Configuring Link State Propagation (LSP) on Security Groups

Background

You can use the Link State Propagation (LSP) to bind together the physical interfaces assigned to a Security Group. This causes all bound interfaces to go DOWN when one interface goes DOWN. After a predefined period time (default is 190 seconds), all interfaces go back to the UP state. This feature makes sure that third party devices connected to the Security Group (through the Maestro Hyperscale Orchestrator) fail over quickly, when using dynamic routing.

The Link State Propagation is disabled by default.

Defining LSP Port Groups

Define LSP Port Groups in the /etc/lsp_groups.conf file.

Each line in this file defines one LSP Port Group with one or more interface groups, delimited by a comma.

An interface group has one or more interfaces, delimited by a plus sign (+).

Configuration file syntax

Item	Description
1	LSP Port Group (full syntax)
2	Interface Group
<if>	Physical Interface

Example 1:

eth1-01+eth2-01,eth3-01+eth4-01

In this example, the LSP Port Group has two interface groups with two interfaces:

• Interface Group 1 contains eth1-01 and eth2-01
• Interface Group 2 contains eth3-01 and eth4-01

Example 2:

eth1-02+eth1-03+eth1-04+eth1-05,eth3-02+eth4-02,eth3-03+eth4-03

In this example, the LSP port Group has three interface groups.

One group with four interfaces and two other groups with two interfaces each.

To add an LSP Port Group:

1. Connect to the command line on the Security Group.
2. Edit the /etc/lsp_groups.conf file in Vi editor.

   # vi /etc/lsp_groups.conf

   Note - If the lsp_groups.conf file does not exist, create it now with this command: # touch /etc/lsp_groups.conf

3. Add one line for each LSP Port Group in the file.
4. Save the changes and exit from Vi editor.
5. Copy the file to all SGMs:

   # asg_cp2blades /etc/lsp_groups.conf

6. Restart the LSP mechanism with these two commands:

   # asg_lsp_util disable

   # asg_lsp_util enable

   This step in necessary for the system to detect the change.

To delete an LSP Port Group:

Important - If you do not use the LSP, disable it (with the asg_lsp_util disable command). Do not delete the configuration file, or the only LSP port group line in the file.

1. Connect to the command line on the Security Group.
2. Edit the /etc/lsp_groups.conf file in Vi editor.

   # vi /etc/lsp_groups.conf

3. Delete the applicable LSP Port Group line from the file.
4. Save the changes and exit from Vi editor.
5. Copy the file to all SGMs:

   # asg_cp2blades /etc/lsp_groups.conf

6. Restart the LSP mechanism with these two commands:

   # asg_lsp_util disable

   # asg_lsp_util enable

   This step in necessary for the system to detect the change.