Configure NextGen Port Extender
Manual Configuration Process
SD Preparation
Use this manual process to create an NGPE network environment. Satellite devices participating in NGPE must have the Junos factory default configuration, or must be zeroized before satellite onboarding. You must have root access to all devices. All interfaces intended for NGPE must be cabled. We strongly recommend that you have console access to all devices during the initial setup process.
Configure the AD
AD Step by Step Configuration
Follow these steps to create the baseline configuration required to initialize the NGPE topology with AD and SD connectivity.
Apply the SD Minimal Configuration
SD Minimal Configuration
You automatically generated a minimal configuration file during the NGPE initialization process. Now you can apply it to the target satellite device.
Configure Additional Satellite Devices
Onboard Additional SDs
The process to onboard additional SDs is outlined in this section. These steps do not apply to the first SD configured within your NGPE topology.
Configure the device as a satellite.
user@sd> request jnu role satellite
Capture the SSH key output.
user@sd> file show /var/db/jnu/.ssh/id_rsa.pub
Define the satellite model on the AD.
user@ad# set services port-extender satellite <satellite-name> device-model <sd-model-name>
Configure the cascade and uplink ports between the AD and the additional SD.
user@ad# set services port-extender satellite <satellite-name> connectivity-interface-ad <ad-interface-name> set services port-extender satellite <satellite-name> connectivity-interface-ad <ad-interface-name> set services port-extender satellite <satellite-name> connectivity-interface-sd <sd-interface-name> set services port-extender satellite <satellite-name> connectivity-interface-sd <sd-interface-name>
Add the SSH key captured in step 2. Ensure the SSH key is surrounded by quotation marks.
user@ad# set services port-extender satellite <satellite-name> ssh-key <"ssh key from SD">
Commit the configuration.
user@ad# commit synchronize
Follow the steps in Apply the SD Minimal Configuration to complete this process.
Verification
Verify the NGPE Configuration
Once the commit script has been started, the full configuration process may take up to 180 seconds to complete. You may seem some warnings about required licenses, and you can disregard those warnings.
Use the following commands to check the state of the NGPE deployment.
-
show chassis jnu role: displays whether a device is a controller or satellite.
If run from the AD: show chassis jnu role controller If run from a satellite: show chassis jnu role satellite
-
show chassis jnu satellites: displays the status of a single satellite or all satellites.
user@ad> show chassis jnu satellites Satellite Alive Model Version ----------------------------------------------------- sd1 up qfx5120-48y-8c 25.4R1
-
show chassis port-extender: displays each virtual SD slot number, along with its IP address, MAC address, and cascade port number.
user@ad> show chassis port-extender Target MAC-address MAC Slot Description IP-address mode Base count Cascade-ports 100 sd1 10.100.100.1 N 80:63:7c:0e:af:39 1280 ae4001 -
show interfaces terse: displays the up/down status of interfaces; useful for confirming the NGPE fabric is up.
user@ad> show interfaces terse Interface Admin Link Proto Local Remote et-0/0/0 up up et-0/0/0.0 up up aenet --> ae4001.0 et-0/0/0.16384 up up aenet --> ae4001.16384 et-0/0/0.32767 up up aenet --> ae4001.32767 ... ae4001 up up ae4001.0 up up inet 10.0.1.0/31 multiservice ae4001.16384 up up inet 10.1.1.0/31 multiservice ae4001.32767 up up multiservice ... ge-100/0/0 up up ge-100/0/0.16386 up up ge-100/0/1 up up ge-100/0/1.16386 up up ge-100/0/2 up up ge-100/0/2.16386 up up ge-100/0/3 up up ge-100/0/3.16386 up up ge-100/0/4 up up ge-100/0/4.16386 up up ge-100/0/5 up up ge-100/0/5.16386 up up ge-100/0/6 up up ge-100/0/6.16386 up up ge-100/0/7 up up ge-100/0/7.16386 up up ge-100/0/8 up up ge-100/0/8.16386 up up ge-100/0/9 up up ge-100/0/9.16386 up up -
show lacp interfaces: check the status of aex participating in LACP
user@ad> show lacp interfaces Aggregated interface: ae4001 LACP state: Role Exp Def Dist Col Syn Aggr Timeout Activity et-0/0/0 Actor No No Yes Yes Yes Yes Fast Active et-0/0/0 Partner No No Yes Yes Yes Yes Fast Active et-0/0/1 Actor No No Yes Yes Yes Yes Fast Active et-0/0/1 Partner No No Yes Yes Yes Yes Fast Active LACP protocol: Receive State Transmit State Mux State et-0/0/0 Current Fast periodic Collecting distributing et-0/0/1 Current Fast periodic Collecting distributing Aggregated interface: ae4002 LACP state: Role Exp Def Dist Col Syn Aggr Timeout Activity et-0/0/2 Actor No No Yes Yes Yes Yes Fast Active et-0/0/2 Partner No No Yes Yes Yes Yes Fast Active et-0/0/3 Actor No No Yes Yes Yes Yes Fast Active et-0/0/3 Partner No No Yes Yes Yes Yes Fast Active LACP protocol: Receive State Transmit State Mux State et-0/0/2 Current Fast periodic Collecting distributing et-0/0/3 Current Fast periodic Collecting distributing -
show interfaces vtep: check the status of VTEP interfaces.
user@ad> show interfaces vtep Physical interface: vtep, Enabled, Physical link is Up Interface index: 136, SNMP ifIndex: 521 Type: Software-Pseudo, Link-level type: VxLAN-Tunnel-Endpoint, MTU: Unlimited, Speed: Unlimited Device flags : Present Running Interface Specific flags: Internal: 0x200 Link type : Full-Duplex Link flags : None Last flapped : Never Input packets : 0 Output packets: 0 Logical interface vtep.32768 (Index 387) (SNMP ifIndex 546) Flags: Up SNMP-Traps 0x4000 Encapsulation: ENET2 Ethernet segment value: 00:00:00:00:00:00:00:00:00:00, Mode: single-homed, Multi-homed status: Forwarding VXLAN Endpoint Type: Source, VXLAN Endpoint Address: 10.101.100.0, L2 Routing Instance: ngpe/ngpe-ad, L3 Routing Instance: ngpe/default Input packets : 0 Output packets: 0 Logical interface vtep.32769 (Index 432) (SNMP ifIndex 726) Flags: Up SNMP-Traps Encapsulation: ENET2 VXLAN Endpoint Type: Remote, VXLAN Endpoint Address: 10.101.100.1, L2 Routing Instance: ngpe/ngpe-ad, L3 Routing Instance: ngpe/default Input packets : 0 Output packets: 0 Protocol bridge, MTU: Unlimited Flags: Is-Primary, Trunk-Mode, 0xc000000 -
show l2-learning vxlan-tunnel-endpoint remote: check the status of remote VTEP interfaces
user@ad> show l2-learning vxlan-tunnel-endpoint remote Logical System Name Id SVTEP-IP IFL L3-Idx SVTEP-Mode ELP-SVTEP-IP ngpe 1 10.101.100.0 lo0.16000 9
-
show bfd session device-list [satellite-name(s)]: check the status of BFD sessions
user@ad> show bfd session device-list [sd1 sd2] sd1 -------------------------------------------------------------------- Detect Transmit Address State Interface Time Interval Multiplier 10.1.1.0 Up ae0.1 3.000 1.000 3 10.101.100.0 Up 5.000 1.000 5 2 sessions, 2 clients Cumulative transmit rate 2.0 pps, cumulative receive rate 2.0 pps sd2 -------------------------------------------------------------------- Detect Transmit Address State Interface Time Interval Multiplier 10.1.2.0 Up ae0.1 3.000 1.000 3 10.101.100.0 Up 5.000 1.000 5 2 sessions, 2 clients Cumulative transmit rate 2.0 pps, cumulative receive rate 2.0 pps -
request jnu satellite sync: needed if the SD failed to initially sync, meaning the SD is configured and working, yet it isn't associated with the AD.
user@sd1> request jnu satellite sync Junos node unifier process started, pid 99442
-
show configuration | display set: displays the active configuration on the device
-
show log jnud: use this command to either monitor the progress of a satellite onboarding, or use after onboarding to check for any errors.
user@ad> show log jnud Nov 25 05:18:39 jnud_open_netconf_session : Host name : 10.100.100.0 - User name : jnuadmin Nov 25 05:18:39 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-get-lock/> Nov 25 05:18:39 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-get-lock/> successfull Nov 25 05:18:39 jnud_receive_response_from_node : 10.100.100.0 Nov 25 05:18:40 jnud_get_release_lock: rpc <mgd-jnu-get-lock/> passed Nov 25 05:18:40 jnud_get_release_lock: rpc <mgd-jnu-get-lock/> passed Nov 25 05:18:40 jnud_send_file_remote_scp: Copying the files with scp -O -o StrictHostKeychecking=no -i /var/db/jnu/.ssh/id_rsa /var/tmp/jnu_initial_sync jnuuser@10.100.100.0:/var/tmp/jnu_initial_sync Nov 25 05:18:41 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-schema-add> <model>qfx5120-48y-8c</model> <version>25.4R1</version> <filename>/var/tmp/sd1-schema-258.tar.gz</filename> <model-id>169</model-id> </mgd-jnu-schema-add> Nov 25 05:18:41 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-schema-add> <model>qfx5120-48y-8c</model> <version>25.4R1</version> <filename>/var/tmp/sd1-schema-258.tar.gz</filename> <model-id>169</model-id> </mgd-jnu-schema-add> successfull Nov 25 05:18:41 jnud_receive_response_from_node : 10.100.100.0 Nov 25 05:18:42 jnud_sync_dual_controller: schema create rpc passed
Extended Port Speeds
Change the Speed of an Extended Port
You can change the speed of an EP port in one of two ways:
-
Use the
default-speedsetting at theedit services port-extender satellite <satellite-name>hierarchy.Example: This sets the specified 10g ports to 1g speed. user@ad# set services port-extender satellite sd2 default-speed 1g ports xe-0/0/0 set services port-extender satellite sd2 default-speed 1g ports xe-0/0/1 set services port-extender satellite sd2 default-speed 1g ports xe-0/0/2 commit synchronize user@ad# run show interfaces terse *101* Interface Admin Link Proto Local Remote ge-101/0/0 up up ge-101/0/0.16386 up up ge-101/0/1 up up ge-101/0/1.16386 up up ge-101/0/2 up up ge-101/0/2.16386 up up
-
Use the
speedoption at theedit services port-extender satellite <sat-name>hierarchy. This option allows multiple ports to be configured at once.Example: This sets ports 0 - 3 to 1g speed. user@ad# set services port-extender satellite sd1 speed "0:1g;1:1g;2:1g;3:1g" commit synchronize user@ad# run show interface terse ... ge-100/0/0 up up ge-100/0/0.16386 up up ge-100/0/1 up up ge-100/0/1.16386 up up ge-100/0/2 up up ge-100/0/2.16386 up up ge-100/0/3 up up ge-100/0/3.16386 up up
Example: This sets port 5 from 100g to 10g. user@ad# set services port-extender satellite sd1 speed "5:10g" commit synchronize user@ad# run show interfaces terse | match 5 ... xe-100/0/5 up down xe-100/0/5.16386 up down
Saving the Configuration
Save User-Generated Configuration
Follow this process to save only the user-generated configuration. None of the NGPE generated configuration will be present in this save operation. This process should be performed when NGPE is in a maintenance window since the process requires disabling the NGPE fabric. We don't support loading configurations with NGPE elements into an active NGPE environment since this can have unexpected effects.
Disable the NGPE fabric.
user@ad# deactivate services port-extender commit synchronize
Save the configuration.
user@ad# show | display set | save /var/tmp/device.conf Wrote 2000 lines of output to '/var/tmp/device.conf'
- Restore the NGPE
fabric.
user@ad# activate services port-extender commit synchronize
Reload Existing Saved NGPE Configuration
As previously stated, we don't support loading an NGPE configuration onto an active NGPE
environment. You may however load a saved NGPE configuration to a non-NGPE device which
will act as the AD. The target AD must have either a baseline Junos configuration, or you
must zeroize the device prior to following this process. Ensure that all
necessary cabling has been completed in advance, and that any intended SDs are also
running a base configuration. Please ensure you have console access to the intended
AD.
Load the saved configuration.
user@ad# load override /location/<filename>
Example: user@ad# load override /var/tmp/device.conf ...config loads... user@ad# commit synchronize
Once the configuration has been loaded and committed, you'll need to activate the port-extender stanza.
user@ad# activate services port-extender user@ad# commit synchronize
Enable an SD.
user@sd1> request jnu role satellite
Synchronize the satellite.
user@sd1> request jnu satellite sync
Repeat steps 3 and 4 for each SD.