Juniper vMX - Single Area OSPF

Juniper vMX - Single Area OSPF

Configuration:

vMX-1

set system host-name
set system root-authentication  plain-text-password
set protocols lldp interface all

set interfaces ge-0/0/0 unit 0 description "vMX-2"
set interfaces ge-0/0/0 unit 0 family inet address 10.42.12.1/24
set interfaces ge-0/0/1 unit 0 description "vMX-3"
set interfaces ge-0/0/1 unit 0 family inet address 10.42.13.1/24
set interfaces lo0 unit 0 family inet address 1.1.1.1/32

OSPF
set protocols ospf area 0 interface ge-0/0/0.0
set protocols ospf area 0 interface ge-0/0/1.0
set protocols ospf area 0 interface lo-0.0 passive

vMX-2

set system host-name vMX-2
set system root-authentication  plain-text-password
set protocols lldp interface all

set interfaces ge-0/0/0 unit 0 description "vMX-1"
set interfaces ge-0/0/0 unit 0 family inet address 10.42.12.2/24
set interfaces ge-0/0/1 unit 0 description "vMX-3"
set interfaces ge-0/0/1 unit 0 family inet address 10.42.23.2/24
set interfaces lo0 unit 0 family inet address 2.2.2.2/32

OSPF
set protocols ospf area 0 interface ge-0/0/0.0
set protocols ospf area 0 interface ge-0/0/1.0
set protocols ospf area 0 interface lo-0.0 passive

vMX-3

set system host-name vMX-3
set system root-authentication  plain-text-password
set protocols lldp interface all

set interfaces ge-0/0/0 unit 0 description "vMX-1"
set interfaces ge-0/0/0 unit 0 family inet address 10.42.13.3/24
set interfaces ge-0/0/1 unit 0 description "vMX-2"
set interfaces ge-0/0/1 unit 0 family inet address 10.42.23.3/24
set interfaces lo0 unit 0 family inet address 3.3.3.3/32

OSPF
set protocols ospf area 0 interface ge-0/0/0.0
set protocols ospf area 0 interface ge-0/0/1.0
set protocols ospf area 0 interface lo-0.0 passive

set routing-options router-id 33.33.33.33 < -- Manually changing RID

Verification :

show lldp neighbor
show interface terse
ping <ip> rapid
show ospf neighbor
show ospf interface brief
show route protocol ospf terse <prefix>
show ospf overview
show ospf overview | match "Router ID"

show configuration interface
show configuration protocol ospf
show configuration routing-option router-id
show configuration system

Nexus vPC Consistency check failure

vPC consistency check failure:

Consistency check failed due to two reasons

1. Configuration inconsistency
2. Type 2 (QoSMgr Qos configuration incompatible)

Primary switch

N3K1# sh vpc

Legend:

                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                     : 1   

Peer status                       : peer adjacency formed ok      

vPC keep-alive status             : peer is alive                 

Configuration consistency status  : failed  

Per-vlan consistency status       : failed                        

Configuration inconsistency reason: TLV Utils invalid arg passed in api

Type-2 consistency status         : failed  

Type-2 inconsistency reason       : QoSMgr Qos configuration incompatible

vPC role                          : primary                       

Number of vPCs configured         : 44  

Peer Gateway                      : Enabled

Dual-active excluded VLANs        : -

Graceful Consistency Check        : Enabled

Auto-recovery status              : Enabled, timer is off.(timeout = 240s)

Delay-restore status              : Timer is off.(timeout = 30s)

Delay-restore SVI status          : Timer is off.(timeout = 10s)

Operational Layer3 Peer-router    : Disabled

vPC Peer-link status

---------------------------------------------------------------------

id    Port   Status Active vlans    

--    ----   ------ -------------------------------------------------

1     Po100  up     1,500,519,599,697                                                    

vPC status

----------------------------------------------------------------------------

Id    Port          Status Consistency Reason                Active vlans

--    ------------  ------ ----------- ------                ---------------

1     Po1           up     failed      Global compat check   500,519,599                 

                                       failed                                            

2     Po2           up     failed      Global compat check   500,519,599 

Secondary switch

N3K2#sh vpc

Legend:

                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                     : 1   

Peer status                       : peer adjacency formed ok      

vPC keep-alive status             : peer is alive                 

Configuration consistency status  : failed  

Per-vlan consistency status       : success                       

Configuration inconsistency reason: TLV Utils invalid arg passed in api

Type-2 consistency status         : success 

vPC role                          : secondary                     

Number of vPCs configured         : 44  

Peer Gateway                      : Enabled

Dual-active excluded VLANs        : -

Graceful Consistency Check        : Enabled

Auto-recovery status              : Enabled, timer is off.(timeout = 240s)

Delay-restore status              : Timer is off.(timeout = 30s)

Delay-restore SVI status          : Timer is off.(timeout = 10s)

Operational Layer3 Peer-router    : Disabled

vPC Peer-link status

---------------------------------------------------------------------

id    Port   Status Active vlans    

--    ----   ------ -------------------------------------------------

1     Po100  up     1,500,519,599,697                                                    

vPC status

----------------------------------------------------------------------------

Id    Port          Status Consistency Reason                Active vlans

--    ------------  ------ ----------- ------                ---------------

1     Po1           down*  failed      Global compat check   -                           

                                       failed                                            

2     Po2           down*  failed      Global compat check   -                           

                                       failed

Action Taken :

1)  Internal storage got corrupted.
---
1) Event:E_DEBUG, length:71, at 756769 usecs after Fri Jun 29 19:19:02 2018

    [18] nve_mgr_mcecm_type1_glbl_cfg_compat_check: unable to get local tlv
---
2) Compared the configuration on N3K 01 and 02 and all are same.
3) Reloaded both N3Ks one by one, then fixed the TLV inconsistency
4) Reloaded the N3K-01 by ascii option, then cleared the QosMgr inconsistency
                                            

Aruba Wifi - Troubleshooting commands

Troubleshooting steps

1. Identify the affected client mac address and enable debug as below

(config)#logging level debugging user-debug <mac>

2. Run below command to get debug logs 

 #show debug 

logging level debugging network process dhcpd subcat dhcp - DHCP logs

show log network all

3. To get the name of the AP in which client is connected 

 #show user-table | include <mac>

4. Below commands to get client activities 

#show log user-debug all | include <mac>
#show auth-tracebuf | include <mac>
#show ap remote debug mgmt-frames ap-name <ap-name> | include <mac>
#show ap client trail-info 

5. To find interference in the environment

 #show ap monitor ap-list ap-name <ap-name>

6. Refer below link to troubleshoot packet 

https://www.arubanetworks.com/techdocs/Troubleshooting/ArubaOS/Client_Ping_Loss/Web_Help_Index.htm

7. To check AP uptime, serial no , Model

#show ap database sort-by uptime
#show ap database group <name>
#show ap details advanced ap-name <name> | include Serial
#show ap details advanced ap-name <name>

8. AP debug

#show ap debug system-status ap-name SDL1A-IDF209-WAP07
#Show ap debug counters

https://www.semfionetworks.com/uploads/2/9/8/3/29831147/arubaos_commands_-_reference_sheet_v1.2.pdf