-
Notifications
You must be signed in to change notification settings - Fork 231
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Test: WIP add molecule for EVPN on LAN
- Loading branch information
Showing
8 changed files
with
884 additions
and
148 deletions.
There are no files selected for viewing
240 changes: 240 additions & 0 deletions
240
...lecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge-wan-use-evpn-on-lan.cfg
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,240 @@ | ||
! | ||
no enable password | ||
no aaa root | ||
! | ||
agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 | ||
! | ||
flow tracking hardware | ||
tracker FLOW-TRACKER | ||
record export on inactive timeout 70000 | ||
record export on interval 300000 | ||
exporter CV-TELEMETRY | ||
collector 127.0.0.1 | ||
local interface Loopback0 | ||
template interval 3600000 | ||
no shutdown | ||
! | ||
service routing protocols model multi-agent | ||
! | ||
hostname cv-pathfinder-edge-wan-use-evpn-on-lan | ||
! | ||
router adaptive-virtual-topology | ||
topology role edge | ||
region AVD_Land_West id 42 | ||
zone AVD_Land_West-ZONE id 1 | ||
site Site12 id 12 | ||
! | ||
policy DEFAULT-POLICY | ||
! | ||
match application-profile default | ||
avt profile DEFAULT-POLICY-DEFAULT | ||
! | ||
policy DEFAULT-POLICY-WITH-CP | ||
! | ||
match application-profile APP-PROFILE-CONTROL-PLANE | ||
avt profile DEFAULT-POLICY-CONTROL-PLANE | ||
! | ||
match application-profile default | ||
avt profile DEFAULT-POLICY-DEFAULT | ||
! | ||
profile DEFAULT-POLICY-CONTROL-PLANE | ||
path-selection load-balance LB-DEFAULT-POLICY-CONTROL-PLANE | ||
! | ||
profile DEFAULT-POLICY-DEFAULT | ||
path-selection load-balance LB-DEFAULT-POLICY-DEFAULT | ||
! | ||
vrf default | ||
avt policy DEFAULT-POLICY-WITH-CP | ||
avt profile DEFAULT-POLICY-DEFAULT id 1 | ||
avt profile DEFAULT-POLICY-CONTROL-PLANE id 254 | ||
! | ||
vrf PROD | ||
avt policy DEFAULT-POLICY | ||
avt profile DEFAULT-POLICY-DEFAULT id 1 | ||
! | ||
router path-selection | ||
tcp mss ceiling ipv4 ingress | ||
! | ||
path-group INET id 101 | ||
ipsec profile CP-PROFILE | ||
! | ||
local interface Ethernet1 | ||
stun server-profile INET-cv-pathfinder-pathfinder-Ethernet1 INET-cv-pathfinder-pathfinder-Ethernet3 | ||
! | ||
peer dynamic | ||
! | ||
peer static router-ip 192.168.144.1 | ||
name cv-pathfinder-pathfinder | ||
ipv4 address 172.17.7.7 | ||
ipv4 address 10.9.9.9 | ||
! | ||
load-balance policy LB-DEFAULT-POLICY-CONTROL-PLANE | ||
path-group INET | ||
! | ||
load-balance policy LB-DEFAULT-POLICY-DEFAULT | ||
path-group INET | ||
! | ||
spanning-tree mode none | ||
! | ||
vrf instance MGMT | ||
! | ||
vrf instance PROD | ||
! | ||
management api http-commands | ||
protocol https | ||
no shutdown | ||
! | ||
vrf MGMT | ||
no shutdown | ||
! | ||
management security | ||
! | ||
ssl profile STUN-DTLS | ||
tls versions 1.2 | ||
trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt | ||
certificate STUN-DTLS.crt key STUN-DTLS.key | ||
! | ||
ip security | ||
ike policy CP-IKE-POLICY | ||
local-id 192.168.255.12 | ||
! | ||
sa policy CP-SA-POLICY | ||
esp encryption aes256gcm128 | ||
pfs dh-group 14 | ||
! | ||
profile CP-PROFILE | ||
ike-policy CP-IKE-POLICY | ||
sa-policy CP-SA-POLICY | ||
connection start | ||
shared-key 7 ABCDEF1234567890 | ||
dpd 10 50 clear | ||
mode transport | ||
! | ||
key controller | ||
profile CP-PROFILE | ||
! | ||
interface Dps1 | ||
description DPS Interface | ||
mtu 9194 | ||
flow tracker hardware FLOW-TRACKER | ||
ip address 192.168.255.12/32 | ||
! | ||
interface Ethernet1 | ||
description ATT_666 | ||
no shutdown | ||
no switchport | ||
ip address dhcp | ||
dhcp client accept default-route | ||
! | ||
interface Loopback0 | ||
description ROUTER_ID | ||
no shutdown | ||
ip address 192.168.42.12/32 | ||
! | ||
interface Vxlan1 | ||
description cv-pathfinder-edge-wan-use-evpn-on-lan_VTEP | ||
vxlan source-interface Dps1 | ||
vxlan udp-port 4789 | ||
vxlan vrf default vni 1 | ||
vxlan vrf PROD vni 42 | ||
! | ||
application traffic recognition | ||
! | ||
application ipv4 APP-CONTROL-PLANE | ||
destination prefix field-set PFX-PATHFINDERS | ||
! | ||
application-profile APP-PROFILE-CONTROL-PLANE | ||
application APP-CONTROL-PLANE | ||
! | ||
field-set ipv4 prefix PFX-PATHFINDERS | ||
192.168.144.1/32 | ||
! | ||
ip routing | ||
no ip routing vrf MGMT | ||
ip routing vrf PROD | ||
! | ||
ip extcommunity-list ECL-EVPN-SOO permit soo 192.168.42.12:12 | ||
! | ||
ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY | ||
seq 10 permit 192.168.42.0/24 eq 32 | ||
! | ||
route-map RM-CONN-2-BGP permit 10 | ||
match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY | ||
set extcommunity soo 192.168.42.12:12 additive | ||
! | ||
route-map RM-EVPN-EXPORT-VRF-DEFAULT permit 10 | ||
match extcommunity ECL-EVPN-SOO | ||
! | ||
router bfd | ||
multihop interval 300 min-rx 300 multiplier 3 | ||
! | ||
router bgp 65000 | ||
router-id 192.168.42.12 | ||
update wait-install | ||
no bgp default ipv4-unicast | ||
maximum-paths 16 | ||
neighbor EVPN-OVERLAY-PEERS peer group | ||
neighbor EVPN-OVERLAY-PEERS update-source Loopback0 | ||
neighbor EVPN-OVERLAY-PEERS bfd | ||
neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3 | ||
neighbor EVPN-OVERLAY-PEERS send-community | ||
neighbor EVPN-OVERLAY-PEERS maximum-routes 0 | ||
neighbor WAN-OVERLAY-PEERS peer group | ||
neighbor WAN-OVERLAY-PEERS remote-as 65000 | ||
neighbor WAN-OVERLAY-PEERS update-source Dps1 | ||
neighbor WAN-OVERLAY-PEERS bfd | ||
neighbor WAN-OVERLAY-PEERS bfd interval 1000 min-rx 1000 multiplier 10 | ||
neighbor WAN-OVERLAY-PEERS ttl maximum-hops 42 | ||
neighbor WAN-OVERLAY-PEERS password 7 htm4AZe9mIQOO1uiMuGgYQ== | ||
neighbor WAN-OVERLAY-PEERS send-community | ||
neighbor WAN-OVERLAY-PEERS maximum-routes 0 | ||
neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS | ||
neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 | ||
redistribute connected route-map RM-CONN-2-BGP | ||
! | ||
address-family evpn | ||
neighbor WAN-OVERLAY-PEERS activate | ||
neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in | ||
neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out | ||
neighbor WAN-OVERLAY-PEERS encapsulation path-selection | ||
! | ||
address-family ipv4 | ||
no neighbor WAN-OVERLAY-PEERS activate | ||
! | ||
address-family ipv4 sr-te | ||
neighbor WAN-OVERLAY-PEERS activate | ||
! | ||
address-family link-state | ||
neighbor WAN-OVERLAY-PEERS activate | ||
path-selection | ||
! | ||
address-family path-selection | ||
bgp additional-paths receive | ||
bgp additional-paths send any | ||
neighbor WAN-OVERLAY-PEERS activate | ||
! | ||
vrf default | ||
rd 192.168.42.12:1 | ||
route-target import evpn 1:1 | ||
route-target export evpn 1:1 | ||
route-target export evpn route-map RM-EVPN-EXPORT-VRF-DEFAULT | ||
! | ||
vrf PROD | ||
rd 192.168.42.12:142 | ||
route-target import evpn 142:142 | ||
route-target export evpn 142:142 | ||
router-id 192.168.42.12 | ||
redistribute connected | ||
! | ||
router traffic-engineering | ||
! | ||
stun | ||
client | ||
server-profile INET-cv-pathfinder-pathfinder-Ethernet1 | ||
ip address 172.17.7.7 | ||
ssl profile STUN-DTLS | ||
server-profile INET-cv-pathfinder-pathfinder-Ethernet3 | ||
ip address 10.9.9.9 | ||
ssl profile STUN-DTLS | ||
! | ||
end |
Oops, something went wrong.