Configuring NextGen Port Extender
NGPE Configuration Process
Use this manual process to create an NGPE network environment. Satellite devices participating in NGPE must have the Junos factory default configuration, or must be zeroized before satellite onboarding. You must have root access to all devices. All interfaces intended for NGPE must be cabled. We strongly recommend that you have console access to all devices during the initial setup process.
Satellite Device Preparation
Generate the SSH Key on the SD
Aggregate Device Configuration
Configure the AD
Satellite Device Minimal Configuration
Configure Additional Satellite Devices
Onboard Additional SDs
The process to onboard additional SDs is outlined in this section. These steps do not apply to the first SD configured within your NGPE topology.
Configure the device as a satellite.
root@sd> request jnu role satellite
Capture the SSH key output.
root@sd> file show /var/db/jnu/.ssh/id_rsa.pub
Define the satellite model on the AD.
root@ad# set services port-extender satellite <satellite-name> device-model <sd-model-name>
Configure the cascade and uplink ports between the AD and the additional SD.
root@ad# set services port-extender satellite <satellite-name> connectivity-interface-ad <ad-interface-name> set services port-extender satellite <satellite-name> connectivity-interface-ad <ad-interface-name> set services port-extender satellite <satellite-name> connectivity-interface-sd <sd-interface-name> set services port-extender satellite <satellite-name> connectivity-interface-sd <sd-interface-name>
Add the SSH key captured in step 2. Ensure the SSH key is surrounded by quotation marks.
root@ad# set services port-extender satellite <satellite-name> ssh-key <"ssh key from SD">
Commit the configuration.
root@ad# commit synchronize
Follow the steps in Satellite Device Minimal Configuration to complete this process.
Verification
Verify the NGPE Configuration
Once the commit script has been started, the full configuration process may take up to 180 seconds to complete. You may seem some warnings about required licenses, and you can disregard those warnings.
Use the following commands to check the state of the NGPE deployment.
show chassis jnu role: displays whether a device is a controller or satellite.
If run from the AD: show chassis jnu role controller If run from a satellite: show chassis jnu role satellite
show chassis jnu satellites: displays the status of a single satellite or all satellites.
Satellite Alive Model Version ----------------------------------------------------- sd1 up qfx5120-48y-8c 25.4R1
show chassis port-extender: displays each virtual SD slot number, along with its IP address, MAC address, and cascade port number.
Target MAC-address MAC Slot Description IP-address mode Base count Cascade-ports 100 sd1 10.100.100.1 N 80:63:7c:0e:af:39 1280 ae4001
show interfaces terse: displays the up/down status of interfaces; useful for confirming the NGPE fabric is up.
Interface Admin Link Proto Local Remote et-0/0/0 up up et-0/0/0.0 up up aenet --> ae4001.0 et-0/0/0.16384 up up aenet --> ae4001.16384 et-0/0/0.32767 up up aenet --> ae4001.32767
show interfaces vtep: check the status of VTEP interfaces.
Physical interface: vtep, Enabled, Physical link is Up Interface index: 136, SNMP ifIndex: 521 Type: Software-Pseudo, Link-level type: VxLAN-Tunnel-Endpoint, MTU: Unlimited, Speed: Unlimited Device flags : Present Running Interface Specific flags: Internal: 0x200 Link type : Full-Duplex Link flags : None Last flapped : Never Input packets : 0 Output packets: 0 Logical interface vtep.32768 (Index 387) (SNMP ifIndex 546) Flags: Up SNMP-Traps 0x4000 Encapsulation: ENET2 Ethernet segment value: 00:00:00:00:00:00:00:00:00:00, Mode: single-homed, Multi-homed status: Forwarding VXLAN Endpoint Type: Source, VXLAN Endpoint Address: 10.101.100.0, L2 Routing Instance: ngpe/ngpe-ad, L3 Routing Instance: ngpe/default Input packets : 0 Output packets: 0 Logical interface vtep.32769 (Index 432) (SNMP ifIndex 726) Flags: Up SNMP-Traps Encapsulation: ENET2 VXLAN Endpoint Type: Remote, VXLAN Endpoint Address: 10.101.100.1, L2 Routing Instance: ngpe/ngpe-ad, L3 Routing Instance: ngpe/default Input packets : 0 Output packets: 0 Protocol bridge, MTU: Unlimited Flags: Is-Primary, Trunk-Mode, 0xc000000request jnu satellite sync: needed if the SD failed to initially sync
admin@sd1> request jnu satellite sync Junos node unifier process started, pid 99442
show configuration | display set: displays the active configuration on the device
show log jnud: use this command to either monitor the progress of a satellite onboarding, or use after onboarding to check for any errors.
Nov 25 05:18:39 jnud_open_netconf_session : Host name : 10.100.100.0 - User name : jnuadmin Nov 25 05:18:39 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-get-lock/> Nov 25 05:18:39 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-get-lock/> successfull Nov 25 05:18:39 jnud_receive_response_from_node : 10.100.100.0 Nov 25 05:18:40 jnud_get_release_lock: rpc <mgd-jnu-get-lock/> passed Nov 25 05:18:40 jnud_get_release_lock: rpc <mgd-jnu-get-lock/> passed Nov 25 05:18:40 jnud_send_file_remote_scp: Copying the files with scp -O -o StrictHostKeychecking=no -i /var/db/jnu/.ssh/id_rsa /var/tmp/jnu_initial_sync jnuadmin@10.100.100.0:/var/tmp/jnu_initial_sync Nov 25 05:18:41 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-schema-add> <model>qfx5120-48y-8c</model> <version>25.4R1</version> <filename>/var/tmp/sd1-schema-258.tar.gz</filename> <model-id>169</model-id> </mgd-jnu-schema-add> Nov 25 05:18:41 jnud_send_request_to_node - Node : 10.100.100.0 RPC : <mgd-jnu-schema-add> <model>qfx5120-48y-8c</model> <version>25.4R1</version> <filename>/var/tmp/sd1-schema-258.tar.gz</filename> <model-id>169</model-id> </mgd-jnu-schema-add> successfull Nov 25 05:18:41 jnud_receive_response_from_node : 10.100.100.0 Nov 25 05:18:42 jnud_sync_dual_controller: schema create rpc passed
Offboard and Re-onboard a Satellite Device
Offboard a Satellite Device
You can offboard an existing SD from your NGPE topology by following this process:
Disable the fabric for the target SD.
admin@ad# set services port-extender satellite <satelle-name> fabric-disable
Commit the change.
admin@ad# commit synchronize admin@ad# commit synchronize re0: configuration check succeeds re1: commit complete re0: warning: Clear Sat change bits terminated abnormally commit complete
The satellite will be in the down state, however it will still be part of the NGPE topology. Remove the SD from the topology. You may either
deactivateordeletethe SD.admin@ad# deactivate services port-extender satellite <satellite-name>
Commit the change.
admin@ad# commit synchronize #You may see output similar to this. It is normal. admin@ad# commit synchronize re0: warning: Port extender configuration is not detected in the candidate configuration.. warning: Checking for any pending satellites to deboard.. warning: Attempting to delete sd1 warning: Commit script clean up is successful... warning: No configuration to be done with script as port-extender is disabled [edit routing-options static] 'route 10.100.100.1/32' warning: requires 'L3 Static' license re0: configuration check succeeds re1: [edit chassis] 'satellite sd1' warning: statement does not exist commit complete re0: commit completeThe device should now be reverted to its pre-SD state.
Re-onboard a Satellite Device
You can re-onboard an SD to your NGPE topology by following this process:
Activate the satellite. If you previously deleted the
port-extender satelliteconfiguration, then usesetinstead ofactivate.admin@ad# activate service port-extender satellite <satellite-name>
Commit the change.
admin@ad# commit
Synchronize the satellites.
admin@ad# run request jnu satellite synchronize
This will bring the SD back into the topology. Ensure that the
fabric-disablestatement is not in effect. If it is, remove it.admin@ad# delete services port-extender satellite <satellite-name> fabric-disable
Commit the change.
admin@ad# commit
Saving the Configuration
Save NGPE User-Generated Configuration
Follow this process to save only the user-generated configuration. This process should be performed when NGPE is in a maintenancemaintanencemaintenance window since the process requires disabling the NGPE fabric. We don't support loading configurations with NGPE elements into an active NGPE environment since this can have unexpected effects.
Disable the NGPE fabric.
admin@adad1# deactivate services port-extender admin@ad# commit synchronize
Save the configuration.
admin@adad1# show | display set | save /var/tmp/device.conf Wrote 2000 lines of output to '/var/tmp/device.conf'
- Restore the NGPE fabric.
admin@adad1# activate services port-extender admin@ad# commit synchronize
Reload Existing Saved NGPE Configuration
As previously stated, we don't support loading an NGPE configuration onto an active NGPE environment. You may however load a saved NGPE configuration to a non-NGPE device which will act as the AD. The target AD must have either a baseline Junos configuration, or you must zeroize the device prior to following this process. Ensure that all necessary cabling has been completed in advance, and that any intended SDs are also running a base configuration. Please ensure you have console access to the intended AD.
Load the saved configuration.
admin@adad1# load override /location/<filename>
Example: admin@adad1# load override /var/tmp/device.conf ...config loads... admin@adad1# commit synchronize
Once the configuration has been loaded and committed, you'll need to activate the port-extender stanza.
admin@adad1# activate services port-extender admin@adad1# commit synchronize
Enable an SD.
admin@sd1# request jnu role satellite
Synchronize the satellite.
admin@sd1# request jnu satellite sync
Repeat steps 3 and 4 for each SD.