Adding vPC to VXLAN | Network Direction

Рет қаралды 28,958

Күн бұрын

Пікірлер: 71

@NetworkDirection 5 жыл бұрын

vPC videos: kzfaq.info/sun/PLDQaRcbiSnqFByfVJrplYwGfArAMGqtp8 VXLAN videos: kzfaq.info/sun/PLDQaRcbiSnqFe6pyaSy-Hwj8XRFPgZ5h8

@austincarter1980 4 жыл бұрын

Just gotta say I never leave comments or anything on youtube videos in particular but I love Network Direction and their collection of videos. Their VXLAN series in particular is excellent and helped me understand the concept. Thank you!

@bidkarpaez8385 5 жыл бұрын

Thank you for EVERYTHING, I finally understood VXLAN due to your videos. Please keep helping people with your knowledge.

@toughhost5677 5 жыл бұрын

You are awesome. Done all the training on VXLAN and VPC+VXLAN. good work. followed you on the tweets!!!!

@ACISData 4 жыл бұрын

nice work mate. thank you heaps

@vincentvlk8289 Жыл бұрын

Great video series, thank you very much, for your hard work 🙂

@blackknight5004 3 жыл бұрын

This series has been really informative. I’ve been working on 3 teir for years and now have to design a spin and leaf.

@NetworkDirection 3 жыл бұрын

Thanks Black Knight!

@rendog311rendog2 5 жыл бұрын

can‘t wait! 🔥😍

@ayansh449 2 ай бұрын

great videos ... perfect

@guilhermetadeu790 4 жыл бұрын

Amazing video. I'm from Brasil and I love this video. Thank u so much

@NetworkDirection 4 жыл бұрын

Glad you enjoyed it!

@veerakumardevireddy2884 3 жыл бұрын

Thanks for your good effort. Excellent Video...

@NetworkDirection 3 жыл бұрын

Thanks for you comment, glad you like it

@santhu457 5 жыл бұрын

Folks, you are doing great..please keep doing:-)

@NetworkDirection 5 жыл бұрын

Thanks!

@Devgrusome 5 жыл бұрын

AWESOME!! So clear. Making these complex technologies simple to understand. TAKE MY MONEY.

@NetworkDirection 5 жыл бұрын

Thanks Josh! I aim to make it simple to understand, so I'm glad it's working!

@RanaShahid87 3 жыл бұрын

I hope there was a 10k like button. And I would press it without giving second thought.

@NetworkDirection 3 жыл бұрын

Thanks Shahid

@DRZREALEST 4 жыл бұрын

would it work the same if you create a non VPC vlan. (by removing it from the VPC) and connecting both switches thru layer3 ? i did this for an ASA that needed to establish OSFP with both switches and saw that the switches also starting passing L3 traffic thru that VLAN as well.

@rohitsijoria7211 3 жыл бұрын

Another great video and thanks for sharing your pain/experience :) Hope it wasn't in the production network.

@NetworkDirection 3 жыл бұрын

Unfortunately, it was in Prod

@danielldf 4 жыл бұрын

Hi thanks for the video. There are a few equipments that don't use the peer link between leaf's. They do this vpc on the spine?

@NetworkDirection 4 жыл бұрын

The spine should be used just for routing, so generally we would not run vPC on the spine. If you mean that there are VLANs that are not part of vPC (that is VLANs pruned from the peer-link), then this traffic will be handled in the same way as any VXLAN environment without vPC. Does that help?

@manolo8241 6 ай бұрын

Great video. What about adveritising single homed devices using the secondary IP? In theory there should be no problem as long as the peerlink is up, but have u ever tried "advertise-pip"?

@rohanprabhudesai3194 4 жыл бұрын

Can i run a routing protocol on a VNI? I have 4 N9k switches across 2 data centres(DC). Each pair is running a vpc. There is a firewall and WAN router connected to the 9k pair using vpc in each DC. I need to create a L2 between the 2 DCs so that firewall can run routing protocol with each WAN router. Is this possible using VXLAN?

@alexhuthmacher 5 жыл бұрын

First you incredibly good at explaining these technologies. Second I finished your VXLAN series and it was very good. I have been thinking about running VXLAN between our Datacenters and eliminating the layer two links between them. Is this a bad idea? The DC are about 20 miles apart from each other.

@NetworkDirection 5 жыл бұрын

I've done it between data centres in two different states before, and it was fine. Underlay needs to be very stable though

@alexhuthmacher 5 жыл бұрын

@@NetworkDirection Would you recommend an Isolated VRF for the underlay and overlay.

@NetworkDirection 5 жыл бұрын

@@alexhuthmacher If you can, an isolated underlay will help. You must consider if this is right for your network though

@francescogalli4033 4 жыл бұрын

Hi, First of all congrats for this amazing channel.. a Bible for a junior networker like me Watching vPC series, you said that when peer link fail, secondary switch shuts down its member ports, and that's clear But i didn't understand why in this case the secondary nexus shuts down the loopback interface, it is not part of vpc member port right ?

@Srqjan Жыл бұрын

Such a great video! Are You going to lab EVPN all-active multihoming on NX9K as an alternative to vPC? It will be awesome.

@SudhaGanapareddy 8 ай бұрын

does any one tried to configure vpc with vxlan in Nexus , i have tried but my loopback going down , after removing feature vpc the loopback is getting up not sure the issue is ?

@charlespearl2793 5 жыл бұрын

Could you explain where the layer3 IP address for the default gateways exist in a spine-and-leaf topology? EG if there were (4) Class C networks for servers 10.1.1.0/24, 10.1.2.0/24 etc... Does the subnets exist on every leaf node? Also, how do there servers work with dual NICs with teaming if you are using non-VPC between the leafs?

@NetworkDirection 5 жыл бұрын

The L3 addresses would follow the VNI. So, each of your subnets would be in a VNI, and the VNI's would be bound to VTEPs. If you're using BGP/EVPN, you don't need to bind the VNI to every leaf. If you have dual-NIC and non-vPC, then you would use active/passive uplinks on the server side.

@Alexvideosama 3 жыл бұрын

Amazing explanation of vPC with VXLAN. Am I wrong or with the latest version os NX-OS the vPC Peer Link is no more needed, instead Cisco introduced the vPC with Fabric Peering?

@NetworkDirection 3 жыл бұрын

Good question! I'm not sure on this one. I don't manage any Nexus switches anymore, so I'm a bit out of date

@Alexvideosama 3 жыл бұрын

@@NetworkDirection If I can get more info from my side I'll update the comment, for everyone who wants to know. On what kind of equip are you right now? Some kind of high level devices?

@pedrotrigueira794 3 жыл бұрын

I've spent a huge ammount of time troubleshooting vxlan evpn vPC without physical peer link. Leaving this finding here for future reference - if one of the host interfaces fail and you lose connectivity all together make sure the TCAM has suficient memory to reroute the packet via the virutal peer link - guidelines and limitation state "...vPC Fabric Peering requires the application of TCAM carving of region "ing-flow-redirect." TCAM carving requires saving the configuration and reloading the switch prior to using the feature. ..." for nexus C9336-FX2 at least

@NetworkDirection 3 жыл бұрын

This is good to know. Thanks for sharing your experience to help others.

@pedrotrigueira794 3 жыл бұрын

on a different note .. do you plan to add a vxlan eVPN vPC without physical link to the series?

@NetworkDirection 3 жыл бұрын

I don't have any plans to add more vPC videos at this time. Right now, I'm not working on any networks with vPC implemented. If this changes, I might look into it

@ashrafhelal9354 8 ай бұрын

Hi, I have been working with catalyst for 5 years, now I works with ACI. I don't understand anything of what you did in the vidoes even the command. what i should do to understand the concept and the command ?

@acc1tester398 2 жыл бұрын

Hi, just curious, will I have access to create my own lab topology specifically for vxlan when I sign up as patreon?

@NetworkDirection 2 жыл бұрын

I don't have any vxlan labs available. You could create your own labs based on the vxlan videos, but you wouldn't need to sign up through patreon for that

@hkn7435 5 жыл бұрын

This is a Great Video. Can you show live as you did before? I am using NX-OS 9.2.3v in GNS3

@NetworkDirection 5 жыл бұрын

I wasn't able to do live config this time. Before I had access to some real hardware for a time, but I didn't when I made this

@brunmorevanrensburg8588 5 жыл бұрын

im busy with this setup but once i add the vpc to my VXLAN my VXLAN stops working how can one fix this

@NetworkDirection 5 жыл бұрын

That really depends on what's wrong. Perhaps there will be a few tricks in this video you can try

@PankajSharma-vi3vl 4 жыл бұрын

Do I need to allow the vlans on VPC peer link port Chanel ?

@NetworkDirection 4 жыл бұрын

Any VLAN that's on a vPC should also be allowed on the peer-link

@BrBr.93 4 жыл бұрын

Hi, thank you for this explanation in case of vPC Fabric Peering peer-keepalive destination " " source " " virtual peer-link destination " " source " " dscp 56 what should be the Src and Dst ? is the LO of VTEP primary IP in both switches or what ??

@NetworkDirection 4 жыл бұрын

Yep, use a loopback interface, and let the routing protocol figure out the egress interface

@BrBr.93 4 жыл бұрын

peer-keepalive destination " " source " " in this command can i use Dst a loopback interface located in both spine in my topology i use 2 spine so how can use shared address in both spines @@NetworkDirection

@ccielearner5435 2 жыл бұрын

what is the use of 'vpc nve peer-link-vlan ' command in 5K's ?

@NetworkDirection 2 жыл бұрын

That's specific to the Nexus 5600 platform. I don't have any experience with them. Try this: www.cisco.com/c/en/us/td/docs/switches/datacenter/pf/configuration/guide/b-pf-configuration/Forwarding-Configurations.html

@brunmorevanrensburg8588 5 жыл бұрын

if you have Nexus 9300 4 of them and runing BGP evpn vxlan with VPC should you be runing VPC Routing or not

@NetworkDirection 5 жыл бұрын

That depends on what you need to achieve. vPC with routing is used when an external device needs to peer with the Nexus switches, over the vPC links. So, it depends if you need to do that or not. If they're connected by orphan ports, then it's not really a worry

@brunmorevanrensburg8588 5 жыл бұрын

@@NetworkDirection hi i got the VXLAN and VPC to work now for the redundancy to work. i have 4 Nexus switches which are in pairs of two each with VPC between them no routers as im doing the routing on the nexus. So if the primary Nexu switch faileds the secondary should take over the VXLAN which goes to the other pair of nexus switches.

@NetworkDirection 5 жыл бұрын

@@brunmorevanrensburg8588 Well done!

@Devgrusome 5 жыл бұрын

Can you do a/some video(s) on EVN please?

@NetworkDirection 5 жыл бұрын

Maybe. I have thought about it. I have a long request list, so I'll see if I can fit it in

@calascaadil4513 4 жыл бұрын

i need this vidios how to get

@simchanergens7917 5 жыл бұрын

Hi Network Direction, actually peer-gateway is not necessary or even mandatory. if you can put a note, would worth it.

@NetworkDirection 5 жыл бұрын

Are you sure? Have a look at BRKDCN-3040. Cisco seem to think it's fairly important. clnv.s3.amazonaws.com/2018/anz/pdf/BRKDCN-3040.pdf It is a feature that supports 'special' packets, so if you can guarantee that your network doesn't have them, then yeah, you won't need it. But there's really no down side to enabling it, so it's safer on.