Apply the backed up site connection configuration with a couple modifications. Since virtual routing and forwarding (VRF) is now used to separate customer traffic, the site ports and default routes must be added to that VRF.
Access to the switches
Custom switch configurations
Generated switch configurations already applied
vrf attach Customer
will be added to the port configuration that connects to the site. This has to be applied before the ip address
configuration.
conf t
interface 1/1/36
no shutdown
vrf attach Customer
description to:CANswitch_cfcanb6s1-31:from:sw-25g01_x3000u39-j36
ip address 10.101.15.142/30
exit
conf t
sw-spine-001(config)# system interface-group 3 speed 10g
conf t
interface 1/1/36
no shutdown
vrf attach Customer
description to:CANswitch_cfcanb6s1-46:from:sw-25g02_x3000u40-j36
ip address 10.101.15.190/30
exit
If the switch had system interface-group
commands those would be added here.
sw-spine-001(config)# system interface-group 3 speed 10g
vrf Customer
will be appended to the default route configuration.
conf t
sw-spine-001(config)# ip route 0.0.0.0/0 10.101.15.141 vrf Customer
conf t
sw-spine-002(config)# ip route 0.0.0.0/0 10.101.15.189 vrf Customer
vrf forwarding Customer
will be added to the port configuration. This has to be applied before the ip address
configuration.
sw-spine-001 [mlag-domain: master] # conf t
interface ethernet 1/16 speed 10G force
interface ethernet 1/16 mtu 1500 force
interface ethernet 1/16 no switchport force
interface ethernet 1/16 vrf forwarding Customer
interface ethernet 1/16 ip address 10.102.255.10/30 primary
sw-spine-002 [mlag-domain: master] # conf t
interface ethernet 1/16 speed 10G force
interface ethernet 1/16 mtu 1500 force
interface ethernet 1/16 no switchport force
interface ethernet 1/16 vrf forwarding Customer
interface ethernet 1/16 ip address 10.102.255.86/30 primary
vrf Customer
will replace vrf default
sw-spine-001 [mlag-domain: master] # conf t
ip route vrf Customer 0.0.0.0/0 10.102.255.9
sw-spine-002 [mlag-domain: master] # conf t
ip route vrf Customer 0.0.0.0/0 10.102.255.85
All that is required to re-apply the users is to get into the global configuration mode using conf t
and paste in the configuration that was copied from the previous step.
conf t
user admin group administrators password ciphertext xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
conf t
system-user linuxadmin password xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
username admin password xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx role sysadmin priv-lvl 15
sw-spine-001 [standalone: master] # conf t
username admin password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
username monitor password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
conf t
snmp-server group cray-reds-group 3 noauth read cray-reds-view
snmp-server user testuser cray-reds-group 3 auth md5 xxxxxxxx priv des xxxxxxx
snmp-server view cray-reds-view 1.3.6.1.2 included
conf t
snmp-server vrf default
snmpv3 user testuser auth md5 auth-pass plaintext xxxxxx priv des priv-pass plaintext xxxxx
For more information on SNMP credentials, see Configuring SNMP in CSM and Update Default Air-Cooled BMC and Leaf-BMC Switch SNMP Credentials
Save the configuration once the configuration is applied. See Saving Configuration.