A10 4.1.4-GR1-P5 Avcs
A10 4.1.4-GR1-P5 Avcs
4-GR1-P5
Configuring ACOS Virtual Chassis
Systems
for A10 Thunder® Series
24 August 2020
© 2020 A10 NETWORKS, INC. CONFIDENTIAL AND PROPRIETARY- ALL RIGHTS RESERVED
Information in this document is subject to change without notice.
PATENT PROTECTION
A10 Networks products are protected by patents in the U.S. and elsewhere. The following website is provided to satisfy the
virtual patent marking provisions of various jurisdictions including the virtual patent marking provisions of the America
Invents Act. A10 Networks' products, including all Thunder Series products, are protected by one or more of U.S. patents and
patents pending listed at:
https://www.a10networks.com/company/legal-notices/a10-virtual-patent-marking
TRADEMARKS
A10 Networks trademarks are listed at:
https://www.a10networks.com/company/legal-notices/a10-trademarks
CONFIDENTIALITY
This document contains confidential materials proprietary to A10 Networks, Inc. This document and information and ideas
herein may not be disclosed, copied, reproduced or distributed to anyone outside A10 Networks, Inc. without prior written
consent of A10 Networks, Inc.
Anyone who uses the Software does so only in compliance with the terms of the End User License Agreement (EULA), pro-
vided later in this document or available separately. Customer shall not:
1. Reverse engineer, reverse compile, reverse de-assemble, or otherwise translate the Software by any means.
2. Sub-license, rent, or lease the Software.
DISCLAIMER
This document does not create any express or implied warranty about A10 Networks or about its products or services,
including but not limited to fitness for a particular use and non-infringement. A10 Networks has made reasonable efforts to
verify that the information contained herein is accurate, but A10 Networks assumes no responsibility for its use. All informa-
tion is provided "as-is." The product specifications and features described in this publication are based on the latest informa-
tion available; however, specifications are subject to change without notice, and certain features may not be available upon
initial product release. Contact A10 Networks for current information regarding its products or services. A10 Networks’ prod-
ucts and services are subject to A10 Networks’ standard terms and conditions.
ENVIRONMENTAL CONSIDERATIONS
Some electronic components may possibly contain dangerous substances. For information on specific component types,
please contact the manufacturer of that component. Always consult local authorities for regulations regarding proper dis-
posal of electronic components in your area.
FURTHER INFORMATION
For additional information about A10 products, terms and conditions of delivery, and pricing, contact your nearest A10 Net-
works location, which can be found by visiting www.a10networks.com.
Table of Contents
3
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
Contents
4
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
Contents
5
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
Contents
6
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
OVERVIEW OF VCS
Note: VCS and aVCS, an acronym for ACOS Virtual Chassis System, are used interchangeably.
• VCS Prerequisites
• VCS Overview
• vMaster Election
VCS Prerequisites
VCS has the following prerequisite requirements:
• Layer 2 Connectivity
Layer 2 Connectivity
VCS uses IP multicast. All ACOS devices in an VCS virtual chassis must be in the same Layer 2
broadcast domain.
VCS can operate across different geographic regions provided latency is low. VRRP-A session
synchronization will be the gating factor in terms of latency.
7
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Overview
NOTE: When using VCS with VRRP-A high availability, the VCS manage-
ment address (virtual chassis’ floating IP address) should not be
the same as a VRRP-A floating IP address of the VRID.
The VCS-capable image must be installed in the same image area on each device. For example,
install the image in the primary image area of the hard disk or solid state drive (SSD) on each
device.
VCS Overview
ACOS Virtual Chassis System (VCS) enables you to manage a cluster of ACOS devices like a
single, virtual chassis. One ACOS device in the virtual chassis is the virtual master (vMaster). The
other ACOS devices are virtual blades (vBlades) within the virtual chassis, and are managed by
the vMaster. As a controller for the vBlades, the vMaster provides centralized storage of the
entire ACOS device configuration. Any configuration changes from the vMaster are
automatically propagated to the vBlades.
VCS, as a management tool, provides high availability functionality on the ACOS device with the
help of VRRP-A across multiple ACOS devices.
Depending on the ACOS series model, with the help of VRRP-A, VCS can support a maximum 7
additional blades. VCS requires that all devices in the same virtual switch have the same number
of CPUs and are the same ACOS device model.
8
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Overview
VCS elects a single device within the virtual chassis as the vMaster for the chassis. The vMaster
provides a single point of control for all devices in the virtual chassis, as shown in Figure 1.
In addition to individual device management and VCS configurations, the vMaster can also take
care of the following operations on vBlades:
• Synchronize configurations
• Synchronize certificates
• Synchronize keys
9
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
vMaster Election
The virtual chassis has a floating IP address. The virtual chassis’ floating IP address is the
management address for the chassis. To manage a virtual chassis, establish a management
connection (for example, CLI or GUI) to the floating IP address.
When you connect to the virtual chassis’ management IP address, the connection goes to the
vMaster. You can make configuration changes only on the vMaster. The vMaster automatically
sends the changes to the vBlades.
If necessary, you can change the context of the management session to a specific vBlade. To
change the management context to the vBlade, use the vcs admin-session-connect command.
The management session will change from the vMaster to the specified vBlade.
When you make a configuration change on the vMaster, the change is sent to the running-
config on each vBlade.
For more information, see “VCS Configuration Management and Synchronization” on page 19.
The vMaster also ensures that each device in the virtual chassis is running the same software
version.
For more information, see “VCS Software Image Synchronization” on page 25.
vMaster Election
This section contains information about vMaster election in a virtual chassis and the factors that
help determine which device becomes the vMaster.
10
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
vMaster Election
The devices in a virtual chassis use a vMaster election process to elect the vMaster for the
virtual chassis.
To understand when a vMaster will take over as the Active device, it is necessary to understand
different configuration scenarios that impact vMaster selection for VCS, for VRRP-A, and for
VCS with VRRP-A:
To avoid having to configure each individual ACOS device separately, it is recommended that
you configure only one ACOS device that will serve as the vMaster then have the vMaster
automatically configure the remaining ACOS devices in the virtual chassis.
11
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
vMaster Election
weight will be the Active. If the weight of the devices are equal, the ACOS device with the higher
priority will become the Active ACOS device. If the weight and the priority of the devices are
equal, the ACOS device will the lowest VRRP-A device ID will be the Active ACOS device.
As a ACOS device user, configure VRRP-A using VRRP-A failover templates and VRRP-A
tracking options to adjust the weight (using failover templates) or priority (using global tracking
options) of an ACOS device and elect an Active device.
In summary, VCS has its own configured priority and dynamic priority for electing the vMaster
not for electing the Active or Standby device. Use the show vcs statistics command to display
the configured and dynamic priority.
VRRP-A has its own weight and priority algorithm to determine which ACOS device is the Active
or the Standby device, however, it does not elect the vMaster. Use the show vrrp-a command to
display the weight and priority for the devices running VRRP-A. For details on how a failover
occurs based on weight or priority using a template, refer to “Event Tracking for Weight or
Priority” in Configuring VRRP-A High Availability. You can force a device to serve as a vMaster
without dynamic election by temporarily assigning it a higher priority.
For initial virtual chassis deployment, the vMaster is elected based on one of the following
parameters:
• Priority – The device with the highest configured VCS priority is elected to be the vMaster.
If you boot one of the devices first and allow it to become the vMaster, the device remains
the vMaster when the other devices join the virtual chassis, even if the configured priority
is higher on another device. This is due to the dynamic priority value assigned by VCS.
For more information, see “vMaster Election Using Dynamic Priority” on page 15.
• Device ID – If all devices have the same configured priority, the device with the lowest
VCS device ID is elected to be the vMaster
12
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
vMaster Election
For more information, see “vMaster Election for Initial Deployment - Same Priority and Boot
Time” on page 14 and “vMaster Election for Initial Deployment - Different Priorities, Same
Boot Time” on page 15.
13
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
vMaster Election
vMaster Election for Initial Deployment - Same Priority and Boot Time
Figure 2 illustrates vMaster selection in a virtual chassis where all devices have the same priority
and are booted up at the same time. In this situation, the device with the lowest device ID
(Device 1) is elected as the vMaster.
FIGURE 2 : vMaster Election in Initial Deployment - Same Priority Value on each Device
14
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
vMaster Election
vMaster Election for Initial Deployment - Different Priorities, Same Boot Time
Figure 3 illustrates vMaster selection in a virtual chassis where each device has a different
priority, and all devices are booted up at the same time. In this situation, the device with the
highest priority (Device 4) is elected as the vMaster.
The configurable VCS priority is a static value in each device’s configuration. After a virtual
chassis becomes active, another priority value, the dynamic priority, becomes the most
important parameter when electing the vMaster. The device with the highest dynamic priority
always becomes the vMaster.
The dynamic priority adds stability to the virtual chassis, by consistently using the same device
as vMaster whenever possible. Once a device becomes vMaster, its dynamic priority ensures
that it will remain the vMaster, even if another device has a higher configured priority. For
example, if the vMaster becomes unavailable and a vBlade transitions to vMaster, the new
vMaster remains in control even if the previous vMaster rejoins the virtual chassis.
15
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
vMaster Election
Figure 4 shows an example of how dynamic priority works. Device 3 was booted first, and even
though other devices have higher priority values, dynamic priority keeps Device 3 as the
vMaster.
Dynamic priority is not configurable. However, you can force a vBlade to become the vMaster.
(See “Forced vMaster Takeover” on page 19.)
16
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
vMaster Election
At regular intervals (the heartbeat time interval), the vMaster sends heartbeat messages to each
of the vBlades, to inform them that the vMaster is still up, as shown in Figure 5.
If a vBlade does not receive a heartbeat message within a specified amount of time (heartbeat
dead interval), the vBlade changes its state from vBlade to vMaster-candidate, and engages in
the vMaster election process with the other devices that are still up.
The default heartbeat time is 3 seconds. The default heartbeat dead interval is 10 seconds. Both
parameters are configurable.
17
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
vMaster Election
If one or more vBlades lose contact with the vMaster, the vMaster remains in control for the
vBlades that can still receive the vMaster’s heartbeat messages. However, the other vBlades
use the vMaster election process to elect a new vMaster. This results in two separate virtual
chassis (a “split chassis”), as shown in Figure 6.
After the links among the disconnected devices are restored, the devices again use the vMaster
election process to elect a vMaster. Generally, the vMaster that was in effect before the virtual
chassis divided continues to be the vMaster after the virtual chassis is rejoined, based on the
device’s dynamic priority value. (See “vMaster Election Using Dynamic Priority” on page 15.)
18
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Configuration Management and Synchronization
You can force a vBlade to take over as vMaster, without changing the vMaster-election priority
values configured on the devices. For example, you can force a vBlade to take over the vMaster
role, without changing the VCS profiles of any of the devices.
19
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Configuration Management and Synchronization
When you make a configuration change on the vMaster, the change is simultaneously
propagated to the running configuration on each vBlade. For example (Figure 8), if you create a
new SLB server “RS1” on the vMaster, the vMaster sends the server to the running configuration
on each of the vBlades.
When the configuration on the vMaster is saved, the vMaster writes the contents of its running
configuration to its startup configuration and performs the same action on each vBlade in the
virtual chassis.
Once the virtual chassis is fully operational, all devices in the virtual chassis have exactly the
same set of configuration profiles. This includes the startup configuration and any custom
configuration profiles.
20
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Configuration Management and Synchronization
All configuration changes are synchronized, even changes to device-specific parameters such
as hostnames and IP addresses. VCS configuration synchronization ensures that each device in
the virtual chassis has a complete set of configuration information for itself and for each of the
other devices. For example, configuration synchronization ensures that each device has the
complete VCS configuration for the virtual chassis (Figure 9).
In this example, the device-specific portions of the configuration are shown in enlarged text
bold type for each device.
NOTE: For brevity, some commands are omitted from the illustration. For
example, in a working configuration, the vcs enable command nor-
mally would appear in the configuration for each device, under the
vrrp-a commands, and the enable command would appear among
the VCS commands for each device.
21
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Configuration Management and Synchronization
Common parameters, such as SLB parameters, are shared by all devices in the virtual chassis
and do not have a device ID (Figure 10).
Interface parameters are unique to each device and include the VCS device number (Figure 11).
22
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Configuration Management and Synchronization
This example shows the configuration for each device’s management IP address and an
Ethernet interface. VLANs, Virtual Ethernet (VE) interfaces, and trunks also include the VCS
device ID.
Optionally, you can manually synchronize the VRRP-A configuration to specific devices. For
more information on manual synchronization using VRRP-A, refer to “Manually Synchronizing
the Configuration” in Configuring VRRP-A High Availability.
23
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Software Image Synchronization
When a vBlade upgrades in this way, the new image replaces the older image, in the same image
area. For example, if the vBlade boots the older image from the primary image area on the hard
drive, the upgrade image downloaded from the vMaster replaces the image in the primary image
area.
NOTE: When the web GUI image is upgraded on the vMaster, it gets synchronized to
all vBlades.
24
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
Customizing the Virtual Chassis
If you need to set or change the system time on a vBlade in a virtual chassis, make sure to make
the change on the vMaster, not directly on the vBlade.
This is especially important if you need to set the time ahead on the vBlade. In this case, if you
set the time ahead directly on a vBlade, that device leaves, then rejoins the virtual chassis, and
the change does not take effect.
The CLI prompt can be configured to reflect the VCS chassis device ID and status.
To explicitly enable display of information items in the CLI prompt, use the following command
at the global configuration level of the CLI:
• chassis-device-id – Display aVCS device id in the prompt. For example, this can be 7/1,
where the number 7 indicates the chassis ID and 1 indicates the device ID within the aVCS
set.
NOTE: The aVCS Chassis ID and the aVCS Device ID are configurable as
part of the prompt if aVCS is running. The prompt that you specify
will be synchronized and reflected on all the other devices in the
aVCS set.
25
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
Customizing the Virtual Chassis
To re-enable display of all the information items, use the no terminal prompt global
configuration command.
The following command disables display of the aVCS status and hostname in the CLI prompt:
For more information, see “VRRP-A / VCS Status in Command Prompt” in the Command Line
Interface Reference.
26
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
CAUTION: Use this procedure only for first-time deployment of VCS. If you
are upgrading ACOS devices on which VCS is already configured,
refer to the upgrade instructions included with the release notes
for your release.
29
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
Initial VCS Deployment
Table 1 summarizes the steps in the procedure for initial VCS deployment.
NOTE: This step is not required when deploying VCS in the GUI; when VCS is enabled the GUI
automatically performs the system reload to synchronize configurations.
4 View the running-config on the vMaster and on the vBlades to verify that both the vMaster
and vBlades configurations are synchronized.
The steps above establishes the first-time base VCS configuration synchronization between
vMaster and vBlades. After this, subsequent configuration changes on the vMaster are auto-
matically synchronized to the vBlades.
5 If you plan to use Layer 3 virtualization, configure it on the vMaster.
1. If you have not already done do, configure basic system settings:
• Management interface and default gateway
• Hostname
• Ethernet interfaces
• VLANs
• Routing
2. Configure the following VCS settings related to VRPR-A high availability:
• Chassis ID – Assign each device to the same set (this is the VRRP-A set ID).
• Device ID – Assign a unique device ID to each device (this is the VRRP-A device ID).
30
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
Initial VCS Deployment
3. Enable VCS.
4. Configure the floating IP address that will be used by the virtual chassis.
The floating IP address must be in the same subnet as the ACOS device’s management IP
address or one of the device’s data interface IP addresses.
5. Configure VCS device settings:
• vMaster-election interface – Ethernet interface(s) to use for vMaster election. Generally,
these are the interfaces connected to the other devices in the virtual chassis. The elec-
tion interfaces for devices in a VCS virtual chassis must be in the shared partition. Use of
an L3V private partition’s interface as a VCS election interface is not supported.
• (Optional) vMaster-election priority – If you want a specific device to serve as the vMas-
ter for the virtual chassis, set that device’s VCS priority to 255. You can leave the priority
set to its default value on the other devices, which will become vBlades.
To allow VCS to select the vMaster based on VCS device ID, leave the vMaster-election
priority on all devices unchanged.
This section provides details for initial vBlade configuration. You must perform these steps on
each device that you want to be a vBlade in the virtual chassis.
31
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
Initial VCS Deployment
32
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
Initial VCS Deployment
2. Enable VCS:
33
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
Initial VCS Deployment
Note the “:1” at the end of the prompt, indicating that VCS enabled and you are on local
device 1 (the vMaster). The device ID was set earlier using the device-id command under
VRRP-A common configuration mode.
3. Configure the floating IP address for the virtual chassis:
ACOS(config:1)# vcs floating-ip 192.168.209.23 /24
34
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
Initial VCS Deployment
c. Click OK.
35
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
Initial VCS Deployment
36
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
Initial VCS Deployment
ACOS-2# configure
ACOS-2(config)# vrrp-a common
ACOS-2(config-common)# set-id 1
ACOS-2(config-common)# device-id 2
ACOS-2(config-common)# enable
ACOS-2-ForcedStandby(config-common) #exit
ACOS-2-ForcedStandby(config)# vcs enable
ACOS-2-ForcedStandby(config:2)# vcs floating-ip 192.168.209.23 /24
ACOS-2-ForcedStandby(config:2)# vcs device 2
ACOS-2-ForcedStandby(config:2-device:2)# interfaces management
ACOS-2-ForcedStandby(config:2-device:2)# priority 120
ACOS-2-ForcedStandby(config:2-device:2)# enable
ACOS-2-ForcedStandby(config:2-device:2)# exit
ACOS-2-ForcedStandby(config:2)# vcs reload
37
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
Initial VCS Deployment
c. Click OK.
3. Configure the aVCS device settings:
a. From the System >> aVCS >> Settings, select the Device tab.
b. Click New Device.
c. In the Device field, specify the device ID.
d. In the Priority field, specify the priority.
e. Select Enable in the Enable field.
f. Select Enable in the Management field.
g. Click Submit.
4. Reload the device:
a. From the System >> aVCS >> Device, select the Actions tab.
b. In the Reload Option drop-down list, select Reload and click Apply.
38
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
Forcing vMaster Takeover
• Temp-Priority Value
1. Either change the management context to the vBlade or log directly onto the vBlade.
To change the management context to the vBlade, use the vcs admin-session-connect
command. For example, to change management context to the vBlade device 2:
vcs admin-session-connect device 2
2. After you have changed the management context to the vBlade, or logged on directly to the
vBlade, use the vcs vmaster-take-over command. For example:
vcs vmaster-take-over 215
You are required to specify a temp-priority value (215 in this example). Unless you use this
command on more than one vBlade, it does not matter which value within the range 1-255
you specify. (See “Temp-Priority Value” on page 39.)
Temp-Priority Value
This command does not change the configured VCS priority on the vBlade. The command only
temporarily overrides the configured priority.
If you enter this command on only one vBlade, you can specify any value within the valid range
(1-255). The takeover occurs regardless of priority settings on the current vMaster
If you enter the vcs vmaster-take-over command on more than one vBlade, the device on
which you enter the highest temp-priority value becomes the vMaster
If you enter the same temp-priority value on more than one vBlade, the same parameters used
for initial vMaster election are used to select the new vMaster:
39
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
Determining a Device’s VCS ID
• The device with the highest configured VCS priority is selected. (This is the priority config-
ured by the priority command at the configuration level for the VCS device.)
• If there is a tie (more than one of the devices has the same highest configured VCS prior-
ity), then the device with the lowest device ID is selected.
In either case, the new vMaster is selected from among only the vBlades on which you enter the
vcs vmaster-take-over command.
To determine a device’s VCS ID, use the show vcs summary command. The device you are
logged onto is indicated with an asterisk in the State column of the Members section.
• If you are logged directly onto a device through its management interface or a data inter-
face, the asterisk indicates the device.
• If you are logged onto the floating IP address of the virtual chassis, the asterisk indicates
the vMaster.
(This is true unless you changed the device context of the management session. In this
case, you are logged onto the vBlade to which you changed the device context. See “Virtual
Chassis Management Interface (Floating IP Address)” on page 10.)
The following example indicates that the device you are logged onto is VCS device 1, indicated
by the asterisk for device ID 1 in the “Members” section of the output:
VCS Chassis:
VCS Enabled: Yes
Chassis ID: 1
Multicast IP: 224.0.0.210
Multicast Port: 41217
Version: 4.0.1.b159
40
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
Viewing VCS Information
In the GUI, you can view this information in the main header. Look for this section in the header:
The Device Context field shows that you are currently working on device 1 in the chassis. In
addition, the field on the left indicates that this device (the local device, indicated by the
asterisk) is the vMaster.
Use the show vcs images command to view the installed VCS-capable ACOS software image:
From the GUI, navigate to System >> aVCS >> Settings. Click on the Statistics tab, then
select aVCS Summary from the drop-down list. The resulting page shows general VCS
statistics and available aVCS-capable images on the device.
Also from the GUI, navigate to System >> aVCS >> Settings, then click on the aVCS
Deployment Summary tab to view information about your virtual chassis deployment.
• CLI Message for Commands That Affect Only the Local Device
41
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS CLI-Session Management
CLI Message for Commands That Affect Only the Local Device
This release provides an option that displays a message when you enter a configuration
command that applies to only the local device. When this option is enabled, a message is
displayed if you enter a configuration command that affects only the local device, and the
command does not explicitly indicate the device.
Local Device
• If you log directly onto one of the devices in the virtual chassis, that device is the local
device. For example, if you log on through the management IP address of a vBlade, that
vBlade is the local device.
• If you change the device context to another ACOS device, that device becomes the local
device.
• If you log onto the virtual chassis’ floating IP address, the vMaster is the local device.
Message Example
The following command sets an aging time for learned MAC entries:
This type of configuration change is device-specific. However, the command does not specify
the device ID to which to apply the configuration change. Therefore, the change is applied to the
local device and the output message displays the device ID results. In this example, the local
device is device 1 in the VCS virtual chassis.
The message is not necessary if you explicitly specify the device, and therefore is not displayed:
ACOS(config)# device-context 2
ACOS(config)# mac-age-time 444 device 2
42
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS CLI-Session Management
Notes
• For commands that access the configuration level for a specific configuration item, the
message is displayed only for the command that accesses the configuration level. For
example:
ACOS(config)# interface ethernet 2
This operation applied to device 1
ACOS(config-if:ethernet1/2)# ip address 1.1.1.1 /24
ACOS(config-if:ethernet1/2)#
The message is not displayed after the ip address command is entered, because the mes-
sage is already displayed after the interface ethernet 2 command is entered.
The same is true for commands at the configuration level for a routing protocol. The mes-
sage is displayed only for the command that accesses the configuration level for the proto-
col.
• In most cases, the message also is displayed following clear commands for device-spe-
cific items. An exception is clear commands for routing information. The message is not
displayed following these commands.
• The message is not displayed after show commands.
43
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS CLI-Session Management
In this topology, device 1 is the Active device in the VRID. When it fails over, device 2 will become
the Active device, as it has the next highest priority. Device 4, which is currently the vMaster in
the virtual chassis and is configured with VRID affinity, will follow the update in VRRP-A and
switch to device 2 as the vMaster.
This ensures that the device assuming the master configuration also serves as the active data
path. Configuring the VRID affinity causes the vMaster to stay with a selected VRID. This
capability provides deterministic behavior on the location of the VCS master and the unit
processing traffic for a particular VRRP-A VRID. It also provides better control to effectively
utilize available bandwidth and facilitates troubleshooting efforts.
The following example snippets configure VRID affinity for four devices in a virtual chassis,
based on the example topology in Figure 13:
44
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS CLI-Session Management
!
...
vcs device 1
priority 225
enable
affinity-vrrp-a-vrid 0
!
vcs device 2
priority 200
enable
affinity-vrrp-a-vrid 0
!
vcs device 3
priority 150
enable
affinity-vrrp-a-vrid 0
vcs device 4
priority 175
enable
affinity-vrrp-a-vrid 0
!
vcs local-device 1
...
Take over vMastership: VCS: vmaster take over is not allowed in affinity vrid state
Once VRID affinity is configured, the vMaster will continue to follow the active device in the VRID
using the existing device priorities. To change the priorities, you must issue the vcs reload
command for the new priorities to take effect.
45
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS CLI-Session Management
vMaster takeover can be used to assign a new vMaster without regard to existing priorities;
hence it is not allowed in conjunction with VRID affinity.
By default, the SNMP sysContact OID value is synchronized among all member ACOS devices of
an VCS virtual chassis. The current release provides an option to disable this synchronization, on
an individual device basis.
NOTE: After configuring this option for an ACOS device, if you disable VCS
on that device, the running-config is automatically updated to
continue using the same sysContact value you specified for the
device. You do not need to reconfigure the sysContact on the
device after disabling VCS.
The following example shows an example; to disable syncing of SNMP contact snmp-admin on
VCS device 2:
In maintenance mode, the vMaster can briefly be placed into maintenance without triggering a
failover of the vMaster role to a vBlade. During the maintenance window, the vBlades continue
to operate, without attempting to failover to the vMaster role.
46
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
This chapter describes how to add a configured ACOS device to a running virtual chassis.
47
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
Overview of Adding a Device to a Virtual Chassis
FIGURE 14 : Previously Configured Device Added to Virtual Chassis and Merged with Virtual
Chassis
The following process occurs when you add a previously configured ACOS device to a virtual
chassis:
1. The previously configured ACOS device (labeled “Configured Device” in the figure) is con-
nected to the virtual chassis network at Layer 2.
An admin then configures VCS settings on the previously configured device and reloads
VCS.
The VCS reload causes the device to send its VCS configuration and its device-specific
configuration to the vMaster.
2. The vMaster applies the VCS configuration and device-specific configuration to its virtual
chassis configuration.
The vMaster then synchronizes the device’s configuration to the other vBlades as part of
the normal configuration synchronization process.
3. The vMaster sends its running-config to the device.
4. On the device, the vMaster running-config is saved as the device’s startup-config. To com-
plete its VCS reload, the device loads its new startup-config. The device is now another
vBlade in the virtual chassis.
48
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
Procedure for Adding a Device to a Virtual Chassis
Following the reload of VCS, the ACOS device joins the virtual chassis as a vBlade, and its
configuration information is migrated to the virtual chassis’ vMaster.
4. Verify that the device is now a member of the virtual chassis using the show vcs summary
command.
NOTE: Do not use the disable-merge option when you reload VCS; this
option is used only when replacing an existing virtual chassis
member with a new device.
49
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
Procedure for Adding a Device to a Virtual Chassis
50
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
By default, when you add an ACOS device to a virtual chassis that is already running, the
device’s configuration information is migrated to the vMaster.
However, if you are replacing a member of the virtual chassis by removing the ACOS device
from the network and inserting another ACOS device of the same model, you may want the
vMaster to migrate the removed device’s configuration information to the new device. In this
case, when you reload VCS on the new device, make sure to use the disable-merge option:
The following commands configure VCS settings on a replacement ACOS device to be inserted
into a virtual chassis, and reload VCS to activate the VCS configuration:
ACOS# configure
ACOS(config)# vrrp-a common
ACOS(config-common)# set-id 1
ACOS(config-common)# device-id 3
ACOS(config-common)# enable
ACOS-Active(config-common)# exit
ACOS-Active(config)# vcs enable
ACOS-Active(config:3)# vcs floating-ip 192.168.100.169 /24
ACOS-Active(config:3)# vcs device 3
ACOS-Active(config:3-device:#)# interface management
ACOS-Active(config:3-device:3)# priority 197
ACOS-Active(config:3-device:3)# enable
ACOS(Active(config:3-device:3)# exit
ACOS-Active(config:3)# vcs reload disable-merge
Following the reload of VCS, the ACOS device joins the virtual chassis as a vBlade, and receives
its configuration information from the virtual chassis’ vMaster.
51
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
52
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
You can use the Virtual Chassis System (VCS) feature to provide automated configuration
synchronization in VRRP-A deployments, even if you do not plan to use any other VCS features.
Use of VCS for configuration synchronization provides the following benefits:
• VCS configuration synchronization is automatic and occurs in real time. Each configura-
tion change is synchronized to the other ACOS device(s) as soon as the change occurs.
• Reload is not required.
Figure 15 shows an example VRRP-A deployment that uses VCS for automated configuration
synchronization.
The following commands deploy the VRRP-A configuration shown in Figure 15.
Commands on Device 1
The following commands configure the VRRP-A set ID and device ID, and enable VRRP-A on
device 1:
ACOS-1# configure
53
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
The following command enables VCS and configures the floating IP address, which is the
management address for the virtual chassis. The floating IP address must be in the same subnet
as the ACOS device’s management IP address or one of the device’s data interface IP
addresses.
The following commands configure the VCS profile for the device.
The priority command helps identify this ACOS device as the preferred vMaster. Use a higher
priority value on this device than on the second device.
The interfaces commands identify interfaces that can be used by VCS. It is recommended to
specify more than one interface, to help ensure continued communication in case a link goes
down.
The following commands save the changes and activate the VCS configuration.
Commands on Device 2
The following commands configure the VRRP-A set ID and device ID, and enable VRRP-A on
device 2:
ACOS-2# configure
ACOS-2(config)# vrrp-a common
ACOS-2(config-common)# set-id 1
54
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
ACOS-2(config-common)# device-id 2
ACOS-2(config-common)# enable
ACOS-2(config-common)# exit
ACOS-2-Active(config)# vcs enable
ACOS-2-Active(config:2)# vcs floating-ip 192.168.209.23 /24
ACOS-2-Active(config:2)# vcs device 2
ACOS-2-Active(config:2-device:2)# priority 100
ACOS-2-Active(config:2-device:2)# interface management
ACOS-2-Active(config:2-device:2)# interface ethernet 1
ACOS-2-Active(config:2-device:2)# enable
ACOS-2-Active(config:2-device:2)# exit
ACOS-2-Active(config:2)# vcs reload
NOTE: When you enter the vcs reload command on the second device, it
receives non-device-specific configuration information from the
first device. This occurs if the first device already has become the
vMaster for the VCS virtual chassis.
55
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
56
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
This chapter describes the commands used to configure Virtual Chassis System (VCS).
57
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Operational Commands
These commands are used to operate VCS, but do not change any VCS configuration settings.
To configure VCS, refer to “VCS Configuration Commands” on page 64.
• device-context
• vcs admin-session-connect
• vcs disable
• vcs enable
• vcs vMaster-maintenance
• vcs vmaster-take-over
device-context
Description Change the context of the CLI session from the vMaster to a vBlade, in
order to configure the vBlade.
Replace DeviceID with the ID of the target device. The target device is
the device you plan to access. The acceptable values for this
parameter will vary depending on your specific hardware platform.
58
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Operational Commands
Default By default, the vMaster for the virtual chassis is the context of the
management session.
ACOS(config)# device-context 3
All the following configuration will go to device 3
ACOS(config)# hostname ACOS3
ACOS3(config)#
vcs admin-session-connect
Description Open an SSH admin session with a device in a VCS virtual chassis.
Replace DeviceID with the ID of the target device. The target device is
the device you plan to access. The acceptable values for this
parameter will vary depending on your specific hardware platform.
Default By default, the CLI session is on the device you logged onto.
Example The following command changes the CLI session to VCS device 2. In
this example, this is the first time the command has been used to
access device 2.
59
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Operational Commands
TIS-Standby-vBlade[1/2]>enable
Password:***
Last login: Thu Jul 22 21:06:46 2010 from 192.168.3.77
ACOS-device2#
At the Password prompt, enter the password for the admin account on
the target device.
Example The following example shows the CLI response if you accidentally try
to switch to the device you are already on:
vcs disable
Description Disable VCS on the device.
Syntax vcs disable
Usage In addition to disabling VCS on the current device, you can also use
device-context to disable VCS on another device. See examples
below.
60
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Operational Commands
Example The following example switches to device 2 from device 1, then dis-
ables VCS on device 2:
ACOS-Active-vMaster[1/1]# configure
ACOS-Active-vMaster[1/1](config:1)# device-context 2
All the following configuration will go to device 2
ACOS-Active-vMaster[1/1](config:2)# vcs disable
ACOS-Active-vMaster[1/1](config:2)#
vcs enable
Description Enable VCS on the device.
Syntax vcs enable
Usage After you enter the vcs enable command, you must enter the vcs
reload command to place any VCS configuration changes into effect
and activate the feature.
Before using this command, many of the VCS commands are not
available from the CLI.
In addition to enabling VCS on the current device, you can also use
device-context to enable VCS on another device. See examples below.
61
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Operational Commands
ACOS-Active-vMaster[1/1]# configure
ACOS-Active-vMaster[1/1](config:1)# device-context 2
All the following configuration will go to device 2
ACOS-Active-vMaster[1/1](config:2)# vcs enable
ACOS-Active-vMaster[1/1](config:2)#
vcs vMaster-maintenance
Description Change the length of the vMaster maintenance window.
Syntax [no] vcs vMaster-maintenance seconds
Replace seconds with the length of the maintenance window. You can
specify 0-3600 seconds.
Mode Privileged EXEC (on vBlade); Privileged EXEC and Global Config (on
vMaster)
Usage VCS option that allows the vMaster to briefly be placed into mainte-
nance, without triggering failover of the vMaster role to a vBlade.
During the maintenance window, the vBlades continue to operate,
without attempting to failover to the vMaster role.
vcs vmaster-take-over
Description Force vMaster re-election, by temporarily changing a device’s VCS pri-
ority. This command is useful for changing a vBlade to vMaster with-
out changing the VCS configuration profile for either device.
62
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Operational Commands
Default N/A
Mode Privileged EXEC (on vBlade); Privileged EXEC and Global Config (on
vMaster)
Usage This command does not change the configured VCS priority on the
device. The command only temporarily overrides the configured prior-
ity.
If you enter this command on only one vBlade, you can specify any
value within the valid range (1-255). The takeover occurs regardless of
priority settings on the current vMaster.
ACOS>enable
Password:********
ACOS-2#vcs vmaster-take-over 255
63
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Configuration Commands
These commands are used to configure specific VCS settings, and are available after entering
the device-context global configuration command.
• vcs dead-interval
• vcs debug
• vcs device
• vcs failure-retry-count
• vcs floating-ip
• vcs floating-ipv6
• vcs force-wait-interval
• vcs multicast-ip
• vcs multicast-ipv6
• vcs multicast-port
• vcs reload
• vcs ssl-enable
• vcs time-interval
• vcs vmaster-maintenance
vcs dead-interval
Description Configure the number of seconds vBlade devices wait for a keepalive
message from the vMaster, before assuming the vMaster is unavaila-
ble and triggering vMaster re-election.
64
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Configuration Commands
Default 10
vcs debug
Description Enable VCS debugging.
Parameter Description
daemon Enables debugging for the VCS process.
election Enables debugging for vMaster election.
info Enables display of informational messages in the debugging
output.
vblade Enables debugging for vBlade-related operations.
vmaster Enables debugging for vMaster-related operations.
Default Disabled
Mode Privileged EXEC (on vBlade); Privileged EXEC and Global Config (on
vMaster)
Example The following commands enable debugging for VCS vMaster opera-
tions, and display the output:
vcs device
Description Add a device to an existing VCS chassis, and configure VCS-related
settings for the specified device.
65
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Configuration Commands
Replace device-id with the device ID. The acceptable values for this
parameter will vary depending on your specific hardware platform.
This command changes the CLI to the configuration level for the
specified VCS device, where the following VCS-related commands are
available.
Command Description
[no] affinity-vrrp-a- Configures a vMaster failover to the Active device on a specified VRID
vrid vrid-group (device running VRRP-A). Use this command on each device that is part
of the VCS cluster, including the Active device.
For more information about this feature, see “Option To Configure VCS
Master Affinity to VRRP-A Active” on page 43.
[no] enable Enables VCS on the device.
Default No VCS devices are configured by default. When you add a VCS
device, its parameters have the default values described in the table
above.
Usage The election interfaces for devices in an VCS virtual chassis must be in
the shared partition. Use of an L3V private partition’s interface as a
VCS election interface is not supported.
Example The following commands add device 3 to an existing VCS chassis. The
management interface will be used for VCS election traffic and its pri-
ority is 3.
66
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Configuration Commands
vcs failure-retry-count
Description Configure the maximum number of retries for a VCS device to join a
virtual chassis.
Parameter Description
retries Maximum number of retries for a VCS device to join a virtual
chassis. You can specify 0-255.
forever Specify an unlimited amount of retries for a VCS device to join
a virtual chassis.
Default 2
Usage If the device is unable to join the virtual chassis after all allowed retries
are used, VCS stops on the device. In this case, you use the vcs reload
command to restart VCS on the device.
Example The following example configures an ACOS device to try 3 times to join
a virtual chassis:
vcs floating-ip
Description Configure the management IP address for the VCS virtual chassis.
Example The following command sets the management address for the VCS
virtual chassis to 192.168.1.69/24:
67
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Configuration Commands
vcs floating-ipv6
Description Configure an IPv6 management IP address for the VCS virtual chassis.
Example The following command sets the management address for the VCS
virtual chassis to the IPv6 address fc00:0:3::23:a/24:
vcs force-wait-interval
Description Delay the start of VCS following a reload/reboot.
Default 5
vcs multicast-ip
Description Configure the multicast IPv4 address used for VCS vMaster election.
68
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Configuration Commands
Default 224.0.0.210
Usage To configure the protocol port, see “vcs multicast-port” on page 69.
vcs multicast-ipv6
Description Configure the multicast IPv6 address used for VCS vMaster election.
Usage To configure the protocol port, see “vcs multicast-port” on page 69.
vcs multicast-port
Description Configure the protocol port used for VCS vMaster election.
Default 41217
Usage To configure the multicast address, see “vcs multicast-ip” on page 68.
vcs reload
Description Reload the VCS process.
69
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Configuration Commands
Without this option, when you add an ACOS device to a virtual chassis
that is already running, the device’s configuration information is
migrated to the vMaster
Default N/A
vcs ssl-enable
Description Enable or disable SSL for configuration synchronization traffic
between VCS devices.
Default Disabled
vcs time-interval
Description Number of seconds between keepalive messages from the vMaster to
vBlades.
Syntax [no] vcs time-interval seconds
Default 3
vcs vmaster-maintenance
Description Briefly place the vMaster into maintenance mode without triggering a
failover to a vBlade.
Replace period with the amount of time (0-3600 seconds) that the
vMaster is placed into maintenance mode without triggering a failover.
Default 60 seconds
70
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Show Commands
Usage The vMaster can be placed into maintenance mode without triggering
a failover to a vBlade. During this maintenance window, the vBlades
continue to operate without attempting to take over the vMaster role.
At the end of the configurable maintenance period, the vMaster
returns to the vMaster role.
Use the old_first option to list messages beginning with the most
recent. Without this option, the list begins with the oldest message in
the buffer.
Mode All
71
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Show Commands
NOTE: Only images that support VCS are listed. To list all images, use
the show bootimage command instead.
Mode All
Field Description
Image Name Name of the software image.
Type Location of the image:
• hd_pri – Primary image area of the hard drive or Solid State Drive (SSD)
• hd_sec – Secondary image area of the hard drive or SSD
• cf_pri – Primary image area of the compact flash drive
• cf_sec – Secondary image area of the compact flash drive
• ext – Extended image, used for staged upgrades during which multiple ACOS software versions
run in the virtual chassis.
Note: If dashes (--------) are displayed instead of an image name, the image does not support
VCS.
Mode All
72
Feedback ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems
VCS Show Commands
VCS Chassis:
VCS Enabled: Yes
Chassis ID: 3
Floating IP: 5.5.5.254
Mask: 255.255.255.0
Floating IP: 192.168.148.14
Mask: 255.255.255.0
Multicast IP: 224.0.0.210
Multicast Port: 41217
Version: 2.6.1.b478
Field Description
VCS Chassis Fields
VCS Enabled State of the VCS feature, Enabled or Disabled.
Chassis ID ID of the virtual chassis.
Floating IP IP interface associated with the virtual chassis floating IP address.
Mask Network mask of the Floating IP interface.
Multicast IP Multicast IP address used for VCS vMaster election.
Multicast Port Protocol port used for vMaster election.
Version Software version and build running on the ACOS device.
Members Fields
ID VCS ID of the member device.
State Current role of the device, vMaster or vBlade.
NOTE: If you enter this command in a session that is logged onto the VCS float-
ing IP address, the “local device” is always the vMaster, unless you change the
context ID of the management session.
Priority vMaster election priority of the device.
NOTE: This is the admin-configured priority value, not the dynamic priority
assigned by VCS.
73
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems FeedbackF
Fee
e
VCS Show Commands
Field Description
IP:Port IP address and protocol port used for configuration synchronization with the
member device.
Location Indicates whether this is the device context on which you entered the show vcs
summary command:
• Local – This is the device context on which you entered the command.
• Remote – This is not the device context on which you entered the command.
74
ACOS 4.1.4-GR1-P5 Configuring ACOS Virtual Chassis Systems for A10 Thunder Series
Contents
75
7