H3C EVI配置举例

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Copyright © 2017 新华三技术有限公司 版权所有，保留一切权利。 非经本公司书面许可，任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部， 并不得以任何形式传播。本文档中的信息可能变动，恕不另行通知。

目  录

1 简介

2 配置前提

3 使用限制

4 通过IRF实现EVI边缘设备的冗余备份配置举例

4.1 组网需求

4.2 配置思路

4.3 使用版本

4.4 配置注意事项

4.5 配置步骤

4.5.1 IRF A的配置

4.5.2 配置网关CE A

4.5.3 IRF B的配置

4.5.4 配置网关CE B

4.6 验证配置

4.7 配置文件

5 相关资料

 

1 简介

本文档介绍了通过MDC实现EVI边缘设备与网关分离和通过IRF实现EVI边缘设备的冗余备份的配置举例。

EVI（Ethernet Virtualization Interconnect，以太网虚拟化互联）是一种基于“MAC in IP”的二层VPN技术，它可以基于现有服务提供商或企业的IP网络，为分散的物理站点提供二层互联功能。虚拟机能在不同站点之间自由迁移。

2 配置前提

本文档中的配置均是在实验室环境下进行的配置和验证，配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置，为了保证配置效果，请确认现有配置和以下举例中的配置不冲突。

本文假设您已了解EVI、MDC和IRF特性。

3 使用限制

·     本地EVI边缘设备不能作为对端数据中心的网关。

·     EVI特性需要安装配套的License。

4 通过IRF实现EVI边缘设备的冗余备份配置举例

4.1  组网需求

如图4-1所示，某公司由于用户数量急剧增加，公司网络部决定扩大数据中心规模，在两个不同的地区设立数据中心，并要求采用EVI技术实现数据中心的二层互通。具体要求如下：

·     数据中心之间VLAN 1000的业务流量通过运营商网络的三层IP网络实现二层互通；

·     不同数据中心之间的资源能动态调配和管理，数据业务和服务器能自由迁移，数据迁移过程对用户透明，并且迁移过程中不改变数据业务和服务器的IP地址（否则用户的访问流量会中断）；

·     为提高EVI边缘设备的可靠性，要求使用IRF技术实现边缘设备的冗余，即使一台交换机出现故障，也不会影响整个数据中心的通信。

图4-1 通过IRF实现EVI边缘设备的冗余备份配置组网图

设备	接口	IP地址	设备	接口	IP地址
IRF A	Loop0	1.1.1.1/32	IRFB	Loop0	2.2.2.2/32
	Vlan-int10	10.1.1.1/24		Vlan-int10	10.1.2.1/24
CE A	Vlan-int11	11.1.1.1/24	CE B	Vlan-int11	11.1.2.1/24
	Vlan-int1000	100.0.0.1/24		Vlan-int1000	100.0.0.2/24

 

4.2  配置思路

·     为实现两个数据中心之间VLAN 1000的二层互通，需要在IRF A和 IRF B之间建立EVI网络，并将VLAN 1000配置成扩展VLAN；

·     为实现当数据业务和服务器在迁移过程中无需修改网关地址，需要将数据中心Site1的网关CE A和Site2的网关CE B加入同一个VRRP备份组，两个数据中心使用同一个虚拟网关；

·     为实现CE A和CE B之间的VRRP协议报文能够透传，需要在IRF A和IRF B上配置选择性泛洪，允许VRRP的协议报文通过EVI网络传递到对端数据中心的网关。

·     为提供IRF链路的可靠性，需要分别在IRF上下行的链路上配置链路聚合功能。

4.3  使用版本

本举例是在S7500EXS-CMW710-R7178版本上进行配置和验证的。

4.4  配置注意事项

1. 配置EVI网络实例和扩展VLAN的注意事项

·     同一个EVI网络实例中，所有的边缘设备必须配置相同的Netwok ID。但是，同一台边缘设备上的不同Tunnel接口必须配置不同的Netwok ID；

·     同一个EVI网络实例中的所有边缘设备上配置的扩展VLAN必须一致，否则可能会引起扩展VLAN中的数据泄露；

·     不同的EVI网络实例不能使用相同的扩展VLAN。

2. 配置EVI边缘设备公网接口的注意事项

·     不能使用Vlan-interface1作为EVI边缘设备的公网接口；

·     EVI扩展VLAN的VLAN接口不支持作为公网出接口。

4.5  配置步骤

4.5.1  IRF A的配置

(1)     请参考图4-1进行物理连线，确保IRF物理链路连接正确

(2)     配置Switch A-1

# 根据图4-1选定IRF物理端口并关闭这些端口。

<SwitchA-1> system-view

[SwitchA-1] interface ten-gigabitethernet 1/2/1

[SwitchA-1-Ten-GigabitEthernet1/2/1] shutdown

[SwitchA-1-Ten-GigabitEthernet1/2/1] quit

# 配置IRF端口1/2，并将它与物理端口Ten-GigabitEthernet1/2/1绑定。

[SwitchA-1] irf-port 1/2

[SwitchA-1-irf-port1/2] port group interface ten-gigabitethernet 1/2/1

[SwitchA-1-irf-port1/2] quit

# 开启IRF物理端口并保存配置。

[SwitchA-1] interface ten-gigabitethernet 1/2/1

[SwitchA-1-Ten-GigabitEthernet1/2/1] undo shutdown

[SwitchA-1-Ten-GigabitEthernet1/2/1] quit

[SwitchA-1] save

# 激活IRF端口下的配置。

[SwitchA-1] irf-port-configuration active

(3)     配置Switch A-2

# 配置Switch A-2的成员编号为2，并重启设备使新编号生效。

<SwitchA-2> system-view

[SwitchA-2] irf member 1 renumber 2

Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y

[SwitchA-2] quit

<SwitchA-2> reboot

# 根据图4-1选定IRF物理端口并关闭这些端口。

[SwitchA-2] interface ten-gigabitethernet 2/2/1

[SwitchA-2-Ten-GigabitEthernet2/2/1] shutdown

[SwitchA-2-Ten-GigabitEthernet2/2/1] quit

# 配置IRF端口2/1，并将它与物理端口Ten-GigabitEthernet1/2/1绑定。

[SwitchA-2] irf-port 1

[SwitchA-2-irf-port1] port group interface ten-gigabitethernet 2/2/1

[SwitchA-2-irf-port1] quit

# 开启IRF物理端口并保存配置。

[SwitchA-2] interface ten-gigabitethernet 2/2/1

[SwitchA-2-Ten-GigabitEthernet2/2/1] undo shutdown

[SwitchA-2-Ten-GigabitEthernet2/2/1] quit

[SwitchA-2] save

# 激活IRF端口下的配置。

[SwitchA-2] irf-port-configuration active

(4)     配置IRF A的BFD MAD检测

# 更改IRF A的系统名称为“IRFA”，并设置IRF A域编号为1。

<SwitchA-1> system-view

[SwitchA-1] sysname IRFA

[IRFA] irf domain 1

# 更改IRF链路down延迟上报时间为0秒。

[IRFA] irf link-delay 0

# 创建VLAN 3，并将Switch A-1上的端口Ten-GigabitEthernet1/3/2和Swtich A-2上的端口Ten-GigabitEthernet2/3/2加入VLAN中。

[IRFA] vlan 3

[IRFA-vlan3] port ten-gigabitethernet 1/3/2 ten-gigabitethernet 2/3/2

[IRFA-vlan3] quit

# 创建VLAN接口3，并配置MAD IP地址。

[IRFA] interface vlan-interface 3

[IRFA-Vlan-interface3] mad bfd enable

[IRFA-Vlan-interface3] mad ip address 192.168.2.1 24 member 1

[IRFA-Vlan-interface3] mad ip address 192.168.2.2 24 member 2

[IRFA-Vlan-interface3] undo shutdown

[IRFA-Vlan-interface3] quit

# 由于BFD MAD与STP功能互斥，需要关闭接口上的STP功能。

[IRFA] interface range ten-gigabitethernet 1/3/2 ten-gigabitethernet 2/3/2

[IRFA-if-range] undo stp enable

[IRFA-if-range] undo shutdown

[IRFA-if-range] quit

(5)     配置IRF A上各接口的IP地址及路由协议

# 配置IRF A公网接口（即EVI边缘设备的公网接口）的IP地址，并配置Ten-GigabitEthernet1/3/1和Ten-GigabitEthernet2/3/1允许VLAN 10通过。

[IRFA] vlan 10

[IRFA-vlan10] quit

[IRFA] interface vlan-interface 10

[IRFA-Vlan-interface10] ip address 10.1.1.1 24

[IRFA-Vlan-interface10] undo shutdown

[IRFA-Vlan-interface10] quit

[IRFA] interface bridge-aggregation 1

[IRFA-Bridge-Aggregation1] link-aggregation mode dynamic

[IRFA-Bridge-Aggregation1] port access vlan 10

[IRFA-Bridge-Aggregation1] undo shutdown

[IRFA-Bridge-Aggregation1] quit

[IRFA] interface ten-gigabitethernet 1/3/1

[IRFA-Ten-GigabitEthernet1/3/1] undo shutdown

[IRFA-Ten-GigabitEthernet1/3/1] port link-aggregation group 1

[IRFA-Ten-GigabitEthernet1/3/1] quit

[IRFA] interface ten-gigabitethernet 2/3/1

[IRFA-Ten-GigabitEthernet2/3/1] undo shutdown

[IRFA-Ten-GigabitEthernet2/3/1] port link-aggregation group 1

[IRFA-Ten-GigabitEthernet2/3/1] quit

# 创建VLAN 1000。

[IRFA] vlan 1000

[IRFA-vlan1000] quit

# 创建连接公网的聚合组，编号为2，允许VLAN 1000通过。

[IRFA] interface bridge-aggregation 2

[IRFA-Bridge-Aggregation2] link-aggregation mode dynamic

[IRFA-Bridge-Aggregation2] port link-type trunk

[IRFA-Bridge-Aggregation2] port trunk permit vlan 1000

[IRFA-Bridge-Aggregation2] undo shutdown

[IRFA-Bridge-Aggregation2] quit

# 配置接口Ten-GigabitEthernet1/4/1和Ten-GigabitEthernet2/4/1加入聚合组2。

[IRFA] interface ten-gigabitethernet 1/4/1

[IRFA-Ten-GigabitEthernet1/4/1] port link-aggregation group 2

[IRFA-Ten-GigabitEthernet1/4/1] undo shutdown

[IRFA-Ten-GigabitEthernet1/4/1] quit

[IRFA] interface ten-gigabitethernet 2/4/1

[IRFA-Ten-GigabitEthernet2/4/1] port link-aggregation group 2

[IRFA-Ten-GigabitEthernet2/4/1] undo shutdown

[IRFA-Ten-GigabitEthernet2/4/1] quit

# 创建Loopback接口，作为EVI隧道的源接口。

[IRFA] interface loopback 0

[IRFA-LoopBack0] ip address 1.1.1.1 32

[IRFA-LoopBack0] quit

# 配置OSPF路由协议，发布公网路由。

[IRFA] ospf 1

[IRFA-ospf-1] area 0

[IRFA-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.255

[IRFA-ospf-1-area-0.0.0.0] network 1.1.1.1 0.0.0.0

[IRFA-ospf-1-area-0.0.0.0] quit

[IRFA-ospf-1] quit

(6)     配置EVI隧道

# 建立EVI隧道。

[IRFA] interface Tunnel 1 mode evi

# 配置Tunnel1接口的源端地址为LoopBack0。

[IRFA-Tunnel1] source loopback 0

# 配置Tunnel1接口的Network ID。

[IRFA-Tunnel1] evi network-id 1

# 使能Tunnel1接口的ENDS功能。

[IRFA-Tunnel1] evi neighbor-discovery server enable

# 配置Tunnel1接口的扩展VLAN。

[IRFA-Tunnel1] evi extend-vlan 1000

# 配置选择性泛洪，使VRRP协议报文可以通过EVI隧道透传到对端，VRRP协议报文的MAC地址为0100-5e00-0012。

[IRFA-Tunnel1] evi selective-flooding mac-address 0100-5e00-0012 vlan 1000

[IRFA-Tunnel1] quit

# 在接入EVI网络的物理接口Ten-GigabitEthernet1/3/1和Ten-GigabitEthernet2/3/1上开启EVI功能，同时关闭接口上的STP功能。

[IRFA] interface ten-gigabitethernet 1/3/1

[IRFA-Ten-GigabitEthernet1/3/1] evi enable

[IRFA-Ten-GigabitEthernet1/3/1] undo stp enable

[IRFA-Ten-GigabitEthernet1/3/1] quit

[IRFA] interface ten-gigabitethernet 2/3/1

[IRFA-Ten-GigabitEthernet2/3/1] evi enable

[IRFA-Ten-GigabitEthernet2/3/1] undo stp enable

[IRFA-Ten-GigabitEthernet2/3/1] quit

4.5.2  配置网关CE A

(1)     配置CE A上各接口的IP地址及路由协议

# 配置CE A的公网接口。

<CEA> system-view

[CEA] vlan 11

[CEA-vlan11] quit

[CEA] interface vlan-interface 11

[CEA-Vlan-interface11] ip address 11.1.1.1 24

[CEA-Vlan-interface11] undo shutdown

[CEA-Vlan-interface11] quit

[CEA] interface ten-gigabitethernet 1/2/5

[CEA-Ten-GigabitEthernet1/2/5] port access vlan 11

[CEA-Ten-GigabitEthernet1/2/5] undo shutdown

[CEA-Ten-GigabitEthernet1/2/5] quit

# 配置OSPF路由协议，发布公网路由。

[CEA] ospf 1

[CEA-ospf-1] area 0

[CEA-ospf-1-area-0.0.0.0] network 11.1.1.0 0.0.0.255

[CEA-ospf-1-area-0.0.0.0] network 100.0.0.0 0.0.0.255

[CEA-ospf-1-area-0.0.0.0] quit

[CEA-ospf-1] quit

# 创建VLAN 1000，并配置接口Vlan-interface1000的IP地址。

[CEA] vlan 1000

[CEA-vlan1000] quit

[CEA] interface vlan-interface 1000

[CEA-Vlan-interface1000] ip address 100.0.0.1 24

[CEA-Vlan-interface1000] undo shutdown

[CEA-Vlan-interface1000] quit

# 配置CE A与IRF A相连的接口允许VLAN 1000通过。

[CEA] interface bridge-aggregation 2

[CEA-Bridge-Aggregation2] link-aggregation mode dynamic

[CEA-Bridge-Aggregation2] port link-type trunk

[CEA-Bridge-Aggregation2] port trunk permit vlan 1000

[CEA-Bridge-Aggregation2] quit

[CEA] interface ten-gigabitethernet 1/4/1

[CEA-Ten-GigabitEthernet1/4/1] port link-aggregation group 2

[CEA-Ten-GigabitEthernet1/4/1] undo shutdown

[CEA-Ten-GigabitEthernet1/4/1] quit

[CEA] interface ten-gigabitethernet 1/4/2

[CEA-Ten-GigabitEthernet1/4/2] port link-aggregation group 2

[CEA-Ten-GigabitEthernet1/4/2] undo shutdown

[CEA-Ten-GigabitEthernet1/4/2] quit

# 配置CE A与数据中心相连的接口允许VLAN 1000通过。

[CEA] interface ten-gigabitethernet 1/2/7

[CEA-Ten-GigabitEthernet1/2/7] port link-type trunk

[CEA-Ten-GigabitEthernet1/2/7] port trunk permit vlan 1000

[CEA-Ten-GigabitEthernet1/2/7] undo shutdown

[CEA] quit

(2)     配置CE A加入VRRP备份组

# 创建VRRP备份组1，使用虚拟IP地址100.0.0.254。

[CEA] interface vlan-interface 1000

[CEA-Vlan-interface1000] vrrp vrid 1 virtual-ip 100.0.0.254

# 为使CE A成为Master，配置CE A在备份组中的优先级为110，高于CE B采用的缺省优先级100。

[CEA-Vlan-interface1000] vrrp vrid 1 priority 110

[CEA-Vlan-interface1000] quit

4.5.3  IRF B的配置

(1)     请参考图4-1进行物理连线，确保IRF物理链路连接正确

(2)     配置Switch B-1

# 根据图4-1选定IRF物理端口并关闭这些端口。

<SwitchB-1> system-view

[SwitchB-1] interface ten-gigabitethernet 1/2/1

[SwitchB-1-Ten-GigabitEthernet1/2/1] shutdown

[SwitchB-1-Ten-GigabitEthernet1/2/1] quit

# 配置IRF端口1/2，并将它与物理端口Ten-GigabitEthernet1/2/1绑定。

[SwitchB-1] irf-port 1/2

[SwitchB-1-irf-port1/2] port group interface ten-GigabitEthernet 1/2/1

[SwitchB-1-irf-port1/2] quit

# 开启IRF物理端口并保存配置。

[SwitchB-1] interface ten-GigabitEthernet 1/2/1

[SwitchB-1-Ten-GigabitEthernet1/2/1] undo shutdown

[SwitchB-1-Ten-GigabitEthernet1/2/1] quit

[SwitchB-1] save

# 激活IRF端口下的配置。

[SwitchB-1] irf-port-configuration active

(3)     配置Switch B-2

# 配置Switch B-2的成员编号为2，并重启设备使新编号生效。。

<SwitchB-2> system-view

[SwitchB-2] irf member 1 renumber 2

Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y

[SwitchB-2] quit

<SwitchB-2> reboot

# 根据图4-1选定IRF物理端口并关闭这些端口。

[SwitchB-2] interface ten-gigabitethernet 2/2/1

[SwitchB-2-Ten-GigabitEthernet2/2/1] undo shutdown

[SwitchB-2-Ten-GigabitEthernet2/2/1] quit

# 配置IRF端口2/1，并将它与物理端口Ten-GigabitEthernet2/2/1绑定。

[SwitchB-2] irf-port 2/2

[SwitchB-2-irf-port2/2] port group interface ten-GigabitEthernet 2/2/1

[SwitchB-2-irf-port2/2] quit

# 开启IRF物理端口并保存配置。

[SwitchB-2] interface ten-GigabitEthernet 2/2/1

[SwitchB-2-Ten-GigabitEthernet2/2/1] undo shutdown

[SwitchB-2-Ten-GigabitEthernet2/2/1] quit

[SwitchB-2] save

# 激活IRF端口下的配置。

[SwitchB-2] irf-port-configuration active

(4)     配置IRF B的BFD MAD检测

# 更改IRF B的系统名称为“IRFB”，并设置IRF B域编号为2。

<SwitchB-1> system-view

[SwitchB-1] sysname IRFB

[IRFB] irf domain 2

# 更改IRF链路down延迟上报时间为0秒。

[IRFB] irf link-delay 0

# 创建VLAN 3，并将Switch B-1上的端口Ten-GigabitEthernet1/3/2和Swtich B-2上的端口Ten-GigabitEthernet2/3/2加入VLAN中。

[IRFB] vlan 3

[IRFB-vlan3] port ten-gigabitethernet 1/3/2 ten-gigabitethernet 2/3/2

[IRFB-vlan3] quit

# 创建VLAN接口3，并配置MAD IP地址。

[IRFB] interface vlan-interface 3

[IRFB-Vlan-interface3] mad bfd enable

[IRFB-Vlan-interface3] mad ip address 192.168.2.1 24 member 1

[IRFB-Vlan-interface3] mad ip address 192.168.2.2 24 member 2

[IRFB-Vlan-interface3] undo shutdown

[IRFB-Vlan-interface3] quit

# 由于BFD MAD与STP功能互斥，需要关闭接口上的STP功能。

[IRFB] interface range ten-gigabitethernet 1/3/2 ten-gigabitethernet 2/3/2

[IRFB-if-range] undo stp enable

[IRFB-if-range] undo shutdown

[IRFB-if-range] quit

(5)     配置IRF B上各接口的IP地址及路由协议

# 配置IRF B公网接口（即EVI边缘设备的公网接口）的IP地址，并配置Ten-GigabitEthernet1/3/1和Ten-GigabitEthernet2/3/1允许VLAN 10通过。

[IRFB] vlan 10

[IRFB-vlan10] quit

[IRFB] interface vlan-interface 10

[IRFB-Vlan-interface10] ip address 10.1.2.1 24

[IRFB-Vlan-interface10] undo shutdown

[IRFB-Vlan-interface10] quit

[IRFB] interface bridge-aggregation 1

[IRFB-Bridge-Aggregation1] link-aggregation mode dynamic

[IRFB-Bridge-Aggregation1] port access vlan 10

[IRFB-Bridge-Aggregation1] undo shutdown

[IRFB-Bridge-Aggregation1] quit

[IRFB] interface ten-gigabitethernet 1/3/1

[IRFB-Ten-GigabitEthernet1/3/1] undo shutdown

[IRFB-Ten-GigabitEthernet1/3/1] port link-aggregation group 1

[IRFB-Ten-GigabitEthernet1/3/1] quit

[IRFB] interface ten-gigabitethernet 2/3/1

[IRFB-Ten-GigabitEthernet2/3/1] undo shutdown

[IRFB-Ten-GigabitEthernet2/3/1] port link-aggregation group 1

[IRFB-Ten-GigabitEthernet2/3/1] quit

# 创建VLAN 1000。

[IRFB] vlan 1000

[IRFB-vlan1000] quit

# 创建连接公网的聚合组，编号为2，允许VLAN 1000通过。

[IRFB] interface bridge-aggregation 2

[IRFB-Bridge-Aggregation2] link-aggregation mode dynamic

[IRFB-Bridge-Aggregation2] port link-type trunk

[IRFB-Bridge-Aggregation2] port trunk permit vlan 1000

[IRFB-Bridge-Aggregation2] undo shutdown

[IRFB-Bridge-Aggregation2] quit

# 配置接口Ten-GigabitEthernet1/4/1和Ten-GigabitEthernet2/4/1加入聚合组2。

[IRFB] interface ten-gigabitethernet 1/4/1

[IRFB-Ten-GigabitEthernet1/4/1] port link-aggregation group 2

[IRFB-Ten-GigabitEthernet1/4/1] undo shutdown

[IRFB-Ten-GigabitEthernet1/4/1] quit

[IRFB] interface ten-gigabitethernet 2/4/1

[IRFB-Ten-GigabitEthernet2/4/1] port link-aggregation group 2

[IRFB-Ten-GigabitEthernet2/4/1] undo shutdown

[IRFB-Ten-GigabitEthernet2/4/1] quit

# 创建Loopback接口，作为EVI隧道的源接口。

[IRFB] interface loopback 0

[IRFB-LoopBack0] ip address 2.2.2.2 32

[IRFB-LoopBack0] quit

# 配置OSPF路由协议，发布公网路由。

[IRFB] ospf 1

[IRFB-ospf-1] area 0

[IRFB-ospf-1-area-0.0.0.0] network 10.1.2.0 0.0.0.255

[IRFB-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0

[IRFB-ospf-1-area-0.0.0.0] quit

[IRFB-ospf-1] quit

(6)     配置EVI隧道

# 建立EVI隧道。

[IRFB] interface Tunnel 1 mode evi

# 配置Tunnel1接口的源端地址为LoopBack0。

[IRFB-Tunnel1] source loopback 0

# 配置Tunnel1接口的Network ID。

[IRFB-Tunnel1] evi network-id 1

# 使能Tunnel1接口的ENDC功能，该ENDC对应的ENDS为IRF A。

[IRFB-Tunnel1] evi neighbor-discovery client enable 1.1.1.1

# 配置Tunnel1接口的扩展VLAN。

[IRFB-Tunnel1] evi extend-vlan 1000

# 配置选择性泛洪，使VRRP协议报文可以通过EVI隧道透传到对端，VRRP协议报文的MAC地址为0100-5e00-0012。

[IRFB-Tunnel1] evi selective-flooding mac-address 0100-5e00-0012 vlan 1000

[IRFB-Tunnel1] quit

# 在接入EVI网络的物理接口Ten-GigabitEthernet1/3/1和Ten-GigabitEthernet2/3/1上开启EVI功能，同时关闭接口上的STP功能。

[IRFB] interface ten-gigabitethernet 1/3/1

[IRFB-Ten-GigabitEthernet1/3/1] evi enable

[IRFB-Ten-GigabitEthernet1/3/1] undo stp enable

[IRFB-Ten-GigabitEthernet1/3/1] quit

[IRFB] interface ten-gigabitethernet 2/3/1

[IRFB-Ten-GigabitEthernet2/3/1] evi enable

[IRFB-Ten-GigabitEthernet2/3/1] undo stp enable

[IRFB-Ten-GigabitEthernet2/3/1] quit

4.5.4  配置网关CE B

(1)     配置CE B上各接口的IP地址及路由协议

# 配置CE B的公网接口。

<CEB> system-view

[CEB] vlan 11

[CEB-vlan11] quit

[CEB] interface vlan-interface 11

[CEB-Vlan-interface11] ip address 11.1.2.1 24

[CEB-Vlan-interface11] undo shutdown

[CEB-Vlan-interface11] quit

[CEB] interface ten-gigabitethernet 1/2/5

[CEB-Ten-GigabitEthernet1/2/5] port access vlan 11

[CEB-Ten-GigabitEthernet1/2/5] undo shutdown

[CEB-Ten-GigabitEthernet1/2/5] quit

# 配置OSPF路由协议，发布公网路由。

[CEB] ospf 1

[CEB-ospf-1] area 0

[CEB-ospf-1-area-0.0.0.0] network 11.1.2.0 0.0.0.255

[CEB-ospf-1-area-0.0.0.0] network 100.0.0.0 0.0.0.255

[CEB-ospf-1-area-0.0.0.0] quit

[CEB-ospf-1] quit

# 创建VLAN 1000，并配置接口Vlan-interface1000的IP地址。

[CEB] vlan 1000

[CEB-vlan1000] quit

[CEB] interface vlan-interface 1000

[CEB-Vlan-interface1000] ip address 100.0.0.2 24

[CEB-Vlan-interface1000] undo shutdown

[CEB-Vlan-interface1000] quit

# 配置CE B与IRF B相连的接口允许VLAN 1000通过。

[CEB] interface bridge-aggregation 2

[CEB-Bridge-Aggregation2] link-aggregation mode dynamic

[CEB-Bridge-Aggregation2] port link-type trunk

[CEB-Bridge-Aggregation2] port trunk permit vlan 1000

[CEB-Bridge-Aggregation2] quit

[CEB] interface ten-gigabitethernet 1/4/1

[CEB-Ten-GigabitEthernet1/4/1] port link-aggregation group 2

[CEB-Ten-GigabitEthernet1/4/1] undo shutdown

[CEB-Ten-GigabitEthernet1/4/1] quit

[CEB] interface ten-gigabitethernet 1/4/2

[CEB-Ten-GigabitEthernet1/4/2] port link-aggregation group 2

[CEB-Ten-GigabitEthernet1/4/2] undo shutdown

[CEB-Ten-GigabitEthernet1/4/2] quit

# 配置CE B与数据中心相连的接口允许VLAN 1000通过。

[CEB] interface ten-gigabitethernet 1/2/7

[CEB-Ten-GigabitEthernet1/2/7] port link-type trunk

[CEB-Ten-GigabitEthernet1/2/7] port trunk permit vlan 1000

[CEB-Ten-GigabitEthernet1/2/7] undo shutdown

[CEB] quit

(2)     配置CE B加入VRRP备份组

# 创建VRRP备份组1，使用虚拟IP地址100.0.0.254。

[CEB] interface vlan-interface 1000

[CEB-Vlan-interface1000] vrrp vrid 1 virtual-ip 100.0.0.254

[CEB-Vlan-interface1000] quit

4.6  验证配置

将Site 1中的某台服务器（IP地址为100.0.0.100，网关地址为100.0.0.254）迁移至Site 2中，从外网ping这台服务器（IP地址不变），仍然可以ping通。

C:\>ping 100.0.0.100

 

Pinging 100.0.0.100 with 32 bytes of data:

 

Reply from 100.0.0.100: bytes=32 time=1ms TTL=128

Reply from 100.0.0.100: bytes=32 time=37ms TTL=128

Reply from 100.0.0.100: bytes=32 time=1ms TTL=128

Reply from 100.0.0.100: bytes=32 time=1ms TTL=128

 

Ping statistics for 100.0.0.100:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 1ms, Maximum = 37ms, Average = 10ms

 

C:\>

 

4.7  配置文件

·     IRF A：

#

 sysname IRFA

#

 irf domain 1

 irf link-delay 0

#

vlan 1

#

vlan 3

#

vlan 10

#

vlan 1000

#

irf-port 1/2

 port group interface Ten-GigabitEthernet1/2/1

#

irf-port 2/1

 port group interface Ten-GigabitEthernet2/2/1

#

interface Bridge-Aggregation1

 port access vlan 10

 link-aggregation mode dynamic

#

interface Bridge-Aggregation2

 port link-type trunk

 port trunk permit vlan 1 1000

 link-aggregation mode dynamic

#

interface LoopBack0

 ip address 1.1.1.1 255.255.255.255

#

interface Vlan-interface3

 mad bfd enable

 mad ip address 192.168.2.1 255.255.255.0 member 1

 mad ip address 192.168.2.2 255.255.255.0 member 2

#

interface Vlan-interface10

 ip address 10.1.1.1 255.255.255.0

#

interface Ten-GigabitEthernet1/3/1

 port link-mode bridge

 port access vlan 10

 undo stp enable

 evi enable

 port link-aggregation group 1

#

interface Ten-GigabitEthernet1/3/2

 port link-mode bridge

 port access vlan 3

 undo stp enable

#

interface Ten-GigabitEthernet1/4/1

 port link-mode bridge

 port link-aggregation group 2

#

interface Ten-GigabitEthernet2/3/1

 port link-mode bridge

 port access vlan 10

 undo stp enable

 evi enable

 port link-aggregation group 1

#

interface Ten-GigabitEthernet2/3/2

 port link-mode bridge

 port access vlan 3

 undo stp enable

#

interface Ten-GigabitEthernet2/4/1

 port link-mode bridge

 port link-aggregation group 2

#

interface Tunnel1 mode evi

 evi selective-flooding mac-address 0100-5e00-0012 vlan 1000

 evi extend-vlan 1000

 source LoopBack0

 evi network-id 1

 evi neighbor-discovery server enable

#

ospf 1

 area 0.0.0.0

  network 1.1.1.1 0.0.0.0

  network 10.1.1.0 0.0.0.255

#

return

·     CE A：

#

 sysname CEA

#

vlan 1

#

vlan 11

#

vlan 1000

#

interface Bridge-Aggregation2

 port link-type trunk

 port trunk permit vlan 1 1000

 link-aggregation mode dynamic

#

interface Vlan-interface11

 ip address 11.1.1.1 255.255.255.0

#

interface Vlan-interface1000

 ip address 100.0.0.1 255.255.255.0

 vrrp vrid 1 virtual-ip 100.0.0.254

 vrrp vrid 1 priority 110

#

interface Ten-GigabitEthernet1/4/1

 port link-mode bridge

 port link-aggregation group 2

#

interface Ten-GigabitEthernet1/4/2

 port link-mode bridge

 port link-aggregation group 2

#

interface Ten-GigabitEthernet1/2/5

 port link-mode bridge

 port access vlan 11

#

interface Ten-GigabitEthernet1/2/7

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 1000

#

ospf 1

 area 0.0.0.0

  network 11.1.1.0 0.0.0.255

  network 100.0.0.0 0.0.0.255

#

return

·     IRF B：

#

 sysname IRFB

#

 irf domain 2

 irf link-delay 0

#

vlan 1

#

vlan 3

#

vlan 10

#

vlan 1000

#

irf-port 1/2

 port group interface Ten-GigabitEthernet1/2/1

#

irf-port 2/1

 port group interface Ten-GigabitEthernet2/2/1

#

interface Bridge-Aggregation1

 port access vlan 10

 link-aggregation mode dynamic

#

interface Bridge-Aggregation2

 port link-type trunk

 port trunk permit vlan 1 1000

 link-aggregation mode dynamic

#

interface LoopBack0

 ip address 2.2.2.2 255.255.255.255

#

interface Vlan-interface3

 mad bfd enable

 mad ip address 192.168.2.1 255.255.255.0 member 1

 mad ip address 192.168.2.2 255.255.255.0 member 2

#

interface Vlan-interface10

 ip address 10.1.2.1 255.255.255.0

#

interface Ten-GigabitEthernet1/3/1

 port link-mode bridge

 port access vlan 10

 undo stp enable

 evi enable

 port link-aggregation group 1

#

interface Ten-GigabitEthernet1/3/2

 port link-mode bridge

 port access vlan 3

 undo stp enable

#

interface Ten-GigabitEthernet1/4/1

 port link-mode bridge

 port link-aggregation group 2

#

interface Ten-GigabitEthernet2/3/1

 port link-mode bridge

 port access vlan 10

 undo stp enable

 evi enable

 port link-aggregation group 1

#

interface Ten-GigabitEthernet2/3/2

 port link-mode bridge

 port access vlan 3

 undo stp enable

#

interface Ten-GigabitEthernet2/4/1

 port link-mode bridge

 port link-aggregation group 2

#

interface Tunnel1 mode evi

 evi selective-flooding mac-address 0100-5e00-0012 vlan 1000

 evi extend-vlan 1000

 source LoopBack0

 evi network-id 1

 evi neighbor-discovery client enable 1.1.1.1

#

ospf 1

 area 0.0.0.0

  network 2.2.2.2 0.0.0.0

  network 10.1.2.0 0.0.0.255

#

return

·     CE B：

#

 sysname CEB

#

vlan 1

#

vlan 11

#

vlan 1000

#

interface Bridge-Aggregation2

 port link-type trunk

 port trunk permit vlan 1 1000

 link-aggregation mode dynamic

#

interface Vlan-interface11

 ip address 11.1.2.1 255.255.255.0

#

interface Vlan-interface1000

 ip address 100.0.0.2 255.255.255.0

 vrrp vrid 1 virtual-ip 100.0.0.254

#

interface Ten-GigabitEthernet1/2/5

 port link-mode bridge

 port access vlan 11

#

interface Ten-GigabitEthernet1/2/7

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 1000

#

interface Ten-GigabitEthernet1/4/1

 port link-mode bridge

 port link-aggregation group 2

#

interface Ten-GigabitEthernet1/4/2

 port link-mode bridge

 port link-aggregation group 2

#

ospf 1

 area 0.0.0.0

  network 11.1.2.0 0.0.0.255

  network 100.0.0.0 0.0.0.255

#

return

5 相关资料

·     H3C S7500E-XS系列交换机 EVI配置指导-R7536P05

·     H3C S7500E-XS系列交换机 EVI命令参考-R7536P05

·     H3C S7500E-XS系列交换机 虚拟化技术配置指导-R7536P05

·     H3C S7500E-XS系列交换机 虚拟化技术命令参考-R7536P05