topic need help VDX 6740 in-band management configure in Data Center (VDX)

need help VDX 6740 in-band management configure

mbze430 — Thu, 28 Mar 2024 15:38:27 GMT

Having a bit of trouble configuring the VDX 6740 so I can access the management cli via ssh from anywhere (in-band).

My management VLAN is 100 and I figure I try to forward from the port-channel port since it's the trunk port

Here are the parts of the running-config I think is relevant:

interface Ve 100
ip route 10.0.253.1/24 172.30.0.1
no shutdown

rbridge-id 1
ip route 0.0.0.0/0 172.30.0.1
switch-attributes chassis-name VDX6740T-1G
switch-attributes host-name sw0
vrf mgmt-vrf
address-family ipv4 unicast
ip route 0.0.0.0/0 172.30.0.1
!
address-family ipv6 unicast
!
!
interface Management 1/0
no tcp burstrate
ip icmp echo-reply
no ip address dhcp
ip address 172.30.0.6/16
ipv6 icmpv6 echo-reply
no ipv6 address autoconfig
no ipv6 address dhcp
vrf forwarding mgmt-vrf
no shutdown

interface Port-channel 1
vlag ignore-split
speed 40000
mtu 9216
description Port Channel for Trunk to DX010
switchport
switchport mode trunk
switchport trunk allowed vlan all
switchport trunk allowed vlan remove 1
no switchport trunk tag native-vlan
switchport trunk native-vlan 4000
no spanning-tree shutdown
no shutdown

What am I missing? A few commands in the 7.4.0 CLI reference doesn't work either.

ex: "To disable a management VRF previously cŸnfig´r~| on a VE interface:
switch(config)# int ve 100
switch(conf-Ve-100)# no vrf forwarding mgmt-vrf"

when in the path of "conf-Ve-100" assuming the above is true, there is no option to "vrf forwarding mgmt-vrf"

Here are the only available command in "conf-Ve":

sw0(config-Ve-1)#help

Possible completions:

attach Configure attachments

describe Display transparent command information

do Run an operational-mode command

exit Exit from current mode

help Provide help information

ip The Internet Protocol (IP).

ipv6 The Internet Protocol version 6(IPv6).

no Negate a command or set its defaults

pwd Display current mode path

shutdown Shutdown the selected interface

top Exit to top level and optionally run command

sw0(config-Ve-1)# ip ?

Possible completions:

fabric-virtual-gateway IP fabric virtual gateway

any help to get this in-band working would be great.

Re: need help VDX 6740 in-band management configure

Michael_Morey — Wed, 27 Mar 2024 13:55:48 GMT

mbze430,

Your issue is that you are in the wrong context. The VE interface you are attempting to configure is in the global config. You need to create this interface in the RB context instead. I would recommend you do the following:

conf t no int ve 100 rb 1 int ve 100

and complete your configuration from there

VDX1(config-rbridge-Ve-100)# ? Possible completions: bfd Create BFD session on this interface. describe Display transparent command information do Run an operational-mode command exit Exit from current mode help Provide help information ip Internet Protocol (IP). ipv6 The Internet Protocol (IP). no Negate a command or set its defaults pwd Display current mode path rpf-mode Reverse Path Forwarding mode shutdown Shutdown the selected interface snmp The Simple Network Management Protocol (SNMP). top Exit to top level and optionally run command vrf Assign VRF to interface vrrp-extended-group Start VRRPE configuration vrrp-group Start VRRP configuration

Re: need help VDX 6740 in-band management configure

mbze430 — Fri, 29 Mar 2024 12:27:41 GMT

One more question. Instead of assigning it to the portchannel, can I just assign the mgmt-vrf to a vlan? Or it has to be assigned to a port/interface of some kind?

in my case, all the SVI vlan database is on a core L3 switch upsteam. VLAN 100 is the management vlan with 10.0.254.0/24 range. I should be able to assign VLAN 100 to mgmt-vrf with ip 10.0.254.6 255.255.255.0 right? or I need to something like 'ip 10.0.254.6 255.255.255.0 vlan 100' or is it 'ip 10.0.254.6 255.255.255.0 ve 100'? Or is it int ve 100?

int vlan 100 or (int ve 100?)
vrf forwarding mgmt-vrf
ip address 10.0.254.6 255.255.255.0

If so, do i do it in the rb 1 context or the interface context. (I am still not used to rbridge and Ve)

UPDATE:

Here is what I have now, doing it in the rbridge-1 context:
!
rbridge-id 1
ip route 0.0.0.0/0 172.30.0.1
switch-attributes chassis-name VDX6740T-1G
switch-attributes host-name sw0
vrf mgmt-vrf
address-family ipv4 unicast
!
address-family ipv6 unicast
!
!
 interface Ve 100
vrf forwarding mgmt-vrf
ip proxy-arp
ip address 10.0.254.6/24
no shutdown
!
!
interface Management 1/0
no tcp burstrate
ip icmp echo-reply
no ip address dhcp
ip address 172.30.0.6/16
ipv6 icmpv6 echo-reply
no ipv6 address autoconfig
no ipv6 address dhcp
vrf forwarding mgmt-vrf
no shutdown

now I can reach 10.0.254.6 and ssh in. HOWEVER as soon as I disconnect the eth0 rj-45 cable I get cut off.... not sure why....

Re: need help VDX 6740 in-band management configure

Michael_Morey — Fri, 29 Mar 2024 13:30:35 GMT

Adding "vrf forwarding mgmt-vrf" to VE 100 does exactly what you are asking, Once that is configured, any port assigned VLAN 100 would be on the management VLAN. Your current IP addressing looks fine for the VE

ip address 10.0.254.6/24

Regarding getting cut off, if the port you are disconnecting is the only port assigned to VLAN 100, this is expected. The VE must have at least 1 port UP/UP to be operational.

you can verify the VE status with:

show ip int bri

show ip int ve 100 rb 1

Re: need help VDX 6740 in-band management configure

mbze430 — Fri, 29 Mar 2024 16:56:51 GMT

Currently, I have connected exactly as the diagram, as shown below, to gain access to the management console. (I just assumed eth0 = interface management 1/0 = front port on the diagram (RJ-45 under the micro-usb serial port)).

What I am trying to accomplished is to remove the wire #2 in the diagram, and be able to access the management console from anywhere (in-band). I figured SVI/Ve was the more practical way, I am open to another way, as long I can free up the ports.

Originally have set the interface management port to 172.30.0.6/16 which is our main vlan (1000). I am still able to access it that way. Since I am using the 6740 as a leaf all the ports are assigned to VLAN 1000 Access mode. There are a few on other VLAN, but mainly VLAN 1000. The cable going from the interface management 1/0 is going into te1/0/8 and that's assigned to VLAN1000.

As of right now, I can access it either through 172.30.0.6 or 10.0.254.6. But as soon as I unplug the cable from interface management 1/0, I am not able to get to the management console. When I said I removed the cable from eth0 (my previous post), I meant from Interface Management 1/0.

I also have fe1/0/49 & fe1/0/50 in a portchannel uplink to a core switch that holds all the SVI database, if this is a viable option to use. I have te1/0/48 that is a downlink trunk port to another switch both portchannel and te1/0/48 is set to accept all vlans, so both of them are members of vlan 100.

Re: need help VDX 6740 in-band management configure

mbze430 — Sun, 07 Apr 2024 15:55:07 GMT

Okay I got a chance to play around with it more. As of right now, I CAN get to the mgmt-vrf if I connected to any access port that is vlan 100 with an ip 10.0.254.0/24 subnet.

However, I can't get to it from another subnet. I think it's because the Ve/mgmt-vrf isn't reporting a gateway? I couldn't figure out how to add a gateway (10.0.254.1) to the mgmt-vrf or am I supposed to assign it to the Ve?

Re: need help VDX 6740 in-band management configure

Michael_Morey — Mon, 08 Apr 2024 13:44:09 GMT

Try this:

conf t rb 1 vrf mgmt-vrf address-family ipv4 unicast ip route 0.0.0.0/0 10.0.254.1

Re: need help VDX 6740 in-band management configure

mbze430 — Mon, 08 Apr 2024 20:02:55 GMT

That was it! Thank you so much! Still learning those commands in NOS!