avpn dg bgp neigh desc

aristanetworks · Oct 6, 2024 · f5f5eae · f5f5eae
1 parent 920e72f
commit f5f5eae
Show file tree

Hide file tree

Showing 7 changed files with 56 additions and 18 deletions.
diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-R1.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-R1.cfg
@@ -97,6 +97,8 @@ ip security
       shared-key 7 0110100A480E0A0E231D1E
       dpd 10 50 clear
       mode transport
+      !
+      flow entropy udp
    !
    key controller
       profile IPSEC-PROFILE
@@ -177,16 +179,20 @@ router bgp 65000
    neighbor WAN-OVERLAY-PEERS password 7 Jasxt4q1i1EVo3kE0U5v4w==
    neighbor WAN-OVERLAY-PEERS maximum-routes 0
    neighbor 10.0.1.201 peer group LOCAL-EVPN-PEERS
+   neighbor 10.0.1.201 description DC1-SPINE.EVPN
    neighbor 10.1.1.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.1.3 description DC1-R2.DPS.EVPN
    neighbor 10.1.2.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.2.3 description DC2-R2.DPS.EVPN
    neighbor 172.20.1.2 peer group IPv4-UNDERLAY-PEERS
+   neighbor 172.20.1.2 description DC1-SPINE.IPv4
    redistribute connected rcf CONN_2_BGP()
    !
    address-family evpn
       neighbor LOCAL-EVPN-PEERS activate
-      neighbor LOCAL-EVPN-PEERS encapsulation vxlan
+      neighbor LOCAL-EVPN-PEERS encapsulation vxlan 
       neighbor WAN-OVERLAY-PEERS activate
-      neighbor WAN-OVERLAY-PEERS encapsulation path-selection
+      neighbor WAN-OVERLAY-PEERS encapsulation path-selection 
       neighbor WAN-OVERLAY-PEERS domain remote
       route import match-failure action discard
    !
@@ -248,4 +254,4 @@ stun
       server-profile DC2-R2-Ethernet2
          ip address 192.0.2.14
 !
-end
+end
diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-R2.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-R2.cfg
@@ -91,6 +91,8 @@ ip security
       shared-key 7 0110100A480E0A0E231D1E
       dpd 10 50 clear
       mode transport
+      !
+      flow entropy udp
 !
 interface Dps1
    description TEP IP
@@ -169,15 +171,18 @@ router bgp 65000
    neighbor WAN-OVERLAY-PEERS password 7 Jasxt4q1i1EVo3kE0U5v4w==
    neighbor WAN-OVERLAY-PEERS maximum-routes 0
    neighbor 10.0.1.201 peer group LOCAL-EVPN-PEERS
+   neighbor 10.0.1.201 description DC1-SPINE.EVPN
    neighbor 10.1.2.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.2.3 description DC2-R2.DPS.EVPN
    neighbor 172.20.1.4 peer group IPv4-UNDERLAY-PEERS
+   neighbor 172.20.1.4 description DC1-SPINE.IPv4
    redistribute connected rcf CONN_2_BGP()
    !
    address-family evpn
       neighbor LOCAL-EVPN-PEERS activate
-      neighbor LOCAL-EVPN-PEERS encapsulation vxlan
+      neighbor LOCAL-EVPN-PEERS encapsulation vxlan 
       neighbor WAN-OVERLAY-PEERS activate
-      neighbor WAN-OVERLAY-PEERS encapsulation path-selection
+      neighbor WAN-OVERLAY-PEERS encapsulation path-selection 
       neighbor WAN-OVERLAY-PEERS domain remote
       route import match-failure action discard
    !
@@ -235,4 +240,4 @@ stun
    server
       local-interface Ethernet2
 !
-end
+end
diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-R1.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-R1.cfg
@@ -97,6 +97,8 @@ ip security
       shared-key 7 0110100A480E0A0E231D1E
       dpd 10 50 clear
       mode transport
+      !
+      flow entropy udp
    !
    key controller
       profile IPSEC-PROFILE
@@ -177,16 +179,20 @@ router bgp 65000
    neighbor WAN-OVERLAY-PEERS password 7 Jasxt4q1i1EVo3kE0U5v4w==
    neighbor WAN-OVERLAY-PEERS maximum-routes 0
    neighbor 10.0.2.201 peer group LOCAL-EVPN-PEERS
+   neighbor 10.0.2.201 description DC2-SPINE.EVPN
    neighbor 10.1.1.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.1.3 description DC1-R2.DPS.EVPN
    neighbor 10.1.2.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.2.3 description DC2-R2.DPS.EVPN
    neighbor 172.20.2.2 peer group IPv4-UNDERLAY-PEERS
+   neighbor 172.20.2.2 description DC2-SPINE.IPv4
    redistribute connected rcf CONN_2_BGP()
    !
    address-family evpn
       neighbor LOCAL-EVPN-PEERS activate
-      neighbor LOCAL-EVPN-PEERS encapsulation vxlan
+      neighbor LOCAL-EVPN-PEERS encapsulation vxlan 
       neighbor WAN-OVERLAY-PEERS activate
-      neighbor WAN-OVERLAY-PEERS encapsulation path-selection
+      neighbor WAN-OVERLAY-PEERS encapsulation path-selection 
       neighbor WAN-OVERLAY-PEERS domain remote
       route import match-failure action discard
    !
@@ -248,4 +254,4 @@ stun
       server-profile DC2-R2-Ethernet2
          ip address 192.0.2.14
 !
-end
+end
diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-R2.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-R2.cfg
@@ -91,6 +91,8 @@ ip security
       shared-key 7 0110100A480E0A0E231D1E
       dpd 10 50 clear
       mode transport
+      !
+      flow entropy udp
 !
 interface Dps1
    description TEP IP
@@ -169,15 +171,18 @@ router bgp 65000
    neighbor WAN-OVERLAY-PEERS password 7 Jasxt4q1i1EVo3kE0U5v4w==
    neighbor WAN-OVERLAY-PEERS maximum-routes 0
    neighbor 10.0.2.201 peer group LOCAL-EVPN-PEERS
+   neighbor 10.0.2.201 description DC2-SPINE.EVPN
    neighbor 10.1.1.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.1.3 description DC1-R2.DPS.EVPN
    neighbor 172.20.2.4 peer group IPv4-UNDERLAY-PEERS
+   neighbor 172.20.2.4 description DC2-SPINE.IPv4
    redistribute connected rcf CONN_2_BGP()
    !
    address-family evpn
       neighbor LOCAL-EVPN-PEERS activate
-      neighbor LOCAL-EVPN-PEERS encapsulation vxlan
+      neighbor LOCAL-EVPN-PEERS encapsulation vxlan 
       neighbor WAN-OVERLAY-PEERS activate
-      neighbor WAN-OVERLAY-PEERS encapsulation path-selection
+      neighbor WAN-OVERLAY-PEERS encapsulation path-selection 
       neighbor WAN-OVERLAY-PEERS domain remote
       route import match-failure action discard
    !
@@ -233,4 +238,4 @@ stun
    server
       local-interface Ethernet2
 !
-end
+end
diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/S1-R1.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/S1-R1.cfg
@@ -97,6 +97,8 @@ ip security
       shared-key 7 0110100A480E0A0E231D1E
       dpd 10 50 clear
       mode transport
+      !
+      flow entropy udp
    !
    key controller
       profile IPSEC-PROFILE
@@ -169,11 +171,13 @@ router bgp 65000
    neighbor WAN-OVERLAY-PEERS password 7 Jasxt4q1i1EVo3kE0U5v4w==
    neighbor WAN-OVERLAY-PEERS maximum-routes 0
    neighbor 10.1.1.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.1.3 description DC1-R2.DPS.EVPN
    neighbor 10.1.2.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.2.3 description DC2-R2.DPS.EVPN
    !
    address-family evpn
       neighbor WAN-OVERLAY-PEERS activate
-      neighbor WAN-OVERLAY-PEERS encapsulation path-selection
+      neighbor WAN-OVERLAY-PEERS encapsulation path-selection 
    !
    address-family path-selection
       bgp additional-paths receive
@@ -185,6 +189,7 @@ router bgp 65000
       route-target import evpn 52:52
       route-target export evpn 52:52
       neighbor 172.20.3.3 remote-as 65300
+      neighbor 172.20.3.3 description S1-SW1.IPv4.DEV
       redistribute connected
       !
       address-family ipv4
@@ -195,6 +200,7 @@ router bgp 65000
       route-target import evpn 51:51
       route-target export evpn 51:51
       neighbor 172.20.3.1 remote-as 65300
+      neighbor 172.20.3.1 description S1-SW1.IPv4.PROD
       redistribute connected
       !
       address-family ipv4
@@ -208,4 +214,4 @@ stun
       server-profile DC2-R2-Ethernet2
          ip address 192.0.2.14
 !
-end
+end
diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/S1-R2.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/S1-R2.cfg
@@ -97,6 +97,8 @@ ip security
       shared-key 7 0110100A480E0A0E231D1E
       dpd 10 50 clear
       mode transport
+      !
+      flow entropy udp
    !
    key controller
       profile IPSEC-PROFILE
@@ -170,11 +172,13 @@ router bgp 65000
    neighbor WAN-OVERLAY-PEERS password 7 Jasxt4q1i1EVo3kE0U5v4w==
    neighbor WAN-OVERLAY-PEERS maximum-routes 0
    neighbor 10.1.1.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.1.3 description DC1-R2.DPS.EVPN
    neighbor 10.1.2.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.2.3 description DC2-R2.DPS.EVPN
    !
    address-family evpn
       neighbor WAN-OVERLAY-PEERS activate
-      neighbor WAN-OVERLAY-PEERS encapsulation path-selection
+      neighbor WAN-OVERLAY-PEERS encapsulation path-selection 
    !
    address-family path-selection
       bgp additional-paths receive
@@ -186,6 +190,7 @@ router bgp 65000
       route-target import evpn 52:52
       route-target export evpn 52:52
       neighbor 172.20.3.7 remote-as 65300
+      neighbor 172.20.3.7 description S1-SW1.IPv4.DEV
       redistribute connected
       !
       address-family ipv4
@@ -196,6 +201,7 @@ router bgp 65000
       route-target import evpn 51:51
       route-target export evpn 51:51
       neighbor 172.20.3.5 remote-as 65300
+      neighbor 172.20.3.5 description S1-SW1.IPv4.PROD
       redistribute connected
       !
       address-family ipv4
@@ -209,4 +215,4 @@ stun
       server-profile DC2-R2-Ethernet2
          ip address 192.0.2.14
 !
-end
+end
diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/S2-R1.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/S2-R1.cfg
@@ -97,6 +97,8 @@ ip security
       shared-key 7 0110100A480E0A0E231D1E
       dpd 10 50 clear
       mode transport
+      !
+      flow entropy udp
    !
    key controller
       profile IPSEC-PROFILE
@@ -170,11 +172,13 @@ router bgp 65000
    neighbor WAN-OVERLAY-PEERS password 7 Jasxt4q1i1EVo3kE0U5v4w==
    neighbor WAN-OVERLAY-PEERS maximum-routes 0
    neighbor 10.1.1.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.1.3 description DC1-R2.DPS.EVPN
    neighbor 10.1.2.3 peer group WAN-OVERLAY-PEERS
+   neighbor 10.1.2.3 description DC2-R2.DPS.EVPN
    !
    address-family evpn
       neighbor WAN-OVERLAY-PEERS activate
-      neighbor WAN-OVERLAY-PEERS encapsulation path-selection
+      neighbor WAN-OVERLAY-PEERS encapsulation path-selection 
    !
    address-family path-selection
       bgp additional-paths receive
@@ -201,4 +205,4 @@ stun
       server-profile DC2-R2-Ethernet2
          ip address 192.0.2.14
 !
-end
+end