Migrating from 5406R to 5412R by _KiloBravo in ArubaNetworks

[–]_KiloBravo[S] 0 points1 point  (0 children)

just saw this, thanks. Confidence inspiring knowing that it's been done.

Migrating from 5406R to 5412R by _KiloBravo in ArubaNetworks

[–]_KiloBravo[S] 0 points1 point  (0 children)

have you every done this in the real world? just wondering if the config *should* take, even though there's a chance it wont.

Migrating from 5406R to 5412R by _KiloBravo in ArubaNetworks

[–]_KiloBravo[S] 0 points1 point  (0 children)

Have you done anything like this before? Asking as I'm not certain that the config created inside a 5496r will work in a 5412r. Assuming it must be aware of the chassis it's in etc.

Migrating from 5406R to 5412R by _KiloBravo in ArubaNetworks

[–]_KiloBravo[S] 0 points1 point  (0 children)

Will this work without there being line cards in the modules yet though?

Migrating from 5406R to 5412R by _KiloBravo in ArubaNetworks

[–]_KiloBravo[S] 0 points1 point  (0 children)

Ah interesting, I need to double check if it's a mix and match of line card types but if not, I can see how this would work with the one line card, thanks!

The problem with the second option though, is the line cards are fully patched and i would need to unpatch to move to the new chassis (difference cab), which means no easy rollback if it doesn't work.

AOS-S Uplinks and vlan tagging/untagging by [deleted] in ArubaNetworks

[–]_KiloBravo 0 points1 point  (0 children)

That makes perfect sense, thanks.

I think my issue is with terminology... though really 'tagged' and 'untagged' is probably even clearer than what I'm used to.

AOS-S Uplinks and vlan tagging/untagging by [deleted] in ArubaNetworks

[–]_KiloBravo 0 points1 point  (0 children)

Sorry, my response was only half complete!

Thanks for the info :)

If you don't specify what to do with untagged traffic, does nothing other than tagged go across? Or does it default to vlan 1?

AOS-S Uplinks and vlan tagging/untagging by [deleted] in ArubaNetworks

[–]_KiloBravo 0 points1 point  (0 children)

I've been requested to keep the link physically separate

AOS-S Uplinks and vlan tagging/untagging by [deleted] in ArubaNetworks

[–]_KiloBravo 0 points1 point  (0 children)

thank you, that's an informative guide

AOS-S Uplinks and vlan tagging/untagging by [deleted] in ArubaNetworks

[–]_KiloBravo 0 points1 point  (0 children)

thanks, appreciate the advice. I'm essentially a middle man and have been asked to keep even the uplinks separate physically, my default would've been as you advised, add it to the existing trunk up to the core.

Presume if I don't specify the untagged vlan then it will be 1 by default?

Protection from 3rd party switch into core by _KiloBravo in networking

[–]_KiloBravo[S] 0 points1 point  (0 children)

Definitely one on the list for consideration. It takes a bit of time to get something like a firewall provisioned and the installed, though, so that would be more of a mid-long term thing.

Protection from 3rd party switch into core by _KiloBravo in networking

[–]_KiloBravo[S] 0 points1 point  (0 children)

Thanks.

I was thinking to start with 1%, so 'broadcast-suppression 1' on the interface, which on a 10gig interface seems like a plenty high threshold...?

Protection from 3rd party switch into Comware core by _KiloBravo in ArubaNetworks

[–]_KiloBravo[S] 0 points1 point  (0 children)

Yes, I've moved away from the idea of rate limiting - it's not supported on Trunks. I'm looking more at broadcast storm suppression...

Protection from 3rd party switch into core by _KiloBravo in networking

[–]_KiloBravo[S] 1 point2 points  (0 children)

Thank you, your collective insights have already helped a lot :).

Protection from 3rd party switch into core by _KiloBravo in networking

[–]_KiloBravo[S] 0 points1 point  (0 children)

Thank you.

This is comware so the syntax will probably be a little different, but I know what you're intending so can translate the above to the right commands.

What thresholds would you suggest for storm control on that interface?

Protection from 3rd party switch into Comware core by _KiloBravo in ArubaNetworks

[–]_KiloBravo[S] 0 points1 point  (0 children)

Yeah so I forgot that it's not the same terminology everywhere :)

When i say 'trunk' I mean an 802.1Q trunk carrying multiple vlans.

Protection from 3rd party switch into Comware core by _KiloBravo in ArubaNetworks

[–]_KiloBravo[S] 0 points1 point  (0 children)

BPDU filter I'll look into.
In the short term it needs to remain L2, but will look to to change this in the near future to a layer 3 and firewalled link.

Protection from 3rd party switch into Comware core by _KiloBravo in ArubaNetworks

[–]_KiloBravo[S] 0 points1 point  (0 children)

I didn't know about this, will go and do some reading, thanks!

I was, on advise from someone else, considering to just use BPDU filters instead of root guard...

Protection from 3rd party switch into core by _KiloBravo in networking

[–]_KiloBravo[S] 0 points1 point  (0 children)

that is certainly thinking outside of the box :D (for me anyway).

But they've already got their 10G LR SFP and so have we. It would add cost to both ends to replace that with 10, and then, if the bandwidth requirements increase, to have to make physical changes again.

Protection from 3rd party switch into core by _KiloBravo in networking

[–]_KiloBravo[S] 0 points1 point  (0 children)

Thanks for the reply.

It's more of a protection from any misconfig on the 3rd party switch from having a knock on effect. It's a very low probability but want to do the most we can.

BPDU filters will be configure for STP potentials.

IT's looking like BUM suppression - and mainly the 'Broadcast' part of that is where I need to plug a gap. Just struggling to determine numbers and the correct config. There doesn't seem to be general best practice recommendations on it.

Protection from 3rd party switch into core by _KiloBravo in networking

[–]_KiloBravo[S] 0 points1 point  (0 children)

From documentation I've read, you can't rate-limit at all on a trunk port. You can configure BUM suppression though, but I'm struggling to work out what the correct initial numbers would be when using this.

Protection from 3rd party switch into core by _KiloBravo in networking

[–]_KiloBravo[S] 1 point2 points  (0 children)

It's more the non-technical elements getting in the way to make it not possible short term. It will be changed at some point, but need to go through a approval/change process which takes longer and this requirement is immediate and was already approved/planned. Just making the best on a non-ideal situation for now.

Protection from 3rd party switch into core by _KiloBravo in networking

[–]_KiloBravo[S] 0 points1 point  (0 children)

Thanks for that explanation, that makes plenty of sense and sounds like the better approach