Configuring NextGen Port Extender
NGPE Configuration Process
Use this manual process to create an NGPE network environment. Satellite devices participating in NGPE must have the Junos factory default configuration, or must be zeroized before satellite onboarding. You must have root access to all devices. All interfaces intended for NGPE must be cabled. We strongly recommend that you have console access to all devices during the initial setup process.
Generate the SSH Key on the SD
Verification
Verify the NGPE Configuration
Once the commit script has been started, the full configuration process may take up to 180 seconds to complete. You may seem some warnings about required licenses, and you can disregard those warnings.
Use the following commands to check the state of the NGPE deployment.
-
show chassis jnu role: displays whether a device is a controller or satellite.
If run from the AD: show chassis jnu role controller If run from a satellite: show chassis jnu role satellite
-
show chassis jnu satellites: displays the status of a single satellite or all satellites.
Satellite Alive Model Version ----------------------------------------------------- sd1 up qfx5120-48y-8c 25.4R1
-
show chassis port-extender: displays each virtual SD slot number, along with its IP address, MAC address, and cascade port number.
Target MAC-address MAC Slot Description IP-address mode Base count Cascade-ports 100 sd1 10.100.100.1 N 80:63:7c:0e:af:39 1280 ae4001
-
show interfaces terse: displays the up/down status of interfaces; useful for confirming the NGPE fabric is up.
Interface Admin Link Proto Local Remote et-0/0/0 up up et-0/0/0.0 up up aenet --> ae4001.0 et-0/0/0.16384 up up aenet --> ae4001.16384 et-0/0/0.32767 up up aenet --> ae4001.32767
-
show interfaces vtep: check the status of VTEP interfaces.
Physical interface: vtep, Enabled, Physical link is Up Interface index: 136, SNMP ifIndex: 521 Type: Software-Pseudo, Link-level type: VxLAN-Tunnel-Endpoint, MTU: Unlimited, Speed: Unlimited Device flags : Present Running Interface Specific flags: Internal: 0x200 Link type : Full-Duplex Link flags : None Last flapped : Never Input packets : 0 Output packets: 0 Logical interface vtep.32768 (Index 387) (SNMP ifIndex 546) Flags: Up SNMP-Traps 0x4000 Encapsulation: ENET2 Ethernet segment value: 00:00:00:00:00:00:00:00:00:00, Mode: single-homed, Multi-homed status: Forwarding VXLAN Endpoint Type: Source, VXLAN Endpoint Address: 10.101.100.0, L2 Routing Instance: ngpe/ngpe-ad, L3 Routing Instance: ngpe/default Input packets : 0 Output packets: 0 Logical interface vtep.32769 (Index 432) (SNMP ifIndex 726) Flags: Up SNMP-Traps Encapsulation: ENET2 VXLAN Endpoint Type: Remote, VXLAN Endpoint Address: 10.101.100.1, L2 Routing Instance: ngpe/ngpe-ad, L3 Routing Instance: ngpe/default Input packets : 0 Output packets: 0 Protocol bridge, MTU: Unlimited Flags: Is-Primary, Trunk-Mode, 0xc000000 -
request jnu satellite sync: needed if the SD failed to initially sync
admin@sd1> request jnu satellite sync Junos node unifier process started, pid 99442
-
show configuration | display set: displays the active configuration on the device
-
show log jnud: use this command to either monitor the progress of a satellite onboarding, or use after onboarding to check for any errors.
Nov 25 05:18:39 jnud_open_netconf_session : Host name : 10.100.100.0 - User name : jnuadmin Nov 25 05:18:39 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-get-lock/> Nov 25 05:18:39 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-get-lock/> successfull Nov 25 05:18:39 jnud_receive_response_from_node : 10.100.100.0 Nov 25 05:18:40 jnud_get_release_lock: rpc <mgd-jnu-get-lock/> passed Nov 25 05:18:40 jnud_get_release_lock: rpc <mgd-jnu-get-lock/> passed Nov 25 05:18:40 jnud_send_file_remote_scp: Copying the files with scp -O -o StrictHostKeychecking=no -i /var/db/jnu/.ssh/id_rsa /var/tmp/jnu_initial_sync jnuadmin@10.100.100.0:/var/tmp/jnu_initial_sync Nov 25 05:18:41 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-schema-add> <model>qfx5120-48y-8c</model> <version>25.4R1</version> <filename>/var/tmp/sd1-schema-258.tar.gz</filename> <model-id>169</model-id> </mgd-jnu-schema-add> Nov 25 05:18:41 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-schema-add> <model>qfx5120-48y-8c</model> <version>25.4R1</version> <filename>/var/tmp/sd1-schema-258.tar.gz</filename> <model-id>169</model-id> </mgd-jnu-schema-add> successfull Nov 25 05:18:41 jnud_receive_response_from_node : 10.100.100.0 Nov 25 05:18:42 jnud_sync_dual_controller: schema create rpc passed
Offboard and Re-onboard a Satellite Device
Offboard a Satellite Device
You can offboard an existing SD from your NGPE topology by following this process:
Disable the fabric for the target SD.
admin@ad1# set services port-extender satellite <satelle-name> fabric-disable
Commit the change.
admin@ad1# commit synchronize admin@ad1# commit synchronize re0: configuration check succeeds re1: commit complete re0: warning: Clear Sat change bits terminated abnormally commit complete
The satellite will be in the down state, however it will still be part of the NGPE topology. Remove the SD from the topology. You may either
deactivateordeletethe SD.admin@ad1# deactivate services port-extender satellite <satellite-name>
Commit the change.
admin@ad1# commit synchronize #You may see output similar to this. It is normal. admin@ad1# commit synchronize re0: warning: Port extender configuration is not detected in the candidate configuration.. warning: Checking for any pending satellites to deboard.. warning: Attempting to delete sd1 warning: Commit script clean up is successful... warning: No configuration to be done with script as port-extender is disabled [edit routing-options static] 'route 10.100.100.1/32' warning: requires 'L3 Static' license re0: configuration check succeeds re1: [edit chassis] 'satellite sd1' warning: statement does not exist commit complete re0: commit completeThe device should now be reverted to its pre-SD state.
Re-onboard a Satellite Device
You can re-onboard an SD to your NGPE topology by following this process:
Activate the satellite. If you previously deleted the
port-extender satelliteconfiguration, then usesetinstead ofactivate.admin@ad1# activate service port-extender satellite <satellite-name>
Commit the change.
admin@ad1# commit
Synchronize the satellites.
admin@ad1# run request jnu satellite synchronize
This will bring the SD back into the topology. Ensure that the
fabric-disablestatement is not in effect. If it is, remove it.admin@ad1# delete services port-extender satellite <satellite-name> fabric-disable
Commit the change.
admin@ad1# commit
Saving the Configuration
Save NGPE User-Generated Configuration
Follow this process to save only the user-generated configuration. This process should be performed when NGPE is in a maintenance window since the process requires disabling the NGPE fabric. We don't support loading configurations with NGPE elements into an active NGPE environment since this can have unexpected effects.
Disable the NGPE fabric.
admin@ad1# deactivate services port-extender admin@ad# commit synchronize
Save the configuration.
admin@ad1# show | display set | save /var/tmp/device.conf Wrote 2000 lines of output to '/var/tmp/device.conf'
- Restore the NGPE
fabric.
admin@ad1# activate services port-extender admin@ad# commit synchronize
Reload Existing Saved NGPE Configuration
As previously stated, we don't support loading an NGPE configuration onto an active NGPE
environment. You may however load a saved NGPE configuration to a non-NGPE device which
will act as the AD. The target AD must have either a baseline Junos configuration, or you
must zeroize the device prior to following this process. Ensure that all
necessary cabling has been completed in advance, and that any intended SDs are also
running a base configuration. Please ensure you have console access to the intended
AD.
Load the saved configuration.
admin@ad1# load override /location/<filename>
Example: admin@ad1# load override /var/tmp/device.conf ...config loads... admin@ad1# commit synchronize
Once the configuration has been loaded and committed, you'll need to activate the port-extender stanza.
admin@ad1# activate services port-extender admin@ad1# commit synchronize
Enable an SD.
admin@sd1# request jnu role satellite
Synchronize the satellite.
admin@sd1# request jnu satellite sync
Repeat steps 3 and 4 for each SD.