- 产品与解决方案
- 行业解决方案
- 服务
- 支持
- 合作伙伴
- 新华三人才研学中心
- 关于我们
00-S12500_IRF典型配置举例
本章节下载： 00-S12500_IRF典型配置举例 (440 KB)
本文档介绍了从单框设备配置为两框IRF、从单框设备配置为四框IRF和从两框IRF配置为四框IRF配置举例。
IRF（Intelligent Resilient Framework，智能弹性架构）是H3C自主研发的软件虚拟化技术，它的核心思想是将多台设备通过物理IRF端口连接在一起，进行必要的配置后，虚拟化成一台“虚拟设备”，通过该“虚拟设备”来实现多台设备的协同工作、统一管理和不间断维护。
为了便于描述，本文把这个虚拟化形成的设备称为IRF。
本文档中的配置均是在实验室环境下进行的配置和验证，配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置，为了保证配置效果，请确认现有配置和以下举例中的配置不冲突。
请确保成员设备间的IRF物理连线正确连接，与配置组网图保持一致。
本文假设您已了解IRF特性。
在配置IRF前，S12500必须满足以下条件，否则不能形成IRF：
· S12500只能与S12500组成IRF，不能与其他产品组成IRF；
· 组成IRF的设备上主控板类型必须相同，不同的主控板类型不能形成IRF；
· 组成IRF的设备的系统工作模式必须相同；
· 组成IRF的设备主机软件版本必须相同；
· 组成IRF的设备上acl hardware-mode ipv6命令必须配置一致，即都为acl hardware-mode ipv6 enable或都为acl hardware-mode ipv6 disable；
· 组成IRF的设备上vpn popgo命令必须配置一致，即都为vpn popgo或都为undo vpn popgo。
本设备上与IRF-Port1绑定的IRF物理端口只能和邻居成员设备IRF-Port2口上绑定的IRF物理端口相连，本设备上与IRF-Port2口绑定的IRF物理端口只能和邻居成员设备IRF-Port1口上绑定的IRF物理端口相连，如表1所示。否则，不能形成IRF。
表1 IRF物理端口连接限制
|
邻居成员设备上的 IRF物理端口 本设备上的 IRF物理端口 |
IRF-Port1绑定的IRF物理端口 |
IRF-Port2绑定的IRF物理端口 |
|
IRF-Port1绑定的IRF物理端口 |
不能连接 |
可以连接 |
|
IRF-Port2绑定的IRF物理端口 |
可以连接 |
不能连接 |
设备切换到IRF模式之后，IRF缺省只能支持两台成员设备。只有配置了IRF增强功能后，IRF最多可以支持4台成员设备。
LACP MAD和BFD MAD、ARP MAD冲突处理的原则不同，请不要同时配置。BFD MAD和ARP MAD这两种方式独立工作，彼此之间互不干扰，可以同时配置。
· 如图1所示，Device A为公司的核心交换机，但由于公司网络规模日益增大，Device A单台交换机的转发能力已无法达到公司网络的需求。为了拓展核心交换机的转发能力，又尽量不改变现有网络。现公司希望增加Device B，与Device A组成IRF，来满足当前网络的需求。
· IRF的上行设备（Router A和Router B）为公司网络的出口路由器；IRF的下行交换机（SW1、SW2等）为各个服务器集群的汇聚层设备。
图1 IRF典型配置组网图
· 为避免成员设备的单点故障影响到正常的业务转发，可在IRF中配置跨框聚合端口进行业务转发。
· 为尽量降低IRF分裂对业务造成的影响，可在IRF中配置LACP MAD检测。LACP MAD检测只需在一个聚合组中配置即可，其他聚合组中无需配置。LACP MAD检测使用的二层交换机必须为H3C的交换机设备且使用的软件版本必须能够识别、处理携带了ActiveID值的LACPDU协议报文。
本举例在S12500-CMW710-R7129版本上进行配置和验证。
根据设备初始运行模式的不同，配置IRF的步骤也有所区别。以下分别介绍了设备初始工作在独立运行模式和IRF模式下的配置方法，请您跟据实际情况进行选择参考。
(1) 设置DeviceA的成员编号为1
<DeviceA> system-view
[DeviceA] irf member 1
(2) 创建IRF端口2，并将它与物理端口Ten-GigabitEthernet 3/0/1和Ten-GigabitEthernet 3/0/2绑定
[DeviceA] irf-port 2
[DeviceA-irf-port2] port group interface ten-gigabitethernet 3/0/1
[DeviceA-irf-port2] port group interface ten-gigabitethernet 3/0/2
[DeviceA-irf-port2] quit
[DeviceA] interface ten-gigabitethernet 3/0/1
[DeviceA-Ten-GigabitEthernet3/0/1] undo shutdown
[DeviceA-Ten-GigabitEthernet3/0/1] quit
[DeviceA] interface ten-gigabitethernet 3/0/2
[DeviceA-Ten-GigabitEthernet3/0/2] undo shutdown
[DeviceA-Ten-GigabitEthernet3/0/2] quit
(3) 将当前配置保存到下次启动配置文件
切换运行模式后，设备会自动重启，使新的运行模式生效。为防止配置丢失，请在切换模式前，保存当前配置。
[DeviceA] save
(4) 参照图1和端口连接表连接DeviceA和DeviceB之间的IRF端口
(5) 将DeviceA的运行模式切换到IRF模式，之后设备会自动重启
[DeviceA] chassis convert mode irf
The device will switch to IRF mode and reboot.
You are recommended to save the current running configuration and specify the co
nfiguration file for the next startup. Continue? [Y/N]:y
Do you want to convert the content of the next startup configuration file cfa0:/
irf.cfg to make it available in stack mode? [Y/N]:y
Now rebooting, please wait...
DeviceA初始状态为IRF模式，且IRF编号为1。
(1) 创建IRF端口1/2，并将它与物理端口Ten-GigabitEthernet1/3/0/1和Ten-GigabitEthernet1/3/0/2绑定
# 在修改端口为IRF端口前，如果端口状态为UP，必须先关闭该端口。
[DeviceA] interface ten-gigabitethernet 1/3/0/1
[DeviceA-Ten-GigabitEthernet1/3/0/1] shutdown
[DeviceA-Ten-GigabitEthernet1/3/0/1] quit
[DeviceA] interface ten-gigabitethernet 1/3/0/2
[DeviceA-Ten-GigabitEthernet1/3/0/2] shutdown
[DeviceA-Ten-GigabitEthernet1/3/0/2] quit
[DeviceA] irf-port 1/2
[DeviceA-irf-port1/2] port group interface ten-gigabitethernet 1/3/0/1
[DeviceA-irf-port1/2] port group interface ten-gigabitethernet 1/3/0/2
[DeviceA-irf-port1/2] quit
[DeviceA] interface ten-gigabitethernet 1/3/0/1
[DeviceA-Ten-GigabitEthernet1/3/0/1] undo shutdown
[DeviceA-Ten-GigabitEthernet1/3/0/1] quit
[DeviceA] interface ten-gigabitethernet 1/3/0/2
[DeviceA-Ten-GigabitEthernet1/3/0/2] undo shutdown
[DeviceA-Ten-GigabitEthernet1/3/0/2] quit
(2) 参照图1和端口连接表连接DeviceA和DeviceB之间的IRF端口
(3) 使能自动合并功能
[DeviceA] irf auto-merge enable
(4) 将当前配置保存到下次启动配置文件
[DeviceA] save
(5) 激活IRF端口上的配置
[DeviceA] irf-port-configuration active
本用例中使能了IRF自动合并功能，因此不需要手动重启两台成员设备进行IRF合并，而是在激活IRF端口下的配置之后，从设备会自动重启进行IRF合并。但是必须注意操作顺序，如果未保存配置文件，而先去激活IRF端口下的配置，从设备会自动重启，这时从设备会因为没有IRF配置文件而合并不成功。
(1) 设置DeviceB的成员编号为2
<DeviceB> system-view
[DeviceB] irf member 2
(2) 创建设备的IRF端口1，并将它与物理端口Ten-GigabitEthernet 3/0/1和Ten-GigabitEthernet 3/0/2绑定
[DeviceB] irf-port 1
[DeviceB-irf-port1] port group interface ten-gigabitethernet 3/0/1
[DeviceB-irf-port1] port group interface ten-gigabitethernet 3/0/2
[DeviceB-irf-port1] quit
[DeviceB] interface ten-gigabitethernet 3/0/1
[DeviceB-Ten-GigabitEthernet3/0/1] undo shutdown
[DeviceB-Ten-GigabitEthernet3/0/1] quit
[DeviceB] interface ten-gigabitethernet 3/0/2
[DeviceB-Ten-GigabitEthernet3/0/2] undo shutdown
[DeviceB-Ten-GigabitEthernet3/0/2] quit
(3) 保存配置
[DeviceB] save
(4) 参照图1和端口连接表连接DeviceA和DeviceB之间的IRF端口
(5) 将设备的运行模式切换到IRF模式
[DeviceA] chassis convert mode irf
The device will switch to IRF mode and reboot.
You are recommended to save the current running configuration and specify the co
nfiguration file for the next startup. Continue? [Y/N]:y
Do you want to convert the content of the next startup configuration file cfa0:
/irf.cfg to make it available in stack mode? [Y/N]:y
Now rebooting, please wait...
DeviceB的初始状态为IRF模式，且成员编号为2。
(1) 创建设备的IRF端口2/1，并将它与物理端口Ten-GigabitEthernet2/3/0/1和Ten-GigabitEthernet2/3/0/2绑定
[DeviceB] interface ten-gigabitethernet 2/3/0/1
[DeviceB-Ten-GigabitEthernet2/3/0/1] shutdown
[DeviceB-Ten-GigabitEthernet2/3/0/1] quit
[DeviceB] interface ten-gigabitethernet 2/3/0/2
[DeviceB-Ten-GigabitEthernet2/3/0/2] shutdown
[DeviceB-Ten-GigabitEthernet2/3/0/2] quit
[DeviceB] irf-port 2/1
[DeviceB-irf-port2/1] port group interface ten-gigabitethernet 2/3/0/1
[DeviceB-irf-port2/1] port group interface ten-gigabitethernet 2/3/0/2
[DeviceB-irf-port2/1] quit
[DeviceB] interface ten-gigabitethernet 2/3/0/1
[DeviceB-Ten-GigabitEthernet2/3/0/1] undo shutdown
[DeviceB-Ten-GigabitEthernet2/3/0/1] quit
[DeviceB] interface ten-gigabitethernet 2/3/0/2
[DeviceB-Ten-GigabitEthernet2/3/0/2] undo shutdown
[DeviceB-Ten-GigabitEthernet2/3/0/2] quit
(2) 参照图1和端口连接表连接DeviceA和DeviceB之间的IRF端口
(3) 使能自动合并功能
[DeviceB] irf auto-merge enable
(4) 将当前配置保存到下次启动文件
[DeviceB] save
(5) 激活IRF端口上的配置，从设备会自动重启进行IRF合并
[DeviceB] irf-port-configuration active
在前面配置完成后，IRF已经组建完成，此时可以进行各个业务模块的配置。其中需要注意的是， IRF形成之后，可以从任何一台成员设备登录进行配置，设备名称缺省为Master的名称（此例中为DeviceA）
业务类配置，可分为以下几个部分：
· 在IRF上配置上下行链路聚合
· 在IRF上运行LACP MAD检测
· 配置VLAN、端口及各接口IP地址
· 配置IRF与出口路由器之间运行OSPF
(1) 配置IRF上下行链路端口聚合
# 创建连接接入层交换机的聚合组，其中聚合组1需要配置为动态聚合组，用于进行LACP MAD检测，并将对应端口加入聚合组。
<DeviceA> system-view
[DeviceA] interface Bridge-Aggregation 1
[DeviceA-Bridge-Aggregation1] link-aggregation mode dynamic
[DeviceA-Bridge-Aggregation1] undo shutdown
[DeviceA-Bridge-Aggregation1] quit
[DeviceA] interface ten-gigabitethernet 1/3/0/3
[DeviceA-Ten-GigabitEthernet1/3/0/3] port link-aggregation group 1
[DeviceA-Ten-GigabitEthernet1/3/0/3] undo shutdown
[DeviceA-Ten-GigabitEthernet1/3/0/3] quit
[DeviceA] interface ten-gigabitethernet 2/3/0/3
[DeviceA-Ten-GigabitEthernet2/3/0/3] port link-aggregation group 1
[DeviceA-Ten-GigabitEthernet2/3/0/3] undo shutdown
[DeviceA-Ten-GigabitEthernet2/3/0/3] quit
[DeviceA] interface Bridge-Aggregation 2
[DeviceA-Bridge-Aggregation2] undo shutdown
[DeviceA-Bridge-Aggregation2] quit
[DeviceA] interface ten-gigabitethernet 1/3/0/4
[DeviceA-Ten-GigabitEthernet1/3/0/4] port link-aggregation group 2
[DeviceA-Ten-GigabitEthernet1/3/0/4]undo shutdown
[DeviceA-Ten-GigabitEthernet1/3/0/4] quit
[DeviceA] interface ten-gigabitethernet 2/3/0/4
[DeviceA-Ten-GigabitEthernet2/3/0/4] port link-aggregation group 2
[DeviceA-Ten-GigabitEthernet2/3/0/4] undo shutdown
[DeviceA-Ten-GigabitEthernet2/3/0/4] quit
# 创建连接出口路由器RouterA的聚合组1023，并将上行端口加入聚合组。
[DeviceA] interface Bridge-Aggregation 1023
[DeviceA-Bridge-Aggregation1023] undo shutdown
[DeviceA-Bridge-Aggregation1023] quit
[DeviceA] interface ten-gigabitethernet 1/3/0/7
[DeviceA-Ten-GigabitEthernet1/3/0/7] port link-aggregation group 1023
[DeviceA-Ten-GigabitEthernet1/3/0/7] undo shutdown
[DeviceA-Ten-GigabitEthernet1/3/0/7] quit
[DeviceA] interface ten-gigabitethernet 2/3/0/7
[DeviceA-Ten-GigabitEthernet2/3/0/7] port link-aggregation group 1023
[DeviceA-Ten-GigabitEthernet2/3/0/7] undo shutdown
[DeviceA-Ten-GigabitEthernet2/3/0/7] quit
# 创建连接出口路由器RouterB的聚合组1024，并将上行端口加入聚合组。
[DeviceA] interface Bridge-Aggregation 1024
[DeviceA-Bridge-Aggregation1024] undo shutdown
[DeviceA-Bridge-Aggregation1024] quit
[DeviceA] interface ten-gigabitethernet 1/3/0/8
[DeviceA-Ten-GigabitEthernet1/3/0/8] port link-aggregation group 1024
[DeviceA-Ten-GigabitEthernet1/3/0/8] undo shutdown
[DeviceA-Ten-GigabitEthernet1/3/0/8] quit
[DeviceA] interface ten-gigabitethernet 2/3/0/8
[DeviceA-Ten-GigabitEthernet2/3/0/8] port link-aggregation group 1024
[DeviceA-Ten-GigabitEthernet2/3/0/8] undo shutdown
[DeviceA-Ten-GigabitEthernet2/3/0/8] quit
(2) 在IRF的动态聚合组1上使能LACP MAD检测
[DeviceA] interface Bridge-Aggregation 1
[DeviceA-Bridge-Aggregation1] mad enable
[DeviceA-Bridge-Aggregation1] quit
(3) 配置VLAN、端口及接口IP地址
# 配置IRF与下行交换机SW1之间通过Vlan-interface10连接。
[DeviceA] vlan 10
[DeviceA-vlan10] quit
[DeviceA] interface vlan-interface 10
[DeviceA-Vlan-interface10] ip address 172.24.10.254 24
[DeviceA-Vlan-interface10] quit
[DeviceA] interface Bridge-Aggregation 1
[DeviceA-Bridge-Aggregation1] port link-type trunk
[DeviceA-Bridge-Aggregation1] undo port trunk permit vlan 1
[DeviceA-Bridge-Aggregation1] port trunk permit vlan 10
[DeviceA-Bridge-Aggregation1] quit
# 配置IRF与下行交换机SW2之间通过Vlan-interface20连接。
[DeviceA] vlan 20
[DeviceA-vlan20] quit
[DeviceA] interface vlan-interface 20
[DeviceA-Vlan-interface20] ip address 172.24.20.254 24
[DeviceA-Vlan-interface20] quit
[DeviceA] interface Bridge-Aggregation 2
[DeviceA-Bridge-Aggregation2] port link-type trunk
[DeviceA-Bridge-Aggregation2] undo port trunk permit vlan 1
[DeviceA-Bridge-Aggregation2] port trunk permit vlan 20
[DeviceA-Bridge-Aggregation2] quit
# 配置IRF与出口路由器RouterA之间通过Vlan-interface40连接。
[DeviceA] vlan 40
[DeviceA-vlan40] quit
[DeviceA] interface vlan-interface 40
[DeviceA-Vlan-interface40] ip address 172.24.40.254 24
[DeviceA-Vlan-interface40] quit
[DeviceA] interface Bridge-Aggregation 1023
[DeviceA-Bridge-Aggregation1023] port access vlan 40
[DeviceA-Bridge-Aggregation1023] quit
# 配置IRF与出口路由器RouterB之间通过Vlan-interface41连接。
[DeviceA] vlan 41
[DeviceA-vlan41] quit
[DeviceA] interface vlan-interface 41
[DeviceA-Vlan-interface41] ip address 172.24.41.254 24
[DeviceA-Vlan-interface41] quit
[DeviceA] interface Bridge-Aggregation 1024
[DeviceA-Bridge-Aggregation1024] port access vlan 41
[DeviceA-Bridge-Aggregation1024] quit
(4) 配置IRF与出口路由器之间运行OSPF路由协议
[DeviceA] ospf
[DeviceA-ospf-1] import-route direct
[DeviceA-ospf-1] area 0
[DeviceA-ospf-1-area-0.0.0.0] network 172.24.40.0 0.0.0.255
[DeviceA-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255
[DeviceA-ospf-1-area-0.0.0.0] quit
[DeviceA-ospf-1] quit
(1) 配置链路聚合
# 接入设备SW1上创建聚合组1，并设置该聚合组使用动态聚合，该聚合组同时用于IRF的LACP MAD检测。
<SW1> system-view
[SW1] interface Bridge-Aggregation 1
[SW1-Bridge-Aggregation1] link-aggregation mode dynamic
[SW1-Bridge-Aggregation1] undo shutdown
[SW1-Bridge-Aggregation1] quit
# 接入设备SW1上行两个端口加入聚合组。
[SW1] interface ten-gigabitethernet 1/0/51
[SW1-Ten-GigabitEthernet1/0/51] port link-aggregation group 1
[SW1-Ten-GigabitEthernet1/0/51] undo shutdown
[SW1-Ten-GigabitEthernet1/0/51] quit
[SW1] interface ten-gigabitethernet 1/0/52
[SW1-Ten-GigabitEthernet1/0/52] port link-aggregation group 1
[SW1-Ten-GigabitEthernet1/0/52] undo shutdown
[SW1-Ten-GigabitEthernet1/0/52] quit
(2) 配置VLAN及接口
# 接入设备SW1上创建VLAN。
[SW1] vlan all
# 配置与IRF连接的端口。
[SW1] interface Bridge-Aggregation 1
[SW1-Bridge-Aggregation1] port access vlan 10
[SW1-Bridge-Aggregation1] quit
# 配置连接服务器的端口。
[SW1] interface GigabitEthernet 3/0/1
[SW1-GigabitEthernet3/0/1] port link-type trunk
[SW1-GigabitEthernet3/0/1] port trunk permit vlan all
[SW1-GigabitEthernet3/0/1] undo port trunk permit vlan 1
[SW1-GigabitEthernet3/0/1] undo shutdown
[SW1-GigabitEthernet3/0/1] quit
(1) 配置链路聚合
# 接入设备SW2创建聚合组1，将端口加入到聚合组。
<SW2> system-view
[SW2] interface Bridge-Aggregation 1
[SW2-Bridge-Aggregation1] undo shutdown
[SW2-Bridge-Aggregation1] quit
[SW2] interface ten-gigabitethernet 1/0/51
[SW2-Ten-GigabitEthernet1/0/51] port link-aggregation group 1
[SW2-Ten-GigabitEthernet1/0/51] undo shutdown
[SW2-Ten-GigabitEthernet1/0/51] quit
[SW2] interface ten-gigabitethernet 1/0/52
[SW2-Ten-GigabitEthernet1/0/52] port link-aggregation group 1
[SW2-Ten-GigabitEthernet1/0/52] undo shutdown
[SW2-Ten-GigabitEthernet1/0/52] quit
(2) 配置VLAN及接口
# 接入设备SW2上创建VLAN。
[SW2] vlan all
# 配置与IRF连接的端口。
[SW2] interface Bridge-Aggregation 1
[SW2-Bridge-Aggregation1] port access vlan 20
[SW2-Bridge-Aggregation1] quit
# 配置连接服务器的端口。
[SW2] interface GigabitEthernet 3/0/1
[SW2-GigabitEthernet3/0/1] port link-type trunk
[SW2-GigabitEthernet3/0/1] port trunk permit vlan all
[SW2-GigabitEthernet3/0/1] undo port trunk permit vlan 1
[SW2-GigabitEthernet3/0/1] undo shutdown
[SW2-GigabitEthernet3/0/1] quit
出口路由器配置本用例只描述与IRF连接的部分，外网使用何种路由协议不予描述。
(1) 配置链路聚合
# 配置出口路由器RouterA与IRF连接的端口。
<RouterA> system-view
[RouterA] interface Bridge-Aggregation 1
[RouterA-Bridge-Aggregation1] quit
[RouterA] interface ten-gigabitethernet 1/0/1
[RouterA-Ten-GigabitEthernet1/0/1] port link-mode bridge
[RouterA-Ten-GigabitEthernet1/0/1] port link-aggregation group 1
[RouterA-Ten-GigabitEthernet1/0/1] quit
[RouterA] interface ten-gigabitethernet 2/0/1
[RouterA-Ten-GigabitEthernet2/0/1] port link-mode bridge
[RouterA-Ten-GigabitEthernet2/0/1] port link-aggregation group 1
[RouterA-Ten-GigabitEthernet2/0/1] quit
# 配置RouterA与RouterB之间连接的端口。
[RouterA] interface Bridge-Aggregation 2
[RouterA-Bridge-Aggregation2] quit
[RouterA] interface ten-gigabitethernet 1/0/2
[RouterA-Ten-GigabitEthernet1/0/2] port link-mode bridge
[RouterA-Ten-GigabitEthernet1/0/2] port link-aggregation group 2
[RouterA-Ten-GigabitEthernet1/0/2] quit
[RouterA] interface ten-gigabitethernet 2/0/2
[RouterA-Ten-GigabitEthernet2/0/2] port link-mode bridge
[RouterA-Ten-GigabitEthernet2/0/2] port link-aggregation group 2
[RouterA-Ten-GigabitEthernet2/0/2] quit
(2) 配置VLAN及接口IP地址
# 配置出口路由器RouterA与IRF连接的端口。
[RouterA] vlan 40
[RouterA-vlan40] quit
[RouterA] interface vlan-interface 40
[RouterA-vlan-interface40] ip address 172.24.40.2 24
[RouterA-vlan-interface40] quit
[RouterA] interface Bridge-Aggregation 1
[RouterA-Bridge-Aggregation1] port access vlan 40
[RouterA-Bridge-Aggregation1] quit
# 配置RouterA与RouterB连接的端口。
[RouterA] vlan 30
[RouterA-vlan30] quit
[RouterA] interface vlan-interface 30
[RouterA-vlan-interface30] ip address 172.24.2.2 24
[RouterA-vlan-interface30] quit
[RouterA] interface Bridge-Aggregation 2
[RouterA-Bridge-Aggregation2] port link-type access
[RouterA-Bridge-Aggregation2] port access vlan 30
[RouterA-Bridge-Aggregation2] quit
# 配置出口路由器RouterA与外网连接的端口。
[RouterA] vlan 50
[RouterA-vlan50] quit
[RouterA] interface vlan-interface 50
[RouterA-vlan-interface50] ip address 172.24.1.2 24
[RouterA-vlan-interface50] quit
(3) 配置RouterA与IRF之间运行OSPF路由协议。
[RouterA] ospf
[RouterA-ospf-1] import-route direct
[RouterA-ospf-1] area 0
[RouterA-ospf-1-area-0.0.0.0] network 172.24.40.0 0.0.0.255
[RouterA-ospf-1-area-0.0.0.0] network 172.24.30.0 0.0.0.255
[RouterA-ospf-1-area-0.0.0.0] quit
[RouterA-ospf-1] quit
(1) 配置链路聚合
# 配置RouterB与IRF连接的端口。
<RouterB> system-view
[RouterB] interface Bridge-Aggregation 1
[RouterB-Bridge-Aggregation1] quit
[RouterB] interface ten-gigabitethernet 1/0/1
[RouterB-Ten-GigabitEthernet1/0/1] port link-mode bridge
[RouterB-Ten-GigabitEthernet1/0/1] port link-aggregation group 1
[RouterB-Ten-GigabitEthernet1/0/1] quit
[RouterB] interface ten-gigabitethernet 2/0/1
[RouterB-Ten-GigabitEthernet2/0/1] port link-mode bridge
[RouterB-Ten-GigabitEthernet2/0/1] port link-aggregation group 1
[RouterB-Ten-GigabitEthernet2/0/1] quit
# 配置RouterB与RouterA之间连接的端口。
[RouterB] interface Bridge-Aggregation 2
[RouterB-Bridge-Aggregation2] quit
[RouterB] interface ten-gigabitethernet 1/0/2
[RouterB-Ten-GigabitEthernet1/0/2] port link-aggregation group 2
[RouterB-Ten-GigabitEthernet1/0/2] quit
[RouterB] interface ten-gigabitethernet 2/0/2
[RouterB-Ten-GigabitEthernet2/0/2] port link-aggregation group 2
[RouterB-Ten-GigabitEthernet2/0/2] quit
(2) 配置VLAN及接口IP地址
# 配置RouterB与IRF连接的端口。
[RouterB] vlan 41
[RouterB-vlan41] quit
[RouterB] interface vlan-interface 41
[RouterB-vlan-interface41] ip address 172.24.41.3 24
[RouterB-vlan-interface41] quit
[RouterB] interface Bridge-Aggregation 1
[RouterB-Bridge-Aggregation1] port access vlan 41
[RouterB-Bridge-Aggregation1] quit
# 配置RouterB和RouterA之间连接的端口。
[RouterB] vlan 30
[RouterB-vlan30] quit
[RouterB] interface vlan-interface 30
[RouterB-vlan-interface30] ip address 172.24.2.3 24
[RouterB-vlan-interface30] quit
[RouterB] interface Bridge-Aggregation 2
[RouterB-Bridge-Aggregation2] port link-type access
[RouterB-Bridge-Aggregation2] port access vlan 30
[RouterB-Bridge-Aggregation2] quit
# 配置出口路由器RouterB与外网连接的端口。
[RouterB] vlan 50
[RouterB-vlan50] quit
[RouterB] interface vlan-interface 50
[RouterB-vlan-interface50] ip address 172.24.4.3 24
[RouterB-vlan-interface50] quit
(3) 配置OSPF路由协议。
[RouterB]ospf
[RouterB-ospf-1]import-route direct
[RouterB-ospf-1]area 0
[RouterB-ospf-1-area-0.0.0.0]network 172.24.41.0 0.0.0.255
[RouterB-ospf-1-area-0.0.0.0]network 172.24.30.0 0.0.0.255
[RouterB-ospf-1-area-0.0.0.0]quit
[RouterB-ospf-1]quit
(1) 验证IRF建立成功
[DeviceA] display irf
MemberID Slot Role Priority CPU-Mac Description
*+1 0 Master 1 0210-fc01-0000 ---
2 0 Standby 1 0210-fc02-0000 ---
--------------------------------------------------
* indicates the device is the master.
+ indicates the device through which the user logs in.
The Bridge MAC of the IRF is: 3822-d60f-2800
Auto upgrade : yes
Mac persistent : always
Domain ID : 0
Auto merge : yes
从命令行的显示看，当前两台设备IRF成功建立。
(2) 验证跨框聚合有链路备份的作用
从serverGroup1任意挑选一台PC ping外网IP，shutdown IRF连接出口路由器的Ten-GigabitEthernet 1/3/0/8，出现短暂中断后仍然可以ping通外网。
C:\Users>ping 202.108.22.5 –t
正在 Ping 202.108.22.5 具有 32 字节的数据:
来自 192.168.52.10 的回复: 字节=32 时间=1ms TTL=255
来自 192.168.52.10 的回复: 字节=32 时间=13ms TTL=255
来自 192.168.52.10 的回复: 字节=32 时间<1ms TTL=255
请求超时。
请求超时。
请求超时。
来自 192.168.52.10 的回复: 字节=32 时间<1ms TTL=255
来自 192.168.52.10 的回复: 字节=32 时间<1ms TTL=255
来自 192.168.52.10 的回复: 字节=32 时间<1ms TTL=255
重新使Ten-GigabitEthernet 1/3/0/8 UP，持续ping，将另外一个上行端口Ten-GigabitEthernet 2/3/0/8 shutdown，出现短暂中断后仍然可以ping通外网。
C:\Users>ping 202.108.22.5 –t
正在 Ping 202.108.22.5 具有 32 字节的数据:
来自 192.168.52.10 的回复: 字节=32 时间=1ms TTL=255
来自 192.168.52.10 的回复: 字节=32 时间=13ms TTL=255
来自 192.168.52.10 的回复: 字节=32 时间<1ms TTL=255
请求超时。
请求超时。
请求超时。
来自 192.168.52.10 的回复: 字节=32 时间<1ms TTL=255
来自 192.168.52.10 的回复: 字节=32 时间<1ms TTL=255
来自 192.168.52.10 的回复: 字节=32 时间<1ms TTL=255
(3) 验证IRF物理链路的冗余备份
断开IRF物理链路中的任意一条，IRF仍能正常工作、没有分裂。
· SW1：
#
version 7.1.034, Release 7129
#
mdc Admin id 1
#
sysname SW1
#
vlan 10
#
interface Ten-GigabitEthernet 1/0/51
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/52
port link-mode bridge
port link-aggregation group 1
#
interface Gigabitethernet 3/0/1
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface Bridge-Aggregation 1
port access vlan 10
#
· SW2：
#
version 7.1.034, Release 7129
#
mdc Admin id 1
#
sysname SW2
#
vlan 20
#
interface Ten-GigabitEthernet 1/0/51
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/52
port link-mode bridge
port link-aggregation group 1
#
interface Gigabitethernet 3/0/1
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface Bridge-Aggregation 1
port access vlan 20
#
· IRF：
#
version 7.1.034, Release 7129
#
mdc Admin id 1
#
sysname DeviceA
#
irf mac-address persistent always
irf auto-update enable
irf auto-merge enable
undo irf link-delay
irf member 1 priority 1
irf member 2 priority 1
#
vlan 10
#
vlan 20
#
vlan 40
#
vlan 41
#
interface bridge-aggregation 1
link-aggregation mode dynamic
port access vlan 10
mad enable
#
interface bridge-aggregation 2
port access vlan 20
#
interface bridge-aggregation 1023
port access vlan 40
#
interface bridge-aggregation 1024
port access vlan 41
#
interface Ten-GigabitEthernet 1/3/0/3
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet1 1/3/0/4
port link-mode bridge
port link-aggregation group 2
#
interface Ten-GigabitEthernet 2/3/0/3
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 2/3/0/4
port link-mode bridge
port link-aggregation group 2
#
interface Ten-GigabitEthernet 1/3/0/7
port link-mode bridge
port link-aggregation group 1023
#
interface Ten-GigabitEthernet 2/3/0/7
port link-mode bridge
port link-aggregation group 1023
#
interface Ten-GigabitEthernet 1/3/0/8
port link-mode bridge
port link-aggregation group 1024
#
interface Ten-GigabitEthernet 2/3/0/8
port link-mode bridge
port link-aggregation group 1024
#
interface vlan-interface 10
ip address 172.24.10.254 255.255.255.0
#
interface vlan-interface 20
ip address 172.24.20.254 255.255.255.0
#
interface vlan-interface 40
ip address 172.24.40.254 255.255.255.0
#
irf-port 1/2
port group mdc 1 interface Ten-GigabitEthernet1/3/0/1
port group mdc 1 interface Ten-GigabitEthernet1/3/0/2
#
irf-port 2/1
port group mdc 1 interface Ten-GigabitEthernet2/3/0/1
port group mdc 1 interface Ten-GigabitEthernet2/3/0/2
#
ospf 1
import-route direct
area 0.0.0.0
network 172.24.40.0 0.0.0.255
network 172.24.41.0 0.0.0.255
#
· RouterA：
#
version 7.1.034, Release 7129
#
mdc Admin id 1
#
sysname RouterA
#
vlan 30
#
vlan 40
#
vlan 50
#
interface bridge-aggregation 1
port access vlan 40
#
interface bridge-aggregation 2
port access vlan 30
#
interface Ten-GigabitEthernet 1/0/1
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/2
port link-mode bridge
port link-aggregation group 2
#
interface Ten-GigabitEthernet 1/0/3
port link-mode bridge
port access vlan 50
#
interface Ten-GigabitEthernet 2/0/1
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 2/0/2
port link-mode bridge
port link-aggregation group 2
#
interface vlan-interface 30
ip address 172.24.2.2 255.255.255.0
#
interface vlan-interface 40
ip address 172.24.40.2 255.255.255.0
#
interface vlan-interface 50
ip address 172.24.1.2 255.255.255.0
#
ospf 1
import-route direct
area 0.0.0.0
network 172.24.30.0 0.0.0.255
network 172.24.40.0 0.0.0.255
#
· RouterB：
#
version 7.1.034, Release 7129
#
mdc Admin id 1
#
sysname RouterB
#
vlan 30
#
vlan 41
#
vlan 50
#
interface bridge-aggregation 1
port access vlan 41
#
interface bridge-aggregation 2
port access vlan 30
#
interface Ten-GigabitEthernet 1/0/1
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/2
port link-mode bridge
port link-aggregation group 2
#
interface Ten-GigabitEthernet 1/0/3
port link-mode bridge
port access vlan 50
#
interface Ten-GigabitEthernet 2/0/1
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 2/0/2
port link-mode bridge
port link-aggregation group 2
#
interface vlan-interface 30
ip address 172.24.2.3 255.255.255.0
#
interface vlan-interface 41
ip address 172.24.41.3 255.255.255.0
#
interface vlan-interface 50
ip address 172.24.4.3 255.255.255.0
#
ospf 1
import-route direct
area 0.0.0.0
network 172.24.30.0 0.0.0.255
network 172.24.41.0 0.0.0.255
#
· 如图2所示，由于网络规模迅速扩大，当前中心交换机设备A的转发能力已经不能满足需求。现在需要另增三台设备，组成一个四框IRF才能满足当前网络的转发需求。
· 升级到四框IRF设备后，必须保证即使IRF中有N台设备发生故障（1≤N≤3），RouterA与汇聚层交换机（如：SW1，SW2等）之间通信也不能中断。
图2 IRF增强功能典型配置组网图（采用LACP MAD）
表2 IP地址配置信息
|
设备 |
接口 |
IP地址 |
|
RouterA |
Vlan-interface41 |
172.24.41.2/24 |
|
Vlan-interface50 |
172.24.1.2/24 |
|
|
IRF |
Vlan-interface41 |
172.24.41.254/24 |
|
Vlan-interface10 |
172.24.10.254/24 |
|
|
Vlan-interface20 |
172.24.20.254/24 |
|
|
… |
… |
|
|
Vlan-interfaceN |
172.24.N.254/24 |
表3 IRF设备互联信息
|
设备 |
IRF端口 |
对端IRF端口 |
IRF成员端口 |
|
Device A |
irf-port 1/1 |
irf-port 4/2 |
XGE1/2/0/4 |
|
Device A |
irf-port 1/2 |
irf-port 2/1 |
XGE1/2/0/1 |
|
Device B |
irf-port 2/1 |
irf-port 1/2 |
XGE2/4/0/2 |
|
Device B |
irf-port 2/2 |
irf-port 3/1 |
GE2/3/0/30 |
|
Device C |
irf-port 3/1 |
irf-port 2/2 |
GE3/3/0/15 |
|
Device C |
irf-port 3/2 |
irf-port 4/1 |
XGE3/12/0/1 |
|
Device D |
irf-port 4/1 |
irf-port 3/2 |
XGE4/6/0/4 |
|
Device D |
irf-port 4/2 |
irf-port 1/1 |
XGE4/6/0/2 |
表4 IRF设备的上下行互联信息
|
IRF的对端设备 |
接口 |
所属vlan |
所属聚合组 |
|
下行连SW2 |
XGE1/3/0/1 |
Vlan 13（BFD MAD） |
|
|
下行连SW2 |
XGE2/3/0/1 |
Vlan 13（BFD MAD） |
|
|
下行连SW2 |
XGE3/3/0/1 |
Vlan 13（BFD MAD） |
|
|
下行连SW2 |
XGE4/3/0/1 |
Vlan 13（BFD MAD） |
|
|
下行连SW1 |
XGE1/3/0/3 |
Vlan 10 |
Bridge-aggregation 1(LACP MAD) |
|
下行连SW1 |
XGE2/3/0/3 |
Vlan 10 |
Bridge-aggregation 1(LACP MAD) |
|
下行连SW1 |
XGE3/3/0/3 |
Vlan 10 |
Bridge-aggregation 1(LACP MAD) |
|
下行连SW1 |
XGE4/3/0/3 |
Vlan 10 |
Bridge-aggregation 1(LACP MAD) |
|
下行连SW2 |
XGE1/3/0/4 |
Vlan 20 |
Bridge-aggregation 2 |
|
下行连SW2 |
XGE2/3/0/4 |
Vlan 20 |
Bridge-aggregation 2 |
|
下行连SW2 |
XGE3/3/0/4 |
Vlan 20 |
Bridge-aggregation 2 |
|
下行连SW2 |
XGE4/3/0/4 |
Vlan 20 |
Bridge-aggregation 2 |
|
上行连Router A |
XGE1/3/0/8 |
Vlan 41 |
Bridge-aggregation 1024 |
|
上行连Router A |
XGE2/3/0/8 |
Vlan 41 |
Bridge-aggregation 1024 |
|
上行连Router A |
XGE3/3/0/8 |
Vlan 41 |
Bridge-aggregation 1024 |
|
上行连Router A |
XGE4/3/0/8 |
Vlan 41 |
Bridge-aggregation 1024 |
表5 SW1设备的上下行互联信息
|
SW1的对端设备 |
接口 |
所属vlan |
所属聚合组 |
|
下行连服务组 |
GE3/0/1 |
Vlan 10 |
|
|
上行连IRF |
XGE1/0/21 |
Vlan 10 |
Bridge-aggregation 1(LACP MAD) |
|
上行连IRF |
XGE1/0/22 |
Vlan 10 |
Bridge-aggregation 1(LACP MAD) |
|
上行连IRF |
XGE1/0/23 |
Vlan 10 |
Bridge-aggregation 1(LACP MAD) |
|
上行连IRF |
XGE1/0/24 |
Vlan 10 |
Bridge-aggregation 1(LACP MAD) |
表6 SW2设备的上下行互联信息
|
SW2的对端设备 |
接口 |
所属vlan |
所属聚合组 |
|
下行连服务组 |
GE3/0/1 |
Vlan 20 |
|
|
上行连IRF |
XGE1/0/21 |
Vlan 20 |
Bridge-aggregation 1 |
|
上行连IRF |
XGE1/0/22 |
Vlan 20 |
Bridge-aggregation 1 |
|
上行连IRF |
XGE1/0/23 |
Vlan 20 |
Bridge-aggregation 1 |
|
上行连IRF |
XGE1/0/24 |
Vlan 20 |
Bridge-aggregation 1 |
表7 Router A设备的上下行互联信息
|
Router A的对端设备 |
接口 |
所属vlan |
所属聚合组 |
|
下行连IRF |
XGE1/0/1 |
Vlan 41 |
Bridge-aggregation 1 |
|
下行连IRF |
XGE1/0/2 |
Vlan 41 |
Bridge-aggregation 1 |
|
下行连IRF |
XGE 1/0/3 |
Vlan 41 |
Bridge-aggregation 1 |
|
下行连IRF |
XGE2/0/1 |
Vlan 41 |
Bridge-aggregation 1 |
|
上行连外网 |
XGE2/0/2 |
Vlan 50 |
|
· 由于IRF的成员设备数量超过两台，所以必须在每台成员设备上使能IRF增强功能。
· 为避免成员设备的单点故障影响到正常的业务转发，可在IRF中配置跨框聚合端口进行业务转发。
· LACP MAD检测只需在一个聚合组中配置即可，其他聚合组中无需配置。LACP MAD检测使用的二层交换机必须为H3C的交换机设备且使用的软件版本必须能够识别、处理携带了ActiveID值的LACPDU协议报文。
本举例在S12500-CMW710-R7129版本上进行配置和验证。
· IRF合并前，IRF成员设备的IRF增强功能的使能情况应该保持一致，即都配置或都取消IRF增强功能，否则，无法形成一个IRF。
· 设备运行在IRF模式时，若存在三层以太网接口则需要切换为二层以太网接口（设备会有提示信息），才能配置IRF增强功能。
· 配置了IRF增强功能后，不能再创建三层以太网接口/子接口，三层聚合接口/子接口。
· M（M<=4）个IRF合并前，如果所有成员设备都配置了IRF增强功能，必须手工重启任意M-1台成员设备以完成IRF合并。
(1) 设置DeviceA的成员编号为1
<DeviceA> system-view
[DeviceA] irf member 1
(2) 配置IRF端口2与物理端口Ten-GigabitEthernet 2/0/1绑定
[DeviceA] irf-port 2
[DeviceA-irf-port2] port group interface ten-gigabitethernet 2/0/1
[DeviceA-irf-port2] quit
[DeviceA] interface ten-gigabitethernet 2/0/1
[DeviceA-Ten-GigabitEthernet2/0/1] undo shutdown
[DeviceA-Ten-GigabitEthernet2/0/1] quit
(3) 配置IRF端口1与物理端口Ten-GigabitEthernet 2/0/4绑定
[DeviceA] irf-port 1
[DeviceA-irf-port1] port group interface ten-gigabitethernet 2/0/4
[DeviceA-irf-port1] quit
[DeviceA] interface ten-gigabitethernet 2/0/4
[DeviceA-Ten-GigabitEthernet2/0/4] undo shutdown
[DeviceA-Ten-GigabitEthernet2/0/4] quit
(4) 配置IRF增强模式
[DeviceA] irf mode enhanced
(5) 将当前配置保存到下次启动配置文件
[DeviceA] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[cfa0:/irf.cfg]
(To leave the existing filename unchanged, press the enter key):
cfa0:/irf.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait.....................................
Saved the current configuration to mainboard device successfully.
(6) 将DeviceA的运行模式切换到IRF模式之后，设备会自动重启
[DeviceA] chassis convert mode irf
The device will switch to IRF mode and reboot.
You are recommended to save the current running configuration and specify the c
onfiguration file for the next startup. Continue? [Y/N]:y
Do you want to convert the content of the next startup configuration file flash
:/startup.cfg to make it available in stack mode? [Y/N]:y
(1) 设置DeviceB的成员编号为2
<DeviceB> system-view
[DeviceB] irf member 2
(2) 配置IRF端口1与物理端口Ten-GigabitEthernet 4/0/2绑定
[DeviceB] irf-port 1
[DeviceB-irf-port1] port group interface ten-gigabitethernet 4/0/2
[DeviceB-irf-port1] quit
[DeviceB] interface ten-gigabitethernet 4/0/2
[DeviceB-Ten-GigabitEthernet4/0/2] undo shutdown
[DeviceB-Ten-GigabitEthernet4/0/2] quit
(3) 配置IRF端口2与物理端口GigabitEthernet 3/0/30绑定
[DeviceB] irf-port 2
[DeviceB-irf-port2] port group interface gigabitethernet3/0/30
[DeviceB-irf-port2] quit
[DeviceB] interface GigabitEthernet 3/0/30
[DeviceB-GigabitEthernet3/0/30] undo shutdown
[DeviceB-GigabitEthernet3/0/30] quit
(4) 配置IRF增强模式
[DeviceB] irf mode enhanced
(5) 保存配置
[DeviceB] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[cfa0:/irf.cfg]
(To leave the existing filename unchanged, press the enter key):
cfa0:/irf.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait.....................................
Saved the current configuration to mainboard device successfully.
(6) 参照图2和端口连接表连接DeviceA和DeviceB之间的IRF端口
(7) 将设备的运行模式切换到IRF模式
[DeviceB] chassis convert mode irf
The device will switch to IRF mode and reboot.
You are recommended to save the current running configuration and specify the c
onfiguration file for the next startup. Continue? [Y/N]:y
Do you want to convert the content of the next startup configuration file flash
:/startup.cfg to make it available in stack mode? [Y/N]:y
Now rebooting, please wait...
(1) 设置DeviceC的成员编号为3
<DeviceC> system-view
[DeviceC] irf member 3
(2) 配置IRF端口1与物理端口GigabitEthernet 3/0/15绑定
[DeviceC] irf-port 1
[DeviceC-irf-port1] port group interface gigabitethernet 3/0/15
[DeviceC-irf-port1] quit
[DeviceC] interface GigabitEthernet 3/0/15
[DeviceC-GigabitEthernet3/0/15] undo shutdown
[DeviceC-Ten-GigabitEthernet3/0/15] quit
(3) 配置IRF端口2与物理端口Ten-GigabitEthernet 12/0/1绑定
[DeviceC] irf-port 2
[DeviceC-irf-port2] port group interface ten-gigabitethernet12/0/1
[DeviceC-irf-port2] quit
[DeviceC] interface ten-gigabitethernet 12/0/1
[DeviceC-Ten-GigabitEthernet12/0/1] undo shutdown
[DeviceC-Ten-GigabitEthernet12/0/1] quit
(4) 配置IRF增强模式
[DeviceC] irf mode enhanced
(5) 保存配置
[DeviceC] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[cfa0:/irf.cfg]
(To leave the existing filename unchanged, press the enter key):
cfa0:/irf.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait.....................................
Saved the current configuration to mainboard device successfully.
(6) 参照图2和端口连接表连接DeviceB和DeviceC之间的IRF端口
(7) 将设备的运行模式切换到IRF模式
[DeviceC] chassis convert mode irf
The device will switch to IRF mode and reboot.
You are recommended to save the current running configuration and specify the c
onfiguration file for the next startup. Continue? [Y/N]:y
Do you want to convert the content of the next startup configuration file flash
:/startup.cfg to make it available in stack mode? [Y/N]:y
Now rebooting, please wait...
(1) 设置DeviceD的成员编号为4
<DeviceD> system-view
[DeviceD] irf member 4
(2) 配置IRF端口1与物理端口Ten-GigabitEthernet 6/0/4绑定
[DeviceD] irf-port 1
[DeviceD-irf-port1] port group interface ten-gigabitethernet 6/0/4
[DeviceD-irf-port1] quit
[DeviceD] interface ten-gigabitethernet 6/0/4
[DeviceD-Ten-GigabitEthernet6/0/4] undo shutdown
[DeviceD-Ten-GigabitEthernet6/0/4] quit
(3) 配置IRF端口2与物理端口Ten-GigabitEthernet 6/0/2绑定
[DeviceD] irf-port 2
[DeviceD-irf-port2] port group interface ten-gigabitethernet6/0/2
[DeviceD-irf-port2] quit
[DeviceD] interface ten-gigabitethernet 6/0/2
[DeviceD-Ten-GigabitEthernet6/0/2] undo shutdown
[DeviceD-Ten-GigabitEthernet6/0/2] quit
(4) 配置IRF增强模式
[DeviceD] irf mode enhanced
(5) 保存配置
[DeviceD] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[cfa0:/irf.cfg]
(To leave the existing filename unchanged, press the enter key):
cfa0:/irf.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait.....................................
Saved the current configuration to mainboard device successfully.
(6) 参照图2和端口连接表连接DeviceC和DeviceD以及DeviceA和DeviceD之间的IRF端口
(7) 将设备的运行模式切换到IRF模式
[DeviceD] chassis convert mode irf
The device will switch to IRF mode and reboot.
You are recommended to save the current running configuration and specify the c
onfiguration file for the next startup. Continue? [Y/N]:y
Do you want to convert the content of the next startup configuration file flash
:/startup.cfg to make it available in stack mode? [Y/N]:y
Now rebooting, please wait...
在前面配置完成并重新启动后，IRF已经组建完成，此时可以进行各个业务模块的配置。IRF形成之后，可以从任何一台成员设备登录进行配置，设备名称缺省为Master的名称（此例中为DeviceA）。
业务类配置，可分为以下几个部分：
· 在IRF上配置上下行链路聚合
· 在IRF上运行LACP MAD检测
· 配置VLAN、端口及各接口IP地址
· 配置IRF与出口路由器之间运行OSPF
(1) 配置IRF端口聚合
# 创建连接接入层交换机的聚合组，其中聚合组1需要配置为动态聚合组，用于进行LACP MAD检测，并将对应端口加入聚合组。
<DeviceA> system-view
[DeviceA] interface Bridge-Aggregation 1
[DeviceA-Bridge-Aggregation1] undo shutdown
[DeviceA-Bridge-Aggregation1] link-aggregation mode dynamic
[DeviceA-Bridge-Aggregation1] quit
[DeviceA] interface range ten-gigabitethernet 1/3/0/3 ten-gigabitethernet 2/3/0/3 ten-gigabitethernet 3/3/0/3 ten-gigabitethernet 4/3/0/3
[DeviceA-if-range] port link-aggregation group 1
[DeviceA-if-range] undo shutdown
[DeviceA-if-range] quit
[DeviceA] interface Bridge-Aggregation 2
[DeviceA-Bridge-Aggregation2] undo shutdown
[DeviceA-Bridge-Aggregation2] quit
[DeviceA] interface ten-gigabitethernet 1/3/0/4 ten-gigabitethernet 2/3/0/4 ten-gigabitethernet 3/3/0/4 ten-gigabitethernet 4/3/0/4
[DeviceA-if-range] undo shutdown
[DeviceA-if-range] port link-aggregation group 2
[DeviceA-if-range] quit
# 创建连接出口路由器RouterA的聚合组，将上行端口加入聚合组。
[DeviceA] interface Bridge-Aggregation 1024
[DeviceA-Bridge-Aggregation1024] undo shutdown
[DeviceA-Bridge-Aggregation1024] quit
[DeviceA] interface range ten-gigabitethernet 1/3/0/8 ten-gigabitethernet 2/3/0/8 ten-gigabitethernet 3/3/0/8 ten-gigabitethernet 4/3/0/8
[DeviceA-if-range] undo shutdown
[DeviceA-if-range] port link-aggregation group 1024
[DeviceA-if-range] quit
(2) 在IRF的动态聚合组1上使能LACP MAD检测
[DeviceA] interface Bridge-Aggregation 1
[DeviceA-Bridge-Aggregation1] mad enable
[DeviceA-Bridge-Aggregation1] quit
(3) 配置VLAN、端口及接口IP地址
# 配置IRF与下行交换机SW1之间通过Vlan-interface10连接。
[DeviceA] vlan 10
[DeviceA-vlan10] quit
[DeviceA] interface vlan-interface 10
[DeviceA-Vlan-interface10] ip address 172.24.10.254 24
[DeviceA-Vlan-interface10] quit
[DeviceA] interface Bridge-Aggregation 1
[DeviceA-Bridge-Aggregation1] port link-type trunk
[DeviceA-Bridge-Aggregation1] undo port trunk permit vlan 1
[DeviceA-Bridge-Aggregation1] port trunk permit vlan 10
[DeviceA-Bridge-Aggregation1] quit
# 配置IRF与下行交换机SW2之间通过Vlan-interface20连接。
[DeviceA] vlan 20
[DeviceA-vlan20] quit
[DeviceA] interface vlan-interface 20
[DeviceA-Vlan-interface20] ip address 172.24.20.254 24
[DeviceA-Vlan-interface20] quit
[DeviceA] interface Bridge-Aggregation 2
[DeviceA-Bridge-Aggregation2] port link-type trunk
[DeviceA-Bridge-Aggregation2] undo port trunk permit vlan 1
[DeviceA-Bridge-Aggregation2] port trunk permit vlan 20
[DeviceA-Bridge-Aggregation2] quit
# 配置IRF与出口路由器RouterA之间通过Vlan-interface41连接。
[DeviceA] vlan 41
[DeviceA-vlan41] quit
[DeviceA] interface vlan-interface 41
[DeviceA-Vlan-interface41] ip address 172.24.41.254 24
[DeviceA-Vlan-interface41] quit
[DeviceA] interface Bridge-Aggregation 1024
[DeviceA-Bridge-Aggregation1024] port access vlan 41
[DeviceA-Bridge-Aggregation1024] quit
(4) 配置IRF与出口路由器RouterA之间运行OSPF路由协议
[DeviceA-LoopBack0] ip address 172.24.254.1 255.255.255.255
[DeviceA-LoopBack0] quit
[DeviceA] ospf 1 router-id 172.24.254.1
[DeviceA-ospf-1] import-route direct
[DeviceA-ospf-1] area 0
[DeviceA-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255
[DeviceA-ospf-1-area-0.0.0.0] quit
[DeviceA-ospf-1] quit
(1) 配置链路聚合
# 接入设备SW1上创建聚合组1，并设置该聚合组使用动态聚合，该聚合组同时用于IRF的LACP MAD检测。
<SW1> system-view
[SW1] interface Bridge-Aggregation 1
[SW1-Bridge-Aggregation1] link-aggregation mode dynamic
[SW1-Bridge-Aggregation1] undo shutdown
[SW1-Bridge-Aggregation1] quit
# 接入设备SW1上行四个端口加入聚合组。
[SW1] interface range ten-gigabitethernet 1/0/21 to ten-gigabitethernet 1/0/24
[SW1-if-range] port link-aggregation group 1
[SW1-if-range] undo shutdown
[SW1-if-range] quit
(2) 配置VLAN及接口
# 接入设备SW1上创建VLAN。
[SW1] vlan all
# 配置与IRF连接的端口。
[SW1] interface Bridge-Aggregation 1
[SW1-Bridge-Aggregation1] port access vlan 10
[SW1-Bridge-Aggregation1] quit
# 配置连接服务器的端口。
[SW1] interface GigabitEthernet 3/0/1
[SW1-GigabitEthernet3/0/1] port link-type trunk
[SW1-GigabitEthernet3/0/1] port trunk permit vlan all
[SW1-GigabitEthernet3/0/1] undo port trunk permit vlan 1
[SW1-GigabitEthernet3/0/1] undo shutdown
[SW1-GigabitEthernet3/0/1] quit
(1) 配置链路聚合
# 接入设备SW2创建聚合组1，将端口加入到聚合组。
<SW2> system-view
[SW2] interface Bridge-Aggregation 1
[SW2-Bridge-Aggregation1] undo shutdown
[SW2-Bridge-Aggregation1] quit
[SW2] interface range ten-gigabitethernet 1/0/21 to ten-gigabitethernet 1/0/24
[SW2-if-range] undo shutdown
[SW2-if-range] port link-aggregation group 1
[SW2-if-range] quit
(2) 配置VLAN及接口
# 接入设备SW2上创建VLAN。
[SW2] vlan all
# 配置与IRF连接的端口。
[SW2] interface Bridge-Aggregation 1
[SW2-Bridge-Aggregation1] port access vlan 20
[SW2-Bridge-Aggregation1] quit
# 配置连接服务器的端口。
[SW2] interface GigabitEthernet 3/0/1
[SW2-GigabitEthernet3/0/1] port link-type trunk
[SW2-GigabitEthernet3/0/1] port trunk permit vlan all
[SW2-GigabitEthernet3/0/1] undo port trunk permit vlan 1
[SW2-GigabitEthernet3/0/1] undo shutdown
[SW2-GigabitEthernet3/0/1] quit
出口路由器配置本用例只描述与IRF连接的部分，外网使用何种路由协议不予描述。
(1) 配置链路聚合
# 配置出口路由器RouterA与IRF连接的端口。
<RouterA> system-view
[RouterA] interface Bridge-Aggregation 1
[RouterA-Bridge-Aggregation1] quit
[RouterA] interface range ten-gigabitethernet 1/0/1 to interface ten-gigabitethernet 1/0/3
[RouterA-if-range] port link-aggregation group 1
[RouterA-if-range] quit
[RouterA] interface ten-gigabitethernet 2/0/1
[RouterA-Ten-GigabitEthernet2/0/1] port link-aggregation group 1
[RouterA-Ten-GigabitEthernet2/0/1] quit
(2) 配置VLAN及接口IP地址
# 配置出口路由器RouterA与IRF连接的端口。
[RouterA] vlan 41
[RouterA-vlan41] quit
[RouterA] interface vlan-interface 41
[RouterA-vlan-interface41] ip address 172.24.41.2 24
[RouterA-vlan-interface41] quit
[RouterA] interface Bridge-Aggregation 1
[RouterA-Bridge-Aggregation1] port access vlan 41
[RouterA-Bridge-Aggregation1] quit
# 配置出口路由器RouterA与外网连接的端口。
[RouterA] vlan 50
[RouterA-vlan50] quit
[RouterA] interface vlan-interface 50
[RouterA-vlan-interface50] ip address 172.24.1.2 24
[RouterA-vlan-interface50] quit
(3) 配置RouterA与IRF之间运行OSPF路由协议。
[RouterA] interface loopback 0
[RouterA-LoopBack0] ip addresss 172.24.254.2 255.255.255.255
[RouterA-LoopBack0] quit
[RouterA] ospf 1 router-id 172.24.254.2
[RouterA-ospf-1] import-route direct
[RouterA-ospf-1] area 0
[RouterA-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255
[RouterA-ospf-1-area-0.0.0.0] quit
[RouterA-ospf-1] quit
(1) 验证IRF是否建立成功
# 使用display irf topology命令查看八个IRF口都是UP状态，说明四台设备建立IRF成功。
<DeviceA> display irf topology
Topology Info
-------------------------------------------------------------------------
IRF-Port1 IRF-Port2
Switch Link neighbor Link neighbor Belong To
1 UP 4 UP 2 0210-fc01-0000
4 UP 3 UP 1 0210-fc01-0000
3 UP 2 UP 4 0210-fc01-0000
2 UP 1 UP 3 0210-fc01-0000
(2) 验证跨框聚合链路备份功能
# 从serverGroup1任意挑选一台PC ping外网IP，同时将IRF连接出口路由器的Ten-GigabitEthernet 1/3/0/8端口关闭。
[DeviceA] interface ten-gigabitethernet 1/3/0/8
[DeviceA-Ten-GigabitEthernet1/3/0/8] shutdown
仍然可以ping通外网。
# 重新使Ten-GigabitEthernet 1/3/0/8端口状态UP，持续ping外网IP。
[DeviceA] interface ten-gigabitethernet 1/3/0/8
[DeviceA-Ten-GigabitEthernet1/3/0/8] undo shutdown
# 将Ten-GigabitEthernet 2/3/0/8端口关闭。
[DeviceA] interface ten-gigabitethernet 2/3/0/8
[DeviceA-Ten-GigabitEthernet2/3/0/8] undo shutdown
仍然可以ping通外网。
· SW1：
#
vlan 10
#
interface Gigabitethernet 3/0/1
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface Ten-GigabitEthernet 1/0/21
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/22
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/23
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/24
port link-mode bridge
port link-aggregation group 1
#
interface Bridge-Aggregation 1
port access vlan 10
#
· SW2：
#
vlan 20
#
interface Gigabitethernet 3/0/1
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface Ten-GigabitEthernet 1/0/21
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/22
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/23
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/24
port link-mode bridge
port link-aggregation group 1
#
interface Bridge-Aggregation 1
port access vlan 20
#
· IRF：
#
irf mac-address persistent always
irf auto-update enable
undo irf auto-merge enable
undo irf link-delay
irf member 1 priority 1
irf member 2 priority 1
irf member 3 priority 1
irf member 4 priority 1
irf mode enhanced
#
system-working-mode standard
#
vlan 10
#
vlan 20
#
vlan 13
#
vlan 41
#
interface bridge-aggregation 1
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
mad enable
link-aggregation mode dynamic
#
interface bridge-aggregation 2
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
#
interface bridge-aggregation 1024
port access vlan 41
#
interface loopback 0
ip address 172.24.254.1 255.255.255.255
#
interface vlan-interface 10
ip address 172.24.10.254 24
#
interface vlan-interface 20
ip address 172.24.20.254 24
#
interface vlan-interface 41
ip address 172.24.41.254 24
#
interface Ten-GigabitEthernet 1/3/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
port link-aggregation group 1
#
interface Ten-GigabitEthernet1 1/3/0/4
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
port link-aggregation group 2
#
interface Ten-GigabitEthernet 1/3/0/8
port link-mode bridge
port access vlan 41
port link-aggregation group 1024
#
interface Ten-GigabitEthernet 2/3/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
port link-aggregation group 1
#
interface Ten-GigabitEthernet 2/3/0/4
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
port link-aggregation group 2
#
interface Ten-GigabitEthernet 2/3/0/8
port link-mode bridge
port access vlan 41
port link-aggregation group 1024
#
interface Ten-GigabitEthernet 3/3/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
port link-aggregation group 1
#
interface Ten-GigabitEthernet 3/3/0/4
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
port link-aggregation group 2
#
interface Ten-GigabitEthernet 3/3/0/8
port link-mode bridge
port access vlan 41
port link-aggregation group 1024
#
interface Ten-GigabitEthernet 4/3/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
port link-aggregation group 1
#
interface Ten-GigabitEthernet 4/3/0/4
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
port link-aggregation group 2
#
interface Ten-GigabitEthernet 4/3/0/8
port link-mode bridge
port access vlan 41
port link-aggregation group 1024
#
ospf 1 router-id 172.24.254.1
import-route direct
area 0.0.0.0
network 172.24.41.0 0.0.0.255
#
irf-port 1/1
port group interface Ten-GigabitEthernet1/2/0/4
#
irf-port 1/2
port group interface Ten-GigabitEthernet1/2/0/1
#
irf-port 3/1
port group interface GigabitEthernet3/3/0/15
#
irf-port 3/2
port group interface Ten-GigabitEthernet3/12/0/1
#
irf-port 4/1
port group interface Ten-GigabitEthernet4/6/0/4
#
irf-port 4/2
port group interface Ten-GigabitEthernet4/6/0/2
#
· RouterA：
#
vlan 41
#
vlan 50
#
interface loopback 0
ip address 172.24.254.2 255.255.255.255
#
interface bridge-aggregation 1
port access vlan 41
#
interface Ten-GigabitEthernet 1/0/1
port access vlan 41
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/2
port access vlan 41
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/3
port access vlan 41
port link-aggregation group 1
#
interface Ten-GigabitEthernet 2/0/1
port access vlan 41
port link-aggregation group 1
#
interface Ten-GigabitEthernet 2/0/12
port access vlan 50
#
interface vlan-interface 41
ip address 172.24.41.2 24
#
interface vlan-interface 50
ip address 172.24.1.2 24
#
ospf 1 router-id 172.24.254.2
import-route direct
area 0.0.0.0
network 172.24.41.0 0.0.0.255
#
由于网络规模迅速扩大，当前中心交换机设备A和设备B组成IRF的转发能力已经不能满足需求。现在需要在保留原有设备的基础上完成扩容，满足当前网络的转发需求。采用的升级方案为：扩大汇聚层设备的IRF规模，升级成四框IRF来满足当前网络的转发需求，如图5所示。
图3 升级之前组网图（两个IRF成员设备）
图4 升级过程组网图（新增两个成员设备Device C和Device D）
IP地址配置信息及设备间的互联端口信息请参见5 从单框设备配置为四框IRF配置举例。
· 由于升级后的IRF 成员设备超过2台，所以必须在4台成员设备上均使能IRF增强功能。
· 为避免成员设备的单点故障影响到正常的业务转发，在IRF中配置跨框聚合端口进行业务转发。
· 为尽量降低IRF分裂对业务造成的影响，可在IRF中配置BFD MAD检测。检测速度较快，组网形式灵活，对于中间设备没有要求，但是会占用额外的三层接口。
本举例在S12500-CMW710-R7129版本上进行配置和验证。
· IRF合并前，IRF成员设备的IRF增强功能的使能情况应该保持一致，即都配置或都取消IRF增强功能，否则，无法形成一个IRF。
· 设备运行在IRF模式时，若存在三层以太网接口则需要切换为二层以太网接口（设备会有提示信息），才能配置IRF增强功能。
· 配置了IRF增强功能后，不能再创建三层以太网接口/子接口，三层聚合接口/子接口。
· M（M<=4）个IRF合并前，如果所有成员设备都配置了IRF增强功能，必须手工重启任意M-1台成员设备以完成IRF合并。
BFD MAD与STP功能互斥，因此需要在用于BFD MAD检测的接口上关闭STP功能。
如果新加入的DeviceC和DeviceD都是独立运行模式，搭建四框IRF的配置步骤请参考6.5.1 配置DeviceC和DeviceD加入IRF；
如果新加入的DeviceC和DeviceD已经组成了另一个IRF-C，搭建四框IRF的配置步骤请参考6.5.2 配置IRF-A和IRF-C合并成IRF。
由于DeviceA和DeviceB已经组成了IRF，所以只需将当前IRF配置成IRF增强模式，并将DeviceC和DeviceD加入IRF即可。
(1) 配置IRF端口1/1与物理端口Ten-GigabitEthernet1/2/0/4绑定
<DeviceA> system-view
[DeviceA] irf-port 1/1
[DeviceA-irf-port1/1] port group interface ten-gigabitethernet 1/2/0/4
[DeviceA-irf-port1/1] quit
[DeviceA] interface ten-gigabitethernet 1/2/0/4
[DeviceA-Ten-GigabitEthernet1/2/0/4] undo shutdown
[DeviceA-Ten-GigabitEthernet1/2/0/4] quit
(2) 配置IRF端口2/2与物理端口GigabitEthernet2/3/0/30绑定
[DeviceA] irf-port 2/2
[DeviceA-irf-port2/2] port group interface gigabitethernet2/3/0/30
[DeviceA-irf-port2/2] quit
[DeviceA] interface GigabitEthernet 2/3/0/30
[DeviceA-GigabitEthernet2/3/0/30] undo shutdown
[DeviceA-GigabitEthernet2/3/0/30] quit
(3) 配置IRF增强模式
[DeviceA] irf mode enhanced
(4) 将当前配置保存
[DeviceA] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[cfa0:/irf.cfg]
(To leave the existing filename unchanged, press the enter key):
cfa0:/irf.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait.....................................
Saved the current configuration to mainboard device successfully.
(1) 设置DeviceC的成员编号为3
<DeviceC> system-view
[DeviceC] irf member 3
(2) 配置IRF端口1与物理端口GigabitEthernet 3/0/15绑定
[DeviceC] irf-port 1
[DeviceC-irf-port1] port group interface gigabitethernet 3/0/15
[DeviceC-irf-port1] quit
[DeviceC] interface GigabitEthernet 3/0/15
[DeviceC-GigabitEthernet3/0/15] undo shutdown
[DeviceC-GigabitEthernet3/0/15] quit
(3) 配置IRF端口2与物理端口Ten-GigabitEthernet 12/0/1绑定
[DeviceC] irf-port 2
[DeviceC-irf-port2] port group interface ten-gigabitethernet12/0/1
[DeviceC-irf-port2] quit
[DeviceC] interface ten-gigabitethernet 12/0/1
[DeviceC-Ten-GigabitEthernet12/0/1] undo shutdown
[DeviceC-Ten-GigabitEthernet12/0/1] quit
(4) 配置IRF增强模式
[DeviceC] irf mode enhanced
(5) 保存配置
[DeviceC] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[cfa0:/irf.cfg]
(To leave the existing filename unchanged, press the enter key):
cfa0:/irf.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait.....................................
Saved the current configuration to mainboard device successfully.
参照图5和端口连接表连接DeviceB和DeviceC之间的IRF端口。
(6) 将设备的运行模式切换到IRF模式
[DeviceC] chassis convert mode irf
The device will switch to IRF mode and reboot.
You are recommended to save the current running configuration and specify the c
onfiguration file for the next startup. Continue? [Y/N]:y
Do you want to convert the content of the next startup configuration file flash
:/startup.cfg to make it available in stack mode? [Y/N]:y
Now rebooting, please wait...
(1) 设置DeviceD的成员编号为4
<DeviceD> system-view
[DeviceD] irf member 4
(2) 创建IRF端口1与物理端口Ten-GigabitEthernet 6/0/4绑定
[DeviceD] irf-port 1
[DeviceD-irf-port1] port group interface ten-gigabitethernet 6/0/4
[DeviceD-irf-port1] quit
[DeviceD] interface ten-gigabitethernet 6/0/4
[DeviceD-Ten-GigabitEthernet6/0/4] undo shutdown
[DeviceD-Ten-GigabitEthernet6/0/4] quit
(3) 配置IRF端口2与物理端口Ten-GigabitEthernet 6/0/2绑定
[DeviceD] irf-port 2
[DeviceD-irf-port2] port group interface ten-gigabitethernet6/0/2
[DeviceD-irf-port2] quit
[DeviceD] interface ten-gigabitethernet 6/0/2
[DeviceD-Ten-GigabitEthernet6/0/2] undo shutdown
[DeviceD-Ten-GigabitEthernet6/0/2] quit
(4) 配置IRF增强模式
[DeviceD] irf mode enhanced
(5) 保存配置
[DeviceD] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[cfa0:/irf.cfg]
(To leave the existing filename unchanged, press the enter key):
cfa0:/irf.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait.....................................
Saved the current configuration to mainboard device successfully.
参照图5和端口连接表连接DeviceC和DeviceD以及DeviceA和DeviceD之间的IRF端口。
(6) 将设备的运行模式切换到IRF模式
[DeviceD] chassis convert mode irf
The device will switch to IRF mode and reboot.
You are recommended to save the current running configuration and specify the c
onfiguration file for the next startup. Continue? [Y/N]:y
Do you want to convert the content of the next startup configuration file flash
:/startup.cfg to make it available in stack mode? [Y/N]:y
Now rebooting, please wait...
(1) 配置IRF端口1/1与物理端口Ten-GigabitEthernet1/2/0/4绑定
<DeviceA> system-view
[DeviceA] irf-port 1/1
[DeviceA-irf-port1/1] port group interface ten-gigabitethernet 1/2/0/4
[DeviceA-irf-port1/1] quit
[DeviceA] interface ten-gigabitethernet 1/2/0/4
[DeviceA-Ten-GigabitEthernet1/2/0/4] undo shutdown
[DeviceA-Ten-GigabitEthernet1/2/0/4] quit
(2) 配置IRF端口2/2与物理端口GigabitEthernet2/3/0/30绑定
[DeviceA] irf-port 2/2
[DeviceA-irf-port2/2] port group interface gigabitethernet2/3/0/30
[DeviceA-irf-port2/2] quit
[DeviceA] interface GigabitEthernet 2/3/0/30
[DeviceA-GigabitEthernet2/3/0/30] undo shutdown
[DeviceA-GigabitEthernet2/3/0/30] quit
(3) 配置IRF增强模式
[DeviceA] irf mode enhanced
(4) 将当前配置保存
[DeviceA] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[cfa0:/irf.cfg]
(To leave the existing filename unchanged, press the enter key):
cfa0:/irf.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait.....................................
Saved the current configuration to mainboard device successfully.
(1) 设置IRF-C的成员编号
<DeviceC> system-view
[DeviceC] irf member 1 remember 3
[DeviceC] irf member 2 remember 4
(2) 保存当前配置并重启，使新的成员编号生效
[DeviceC] quit
<DeviceC> reboot
Start to check configuration with next startup configuration file, please wait..
.......DONE!
Current configuration may be lost after the reboot, save current configuration?
[Y/N]:y
Please input the file name(*.cfg)[cfa0:/irf.cfg]
(To leave the existing filename unchanged, press the enter key):y
The file name is invalid(does not end with .cfg)!
This command will reboot the device. Continue? [Y/N]:y
(3) 配置IRF端口3/1与物理端口GigabitEthernet 3/3/0/15绑定
<DeviceC> system-view
[DeviceC] irf-port 3/1
[DeviceC-irf-port3/1] port group interface gigabitethernet 3/3/0/15
[DeviceC-irf-port3/1] quit
[DeviceC] interface GigabitEthernet 3/3/0/15
[DeviceC-GigabitEthernet3/3/0/15] undo shutdown
[DeviceC-GigabitEthernet3/3/0/15] quit
(4) 配置IRF端口4/2与物理端口Ten-GigabitEthernet 4/6/0/2绑定
[DeviceD] irf-port 4/2
[DeviceD-irf-port4/2] port group interface ten-gigabitethernet4/6/0/2
[DeviceD-irf-port4/2] quit
[DeviceD] interface ten-gigabitethernet 4/6/0/2
[DeviceD-Ten-GigabitEthernet4/6/0/2] undo shutdown
[DeviceD-Ten-GigabitEthernet4/6/0/2] quit
(5) 配置IRF增强模式
[DeviceC] irf mode enhanced
(6) 将当前配置保存
[DeviceC] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[cfa0:/irf.cfg]
(To leave the existing filename unchanged, press the enter key):
cfa0:/irf.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait.....................................
Saved the current configuration to mainboard device successfully.
参照图5和端口连接表连接DeviceB和DeviceC以及Device A和Device D之间的IRF端口。
在前面配置完成并重新启动后，IRF已经形成，此时可以进行各个业务模块的配置。IRF形成之后，可以从任何一台成员设备登录进行配置，设备名称缺省为Master的名称（此例中为DeviceA）。
业务类配置，可分为以下几个部分：
· 在IRF上配置上下行链路聚合
· 在IRF上运行LACP MAD检测
· 配置VLAN、端口及各接口IP地址
· 配置IRF与出口路由器之间运行OSPF
在本例中，为方便理解，我们取消了升级之前IRF设备上的所有业务配置。但是在实际使用中，部分在升级之前已经部署的业务可以无需再重新配置了（例如端口IP地址等）。
(1) 配置IRF端口聚合
# 创建连接接入层交换机的聚合组，其中聚合组1需要配置为动态聚合组，用于进行LACP MAD检测，并将对应端口加入聚合组。
<DeviceA> system-view
[DeviceA] interface Bridge-Aggregation 1
[DeviceA-Bridge-Aggregation1] undo shutdown
[DeviceA-Bridge-Aggregation1] link-aggregation mode dynamic
[DeviceA-Bridge-Aggregation1] quit
[DeviceA] interface range ten-gigabitEthernet 1/3/0/3 ten-gigabitEthernet 2/3/0/3 ten-gigabitEthernet 3/3/0/3 ten-gigabitEthernet 4/3/0/3
[DeviceA-if-range] port link-aggregation group 1
[DeviceA-if-range] undo shutdown
[DeviceA-if-range] quit
[DeviceA] interface Bridge-Aggregation 2
[DeviceA-Bridge-Aggregation2] undo shutdown
[DeviceA-Bridge-Aggregation2] quit
[DeviceA] interface range ten-gigabitEthernet 1/3/0/4 ten-gigabitEthernet 2/3/0/4 ten-gigabitEthernet 3/3/0/4 ten-gigabitEthernet 4/3/0/4
[DeviceA-if-range] undo shutdown
[DeviceA-if-range] port link-aggregation group 2
[DeviceA-if-range] quit
# 创建连接出口路由器RouterA的聚合组，并将上行端口加入聚合组。
[DeviceA] interface Bridge-Aggregation 1024
[DeviceA-Bridge-Aggregation1024] undo shutdown
[DeviceA-Bridge-Aggregation1024] quit
[DeviceA] interface range ten-gigabitEthernet 1/3/0/8 ten-gigabitEthernet 2/3/0/8 ten-gigabitEthernet 3/3/0/8 ten-gigabitEthernet 4/3/0/8
[DeviceA-if-range] undo shutdown
[DeviceA-if-range] port link-aggregation group 1024
[DeviceA-if-range] quit
(2) 在IRF上配置BFD MAD检测
使能BFD MAD检测时，要求MAD VLAN上不能配置其他业务。
# 在IRF上创建VLAN 13，并配置VLAN接口用于BFD MAD 检测。
[DeviceA] vlan 13
[DeviceA-vlan13] quit
[DeviceA] interface Vlan-interface 13
[DeviceA-Vlan-interface13] mad bfd enable
[DeviceA-Vlan-interface13] mad ip add 172.1.1.1 24 member 1
[DeviceA-Vlan-interface13] mad ip add 172.1.1.2 24 member 2
[DeviceA-Vlan-interface13] mad ip add 172.1.1.3 24 member 3
[DeviceA-Vlan-interface13] mad ip add 172.1.1.4 24 member 4
[DeviceA-Vlan-interface13] undo shutdown
[DeviceA-Vlan-interface13] quit
# 配置IRF下行连接SW2的二层以太网接口(图中蓝色虚线连接的端口用于BFD MAD检测)加入VLAN13，并取消接口上的STP功能。
[DeviceA] interface range ten-gigabitEthernet 1/3/0/1 ten-gigabitEthernet 2/3/0/1 ten-gigabitEthernet 3/3/0/1 ten-gigabitEthernet 4/3/0/1
[DeviceA-if-range] undo shutdown
[DeviceA-if-range] undo stp enable
[DeviceA-if-range] port access vlan 13
[DeviceA-if-range] quit
(3) 配置VLAN、端口及接口IP地址
# 配置IRF与下行交换机SW1之间通过Vlan-interface10连接。
[DeviceA] vlan 10
[DeviceA-vlan10] quit
[DeviceA] interface vlan-interface 10
[DeviceA-Vlan-interface10] ip address 172.24.10.254 24
[DeviceA-Vlan-interface10] quit
[DeviceA] interface Bridge-Aggregation 1
[DeviceA-Bridge-Aggregation1] port link-type trunk
[DeviceA-Bridge-Aggregation1] undo port trunk permit vlan 1
[DeviceA-Bridge-Aggregation1] port trunk permit vlan 10
[DeviceA-Bridge-Aggregation1] quit
# 配置IRF与下行交换机SW2之间通过Vlan-interface20连接。
[DeviceA] vlan 20
[DeviceA-vlan20] quit
[DeviceA] interface vlan-interface 20
[DeviceA-Vlan-interface20] ip address 172.24.20.254 24
[DeviceA-Vlan-interface20] quit
[DeviceA] interface Bridge-Aggregation 2
[DeviceA-Bridge-Aggregation2] port link-type trunk
[DeviceA-Bridge-Aggregation2] undo port trunk permit vlan 1
[DeviceA-Bridge-Aggregation2] port trunk permit vlan 20
[DeviceA-Bridge-Aggregation2] quit
# 配置IRF与出口路由器RouterA之间通过Vlan-interface41连接。
[DeviceA] vlan 41
[DeviceA-vlan41] quit
[DeviceA] interface vlan-interface 41
[DeviceA-Vlan-interface41] ip address 172.24.41.254 24
[DeviceA] interface Bridge-Aggregation 1024
[DeviceA-Bridge-Aggregation1024] port access vlan 41
[DeviceA-Bridge-Aggregation1024] quit
[DeviceA-Vlan-interface41] quit
(4) 配置IRF与出口路由器之间运行OSPF路由协议
[DeviceA] interface loopback 0
[DeviceA-LoopBack0] ip address 172.24.254.1 255.255.255.255
[DeviceA-LoopBack0] quit
[DeviceA] ospf 1 router-id 172.24.254.1
[DeviceA-ospf-1] import-route direct
[DeviceA-ospf-1] area 0
[DeviceA-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255
[DeviceA-ospf-1-area-0.0.0.0] quit
[DeviceA-ospf-1] quit
(1) 配置链路聚合
# 接入设备SW1上创建聚合组1，并设置该聚合组使用动态聚合，该聚合组同时用于IRF的LACP MAD检测。
<SW1> system-view
[SW1] interface Bridge-Aggregation 1
[SW1-Bridge-Aggregation1] link-aggregation mode dynamic
[SW1-Bridge-Aggregation1] undo shutdown
[SW1-Bridge-Aggregation1] quit
# 接入设备SW1上行四个端口加入聚合组。
[SW1] interface range ten-gigabitEthernet 1/0/21 to ten-gigabitEthernet 1/0/24
[SW1-if-range] undo shutdown
[SW1-if-range] port link-aggregation group 1
[SW1-if-range] quit
(2) 配置VLAN及接口
# 接入设备SW1上创建VLAN。
[SW1] vlan all
# 配置与IRF连接的端口。
[SW1] interface Bridge-Aggregation 1
[SW1-Bridge-Aggregation1] port access vlan 10
[SW1-Bridge-Aggregation1] quit
# 配置连接服务器的端口。
[SW1] interface GigabitEthernet 3/0/1
[SW1-GigabitEthernet3/0/1] port link-type trunk
[SW1-GigabitEthernet3/0/1] port trunk permit vlan all
[SW1-GigabitEthernet3/0/1] undo port trunk permit vlan 1
[SW1-GigabitEthernet3/0/1] undo shutdown
[SW1-GigabitEthernet3/0/1] quit
(1) 配置链路聚合
# 接入设备SW2创建聚合组1，将端口加入到聚合组。
<SW2> system-view
[SW2] interface Bridge-Aggregation 1
[SW2-Bridge-Aggregation1] undo shutdown
[SW2-Bridge-Aggregation1] quit
[SW2] interface range ten-gigabitEthernet 1/0/21 to ten-gigabitEthernet 1/0/24
[SW2-if-range] undo shutdown
[SW2-if-range] port link-aggregation group 1
[SW2-if-range] quit
(2) 配置VLAN及接口
# 接入设备SW2上创建VLAN。
[SW2] vlan all
# 配置与IRF连接的端口。
[SW2] interface Bridge-Aggregation 1
[SW2-Bridge-Aggregation1] port access vlan 20
[SW2-Bridge-Aggregation1] quit
# 配置连接服务器的端口。
[SW2] interface GigabitEthernet 3/0/1
[SW2-GigabitEthernet3/0/1] port link-type trunk
[SW2-GigabitEthernet3/0/1] port trunk permit vlan all
[SW2-GigabitEthernet3/0/1] undo port trunk permit vlan 1
[SW2-GigabitEthernet3/0/1] undo shutdown
[SW2-GigabitEthernet3/0/1] quit
# 配置用于IRF进行BFD MAD检测的端口。
[SW2] interface range ten-gigabitEthernet 1/0/41 to ten-gigabitEthernet 1/0/44
[SW2-if-range] port access vlan 13
[SW2-if-range] quit
出口路由器配置本用例只描述与IRF连接的部分，外网使用何种路由协议不予描述。
(1) 配置链路聚合
# 配置出口路由器RouterA与IRF连接的端口。
<RouterA> system-view
[RouterA] interface Bridge-Aggregation 1
[RouterA-Bridge-Aggregation1] quit
[RouterA] interface range ten-gigabitEthernet1/0/1 to ten-gigabitEthernet1/0/3
[RouterA-if-range] port link-aggregation group 1
[RouterA-if-range] quit
(2) 配置VLAN及接口IP地址
# 配置出口路由器RouterA与IRF连接的端口。
[RouterA] vlan 41
[RouterA-vlan41] quit
[RouterA] interface vlan-interface 41
[RouterA-vlan-interface41] ip address 172.24.41.2 24
[RouterA-vlan-interface41] quit
[RouterA] interface Bridge-Aggregation 1
[RouterA-Bridge-Aggregation1] port access vlan 41
[RouterA-Bridge-Aggregation1] quit
# 配置出口路由器RouterA与外网连接的端口。
[RouterA] vlan 50
[RouterA-vlan50] quit
[RouterA] interface vlan-interface 50
[RouterA-vlan-interface50] ip address 172.24.1.2 24
[RouterA-vlan-interface50] quit
(3) 配置RouterA与IRF之间运行OSPF路由协议。
[RouterA] interface loopback 0
[RouterA-LoopBack0] ip addresss 172.24.254.2 255.255.255.255
[RouterA-LoopBack0] quit
[RouterA] ospf 1 router-id 172.24.254.2
[RouterA-ospf-1] import-route direct
[RouterA-ospf-1] area 0
[RouterA-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255
[RouterA-ospf-1-area-0.0.0.0] quit
[RouterA-ospf-1] quit
(1) 验证IRF是否建立成功
# 使用display irf topology命令查看八个IRF口都是UP状态，说明四台设备建立IRF成功。
<DeviceA> display irf topology
Topology Info
-------------------------------------------------------------------------
IRF-Port1 IRF-Port2
Switch Link neighbor Link neighbor Belong To
1 UP 4 UP 2 0210-fc01-0000
4 UP 3 UP 1 0210-fc01-0000
3 UP 2 UP 4 0210-fc01-0000
2 UP 1 UP 3 0210-fc01-0000
(2) 验证跨框聚合链路备份功能
# 从serverGroup1任意挑选一台PC ping外网IP，同时将IRF连接出口路由器的Ten-GigabitEthernet 1/3/0/8端口shutdown。
[DeviceA] interface ten-gigabitethernet 1/3/0/8
[DeviceA-Ten-GigabitEthernet1/3/0/8] shutdown
仍然可以ping通外网。
# 重新使Ten-GigabitEthernet 1/3/0/8端口状态UP，持续ping外网IP。
[DeviceA] interface ten-gigabitethernet 1/3/0/8
[DeviceA-Ten-GigabitEthernet1/3/0/8] undo shutdown
# 将另外一个上行端口Ten-GigabitEthernet 2/3/0/8 shutdown。
[DeviceA] interface ten-gigabitethernet 2/3/0/8
[DeviceA-Ten-GigabitEthernet2/3/0/8] undo shutdown
仍然可以ping通外网。
· SW1：
#
vlan 10
#
interface Gigabitethernet 3/0/1
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface Ten-GigabitEthernet 1/0/21
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/22
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/23
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/24
port link-mode bridge
port link-aggregation group 1
#
interface Bridge-Aggregation 1
port access vlan 10
#
· SW2：
#
vlan 20
#
interface Gigabitethernet 3/0/1
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface Ten-GigabitEthernet 1/0/41
port access vlan 13
#
interface Ten-GigabitEthernet 1/0/42
port access vlan 13
#
interface Ten-GigabitEthernet 1/0/43
port access vlan 13
#
interface Ten-GigabitEthernet 1/0/44
port access vlan 13
#
interface Ten-GigabitEthernet 1/0/21
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/22
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/23
port link-mode bridge
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/24
port link-mode bridge
port link-aggregation group 1
#
interface Bridge-Aggregation 1
port access vlan 20
#
· IRF：
#
irf mac-address persistent always
irf auto-update enable
undo irf auto-merge enable
undo irf link-delay
irf member 1 priority 1
irf member 2 priority 1
irf member 3 priority 1
irf member 4 priority 1
irf mode enhanced
#
system-working-mode standard
#
vlan 10
#
vlan 20
#
vlan 13
#
vlan 41
#
interface bridge-aggregation 1
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
mad enable
link-aggregation mode dynamic
#
interface bridge-aggregation 2
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
#
interface bridge-aggregation 1024
port access vlan 41
#
interface loopback 0
ip address 172.24.254.1 255.255.255.255
#
interface vlan-interface 10
ip address 172.24.10.254 24
#
interface Vlan-interface13
mad bfd enable
mad ip address 1.1.1.4 255.255.255.0 member 1
mad ip address 1.1.1.1 255.255.255.0 member 2
mad ip address 1.1.1.2 255.255.255.0 member 3
mad ip address 1.1.1.3 255.255.255.0 member 4
#
interface vlan-interface 20
ip address 172.24.20.254 24
#
interface vlan-interface 41
ip address 172.24.41.254 24
#
interface Ten-GigabitEthernet 1/3/0/1
port link-mode bridge
port access vlan 13
undo stp enable
#
interface Ten-GigabitEthernet 1/3/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
port link-aggregation group 1
#
interface Ten-GigabitEthernet1 1/3/0/4
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
port link-aggregation group 2
#
interface Ten-GigabitEthernet 1/3/0/8
port link-mode bridge
port access vlan 41
port link-aggregation group 1024
#
interface Ten-GigabitEthernet 2/3/0/1
port link-mode bridge
port access vlan 13
undo stp enable
#
interface Ten-GigabitEthernet 2/3/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
port link-aggregation group 1
#
interface Ten-GigabitEthernet 2/3/0/4
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
port link-aggregation group 2
#
interface Ten-GigabitEthernet 2/3/0/8
port link-mode bridge
port access vlan 41
port link-aggregation group 1024
#
interface Ten-GigabitEthernet 3/3/0/1
port link-mode bridge
port access vlan 13
undo stp enable
#
interface Ten-GigabitEthernet 3/3/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
port link-aggregation group 1
#
interface Ten-GigabitEthernet 3/3/0/4
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
port link-aggregation group 2
#
interface Ten-GigabitEthernet 3/3/0/8
port link-mode bridge
port access vlan 41
port link-aggregation group 1024
#
interface Ten-GigabitEthernet 4/3/0/1
port link-mode bridge
port access vlan 13
undo stp enable
#
interface Ten-GigabitEthernet 4/3/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 10
port link-aggregation group 1
#
interface Ten-GigabitEthernet 4/3/0/4
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
port link-aggregation group 2
#
interface Ten-GigabitEthernet 4/3/0/8
port link-mode bridge
port access vlan 41
port link-aggregation group 1024
#
ospf 1 router-id 172.24.254.1
import-route direct
area 0.0.0.0
network 172.24.41.0 0.0.0.255
#
irf-port 1/1
port group interface Ten-GigabitEthernet1/2/0/4
#
irf-port 1/2
port group interface Ten-GigabitEthernet1/2/0/1
#
irf-port 3/1
port group interface GigabitEthernet3/3/0/15
#
irf-port 3/2
port group interface Ten-GigabitEthernet3/12/0/1
#
irf-port 4/1
port group interface Ten-GigabitEthernet4/6/0/4
#
irf-port 4/2
port group interface Ten-GigabitEthernet4/6/0/2
#
· RouterA：
#
vlan 41
#
vlan 50
#
interface loopback 0
ip address 172.24.254.2 255.255.255.255
#
interface bridge-aggregation 1
port access vlan 41
#
interface Ten-GigabitEthernet 1/0/1
port access vlan 41
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/2
port access vlan 41
port link-aggregation group 1
#
interface Ten-GigabitEthernet 1/0/3
port access vlan 41
port link-aggregation group 1
#
interface Ten-GigabitEthernet 2/0/1
port access vlan 41
port link-aggregation group 1
#
interface Ten-GigabitEthernet 2/0/12
port access vlan 50
#
interface vlan-interface 41
ip address 172.24.41.2 24
#
interface vlan-interface 50
ip address 172.24.1.2 24
#
ospf 1 router-id 172.24.254.2
import-route direct
area 0.0.0.0
network 172.24.41.0 0.0.0.255
#
· 《H3C S12500系列路由交换机 IRF配置指导》中的“IRF”
· 《H3C S12500系列路由交换机 IRF命令参考》中的“IRF”
不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!
支持
售前咨询
售后咨询
人工在线咨询
