Skip to content

Commit

Permalink
Merge branch '57-finalize' into stage
Browse files Browse the repository at this point in the history
  • Loading branch information
@cumulusAnia
cumulusAnia committed Dec 12, 2023
2 parents db68aec + 2628cef commit 4f977a5
Show file tree
Hide file tree
Showing 6 changed files with 66 additions and 35 deletions.
18 changes: 18 additions & 0 deletions content/cumulus-linux-57/Layer-1-and-Switch-Ports/DHCP/DHCP-Relays.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -114,6 +114,21 @@ Cumulus Linux supports DHCP Agent Information Option 82, which allows a DHCP rel

To configure DHCP Agent Information Option 82:

{{< tabs "TabID117 ">}}
{{< tab "NVUE Commands ">}}

The following example enables Option 82, enables circuit ID, and sets the remote ID to MAC address 44:38:39:BE:EF:AA:

```
cumulus@leaf01:~$ nv set service dhcp-relay <vrf-id> agent enable on
cumulus@leaf01:~$ nv set service dhcp-relay default agent remote-id 44:38:39:BE:EF:AA
cumulus@leaf01:~$ nv set service dhcp-relay <vrf-id> agent use-pif-circuit-id enable on
cumulus@leaf01:~$ nv config apply
```

{{< /tab >}}
{{< tab "Linux Commands ">}}

1. Edit the `/etc/default/isc-dhcp-relay-default` file and add one of the following options:

To inject the ingress *SVI interface* against which DHCP processes the relayed DHCP discover packet, add `-a` to the `OPTIONS` line:
Expand Down Expand Up @@ -149,6 +164,9 @@ To configure DHCP Agent Information Option 82:
cumulus@leaf01:~$ sudo systemctl restart [email protected]
```

{{< /tab >}}
{{< /tabs >}}

### Control the Gateway IP Address with RFC 3527

When you need DHCP relay in an environment that relies on an anycast gateway (such as EVPN), a unique IP address is necessary on each device for return traffic. By default, in a BGP unnumbered environment with DHCP relay, the source IP address is the loopback IP address and the gateway IP address is the SVI IP address. However with anycast traffic, the SVI IP address is not unique to each rack; it is typically shared between racks. Most EVPN ToR deployments only use a single unique IP address, which is the loopback IP address.
Expand Down
2 changes: 2 additions & 0 deletions content/cumulus-linux-57/Layer-1-and-Switch-Ports/DHCP/DHCP-Servers.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -54,6 +54,8 @@ cumulus@switch:~$ nv config apply

To set the DNS server IP address and domain name globally, use the `nv set service dhcp-server <vrf> domain-name-server <address>` and `nv set service dhcp-server <vrf> domain-name <domain>` commands.

To set the interface name instead of the static IP address and MAC address, run the `nv set service dhcp-server <vrf> static <server> ifname` command.

{{< /tab >}}
{{< tab "IPv6 ">}}

Expand Down
28 changes: 14 additions & 14 deletions content/cumulus-linux-57/Layer-3/Protocol-Independent-Multicast-PIM.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -61,7 +61,7 @@ cumulus@leaf01:~$ nv set router pim enable on
cumulus@leaf01:~$ nv set interface vlan10 router pim
cumulus@leaf01:~$ nv set interface vlan10 ip igmp
cumulus@leaf01:~$ nv set interface swp51 router pim
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4-unicast rp 10.10.10.101
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4 rp 10.10.10.101
cumulus@leaf01:~$ nv config apply
```

Expand All @@ -73,7 +73,7 @@ cumulus@leaf02:~$ nv set router pim enable on
cumulus@leaf02:~$ nv set interface vlan20 router pim
cumulus@leaf02:~$ nv set interface vlan20 ip igmp
cumulus@leaf02:~$ nv set interface swp51 router pim
cumulus@leaf02:~$ nv set vrf default router pim address-family ipv4-unicast rp 10.10.10.101
cumulus@leaf02:~$ nv set vrf default router pim address-family ipv4 rp 10.10.10.101
cumulus@leaf02:~$ nv config apply
```

Expand All @@ -84,7 +84,7 @@ cumulus@leaf02:~$ nv config apply
cumulus@spine01:~$ nv set router pim enable on
cumulus@spine01:~$ nv set interface swp1 router pim
cumulus@spine01:~$ nv set interface swp2 router pim
cumulus@spine01:~$ nv set vrf default router pim address-family ipv4-unicast rp 10.10.10.101
cumulus@spine01:~$ nv set vrf default router pim address-family ipv4 rp 10.10.10.101
cumulus@spine01:~$ nv config apply
```

Expand Down Expand Up @@ -235,8 +235,8 @@ The above commands configure the switch to send all multicast traffic to RP 10.1
{{< tab "NVUE Commands ">}}

```
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4-unicast rp 10.10.10.101 group-range 224.10.0.0/16
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4-unicast rp 10.10.10.102 group-range 224.10.2.0/24
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4 rp 10.10.10.101 group-range 224.10.0.0/16
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4 rp 10.10.10.102 group-range 224.10.2.0/24
```

{{< /tab >}}
Expand Down Expand Up @@ -266,8 +266,8 @@ cumulus@leaf01:~$ nv set router policy prefix-list MCAST1 rule 1 match 224.10.0.
cumulus@leaf01:~$ nv set router policy prefix-list MCAST2 rule 1 action permit
cumulus@leaf01:~$ nv set router policy prefix-list MCAST2 rule 1 match 224.10.2.0/24
cumulus@leaf01:~$ nv config apply
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4-unicast rp 10.10.10.101 prefix-list MCAST1
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4-unicast rp 10.10.10.102 prefix-list MCAST2
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4 rp 10.10.10.101 prefix-list MCAST1
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4 rp 10.10.10.102 prefix-list MCAST2
cumulus@leaf01:~$ nv config apply
```

Expand Down Expand Up @@ -319,8 +319,8 @@ cumulus@switch:~$ nv set router policy prefix-list SPTrange rule 1 match 235.0.0
cumulus@switch:~$ nv set router policy prefix-list SPTrange rule 1 action permit
cumulus@switch:~$ nv set router policy prefix-list SPTrange rule 2 match 238.0.0.0/8 max-prefix-len 32
cumulus@switch:~$ nv set router policy prefix-list SPTrange rule 2 action permit
cumulus@switch:~$ nv set vrf default router pim address-family ipv4-unicast spt-switchover prefix-list SPTrange
cumulus@switch:~$ nv set vrf default router pim address-family ipv4-unicast spt-switchover action infinity
cumulus@switch:~$ nv set vrf default router pim address-family ipv4 spt-switchover prefix-list SPTrange
cumulus@switch:~$ nv set vrf default router pim address-family ipv4 spt-switchover action infinity
cumulus@switch:~$ nv config apply
```

Expand Down Expand Up @@ -376,7 +376,7 @@ cumulus@switch:~$ nv set router policy prefix-list MyCustomSSMrange rule 10 acti
Apply the custom prefix list:

```
cumulus@switch:~$ nv set vrf default router pim address-family ipv4-unicast ssm-prefix-list MyCustomSSMrange
cumulus@switch:~$ nv set vrf default router pim address-family ipv4 ssm-prefix-list MyCustomSSMrange
cumulus@switch:~$ nv config apply
```

Expand Down Expand Up @@ -547,7 +547,7 @@ The following steps configure a Cumulus switch to use MSDP:
2. On every multicast switch, configure the group to RP mapping using the anycast address:

```
cumulus@switch:$ nv set vrf default router pim address-family ipv4-unicast rp 10.100.100.100 group-range 224.0.0.0/4
cumulus@switch:$ nv set vrf default router pim address-family ipv4 rp 10.100.100.100 group-range 224.0.0.0/4
cumulus@switch:$ nv config apply
```

Expand Down Expand Up @@ -1643,7 +1643,7 @@ cumulus@leaf01:~$ nv set interface lo router pim
cumulus@leaf01:~$ nv set interface swp51 router pim
cumulus@leaf01:~$ nv set interface vlan10 router pim
cumulus@leaf01:~$ nv set interface vlan10 ip igmp
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4-unicast rp 10.10.10.101
cumulus@leaf01:~$ nv set vrf default router pim address-family ipv4 rp 10.10.10.101
cumulus@leaf01:~$ nv config apply
```
Expand All @@ -1667,7 +1667,7 @@ cumulus@leaf02:~$ nv set interface lo router pim
cumulus@leaf02:~$ nv set interface swp51 router pim
cumulus@leaf02:~$ nv set interface vlan20 router pim
cumulus@leaf02:~$ nv set interface vlan20 ip igmp
cumulus@leaf02:~$ nv set vrf default router pim address-family ipv4-unicast rp 10.10.10.101
cumulus@leaf02:~$ nv set vrf default router pim address-family ipv4 rp 10.10.10.101
cumulus@leaf02:~$ nv config apply
```
Expand All @@ -1685,7 +1685,7 @@ cumulus@spine01:~$ nv set vrf default router bgp address-family ipv4-unicast net
cumulus@spine01:~$ nv set interface lo router pim
cumulus@spine01:~$ nv set interface swp1 router pim
cumulus@spine01:~$ nv set interface swp2 router pim
cumulus@spine01:~$ nv set vrf default router pim address-family ipv4-unicast rp 10.10.10.101
cumulus@spine01:~$ nv set vrf default router pim address-family ipv4 rp 10.10.10.101
cumulus@spine01:~$ nv config apply
```
Expand Down
8 changes: 4 additions & 4 deletions ...mulus-linux-57/System-Configuration/Date-and-Time/Synchronous-Ethernet-SyncE.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -249,10 +249,10 @@ network-type 1
summary Group #0: TRACKING holdover acquired on swp1. freq_diff: 77 (ppb)
```

To show SyncE statistics for a specific interface, run the NVUE `nv show interface <interface-id> synce counters` command or the Linux `syncectl show interface counters <interface` command:
To show SyncE statistics for a specific interface, run the NVUE `nv show interface <interface-id> counters synce` command or the Linux `syncectl show interface counters <interface` command:

```
cumulus@switch:~$ nv show interface swp2 synce counters
cumulus@switch:~$ nv show interface swp2 counters synce
operational applied
--------------- ----------- -------
rx-esmc 248899
Expand Down Expand Up @@ -283,10 +283,10 @@ tx-esmc-unknown 0

## Clear SyncE Interface Counters

To clear counters for a specific SyncE interface, run the NVUE `nv action clear interface <interface> synce counters` command or the Linux `syncectl clear interface counters <interface>` command.
To clear counters for a specific SyncE interface, run the NVUE `nv action clear interface <interface> counters synce` command or the Linux `syncectl clear interface counters <interface>` command.

```
cumulus@switch:~$ nv action clear interface swp1 synce counters
cumulus@switch:~$ nv action clear interface swp1 counters synce
swp1 counters cleared
Action succeeded
```
Expand Down
6 changes: 4 additions & 2 deletions content/cumulus-linux-57/System-Configuration/Date-and-Time/_index.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -7,5 +7,7 @@ toc: 3

This section discusses how to:
- Set the time zone, and the date and time on the software clock on the switch
- Configure {{<link url="Network-Time-Protocol-NTP" text="NTP">}}
- Configure {{<link url="Precision-Time-Protocol-PTP" text="PTP">}}
- Configure {{<link url="Network-Time-Protocol-NTP" text="Network Time Protocol (NTP)">}}
- Configure {{<link url="Precision-Time-Protocol-PTP" text="Precision Time Protocol (PTP)">}}
- Configure {{<link url="Pulse-Per-Second-PPS" text="Pulse Per Second (PPS)">}}
- Configure {{<link url="Synchronous-Ethernet-SyncE" text=" Synchronous Ethernet (SyncE)">}}
39 changes: 24 additions & 15 deletions content/cumulus-linux-57/Whats-New/_index.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,8 @@ Cumulus Linux 5.7.0 supports new platforms, contains several new features and im
- {{<link url="Role-Based-Access-Control" text="Role-based access control">}}
- {{<link url="NVUE-API/#certificates" text="Manage certificate commands">}} for the NVUE REST API
- {{<link url="Optional-BGP-Configuration/#bgp-input-and-ouput-message-queue-limit" text="BGP Input and Ouput Message Queue Limit">}} commands
- {{<link url="DHCP-Relays/#dhcp-agent-information-option-option-82" text="DHCP agent information (Option 82) commands">}}
- {{<link url="DHCP-Servers/#basic-configuration" text="DNS server interface name command">}}
- Enhanced {{<link url="NVUE-API/#certificates" text="nv show system api">}} command output to show the certificate used for the API and additional {{<link url="NVUE-API/#certificates" text="nv show system api certificate">}} commands to show information about the certificates installed on the switch.
- Commands to show {{<link url="Troubleshooting-EVPN" text="VLAN to VNI mapping for all bridges">}} and {{<link url="Troubleshooting-EVPN" text="VLAN to VNI mapping for a specific bridge">}}
- Commands to show the {{<link url="Address-Resolution-Protocol-ARP/#show-the-arp-table" text="ARP table">}} and {{<link url="Neighbor-Discovery-ND#show-the-ip-neighbor-table" text="ND table">}} and to add static entries to the {{<link url="Address-Resolution-Protocol-ARP/#add-static-arp-table-entries" text="ARP table">}} and {{<link url="Neighbor-Discovery-ND/#add-static-ip-neighbor-table-entries" text="ND table">}}
Expand Down Expand Up @@ -80,7 +82,7 @@ nv set/unset router bgp wait-for-install
| `nv set vrf <vrf-id> router pim address-family ipv4-unicast ssm-prefix-list` | `nv set vrf <vrf-id> router pim address-family ipv4 ssm-prefix-list` |
| `nv set vrf <vrf-id> router pim address-family ipv4-unicast register-accept-list` | `nv set vrf <vrf-id> router pim address-family ipv4 register-accept-list`|
| `nv set vrf <vrf-id> router pim address-family ipv4-unicast send-v6-secondary`| `nv set vrf <vrf-id> router pim address-family ipv4 send-v6-secondary` |
| `nv set system aaa tacacs authorization <privilege-level-id> role (nvue-monitor\|system-admin\|nvue-admin)` |
| `nv set system aaa tacacs authorization <privilege-level-id> role (nvue-monitor system-admin nvue-admin)` |
`nv set system aaa tacacs authorization <privilege-level-id> role <value>`|
| `nv show interface <interface-id> synce counters` | `nv show interface <interface-id> counters synce`|
| `nv show acl <acl-id> rule <rule-id> match ip source-port` |`nv show acl <acl-id> rule <rule-id> match ip udp source-port`<br>`nv show acl <acl-id> rule <rule-id> match ip tcp source-port` |
Expand All @@ -93,6 +95,7 @@ nv set/unset router bgp wait-for-install
| `nv show vrf <vrf-id> router pim address-family ipv4-unicast rp <rp-id>` | `nv show vrf <vrf-id> router pim address-family ipv4 rp <rp-id>` |
| `nv show vrf <vrf-id> router pim address-family ipv4-unicast rp <rp-id> group-range` | `nv show vrf <vrf-id> router pim address-family ipv4 rp <rp-id> group-range` |
| `nv show vrf <vrf-id> router pim address-family ipv4-unicast rp <rp-id> group-range <group-range-id>` | `nv show vrf <vrf-id> router pim address-family ipv4 rp <rp-id> group-range <group-range-id>` |
| `nv action clear interface <interface> synce counters` | `nv action clear interface <interface> counters synce`|

{{< /expand >}}

Expand Down Expand Up @@ -154,7 +157,6 @@ nv show service dhcp-relay <vrf-id> agent
nv show service dhcp-relay <vrf-id> agent remote-id
nv show service dhcp-relay <vrf-id> agent remote-id <remote-id>
nv show service dhcp-relay <vrf-id> agent use-pif-circuit-id
nv show service synce
nv show service ptp <instance-id> servo
nv show service telemetry
nv show service telemetry histogram
Expand All @@ -176,7 +178,6 @@ nv show system security certificate <cert-id> dump
nv show system security ca-certificate
nv show system security ca-certificate <cert-id>
nv show system security ca-certificate <cert-id> dump
nv show system synce
nv show system maintenance
nv show system date-time
nv show system forwarding ecmp-weight-normalisation
Expand Down Expand Up @@ -216,7 +217,14 @@ nv set bridge domain <domain-id> stp force-protocol-version (stp|rstp)
nv set evpn mac-vrf-soo <route-distinguisher>
nv set interface <interface-id> link flap-protection enable (on|off)
nv set interface <interface-id> link protodown
nv set interface <interface-id> neighbor ipv4|ipv6
nv set interface <interface-id> neighbor ipv4
nv set interface <interface-id> neighbor ipv4 <address> lladdr
nv set interface <interface-id> neighbor ipv4 <address> lladdr <address> flag
nv set interface <interface-id> neighbor ipv4 <address> lladdr <address> state
nv set interface <interface-id> neighbor ipv6
nv set interface <interface-id> neighbor ipv6 <address> lladdr
nv set interface <interface-id> neighbor ipv6 <address> lladdr <address> flag
nv set interface <interface-id> neighbor ipv6 <address> lladdr <address> state
nv set interface <interface-id> port-security static-mac
nv set interface <interface-id> port-security enable (on|off)
nv set interface <interface-id> port-security mac-limit 1-512
Expand Down Expand Up @@ -245,6 +253,10 @@ nv set interface <interface-id> telemetry histogram counter counter-type <if-cou
nv set interface <interface-id> telemetry histogram counter counter-type <if-counter-type-id> histogram-size 1-4294967295
nv set interface <interface-id> telemetry histogram counter counter-type <if-counter-type-id> sample-interval 128-1000000000
nv set interface <interface-id> dot1x auth-fail-vlan (enabled|disabled)
nv set service dhcp-server <vrf-id> static <static-id> ifname <interface-name>
nv set service dhcp-relay <vrf-id> agent remote-id <remote-id>
nv set service dhcp-relay <vrf-id> agent use-pif-circuit-id enable (on|off)
nv set service dhcp-relay <vrf-id> agent enable (on|off)
nv set service telemetry histogram ingress-buffer bin-min-boundary 96-4294967295
nv set service telemetry histogram ingress-buffer histogram-size 96-4294967295
nv set service telemetry histogram ingress-buffer sample-interval 128-1000000000
Expand All @@ -261,10 +273,6 @@ nv set service telemetry snapshot-interval 1-604800
nv set system api certificate self-signed
nv set system link flap-protection threshold 0-30
nv set system link flap-protection interval 0-60
nv set system synce enable (on|off)
nv set system synce wait-to-restore-time 1-720
nv set system synce log-level (info|debug|notice|error|critical)
nv set system synce provider-default-priority 1-256
nv set system forwarding ecmp-weight-normalisation mode (enabled|disabled)
nv set system forwarding ecmp-weight-normalisation max-hw-weight 10-255
nv set system dot1x radius server <server-id>
Expand Down Expand Up @@ -327,7 +335,14 @@ nv unset evpn mac-vrf-soo
nv unset interface <interface-id> link flap-protection
nv unset interface <interface-id> link flap-protection enable
nv unset interface <interface-id> link protodown
nv unset interface <interface-id> neighbor ipv4|ipv6
nv unset interface <interface-id> neighbor ipv4
nv unset interface <interface-id> neighbor ipv4 <address> lladdr
nv unset interface <interface-id> neighbor ipv4 <address> lladdr <address> flag
nv unset interface <interface-id> neighbor ipv4 <address> lladdr <address> state
nv unset interface <interface-id> neighbor ipv6
nv unset interface <interface-id> neighbor ipv6 <address> lladdr
nv unset interface <interface-id> neighbor ipv6 <address> lladdr <address> flag
nv unset interface <interface-id> neighbor ipv6 <address> lladdr <address> state
nv unset interface <interface-id> port-security
nv unset interface <interface-id> port-security static-mac
nv unset interface <interface-id> port-security enable
Expand Down Expand Up @@ -375,7 +390,6 @@ nv unset interface <interface-id> dot1x mba
nv unset interface <interface-id> dot1x auth-fail-vlan
nv unset service dhcp-server <vrf-id> static <static-id> ifname
nv unset service dhcp-relay <vrf-id> agent
nv unset service dhcp-relay <vrf-id> agent remote-id
nv unset service dhcp-relay <vrf-id> agent remote-id <remote-id>
nv unset service dhcp-relay <vrf-id> agent use-pif-circuit-id
nv unset service dhcp-relay <vrf-id> agent use-pif-circuit-id enable
Expand Down Expand Up @@ -405,11 +419,6 @@ nv unset system link
nv unset system link flap-protection
nv unset system link flap-protection threshold
nv unset system link flap-protection interval
nv unset system synce
nv unset system synce enable
nv unset system synce wait-to-restore-time
nv unset system synce log-level
nv unset system synce provider-default-priority
nv unset system forwarding ecmp-weight-normalisation
nv unset system forwarding ecmp-weight-normalisation mode
nv unset system forwarding ecmp-weight-normalisation max-hw-weight
Expand Down

0 comments on commit 4f977a5

Please sign in to comment.