注:此实验需要HCL3.1版本,3.1以下不支持easy-irf,请用IRF2.0代替
实验拓扑
注:如无特别说明,描述中的 R1 或 SW1 对应拓扑中设备名称末尾数字为 1 的设备,R2 或 SW2 对应拓扑中设备名称末尾数字为 2 的设备,以此类推;此拓扑请严格按照图示接口连接线缆
实验需求
- SW1,SW2组成一台 IRF 堆叠设备,并使用BFD MAD技术
- 交换机 IRF 设备 ID 与设备编号一致
实验解法
分析:根据需求,交换机 IRF 设备 ID 与设备编号一致,所以需要修改 SW2的 IRF 设备 ID,并保存配置后,重启生效后才可进行后续配置easy-irf命令用于快速配置IRF,技术详情
步骤 1:配置SW1为IRF主,优先级为32,并创建业务vlan 10、20
[H3C]vlan 10
[H3C-vlan10]vlan 20
[H3C]easy-irf member 1 domain 10 priority 32 irf-port1 Ten-GigabitEthernet 1/0/50 Ten-GigabitEthernet 1/0/51
步骤 2:配置SW2为IRF备,优先级为缺省1
[H3C]easy-irf member 1 renumber 2 domain 10 irf-port2 Ten-GigabitEthernet 1/0/50 Ten-GigabitEthernet 1/0/51
测试:display irf
,如下就已堆叠成功
[SW2]disp irf
MemberID Role Priority CPU-Mac Description
*1 Master 32 8085-892d-0104 ---
+2 Standby 1 8085-8b56-0204 ---
--------------------------------------------------
* indicates the device is the master.
+ indicates the device through which the user logs in.
The bridge MAC of the IRF is: 8085-892d-0100
Auto upgrade : yes
Mac persistent : 6 min
Domain ID : 10
步骤 3:用vlan 1000做为BFD MAD检测vlan,int g1/0/3做BFD检测端口,技术详情
[H3C-Vlan-interface1000]vlan 1000
[H3C-vlan1000] description BFD-MAD
[H3C-vlan1000]interface Vlan-interface1000
[H3C-Vlan-interface1000] mad bfd enable
[H3C-Vlan-interface1000] mad ip address 169.255.255.1 255.255.255.252 member 1
[H3C-Vlan-interface1000] mad ip address 169.255.255.2 255.255.255.252 member 2
interface Bridge-Aggregation1023
description For:mad
interface Bridge-Aggregation1024
description For:mad
interface GE1/0/3
undo stp enable
port link-aggregation group 1023
interface GE 1/0/4
undo stp enable
port link-aggregation group 1023
interface GE 2/0/3
undo stp enable
port link-aggregation group 1024
interface GE 2/0/4
undo stp enable
port link-aggregation group 1024
interface Bridge-Aggregation1023
undo stp enable
port access vlan 1000
interface Bridge-Aggregation1024
undo stp enable
port access vlan 1000
测试:display mad verbose,当MAD status为Faulty 是没有问题的。当IRF分裂时MAD工作时MAD status为Normal
[H3C]display mad ?
> Redirect it to a file
>> Redirect it to a file in append mode
verbose Detailed information
| Matching output
<cr>
[H3C]display mad ver
[H3C]display mad verbose
Multi-active recovery state: No
Excluded ports (user-configured):
Excluded ports (system-configured):
IRF physical interfaces:
Ten-GigabitEthernet1/0/50
Ten-GigabitEthernet1/0/51
Ten-GigabitEthernet2/0/50
Ten-GigabitEthernet2/0/51
BFD MAD interfaces:
Vlan-interface1000
GigabitEthernet1/0/3
MAD ARP disabled.
MAD ND disabled.
MAD LACP disabled.
MAD BFD enabled interface: Vlan-interface1000
MAD status : Faulty
Member ID MAD IP address Neighbor MAD status
1 169.255.255.1/30 2 Faulty
2 169.255.255.2/30 1 Faulty
[H3C]display bfd session
Total Session Num: 1 Up Session Num: 0 Init Mode: Active
IPv4 session working in control packet mode:
LD/RD SourceAddr DestAddr State Holdtime Interface
34881/0 169.255.255.1 169.255.255.2 Down / Vlan1000
步骤 4:SW1 SW2配置
vlan 10
vlan 20
int br 2
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 20
int br 1
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10 20
int g 1/0/1
port link-a g 1
int g 2/0/1
port link-a g 1
int g 1/0/2
port link-a g 2
int g 2/0/2
port link-a g 2
步骤 3:配置SW3,将连接SW1、SW2的口配置为TRUNK,连接PC的为access口并创建VLAN
[H3C]vlan 10
[H3C-vlan10]vlan 20
[H3C]int br 1
[H3C-Bridge-Aggregation1] port link-type trunk
[H3C-Bridge-Aggregation1] undo port trunk permit vlan 1
[H3C-Bridge-Aggregation1] port trunk permit vlan 10 20
[H3C-Bridge-Aggregation1]int ran g 1/0/1 to g 1/0/2
[H3C-if-range] port link-a g 1
[H3C-if-range]interface GigabitEthernet 1/0/3
[H3C-GigabitEthernet1/0/3] port access vlan 10
[H3C-GigabitEthernet1/0/3]interface GigabitEthernet 1/0/4
[H3C-GigabitEthernet1/0/4] port access vlan 20
步骤 4:在路由器上创建网关,并起三层聚合口,将互联下方IRF的口加入
[H3C]interface Route-Aggregation 1
[H3C-Route-Aggregation1]interface GigabitEthernet 0/0/0
[H3C-GigabitEthernet0/0/0] port link-aggregation group 1
[H3C-GigabitEthernet0/0/0]interface GigabitEthernet 0/0/1
[H3C-GigabitEthernet0/0/1] port link-aggregation group 1
[H3C]int Route-Aggregation 1.10
[H3C-Route-Aggregation1.10]ip address 172.16.10.254 24
[H3C-Route-Aggregation1.10]vlan-type dot1q vid 10
[H3C-Route-Aggregation1.10]int Route-Aggregation 1.20
[H3C-Route-Aggregation1.20]ip address 192.168.100.254 24
[H3C-Route-Aggregation1.20]vlan-type dot1q vid 20