Skip to content
🌱

Add a new VLAN to the core switch

Catalyst の場合の設定

Section titled “Catalyst の場合の設定”
  • Active
vlan $VLAN_ID
 name $VLAN_NAME


spanning-tree vlan $VLAN_ID priority 8192


interface Po1
 switchport trunk allowed vlan add $VLAN_ID


interface Vlan $VLAN_ID
 description $VLAN_NAME
 ip address [IPaddr] [netmask]
 ip access-group $VLAN_NAME_in in
 ip access-group $VLAN_NAME_out out
 no ip redirects
 no ip proxy-arp
 ip ospf cost 100
 logging event link-status


 ipv6 address FE80::xxxx:xxxx:xxxx:xxxx link-local
 ipv6 address xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/64
 ipv6 enable
 ipv6 traffic-filter $VLAN_NAMEv6_in in
 ipv6 traffic-filter $VLAN_NAMEv6_out out
 ipv6 nd ra suppress
 ipv6 ospf cost 100
 ipv6 ospf $AS_NUM area 0 ※投入前に ACL 適用


 ※HSRP ver2 を使用
 standby version 2
 standby delay minimum 300
 standby 0 ip [HSRPaddr4]
 standby 0 priority 200
 standby 0 preempt
 standby [vlan_id] ipv6 FE80::xxxx:xxxx:xxxx:xxxx
 standby [vlan_id] ipv6 [HSRPaddr6]/[prefixlen]
 standby [vlan_id] priority 200
 standby [vlan_id] preempt


router ospf $AS_NUM
 passive-interface Vlan$VLAN_ID
 network [IPaddr] 0.0.0.0 area 0 ※投入前に ACL 適用


ipv6 router ospf $AS_NUM
 passive-interface Vlan$VLAN_ID
  • Standby
vlan $VLAN_ID
 name $VLAN_NAME


spanning-tree vlan $VLAN_ID priority 16384


interface Po1
 switchport trunk allowed vlan add $VLAN_ID


interface Vlan $VLAN_ID
 description $VLAN_NAME
 ip address [IPaddr] [netmask]
 ip access-group $VLAN_NAME_in in
 ip access-group $VLAN_NAME_out out
 no ip redirects
 no ip proxy-arp
 ip ospf cost 200
 logging event link-status


 ipv6 address FE80::xxxx:xxxx:xxxx:xxxx link-local
 ipv6 address xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/64
 ipv6 enable
 ipv6 traffic-filter $VLAN_NAMEv6_in in
 ipv6 traffic-filter $VLAN_NAMEv6_out out
 ipv6 nd ra suppress
 ipv6 ospf cost 200
 ipv6 ospf $AS_NUM area 0 ※投入前に ACL 適用


 ※HSRP ver2 を使用
 standby version 2
 standby 0 ip [HSRPaddr4]
 standby 0 priority 100
 standby [vlan_id] ipv6 FE80::xxxx:xxxx:xxxx:xxxx
 standby [vlan_id] ipv6 [HSRPaddr6]/[prefixlen]
 standby [vlan_id] priority 100


router ospf $AS_NUM
 passive-interface Vlan$VLAN_ID
 network [IPaddr] 0.0.0.0 area 0 ※投入前に ACL 適用


ipv6 router ospf $AS_NUM
 passive-interface Vlan$VLAN_ID

Nexus の場合の設定

Section titled “Nexus の場合の設定”
  • Active
vlan $VLAN_ID
 name $VLAN_NAME


spanning-tree vlan $VLAN_ID priority 8192


interface Po1
 switchport trunk allowed vlan add $VLAN_ID


interface Vlan$VLAN_ID
 description $VLAN_NAME
 ip address [IPv4 addr]/[prefixlen]
 ip ospf cost 100
 ip ospf passive-interface
 ip router ospf $AS_NUM area 0.0.0.0 ※投入前に ACL 適用


 ipv6 address [IPv6 addr]/[prefixlen]
 ipv6 link-local [IPv6 link-local addr]
 ipv6 nd suppress-ra
 ospfv3 cost 100
 ospfv3 passive-interface


 ipv6 router ospfv3 $AS_NUM area 0.0.0.0 ※投入前に ACL 適用


 hsrp version 2 ※HSRP ver2 を使用
 hsrp delay minimum 300
 hsrp 0
   preempt
   priority 200
   ip [IPv4 addr]
 hsrp $VLAN_ID ipv6
   preempt
   priority 200
   ip [IPv6 addr]
   ip [IPv6 link-local addr]
  • Standby
vlan $VLAN_ID
 name $VLAN_NAME


spanning-tree vlan $VLAN_ID priority 16384


interface Po1
 switchport trunk allowed vlan add $VLAN_ID


interface Vlan$VLAN_ID
 description $VLAN_NAME
 ip address [IPv4 addr]/[prefixlen]
 ip ospf cost 200
 ip ospf passive-interface
 ip router ospf $AS_NUM area 0.0.0.0 ※投入前に ACL 適用


 ipv6 address [IPv6 addr]/[prefixlen]
 ipv6 link-local [IPv6 link-local addr]
 ipv6 nd suppress-ra
 ospfv3 cost 200
 ospfv3 passive-interface


 ipv6 router ospfv3 $AS_NUM area 0.0.0.0 ※投入前に ACL 適用


 hsrp version 2 ※HSRP ver2 を使用
 hsrp 0
   ip [IPv4 addr]
 hsrp $VLAN_ID ipv6
   ip [IPv6 addr]
   ip [IPv6 link-local addr]

IPv4 only

Section titled “IPv4 only”
  • Active
vlan $VLAN_ID
 name $VLAN_NAME


spanning-tree vlan $VLAN_ID priority 8192


interface Po1
 switchport trunk allowed vlan add $VLAN_ID


interface Vlan$VLAN_ID
 description $VLAN_NAME
 ip address [IPaddr] [netmask]
 ip access-group $VLAN_NAME_in in
 ip access-group $VLAN_NAME_out out
 no ip redirects
 no ip proxy-arp
 ip ospf cost 100
 logging event link-status
 standby delay minimum 300
 standby ip [HSRPaddr]
 standby priority 200
 standby preempt
  • Standby
vlan $VLAN_ID
 name $VLAN_NAME


spanning-tree vlan $VLAN_ID priority 16384


interface Po1
 switchport trunk allowed vlan add $VLAN_ID


interface Vlan$VLAN_ID
 description $VLAN_NAME
 ip address [IPaddr] [netmask]
 ip access-group $VLAN_NAME_in in
 ip access-group $VLAN_NAME_out out
 no ip redirects
 no ip proxy-arp
 ip ospf cost 200
 logging event link-status
 standby ip [HSRPaddr]

STP だけ抜き出し

Section titled “STP だけ抜き出し”
  • Active
int po1
  switchport trunk allowed vlan add 231


spanning-tree vlan 231 priority 8192
VLAN0231
  Spanning tree enabled protocol rstp
  Root ID    Priority    8423
             Address     0023.04ee.be02
             This bridge is the root
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec


  Bridge ID  Priority    8423   (priority 8192 sys-id-ext 231)
             Address     0023.04ee.be02
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec


Interface        Role Sts Cost      Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Po1              Desg FWD 1         128.4096 (vPC peer-link) Network P2p
Eth2/6           Desg FWD 2         128.262  P2p
  • Standby
int po1
  switchport trunk allowed vlan add 231


spanning-tree vlan 231 priority 16384
VLAN0231
  Spanning tree enabled protocol rstp
  Root ID    Priority    8423
             Address     0023.04ee.be02
             Cost        1
             Port        4096 (port-channel1)
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec


  Bridge ID  Priority    16615  (priority 16384 sys-id-ext 231)
             Address     0023.04ee.be02
             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec


Interface        Role Sts Cost      Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Po1              Root FWD 1         128.4096 (vPC peer-link) Network P2p
Eth2/6           Altn BLK 2         128.262  P2p

HSRP

Section titled “HSRP”
  • Active
int Vlan231
  hsrp 0
  priority 200
  ip 10.147.57.65
Interface   Grp  Prio P State    Active addr      Standby addr     Group addr
 Vlan231     0    200    Active   local            10.147.57.67     10.147.57.65    (conf)
  • Standby
int Vlan231
  hsrp 0
  priority 100
  ip 10.147.57.65
Interface   Grp  Prio P State    Active addr      Standby addr     Group addr
 Vlan231     0    100    Standby  10.147.57.66     local            10.147.57.65    (conf)

OSPF

Section titled “OSPF”
  • Active
int Vlan231
  ip ospf cost100
  ip ospf passive-interface
  ip router ospf 23816 area 0.0.0.0
  • Standby 
    int Vlan231
      ip ospf cost 200
      ip ospf passive-interface
      ip router ospf 23816 area 0.0.0.0

OSPF 経路広報

Section titled “OSPF 経路広報”
  • コアスイッチ側(catalyst)
router ospf $AS_NUM
 network [IPaddr] 0.0.0.0 area 0


interface Vlan$VLAN_ID
 ipv6 ospf $AS_NUM area 0
  • コアスイッチ側(Nexus)
interface Vlan$VLAN_ID
 ip router ospf $AS_NUM area 0.0.0.0
 ipv6 router ospfv3 $AS_NUM area 0.0.0.0
  • Juniper 側
show route [IPaddr]