Cisco APIC Layer 3 Networking Configuration Guide

340 Pages·2017·10.18 MB·English

Cisco APIC Layer 3 Networking Configuration Guide, Release 3.x and
Earlier
FirstPublished:2017-09-22
LastModified:2019-08-20
AmericasHeadquarters
CiscoSystems,Inc.
170WestTasmanDrive
SanJose,CA95134-1706
USA
http://www.cisco.com
Tel:[phone]
800553-NETS(6387)
Fax:[phone]
©2017–2022CiscoSystems,Inc.Allrightsreserved.
Trademarks
THESPECIFICATIONSANDINFORMATIONREGARDINGTHEPRODUCTSREFERENCEDINTHIS
DOCUMENTATIONARESUBJECTTOCHANGEWITHOUTNOTICE.EXCEPTASMAYOTHERWISE
BEAGREEDBYCISCOINWRITING,ALLSTATEMENTS,INFORMATION,AND
RECOMMENDATIONSINTHISDOCUMENTATIONAREPRESENTEDWITHOUTWARRANTYOF
ANYKIND,EXPRESSORIMPLIED.
TheCiscoEndUserLicenseAgreementandanysupplementallicensetermsgovernyouruseofanyCisco
software,includingthisproductdocumentation,andarelocatedat:
http://www.cisco.com/go/softwareterms.Ciscoproductwarrantyinformationisavailableat
http://www.cisco.com/go/warranty.USFederalCommunicationsCommissionNoticesarefoundhere
http://www.cisco.com/c/en/us/products/us-fcc-notice.html.
INNOEVENTSHALLCISCOORITSSUPPLIERSBELIABLEFORANYINDIRECT,SPECIAL,
CONSEQUENTIAL,ORINCIDENTALDAMAGES,INCLUDING,WITHOUTLIMITATION,LOST
PROFITSORLOSSORDAMAGETODATAARISINGOUTOFTHEUSEORINABILITYTOUSE
THISMANUAL,EVENIFCISCOORITSSUPPLIERSHAVEBEENADVISEDOFTHEPOSSIBILITY
OFSUCHDAMAGES.
Anyproductsandfeaturesdescribedhereinasindevelopmentoravailableatafuturedateremaininvarying
stagesofdevelopmentandwillbeofferedonawhen-andif-availablebasis.Anysuchproductorfeature
roadmapsaresubjecttochangeatthesolediscretionofCiscoandCiscowillhavenoliabilityfordelayinthe
deliveryorfailuretodeliveranyproductsorfeatureroadmapitemsthatmaybesetforthinthisdocument.
AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactual
addressesandphonenumbers.Anyexamples,commanddisplayoutput,networktopologydiagrams,and
otherfiguresincludedinthedocumentareshownforillustrativepurposesonly.AnyuseofactualIPaddresses
orphonenumbersinillustrativecontentisunintentionalandcoincidental.
Thedocumentationsetforthisproductstrivestousebias-freelanguage.Forthepurposesofthisdocumentation
set,bias-freeisdefinedaslanguagethatdoesnotimplydiscriminationbasedonage,disability,gender,racial
identity,ethnicidentity,sexualorientation,socioeconomicstatus,andintersectionality.Exceptionsmaybe
presentinthedocumentationduetolanguagethatishardcodedintheuserinterfacesoftheproductsoftware,
languageusedbasedonRFPdocumentation,orlanguagethatisusedbyareferencedthird-partyproduct.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.S.and
othercountries.ToviewalistofCiscotrademarks,gotothisURL:www.cisco.comgotrademarks.Third-party
trademarksmentionedarethepropertyoftheirrespectiveowners.Theuseofthewordpartnerdoesnotimply
apartnershiprelationshipbetweenCiscoandanyothercompany.(1721R)
CiscoAPICLayer3NetworkingConfigurationGuide,Release3.xandEarlier
iii
Trademarks
Trademarks
CiscoAPICLayer3NetworkingConfigurationGuide,Release3.xandEarlier
iv
CONTEN TS
PREFACE Trademarks iii
CHAPTER 1 CiscoACIForwarding 1
ForwardingWithintheFabric 1
ACIFabricOptimizesModernDataCenterTrafficFlows 1
VXLANinACI 2
Layer3VNIDsFacilitateTransportingInter-subnetTenantTraffic 4
WANandOtherExternalNetworks 5
NetworkingDomains 5
ConfiguringRouteReflectors 6
RouterPeeringandRouteDistribution 6
RouteImportandExport,RouteSummarization,andRouteCommunityMatch 7
ACIRouteRedistribution 11
RouteDistributionWithintheACIFabric 11
ExternalLayer3OutsideConnectionTypes 12
AbouttheModesofConfiguringLayer3ExternalConnectivity 14
ControlsEnabledforSubnetsConfiguredundertheL3OutNetworkInstanceProfile 16
ACILayer3OutsideNetworkWorkflows 17
CHAPTER 2 PrerequisitesforConfiguringLayer3Networks 19
Layer3Prerequisites 19
BridgeDomainConfigurations 19
CHAPTER 3 RoutedConnectivitytoExternalNetworks 21
AboutRoutedConnectivitytoOutsideNetworks 21
Layer3OutforRoutedConnectivitytoExternalNetworks 21
CiscoAPICLayer3NetworkingConfigurationGuide,Release3.xandEarlier
v
Contents
GuidelinesforRoutedConnectivitytoOutsideNetworks 23
ConfiguringLayer3OutsideforTenantNetworks 26
ConfiguringaTenantLayer3OutsideNetworkConnectionOverview 26
ConfiguringLayer3OutsideforTenantNetworksUsingtheRESTAPI 28
RESTAPIExample:L3OutPrerequisites 30
RESTAPIExample:L3Out 31
ConfiguringaLayer3OutsideforTenantNetworksUsingtheNX-OSStyleCLI 32
NX-OSStyleCLIExample:L3OutPrerequisites 36
NX-OSStyleCLIExample:L3Out 36
ConfiguringaLayer3OutsideforTenantNetworksUsingtheGUI 38
CHAPTER 4 Layer3RoutedandSub-InterfacePortChannels 43
AboutLayer3PortChannels 43
ConfiguringPortChannelsUsingtheGUI 44
ConfiguringaLayer3RoutedPort-ChannelUsingtheGUI 45
ConfiguringaLayer3Sub-InterfacePort-ChannelUsingtheGUI 47
ConfiguringaLayer3RoutedPort-ChannelUsingtheNX-OSCLI 49
ConfiguringaLayer3Sub-InterfacePort-ChannelUsingtheNX-OSCLI 51
AddingPortstotheLayer3Port-ChannelUsingtheNX-OSCLI 54
ConfiguringPortChannelsUsingtheRESTAPI 55
ConfiguringaLayer3RoutedPortChannelUsingtheRESTAPI 56
ConfiguringaLayer3Sub-InterfacePortChannelUsingtheRESTAPI 57
CHAPTER 5 QoSforL3Outs 59
QoSforL3Outs 59
ConfiguringQoSforL3OutsUsingtheRESTAPI 59
ConfiguringQoSforL3OutsUsingtheNX-OSStyleCLI 60
ConfiguringQoSforL3OutsUsingtheGUI 61
CHAPTER 6 RoutingProtocolSupport 63
AboutRoutingProtocolSupport 63
BGPExternalRoutedNetworkswithBFDSupport 63
GuidelinesforConfiguringaBGPLayer3OutsideNetworkConnection 63
BGPConnectionTypesandLoopbackGuidelines 65
CiscoAPICLayer3NetworkingConfigurationGuide,Release3.xandEarlier
vi
Contents
ConfiguringBGPExternalRoutedNetworks 65
ConfiguringBGPExternalRoutedNetworkUsingtheGUI 65
ConfiguringBGPExternalRoutedNetworkUsingtheNX-OSStyleCLI 68
ConfiguringBGPExternalRoutedNetworkUsingtheRESTAPI 68
ConfiguringBGPMaxPath 70
ConfiguringBGPMaxPathUsingtheGUI 70
ConfiguringBGPMaxPathUsingtheNX-OSStyleCLI 71
ConfiguringBGPMaxPathUsingtheRESTAPI 71
ConfiguringASPathPrepend 71
ConfiguringASPathPrepend 71
ConfiguringASPathPrependUsingtheGUI 72
ConfiguringASPathPrependUsingtheNX-OSStyleCLI 73
ConfiguringASPathPrependUsingtheRESTAPI 73
BGPExternalRoutedNetworkswithASOverride 74
AboutBGPAutonomousSystemOverride 74
ConfiguringBGPExternalRoutedNetworkwithAutonomousSystemOverrideEnabledUsing
theGUI 75
ConfiguringBGPExternalRoutedNetworkwithAutonomousSystemOverrideEnabledUsing
theRESTAPI 76
ConfiguringPerVRFPerNodeBGPTimerValues 78
PerVRFPerNodeBGPTimerValues 78
ConfiguringaPerVRFPerNodeBGPTimerUsingtheAdvancedGUI 79
ConfiguringaPerVRFPerNodeBGPTimerUsingtheRESTAPI 80
DeletingaPerVRFPerNodeBGPTimerUsingtheRESTAPI 80
ConfiguringaPerVRFPerNodeBGPTimerPolicyUsingtheNX-OSStyleCLI 81
TroubleshootingInconsistencyandFaults 82
eBGPMultipathRelax 83
ConfiguringeBGPMultipathRelaxUsingtheGUI 83
ConfiguringeBGPMultipathRelaxUsingtheNX-OS-StyleCLI 84
ConfiguringeBGPMultipathRelaxUsingtheRESTAPI 84
ConfiguringBFDSupport 85
BidirectionalForwardingDetection 85
ConfiguringBFDonanIndividualLayer3OutUsingtheGUI 86
ConfiguringBFDGloballyonLeafSwitchUsingtheGUI 87
CiscoAPICLayer3NetworkingConfigurationGuide,Release3.xandEarlier
vii
Contents
ConfiguringBFDGloballyonSpineSwitchUsingtheGUI 88
ConfiguringBFDGloballyonLeafSwitchUsingtheNX-OSStyleCLI 89
ConfiguringBFDGloballyonSpineSwitchUsingtheNX-OSStyleCLI 90
ConfiguringBFDGloballyUsingtheRESTAPI 91
ConfiguringBFDInterfaceOverrideUsingtheGUI 91
ConfiguringBFDInterfaceOverrideUsingtheNX-OSStyleCLI 93
ConfiguringBFDInterfaceOverrideUsingtheRESTAPI 94
ConfiguringBFDConsumerProtocolsUsingtheGUI 94
ConfiguringBFDConsumerProtocolsUsingtheNX-OSStyleCLI 97
ConfiguringBFDConsumerProtocolsUsingtheRESTAPI 98
OSPFExternalRoutedNetworks 101
OSPFLayer3OutsideConnections 101
CreatinganOSPFExternalRoutedNetworkforManagementTenantUsingtheGUI 102
CreatinganOSPFExternalRoutedNetworkforaTenantUsingtheNX-OSCLI 104
CreatingOSPFExternalRoutedNetworkforManagementTenantUsingRESTAPI 106
EIGRPExternalRoutedNetworks 107
AboutEIGRPLayer3OutsideConnections 107
EIGRPProtocolSupport 107
GuidelinesandLimitationsWhenConfiguringEIGRP 109
ConfiguringEIGRPUsingtheGUI 110
ConfiguringEIGRPUsingtheNX-OS-StyleCLI 111
ConfiguringEIGRPUsingtheRESTAPI 115
CHAPTER 7 RouteSummarization 119
RouteSummarization 119
GuidelinesandLimitations 119
ConfiguringRouteSummarizationforBGP,OSPF,andEIGRPUsingtheRESTAPI 120
ConfiguringRouteSummarizationforBGP,OSPF,andEIGRPUsingtheNX-OSStyleCLI 122
ConfiguringRouteSummarizationforBGP,OSPF,andEIGRPUsingtheGUI 123
CHAPTER 8 RouteControl 125
RouteMaps/ProfileswithExplicitPrefixLists 125
AboutRouteMap/Profile 125
AboutExplicitPrefixListSupportforRouteMaps/Profile 126
CiscoAPICLayer3NetworkingConfigurationGuide,Release3.xandEarlier
viii
Contents
AggregationSupportforExplicitPrefixList 128
GuidelinesandLimitations 128
ConfiguringaRouteMap/ProfilewithExplicitPrefixListUsingtheGUI 129
ConfiguringRouteMap/ProfilewithExplicitPrefixListUsingNX-OSStyleCLI 130
ConfiguringRouteMap/ProfilewithExplicitPrefixListUsingRESTAPI 133
RoutingControlProtocols 134
AboutConfiguringaRoutingControlProtocolUsingImportandExportControls 134
ConfiguringaRouteControlProtocoltoUseImportandExportControls,WiththeGUI 135
ConfiguringaRouteControlProtocoltoUseImportandExportControls,WiththeNX-OSStyle
CLI 136
ConfiguringaRouteControlProtocoltoUseImportandExportControls,WiththeRESTAPI 138
CHAPTER 9 CommonPervasiveGateway 139
Overview 139
ConfiguringCommonPervasiveGatewayUsingtheGUI 140
ConfiguringCommonPervasiveGatewayUsingtheNX-OSStyleCLI 142
ConfiguringCommonPervasiveGatewayUsingtheRESTAPI 142
CHAPTER 10 StaticRouteonaBridgeDomain 145
AboutStaticRoutesinBridgeDomains 145
ConfiguringaStaticRouteonaBridgeDomainUsingtheGUI 145
ConfiguringaStaticRouteonaBridgeDomainUsingtheNX-OSStyleCLI 146
ConfiguringaStaticRouteonaBridgeDomainUsingtheRESTAPI 147
CHAPTER 11 MP-BGPRouteReflectors 149
BGPProtocolPeeringtoExternalBGPSpeakers 149
ConfiguringanMP-BGPRouteReflectorUsingtheGUI 151
ConfiguringanMP-BGPRouteReflectorfortheACIFabric 151
ConfiguringanMP-BGPRouteReflectorUsingtheRESTAPI 152
VerifyingtheMP-BGPRouteReflectorConfiguration 152
CHAPTER 12 SwitchVirtualInterface 155
SVIExternalEncapsulationScope 155
AboutSVIExternalEncapsulationScope 155
CiscoAPICLayer3NetworkingConfigurationGuide,Release3.xandEarlier
ix
Contents
EncapsulationScopeSyntax 157
GuidelinesforSVIExternalEncapsulationScope 157
ConfiguringSVIExternalEncapsulationScopeUsingtheGUI 158
ConfiguringSVIInterfaceEncapsulationScopeUsingNX-OSStyleCLI 158
ConfiguringSVIInterfaceEncapsulationScopeUsingtheRESTAPI 159
SVIAutoState 160
AboutSVIAutoState 160
GuidelinesandLimitationsforSVIAutoStateBehavior 160
ConfiguringSVIAutoStateUsingtheGUI 161
ConfiguringSVIAutoStateUsingNX-OSStyleCLI 161
ConfiguringSVIAutoStateUsingtheRESTAPI 162
CHAPTER 13 SharedServices 163
SharedLayer3Out 163
Layer3OuttoLayer3OutInter-VRFLeaking 166
ConfiguringTwoSharedLayer3OutsinTwoVRFsUsingRESTAPI 167
ConfiguringSharedLayer3OutInter-VRFLeakingUsingtheNX-OSStyleCLI-Named
Example 168
ConfiguringSharedLayer3OutInter-VRFLeakingUsingtheNX-OSStyleCLI-Implicit
Example 170
ConfiguringSharedLayer3OutInter-VRFLeakingUsingtheAdvancedGUI 171
CHAPTER 14 InterleakRedistributionforMP-BGP 175
OverviewInterleakRedistributionforMP-BGP 175
ConfiguringaRouteMapforInterleakRedistributionUsingtheGUI 176
ApplyingaRouteMapforInterleakRedistributionUsingtheGUI 176
ConfiguringInterleakRedistributionUsingtheNX-OS-StyleCLI 177
ConfiguringInterleakRedistributionUsingtheRESTAPI 178
CHAPTER 15 IPAging 181
Overview 181
ConfiguringtheIPAgingPolicyUsingtheGUI 181
ConfiguringtheIPAgingPolicyUsingtheNX-OS-StyleCLI 182
ConfiguringIPAgingUsingtheRESTAPI 182
CiscoAPICLayer3NetworkingConfigurationGuide,Release3.xandEarlier
x