Grouping Interfaces with allow-* Tags

Follow

Multiple interfaces can be manipulated at the same time with ifup/ifdown/ifreload by applying the allow- keyword to those interfaces in /etc/network/interfaces. Grouping interfaces with the allow- keyword can reduce administrative overhead. This feature in Cumulus Linux is inherited from ifupdown, and can also be used on Debian-based hosts.

Operational Examples

The configuration in the next section enables the following example operations.

Shut down all uplink ports:

cumulus@switch$ sudo ifdown --allow uplink

Reload the configuration for ports down-revved to 1G:

cumulus@switch$ sudo ifreload --allow 1g

Bring up hosts connected to Docker hosts:

cumulus@switch$ sudo ifup --allow docker

Shut all dataplane ports:

cumulus@switch$ sudo ifdown --allow dp

Note: You can accomplish this without configuring allow- by issuing sudo ifdown -aX eth0

Example Configuration

Where noted with <config truncated/>, interface configuration has been truncated to keep the example brief.

# The loopback network interface
auto lo
iface lo inet loopback
    address 10.10.10.10/32

# The primary network interface
allow-mgmt eth0
auto eth0
iface eth0 dhcp

# ESX Host Ports
################
auto swp1
allow-dp swp1
allow-esx swp1
iface swp1
    alias esx1

auto swp2
allow-dp swp2
allow-1g swp2
allow-esx swp2
iface swp2
iface swp2
    alias esx2
    link-speed 1000
    link-duplex full

auto swp3
allow-dp swp3
allow-esx swp3
iface swp3
    alias esx3


# Docker Host Ports
###################

auto swp10
allow-dp swp10
allow-docker swp10
iface swp10
    alias docker1

auto swp11
allow-dp swp11
allow-1g swp11
allow-docker swp11
iface swp11
    alias docker2
    link-speed 1000
    link-duplex full


# OSPF Uplinks
##############
allow-uplink swp49 swp50

auto swp49
allow-dp swp49
iface swp49
    address 10.10.10.10/32

auto swp50
allow-dp swp50
iface swp50
    address 10.10.10.10/32

Notes

  • Multiple allow- keywords can be applied to the same interface.
  • The allow- keyword can be applied to multiple interfaces at the same time or on an interface-by-interface basis. When applied on an interface-by-interface basis, the tags applied to a certain interface are clearer.
  • The allow- keyword can be applied to any interface, including logical interfaces such as bridges and bonds.
Have more questions? Submit a request

Comments

Powered by Zendesk