update autovpn lab configs (#34)

aristanetworks · Sep 9, 2024 · 870e99b · 870e99b
1 parent 040bdba
commit 870e99b
Show file tree

Hide file tree

Showing 17 changed files with 96 additions and 202 deletions.
diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-BORDER1.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-BORDER1.cfg
@@ -1,24 +1,16 @@
 ! Command: show running-config
-! device: DC1-BORDER1 (cEOSLab, EOS-4.33.0F-38377046.eostrunkceos (engineering build))
+! device: DC1-BORDER1 (cEOSLab, EOS-4.32.1F-37313256.4321F (engineering build))
 !
 no aaa root
 !
 username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/.
 !
-management api http-commands
-   no shutdown
-   !
-   vrf MGMT
-      no shutdown
-!
 dhcp relay
    tunnel requests disabled
    mlag peer-link requests disabled
 !
 switchport default mode routed
 !
-no service interface inactive port-id allocation disabled
-!
 transceiver qsfp default-mode 4x10G
 !
 interface defaults
@@ -52,6 +44,12 @@ vrf instance MGMT
 !
 vrf instance PROD
 !
+management api http-commands
+   no shutdown
+   !
+   vrf MGMT
+      no shutdown
+!
 aaa authorization exec default local
 !
 interface Ethernet1
@@ -175,13 +173,6 @@ router bgp 65102
       route-target import evpn 51:51
       route-target export evpn 51:51
 !
-router multicast
-   ipv4
-      software-forwarding kernel
-   !
-   ipv6
-      software-forwarding kernel
-!
 management ssh
    vrf MGMT
       no shutdown

diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-BORDER2.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-BORDER2.cfg
@@ -1,24 +1,16 @@
 ! Command: show running-config
-! device: DC1-BORDER2 (cEOSLab, EOS-4.33.0F-38377046.eostrunkceos (engineering build))
+! device: DC1-BORDER2 (cEOSLab, EOS-4.32.1F-37313256.4321F (engineering build))
 !
 no aaa root
 !
 username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/.
 !
-management api http-commands
-   no shutdown
-   !
-   vrf MGMT
-      no shutdown
-!
 dhcp relay
    tunnel requests disabled
    mlag peer-link requests disabled
 !
 switchport default mode routed
 !
-no service interface inactive port-id allocation disabled
-!
 transceiver qsfp default-mode 4x10G
 !
 interface defaults
@@ -52,6 +44,12 @@ vrf instance MGMT
 !
 vrf instance PROD
 !
+management api http-commands
+   no shutdown
+   !
+   vrf MGMT
+      no shutdown
+!
 aaa authorization exec default local
 !
 interface Ethernet1
@@ -170,13 +168,6 @@ router bgp 65103
       route-target import evpn 51:51
       route-target export evpn 51:51
 !
-router multicast
-   ipv4
-      software-forwarding kernel
-   !
-   ipv6
-      software-forwarding kernel
-!
 management ssh
    vrf MGMT
       no shutdown

diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-LEAF.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-LEAF.cfg
@@ -1,24 +1,16 @@
 ! Command: show running-config
-! device: DC1-LEAF (cEOSLab, EOS-4.33.0F-38377046.eostrunkceos (engineering build))
+! device: DC1-LEAF (cEOSLab, EOS-4.32.1F-37313256.4321F (engineering build))
 !
 no aaa root
 !
 username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/.
 !
-management api http-commands
-   no shutdown
-   !
-   vrf MGMT
-      no shutdown
-!
 dhcp relay
    tunnel requests disabled
    mlag peer-link requests disabled
 !
 switchport default mode routed
 !
-no service interface inactive port-id allocation disabled
-!
 transceiver qsfp default-mode 4x10G
 !
 interface defaults
@@ -52,6 +44,12 @@ vrf instance MGMT
 !
 vrf instance PROD
 !
+management api http-commands
+   no shutdown
+   !
+   vrf MGMT
+      no shutdown
+!
 aaa authorization exec default local
 !
 interface Ethernet1
@@ -191,13 +189,6 @@ router bgp 65101
       route-target export evpn 51:51
       redistribute connected
 !
-router multicast
-   ipv4
-      software-forwarding kernel
-   !
-   ipv6
-      software-forwarding kernel
-!
 management ssh
    vrf MGMT
       no shutdown

diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-R1.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-R1.cfg
@@ -176,6 +176,7 @@ router bgp 65000
    neighbor LOCAL-EVPN-PEERS remote-as 65100
    neighbor LOCAL-EVPN-PEERS update-source Loopback0
    neighbor LOCAL-EVPN-PEERS ebgp-multihop 3
+   neighbor LOCAL-EVPN-PEERS password 7 WzKnNSduqwPYvUePYIh40g==
    neighbor WAN-OVERLAY-PEERS peer group
    neighbor WAN-OVERLAY-PEERS remote-as 65000
    neighbor WAN-OVERLAY-PEERS update-source Dps1

diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-SPINE.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC1-SPINE.cfg
@@ -1,20 +1,12 @@
 ! Command: show running-config
-! device: DC1-SPINE (cEOSLab, EOS-4.33.0F-38377046.eostrunkceos (engineering build))
+! device: DC1-SPINE (cEOSLab, EOS-4.32.1F-37313256.4321F (engineering build))
 !
 no aaa root
 !
 username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/.
 !
-management api http-commands
-   no shutdown
-   !
-   vrf MGMT
-      no shutdown
-!
 switchport default mode routed
 !
-no service interface inactive port-id allocation disabled
-!
 transceiver qsfp default-mode 4x10G
 !
 interface defaults
@@ -33,6 +25,12 @@ system l1
 !
 vrf instance MGMT
 !
+management api http-commands
+   no shutdown
+   !
+   vrf MGMT
+      no shutdown
+!
 aaa authorization exec default local
 !
 interface Ethernet1
@@ -143,13 +141,6 @@ router bgp 65100
    address-family ipv4
       neighbor LOCAL-IPV4-PEERS activate
 !
-router multicast
-   ipv4
-      software-forwarding kernel
-   !
-   ipv6
-      software-forwarding kernel
-!
 management ssh
    vrf MGMT
       no shutdown

diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-BORDER1.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-BORDER1.cfg
@@ -1,24 +1,16 @@
 ! Command: show running-config
-! device: DC2-BORDER1 (cEOSLab, EOS-4.33.0F-38377046.eostrunkceos (engineering build))
+! device: DC2-BORDER1 (cEOSLab, EOS-4.32.1F-37313256.4321F (engineering build))
 !
 no aaa root
 !
 username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/.
 !
-management api http-commands
-   no shutdown
-   !
-   vrf MGMT
-      no shutdown
-!
 dhcp relay
    tunnel requests disabled
    mlag peer-link requests disabled
 !
 switchport default mode routed
 !
-no service interface inactive port-id allocation disabled
-!
 transceiver qsfp default-mode 4x10G
 !
 interface defaults
@@ -52,6 +44,12 @@ vrf instance MGMT
 !
 vrf instance PROD
 !
+management api http-commands
+   no shutdown
+   !
+   vrf MGMT
+      no shutdown
+!
 aaa authorization exec default local
 !
 interface Ethernet1
@@ -175,13 +173,6 @@ router bgp 65202
       route-target import evpn 51:51
       route-target export evpn 51:51
 !
-router multicast
-   ipv4
-      software-forwarding kernel
-   !
-   ipv6
-      software-forwarding kernel
-!
 management ssh
    vrf MGMT
       no shutdown

diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-BORDER2.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-BORDER2.cfg
@@ -1,24 +1,16 @@
 ! Command: show running-config
-! device: DC2-BORDER2 (cEOSLab, EOS-4.33.0F-38377046.eostrunkceos (engineering build))
+! device: DC2-BORDER2 (cEOSLab, EOS-4.32.1F-37313256.4321F (engineering build))
 !
 no aaa root
 !
 username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/.
 !
-management api http-commands
-   no shutdown
-   !
-   vrf MGMT
-      no shutdown
-!
 dhcp relay
    tunnel requests disabled
    mlag peer-link requests disabled
 !
 switchport default mode routed
 !
-no service interface inactive port-id allocation disabled
-!
 transceiver qsfp default-mode 4x10G
 !
 interface defaults
@@ -53,6 +45,12 @@ vrf instance MGMT
 !
 vrf instance PROD
 !
+management api http-commands
+   no shutdown
+   !
+   vrf MGMT
+      no shutdown
+!
 aaa authorization exec default local
 !
 interface Ethernet1
@@ -176,13 +174,6 @@ router bgp 65203
       route-target import evpn 51:51
       route-target export evpn 51:51
 !
-router multicast
-   ipv4
-      software-forwarding kernel
-   !
-   ipv6
-      software-forwarding kernel
-!
 management ssh
    vrf MGMT
       no shutdown

diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-LEAF.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-LEAF.cfg
@@ -1,24 +1,16 @@
 ! Command: show running-config
-! device: DC2-LEAF (cEOSLab, EOS-4.33.0F-38377046.eostrunkceos (engineering build))
+! device: DC2-LEAF (cEOSLab, EOS-4.32.1F-37313256.4321F (engineering build))
 !
 no aaa root
 !
 username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/.
 !
-management api http-commands
-   no shutdown
-   !
-   vrf MGMT
-      no shutdown
-!
 dhcp relay
    tunnel requests disabled
    mlag peer-link requests disabled
 !
 switchport default mode routed
 !
-no service interface inactive port-id allocation disabled
-!
 transceiver qsfp default-mode 4x10G
 !
 interface defaults
@@ -52,6 +44,12 @@ vrf instance MGMT
 !
 vrf instance PROD
 !
+management api http-commands
+   no shutdown
+   !
+   vrf MGMT
+      no shutdown
+!
 aaa authorization exec default local
 !
 interface Ethernet1
@@ -191,13 +189,6 @@ router bgp 65201
       route-target export evpn 51:51
       redistribute connected
 !
-router multicast
-   ipv4
-      software-forwarding kernel
-   !
-   ipv6
-      software-forwarding kernel
-!
 management ssh
    vrf MGMT
       no shutdown

diff --git a/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-R1.cfg b/tech-library/wan/autovpn/zbackend-infra/clab/configs/DC2-R1.cfg
@@ -58,7 +58,7 @@ router path-selection
       ipsec profile IPSEC-PROFILE
       !
       local interface Ethernet2
-         stun server-profile DC1-R2-Ethernet2 DC2-R2-Ethernet2
+         stun server-profile DC2-R2-Ethernet2 DC1-R2-Ethernet2
       !
       peer dynamic
       !
@@ -176,6 +176,7 @@ router bgp 65000
    neighbor LOCAL-EVPN-PEERS remote-as 65200
    neighbor LOCAL-EVPN-PEERS update-source Loopback0
    neighbor LOCAL-EVPN-PEERS ebgp-multihop 3
+   neighbor LOCAL-EVPN-PEERS password 7 WzKnNSduqwPYvUePYIh40g==
    neighbor WAN-OVERLAY-PEERS peer group
    neighbor WAN-OVERLAY-PEERS remote-as 65000
    neighbor WAN-OVERLAY-PEERS update-source Dps1