! Source: https://github.com/busterswt/spine-leaf-lab (with_ospf_bgp_evpn/ospf-bgp-evpn-xk32-1.txt)
! License: unlicensed device-output (no LICENSE file; gh api /license = 404) -- factual-output precedent
! Snapshot: NX-OS 9.3(12) leaf running-config -- exercises trunk-native-vlan (Eth1/6, Eth1/7, port-channel999) + vrf management static default route

!Command: show running-config
!Running configuration last done at: Thu Sep 28 03:36:21 2023
!Time: Thu Sep 28 03:45:34 2023

version 9.3(12) Bios:version
hostname xk32-1
policy-map type network-qos jumbo
  class type network-qos class-default
    mtu 9216
vdc xk32-1 id 1
  limit-resource vlan minimum 16 maximum 4094
  limit-resource vrf minimum 2 maximum 4096
  limit-resource port-channel minimum 0 maximum 511
  limit-resource u4route-mem minimum 248 maximum 248
  limit-resource u6route-mem minimum 96 maximum 96
  limit-resource m4route-mem minimum 58 maximum 58
  limit-resource m6route-mem minimum 8 maximum 8

feature scp-server
cfs eth distribute
nv overlay evpn
feature ospf
feature bgp
feature fabric forwarding
feature interface-vlan
feature vn-segment-vlan-based
feature hsrp
feature lacp
feature vpc
feature lldp
feature nv overlay

logging level aaa 6
logging level acllog 6
logging level aclmgr 6
logging level adbm 6
logging level bootvar 6
logging level callhome 6
logging level capability 6
logging level cdp 6
logging level cert_enroll 6
logging level cfs 6
logging level clk_mgr 6
logging level confcheck 6
logging level copp 6
logging level dhclient 6
logging level diag_port_lb 6
logging level diagmgr 6
logging level eltm 6
logging level eth_dstats 6
logging level eth_port_channel 6
logging level ethpm 6
logging level evmc 6
logging level evms 6
logging level feature-mgr 6
logging level fs-daemon 6
logging level gpixm 6
logging level ifmgr 6
logging level interface-vlan 6
logging level ipfib 6
logging level ipqosmgr 6
logging level l2fm 6
logging level l2pt 6
logging level lim 6
logging level mmode 6
logging level module 6
logging level monitor 6
logging level mvsh 6
logging level ntp 6
logging level otm 6
logging level pfstat 6
logging level pixm 6
logging level platform 6
logging level plcmgr 6
logging level pltfm_config 6
logging level plugin 6
logging level radius 6
logging level res_mgr 6
logging level sal 6
logging level securityd 6
logging level session-mgr 6
logging level sksd 6
logging level snmpd 3
logging level snmpmib_proc 6
logging level spanning-tree 6
logging level stripcl 6
logging level template_manager 6
logging level ufdm 6
logging level virtual-service 6
logging level vlan_mgr 6
logging level vshd 6
logging level xmlma 6
logging level urib 6
logging level igmp 6
logging level mrib 6
logging level m6rib 6
logging level arp 6
logging level clis 6
logging level netstack 6
logging level icmpv6 6
logging level adjmgr 6
logging level ecp 6
logging level rpm 6
logging level smm 6
logging level u6rib 6

no password strength-check
username admin password 5 $5$fakeSALT$fakeHashExampleValue000000000000000000000
 role network-admin

banner motd #
               \|||/
               (o o)
------------ooO-(_)-Ooo------------
Device: xk32-1 (192.168.45.55)
Device::Access on Nexus9000 C9300v Chassis

Location: lab
Notes: lab

-----------------------------------
#

no ip domain-lookup
spanning-tree mode mst
errdisable recovery interval 30
errdisable recovery cause link-flap
errdisable recovery cause bpduguard
system qos
  service-policy type network-qos jumbo
copp profile strict
ip tftp source-interface Vlan15
snmp-server user admin network-admin auth md5 0000FAKE0000FAKE0000FAKE0000FAKE0000
00 priv 0000FAKE0000FAKE0000FAKE0000FAKE0000 localizedV2key
rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO
snmp-server enable traps cfs state-change-notif
snmp-server enable traps cfs merge-failure
snmp-server enable traps aaa server-state-change
snmp-server enable traps sysmgr cseFailSwCoreNotifyExtended
snmp-server enable traps config ccmCLIRunningConfigChanged
snmp-server enable traps link cisco-xcvr-mon-status-chg
snmp-server enable traps bridge newroot
snmp-server enable traps bridge topologychange
snmp-server enable traps stpx inconsistency
snmp-server enable traps stpx root-inconsistency
snmp-server enable traps stpx loop-inconsistency
ntp source-interface Vlan15
ntp access-group peer ALLOW
ntp access-group serve DROP

fabric forwarding anycast-gateway-mac 0000.0010.0999
ip route 0.0.0.0/0 192.168.45.1
no ip source-route
no ip igmp snooping
vlan 1,15,600,900
vlan 15
  name oob_mgmt
vlan 600
  name BLUE_NET_600
  vn-segment 10000600
vlan 900
  name L3-VNI-VLAN-900
  vn-segment 1000900

spanning-tree mst configuration
  name REGION-1
  revision 1
  instance 1 vlan 1-4094
vrf context PUBLIC
  vni 10000900
  rd auto
  address-family ipv4 unicast
    route-target both auto
    route-target both auto evpn
vrf context management
  ip route 0.0.0.0/0 192.168.45.1
no hardware access-list update atomic
hardware access-list update default-result permit
hardware access-list tcam region racl 1024
hardware access-list tcam region span 0
hardware access-list tcam region arp-ether 256 double-wide
vpc domain 438
  peer-switch
  role priority 1
  peer-keepalive destination 192.168.100.6 source 192.168.100.5
  auto-recovery
no lldp tlv-select system-description
no lldp tlv-select system-capabilities
no lldp tlv-select management-address v4
no lldp tlv-select port-vlan
no lldp tlv-select management-address v6


interface Vlan1

interface Vlan15
  no shutdown
  ip address 192.168.45.55/24

interface Vlan600
  description ospc_provider_net_100.64.90.0/24
  no shutdown
  mtu 9000
  vrf member PUBLIC
  no ip redirects
  ip address 100.64.90.2/24
  fabric forwarding mode anycast-gateway
  hsrp version 2
  hsrp 1
    authentication md5 key-string 7 0000FAKE0000FAKE0000FA
    preempt delay minimum 120
    priority 120
    timers  1  3
    ip 100.64.90.1

interface Vlan900
  no shutdown
  vrf member PUBLIC
  ip forward

interface port-channel10
  description x blue02 bond0
  switchport mode trunk
  switchport trunk allowed vlan 600
  spanning-tree port type edge trunk
  spanning-tree bpduguard enable
  vpc 10

interface port-channel999
  description x xk32-2 (po999) - vPC Peer Link
  switchport mode trunk
  switchport trunk native vlan 999
  spanning-tree port type network
  logging event port link-status
  logging event port trunk-status
  vpc peer-link

interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback0
  member vni 10000600
    suppress-arp
    ingress-replication protocol bgp
  member vni 10000900 associate-vrf

interface Ethernet1/1
  description x spine01
  no switchport
  mtu 9216
  medium p2p
  ip unnumbered loopback0
  ip router ospf OSPF_UNDERLAY_NET area 0.0.0.0
  no shutdown

interface Ethernet1/2
  description x spine02
  no switchport
  mtu 9216
  medium p2p
  ip unnumbered loopback0
  ip router ospf OSPF_UNDERLAY_NET area 0.0.0.0
  no shutdown

interface Ethernet1/3
  description x blue02
  switchport mode trunk
  switchport trunk allowed vlan 600
  spanning-tree port type edge trunk
  spanning-tree bpduguard enable
  channel-group 10 mode active

interface Ethernet1/4
  description x red01

interface Ethernet1/5
  description x mgmt01
  switchport access vlan 15

interface Ethernet1/6
  description po999 x xk32-2 (po999) - vPC Peer Link
  switchport mode trunk
  switchport trunk native vlan 999
  no logging event port link-status
  no logging event port trunk-status
  channel-group 999 mode active

interface Ethernet1/7
  description po999 x xk32-2 (po999) - vPC Peer Link
  switchport mode trunk
  switchport trunk native vlan 999
  no logging event port link-status
  no logging event port trunk-status
  channel-group 999 mode active

interface Ethernet1/8

interface Ethernet1/9

interface Ethernet1/10

interface Ethernet1/11

interface Ethernet1/12

interface Ethernet1/13

interface Ethernet1/14

interface Ethernet1/15

interface Ethernet1/16

interface Ethernet1/17

interface Ethernet1/18

interface Ethernet1/19

interface Ethernet1/20

interface Ethernet1/21

interface Ethernet1/22

interface Ethernet1/23

interface Ethernet1/24

interface Ethernet1/25

interface Ethernet1/26

interface Ethernet1/27

interface Ethernet1/28

interface Ethernet1/29

interface Ethernet1/30

interface Ethernet1/31

interface Ethernet1/32

interface Ethernet1/33

interface Ethernet1/34

interface Ethernet1/35

interface Ethernet1/36

interface Ethernet1/37

interface Ethernet1/38

interface Ethernet1/39

interface Ethernet1/40

interface Ethernet1/41

interface Ethernet1/42

interface Ethernet1/43

interface Ethernet1/44

interface Ethernet1/45

interface Ethernet1/46

interface Ethernet1/47

interface Ethernet1/48

interface Ethernet1/49

interface Ethernet1/50

interface Ethernet1/51

interface Ethernet1/52

interface Ethernet1/53

interface Ethernet1/54

interface Ethernet1/55

interface Ethernet1/56

interface Ethernet1/57

interface Ethernet1/58

interface Ethernet1/59

interface Ethernet1/60

interface Ethernet1/61

interface Ethernet1/62

interface Ethernet1/63

interface Ethernet1/64

interface mgmt0
  description MGMT x xk32-2 VPC KEEPALIVE
  vrf member management
  ip address 192.168.100.5/30

interface loopback0
  description Loopback
  ip address 192.168.0.5/32
  ip address 192.168.0.15/32 secondary
  ip router ospf OSPF_UNDERLAY_NET area 0.0.0.0
icam monitor scale

cli alias name wr copy running-config startup-config
line console
line vty
router ospf OSPF_UNDERLAY_NET
  log-adjacency-changes
router bgp 64520
  log-neighbor-changes
  address-family ipv4 unicast
  address-family l2vpn evpn
  template peer VXLAN_SPINE
    remote-as 64520
    update-source loopback0
    address-family ipv4 unicast
      send-community extended
      soft-reconfiguration inbound
    address-family l2vpn evpn
      send-community
      send-community extended
  neighbor 192.168.0.1
    inherit peer VXLAN_SPINE
  neighbor 192.168.0.2
    inherit peer VXLAN_SPINE
  vrf PUBLIC
    address-family ipv4 unicast
      advertise l2vpn evpn
evpn
  vni 10000600 l2
    rd auto
    route-target import auto
    route-target export auto
hardware ip glean throttle
hardware ip glean throttle maximum 32767
ip tcp path-mtu-discovery
logging level l3vm 6

logging source-interface mgmt0
logging level user 6
logging level mail 6
logging level syslog 6
logging level lpr 6
logging level news 6
logging level uucp 6
logging level cron 6
logging level ftp 6
logging level local0 6
logging level local1 6
logging level local2 6
logging level local3 6
logging level local4 6
logging level local5 6
logging level local6 6
logging level local7 6
boot nxos bootflash:/nxos.9.3.12.bin
