Configuring HSRP Using Custom Policy Template with NDFC

Hello. My name is Tomas Klenschnik. I'm a Cisco data center network subject matter expert with the Cisco technical education team. In this video, you will configure HSRP using custom policy template with Nexus Dashboard Fabric Controller. You will begin with importing a custom policy template to Nexus Dashboard Fabric Controller. Then you will create and add a new policy to leaf switches. You will finish with verifying the connectivity to HSRP switch virtual interface IP address. Let's look at an example where you have implemented a VXLAN EVPN fabric named fabric with two spine and two leaf switches in your environment. You have a layer two switch named external connected to both leaf switches and a host named web two connected to external switch. Your first task is to import a custom policy template into Nexus Dashboard Fabric Controller and review templates properties and content. Then you will configure an HSRP policy based on the previously imported template and add the policy to both switches. The policy will configure a switch virtual interface for VLAN two hundred with physical IP addresses on both leaf switches and add HSRP related configuration. You will make sure VLAN two hundred is allowed on, in this example, the interfaces Ethernet one slash four on leaf one and two switches that are connected to switch external. In the end, you will verify the connectivity between web two host and its default gateway by pinging HSRP virtual IP address configured on leaf switches from web two. First, import a custom policy template into Cisco Nexus dashboard fabric controller. Open and log in to Nexus dashboard fabric controller. Click on operations and select templates. From actions, choose import. You can browse or simply drag and drop the file into the import template window. Drag a pre prepared template named custom interface vlan hsrp dot template and drop the file into import template window. Click Okay. A new window opens. In the first step you can see the template properties. Observe the template name and supported platforms. Scroll down to see template type is set to policy, subtemplate type is set to device, and content type is template CLI. Click next. In the template content, observe the template variables such as VLAN ID, physical and virtual IP address, and so on. You will set these values during the policy creation. Scroll down to see the template content. This is the HSRP configuration that is going to be pushed to switches when the policy is applied. Click finish and then back to template library. After a few seconds, you can see a newly created custom policy template in the list of all templates. Now configure an HSRP policy. Expand LAN and navigate to fabrics. Double click a fabric named Fabric. In the Fabric Overview window, go to Policies tab. Click Actions and choose Add Policy. Click on Select Switches, choose Leaf one, and click select. Click choose template. Choose custom interface VLAN HSRP and click select. Enter VLAN ID two hundred in this example. Type in the physical IP address two hundred dot one dot one dot two in this example. In the IP netmask length field, type twenty four. Type in the HSRP virtual IP address two hundred dot one dot one dot one in this example. For HSRP group, type in two hundred, and for HSRP priority, type in ninety in this example. In the interface description, type HSRP SVI. Click save. Repeat the procedure for leaf two. Click actions and choose add policy. Click on select switches. Now choose leaf two and click select. Click choose template. Choose custom interface VLAN HSRP and click select. Put in VLAN ID two hundred in this example. Enter the physical IP address two hundred dot one dot one dot three in this example. In the IP net mask length field, type twenty four. Put the same HSRP virtual IP address as for leaf one, that is two hundred dot one dot one dot one in this example. For HSRP group, type in two hundred, and for HSRP priority, type in one hundred and ten in this example. In the interface description, type HSRP SVI. Click save. Verify if both policies are applied. Click in the filter by attributes field, choose template and contains, type HSRP, and press enter. You can see two policies based on your custom template, one applied to leaf one and another one to leaf two. Before applying the configuration, make sure VLAN two hundred is allowed on the leaf one and two interfaces that are connected to switch external. Go to interfaces tab. Click in the filter by attributes field, choose interface and equals, type ethernet onefour and press enter. Select leaf one and leaf two, click actions, and choose edit. Select policy template, choose interface access host policy template, and click select. Scroll down and put in access VLAN two hundred in this example. Make sure enable interface checkbox is selected and click save. Close the window. Click switches tab and then click actions. Choose recalculate and deploy. After a few seconds, you can see leaf one and leaf two are out of sync and they have a number of lines in pending configuration. Click on pending lines to observe the configuration that is going to be pushed to the switches. Click close and then deploy all. Wait for a couple of seconds for status to go from started to success. Click close. Notice the config status is in sync. To verify connectivity, open a PuTTY session to web two. Try to ping an HSRP virtual IP address configured on leaf switches. Type ping two hundred dot one dot one dot one. Ping is successful. This concludes the Cisco technical education video on configuring HSRP using custom policy template with Nexus dashboard fabric controller. Thank you for watching.