Wired Intelligent Edge

 View Only
Back to discussions
Expand all | Collapse all

Need some clarification on Aruba VSX for configuring secondary Ip in vlan

This thread has been viewed 11 times

  • 1.  Need some clarification on Aruba VSX for configuring secondary Ip in vlan

    Posted Jun 09, 2025 12:55 AM
    Team
    I have configured secondary Ip same Ip address core 1 and core 2.
    Kindly confirm this is correct or wrong, Please find the below details.
    VSX-CORE-1
     
    interface vlan 1
        vsx-sync active-gateways
        ip mtu 9100
        ip address 192.168.10.2/24
        ip address 192.168.100.10/24 secondary
        ip address 192.168.200.10/24 secondary
        ip address 192.168.300.10/24 secondary
        active-gateway ip mac 12:01:00:00:01:00
        active-gateway ip 192.168.10.1
     
     
    VSX-CORE-2
     
    interface vlan 1
        vsx-sync active-gateways
        ip mtu 9100
        ip address 192.168.10.3/24
        ip address 192.168.100.10/24 secondary
        ip address 192.168.200.10/24 secondary
        ip address 192.168.300.10/24 secondary
        active-gateway ip mac 12:01:00:00:01:00
        active-gateway ip 192.168.10.1
    Regards 
    Chandan kp


  • 2.  RE: Need some clarification on Aruba VSX for configuring secondary Ip in vlan

    Posted Jun 09, 2025 11:56 PM

    you can refer to IP multi-netting over VSX



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------

    Original Message


  • 3.  RE: Need some clarification on Aruba VSX for configuring secondary Ip in vlan

    Posted Jun 10, 2025 03:52 AM

    Hi! I chime in with a doubt risen reading the VSX Multinetting over VSX's shared page, it's written:

    "Make sure that you configure an IP address for either the primary or secondary VSX switch on the SVI with the same subnet."

    shouldn't be instead (I guess, reasoning with typical simmetry in mind which is an usual charateristic about VSX Cluster configurations):

    "Make sure that you configure an IP address for both the primary and secondary VSX switch on the SVI with the same subnet."

    So:

    == VSX Primary ==

    interface vlan 1
    vsx-sync active-gateways
    ip mtu 9100
    ip address 192.168.10.2/24
    ip address 192.168.100.1/24 secondary <--- SVI IP 1st Multinet on VSX Primary
    ip address 192.168.200.1/24 secondary <--- SVI IP 2nd Multinet on VSX Primary
    ip address 192.168.300.1/24 secondary <--- SVI IP 3rd Multinet on VSX Primary
    active-gateway ip mac 12:01:00:00:01:00
    active-gateway ip 192.168.10.1
    active-gateway ip 192.168.100.1 <--------- AG IP 1st Multinet on VSX Primary (shared and synchronized between VSX members)
    active-gateway ip 192.168.200.1 <--------- AG IP 2nd Multinet on VSX Primary (shared and synchronized between VSX members)
    active-gateway ip 192.168.300.1 <--------- AG IP 3rd Multinet on VSX Primary (shared and synchronized between VSX members)

    == VSX Secondary ==

    As per documentation ("configure an IP address for either the primary or secondary VSX switch on the SVI with the same subnet"), having set SVI IP addresses of variuos multinets on the VSX Primary then doing the same on VSX Secondary is apparently not necessary (it's either/or not both/and) so it's only required to add AG IP addresses for those multinets to complete the multinet configuration on the VLAN 1 interface.

    interface vlan 1
    ip mtu 9100
    ip address 192.168.10.3/24
    active-gateway ip mac 12:01:00:00:01:00
    active-gateway ip 192.168.10.1
    active-gateway ip 192.168.100.1 <--------- AG IP 1st Multinet on VSX Secondary (shared and synchronized between VSX members)
    active-gateway ip 192.168.200.1 <--------- AG IP 2nd Multinet on VSX Secondary (shared and synchronized between VSX members)
    active-gateway ip 192.168.300.1 <--------- AG IP 3rd Multinet on VSX Secondary (shared and synchronized between VSX members)

    == VSX Secondary (alternative) ==

    As per my uneducated guess (I removed the vsx-sync active-gateways setting because that is set on VSX Primary and then propagates to VSX Secondary) woulnd't be this?

    interface vlan 1
    ip mtu 9100
    ip address 192.168.10.3/24
    ip address 192.168.100.3/24 secondary <--- SVI IP 1st Multinet on VSX Secondary
    ip address 192.168.200.3/24 secondary <--- SVI IP 2nd Multinet on VSX Secondary
    ip address 192.168.300.3/24 secondary <--- SVI IP 3rd Multinet on VSX Secondary
    active-gateway ip mac 12:01:00:00:01:00
    active-gateway ip 192.168.10.1
    active-gateway ip 192.168.100.1 <--------- AG IP 1st Multinet on VSX Secondary (shared and synchronized between VSX members)
    active-gateway ip 192.168.200.1 <--------- AG IP 2nd Multinet on VSX Secondary (shared and synchronized between VSX members)
    active-gateway ip 192.168.300.1 <--------- AG IP 3rd Multinet on VSX Secondary (shared and synchronized between VSX members)


    Original Message


Related Content