Saturday, June 8, 2013

CCIE DC: Config Sync

Hi Guys


I can't tell you how much trouble config sync seemed to always cause me.. it was like this tech that never really helped and always seemed to have issues, but I am very confident I now have it nipped in the bud.

First of all, it's crucially important that you know: you NEED A VPC LINK for config sync to work, don't try it without a vPC Link between your two switches

Got it? Ok good let's keep going.

Here is the very very simple few steps I take, to get config sync going:


On switch 1:

N5K1# conf t
Enter configuration commands, one per line.  End with CNTL/Z.
N5K1(config)# cfs ipv4 distribute

N5K1(config)# exit
N5K1# config sync

N5K1(config-sync)# switch-profile ?
N5K1(config-sync)# switch-profile 1
N5K1(config-sync-sp)# sync-peers destination 192.168.0.55(Replace 192.168.0.55 with your management peer address)



On Switch 2:

N5K2# conf t
Enter configuration commands, one per line.  End with CNTL/Z.
N5K2(config)# cfs ipv4 distribute

N5K2(config)# exit
N5K2# config sync

N5K2(config-sync)# switch-profile ?
N5K2(config-sync)# switch-profile 1
N5K2(config-sync-sp)# sync-peers destination 192.168.0.56(Replace 192.168.0.56 with your management peer address)


Exit out of that, verify your config:

N5K6# show cfs status
Distribution : Enabled
Distribution over IP : Enabled - mode IPv4
IPv4 multicast address : 239.255.70.83
IPv6 multicast address : ff15::efff:4653
Distribution over Ethernet : Enabled


N5K6# show cfs peers name session-mgr

Scope      : Physical-ip
-------------------------------------------------------------------------
 Switch WWN              IP Address
-------------------------------------------------------------------------
 20:00:00:0d:ec:a2:f6:c0 192.168.0.56                            [Local]
                         N5K6                                   
 20:00:00:0d:ec:a4:31:40 192.168.0.55                          

Total number of entries = 2


Cfs is going...

N5K6# show switch-profile peer

switch-profile  : 1
----------------------------------------------------------
Peer-IP-address            : 192.168.0.55
Peer-sync-status           : In sync
Peer-status                : Commit Success
Peer-error(s)              :



My config sync is fine too...

Now, at this point, you can go either switch, and go into config sync mode, enter your profile, make your changes, commit.. and everyone wins.

N5K6# conf sync
Enter configuration commands, one per line.  End with CNTL/Z.
N5K6(config-sync)# switch-profile 1
Switch-Profile started, Profile ID is 1
N5K6(config-sync-sp)# int eth1/1
N5K6(config-sync-sp-if)# switchport access vlan 10
N5K6(config-sync-sp-if)# int eth1/2
N5K6(config-sync-sp-if)# switchport access vlan 10
N5K6(config-sync-sp-if)# exit
N5K6(config-sync-sp)# commit
Verification successful...
Proceeding to apply configuration. This might take a while depending on amount of configuration in buffer.
Please avoid other configuration changes during this time.
Commit Successful



It is as simple as that guys, just make sure you have your profiles on each of the switches, do that first, make sure that's happy, then start doing your config sync.

Order of operations my friends, order of operations


1 comment: