H3C IRF2配置.docx

前言IRF2（Intelligent Resilient Framework，智能彈性架構(gòu)）是H3C自主研發(fā)的軟件虛擬化技術(shù)，通過(guò)將多臺(tái)設(shè)備虛擬為一臺(tái)設(shè)備，可以簡(jiǎn)化網(wǎng)絡(luò)拓?fù)?，提高管理效率，并能提?:N的設(shè)備級(jí)備份，幫助您實(shí)現(xiàn)業(yè)界領(lǐng)先的企業(yè)網(wǎng)、數(shù)據(jù)中心匯聚/核心層解決方案。本章將為您介紹如果使用多臺(tái)S5820V2&S5830V2系列交換機(jī)組建基于IRF技術(shù)的虛擬化設(shè)備。配置要求本次試驗(yàn)通過(guò)2臺(tái)支持虛擬化交換機(jī)進(jìn)行配置，將兩臺(tái)物理設(shè)備進(jìn)行虛擬化后邏輯合成一臺(tái)設(shè)備。試驗(yàn)環(huán)境配置過(guò)程主機(jī)一： system-viewSysname interface range ten-gigabitethernet 1/0/49 to ten-gigabitethernet 1/0/50Sysname-if-range shutdownSysname-if-range quitSysname irf-port 1/1Sysname-irf-port1/1 port group interface ten-gigabitethernet 1/0/49Sysname-irf-port1/1 port group interface ten-gigabitethernet 1/0/50Sysname-irf-port1/1 quitSysname interface range ten-gigabitethernet 1/0/49 to ten-gigabitethernet 1/0/50Sysname-if-range undo shutdownSysname-if-range quitSysname irf member 1 priority 31Sysname irf-port-configuration activeSysnamesave主機(jī)二 system-viewSysname irf member 1 renumber 2Warning: Renumbering the member ID may result in configuration change or loss. Continue? Y/N:ySysname quit reboot system-viewSysname interface range ten-gigabitethernet 2/0/49 to ten-gigabitethernet 2/0/50Sysname-if-range shutdownSysname-if-range quitSysname irf-port 2/2Sysname-irf-port2/2 port group interface ten-gigabitethernet 2/0/25Sysname-irf-port2/2 port group interface ten-gigabitethernet 2/0/26Sysname-irf-port2/2 quitSysname interface range ten-gigabitethernet 2/0/49 to ten-gigabitethernet 2/0/50Sysname-if-range undo shutdownSysname-if-range quit save system-viewSysname irf-port-configuration active 二層利用LACP進(jìn)行檢測(cè)，在數(shù)據(jù)中心組網(wǎng)中，為了實(shí)現(xiàn)更簡(jiǎn)單的拓?fù)浣Y(jié)構(gòu)，一般在接入層和匯聚層均采用IRF技術(shù)進(jìn)行整合。先將核心交換機(jī)與接入交換機(jī)之間互連的4個(gè)端口進(jìn)行兩兩捆綁，然后開(kāi)啟LACP檢測(cè)。Sysname interface bridge-aggregation 1Sysname-Bridge-Aggregation2 link-aggregation mode dynamicSysname-Bridge-Aggregation2 mad enableSysname-Bridge-Aggregation21二層也還可以利用BFD進(jìn)行快速檢測(cè)，在用于BFD MAD檢測(cè)的接口下必須使用mad ip address命令配置MAD IP地址，而不要配置其它IP地址（包括使用ip address命令配置的普通IP地址、VRRP虛擬IP地址等），以免影響MAD檢測(cè)功能。（但不推薦，因要將端口如G1/0/1，G2/0/1，G3/0/1，以及接入設(shè)備G1/0/1-4劃入同一VLAN內(nèi)，實(shí)際情況中很少有有將多個(gè)端口劃入同一個(gè)VLAN） system-viewSysname vlan 1000Sysname-vlan1000 port ten-gigabitethernet 1/0/1 ten-gigabitethernet 2/0/1 ten-gigabitethernet 3/0/1 ten-gigabitethernet 4/0/1Sysname-vlan3 quitSysname interface vlan-interface 1000Sysname-Vlan-interface1000 mad bfd enableSysname-Vlan-interface1000 mad ip address 192.168.2.1 24 member 1Sysname-Vlan-interface1000 mad ip address 192.168.2.2 24 member 2Sysname-Vlan-interface1000 mad ip address 192.168.2.3 24 member 3Sysname-Vlan-interface1000 mad ip address 192.168.2.4 24 member 4Sysname-Vlan-interface1000 quit因?yàn)锽FD MAD和生成樹(shù)功能互斥，所以在用于BFD MAD檢測(cè)的端口上關(guān)閉生成樹(shù)協(xié)議。Sysname interface ten-gigabitethernet 1/0/1Sysname-Ten-Gigabitethernet-1/0/1 undo stp enableSysname-Ten-Gigabitethernet-1/0/1 quitSysname interface ten-gigabitethernet 2/0/1Sysname-Ten-Gigabitethernet-2/0/1 undo stp enableSysname-Ten-Gigabitethernet-2/0/1 quitSysname interface ten-gigabitethernet 3/0/1Sysname-Ten-Gigabitethernet-3/0/1 undo stp enableSysname-Ten-Gigabitethernet-3/0/1 quitSysname interface ten-gigabitethernet 4/0/1Sysname-Ten-Gigabitethernet-4/0/1 undo stp enableSysname-Ten-Gigabitethernet-4/0/1 quit重點(diǎn)實(shí)際環(huán)境中，往往是以上環(huán)境進(jìn)行檢測(cè)配置，具體配置如下：(1)配置RouterA# 創(chuàng)建VLAN40和VLAN42。 system-viewRouterA vlan 40RouterA-vlan40 quitRouterA vlan 42RouterA-vlan42 quit# 創(chuàng)建一個(gè)動(dòng)態(tài)聚合接口40。RouterA interface bridge-aggregation 40RouterA-Bridge-Aggregation40 link-aggregation mode dynamicRouterA-Bridge-Aggregation40 quit# 在聚合接口中添加成員端口Ten-GigabitEthernet1/0/1、Ten-GigabitEthernet1/0/2、Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4。RouterA interface ten-gigabitethernet 1/0/1RouterA-Ten-GigabitEthernet1/0/1 port link-aggregation group 40RouterA-Ten-GigabitEthernet1/0/1 quitRouterA interface ten-gigabitethernet 1/0/2RouterA-Ten-GigabitEthernet1/0/2 port link-aggregation group 40RouterA-Ten-GigabitEthernet1/0/2 quitRouterA interface ten-gigabitethernet 1/0/3RouterA-Ten-GigabitEthernet1/0/3 port link-aggregation group 40RouterA-Ten-GigabitEthernet1/0/3 quitRouterA interface ten-gigabitethernet 1/0/4RouterA-Ten-GigabitEthernet1/0/4 port link-aggregation group 40RouterA-Ten-GigabitEthernet1/0/4 quit# 將聚合接口40加入VLAN40。RouterA interface bridge-aggregation 40RouterA-Bridge-Aggregation40 port access vlan 40# 創(chuàng)建一個(gè)動(dòng)態(tài)聚合接口42。RouterA interface bridge-aggregation 42RouterA-Bridge-Aggregation42 link-aggregation mode dynamicRouterA-Bridge-Aggregation42 quit# 在聚合接口中添加成員端口Ten-GigabitEthernet1/0/5、Ten-GigabitEthernet1/0/6。RouterA interface ten-gigabitethernet 1/0/5RouterA-Ten-GigabitEthernet1/0/5 port link-aggregation group 42RouterA-Ten-GigabitEthernet1/0/5 quitRouterA interface ten-gigabitethernet 1/0/6RouterA-Ten-GigabitEthernet1/0/6 port link-aggregation group 42RouterA-Ten-GigabitEthernet1/0/6 quit# 將聚合接口42加入VLAN42。RouterA interface bridge-aggregation 42RouterA-Bridge-Aggregation42 port access vlan 42RouterA-Bridge-Aggregation42 quit# 為VLAN40和VLAN42創(chuàng)建VLAN接口，并配置IP地址。RouterA interface vlan-interface 40RouterA-Vlan-interface40 ip address 10.214.50.2 30RouterA-Vlan-interface40 quitRouterA interface vlan-interface 42RouterA-Vlan-interface42 ip address 10.214.50.9 30RouterA-Vlan-interface42 quit# 配置OSPF，發(fā)布本地三個(gè)直連網(wǎng)段。RouterA ospfRouterA-ospf-1 import-route directRouterA-ospf-1 area 0RouterA-ospf-1-area-0.0.0.0 network 10.214.60.0 0.0.0.3RouterA-ospf-1-area-0.0.0.0 network 10.214.50.0 0.0.0.3RouterA-ospf-1-area-0.0.0.0 network 10.214.50.8 0.0.0.3RouterA-ospf-1-area-0.0.0.0 quitRouterA-ospf-1 quit(2)配置RouterB# 創(chuàng)建VLAN41、VLAN42。 system-viewRouterB vlan 41 to 42# 創(chuàng)建一個(gè)動(dòng)態(tài)聚合接口41。RouterB interface bridge-aggregation 41RouterB-Bridge-Aggregation41 link-aggregation mode dynamicRouterB-Bridge-Aggregation41 quit# 在聚合接口中添加成員端口Ten-GigabitEthernet1/0/1、Ten-GigabitEthernet1/0/2、Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4。RouterB interface ten-gigabitethernet 1/0/1RouterB-Ten-GigabitEthernet1/0/1 port link-aggregation group 41RouterB-Ten-GigabitEthernet1/0/1 quitRouterB interface ten-gigabitethernet 1/0/2RouterB-Ten-GigabitEthernet1/0/2 port link-aggregation group 41RouterB-Ten-GigabitEthernet1/0/2 quitRouterB interface ten-gigabitethernet 1/0/3RouterB-Ten-GigabitEthernet1/0/3 port link-aggregation group 41RouterB-Ten-GigabitEthernet1/0/3 quitRouterB interface ten-gigabitethernet 1/0/4RouterB-Ten-GigabitEthernet1/0/4 port link-aggregation group 41RouterB-Ten-GigabitEthernet1/0/4 quit# 將聚合接口41加入VLAN41。RouterB interface bridge-aggregation 41RouterB-Bridge-Aggregation41 port access vlan 41RouterB-Bridge-Aggregation41 quit# 創(chuàng)建一個(gè)動(dòng)態(tài)聚合接口42。RouterB interface bridge-aggregation 42RouterB-Bridge-Aggregation42 link-aggregation mode dynamicRouterB-Bridge-Aggregation42 port access vlan 42RouterB-Bridge-Aggregation42 quit# 在聚合接口中添加成員端口Ten-GigabitEthernet1/0/5、Ten-GigabitEthernet1/0/6。RouterB interface ten-gigabitethernet 1/0/5RouterB-Ten-GigabitEthernet1/0/5 port link-aggregation group 42RouterB-Ten-GigabitEthernet1/0/5 quitRouterB interface ten-gigabitethernet 1/0/6RouterB-Ten-GigabitEthernet1/0/6 port link-aggregation group 42RouterB-Ten-GigabitEthernet1/0/6 quit# 將聚合接口42加入VLAN42。RouterB interface bridge-aggregation 42RouterB-Bridge-Aggregation42 port access vlan 42RouterB-Bridge-Aggregation42 quit# 為VLAN41和VLAN42創(chuàng)建VLAN接口，并配置IP地址。RouterB interface vlan-interface 41RouterB-Vlan-interface41 ip address 10.214.50.6 30RouterB-Vlan-interface41 quitRouterB interface vlan-interface 42RouterB-Vlan-interface42 ip address 10.214.50.10 30RouterB-Vlan-interface42 quit# 配置OSPF，發(fā)布本地三個(gè)直連網(wǎng)段。RouterB ospfRouterB-ospf-1 import-route directRouterB-ospf-1 area 0RouterB-ospf-1-area-0.0.0.0 network 10.214.70.0 0.0.0.3RouterB-ospf-1-area-0.0.0.0 network 10.214.50.0 0.0.0.3RouterB-ospf-1-area-0.0.0.0 network 10.214.50.8 0.0.0.3RouterB-ospf-1-area-0.0.0.0 quitRouterB-ospf-1 quit(3)配置IRF# 創(chuàng)建VLAN10、VLAN20、VLAN40、VLAN41。 system-viewSysname vlan 10Sysname-vlan10 quitSysname vlan 20Sysname-vlan20 quitSysname vlan 40Sysname-vlan40 quitSysname vlan 41Sysname-vlan41 quit# 創(chuàng)建一個(gè)動(dòng)態(tài)聚合接口10。Sysname interface bridge-aggregation 10Sysname-Bridge-Aggregation10 link-aggregation mode dynamicSysname-Bridge-Aggregation10 quit# 在聚合接口中添加成員端口，包括Ten-GigabitEthernet1/0/10、Ten-GigabitEthernet2/0/10、Ten-GigabitEthernet3/0/10、Ten-GigabitEthernet4/0/10。Sysname interface ten-gigabitethernet 1/0/10Sysname-Ten-GigabitEthernet1/0/10 port link-aggregation group 10Sysname-Ten-GigabitEthernet1/0/10 quitSysname interface ten-gigabitethernet 2/0/10Sysname-Ten-GigabitEthernet2/0/10 port link-aggregation group 10Sysname-Ten-GigabitEthernet2/0/10 quitSysname interface ten-gigabitethernet 3/0/10Sysname-Ten-GigabitEthernet3/0/10 port link-aggregation group 10Sysname-Ten-GigabitEthernet3/0/10 quitSysname interface ten-gigabitethernet 4/0/10Sysname-Ten-GigabitEthernet4/0/10 port link-aggregation group 10Sysname-Ten-GigabitEthernet4/0/10 quit# 將聚合接口10加入VLAN10。Sysname interface bridge-aggregation 10Sysname-Bridge-Aggregation10 port access vlan 10Sysname-Bridge-Aggregation10 quit# 請(qǐng)按2. 圖12下方表格中的內(nèi)容配置聚合接口20、40、41，并將聚合組加入相應(yīng)VLAN，以及在聚合組中加入相應(yīng)的端口，配置過(guò)程不再贅述。# 為VLAN10、VLAN20、VLAN40、VLAN41創(chuàng)建VLAN接口，并配置IP地址。Sysname interface vlan-interface 10Sysname-Vlan-interface10 ip address 10.214.10.1 24Sysname-Vlan-interface10 quitSysname interface vlan-interface 20Sysname-Vlan-interface20 ip address 10.214.20.1 24Sysname-Vlan-interface20 quitSysname interface vlan-interface 40Sysname-Vlan-interface40 ip address 10.214.50.1 30Sysname-Vlan-interface40 quitSysname interface vlan-interface 41Sysname-Vlan-interface41 ip address 10.214.50.5 30Sysname-Vlan-interface41 quit# 配置OSPF，發(fā)布本地所有直連網(wǎng)段。Sysname ospfSysname-ospf-1 import-route directSysname-ospf-1 area 0Sysname-ospf-1-area-0.0.0.0 network 10.214.10.0 0.0.0.255Sysname-ospf-1-area-0.0.0