Cheat Sheet - Cumulus Linux printable pdf download

Cheat Sheet |Cumulus Linux

Layer 2 Networking and IP Addressing

Routing

File Location : /etc/network/interfaces

File Location : /etc/quagga/Quagga.conf

inet Types:

Supported Routing Protocols:

● loopback

● BGP

● dhcp

● OSPF

● Other, Non-specified (L2/L3 ports)

Configure OSPF for swp1 and put it into area 0

# loopback interface

auto lo

iface lo inet loopback

service integrated-vtysh-config

address 10.2.1.1/32

interface swp1

# oob interface

ip ospf area 0.0.0.0

auto eth0

Ip ospf network point-to-point

iface eth0 inet dhcp

router ospf

# front panel port interface

ospf router-id 10.2.1.1

auto swp1

iface swp1

address 172.16.1.2/24

Dameon Location: /etc/quagga/daemons

mtu 9216

link-speed 10000

root@leaf1:/etc/cumulus# cat /etc/quagga/daemons

link-duplex full

zebra=yes

link-autoneg off

bgpd=yes

ospfd=yes

Linux Bridge in vlan-aware mode:

ospf6d=yes

auto bridge

Security (CoPP, iptables, acl)

iface bridge

bridge-vlan-aware yes

File Location : /etc/cumulus/acl/policy.d/*.rules

bridge-ports swp2 swp3 swp4

bridge-vids 1-200

[iptables]

bridge-pvid 1

-A FORWARD -o swp1 -p tcp --dport 200 -j DROP

#Switch VLAN Interface for VLAN10

Tables:

auto bridge.10

● iptables corresponds to IPv4

iface bridge.10

● ip6tables corresponds to IPv6

address 172.16.10.2/24

● ebtables corresponds to layer2

MLAG (Multichassis Link Aggregation)

Chains:

● FORWARD corresponds to traffic through the switch

● INPUT corresponds to traffic with destination on the

Switch (e.g. loopback)

● OUTPUT corresponds to traffic being generated by switch

Applying Rules to Multiple Swps

-A OUTPUT,FORWARD -o swp+ -p tcp --sport 123 -j DROP

Applying Policing to Swp

auto peerlink.4094

iface peerlink.4094

A FORWARD ininterface swp1 j POLICE setmode KB

address 169.254.1.1/30

setrate 125000 setburst 2000

clagd-peer-ip 169.254.1.2

clagd-backup-ip 10.0.1.50

VRR (Virtual Router Redundancy)

clagd-sys-mac 44:39:39:FF:40:94

# ToR pair #1

VRR for VLAN 10 configured under /etc/network/interfaces

auto downlink1

iface downlink1

auto bridge.10

bond-slaves swp29 swp30

iface bridge.10

clag-id 1

address 172.16.10.2/24

address-virtual 00:00:5e:00:01:01 172.16.10.1/24

By Sean Cavanaugh

v1.3

Cheat Sheet - Cumulus Linux

Related Articles

Related forms

Related Categories