NEXUS 5548UP VLAN+HSRP не работает DHCP Relay, DHCP Snooping

[Gungster]

В общем собираю сеть на периметре Mikrotik RB1100AHx4 (192.168.210.1) на нем поднят DHCP сервер для всех VLAN.
К нему через LACP цепляются два Nexus 5548UP с двумя С2248 на нексусах FEX, vPC, VLAN с HSRP, DHCP Relay, DHCP Snooping.
Конфиг NEXUS1
 

Скрытый текст

no feature telnet
feature interface-vlan
feature lacp
feature vpc
feature fex
feature dhcp
feature vtp
feature hsrp
!
service unsupported-transceiver
service dhcp
ip dhcp snooping
ip dhcp relay
ip dhcp relay information option
ip dhcp smart-relay global
ip dhcp snooping vlan 2-6,10-11,15,100-102
!
ip access-list 110
deny   ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.6.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.10.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.11.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.15.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.100.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.101.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.102.0 0.0.0.255
permit ip 192.168.3.0 0.0.0.255 host 192.168.210.1
deny   ip 192.168.11.0 0.0.0.255 192.168.0.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.2.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.3.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.4.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.5.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.6.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.10.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.15.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.100.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.11.0 0.0.0.255 host 192.168.210.1
permit ip any any
exit
 !#############################################################################
system jumbomtu 9216
policy-map type network-qos jumbo
 class type network-qos class-default
   mtu 9216
   multicast-optimize
system qos
  service-policy type network-qos jumbo
!#############################################################################
!################                        QoS Configuration Start                          ####################
!#############################################################################
class-map type qos match-any Voice  
  match dscp 40,46  
class-map type qos match-all Scavenger  
  match dscp 8  
class-map type qos match-all CriticalData  
  match dscp 18  
class-map type qos match-all voice-global  
  match cos 5  
class-map type qos match-all critical-global  
  match cos 6  
class-map type qos match-all scavenger-global  
  match cos 1  
!  
class-map type queuing class-fcoe  
  match qos-group 1  
class-map type queuing queueVoice  
  match qos-group 5  
class-map type queuing queueScavenger  
  match qos-group 4  
class-map type queuing class-all-flood  
  match qos-group 2  
class-map type queuing queueCriticalData  
  match qos-group 3  
class-map type queuing class-ip-multicast  
  match qos-group 2  
!  
policy-map type qos classify-per-port  
  class class-ip-multicast  
    set qos-group 2  
  class Voice  
    set qos-group 5  
  class CriticalData  
    set qos-group 3  
  class Scavenger  
    set qos-group 4  
!  
policy-map type qos classify-5000-global  
  class voice-global  
    set qos-group 5  
  class critical-global  
    set qos-group 3  
  class scavenger-global  
    set qos-group 4  
!  
policy-map type queuing globalqueuingpolicy  
  class type queuing queueCriticalData  
    bandwidth percent 6  
  class type queuing queueScavenger  
    bandwidth percent 1  
  class type queuing queueVoice  
    bandwidth percent 20  
  class type queuing class-default  
    bandwidth percent 10  
!  
class-map type network-qos nqVoice  
  match qos-group 5  
class-map type network-qos class-fcoe  
  match qos-group 1  
class-map type network-qos nqScavenger  
  match qos-group 4  
class-map type network-qos nqCriticalData  
  match qos-group 3  
class-map type network-qos class-all-flood  
  match qos-group 2  
class-map type network-qos class-ip-multicast  
  match qos-group 2  
!  
policy-map type network-qos globalnetworkpolicy
  class type network-qos class-ip-multicast  
    multicast-optimize  
  class type network-qos nqCriticalData  
    set cos 6  
  class type network-qos nqScavenger  
    set cos 1    
  class type network-qos nqVoice  
    set cos 5  
  class type network-qos class-default  
!  
system qos  
  service-policy type qos input classify-5000-global  
  service-policy type network-qos globalnetworkpolicy  
  service-policy type queuing output globalqueuingpolicy 
  service-policy type queuing input globalqueuingpolicy  
!  
!#############################################################################
!################                        QoS Configuration End                           ####################
!#############################################################################
!  
ntp source-interface  Vlan210
ntp server 192.168.210.1
clock timezone YEKT 5 0
hostname CORE-N5K-1
no ip domain-lookup
ip domain-name cisco.local
ip name-server 192.168.210.1
vtp mode transparent
 !#############################################################################
interface mgmt0
 vrf member management
 ip address 10.1.1.1/24
exit
ip route 0.0.0.0/0 192.168.210.1
!#############################################################################
!################                        Configure Spanning-tree                         ####################
!#############################################################################
spanning-tree mode rapid-pvst
spanning-tree pathcost method short
no spanning-tree port type edge default
no spanning-tree port type network default
spanning-tree bridge assurance
no spanning-tree loopguard default
spanning-tree port type edge bpduguard default
spanning-tree port type edge bpdufilter default
spanning-tree vlan 2,3,4,5,6,10,11,15,100,101,102,210 priority 0

!############################################################################
!######################                       Configure VLANs                     #####################
!############################################################################
vlan 2
name Mobile_LAN
!############################################################################
interface Vlan2
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.2.251/24
 hsrp version 2
hsrp 2
 preempt
 priority 180
 ip 192.168.2.254
 
!############################################################################
vlan 3
 name Guest_LAN
 !############################################################################
interface Vlan3
no shutdown 
no ip arp gratuitous hsrp duplicate
ip dhcp relay address 192.168.210.1
ip access-group 110 in
no ip redirects
ip address 192.168.3.251/24
hsrp version 2
hsrp 3
preempt
priority 180
ip 192.168.3.254
 !############################################################################
vlan 4
 name APC_LAN
!#############################################################################
interface Vlan4
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.4.251/24
 hsrp version 2
 hsrp 4
 preempt
 priority 180
 ip 192.168.4.254
!#############################################################################
vlan 5
 name SECURITY
!#############################################################################
interface Vlan5
no shutdown 
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.5.251/24
 hsrp version 2
hsrp 5
 preempt
 priority 180
 ip 192.168.5.254
!#############################################################################
vlan 6
 name SERVERS
!#############################################################################
interface Vlan6
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.6.251/24
 hsrp version 2
hsrp 6
 preempt
 priority 180
 ip 192.168.6.254
!#############################################################################
vlan 10
 name OFFICE_NET
 !#############################################################################
interface Vlan10
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.0.251/24
 hsrp version 2
hsrp 10
 preempt
 priority 180
 ip 192.168.0.254
!#############################################################################
vlan 11
 name APPLE_NET
!#############################################################################
interface Vlan11
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.11.251/24
 hsrp version 2
 hsrp 11
 preempt
 priority 180
 ip 192.168.11.254
!#############################################################################
vlan 15
 name WiFi_HARDWARE
!#############################################################################
interface Vlan15
no shutdown
 no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.15.251/24
 hsrp version 2
hsrp 15
 preempt
 priority 180
 ip 192.168.15.254
!#############################################################################
vlan 100
 name VoIP_NET
 !#############################################################################
interface Vlan100
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.100.251/24
 hsrp version 2
hsrp 100
 preempt
 priority 180
 ip 192.168.100.254
!#############################################################################
vlan 101
 name Printers_NET
!#############################################################################
interface Vlan101
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.101.251/24
hsrp version 2
hsrp 101
 preempt
 priority 180
 ip 192.168.101.254
!#############################################################################
vlan 102
 name SECUROS_LAN
 !#############################################################################
interface Vlan102
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.102.251/24
 hsrp version 2
hsrp 102
 preempt
 priority 180
 ip 192.168.102.254
!#############################################################################
vlan 210
 name Manegement_LAN
!#############################################################################
interface vlan 210
 no shutdown
 no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.210.251/24
 hsrp version 2
hsrp 210
 preempt
 priority 180
 ip 192.168.210.2
!#############################################################################
vlan 999
! name KEEPALIVE
!#############################################################################
vpc domain 1
 role priority 1
 system-priority 1000
 peer-keepalive destination 10.1.1.2 source 10.1.1.1 vrf management
 auto-recovery
 peer-switch
 peer-gateway
 delay restore 180
 ip arp synchronize
!!!!!!!!!vPC peer-link configuration!!!!!!!!!!!
interface Ethernet1/1-4
 no shutdown
 switchport mode trunk
 channel-group 1234 mode active
!
interface port-channel 1234
 switchport mode trunk
 switchport trunk allowed vlan all
!!!!!!!!!!!!!!!!!!!!!!!!!! Disable STP  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
 spanning-tree port type network 
 vpc peer-link
!
!!!!!!!!!!!!!!!!Configure FEX !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
fex 100
  pinning max-links 1
exit
fex 101
  pinning max-links 1
exit
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
interface Ethernet2/13-14
  no shutdown
  channel-group 1314
exit
interface po1314
switchport mode fex-fabric
fex associate 100 
vpc 1314
exit
interface Ethernet2/15-16
  no shutdown
  channel-group 1516
exit
interface po1516
switchport mode fex-fabric
fex associate 101 
vpc 1516
exit
!#############################################################################
cfs ipv4 distribute
end
configure sync
  switch-profile vpc-profile
  sync-peer destination 10.1.1.2
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
configure sync
switch-profile vpc-profile
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Configuring access ports to Mikrotik !!!!!!!!!!!!!!!!!!!!!
interface Po31
description to Mikrotik
switchport mode trunk
switchport trunk allowed vlan 2,3,4,6,10,11,15,100,101,102,210
switchport trunk native vlan 210
ip dhcp snooping trust
vpc 31
no shutdown
interface Ethernet1/31
description MLAG to Mikrotik
speed 1000
switchport
channel-group 31 mode active
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
interface Ethernet2/11-12
description ToCAM_Stack
switchport
switchport mode trunk
switchport nonegotiate
ip dhcp snooping trust
ip arp inspection trust
channel-group 1112 mode active
no shutdown
interface port-channel1112
description ToCAM_Stack
switchport
switchport mode trunk
switchport nonegotiate
ip dhcp snooping trust
ip arp inspection trust
vpc 1112
 

Конфиг NEXUS2

Скрытый текст

no feature telnet
feature interface-vlan
feature lacp
feature vpc
feature fex
feature dhcp
feature vtp
feature hsrp
!
service unsupported-transceiver
service dhcp
ip dhcp snooping
ip dhcp relay
ip dhcp relay information option
ip dhcp smart-relay global
ip dhcp snooping vlan 2-6,10-11,15,100-102
!
ip access-list 110
deny   ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.6.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.10.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.11.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.15.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.100.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.101.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.102.0 0.0.0.255
permit ip 192.168.3.0 0.0.0.255 host 192.168.210.1
deny   ip 192.168.11.0 0.0.0.255 192.168.0.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.2.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.3.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.4.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.5.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.6.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.10.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.15.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.100.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.11.0 0.0.0.255 host 192.168.210.1
permit ip any any
exit
 !#############################################################################
system jumbomtu 9216
policy-map type network-qos jumbo
 class type network-qos class-default
   mtu 9216
   multicast-optimize
system qos
  service-policy type network-qos jumbo
!#############################################################################
!################                        QoS Configuration Start                          ####################
!#############################################################################
class-map type qos match-any Voice  
  match dscp 40,46  
class-map type qos match-all Scavenger  
  match dscp 8  
class-map type qos match-all CriticalData  
  match dscp 18  
class-map type qos match-all voice-global  
  match cos 5  
class-map type qos match-all critical-global  
  match cos 6  
class-map type qos match-all scavenger-global  
  match cos 1  
!  
class-map type queuing class-fcoe  
  match qos-group 1  
class-map type queuing queueVoice  
  match qos-group 5  
class-map type queuing queueScavenger  
  match qos-group 4  
class-map type queuing class-all-flood  
  match qos-group 2  
class-map type queuing queueCriticalData  
  match qos-group 3  
class-map type queuing class-ip-multicast  
  match qos-group 2  
!  
policy-map type qos classify-per-port  
  class class-ip-multicast  
    set qos-group 2  
  class Voice  
    set qos-group 5  
  class CriticalData  
    set qos-group 3  
  class Scavenger  
    set qos-group 4  
!  
policy-map type qos classify-5000-global  
  class voice-global  
    set qos-group 5  
  class critical-global  
    set qos-group 3  
  class scavenger-global  
    set qos-group 4  
!  
policy-map type queuing globalqueuingpolicy  
  class type queuing queueCriticalData  
    bandwidth percent 6  
  class type queuing queueScavenger  
    bandwidth percent 1  
  class type queuing queueVoice  
    bandwidth percent 20  
  class type queuing class-default  
    bandwidth percent 10  
!  
class-map type network-qos nqVoice  
  match qos-group 5  
class-map type network-qos class-fcoe  
  match qos-group 1  
class-map type network-qos nqScavenger  
  match qos-group 4  
class-map type network-qos nqCriticalData  
  match qos-group 3  
class-map type network-qos class-all-flood  
  match qos-group 2  
class-map type network-qos class-ip-multicast  
  match qos-group 2  
!  
policy-map type network-qos globalnetworkpolicy
  class type network-qos class-ip-multicast  
    multicast-optimize  
  class type network-qos nqCriticalData  
    set cos 6  
  class type network-qos nqScavenger  
    set cos 1    
  class type network-qos nqVoice  
    set cos 5  
  class type network-qos class-default  
!  
system qos  
  service-policy type qos input classify-5000-global  
  service-policy type network-qos globalnetworkpolicy  
  service-policy type queuing output globalqueuingpolicy 
  service-policy type queuing input globalqueuingpolicy  
!  
!#############################################################################
!################                        QoS Configuration End                           ####################
!#############################################################################
!  
ntp source-interface  Vlan210
ntp server 192.168.210.1
clock timezone YEKT 5 0
hostname CORE-N5K-2
no ip domain-lookup
ip domain-name cisco.local
ip name-server 192.168.210.1
vtp mode transparent
 !#############################################################################
interface mgmt0
 vrf member management
 ip address 10.1.1.2/24
exit
ip route 0.0.0.0/0 192.168.210.1
!#############################################################################
!################                        Configure Spanning-tree                         ####################
!#############################################################################
spanning-tree mode rapid-pvst
spanning-tree pathcost method short
no spanning-tree port type edge default
no spanning-tree port type network default
spanning-tree bridge assurance
no spanning-tree loopguard default
spanning-tree port type edge bpduguard default
spanning-tree port type edge bpdufilter default
spanning-tree vlan 2,3,4,5,6,10,11,15,100,101,102,210 priority 0

!############################################################################
!######################                       Configure VLANs                     #####################
!############################################################################
vlan 2
name Mobile_LAN
!############################################################################
interface Vlan2
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.2.251/24
 hsrp version 2
hsrp 2
 preempt
 priority 180
 ip 192.168.2.254
 
!############################################################################
vlan 3
 name Guest_LAN
 !############################################################################
interface Vlan3
no shutdown 
no ip arp gratuitous hsrp duplicate
ip dhcp relay address 192.168.210.1
ip access-group 110 in
no ip redirects
ip address 192.168.3.251/24
hsrp version 2
hsrp 3
preempt
priority 180
ip 192.168.3.254
 !############################################################################
vlan 4
 name APC_LAN
!#############################################################################
interface Vlan4
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.4.251/24
 hsrp version 2
 hsrp 4
 preempt
 priority 180
 ip 192.168.4.254
!#############################################################################
vlan 5
 name SECURITY
!#############################################################################
interface Vlan5
no shutdown 
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.5.251/24
 hsrp version 2
hsrp 5
 preempt
 priority 180
 ip 192.168.5.254
!#############################################################################
vlan 6
 name SERVERS
!#############################################################################
interface Vlan6
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.6.251/24
 hsrp version 2
hsrp 6
 preempt
 priority 180
 ip 192.168.6.254
!#############################################################################
vlan 10
 name OFFICE_NET
 !#############################################################################
interface Vlan10
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.0.251/24
 hsrp version 2
hsrp 10
 preempt
 priority 180
 ip 192.168.0.254
!#############################################################################
vlan 11
 name APPLE_NET
!#############################################################################
interface Vlan11
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.11.251/24
 hsrp version 2
 hsrp 11
 preempt
 priority 180
 ip 192.168.11.254
!#############################################################################
vlan 15
 name WiFi_HARDWARE
!#############################################################################
interface Vlan15
no shutdown
 no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.15.251/24
 hsrp version 2
hsrp 15
 preempt
 priority 180
 ip 192.168.15.254
!#############################################################################
vlan 100
 name VoIP_NET
 !#############################################################################
interface Vlan100
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.100.251/24
 hsrp version 2
hsrp 100
 preempt
 priority 180
 ip 192.168.100.254
!#############################################################################
vlan 101
 name Printers_NET
!#############################################################################
interface Vlan101
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.101.251/24
hsrp version 2
hsrp 101
 preempt
 priority 180
 ip 192.168.101.254
!#############################################################################
vlan 102
 name SECUROS_LAN
 !#############################################################################
interface Vlan102
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.102.251/24
 hsrp version 2
hsrp 102
 preempt
 priority 180
 ip 192.168.102.254
!#############################################################################
vlan 210
 name Manegement_LAN
!#############################################################################
interface vlan 210
 no shutdown
 no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.210.251/24
 hsrp version 2
hsrp 210
 preempt
 priority 180
 ip 192.168.210.2
!#############################################################################
vlan 999
!#############################################################################
vpc domain 1
 role priority 1
 system-priority 1000
 peer-keepalive destination 10.1.1.1 source 10.1.1.2 vrf management
 auto-recovery
 peer-switch
 peer-gateway
 delay restore 180
 ip arp synchronize
!!!!!!!!!vPC peer-link configuration!!!!!!!!!!!
interface Ethernet1/1-4
 no shutdown
 switchport mode trunk
 channel-group 1234 mode active
!
interface port-channel 1234
 switchport mode trunk
 switchport trunk allowed vlan all
!!!!!!!!!!!!!!!!!!!!!!!!!! Disable STP  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
 spanning-tree port type network 
 vpc peer-link
!
!!!!!!!!!!!!!!!!Configure FEX !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
fex 100
  pinning max-links 1
exit
fex 101
  pinning max-links 1
exit
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
interface Ethernet2/13-14
  no shutdown
  channel-group 1314
exit
interface po1314
switchport mode fex-fabric
fex associate 100 
vpc 1314
exit
interface Ethernet2/15-16
  no shutdown
  channel-group 1516
exit
interface po1516
switchport mode fex-fabric
fex associate 101 
vpc 1516
exit
!#############################################################################
cfs ipv4 distribute
end
configure sync
  switch-profile vpc-profile
  sync-peer destination 10.1.1.2
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
configure sync
switch-profile vpc-profile
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Configuring access ports to Mikrotik !!!!!!!!!!!!!!!!!!!!!
interface Po31
description to Mikrotik
switchport mode trunk
switchport trunk allowed vlan 2,3,4,6,10,11,15,100,101,102,210
switchport trunk native vlan 210
ip dhcp snooping trust
vpc 31
no shutdown
interface Ethernet1/31
description MLAG to Mikrotik
speed 1000
switchport
channel-group 31 mode active
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
interface Ethernet2/11-12
description ToCAM_Stack
switchport
switchport mode trunk
switchport nonegotiate
ip dhcp snooping trust
ip arp inspection trust
channel-group 1112 mode active
no shutdown
interface port-channel1112
description ToCAM_Stack
switchport
switchport mode trunk
switchport nonegotiate
ip dhcp snooping trust
ip arp inspection trust
vpc 1112

К нексусам будут церляться стеки из WS-C3750X-48PF-S к ним будут цепляться конечные устройства.
 

Обрезанный конфиг 3750x

Скрытый текст

interface TenGigabitEthernet1/1/1
 description TO_CORE
 switchport trunk allowed vlan 2-6,10,11,15,100-102,210
 switchport trunk encapsulation dot1q
 switchport mode trunk
 switchport nonegotiate
 ip arp inspection trust
 channel-protocol lacp
 channel-group 2 mode active
 ip dhcp snooping trust
 auto qos classify
 auto qos classify police
 auto qos trust

Собственно связность в сети есть, все коммутаторы видят друг друга и тырнет. Собственно затык в том, что не работает DHCP Relay, DHCP Snooping и конечные устройства не могут получить IP, маску, шлюз, днс.
Если компам задать IP, маску, шлюз, днс в ручную, то всё фунциклирует как надо. Я так подозреваю, что дело в связке HSRP и DHCP Relay, DHCP Snooping.

А вот как это настроить не могу найти нормальных примеров. Может кто-то объяснить где затык в моих конфигах?

 

[null0]

44 минуты назад, Gungster сказал:

В общем собираю сеть на периметре Mikrotik RB1100AHx4 (192.168.210.1) на нем поднят DHCP сервер для всех VLAN.
К нему через LACP цепляются два Nexus 5548UP с двумя С2248 на нексусах FEX, vPC, VLAN с HSRP, DHCP Relay, DHCP Snooping.
Конфиг NEXUS1
 

  Показать содержимое

no feature telnet
feature interface-vlan
feature lacp
feature vpc
feature fex
feature dhcp
feature vtp
feature hsrp
!
service unsupported-transceiver
service dhcp
ip dhcp snooping
ip dhcp relay
ip dhcp relay information option
ip dhcp smart-relay global
ip dhcp snooping vlan 2-6,10-11,15,100-102
!
ip access-list 110
deny   ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.6.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.10.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.11.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.15.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.100.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.101.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.102.0 0.0.0.255
permit ip 192.168.3.0 0.0.0.255 host 192.168.210.1
deny   ip 192.168.11.0 0.0.0.255 192.168.0.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.2.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.3.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.4.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.5.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.6.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.10.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.15.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.100.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.11.0 0.0.0.255 host 192.168.210.1
permit ip any any
exit
 !#############################################################################
system jumbomtu 9216
policy-map type network-qos jumbo
 class type network-qos class-default
   mtu 9216
   multicast-optimize
system qos
  service-policy type network-qos jumbo
!#############################################################################
!################                        QoS Configuration Start                          ####################
!#############################################################################
class-map type qos match-any Voice  
  match dscp 40,46  
class-map type qos match-all Scavenger  
  match dscp 8  
class-map type qos match-all CriticalData  
  match dscp 18  
class-map type qos match-all voice-global  
  match cos 5  
class-map type qos match-all critical-global  
  match cos 6  
class-map type qos match-all scavenger-global  
  match cos 1  
!  
class-map type queuing class-fcoe  
  match qos-group 1  
class-map type queuing queueVoice  
  match qos-group 5  
class-map type queuing queueScavenger  
  match qos-group 4  
class-map type queuing class-all-flood  
  match qos-group 2  
class-map type queuing queueCriticalData  
  match qos-group 3  
class-map type queuing class-ip-multicast  
  match qos-group 2  
!  
policy-map type qos classify-per-port  
  class class-ip-multicast  
    set qos-group 2  
  class Voice  
    set qos-group 5  
  class CriticalData  
    set qos-group 3  
  class Scavenger  
    set qos-group 4  
!  
policy-map type qos classify-5000-global  
  class voice-global  
    set qos-group 5  
  class critical-global  
    set qos-group 3  
  class scavenger-global  
    set qos-group 4  
!  
policy-map type queuing globalqueuingpolicy  
  class type queuing queueCriticalData  
    bandwidth percent 6  
  class type queuing queueScavenger  
    bandwidth percent 1  
  class type queuing queueVoice  
    bandwidth percent 20  
  class type queuing class-default  
    bandwidth percent 10  
!  
class-map type network-qos nqVoice  
  match qos-group 5  
class-map type network-qos class-fcoe  
  match qos-group 1  
class-map type network-qos nqScavenger  
  match qos-group 4  
class-map type network-qos nqCriticalData  
  match qos-group 3  
class-map type network-qos class-all-flood  
  match qos-group 2  
class-map type network-qos class-ip-multicast  
  match qos-group 2  
!  
policy-map type network-qos globalnetworkpolicy
  class type network-qos class-ip-multicast  
    multicast-optimize  
  class type network-qos nqCriticalData  
    set cos 6  
  class type network-qos nqScavenger  
    set cos 1    
  class type network-qos nqVoice  
    set cos 5  
  class type network-qos class-default  
!  
system qos  
  service-policy type qos input classify-5000-global  
  service-policy type network-qos globalnetworkpolicy  
  service-policy type queuing output globalqueuingpolicy 
  service-policy type queuing input globalqueuingpolicy  
!  
!#############################################################################
!################                        QoS Configuration End                           ####################
!#############################################################################
!  
ntp source-interface  Vlan210
ntp server 192.168.210.1
clock timezone YEKT 5 0
hostname CORE-N5K-1
no ip domain-lookup
ip domain-name cisco.local
ip name-server 192.168.210.1
vtp mode transparent
 !#############################################################################
interface mgmt0
 vrf member management
 ip address 10.1.1.1/24
exit
ip route 0.0.0.0/0 192.168.210.1
!#############################################################################
!################                        Configure Spanning-tree                         ####################
!#############################################################################
spanning-tree mode rapid-pvst
spanning-tree pathcost method short
no spanning-tree port type edge default
no spanning-tree port type network default
spanning-tree bridge assurance
no spanning-tree loopguard default
spanning-tree port type edge bpduguard default
spanning-tree port type edge bpdufilter default
spanning-tree vlan 2,3,4,5,6,10,11,15,100,101,102,210 priority 0

!############################################################################
!######################                       Configure VLANs                     #####################
!############################################################################
vlan 2
name Mobile_LAN
!############################################################################
interface Vlan2
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.2.251/24
 hsrp version 2
hsrp 2
 preempt
 priority 180
 ip 192.168.2.254
 
!############################################################################
vlan 3
 name Guest_LAN
 !############################################################################
interface Vlan3
no shutdown 
no ip arp gratuitous hsrp duplicate
ip dhcp relay address 192.168.210.1
ip access-group 110 in
no ip redirects
ip address 192.168.3.251/24
hsrp version 2
hsrp 3
preempt
priority 180
ip 192.168.3.254
 !############################################################################
vlan 4
 name APC_LAN
!#############################################################################
interface Vlan4
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.4.251/24
 hsrp version 2
 hsrp 4
 preempt
 priority 180
 ip 192.168.4.254
!#############################################################################
vlan 5
 name SECURITY
!#############################################################################
interface Vlan5
no shutdown 
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.5.251/24
 hsrp version 2
hsrp 5
 preempt
 priority 180
 ip 192.168.5.254
!#############################################################################
vlan 6
 name SERVERS
!#############################################################################
interface Vlan6
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.6.251/24
 hsrp version 2
hsrp 6
 preempt
 priority 180
 ip 192.168.6.254
!#############################################################################
vlan 10
 name OFFICE_NET
 !#############################################################################
interface Vlan10
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.0.251/24
 hsrp version 2
hsrp 10
 preempt
 priority 180
 ip 192.168.0.254
!#############################################################################
vlan 11
 name APPLE_NET
!#############################################################################
interface Vlan11
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.11.251/24
 hsrp version 2
 hsrp 11
 preempt
 priority 180
 ip 192.168.11.254
!#############################################################################
vlan 15
 name WiFi_HARDWARE
!#############################################################################
interface Vlan15
no shutdown
 no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.15.251/24
 hsrp version 2
hsrp 15
 preempt
 priority 180
 ip 192.168.15.254
!#############################################################################
vlan 100
 name VoIP_NET
 !#############################################################################
interface Vlan100
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.100.251/24
 hsrp version 2
hsrp 100
 preempt
 priority 180
 ip 192.168.100.254
!#############################################################################
vlan 101
 name Printers_NET
!#############################################################################
interface Vlan101
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.101.251/24
hsrp version 2
hsrp 101
 preempt
 priority 180
 ip 192.168.101.254
!#############################################################################
vlan 102
 name SECUROS_LAN
 !#############################################################################
interface Vlan102
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.102.251/24
 hsrp version 2
hsrp 102
 preempt
 priority 180
 ip 192.168.102.254
!#############################################################################
vlan 210
 name Manegement_LAN
!#############################################################################
interface vlan 210
 no shutdown
 no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.210.251/24
 hsrp version 2
hsrp 210
 preempt
 priority 180
 ip 192.168.210.2
!#############################################################################
vlan 999
! name KEEPALIVE
!#############################################################################
vpc domain 1
 role priority 1
 system-priority 1000
 peer-keepalive destination 10.1.1.2 source 10.1.1.1 vrf management
 auto-recovery
 peer-switch
 peer-gateway
 delay restore 180
 ip arp synchronize
!!!!!!!!!vPC peer-link configuration!!!!!!!!!!!
interface Ethernet1/1-4
 no shutdown
 switchport mode trunk
 channel-group 1234 mode active
!
interface port-channel 1234
 switchport mode trunk
 switchport trunk allowed vlan all
!!!!!!!!!!!!!!!!!!!!!!!!!! Disable STP  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
 spanning-tree port type network 
 vpc peer-link
!
!!!!!!!!!!!!!!!!Configure FEX !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
fex 100
  pinning max-links 1
exit
fex 101
  pinning max-links 1
exit
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
interface Ethernet2/13-14
  no shutdown
  channel-group 1314
exit
interface po1314
switchport mode fex-fabric
fex associate 100 
vpc 1314
exit
interface Ethernet2/15-16
  no shutdown
  channel-group 1516
exit
interface po1516
switchport mode fex-fabric
fex associate 101 
vpc 1516
exit
!#############################################################################
cfs ipv4 distribute
end
configure sync
  switch-profile vpc-profile
  sync-peer destination 10.1.1.2
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
configure sync
switch-profile vpc-profile
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Configuring access ports to Mikrotik !!!!!!!!!!!!!!!!!!!!!
interface Po31
description to Mikrotik
switchport mode trunk
switchport trunk allowed vlan 2,3,4,6,10,11,15,100,101,102,210
switchport trunk native vlan 210
ip dhcp snooping trust
vpc 31
no shutdown
interface Ethernet1/31
description MLAG to Mikrotik
speed 1000
switchport
channel-group 31 mode active
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
interface Ethernet2/11-12
description ToCAM_Stack
switchport
switchport mode trunk
switchport nonegotiate
ip dhcp snooping trust
ip arp inspection trust
channel-group 1112 mode active
no shutdown
interface port-channel1112
description ToCAM_Stack
switchport
switchport mode trunk
switchport nonegotiate
ip dhcp snooping trust
ip arp inspection trust
vpc 1112
 

Конфиг NEXUS2

  Показать содержимое

no feature telnet
feature interface-vlan
feature lacp
feature vpc
feature fex
feature dhcp
feature vtp
feature hsrp
!
service unsupported-transceiver
service dhcp
ip dhcp snooping
ip dhcp relay
ip dhcp relay information option
ip dhcp smart-relay global
ip dhcp snooping vlan 2-6,10-11,15,100-102
!
ip access-list 110
deny   ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.6.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.10.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.11.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.15.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.100.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.101.0 0.0.0.255
deny   ip 192.168.3.0 0.0.0.255 192.168.102.0 0.0.0.255
permit ip 192.168.3.0 0.0.0.255 host 192.168.210.1
deny   ip 192.168.11.0 0.0.0.255 192.168.0.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.2.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.3.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.4.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.5.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.6.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.10.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.15.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.100.0 0.0.0.255
deny   ip 192.168.11.0 0.0.0.255 192.168.101.0 0.0.0.255
permit ip 192.168.11.0 0.0.0.255 host 192.168.210.1
permit ip any any
exit
 !#############################################################################
system jumbomtu 9216
policy-map type network-qos jumbo
 class type network-qos class-default
   mtu 9216
   multicast-optimize
system qos
  service-policy type network-qos jumbo
!#############################################################################
!################                        QoS Configuration Start                          ####################
!#############################################################################
class-map type qos match-any Voice  
  match dscp 40,46  
class-map type qos match-all Scavenger  
  match dscp 8  
class-map type qos match-all CriticalData  
  match dscp 18  
class-map type qos match-all voice-global  
  match cos 5  
class-map type qos match-all critical-global  
  match cos 6  
class-map type qos match-all scavenger-global  
  match cos 1  
!  
class-map type queuing class-fcoe  
  match qos-group 1  
class-map type queuing queueVoice  
  match qos-group 5  
class-map type queuing queueScavenger  
  match qos-group 4  
class-map type queuing class-all-flood  
  match qos-group 2  
class-map type queuing queueCriticalData  
  match qos-group 3  
class-map type queuing class-ip-multicast  
  match qos-group 2  
!  
policy-map type qos classify-per-port  
  class class-ip-multicast  
    set qos-group 2  
  class Voice  
    set qos-group 5  
  class CriticalData  
    set qos-group 3  
  class Scavenger  
    set qos-group 4  
!  
policy-map type qos classify-5000-global  
  class voice-global  
    set qos-group 5  
  class critical-global  
    set qos-group 3  
  class scavenger-global  
    set qos-group 4  
!  
policy-map type queuing globalqueuingpolicy  
  class type queuing queueCriticalData  
    bandwidth percent 6  
  class type queuing queueScavenger  
    bandwidth percent 1  
  class type queuing queueVoice  
    bandwidth percent 20  
  class type queuing class-default  
    bandwidth percent 10  
!  
class-map type network-qos nqVoice  
  match qos-group 5  
class-map type network-qos class-fcoe  
  match qos-group 1  
class-map type network-qos nqScavenger  
  match qos-group 4  
class-map type network-qos nqCriticalData  
  match qos-group 3  
class-map type network-qos class-all-flood  
  match qos-group 2  
class-map type network-qos class-ip-multicast  
  match qos-group 2  
!  
policy-map type network-qos globalnetworkpolicy
  class type network-qos class-ip-multicast  
    multicast-optimize  
  class type network-qos nqCriticalData  
    set cos 6  
  class type network-qos nqScavenger  
    set cos 1    
  class type network-qos nqVoice  
    set cos 5  
  class type network-qos class-default  
!  
system qos  
  service-policy type qos input classify-5000-global  
  service-policy type network-qos globalnetworkpolicy  
  service-policy type queuing output globalqueuingpolicy 
  service-policy type queuing input globalqueuingpolicy  
!  
!#############################################################################
!################                        QoS Configuration End                           ####################
!#############################################################################
!  
ntp source-interface  Vlan210
ntp server 192.168.210.1
clock timezone YEKT 5 0
hostname CORE-N5K-2
no ip domain-lookup
ip domain-name cisco.local
ip name-server 192.168.210.1
vtp mode transparent
 !#############################################################################
interface mgmt0
 vrf member management
 ip address 10.1.1.2/24
exit
ip route 0.0.0.0/0 192.168.210.1
!#############################################################################
!################                        Configure Spanning-tree                         ####################
!#############################################################################
spanning-tree mode rapid-pvst
spanning-tree pathcost method short
no spanning-tree port type edge default
no spanning-tree port type network default
spanning-tree bridge assurance
no spanning-tree loopguard default
spanning-tree port type edge bpduguard default
spanning-tree port type edge bpdufilter default
spanning-tree vlan 2,3,4,5,6,10,11,15,100,101,102,210 priority 0

!############################################################################
!######################                       Configure VLANs                     #####################
!############################################################################
vlan 2
name Mobile_LAN
!############################################################################
interface Vlan2
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.2.251/24
 hsrp version 2
hsrp 2
 preempt
 priority 180
 ip 192.168.2.254
 
!############################################################################
vlan 3
 name Guest_LAN
 !############################################################################
interface Vlan3
no shutdown 
no ip arp gratuitous hsrp duplicate
ip dhcp relay address 192.168.210.1
ip access-group 110 in
no ip redirects
ip address 192.168.3.251/24
hsrp version 2
hsrp 3
preempt
priority 180
ip 192.168.3.254
 !############################################################################
vlan 4
 name APC_LAN
!#############################################################################
interface Vlan4
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.4.251/24
 hsrp version 2
 hsrp 4
 preempt
 priority 180
 ip 192.168.4.254
!#############################################################################
vlan 5
 name SECURITY
!#############################################################################
interface Vlan5
no shutdown 
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.5.251/24
 hsrp version 2
hsrp 5
 preempt
 priority 180
 ip 192.168.5.254
!#############################################################################
vlan 6
 name SERVERS
!#############################################################################
interface Vlan6
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.6.251/24
 hsrp version 2
hsrp 6
 preempt
 priority 180
 ip 192.168.6.254
!#############################################################################
vlan 10
 name OFFICE_NET
 !#############################################################################
interface Vlan10
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.0.251/24
 hsrp version 2
hsrp 10
 preempt
 priority 180
 ip 192.168.0.254
!#############################################################################
vlan 11
 name APPLE_NET
!#############################################################################
interface Vlan11
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.11.251/24
 hsrp version 2
 hsrp 11
 preempt
 priority 180
 ip 192.168.11.254
!#############################################################################
vlan 15
 name WiFi_HARDWARE
!#############################################################################
interface Vlan15
no shutdown
 no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.15.251/24
 hsrp version 2
hsrp 15
 preempt
 priority 180
 ip 192.168.15.254
!#############################################################################
vlan 100
 name VoIP_NET
 !#############################################################################
interface Vlan100
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.100.251/24
 hsrp version 2
hsrp 100
 preempt
 priority 180
 ip 192.168.100.254
!#############################################################################
vlan 101
 name Printers_NET
!#############################################################################
interface Vlan101
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.101.251/24
hsrp version 2
hsrp 101
 preempt
 priority 180
 ip 192.168.101.254
!#############################################################################
vlan 102
 name SECUROS_LAN
 !#############################################################################
interface Vlan102
no shutdown
no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.102.251/24
 hsrp version 2
hsrp 102
 preempt
 priority 180
 ip 192.168.102.254
!#############################################################################
vlan 210
 name Manegement_LAN
!#############################################################################
interface vlan 210
 no shutdown
 no ip arp gratuitous hsrp duplicate
 ip dhcp relay address 192.168.210.1
 ip access-group 110 in
 no ip redirects
 ip address 192.168.210.251/24
 hsrp version 2
hsrp 210
 preempt
 priority 180
 ip 192.168.210.2
!#############################################################################
vlan 999
!#############################################################################
vpc domain 1
 role priority 1
 system-priority 1000
 peer-keepalive destination 10.1.1.1 source 10.1.1.2 vrf management
 auto-recovery
 peer-switch
 peer-gateway
 delay restore 180
 ip arp synchronize
!!!!!!!!!vPC peer-link configuration!!!!!!!!!!!
interface Ethernet1/1-4
 no shutdown
 switchport mode trunk
 channel-group 1234 mode active
!
interface port-channel 1234
 switchport mode trunk
 switchport trunk allowed vlan all
!!!!!!!!!!!!!!!!!!!!!!!!!! Disable STP  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
 spanning-tree port type network 
 vpc peer-link
!
!!!!!!!!!!!!!!!!Configure FEX !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
fex 100
  pinning max-links 1
exit
fex 101
  pinning max-links 1
exit
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
interface Ethernet2/13-14
  no shutdown
  channel-group 1314
exit
interface po1314
switchport mode fex-fabric
fex associate 100 
vpc 1314
exit
interface Ethernet2/15-16
  no shutdown
  channel-group 1516
exit
interface po1516
switchport mode fex-fabric
fex associate 101 
vpc 1516
exit
!#############################################################################
cfs ipv4 distribute
end
configure sync
  switch-profile vpc-profile
  sync-peer destination 10.1.1.2
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
configure sync
switch-profile vpc-profile
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Configuring access ports to Mikrotik !!!!!!!!!!!!!!!!!!!!!
interface Po31
description to Mikrotik
switchport mode trunk
switchport trunk allowed vlan 2,3,4,6,10,11,15,100,101,102,210
switchport trunk native vlan 210
ip dhcp snooping trust
vpc 31
no shutdown
interface Ethernet1/31
description MLAG to Mikrotik
speed 1000
switchport
channel-group 31 mode active
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
interface Ethernet2/11-12
description ToCAM_Stack
switchport
switchport mode trunk
switchport nonegotiate
ip dhcp snooping trust
ip arp inspection trust
channel-group 1112 mode active
no shutdown
interface port-channel1112
description ToCAM_Stack
switchport
switchport mode trunk
switchport nonegotiate
ip dhcp snooping trust
ip arp inspection trust
vpc 1112

К нексусам будут церляться стеки из WS-C3750X-48PF-S к ним будут цепляться конечные устройства.
 

Обрезанный конфиг 3750x

  Показать содержимое

interface TenGigabitEthernet1/1/1
 description TO_CORE
 switchport trunk allowed vlan 2-6,10,11,15,100-102,210
 switchport trunk encapsulation dot1q
 switchport mode trunk
 switchport nonegotiate
 ip arp inspection trust
 channel-protocol lacp
 channel-group 2 mode active
 ip dhcp snooping trust
 auto qos classify
 auto qos classify police
 auto qos trust

Собственно связность в сети есть, все коммутаторы видят друг друга и тырнет. Собственно затык в том, что не работает DHCP Relay, DHCP Snooping и конечные устройства не могут получить IP, маску, шлюз, днс.
Если компам задать IP, маску, шлюз, днс в ручную, то всё фунциклирует как надо. Я так подозреваю, что дело в связке HSRP и DHCP Relay, DHCP Snooping.

А вот как это настроить не могу найти нормальных примеров. Может кто-то объяснить где затык в моих конфигах?

 

 

Снимите дампы DHCP и всё станет понятно