Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

simplify nx-os #6

Open
wants to merge 3 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 3 additions & 8 deletions roles/cfg-evpn/tasks/nxos.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,11 +5,8 @@
config: |
router bgp {{ ibgp_asn }}
log-neighbor-changes
!
! The next two lines needed only for vPC Fabric peering
! address-family l2vpn evpn
! advertise-pip
!
address-family l2vpn evpn
advertise-pip
template peer VXLAN_SPINE
remote-as {{ ibgp_asn }}
update-source loopback0
Expand Down Expand Up @@ -50,10 +47,8 @@
connection: network_cli
cli_config:
config: |
ip prefix-list ATTACHED_SVIS seq 10 permit 172.16.0.0/16 ge 24
!
route-map ADV_SVIS permit 10
match ip address prefix-list ATTACHED_SVIS
match tag 12345

- name: Advertise L3 GW address (NXOS)
connection: network_cli
Expand Down
2 changes: 1 addition & 1 deletion roles/cfg-server-ports/tasks/nxos.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@
interface {{ l2_networks[item.vlanid].vlanif }}
no shutdown
mtu 9000
ip address {{ l2_networks[item.vlanid].ip_address }}
ip address {{ l2_networks[item.vlanid].ip_address }} tag 12345

with_items: "{{ l2_ports[ansible_network_os] }}"

17 changes: 5 additions & 12 deletions roles/cfg-vxlan/tasks/nxos.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@
no shutdown
advertise virtual-rmac
host-reachability protocol bgp
global suppress-arp
source-interface {{ vtep_iface }}
when: inventory_hostname not in groups['spine']
tags: vxlan
Expand All @@ -18,13 +19,6 @@
fabric forwarding anycast-gateway-mac {{ nxos_fabric_anycast_gw_mac }}
when: inventory_hostname not in groups['spine']

- name: Reconfigure access-list for arp suppression (NXOS)
connection: network_cli
cli_config:
config: |
hardware access-list tcam region vpc-convergence 0
hardware access-list tcam region arp-ether 256

- name: Configure VNIs with mcast (NXOS)
connection: network_cli
cli_config:
Expand All @@ -35,7 +29,6 @@
interface nve1
!
member vni {{ l2_networks[item.vlanid].vnid }}
suppress-arp
mcast-group {{ item.mcast_grp }}

with_items: "{{ l2_ports[ansible_network_os] }}"
Expand All @@ -49,10 +42,9 @@
vn-segment {{ l2_networks[item.vlanid].vnid }}

interface nve1
global ingress-replication protocol bvp
!
member vni {{ l2_networks[item.vlanid].vnid }}
suppress-arp
ingress-replication protocol bgp

with_items: "{{ l2_ports[ansible_network_os] }}"
when: l2_ports is defined and replication != 'mcast'
Expand Down Expand Up @@ -86,9 +78,10 @@
config: |
int Vlan{{ item.vlanid }}
vrf member {{ l2_networks[item.vlanid].vrf }}
no shut
ip address {{ l2_networks[item.vlanid].ip_address }}
ip address {{ l2_networks[item.vlanid].ip_address }} tag 12345
! mtu 9000 should not be a must.
mtu 9000
fabric forwarding mode anycast-gateway
no shut
with_items: "{{ l2_ports[ansible_network_os] }}"
when: l2_ports is defined