注:此实验需要HCL3.1版本,3.1以下不支持easy-irf,请用IRF2.0代替

实验拓扑

注:如无特别说明,描述中的 R1 或 SW1 对应拓扑中设备名称末尾数字为 1 的设备,R2 或 SW2 对应拓扑中设备名称末尾数字为 2 的设备,以此类推;此拓扑请严格按照图示接口连接线缆


实验需求

  1. SW1,SW2组成一台 IRF 堆叠设备,并使用BFD MAD技术
  2. 交换机 IRF 设备 ID 与设备编号一致

    实验解法

    分析:根据需求,交换机 IRF 设备 ID 与设备编号一致,所以需要修改 SW2的 IRF 设备 ID,并保存配置后,重启生效后才可进行后续配置

    easy-irf命令用于快速配置IRF,技术详情

步骤 1:配置SW1为IRF主,优先级为32,并创建业务vlan 10、20

  1. [H3C]vlan 10
  2. [H3C-vlan10]vlan 20
  3. [H3C]easy-irf member 1 domain 10 priority 32 irf-port1 Ten-GigabitEthernet 1/0/50 Ten-GigabitEthernet 1/0/51

步骤 2:配置SW2为IRF备,优先级为缺省1

  1. [H3C]easy-irf member 1 renumber 2 domain 10 irf-port2 Ten-GigabitEthernet 1/0/50 Ten-GigabitEthernet 1/0/51

测试:display irf,如下就已堆叠成功

  1. [SW2]disp irf
  2. MemberID Role Priority CPU-Mac Description
  3. *1 Master 32 8085-892d-0104 ---
  4. +2 Standby 1 8085-8b56-0204 ---
  5. --------------------------------------------------
  6. * indicates the device is the master.
  7. + indicates the device through which the user logs in.
  8. The bridge MAC of the IRF is: 8085-892d-0100
  9. Auto upgrade : yes
  10. Mac persistent : 6 min
  11. Domain ID : 10

步骤 3:用vlan 1000做为BFD MAD检测vlan,int g1/0/3做BFD检测端口,技术详情

  1. [H3C-Vlan-interface1000]vlan 1000
  2. [H3C-vlan1000] description BFD-MAD
  3. [H3C-vlan1000]interface Vlan-interface1000
  4. [H3C-Vlan-interface1000] mad bfd enable
  5. [H3C-Vlan-interface1000] mad ip address 169.255.255.1 255.255.255.252 member 1
  6. [H3C-Vlan-interface1000] mad ip address 169.255.255.2 255.255.255.252 member 2
  7. interface Bridge-Aggregation1023
  8. description For:mad
  9. interface Bridge-Aggregation1024
  10. description For:mad
  11. interface GE1/0/3
  12. undo stp enable
  13. port link-aggregation group 1023
  14. interface GE 1/0/4
  15. undo stp enable
  16. port link-aggregation group 1023
  17. interface GE 2/0/3
  18. undo stp enable
  19. port link-aggregation group 1024
  20. interface GE 2/0/4
  21. undo stp enable
  22. port link-aggregation group 1024
  23. interface Bridge-Aggregation1023
  24. undo stp enable
  25. port access vlan 1000
  26. interface Bridge-Aggregation1024
  27. undo stp enable
  28. port access vlan 1000

测试:display mad verbose,当MAD status为Faulty 是没有问题的。当IRF分裂时MAD工作时MAD status为Normal

  1. [H3C]display mad ?
  2. > Redirect it to a file
  3. >> Redirect it to a file in append mode
  4. verbose Detailed information
  5. | Matching output
  6. <cr>
  7. [H3C]display mad ver
  8. [H3C]display mad verbose
  9. Multi-active recovery state: No
  10. Excluded ports (user-configured):
  11. Excluded ports (system-configured):
  12. IRF physical interfaces:
  13. Ten-GigabitEthernet1/0/50
  14. Ten-GigabitEthernet1/0/51
  15. Ten-GigabitEthernet2/0/50
  16. Ten-GigabitEthernet2/0/51
  17. BFD MAD interfaces:
  18. Vlan-interface1000
  19. GigabitEthernet1/0/3
  20. MAD ARP disabled.
  21. MAD ND disabled.
  22. MAD LACP disabled.
  23. MAD BFD enabled interface: Vlan-interface1000
  24. MAD status : Faulty
  25. Member ID MAD IP address Neighbor MAD status
  26. 1 169.255.255.1/30 2 Faulty
  27. 2 169.255.255.2/30 1 Faulty
  28. [H3C]display bfd session
  29. Total Session Num: 1 Up Session Num: 0 Init Mode: Active
  30. IPv4 session working in control packet mode:
  31. LD/RD SourceAddr DestAddr State Holdtime Interface
  32. 34881/0 169.255.255.1 169.255.255.2 Down / Vlan1000

步骤 4:SW1 SW2配置

  1. vlan 10
  2. vlan 20
  3. int br 2
  4. port link-type trunk
  5. undo port trunk permit vlan 1
  6. port trunk permit vlan 10 20
  7. int br 1
  8. port link-type trunk
  9. undo port trunk permit vlan 1
  10. port trunk permit vlan 10 20
  11. int g 1/0/1
  12. port link-a g 1
  13. int g 2/0/1
  14. port link-a g 1
  15. int g 1/0/2
  16. port link-a g 2
  17. int g 2/0/2
  18. port link-a g 2

步骤 3:配置SW3,将连接SW1、SW2的口配置为TRUNK,连接PC的为access口并创建VLAN

  1. [H3C]vlan 10
  2. [H3C-vlan10]vlan 20
  3. [H3C]int br 1
  4. [H3C-Bridge-Aggregation1] port link-type trunk
  5. [H3C-Bridge-Aggregation1] undo port trunk permit vlan 1
  6. [H3C-Bridge-Aggregation1] port trunk permit vlan 10 20
  7. [H3C-Bridge-Aggregation1]int ran g 1/0/1 to g 1/0/2
  8. [H3C-if-range] port link-a g 1
  9. [H3C-if-range]interface GigabitEthernet 1/0/3
  10. [H3C-GigabitEthernet1/0/3] port access vlan 10
  11. [H3C-GigabitEthernet1/0/3]interface GigabitEthernet 1/0/4
  12. [H3C-GigabitEthernet1/0/4] port access vlan 20

步骤 4:在路由器上创建网关,并起三层聚合口,将互联下方IRF的口加入

  1. [H3C]interface Route-Aggregation 1
  2. [H3C-Route-Aggregation1]interface GigabitEthernet 0/0/0
  3. [H3C-GigabitEthernet0/0/0] port link-aggregation group 1
  4. [H3C-GigabitEthernet0/0/0]interface GigabitEthernet 0/0/1
  5. [H3C-GigabitEthernet0/0/1] port link-aggregation group 1
  6. [H3C]int Route-Aggregation 1.10
  7. [H3C-Route-Aggregation1.10]ip address 172.16.10.254 24
  8. [H3C-Route-Aggregation1.10]vlan-type dot1q vid 10
  9. [H3C-Route-Aggregation1.10]int Route-Aggregation 1.20
  10. [H3C-Route-Aggregation1.20]ip address 192.168.100.254 24
  11. [H3C-Route-Aggregation1.20]vlan-type dot1q vid 20