Assume you want to segment part of your network into its own isolated piece by using a VRF, how would you do this with VOSS?

ip vrf itstaff vrfid 1

vlan create 999 name “ITStaff” type port-mstprstp 0

vlan members add 999 1/8

interface vlan 999

vrf itstaff

ip address 192.168.99.2 255.255.255.0

exit

VRF “itstaff” includes VLAN 999 name “ITStaff” and is the only VLAN created so far in the VRF and the VRF has its own routing table.

VSP-1100:1(config)#show ip route vrf itstaff
************************************************************************************
Command Execution Time: Fri Apr 09 09:46:41 2021 UTC
************************************************************************************
=====================================================================================================
IP Route – VRF itstaff
=====================================================================================================
NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
—————————————————————————————————–
192.168.99.0 255.255.255.0 192.168.99.2 – 1 999 LOC 0 DB 0

1 out of 1 Total Num of Route Entries, 1 Total Num of Dest Networks displayed.
————————————————————————————————–
TYPE Legend:
I=Indirect Route, D=Direct Route, A=Alternative Route, B=Best Route, E=Ecmp Route,
U=Unresolved Route, N=Not in HW, F=Replaced by FTN, V=IPVPN Route, S=SPBM Route
PROTOCOL Legend:
v=Inter-VRF route redistributed
VSP-1100:1(config)#

Note: To test connectivity from the CLI with ping or traceroute remember to specify the VRF on the command line otherwise it will use the GRT and results will not be as expected.

Extreme Networks Cloud IQ onboarding of switches is quite straight forward and can be really useful for zero touch provisioning.

A few places to check if having problems connecting to Cloud IQ.

Add the correct device type and its serial number into Cloud IQ.

On the switch make sure it has the correct time otherwise it may have problems connecting to the server.

Enable DNS client on the switch so that the iqagent can resolve the FQDN of the server.

Make sure the switch can reach the internet and any Firewalls are not blocking the traffic.

https://extremeportal.force.com/ExtrArticleDetail?an=000079814&q=IQ%20AGENT%20FOR%20VOSS

https://extremeportal.force.com/ExtrArticleDetail?an=000079428

https://extremeportal.force.com/ExtrArticleDetail?an=000079403

Firewall Configuration Guides:

https://extremecloudiq.com/support/NL_GCP.html

Extreme Networks EXOS switches support jumbo frames. The default MTU size is 9216 bytes.

To configure the MTU size used for switching use the following command:

configure jumbo-frame-size <1523-9216>

To enable jumbo frames on all ports use the following command:

enable jumbo-frame ports all

To display jumbo frame support and size for a specific port:

show port 1:1 info detail

Output will show the following when enabled…

Jumbo: Enabled, MTU=9216

Client URL (CURL) is available in Windows 10 and can be used to test client to server connectivity.

For example, it can be used to check connectivity to a remote server web page where we expect to get a 200 OK returned from the server.

The following command can be used to on the command line to test for a response from the web page and show the HTTP header:

curl -I <enter url of web page here>

curl –help

Latest GNS3 uses Solar Putty for the console session and is not easy to copy screen output to a text file. Open up a second Custom Console session and choose Putty will allow you to capture the output to a log filename and the commands typed in Putty will also appear on the Solar Putty screen.

The universal 5520 switch needs some additional configuration to access the management protocols such as SSH as they are Firewalled off by a new security feature in the VOSS software, essentially configure the required management VLAN, the VLAN IP and add an IP route under NLS Configuration…

#

NLS CONFIGURATION

#

mgmt vlan 10
mac-offset 0
ip address 192.168.10.10/24
ip route 0.0.0.0/0 next-hop 192.168.10.1 weight 200
enable
force-topology-ip
exit

I have a static route for destination network 10.10.10.0/24 which I wish to redistribute into BGP from within VRF red, here is an example of how that redistribution works with a route-map and prefix-list on VOSS.

router vrf red
ip prefix-list “v10” 10.10.10.0/24 id 1 ge 24 le 24
exit

router vrf red
route-map “v10” 1
permit
enable
match network “v10”
exit
exit

router vrf red
ip bgp redistribute static
ip bgp redistribute static enable
ip bgp redistribute static route-map “v10”

exit

ip bgp apply redistribute static vrf red

Note: BGP configuration not shown is assumed to be in place.