Configure OSPF on X670-G2

[Claudio_D_Ascen]

Hi all
I have to configure OSPF and VRRP in an hospital networks, we have two X670-G2 with Core license. My requirement is have high availability for vlan default gateway and for distribuiting static routes on OSPF.

Below my hospital network

Our requirements are: have GW HA for each Vlan, and DR and BDR that redistribute the same connected networks and static routes.

My needs is, have a network fault tollerant when DR fails.

####sample configuration for one vlan

Core-1

Vlan 3 Mngt
configure vlan Mngt ipaddress 192.168.10.50/24
enable ipforwarding vlan Mngt

create vrrp vlan Mngt vrid 1
configure vrrp vlan Mngt vrid 1 priority 255
configure vrrp vlan Mngt vrid 1 add 192.168.10.1
configure vrrp vlan Mngt vrid 1 preempt delay 60
enable vrrp vlan Mngt vrid 1
sh vrrp

Core-2

Vlan 3 Mngt
configure vlan Mngt ipaddress 192.168.10.51/24
enable ipforwarding vlan Mngt

create vrrp vlan Mngt vrid 1
configure vrrp vlan Mngt vrid 1 add 192.168.10.1
enable vrrp vlan Mngt vrid 1
sh vrrp

####OSPF configuration
Core-1

enable ospf export static cost type [ ase-type-1 | ase-type-2]

enable lopback-mode vlan Mngt
create ospf area 0.0.0.0
configure ospf area 0.0.0.0 priority 30

configure ospf routerid 192.168.10.50
configure ospf add vlan Mngt area 0.0.0.0
configure ospf vlan Mngt priority 110
configure ospf add vlan Pad-A area 0.0.0.0
configure ospf vlan Pad-A priority 110
configure ospf add vlan Pad-C area 0.0.0.0
configure ospf vlan Pad-C priority 110
configure ospf add vlan Data-Pradio area 0.0.0.0
configure ospf vlan Data-Pradio priority 110
configure ospf add vlan vmwaremngt area 0.0.0.0
configure ospf vlan vmwaremngt priority 110
configure ospf add vlan Pad-A-Server area 0.0.0.0
configure ospf vlan Pad-A-Server priority 110

###redistribute static
configure ospf export direct cost 10 ase-type-1
configure ospf export static cost 10 ase-type-1

Core-2

enable lopback-mode vlan Mngt
create ospf area 0.0.0.0
configure ospf area 0.0.0.0 priority 25

configure ospf routerid 192.168.10.51
configure ospf add vlan Mngt area 0.0.0.0
configure ospf vlan Mngt priority 100
configure ospf add vlan Pad-A area 0.0.0.0
configure ospf vlan Pad-A priority 100
configure ospf add vlan Pad-B area 0.0.0.0
configure ospf vlan Pad-B priority 100
configure ospf add vlan Data-Pradio area 0.0.0.0
configure ospf vlan Data-Pradio priority 100
configure ospf add vlan vmwaremngt area 0.0.0.0
configure ospf vlan vmwaremngt priority 100
configure ospf add vlan Pad-A-Server area 0.0.0.0
configure ospf vlan Pad-A-Server priority 100

###redistribute static
configure ospf export static cost 10 ase-type-1
configure ospf export direct cost 10 ase-type-1

#### IP routes for Core-1 and Core-2

configure iproute 0.0.0.0 0.0.0.0 10.100.11.76
configure iproute 10.12.20.0 255.255.255.0 10.10.100.1
configure iproute 10.12.10.0 255.255.255.0 10.10.100.1
configure iproute 10.2.0.0 255.255.0.0 10.100.11.232
configure iproute 10.9.0.0 255.255.0.0 10.100.11.232
configure iproute 10.15.0.0 255.255.0.0 10.100.11.232
configure iproute 10.61.0.0 255.255.0.0 10.100.11.232
configure iproute 10.100.12.0 255.255.255.0 10.100.11.2
configure iproute 10.100.13.0 255.255.255.0 10.100.11.2
configure iproute 10.100.14.0 255.255.255.0 10.100.11.2
configure iproute 10.100.15.0 255.255.255.0 10.100.11.2
configure iproute 10.47.0.0 255.255.0.0 10.100.11.232
configure iproute 10.65.0.0 255.255.0.0 10.100.11.76
configure iproute 10.68.0.0 255.255.0.0 10.100.11.232
configure iproute 10.234.253.0 255.255.255.0 10.100.11.76
configure iproute 10.66.0.0 255.255.0.0 10.100.11.232
configure iproute 10.62.0.0 255.255.0.0 10.100.11.76
configure iproute 172.16.0.0 255.255.255.0 10.100.11.11
configure iproute 10.100.10.0 255.255.255.0 192.168.15.1
configure iproute 10.85.127.0 255.255.255.252 10.10.100.1
configure iproute 10.85.127.4 255.255.255.252 10.10.100.1

Is this configuration correct or I have to do something different?

Regards
Claudio

[Sushruth_Sathya]

Hi, to redistribute static routes into OSPF, you will need to write an ACL to call for static routes that are advertised in the "export" command. The following article gives you the steps -
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-re-distribute-specific-static-route...

[Claudio_D_Ascen]

We are using MLAG for connecting access switches and VRRP. We had excluded stacking the two X670-G2 because in case of XOS upgrade, we can do this switch by switch, without network downtime.
We had stacked only switch distributor or access.

[Andre_Brits_Kan]

Hi it might be to late but why not look at stacking the two core switches?? This will simplify your config with no need for vrrp/stp/mlag etc. A single HA core