Config Cisco Nexus L3 vlan routing IPv6

Config Cisco Nexus L3 vlan routing IPv6

This is a simple how to make a nexus switch L3 routeing and the connected access switches still on L2 switching. If you have a router connected between internet and the router switch. Make shure you have a static route configured to the two vlan network.

Router Switch

no system default interface-vlan autostate (brings up the vlan)

conf t

vlan 10  (creates vlan 10 L2)

name Servers vlan 10

exit

vlan 20 (creates vlan 20 L2)

name Servers vlan 20

exit

feature interface-vlan  (Converts L2 vlan 10 to L3 vlan 10)

interface vlan 10

ipv6 address 2001:db8::/50

no ip redirects

exit

feature interface-vlan  (Converts L2 vlan 20 to L3 vlan 20)

interface vlan 20

ipv6 address 2001db8:0:4000::/50

no ip redirects

exit

interface ethernet 1/1 (creates tagged vlan port to access sw1)

description To Access Sw1

switchport

switchport mode trunk

no shutdown

exit

interface ethernet 1/2 (creates tagegd vlan port to access sw1)

description to Access Sw2

switchport

switchport mode trunk

no shutdown

exit

interface ethernet 1/3 (Creates the link network port)

description to Internet

no switchport

ipv6 address 2001:db8:1000:8000::1/64

no shutdown

exit

ipv6 route ::  2001:db8:1000:8000::2 (makes default router to next hop router)

copy running-config startup-config

Access Sw1

conf t

vlan 10 (creates vlan 10 L2)

name Servers vlan 10

exit

vlan 20 (creates vlan 20 L2)

name Servers vlan 20

exit

interface ethernet 1/1 (creates tagged vlan port to Router switch)

description To Router Switch

switchport

switchport mode trunk

no shutdown

exit

interface ethernet 1/2 (creates untagged vlan 10 port to servers)

description Access vlan 10

switchport

switchport mode access vlan 10

no shutdown

exit

interface ethernet 1/3 (creates untagged vlan 20 port to servers)

description  Access vlan 20

switchport

switchport mode access vlan  20

no shutdown

exit

copy running-config startup-config

Access Sw2

conf t

vlan 10 (creates vlan 10 L2)

name Servers vlan 10

exit

vlan 20 (creates vlan 10 L2)

name Servers vlan 20

exit

interface ethernet 1/1 (creates tagged vlan port to Router switch)

description To Router Switch

switchport

switchport mode trunk

no shutdown

exit

interface ethernet 1/2 (creates untagged vlan 10 port to servers)

description Access vlan 10

switchport

switchport mode access vlan 10

no shutdown

exit

interface ethernet 1/3 (creates untagged vlan 20 port to servers)

description  Access vlan 20

switchport

switchport mode access vlan  20

no shutdown

exit

copy running-config startup-config

Config Cisco Nexus L3 vlan routing IPv4

This is a simple how to make a nexus switch L3 routeing and the connected access switches still on L2 switching. If you have a router connected between internet and the router switch. Make shure you have a static route configured to the two vlan network.

Router Switch

no system default interface-vlan autostate (brings up the vlan)

conf t

vlan 10  (creates vlan 10 L2)

name Servers vlan 10

exit

vlan 20 (creates vlan 20 L2)

name Servers vlan 20

exit

feature interface-vlan  (Converts L2 vlan 10 to L3 vlan 10)

interface vlan 10
ip address 1.1.1.1/24
no ip redirects

exit

feature interface-vlan  (Converts L2 vlan 20 to L3 vlan 20)
interface vlan 20
ip address 2.2.2.2/24
no ip redirects

exit

interface ethernet 1/1 (creates tagged vlan port to access sw1)
  description To Access Sw1
switchport 
switchport mode trunk
  no shutdown

exit

interface ethernet 1/2 (creates tagegd vlan port to access sw1)
  description to Access Sw2
switchport 
switchport mode trunk
no shutdown

exit

interface ethernet 1/3 (Creates the link network port)
description to Internet
no switchport
ip address 3.3.3.1/30
no shutdown

exit

ip route 0.0.0.0 0.0.0.0 3.3.3.2 (makes default router to next hop router)

copy running-config startup-config

Access Sw1

conf t

vlan 10 (creates vlan 10 L2)

name Servers vlan 10

exit

vlan 20 (creates vlan 20 L2)

name Servers vlan 20

exit

interface ethernet 1/1 (creates tagged vlan port to Router switch)
description To Router Switch
switchport 
switchport mode trunk
no shutdown

exit

interface ethernet 1/2 (creates untagged vlan 10 port to servers)
description Access vlan 10
switchport 
switchport mode access vlan 10
no shutdown

exit

interface ethernet 1/3 (creates untagged vlan 20 port to servers)
description  Access vlan 20
switchport 
switchport mode access vlan  20
no shutdown

exit

copy running-config startup-config

Access Sw2

conf t

vlan 10 (creates vlan 10 L2)

name Servers vlan 10

exit

vlan 20 (creates vlan 10 L2)

name Servers vlan 20

exit

interface ethernet 1/1 (creates tagged vlan port to Router switch)
description To Router Switch
switchport 
switchport mode trunk
no shutdown

exit

interface ethernet 1/2 (creates untagged vlan 10 port to servers)
description Access vlan 10
switchport 
switchport mode access vlan 10
no shutdown

exit

interface ethernet 1/3 (creates untagged vlan 20 port to servers)
description  Access vlan 20
switchport 
switchport mode access vlan  20
no shutdown

exit

copy running-config startup-config

pfsense IPsec phase 1 disable rekey

pfsense IPsec VPN tunnel disconnects after 8 hours

I’ve been troubled by the annoying disconnection of the IPsec VPN tunnel on a pfsense firewall. The tunnel disconnects after about 8 hours.

The solution in my case was to enable “Disable rekey” which “Disables renegotiation when a connection is about to expire.“. The setting is found under Phase 1 advanced settings.

Disable rekey setting under Phase 1 Advanced settings