Skip to content

Commit 01ae4c2

Browse files
authored
Merge pull request #292629 from sushantjrao/break-glass-setup
Update howto-enable-micro-bfd.md
2 parents b098dbe + 8129ef8 commit 01ae4c2

File tree

1 file changed

+122
-34
lines changed

1 file changed

+122
-34
lines changed

articles/operator-nexus/howto-enable-micro-bfd.md

Lines changed: 122 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -11,67 +11,155 @@ ms.custom: template-how-to, devx-track-azurecli
1111

1212
# Enabling Micro-BFD
1313

14-
Micro-BFD (Bidirectional Forwarding Detection) is a lightweight protocol designed to quickly detect failures between adjacent network devices, such as routers or switches, with minimal overhead. This guide provides step-by-step instructions to enable Micro-BFD on Customer Edge (CE) and Provider Edge (PE) devices.
14+
Micro-BFD (Bidirectional Forwarding Detection) is a lightweight protocol designed to rapidly detect failures between adjacent network devices, such as routers or switches, with minimal overhead. This guide provides step-by-step instructions to enable Micro-BFD on Customer Edge (CE) and Provider Edge (PE) devices.
1515

1616
## Prerequisites
1717

18-
Before enabling Micro-BFD, perform the following steps:
18+
Ensure the following prerequisites are met before enabling Micro-BFD:
1919

20-
- Both CE and PE devices are configured with the required Micro-BFD settings.
20+
- Both CE and PE devices are preconfigured with the required Micro-BFD settings.
2121

2222
- The feature flag `MicroBFDEnabled` is turned off by default.
2323

24-
> [!Note]
25-
> Contact Microsoft support through a support incident to enable the feature flag.
24+
>[!Note]
25+
> It is required to contact Microsoft support through a support incident to enable the feature flag once necessary configurations has been performed to devices as explained in this article.
2626
27-
- It is necessary to [put the device in maintenance mode](.\howto-put-device-in-maintenance-mode.md) to apply below the configuration changes.
27+
- It's necessary to [put the device in maintenance mode](.\howto-put-device-in-maintenance-mode.md) to apply below the configuration changes.
2828

29-
## Configuration steps
29+
## Configuration steps for enabling Micro-BFD
3030

31-
### Step 1: Configure CE devices
31+
Follow these steps to enable Micro-BFD, starting with the secondary devices. Once verified, proceed with the primary devices using the instructions provided.
32+
33+
### Step 1: Place CE2 in Maintenance Mode
3234

33-
1. Access the CE device and enter the configuration mode.
35+
Run the following Azure CLI command to place the CE2 device in maintenance mode:
3436

35-
2. Add the following configuration to enable Micro-BFD on the CE-PE interface:
37+
```Azure CLI
38+
az networkfabric device update-admin-state --resource-group <resource-group> --resource-name <resource-name> --state UnderMaintenance
39+
```
40+
41+
>[!Note]
42+
> For new deployments, maintenance mode is not required.
43+
44+
### Step 2: Configure Micro-BFD on CE2
45+
46+
Use the following Azure CLI command to configure Micro-BFD under Port-Channel1 on CE2.
47+
48+
```Azure CLI
49+
az networkfabric device run-rw --ids /subscriptions/<subscription-id>/resourceGroups/<resource-group>/providers/
50+
Microsoft.ManagedNetworkFabric/NetworkDevices/<device>-AggrRack-CE2 --rw-command "interface Port-Channel1
51+
ip address 10.30.0.69/30
52+
mtu 9124
53+
no switchport
54+
bfd neighbor 10.30.0.70
55+
bfd interval 50 min-rx 50 multiplier 3
56+
bfd per-link rfc-7130
57+
!"
58+
```
59+
60+
```Example IP address allocation
61+
NFIPv4Addr: 10.30.0.0/19
62+
CE<->PE MicroBFD: 10.30.0.64/30
63+
CE1: 10.30.0.65/30 & PE1: 10.30.0.66/30
64+
CE2: 10.30.0.69/30 & PE2: 10.30.0.70/30
65+
NFIPv4Addr: 10.30.32.0/19
66+
CE<->PE MicroBFD: 10.30.32.64/30
67+
CE1: 10.30.32.65/30 & PE1: 10.30.32.66/30
68+
CE2: 10.30.32.69/30 & PE2: 10.30.32.70/30
69+
```
70+
71+
Verify the changes using the following command and check that the configured IP address, BFD interval, and neighbor details match the intended configuration.
72+
73+
```Example show output after configuring MicroBFD on CE2
74+
CE2#show running-config interfaces pox
75+
interface pox
76+
description "Port pox Connected to PE-02"
77+
mtu 9124
78+
no switchport
79+
ip address 10.30.0.69/30
80+
bfd interval 50 min-rx 50 multiplier 3
81+
bfd neighbor 10.30.0.70
82+
bfd per-link rfc-7130
83+
```
84+
85+
### Step 3: Configure Micro-BFD on PE2
86+
87+
Use the following command to configure PE2 with Micro-BFD: Consider min-links under the PE device for the respective port-channel.
88+
89+
```Azure CLI
90+
az networkfabric device run-rw --ids /subscriptions/<subscription-id>/resourceGroups/<resource-group>/providers/
91+
Microsoft.ManagedNetworkFabric/NetworkDevices/<device>-AggrRack-PE2 --rw-command "interface Port-Channel1
92+
ip address 10.30.0.70/30
93+
mtu 9124
94+
no switchport
95+
bfd neighbor 10.30.0.69
96+
bfd interval 50 min-rx 50 multiplier 3
97+
bfd per-link rfc-7130
98+
```
99+
100+
Verify the changes using the following command and check that the configured IP address, BFD interval, and neighbor details match the intended configuration.
101+
102+
```Example Show Output After Configuring MicroBFD on PE2
103+
PE2#show running-config interfaces pox
104+
interface pox
105+
description "Port pox Connected to CE-02"
106+
mtu 9124
107+
no switchport
108+
ip address 10.30.0.70/30
109+
bfd interval 50 min-rx 50 multiplier 3
110+
bfd neighbor 10.30.0.69
111+
bfd per-link rfc-7130
112+
```
36113

37-
```bash
38-
ip address 10.30.0.65/30
39-
bfd interval 50 min-rx 50 multiplier 3
40-
bfd neighbor 10.30.0.66
41-
bfd per-link rfc-7130
42-
```
114+
### Step 4: Move device CE2 into enabled state
43115

44-
### Step 2: Configure PE devices
116+
Use the following command to re-enable the device and make it operational after configuration.
45117

46-
1. Access the PE device and enter the configuration mode.
118+
```Azure CLI
119+
az networkfabric device update-admin-state --resource-group <resource-group> --resource-name <resource-name> --state Enable
120+
```
47121

48-
2. Add the following configuration to enable Micro-BFD on the PE-CE interface:
122+
>[!Note]
123+
> For new deployments, this step is not required.
49124
50-
```bash
51-
ip address 10.30.0.66/30
52-
bfd interval 50 min-rx 50 multiplier 3
53-
bfd neighbor 10.30.0.65
54-
bfd per-link rfc-7130
55-
```
125+
### Step 5: Verify BFD details
126+
127+
Check BFD peer details using the following command:
128+
129+
```Bash
130+
CE2#show bfd peers dest-ip <dest-bfd-peer-ip> detail
131+
```
56132

57-
### Step 3: Enable feature flag
133+
>[!NOTE]
134+
> After verifying the configuration on secondary devices, repeat steps 1 to 5 for primary devices (CE1 and PE1).
58135
59-
1. Request the DE team to enable the `MicroBFDEnabled` feature flag.
136+
### Step 6: Ensure connectivity and BGP sessions
60137

61-
2. Verify the configuration by checking the status of Micro-BFD sessions on both CE and PE devices.
138+
Ensure connectivity between CE and PE devices is stable, and BGP sessions are established with the appropriate routes.
62139

63-
### Step 4: Validate configuration
140+
### Step 7: Enable Micro-BFD Flag
64141

65-
Use the following command to check the status of Micro-BFD sessions on the PE device:
142+
Contact Microsoft support through a support incident to enable the Micro-BFD feature flag. After enabling the feature flag, a full reconciliation with the base configuration is required, ensuring the NPB property is set to true.
66143

67-
```bash
68-
show bfd status dest-ip 10.30.0.65 detail
144+
### Step 8: Verify Connectivity and BGP Sessions
145+
146+
After enabling the feature flag, confirm that connectivity and BGP sessions remain stable.
147+
148+
### Step 9: Remove configuration from RW config
149+
150+
After the BFD sessions are up, run the following Azure CLI command to remove BFD configurations. This process ensures that every full reconcile request avoids reapplying configurations to the devices.
151+
152+
```Azure CLI
153+
az networkfabric device run-rw --ids /subscriptions/<subscription-id>/resourceGroups/<resource-group>/providers/Microsoft.ManagedNetworkFabric/NetworkDevices/<device-name>-AggrRack-CE1\PE1\CE2\PE2 --rw-command " "
69154
```
70-
Ensure that the Micro-BFD sessions are established and operational.
155+
156+
### Step 11: Ensure devices aren't disturbed
157+
158+
Ensure that devices aren't disturbed for Micro-BFD configuration.
71159

72160
## Recovery steps if Micro-BFD is misconfigured
73161

74-
In scenarios such as reconfiguration, where Micro-BFD is disabled by default, and the Provider Edge (PE) device is configured with Micro-BFD settings from a previous deployment, it is crucial to remove the Micro-BFD configuration from the PE device.
162+
In cases like reconfiguration, where Micro-BFD is disabled by default but the Provider Edge (PE) device still has settings from a previous deployment, it's important to remove the Micro-BFD configuration from the PE device.
75163

76164
Follow these steps to ensure that Micro-BFD is disabled on your PE devices:
77165

0 commit comments

Comments
 (0)