DvR Leaf to vIST Migration in OneStepp

[Sanktis]

Hello,

I am currently trying to switch our DVR Leaf Nodes from DVR to vIST clustering. Since we have a number of nodes that need to be converted, I am looking for a way to do this remotely without requiring console access.

We are using XIQ SE. I tried to solve this using a script that I would execute, but unfortunately, I can't find a way to do it in a script without requiring a reboot between disabling the DVR flag (no dvr) and applying the vIST configuration.

When I run the script manually, I get stuck as follows:

vsp4-cf-1:1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
vsp4-cf-1:1(config)#no router isis enable
WARNING:Disable ISIS will cause traffic disruption
Do you want to continue (y/n) ? y
WARNING: All ACLs and ACE entries under the ACLs will be disabled when DVR Leaf is deleted
vsp4-cf-1:1(config)#router isis
vsp4-cf-1:1(config-isis)#no spbm 1 smlt-peer-system-id
vsp4-cf-1:1(config-isis)#no spbm 1 smlt-virtual-bmac
vsp4-cf-1:1(config-isis)#no boot config flags dvr-leaf-mode
Warning: dvr-leaf-mode flag is disabled
Warning: Please save configuration and reboot the switch
for this to take effect.
vsp4-cf-1:1(config)#no dvr leaf virtual-ist
vsp4-cf-1:1(config)#no dvr leaf
vsp4-cf-1:1(config)#show dvr
************************************************************************************
Command Execution Time: Thu Aug 20 17:21:45 2026 CEST
************************************************************************************
There is no DVR instance.
vsp4-cf-1:1(config)#
vsp4-cf-1:1(config)#router isis
vsp4-cf-1:1(config-isis)#spbm 1 smlt-virtual-bmac 00:xx:xx:xx:xx:FF
vsp4-cf-1:1(config-isis)#spbm 1 smlt-peer-system-id xxxx.xxxx.xxxx 
vsp4-cf-1:1(config-isis)#spbm 1 ip enable
Error: IP commands are not supported on DVR Leaf

The alternative option would be to simply load the new configuration and perform a reboot. This works in principle. However, after the reboot, I still have to run the following two commands again. After that, the vIST config works—even though those commands are already included in the configuration.

virtual-ist peer-ip x.x.x.x vlan xxx
router isis enable
sa co

* MAC, IDs, IPs were masked in this commands.

Used VOSS Version 9.4.1.0.

Is anyone aware of a way to perform the migration from DVR Leaf to VIST without having to make further adjustments via console cable after the reboot?

Cheers 
Florian

[WillyHe]

Hello Visitor,

vIST is NOT a DVR domain, it is a LAG feature like M-LAG for LACP.

[Michael_Morey]

Florian,

In my research for this, it appears that the issue you are seeing is by design as the commands:

virtual-ist peer-ip x.x.x.x vlan xxx
router isis enable

are the very LAST commands that need to be ran to configure the vIST.

When the config is replayed at boot it is done top down and when these are hit, the structure has not been setup yet for the first time vIST use.  You may need to setup the config file a little different to get this to work:

1.) VLAN creation should be done first

- vIST VLAN - I-SID Mapping and IP addressing

2.) B-VLAN (which I assume you already have setup

3.) SPBM and ISIS Parameters

4.) ISIS NNI port config

THEN

virtual-ist peer-ip x.x.x.x vlan xxx

router isis enable 

Hopefully that helps

[Sanktis]

Hi Michael

OK i was able to test your advisory.
Unfortunately im still stuck at this Message.
I Guess i must reboot now and than i am able to continue. But this is not supported by scripting.
(lunching Script after boot)
So i am only able to apply a script once.
Then the new vIST must be functional so that i am able to reconnect over the MGMT IP.
Did i miss something?
Did i do something wrong?
Do you have any other advisory?

VSP-01:1#show run | inc dvr
************************************************************************************
Command Execution Time: Thu Aug 27 14:58:58 2026 CEST
************************************************************************************

boot config flags dvr-leaf-mode
dvr leaf 1
dvr leaf virtual-ist x.x.x.102 255.255.255.252 peer-ip x.x.x.101 cluster-id xxx

VSP-01:1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
VSP-01:1(config)#vlan create xxx name VLAN-vIST type port-mstprstp 0 
Error: Cannot config platform VLANs on DVR Leaf
VSP-01:1(config)#no router isis enable
WARNING:Disable ISIS will cause traffic disruption
Do you want to continue (y/n) ? y
WARNING: All ACLs and ACE entries under the ACLs will be disabled when DVR Leaf is deleted
VSP-01:1(config)#vlan create xxx name VLAN-vIST type port-mstprstp 0 
Error: Cannot config platform VLANs on DVR Leaf
VSP-01:1(config)#no boot config flags dvr-leaf-mode
Warning: dvr-leaf-mode flag is disabled
Warning: Please save configuration and reboot the switch
for this to take effect.

VSP-01:1(config)#vlan create xxx name VLAN-vIST type port-mstprstp 0 
Error: Cannot config platform VLANs on DVR Leaf

VSP-01:1(config)#no dvr leaf virtual-ist
Error: Remove SMLT virtual-bmac and peer-system-id before disabling DVR leaf v-ist

VSP-01:1(config)#router isis
VSP-01:1(config-isis)#no spbm 1 smlt-peer-system-id
VSP-01:1(config-isis)#no spbm 1 smlt-virtual-bmac
VSP-01:1(config-isis)#no dvr leaf
VSP-01:1(config)#show dvr
************************************************************************************
Command Execution Time: Thu Aug 27 15:08:33 2026 CEST
************************************************************************************
There is no DVR instance.

VSP-01:1(config)#vlan create xxx name VLAN-vIST type port-mstprstp 0 
VSP-01:1(config)#vlan i-sid xxx 1122xxx
VSP-01:1(config)#interface Vlan xxx
VSP-01:1(config-if)#ip address x.x.x.102 255.255.255.252
Error: IP commands are not supported on DVR Leaf

[Michael_Morey]

Regardless if you are trying this via a script or manually, you will be required to reload the device.

To disable DVR, you have to remove the boot flag which is only recognized at switch initialization.

The proper way to do this is to

- Disable ISIS

- Remove DVR/boot flag

- Reboot

- Configure vIST

- Enable ISIS

If your only way to access the switch was through the previously configured DVR, this is a good argument to have a console switch or OOB management.

[Sanktis]

Never mind. I notice that you mean i have to change the order in the Config file.
Im trying to figure out how. ATM i do the VLAN config at the beginnneing. Directly after this section.

# LINK-FLAP-DETECT CONFIGURATION

But it this commands were not applyed.

vlan create 4051 name "B-VLAN-1" type spbm-bvlan

vlan create 4052 name "B-VLAN-2" type spbm-bvlan

vlan members remove 1 1/1-1/24,2/1-2/4,1/s1-1/s2 portmember

vlan create xxx name "VLAN-vIST" type port-mstprstp 0

vlan i-sid xxx 1122xxx

vlan create 4051 name "B-VLAN-1" type spbm-bvlan

vlan create 4052 name "B-VLAN-2" type spbm-bvlan

I will try to move down after the section 

#

# MAINTENANCE-ENDPOINT CONFIGURATION

#

# **** START ****

# Special Part of Config because of Migration DVR to vIST ****

#

# VLAN CONFIGURATION

#

vlan members remove 1 1/1-1/24,2/1-2/4,1/s1-1/s2 portmember

vlan create xxx name "VLAN-vIST" type port-mstprstp 0

vlan i-sid xxx 1122xxx

vlan create 4051 name "B-VLAN-1" type spbm-bvlan

vlan create 4052 name "B-VLAN-2" type spbm-bvlan

# IP CONFIGURATION - GlobalRouter

#

interface Vlan xxx

ip address x.x.x.101 255.255.255.252

exit

# ISIS SPBM CONFIGURATION

#

router isis

spbm 1

spbm 1 nick-name x.xx.xx
spbm 1 b-vid 4051-4052 primary 4051

spbm 1 ip enable

spbm 1 smlt-virtual-bmac xx:xx:xx:xx.xx:xx

spbm 1 smlt-peer-system-id xxxx.xxxx.xxx

exit

# **** END ****

then the port Config Phase 1, the SMLT Config and the Port Config Phase 2 and so one are applied


after that the Port Config Phase 2 i added this section

# **** START ****

# Special Part of Config because of Migration DVR to vIST ****

#

#

# IP PREFIX LIST CONFIGURATION - GlobalRouter

#

ip prefix-list "vIST" xx.xx.xx.100/30 id 1 ge 30 le 30

# VIRTUAL IST CONFIGURATION

#

virtual-ist peer-ip xx.xx.xx.102 vlan xxx

#

# **** END ****

The the Routemaps and the Redistri is applied

#

# IP ROUTE MAP CONFIGURATION - GlobalRouter

#

route-map "suppressIST" 1

no permit

enable

match network "vIST"

exit

route-map "suppressIST" 2

permit

enable

match protocol local

exit

#

# IP REDISTRIBUTION CONFIGURATION - GlobalRouter

#

router isis

redistribute direct

redistribute direct route-map "suppressIST"

redistribute direct enable

exit

At the end of the config i added: 

#

# IP REDISTRIBUTE APPLY CONFIGURATIONS

router isis enable

#

# IP REDISTRIBUTE APPLY CONFIGURATIONS

isis apply redistribute direct