 ISIS 0 IBSE 7 192.168.255.0 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
192.168.20.0 255.255.255.0 VSP8000-2 GlobalRouter 1 4051 ISIS 0 IBSE 7 192.168.255.4 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0
192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 1 4052 ISIS 0 IBSE 7
192.168.20.0
192.168.255.0
255.255.255.0 VSP8000-2
255.255.255.252 VSP8000-2
GlobalRouter
GlobalRouter
1
10
4052
4051
ISIS 0
ISIS 0
IBSE 7
IBSE 7
▪ We get 4-way ECMP on VSP4000 and 2-way
192.168.255.0
192.168.255.4
255.255.255.252 VSP8000-2
255.255.255.252 VSP8000-1
GlobalRouter
GlobalRouter
10
10
4052
4051
ISIS 0
ISIS 0
IBSE 7
IBSE 7
ECMP on the ERS8800
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4052 ISIS 0 IBSE 7
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Testing failure on border router OSPF link

VSP8000-1 Clip1: 10.0.0.81

IP routes
Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88
IP routes
1/47 3/1
interface gigabitEthernet 1/17
shutdown SPB
OSPF
exit IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
IP routes
Net 172.16.10.0/24 1/13 IP routes 1/17 Net 192.168.10.0/24

VSP8000-2 Clip1: 10.0.0.82

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IBS 130
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 11 4051 ISIS 0 IBS 130
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 1 4051 ISIS 0 IBS 130
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Note that now VSP8000-2 has installed the ISIS External routes from VSP8000-1

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Additional (optional!) Challenge
Aggregating ISIS routes and injecting a summarized route into
OSPF

Summarized route

IP routes

SPB IS-IS OSPF, RIP or BGP


Fabric IP Routes External IP Routes

IP routes

Summarized route

▪ Let us assume that we have many ISIS IP routes but that we do not
want to advertise all of them into OSPF
▪ Instead we want to aggregate ISIS IP routes and inject into
OSPF/RIP/BGP a single (or a few) summarized prefixes

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Aggregating ISIS routes and injecting a summarized route into
OSPF - Prep
VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

Net 172.16.40.0/24 1/48 3/2


Net 192.168.20.0/24

Net 172.16.30.0/24 1/13 1/17 Net 192.168.10.0/24

Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24

interface loopback 3
ip address 172.16.20.1/24
exit
▪ Here we create some extra IP networks on
interface loopback 4
ip address 172.16.30.1/24
VSP4000 in the 172.16.0.0/16 range
exit
interface loopback 5
ip address 172.16.40.1/24
exit

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Aggregating ISIS routes and injecting a summarized route into
OSPF - Prep
VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17 ERS8800 Clip1: 10.0.0.88


1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

Net 172.16.40.0/24 1/48 3/2


Net 192.168.20.0/24

Net 172.16.30.0/24 1/13 1/17 Net 192.168.10.0/24

Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24
VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.20.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.20.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.30.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.30.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.40.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.40.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Here we create some extra IP networks on VSP4000 in the 172.16.0.0/16 range


©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Aggregating ISIS routes and injecting a summarized route into
OSPF - Config
VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17


172.16.0.0/16 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

Net 172.16.40.0/24 1/48 3/2


Net 192.168.20.0/24
172.16.0.0/16
Net 172.16.30.0/24 1/13 1/17 Net 192.168.10.0/24

Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24
▪ We replace our original “isis-internal” route-map with a new route-map for the ip prefix-list net172 172.16.0.0/16 ge 16 le 32
existing ISIS ➔ OSPF redistribution route-map "isis-internal-aggregate" 1
– Route-map sequence 1: any ISIS Internal route falling within 172.16.0.0/16 will match metric-type-isis internal
be aggregated and only the prefix 172.16.0.0/16 will be advertised instead match network "net172"
– Route-map sequence 2: any other ISIS Internal route will be advertised as set injectlist "net172"
before enable
exit
▪ We are also taking the pre-caution of configuring a corresponding static black- route-map "isis-internal-aggregate" 2
hole route for 172.16.0.0/16 on the VSP8000s with a preference of 8 match metric-type-isis internal
– This is a good idea whenever aggregating IP routes. There are 254 possible enable
Class C routes within 172.16.0.0/16, but we only have 4 active. If the exit
VSP8000s had a default route in their routing table and the OSPF cloud router ospf
started forwarding traffic for network 172.16.100.100, this traffic would go into a
redistribute isis route-map "isis-internal-aggregate"
routing loop until expiry of IP TTL. The static black hole route will prevent this
from happening. exit
ip ospf apply redistribute isis
– We set a preference of 8 so that should the prefix 172.16.0.0/16 be ISIS ip route 172.16.0.0 255.255.0.0 255.255.255.255 weight 65535 preference 8
advertised by some other BEB in the ISIS cloud, this will have a higher
preference of 7 and will automatically replace the static black-hole route
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Aggregating ISIS routes and injecting a summarized route into
OSPF - Checking
VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17


172.16.0.0/16 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

Net 172.16.40.0/24 1/48 3/2


Net 192.168.20.0/24
172.16.0.0/16
Net 172.16.30.0/24 1/13 1/17 Net 192.168.10.0/24

Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24
VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.0.0 255.255.0.0 255.255.255.255 - 65535 0 STAT 0 IB 8 172.16.0.0 255.255.0.0 255.255.255.255 - 65535 0 STAT 0 IB 8
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.20.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.20.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.30.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.30.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.40.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.40.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Only change visible here is the appearance of the black-hole static route
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Aggregating ISIS routes and injecting a summarized route
into OSPF - Checking
VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17


172.16.0.0/16 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

Net 172.16.40.0/24 1/48 3/2


Net 192.168.20.0/24
172.16.0.0/16
Net 172.16.30.0/24 1/13 1/17 Net 192.168.10.0/24

Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24 ERS8800:5#% show ip route
===========================================================================================
▪ We see that the only the aggregated 172.16.0.0/16 IP Route - GlobalRouter
was redistributed as an OSPF LSA5 external route ===========================================================================================
NH INTER
by each border router DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
ERS8800:5#% show ip ospf ase -------------------------------------------------------------------------------------------
================================================================================ 10.0.0.40 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IBE 125
OSPF AsExternal Lsas - GlobalRouter 10.0.0.40 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IBE 125
================================================================================ 10.0.0.81 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
LSTYPE LINKSTATEID ADV_ROUTER ETYPE METRIC ASE_FWD_ADDR AGE SEQ_NBR 10.0.0.82
CSUM 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IB 125
-------------------------------------------------------------------------------- 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
AsExternal 10.0.0.40 10.0.0.81 2 10 0.0.0.0 172.16.0.0
1070 0x80000001 0xf04a 255.255.0.0 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IBE 125
AsExternal 10.0.0.40 10.0.0.82 2 10 0.0.0.0 172.16.0.0
1070 0x80000001 0xea4f 255.255.0.0 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IBE 125
AsExternal 10.0.0.81 10.0.0.82 2 10 0.0.0.0 192.168.10.0
1070 0x80000001 0x4fc1 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
AsExternal 10.0.0.82 10.0.0.81 2 10 0.0.0.0 192.168.20.0
1070 0x80000001 0x4bc5 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
AsExternal 172.16.0.0 10.0.0.81 2 10 0.0.0.0 192.168.255.0
1070 0x80000002 0x7d32 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
AsExternal 172.16.0.0 10.0.0.82 2 10 0.0.0.0 192.168.255.4
1069 0x80000002 0x7737 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0
AsExternal 192.168.20.0 10.0.0.88 2 1 0.0.0.0 1184 0x80000004 0x37f6
AsExternal 192.168.255.0 10.0.0.81 2 10 0.0.0.0 1070 0x80000001 0x41c5 ▪ And we see the aggregated route on the OSPF side
AsExternal 192.168.255.4 10.0.0.82 2 10 0.0.0.0 1070 0x80000001 0x13ee
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Aggregating ISIS routes and injecting a summarized route into
OSPF – Testing
VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17


172.16.0.0/16 ERS8800 Clip1: 10.0.0.88
1/47 3/1
interface gigabitEthernet 1/13,2/15,2/16
shutdown SPB
OSPF
exit IS-IS 2/15 2/16

Net 172.16.40.0/24 1/48 3/2


Net 192.168.20.0/24
172.16.0.0/16
Net 172.16.30.0/24 1/13 1/17 Net 192.168.10.0/24

Net 172.16.20.0/24
VSP8000-2 Clip1: 10.0.0.82
Net 172.16.10.0/24
▪ As expected VSP8000-1 stops ERS8800:5#% show ip route
===========================================================================================
announcing the aggregated route as it IP Route - GlobalRouter
===========================================================================================
no longer has any ISIS Internal routes NH INTER
DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
matching the 172.16.0.0/24 range -------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
ERS8800:5#% show ip ospf ase 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
================================================================================ 172.16.0.0 255.255.0.0 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
OSPF AsExternal Lsas - GlobalRouter 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
================================================================================ 192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
LSTYPE LINKSTATEID ADV_ROUTER ETYPE METRIC ASE_FWD_ADDR 192.168.255.0
AGE SEQ_NBR CSUM 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
-------------------------------------------------------------------------------- 192.168.255.4 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0
AsExternal 10.0.0.40 10.0.0.82 2 10 0.0.0.0 1521 0x80000001 0xea4f
AsExternal 172.16.0.0 10.0.0.82 2 10 0.0.0.0 1520 0x80000002 0x7737
AsExternal 192.168.20.0 10.0.0.88 2 1 0.0.0.0 1635 0x80000004 0x37f6

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Additional (optional!) Challenge
Only injecting a default route into OSPF

default route

IP routes

SPB IS-IS OSPF, RIP or BGP


Fabric IP Routes External IP Routes

IP routes

default route

▪ Let us assume that SPB is the core network and that we only want to
inject a default route into the other OSPF/BGP/RIP cloud
– Rather than redistributing all ISIS IP routes available

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Only injecting a default route into OSPF - Config

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17


default route ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82


▪ We replace our original “isis-internal” route-map with a new route-map
ip prefix-list "default" 0.0.0.0/0
for the existing ISIS ➔ OSPF redistribution route-map "inject-default" 1
▪ The route-map policy will match any (ISIS) route but replace it with set injectlist "default"
(inject) a default route enable
exit
– Should one of the VSP8000 remain isolated from the SPB Fabric, then it router ospf
will have no ISIS routes to redistribute and will cease to announce a redistribute isis route-policy "inject-default"
default route into OSPF exit
▪ We are also taking the pre-caution of configuring a corresponding ip ospf apply redistribute isis
default static black-hole route on the VSP8000s with a preference of 8 ip route 0.0.0.0 0.0.0.0 255.255.255.255 weight 65535 preference 8

– If a valid ISIS default route exists, this will have a higher preference of 7
and will replace the static black-hole default route
– If a valid ISIS default route does not exist, then any traffic received from
OSPF (after following the default route to SPB) which cannot be handled
via more specific routes, will be dropped on the VSP8000s

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Only injecting a default route into OSPF - Checking

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17


default route ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 255.255.255.255 - 65535 0 STAT 0 IB 8 0.0.0.0 0.0.0.0 255.255.255.255 - 65535 0 STAT 0 IB 8
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Only change visible here is the appearance of the default black-hole route
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Only injecting a default route into OSPF - Checking

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17


default route ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
OSPF
IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

▪ Now we only see a default route on the VSP8000-2 Clip1: 10.0.0.82


OSPF side
▪ And only a default route was ERS8800:5#% show ip route
===========================================================================================
redistributed as an OSPF LSA5 external IP Route - GlobalRouter
===========================================================================================
route by each border router NH INTER
DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
-------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IBE 125
ERS8800:5#% show ip ospf ase 0.0.0.0 0.0.0.0 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IBE 125
================================================================================ 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
OSPF AsExternal Lsas - GlobalRouter 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
================================================================================ 192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
LSTYPE LINKSTATEID ADV_ROUTER ETYPE METRIC ASE_FWD_ADDR 192.168.255.0
AGE SEQ_NBR CSUM 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
-------------------------------------------------------------------------------- 192.168.255.4 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0
AsExternal 0.0.0.0 10.0.0.81 2 10 0.0.0.0 321 0x80000001 0x568
AsExternal 0.0.0.0 10.0.0.82 2 10 0.0.0.0 309 0x80000001 0xfe6d
AsExternal 192.168.20.0 10.0.0.88 2 1 0.0.0.0 1274 0x80000009 0x2dfb

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Only injecting a default route into OSPF – Testing

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17


default route ERS8800 Clip1: 10.0.0.88
1/47 3/1
interface gigabitEthernet 1/13,2/15,2/16
shutdown SPB
OSPF
exit IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

▪ As expected VSP8000-1 VSP8000-2 Clip1: 10.0.0.82

stops announcing the default ERS8800:5#% show ip route


===========================================================================================

route into OSPF once it IP Route - GlobalRouter


===========================================================================================
NH INTER
looses all its ISIS routes DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
-------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
ERS8800:5#% show ip ospf ase 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
================================================================================ 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
OSPF AsExternal Lsas - GlobalRouter 192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
================================================================================ 192.168.255.0 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
LSTYPE LINKSTATEID ADV_ROUTER ETYPE METRIC ASE_FWD_ADDR 192.168.255.4
AGE SEQ_NBR CSUM 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0
--------------------------------------------------------------------------------
AsExternal 0.0.0.0 10.0.0.82 2 10 0.0.0.0 463 0x80000001 0xfe6d
AsExternal 192.168.20.0 10.0.0.88 2 1 0.0.0.0 1428 0x80000009 0x2dfb

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Only injecting a default route into OSPF – Testing

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17


default route ERS8800 Clip1: 10.0.0.88
1/47 3/1
default SPB
default route OSPF
route IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82


ip prefix-list "default" 0.0.0.0/0
route-map default-only 1
match network default
▪ In this test we are going to create a default route in the
enable SPB Fabric such that the border VSP8000s will see a
exit default ISIS route
router isis
redistribute static
– To simulate this we are simply creating a default static
redistribute static route-map default-only black-hole route on VSP4000 and redistributing it into
redistribute static enable ISIS
exit ▪ The expectation is that this new ISIS default route will
isis apply redistribute static
ip route 0.0.0.0 0.0.0.0 255.255.255.255 weight 10 replace the black-hole routes which we had created on
the VSP8000s and that there is no change or impact to
the OSPF route already announced into OSPF

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Only injecting a default route into OSPF – Testing

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17


default route ERS8800 Clip1: 10.0.0.88
1/47 3/1
default SPB
default route OSPF
route IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82


VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 0.0.0.0 0.0.0.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Note that we now have an ISIS default route to VSP4000


▪ This has replaced the default black-hole static route we had before
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Only injecting a default route into OSPF – Testing

VSP8000-1 Clip1: 10.0.0.81

Clip1: 10.0.0.40 VSP4000 1/13 1/17


default route ERS8800 Clip1: 10.0.0.88
1/47 3/1
default SPB
default route OSPF
route IS-IS 2/15 2/16

1/48 3/2
Net 192.168.20.0/24
default route
1/13 1/17 Net 192.168.10.0/24
Net 172.16.10.0/24

VSP8000-2 Clip1: 10.0.0.82


▪ We still have our
ERS8800:5#% show ip route
default route ===========================================================================================
IP Route - GlobalRouter

announced into OSPF ===========================================================================================

DST MASK NEXT


NH
VRF
INTER
COST FACE PROT AGE TYPE PRF
-------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IBE 125
ERS8800:5#% show ip ospf ase 0.0.0.0 0.0.0.0 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IBE 125
================================================================================ 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
OSPF AsExternal Lsas - GlobalRouter 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
================================================================================ 192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
LSTYPE LINKSTATEID ADV_ROUTER ETYPE METRIC ASE_FWD_ADDR 192.168.255.0
AGE SEQ_NBR CSUM 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
-------------------------------------------------------------------------------- 192.168.255.4 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0
AsExternal 0.0.0.0 10.0.0.81 2 10 0.0.0.0 785 0x8000000b 0xf072
AsExternal 0.0.0.0 10.0.0.82 2 10 0.0.0.0 1406 0x8000000a 0xec76
AsExternal 192.168.20.0 10.0.0.88 2 1 0.0.0.0 587 0x80000013 0x1906

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Routing between ISIS (SPB) and other IP routing
protocols with many redundant boundaries

Leveraging IS-IS Accept policies + IS-IS External routes

©2017 Extreme Networks, Inc. All rights reserved


Routing between ISIS (SPB) and other protocols with many
boundaries

IP routes IP routes
IP routes IP routes

OSPF, RIP or BGP SPB IS-IS OSPF, RIP or BGP


External IP Routes Fabric IP Routes External IP Routes

IP routes IP routes
IP routes IP routes

▪ We now have an SPB ISIS Core and a number (>1) of satellite networks running a different IP routing protocol
▪ GOAL = IP route across all the clouds
– OSPF, RIP or BGP routes from all the satellite clouds are redistributed into ISIS
– SPB (ISIS) Fabric IP routes are redistributed in the opposite direction
– IP routes from one satellite cloud need to be redistributed into the other satellite clouds
– Two border routers are used for redundancy on each boundary, and both can forward traffic at the same time
▪ CHALLENGE = not to get into routing loops where the IP routes redistributed by one router in one direction end
up being re-redistributed to the same cloud where they came from by the other router on the same boundary
▪ These slides will use an OSPF Cloud on one side and a RIP one on the other; the same config and principles
will equally work for BGP

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Setup, Equipment & Software used

VSP4000-1 VSP8000-1

1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

VSP4000-2 VSP8000-2

▪ VSP4000-C ▪ VSP8000-1
– VSP 4850GTS / 6.1.0.0_B021 – VSP 8404 / 6.1.0.0_B021
▪ VSP4000-1, VSP4000-2 ▪ Slot1 8424GT
– VSP 4850GTS-PWR+ / 6.1.0.0_B021 ▪ Slot2 8418XSQ
▪ ERS8800 ▪ VSP8000-2
– 7.2.25.0GA – VSP 8242XSQ / 6.1.0.0_B021

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Port Config

VSP4000-1 VSP8000-1

1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1

1/48 2/16

1/48 3/2

1/19 1/17
1/47 1/13

VSP4000-2 VSP8000-2
vlan members remove 1 1/47,1/48
interface gigabitEthernet 1/47,1/48 no spanning-tree stp 1 ports 3/1,3/2
no shutdown interface gigabitEthernet 3/1,3/2
no spanning-tree mstp no shutdown
exit exit

vlan members remove 1 1/19,1/47,1/48 vlan members remove 1 1/13,1/17,2/16


interface gigabitEthernet 1/19,1/47,1/48 interface gigabitEthernet 1/13,1/17,2/16
no shutdown no shutdown
no spanning-tree mstp no spanning-tree mstp
exit exit

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
SPB Global Config

VSP4000-1 VSP8000-1
prompt VSP8000-1
prompt VSP4000-1
interface loopback 1
1/47 1/13 interface loopback 1
VSP4000-C 1/19 1/17 ERS8800 ip address 10.0.0.81/32
ip address 10.0.0.41/32
exit
exit 1/47 3/1 spbm
spbm
router isis SPB router isis
1/48 2/16 system-id 00bb.0000.8100
system-id 00bb.0000.4100 IS-IS manual-area 49.0000
manual-area 49.0000
ip-source-address 10.0.0.81
ip-source-address 10.0.0.41 1/48 3/2 spbm 1
spbm 1
spbm 1 nick-name 0.00.81
spbm 1 nick-name 0.00.41 1/19 1/17 spbm 1 b-vid 4051-4052 primary 4051
spbm 1 b-vid 4051-4052 primary 4051 1/47 1/13 spbm 1 ip enable
spbm 1 ip enable
exit
exit
VSP4000-2 VSP8000-2 vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan
router isis enable
router isis enable
cfm spbm mepid 81
cfm spbm mepid 41 prompt VSP4000-2 prompt VSP8000-2 cfm spbm enable
cfm spbm enable interface loopback 1 interface loopback 1
ip address 10.0.0.42/32 ip address 10.0.0.82/32
exit exit
spbm spbm
router isis router isis
system-id 00bb.0000.4200 system-id 00bb.0000.8200
manual-area 49.0000 manual-area 49.0000
ip-source-address 10.0.0.42 ip-source-address 10.0.0.82
spbm 1 spbm 1
spbm 1 nick-name 0.00.42 spbm 1 nick-name 0.00.82
spbm 1 b-vid 4051-4052 primary 4051 spbm 1 b-vid 4051-4052 primary 4051
spbm 1 ip enable spbm 1 ip enable
exit exit
vlan create 4051 name "B-VLAN-1" type spbm-bvlan vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan vlan create 4052 name "B-VLAN-2" type spbm-bvlan
router isis enable router isis enable
cfm spbm mepid 42 cfm spbm mepid 82
cfm spbm enable cfm spbm enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
SPB Interface Config

VSP4000-1 VSP8000-1

1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1
SPB
1/48 2/16
IS-IS
1/48 3/2

1/19 1/17
1/47 1/13

VSP4000-2 VSP8000-2

interface GigabitEthernet 1/47,1/48 interface GigabitEthernet 1/13,2/16


isis isis
isis spbm 1 isis spbm 1
isis hello-auth type hmac-md5 key fabricisspb key-id 111 isis hello-auth type hmac-md5 key fabricisspb key-id 111
isis enable isis enable
exit exit

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
OSPF Config

VSP4000-1 VSP8000-1

1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1
SPB
1/48 2/16 OSPF
IS-IS
1/48 3/2

1/19 1/17
interface GigabitEthernet 1/17 1/47 1/13
brouter vlan 3902 subnet 192.168.255.5/30
ip ospf enable VSP4000-2 VSP8000-2
exit prompt ERS8800
router ospf interface GigabitEthernet 3/1,3/2
router-id 10.0.0.81 brouter port 3/1 vlan 3902 subnet 192.168.255.6/30
exit brouter port 3/2 vlan 3901 subnet 192.168.255.2/30
router ospf enable ip ospf enable
exit
interface GigabitEthernet 1/17 interface loopback 1
brouter vlan 3901 subnet 192.168.255.1/30 ip address 10.0.0.88/32
ip ospf enable ip ospf
exit exit
router ospf router ospf
router-id 10.0.0.82 router-id 10.0.0.88
exit exit
router ospf enable router ospf enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
RIP Config

VSP4000-1 VSP8000-1

1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1
SPB
RIP 1/48 2/16
IS-IS
1/48 3/2

1/19 1/17
1/47 1/13

VSP4000-2 VSP8000-2 interface GigabitEthernet 1/19


brouter vlan 3902 subnet 172.16.255.5/30
ip rip enable
prompt VSP4000-C ip rip receive version rip2
interface GigabitEthernet 1/47,1/48 ip rip send version rip2
brouter port 1/47 vlan 3902 subnet 172.16.255.6/30 exit
brouter port 1/48 vlan 3901 subnet 172.16.255.2/30 router rip enable
ip rip enable
ip rip receive version rip2 interface GigabitEthernet 1/19
ip rip send version rip2 brouter vlan 3901 subnet 172.16.255.1/30
exit ip rip enable
router rip enable ip rip receive version rip2
ip rip send version rip2
exit
router rip enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Test networks config using CLIPs

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
interface loopback 1 Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82
ip address 10.0.0.40/32
exit interface loopback 2
interface loopback 2 ip address 192.168.10.1/24
ip address 172.16.10.1/24 ip ospf
exit exit
router rip router isis interface loopback 3
redistribute direct redistribute direct ip address 192.168.20.1/24
redistribute direct enable redistribute direct enable exit
exit exit router ospf
ip rip apply redistribute direct isis apply redistribute direct as-boundary-router enable
redistribute direct
▪ Net 192.168.10.0/24 will be an OSPF intra-area route redistribute direct enable
exit
▪ Net 192.168.20.0/24 will be an OSPF AS external route ip ospf apply redistribute direct
▪ We also redistribute directs on the VSP8000 border routers since this will typically be the case anyway
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
ISIS and OSPF link metrics
ERS8800:5#% show ip ospf interface
================================================================================
OSPF Interface - GlobalRouter
================================================================================
INTERFACE AREA ADM IFST MET PRI DR/ TYPE AUTH MTU
ID BDR TYPE IGNO
--------------------------------------------------------------------------------
192.168.10.1 0.0.0.0 en DR 10 1 192.168.10.1 pass none dis
0.0.0.0
10.0.0.88 0.0.0.0 en DR 10 1 10.0.0.88 pass none dis
0.0.0.0
Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81
192.168.255.2 0.0.0.0 en DR 1 1 192.168.255.2 brdc none dis
192.168.255.1
192.168.255.6 0.0.0.0 en DR 1 1 192.168.255.6 brdc none dis
1/47 1/13 192.168.255.5

Clip1: 10.0.0.40 VSP4000-C 1/19 10 1/17 ERS8800 Clip1: 10.0.0.88


1/47 1 3/1
SPB
RIP 101/48 2/1610 OSPF
IS-IS
1/48 1 3/2
10 Net 192.168.20.0/24
1/19 10 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24
VSP4000-1:1#% show isis interface Clip1: 10.0.0.42 VSP4000-2
====================================================================================================
VSP8000-2 Clip1: 10.0.0.82
ISIS Interfaces VSP8000-2:1#% show isis interface
==================================================================================================== ====================================================================================================
IFIDX TYPE LEVEL
VSP4000-2:1#% OP-STATE
show isis ADM-STATE ADJ
interface UP-ADJ SPBM-L1-METRIC ISIS Interfaces
----------------------------------------------------------------------------------------------------
==================================================================================================== ====================================================================================================
Port1/47 pt-pt Level 1 UP UPISIS Interfaces
1 1 10 IFIDX TYPE LEVEL OP-STATE ADM-STATE ADJ UP-ADJ SPBM-L1-METRIC
Port1/48 pt-pt Level 1 UP UP 1 1 10
==================================================================================================== ----------------------------------------------------------------------------------------------------
IFIDX TYPE LEVEL OP-STATE ADM-STATE ADJ UP-ADJ SPBM-L1-METRIC Port1/13 pt-pt Level 1 UP UP 1 1 10
---------------------------------------------------------------------------------------------------- Port2/16 pt-pt Level 1 UP UP 1 1 10
Port1/47 pt-pt Level 1 UP UP 1 1 10
Port1/48 pt-pt Level 1 UP UP 1 1 10 VSP8000-2:1#% show ip ospf interface
====================================================================================================
VSP8000-1:1#% show isis interface OSPF Interface - GlobalRouter
==================================================================================================== ====================================================================================================
ISIS Interfaces INTERFACE AREA ADM IFST MET PRI DR/ TYPE AUTH MTU
==================================================================================================== ID BDR TYPE IGNO
IFIDX TYPE LEVEL OP-STATE ADM-STATE ADJ UP-ADJ SPBM-L1-METRIC ----------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------- 192.168.255.1 0.0.0.0 en BDR 1 1 192.168.255.2 brdc none dis
Port1/13 pt-pt Level 1 UP UP 1 1 10 192.168.255.1
Port2/16 pt-pt Level 1 UP UP 1 1 10

VSP8000-1:1#% show ip ospf interface ▪ ISIS NNI links use default SPBM L1-metric of 10
====================================================================================================
OSPF Interface - GlobalRouter
▪ OSPF interface metrics at default 1 (for Gig Ethernet) and 10 for CLIPs
====================================================================================================
INTERFACE AREA ADM IFST MET PRI DR/ TYPE AUTH MTU
ID BDR TYPE IGNO ▪ RIP is hop based, it has no link metrics
----------------------------------------------------------------------------------------------------
192.168.255.5 0.0.0.0 en BDR 1 1 192.168.255.6 brdc none dis
192.168.255.5
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IP routes before ISIS  OSPF redistribution

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82

VSP4000-C:1#% show ip route ERS8800:5#% show ip route


===================================================================================================== ===========================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 10.0.0.40 - 1 0 LOC 0 DB 0 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
172.16.10.0 255.255.255.0 172.16.10.1 - 1 0 LOC 0 DB 0 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
172.16.255.0 255.255.255.252 172.16.255.2 - 1 1/48 LOC 0 DB 0 192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
172.16.255.4 255.255.255.252 172.16.255.6 - 1 1/47 LOC 0 DB 0 192.168.255.0 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IP routes before ISIS  OSPF redistribution

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IP routes before ISIS  OSPF redistribution

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82

VSP4000-1:1#% show ip route VSP4000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 172.16.255.6 GlobalRouter 2 1/19 RIP 3 IB 100 10.0.0.40 255.255.255.255 172.16.255.2 GlobalRouter 2 1/19 RIP 9 IB 100
10.0.0.41 255.255.255.255 10.0.0.41 - 1 0 LOC 0 DB 0 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 10.0.0.42 - 1 0 LOC 0 DB 0
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 172.16.255.6 GlobalRouter 2 1/19 RIP 3 IB 100 172.16.10.0 255.255.255.0 172.16.255.2 GlobalRouter 2 1/19 RIP 9 IB 100
172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.0 255.255.255.252 172.16.255.1 - 1 1/19 LOC 0 DB 0
172.16.255.4 255.255.255.252 172.16.255.5 - 1 1/19 LOC 0 DB 0 172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
RIP ➔ IS-IS  OSPF Redistribution - Config

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


route-map tag-rip 1 route-map tag-ospf 1
set metric 172 set metric 192
set metric-type-isis external set metric-type-isis external
enable enable
exit exit
router isis router isis
redistribute rip redistribute ospf
redistribute rip route-map tag-rip redistribute ospf route-map tag-ospf
redistribute rip enable redistribute ospf enable
exit exit
isis apply redistribute rip isis apply redistribute ospf

▪ We redistribute all RIP & OSPF routes into ISIS and make them of metric-type “External”
▪ We also set the metric value which will be associated with these routes in ISIS; we will use this to tag the
routes
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
RIP ➔ IS-IS  OSPF Redistribution - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP8000-2:1#% show isis lsdb ip-unicast
▪ Here we check the IP routes present in the ISIS LSDB ================================================================================
ISIS IP-UNICAST-ROUTE SUMMARY
– This command could have been executed on any VOSS ================================================================================
PREFIX METRIC TLV LSP HOST
switch which is part of the SPB Fabric I-SID ADDRESS LENGTH METRIC TYPE TYPE FRAG NAME
▪ We can see that the routes are External and have metrics --------------------------------------------------------------------------------
- 10.0.0.41 32 1 Internal 135 0x3 VSP4000-1
set to 172 for RIP routes and 192 for OSPF routes - 172.16.255.4 30 1 Internal 135 0x3 VSP4000-1
– We shall be using the metric field as a numerical tag for -
-
10.0.0.40
172.16.10.0
32
24
172
172
External 135
External 135
0x3
0x3
VSP4000-1
VSP4000-1
these routes - 10.0.0.42 32 1 Internal 135 0x3 VSP4000-2
– The metric itself is unimportant in this use case, -
-
172.16.255.0
10.0.0.81
30
32
1
1
Internal 135
Internal 135
0x3
0x2
VSP4000-2
VSP8000-1
provided that both border nodes importing the same - 192.168.255.4 30 1 Internal 135 0x2 VSP8000-1
route set the same metric for it - 10.0.0.88 32 192 External 135 0x2 VSP8000-1
- 192.168.10.0 24 192 External 135 0x2 VSP8000-1
- 192.168.20.0 24 192 External 135 0x2 VSP8000-1
- 10.0.0.82 32 1 Internal 135 0x2 VSP8000-2
- 192.168.255.0 30 1 Internal 135 0x2 VSP8000-2
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS  OSPF Redistribution - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
ISIS Pref 7 Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 OSPF Pref 20 & 125 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7
172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ This is the same problem we dealt with in the previous section


©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
RIP ➔ IS-IS Redistribution - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
ISIS Pref 7 Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 RIP Pref 100 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP4000-1:1#% show ip route VSP4000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 172.16.255.6 GlobalRouter 2 1/19 RIP 8 IB 100 10.0.0.40 255.255.255.255 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7
10.0.0.41 255.255.255.255 10.0.0.41 - 1 0 LOC 0 DB 0 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 10.0.0.42 - 1 0 LOC 0 DB 0
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7 10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 172.16.255.6 GlobalRouter 2 1/19 RIP 8 IB 100 172.16.10.0 255.255.255.0 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7
172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.0 255.255.255.252 172.16.255.1 - 1 1/19 LOC 0 DB 0
172.16.255.4 255.255.255.252 172.16.255.5 - 1 1/19 LOC 0 DB 0 172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7 192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7 192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7

▪ This is the same problem we dealt with in the previous section


©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
RIP ➔ IS-IS  OSPF Redistribution - Fixing

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


route-map "peer-tag-rip" 1 route-map "peer-tag-ospf" 1
match metric-type-isis external match metric-type-isis external
match metric 172 match metric 192
set ip-preference 130 set ip-preference 130
enable enable
exit exit
router isis router isis
accept route-map "peer-tag-rip" accept route-map "peer-tag-ospf"
exit exit
isis apply accept isis apply accept

▪ This ISIS Accept policy ensures that a border router in charge of ISIS ➔ OSPF/RIP redistribution will only accept from his border peer ISIS “External”
routes with a modified preference of 130 (instead of SPB’s default preference 7)
– OSPF routes have preference levels ranging between 20, 25,120 or 125 (depending on OSPF route type) and RIP always has preference 100
▪ Hence we are ensuring that a border router will never install ISIS External routes from its border peer as long as it has the original OSPF/RIP routes
▪ NOTE that the same configuration would equally work if 3 or more border routers were used on a given boundary

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
RIP ➔ IS-IS  OSPF Redistribution – Checking accept policy

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82

VSP4000-1:1#% show ip isis accept VSP8000-1:1#% show ip isis accept


==================================================================================================== ====================================================================================================
Isis Accept - GlobalRouter Isis Accept - GlobalRouter
==================================================================================================== ====================================================================================================
ADV_RTR I-SID ISID-LIST ENABLE POLICY BACKBONE ADV_RTR I-SID ISID-LIST ENABLE POLICY BACKBONE
POLICY POLICY
---------------------------------------------------------------------------------------------------- ----------------------------------------------------------------------------------------------------
- - - - peer-tag-rip - - - - peer-tag-ospf

VSP4000-2:1#% show ip isis accept VSP8000-2:1#% show ip isis accept


==================================================================================================== ====================================================================================================
Isis Accept - GlobalRouter Isis Accept - GlobalRouter
==================================================================================================== ====================================================================================================
ADV_RTR I-SID ISID-LIST ENABLE POLICY BACKBONE ADV_RTR I-SID ISID-LIST ENABLE POLICY BACKBONE
POLICY POLICY
---------------------------------------------------------------------------------------------------- ----------------------------------------------------------------------------------------------------
- - - - peer-tag-rip - - - - peer-tag-ospf

▪ What the default accept policy looks like, with a route-map assigned; no need to enable it
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS  OSPF Redistribution – Checking again

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.10.0 255.255.255.0 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7
172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Looking good now for both VSP8000 border routers


▪ Note that we have both VSP4000s announcing the same ISIS External routes (for RIP) with the same prefix-cost, which means on the
VSP8000s the system-id
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme is used
reserved
Networks, Inc. as a tie
All rights breaker and hence the next hop is always VSP4000-1 (in orange); we could enable IP ECMP
reserved
IS-IS  OSPF Redistribution – Checking accepted ISIS External
routes
Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

VSP8000-1:1#% show ip route alternative Clip1: 10.0.0.42 VSP4000-2 VSP8000-2


VSP8000-2:1#% Clip1:alternative
show ip route 10.0.0.82
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
10.0.0.88 255.255.255.255 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IAS 130 10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IAS 130
172.16.10.0 255.255.255.0 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IBS 7
172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 192.168.255.6 GlobalRouter 11 1/17 OSPF 0 IB 20 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.10.0 255.255.255.0 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IAS 130 192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IAS 130
192.168.20.0 255.255.255.0 192.168.255.6 GlobalRouter 1 1/17 OSPF 0 IB 125 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.20.0 255.255.255.0 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IAS 130 192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IAS 130
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.0 255.255.255.252 192.168.255.6 GlobalRouter 2 1/17 OSPF 0 IA 20 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 192.168.255.2 GlobalRouter 2 1/17 OSPF 0 IA 20

▪ Here we see that the border VSP8000s learn from each other the already redistributed OSPF routes as ISIS External routes, but our Accept policy ensures they get a
preference of 130 Inc.
©2017 Extreme Networks, (in orange)
©2017
All rights
Extreme which
Networks,ensures
reserved Inc. All rightsthat these will not displace the preferred OSPF route (in green) and remain thus as alternative routes
reserved
RIP ➔ IS-IS Redistribution – Checking again

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP4000-1:1#% show ip route VSP4000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 172.16.255.6 GlobalRouter 2 1/19 RIP 1 IB 100 10.0.0.40 255.255.255.255 172.16.255.2 GlobalRouter 2 1/19 RIP 7 IB 100
10.0.0.41 255.255.255.255 10.0.0.41 - 1 0 LOC 0 DB 0 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 10.0.0.42 - 1 0 LOC 0 DB 0
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7 10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 172.16.255.6 GlobalRouter 2 1/19 RIP 1 IB 100 172.16.10.0 255.255.255.0 172.16.255.2 GlobalRouter 2 1/19 RIP 7 IB 100
172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.0 255.255.255.252 172.16.255.1 - 1 1/19 LOC 0 DB 0
172.16.255.4 255.255.255.252 172.16.255.5 - 1 1/19 LOC 0 DB 0 172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7 192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7 192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7

▪ Looking good now for both VSP4000 border routers


▪ Note that we have both VSP8000s announcing the same ISIS External routes (for OSPF) with the same prefix-cost, which means on the
VSP4000s the system-id
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme is used
reserved
Networks, Inc. as a tie
All rights breaker and hence the next hop is always VSP8000-1 (in orange); ; we could enable IP ECMP
reserved
RIP ➔ IS-IS Redistribution – Checking accepted ISIS External
routes
Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

VSP4000-1:1#% show ip route alternative Clip1: 10.0.0.42 VSP4000-2 VSP8000-2


VSP4000-2:1#% Clip1:alternative
show ip route 10.0.0.82
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 172.16.255.6 GlobalRouter 2 1/19 RIP 13 IB 100 10.0.0.40 255.255.255.255 172.16.255.2 GlobalRouter 2 1/19 RIP 8 IB 100
10.0.0.40 255.255.255.255 VSP4000-2 GlobalRouter 172 4051 ISIS 0 IAS 130 10.0.0.40 255.255.255.255 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IAS 130
10.0.0.41 255.255.255.255 10.0.0.41 - 1 0 LOC 0 DB 0 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 10.0.0.42 - 1 0 LOC 0 DB 0
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7 10.0.0.88 255.255.255.255 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 172.16.255.6 GlobalRouter 2 1/19 RIP 13 IB 100 172.16.10.0 255.255.255.0 172.16.255.2 GlobalRouter 2 1/19 RIP 8 IB 100
172.16.10.0 255.255.255.0 VSP4000-2 GlobalRouter 172 4051 ISIS 0 IAS 130 172.16.10.0 255.255.255.0 VSP4000-1 GlobalRouter 172 4051 ISIS 0 IAS 130
172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.0 255.255.255.252 172.16.255.1 - 1 1/19 LOC 0 DB 0
172.16.255.0 255.255.255.252 172.16.255.6 GlobalRouter 2 1/19 RIP 13 IA 100 172.16.255.4 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 172.16.255.5 - 1 1/19 LOC 0 DB 0 172.16.255.4 255.255.255.252 172.16.255.2 GlobalRouter 2 1/19 RIP 8 IA 100
192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7 192.168.10.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7 192.168.20.0 255.255.255.0 VSP8000-1 GlobalRouter 192 4051 ISIS 0 IBS 7
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7

▪ Here we see that the border VSP4000s learn from each other the already redistributed RIP routes as ISIS External routes, but our Accept policy ensures they get a
preference of 130 (in orange) which ensures that these will not displace the preferred RIP route (in green) and remain thus as alternative routes
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
RIP  IS-IS ➔ OSPF Redistribution - Config

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
1/47 3/1
SPB
ip ecmp RIP 1/48 2/16 OSPF ip ecmp
IS-IS
1/48 3/2
Net 192.168.20.0/24
1/19 IP routes IP routes 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


no ip alternative-route no ip alternative-route
route-map isis-non-tag-rip 1 route-map isis-non-tag-ospf 1
▪ In the reverse direction, we now match metric-type-isis external match metric-type-isis external
redistribute all IS-IS routes into OSPF match metric 172 match metric 192
and RIP no permit no permit
– NOTE: We disable IP alternative enable enable
route, for the same reasons exit exit
explained in previous setup route-map isis-non-tag-rip 2 route-map isis-non-tag-ospf 2
enable enable
▪ The VSP8000 route-map policy exit exit
ensures that all ISIS routes except router rip router ospf
the ISIS External routes with metric redistribute isis as-boundary-router enable
redistribute isis route-map isis-non-tag-rip redistribute isis
tag 192 (indicating they originated redistribute isis enable redistribute isis route-map isis-non-tag-ospf
from OSPF) are redistributed to exit redistribute isis enable
OSPF; likewise for the VSP4000 ip rip apply redistribute isis exit
route-map policy but for RIP tag ip ospf apply redistribute isis
metric 172
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
RIP  IS-IS ➔ OSPF Redistribution - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 IP routes IP routes 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

VSP4000-C:1#% show ip route


Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82
===================================================================================================== ERS8800:5#% show ip route
IP Route - GlobalRouter ===========================================================================================
===================================================================================================== IP Route - GlobalRouter
NH INTER ===========================================================================================
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF NH INTER
----------------------------------------------------------------------------------------------------- DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
10.0.0.40 255.255.255.255 10.0.0.40 - 1 0 LOC 0 DB 0 -------------------------------------------------------------------------------------------
10.0.0.41 255.255.255.255 172.16.255.1 GlobalRouter 2 1/48 RIP 20 IB 100 10.0.0.40 255.255.255.255 192.168.255.1 GlobalRout~ 172 3/2 OSPF 0 IBE 125
10.0.0.42 255.255.255.255 172.16.255.5 GlobalRouter 2 1/47 RIP 27 IB 100 10.0.0.40 255.255.255.255 192.168.255.5 GlobalRout~ 172 3/1 OSPF 0 IBE 125
10.0.0.81 255.255.255.255 172.16.255.5 GlobalRouter 2 1/47 RIP 27 IBE 100 10.0.0.41 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IB 125
10.0.0.81 255.255.255.255 172.16.255.1 GlobalRouter 2 1/48 RIP 20 IBE 100 10.0.0.42 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
10.0.0.82 255.255.255.255 172.16.255.5 GlobalRouter 2 1/47 RIP 27 IBE 100 10.0.0.81 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
10.0.0.82 255.255.255.255 172.16.255.1 GlobalRouter 2 1/48 RIP 20 IBE 100 10.0.0.82 255.255.255.255 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IB 125
10.0.0.88 255.255.255.255 172.16.255.5 GlobalRouter 2 1/47 RIP 27 IBE 100 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 172.16.255.1 GlobalRouter 2 1/48 RIP 20 IBE 100 172.16.10.0 255.255.255.0 192.168.255.1 GlobalRout~ 172 3/2 OSPF 0 IBE 125
172.16.10.0 255.255.255.0 172.16.10.1 - 1 0 LOC 0 DB 0 172.16.10.0 255.255.255.0 192.168.255.5 GlobalRout~ 172 3/1 OSPF 0 IBE 125
172.16.255.0 255.255.255.252 172.16.255.2 - 1 1/48 LOC 0 DB 0 172.16.255.0 255.255.255.252 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
172.16.255.4 255.255.255.252 172.16.255.6 - 1 1/47 LOC 0 DB 0 172.16.255.4 255.255.255.252 192.168.255.5 GlobalRout~ 10 3/1 OSPF 0 IB 125
192.168.10.0 255.255.255.0 172.16.255.5 GlobalRouter 2 1/47 RIP 27 IBE 100 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
192.168.10.0 255.255.255.0 172.16.255.1 GlobalRouter 2 1/48 RIP 20 IBE 100 192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
192.168.20.0 255.255.255.0 172.16.255.5 GlobalRouter 2 1/47 RIP 27 IBE 100 192.168.255.0 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0
192.168.20.0 255.255.255.0 172.16.255.1 GlobalRouter 2 1/48 RIP 20 IBE 100 192.168.255.4 255.255.255.252 192.168.255.6 - 1 3/1 LOC 0 DB 0
192.168.255.0 255.255.255.252 172.16.255.5 GlobalRouter 2 1/47 RIP 27 IBE 100
192.168.255.0 255.255.255.252 172.16.255.1 GlobalRouter 2 1/48 RIP 20 IBE 100
192.168.255.4 255.255.255.252 172.16.255.5 GlobalRouter 2 1/47 RIP 27 IBE 100
192.168.255.4 255.255.255.252 172.16.255.1 GlobalRouter 2 1/48 RIP 20 IBE 100
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Testing failure on border router OSPF/RIP link
interface gigabitEthernet 1/19 interface gigabitEthernet 1/17
Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81
shutdown shutdown
exit exit
IP routes 1/47 1/13 IP routes
Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 IP routes IP routes 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP4000-C:1#% show ip route
===================================================================================================== ERS8800:5#% show ip route
IP Route - GlobalRouter ===========================================================================================
===================================================================================================== IP Route - GlobalRouter
NH INTER ===========================================================================================
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF NH INTER
----------------------------------------------------------------------------------------------------- DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
10.0.0.40 255.255.255.255 10.0.0.40 - 1 0 LOC 0 DB 0 -------------------------------------------------------------------------------------------
10.0.0.41 255.255.255.255 172.16.255.1 GlobalRouter 2 1/48 RIP 14 IB 100 10.0.0.40 255.255.255.255 192.168.255.1 GlobalRout~ 172 3/2 OSPF 0 IB 125
10.0.0.81 255.255.255.255 172.16.255.1 GlobalRouter 2 1/48 RIP 14 IB 100 10.0.0.41 255.255.255.255 192.168.255.1 GlobalRout~ 20 3/2 OSPF 0 IB 125
10.0.0.82 255.255.255.255 172.16.255.1 GlobalRouter 2 1/48 RIP 14 IB 100 10.0.0.42 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
10.0.0.88 255.255.255.255 172.16.255.1 GlobalRouter 2 1/48 RIP 14 IB 100 10.0.0.81 255.255.255.255 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
172.16.10.0 255.255.255.0 172.16.10.1 - 1 0 LOC 0 DB 0 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
172.16.255.0 255.255.255.252 172.16.255.2 - 1 1/48 LOC 0 DB 0 172.16.10.0 255.255.255.0 192.168.255.1 GlobalRout~ 172 3/2 OSPF 0 IB 125
192.168.10.0 255.255.255.0 172.16.255.1 GlobalRouter 2 1/48 RIP 14 IB 100 172.16.255.0 255.255.255.252 192.168.255.1 GlobalRout~ 10 3/2 OSPF 0 IB 125
192.168.20.0 255.255.255.0 172.16.255.1 GlobalRouter 2 1/48 RIP 14 IB 100 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0
192.168.255.0 255.255.255.252 172.16.255.1 GlobalRouter 2 1/48 RIP 14 IB 100 192.168.20.0 255.255.255.0 192.168.20.1 - 1 0 LOC 0 DB 0
192.168.255.4 255.255.255.252 172.16.255.1 GlobalRouter 2 1/48 RIP 14 IB 100 192.168.255.0 255.255.255.252 192.168.255.2 - 1 3/2 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Testing failure on border router OSPF/RIP link

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 IP routes IP routes 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000-2 GlobalRouter 172 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IBS 130 10.0.0.88 255.255.255.255 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
172.16.10.0 255.255.255.0 VSP4000-2 GlobalRouter 172 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IBS 130 192.168.10.0 255.255.255.0 192.168.255.2 GlobalRouter 11 1/17 OSPF 0 IB 20
192.168.20.0 255.255.255.0 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IBS 130 192.168.20.0 255.255.255.0 192.168.255.2 GlobalRouter 1 1/17 OSPF 0 IB 125
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0

▪ Note that now VSP8000-1 has installed the ISIS External routes from VSP8000-2
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Testing failure on border router OSPF/RIP link

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.40 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.88
IP routes IP routes
1/47 3/1
SPB
RIP 1/48 2/16 OSPF
IS-IS
1/48 3/2
IP routes IP routes Net 192.168.20.0/24
1/19 IP routes IP routes 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP4000-1:1#% show ip route VSP4000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000-2 GlobalRouter 172 4051 ISIS 0 IBS 130 10.0.0.40 255.255.255.255 172.16.255.2 GlobalRouter 2 1/19 RIP 7 IB 100
10.0.0.41 255.255.255.255 10.0.0.41 - 1 0 LOC 0 DB 0 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 10.0.0.42 - 1 0 LOC 0 DB 0
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.88 255.255.255.255 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IBS 7 10.0.0.88 255.255.255.255 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 VSP4000-2 GlobalRouter 172 4051 ISIS 0 IBS 130 172.16.10.0 255.255.255.0 172.16.255.2 GlobalRouter 2 1/19 RIP 7 IB 100
172.16.255.0 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.0 255.255.255.252 172.16.255.1 - 1 1/19 LOC 0 DB 0
192.168.10.0 255.255.255.0 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IBS 7 192.168.10.0 255.255.255.0 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IBS 7
192.168.20.0 255.255.255.0 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IBS 7 192.168.20.0 255.255.255.0 VSP8000-2 GlobalRouter 192 4051 ISIS 0 IBS 7
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Note that now VSP4000-1 has installed the ISIS External routes from VSP4000-2
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IP Routing between separate ISIS (SPB)
Fabrics

Leveraging IS-IS Accept policies + IS-IS External routes

©2017 Extreme Networks, Inc. All rights reserved


IP Routing between separate ISIS (SPB) Fabrics

IP routes

IP routes
Fabric 1 SPB IS-IS Fabric 2 SPB IS-IS
Fabric1 Internal IP Routes Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
IP routes

IP routes

▪ GOAL = IP route between the 2 SPB Fabrics


– An SPB node can only belong to a single Fabric, hence the boundary will be the interconnecting links
– We run RIPv2 on the these links as this provides an effective and simpler approach than using BGP
▪ Assuming that both Fabrics are under the same administrative domain; if not, then BGP might be more appropriate
– Two border routers are used for redundancy on each boundary, and both can forward traffic at the same time
▪ CHALLENGE = not to get into routing loops where the IP routes redistributed over one border link in one
direction end up being re-redistributed to the same SPB Fabric where they came from over the other
border link

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Setup, Equipment & Software used

VSP4000-1 VSP8000-1

1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
RIPv2
1/47 3/1
SPB Fabric 1 SPB Fabric 2
1/48 2/16

1/48 3/2
RIPv2
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

VSP4000-2 VSP8000-2

▪ VSP4000-C ▪ VSP8000-1
– VSP 4850GTS / 6.1.0.0_B021 – VSP 8404 / 6.1.0.0_B021
▪ VSP4000-1, VSP4000-2 ▪ Slot1 8424GT
– VSP 4850GTS-PWR+ / 6.1.0.0_B021 ▪ Slot2 8418XSQ
▪ ERS8800 ▪ VSP8000-2
– 7.2.25.0GA – VSP 8242XSQ / 6.1.0.0_B021

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Port Config

VSP4000-1 VSP8000-1

1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 3/1

1/48 2/16

1/48 3/2

1/19 1/17
1/47 1/13

VSP4000-2 VSP8000-2
vlan members remove 1 1/47,1/48 no spanning-tree stp 1 ports 3/1,3/2
interface gigabitEthernet 1/47,1/48 interface gigabitEthernet 3/1,3/2
no shutdown no shutdown
no spanning-tree mstp exit
exit

vlan members remove 1 1/19,1/47,1/48 vlan members remove 1 1/13,1/17,2/16


interface gigabitEthernet 1/19,1/47,1/48 interface gigabitEthernet 1/13,1/17,2/16
no shutdown no shutdown
no spanning-tree mstp no spanning-tree mstp
exit exit

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
SPB Fabric1 Global Config

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1


▪ We assign
1/19
1/47 1/13
1/17
different ISIS
Clip1: 10.0.0.43 VSP4000-C ERS8800
1/47 3/1 Areas to the two
SPB Fabric 1 SPB Fabrics
1/48 2/16
Area 49.0001 ▪ Will come handy
1/48 3/2
once we support
1/19
1/47 1/13
1/17 multi-area SPB
Clip1: 10.0.0.42 VSP4000-2 VSP8000-2

prompt VSP4000-1 prompt VSP4000-C prompt VSP4000-2


interface loopback 1 interface loopback 1 interface loopback 1
ip address 10.0.0.41/32 ip address 10.0.0.43/32 ip address 10.0.0.42/32
exit exit exit
spbm spbm spbm
router isis router isis router isis
system-id 00bb.0000.4100 system-id 00bb.0000.4300 system-id 00bb.0000.4200
manual-area 49.0001 manual-area 49.0001 manual-area 49.0001
ip-source-address 10.0.0.41 ip-source-address 10.0.0.43 ip-source-address 10.0.0.42
spbm 1 spbm 1 spbm 1
spbm 1 nick-name 0.00.41 spbm 1 nick-name 0.00.43 spbm 1 nick-name 0.00.42
spbm 1 b-vid 4051-4052 primary 4051 spbm 1 b-vid 4051-4052 primary 4051 spbm 1 b-vid 4051-4052 primary 4051
spbm 1 ip enable spbm 1 ip enable spbm 1 ip enable
exit exit exit
vlan create 4051 name "B-VLAN-1" type spbm-bvlan vlan create 4051 name "B-VLAN-1" type spbm-bvlan vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan vlan create 4052 name "B-VLAN-2" type spbm-bvlan vlan create 4052 name "B-VLAN-2" type spbm-bvlan
router isis enable router isis enable router isis enable
cfm spbm mepid 41 cfm spbm mepid 43 cfm spbm mepid 42
cfm spbm enable cfm spbm enable cfm spbm enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
SPB Fabric2 Global Config

VSP4000-1 VSP8000-1 Clip1: 10.0.0.81


▪ We assign
1/47 1/13
different ISIS VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.44
Areas to the two 1/47 3/1
SPB Fabric 2
SPB Fabrics 1/48 2/16
Area 49.0002
▪ Will come handy 1/48 3/2

1/19 1/17
once we support 1/47 1/13

multi-area SPB VSP4000-2 VSP8000-2 Clip1: 10.0.0.82

prompt VSP8000-2 prompt ERS8800 prompt VSP8000-1


interface loopback 1 interface loopback 1 interface loopback 1
ip address 10.0.0.82/32 ip address 10.0.0.88/32 ip address 10.0.0.81/32
exit exit exit
spbm spbm spbm
router isis router isis router isis
system-id 00bb.0000.8200 system-id 00bb.0000.8800 system-id 00bb.0000.8100
manual-area 49.0002 manual-area 49.0002 manual-area 49.0002
ip-source-address 10.0.0.82 ip-source-address 10.0.0.88 ip-source-address 10.0.0.81
spbm 1 spbm 1 spbm 1
spbm 1 nick-name 0.00.82 spbm 1 nick-name 0.00.88 spbm 1 nick-name 0.00.81
spbm 1 b-vid 4051-4052 primary 4051 spbm 1 b-vid 4051-4052 primary 4051 spbm 1 b-vid 4051-4052 primary 4051
spbm 1 ip enable spbm 1 ip enable spbm 1 ip enable
exit exit exit
vlan create 4051 name "B-VLAN-1" type spbm-bvlan vlan create 4051 name "B-VLAN-1" type spbm-bvlan vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan vlan create 4052 name "B-VLAN-2" type spbm-bvlan vlan create 4052 name "B-VLAN-2" type spbm-bvlan
router isis enable router isis enable router isis enable
cfm spbm mepid 82 cfm spbm mepid 88 cfm spbm mepid 81
cfm spbm enable cfm spbm enable cfm spbm enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
SPB Interface Config

VSP4000-1 VSP8000-1

1/47 1/13
VSP4000-C 1/19 1/17 ERS8800
1/47 10 10 3/1
SPB Fabric 1 SPB Fabric 2
101/48 2/1610

1/48 10 10 3/2

1/19 1/17
1/47 1/13

VSP4000-2 VSP8000-2

interface GigabitEthernet 1/47,1/48 interface GigabitEthernet 3/1,3/2


isis isis
isis spbm 1 isis spbm 1
isis hello-auth type hmac-md5 key fabricisspb key-id 111 isis hello-auth type hmac-md5 key fabricisspb key-id 111
isis enable isis enable
exit exit

interface GigabitEthernet 1/19,1/48 interface GigabitEthernet 1/17,2/16


isis isis
isis spbm 1 isis spbm 1
isis hello-auth type hmac-md5 key fabricisspb key-id 111 isis hello-auth type hmac-md5 key fabricisspb key-id 111
isis enable isis enable
exit exit

▪ All ISIS NNI links use default SPBM L1-metric of 10


©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Test networks config using CLIPs

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.43 VSP4000-C 1/19 1/17 ERS8800 Clip1: 10.0.0.44
1/47 3/1
SPB Fabric 1 SPB Fabric 2
1/48 2/16

1/48 3/2

1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82

interface loopback 2 interface loopback 2


ip address 172.16.10.1/24 ip address 192.168.10.1/24
exit exit
router isis router isis router isis
redistribute direct redistribute direct redistribute direct
redistribute direct enable redistribute direct enable redistribute direct enable
exit exit exit
isis apply redistribute direct isis apply redistribute direct isis apply redistribute direct

▪ We also redistribute directs on the boundary border routers since this will typically be the case
anyway

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
RIP config

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

1/47 1/13
Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
1/48 2/16

1/48 RIPv2 3/2


172.16.255.4/30
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


interface GigabitEthernet 1/47 interface GigabitEthernet 1/13
encapsulation dot1q encapsulation dot1q
▪ Setting tagging brouter vlan 3900 subnet 172.16.255.1/30
ip rip enable
brouter vlan 3900 subnet 172.16.255.2/30
ip rip enable
on the RIP ip rip receive version rip2 ip rip receive version rip2
ip rip send version rip2 ip rip send version rip2
links, as we exit exit
might have to router rip enable router rip enable
have multiple
interface GigabitEthernet 1/47 interface GigabitEthernet 1/13
RIP interfaces if encapsulation dot1q encapsulation dot1q
multiple routing brouter vlan 3900 subnet 172.16.255.5/30 brouter vlan 3900 subnet 172.16.255.6/30
ip rip enable ip rip enable
domains (VRFs ip rip receive version rip2 ip rip receive version rip2
/ L3VSNs) were ip rip send version rip2 ip rip send version rip2
exit
in use exit
router rip enable router rip enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ RIP Redistribution - Config

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
IP routes
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes

1/48 RIPv2 3/2


IP routes 172.16.255.4/30
1/19 1/17
Net 172.16.10.0/24 1/47 1/13 IP routes Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


no ip alternative-route
route-map isis-internal 1
match metric-type-isis internal
enable

▪ We redistribute exit
router rip
▪ We also redistribute
redistribute isis direct routes, as the
only ISIS Internal redistribute isis route-map isis-internal
border nodes might
redistribute isis enable
routes to the RIP redistribute direct
redistribute direct enable
have some (here
border links exit the CLIPs)
ip rip apply redistribute isis
ip rip apply redistribute direct

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS  RIP Redistribution - Config

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
IP routes IP routes
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 IP routes 1/47 1/13 IP routes Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


router isis
redistribute rip
redistribute rip metric-type external
redistribute rip enable
exit
isis apply redistribute rip

▪ We redistribute only RIP routes into ISIS as External routes

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Preventing route reflection of ISIS Externals

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
IP routes IP routes
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 IP routes 1/47 1/13 IP routes Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


route-map "peer-externals" 1
match metric-type-isis external
set ip-preference 130
enable
exit
router isis
accept route-map "peer-externals"
exit
isis apply accept

▪ Bump up the preference value (decrease preference) for ISIS External routes received
from peer border router so that they will never replace the same RIP route if available

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ RIP Redistribution - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
IP routes IP routes
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 IP routes 1/47 1/13 IP routes Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.41 255.255.255.255 172.16.255.1 GlobalRouter 2 1/13 RIP 0 IB 100 10.0.0.41 255.255.255.255 172.16.255.5 GlobalRouter 2 1/13 RIP 4 IB 100
10.0.0.42 255.255.255.255 172.16.255.1 GlobalRouter 2 1/13 RIP 0 IB 100 10.0.0.42 255.255.255.255 172.16.255.5 GlobalRouter 2 1/13 RIP 4 IB 100
10.0.0.43 255.255.255.255 172.16.255.1 GlobalRouter 2 1/13 RIP 0 IB 100 10.0.0.43 255.255.255.255 172.16.255.5 GlobalRouter 2 1/13 RIP 4 IB 100
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.88 255.255.255.255 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 172.16.255.1 GlobalRouter 2 1/13 RIP 0 IB 100 172.16.10.0 255.255.255.0 172.16.255.5 GlobalRouter 2 1/13 RIP 4 IB 100
172.16.255.0 255.255.255.252 172.16.255.2 - 1 1/13 LOC 0 DB 0 172.16.255.0 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 172.16.255.6 - 1 1/13 LOC 0 DB 0
192.168.10.0 255.255.255.0 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.10.0 255.255.255.0 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Looking good
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ RIP Redistribution - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
IP routes IP routes
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 IP routes 1/47 1/13 IP routes Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP4000-1:1#% show ip route VSP4000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.41 255.255.255.255 10.0.0.41 - 1 0 LOC 0 DB 0 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 10.0.0.42 - 1 0 LOC 0 DB 0
10.0.0.43 255.255.255.255 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.43 255.255.255.255 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 172.16.255.2 GlobalRouter 2 1/47 RIP 7 IB 100 10.0.0.81 255.255.255.255 172.16.255.6 GlobalRouter 2 1/47 RIP 5 IB 100
10.0.0.82 255.255.255.255 172.16.255.2 GlobalRouter 2 1/47 RIP 7 IB 100 10.0.0.82 255.255.255.255 172.16.255.6 GlobalRouter 2 1/47 RIP 5 IB 100
10.0.0.88 255.255.255.255 172.16.255.2 GlobalRouter 2 1/47 RIP 7 IB 100 10.0.0.88 255.255.255.255 172.16.255.6 GlobalRouter 2 1/47 RIP 5 IB 100
172.16.10.0 255.255.255.0 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.0 255.255.255.252 172.16.255.1 - 1 1/47 LOC 0 DB 0 172.16.255.0 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 172.16.255.5 - 1 1/47 LOC 0 DB 0
192.168.10.0 255.255.255.0 172.16.255.2 GlobalRouter 2 1/47 RIP 7 IB 100 192.168.10.0 255.255.255.0 172.16.255.6 GlobalRouter 2 1/47 RIP 5 IB 100

▪ Looking good
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ RIP Redistribution - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
IP routes IP routes
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 IP routes 1/47 1/13 IP routes Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP4000-C:1#% show ip route ERS8800:5#% show ip route
===================================================================================================== ===========================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.43 255.255.255.255 10.0.0.43 - 1 0 LOC 0 DB 0 10.0.0.43 255.255.255.255 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 VSP4000-1 GlobalRouter 2 4051 ISIS 0 IBS 7 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP4000-1 GlobalRouter 2 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 VSP8000-2 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.88 255.255.255.255 VSP4000-1 GlobalRouter 2 4051 ISIS 0 IBS 7 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
172.16.10.0 255.255.255.0 172.16.10.1 - 1 0 LOC 0 DB 0 172.16.10.0 255.255.255.0 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
172.16.255.0 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.0 255.255.255.252 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 VSP8000-2 GlobalRout~ 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 VSP4000-1 GlobalRouter 2 4051 ISIS 0 IBS 7 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0

▪ Looking good; we could enable IP ECMP on these nodes


▪ Note that the ERS8800 is able to handle ISIS External routes, just that it handles them in the same
way as ISIS Internal routes
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IS-IS ➔ RIP Redistribution - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
IP routes IP routes
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 IP routes 1/47 1/13 IP routes Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP4000-C:1#% show isis spbm ip-unicast-fib all ERS8800:5#% show isis spbm ip-unicast-fib all
============================================================================================================================= ===== ================================================================================
SPBM IP-UNICAST FIB ENTRY INFO SPBM IP-UNICAST FIB ENTRY INFO
============================================================================================================================= =====

VRF
VRF
ISID
DEST
ISID Destination NH BEB
OUTGOING
VLAN INTERFACE
SPBM
COST
PREFIX
COST
PREFIX
TYPE
IP ROUTE
PREFERENCE
================================================================================

VRF ISID Destination NH BEB


OUTGOING SPBM
VLAN INTERFACE COST
PREFIX
COST
▪ Note,
----------------------------------------------------------------------------------------------------------------------------- -----
GRT - - 10.0.0.41/32 VSP4000-1 4051 1/47 10 1 Internal 7
--------------------------------------------------------------------------------
GRT - 10.0.0.41/32 VSP8000-1 4051 3/1 10 2 ERS8800
GRT
GRT
GRT
-
-
-
-
-
-
10.0.0.41/32
10.0.0.42/32
10.0.0.42/32
VSP4000-1
VSP4000-2
VSP4000-2
4052 1/47
4051 1/48
4052 1/48
10
10
10
1
1
1
Internal 7
Internal 7
Internal 7
GRT
GRT
GRT
-
-
-
10.0.0.41/32
10.0.0.41/32
10.0.0.41/32
VSP8000-1
VSP8000-2
VSP8000-2
4052 3/1
4051 3/2
4052 3/2
10
10
10
2
2
2
cannot make
GRT
GRT
-
-
-
-
10.0.0.81/32
10.0.0.81/32
VSP4000-1
VSP4000-1
4051 1/47
4052 1/47
10
10
2
2
External 7
External 7
GRT
GRT
-
-
10.0.0.42/32
10.0.0.42/32
VSP8000-1
VSP8000-1
4051 3/1
4052 3/1
10
10
2
2 the
GRT - - 10.0.0.81/32 VSP4000-2 4051 1/48 10 2 External 7 GRT - 10.0.0.42/32 VSP8000-2 4051 3/2 10 2
GRT
GRT
-
-
-
-
10.0.0.81/32
10.0.0.82/32
VSP4000-2
VSP4000-1
4052 1/48
4051 1/47
10
10
2
2
External 7
External 7
GRT
GRT
-
-
10.0.0.42/32
10.0.0.43/32
VSP8000-2
VSP8000-1
4052 3/2
4051 3/1
10
10
2
2
difference
GRT
GRT
GRT
-
-
-
-
-
-
10.0.0.82/32
10.0.0.82/32
10.0.0.82/32
VSP4000-1
VSP4000-2
VSP4000-2
4052 1/47
4051 1/48
4052 1/48
10
10
10
2
2
2
External 7
External 7
External 7
GRT
GRT
GRT
-
-
-
10.0.0.43/32
10.0.0.43/32
10.0.0.43/32
VSP8000-1
VSP8000-2
VSP8000-2
4052 3/1
4051 3/2
4052 3/2
10
10
10
2
2
2
between ISIS
GRT
GRT
-
-
-
-
10.0.0.88/32
10.0.0.88/32
VSP4000-1
VSP4000-1
4051 1/47
4052 1/47
10
10
2
2
External 7
External 7
GRT
GRT
-
-
10.0.0.81/32
10.0.0.81/32
VSP8000-1
VSP8000-1
4051 3/1
4052 3/1
10
10
1
1
External and
GRT
GRT
GRT
-
-
-
-
-
-
10.0.0.88/32
10.0.0.88/32
172.16.255.0/30
VSP4000-2
VSP4000-2
VSP4000-1
4051 1/48
4052 1/48
4051 1/47
10
10
10
2
2
1
External 7
External 7
Internal 7
GRT
GRT
GRT
-
-
-
10.0.0.82/32
10.0.0.82/32
172.16.10.0/24
VSP8000-2
VSP8000-2
VSP8000-1
4051 3/2
4052 3/2
4051 3/1
10
10
10
1
1
2
Internal
GRT
GRT
-
-
-
-
172.16.255.0/30
172.16.255.4/30
VSP4000-1
VSP4000-2
4052 1/47
4051 1/48
10
10
1
1
Internal 7
Internal 7
GRT
GRT
-
-
172.16.10.0/24
172.16.10.0/24
VSP8000-1
VSP8000-2
4052 3/1
4051 3/2
10
10
2
2
routes
GRT - - 172.16.255.4/30 VSP4000-2 4052 1/48 10 1 Internal 7 GRT - 172.16.10.0/24 VSP8000-2 4052 3/2 10 2
GRT - - 192.168.10.0/24 VSP4000-1 4051 1/47 10 2 External 7 GRT - 172.16.255.0/30 VSP8000-1 4051 3/1 10 1
GRT - - 192.168.10.0/24 VSP4000-1 4052 1/47 10 2 External 7 GRT - 172.16.255.0/30 VSP8000-1 4052 3/1 10 1
GRT - - 192.168.10.0/24 VSP4000-2 4051 1/48 10 2 External 7 GRT - 172.16.255.4/30 VSP8000-2 4051 3/2 10 1
GRT - - 192.168.10.0/24 VSP4000-2 4052 1/48 10 2 External 7 GRT - 172.16.255.4/30 VSP8000-2 4052 3/2 10 1

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Testing failure on border RIP link
interface gigabitEthernet 1/47
Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81
shutdown
exit IP routes 1/47 1/13 IP routes
Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
IP routes IP routes
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 IP routes 1/47 1/13 IP routes Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82

▪ RIP is not known as being fast to converge


▪ But in this deployment model, RIP is running over a single link and failure of that
link immediately removes all RIP routes on the Fabric boundary node, so the
solution provides sub-second failover anyway
▪ Link restoration is also quick as a RIP update will immediately be sent as soon as
the RIP link is restored

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Testing failure on border RIP link

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
IP routes IP routes
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 IP routes 1/47 1/13 IP routes Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.41 255.255.255.255 VSP8000-2 GlobalRouter 2 4051 ISIS 0 IBS 130 10.0.0.41 255.255.255.255 172.16.255.5 GlobalRouter 2 1/13 RIP 9 IB 100
10.0.0.42 255.255.255.255 VSP8000-2 GlobalRouter 2 4051 ISIS 0 IBS 130 10.0.0.42 255.255.255.255 172.16.255.5 GlobalRouter 2 1/13 RIP 9 IB 100
10.0.0.43 255.255.255.255 VSP8000-2 GlobalRouter 2 4051 ISIS 0 IBS 130 10.0.0.43 255.255.255.255 172.16.255.5 GlobalRouter 2 1/13 RIP 9 IB 100
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.88 255.255.255.255 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 VSP8000-2 GlobalRouter 2 4051 ISIS 0 IBS 130 172.16.10.0 255.255.255.0 172.16.255.5 GlobalRouter 2 1/13 RIP 9 IB 100
172.16.255.4 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 172.16.255.6 - 1 1/13 LOC 0 DB 0
192.168.10.0 255.255.255.0 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.10.0 255.255.255.0 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ VSP8000-1 is now installing the ISIS External (from RIP) routes from VSP8000-2

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Testing failure on border RIP link

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
IP routes IP routes
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 IP routes 1/47 1/13 IP routes Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP4000-1:1#% show ip route VSP4000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.41 255.255.255.255 10.0.0.41 - 1 0 LOC 0 DB 0 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 10.0.0.42 - 1 0 LOC 0 DB 0
10.0.0.43 255.255.255.255 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.43 255.255.255.255 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 VSP4000-2 GlobalRouter 2 4051 ISIS 0 IBS 130 10.0.0.81 255.255.255.255 172.16.255.6 GlobalRouter 2 1/47 RIP 13 IB 100
10.0.0.82 255.255.255.255 VSP4000-2 GlobalRouter 2 4051 ISIS 0 IBS 130 10.0.0.82 255.255.255.255 172.16.255.6 GlobalRouter 2 1/47 RIP 13 IB 100
10.0.0.88 255.255.255.255 VSP4000-2 GlobalRouter 2 4051 ISIS 0 IBS 130 10.0.0.88 255.255.255.255 172.16.255.6 GlobalRouter 2 1/47 RIP 13 IB 100
172.16.10.0 255.255.255.0 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 172.16.255.5 - 1 1/47 LOC 0 DB 0
192.168.10.0 255.255.255.0 VSP4000-2 GlobalRouter 2 4051 ISIS 0 IBS 130 192.168.10.0 255.255.255.0 172.16.255.6 GlobalRouter 2 1/47 RIP 13 IB 100

▪ VSP4000-1 is now installing the ISIS External (from RIP) routes from VSP4000-2

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Testing failure on border RIP link

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
IP routes IP routes
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External IP Routes Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 IP routes 1/47 1/13 IP routes Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP4000-C:1#% show ip route ERS8800:5#% show ip route
===================================================================================================== ===========================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP8000-2 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 VSP8000-2 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.43 255.255.255.255 10.0.0.43 - 1 0 LOC 0 DB 0 10.0.0.43 255.255.255.255 VSP8000-2 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 VSP4000-2 GlobalRouter 2 4051 ISIS 0 IBS 7 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP4000-2 GlobalRouter 2 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 VSP8000-2 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.88 255.255.255.255 VSP4000-2 GlobalRouter 2 4051 ISIS 0 IBS 7 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
172.16.10.0 255.255.255.0 172.16.10.1 - 1 0 LOC 0 DB 0 172.16.10.0 255.255.255.0 VSP8000-2 GlobalRout~ 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 VSP8000-2 GlobalRout~ 10 4051 ISIS 0 IBS 7
192.168.10.0 255.255.255.0 VSP4000-2 GlobalRouter 2 4051 ISIS 0 IBS 7 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0

▪ Looking good
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Redistributing Default route in one direction - Config

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
Default Default
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External Default Route Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 Default 1/47 1/13 Default Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


interface GigabitEthernet 1/47
ip rip default-listen enable ip prefix-list "default" 0.0.0.0/0
exit route-map "inject-default" 1
set injectlist "default"
▪ The route-map policy will match any (ISIS) route but replace it with (inject) a default route
enable
– If VSP8000 remains isolated and has no ISIS routes it will cease to announce a default route
exit
▪ We are also taking the pre-caution of configuring a corresponding default static black-hole router rip
route on the VSP8000s with a preference of 8
redistribute isis route-map "inject-default"
– If a valid ISIS default route exists, this will have a higher preference of 7 and will replace the
static black-hole default route no redistribute direct
– If a valid ISIS default route does not exist, then any traffic received from the other fabric exit
which cannot be handled via more specific routes, will be dropped on the VSP8000s ip rip apply redistribute isis
▪ We also delete the RIP redistribution of direct routes, as we no longer needed it now ip route 0.0.0.0 0.0.0.0 255.255.255.255 weight 65535 preference 8
▪ And RIP interfaces need to be configured to supply default route on one side and accept it on interface GigabitEthernet 1/13
the other ip rip default-supply enable
exit

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Redistributing Default route in one direction - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
Default Default
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External Default Route Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 Default 1/47 1/13 Default Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 255.255.255.255 - 65535 0 STAT 0 IB 8 0.0.0.0 0.0.0.0 255.255.255.255 - 65535 0 STAT 0 IB 8
10.0.0.41 255.255.255.255 172.16.255.1 GlobalRouter 2 1/13 RIP 8 IB 100 10.0.0.41 255.255.255.255 172.16.255.5 GlobalRouter 2 1/13 RIP 8 IB 100
10.0.0.42 255.255.255.255 172.16.255.1 GlobalRouter 2 1/13 RIP 8 IB 100 10.0.0.42 255.255.255.255 172.16.255.5 GlobalRouter 2 1/13 RIP 8 IB 100
10.0.0.43 255.255.255.255 172.16.255.1 GlobalRouter 2 1/13 RIP 8 IB 100 10.0.0.43 255.255.255.255 172.16.255.5 GlobalRouter 2 1/13 RIP 8 IB 100
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
10.0.0.88 255.255.255.255 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.88 255.255.255.255 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 172.16.255.1 GlobalRouter 2 1/13 RIP 8 IB 100 172.16.10.0 255.255.255.0 172.16.255.5 GlobalRouter 2 1/13 RIP 8 IB 100
172.16.255.0 255.255.255.252 172.16.255.2 - 1 1/13 LOC 0 DB 0 172.16.255.0 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 172.16.255.6 - 1 1/13 LOC 0 DB 0
192.168.10.0 255.255.255.0 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.10.0 255.255.255.0 ERS8800 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ There is no default ISIS route in Fabric2, so the black-hole defaults are active
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Redistributing Default route in one direction - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
Default Default
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External Default Route Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 Default 1/47 1/13 Default Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP4000-1:1#% show ip route VSP4000-2:1#% show ip route
===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 172.16.255.2 GlobalRouter 2 1/47 RIP 22 IB 100 0.0.0.0 0.0.0.0 172.16.255.6 GlobalRouter 2 1/47 RIP 10 IB 100
10.0.0.41 255.255.255.255 10.0.0.41 - 1 0 LOC 0 DB 0 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 10.0.0.42 - 1 0 LOC 0 DB 0
10.0.0.43 255.255.255.255 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.43 255.255.255.255 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP4000-C GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.0 255.255.255.252 172.16.255.1 - 1 1/47 LOC 0 DB 0 172.16.255.0 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.255.4 255.255.255.252 172.16.255.5 - 1 1/47 LOC 0 DB 0

▪ Fabric1 border nodes are now learning just a default route from RIP

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Redistributing Default route in one direction - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
Default Default
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External Default Route Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 Default 1/47 1/13 Default Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82


VSP4000-C:1#% show ip route ERS8800:5#% show ip route
===================================================================================================== ===========================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 VSP4000-1 GlobalRouter 2 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.43 255.255.255.255 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
10.0.0.43 255.255.255.255 10.0.0.43 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
172.16.10.0 255.255.255.0 172.16.10.1 - 1 0 LOC 0 DB 0 10.0.0.82 255.255.255.255 VSP8000-2 GlobalRout~ 10 4051 ISIS 0 IBS 7
172.16.255.0 255.255.255.252 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.88 255.255.255.255 10.0.0.88 - 1 0 LOC 0 DB 0
172.16.255.4 255.255.255.252 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.10.0 255.255.255.0 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
172.16.255.0 255.255.255.252 VSP8000-1 GlobalRout~ 10 4051 ISIS 0 IBS 7
172.16.255.4 255.255.255.252 VSP8000-2 GlobalRout~ 10 4051 ISIS 0 IBS 7

▪ Fabric1 nodes now have a default route 192.168.10.0 255.255.255.0 192.168.10.1 - 1 0 LOC 0 DB 0

▪ Fabric2 has no default ISIS route (it could, but this was not done in this setup)

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Redistributing Default route in one direction - Checking

Clip1: 10.0.0.41 VSP4000-1 VSP8000-1 Clip1: 10.0.0.81

IP routes 1/47 1/13 IP routes


Clip1: 10.0.0.43 VSP4000-C 1/19 172.16.255.0/30
1/17 ERS8800 Clip1: 10.0.0.44
Default Default
1/47 RIPv2 3/1
SPB Fabric 1 SPB Fabric 2
Fabric1 Internal IP Routes 1/48 2/16 Fabric2 Internal IP Routes
Fabric2 External Default Route Fabric1 External IP Routes
1/48 RIPv2 3/2
IP routes 172.16.255.4/30 IP routes
1/19 1/17
Net 172.16.10.0/24 Default 1/47 1/13 Default Net 192.168.10.0/24

Clip1: 10.0.0.42 VSP4000-2 VSP8000-2 Clip1: 10.0.0.82

VSP4000-C:1#% show isis spbm ip-unicast-fib all

▪ We can see
==================================================================================================================================
SPBM IP-UNICAST FIB ENTRY INFO
==================================================================================================================================
VRF DEST OUTGOING SPBM PREFIX PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST TYPE PREFERENCE
----------------------------------------------------------------------------------------------------------------------------------
default route
GRT - - 0.0.0.0/0 VSP4000-1 4051 1/47 10 2 External 7
GRT
GRT
-
-
-
-
0.0.0.0/0
0.0.0.0/0
VSP4000-1
VSP4000-2
4052 1/47
4051 1/48
10
10
2
2
External 7
External 7
is advertised
GRT - - 0.0.0.0/0 VSP4000-2 4052 1/48 10 2 External 7
GRT
GRT
-
-
-
-
10.0.0.41/32
10.0.0.41/32
VSP4000-1
VSP4000-1
4051 1/47
4052 1/47
10
10
1
1
Internal 7
Internal 7
as an
GRT
GRT
GRT
-
-
-
-
-
-
10.0.0.42/32
10.0.0.42/32
172.16.255.0/30
VSP4000-2
VSP4000-2
VSP4000-1
4051 1/48
4052 1/48
4051 1/47
10
10
10
1
1
1
Internal 7
Internal 7
Internal 7
External ISIS
GRT
GRT
GRT
-
-
-
-
-
-
172.16.255.0/30
172.16.255.4/30
172.16.255.4/30
VSP4000-1
VSP4000-2
VSP4000-2
4052 1/47
4051 1/48
4052 1/48
10
10
10
1
1
1
Internal 7
Internal 7
Internal 7
route
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Routing towards a Primary Firewall

Leveraging IS-IS External routes

©2017 Extreme Networks, Inc. All rights reserved


Routing to a Primary Firewall

VSP-3 VSP-1 Primary-FW

spbm link metric 10

spbm link SPB spbm link Internet


metric 10 IS-IS metric 10

spbm link metric 10

VSP-4 VSP-2 Secondary-FW

▪ Both Primary and Secondary FWs advertise the same IP route(s)


– Typically a default route
▪ The goal is to make all SPB Fabric nodes always go to the Primary FW (even if the
Secondary FW, connected to VSP-2 is on an SPB shortest path)
▪ This is not possible using ISIS “Internal” IP routes, because the IP route with the lowest
SPB internal metric (SPB path to VSP-1 vs SPB path to VSP-2) will always be preferred
– Even if the Primary FW IP route metric is made lower (on VSP-1) than the metric used for the
same route to the Secondary FW (on VSP-2)
– ➔ VSP-4 will always prefer to go to VSP-2, because a shorter SPB path than going to VSP-1
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Setup, Equipment & Software used

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17

SPB
1/48 2/16
IS-IS

1/47 1/13 1/17

VSP4000-2 VSP8000-2 Secondary-FW

▪ VSP4000-1, VSP4000-2 ▪ VSP8000-1


– VSP 8404 / 6.1.0.0_B021
– VSP 4850GTS-PWR+ / ▪ Slot1 8424GT
6.1.0.0_B021 ▪ Slot2 8418XSQ
▪ VSP8000-2
– VSP 8242XSQ / 6.1.0.0_B021

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Port Config

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17

1/48 2/16

1/47 1/13 1/17

VSP4000-2 VSP8000-2 Secondary-FW

vlan members remove 1 1/47,1/48 vlan members remove 1 1/13,1/17,2/16


interface gigabitEthernet 1/47,1/48 interface gigabitEthernet 1/13,1/17,2/16
no shutdown no shutdown
no spanning-tree mstp no spanning-tree mstp
exit exit

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
SPB Global Config

VSP4000-1 VSP8000-1 Primary-FW


prompt VSP8000-1
prompt VSP4000-1
1/47 1/13 1/17 interface loopback 1
interface loopback 1
ip address 10.0.0.81/32
ip address 10.0.0.41/32
exit
exit
spbm
spbm
router isis SPB router isis
1/48 2/16 system-id 00bb.0000.8100
system-id 00bb.0000.4100 IS-IS manual-area 49.0000
manual-area 49.0000
ip-source-address 10.0.0.81
ip-source-address 10.0.0.41
spbm 1
spbm 1
spbm 1 nick-name 0.00.81
spbm 1 nick-name 0.00.41
spbm 1 b-vid 4051-4052 primary 4051
spbm 1 b-vid 4051-4052 primary 4051 1/47 1/13 1/17 spbm 1 ip enable
spbm 1 ip enable
exit
exit
VSP4000-2 VSP8000-2 Secondary-FW vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan
router isis enable
router isis enable
cfm spbm mepid 81
cfm spbm mepid 41 prompt VSP4000-2 prompt VSP8000-2 cfm spbm enable
cfm spbm enable interface loopback 1 interface loopback 1
ip address 10.0.0.42/32 ip address 10.0.0.82/32
exit exit
spbm spbm
router isis router isis
system-id 00bb.0000.4200 system-id 00bb.0000.8200
manual-area 49.0000 manual-area 49.0000
ip-source-address 10.0.0.42 ip-source-address 10.0.0.82
spbm 1 spbm 1
spbm 1 nick-name 0.00.42 spbm 1 nick-name 0.00.82
spbm 1 b-vid 4051-4052 primary 4051 spbm 1 b-vid 4051-4052 primary 4051
spbm 1 ip enable spbm 1 ip enable
exit exit
vlan create 4051 name "B-VLAN-1" type spbm-bvlan vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan vlan create 4052 name "B-VLAN-2" type spbm-bvlan
router isis enable router isis enable
cfm spbm mepid 42 cfm spbm mepid 82
cfm spbm enable cfm spbm enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
SPB Interface Config

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17


10

SPB
101/48 IS-IS 10 2/16

10
1/47 1/13 1/17

VSP4000-2 VSP8000-2 Secondary-FW

interface GigabitEthernet 1/47,1/48 interface GigabitEthernet 1/13,2/16


isis isis
isis spbm 1 isis spbm 1
isis hello-auth type hmac-md5 key fabricisspb key-id 111 isis hello-auth type hmac-md5 key fabricisspb key-id 111
isis enable isis enable
exit exit

▪ All ISIS NNI links use default SPBM L1-metric of 10

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IP Shortcuts Direct Redistribution

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17

SPB
1/48 2/16
IS-IS

1/47 1/13 1/17

VSP4000-2 VSP8000-2 Secondary-FW

router isis
redistribute direct
redistribute direct enable
exit
isis apply redistribute direct

▪ Redistribution of direct routes will most likely be in place, so we enable it

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Firewalls Static Route ➔ ISIS External Route

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17 .6


192.168.255.4/30

SPB
1/48 2/16
IS-IS

192.168.255.0/30
1/47 1/13 1/17 .2

VSP4000-2 VSP8000-2 Secondary-FW

interface GigabitEthernet 1/17 interface GigabitEthernet 1/17


brouter vlan 3901 subnet 192.168.255.5/30 brouter vlan 3901 subnet 192.168.255.1/30
exit exit
ip route 0.0.0.0 0.0.0.0 192.168.255.6 weight 100 ip route 0.0.0.0 0.0.0.0 192.168.255.2 weight 200
router isis router isis
redistribute static redistribute static
redistribute static metric-type external redistribute static metric-type external
redistribute static enable redistribute static enable
exit exit
isis apply redistribute static isis apply redistribute static

▪ We create a default static route


▪ And we redistributed into ISIS as an “External” route
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Firewalls Static Route ➔ ISIS External Route - Checking

VSP4000-1 VSP8000-1 Primary-FW



0.0.0.0/0 to VSP-1
SPB-metric = 10
External-metric = 100 1/47 1/13 1/17 .6
0.0.0.0/0 to VSP-2 10 192.168.255.4/30
SPB-metric = 20
External-metric = 200
VSP4000-1:1#% show isis spbm ip-unicast-fib all
SPB ==================================================================================================================================
101/48 IS-IS 10 2/16 SPBM IP-UNICAST FIB ENTRY INFO
==================================================================================================================================


0.0.0.0/0 to VSP-1 VRF DEST OUTGOING SPBM PREFIX PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST TYPE PREFERENCE
SPB-metric = 20 ----------------------------------------------------------------------------------------------------------------------------------
External-metric = 100
10
GRT
GRT
-
-
192.168.255.0/30
-
-
0.0.0.0/0
0.0.0.0/0
VSP8000-1
VSP8000-1
4051 1/47
4052 1/47
10
10
100
100
✓ External 7
External 7
0.0.0.0/0 to VSP-2
1/47 GRT
1/13 - 1/17
- 0.0.0.0/0.2 VSP8000-2 4051 1/48 20 200 External 7
SPB-metric = 10 GRT - - 0.0.0.0/0 VSP8000-2 4052 1/47 20 200 External 7
External-metric = 200 GRT - - 10.0.0.42/32 VSP4000-2 4051 1/48 10 1 Internal 7
GRT - - 10.0.0.42/32 VSP4000-2 4052 1/48 10 1 Internal 7
▪ We can see here VSP4000-2 GRT
GRT
VSP8000-2
-
-
-
-
Secondary-FW
10.0.0.81/32
10.0.0.81/32
VSP8000-1
VSP8000-1
4051 1/47
4052 1/47
10
10
1
1
Internal 7
Internal 7

that the VSP4000s GRT


GRT
-
-
-
-
10.0.0.82/32
10.0.0.82/32
VSP8000-2
VSP8000-2
4051 1/48
4052 1/47
20
20
1
1
Internal 7
Internal 7

are seeing both GRT


GRT
GRT
-
-
-
-
-
-
192.168.255.0/30
192.168.255.0/30
192.168.255.4/30
VSP8000-2
VSP8000-2
VSP8000-1
4051 1/48
4052 1/47
4051 1/47
20
20
10
1
1
1
Internal 7
Internal 7
Internal 7
default routes as GRT - - 192.168.255.4/30 VSP8000-1 4052 1/47 10 1 Internal 7
VSP4000-2:1#% show isis spbm ip-unicast-fib all
External ==================================================================================================================================
SPBM IP-UNICAST FIB ENTRY INFO

▪ The External route ==================================================================================================================================


VRF DEST OUTGOING SPBM PREFIX PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST TYPE PREFERENCE
with the lowest ----------------------------------------------------------------------------------------------------------------------------------

Prefix-cost wins
GRT
GRT
-
-
-
-
0.0.0.0/0
0.0.0.0/0
VSP8000-1
VSP8000-1
4051 1/48
4052 1/47
20
20
100
100
✓ External 7
External 7
GRT - - 0.0.0.0/0 VSP8000-2 4051 1/47 10 200 External 7

– The internal GRT


GRT
-
-
-
-
0.0.0.0/0
10.0.0.41/32
VSP8000-2
VSP4000-1
4052 1/47
4051 1/48
10
10
200
1
External 7
Internal 7

SPB cost is GRT


GRT
-
-
-
-
10.0.0.41/32
10.0.0.81/32
VSP4000-1
VSP8000-1
4052 1/48
4051 1/48
10
20
1
1
Internal 7
Internal 7

ignored GRT
GRT
-
-
-
-
10.0.0.81/32
10.0.0.82/32
VSP8000-1
VSP8000-2
4052 1/47
4051 1/47
20
10
1
1
Internal 7
Internal 7
GRT - - 10.0.0.82/32 VSP8000-2 4052 1/47 10 1 Internal 7
GRT - - 192.168.255.0/30 VSP8000-2 4051 1/47 10 1 Internal 7
GRT - - 192.168.255.0/30 VSP8000-2 4052 1/47 10 1 Internal 7
GRT - - 192.168.255.4/30 VSP8000-1 4051 1/48 20 1 Internal 7
GRT - - 192.168.255.4/30 VSP8000-1 4052 1/47 20 1 Internal 7

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Firewalls Static Route ➔ ISIS External Route - Checking

VSP4000-1 VSP8000-1 Primary-FW



0.0.0.0/0 to VSP-1
SPB-metric = 10
External-metric = 100 1/47 1/13 1/17 .6
0.0.0.0/0 to VSP-2 10 192.168.255.4/30
SPB-metric = 20
External-metric = 200
SPB
101/48 IS-IS 10 2/16


0.0.0.0/0 to VSP-1
SPB-metric = 20
External-metric = 100 192.168.255.0/30
0.0.0.0/0 to VSP-2 10
1/47 1/13 1/17 .2
SPB-metric = 10
External-metric = 200
VSP4000-2 VSP8000-2 Secondary-FW

VSP4000-1:1#% show ip route VSP4000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 VSP8000-1 GlobalRouter 100 4051 ISIS 0 IBS 7 0.0.0.0 0.0.0.0 VSP8000-1 GlobalRouter 100 4051 ISIS 0 IBS 7
10.0.0.41 255.255.255.255 10.0.0.41 - 1 0 LOC 0 DB 0 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 10.0.0.42 - 1 0 LOC 0 DB 0
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7

▪ Which gives us the desired routing table


▪ Note that the cost (in orange) associated with the chosen route is the External metric
– In software versions prior to 6.1.0.0 and 5.1.1.4 the Internal SPB-metric would show as cost in the routing table

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Firewalls Static Route ➔ ISIS External Route - Checking

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17 .6


10 192.168.255.4/30

SPB
101/48 IS-IS 10 2/16

192.168.255.0/30
10
1/47 1/13 1/17 .2

VSP4000-2 VSP8000-2 Secondary-FW

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 192.168.255.6 GlobalRouter 100 1/17 STAT 0 IB 5 0.0.0.0 0.0.0.0 192.168.255.2 GlobalRouter 200 1/17 STAT 0 IB 5
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ We still have a little problem in that ▪ Static routes by default have a higher preference (5) than
ISIS (7)
VSP8000-2 prefers its static route ▪ We could just decrease the preference of the VSP8000-2
– This may or may not be a problem
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
static route (give it a pref > 7)
Firewalls Static Route ➔ ISIS External Route

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17 .6


10 192.168.255.4/30

SPB
101/48 IS-IS 10 2/16

192.168.255.0/30
10
1/47 1/13 1/17 .2

VSP4000-2 VSP8000-2 Secondary-FW

route-map pref-prim-fw 1
match metric-type-isis external
▪ Instead we are going to demonstrate how we can use an set ip-preference 4
ISIS Accept policy on VSP8000-2 to increase the enable
exit
preference for only the ISIS External routes we receive router isis
from VSP8000-1 accept adv-rtr 0.00.81 route-map pref-prim-fw
– We force the preference to 4 which is < Static’s 5 accept adv-rtr 0.00.81 enable
exit
▪ This approach is also better if we are learning the default isis apply accept
route from the Firewalls using OSPF instead of Static
routes
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Firewalls Static Route ➔ ISIS External Route - Checking

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17 .6


10 192.168.255.4/30

SPB
101/48 IS-IS 10 2/16

192.168.255.0/30
10
1/47 1/13 1/17 .2

VSP4000-2 VSP8000-2 Secondary-FW

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 192.168.255.6 GlobalRouter 100 1/17 STAT 0 IB 5 0.0.0.0 0.0.0.0 VSP8000-1 GlobalRouter 100 4051 ISIS 0 IBS 4
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Looking good
▪ In fact, by doing this, VSP8000-2 is now no longer redistributing a default route into ISIS (because its
Static route is not active anymore)
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Firewalls Static Route ➔ ISIS External Route - Checking

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17 .6


10 192.168.255.4/30

SPB
101/48 IS-IS 10 2/16

192.168.255.0/30
10
1/47 1/13 1/17 .2

VSP4000-2 VSP8000-2 Secondary-FW

VSP8000-2:1#% show isis spbm ip-unicast-fib all


==================================================================================================================================
VSP4000-1:1#% show isis lsdb ip-unicast SPBM IP-UNICAST FIB ENTRY INFO
==================================================================================================================================
====================================================================================================
ISIS IP-UNICAST-ROUTE SUMMARY VRF DEST OUTGOING SPBM PREFIX PREFIX IP ROUTE
VRF ISID ISID
==================================================================================================== Destination NH BEB VLAN INTERFACE COST COST TYPE PREFERENCE
PREFIX METRIC TLV LSP HOST ----------------------------------------------------------------------------------------------------------------------------------
I-SID ADDRESS LENGTH METRIC TYPE TYPE FRAG NAME GRT - - 0.0.0.0/0 VSP8000-1 4051 2/16 10 100 External 4
GRT
-------------------------------------------------------------------------------- - - 0.0.0.0/0 VSP8000-1 4052 2/16 10 100 External 4
- 10.0.0.41 32 1 Internal 135 0x2 VSP4000-1 GRT - - 10.0.0.41/32 VSP4000-1 4051 1/13 20 1 Internal 7
- 10.0.0.42 32 1 Internal 135 0x2 VSP4000-2 GRT - - 10.0.0.41/32 VSP4000-1 4052 2/16 20 1 Internal 7
- 10.0.0.81 32 1 Internal 135 0x2 VSP8000-1 GRT - - 10.0.0.42/32 VSP4000-2 4051 1/13 10 1 Internal 7
- 192.168.255.4 30 1 Internal 135 0x2 VSP8000-1 GRT - - 10.0.0.42/32 VSP4000-2 4052 1/13 10 1 Internal 7
- 0.0.0.0 0 100 External 135 0x2 VSP8000-1 GRT - - 10.0.0.81/32 VSP8000-1 4051 2/16 10 1 Internal 7
- 10.0.0.82 32 1 Internal 135 0x2 VSP8000-2 GRT - - 10.0.0.81/32 VSP8000-1 4052 2/16 10 1 Internal 7
- 192.168.255.0 30 1 Internal 135 0x2 VSP8000-2 GRT - - 192.168.255.4/30 VSP8000-1 4051 2/16 10 1 Internal 7
GRT - - 192.168.255.4/30 VSP8000-1 4052 2/16 10 1 Internal 7

▪ Here we see that there is only one default ISIS External route now and VSP8000-2 is accepting it
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Firewalls Static Route ➔ ISIS External Route - Checking

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17 .6


10 192.168.255.4/30

SPB
101/48 IS-IS 10 2/16

192.168.255.0/30
10
1/47 1/13 1/17 .2

VSP4000-2 VSP8000-2 Secondary-FW

VSP8000-1:1#% show ip route alternative VSP8000-2:1#% show ip route alternative


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 192.168.255.6 GlobalRouter 100 1/17 STAT 0 IB 5 0.0.0.0 0.0.0.0 VSP8000-1 GlobalRouter 100 4051 ISIS 0 IBS 4
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 0.0.0.0 0.0.0.0 192.168.255.2 GlobalRouter 200 1/17 STAT 0 IA 5
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
192.168.255.4 255.255.255.252 192.168.255.5 - 1 1/17 LOC 0 DB 0 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0
192.168.255.4 255.255.255.252 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ On VSP8000-2 we can see the static route ready as an alternative route


▪ In this case it suits us; should the default ISIS route disappear then the local static route will replace it immediately

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Primary Firewall failure

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17 .6


10 192.168.255.4/30

SPB
101/48 IS-IS 10 2/16

192.168.255.0/30
10
1/47 1/13 1/17 .2

VSP4000-2 VSP8000-2 Secondary-FW

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 VSP8000-2 GlobalRouter 200 4051 ISIS 0 IBS 7 0.0.0.0 0.0.0.0 192.168.255.2 GlobalRouter 200 1/17 STAT 0 IB 5
10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 192.168.255.1 - 1 1/17 LOC 0 DB 0

▪ Immediate switchover
▪ Restoration is also immediate
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Primary Firewall failure

VSP4000-1 VSP8000-1 Primary-FW

1/47 1/13 1/17 .6


10 192.168.255.4/30

SPB
101/48 IS-IS 10 2/16

192.168.255.0/30
10
1/47 1/13 1/17 .2

VSP4000-2 VSP8000-2 Secondary-FW

VSP4000-1:1#% show ip route VSP4000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
0.0.0.0 0.0.0.0 VSP8000-2 GlobalRouter 200 4051 ISIS 0 IBS 7 0.0.0.0 0.0.0.0 VSP8000-2 GlobalRouter 200 4051 ISIS 0 IBS 7
10.0.0.41 255.255.255.255 10.0.0.41 - 1 0 LOC 0 DB 0 10.0.0.41 255.255.255.255 VSP4000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.42 255.255.255.255 VSP4000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.42 255.255.255.255 10.0.0.42 - 1 0 LOC 0 DB 0
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 20 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 20 4051 ISIS 0 IBS 7 192.168.255.0 255.255.255.252 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7

▪ Immediate switchover
▪ Restoration is also immediate
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Routing between ISIS (SPB) and BGP(MPLS)
using Primary & Backup paths

Leveraging IS-IS Accept policies + IS-IS External routes


(a)with GRT & iBGP
(b) with VRFs & no iBGP

©2017 Extreme Networks, Inc. All rights reserved


Connecting SPB Fabric to BGP/MPLS Core

VSP8000-1 8600A

eBGP
VSP4000 8600G 8600C
Primary path
SPB Simulate AS
AS AS MPLS 65003
IS-IS 65002 65001 eBGP
Network

Net 172.16.0.0/16 Net 192.168.0.0/17


eBGP

VSP8000-2 8600B

▪ It is desired that all traffic flowing between the SPB cloud and the BGP cloud follow the Primary path
over VSP8000-1 and that the path over VSP8000-2 only be used in case of failure of the Primary path
▪ Configuration should avoid spelling out individual subnets in redistribution route-maps
– I.e. if new BGP or ISIS subnets appear, there should be no need to reconfigure the redistribution on the
border routers
▪ (a) Case where SPB GRT IP Shortcuts are used
– Following BGP by the book, and using iBGP with local-pref attribute between VSP8000-1 & VSP8000-2
▪ (b) Case where SPB VRF L3VSN is used
– We lack iBGP support on VRFs; so here we have to use a different approach in order to avoid BGP routes
from distant ASes (here 65003) being reflected back into the MPLS core network

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Connecting SPB Fabric to BGP/MPLS Core – Case (a)

VSP8000-1 8600A

eBGP
VSP4000 8600G 8600C
Primary path
SPB Simulate AS
AS AS
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network

Net 172.16.0.0/16 Net 192.168.0.0/17


eBGP

VSP8000-2 8600B

▪ Case (a)
– The SPB nodes will be redistributing BGP routes into IP Shortcuts and vice
versa
– VSP8000-1 and VSP8000-2 will have an iBGP peering to each other
– The BGP nodes have a single routing instance in all cases and in this setup
8600A, 8600B & 8600G are simulating a BGP/MPLS network
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Connecting SPB Fabric to BGP/MPLS Core – Case (b)

VSP8000-1 8600A

eBGP
VSP4000 8600G 8600C
Primary path
SPB Simulate AS
AS AS
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network

Net 172.16.0.0/16 Net 192.168.0.0/17


eBGP

VSP8000-2 8600B

▪ Case (b)
– The SPB nodes will be redistributing BGP routes into a VRF extended via
L3VSN
– There cannot be any iBGP peering on a VRF, as we lack this support today
– The BGP nodes have a single routing instance in all cases and in this setup
8600A, 8600B & 8600G are simulating a BGP/MPLS network
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Setup, Equipment & Software used

VSP8000-1 8600A

2/8 eBGP 2/5


1/13 3/2
VSP4000 8600G 8600C
1/47 3/11
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

VSP8000-2 8600B

▪ VSP4000 ▪ VSP8000-1
– VSP 8404 / 6.1.0.0_B021
– VSP 4850GTS / 6.1.0.0_B021 ▪ Slot1 8424GT
▪ 8600A, 8600B, 8600G, 8600C ▪ Slot2 8418XSQ
– 7.2.25.0GA ▪ VSP8000-2
– VSP 8242XSQ / 6.1.0.0_B021

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Port & MLT Config
no spanning-tree stp 1 ports 2/5,3/2,3/30
interface gigabitEthernet 2/5,3/2,3/30
VSP8000-1 8600A no shutdown
exit
2/8 2/5
1/13 3/2
VSP4000 8600G 8600C
1/47 3/11
3/5 4/30
2/16 3/30

1/48 3/12
1/13 3/3
2/8 2/5 no spanning-tree stp 1 ports 4/30
interface gigabitEthernet 4/30
vlan members remove 1 1/47,1/48 no shutdown
VSP8000-2 8600B
interface gigabitEthernet 1/47,1/48 exit
no shutdown
no spanning-tree mstp
exit no spanning-tree stp 1 ports 3/5,3/11,3/12
interface gigabitEthernet 3/5,3/11,3/12
no shutdown
exit
vlan members remove 1 1/13,2/8,2/16 no spanning-tree stp 1 ports 2/5,3/3,3/30
interface gigabitEthernet 1/13,2/8,2/16 interface gigabitEthernet 2/5,3/3,3/30
no shutdown no shutdown
no spanning-tree mstp exit
exit

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
SPB Global Config

VSP8000-1 8600A

2/8 2/5
1/13 3/2
VSP4000 8600G 8600C
1/47 3/11
SPB 3/5 4/30
2/16 3/30
IS-IS
1/48 3/12
1/13 3/3
2/8 2/5

VSP8000-2 8600B

prompt VSP4000 prompt VSP8000-2 prompt VSP8000-1


interface loopback 1 interface loopback 1 interface loopback 1
ip address 10.0.0.40/32 ip address 10.0.0.82/32 ip address 10.0.0.81/32
exit exit exit
spbm spbm spbm
router isis router isis router isis
system-id 00bb.0000.4000 system-id 00bb.0000.8200 system-id 00bb.0000.8100
manual-area 49.0000 manual-area 49.0000 manual-area 49.0000
ip-source-address 10.0.0.40 ip-source-address 10.0.0.82 ip-source-address 10.0.0.81
spbm 1 spbm 1 spbm 1
spbm 1 nick-name 0.00.40 spbm 1 nick-name 0.00.82 spbm 1 nick-name 0.00.81
spbm 1 b-vid 4051-4052 primary 4051 spbm 1 b-vid 4051-4052 primary 4051 spbm 1 b-vid 4051-4052 primary 4051
spbm 1 ip enable spbm 1 ip enable spbm 1 ip enable
exit exit exit
vlan create 4051 name "B-VLAN-1" type spbm-bvlan vlan create 4051 name "B-VLAN-1" type spbm-bvlan vlan create 4051 name "B-VLAN-1" type spbm-bvlan
vlan create 4052 name "B-VLAN-2" type spbm-bvlan vlan create 4052 name "B-VLAN-2" type spbm-bvlan vlan create 4052 name "B-VLAN-2" type spbm-bvlan
router isis enable router isis enable router isis enable
cfm spbm mepid 40 cfm spbm mepid 82 cfm spbm mepid 81
cfm spbm enable cfm spbm enable cfm spbm enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
SPB Interface Config

Clip1: 10.0.0.81 VSP8000-1 8600A

2/8 2/5
1/13 3/2
Clip1: 10.0.0.40 VSP4000 8600G 8600C
1/47 10 3/11
SPB 10 2/16
3/5 4/30
3/30
IS-IS
1/48 10 3/12
1/13 3/3
2/8 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B

interface GigabitEthernet 1/47,1/48 interface GigabitEthernet 1/13,2/16


isis isis
isis spbm 1 isis spbm 1
isis hello-auth type hmac-md5 key fabricisspb key-id 111 isis hello-auth type hmac-md5 key fabricisspb key-id 111
isis enable isis enable
exit exit

▪ All ISIS NNI links use default SPBM L1-metric of 10

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IGP (OSPF) Config

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11

2/8 2/5 8600G


1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30
2/16 3/30 MPLS
IS-IS
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
2/8 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

interface loopback 1 interface loopback 1


ip address 10.0.0.11/32 ip address 10.0.0.12/32
ip ospf ip ospf
exit exit
interface GigabitEthernet 2/5,3/2,3/30 interface GigabitEthernet 2/5,3/3,3/30
brouter port 2/5 vlan 2500 subnet 192.168.255.1/30 brouter port 2/5 vlan 2504 subnet 192.168.255.5/30
brouter port 3/30 vlan 2508 subnet 192.168.255.9/30 brouter port 3/30 vlan 2508 subnet 192.168.255.10/30
brouter port 3/2 vlan 2512 subnet 192.168.255.13/30 brouter port 3/3 vlan 2516 subnet 192.168.255.17/30
ip ospf port 3/2,3/30 enable ip ospf port 3/3,3/30 enable
exit exit
router ospf router ospf
router-id 10.0.0.11 router-id 10.0.0.12
exit exit
router ospf enable router ospf enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
IGP (OSPF) Config cont

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30
2/16 3/30 MPLS
IS-IS
Network
1/48 3/12
192.168.255.4/30
1/13 3/3 Net 192.168.0.0/17
2/8 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

interface loopback 1 interface loopback 1


ip address 10.0.0.10/32 ip address 192.168.0.1/17
ip ospf exit
exit interface GigabitEthernet 4/30
interface GigabitEthernet 3/11,3/12,3/5 brouter vlan 2520 subnet 192.168.255.22/30
brouter port 3/11 vlan 2512 subnet 192.168.255.14/30 exit
brouter port 3/12 vlan 2516 subnet 192.168.255.18/30
brouter port 3/5 vlan 2520 subnet 192.168.255.21/30
ip ospf port 3/11,3/12 enable
exit
router ospf
router-id 10.0.0.10
exit
router ospf enable

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
BGP Config

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30 router bgp
1/13 3/3 no auto-summary
Net 192.168.0.0/17
2/8 eBGP 2/5 no synchronization
no bgp aggregation
router-id 10.0.0.3
Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12 exit
router bgp router bgp router bgp router bgp 65003 enable
no auto-summary no auto-summary no auto-summary router bgp
no synchronization no synchronization no synchronization network 192.168.0.0/17
no bgp aggregation no bgp aggregation no bgp aggregation neighbor 192.168.255.21
router-id 10.0.0.11 router-id 10.0.0.12 router-id 10.0.0.10 neighbor 192.168.255.21 remote-as 65001
exit exit exit neighbor 192.168.255.21 enable
router bgp 65001 enable router bgp 65001 enable router bgp 65001 enable exit
router bgp router bgp router bgp
neighbor 192.168.255.2 neighbor 192.168.255.6 neighbor 192.168.255.22
neighbor 192.168.255.2 remote-as 65002 neighbor 192.168.255.6 remote-as 65002 neighbor 192.168.255.22 remote-as 65003
neighbor 192.168.255.2 enable neighbor 192.168.255.6 enable neighbor 192.168.255.22 enable
neighbor 10.0.0.12 neighbor 10.0.0.11 neighbor 10.0.0.11
neighbor 10.0.0.12 remote-as 65001 neighbor 10.0.0.11 remote-as 65001 neighbor 10.0.0.11 remote-as 65001
neighbor 10.0.0.12 update-source 10.0.0.11 neighbor 10.0.0.11 update-source 10.0.0.12 neighbor 10.0.0.11 update-source 10.0.0.10
neighbor 10.0.0.12 next-hop-self enable neighbor 10.0.0.11 next-hop-self enable neighbor 10.0.0.11 next-hop-self enable
neighbor 10.0.0.12 enable neighbor 10.0.0.11 enable neighbor 10.0.0.11 enable
neighbor 10.0.0.10 neighbor 10.0.0.10 neighbor 10.0.0.12
neighbor 10.0.0.10 remote-as 65001 neighbor 10.0.0.10 remote-as 65001 neighbor 10.0.0.12 remote-as 65001
neighbor 10.0.0.10 update-source 10.0.0.11 neighbor 10.0.0.10 update-source 10.0.0.12 neighbor 10.0.0.12 update-source 10.0.0.10
neighbor 10.0.0.10 next-hop-self enable neighbor 10.0.0.10 next-hop-self enable neighbor 10.0.0.12 next-hop-self enable
neighbor 10.0.0.10 enable neighbor 10.0.0.10 enable neighbor 10.0.0.12 enable
exit exit exit
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Forcing paths with BGP and SPB – Case (a) GRT IP Shortcuts

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 3/2
Clip1: 10.0.0.40 VSP4000 8600C
1/47 Primary path 3/11
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

▪ We are now going to look at the case where BGP is redistributed into
SPB GRT IP Shortcuts

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – Redistribution Config

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

interface loopback 2
ip address 172.16.0.41/16
exit
router isis
redistribute direct
redistribute direct enable
exit
isis apply redistribute direct

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – BGP Config

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12


interface GigabitEthernet 2/8 interface GigabitEthernet 2/8
brouter vlan 2500 subnet 192.168.255.2/30 brouter vlan 2504 subnet 192.168.255.6/30
exit exit
router bgp router bgp
no auto-summary no auto-summary
no synchronization no synchronization
no bgp aggregation no bgp aggregation
router-id 10.0.0.81 router-id 10.0.0.82
exit exit
router bgp 65002 enable router bgp 65002 enable
router bgp router bgp
neighbor 192.168.255.1 neighbor 192.168.255.5
neighbor 192.168.255.1 remote-as 65001 neighbor 192.168.255.5 remote-as 65001
neighbor 192.168.255.1 enable neighbor 192.168.255.5 enable
neighbor 10.0.0.82 neighbor 10.0.0.81
neighbor 10.0.0.82 remote-as 65002 neighbor 10.0.0.81 remote-as 65002
neighbor 10.0.0.82 update-source 10.0.0.81 neighbor 10.0.0.81 update-source 10.0.0.82
neighbor 10.0.0.82 next-hop-self enable neighbor 10.0.0.81 next-hop-self enable
neighbor 10.0.0.82 enable neighbor 10.0.0.81 enable
exit exit
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – BGP Local-Preference

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12


no router bgp enable no router bgp enable
router bgp router bgp
bgp default local-preference 200 bgp default local-preference 200
exit exit
router bgp 65002 enable router bgp 65001 enable

no router bgp enable no router bgp enable


router bgp router bgp
bgp default local-preference 20 bgp default local-preference 20
exit exit
router bgp 65002 enable router bgp 65001 enable

▪ BGP local-PREF is by default set to 100 (higher value is higher preference)


▪ So we increase it on VSP8000-1 & 8600A and decrease it on VSP8000-2 and 8600B
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – BGP Local-Preference - Checking

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path

iBGP
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
172.16.0.0 255.255.0.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.0.0 255.255.0.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.0.0 255.255.128.0 192.168.255.1 GlobalRouter 2 2/8 BGP 0 IB 45 192.168.0.0 255.255.128.0 VSP8000-1 GlobalRouter 2 4051 BGP 0 IBS 175
192.168.255.0 255.255.255.252 192.168.255.2 - 1 2/8 LOC 0 DB 0 192.168.255.4 255.255.255.252 192.168.255.6 - 1 2/8 LOC 0 DB 0

▪ Our BGP local-pref attribute config is working as expected


▪ VSP8000-1 has an eBGP route (pref = 45) while VSP8000-2 has an iBGP route (pref = 175)

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – BGP Local-Preference - Checking

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path

iBGP
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

VSP8000-2:1#% show ip bgp route


VSP8000-1:1#% show ip bgp route ====================================================================================================
==================================================================================================== BGP Routes - GlobalRouter
BGP Routes - GlobalRouter ====================================================================================================
====================================================================================================
The total number of bgp routes in this Vrf are 2
The total number of bgp routes in this Vrf are 2 NETWORK/MASK PEER REM ADDR NEXTHOP ADDRESS ORG LOC PREF
NETWORK/MASK PEER REM ADDR NEXTHOP ADDRESS ORG LOC PREF ----------------------------------------------------------------------------------------------------
----------------------------------------------------------------------------------------------------
192.168.0.0/17 10.0.0.81 10.0.0.81 IGP 200 ✓
192.168.0.0/17 192.168.255.1 192.168.255.1 IGP 200 ✓ AS_PATH: (65001 65003)
AS_PATH: (65001 65003) 192.168.0.0/17 192.168.255.5 192.168.255.5 IGP 20
192.168.0.0/17 10.0.0.82 10.0.0.82 IGP 20 AS_PATH: (65001 65003)
AS_PATH: (65001 65003)

▪ Our BGP local-pref attribute config is working as expected


▪ VSP8000-1 selects the eBGP route while VSP8000-2 selects the iBGP route
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – ISIS  eBGP Redistribution

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


ISIS Ext eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path

iBGP
SPB Simulate 3/5 4/30 AS
IP Shortcuts 2/16 AS AS 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
ISIS Ext
Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

route-map "ebgp-routes" 1 ▪ In the target design, we will expect VSP8000-1 to hold


permit eBGP routes into the MPLS backbone while VSP8000-2
match protocol ebgp
set metric-type-isis external
will have those same routes as iBGP pointing back to
enable VSP8000-1
exit – And if VSP8000-1 fails, then VSP8000-2 will have eBGP
router isis routes into the MPLS backbone
redistribute bgp ▪ Therefore, it makes sense for the VSP8000s to only
redistribute bgp route-map "ebgp-routes"
redistribute bgp enable
redistribute into ISIS eBGP routes (and not iBGP ones)
exit ▪ We also make sure that those eBGP routes get
isis apply redistribute bgp redistributed into ISIS as “External” routes

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – Reject ISIS Externals from iBGP peer

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


ISIS Ext eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path

iBGP
SPB Simulate 3/5 4/30 AS
IP Shortcuts 2/16 AS AS 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
route-map "reject-externals" 1
no permit Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12
match metric-type-isis external
enable
exit
router isis ▪ In this use case we have not had to
accept adv-rtr 0.00.82
accept adv-rtr 0.00.82 route-map "reject-externals" modify the protocol priorities
accept adv-rtr 0.00.82 enable
exit
isis apply accept
▪ We don’t want the VSP8000s to accept
route-map "reject-externals" 1
ISIS External routes from each other,
no permit
match metric-type-isis external as these would otherwise replace the
enable
exit iBGP routes we want; so we reject
router isis
accept adv-rtr 0.00.81
accept adv-rtr 0.00.81 route-map "reject-externals"
them via an Accept policy
accept adv-rtr 0.00.81 enable
exit
isis apply accept
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – ISIS  eBGP Redistribution -
Checking
Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11
ISIS Ext eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path

iBGP
SPB Simulate 3/5 4/30 AS
IP Shortcuts 2/16 AS AS 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

▪ Looking good
VSP4000:1#% show ip route
=====================================================================================================
IP Route - GlobalRouter
=====================================================================================================

DST MASK NEXT


NH
VRF/ISID COST
INTER
FACE PROT AGE TYPE PRF
-----------------------------------------------------------------------------------------------------
▪ VSP4000 is
10.0.0.40
10.0.0.81
255.255.255.255 10.0.0.40
255.255.255.255 VSP8000-1
-
GlobalRouter
1
10
0
4051
LOC 0
ISIS 0
DB
IBS 7
0
learning the route
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7
172.16.0.0
192.168.0.0
255.255.0.0
255.255.128.0
172.16.0.41
VSP8000-1
-
GlobalRouter
1
2
0
4051
LOC 0
ISIS 0
DB
IBS 7
0 from VSP8000-1
VSP4000:1#% show isis spbm ip-unicast-fib all
==================================================================================================================================
SPBM IP-UNICAST FIB ENTRY INFO
only and as an
==================================================================================================================================

VRF
VRF
ISID
DEST
ISID Destination NH BEB
OUTGOING
VLAN INTERFACE
SPBM
COST
PREFIX
COST
PREFIX
TYPE
IP ROUTE
PREFERENCE
ISIS External
----------------------------------------------------------------------------------------------------------------------------------
GRT - - 10.0.0.81/32 VSP8000-1 4051 1/47 10 1 Internal 7
route
GRT - - 10.0.0.81/32 VSP8000-1 4052 1/47 10 1 Internal 7
GRT - - 10.0.0.82/32 VSP8000-2 4051 1/48 10 1 Internal 7
GRT - - 10.0.0.82/32 VSP8000-2 4052 1/48 10 1 Internal 7
GRT - - 192.168.0.0/17 VSP8000-1 4051 1/47 10 2 External 7
GRT - - 192.168.0.0/17 VSP8000-1 4052 1/47 10 2 External 7
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – ISIS  eBGP Redistribution -
Checking
Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11
ISIS Ext eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path

iBGP
SPB Simulate 3/5 4/30 AS
IP Shortcuts 2/16 AS AS 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
172.16.0.0 255.255.0.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.0.0 255.255.0.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.0.0 255.255.128.0 192.168.255.1 GlobalRouter 2 2/8 BGP 0 IB 45 192.168.0.0 255.255.128.0 VSP8000-1 GlobalRouter 2 4051 BGP 0 IBS 175
192.168.255.0 255.255.255.252 192.168.255.2 - 1 2/8 LOC 0 DB 0 192.168.255.4 255.255.255.252 192.168.255.6 - 1 2/8 LOC 0 DB 0

▪ Also looking good, and same as before


▪ VSP8000-2 still has an iBGP route (pref = 175) which means that our ISIS Accept policy to reject the
ISIS External routes from iBGP peer is working
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – ISIS ➔ eBGP Redistribution

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
ISIS BGP 3/2
1/13 192.168.255.0/30
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
ISIS
1/13 BGP 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

ip prefix-list host-routes 0.0.0.0/0 ge 32 le 32


route-map except-host-routes 1 ▪ Given the precautions we have taken in the previous two
match network host-routes
no permit slides, it is now safe to simply redistribute ISIS routes into
enable BGP
exit
route-map except-host-routes 2 ▪ That is because we are now sure that any ISIS routes
permit installed on the VSP8000s are ISIS routes from the wider
enable SPB Fabric (and not routes originating from BGP)
exit
router bgp ▪ We associate a route-map to suppress BGP redistribution
redistribute isis of ISIS host routes
redistribute isis route-map except-host-routes
redistribute isis enable – The VSP mgmt loopback IPs; it is unlikely these would
exit need advertising and even if they did, it would be better to
ip bgp apply redistribute isis summarize them

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – ISIS ➔ eBGP Redistribution -
Checking
Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11
eBGP
Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path

iBGP
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

8600A:5#% show ip bgp route 8600B:5#% show ip bgp route


================================================================================ ================================================================================
BGP Routes - GlobalRouter BGP Routes - GlobalRouter
================================================================================ ================================================================================
The total number of routes is 3 The total number of routes is 3
NETWORK/MASK PEER REM ADDR NEXTHOP ADDRESS ORG LOC PREF NETWORK/MASK PEER REM ADDR NEXTHOP ADDRESS ORG LOC PREF
-------------------------------------------------------------------------------- --------------------------------------------------------------------------------
172.16.0.0/16 192.168.255.2 192.168.255.2 INC 200 172.16.0.0/16 10.0.0.11 10.0.0.11 INC 200
AS_PATH: (65002) AS_PATH: (65002)
172.16.0.0/16 10.0.0.12 10.0.0.12 INC 20 172.16.0.0/16 192.168.255.6 192.168.255.6 INC 20
AS_PATH: (65002) AS_PATH: (65002)
192.168.0.0/17 10.0.0.10 10.0.0.10 IGP 100 192.168.0.0/17 10.0.0.10 10.0.0.10 IGP 100
AS_PATH: (65003) AS_PATH: (65003)

▪ Looking good
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – Final Checking

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

VSP4000:1#% show ip route 8600G:5#% show ip route


===================================================================================================== ===========================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 10.0.0.40 - 1 0 LOC 0 DB 0 10.0.0.10 255.255.255.255 10.0.0.10 - 1 0 LOC 0 DB 0
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.11 255.255.255.255 192.168.255.13 GlobalRout~ 11 3/11 OSPF 0 IB 20
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.12 255.255.255.255 192.168.255.17 GlobalRout~ 11 3/12 OSPF 0 IB 20
172.16.0.0 255.255.0.0 172.16.0.41 - 1 0 LOC 0 DB 0 172.16.0.0 255.255.0.0 192.168.255.13 GlobalRout~ 1 3/11 BGP 0 IB 175
192.168.0.0 255.255.128.0 VSP8000-1 GlobalRouter 2 4051 ISIS 0 IBS 7 192.168.0.0 255.255.128.0 192.168.255.22 GlobalRout~ 1 3/5 BGP 0 IB 45
192.168.255.8 255.255.255.252 192.168.255.13 GlobalRout~ 2 3/11 OSPF 0 IB 20
192.168.255.12 255.255.255.252 192.168.255.14 - 1 3/11 LOC 0 DB 0
192.168.255.16 255.255.255.252 192.168.255.18 - 1 3/12 LOC 0 DB 0
192.168.255.20 255.255.255.252 192.168.255.21 - 1 3/5 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – Final Checking

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


192.168.0.0/17
Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
192.168.0.0/17 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
172.16.0.0 255.255.0.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.0.0 255.255.0.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.0.0 255.255.128.0 192.168.255.1 GlobalRouter 2 2/8 BGP 0 IB 45 192.168.0.0 255.255.128.0 VSP8000-1 GlobalRouter 2 4051 BGP 0 IBS 175
192.168.255.0 255.255.255.252 192.168.255.2 - 1 2/8 LOC 0 DB 0 192.168.255.4 255.255.255.252 192.168.255.6 - 1 2/8 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – Final Checking

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


172.16.0.0/16
Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
172.16.0.0/16 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

8600B:5#% show ip route 8600A:5#% show ip route


=========================================================================================== ===========================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
=========================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
10.0.0.10 255.255.255.255 192.168.255.18 GlobalRout~ 11 3/3 OSPF 0 IB 20 10.0.0.10 255.255.255.255 192.168.255.14 GlobalRout~ 11 3/2 OSPF 0 IB 20
10.0.0.11 255.255.255.255 192.168.255.9 GlobalRout~ 11 3/30 OSPF 0 IB 20 10.0.0.11 255.255.255.255 10.0.0.11 - 1 0 LOC 0 DB 0
10.0.0.12 255.255.255.255 10.0.0.12 - 1 0 LOC 0 DB 0 10.0.0.12 255.255.255.255 192.168.255.10 GlobalRout~ 11 3/30 OSPF 0 IB 20
172.16.0.0 255.255.0.0 192.168.255.9 GlobalRout~ 1 3/30 BGP 0 IB 175 172.16.0.0 255.255.0.0 192.168.255.2 GlobalRout~ 1 2/5 BGP 0 IB 45
192.168.0.0 255.255.128.0 192.168.255.18 GlobalRout~ 1 3/3 BGP 0 IB 175 192.168.0.0 255.255.128.0 192.168.255.14 GlobalRout~ 1 3/2 BGP 0 IB 175
192.168.255.4 255.255.255.252 192.168.255.5 - 1 2/5 LOC 0 DB 0 192.168.255.0 255.255.255.252 192.168.255.1 - 1 2/5 LOC 0 DB 0
192.168.255.8 255.255.255.252 192.168.255.10 - 1 3/30 LOC 0 DB 0 192.168.255.8 255.255.255.252 192.168.255.9 - 1 3/30 LOC 0 DB 0
192.168.255.12 255.255.255.252 192.168.255.18 GlobalRout~ 2 3/3 OSPF 0 IB 20 192.168.255.12 255.255.255.252 192.168.255.13 - 1 3/2 LOC 0 DB 0
192.168.255.16 255.255.255.252 192.168.255.17 - 1 3/3 LOC 0 DB 0 192.168.255.16 255.255.255.252 192.168.255.14 GlobalRout~ 2 3/2 OSPF 0 IB 20

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – Testing Failover

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

VSP4000:1#% show ip route 8600G:5#% show ip route


===================================================================================================== ===========================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 10.0.0.40 - 1 0 LOC 0 DB 0 10.0.0.10 255.255.255.255 10.0.0.10 - 1 0 LOC 0 DB 0
10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.11 255.255.255.255 192.168.255.13 GlobalRout~ 11 3/11 OSPF 0 IB 20
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.12 255.255.255.255 192.168.255.17 GlobalRout~ 11 3/12 OSPF 0 IB 20
172.16.0.0 255.255.0.0 172.16.0.41 - 1 0 LOC 0 DB 0 172.16.0.0 255.255.0.0 192.168.255.17 GlobalRout~ 1 3/12 BGP 0 IB 175
192.168.0.0 255.255.128.0 VSP8000-2 GlobalRouter 2 4051 ISIS 0 IBS 7 192.168.0.0 255.255.128.0 192.168.255.22 GlobalRout~ 1 3/5 BGP 0 IB 45
192.168.255.8 255.255.255.252 192.168.255.13 GlobalRout~ 2 3/11 OSPF 0 IB 20
192.168.255.12 255.255.255.252 192.168.255.14 - 1 3/11 LOC 0 DB 0
192.168.255.16 255.255.255.252 192.168.255.18 - 1 3/12 LOC 0 DB 0
192.168.255.20 255.255.255.252 192.168.255.21 - 1 3/5 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – Testing Failover

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
192.168.0.0/17 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.0.0/17
Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

VSP8000-1:1#% show ip route VSP8000-2:1#% show ip route


===================================================================================================== =====================================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.40 255.255.255.255 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.81 255.255.255.255 10.0.0.81 - 1 0 LOC 0 DB 0 10.0.0.81 255.255.255.255 VSP8000-1 GlobalRouter 10 4051 ISIS 0 IBS 7
10.0.0.82 255.255.255.255 VSP8000-2 GlobalRouter 10 4051 ISIS 0 IBS 7 10.0.0.82 255.255.255.255 10.0.0.82 - 1 0 LOC 0 DB 0
172.16.0.0 255.255.0.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7 172.16.0.0 255.255.0.0 VSP4000 GlobalRouter 10 4051 ISIS 0 IBS 7
192.168.0.0 255.255.128.0 VSP8000-2 GlobalRouter 2 4051 BGP 0 IBS 175 192.168.0.0 255.255.128.0 192.168.255.5 GlobalRouter 2 2/8 BGP 0 IB 45
192.168.255.4 255.255.255.252 192.168.255.6 - 1 2/8 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (a) GRT IP Shortcuts – Testing Failover

Clip1: 10.0.0.81 VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
Clip1: 10.0.0.40 VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
IP Shortcuts MPLS 65003
IS-IS 65002 65001 eBGP
172.16.0.0/16 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
172.16.0.0/16
Clip1: 10.0.0.82 VSP8000-2 8600B Clip1: 10.0.0.12

8600B:5#% show ip route 8600A:5#% show ip route


=========================================================================================== ===========================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
=========================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
10.0.0.10 255.255.255.255 192.168.255.18 GlobalRout~ 11 3/3 OSPF 0 IB 20 10.0.0.10 255.255.255.255 192.168.255.14 GlobalRout~ 11 3/2 OSPF 0 IB 20
10.0.0.11 255.255.255.255 192.168.255.9 GlobalRout~ 11 3/30 OSPF 0 IB 20 10.0.0.11 255.255.255.255 10.0.0.11 - 1 0 LOC 0 DB 0
10.0.0.12 255.255.255.255 10.0.0.12 - 1 0 LOC 0 DB 0 10.0.0.12 255.255.255.255 192.168.255.10 GlobalRout~ 11 3/30 OSPF 0 IB 20
172.16.0.0 255.255.0.0 192.168.255.6 GlobalRout~ 1 2/5 BGP 0 IB 45 172.16.0.0 255.255.0.0 192.168.255.10 GlobalRout~ 1 3/30 BGP 0 IB 175
192.168.0.0 255.255.128.0 192.168.255.18 GlobalRout~ 1 3/3 BGP 0 IB 175 192.168.0.0 255.255.128.0 192.168.255.14 GlobalRout~ 1 3/2 BGP 0 IB 175
192.168.255.4 255.255.255.252 192.168.255.5 - 1 2/5 LOC 0 DB 0 192.168.255.8 255.255.255.252 192.168.255.9 - 1 3/30 LOC 0 DB 0
192.168.255.8 255.255.255.252 192.168.255.10 - 1 3/30 LOC 0 DB 0 192.168.255.12 255.255.255.252 192.168.255.13 - 1 3/2 LOC 0 DB 0
192.168.255.12 255.255.255.252 192.168.255.18 GlobalRout~ 2 3/3 OSPF 0 IB 20 192.168.255.16 255.255.255.252 192.168.255.14 GlobalRout~ 2 3/2 OSPF 0 IB 20
192.168.255.16 255.255.255.252 192.168.255.17 - 1 3/3 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Forcing paths with BGP and SPB – Case (b) VRF L3VSN

VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 3/2
VSP4000 8600C
1/47 Primary path 3/11
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

VSP8000-2 8600B Clip1: 10.0.0.12

▪ We are now going to look at the case where BGP is redistributed into
SPB VRF L3VSN

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – VRF & IPVPN Config

VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

VSP8000-2 8600B Clip1: 10.0.0.12

ip vrf green
interface loopback 3
ip address 172.16.0.41/16 vrf green ip vrf green ip vrf green
exit interface GigabitEthernet 2/8 interface GigabitEthernet 2/8
router vrf green vrf green vrf green
ipvpn brouter vlan 2500 subnet 192.168.255.2/30 brouter vlan 2504 subnet 192.168.255.6/30
i-sid 30001 exit exit
ipvpn enable router vrf green router vrf green
isis redistribute direct ipvpn ipvpn
isis redistribute direct enable i-sid 30001 i-sid 30001
exit ipvpn enable ipvpn enable
isis apply redistribute direct vrf green exit exit

▪ Since we cannot have iBGP peerings with VRFs, no real need to create VRF CLIPs on the VSP8000s
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – BGP Config

VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

VSP8000-2 8600B Clip1: 10.0.0.12

▪ We only have 1 BGP


router bgp 65002 router bgp 65002
router vrf green router vrf green
ip bgp ip bgp
no ip bgp auto-summary
no ip bgp synchronization
no ip bgp auto-summary
no ip bgp synchronization
interface and 1 single
no ip bgp aggregation
ip bgp router-id 192.168.255.2
no ip bgp aggregation
ip bgp router-id 192.168.255.6 eBGP peering
ip bgp enable ip bgp enable
ip bgp neighbor 192.168.255.1
ip bgp neighbor 192.168.255.1 remote-as 65001
ip bgp neighbor 192.168.255.5
ip bgp neighbor 192.168.255.5 remote-as 65001
▪ So we use that IP
ip bgp neighbor 192.168.255.1 enable
exit
ip bgp neighbor 192.168.255.5 enable
exit interface as BGP
router-id

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – Instead of BGP Local-Preference

VSP8000-1 8600A Clip1: 10.0.0.11


eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
Simulate

ISIS
SPB AS AS 3/5 4/30 AS
L3VSN 30001 2/16 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

VSP8000-2 8600B Clip1: 10.0.0.12

router vrf green no router bgp enable


ip route preference protocol spbm-level1 50 router bgp
exit bgp default local-preference 200
exit
▪ We don’t have iBGP support on VRFs so we router bgp 65001 enable
cannot leverage BGP local-preference no router bgp enable
▪ Instead we will play with protocol priorities and router bgp
on VSP8000-1 we will decrease the ISIS bgp default local-preference 20
exit
preference below eBGP. This will ensure that: router bgp 65001 enable
– VSP8000-1 will prefer eBGP over ISIS
– VSP8000-2 will still prefer ISIS over eBGP ▪ BGP local-preference is by default set to 100
▪ So we increase it on 8600A and decrease it on 8600B

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – ISIS  eBGP Redistribution

VSP8000-1 8600A Clip1: 10.0.0.11


ISIS Ext eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

VSP8000-2 8600B Clip1: 10.0.0.12

▪ We redistribute BGP into ISIS as External


router vrf green
isis redistribute bgp route types
isis redistribute bgp metric-type external
isis redistribute bgp enable
▪ We configure this on both VSP8000s
exit
isis apply redistribute bgp vrf green
▪ However, since VSP8000-2 still prefers
ISIS over BGP, as soon as the VSP8000-1
ISIS announces the BGP routes,
VSP8000-2 will replace its BGP route with
an ISIS one
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – ISIS  eBGP Redistribution - Checking

VSP8000-1 8600A Clip1: 10.0.0.11


ISIS Ext eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

VSP8000-2 8600B Clip1: 10.0.0.12


▪ Looking good
VSP8000-1:1#% show ip route vrf green VSP8000-2:1#% show ip route vrf green
===================================================================================================== =====================================================================================================
IP Route - VRF green IP Route - VRF green
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
172.16.0.0 255.255.0.0 VSP4000 green 10 4051 ISIS 0 IBSV 50 172.16.0.0 255.255.0.0 VSP4000 green 10 4051 ISIS 0 IBSV 7
192.168.0.0 255.255.128.0 192.168.255.1 green 2 2/8 BGP 0 IB 45 192.168.0.0 255.255.128.0 VSP8000-1 green 2 4051 ISIS 0 IBSV 7
192.168.255.0 255.255.255.252 192.168.255.2 - 1 2/8 LOC 0 DB 0 192.168.255.4 255.255.255.252 192.168.255.6 - 1 2/8 LOC 0 DB 0

VSP8000-1:1#% show ip bgp route vrf green VSP8000-2:1#% show ip bgp route vrf green
==================================================================================================== ====================================================================================================
BGP Routes - VRF green BGP Routes - VRF green
==================================================================================================== ====================================================================================================
The total number of bgp routes in this Vrf are 1 The total number of bgp routes in this Vrf are 1
NETWORK/MASK PEER REM ADDR NEXTHOP ADDRESS ORG LOC PREF NETWORK/MASK PEER REM ADDR NEXTHOP ADDRESS ORG LOC PREF
---------------------------------------------------------------------------------------------------- ----------------------------------------------------------------------------------------------------
192.168.0.0/17 192.168.255.1 192.168.255.1 IGP 100 192.168.0.0/17 192.168.255.5 192.168.255.5 IGP 100
AS_PATH: (65001 65003) AS_PATH: (65001 65003)

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – ISIS ➔ eBGP Redistribution

VSP8000-1 8600A Clip1: 10.0.0.11


ISIS Ext eBGP Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13
ISIS Int BGP
192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
L3VSN 30001 2/16 AS AS 3/30 MPLS
IS-IS 65002 65001 eBGP 65003
Network
1/48 3/12
eBGP
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
ISIS Int BGP eBGP 2/5
2/8

VSP8000-2 8600B Clip1: 10.0.0.12

router vrf green


route-map isis-internal 1
▪ We are now faced with redistributing ISIS
match metric-type-isis internal routes into BGP
enable
exit ▪ We want to redistribute ONLY ISIS Internal
ip bgp redistribute isis
ip bgp redistribute isis route-map isis-internal
routes
ip bgp redistribute isis enable
exit
▪ We do NOT want to redistribute the ISIS
ip bgp apply redistribute isis vrf green External route which VSP8000-2 has
pointing to VSP8000-1

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – ISIS ➔ eBGP Redistribution - Checking

VSP8000-1 8600A Clip1: 10.0.0.11


ISIS Ext Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13
ISIS Int eBGP
192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30

iBGP
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
ISIS Int eBGP 2/5
2/8 eBGP

VSP8000-2 8600B Clip1: 10.0.0.12

8600A:5#% show ip bgp route 8600B:5#% show ip bgp route


================================================================================ ================================================================================
BGP Routes - GlobalRouter BGP Routes - GlobalRouter
================================================================================ ================================================================================
The total number of routes is 3 The total number of routes is 3
NETWORK/MASK PEER REM ADDR NEXTHOP ADDRESS ORG LOC PREF NETWORK/MASK PEER REM ADDR NEXTHOP ADDRESS ORG LOC PREF
-------------------------------------------------------------------------------- --------------------------------------------------------------------------------
172.16.0.0/16 192.168.255.2 192.168.255.2 INC 200 172.16.0.0/16 10.0.0.11 10.0.0.11 INC 200
AS_PATH: (65002) AS_PATH: (65002)
172.16.0.0/16 10.0.0.12 10.0.0.12 INC 20 172.16.0.0/16 192.168.255.6 192.168.255.6 INC 20
AS_PATH: (65002) AS_PATH: (65002)
192.168.0.0/17 10.0.0.10 10.0.0.10 IGP 100 192.168.0.0/17 10.0.0.10 10.0.0.10 IGP 100
AS_PATH: (65003) AS_PATH: (65003)

▪ Looking good
©2017 Extreme Networks, Inc.
©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – Final Checking

VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

VSP8000-2 8600B Clip1: 10.0.0.12

VSP4000:1#% show ip route vrf green 8600G:5#% show ip route


===================================================================================================== ===========================================================================================
IP Route - VRF green IP Route - GlobalRouter
===================================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
172.16.0.0 255.255.0.0 172.16.0.41 - 1 0 LOC 0 DB 0 10.0.0.10 255.255.255.255 10.0.0.10 - 1 0 LOC 0 DB 0
192.168.0.0 255.255.128.0 VSP8000-1 green 2 4051 ISIS 0 IBSV 7 10.0.0.11 255.255.255.255 192.168.255.13 GlobalRout~ 11 3/11 OSPF 0 IB 20
10.0.0.12 255.255.255.255 192.168.255.17 GlobalRout~ 11 3/12 OSPF 0 IB 20
172.16.0.0 255.255.0.0 192.168.255.13 GlobalRout~ 1 3/11 BGP 0 IB 175
192.168.0.0 255.255.128.0 192.168.255.22 GlobalRout~ 1 3/5 BGP 0 IB 45
192.168.255.8 255.255.255.252 192.168.255.13 GlobalRout~ 2 3/11 OSPF 0 IB 20
192.168.255.12 255.255.255.252 192.168.255.14 - 1 3/11 LOC 0 DB 0
192.168.255.16 255.255.255.252 192.168.255.18 - 1 3/12 LOC 0 DB 0
192.168.255.20 255.255.255.252 192.168.255.21 - 1 3/5 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – Final Checking

VSP8000-1 8600A Clip1: 10.0.0.11


192.168.0.0/17
Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
192.168.0.0/17 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

VSP8000-2 8600B Clip1: 10.0.0.12

VSP8000-1:1#% show ip route vrf green VSP8000-2:1#% show ip route vrf green
===================================================================================================== =====================================================================================================
IP Route - VRF green IP Route - VRF green
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
172.16.0.0 255.255.0.0 VSP4000 green 10 4051 ISIS 0 IBSV 50 172.16.0.0 255.255.0.0 VSP4000 green 10 4051 ISIS 0 IBSV 7
192.168.0.0 255.255.128.0 192.168.255.1 green 2 2/8 BGP 0 IB 45 192.168.0.0 255.255.128.0 VSP8000-1 green 2 4051 ISIS 0 IBSV 7
192.168.255.0 255.255.255.252 192.168.255.2 - 1 2/8 LOC 0 DB 0 192.168.255.4 255.255.255.252 192.168.255.6 - 1 2/8 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – Final Checking

VSP8000-1 8600A Clip1: 10.0.0.11


172.16.0.0/16
Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
Primary path
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
172.16.0.0/16 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

VSP8000-2 8600B Clip1: 10.0.0.12

8600B:5#% show ip route 8600A:5#% show ip route


=========================================================================================== ===========================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
=========================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
10.0.0.10 255.255.255.255 192.168.255.18 GlobalRout~ 11 3/3 OSPF 0 IB 20 10.0.0.10 255.255.255.255 192.168.255.14 GlobalRout~ 11 3/2 OSPF 0 IB 20
10.0.0.11 255.255.255.255 192.168.255.9 GlobalRout~ 11 3/30 OSPF 0 IB 20 10.0.0.11 255.255.255.255 10.0.0.11 - 1 0 LOC 0 DB 0
10.0.0.12 255.255.255.255 10.0.0.12 - 1 0 LOC 0 DB 0 10.0.0.12 255.255.255.255 192.168.255.10 GlobalRout~ 11 3/30 OSPF 0 IB 20
172.16.0.0 255.255.0.0 192.168.255.9 GlobalRout~ 1 3/30 BGP 0 IB 175 172.16.0.0 255.255.0.0 192.168.255.2 GlobalRout~ 1 2/5 BGP 0 IB 45
192.168.0.0 255.255.128.0 192.168.255.18 GlobalRout~ 1 3/3 BGP 0 IB 175 192.168.0.0 255.255.128.0 192.168.255.14 GlobalRout~ 1 3/2 BGP 0 IB 175
192.168.255.4 255.255.255.252 192.168.255.5 - 1 2/5 LOC 0 DB 0 192.168.255.0 255.255.255.252 192.168.255.1 - 1 2/5 LOC 0 DB 0
192.168.255.8 255.255.255.252 192.168.255.10 - 1 3/30 LOC 0 DB 0 192.168.255.8 255.255.255.252 192.168.255.9 - 1 3/30 LOC 0 DB 0
192.168.255.12 255.255.255.252 192.168.255.18 GlobalRout~ 2 3/3 OSPF 0 IB 20 192.168.255.12 255.255.255.252 192.168.255.13 - 1 3/2 LOC 0 DB 0
192.168.255.16 255.255.255.252 192.168.255.17 - 1 3/3 LOC 0 DB 0 192.168.255.16 255.255.255.252 192.168.255.14 GlobalRout~ 2 3/2 OSPF 0 IB 20

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – Testing Failover

VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5

VSP8000-2 8600B Clip1: 10.0.0.12

VSP4000:1#% show ip route vrf green 8600G:5#% show ip route


===================================================================================================== ===========================================================================================
IP Route - VRF green IP Route - GlobalRouter
===================================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
172.16.0.0 255.255.0.0 172.16.0.41 - 1 0 LOC 0 DB 0 10.0.0.10 255.255.255.255 10.0.0.10 - 1 0 LOC 0 DB 0
192.168.0.0 255.255.128.0 VSP8000-2 green 2 4051 ISIS 0 IBSV 7 10.0.0.11 255.255.255.255 192.168.255.13 GlobalRout~ 11 3/11 OSPF 0 IB 20
10.0.0.12 255.255.255.255 192.168.255.17 GlobalRout~ 11 3/12 OSPF 0 IB 20
172.16.0.0 255.255.0.0 192.168.255.17 GlobalRout~ 1 3/12 BGP 0 IB 175
192.168.0.0 255.255.128.0 192.168.255.22 GlobalRout~ 1 3/5 BGP 0 IB 45
192.168.255.8 255.255.255.252 192.168.255.13 GlobalRout~ 2 3/11 OSPF 0 IB 20
192.168.255.12 255.255.255.252 192.168.255.14 - 1 3/11 LOC 0 DB 0
192.168.255.16 255.255.255.252 192.168.255.18 - 1 3/12 LOC 0 DB 0
192.168.255.20 255.255.255.252 192.168.255.21 - 1 3/5 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – Testing Failover

VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
192.168.0.0/17 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
192.168.0.0/17
VSP8000-2 8600B Clip1: 10.0.0.12

VSP8000-1:1#% show ip route vrf green VSP8000-2:1#% show ip route vrf green
===================================================================================================== =====================================================================================================
IP Route - VRF green IP Route - VRF green
===================================================================================================== =====================================================================================================
NH INTER NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
----------------------------------------------------------------------------------------------------- -----------------------------------------------------------------------------------------------------
172.16.0.0 255.255.0.0 VSP4000 green 10 4051 ISIS 0 IBSV 50 172.16.0.0 255.255.0.0 VSP4000 green 10 4051 ISIS 0 IBSV 7
192.168.0.0 255.255.128.0 VSP8000-2 green 2 4051 ISIS 0 IBSV 50 192.168.0.0 255.255.128.0 192.168.255.5 green 2 2/8 BGP 0 IB 45
192.168.255.4 255.255.255.252 192.168.255.6 - 1 2/8 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Case (b) VRF L3VSN – Testing Failover

VSP8000-1 8600A Clip1: 10.0.0.11


Clip1: 10.0.0.10
2/8 eBGP 2/5 8600G
1/13 192.168.255.0/30 3/2
VSP4000 8600C

192.168.255.8/30
1/47 3/11 192.168.255.20/30
SPB Simulate 3/5 4/30 AS
2/16 AS AS 3/30
L3VSN 30001 MPLS 65003
IS-IS 65002 65001 eBGP
172.16.0.0/16 Network
1/48 3/12
192.168.255.4/30
1/13 3/3
Net 172.16.0.0/16 Net 192.168.0.0/17
2/8 eBGP 2/5
172.16.0.0/16
VSP8000-2 8600B Clip1: 10.0.0.12

8600B:5#% show ip route 8600A:5#% show ip route


=========================================================================================== ===========================================================================================
IP Route - GlobalRouter IP Route - GlobalRouter
=========================================================================================== ===========================================================================================
NH INTER NH INTER
DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF DST MASK NEXT VRF COST FACE PROT AGE TYPE PRF
------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------
10.0.0.10 255.255.255.255 192.168.255.18 GlobalRout~ 11 3/3 OSPF 0 IB 20 10.0.0.10 255.255.255.255 192.168.255.14 GlobalRout~ 11 3/2 OSPF 0 IB 20
10.0.0.11 255.255.255.255 192.168.255.9 GlobalRout~ 11 3/30 OSPF 0 IB 20 10.0.0.11 255.255.255.255 10.0.0.11 - 1 0 LOC 0 DB 0
10.0.0.12 255.255.255.255 10.0.0.12 - 1 0 LOC 0 DB 0 10.0.0.12 255.255.255.255 192.168.255.10 GlobalRout~ 11 3/30 OSPF 0 IB 20
172.16.0.0 255.255.0.0 192.168.255.6 GlobalRout~ 1 2/5 BGP 0 IB 45 172.16.0.0 255.255.0.0 192.168.255.10 GlobalRout~ 1 3/30 BGP 0 IB 175
192.168.0.0 255.255.128.0 192.168.255.18 GlobalRout~ 1 3/3 BGP 0 IB 175 192.168.0.0 255.255.128.0 192.168.255.14 GlobalRout~ 1 3/2 BGP 0 IB 175
192.168.255.4 255.255.255.252 192.168.255.5 - 1 2/5 LOC 0 DB 0 192.168.255.8 255.255.255.252 192.168.255.9 - 1 3/30 LOC 0 DB 0
192.168.255.8 255.255.255.252 192.168.255.10 - 1 3/30 LOC 0 DB 0 192.168.255.12 255.255.255.252 192.168.255.13 - 1 3/2 LOC 0 DB 0
192.168.255.12 255.255.255.252 192.168.255.18 GlobalRout~ 2 3/3 OSPF 0 IB 20 192.168.255.16 255.255.255.252 192.168.255.14 GlobalRout~ 2 3/2 OSPF 0 IB 20
192.168.255.16 255.255.255.252 192.168.255.17 - 1 3/3 LOC 0 DB 0

©2017 Extreme Networks, Inc.


©2017
All rights
Extreme
reserved
Networks, Inc. All rights reserved
Thank You

WWW.EXTREMENETWORKS.COM

©2017 Extreme Networks, Inc. All rights reserved

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy