Lub hom phiaj ntawm tsab xov xwm no yog kom yooj yim rau kev teeb tsa ntawm DHCP kev pabcuam rau VXLAN BGP EVPN thiab DFA ntaub siv Microsoft Windows Server 2016/2019.
Hauv cov ntaub ntawv raug cai, DHCP kev pabcuam raws li Microsoft Windows Server 2012 rau cov ntaub yog teeb tsa raws li SuperScope uas muaj lub pas dej Loopback (qhov tseem ceeb ntawm lub pas dej no yog kev cais tawm ntawm txhua tus IP chaw nyob ntawm lub pas dej ntawm pas dej (tsis suav IP chaw nyob = pas dej ua ke)) thiab pas dej ua ke rau muab IP chaw nyob rau tes hauj lwm tiag (ntawm no yog qhov tseem ceeb - txoj cai raug teeb tsa - nyob rau hauv uas DHCP Relay Circuit ID yog lim thiab qhov no DHCP relay Circuit ID muaj VNI rau lub network, piv txwv li rau lwm lub pas dej no DHCP Relay Circuit ID yuav txawv me ntsis).
To configure DHCP on Windows server.
1. Create a super scope. Within the super scope, create scope B, S1, S2, S3, β¦, Sn for the subnet B and the subnets for each segment.
2. In scope B, specify the 'Exclusion Range' to be the entire address range (so that the offered address range must not be from this scope).
3. For every segment scope Si, specify a policy that matches on Agent Circuit ID with value of '0108000600XXXXXX', where '0108000600' is a fixed value for all segments, the 6 numbers "XXXXXX" is the segment ID value in hexadecimal. Also ensure to check the Append wildcard(*) check box.
4. Set the policy address range to the entire range of the scope.Kab lus no muaj cov lus teb rau cov lus nug hauv qab no:
Txheem
-
- ( & )
-
-
Taw qhia
Qhov no luv luv sau tag nrho cov ntaub ntawv thawj zaug: Cov lus qhia rau kev teeb tsa cov cuab yeej siv network, RFCs siv hauv DHCP pob ntawv hauv eVPN cov chaw tsim khoom, kev hloov pauv ntawm DHCP server chaw ntawm Microsoft Windows Server 2012 hauv Cisco cov ntaub ntawv yog muab rau siv. Ntxiv rau cov ntaub ntawv luv luv txog Superscope thiab Txoj Cai hauv DHCP kev pabcuam ntawm Microsoft Windows Servers.
Yuav ua li cas teeb tsa DHCP Relay ntawm VXLAN BGP EVPN, DFA ntaub
Configuring DHCP Relay ntawm VXLAN BGP EVPN ntaub tsis yog lub ntsiab lus tseem ceeb ntawm tsab xov xwm no, vim nws yooj yim heev. Kuv muab cov ntawv txuas mus rau cov ntaub ntawv thiab ib qho spoiler ntawm kev teeb tsa ntawm cov khoom siv network.
Piv txwv ntawm kev teeb tsa DHCP Relay ntawm Nexus 9000V v9.2(3)
service dhcp
ip dhcp relay
ip dhcp relay information option
ip dhcp relay information option vpn
interface loopback10
vrf member VRF1
ip address 10.120.0.1/32 tag 1234567
interface Vlan12
no shutdown
vrf member VRF1
no ip redirects
ip address 10.120.251.1/24 tag 1234567
no ipv6 redirects
fabric forwarding mode anycast-gateway
ip dhcp relay address 10.0.0.5
ip dhcp relay source-interface loopback10
RFCs uas tau siv hauv kev ua haujlwm ntawm DHCP Relay kev pabcuam hauv VXLAN BGP EVPN fabrics
RFC#6607: Sub-option 151(0x97) - Virtual Subnet Selection
β’ Sub-option 151(0x97) - Virtual Subnet Selection (Defined in RFC#6607)
Used to convey VRF related information to the DHCP server in an MPLS-VPN and VXLAN EVPN multi-tenant environment.Lub "npe" ntawm VRF uas tus neeg siv khoom nyob tau kis mus.
RFC#5107: Sub-option 11(0xb) - Server ID Override
β’ Sub-option 11(0xb) - Server ID Override (Defined in RFC#5107.)
The server identifier (server ID) override sub-option allows the DHCP relay agent to specify a new value for the server ID option, which is inserted by the DHCP server in the reply packet. This sub-option allows the DHCP relay agent to act as the actual DHCP server such that the renew requests will come to the relay agent rather than the DHCP server directly. The server ID override sub-option contains the incoming interface IP address, which is the IP address on the relay agent that is accessible from the client. Using this information, the DHCP client sends all renew and release request packets to the relay agent. The relay agent adds all of the appropriate sub-options and then forwards the renew and release request packets to the original DHCP server. For this function, Ciscoβs proprietary implementation is sub-option 152(0x98). You can use the ip dhcp relay sub-option type cisco command to manage the function.Qhov kev xaiv no yog siv los xyuas kom meej tias tus neeg siv yuav xa daim ntawv thov rov ua dua qhov chaw nyob rau qhov chaw nyob IP siv nyob rau hauv qhov kev xaiv no. (Ntawm Cisco VXLAN BGP, EVPN yog tus neeg siv khoom qhov chaw nyob Anycast.)
RFC#3527: Sub-option 5(0x5) - Link Selection
Sub-option 5(0x5) - Link Selection (Defined in RFC#3527.)
The link selection sub-option provides a mechanism to separate the subnet/link on which the DHCP client resides from the gateway address (giaddr), which can be used to communicate with the relay agent by the DHCP server. The relay agent will set the sub-option to the correct subscriber subnet and the DHCP server will use that value to assign an IP address rather than the giaddr value. The relay agent will set the giaddr to its own IP address so that DHCP messages are able to be forwarded over the network. For this function, Ciscoβs proprietary implementation is sub-option 150(0x96). You can use the ip dhcp relay sub-option type ciscocommand to manage the function.Chaw nyob ntawm lub network uas tus neeg siv xav tau tus IP chaw nyob.
Evolution ntawm Cisco cov ntaub ntawv hais txog kev teeb tsa DHCP ntawm Microsoft Windows Server 2012
Kuv suav nrog ntu no vim tias muaj qhov zoo sib xws ntawm tus neeg muag khoom:
Cov ntaub ntawv tsuas yog qhia yuav ua li cas teeb tsa DHCP Relay ntawm cov khoom siv network.
Lwm tsab xov xwm tau siv los teeb tsa DHCP ntawm Windows Server 2012:
Kab lus no qhia tias txhua lub network / VNI xav tau nws tus kheej SuperScope pob thiab nws tus kheej cov chaw nyob Loopback:
If multiple DHCP Scopes are required for multiple subnets, you need to create one LoopbackX per subnet/vlan on all LEAFS and create a superscope with a loopbackX range scope and actual client IP subnet scope per vlan.
Ntxiv Windows 2012 Server nqis rau cov ntaub ntawv rau kev teeb tsa cov khoom siv network. Rau txhua qhov chaw nyob hauv pas dej, yuav tsum muaj ib qho SuperScope rau ib qhov chaw khaws ntaub ntawv thiab qhov SuperScope no yog ciam teb ntawm cov ntaub ntawv chaw:
Create Superscope for all scopes you want to use for Option 82-based policies.
Note
The Superscope should combine all scopes and act as the administrative boundary.
Txhua yam yog piav qhia succinctly:
Let us assume the switch is using the address from subnet B (it can be the backbone subnet, management subnet, or any customer designated subnet for this purpose) to communicate with the Windows DHCP server. In DFA we have subnets S1, S2, S3, β¦, Sn for segment s1, s2, s3, β¦, sn.
To configure DHCP on Windows server.
1. Create a super scope. Within the super scope, create scope B, S1, S2, S3, β¦, Sn for the subnet B and the subnets for each segment.
2. In scope B, specify the 'Exclusion Range' to be the entire address range (so that the offered address range must not be from this scope).
3. For every segment scope Si, specify a policy that matches on Agent Circuit ID with value of '0108000600XXXXXX', where '0108000600' is a fixed value for all segments, the 6 numbers "XXXXXX" is the segment ID value in hexadecimal. Also ensure to check the Append wildcard(*) check box.
4. Set the policy address range to the entire range of the scope.
DHCP hauv Microsoft Windows Server (superscope & txoj cai)
Superscope is an administrative feature of a DHCP server that can be used to group multiple scopes as a single administrative entity. Superscope allows a DHCP server to provide leases from more than one scope to clients on a single physical network. Scopes added to a superscope are called member scopes.
Dab tsi yog SuperScope - nws yog qhov ua haujlwm uas tso cai rau koj los ua ke ntau lub pas dej ntawm IP chaw nyob rau hauv ib chav tswj hwm. Tshaj tawm rau cov neeg siv ntawm tib lub cev network (hauv tib VLAN) IP chaw nyob los ntawm ntau lub pas dej. Yog tias qhov kev thov tuaj rau lub pas dej ntawm qhov chaw nyob ua ib feem ntawm SuperScope, ces tus neeg siv khoom tuaj yeem muab qhov chaw nyob los ntawm lwm qhov Scope suav nrog hauv SuperScope.
The DHCP Server role in Windows Server 2012 introduces a new feature that allows you to create IPv4 policies that specify custom IP address and option assignments for DHCP clients based on a set of conditions.
The policy based assignment (PBA) feature allows you to group DHCP clients by specific attributes based on fields contained in the DHCP client request packet. PBA enables targeted administration and greater control of the configuration parameters delivered to network devices with DHCP.
Txoj cai - tso cai rau koj muab IP chaw nyob rau cov neeg siv nyob ntawm seb hom neeg siv lossis qhov ntsuas. Cisco engineers siv cov cai hauv Windows Server 2012 los lim los ntawm VNI (Virtual Network Identifier).
Lub ntsiab qhov tseem ceeb
Tshooj lus no muaj cov txiaj ntsig ntawm kev tshawb fawb, vim li cas nws tsis txhawb nqa, nws ua haujlwm li cas (logic), dab tsi tshiab thiab qhov tshiab no yuav pab peb li cas.
Vim li cas Microsoft Windows Server 2000/2003/2008 tsis txaus siab?
Microsoft Windows Server 2008 thiab yav dhau los versions tsis ua kev xaiv 82 thiab cov ntawv xa rov qab yog xa tsis muaj kev xaiv 82.
- Qhov kev thov los ntawm tus neeg siv khoom raug xa mus rau Tshaj Tawm (DHCP Discover).
- Cov khoom siv (Nexus) xa cov pob ntawv mus rau DHCP server (DHCP Discover + Option 82).
- DHCP Server tau txais cov pob ntawv, ua haujlwm, xa rov qab, tab sis tsis muaj kev xaiv 82. (DHCP Offer - tsis muaj kev xaiv 82)
- Cov khoom siv (Nexus) tau txais ib pob ntawv los ntawm DHCP server. (DHCP Offer) Tab sis tsis xa cov pob ntawv no mus rau tus neeg siv kawg.
Sniffer cov ntaub ntawv - ntawm Windows Server 2008 thiab ntawm DHCP tus neeg siv khoomWindows Server 2008 tau txais kev thov los ntawm cov khoom siv network. (Kev xaiv 82 muaj nyob hauv daim ntawv teev npe)
Windows Server 2008 xa cov lus teb rau cov khoom siv network. (Kev xaiv 82 tsis tau teev tseg raws li kev xaiv hauv pob)
Kev thov los ntawm tus neeg siv khoom - DHCP Discover yog tam sim no thiab DHCP Kev Muab yog ploj lawm
Kev txheeb cais ntawm cov khoom siv network:
NEXUS-9000V-SW-1# show ip dhcp relay statistics
----------------------------------------------------------------------
Message Type Rx Tx Drops
----------------------------------------------------------------------
Discover 8 8 0
Offer 8 8 0
Request(*) 0 0 0
Ack 0 0 0
Release(*) 0 0 0
Decline 0 0 0
Inform(*) 0 0 0
Nack 0 0 0
----------------------------------------------------------------------
Total 16 16 0
----------------------------------------------------------------------
DHCP L3 FWD:
Total Packets Received : 0
Total Packets Forwarded : 0
Total Packets Dropped : 0
Non DHCP:
Total Packets Received : 0
Total Packets Forwarded : 0
Total Packets Dropped : 0
DROP:
DHCP Relay not enabled : 0
Invalid DHCP message type : 0
Interface error : 0
Tx failure towards server : 0
Tx failure towards client : 0
Unknown output interface : 0
Unknown vrf or interface for server : 0
Max hops exceeded : 0
Option 82 validation failed : 0
Packet Malformed : 0
Relay Trusted port not configured : 0
DHCP Request dropped on MCT : 0
* - These counters will show correct value when switch
receives DHCP request packet with destination ip as broadcast
address. If request is unicast it will be HW switched
NEXUS-9000V-SW-1#
Vim li cas kev teeb tsa thiaj li nyuaj hauv Microsoft Windows Server 2012?
Microsoft Windows Server 2012 tseem tsis tau txhawb nqa RFC#3527 (Kev xaiv 82 Sub-xaiv 5(0x5) - Txuas Xaiv)
Tab sis Txoj Cai Kev Ua Haujlwm tau ua tiav lawm.
Nws ua haujlwm li cas:
- Microsoft Windows Server 2012 muaj lub pas dej loj (SuperScope) uas muaj Loopback chaw nyob thiab pas dej rau cov tes hauj lwm tiag.
- Kev xaiv ntawm lub pas dej ua ke rau kev tshaj tawm IP chaw nyob poob rau hauv SuperScope, txij li cov lus teb los ntawm DHCP Relay nrog Loopback Source chaw nyob suav nrog hauv SuperScope.
- Siv Txoj Cai, qhov kev thov xaiv los ntawm Superscope uas cov tswv cuab muaj peev xwm uas nws VNI muaj nyob rau hauv Option 82 Suboption 1 Agent Circuit ID. ("0108000600"+ 24 ntsis VNI + 24 khoom uas nws qhov tseem ceeb tsis paub rau kuv, tab sis tus sniffer qhia qhov tseem ceeb ntawm 0 hauv daim teb no.)
Kev teeb tsa yooj yim li cas hauv Microsoft Windows Server 2016/2019?
Microsoft Windows Server 2016 siv RFC#3527 functionality. Ntawd yog, Windows Server 2016 tuaj yeem paub qhov tseeb network los ntawm Option 82 Sub-option 5(0x5) - Txuas Xaiv tus cwj pwm
Peb cov lus nug tam sim ntawd tshwm sim:
- Peb puas tuaj yeem ua yam tsis muaj Superscope?
- Peb puas tuaj yeem ua yam tsis muaj Txoj Cai thiab hloov VNI rau daim ntawv hexadecimal?
- Peb puas tuaj yeem ua yam tsis muaj Scope rau Loopback DHCP Chaw nyob?
Q. Peb puas tuaj yeem ua yam tsis muaj Superscope?
A. Yog lawm, muaj peev xwm tsim tau tam sim ntawd hauv thaj tsam ntawm IPv4 chaw nyob.
Q. Peb puas tuaj yeem ua yam tsis muaj Txoj Cai thiab hloov VNI rau daim ntawv hexadecimal?
A. Yog lawm, kev xaiv network yog raws li Kev Xaiv 82 Suboption 0x5,
Q. Peb puas tuaj yeem ua yam tsis muaj Scope rau Loopback DHCP Chaw nyob?
A. Tsis yog peb ua tsis tau. Vim tias Microsoft Windows Server 2016/2019 muaj kev tiv thaiv tsis zoo DHCP thov. Ntawd yog, txhua qhov kev thov los ntawm qhov chaw nyob uas tsis nyob hauv DHCP server pas yog suav tias yog qhov phem.
Note
All relay agent IP addresses (GIADDR) must be part of an active DHCP scope IP address range. Any GIADDR outside of the DHCP scope IP address ranges is considered a rogue relay and Windows DHCP Server will not acknowledge DHCP client requests from those relay agents.
A special scope can be created to "authorize" relay agents. Create a scope with the GIADDR (or multiple if the GIADDR's are sequential IP addresses), exclude the GIADDR address(es) from distribution, and then activate the scope. This will authorize the relay agents while preventing the GIADDR addresses from being assigned.Cov. Txhawm rau teeb tsa DHCP pas dej ua ke rau VXLAN BGP EVPN Hoobkas ntawm Microsoft Windows Server 2016/2019, koj tsuas yog xav tau:
- Tsim ib lub pas dej rau qhov chaw nyob Relay.
- Tsim ib lub pas dej ua ke rau cov neeg siv khoom network
Dab tsi yog qhov tsim nyog (tab sis tuaj yeem teeb tsa thiab nws yuav ua haujlwm thiab tsis cuam tshuam rau kev ua haujlwm):
- Tsim Txoj Cai
- Tsim SuperScope
Piv Txwv:Piv txwv ntawm kev teeb tsa DHCP server (muaj 2 tus neeg siv DHCP tiag tiag - cov neeg siv khoom txuas nrog VXLAN ntaub)
Piv txwv ntawm kev teeb tsa tus neeg siv pas dej ua ke:
Ib qho piv txwv ntawm kev teeb tsa tus neeg siv lub pas dej (txoj cai raug xaiv - los ua pov thawj tias cov cai tsis raug siv rau kev ua haujlwm raug ntawm pas dej):
Ib qho piv txwv ntawm kev teeb tsa lub pas dej ua ke rau qhov chaw nyob DHCP Relay (qhov ntau ntawm qhov chaw nyob rau kev tshaj tawm tag nrho sib haum rau kev cais tawm ntawm qhov chaw nyob):
Teeb tsa DHCP kev pabcuam ntawm Microsoft Windows Server 2019
Configuring ib pas dej ua ke rau Loopback chaw nyob (qhov chaw) rau DHCP Relay.
Peb tsim lub pas dej tshiab (Scope) hauv qhov chaw IPv4.
Pas creation wizard. "Tom ntej>"
Configure lub pas dej ua ke lub npe thiab cov lus piav qhia ntawm lub pas dej.
Teeb qhov ntau ntawm IP chaw nyob rau Loopback thiab lub npog ntsej muag rau lub pas dej.
Ntxiv kev zam. Qhov kev cais tawm yuav tsum ua raws nraim li lub pas dej ua ke.
Lub sijhawm xauj tsev. "Tom ntej>"
Lus Nug: Koj puas yuav teeb tsa DHCP kev xaiv tam sim no (DNS, WINS, Gateway, Domain) lossis koj puas yuav ua nws tom qab. Nws yuav nrawm dua los teb tsis yog, thiab tom qab ntawd qhib lub pas dej ua ke. Los yog mus rau qhov kawg yam tsis tau sau cov ntaub ntawv thiab qhib lub pas dej thaum kawg ntawm tus wizard.
Peb paub meej tias cov kev xaiv tsis tau teeb tsa thiab lub pas dej tsis qhib. "Tiav"
Peb qhib lub pas dej ua ke manually. - Xaiv Scope thiab hauv cov ntawv qhia zaub mov - xaiv "Qhib".
Peb tsim lub pas dej ua ke rau cov neeg siv / servers.
Peb tsim lub pas dej tshiab.
Pas creation wizard. "Tom ntej>"
Configure lub pas dej ua ke lub npe thiab cov lus piav qhia ntawm lub pas dej.
Teeb qhov ntau ntawm IP chaw nyob rau Loopback thiab lub npog ntsej muag rau lub pas dej.
Ntxiv kev zam. (Tsis muaj kev zam los ntawm lub neej ntawd) "Tom ntej>"
Lub sijhawm xauj tsev. "Tom ntej>"
Lus Nug: Koj puas yuav teeb tsa DHCP kev xaiv tam sim no (DNS, WINS, Gateway, Domain) lossis koj puas yuav ua nws tom qab. Cia peb teeb tsa tam sim no.
Configure lub default gateway chaw nyob.
Peb teeb tsa qhov chaw nyob thiab DNS server.
Configuring IP chaw nyob ntawm WINS servers.
Ua kom muaj Scope.
Lub pas dej ua ke yog configured. "Tiav"
xaus
Siv Windows Server 2016/2019 txo qhov nyuaj ntawm kev teeb tsa DHCP server rau VXLAN ntaub (lossis lwm yam ntaub). (Nws tsis tas yuav hloov cov txuas tshwj xeeb rau IT cov kws tshaj lij: Network / Tus Neeg Saib Xyuas Circuit ID txhawm rau sau npe cov lim dej.)
Yuav qhov kev teeb tsa rau Windows Server 2012 puas ua haujlwm ntawm cov servers tshiab 2016/2019 - yog nws yuav ua haujlwm.
Cov ntaub ntawv no muaj cov ntaub ntawv xa mus rau 2 versions: 7.X thiab 9.3. Qhov no yog vim qhov tseeb tias version 7.0(3)I7(7) yog Cisco Pom Zoo tso tawm, thiab version 9.3 yog qhov tshiab tshaj plaws (txawm tias txhawb Multicast ntawm VXLAN Multisite).
Cov npe ntawm qhov chaw
Tau qhov twg los: www.hab.com