160 lines
4.2 KiB
Plaintext
160 lines
4.2 KiB
Plaintext
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
!switch-vwd-1,switch-vwd-2
|
|
conf t
|
|
vlan __VRFXFERVLAN__
|
|
name __VRFNAME__
|
|
end
|
|
wr mem
|
|
|
|
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
!switch-vwd-sp1, switch-vwd-sp2
|
|
conf t
|
|
vrf definition __VRFNAME__
|
|
rd 65000:__VRFID__
|
|
address-family ipv4
|
|
exit-address-family
|
|
|
|
vlan __VRFXFERVLAN__
|
|
name __VRFNAME__
|
|
|
|
ip access-list standard routes2__VRFNAME__
|
|
permit __RACLa__
|
|
permit __RACLb__
|
|
permit __RACLc__
|
|
permit __RACLd__
|
|
permit __RACLe__
|
|
|
|
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
!switch-vwd-sp1
|
|
conf t
|
|
|
|
vlan __CUSTINT1__
|
|
name __VRFNAME__
|
|
|
|
interface vlan__VRFXFERVLAN__
|
|
description __VRFNAME__
|
|
vrf forwarding __VRFNAME__
|
|
ip address __VRFXFERIPSW1__ __VRFXFERIPMASK__
|
|
|
|
int __CUSTINTP1__
|
|
description Cust: VWD-Transit (__VRFNAME__)
|
|
no switchport
|
|
# vrf forwarding __VRFNAME__
|
|
# ip address __VRFCUSTIP1__ __VRFCUSTIP1M__
|
|
# switchport mode trunk|access
|
|
# switchport access vlan ...
|
|
# switchport trunk allowed vlan ...
|
|
# channel-group X mode on|active
|
|
|
|
int __CUSTINT1__
|
|
description Cust: VWD-Transit (__VRFNAME__)
|
|
vrf forwarding __VRFNAME__
|
|
ip address __VRFCUSTIP1__ __VRFCUSTIP1M__
|
|
|
|
router bgp 65148
|
|
address-family ipv4 vrf __VRFNAME__
|
|
bgp router-id auto-assign
|
|
redistribute static
|
|
|
|
neighbor __VRFXFERIPASA__ remote-as 65148
|
|
|
|
neighbor __VRFXFERIPSW2__ remote-as __VRFXFERAS__
|
|
neighbor __VRFXFERIPSW2__ local-as __VRFXFERAS__
|
|
|
|
neighbor __VRFCUSTIP1R__ remote-as __VRFCUSTAS__
|
|
neighbor __VRFCUSTIP1R__ local-as __VRFXFERAS__
|
|
|
|
distribute-list routes2__VRFNAME__
|
|
exit-address-family
|
|
|
|
ip route vrf __VRFNAME__ __SR1a__
|
|
ip route vrf __VRFNAME__ __SR1b__
|
|
ip route vrf __VRFNAME__ __SR1c__
|
|
ip route vrf __VRFNAME__ __SR1d__
|
|
ip route vrf __VRFNAME__ __SR1e__
|
|
|
|
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
!switch-vwd-sp2
|
|
conf t
|
|
|
|
vlan __CUSTINT2__
|
|
name __VRFNAME__
|
|
|
|
vlan __VRFXFERVLAN__
|
|
name __VRFNAME__
|
|
|
|
interface vlan__VRFXFERVLAN__
|
|
description __VRFNAME__
|
|
vrf forwarding __VRFNAME__
|
|
ip address __VRFXFERIPSW2__ __VRFXFERIPMASK__
|
|
|
|
int __CUSTINTP2__
|
|
description Cust: VWD-Transit (__VRFNAME__)
|
|
no switchport
|
|
# vrf forwarding __VRFNAME__
|
|
# ip address __VRFCUSTIP2__ __VRFCUSTIP2M__
|
|
# switchport mode trunk|access
|
|
# switchport access vlan ...
|
|
# switchport trunk allowed vlan ...
|
|
# channel-group X mode on|active
|
|
|
|
int __CUSTINT2__
|
|
description Cust: VWD-Transit (__VRFNAME__)
|
|
vrf forwarding __VRFNAME__
|
|
ip address __VRFCUSTIP2__ __VRFCUSTIP2M__
|
|
|
|
router bgp 65148
|
|
address-family ipv4 vrf __VRFNAME__
|
|
bgp router-id auto-assign
|
|
redistribute static
|
|
|
|
neighbor __VRFXFERIPASA__ remote-as 65148
|
|
|
|
neighbor __VRFXFERIPSW1__ remote-as __VRFXFERAS__
|
|
neighbor __VRFXFERIPSW1__ local-as __VRFXFERAS__
|
|
|
|
neighbor __VRFCUSTIP2R__ remote-as __VRFCUSTAS__
|
|
neighbor __VRFCUSTIP2R__ local-as __VRFXFERAS__
|
|
|
|
distribute-list routes2__VRFNAME__
|
|
exit-address-family
|
|
|
|
ip route vrf __VRFNAME__ __SR1a__
|
|
ip route vrf __VRFNAME__ __SR1b__
|
|
ip route vrf __VRFNAME__ __SR1c__
|
|
ip route vrf __VRFNAME__ __SR1d__
|
|
ip route vrf __VRFNAME__ __SR1e__
|
|
|
|
|
|
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
!asa-vwd-1
|
|
conf t
|
|
interface Port-channel2.__VRFXFERVLAN__
|
|
vlan __VRFXFERVLAN__
|
|
nameif __VRFNAME__
|
|
security-level 100
|
|
ip address __VRFXFERIPASA__ __VRFXFERIPMASK__
|
|
|
|
access-list __VRFNAME___access_in extended permit icmp any any
|
|
access-list __VRFNAME___access_in extended deny ip any any
|
|
|
|
no monitor-interface __VRFNAME__
|
|
|
|
access-group __VRFNAME___access_in in interface __VRFNAME__
|
|
|
|
router bgp 65148
|
|
bgp log-neighbor-changes
|
|
address-family ipv4 unicast
|
|
neighbor __VRFXFERIPSW1__ remote-as 65148
|
|
neighbor __VRFXFERIPSW1__ description __VRFNAME__ primary weight 200
|
|
neighbor __VRFXFERIPSW1__ activate
|
|
neighbor __VRFXFERIPSW1__ next-hop-self
|
|
neighbor __VRFXFERIPSW1__ weight 200
|
|
neighbor __VRFXFERIPSW2__ remote-as 65148
|
|
neighbor __VRFXFERIPSW2__ description __VRFNAME__ secondary weight 100
|
|
neighbor __VRFXFERIPSW2__ activate
|
|
neighbor __VRFXFERIPSW2__ next-hop-self
|
|
neighbor __VRFXFERIPSW2__ weight 100
|
|
|
|
|