OTV example on ASR1000

OTV COMMANDS on ASR1000

OTV running configuration

COMMON OTV MISCONFIGURATION


1. OTV adds extra overhead around 46 bytes which reduce the data throughput from default size of 1500 - 46= 1554.  Since OTV  sends all data packet with  DF-BIT set by default,  make  sure end to end MTU is working fine else OTV adjacency will not come up.

2. For Unicast mode, adjaceny-server needs to configure on the server side and use-adjacensy-server needs to configure on remote side which will register with Adjacency server.


TOPOLOGY
=======

                      Site-1                                                                              Site-2                                                                       

3750-1----Gig0/0/1-ASR-1001---Gig0/0/0--(      ISP     )---Gig0/0/0--ASR1002---gig0/0/1------3750-2

192.168.1.1                            IP   1.1.1.1    -------------    IP   1.1.1.2                                    192.168.1.2


Site-1 
======

ASR1000-1#show run | i pim
 ip pim passive
ip pim ssm default
ip multicast-routing distributed

ASR1000-1#

ASR1000-1#show run | section otv
otv site bridge-domain 1 ---->  Note : It should match with EVC brdige domain configured under layer 2 side.
otv fragmentation join-interface GigabitEthernet0/0/0
otv site-identifier 1111.1111.1111
 

ASR1000-1#show running-config interface gigabitEthernet 0/0/0
Building configuration...

Current configuration : 125 bytes
!
interface GigabitEthernet0/0/0
 ip address 1.1.1.1 255.255.255.0
 ip pim passive
 ip igmp version 3
 negotiation auto
end

ASR1000-1#show run int ovErlay 1
Building configuration...

Current configuration : 237 bytes
!
interface Overlay1
 no ip address
 otv control-group 225.0.0.1
 otv data-group 232.0.0.0/8
 otv join-interface GigabitEthernet0/0/0
 otv vpn-name OTV-1
 service instance 100 ethernet
  encapsulation dot1q 100
  bridge-domain 1
  otv mac flood 1111.1111.1111
 !
end

ASR1000-1#show running-config interface gigabitEthernet 0/0/1
Building configuration...

Current configuration : 149 bytes
!
interface GigabitEthernet0/0/1
 no ip address
 negotiation auto
 service instance 100 ethernet
  encapsulation dot1q 100
  bridge-domain 1
 !
end



Site-2
======

ASR1000-2#show run | i pim
 ip pim passive
ip pim ssm default
ip multicast-routing distributed

ASR1000-2#

ASR1000-2#show run | i otv
otv site bridge-domain 2
otv fragmentation join-interface GigabitEthernet0/0/0
otv site-identifier 2222.2222.2222

ASR1000-2#show run int gigabitEthernet 0/0/0
Building configuration...

Current configuration : 125 bytes
!
interface GigabitEthernet0/0/0
 ip address 1.1.1.2 255.255.255.0
 ip pim passive
 ip igmp version 3
 negotiation auto
end


ASR1000-2#show run int overlay 2
Building configuration...

Current configuration : 237 bytes
!
interface Overlay2
 no ip address
 otv control-group 225.0.0.1
 otv data-group 232.0.0.0/8
 otv join-interface GigabitEthernet0/0/0
 otv vpn-name OTV-2
 service instance 100 ethernet
  encapsulation dot1q 100
  bridge-domain 2
 !
end


ASR1000-2#show run int gigabitEthernet 0/0/1
Building configuration...

Current configuration : 149 bytes
!
interface GigabitEthernet0/0/1
 no ip address
 negotiation auto
 service instance 100 ethernet
  encapsulation dot1q 100
  bridge-domain 2
 !
end

ASR1000-2#

ASR1000-1#



ASR1000-1#show otv detail
Overlay Interface Overlay1
 VPN name                 : OTV-1
 VPN ID                   : 1
 State                    : UP
 AED Capable              : Yes
 IPv4 control group       : 225.0.0.1
 Mcast data group range(s): 232.0.0.0/8
 Join interface(s)        : GigabitEthernet0/0/0
 Join IPv4 address        : 1.1.1.1
 Tunnel interface(s)      : Tunnel0
 Encapsulation format     : GRE/IPv4
 Site Bridge-Domain       : 1
 Capability               : Multicast-reachable
 Is Adjacency Server      : No
 Adj Server Configured    : No
 Prim/Sec Adj Svr(s)      : None
 OTV instance(s)          : 0
 FHRP Filtering Enabled   : Yes
 ARP Suppression Enabled  : No
 ARP Cache Timeout        : 600 seconds


 
ASR1000-1#show otv adjacency
Overlay 1 Adjacency Database
Hostname                       System-ID      Dest Addr       Up Time   State
ASR1000-2                      4c00.8257.0a00 1.1.1.2         06:18:14  UP  
 
     
ASR1000-1#show otv site
Site Adjacency Information (Site Bridge-Domain: 1)

Overlay1 Site-Local Adjacencies (Count: 1)

  Hostname       System ID      Last Change Ordinal    AED Enabled Status
* ASR1000-1      C08C.60EF.5800 00:41:39    0          site       overlay
ASR1000-1#
 
ASR1000-1#show otv vpn OTV-1
Overlay Interface Overlay1
 VPN name                 : OTV-1
 VPN ID                   : 1
 State                    : UP
 AED Capable              : Yes
 IPv4 control group       : 225.0.0.1
 Mcast data group range(s): 232.0.0.0/8
 Join interface(s)        : GigabitEthernet0/0/0
 Join IPv4 address        : 1.1.1.1
 Tunnel interface(s)      : Tunnel0
 Encapsulation format     : GRE/IPv4
 Site Bridge-Domain       : 1
 Capability               : Multicast-reachable
 Is Adjacency Server      : No
 Adj Server Configured    : No
 Prim/Sec Adj Svr(s)      : None

 
ASR1000-1#show otv route

Codes: BD - Bridge-Domain, AD - Admin-Distance,
       SI - Service Instance, * - Backup Route

OTV Unicast MAC Routing Table for Overlay1

 Inst VLAN BD     MAC Address    AD    Owner  Next Hops(s)
----------------------------------------------------------
 0    100  1      b0fa.eb84.b1c1 50    ISIS   ASR1000-2
 0    100  1      b0fa.eb90.7a81 40    BD Eng Gi0/0/1:SI100
 0    100  1      b0fa.eb90.7ac2 40    BD Eng Gi0/0/1:SI100

3 unicast routes displayed in Overlay1

----------------------------------------------------------
3 Total Unicast Routes Displayed

ASR1000-1#show otv route ?
  bridge-domain     Display unicast MAC routes for a specific bridge-domain
  neighbor-address  Filter output on neighbor address
  owner             Filter output on owner
  vlan              Display unicast MAC routes for a specific VLAN
  |                 Output modifiers
  <cr>



ASR1000-1#show otv arp-nd-cache 

Overlay1 ARP/ND L3->L2 Address Mapping Cache
BD     MAC            Layer-3 Address  Age (HH:MM:SS) Local/Remote
1      b0fa.eb84.b1c1 192.168.1.2      00:00:06       Remote

ASR1000-1#show otv arp-nd-cache
Overlay1 ARP/ND L3->L2 Address Mapping Cache
BD     MAC            Layer-3 Address  Age (HH:MM:SS) Local/Remote
1      b0fa.eb84.b1c1 192.168.1.2      00:00:07       Remote

ASR1000-1#

ASR1000-1#show otv vlan authoritative
Key:  SI - Service Instance

Overlay 1 VLAN Configuration Information
 Inst VLAN  Bridge-Domain  Auth  Site Interface(s)
 0    100   1              yes   Gi0/0/1:SI100
 Total VLAN(s): 1
 Total Authoritative VLAN(s): 1

ASR1000-1#


ASR1000-1#show otv summary
OTV Configuration Information, Site Bridge-Domain: 1

Overlay VPN Name        Control Group   Data Group(s)      Join Interface State
1       OTV-1           225.0.0.1       232.0.0.0/8        Gi0/0/0        UP   
Total Overlay(s): 1
  
ASR1000-1#show otv statistics
OTV App Statistics
 RIB route update messages sent: 0
  Success responses: 0
  Sys Limit Failure responses: 0
  Topo Limit Failure responses: 0
  Sys and Topo Limit Failure responses: 0
  Other Failure responses: 0
 RIB route delete messages sent: 0
  Success responses: 0
  Not Found Failure responses: 0
  Other Failure responses: 0
 RIB route lookup messages sent: 0
  Route found responses: 0
  Route not found responses: 0
  Failure responses: 0

 OTV App Event Count:
  Invalid event                      : 0
  Configured control-group           : 1
  Configured data-group              : 1
  Configured join-interface          : 1
  Configured ARP/ND suppression      : 3
  Configured active-source           : 0
  Configured fragmentation           : 1
  External interface address change  : 0
  Bridge-domain VLAN assigned        : 1
  Bridge-domain VLAN unassigned      : 0
  Request to walk topologies         : 1
  Request for topology VLAN          : 0
  Request to walk multicast mappings : 1
  AED change pending notification    : 1
  Delete feature data                : 0
  MLRIB event received               : 7
  Send MLRIB MAC flood update        : 0
  Send MLRIB redist registration     : 1
  First/Last Overlay event           : 1
  Tunnel repopulation request        : 0
  Multicast HA DG sync               : 0
  Multicast HA checkpoint mapping    : 0
  ISIS mapping received              : 0
  ISIS flush mappings                : 0
  ISIS overlay adjacency change      : 3
  ISIS NSF mapping complete          : 0
  ISIS NSF adjacency complete        : 0
  Send MLRIB repopulation complete   : 0
  MLRIB NSF redistribution complete  : 0
  Join-interface OIR event           : 0

ASR1000-1# 

ASR1000-1#show otv mroute
OTV Multicast Routing Table for Overlay1

Bridge-Domain = 1, s = *, g = *
 Outgoing interface list:
  Default, NoRedist
 Incoming interface count = 0, Outgoing interface count = 1


1 multicast routes displayed in Overlay1

----------------------------------------------------------
1 Total Multicast Routes Displayed

ASR1000-1#show otv log ?
  error  Error buffer
  event  Event buffer

ASR1000-1#show otv isis ?
  Overlay        Overlay interface
  database       ISIS database information
  hostname       IS-IS Dynamic hostname mapping
  lsp-log        IS-IS LSP log
  neighbors      IS-IS neighbors
  nsf            Non-stop forwarding state
  protocol       IS-IS protocol details
  rib            ISIS local RIB information
  site           IS-IS L2 Site process
  spf-log        IS-IS SPF log
  vlan-database  ISIS VLAN database information


ASR1000-1#show otv data-group ?
  bridge-domain    Filter output on bridge-domain ID
  delivery-group   Filter output on delivery-group address
  delivery-source  Filter output on delivery-source address
  detail           Show detailed info
  group            Filter output on group address
  instance         Filter output on OTV instance
  local            Show only local data-group sources
  remote           Show only remote data-group sources
  source           Filter output on source address
  vlan             Filter output on VLAN ID
  |                Output modifiers
  <cr>

ASR1000-1#show otv data-group
No remote data-group mappings
No local data-group mappings


ASR1000-2#show ip mroute
IP Multicast Routing Table
Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected,
       L - Local, P - Pruned, R - RP-bit set, F - Register flag,
       T - SPT-bit set, J - Join SPT, M - MSDP created entry, E - Extranet,
       X - Proxy Join Timer Running, A - Candidate for MSDP Advertisement,
       U - URD, I - Received Source Specific Host Report,
       Z - Multicast Tunnel, z - MDT-data group sender,
       Y - Joined MDT-data group, y - Sending to MDT-data group,
       G - Received BGP C-Mroute, g - Sent BGP C-Mroute,
       Q - Received BGP S-A Route, q - Sent BGP S-A Route,
       V - RD & Vector, v - Vector
Outgoing interface flags: H - Hardware switched, A - Assert winner
 Timers: Uptime/Expires
 Interface state: Interface, Next-Hop or VCD, State/Mode

(*, 225.0.0.1), 07:09:05/stopped, RP 0.0.0.0, flags: DC
  Incoming interface: Null, RPF nbr 0.0.0.0
  Outgoing interface list:
    Tunnel0, Forward/Sparse-Dense, 07:09:05/00:02:54
    GigabitEthernet0/0/0, Forward/Sparse-Dense, 07:08:59/Proxy

(1.1.1.1, 225.0.0.1), 07:09:05/00:02:51, flags: T
  Incoming interface: GigabitEthernet0/0/0, RPF nbr 0.0.0.0
  Outgoing interface list:
    Tunnel0, Forward/Sparse-Dense, 07:09:05/00:02:54

(1.1.1.2, 225.0.0.1), 07:09:05/00:01:29, flags: T
  Incoming interface: GigabitEthernet0/0/0, RPF nbr 0.0.0.0
  Outgoing interface list:
    Tunnel0, Forward/Sparse-Dense, 07:09:05/00:02:54
    GigabitEthernet0/0/0, Forward/Sparse-Dense, 07:08:59/Proxy



OTV Troubleshooting Commands

•show otv

•Show otv adjacency

•show otv vlan

•show ethernet service instance id 100 interface t0/0/1 mac dynamic address | i 12bf(Target Mac address)

•show bridge-domain <n> | i l2

•show bridge-domain <n>

•show otv route bridge-domain 100

•show otv route vlan <n>

•show otv isis rib redistribution mac-----

•sh otv adjacency-server replication-list

•show l2fib bridge-domain <number> otv encap <IP address>

•show l2fib output-list <Olist number>

•show l2fib bridge-domain <number> detail

•show l2fib log error

•show l2fib log event

•show platform hardware qfp active statistics drop all | e 0

•show platform hardware qfp active feature bridge-domain  datapath <number>

 Debug commands/Tools

•packet-tracer /debug condition

•Monitor capture on ASR

•Debug otv isis-adj-commands

•Access-list matching UDP port 8472 on join interface

•Debug ip udp  port 8472 address <remote join interface>

 
 For more information :

 http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nx-os/OTV/config_guide/b_Cisco_Nexus_7000_Series_NX-OS_OTV_Configuration_Guide/adv-otv.html


OTV on ASR

http://www.cisco.com/c/en/us/support/docs/routers/asr-1000-series-aggregation-services-routers/117158-configure-otv-00.html

http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/DCI/whitepaper/DCI3_OTV_Intro/DCI_1.html



OTV example on CSR100v.

http://www.ccierants.com/2013/04/ccie-dc-roll-your-own-otv.html


Please refer   DC to Cloud VM mobility: L2 extension in   below document.

https://www.ciscolive2014.com/connect/fileDownload/session/190E2760454F8AD6B560E616754AC22F/LTRSPG-2960-lf_Lab_Manual_v1.pdf

OTV adjacency server feature to use as otv transport if multicast core is not available.

 http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/wan_otv/configuration/xe-3s/wan-otv-xe-3s-book/wan-otv-adj-server.html

SUP replacement procedure in VSS for 4500,SUP7E,WS-4500X

SUP replacement procedure in VSS for 4500 SUP-7E,WS-4500X

Information: 

Supervisor replacement procedure is different  for 4500 switches in VSS when compare to  sup replacement for 6500 VSS.

Below are the simple steps to replace SUP in 4500 VSS. It applies to both active and standby supervisor replacement in 4500 VSS.

To add 4500 switch with new RMA supervisor to active VSS switch , please make sure below points.

1. Cisco IOS image on new RMA supervisor as current IOS used in VSS active SUP.
2. Same license needs to be installed as active supervisor in VSS.
3. Do not copy startup configuration to new RMA superviosr from active SUP as new RMA supervisor on standby switch will download the current configuration from active supervisor when standby supervisor will add in VSS.

Below procedure is strictly for dual-sup VSS and not for QUAD SUP VSS.

Procedure to replace the defective  supervisor either on active switch or standby switch in VSS.

1. If you are replacing active supervisor in VSS, do the switchover to standby switch first  by using "redundancy force-switchover " to make standby switch as active to avoid downtime.

2. If you are replacing supervisor on standby switch in VSS, powered off standby switch  first in VSS to avoid dual  active active-active situation with active switch in VSS.

3. Replace the supervisor with new Cisco RMA SUP on standby switch and  boot up standby switch WITHOUT VSL links connected.  Standby Switch will boot up with basic configuration.

 At this point, make sure  new supervisor is running same IOS as current IOS in VSS and same license  installed.

4. After verify above points, configure the below basic VSS configuration and VSL link configuration on standby switch and convert the switch from standalone to VIRTUAL mode. Below are  sample config.


switch virtual domain <>         Note :  Domain  number should match with active switch in VSS.

switch 1 or 2                             Note : Switch umber depend on which switch you are replacing and  
                                                           make sure the priority is less.
exit

interface port-channel <>
switchport
switch virtual link  2 or 1       Note : Switch number depend on which switch you are replacing SUP.
no shut
 exit

interface tengig<>
channel-group <> mode on
no shut
exit

5. Save the  config by using wr mem.

6. Convert the switch into virtual mode by using below command.

     switch convert mode virtual

7. While switch starts rebooting, connect the VSL link to the supervisor. 

After this, switch will convert into VSS and will come up as standby VSS in SSO mode and it will download the configuration from active supervisor.

8. Verify connectivity by using show cdp neigbor.


Used same process many times without any issues in production network.


Thank you for viewing this post. Hope this helps.