---
# System prepended metadata

title: DC ドキュメント

---

# DCバックボーンネットワーク ドキュメント (private cloud .. 作りたい..)

# Spine & Leaf ( IP Clos )
Spine = as 65000
Leaf = as 65001

## Spine1 config

```shell!
hostname Spine1
!
interface loopback0
    ip address 10.0.0.1 255.255.255.255
!
int g0/0
    ip add 192.168.10.1 255.255.255.252
    no shut
!
int g0/1
    ip add 192.168.10.4 255.255.255.252
    no shut

!
router bgp 65000
    bgp router-id 
    neighbor 192.168.10.1 remote-as 65002
    neighbor 192.168.10.2 remote-as 65003
    neighbor 192.168.10.1 update-source loopback 0
    neighbor 192.168.10.2 update-source loopback 0
    ebgp-multihop 2
```


## Spine2 config

```shell!
hostname Spine2
!
interface loopback0
    ip address 10.0.0.2 255.255.255.255
!
int g0/0
    ip add 192.168.0.1 255.255.255.252
    no shut
!
int g0/1
    ip add 192.168.0.4 255.255.255.252
    no shut
!
router ospf 1
network 20.1.1.2 0.0.0.0 area 0
network 192.168.0.2 0.0.0.0 area 0
network 192.168.0.4 0.0.0.0 area 0
router bgp 65001
    bgp router-id 20.1.1.2
    neighbor 192.168.20.1 remote-as 65002
    neighbor 192.168.20.2 remote-as 65003
    neighbor 192.168.20.1 update-source loopback 0
    neighbor 192.168.20.2 update-source loopback 0
    ebgp-multihop 2
```

## Leaf1 Config
```shell!
hostname Leaf1
!
interface loopback0
    ip address 10.0.0.3 255.255.255.255
!
int g0/0
    ip address 192.168.10.2 255.255.255.252
    no shut
!
int g0/1
    ip address 192.168,20.3 255.255.255.252
    no shut
!
router bgp 65003
    neighbor 192.168.10.1 remote-as 65001
    neighbor 192.168.20.1 remote-as 65002
    neighbor 192.168.10.1 update-source loopback 0
    neighbor 192.168.20.1 update-source loopback 0
```

## Leaf2 Config
```shell
hostname leaf2
!
interface loopback0
    ip address 10.0.0.4 255.255.255.255
!
int g0/0
    ip address 192.168.20.2 255.255.255.252
    no shut
!
int g0/1
    ip address 192.168,20.3 255.255.255.252
    no shut
!
router bgp 65003
    neighbor 192.168.10.1 remote-as 65001
    neighbor 192.168.20.1 remote-as 65002
    neighbor 192.168.10.1 update-source loopback 0
    neighbor 192.168.20.1 update-source loopback 0
```

### default
```shell
line vty 0 4
password ?_g13fq;fe
login
```

[確認コマンド](/Y1qdvFhuRp-vbAuMIrUGLA)

## Monitoring Software
BMP (https://labs.gree.jp/blog/2014/08/11078/)

## Config Backup Oxidized 

### 最終目標
プライベトークラウド作成 (OpenStack NFV基盤)
プライベートAS 運用


### EtherIP Over IPsec

### ECC IX

```
hostname ECC_IX

ip ufs-cache enable 
bridge irb enable

ip route 10.0.20.0/28 10.0.10.2
ip route 192.168.1.0/31 Tunnel0.0
ip route 1.1.1.1/32 10.0.5.254 
ip route 2.2.2.2/32 10.0.6.254 
ip route 6.6.6.6/32 192.168.1.2


router bgp 65005
    neighbor 1.1.1.1 remote-as 65001
    neighbor 1.1.1.1 update-source loopback0.0
    neighbor 1.1.1.1 ebgp-multihop 2
    neighbor 2.2.2.2 remote-as 65002
    neighbor 2.2.2.2 update-source loopback0.0
    neighbor 2.2.2.2 ebgp-multihop 2
    neighbor 6.6.6.6 remote-as 65006
    neighbor 6.6.6.6 update-source loopback0.0
    neighbor 6.6.6.6 ebgp-multihop 2
    
interface fa0/0.0
    ip address 10.0.10.1/28
    no shutdown 
    
¥interface FastEthernet1/0.1
    ip address 10.0.5.1/24
    no shutdown 

interface FastEthernet1/0.2
    ip address 10.0.6.1/24
    no shutdown 

interface BVI0 
    ip add 192.168.1.1/30
    no shutdown 
    bridge-group 1
    exit


interface Tunnel0.0
  tunnel mode ether-ip ip
  tunnel destination 10.0.10.2
  tunnel source 10.0.10.1
  bridge-group 1
  no ip address
  no shutdown
```

#### 確認用
![image](https://hackmd.io/_uploads/B1oI06nF6.png)



### Internet

```
hostname Internet

interface  gigabitEthernet 0/0
    ip address 10.0.10.3 255.255.255.240
    no shutdown 

interface  gigabitEthernet 0/1
    ip address 10.0.20.2 255.255.255.240
    no shutdown 
```

### noc
```
hostname NOC

ip route 10.0.10.0/28 10.0.20.2
ip route 192.168.1.0/31 Tunnel0.0
ip route 5.5.5.5/32 192.168.1.1

router bgp 65006
    neighbor 5.5.5.5 remote-as 65005
    neighbor 5.5.5.5 update-source Loopback0.0
    neighbor 5.5.5.5 ebgp-multihop 2
    
interface Loopback0.0
ip add 6.6.6.6/32

interface FastEthernet0/0  
    ip address 10.0.20.1/28 
    no shutdown
    

interface BVI0 
    ip add 192.168.1.2/30
    no shutdown 
    bridge-group 1
    exit

    
interface Tunnel0.0
  tunnel mode ether-ip ip
  tunnel destination 10.0.10.1
  tunnel source 10.0.20.1
  bridge-group 1
  no ip address
  no shutdown
  ```
  
  
  ![image](https://hackmd.io/_uploads/BJVFhfTt6.png)

### unsupported capability
![image](https://hackmd.io/_uploads/BJ4uPApFa.png)

``` 
*Jan 23 09:45:21.678: %BGP-3-NOTIFICATION: received from neighbor 5.5.5.5 passive 2/7 (unsupported/disjoint capability) 0 bytes 
*Jan 23 09:45:21.678: %BGP-5-NBR_RESET: Neighbor 5.5.5.5 passive reset (BGP Notification received)
*Jan 23 09:45:21.678: %BGP-5-ADJCHANGE: neighbor 5.5.5.5 passive Down BGP Notification received
*Jan 23 09:45:21.678: %BGP_SESSION-5-ADJCHANGE: neighbor 5.5.5.5 IPv4 Unicast topology base removed from session  BGP Notification received 
```

####  Janog 資料

https://www.janog.gr.jp/meeting/janog25/doc/janog25-as4-katasumi.pdf