Hi,
my network :
I've configured ICCP/ICL with lo0, my ICCP is established.
I've configurer MCLAG between all my access switches, it's seem to work correctly.
SD-SRV-C012-1 config:
root@SD-SRV-C012-1> show configuration
## Last commit: 2017-07-03 15:19:07 CEST by root
version 15.1X53-D64.3;
system {
host-name SD-SRV-C012-1;
time-zone Europe/Paris;
root-authentication {
encrypted-password "$1$tDdczkov$diw/GBNfTk87kkBMzmQnD1"; ## SECRET-DATA
ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnRnwLYrAJwJ9vsvObjiTFeOH2VL7bPox5IztDY6HrrZ4Z6OF4YVAPvEuFV4hp9tdDI4NWZFH8npBbIHZ1BUnUXOHwXyxwg+cRG14rabwnRD/f7gizhSRTBlWv2YinQlLsrCccN9b39WAU7jUY8nhK6T+hNzh8E7Nm8PBACr/JpgmiCtd3M6uFk0Zk/HYemdYc4hwepTgAI6j5IkgIgL3V75TO1fdrYCGJSL9QLZXPCfQOb1GSALAk+xJ4zhlOCD8aJi/wa0PbLnwN76d+HYYtS6lMwp/EdRNT9e99g4zZQM0hYRkUUOThnt1dv/yxCe9dDzTupQtRlzftTfcty+s1 root@centos-rpi3"; ## SECRET-DATA
ssh-rsa "ssh-rsa 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 root@tlresinf04.dsna-dti.aviation"; ## SECRET-DATA
}
login {
message "\n\t 8888888b. .d8888b. d8888 .d8888b. 8888888b. 88888888888 8888888 .d8888b. 8888888 888888b. \n\t 888 Y88b d88P Y88b d88888 d88P Y88b 888 Y88b 888 888 d88P Y88b 888 888 88b \n\t 888 888 888 888 d88P888 888 888 888 888 888 888 Y88b. 888 888 .88P \n\t 888 888 888 d88P 888 888 888 888 888 888 Y888b. 888 8888888K. \n\t 888 888 888 88888 d88P 888 888 888 888 888 888 Y88b. 888 888 Y88b \n\t 888 888 888 888 d88P 888 888 888 888 888 888 888 888 888 888 888 \n\t 888 .d88P Y88b d88P d8888888888 Y88b d88P 888 .d88P 888 888 Y88b d88P 888 888 d88P \n\t 8888888P Y8888P88 d88P 888 Y8888P 8888888P 888 8888888 Y8888P 8888888 8888888P \n\n\n\t Cet equipement est la propriete de la DGAC/DSNA/DTI.\n\t Vous ne devez en aucun cas vous y connecter sans permission!\n\t The device is the property of DGAC/DSNA/DTI \n\t Do not login without express permission!\n\n\n;";
user ansible {
uid 2002;
class super-user;
authentication {
ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnRnwLYrAJwJ9vsvObjiTFeOH2VL7bPox5IztDY6HrrZ4Z6OF4YVAPvEuFV4hp9tdDI4NWZFH8npBbIHZ1BUnUXOHwXyxwg+cRG14rabwnRD/f7gizhSRTBlWv2YinQlLsrCccN9b39WAU7jUY8nhK6T+hNzh8E7Nm8PBACr/JpgmiCtd3M6uFk0Zk/HYemdYc4hwepTgAI6j5IkgIgL3V75TO1fdrYCGJSL9QLZXPCfQOb1GSALAk+xJ4zhlOCD8aJi/wa0PbLnwN76d+HYYtS6lMwp/EdRNT9e99g4zZQM0hYRkUUOThnt1dv/yxCe9dDzTupQtRlzftTfcty+s1 root@centos-rpi3"; ## SECRET-DATA
ssh-rsa "ssh-rsa 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 root@tlresinf04.dsna-dti.aviation"; ## SECRET-DATA
}
}
}
services {
ssh {
protocol-version v2;
max-sessions-per-connection 32;
}
netconf {
ssh;
}
}
ntp {
server 192.168.252.102;
}
}
chassis {
aggregated-devices {
ethernet {
device-count 100;
}
}
fpc 0 {
pic 0 {
port 25 {
speed 100g;
}
port 31 {
speed 100g;
}
}
}
}
interfaces {
et-0/0/0 {
ether-options {
802.3ad ae71;
}
}
et-0/0/1 {
ether-options {
802.3ad ae79;
}
}
et-0/0/2 {
ether-options {
802.3ad ae71;
}
}
et-0/0/3 {
ether-options {
802.3ad ae80;
}
}
et-0/0/4 {
ether-options {
802.3ad ae71;
}
}
et-0/0/5 {
ether-options {
802.3ad ae81;
}
}
et-0/0/6 {
ether-options {
802.3ad ae72;
}
}
et-0/0/7 {
ether-options {
802.3ad ae82;
}
}
et-0/0/8 {
ether-options {
802.3ad ae72;
}
}
et-0/0/10 {
ether-options {
802.3ad ae72;
}
}
et-0/0/12 {
ether-options {
802.3ad ae73;
}
}
et-0/0/14 {
ether-options {
802.3ad ae74;
}
}
et-0/0/16 {
ether-options {
802.3ad ae75;
}
}
et-0/0/18 {
ether-options {
802.3ad ae76;
}
}
et-0/0/20 {
ether-options {
802.3ad ae77;
}
}
et-0/0/22 {
ether-options {
802.3ad ae78;
}
}
et-0/0/25 {
ether-options {
802.3ad ae0;
}
}
et-0/0/31 {
hold-time up 100 down 4000;
ether-options {
802.3ad ae1;
}
}
ae0 {
description "ICCP Layer 3 Link with 1 member,et-0/0/25";
vlan-tagging;
aggregated-ether-options {
minimum-links 1;
link-speed 100g;
lacp {
active;
periodic fast;
}
}
unit 0 {
vlan-id 4009;
family inet {
address 10.0.10.9/30;
}
}
}
ae1 {
description "ICL Layer 2 Link witch 1 member,et-0/0/31";
vlan-tagging;
aggregated-ether-options {
minimum-links 1;
link-speed 100g;
lacp {
active;
periodic fast;
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members all;
}
}
}
}
ae71 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/0,et-0/0/2,et-0/0/4) and SA-SRV-C012-1 (et-0/0/48,et-0/0/49,et-0/0/50,et-0/0/51,et-0/0/52,et-0/0/53)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:71:00:00:01;
admin-key 71;
}
mc-ae {
mc-ae-id 71;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae72 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/6,et-0/0/8,et-0/0/10) and SA-SRV-C012-2 (et-0/0/48,et-0/0/49,et-0/0/50,et-0/0/51,et-0/0/52,et-0/0/53)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:72:00:00:01;
admin-key 72;
}
mc-ae {
mc-ae-id 72;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae73 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/12) and SA-SRV-C012-3 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:73:00:00:01;
admin-key 73;
}
mc-ae {
mc-ae-id 73;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae74 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/14) and SA-SRV-C012-4 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:74:00:00:01;
admin-key 74;
}
mc-ae {
mc-ae-id 74;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae75 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/16) and SA-SRV-C012-5 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:75:00:00:01;
admin-key 75;
}
mc-ae {
mc-ae-id 75;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae76 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/18) and SA-SRV-C012-6 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:76:00:00:01;
admin-key 76;
}
mc-ae {
mc-ae-id 76;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae77 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/20) and SA-SRV-C012-7 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:77:00:00:01;
admin-key 77;
}
mc-ae {
mc-ae-id 77;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae78 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/22) and SA-SRV-C012-8 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:78:00:00:01;
admin-key 78;
}
mc-ae {
mc-ae-id 78;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae79 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/1) and SA-SRV-C012-9 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:79:00:00:01;
admin-key 79;
}
mc-ae {
mc-ae-id 79;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae80 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/3) and SA-SRV-C012-10 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:80:00:00:01;
admin-key 80;
}
mc-ae {
mc-ae-id 80;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae81 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/5) and SA-SRV-C012-11 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:81:00:00:01;
admin-key 81;
}
mc-ae {
mc-ae-id 81;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae82 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/7) and SA-SRV-C012-12 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:82:00:00:01;
admin-key 82;
}
mc-ae {
mc-ae-id 82;
redundancy-group 1;
chassis-id 0;
mode active-active;
status-control active;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
irb {
unit 878 {
description "Admin Interface";
family inet {
address 192.168.252.91/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 10.0.11.91/32;
}
}
}
}
multi-chassis {
multi-chassis-protection 10.0.11.92 {
interface ae1;
}
}
routing-options {
static {
route 10.0.11.92/32 next-hop 10.0.10.10;
}
}
protocols {
iccp {
local-ip-addr 10.0.11.91;
peer 10.0.11.92 {
redundancy-group-id-list 1;
liveness-detection {
minimum-interval 1500;
multiplier 2;
}
}
}
}
switch-options {
service-id 90;
}
vlans {
ADMIN_LAGIFLE {
vlan-id 878;
l3-interface irb.878;
}
}
SD-SRV-C012-2 config:
root@SD-SRV-C012-2> show configuration
## Last commit: 2017-07-03 15:18:47 CEST by root
version 15.1X53-D64.3;
system {
host-name SD-SRV-C012-2;
time-zone Europe/Paris;
root-authentication {
encrypted-password "$1$tDdczkov$diw/GBNfTk87kkBMzmQnD1"; ## SECRET-DATA
ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnRnwLYrAJwJ9vsvObjiTFeOH2VL7bPox5IztDY6HrrZ4Z6OF4YVAPvEuFV4hp9tdDI4NWZFH8npBbIHZ1BUnUXOHwXyxwg+cRG14rabwnRD/f7gizhSRTBlWv2YinQlLsrCccN9b39WAU7jUY8nhK6T+hNzh8E7Nm8PBACr/JpgmiCtd3M6uFk0Zk/HYemdYc4hwepTgAI6j5IkgIgL3V75TO1fdrYCGJSL9QLZXPCfQOb1GSALAk+xJ4zhlOCD8aJi/wa0PbLnwN76d+HYYtS6lMwp/EdRNT9e99g4zZQM0hYRkUUOThnt1dv/yxCe9dDzTupQtRlzftTfcty+s1 root@centos-rpi3"; ## SECRET-DATA
ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC4bYbig4w4ERRird0urq/Qw44qZ+CJgoxB2AR666hGRNuuYi/t4pbSrxaDJA4FlkNmefss90G67tf1qiAvan1UfVkutDXoXRE/ordLq2H7qEzJ+LpN6tw+gc2nOcRO/FOV5FJ/zHZZHBH7PJ5DSog40M9LkyxIdEawMm5ShzScMC9r0hCBLl3p0FtpqNmrg2znaRy1EuoQYwx17QVhoRFMnCk9qzwp7yCY1aqOR7SEpGrHYLBjTG+x62eOo8n7U8t8ectWY7UG0Rpa98Tuyf/xIcBhMr0k1YpwKOGkwjCatHtDSgrzVHoQq9c2apJXqafm3yW6MJGu4N76DyF3xjr/hXkgIasULjd4dYbNObazpq5JM1Y6spoQVgGcqfuel14Mt3vAYTpweroqqJHcdwYC07kwBN5r0dSQIE1MYbMHXTMoTrmXNqyz92lfwllQmPhmRE6Lq4Y2uIP+xO0q1OfORyrcylpz3KURbDzjvggYegcKdJhaHVO/OYC1+B7foEDY5WvGqa5N3+aq/6lYOi3Ac/WpfBCWsYDM5iJ5juprv6u0oT2Yp3gh9Z5REf6Y2dt5dw5vM8KcQw0MI6ovvKHlWWg/dEADhGR/Pe49OS15qbEzPGO/8Dyo4mQ/HQ+wzkderMI8eTQpD2oUuZ9ogllxJm7sckyPEGXT1TblqJCvSQ== root@tlresinf04.dsna-dti.aviation"; ## SECRET-DATA
}
login {
message "\n\t 8888888b. .d8888b. d8888 .d8888b. 8888888b. 88888888888 8888888 .d8888b. 8888888 888888b. \n\t 888 Y88b d88P Y88b d88888 d88P Y88b 888 Y88b 888 888 d88P Y88b 888 888 88b \n\t 888 888 888 888 d88P888 888 888 888 888 888 888 Y88b. 888 888 .88P \n\t 888 888 888 d88P 888 888 888 888 888 888 Y888b. 888 8888888K. \n\t 888 888 888 88888 d88P 888 888 888 888 888 888 Y88b. 888 888 Y88b \n\t 888 888 888 888 d88P 888 888 888 888 888 888 888 888 888 888 888 \n\t 888 .d88P Y88b d88P d8888888888 Y88b d88P 888 .d88P 888 888 Y88b d88P 888 888 d88P \n\t 8888888P Y8888P88 d88P 888 Y8888P 8888888P 888 8888888 Y8888P 8888888 8888888P \n\n\n\t Cet equipement est la propriete de la DGAC/DSNA/DTI.\n\t Vous ne devez en aucun cas vous y connecter sans permission!\n\t The device is the property of DGAC/DSNA/DTI \n\t Do not login without express permission!\n\n\n;";
user ansible {
uid 2002;
class super-user;
authentication {
ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnRnwLYrAJwJ9vsvObjiTFeOH2VL7bPox5IztDY6HrrZ4Z6OF4YVAPvEuFV4hp9tdDI4NWZFH8npBbIHZ1BUnUXOHwXyxwg+cRG14rabwnRD/f7gizhSRTBlWv2YinQlLsrCccN9b39WAU7jUY8nhK6T+hNzh8E7Nm8PBACr/JpgmiCtd3M6uFk0Zk/HYemdYc4hwepTgAI6j5IkgIgL3V75TO1fdrYCGJSL9QLZXPCfQOb1GSALAk+xJ4zhlOCD8aJi/wa0PbLnwN76d+HYYtS6lMwp/EdRNT9e99g4zZQM0hYRkUUOThnt1dv/yxCe9dDzTupQtRlzftTfcty+s1 root@centos-rpi3"; ## SECRET-DATA
ssh-rsa "ssh-rsa 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 root@tlresinf04.dsna-dti.aviation"; ## SECRET-DATA
}
}
}
services {
ssh {
protocol-version v2;
max-sessions-per-connection 32;
}
netconf {
ssh;
}
}
ntp {
server 192.168.252.102;
}
}
chassis {
aggregated-devices {
ethernet {
device-count 100;
}
}
fpc 0 {
pic 0 {
port 25 {
speed 100g;
}
port 31 {
speed 100g;
}
}
}
}
interfaces {
et-0/0/0 {
ether-options {
802.3ad ae71;
}
}
et-0/0/1 {
ether-options {
802.3ad ae79;
}
}
et-0/0/2 {
ether-options {
802.3ad ae71;
}
}
et-0/0/3 {
ether-options {
802.3ad ae80;
}
}
et-0/0/4 {
ether-options {
802.3ad ae71;
}
}
et-0/0/5 {
ether-options {
802.3ad ae81;
}
}
et-0/0/6 {
ether-options {
802.3ad ae72;
}
}
et-0/0/7 {
ether-options {
802.3ad ae82;
}
}
et-0/0/8 {
ether-options {
802.3ad ae72;
}
}
et-0/0/10 {
ether-options {
802.3ad ae72;
}
}
et-0/0/12 {
ether-options {
802.3ad ae73;
}
}
et-0/0/14 {
ether-options {
802.3ad ae74;
}
}
et-0/0/16 {
ether-options {
802.3ad ae75;
}
}
et-0/0/18 {
ether-options {
802.3ad ae76;
}
}
et-0/0/20 {
ether-options {
802.3ad ae77;
}
}
et-0/0/22 {
ether-options {
802.3ad ae78;
}
}
et-0/0/25 {
ether-options {
802.3ad ae0;
}
}
et-0/0/31 {
hold-time up 100 down 4000;
ether-options {
802.3ad ae1;
}
}
ae0 {
description "ICCP Layer 3 Link with 1 member,et-0/0/25";
vlan-tagging;
aggregated-ether-options {
minimum-links 1;
link-speed 100g;
lacp {
active;
periodic fast;
}
}
unit 0 {
vlan-id 4009;
family inet {
address 10.0.10.10/30;
}
}
}
ae1 {
description "ICL Layer 2 Link witch 1 member,et-0/0/31";
vlan-tagging;
aggregated-ether-options {
minimum-links 1;
link-speed 100g;
lacp {
active;
periodic fast;
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members all;
}
}
}
}
ae71 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/0,et-0/0/2,et-0/0/4) and SA-SRV-C012-1 (et-0/0/48,et-0/0/49,et-0/0/50,et-0/0/51,et-0/0/52,et-0/0/53)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:71:00:00:01;
admin-key 71;
}
mc-ae {
mc-ae-id 71;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae72 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/6,et-0/0/8,et-0/0/10) and SA-SRV-C012-2 (et-0/0/48,et-0/0/49,et-0/0/50,et-0/0/51,et-0/0/52,et-0/0/53)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:72:00:00:01;
admin-key 72;
}
mc-ae {
mc-ae-id 72;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae73 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/12) and SA-SRV-C012-3 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:73:00:00:01;
admin-key 73;
}
mc-ae {
mc-ae-id 73;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae74 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/14) and SA-SRV-C012-4 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:74:00:00:01;
admin-key 74;
}
mc-ae {
mc-ae-id 74;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae75 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/16) and SA-SRV-C012-5 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:75:00:00:01;
admin-key 75;
}
mc-ae {
mc-ae-id 75;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae76 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/18) and SA-SRV-C012-6 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:76:00:00:01;
admin-key 76;
}
mc-ae {
mc-ae-id 76;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae77 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/20) and SA-SRV-C012-7 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:77:00:00:01;
admin-key 77;
}
mc-ae {
mc-ae-id 77;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae78 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/22) and SA-SRV-C012-8 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:78:00:00:01;
admin-key 78;
}
mc-ae {
mc-ae-id 78;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae79 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/1) and SA-SRV-C012-9 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:79:00:00:01;
admin-key 79;
}
mc-ae {
mc-ae-id 79;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae80 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/3) and SA-SRV-C012-10 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:80:00:00:01;
admin-key 80;
}
mc-ae {
mc-ae-id 80;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae81 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/5) and SA-SRV-C012-11 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:81:00:00:01;
admin-key 81;
}
mc-ae {
mc-ae-id 81;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
ae82 {
description "Layer 2 MCLAG between SD-SRV-C012 (et-0/0/7) and SA-SRV-C012-12 (et-0/0/48,et-0/0/49)";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
system-priority 100;
system-id 00:ae:82:00:00:01;
admin-key 82;
}
mc-ae {
mc-ae-id 82;
redundancy-group 1;
chassis-id 1;
mode active-active;
status-control standby;
init-delay-time 520;
events {
iccp-peer-down {
force-icl-down;
prefer-status-control-active;
}
}
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
irb {
unit 878 {
description "Admin Interface";
family inet {
address 192.168.252.92/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 10.0.11.92/32;
}
}
}
}
multi-chassis {
multi-chassis-protection 10.0.11.91 {
interface ae1;
}
}
routing-options {
static {
route 10.0.11.91/32 next-hop 10.0.10.9;
}
}
protocols {
iccp {
local-ip-addr 10.0.11.92;
peer 10.0.11.91 {
redundancy-group-id-list 1;
liveness-detection {
minimum-interval 1500;
multiplier 2;
}
}
}
}
switch-options {
service-id 90;
}
vlans {
ADMIN_LAGIFLE {
vlan-id 878;
l3-interface irb.878;
}
}SA-SRV-C012-1 config:
root@SA-SRV-C012-1> show configuration
## Last commit: 2017-07-03 14:41:31 CEST by root
## Image name: jinstall-qfx-5-14.1X53-D44.3-domestic-signed.tgz
version 14.1X53-D44.3;
system {
host-name SA-SRV-C012-1;
time-zone Europe/Paris;
root-authentication {
encrypted-password " "; ## SECRET-DATA
}
login {
user ansible {
uid 2002;
class super-user;
authentication {
}
}
}
services {
ssh {
protocol-version v2;
max-sessions-per-connection 32;
}
netconf {
ssh;
}
}
ntp {
server 192.168.252.102;
}
}
chassis {
aggregated-devices {
ethernet {
device-count 100;
}
}
}
interfaces {
xe-0/0/45 {
unit 0 {
family ethernet-switching {
interface-mode access;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
xe-0/0/46 {
unit 0 {
family ethernet-switching {
interface-mode access;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
xe-0/0/47 {
unit 0 {
family ethernet-switching {
interface-mode access;
vlan {
members ADMIN_LAGIFLE;
}
}
}
}
et-0/0/48 {
ether-options {
802.3ad ae71;
}
}
et-0/0/49 {
ether-options {
802.3ad ae71;
}
}
et-0/0/50 {
ether-options {
802.3ad ae71;
}
}
et-0/0/51 {
ether-options {
802.3ad ae71;
}
}
et-0/0/52 {
ether-options {
802.3ad ae71;
}
}
et-0/0/53 {
ether-options {
802.3ad ae71;
}
}
ae71 {
description "MCLAG towards SD-SRV-C012-1 and SD-SRV-C012-2";
aggregated-ether-options {
minimum-links 1;
link-speed 40g;
lacp {
active;
periodic fast;
}
}
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members all;
}
}
}
}
irb {
unit 878 {
description "Admin Interface";
family inet {
address 192.168.252.71/24;
}
}
}
}
vlans {
ADMIN_LAGIFLE {
vlan-id 878;
l3-interface irb.878;
}
}
SA = ACCESS SWITCH
SD = DISTRIBUTION SWITCH
On SD, ae0 is my ICCP, ae1 is my ICL, ae71 > 82 are my mcae
My SD are QFX10002
My SA are QFX5100
My computer is connected directly to SA-SRV-C012-6.
When I'm trying to SSH SD-SRV-C012-1, sometime it works, sometime don't works.
Same problem with SD-SRV-C012-2
My first question is why this random behaviour?
And need to implement RSTP on my network, what's the best practices for this in my configuration ?
Thank you for your help