MLAG + Rapid Spanning Tree(RSTP) - 1 -

概要

Mellanox社製のEthernet Switch SN2010を利用して、スパニングツリーの基本的動作を確認してみます。
SN2010はMellanox社のネットワークOSであるOnyxとCumulus Networks社のCumulus Linuxが動作しますが、
今回はOnyxを利用して動作確認を行ってみます。

OnyxではRSTP、Rapid PVST+、MSTPをサポートしています。

SN2010-1 [mlag-domain: master] (config) # spanning-tree mode ?
rst                            Rapid spanning tree mode
mst                            Multiple spanning tree mode
rpvst                          Rapid per vlan spanning tree mode

またOnyxバージョン 3.6.6106以降ではMLAG上でのSTPがサポートされました。
本稿ではMLAG + RSTPについての検証を纏めたものです。

環境

  • Onyxバージョン:3.6.8160 
  • 物理環境

f:id:silverstyle:20181112132501j:plain

スパニングツリーの設定

RSTPを有効にします。mode rstを入力しなくてもデフォルトRSTPになります。
あわせてスイッチのプライオリティ値も変更します。

#SN2010-1
SN2010-1 [mlag-domain: master] (config) # spanning-tree
SN2010-1 [mlag-domain: master] (config) # spanning-tree priority 8192

#SN2010-2
SN2010-2 [mlag-domain: standby] (config) #spanning-tree
SN2010-2 [mlag-domain: standby] (config) #spanning-tree priority 8192

#SN2010-3
SN2010-3 [standalone: master] (config) #spanning-tree
SN2010-3 [standalone: master] (config) #spanning-tree priority 0

#SN2010-4
SN2010-4 [standalone: master] (config) #spanning-tree
SN2010-4 [standalone: master] (config) #spanning-tree priority 4096

f:id:silverstyle:20181112161353j:plain

SN2010-1 [mlag-domain: master] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Cost               : 1000
  Port               : Mpo1
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 8192
  Address            : 00:00:5e:00:01:5d
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Mpo1              Root         Forwarding       1000      128    normal
Mpo2              Alternate    Discarding       1000      128    normal
Po1000            Designated   Forwarding       100       128    edge
SN2010-2 [mlag-domain: standby] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Cost               : 1000
  Port               : Mpo1
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 8192
  Address            : 00:00:5e:00:01:5d
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Mpo1              Root         Forwarding       1000      128    normal
Mpo2              Alternate    Discarding       1000      128    normal
Po1000            Designated   Forwarding       100       128    edge
SN2010-3 [standalone: master] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Bridge root        : yes
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Eth1/22           Designated   Forwarding       200       128    normal
Po1               Designated   Forwarding       1000      128    normal
SN2010-4 [standalone: master] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Cost               : 200
  Port               : Eth1/22
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 4096
  Address            : 50:6b:4b:8e:95:c0
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Eth1/22           Root         Forwarding       200       128    normal
Po1               Designated   Forwarding       1000      128    normal

動作確認

SN2010-1 1/1(Mpo1)とSN2010-3 1/1間のリンクをDownさせる。

SN2010-1 [mlag-domain: master] # show interfaces status

                                                                                                                                                                                                                    • -

Port Operational state Admin Speed Description

                                                                                                                                                                                                                    • -

mgmt0 Up Enabled 1000Mb/s (auto)-
Po1000 Up Enabled -
Mpo1 Down Enabled -
Mpo2 Up Enabled -
Eth1/1 (Mpo1) Down Enabled 10 Gbps -
Eth1/2 (Mpo2) Up Enabled 10 Gbps -
Eth1/3 Down Enabled 25 Gbps -
Eth1/4 Down Enabled 25 Gbps -
Eth1/5 Down Enabled 25 Gbps -
Eth1/6 Down Enabled 25 Gbps -
Eth1/7 Down Enabled 25 Gbps -
Eth1/8 Down Enabled 25 Gbps -
Eth1/9 Down Enabled 25 Gbps -
Eth1/10 Down Enabled 25 Gbps -
Eth1/11 Down Enabled 25 Gbps -
Eth1/12 Down Enabled 25 Gbps -
Eth1/13 Down Enabled 25 Gbps -
Eth1/14 Down Enabled 25 Gbps -
Eth1/15 Down Enabled 25 Gbps -
Eth1/16 Down Enabled 25 Gbps -
Eth1/17 Down Enabled 25 Gbps -
Eth1/18 Down Enabled 25 Gbps -
Eth1/19 Down Enabled 100 Gbps -
Eth1/20 Down Enabled 100 Gbps -
Eth1/21 (Po1000) Up Enabled 100 Gbps -
Eth1/22 (Po1000) Up Enabled 100 Gbps -
|

SN2010-3のPo1が片系Downとなりパスコストが1000→2000に変化。
Alternate Portに変化なし。

SN2010-1 [mlag-domain: master] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Cost               : 1000
  Port               : Mpo1
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 8192
  Address            : 00:00:5e:00:01:5d
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Mpo1              Root         Forwarding       1000      128    normal
Mpo2              Alternate    Discarding       1000      128    normal
Po1000            Designated   Forwarding       100       128    edge
SN2010-2 [mlag-domain: standby] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Cost               : 1000
  Port               : Mpo1
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 8192
  Address            : 00:00:5e:00:01:5d
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Mpo1              Root         Forwarding       1000      128    normal
Mpo2              Alternate    Discarding       1000      128    normal
Po1000            Designated   Forwarding       100       128    edge
SN2010-3 [standalone: master] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Bridge root        : yes
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Eth1/22           Designated   Forwarding       200       128    normal
Po1               Designated   Forwarding       2000      128    normal
SN2010-4 [standalone: master] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Cost               : 200
  Port               : Eth1/22
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 4096
  Address            : 50:6b:4b:8e:95:c0
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Eth1/22           Root         Forwarding       200       128    normal
Po1               Designated   Forwarding       1000      128    normal

SN2010-2 1/1(Mpo1)とSN2010-3 1/2間のリンクをDownさせる。

SN2010-2 [mlag-domain: standby] # show interfaces status
-----------------------------------------------------------------------------------------------------------

Port                Operational state   Admin     Speed          Description    
-----------------------------------------------------------------------------------------------------------
mgmt0               Up                  Enabled   1000Mb/s (auto)-
Po1000              Up                  Enabled                  -              
Mpo1                Down                Enabled                  -              
Mpo2                Up                  Enabled                  -              
Eth1/1 (Mpo1)       Down                Enabled   10 Gbps        -              
Eth1/2 (Mpo2)       Up                  Enabled   10 Gbps        -              
Eth1/3              Down                Enabled   25 Gbps        -              
Eth1/4              Down                Enabled   25 Gbps        -              
Eth1/5              Down                Enabled   25 Gbps        -              
Eth1/6              Down                Enabled   25 Gbps        -              
Eth1/7              Down                Enabled   25 Gbps        -              
Eth1/8              Down                Enabled   25 Gbps        -              
Eth1/9              Down                Enabled   25 Gbps        -              
Eth1/10             Down                Enabled   25 Gbps        -              
Eth1/11             Down                Enabled   25 Gbps        -              
Eth1/12             Down                Enabled   25 Gbps        -              
Eth1/13             Down                Enabled   25 Gbps        -              
Eth1/14             Down                Enabled   25 Gbps        -              
Eth1/15             Down                Enabled   25 Gbps        -              
Eth1/16             Down                Enabled   25 Gbps        -              
Eth1/17             Down                Enabled   25 Gbps        -              
Eth1/18             Down                Enabled   25 Gbps        -              
Eth1/19             Down                Enabled   100 Gbps       -              
Eth1/20             Down                Enabled   100 Gbps       -              
Eth1/21 (Po1000)    Up                  Enabled   100 Gbps       -              
Eth1/22 (Po1000)    Up                  Enabled   100 Gbps       -

期待通り、以下の通り変化した。
f:id:silverstyle:20181112161426j:plain

SN2010-1 [mlag-domain: master] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Cost               : 1200
  Port               : Mpo2
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 8192
  Address            : 00:00:5e:00:01:5d
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Mpo2              Root         Forwarding       1000      128    normal
Po1000            Designated   Forwarding       100       128    edge
SN2010-2 [mlag-domain: standby] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Cost               : 1200
  Port               : Mpo2
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 8192
  Address            : 00:00:5e:00:01:5d
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Mpo2              Root         Forwarding       1000      128    normal
Po1000            Designated   Forwarding       100       128    edge
SN2010-3 [standalone: master] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Bridge root        : yes
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Eth1/22           Designated   Forwarding       200       128    normal
SN2010-4 [standalone: master] # show spanning-tree

Switch                     : ethernet-default
Spanning tree protocol rst : enabled
Spanning tree force version: 2

Root ID:
  Priority           : 0
  Address            : 50:6b:4b:8e:92:c0
  Cost               : 200
  Port               : Eth1/22
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

Bridge ID:
  Priority           : 4096
  Address            : 50:6b:4b:8e:95:c0
  Hello Time (sec)   : 2
  Max Age (sec)      : 20
  Forward Delay (sec): 15

L: Loop Inconsistent
R: Root Inconsistent
G: BPDU Guard Inconsistent

--------------------------------------------------------------------------
Interface         Role         Sts              Cost      Prio   Type
--------------------------------------------------------------------------
Eth1/22           Root         Forwarding       200       128    normal
Po1               Designated   Forwarding       1000      128    normal

設定ファイル

SN2010-1 [mlag-domain: master] # show running-config
##
## Running database "initial"
## Generated at 2018/11/12 15:36:18 +0900
## Hostname: SN2010-1
##

##
## Running-config temporary prefix mode setting
##
no cli default prefix-modes enable

##
## MLAG protocol
##
   protocol mlag

##
## Interface Ethernet configuration
##
   interface mlag-port-channel 1-2
   interface port-channel 1000
   interface ethernet 1/1-1/2 speed 10000 force
   interface ethernet 1/1 mlag-channel-group 1 mode active
   interface ethernet 1/2 mlag-channel-group 2 mode active
   interface ethernet 1/21-1/22 channel-group 1000 mode active
   interface mlag-port-channel 1 switchport mode trunk
   interface mlag-port-channel 2 switchport mode trunk
   interface mlag-port-channel 1-2 no shutdown

##
## LAG configuration
##
   lacp
   port-channel load-balance ethernet source-destination-ip

##
## VLAN configuration
##
   vlan 100-102
   vlan 4000
   vlan 4000 name "MLAG"

##
## STP configuration
##
   spanning-tree priority 8192

##
## L3 configuration
##
   ip routing vrf default
   interface vlan 4000
   interface vlan 4000 ip address 10.0.0.1/30 primary

##
## DCBX PFC configuration
##
   dcb priority-flow-control enable force
   interface port-channel 1000 dcb priority-flow-control mode on force

##
## LLDP configuration
##
   lldp

##
## MLAG configurations
##
   mlag-vip mlag-domain ip 192.168.0.100 /24 force
no mlag shutdown
   mlag system-mac 00:00:5E:00:01:5D
   interface port-channel 1000 ipl 1
   interface vlan 4000 ipl 1 peer-address 10.0.0.2

##
## Network interface configuration
##
no interface mgmt0 dhcp
   interface mgmt0 ip address 192.168.0.101 /24

##
## Other IP configuration
##
   hostname SN2010-1
   ip route vrf default 0.0.0.0/0 192.168.0.1

##
## AAA remote server configuration
##
# ldap bind-password ********
# radius-server key ********
# tacacs-server key ********

##
## Network management configuration
##
# web proxy auth basic password ********
   clock timezone Asia Eastern Japan
no ntp server 133.243.238.164 disable
   ntp server 133.243.238.164 keyID 0
no ntp server 133.243.238.164 trusted-enable
   ntp server 133.243.238.164 version 4
no ntp server 133.243.238.243 disable
   ntp server 133.243.238.243 keyID 0
no ntp server 133.243.238.243 trusted-enable
   ntp server 133.243.238.243 version 4

##
## X.509 certificates configuration
##
#
# Certificate name system-self-signed, ID 9f8b989f9aeba5b16f9c8d5b12ab56087440a091
# (public-cert config omitted since private-key config is hidden)

##
## Persistent prefix mode setting
##
cli default prefix-modes enable
SN2010-2 [mlag-domain: standby] # show running-config
##
## Running database "initial"
## Generated at 2018/11/12 15:36:40 +0900
## Hostname: SN2010-2
##

##
## Running-config temporary prefix mode setting
##
no cli default prefix-modes enable

##
## MLAG protocol
##
   protocol mlag

##
## Interface Ethernet configuration
##
   interface mlag-port-channel 1-2
   interface port-channel 1000
   interface ethernet 1/1-1/2 speed 10000 force
   interface ethernet 1/1 mlag-channel-group 1 mode active
   interface ethernet 1/2 mlag-channel-group 2 mode active
   interface ethernet 1/21-1/22 channel-group 1000 mode active
   interface mlag-port-channel 1 switchport mode trunk
   interface mlag-port-channel 2 switchport mode trunk
   interface mlag-port-channel 1-2 no shutdown

##
## LAG configuration
##
   lacp
   port-channel load-balance ethernet source-destination-ip

##
## VLAN configuration
##
   vlan 100-102
   vlan 4000
   vlan 4000 name "MLAG"

##
## STP configuration
##
   spanning-tree priority 8192

##
## L3 configuration
##
   ip routing vrf default
   interface vlan 4000
   interface vlan 4000 ip address 10.0.0.2/30 primary

##
## DCBX PFC configuration
##
   dcb priority-flow-control enable force
   interface port-channel 1000 dcb priority-flow-control mode on force

##
## LLDP configuration
##
   lldp

##
## MLAG configurations
##
   mlag-vip mlag-domain ip 192.168.0.100 /24 force
no mlag shutdown
   mlag system-mac 00:00:5E:00:01:5D
   interface port-channel 1000 ipl 1
   interface vlan 4000 ipl 1 peer-address 10.0.0.1

##
## Network interface configuration
##
no interface mgmt0 dhcp
   interface mgmt0 ip address 192.168.0.102 /24

##
## Other IP configuration
##
   hostname SN2010-2
   ip route vrf default 0.0.0.0/0 192.168.0.1

##
## AAA remote server configuration
##
# ldap bind-password ********
# radius-server key ********
# tacacs-server key ********

##
## Network management configuration
##
# web proxy auth basic password ********
   clock timezone Asia Eastern Japan
no ntp server 133.243.238.164 disable
   ntp server 133.243.238.164 keyID 0
no ntp server 133.243.238.164 trusted-enable
   ntp server 133.243.238.164 version 4
no ntp server 133.243.238.243 disable
   ntp server 133.243.238.243 keyID 0
no ntp server 133.243.238.243 trusted-enable
   ntp server 133.243.238.243 version 4

##
## X.509 certificates configuration
##
#
# Certificate name system-self-signed, ID f2bb155203e632abc95a5fd004e4a5b7e7c7cb4a
# (public-cert config omitted since private-key config is hidden)

##
## Persistent prefix mode setting
##
cli default prefix-modes enable
SN2010-3 [standalone: master] # show running-config
##
## Running database "initial"
## Generated at 2018/11/12 15:37:02 +0900
## Hostname: SN2010-3
##

##
## Running-config temporary prefix mode setting
##
no cli default prefix-modes enable

##
## Interface Ethernet configuration
##
   interface port-channel 1-2
   interface ethernet 1/1-1/2 speed 10000 force
   interface ethernet 1/1-1/2 channel-group 1 mode active
   interface port-channel 1 switchport mode trunk
   interface port-channel 2 switchport mode trunk

##
## LAG configuration
##
   lacp
   port-channel load-balance ethernet source-destination-ip

##
## VLAN configuration
##
   vlan 100-102

##
## STP configuration
##
   spanning-tree priority 0

##
## L3 configuration
##
   ip routing vrf default

##
## LLDP configuration
##
   lldp

##
## Network interface configuration
##
no interface mgmt0 dhcp
   interface mgmt0 ip address 192.168.0.103 /24

##
## Other IP configuration
##
   hostname SN2010-3
   ip route vrf default 0.0.0.0/0 192.168.0.1

##
## AAA remote server configuration
##
# ldap bind-password ********
# radius-server key ********
# tacacs-server key ********

##
## Network management configuration
##
# web proxy auth basic password ********
   clock timezone Asia Eastern Japan
no ntp server 133.243.238.164 disable
   ntp server 133.243.238.164 keyID 0
no ntp server 133.243.238.164 trusted-enable
   ntp server 133.243.238.164 version 4
no ntp server 133.243.238.243 disable
   ntp server 133.243.238.243 keyID 0
no ntp server 133.243.238.243 trusted-enable
   ntp server 133.243.238.243 version 4

##
## X.509 certificates configuration
##
#
# Certificate name system-self-signed, ID 29d1e2f20eb02f5b73ccc5f1d4eb618b9c527d64
# (public-cert config omitted since private-key config is hidden)

##
## Persistent prefix mode setting
##
cli default prefix-modes enable
SN2010-4 [standalone: master] # show running-config
##
## Running database "initial"
## Generated at 2018/11/12 15:37:26 +0900
## Hostname: SN2010-4
##

##
## Running-config temporary prefix mode setting
##
no cli default prefix-modes enable

##
## Interface Ethernet configuration
##
   interface port-channel 1-2
   interface ethernet 1/1-1/2 speed 10000 force
   interface ethernet 1/1-1/2 channel-group 1 mode active
   interface port-channel 1 switchport mode trunk
   interface port-channel 2 switchport mode trunk

##
## LAG configuration
##
   lacp
   port-channel load-balance ethernet source-destination-ip

##
## VLAN configuration
##
   vlan 100-102

##
## STP configuration
##
   spanning-tree priority 4096

##
## L3 configuration
##
   ip routing vrf default

##
## LLDP configuration
##
   lldp

##
## Network interface configuration
##
no interface mgmt0 dhcp
   interface mgmt0 ip address 192.168.0.104 /24

##
## Other IP configuration
##
   hostname SN2010-4
   ip route vrf default 0.0.0.0/0 192.168.0.1

##
## AAA remote server configuration
##
# ldap bind-password ********
# radius-server key ********
# tacacs-server key ********

##
## Network management configuration
##
# web proxy auth basic password ********
   clock timezone Asia Eastern Japan
no ntp server 133.243.238.164 disable
   ntp server 133.243.238.164 keyID 0
no ntp server 133.243.238.164 trusted-enable
   ntp server 133.243.238.164 version 4
no ntp server 133.243.238.243 disable
   ntp server 133.243.238.243 keyID 0
no ntp server 133.243.238.243 trusted-enable
   ntp server 133.243.238.243 version 4

##
## X.509 certificates configuration
##
#
# Certificate name system-self-signed, ID ba85aa6f4a9fd2d7233f8e60608e1fedb271707f
# (public-cert config omitted since private-key config is hidden)

##
## Persistent prefix mode setting
##
cli default prefix-modes enable