Arista vEOS Configuration Manual

Text of Arista vEOS User Guide:

• Arista vEOS, Chapter 4 Using vEOS Router on the AWS Platform The vEOS Router, based on the Arista EOS, runs as a virtual machine instance on AWS EC2. Use the vEOS Router to create the various types of virtual machine router instances for AWS deployment, for example, gateway routers and transit routers. vEOS Router Image Updates The process to update vEOS Router images is the standard update process used for EOS images. For details on the steps to use, refer to the Arista EOS User Manual (see https://www.arista.com/en/support/product-documentation). Amazon Machine Image (AMI) Specifications The AMI provided by Arista utilizes the architecture, type

• Arista vEOS, }, "Value": "" } ] }, (truncated) } License name: 2017.11.03.12.27.24.016515_vEOSLic-1234.json Contents: { "BindingInfo": { "DomainAddress": "", "SerialNumber": "C3F3580316A92EE8D97DB70C967EAAA4", "SystemMAC": "" }, "CustomerName": "Arista Test", "Features": { "vEOS": [ { "Count": 1, "Valid": { "NotAfter": "2018-12-31T00:00:00Z", "NotBe

• • BIOS / System Firmware support for SR-IOV Supported Topologies The following scenarios are described in the Hypervisor Chapter • Launching ESXi using vSphere Web Client • Launching vEOS on KVM with Linux bridge • Launching vEOS on KVM with SR-IOV • Launching vEOS on KVM with PCI-Passthrough VMware ESXi Hypervisor Describes the launch sequence for VMware ESXi

• Example: veos(config)#interface Et1 veos(config-if-Et1)#no switchport veos(config-if-Et1)#ip address 1.0.0.1/24 veos(config-if-Et1)#mtu 1500 8. Apply the IPsec profile to a new tunnel interface. You create the new tunnel interface as part of this step. You can choose to configure the tunnel as a GRE-over-IPsec tunnel, or a VTI IPsec tunnel. Example (GRE-over-IPsec): In this example,

• Arista vEOS, Example: veos(config-ipsec-ike)#local-id <public ip address> 4. Create an IPsec Security Association policy in the data path for encryption and integrity. There is the option of enabling Perfect Forward Secrecy by configuring a DH group to the SA. Example: In this example, AES256 is used for encryption, SHA 256 is used for integrity, and Perfect Forward Secrecy is enabled (the DH group is 20). veos(config-ipsec)#sa policy sa-vrouter-PA veos(config-ipsec)#esp encryption aes256 veos(config-ipsec)#esp integrity sha256 veos(config-ipsec)#sa lifetime 2 veos(config-ipsec)#pfs dh-group 20 5. Bind or associate the IKE

• Arista vEOS, License feature: vEOS - Virtualized EOS License parameter: None Count: 1 Start: 2017-10-05 21:47:34 Expiration: 2017-10-09 17:00:00 Active: expired show license all The show license all command will display all licenses that are active, expired or licenses that have not been activated yet. veos#show license all System Serial number: 2BC6A772072B04BED43DCCF8777F036F System MAC address: 06:1b:8a:48:8d:0c Domain name: Unknown License feature: IPSec License parameter: None Count: 1 Start: 201

• Arista vEOS, Example: The following example removes the secret access key from the vEOS running-config. veos(config-cloud-aws)#no secret access-key 0 565656 test veos(config-cloud-aws)# Example: The following example returns the vEOS to Global configuration mode. veos(config-cloud-aws)#secret access-key 0 565656 test veos(config-cloud-aws)#exit veos(config)# show cloud high-availability (vEOS) The show cloud high-availability command displays the high availability configured settings. Command Mode EXEC Command Syntax show cloud high-availability Example This command displays details and status of the cloud high-availability con

• Arista vEOS, The following Azure configuration is valid for the MSI. cloud high-availability no shutdown ! peer veos2 azure backup-gateway Subnet-2-vEOS-RouteTable 0.0.0.0/0 10.1.2.4 resource-group CloudHaAzure backup-gateway Subnet-2-vEOS-RouteTable 10.1.0.0/16 10.1.2.4 resource-group CloudHaAzure backup-gateway Subnet-3-vEOS-RouteTable 10.1.0.0/16 10.1.3.4 resource-group CloudHaAzure backup-gateway Subnet-3-vEOS-RouteTable 0.0.0.0/0 10.1.3.4 resource-group CloudHaAzure primary-gateway Subnet-1-

• Arista vEOS, Chapter 8 ECMP Equal-cost multi-path routing (ECMP) is a routing plan of action where next-hop packet forwarding to a single destination takes place over multiple "best paths" which tie for top place in routing metric calculations. Use multi-path routing in conjunction with most routing protocols, because it is a per-hop decision limited to a single router. Adding ECMP Describes how to add ECMP to new or existing VMs. 1. Have the following line in a device's running-configuration. If an instance is created with an

• General Troubleshooting Tips If the Cloud HA feature is not working as expected, follow these tips for debugging. • Make sure that the network connectivity is there and DNS server is setup correctly for this feature to work. • If using Proxy and IAM role under AWS, make sure that the HTTP traffic (TCP port 80) is not proxied to allow for temporarily security

• Arista vEOS, Index A access-key-id (vEOS-AWS) 25 active-directory credential email subscription-id (vEOS-Azure) 26 Attaching the New Network Interfaces to Instances 55 azure (vEOS -Azure) 26 B backup-gateway (vEOS - Azure) 27 bfd source-interface (vEOS) 27 C Cloud Configuration 16 cloud high-availability shutdown 28 cloud high-availability vEOS) 28 cloud provider aws 29 cloud provider azure 29 Cloud Provider Side Helpful Tips 18 cloud proxy (vEOS) 30 Configuring BFD 19 Configuring Cloud High Availability 18 Configuring the AWS Cl

• Arista vEOS, Setting Up the Host for Single Root I/O Virtualization (SR-IOV) Single Root I/O Virtualization (SR-IOV) allows a single PCIe physical device under a single root port to appear to be multiple physical devices to the hypervisor. The following tasks are required to set up the host for SR-IOV. 1. Verify the IOMMU Support. Use the virt-host-validate Linux command to check IOMMU (input/output memory management unit) support. If it does not "PASS" for IOMMU, check the BIOS setting and kernel settings. The example below is what should be displayed. [arista@solution]$ v

• Arista vEOS, #send errors 0, #recv errors 0 local crypto endpt.: 1.0.0.2, remote crypto endpt.: 1.0.0.1 plaintext mtu 1438, path mtu 1500, ip mtu 1500, ip mtu idb GigabitEthernet2 current outbound spi: 0xCB8FB740(3415193408) PFS (Y/N): N, DH group: none Dummy packet: Initializing inbound esp sas: spi: 0x36383677(909653623) transform: esp-aes esp-sha-hmac , in use settings ={Tunnel, } conn id: 5287, flow_id: CSR:3287, sibling_flags FFFFFFFF80004048, crypto map: Tunnel0-head-0 sa timing: remaining key lifetime (k/sec):

• • R4.2xlarge • R4.4xlarge • T2 small • T2 medium For details on these AWS instance types, see Amazon's documentation (https://aws.amazon.com/ec2/instance-types/). Methods for Launching vEOS Router Instances The vEOS Router supports the use of various methods for launching router instances needed in a typical AWS deployment. The supported methods are: • Launc

• Arista vEOS, 2. To use IKE version 1, complete the following before completing the default IKE version the steps below. veos(config)#ip security veos(config-ipsec)#ike policy ike-peerRtr veos(config-ipsec-ike)#version 1 3. Create an IKE Policy to be used to communicate with the peer to establish IKE. You have the option of configuring multiple IKE policies. The default IKE Policy values are: • Encryption- AES256 • Integrity - SHA256 • DH group - Group 14 • IKE lifetime - 8 hours Example: veos(config-ipsec)#ike policy ike-vrouter veos(config-ipsec-ike)#encryption aes256 veos(config-ipsec-ike)#integrity sha256 veos(config-ipsec-ike)#dh-group 24 veos(config-ipsec-ike)#version 2 4.

• Arista vEOS, Chapter 1 Overview vEOS Router Arista vEOS Router is a new platform release of EOS that is supported on Amazon Web Service (AWS), Microsoft Azure and other public clouds. It is also supported on customer equipment running Linux and VMware hypervisors. By bringing advanced network telemetry and secure IPSec VPN connectivity in a software-only package, vEOS Router provides a consistent, secure and universal approach to hybrid cloud networking for any virtualized cloud deployment. Use cases for vEOS Router i

• Arista vEOS, This table lists the start and end markers to use when configuring the EOS, AWS, Cloudwatch, and Cloud HA entities. For each specific entity, the configuration file and the location (file path) of the configuration file are given. File PathMarkersEntity / Configuration File / Use N/A %EOS-STARTUP-CONFIG-START% %EOS-STARTUP-CONFIG-END% Entity: EOS File: EOS CLI configuration file Use: Configure vEOS Router /mnt/flash/awslogs/aws.conf%AWS-CONFIG-START% %AWS-CONFIG-END% Entity: AWS Logs File: aws.conf Use: Set up

• Arista vEOS, 11. (Optional) Create a new IAM role or select an existing IAM role. (This is required to enable AWS services on the instance, for example, AWS CloudWatch logs.) 12. (Optional) To configure advanced details for the instance, scroll down to the bottom of the page and click on the Advanced Details button. The Advanced Details dialog appears. You use the dialog to upload user-data to configure the instance. Do one of the following to configure the instance using user-data: • Choose the Text option, and then copy-and-paste startup-config in the text box. • Attach the configuration as a file by clicking on the file, and then choose the configuration file to be upl

More Instructions:

Arista vEOS Appliance manual 16-11-2022 62

DOWNLOAD

Related Products and Documents (Network Router):

Comparable Devices:

Similar Resources:

• Zte ZXR10 (117 pages) ZXR10Router/EthernetSwitchCommandManual(MPLSVolume)Version4.8.22ZTECORPORATIONZTEPlaza,KejiRoadSouth,Hi-TechIndustrialPark,NanshanDistrict,Shenzhen,P .R.China518057Tel:(86)75526771900Fax:(86)75526770801URL:http://ensupport.zte.com.cnE-mail:[email protected] …

• TP-Link TL-WR810N (2 pages) Determine Operation Mode Congure the RouterStandard Wireless RouterStandard Wireless RouterAccess PointRepeaterClientTo share a wired (Ethernet) connection to wireless devices, when in a hotel room, small office, etc.To transform an existing wired (Ethernet) network to a wireless one.To extend the range of an existing Wi-Fi network.To function as a wirele …

• E-Lins H980 Series (59 pages) H980 Series 3G Router User Manual Industrial‐gradeRFModulebuilt‐in E-Lins Technology Co., Ltd ADDRESS: 1007A, MinTai Bld., Minkang Road, Minzhi Street, Bao'an District, ShenZhen, 518000, China PHONE: +86 (755) 33231620 WEB: http://www.szelins.com …

• D-Link DIR-601 (2 pages) Advanced Performance based on Wireless N TechnologyConnect a notebook or desktop PC to a wireless network Upgrade to a faster wireless network with better home coverage than Wireless G¹ UPGRADE YOUR WIRELESS NETWORKD-Link® introduces the Wireless N 150 Home Router (DIR-601), which delivers high performance end-to-end wireless connectivity based on Wireless …

• Samsung Techwin SPN-10050 (2 pages) ENGLISHSWITCH SETUPSET-UP AND CONFIGURATION PROBLEMS1. WHAT TO DO IF THE POWER LED IS NOT LIT UP?Check if the power adapter is properly connected to a wall socket and the back of the SPN-10050.2. WHAT TO DO IF A CONNECTED DEVICE IS NOT DETECTED?using a different LAN cable.CONNECTING THE POWER ADAPTER Plug the power adapter into a free wall socket, then …

• ADDON NWAR3650 (9 pages) For any further information on ADDON product, please visit our website: www.addon-tech.com 1 Indicator Status Description Power Off The power is off. Green The power is on and the device operates normally. Red The power is self-testing. The device enters the console mode of the boot loader. The self-testing of the power fails if the …

Comments, Questions and Opinions: