Monday, November 26, 2018

Juniper vMX - Single Area OSPF

Juniper vMX - Single Area OSPF







Configuration:

vMX-1

set system host-name
set system root-authentication  plain-text-password
set protocols lldp interface all

set interfaces ge-0/0/0 unit 0 description "vMX-2"
set interfaces ge-0/0/0 unit 0 family inet address 10.42.12.1/24
set interfaces ge-0/0/1 unit 0 description "vMX-3"
set interfaces ge-0/0/1 unit 0 family inet address 10.42.13.1/24
set interfaces lo0 unit 0 family inet address 1.1.1.1/32

OSPF
set protocols ospf area 0 interface ge-0/0/0.0
set protocols ospf area 0 interface ge-0/0/1.0
set protocols ospf area 0 interface lo-0.0 passive

vMX-2

set system host-name vMX-2
set system root-authentication  plain-text-password
set protocols lldp interface all

set interfaces ge-0/0/0 unit 0 description "vMX-1"
set interfaces ge-0/0/0 unit 0 family inet address 10.42.12.2/24
set interfaces ge-0/0/1 unit 0 description "vMX-3"
set interfaces ge-0/0/1 unit 0 family inet address 10.42.23.2/24
set interfaces lo0 unit 0 family inet address 2.2.2.2/32

OSPF
set protocols ospf area 0 interface ge-0/0/0.0
set protocols ospf area 0 interface ge-0/0/1.0
set protocols ospf area 0 interface lo-0.0 passive

vMX-3

set system host-name vMX-3
set system root-authentication  plain-text-password
set protocols lldp interface all

set interfaces ge-0/0/0 unit 0 description "vMX-1"
set interfaces ge-0/0/0 unit 0 family inet address 10.42.13.3/24
set interfaces ge-0/0/1 unit 0 description "vMX-2"
set interfaces ge-0/0/1 unit 0 family inet address 10.42.23.3/24
set interfaces lo0 unit 0 family inet address 3.3.3.3/32

OSPF
set protocols ospf area 0 interface ge-0/0/0.0
set protocols ospf area 0 interface ge-0/0/1.0
set protocols ospf area 0 interface lo-0.0 passive

set routing-options router-id 33.33.33.33 < -- Manually changing RID

Verification :

show lldp neighbor
show interface terse
ping <ip> rapid
show ospf neighbor
show ospf interface brief
show route protocol ospf terse <prefix>
show ospf overview
show ospf overview | match "Router ID"

show configuration interface
show configuration protocol ospf
show configuration routing-option router-id
show configuration system

Sunday, November 25, 2018

Nexus vPC Consistency check failure

vPC consistency check failure:

Consistency check failed due to two reasons
  1. Configuration inconsistency
  2. Type 2 (QoSMgr Qos configuration incompatible)


Primary switch

N3K1# sh vpc
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                     : 1   
Peer status                       : peer adjacency formed ok      
vPC keep-alive status             : peer is alive                 
Configuration consistency status  : failed  
Per-vlan consistency status       : failed                        
Configuration inconsistency reason: TLV Utils invalid arg passed in api
Type-2 consistency status         : failed  
Type-2 inconsistency reason       : QoSMgr Qos configuration incompatible
vPC role                          : primary                       
Number of vPCs configured         : 44  
Peer Gateway                      : Enabled
Dual-active excluded VLANs        : -
Graceful Consistency Check        : Enabled
Auto-recovery status              : Enabled, timer is off.(timeout = 240s)
Delay-restore status              : Timer is off.(timeout = 30s)
Delay-restore SVI status          : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router    : Disabled

vPC Peer-link status
---------------------------------------------------------------------
id    Port   Status Active vlans    
--    ----   ------ -------------------------------------------------
1     Po100  up     1,500,519,599,697                                                    

vPC status
----------------------------------------------------------------------------
Id    Port          Status Consistency Reason                Active vlans
--    ------------  ------ ----------- ------                ---------------
1     Po1           up     failed      Global compat check   500,519,599                 
                                       failed                                            
2     Po2           up     failed      Global compat check   500,519,599 


Secondary switch

N3K2#sh vpc
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                     : 1   
Peer status                       : peer adjacency formed ok      
vPC keep-alive status             : peer is alive                 
Configuration consistency status  : failed  
Per-vlan consistency status       : success                       
Configuration inconsistency reason: TLV Utils invalid arg passed in api
Type-2 consistency status         : success 
vPC role                          : secondary                     
Number of vPCs configured         : 44  
Peer Gateway                      : Enabled
Dual-active excluded VLANs        : -
Graceful Consistency Check        : Enabled
Auto-recovery status              : Enabled, timer is off.(timeout = 240s)
Delay-restore status              : Timer is off.(timeout = 30s)
Delay-restore SVI status          : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router    : Disabled

vPC Peer-link status
---------------------------------------------------------------------
id    Port   Status Active vlans    
--    ----   ------ -------------------------------------------------
1     Po100  up     1,500,519,599,697                                                    

vPC status
----------------------------------------------------------------------------
Id    Port          Status Consistency Reason                Active vlans
--    ------------  ------ ----------- ------                ---------------
1     Po1           down*  failed      Global compat check   -                           
                                       failed                                            
2     Po2           down*  failed      Global compat check   -                           
                                       failed

Action Taken :

1)  Internal storage got corrupted.

---
1) Event:E_DEBUG, length:71, at 756769 usecs after Fri Jun 29 19:19:02 2018

    [18] nve_mgr_mcecm_type1_glbl_cfg_compat_check: unable to get local tlv

---
2) Compared the configuration on N3K 01 and 02 and all are same.
3) Reloaded both N3Ks one by one, then fixed the TLV inconsistency
4) Reloaded the N3K-01 by ascii option, then cleared the QosMgr inconsistency
                                            



Paloalto - Auto commit failure after upgrade

Issue: Auto commit was keep failing after upgrade Error logs admin@paloalto> show jobs all Enqueued              Dequeued           ID  ...