Page locked

This page is currently locked for editing by another user. You have to wait until this user finishes editing or the lock expires.
Currently locked by: 216.73.216.48
Lock expires at: 2025/12/06 06:09 (10 min)
This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
__**ARISTA**__\\
To enable scp on the management vrf:\\
  $ sudo ip netns exec ns-management bash

All the tech support files are periodically saved in /mnt/flash/schedule/tech-support

__SYSLOG MESSAGES__\\
See this [[http://www.arista.com/docs/Manuals/EOS-4.12.1-SysMsgGuide.pdf|link]] for a complete list of syslog messages.\\
Terminal console: always on\\
Terminal monitor:\\
  term mon
  term no mon
  sh terminal ! To see which terminal I am on
  
To change the logging level: \\
For the console:
  IOU1(config)#logging console ?
For the terminal (tty):\\
  IOU1(config)#logging monitor 

Logging to your terminal for debugging purposes. See this [[http://etherealmind.com/ios-terminal-monitor-on-off-logging-to-your-terminal|link]]. 

__CLI__
  bash
To see the SFP types - transceivers:

  show interfaces phy detail  ! long reply
  show transceiver status interface Ethernet14/1  ! specific reply
  show idprom transceiver

Troubleshooting with Arista switches
[[https://www.edge-cloud.net/2013/06/network-troubleshooting-via-arista-eos-shell/|link ]]


ARISTA SCRIPTING

[[https://eos.arista.com/find-the-next-free-vlan-id/|find-the-next-free-vlan-id]]\\
[[https://eos.arista.com/introduction-to-managing-eos-devices-annex-b-eos-tips-for-power-users/|introduction-to-managing-eos-devices-annex-b-eos-tips-for-power-user]]

This is to list the IP addresses and have them ordered (-n order numbers , -t . user dot as separator -k i i order first by the i digits)

  sh ip int brie | awk '{print $2}' | sort -n -t . -k 1,1 -k 2,2 -k 3,3 -k 4,4

----
__ARISTA MLAG__\\
  sh mlag
  sh mlag interfaces
  show mlag config-sanity
  
\\
  * [[https://community.cisco.com/t5/switching/nexus-vpc-to-arista-mlag/td-p/2709929]] 
  * [[https://eos.arista.com/mlag-basic-configuration/]]
  * [[https://eos.arista.com/forum/error-mlag-config-sanity/]]

----
**FIRST BOOT**\\
  localhost login: admin # and no password
  en
  zerotouch disable # the device reboots
  

----

EOS UPGRADE:\\
Arista firmware upgrade (not Aboot boot-loader for the switch (which is really a Linux system))
  scp  EOS-4.18.2F.swi admin@192.168.160.102://mnt/flash/EOS-4.18.2F.swi 
  Or directly with WinSCP. Use H: as local drive
  dir flash:
  verify /md5 flash:EOS-4.25.5.1M.swi
  conf t
  boot system flash:EOS-4.25.5.1M.swi   ! no need to save after ths
  reload now



----

ARISTA SHELL (LINUX):\\
[[https://eos.arista.com/traffic-generator-on-arista/#3_Generating_Multicast_traffic]]

  en
  bash 
  sudo -i
  tcpdump 
  iperf..
  mz..

__AUTOMATION__\\

__ANSIBLE__\\
[[https://52.28.112.194/doku.php?id=network_stuff:arista:api|Arista_Ansible_in_a_different_section]]


----

SWITCHES LINE:\\
  * 7280R : 32 x 100G QSFP 
    * Universal leaf leaf. Fixed configuration. Up to 100G. ld5
  * 7508R3: modular
    * For cloud design and datacenter
    * 400G OSFP or QSFP-DD 
  * 7130 : L1 switches with optional FPGAs. As low latency as 4ns.
  * 7150 : ultra low latency (400ns)
  * 7160-48TC6
    * 48 x 10GBASE-T, 6 x 100G QSFP


Features:

  * Signal regeneration
  * Port mirroring
  * Dynamic patching/link management
  * Ad-hoc tapping without rewiring
  * Layer 1+ statistics on every link
  * Media conversion
  * Telemetry and more
  * Cut-through technology: We have plain cut-through (6bytes(dmac) enough) cut-through fragment free (64B, not in use anymore). Cut-thru switches can’t check CRC, they will just cause retransmission of bad packets. If the switch uses single-stage crossbar fabric with Virtual Output Queue (VOQ) cut-thru  might not be viable. 


----
TCPDUMP\\
[[https://aristanetworks.force.com/AristaCommunity/s/article/using-tcpdump-for-troubleshooting|External Link]]
  Arista(config)#bash tcpdump -nevvvi any '((port 22) and (host 172.22.26.209))'
More examples [[https://softbackbone.duckdns.org/doku.php?id=network_stuff:tcpdump&s[]=tcpdumpm|here]]
  

----

__CLOUDVISION (automation)__\\
Streamed telemetry.\\
  * Internally Arista is Push/Subscribe model (not polling, polling is bad!). Sysdb.
  * State streaming. Events to systemd


----

ARISTA VRRP (ALTERNATIVE)
\\
[[https://www.arista.com/en/um-eos/eos-varp]] aka Anycast gateway.
\\
Same MAC in both routers. First one picking up the packet will route it anyway.


----

BGP COMMUNITIES

  ! R1
  route-map COMMUNITY permit 10
  set community 100:999   # erases previous comms. use 'add'
  router bgp 100
  network 94.70.40.0 mask 255.255.255.0 route-map COMMUNITY
  neighbor 80.50.0.2 send-community    # comms. are transitive but we need this
  ! R2
  ip community-list 10 permit 100:999    # when 'receiving' a community we need to 'define it' beforehand
  route-map R1_IN permit 10
  match community 10
  set local-preference 150    # we can also delete parts of the comm. with set community-list <comm> delete
  router bgp 200
  neighbor 80.50.0.1 route-map R1_IN in
  !
  sh bgp neighbors 10.1.0.14 received-routes detail
  

----


__ARISTA REST-API PYEAPI__
\\
  * [[https://saidvandeklundert.net/2019-08-06-arista-eapi-using-pyeapi/]]
  * [[https://pyeapi.readthedocs.io/en/latest/quickstart.html#connect-to-a-node]]

Using https gives SSLv3 erros with python3.10+. This is to enable higher ciphers and add the certificates: [[https://www.arista.com/en/um-eos/eos-control-plane-security#xx1017549|Link]]
\\
The quick and dirty solution is to use port :80
  ! In the arista side:
  management api http-commands
    protocol http
  username restapi privilege 15 secret sha512 $6$MzAgbbNU..
  !
  In the 'python' side:
    import pyeapi
  import pprint
  eapi_param = pyeapi.client.connect(
      transport='http',
      host='192.168.121.101',
      username='restapi',
      password='restapi',
      port=80,
  )
  eapi = pyeapi.client.Node(eapi_param)
  version_info = eapi.run_commands(['show version',])
  pprint.pprint(version_info)
dokucama

User Tools

Site Tools

Page locked

Page Tools
