登录

欢迎user新华三退出

国家 / 地区

  • 产品与解决方案
  • 行业解决方案
  • 服务
  • 支持
  • 合作伙伴
  • 新华三人才研学中心
  • 关于我们

02-虚拟化技术配置举例

目录

01-H3C_IRF典型配置举例

本章节下载： 01-H3C_IRF典型配置举例  (593.39 KB)

docurl=/cn/Service/Document_Software/Document_Center/Switches/Catalog/S7500E/S7500E-XS/Configure/Typical_Configuration_Example/H3C_S7500E-XS_CE-R7536P05-6W100/02/201710/1039409_30005_0.htm

01-H3C_IRF典型配置举例

H3C IRF典型配置举例

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Copyright © 2017 新华三技术有限公司 版权所有，保留一切权利。

非经本公司书面许可，任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部，

并不得以任何形式传播。本文档中的信息可能变动，恕不另行通知。

H3C_彩色.emf

 

目  录

1 简介

2 配置前提

3 使用限制

4 两台成员设备的IRF配置举例

4.1 组网需求

4.2 配置思路

4.3 使用版本

4.4 配置步骤

4.4.1 搭建IRF

4.4.2 LACP MAD配置

4.4.3 IRF下行业务配置

4.4.4 IRF上行业务配置

4.5 验证配置

4.6 配置文件

5 四台成员设备的IRF配置举例

5.1 组网需求

5.2 配置思路

5.3 使用版本

5.4 配置步骤

5.4.1 搭建IRF

5.4.2 LACP MAD配置

5.4.3 IRF下行业务配置

5.4.4 IRF上行业务配置

5.5 验证配置

5.6 配置文件

6 IRF扩容升级配置举例

6.1 组网需求

6.2 配置思路

6.3 使用版本

6.4 配置注意事项

6.5 配置步骤

6.5.1 搭建IRF（配置Device C和Device D加入IRF）

6.5.2 搭建IRF（配置原IRF和IRF-C合并成IRF）

6.5.3 BFD MAD配置

6.5.4 IRF下行业务配置

6.5.5 IRF上行业务配置

6.6 验证配置

6.7 配置文件

7 相关资料

 

1 简介

本文档介绍了配置两台成员设备的IRF、配置四台成员设备的IRF和IRF扩容升级的配置举例。

IRF（Intelligent Resilient Framework，智能弹性架构）是H3C自主研发的软件虚拟化技术，它的核心思想是将多台设备通过物理IRF端口连接在一起，进行必要的配置后，虚拟化成一台“虚拟设备”，通过该“虚拟设备”来实现多台设备的协同工作、统一管理和不间断维护。

为了便于描述，本文把这个虚拟化形成的设备称为IRF。

2 配置前提

本文档中的配置均是在实验室环境下进行的配置和验证，配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置，为了保证配置效果，请确认现有配置和以下举例中的配置不冲突。

请确保成员设备间的IRF物理连线正确连接，与配置组网图保持一致。

本文假设您已了解IRF特性。

3 使用限制

1. IRF形成条件

在配置IRF前，S7500E-XS必须满足以下条件，否则不能形成IRF：

·     本系列交换机仅能与相同系列的交换机之间建立IRF。

·     IRF中所有成员设备的软件版本必须相同，如果有软件版本不同的设备要加入IRF，请确保IRF的启动文件同步加载功能处于使能状态；

·     如果两个IRF的桥MAC地址相同，请修改其中一个IRF的桥MAC地址，否则，它们不能合并为一个IRF；

·     在多台设备形成IRF之前，请确保各设备上最大等价路由条数的配置保持一致。关于最大等价路由的介绍，请参见“三层技术-IP路由配置指导”中的“IP路由基础配置”；

·     在多台设备形成IRF之前，请确保各设备的工作模式相同。关于工作模式的配置，请参见“基础配置指导”中的“设备管理配置”。

2. IRF连接限制

本设备上与IRF-Port1绑定的IRF物理端口只能和邻居成员设备IRF-Port2口上绑定的IRF物理端口相连，本设备上与IRF-Port2口绑定的IRF物理端口只能和邻居成员设备IRF-Port1口上绑定的IRF物理端口相连，如表3-1所示。否则，不能形成IRF。

表3-1 IRF物理端口连接限制

邻居成员设备上的

IRF物理端口

本设备上的

IRF物理端口

IRF-Port1绑定的IRF物理端口

IRF-Port2绑定的IRF物理端口

IRF-Port1绑定的IRF物理端口

不能连接

可以连接

IRF-Port2绑定的IRF物理端口

可以连接

不能连接

 

3. IRF形成后的配置限制和指导

·     以太网接口作为IRF物理端口与IRF端口绑定后，只支持配置以下命令：

¡     接口配置命令，包括shutdown、description、flow-interval、priority-flow-control和priority-flow-control no-drop dot1p 命令，这些命令的详细介绍，请参见“接口管理命令参考”中的“以太网接口”。

¡     LLDP功能命令，包括lldp admin-status、lldp check-change-interval、lldp enable、lldp encapsulation snap、lldp notification remote-change enable和lldp tlv-enable。有关这些命令的详细介绍，请参见“二层技术-以太网交换配置指导”中的“LLDP”。

·     如果在IRF建立后，用户需要拔出IRF物理端口所在的接口模块扩展卡，请先拔掉用于IRF连接的线缆，或者在IRF物理端口视图下执行shutdown命令关闭该端口，使IRF端口的状态变为down，再进行拔出接口模块扩展卡的操作。

·     如果需要使用不同款型的扩展卡替换现有扩展卡进行IRF连接，请先解除现有扩展卡上所有IRF物理端口与IRF端口的绑定关系，然后拔出现有扩展卡，安装新扩展卡后再重新配置新扩展卡上的端口与IRF端口的绑定。

4. IRF最大成员设备数限制

本系列交换机最多支持使用10台设备建立IRF。

5. MAD使用限制

LACP MAD和BFD MAD、ARP MAD、NDMAD冲突处理的原则不同，请不要同时配置。BFD MAD和ARP MAD、ND MAD冲突处理的原则不同，并且BFD MAD和生成树协议互斥，ARP MAD、ND MAD需要开启生成树协议，因此BFD MAD和ARP MAD、ND MAD无法同时配置。

6. License使用限制

请确保IRF中各成员设备上安装的特性License一致，否则，可能会导致这些License对应的特性不能正常运行。

4 两台成员设备的IRF配置举例

4.1  组网需求

·     如图4-1所示，Device A为公司的核心设备，但由于公司网络规模日益增大，汇聚层SW设备扩展至N台，Device A单台设备的转发能力已无法达到公司网络的需求。为了拓展核心设备的转发能力，又尽量不改变现有网络。现公司希望增加Device B，与Device A组成IRF，来满足当前网络的需求。

·     IRF的上行设备（Router A和Router B）为公司网络的出口路由器；IRF的下行交换机（SW 1、SW 2等）为各个服务器集群的汇聚层设备。

图4-1 IRF典型配置组网图

设备

接口

IP地址

设备

接口

IP地址

Router A

Vlan-int30

172.24.2.2/24

Router B

Vlan-int30

172.24.2.3/24

 

Vlan-int40

172.24.40.2/24

 

Vlan-int41

172.24.41.3/24

 

Vlan-int50

172.24.1.2/24

 

Vlan-int50

172.24.4.3/24

IRF

Vlan-int10

172.24.10.254/24

 

 

 

 

Vlan-int20

172.24.20.254/24

 

 

 

 

Vlan-int40

172.24.40.254/24

 

 

 

 

Vlan-int41

172.24.41.254/24

 

 

 

 

4.2  配置思路

·     为避免成员设备的单点故障影响到正常的业务转发，可在IRF中配置跨框聚合端口进行业务转发。

·     为尽量降低IRF分裂对业务造成的影响，可在IRF中配置LACP MAD检测。LACP MAD检测只需在一个聚合组中配置即可，其他聚合组中无需配置。LACP MAD检测使用的中间设备必须为H3C的交换机设备且使用的软件版本必须能够识别、处理携带了ActiveID值的LACPDU协议报文，在本例中使用SW 1作为LACP MAD检测的中间设备。

4.3  使用版本

本举例在S7500EXS-CMW710-R7536P05版本上进行配置和验证。

4.4  配置步骤

4.4.1  搭建IRF

1. Device A的配置

(1)     根据图4-1选定IRF物理端口并关闭这些端口

<DeviceA> system-view

[DeviceA] interface range ten-gigabitethernet 1/3/1 to ten-gigabitethernet 1/3/2

[DeviceA-if-range] shutdown

[DeviceA-if-range] quit

(2)     配置IRF端口1/2，并将它与物理端口Ten-GigabitEthernet 1/3/1和Ten-GigabitEthernet 1/3/2绑定

[DeviceA] irf-port 1/2

[DeviceA-irf-port1/2] port group interface ten-gigabitethernet 1/3/1

[DeviceA-irf-port1/2] port group interface ten-gigabitethernet 1/3/2

[DeviceA-irf-port1/2] quit

(3)     开启IRF物理端口，并保存配置

[DeviceA] interface range ten-gigabitethernet 1/3/1 to ten-gigabitethernet 1/3/2

[DeviceA-if-range] undo shutdown

[DeviceA-if-range] quit

[DeviceA] save

(4)     激活IRF端口下的配置

[DeviceA] irf-port-configuration active

2. Device B的配置

(1)     将Device B的成员编号配置为2，并重启设备使新编号生效

<DeviceB> system-view

[DeviceB] irf member 1 renumber 2

Renumbering the member ID may result in configuration change or loss. Continue?[

Y/N]:y

[DeviceB] quit

<DeviceB> reboot

(2)     根据图4-1选定IRF物理端口并关闭这些端口

<DeviceB> system-view

[DeviceB] interface range ten-gigabitethernet 2/3/1 to ten-gigabitethernet 2/3/2

[DeviceB-if-range] shutdown

[DeviceB-if-range] quit

(3)     配置IRF端口2/1，并将它与物理端口Ten-GigabitEthernet 2/3/1和Ten-GigabitEthernet 2/3/2绑定

[DeviceB] irf-port 2/1

[DeviceB-irf-port2/1] port group interface ten-gigabitethernet 2/3/1

[DeviceB-irf-port2/1] port group interface ten-gigabitethernet 2/3/2

[DeviceB-irf-port2/1] quit

(4)     开启IRF物理端口，并保存配置

[DeviceB] interface range ten-gigabitethernet 2/3/1 to ten-gigabitethernet 2/3/2

[DeviceB-if-range] undo shutdown

[DeviceB-if-range] quit

[DeviceB] save

(5)     参照图4-1和端口连接表连接Device B和Device A之间的IRF端口，激活IRF端口下的配置

[DeviceB] irf-port-configuration active

4.4.2  LACP MAD配置

在前面配置完成并重新启动后，IRF已经组建完成，此时可以进行各个业务模块的配置。IRF形成之后，可以从任何一台成员设备登录进行配置，设备名称缺省为Master的名称（此例中为Device A）。

# 创建连接接入层交换机SW 1的动态聚合组，编号为1，并使能LACP MAD检测功能。

<DeviceA> system-view

[DeviceA] interface bridge-aggregation 1

[DeviceA-Bridge-Aggregation1] link-aggregation mode dynamic

[DeviceA-Bridge-Aggregation1] mad enable

You need to assign a domain ID (range: 0-4294967295)

[Current domain is: 0]:

The assigned domain ID is: 0

MAD LACP only enable on dynamic aggregation interface.

[DeviceA-Bridge-Aggregation1] quit

# 配置连接SW 1的端口加入聚合组1。

[DeviceA] interface ten-gigabitethernet 1/3/3

[DeviceA-Ten-GigabitEthernet1/3/3] port link-aggregation group 1

[DeviceA-Ten-GigabitEthernet1/3/3] quit

[DeviceA] interface ten-gigabitethernet 2/3/3

[DeviceA-Ten-GigabitEthernet2/3/3] port link-aggregation group 1

[DeviceA-Ten-GigabitEthernet2/3/3] quit

4.4.3  IRF下行业务配置

1. IRF的配置

# 创建连接接入层交换机SW 2的聚合组，编号为2。

[DeviceA] interface bridge-aggregation 2

[DeviceA-Bridge-Aggregation2] quit

# 配置连接SW 2的端口加入聚合组2。

[DeviceA] interface ten-gigabitethernet 1/3/4

[DeviceA-Ten-GigabitEthernet1/3/4] port link-aggregation group 2

[DeviceA-Ten-GigabitEthernet1/3/4] quit

[DeviceA] interface ten-gigabitethernet 2/3/4

[DeviceA-Ten-GigabitEthernet2/3/4] port link-aggregation group 2

[DeviceA-Ten-GigabitEthernet2/3/4] quit

# 配置与SW 1之间通过Vlan-interface 10连接。

[DeviceA] vlan 10

[DeviceA-vlan10] quit

[DeviceA] interface vlan-interface 10

[DeviceA-Vlan-interface10] ip address 172.24.10.254 24

[DeviceA-Vlan-interface10] quit

[DeviceA] interface bridge-aggregation 1

[DeviceA-Bridge-Aggregation1] port link-type trunk

[DeviceA-Bridge-Aggregation1] undo port trunk permit vlan 1

[DeviceA-Bridge-Aggregation1] port trunk permit vlan 10

[DeviceA-Bridge-Aggregation1] quit

# 配置与SW 2之间通过Vlan-interface 20连接。

[DeviceA] vlan 20

[DeviceA-vlan20] quit

[DeviceA] interface vlan-interface 20

[DeviceA-Vlan-interface20] ip address 172.24.20.254 24

[DeviceA-Vlan-interface20] quit

[DeviceA] interface bridge-aggregation 2

[DeviceA-Bridge-Aggregation2] port link-type trunk

[DeviceA-Bridge-Aggregation2] undo port trunk permit vlan 1

[DeviceA-Bridge-Aggregation2] port trunk permit vlan 20

[DeviceA-Bridge-Aggregation2] quit

2. SW 1的配置

# 创建连接IRF的动态聚合组，编号为1，该聚合组同时用于IRF的LACP MAD检测。

<SW1> system-view

[SW1] interface bridge-aggregation 1

[SW1-Bridge-Aggregation1] link-aggregation mode dynamic

[SW1-Bridge-Aggregation1] quit

# 配置连接IRF的端口加入聚合组1。

[SW1] interface ten-gigabitethernet 1/1/1

[SW1-Ten-GigabitEthernet1/1/1] port link-aggregation group 1

[SW1-Ten-GigabitEthernet1/1/1] quit

[SW1] interface ten-gigabitethernet 1/1/2

[SW1-Ten-GigabitEthernet1/1/2] port link-aggregation group 1

[SW1-Ten-GigabitEthernet1/1/2] quit

# 接入设备SW1上创建所有VLAN。

[SW1] vlan all

# 配置与IRF连接的端口。

[SW1] interface bridge-aggregation 1

[SW1-Bridge-Aggregation1] port link-type trunk

[SW1-Bridge-Aggregation1] undo port trunk permit vlan 1

[SW1-Bridge-Aggregation1] port trunk permit vlan 10

[SW1-Bridge-Aggregation1] quit

# 配置连接服务器的端口Ten-GigabitEthernet3/0/1。

[SW1] interface ten-gigabitethernet 1/2/1

[SW1-Ten-GigabitEthernet1/2/1] port link-type trunk

[SW1-Ten-GigabitEthernet1/2/1] port trunk permit vlan all

[SW1-Ten-GigabitEthernet1/2/1] undo port trunk permit vlan 1

[SW1-Ten-GigabitEthernet1/2/1] quit

3. SW 2的配置

# 创建连接IRF的聚合组，编号为1。

<SW2> system-view

[SW2] interface bridge-aggregation 1

[SW2-Bridge-Aggregation1] quit

# 配置连接IRF的端口加入聚合组1。

[SW2] interface ten-gigabitethernet 1/1/1

[SW2-Ten-GigabitEthernet1/1/1] port link-aggregation group 1

[SW2-Ten-GigabitEthernet1/1/1] quit

[SW2] interface ten-gigabitethernet 1/1/2

[SW2-Ten-GigabitEthernet1/1/2] port link-aggregation group 1

[SW2-Ten-GigabitEthernet1/1/2] quit

# 接入设备SW 2上创建所有VLAN。

[SW2] vlan all

# 配置与IRF连接的端口。

[SW2] interface bridge-aggregation 1

[SW2-Bridge-Aggregation1] port link-type trunk

[SW2-Bridge-Aggregation1] undo port trunk permit vlan 1

[SW2-Bridge-Aggregation1] port trunk permit vlan 20

[SW2-Bridge-Aggregation1] quit

# 配置连接服务器的端口。

[SW2] interface ten-gigabitethernet 1/2/1

[SW2-Ten-GigabitEthernet1/2/1] port link-type trunk

[SW2-Ten-GigabitEthernet1/2/1] port trunk permit vlan all

[SW2-Ten-GigabitEthernet1/2/1] undo port trunk permit vlan 1

[SW2-Ten-GigabitEthernet1/2/1] quit

4.4.4  IRF上行业务配置

1. IRF的配置

# 创建连接出口路由器Router A的聚合组，编号为1023。

[DeviceA] interface bridge-aggregation 1023

[DeviceA-Bridge-Aggregation1023] quit

# 配置连接Router A的端口加入聚合组1023。

[DeviceA] interface ten-gigabitethernet 1/3/7

[DeviceA-Ten-GigabitEthernet1/3/7] port link-aggregation group 1023

[DeviceA-Ten-GigabitEthernet1/3/7] quit

[DeviceA] interface ten-gigabitethernet 2/3/7

[DeviceA-Ten-GigabitEthernet2/3/7] port link-aggregation group 1023

[DeviceA-Ten-GigabitEthernet2/3/7] quit

# 配置与Router A之间通过Vlan-interface40连接。

[DeviceA] vlan 40

[DeviceA-vlan40] quit

[DeviceA] interface vlan-interface 40

[DeviceA-Vlan-interface40] ip address 172.24.40.254 24

[DeviceA-Vlan-interface40] quit

[DeviceA] interface bridge-aggregation 1023

[DeviceA-Bridge-Aggregation1023] port access vlan 40

[DeviceA-Bridge-Aggregation1023] quit

# 创建连接出口路由器Router B的聚合组，编号为1024。

[DeviceA] interface bridge-aggregation 1024

[DeviceA-Bridge-Aggregation1024] quit

# 配置连接Router B的端口加入聚合组1024。

[DeviceA] interface ten-gigabitethernet 1/3/8

[DeviceA-Ten-GigabitEthernet1/3/8] port link-aggregation group 1024

[DeviceA-Ten-GigabitEthernet1/3/8] quit

[DeviceA] interface ten-gigabitethernet 2/3/8

[DeviceA-Ten-GigabitEthernet2/3/8] port link-aggregation group 1024

[DeviceA-Ten-GigabitEthernet2/3/8] quit

# 配置与Router B之间通过Vlan-interface41连接。

[DeviceA] vlan 41

[DeviceA-vlan41] quit

[DeviceA] interface vlan-interface 41

[DeviceA-Vlan-interface41] ip address 172.24.41.254 24

[DeviceA-Vlan-interface41] quit

[DeviceA] interface bridge-aggregation 1024

[DeviceA-Bridge-Aggregation1024] port access vlan 41

[DeviceA-Bridge-Aggregation1024] quit

# 配置IRF与出口路由器之间运行OSPF路由协议。

[DeviceA] ospf

[DeviceA-ospf-1] import-route direct

[DeviceA-ospf-1] area 0

[DeviceA-ospf-1-area-0.0.0.0] network 172.24.40.0 0.0.0.255

[DeviceA-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255

[DeviceA-ospf-1-area-0.0.0.0] quit

[DeviceA-ospf-1] quit

2. Router A的配置

说明

出口路由器配置本用例只描述与IRF连接的部分，外网使用何种路由协议不予描述。

 

# 创建连接IRF的聚合组，编号为1。

<RouterA> system-view

[RouterA] interface bridge-aggregation 1

[RouterA-Bridge-Aggregation1] quit

# 配置连接IRF的端口加入聚合组1。

[RouterA] interface ten-gigabitethernet 4/0/1

[RouterA-Ten-GigabitEthernet4/0/1] port link-mode bridge

[RouterA-Ten-GigabitEthernet4/0/1] port link-aggregation group 1

[RouterA-Ten-GigabitEthernet4/0/1] quit

[RouterA] interface ten-gigabitethernet 2/0/1

[RouterA-Ten-GigabitEthernet2/0/1] port link-mode bridge

[RouterA-Ten-GigabitEthernet2/0/1] port link-aggregation group 1

[RouterA-Ten-GigabitEthernet2/0/1] quit

# 配置与IRF之间通过Vlan-interface 40连接。

[RouterA] vlan 40

[RouterA-vlan40] quit

[RouterA] interface vlan-interface 40

[RouterA-Vlan-interface40] ip address 172.24.40.2 24

[RouterA-Vlan-interface40] quit

[RouterA] interface bridge-aggregation 1

[RouterA-Bridge-Aggregation1] port access vlan 40

[RouterA-Bridge-Aggregation1] quit

# 配置与RouterB之间通过Vlan-interface 30连接。

[RouterA] vlan 30

[RouterA-vlan30] quit

[RouterA] interface vlan-interface 30

[RouterA-Vlan-interface30] ip address 172.24.2.2 24

[RouterA-Vlan-interface30] quit

[RouterA] interface bridge-aggregation 2

[RouterA-Bridge-Aggregation2] port link-type access

[RouterA-Bridge-Aggregation2] port access vlan 30

[RouterA-Bridge-Aggregation2] quit

[RouterA] interface bridge-aggregation 2

[RouterA-Bridge-Aggregation2] quit

[RouterA] interface ten-gigabitethernet 4/0/2

[RouterA-Ten-GigabitEthernet4/0/2] port link-mode bridge

[RouterA-Ten-GigabitEthernet4/0/2] port link-aggregation group 2

[RouterA-Ten-GigabitEthernet4/0/2] quit

[RouterA] interface ten-gigabitethernet 2/0/2

[RouterA-Ten-GigabitEthernet2/0/2] port link-mode bridge

[RouterA-Ten-GigabitEthernet2/0/2] port link-aggregation group 2

[RouterA-Ten-GigabitEthernet2/0/2] quit

# 配置Router A通过Vlan-interface 50连接外网。

[RouterA] vlan 50

[RouterA-vlan50] quit

[RouterA] interface vlan-interface 50

[RouterA-Vlan-interface50] ip address 172.24.1.2 24

[RouterA-Vlan-interface50] quit

[RouterA] interface ten-gigabitethernet 4/0/3

[RouterA-Ten-GigabitEthernet4/0/3] port link-mode bridge

[RouterA-Ten-GigabitEthernet4/0/3] port access vlan 50

[RouterA-Ten-GigabitEthernet4/0/3] quit

# 配置Router A与IRF之间运行OSPF路由协议。

[RouterA] ospf

[RouterA-ospf-1] import-route direct

[RouterA-ospf-1] area 0

[RouterA-ospf-1-area-0.0.0.0] network 172.24.40.0 0.0.0.255

[RouterA-ospf-1-area-0.0.0.0] network 172.24.2.0 0.0.0.255

[RouterA-ospf-1-area-0.0.0.0] quit

[RouterA-ospf-1] quit

3. Router B的配置

# 配置与IRF之间通过Vlan-interface 41连接。

<RouterB> system-view

[RouterB] vlan 41

[RouterB-vlan41] quit

[RouterB] interface vlan-interface 41

[RouterB-Vlan-interface41] ip address 172.24.41.3 24

[RouterB-Vlan-interface41] quit

[RouterB] interface bridge-aggregation 1

[RouterB-Bridge-Aggregation1] port access vlan 41

[RouterB-Bridge-Aggregation1] quit

[RouterB] interface bridge-aggregation 1

[RouterB-Bridge-Aggregation1] quit

[RouterB] interface ten-gigabitethernet 4/0/1

[RouterB-Ten-GigabitEthernet4/0/1] port link-mode bridge

[RouterB-Ten-GigabitEthernet4/0/1] port link-aggregation group 1

[RouterB-Ten-GigabitEthernet4/0/1] quit

[RouterB] interface ten-gigabitethernet 2/0/1

[RouterB-Ten-GigabitEthernet2/0/1] port link-mode bridge

[RouterB-Ten-GigabitEthernet2/0/1] port link-aggregation group 1

[RouterB-Ten-GigabitEthernet2/0/1] quit

# 配置与Router A之间通过Vlan-interface 30连接。

[RouterB] vlan 30

[RouterB-vlan30] quit

[RouterB] interface vlan-interface 30

[RouterB-Vlan-interface30] ip address 172.24.2.3 24

[RouterB-Vlan-interface30] quit

[RouterB] interface bridge-aggregation 2

[RouterB-Bridge-Aggregation2] port link-type access

[RouterB-Bridge-Aggregation2] port access vlan 30

[RouterB-Bridge-Aggregation2] quit

[RouterB] interface ten-gigabitethernet 4/0/2

[RouterB-Ten-GigabitEthernet4/0/2] port link-aggregation group 2

[RouterB-Ten-GigabitEthernet4/0/2] quit

[RouterB] interface ten-gigabitethernet 2/0/2

[RouterB-Ten-GigabitEthernet2/0/2] port link-aggregation group 2

[RouterB-Ten-GigabitEthernet2/0/2] quit

# 配置Router B通过Vlan-interface 50连接外网。

[RouterB] vlan 50

[RouterB-vlan50] quit

[RouterB] interface vlan-interface 50

[RouterB-Vlan-interface50] ip address 172.24.4.3 24

[RouterB-Vlan-interface50] quit

[RouterB] interface ten-gigabitethernet 4/0/3

[RouterB-Ten-GigabitEthernet4/0/3] port link-mode bridge

[RouterB-Ten-GigabitEthernet4/0/3] port access vlan 50

[RouterB-Ten-GigabitEthernet4/0/3] quit

# 配置Router B与IRF之间运行OSPF路由协议。

[RouterB] ospf

[RouterB-ospf-1] import-route direct

[RouterB-ospf-1] area 0

[RouterB-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255

[RouterB-ospf-1-area-0.0.0.0] network 172.24.2.0 0.0.0.255

[RouterB-ospf-1-area-0.0.0.0] quit

[RouterB-ospf-1] quit

4.5  验证配置

(1)     验证IRF建立成功

[DeviceA] display irf

MemberID    Role    Priority  CPU-Mac         Description

 *+1        Master  1         00e0-fc0f-8c02  ---

   2        Standby 1         00e0-fc0f-8c03  ---

--------------------------------------------------

 * indicates the device is the master.

 + indicates the device through which the user logs in.

 

 The Bridge MAC of the IRF is: 3822-d60f-2800

 Auto upgrade                : yes

 Mac persistent              : always

 Domain ID                   : 0

从命令行的显示看，当前两台设备IRF成功建立。

(2)     验证跨框聚合有链路备份的作用

从serverGroup 1任意挑选一台PC ping外网IP，关闭IRF的上行端口Ten-GigabitEthernet 1/3/8，出现短暂中断后仍然可以ping通外网。

C:\Users>ping 202.108.22.5 –t

 

正在 Ping 202.108.22.5 具有 32 字节的数据:

来自 202.108.22.5 的回复: 字节=32 时间=1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间=13ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

请求超时。

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

重新开启端口Ten-GigabitEthernet 1/3/8，持续ping，将另外一个上行端口Ten-GigabitEthernet 2/3/8关闭，出现短暂中断后仍然可以ping通外网。

C:\Users>ping 202.108.22.5 –t

 

正在 Ping 202.108.22.5 具有 32 字节的数据:

来自 202.108.22.5 的回复: 字节=32 时间=1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间=13ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

请求超时。

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

(3)     验证IRF物理链路的冗余备份

断开IRF物理链路中的任意一条，IRF仍能正常工作、没有分裂。

4.6  配置文件

·     IRF：

#

irf mac-address persistent always

irf auto-update enable

undo irf link-delay

irf member 1 priority 1

irf member 2 priority 1

#

ospf 1

 import-route direct

 area 0.0.0.0

  network 172.24.40.0 0.0.0.255

  network 172.24.41.0 0.0.0.255

#

vlan 10

#

vlan 20

#

vlan 40

#

vlan 41

#

irf-port 1/2

 port group interface Ten-GigabitEthernet1/3/1 mode enhanced

 port group interface Ten-GigabitEthernet1/3/2 mode enhanced

#

irf-port 2/1

 port group interface Ten-GigabitEthernet2/3/1 mode enhanced

 port group interface Ten-GigabitEthernet2/3/2 mode enhanced

#

interface bridge-aggregation 1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 link-aggregation mode dynamic

 mad enable

#

interface bridge-aggregation 2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

#

interface bridge-aggregation 1023

 port access vlan 40

#

interface bridge-aggregation 1024

 port access vlan 41

#

interface vlan-interface 10

 ip address 172.24.10.254 255.255.255.0

#

interface vlan-interface 20

 ip address 172.24.20.254 255.255.255.0

#

interface vlan-interface 40

 ip address 172.24.40.254 255.255.255.0

#

interface vlan-interface 41

 ip address 172.24.41.254 255.255.255.0

#

interface Ten-GigabitEthernet 1/3/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/3/4

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 1/3/7

 port link-mode bridge

 port access vlan 40

 port link-aggregation group 1023

#

interface Ten-GigabitEthernet 1/3/8

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1024

#

interface Ten-GigabitEthernet 2/3/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/3/4

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 2/3/7

 port link-mode bridge

 port access vlan 40

 port link-aggregation group 1023

#

interface Ten-GigabitEthernet 2/3/8

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1024

#

·     SW1：

#

vlan 1

#

vlan 2 to 4094

#

interface bridge-aggregation 1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 link-aggregation mode dynamic

#

interface Ten-GigabitEthernet 1/1/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/1/2

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 2 to 4094

#

·     SW2：

#

vlan 1

#

vlan 2 to 4094

#

interface bridge-aggregation 1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

#

interface Ten-GigabitEthernet 1/1/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/1/2

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 2 to 4094

#

·     RouterA：

#

ospf 1

 import-route direct

 area 0.0.0.0

  network 172.24.2.0 0.0.0.255

  network 172.24.40.0 0.0.0.255

#

vlan 30

#

vlan 40

#

vlan 50

#

interface bridge-aggregation 1

 port access vlan 40

#

interface bridge-aggregation 2

 port access vlan 30

#

interface vlan-interface 30

 ip address 172.24.2.2 255.255.255.0

#

interface vlan-interface 40

 ip address 172.24.40.2 255.255.255.0

#

interface vlan-interface 50

 ip address 172.24.1.2 255.255.255.0

#

interface Ten-GigabitEthernet 2/0/1

 port link-mode bridge

 port access vlan 40

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/0/2

 port link-mode bridge

 port access vlan 30

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 4/0/1

 port link-mode bridge

 port access vlan 40

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 4/0/2

 port link-mode bridge

 port access vlan 30

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 4/0/3

 port link-mode bridge

 port access vlan 50

#

·     RouterB：

#

ospf 1

 import-route direct

 area 0.0.0.0

  network 172.24.2.0 0.0.0.255

  network 172.24.41.0 0.0.0.255

#

vlan 30

#

vlan 41

#

vlan 50

#

interface bridge-aggregation 1

 port access vlan 41

#

interface bridge-aggregation 2

 port access vlan 30

#

interface vlan-interface 30

 ip address 172.24.2.3 255.255.255.0

#

interface vlan-interface 41

 ip address 172.24.41.3 255.255.255.0

#

interface vlan-interface 50

 ip address 172.24.4.3 255.255.255.0

#

interface Ten-GigabitEthernet 2/0/1

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/0/2

 port link-mode bridge

 port access vlan 30

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 4/0/1

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 4/0/2

 port link-mode bridge

 port access vlan 30

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 4/0/3

 port link-mode bridge

 port access vlan 50

#

5 四台成员设备的IRF配置举例

5.1  组网需求

·     如图5-1所示，由于网络规模迅速扩大，汇聚层SW设备扩展至N台，当前中心设备设备A的转发能力已经不能满足需求。现在需要另增三台设备，组成一个四框IRF才能满足当前网络的转发需求。

·     升级到四框IRF设备后，必须保证即使IRF中有N台设备发生故障（1≤N≤3），RouterA与汇聚层交换机（如：SW1，SW2等）之间通信也不能中断。

图5-1 四台成员设备的IRF典型配置组网图（采用LACP MAD）

 

表5-1 IP地址配置信息

设备

接口

IP地址

RouterA

Vlan-interface41

172.24.41.2/24

Vlan-interface50

172.24.1.2/24

IRF

Vlan-interface41

172.24.41.254/24

Vlan-interface10

172.24.10.254/24

Vlan-interface20

172.24.20.254/24

…

…

Vlan-interfaceN

172.24.N.254/24

 

表5-2 IRF设备互联信息

设备

IRF端口

对端IRF端口

IRF成员端口

Device A

irf-port 1/1

irf-port 4/2

XGE1/2/2

Device A

irf-port 1/2

irf-port 2/1

XGE1/2/1

Device B

irf-port 2/1

irf-port 1/2

XGE2/2/1

Device B

irf-port 2/2

irf-port 3/1

XGE2/2/2

Device C

irf-port 3/1

irf-port 2/2

XGE3/2/2

Device C

irf-port 3/2

irf-port 4/1

XGE3/2/1

Device D

irf-port 4/1

irf-port 3/2

XGE4/2/1

Device D

irf-port 4/2

irf-port 1/1

XGE4/2/2

 

表5-3 IRF设备的上下行互联信息

IRF的对端设备

接口

所属vlan

所属聚合组

下行连SW2

XGE1/3/1

Vlan 13（BFD MAD）

 

下行连SW2

XGE2/3/1

Vlan 13（BFD MAD）

 

下行连SW2

XGE3/3/1

Vlan 13（BFD MAD）

 

下行连SW2

XGE4/3/1

Vlan 13（BFD MAD）

 

下行连SW1

XGE1/3/3

Vlan 10

Bridge-aggregation 1(LACP MAD)

下行连SW1

XGE2/3/3

Vlan 10

Bridge-aggregation 1(LACP MAD)

下行连SW1

XGE3/3/3

Vlan 10

Bridge-aggregation 1(LACP MAD)

下行连SW1

XGE4/3/3

Vlan 10

Bridge-aggregation 1(LACP MAD)

下行连SW2

XGE1/3/4

Vlan 20

Bridge-aggregation 2

下行连SW2

XGE2/3/4

Vlan 20

Bridge-aggregation 2

下行连SW2

XGE3/3/4

Vlan 20

Bridge-aggregation 2

下行连SW2

XGE4/3/4

Vlan 20

Bridge-aggregation 2

上行连Router A

XGE1/3/8

Vlan 41

Bridge-aggregation 1024

上行连Router A

XGE2/3/8

Vlan 41

Bridge-aggregation 1024

上行连Router A

XGE3/3/8

Vlan 41

Bridge-aggregation 1024

上行连Router A

XGE4/3/8

Vlan 41

Bridge-aggregation 1024

 

表5-4 SW1设备的上下行互联信息

SW1的对端设备

接口

所属vlan

所属聚合组

下行连服务组

XGE1/3/1

Vlan 10

 

上行连IRF

XGE1/2/21

Vlan 10

Bridge-aggregation 1(LACP MAD)

上行连IRF

XGE1/2/22

Vlan 10

Bridge-aggregation 1(LACP MAD)

上行连IRF

XGE1/2/23

Vlan 10

Bridge-aggregation 1(LACP MAD)

上行连IRF

XGE1/2/24

Vlan 10

Bridge-aggregation 1(LACP MAD)

 

表5-5 SW2设备的上下行互联信息

SW2的对端设备

接口

所属vlan

所属聚合组

下行连服务组

XGE1/3/1

Vlan 20

 

上行连IRF

XGE1/2/21

Vlan 20

Bridge-aggregation 1

上行连IRF

XGE1/2/22

Vlan 20

Bridge-aggregation 1

上行连IRF

XGE1/2/23

Vlan 20

Bridge-aggregation 1

上行连IRF

XGE1/2/24

Vlan 20

Bridge-aggregation 1

上行连IRF

XGE1/2/41

Vlan 13（BFD MAD）

 

上行连IRF

XGE1/2/42

Vlan 13（BFD MAD）

 

上行连IRF

XGE1/2/43

Vlan 13（BFD MAD）

 

上行连IRF

XGE1/2/44

Vlan 13（BFD MAD）

 

 

表5-6 Router A设备的上下行互联信息

Router A的对端设备

接口

所属vlan

所属聚合组

下行连IRF

XGE2/0/1

Vlan 41

Bridge-aggregation 1

下行连IRF

XGE2/0/2

Vlan 41

Bridge-aggregation 1

下行连IRF

XGE2/0/3

Vlan 41

Bridge-aggregation 1

下行连IRF

XGE2/0/4

Vlan 41

Bridge-aggregation 1

上行连外网

XGE2/0/2

Vlan 50

 

 

5.2  配置思路

·     为避免成员设备的单点故障影响到正常的业务转发，可在IRF中配置跨框聚合端口进行业务转发。

·     LACP MAD检测只需在一个聚合组中配置即可，其他聚合组中无需配置。LACP MAD检测使用的二层交换机必须为H3C的交换机设备且使用的软件版本必须能够识别、处理携带了ActiveID值的LACPDU协议报文，在本例中使用SW 1作为LACP MAD检测的中间设备。

5.3  使用版本

本举例在S7500EXS-CMW710-R7536P05版本上进行配置和验证。

5.4  配置步骤

5.4.1  搭建IRF

1. Device A的配置

(1)     根据表5-2选定IRF物理端口并关闭这些端口

<DeviceA> system-view

[DeviceA] interface range ten-gigabitethernet 1/2/1 to ten-gigabitethernet 1/2/2

[DeviceA-if-range] shutdown

[DeviceA-if-range] quit

(2)     配置IRF端口1/1，并将它与物理端口Ten-GigabitEthernet1/2/2

[DeviceA] irf-port 1/1

[DeviceA-irf-port1/1] port group interface ten-gigabitethernet 1/2/2

[DeviceA-irf-port1/1] quit

(3)     配置IRF端口1/2，并将它与物理端口Ten-GigabitEthernet1/2/1

[DeviceA] irf-port 1/2

[DeviceA-irf-port1/2] port group interface ten-gigabitethernet 1/2/1

[DeviceA-irf-port1/2] quit

(4)     开启IRF物理端口，并保存配置

[DeviceA] interface range ten-gigabitethernet 1/2/1 to ten-gigabitethernet 1/2/2

[DeviceA-if-range] undo shutdown

[DeviceA-if-range] quit

[DeviceA] save

(5)     激活IRF端口下的配置

[DeviceA] irf-port-configuration active

2. Device B的配置

(1)     将Device B的成员编号配置为2，并重启设备使新编号生效

<DeviceB> system-view

[DeviceB] irf member 1 renumber 2

Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y

[DeviceB] quit

<DeviceB> reboot

(2)     根据表5-2选定IRF物理端口并关闭这些端口

<DeviceB> system-view

[DeviceB] interface range ten-gigabitethernet 2/2/1 to ten-gigabitethernet 2/2/2

[DeviceB-if-range] shutdown

[DeviceB-if-range] quit

(3)     配置IRF端口2/1，并将它与物理端口Ten-GigabitEthernet2/2/1绑定

[DeviceB] irf-port 2/1

[DeviceB-irf-port2/1] port group interface ten-gigabitethernet 2/2/1

[DeviceB-irf-port2/1] quit

(4)     配置IRF端口2/2，并将它与物理端口Ten-GigabitEthernet2/2/2绑定

[DeviceB] irf-port 2/2

[DeviceB-irf-port2/2] port group interface ten-gigabitethernet 2/2/2

[DeviceB-irf-port2/2] quit

(5)     开启IRF物理端口，并保存配置

[DeviceB] interface range ten-gigabitethernet 2/2/1 to ten-gigabitethernet 2/2/2

[DeviceB-if-range] undo shutdown

[DeviceB-if-range] quit

[DeviceB] save

(6)     参照图5-1和端口连接表连接Device B和Device A之间的IRF端口，激活IRF端口下的配置

[DeviceB] irf-port-configuration active

3. Device C的配置

(1)     将Device C的成员编号配置为3，并重启设备使新编号生效

<DeviceC> system-view

[DeviceC] irf member 1 renumber 3

Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y

[DeviceC] quit

<DeviceC> reboot

(2)     根据表5-2选定IRF物理端口并关闭这些端口

<DeviceC> system-view

[DeviceC] interface range ten-gigabitethernet 3/2/1 to ten-gigabitethernet 3/2/2

[DeviceC-if-range] shutdown

[DeviceC-if-range] quit

(3)     配置IRF端口3/1，并将它与物理端口Ten-GigabitEthernet3/2/2绑定

[DeviceC] irf-port 3/1

[DeviceC-irf-port3/1] port group interface ten-gigabitethernet 3/2/2

[DeviceC-irf-port3/1] quit

(4)     配置IRF端口3/2，并将它与物理端口Ten-GigabitEthernet3/2/1绑定

[DeviceC] irf-port 3/2

[DeviceC-irf-port3/2] port group interface ten-gigabitethernet 3/2/1

[DeviceC-irf-port3/2] quit

(5)     开启IRF物理端口，并保存配置

[DeviceC] interface range ten-gigabitethernet 3/2/1 to ten-gigabitethernet 3/2/2

[DeviceC-if-range] undo shutdown

[DeviceC-if-range] quit

[DeviceC] save

(6)     参照图5-1和端口连接表连接Device C和Device B之间的IRF端口，激活IRF端口下的配置

[DeviceC] irf-port-configuration active

4. Device D的配置

(1)     将Device D的成员编号配置为4，并重启设备使新编号生效

<DeviceD> system-view

[DeviceD] irf member 1 renumber 4

Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y

[DeviceD] quit

<DeviceD> reboot

(2)     根据表5-2选定IRF物理端口并关闭这些端口

<DeviceD> system-view

[DeviceD] interface range ten-gigabitethernet 4/2/1 to ten-gigabitethernet 4/2/2

[DeviceD-if-range] shutdown

[DeviceD-if-range] quit

(3)     配置IRF端口4/1，并将它与物理端口Ten-GigabitEthernet4/2/1绑定

[DeviceD] irf-port 4/1

[DeviceD-irf-port4/1] port group interface ten-gigabitethernet 4/2/1

[DeviceD-irf-port4/1] quit

(4)     配置IRF端口4/2，并将它与物理端口Ten-GigabitEthernet4/2/2绑定

[DeviceD] irf-port 4/2

[DeviceD-irf-port4/2] port group interface ten-gigabitethernet 4/2/2

[DeviceD-irf-port4/2] quit

(5)     开启IRF物理端口，并保存配置

[DeviceD] interface range ten-gigabitethernet 4/2/1 to ten-gigabitethernet 4/2/2

[DeviceD-if-range] undo shutdown

[DeviceD-if-range] quit

[DeviceD] save

(6)     参照图5-1和端口连接表连接Device D和Device A、Device D和Device C之间的IRF端口，激活IRF端口下的配置

[DeviceD] irf-port-configuration active

5.4.2  LACP MAD配置

在前面配置完成并重新启动后，IRF已经组建完成，此时可以进行各个业务模块的配置。IRF形成之后，可以从任何一台成员设备登录进行配置，设备名称缺省为Master的名称（此例中为Device A）。

# 创建连接接入层交换机SW 1的动态聚合组，编号为1，并使能LACP MAD检测功能。

<DeviceA> system-view

[DeviceA] interface bridge-aggregation 1

[DeviceA-Bridge-Aggregation1] link-aggregation mode dynamic

[DeviceA-Bridge-Aggregation1] mad enable

You need to assign a domain ID (range: 0-4294967295)

[Current domain is: 0]:

The assigned domain ID is: 0

MAD LACP only enable on dynamic aggregation interface.

[DeviceA-Bridge-Aggregation1] quit

# 使用接口批量配置功能配置连接SW 1的端口加入聚合组1。

[DeviceA] interface range ten-gigabitethernet 1/3/3 ten-gigabitethernet 2/3/3 ten-gigabitethernet 3/3/3 ten-gigabitethernet 4/3/3

[DeviceA-if-range] port link-aggregation group 1

[DeviceA-if-range] quit

5.4.3  IRF下行业务配置

1. IRF的配置

# 创建连接接入层交换机SW 2的聚合组，编号为2。

[DeviceA] interface bridge-aggregation 2

[DeviceA-Bridge-Aggregation2] quit

# 使用接口批量配置功能配置连接SW 2的端口加入聚合组2。

[DeviceA] interface ten-gigabitethernet 1/3/4 ten-gigabitethernet 2/3/4 ten-gigabitethernet 3/3/4 ten-gigabitethernet 4/3/4

[DeviceA-if-range] port link-aggregation group 2

[DeviceA-if-range] quit

# 配置与SW 1之间通过Vlan-interface 10连接。

[DeviceA] vlan 10

[DeviceA-vlan10] quit

[DeviceA] interface vlan-interface 10

[DeviceA-Vlan-interface10] ip address 172.24.10.254 24

[DeviceA-Vlan-interface10] quit

[DeviceA] interface bridge-aggregation 1

[DeviceA-Bridge-Aggregation1] port link-type trunk

[DeviceA-Bridge-Aggregation1] undo port trunk permit vlan 1

[DeviceA-Bridge-Aggregation1] port trunk permit vlan 10

[DeviceA-Bridge-Aggregation1] quit

# 配置与SW 2之间通过Vlan-interface 20连接。

[DeviceA] vlan 20

[DeviceA-vlan20] quit

[DeviceA] interface vlan-interface 20

[DeviceA-Vlan-interface20] ip address 172.24.20.254 24

[DeviceA-Vlan-interface20] quit

[DeviceA] interface bridge-aggregation 2

[DeviceA-Bridge-Aggregation2] port link-type trunk

[DeviceA-Bridge-Aggregation2] undo port trunk permit vlan 1

[DeviceA-Bridge-Aggregation2] port trunk permit vlan 20

[DeviceA-Bridge-Aggregation2] quit

2. SW 1的配置

# 创建连接IRF的动态聚合组，编号为1，该聚合组同时用于IRF的LACP MAD检测。

<SW1> system-view

[SW1] interface bridge-aggregation 1

[SW1-Bridge-Aggregation1] link-aggregation mode dynamic

[SW1-Bridge-Aggregation1] quit

# 使用接口批量配置功能配置连接IRF的端口加入聚合组1。

[SW1] interface range ten-gigabitethernet 1/2/21 to ten-gigabitethernet 1/2/24

[SW1-if-range] port link-aggregation group 1

[SW1-if-range] quit

# 接入设备SW1上创建所有VLAN。

[SW1] vlan all

# 配置与IRF连接的端口。

[SW1] interface bridge-aggregation 1

[SW1-Bridge-Aggregation1] port link-type trunk

[SW1-Bridge-Aggregation1] undo port trunk permit vlan 1

[SW1-Bridge-Aggregation1] port trunk permit vlan 10

[SW1-Bridge-Aggregation1] quit

# 配置连接服务器的端口Ten-GigabitEthernet1/3/1。

[SW1] interface ten-gigabitethernet 1/3/1

[SW1-Ten-GigabitEthernet1/3/1] port link-type trunk

[SW1-Ten-GigabitEthernet1/3/1] port trunk permit vlan all

[SW1-Ten-GigabitEthernet1/3/1] undo port trunk permit vlan 1

[SW1-Ten-GigabitEthernet1/3/1] quit

3. SW 2的配置

# 创建连接IRF的聚合组，编号为1。

<SW2> system-view

[SW2] interface bridge-aggregation 1

[SW2-Bridge-Aggregation1] quit

# 使用接口批量配置功能配置连接IRF的端口加入聚合组1。

[SW2] interface range ten-gigabitethernet 1/2/21 to ten-gigabitethernet 1/2/24

[SW2-if-range] port link-aggregation group 1

[SW2-if-range] quit

# 接入设备SW 2上创建所有VLAN。

[SW2] vlan all

# 配置与IRF连接的端口。

[SW2] interface bridge-aggregation 1

[SW2-Bridge-Aggregation1] port link-type trunk

[SW2-Bridge-Aggregation1] undo port trunk permit vlan 1

[SW2-Bridge-Aggregation1] port trunk permit vlan 20

[SW2-Bridge-Aggregation1] quit

# 配置连接服务器的端口Ten-GigabitEthernet1/3/1。

[SW2] interface ten-gigabitethernet 1/3/1

[SW2-Ten-GigabitEthernet1/3/1] port link-type trunk

[SW2-Ten-GigabitEthernet1/3/1] port trunk permit vlan all

[SW2-Ten-GigabitEthernet1/3/1] undo port trunk permit vlan 1

[SW2-Ten-GigabitEthernet1/3/1] quit

5.4.4  IRF上行业务配置

1. IRF的配置

# 创建连接出口路由器Router A的聚合组，编号为1024。

[DeviceA] interface bridge-aggregation 1024

[DeviceA-Bridge-Aggregation1024] quit

# 使用接口批量配置功能配置连接Router A的端口加入聚合组1024。

[DeviceA] interface range ten-gigabitethernet 1/3/8 ten-gigabitethernet 2/3/8 ten-gigabitethernet 3/3/8 ten-gigabitethernet 4/3/8

[DeviceA-if-range] port link-aggregation group 1024

[DeviceA-if-range] quit

# 配置与Router A之间通过Vlan-interface41连接。

[DeviceA] vlan 41

[DeviceA-vlan41] quit

[DeviceA] interface vlan-interface 41

[DeviceA-Vlan-interface41] ip address 172.24.41.254 24

[DeviceA-Vlan-interface41] quit

[DeviceA] interface bridge-aggregation 1024

[DeviceA-Bridge-Aggregation1024] port access vlan 41

[DeviceA-Bridge-Aggregation1024] quit

# 配置IRF与出口路由器之间运行OSPF路由协议。

[DeviceA] interface loopback 0

[DeviceA-LoopBack0] ip address 172.24.254.1 255.255.255.255

[DeviceA-LoopBack0] quit

[DeviceA] ospf 1 router-id 172.24.254.1

[DeviceA-ospf-1] import-route direct

[DeviceA-ospf-1] area 0

[DeviceA-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255

[DeviceA-ospf-1-area-0.0.0.0] quit

[DeviceA-ospf-1] quit

2. Router A的配置

说明

出口路由器配置本用例只描述与IRF连接的部分，外网使用何种路由协议不予描述。

 

# 创建连接IRF的聚合组，编号为1。

<RouterA> system-view

[RouterA] interface bridge-aggregation 1

[RouterA-Bridge-Aggregation1] quit

# 配置连接IRF的端口加入聚合组1。

[RouterA] interface range ten-gigabitethernet 2/0/1 to interface ten-gigabitethernet 2/0/4

[RouterA-if-range] port link-aggregation group 1

[RouterA-if-range] quit

# 配置与IRF之间通过Vlan-interface 41连接。

[RouterA] vlan 41

[RouterA-vlan41] quit

[RouterA] interface vlan-interface 41

[RouterA-Vlan-interface41] ip address 172.24.41.2 24

[RouterA-Vlan-interface41] quit

[RouterA] interface bridge-aggregation 1

[RouterA-Bridge-Aggregation1] port access vlan 41

[RouterA-Bridge-Aggregation1] quit

# 配置Router A通过Vlan-interface 50连接外网。

[RouterA] vlan 50

[RouterA-vlan50] quit

[RouterA] interface vlan-interface 50

[RouterA-Vlan-interface50] ip address 172.24.1.2 24

[RouterA-Vlan-interface50] quit

[RouterA] interface ten-gigabitethernet 4/0/3

[RouterA-Ten-GigabitEthernet4/0/3] port link-mode bridge

[RouterA-Ten-GigabitEthernet4/0/3] port access vlan 50

[RouterA-Ten-GigabitEthernet4/0/3] quit

# 配置Router A与IRF之间运行OSPF路由协议。

[RouterA] interface loopback 0

[RouterA-LoopBack0] ip addresss 172.24.254.2 255.255.255.255

[RouterA-LoopBack0] quit

[RouterA] ospf 1 router-id 172.24.254.2

[RouterA-ospf-1] import-route direct

[RouterA-ospf-1] area 0

[RouterA-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255

[RouterA-ospf-1-area-0.0.0.0] quit

[RouterA-ospf-1] quit

5.5  验证配置

(1)     验证IRF是否建立成功

# 使用display irf topology命令查看八个IRF口都是UP状态，说明四台设备建立IRF成功。

<DeviceA> display irf topology

                           Topology Info

 -------------------------------------------------------------------------

               IRF-Port1                IRF-Port2

 MemberID    Link       neighbor      Link       neighbor    Belong To

 1           UP         4             UP         2           00e0-fc0f-8c08

 4           UP         3             UP         1           00e0-fc0f-8c08

 3           UP         2             UP         4           00e0-fc0f-8c08

 2           UP         1             UP         3           00e0-fc0f-8c08

(2)     验证跨框聚合链路备份功能

# 从serverGroup 1任意挑选一台PC ping外网IP，同时关闭IRF的上行端口Ten-GigabitEthernet 1/3/8。

[DeviceA] interface ten-gigabitethernet 1/3/8

[DeviceA-Ten-GigabitEthernet1/3/8] shutdown

仍然可以ping通外网。

# 重新开启IRF的上行端口Ten-GigabitEthernet 1/3/8端口，持续ping外网IP。

[DeviceA-Ten-GigabitEthernet1/3/8] undo shutdown

[DeviceA-Ten-GigabitEthernet1/3/8] quit

# 关闭IRF的另一个上行端口Ten-GigabitEthernet 2/3/8。

[DeviceA] interface ten-gigabitethernet 2/3/8

[DeviceA-Ten-GigabitEthernet2/3/8] undo shutdown

仍然可以ping通外网。

5.6  配置文件

·     IRF：

#

irf mac-address persistent always

irf auto-update enable

undo irf link-delay

irf member 1 priority 1

irf member 2 priority 1

irf member 3 priority 1

irf member 4 priority 1

#

ospf 1 router-id 172.24.254.1

 import-route direct

 area 0.0.0.0

  network 172.24.41.0 0.0.0.255

#

vlan 10

#

vlan 20

#

vlan 41

#

irf-port 1/1

 port group interface Ten-GigabitEthernet1/2/2 mode enhanced

#

irf-port 1/2

 port group interface Ten-GigabitEthernet1/2/1 mode enhanced

#

irf-port 2/1

 port group interface Ten-GigabitEthernet2/2/1 mode enhanced

#

irf-port 2/2

 port group interface Ten-GigabitEthernet2/2/2 mode enhanced

#

irf-port 3/1

 port group interface Ten-GigabitEthernet3/2/2 mode enhanced

#

irf-port 3/2

 port group interface Ten-GigabitEthernet3/2/1 mode enhanced

#

irf-port 4/1

 port group interface Ten-GigabitEthernet4/2/1 mode enhanced

#

irf-port 4/2

 port group interface Ten-GigabitEthernet4/2/2 mode enhanced

#

interface bridge-aggregation 1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 mad enable

 link-aggregation mode dynamic

#

interface bridge-aggregation 2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

#

interface bridge-aggregation 1024

 port access vlan 41

#

interface loopback 0

 ip address 172.24.254.1 255.255.255.255

#

interface vlan-interface 10

 ip address 172.24.10.254 24

#

interface vlan-interface 20

 ip address 172.24.20.254 24

#

interface vlan-interface 41

 ip address 172.24.41.254 24

#

interface Ten-GigabitEthernet 1/3/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/3/4

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 1/3/8

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1024

#

interface Ten-GigabitEthernet 2/3/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/3/4

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 2/3/8

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1024

#

interface Ten-GigabitEthernet 3/3/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 3/3/4

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 3/3/8

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1024

#

interface Ten-GigabitEthernet 4/3/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 4/3/4

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 4/3/8

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1024

#

·     SW1：

#

vlan 1

#

vlan 2 to 4094

#

interface Ten-GigabitEthernet 1/3/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 2 to 4094

#

interface bridge-aggregation 1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 link-aggregation mode dynamic

#

interface Ten-GigabitEthernet 1/2/21

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/22

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/23

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/24

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

·     SW2：

#

vlan 1

#

vlan 2 to 4094

#

interface Ten-GigabitEthernet 1/3/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 2 to 4094

#

interface bridge-aggregation 1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

#

interface Ten-GigabitEthernet 1/2/21

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/22

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/23

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/24

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

·     RouterA：

#

ospf 1 router-id 172.24.254.2

 import-route direct

 area 0.0.0.0

  network 172.24.41.0 0.0.0.255

#

vlan 41

#

vlan 50

#

interface bridge-aggregation 1

 port access vlan 41

#

interface loopback 0

 ip address 172.24.254.2 255.255.255.255

#

interface vlan-interface 41

 ip address 172.24.41.2 24

#

interface vlan-interface 50

 ip address 172.24.1.2 24

#

interface Ten-GigabitEthernet 2/0/1

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/0/2

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/0/3

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/0/4

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/0/12

 port link-mode bridge

 port access vlan 50

#

6 IRF扩容升级配置举例

6.1  组网需求

由于网络规模迅速扩大，汇聚层SW设备扩展至N台，当前中心设备设备A和设备B组成IRF的转发能力已经不能满足需求。现在需要在保留原有设备的基础上完成扩容，满足当前网络的转发需求。采用的升级方案为：扩大汇聚层设备的IRF规模，升级成四框IRF来满足当前网络的转发需求，如图6-3所示。

图6-1 升级之前组网图（两个IRF成员设备）

 

 

图6-2 升级过程组网图（新增两个成员设备Device C和Device D）

 

 

图6-3 升级之后组网图（采用BFD MAD）

图6-4

 

说明

IP地址配置信息及设备间的互联端口信息请参见4 两台成员设备的IRF配置举例。

 

6.2  配置思路

·     为避免成员设备的单点故障影响到正常的业务转发，在IRF中配置跨框聚合端口进行业务转发。

·     为尽量降低IRF分裂对业务造成的影响，可在IRF中配置BFD MAD检测。检测速度较快，组网形式灵活，对于中间设备没有要求，但是会占用额外的三层接口。

6.3  使用版本

本举例在S7500EXS-CMW710-R7536P05版本上进行配置和验证。

6.4  配置注意事项

BFD MAD与STP功能互斥，因此需要在用于BFD MAD检测的接口上关闭STP功能。

6.5  配置步骤

·     如果新加入的DeviceC和DeviceD还未组建IRF，搭建四框IRF的配置步骤请参考6.5.1  搭建IRF（配置Device C和Device D加入IRF）；

·     如果新加入的DeviceC和DeviceD已经组成了另一个IRF（假设名称为IRF-C），搭建四框IRF的配置步骤请参考6.5.2  搭建IRF（配置原IRF和IRF-C合并成IRF）。

6.5.1  搭建IRF（配置Device C和Device D加入IRF）

由于Device A和Device B已经组成了IRF，所以只需将Device C和Device D加入IRF即可。

1. IRF的配置

(1)     根据表5-2选定连接Device C和Device D的IRF物理端口并关闭这些端口

<DeviceA> system-view

[DeviceA] interface ten-gigabitethernet 1/2/2

[DeviceA-Ten-GigabitEthernet1/2/2] shutdown

[DeviceA-Ten-GigabitEthernet1/2/2] quit

[DeviceA] interface ten-gigabitEthernet 2/2/2

[DeviceA-Ten-GigabitEthernet2/2/2] undo shutdown

[DeviceA-Ten-GigabitEthernet2/2/2] quit

(2)     配置IRF端口1/1，并将它与物理端口Ten-GigabitEthernet1/2/2

[DeviceA] irf-port 1/1

[DeviceA-irf-port1/1] port group interface ten-gigabitethernet 1/2/2

[DeviceA-irf-port1/1] quit

(3)     配置IRF端口2/2，并将它与物理端口Ten-GigabitEthernet2/2/2

[DeviceA] irf-port 2/2

[DeviceA-irf-port2/2] port group interface ten-gigabitethernet2/2/2

[DeviceA-irf-port2/2] quit

(4)     开启IRF物理端口，并保存配置

[DeviceA] interface ten-gigabitethernet 1/2/2

[DeviceA-Ten-GigabitEthernet1/2/2] undo shutdown

[DeviceA-Ten-GigabitEthernet1/2/2] quit

[DeviceA] interface ten-gigabitEthernet 2/2/2

[DeviceA-Ten-GigabitEthernet2/2/2] undo shutdown

[DeviceA-Ten-GigabitEthernet2/2/2] quit

[DeviceA] save

(5)     激活IRF端口下的配置

[DeviceA] irf-port-configuration active

2. Device C的配置

(1)     将Device C的成员编号配置为3，并重启设备使新编号生效

<DeviceC> system-view

[DeviceC] irf member 1 renumber 3

Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y

[DeviceC] quit

<DeviceC> reboot

(2)     根据表5-2选定IRF物理端口并关闭这些端口

<DeviceC> system-view

[DeviceC] interface range ten-gigabitethernet 3/2/1 to ten-gigabitethernet 3/2/2

[DeviceC-if-range] shutdown

[DeviceC-if-range] quit

(3)     配置IRF端口3/1，并将它与物理端口Ten-GigabitEthernet3/2/2绑定

[DeviceC] irf-port 3/1

[DeviceC-irf-port3/1] port group interface ten-gigabitethernet 3/2/2

[DeviceC-irf-port3/1] quit

(4)     配置IRF端口3/2，并将它与物理端口Ten-GigabitEthernet3/2/1绑定

[DeviceC] irf-port 3/2

[DeviceC-irf-port3/2] port group interface ten-gigabitethernet 3/2/1

[DeviceC-irf-port3/2] quit

(5)     开启IRF物理端口，并保存配置

[DeviceC] interface range ten-gigabitethernet 3/2/1 to ten-gigabitethernet 3/2/2

[DeviceC-if-range] undo shutdown

[DeviceC-if-range] quit

[DeviceC] save

(6)     参照图6-3和端口连接表连接Device B和Device C之间的IRF端口，激活IRF端口下的配置

[DeviceC] irf-port-configuration active

3. Device D的配置

(1)     将Device D的成员编号配置为4，并重启设备使新编号生效

<DeviceD> system-view

[DeviceD] irf member 1 renumber 4

Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y

[DeviceD] quit

<DeviceD> reboot

(2)     根据表5-2选定IRF物理端口并关闭这些端口

<DeviceD> system-view

[DeviceD] interface range ten-gigabitethernet 4/2/1 to ten-gigabitethernet 4/2/2

[DeviceD-if-range] shutdown

[DeviceD-if-range] quit

(3)     配置IRF端口4/1，并将它与物理端口Ten-GigabitEthernet4/2/1绑定

[DeviceD] irf-port 4/1

[DeviceD-irf-port4/1] port group interface ten-gigabitethernet 4/2/1

[DeviceD-irf-port4/1] quit

(4)     配置IRF端口4/2，并将它与物理端口Ten-GigabitEthernet4/2/2绑定

[DeviceD] irf-port 4/2

[DeviceD-irf-port4/2] port group interface ten-gigabitethernet 4/2/2

[DeviceD-irf-port4/2] quit

(5)     开启IRF物理端口，并保存配置

[DeviceD] interface range ten-gigabitethernet 4/2/1 to ten-gigabitethernet 4/2/2

[DeviceD-if-range] undo shutdown

[DeviceD-if-range] quit

[DeviceD] save

(6)     参照图6-3和端口连接表连接Device D和Device A、Device D和Device C之间的IRF端口，激活IRF端口下的配置

[DeviceD] irf-port-configuration active

6.5.2  搭建IRF（配置原IRF和IRF-C合并成IRF）

1. IRF的配置

(1)     根据表5-2选定连接Device C和Device D的IRF物理端口并关闭这些端口

<DeviceA> system-view

[DeviceA] interface ten-gigabitethernet 1/2/2

[DeviceA-Ten-GigabitEthernet1/2/2] shutdown

[DeviceA-Ten-GigabitEthernet1/2/2] quit

[DeviceA] interface ten-gigabitethernet 2/2/2

[DeviceA-Ten-GigabitEthernet2/2/2] shutdown

[DeviceA-Ten-GigabitEthernet2/2/2] quit

(2)     配置IRF端口1/1，并将它与物理端口Ten-GigabitEthernet1/2/2

[DeviceA] irf-port 1/1

[DeviceA-irf-port1/1] port group interface ten-gigabitethernet 1/2/2

[DeviceA-irf-port1/1] quit

(3)     配置IRF端口2/2，并将它与物理端口Ten-GigabitEthernet2/2/2

[DeviceA] irf-port 2/2

[DeviceA-irf-port2/2] port group interface ten-gigabitethernet2/2/2

[DeviceA-irf-port2/2] quit

(4)     开启IRF物理端口，并保存配置

[DeviceA] interface ten-gigabitethernet 1/2/2

[DeviceA-Ten-GigabitEthernet1/2/2] undo shutdown

[DeviceA-Ten-GigabitEthernet1/2/2] quit

[DeviceA] interface ten-gigabitethernet 2/2/2

[DeviceA-Ten-GigabitEthernet2/2/2] undo shutdown

[DeviceA-Ten-GigabitEthernet2/2/2] quit

[DeviceA] save

(5)     激活IRF端口下的配置

[DeviceA] irf-port-configuration active

2. IRF-C的配置

(1)     设置IRF-C的成员编号

<DeviceC> system-view

[DeviceC] irf member 1 remember 3

Renumbering the member ID may result in configuration change or loss. Continue?[

Y/N]y

[DeviceC] irf member 2 remember 4

Renumbering the member ID may result in configuration change or loss. Continue?[

Y/N]y

(2)     保存当前配置并重启，使新的成员编号生效

[DeviceC] quit

<DeviceC> reboot

(3)     根据表5-2选定连接Device C和Device D的IRF物理端口并关闭这些端口

<DeviceC> system-view

[DeviceC] interface ten-gigabitethernet 3/2/2

[DeviceC-Ten-GigabitEthernet3/2/2] shutdown

[DeviceC-Ten-GigabitEthernet3/2/2] quit

[DeviceC] interface ten-gigabitethernet 4/2/2

[DeviceC-Ten-GigabitEthernet4/2/2] shutdown

[DeviceC-Ten-GigabitEthernet4/2/2] quit

(4)     配置IRF端口3/1，并将它与物理端口Ten-GigabitEthernet3/2/2

[DeviceC] irf-port 3/1

[DeviceC-irf-port3/1] port group interface ten-gigabitethernet 3/2/2

[DeviceC-irf-port3/1] quit

(5)     配置IRF端口4/2与物理端口Ten-GigabitEthernet 4/2/2绑定

[DeviceC] irf-port 4/2

[DeviceC-irf-port4/2] port group interface ten-gigabitethernet4/2/2

[DeviceC-irf-port4/2] quit

(6)     开启IRF物理端口，并保存配置

[DeviceC] interface ten-gigabitethernet 3/2/2

[DeviceC-Ten-GigabitEthernet3/2/2] undo shutdown

[DeviceC-Ten-GigabitEthernet3/2/2] quit

[DeviceC] interface ten-gigabitethernet 4/2/2

[DeviceC-Ten-GigabitEthernet4/2/2] undo shutdown

[DeviceC-Ten-GigabitEthernet4/2/2] quit

[DevicC] save

(7)     参照图6-3和端口连接表连接Device D和Device A、Device B和Device C之间的IRF端口，激活IRF端口下的配置

[DeviceC] irf-port-configuration active

6.5.3  BFD MAD配置

在前面配置完成并重新启动后，IRF已经形成，此时可以进行各个业务模块的配置。IRF形成之后，可以从任何一台成员设备登录进行配置，设备名称缺省为Master的名称（此例中为DeviceA）。

提示

使能BFD MAD检测时，要求MAD VLAN上不能配置其他业务。

 

# 更改IRF链路down延迟上报时间为0秒。

<DeviceA> system-view

[DeviceA] irf link-delay 0

# 在IRF上创建Vlan-interface 13用于BFD MAD 检测。[DeviceA] vlan 13

[DeviceA-vlan13] quit

[DeviceA] interface vlan-interface 13

[DeviceA-Vlan-interface13] mad bfd enable

[DeviceA-Vlan-interface13] mad ip address 172.1.1.1 24 member 1

[DeviceA-Vlan-interface13] mad ip address 172.1.1.2 24 member 2

[DeviceA-Vlan-interface13] mad ip address 172.1.1.3 24 member 3

[DeviceA-Vlan-interface13] mad ip address 172.1.1.4 24 member 4

[DeviceA-Vlan-interface13] undo shutdown

[DeviceA-Vlan-interface13] quit

# 配置IRF连接SW 2的二层以太网接口加入VLAN 13，并取消接口上的STP功能。

[DeviceA] interface range ten-gigabitEthernet 1/3/1 ten-gigabitEthernet 2/3/1 ten-gigabitEthernet 3/3/1 ten-gigabitEthernet 4/3/1

[DeviceA-if-range] undo stp enable

[DeviceA-if-range] port access vlan 13

[DeviceA-if-range] quit

6.5.4  IRF下行业务配置

说明

在本例中，为方便理解，我们取消了升级之前IRF设备上的所有业务配置。但是在实际使用中，部分在升级之前已经部署的业务可以无需再重新配置了（例如端口IP地址等）。

 

1. IRF的配置

# 创建连接接入层交换机SW 1的聚合组，编号为1。

[DeviceA] interface bridge-aggregation 1

[DeviceA-Bridge-Aggregation1] quit

# 使用接口批量配置功能配置连接SW 1的端口加入聚合组1。

[DeviceA] interface range ten-gigabitEthernet 1/3/3 ten-gigabitEthernet 2/3/3 ten-gigabitEthernet 3/3/3 ten-gigabitEthernet 4/3/3

[DeviceA-if-range] port link-aggregation group 1

[DeviceA-if-range] quit

# 创建连接接入层交换机SW 2的聚合组，编号为2。

[DeviceA] interface bridge-aggregation 2

[DeviceA-Bridge-Aggregation2] quit

# 使用接口批量配置功能配置连接SW 2的端口加入聚合组2。

[DeviceA] interface range ten-gigabitEthernet 1/3/4 ten-gigabitEthernet 2/3/4 ten-gigabitEthernet 3/3/4 ten-gigabitEthernet 4/3/4

[DeviceA-if-range] port link-aggregation group 2

[DeviceA-if-range] quit

# 配置与SW 1之间通过Vlan-interface 10连接。

[DeviceA] vlan 10

[DeviceA-vlan10] quit

[DeviceA] interface vlan-interface 10

[DeviceA-Vlan-interface10] ip address 172.24.10.254 24

[DeviceA-Vlan-interface10] quit

[DeviceA] interface bridge-aggregation 1

[DeviceA-Bridge-Aggregation1] port link-type trunk

[DeviceA-Bridge-Aggregation1] undo port trunk permit vlan 1

[DeviceA-Bridge-Aggregation1] port trunk permit vlan 10

[DeviceA-Bridge-Aggregation1] quit

# 配置与SW 2之间通过Vlan-interface 20连接。

[DeviceA] vlan 20

[DeviceA-vlan20] quit

[DeviceA] interface vlan-interface 20

[DeviceA-Vlan-interface20] ip address 172.24.20.254 24

[DeviceA-Vlan-interface20] quit

[DeviceA] interface bridge-aggregation 2

[DeviceA-Bridge-Aggregation2] port link-type trunk

[DeviceA-Bridge-Aggregation2] undo port trunk permit vlan 1

[DeviceA-Bridge-Aggregation2] port trunk permit vlan 20

[DeviceA-Bridge-Aggregation2] quit

2. SW 1的配置

# 创建连接IRF的聚合组，编号为1。

<SW1> system-view

[SW1] interface bridge-aggregation 1

[SW1-Bridge-Aggregation1] quit

# 使用接口批量配置功能配置连接IRF的端口加入聚合组1。

[SW1] interface range ten-gigabitethernet 1/2/21 to ten-gigabitethernet 1/2/24

[SW1-if-range] port link-aggregation group 1

[SW1-if-range] quit

# 接入设备SW1上创建所有VLAN。

[SW1] vlan all

# 配置与IRF连接的端口。

[SW1] interface bridge-aggregation 1

[SW1-Bridge-Aggregation1] port link-type trunk

[SW1-Bridge-Aggregation1] undo port trunk permit vlan 1

[SW1-Bridge-Aggregation1] port trunk permit vlan 10

[SW1-Bridge-Aggregation1] quit

# 配置连接服务器的端口Ten-GigabitEthernet1/3/1。

[SW1] interface ten-gigabitethernet 1/3/1

[SW1-Ten-GigabitEthernet1/3/1] port link-type trunk

[SW1-Ten-GigabitEthernet1/3/1] port trunk permit vlan all

[SW1-Ten-GigabitEthernet1/3/1] undo port trunk permit vlan 1

[SW1-Ten-GigabitEthernet1/3/1] quit

3. SW 2的配置

# 创建连接IRF的聚合组，编号为1。

<SW2> system-view

[SW2] interface bridge-aggregation 1

[SW2-Bridge-Aggregation1] quit

# 使用接口批量配置功能配置连接IRF的端口加入聚合组1。

[SW2] interface range ten-gigabitethernet 1/2/21 to ten-gigabitethernet 1/2/24

[SW2-if-range] port link-aggregation group 1

[SW2-if-range] quit

# 接入设备SW 2上创建所有VLAN。

[SW2] vlan all

# 配置与IRF连接的端口。

[SW2] interface bridge-aggregation 1

[SW2-Bridge-Aggregation1] port link-type trunk

[SW2-Bridge-Aggregation1] undo port trunk permit vlan 1

[SW2-Bridge-Aggregation1] port trunk permit vlan 20

[SW2-Bridge-Aggregation1] quit

# 配置连接服务器的端口。

[SW2] interface ten-gigabitethernet 1/3/1

[SW2-Ten-GigabitEthernet1/3/1] port link-type trunk

[SW2-Ten-GigabitEthernet1/3/1] port trunk permit vlan all

[SW2-Ten-GigabitEthernet1/3/1] undo port trunk permit vlan 1

[SW2-Ten-GigabitEthernet1/3/1] quit

# 配置与IRF连接用于BFD MAD的端口。

[SW2] interface range ten-gigabitethernet 1/2/41 to ten-gigabitethernet 1/2/44

[SW2-if-range] port access vlan 13

[SW2-if-range] quit

6.5.5  IRF上行业务配置

1. IRF的配置

# 创建连接出口路由器Router A的聚合组，编号为1024。

[DeviceA] interface bridge-aggregation 1024

[DeviceA-Bridge-Aggregation1024] quit

# 使用接口批量配置功能配置连接Router A的端口加入聚合组1024。

[DeviceA] interface range ten-gigabitethernet 1/3/8 ten-gigabitethernet 2/3/8 ten-gigabitethernet 3/3/8 ten-gigabitethernet 4/3/8

[DeviceA-if-range] port link-aggregation group 1024

[DeviceA-if-range] quit

# 配置与Router A之间通过Vlan-interface41连接。

[DeviceA] vlan 41

[DeviceA-vlan41] quit

[DeviceA] interface vlan-interface 41

[DeviceA-Vlan-interface41] ip address 172.24.41.254 24

[DeviceA-Vlan-interface41] quit

[DeviceA] interface bridge-aggregation 1024

[DeviceA-Bridge-Aggregation1024] port access vlan 41

[DeviceA-Bridge-Aggregation1024] quit

# 配置IRF与出口路由器之间运行OSPF路由协议。

[DeviceA] interface loopback 0

[DeviceA-LoopBack0] ip address 172.24.254.1 255.255.255.255

[DeviceA-LoopBack0] quit

[DeviceA] ospf 1 router-id 172.24.254.1

[DeviceA-ospf-1] import-route direct

[DeviceA-ospf-1] area 0

[DeviceA-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255

[DeviceA-ospf-1-area-0.0.0.0] quit

[DeviceA-ospf-1] quit

2. Router A的配置

说明

出口路由器配置本用例只描述与IRF连接的部分，外网使用何种路由协议不予描述。

 

# 创建连接IRF的聚合组，编号为1。

<RouterA> system-view

[RouterA] interface bridge-aggregation 1

[RouterA-Bridge-Aggregation1] quit

# 配置连接IRF的端口加入聚合组1。

[RouterA] interface range ten-gigabitethernet 2/0/1 to interface ten-gigabitethernet 2/0/4

[RouterA-if-range] port link-aggregation group 1

[RouterA-if-range] quit

# 配置与IRF之间通过Vlan-interface 41连接。

[RouterA] vlan 41

[RouterA-vlan41] quit

[RouterA] interface vlan-interface 41

[RouterA-Vlan-interface41] ip address 172.24.41.2 24

[RouterA-Vlan-interface41] quit

[RouterA] interface bridge-aggregation 1

[RouterA-Bridge-Aggregation1] port access vlan 41

[RouterA-Bridge-Aggregation1] quit

# 配置Router A通过Vlan-interface 50连接外网。

[RouterA] vlan 50

[RouterA-vlan50] quit

[RouterA] interface vlan-interface 50

[RouterA-Vlan-interface50] ip address 172.24.1.2 24

[RouterA-Vlan-interface50] quit

[RouterA] interface ten-gigabitethernet 4/0/3

[RouterA-Ten-GigabitEthernet4/0/3] port link-mode bridge

[RouterA-Ten-GigabitEthernet4/0/3] port access vlan 50

[RouterA-Ten-GigabitEthernet4/0/3] quit

# 配置Router A与IRF之间运行OSPF路由协议。

[RouterA] interface loopback 0

[RouterA-LoopBack0] ip addresss 172.24.254.2 255.255.255.255

[RouterA-LoopBack0] quit

[RouterA] ospf 1 router-id 172.24.254.2

[RouterA-ospf-1] import-route direct

[RouterA-ospf-1] area 0

[RouterA-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255

[RouterA-ospf-1-area-0.0.0.0] quit

[RouterA-ospf-1] quit

6.6  验证配置

(1)     验证IRF是否建立成功

# 使用display irf topology命令查看八个IRF口都是UP状态，说明四台设备建立IRF成功。

<DeviceA> display irf topology

                           Topology Info

 -------------------------------------------------------------------------

               IRF-Port1                IRF-Port2

 MemberID    Link       neighbor      Link       neighbor    Belong To

 1           UP         4             UP         2           00e0-fc0f-8c08

 4           UP         3             UP         1           00e0-fc0f-8c08

 3           UP         2             UP         4           00e0-fc0f-8c08

 2           UP         1             UP         3           00e0-fc0f-8c08

 

(2)     验证跨框聚合链路备份功能

# 从serverGroup 1任意挑选一台PC ping外网IP，同时将IRF连接出口路由器的Ten-GigabitEthernet 1/3/8端口shutdown。

[DeviceA] interface ten-gigabitethernet 1/3/8

[DeviceA-Ten-GigabitEthernet1/3/8] shutdown

仍然可以ping通外网。

# 重新使Ten-GigabitEthernet 1/3/8端口状态UP，持续ping外网IP。

[DeviceA-Ten-GigabitEthernet1/3/8] undo shutdown

[DeviceA-Ten-GigabitEthernet1/3/8] quit

# 将另外一个上行端口Ten-GigabitEthernet 2/3/8 shutdown。

[DeviceA] interface ten-gigabitethernet 2/3/8

[DeviceA-Ten-GigabitEthernet2/3/8] undo shutdown

仍然可以ping通外网。

6.7  配置文件

·     IRF：

#

 irf mac-address persistent always

 irf auto-update enable

 irf link-delay 0

 irf member 1 priority 1

 irf member 2 priority 1

 irf member 3 priority 1

 irf member 4 priority 1

#

ospf 1 router-id 172.24.254.1

 import-route direct

 area 0.0.0.0

  network 172.24.41.0 0.0.0.255

#

vlan 10

#

vlan 20

#

vlan 13

#

vlan 41

#

irf-port 1/1

 port group interface Ten-GigabitEthernet1/2/2 mode enhanced

#

irf-port 1/2

 port group interface Ten-GigabitEthernet1/2/1 mode enhanced

#

irf-port 2/1

 port group interface Ten-GigabitEthernet2/2/1 mode enhanced

#

irf-port 2/2

 port group interface Ten-GigabitEthernet2/2/2 mode enhanced

#

irf-port 3/1

 port group interface Ten-GigabitEthernet3/2/2 mode enhanced

#

irf-port 3/2

 port group interface Ten-GigabitEthernet3/2/1 mode enhanced

#

irf-port 4/1

 port group interface Ten-GigabitEthernet4/2/1 mode enhanced

#

irf-port 4/2

 port group interface Ten-GigabitEthernet4/2/2 mode enhanced

#

interface bridge-aggregation 1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 link-aggregation mode dynamic

#

interface bridge-aggregation 2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

#

interface bridge-aggregation 1024

 port access vlan 41

#

interface loopback 0

 ip address 172.24.254.1 255.255.255.255

#

interface vlan-interface 10

 ip address 172.24.10.254 24

#

interface vlan-interface13

 mad bfd enable

 mad ip address 1.1.1.1 255.255.255.0 member 1

 mad ip address 1.1.1.2 255.255.255.0 member 2

 mad ip address 1.1.1.3 255.255.255.0 member 3

 mad ip address 1.1.1.4 255.255.255.0 member 4

#

interface vlan-interface 20

 ip address 172.24.20.254 24

#

interface vlan-interface 41

 ip address 172.24.41.254 24

#

interface Ten-GigabitEthernet 1/3/1

 port link-mode bridge

 port access vlan 13

 undo stp enable

#

interface Ten-GigabitEthernet 1/3/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/3/4

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 1/3/8

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1024

#

interface Ten-GigabitEthernet 2/3/1

 port link-mode bridge

 port access vlan 13

 undo stp enable

#

interface Ten-GigabitEthernet 2/3/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/3/4

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 2/3/8

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1024

#

interface  Ten-GigabitEthernet 3/3/1

 port link-mode bridge

 port access vlan 13

 undo stp enable

#

interface Ten-GigabitEthernet 3/3/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 3/3/4

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 3/3/8

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1024

#

interface  Ten-GigabitEthernet 4/3/1

 port link-mode bridge

 port access vlan 13

 undo stp enable

#

interface Ten-GigabitEthernet 4/3/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 4/3/4

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet 4/3/8

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1024

#

·     SW1：

#

vlan 1

#

vlan 2 to 4094

#

interface bridge-aggregation 1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 link-aggregation mode dynamic

#

interface Ten-GigabitEthernet 1/3/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 2 to 4094

#

interface Ten-GigabitEthernet 1/2/21

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/22

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/23

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/24

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

·     SW2：

#

vlan 1

#

vlan 2 to 4094

#

interface bridge-aggregation 1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

#

interface Ten-GigabitEthernet 1/3/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 2 to 4094

#

interface Ten-GigabitEthernet 1/2/21

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/22

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/23

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/24

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 1/2/41

 port link-mode bridge

 port access vlan 13

#

interface Ten-GigabitEthernet 1/2/42

 port link-mode bridge

 port access vlan 13

#

interface Ten-GigabitEthernet 1/2/43

 port link-mode bridge

 port access vlan 13

#

interface Ten-GigabitEthernet 1/2/44

 port link-mode bridge

 port access vlan 13

#

·     RouterA：

#

ospf 1 router-id 172.24.254.2

 import-route direct

 area 0.0.0.0

  network 172.24.41.0 0.0.0.255

#

vlan 41

#

vlan 50

#

interface bridge-aggregation 1

 port access vlan 41

#

interface loopback 0

 ip address 172.24.254.2 255.255.255.255

#

interface vlan-interface 41

 ip address 172.24.41.2 24

#

interface vlan-interface 50

 ip address 172.24.1.2 24

#

interface Ten-GigabitEthernet 2/0/1

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/0/2

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/0/3

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/0/4

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet 2/0/12

 port link-mode bridge

 port access vlan 50

#

7 相关资料

·     H3C S7500E-XS系列交换机 虚拟化技术配置指导-R7536P05

·     H3C S7500E-XS系列交换机 虚拟化技术命令参考-R7536P05

不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!

新华三官网
联系我们