01-H3C_EVI典型配置举例
本章节下载: 01-H3C_EVI典型配置举例 (394.64 KB)
H3C EVI配置举例
资料版本:6W100-20200330
产品版本:Release 7585P05
Copyright © 2020 新华三技术有限公司 版权所有,保留一切权利。
非经本公司书面许可,任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部,并不得以任何形式传播。
除新华三技术有限公司的商标外,本手册中出现的其它公司的商标、产品标识及商品名称,由各自权利人拥有。
本文档中的信息可能变动,恕不另行通知。
目? 录
本文档介绍了通过MDC实现EVI边缘设备与网关分离和通过IRF实现EVI边缘设备的冗余备份的配置举例。
EVI(Ethernet Virtualization Interconnect,以太网虚拟化互联)是一种基于“MAC in IP”的二层VPN技术,它可以基于现有服务提供商或企业的IP网络,为分散的物理站点提供二层互联功能。虚拟机能在不同站点之间自由迁移。
本文档中的配置均是在实验室环境下进行的配置和验证,配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置,为了保证配置效果,请确认现有配置和以下举例中的配置不冲突。
本文假设您已了解EVI、MDC和IRF特性。
· 本地EVI边缘设备不能作为对端数据中心的网关。
· EVI特性需要安装配套的License。
如图1所示,某公司由于用户数量急剧增加,公司网络部决定扩大数据中心规模,在两个不同的地区设立数据中心,并要求采用EVI技术实现数据中心的二层互通。具体要求如下:
· 数据中心之间VLAN 1000的业务流量通过运营商网络的三层IP网络实现二层互通;
· 不同数据中心之间的资源能动态调配和管理,数据业务和服务器能自由迁移,数据迁移过程对用户透明,并且迁移过程中不改变数据业务和服务器的IP地址(否则用户的访问流量会中断);
· 为提高EVI边缘设备的可靠性,要求使用IRF技术实现边缘设备的冗余,即使一台交换机出现故障,也不会影响整个数据中心的通信。
图1 通过IRF实现EVI边缘设备的冗余备份配置组网图
设备 |
接口 |
IP地址 |
设备 |
接口 |
IP地址 |
IRF A |
Loop0 |
1.1.1.1/32 |
IRFB |
Loop0 |
2.2.2.2/32 |
|
Vlan-int10 |
10.1.1.1/24 |
|
Vlan-int10 |
10.1.2.1/24 |
CE A |
Vlan-int11 |
11.1.1.1/24 |
CE B |
Vlan-int11 |
11.1.2.1/24 |
|
Vlan-int1000 |
100.0.0.1/24 |
|
Vlan-int1000 |
100.0.0.2/24 |
· 为实现两个数据中心之间VLAN 1000的二层互通,需要在IRF A和 IRF B之间建立EVI网络,并将VLAN 1000配置成扩展VLAN;
· 为实现当数据业务和服务器在迁移过程中无需修改网关地址,需要将数据中心Site1的网关CE A和Site2的网关CE B加入同一个VRRP备份组,两个数据中心使用同一个虚拟网关;
· 为实现CE A和CE B之间的VRRP协议报文能够透传,需要在IRF A和IRF B上配置选择性泛洪,允许VRRP的协议报文通过EVI网络传递到对端数据中心的网关。
· 为提供IRF链路的可靠性,需要分别在IRF上下行的链路上配置链路聚合功能。
· 同一个EVI网络实例中,所有的边缘设备必须配置相同的Netwok ID。但是,同一台边缘设备上的不同Tunnel接口必须配置不同的Netwok ID;
· 同一个EVI网络实例中的所有边缘设备上配置的扩展VLAN必须一致,否则可能会引起扩展VLAN中的数据泄露;
· 不同的EVI网络实例不能使用相同的扩展VLAN。
· 不能使用Vlan-interface1作为EVI边缘设备的公网接口;
· EVI扩展VLAN的VLAN接口不支持作为公网出接口。
(1) 请参考图1进行物理连线,确保IRF物理链路连接正确
(2) 配置Switch A-1
# 根据图1选定IRF物理端口并关闭这些端口。
<SwitchA-1> system-view
[SwitchA-1] interface ten-gigabitethernet 1/2/1
[SwitchA-1-Ten-GigabitEthernet1/2/1] shutdown
[SwitchA-1-Ten-GigabitEthernet1/2/1] quit
# 配置IRF端口1/2,并将它与物理端口Ten-GigabitEthernet1/2/1绑定。
[SwitchA-1] irf-port 1/2
[SwitchA-1-irf-port1/2] port group interface ten-gigabitethernet 1/2/1
[SwitchA-1-irf-port1/2] quit
# 开启IRF物理端口并保存配置。
[SwitchA-1] interface ten-gigabitethernet 1/2/1
[SwitchA-1-Ten-GigabitEthernet1/2/1] undo shutdown
[SwitchA-1-Ten-GigabitEthernet1/2/1] quit
[SwitchA-1] save
# 激活IRF端口下的配置。
[SwitchA-1] irf-port-configuration active
(3) 配置Switch A-2
# 配置Switch A-2的成员编号为2,并重启设备使新编号生效。
<SwitchA-2> system-view
[SwitchA-2] irf member 1 renumber 2
Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y
[SwitchA-2] quit
<SwitchA-2> reboot
# 根据图1选定IRF物理端口并关闭这些端口。
[SwitchA-2] interface ten-gigabitethernet 2/2/1
[SwitchA-2-Ten-GigabitEthernet2/2/1] shutdown
[SwitchA-2-Ten-GigabitEthernet2/2/1] quit
# 配置IRF端口2/1,并将它与物理端口Ten-GigabitEthernet1/2/1绑定。
[SwitchA-2] irf-port 1
[SwitchA-2-irf-port1] port group interface ten-gigabitethernet 2/2/1
[SwitchA-2-irf-port1] quit
# 开启IRF物理端口并保存配置。
[SwitchA-2] interface ten-gigabitethernet 2/2/1
[SwitchA-2-Ten-GigabitEthernet2/2/1] undo shutdown
[SwitchA-2-Ten-GigabitEthernet2/2/1] quit
[SwitchA-2] save
# 激活IRF端口下的配置。
[SwitchA-2] irf-port-configuration active
(4) 配置IRF A的BFD MAD检测
# 更改IRF A的系统名称为“IRFA”,并设置IRF A域编号为1。
<SwitchA-1> system-view
[SwitchA-1] sysname IRFA
[IRFA] irf domain 1
# 更改IRF链路down延迟上报时间为0秒。
[IRFA] irf link-delay 0
# 创建VLAN 3,并将Switch A-1上的端口Ten-GigabitEthernet1/3/2和Swtich A-2上的端口Ten-GigabitEthernet2/3/2加入VLAN中。
[IRFA] vlan 3
[IRFA-vlan3] port ten-gigabitethernet 1/3/2 ten-gigabitethernet 2/3/2
[IRFA-vlan3] quit
# 创建VLAN接口3,并配置MAD IP地址。
[IRFA] interface vlan-interface 3
[IRFA-Vlan-interface3] mad bfd enable
[IRFA-Vlan-interface3] mad ip address 192.168.2.1 24 member 1
[IRFA-Vlan-interface3] mad ip address 192.168.2.2 24 member 2
[IRFA-Vlan-interface3] undo shutdown
[IRFA-Vlan-interface3] quit
# 由于BFD MAD与STP功能互斥,需要关闭接口上的STP功能。
[IRFA] interface range ten-gigabitethernet 1/3/2 ten-gigabitethernet 2/3/2
[IRFA-if-range] undo stp enable
[IRFA-if-range] undo shutdown
[IRFA-if-range] quit
(5) 配置IRF A上各接口的IP地址及路由协议
# 配置IRF A公网接口(即EVI边缘设备的公网接口)的IP地址,并配置Ten-GigabitEthernet1/3/1和Ten-GigabitEthernet2/3/1允许VLAN 10通过。
[IRFA] vlan 10
[IRFA-vlan10] quit
[IRFA] interface vlan-interface 10
[IRFA-Vlan-interface10] ip address 10.1.1.1 24
[IRFA-Vlan-interface10] undo shutdown
[IRFA-Vlan-interface10] quit
[IRFA] interface bridge-aggregation 1
[IRFA-Bridge-Aggregation1] link-aggregation mode dynamic
[IRFA-Bridge-Aggregation1] port access vlan 10
[IRFA-Bridge-Aggregation1] undo shutdown
[IRFA-Bridge-Aggregation1] quit
[IRFA] interface ten-gigabitethernet 1/3/1
[IRFA-Ten-GigabitEthernet1/3/1] undo shutdown
[IRFA-Ten-GigabitEthernet1/3/1] port link-aggregation group 1
[IRFA-Ten-GigabitEthernet1/3/1] quit
[IRFA] interface ten-gigabitethernet 2/3/1
[IRFA-Ten-GigabitEthernet2/3/1] undo shutdown
[IRFA-Ten-GigabitEthernet2/3/1] port link-aggregation group 1
[IRFA-Ten-GigabitEthernet2/3/1] quit
# 创建VLAN 1000。
[IRFA] vlan 1000
[IRFA-vlan1000] quit
# 创建连接公网的聚合组,编号为2,允许VLAN 1000通过。
[IRFA] interface bridge-aggregation 2
[IRFA-Bridge-Aggregation2] link-aggregation mode dynamic
[IRFA-Bridge-Aggregation2] port link-type trunk
[IRFA-Bridge-Aggregation2] port trunk permit vlan 1000
[IRFA-Bridge-Aggregation2] undo shutdown
[IRFA-Bridge-Aggregation2] quit
# 配置接口Ten-GigabitEthernet1/4/1和Ten-GigabitEthernet2/4/1加入聚合组2。
[IRFA] interface ten-gigabitethernet 1/4/1
[IRFA-Ten-GigabitEthernet1/4/1] port link-aggregation group 2
[IRFA-Ten-GigabitEthernet1/4/1] undo shutdown
[IRFA-Ten-GigabitEthernet1/4/1] quit
[IRFA] interface ten-gigabitethernet 2/4/1
[IRFA-Ten-GigabitEthernet2/4/1] port link-aggregation group 2
[IRFA-Ten-GigabitEthernet2/4/1] undo shutdown
[IRFA-Ten-GigabitEthernet2/4/1] quit
# 创建Loopback接口,作为EVI隧道的源接口。
[IRFA] interface loopback 0
[IRFA-LoopBack0] ip address 1.1.1.1 32
[IRFA-LoopBack0] quit
# 配置OSPF路由协议,发布公网路由。
[IRFA] ospf 1
[IRFA-ospf-1] area 0
[IRFA-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.255
[IRFA-ospf-1-area-0.0.0.0] network 1.1.1.1 0.0.0.0
[IRFA-ospf-1-area-0.0.0.0] quit
[IRFA-ospf-1] quit
(6) 配置EVI隧道
# 建立EVI隧道。
[IRFA] interface Tunnel 1 mode evi
# 配置Tunnel1接口的源端地址为LoopBack0。
[IRFA-Tunnel1] source loopback 0
# 配置Tunnel1接口的Network ID。
[IRFA-Tunnel1] evi network-id 1
# 使能Tunnel1接口的ENDS功能。
[IRFA-Tunnel1] evi neighbor-discovery server enable
# 配置Tunnel1接口的扩展VLAN。
[IRFA-Tunnel1] evi extend-vlan 1000
# 配置选择性泛洪,使VRRP协议报文可以通过EVI隧道透传到对端,VRRP协议报文的MAC地址为0100-5e00-0012。
[IRFA-Tunnel1] evi selective-flooding mac-address 0100-5e00-0012 vlan 1000
[IRFA-Tunnel1] quit
# 在接入EVI网络的物理接口Ten-GigabitEthernet1/3/1和Ten-GigabitEthernet2/3/1上开启EVI功能,同时关闭接口上的STP功能。
[IRFA] interface ten-gigabitethernet 1/3/1
[IRFA-Ten-GigabitEthernet1/3/1] evi enable
[IRFA-Ten-GigabitEthernet1/3/1] undo stp enable
[IRFA-Ten-GigabitEthernet1/3/1] quit
[IRFA] interface ten-gigabitethernet 2/3/1
[IRFA-Ten-GigabitEthernet2/3/1] evi enable
[IRFA-Ten-GigabitEthernet2/3/1] undo stp enable
[IRFA-Ten-GigabitEthernet2/3/1] quit
(1) 配置CE A上各接口的IP地址及路由协议
# 配置CE A的公网接口。
<CEA> system-view
[CEA] vlan 11
[CEA-vlan11] quit
[CEA] interface vlan-interface 11
[CEA-Vlan-interface11] ip address 11.1.1.1 24
[CEA-Vlan-interface11] undo shutdown
[CEA-Vlan-interface11] quit
[CEA] interface ten-gigabitethernet 1/2/5
[CEA-Ten-GigabitEthernet1/2/5] port access vlan 11
[CEA-Ten-GigabitEthernet1/2/5] undo shutdown
[CEA-Ten-GigabitEthernet1/2/5] quit
# 配置OSPF路由协议,发布公网路由。
[CEA] ospf 1
[CEA-ospf-1] area 0
[CEA-ospf-1-area-0.0.0.0] network 11.1.1.0 0.0.0.255
[CEA-ospf-1-area-0.0.0.0] network 100.0.0.0 0.0.0.255
[CEA-ospf-1-area-0.0.0.0] quit
[CEA-ospf-1] quit
# 创建VLAN 1000,并配置接口Vlan-interface1000的IP地址。
[CEA] vlan 1000
[CEA-vlan1000] quit
[CEA] interface vlan-interface 1000
[CEA-Vlan-interface1000] ip address 100.0.0.1 24
[CEA-Vlan-interface1000] undo shutdown
[CEA-Vlan-interface1000] quit
# 配置CE A与IRF A相连的接口允许VLAN 1000通过。
[CEA] interface bridge-aggregation 2
[CEA-Bridge-Aggregation2] link-aggregation mode dynamic
[CEA-Bridge-Aggregation2] port link-type trunk
[CEA-Bridge-Aggregation2] port trunk permit vlan 1000
[CEA-Bridge-Aggregation2] quit
[CEA] interface ten-gigabitethernet 1/4/1
[CEA-Ten-GigabitEthernet1/4/1] port link-aggregation group 2
[CEA-Ten-GigabitEthernet1/4/1] undo shutdown
[CEA-Ten-GigabitEthernet1/4/1] quit
[CEA] interface ten-gigabitethernet 1/4/2
[CEA-Ten-GigabitEthernet1/4/2] port link-aggregation group 2
[CEA-Ten-GigabitEthernet1/4/2] undo shutdown
[CEA-Ten-GigabitEthernet1/4/2] quit
# 配置CE A与数据中心相连的接口允许VLAN 1000通过。
[CEA] interface ten-gigabitethernet 1/2/7
[CEA-Ten-GigabitEthernet1/2/7] port link-type trunk
[CEA-Ten-GigabitEthernet1/2/7] port trunk permit vlan 1000
[CEA-Ten-GigabitEthernet1/2/7] undo shutdown
[CEA] quit
(2) 配置CE A加入VRRP备份组
# 创建VRRP备份组1,使用虚拟IP地址100.0.0.254。
[CEA] interface vlan-interface 1000
[CEA-Vlan-interface1000] vrrp vrid 1 virtual-ip 100.0.0.254
# 为使CE A成为Master,配置CE A在备份组中的优先级为110,高于CE B采用的缺省优先级100。
[CEA-Vlan-interface1000] vrrp vrid 1 priority 110
[CEA-Vlan-interface1000] quit
(1) 请参考图1进行物理连线,确保IRF物理链路连接正确
(2) 配置Switch B-1
# 根据图1选定IRF物理端口并关闭这些端口。
<SwitchB-1> system-view
[SwitchB-1] interface ten-gigabitethernet 1/2/1
[SwitchB-1-Ten-GigabitEthernet1/2/1] shutdown
[SwitchB-1-Ten-GigabitEthernet1/2/1] quit
# 配置IRF端口1/2,并将它与物理端口Ten-GigabitEthernet1/2/1绑定。
[SwitchB-1] irf-port 1/2
[SwitchB-1-irf-port1/2] port group interface ten-GigabitEthernet 1/2/1
[SwitchB-1-irf-port1/2] quit
# 开启IRF物理端口并保存配置。
[SwitchB-1] interface ten-GigabitEthernet 1/2/1
[SwitchB-1-Ten-GigabitEthernet1/2/1] undo shutdown
[SwitchB-1-Ten-GigabitEthernet1/2/1] quit
[SwitchB-1] save
# 激活IRF端口下的配置。
[SwitchB-1] irf-port-configuration active
(3) 配置Switch B-2
# 配置Switch B-2的成员编号为2,并重启设备使新编号生效。。
<SwitchB-2> system-view
[SwitchB-2] irf member 1 renumber 2
Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y
[SwitchB-2] quit
<SwitchB-2> reboot
# 根据图1选定IRF物理端口并关闭这些端口。
[SwitchB-2] interface ten-gigabitethernet 2/2/1
[SwitchB-2-Ten-GigabitEthernet2/2/1] undo shutdown
[SwitchB-2-Ten-GigabitEthernet2/2/1] quit
# 配置IRF端口2/1,并将它与物理端口Ten-GigabitEthernet2/2/1绑定。
[SwitchB-2] irf-port 2/2
[SwitchB-2-irf-port2/2] port group interface ten-GigabitEthernet 2/2/1
[SwitchB-2-irf-port2/2] quit
# 开启IRF物理端口并保存配置。
[SwitchB-2] interface ten-GigabitEthernet 2/2/1
[SwitchB-2-Ten-GigabitEthernet2/2/1] undo shutdown
[SwitchB-2-Ten-GigabitEthernet2/2/1] quit
[SwitchB-2] save
# 激活IRF端口下的配置。
[SwitchB-2] irf-port-configuration active
(4) 配置IRF B的BFD MAD检测
# 更改IRF B的系统名称为“IRFB”,并设置IRF B域编号为2。
<SwitchB-1> system-view
[SwitchB-1] sysname IRFB
[IRFB] irf domain 2
# 更改IRF链路down延迟上报时间为0秒。
[IRFB] irf link-delay 0
# 创建VLAN 3,并将Switch B-1上的端口Ten-GigabitEthernet1/3/2和Swtich B-2上的端口Ten-GigabitEthernet2/3/2加入VLAN中。
[IRFB] vlan 3
[IRFB-vlan3] port ten-gigabitethernet 1/3/2 ten-gigabitethernet 2/3/2
[IRFB-vlan3] quit
# 创建VLAN接口3,并配置MAD IP地址。
[IRFB] interface vlan-interface 3
[IRFB-Vlan-interface3] mad bfd enable
[IRFB-Vlan-interface3] mad ip address 192.168.2.1 24 member 1
[IRFB-Vlan-interface3] mad ip address 192.168.2.2 24 member 2
[IRFB-Vlan-interface3] undo shutdown
[IRFB-Vlan-interface3] quit
# 由于BFD MAD与STP功能互斥,需要关闭接口上的STP功能。
[IRFB] interface range ten-gigabitethernet 1/3/2 ten-gigabitethernet 2/3/2
[IRFB-if-range] undo stp enable
[IRFB-if-range] undo shutdown
[IRFB-if-range] quit
(5) 配置IRF B上各接口的IP地址及路由协议
# 配置IRF B公网接口(即EVI边缘设备的公网接口)的IP地址,并配置Ten-GigabitEthernet1/3/1和Ten-GigabitEthernet2/3/1允许VLAN 10通过。
[IRFB] vlan 10
[IRFB-vlan10] quit
[IRFB] interface vlan-interface 10
[IRFB-Vlan-interface10] ip address 10.1.2.1 24
[IRFB-Vlan-interface10] undo shutdown
[IRFB-Vlan-interface10] quit
[IRFB] interface bridge-aggregation 1
[IRFB-Bridge-Aggregation1] link-aggregation mode dynamic
[IRFB-Bridge-Aggregation1] port access vlan 10
[IRFB-Bridge-Aggregation1] undo shutdown
[IRFB-Bridge-Aggregation1] quit
[IRFB] interface ten-gigabitethernet 1/3/1
[IRFB-Ten-GigabitEthernet1/3/1] undo shutdown
[IRFB-Ten-GigabitEthernet1/3/1] port link-aggregation group 1
[IRFB-Ten-GigabitEthernet1/3/1] quit
[IRFB] interface ten-gigabitethernet 2/3/1
[IRFB-Ten-GigabitEthernet2/3/1] undo shutdown
[IRFB-Ten-GigabitEthernet2/3/1] port link-aggregation group 1
[IRFB-Ten-GigabitEthernet2/3/1] quit
# 创建VLAN 1000。
[IRFB] vlan 1000
[IRFB-vlan1000] quit
# 创建连接公网的聚合组,编号为2,允许VLAN 1000通过。
[IRFB] interface bridge-aggregation 2
[IRFB-Bridge-Aggregation2] link-aggregation mode dynamic
[IRFB-Bridge-Aggregation2] port link-type trunk
[IRFB-Bridge-Aggregation2] port trunk permit vlan 1000
[IRFB-Bridge-Aggregation2] undo shutdown
[IRFB-Bridge-Aggregation2] quit
# 配置接口Ten-GigabitEthernet1/4/1和Ten-GigabitEthernet2/4/1加入聚合组2。
[IRFB] interface ten-gigabitethernet 1/4/1
[IRFB-Ten-GigabitEthernet1/4/1] port link-aggregation group 2
[IRFB-Ten-GigabitEthernet1/4/1] undo shutdown
[IRFB-Ten-GigabitEthernet1/4/1] quit
[IRFB] interface ten-gigabitethernet 2/4/1
[IRFB-Ten-GigabitEthernet2/4/1] port link-aggregation group 2
[IRFB-Ten-GigabitEthernet2/4/1] undo shutdown
[IRFB-Ten-GigabitEthernet2/4/1] quit
# 创建Loopback接口,作为EVI隧道的源接口。
[IRFB] interface loopback 0
[IRFB-LoopBack0] ip address 2.2.2.2 32
[IRFB-LoopBack0] quit
# 配置OSPF路由协议,发布公网路由。
[IRFB] ospf 1
[IRFB-ospf-1] area 0
[IRFB-ospf-1-area-0.0.0.0] network 10.1.2.0 0.0.0.255
[IRFB-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0
[IRFB-ospf-1-area-0.0.0.0] quit
[IRFB-ospf-1] quit
(6) 配置EVI隧道
# 建立EVI隧道。
[IRFB] interface Tunnel 1 mode evi
# 配置Tunnel1接口的源端地址为LoopBack0。
[IRFB-Tunnel1] source loopback 0
# 配置Tunnel1接口的Network ID。
[IRFB-Tunnel1] evi network-id 1
# 使能Tunnel1接口的ENDC功能,该ENDC对应的ENDS为IRF A。
[IRFB-Tunnel1] evi neighbor-discovery client enable 1.1.1.1
# 配置Tunnel1接口的扩展VLAN。
[IRFB-Tunnel1] evi extend-vlan 1000
# 配置选择性泛洪,使VRRP协议报文可以通过EVI隧道透传到对端,VRRP协议报文的MAC地址为0100-5e00-0012。
[IRFB-Tunnel1] evi selective-flooding mac-address 0100-5e00-0012 vlan 1000
[IRFB-Tunnel1] quit
# 在接入EVI网络的物理接口Ten-GigabitEthernet1/3/1和Ten-GigabitEthernet2/3/1上开启EVI功能,同时关闭接口上的STP功能。
[IRFB] interface ten-gigabitethernet 1/3/1
[IRFB-Ten-GigabitEthernet1/3/1] evi enable
[IRFB-Ten-GigabitEthernet1/3/1] undo stp enable
[IRFB-Ten-GigabitEthernet1/3/1] quit
[IRFB] interface ten-gigabitethernet 2/3/1
[IRFB-Ten-GigabitEthernet2/3/1] evi enable
[IRFB-Ten-GigabitEthernet2/3/1] undo stp enable
[IRFB-Ten-GigabitEthernet2/3/1] quit
(1) 配置CE B上各接口的IP地址及路由协议
# 配置CE B的公网接口。
<CEB> system-view
[CEB] vlan 11
[CEB-vlan11] quit
[CEB] interface vlan-interface 11
[CEB-Vlan-interface11] ip address 11.1.2.1 24
[CEB-Vlan-interface11] undo shutdown
[CEB-Vlan-interface11] quit
[CEB] interface ten-gigabitethernet 1/2/5
[CEB-Ten-GigabitEthernet1/2/5] port access vlan 11
[CEB-Ten-GigabitEthernet1/2/5] undo shutdown
[CEB-Ten-GigabitEthernet1/2/5] quit
# 配置OSPF路由协议,发布公网路由。
[CEB] ospf 1
[CEB-ospf-1] area 0
[CEB-ospf-1-area-0.0.0.0] network 11.1.2.0 0.0.0.255
[CEB-ospf-1-area-0.0.0.0] network 100.0.0.0 0.0.0.255
[CEB-ospf-1-area-0.0.0.0] quit
[CEB-ospf-1] quit
# 创建VLAN 1000,并配置接口Vlan-interface1000的IP地址。
[CEB] vlan 1000
[CEB-vlan1000] quit
[CEB] interface vlan-interface 1000
[CEB-Vlan-interface1000] ip address 100.0.0.2 24
[CEB-Vlan-interface1000] undo shutdown
[CEB-Vlan-interface1000] quit
# 配置CE B与IRF B相连的接口允许VLAN 1000通过。
[CEB] interface bridge-aggregation 2
[CEB-Bridge-Aggregation2] link-aggregation mode dynamic
[CEB-Bridge-Aggregation2] port link-type trunk
[CEB-Bridge-Aggregation2] port trunk permit vlan 1000
[CEB-Bridge-Aggregation2] quit
[CEB] interface ten-gigabitethernet 1/4/1
[CEB-Ten-GigabitEthernet1/4/1] port link-aggregation group 2
[CEB-Ten-GigabitEthernet1/4/1] undo shutdown
[CEB-Ten-GigabitEthernet1/4/1] quit
[CEB] interface ten-gigabitethernet 1/4/2
[CEB-Ten-GigabitEthernet1/4/2] port link-aggregation group 2
[CEB-Ten-GigabitEthernet1/4/2] undo shutdown
[CEB-Ten-GigabitEthernet1/4/2] quit
# 配置CE B与数据中心相连的接口允许VLAN 1000通过。
[CEB] interface ten-gigabitethernet 1/2/7
[CEB-Ten-GigabitEthernet1/2/7] port link-type trunk
[CEB-Ten-GigabitEthernet1/2/7] port trunk permit vlan 1000
[CEB-Ten-GigabitEthernet1/2/7] undo shutdown
[CEB] quit
(2) 配置CE B加入VRRP备份组
# 创建VRRP备份组1,使用虚拟IP地址100.0.0.254。
[CEB] interface vlan-interface 1000
[CEB-Vlan-interface1000] vrrp vrid 1 virtual-ip 100.0.0.254
[CEB-Vlan-interface1000] quit
将Site 1中的某台服务器(IP地址为100.0.0.100,网关地址为100.0.0.254)迁移至Site 2中,从外网ping这台服务器(IP地址不变),仍然可以ping通。
C:\>ping 100.0.0.100
Pinging 100.0.0.100 with 32 bytes of data:
Reply from 100.0.0.100: bytes=32 time=1ms TTL=128
Reply from 100.0.0.100: bytes=32 time=37ms TTL=128
Reply from 100.0.0.100: bytes=32 time=1ms TTL=128
Reply from 100.0.0.100: bytes=32 time=1ms TTL=128
Ping statistics for 100.0.0.100:
??? Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
??? Minimum = 1ms, Maximum = 37ms, Average = 10ms
C:\>
· IRF A:
#
?sysname IRFA
#
?irf domain 1
?irf link-delay 0
#
vlan 1
#
vlan 3
#
vlan 10
#
vlan 1000
#
irf-port 1/2
?port group interface Ten-GigabitEthernet1/2/1
#
irf-port 2/1
?port group interface Ten-GigabitEthernet2/2/1
#
interface Bridge-Aggregation1
?port access vlan 10
?link-aggregation mode dynamic
#
interface Bridge-Aggregation2
?port link-type trunk
?port trunk permit vlan 1 1000
?link-aggregation mode dynamic
#
interface LoopBack0
?ip address 1.1.1.1 255.255.255.255
#
interface Vlan-interface3
?mad bfd enable
?mad ip address 192.168.2.1 255.255.255.0 member 1
?mad ip address 192.168.2.2 255.255.255.0 member 2
#
interface Vlan-interface10
?ip address 10.1.1.1 255.255.255.0
#
interface Ten-GigabitEthernet1/3/1
?port link-mode bridge
?port access vlan 10
?undo stp enable
?evi enable
?port link-aggregation group 1
#
interface Ten-GigabitEthernet1/3/2
?port link-mode bridge
?port access vlan 3
?undo stp enable
#
interface Ten-GigabitEthernet1/4/1
?port link-mode bridge
?port link-aggregation group 2
#
interface Ten-GigabitEthernet2/3/1
?port link-mode bridge
?port access vlan 10
?undo stp enable
?evi enable
?port link-aggregation group 1
#
interface Ten-GigabitEthernet2/3/2
?port link-mode bridge
?port access vlan 3
?undo stp enable
#
interface Ten-GigabitEthernet2/4/1
?port link-mode bridge
?port link-aggregation group 2
#
interface Tunnel1 mode evi
?evi selective-flooding mac-address 0100-5e00-0012 vlan 1000
?evi extend-vlan 1000
?source LoopBack0
?evi network-id 1
?evi neighbor-discovery server enable
#
ospf 1
?area 0.0.0.0
? network 1.1.1.1 0.0.0.0
? network 10.1.1.0 0.0.0.255
#
return
· CE A:
#
?sysname CEA
#
vlan 1
#
vlan 11
#
vlan 1000
#
interface Bridge-Aggregation2
?port link-type trunk
?port trunk permit vlan 1 1000
?link-aggregation mode dynamic
#
interface Vlan-interface11
?ip address 11.1.1.1 255.255.255.0
#
interface Vlan-interface1000
?ip address 100.0.0.1 255.255.255.0
?vrrp vrid 1 virtual-ip 100.0.0.254
?vrrp vrid 1 priority 110
#
interface Ten-GigabitEthernet1/4/1
?port link-mode bridge
?port link-aggregation group 2
#
interface Ten-GigabitEthernet1/4/2
?port link-mode bridge
?port link-aggregation group 2
#
interface Ten-GigabitEthernet1/2/5
?port link-mode bridge
?port access vlan 11
#
interface Ten-GigabitEthernet1/2/7
?port link-mode bridge
?port link-type trunk
?port trunk permit vlan 1 1000
#
ospf 1
?area 0.0.0.0
? network 11.1.1.0 0.0.0.255
? network 100.0.0.0 0.0.0.255
#
return
· IRF B:
#
?sysname IRFB
#
?irf domain 2
?irf link-delay 0
#
vlan 1
#
vlan 3
#
vlan 10
#
vlan 1000
#
irf-port 1/2
?port group interface Ten-GigabitEthernet1/2/1
#
irf-port 2/1
?port group interface Ten-GigabitEthernet2/2/1
#
interface Bridge-Aggregation1
?port access vlan 10
?link-aggregation mode dynamic
#
interface Bridge-Aggregation2
?port link-type trunk
?port trunk permit vlan 1 1000
?link-aggregation mode dynamic
#
interface LoopBack0
?ip address 2.2.2.2 255.255.255.255
#
interface Vlan-interface3
?mad bfd enable
?mad ip address 192.168.2.1 255.255.255.0 member 1
?mad ip address 192.168.2.2 255.255.255.0 member 2
#
interface Vlan-interface10
?ip address 10.1.2.1 255.255.255.0
#
interface Ten-GigabitEthernet1/3/1
?port link-mode bridge
?port access vlan 10
?undo stp enable
?evi enable
?port link-aggregation group 1
#
interface Ten-GigabitEthernet1/3/2
?port link-mode bridge
?port access vlan 3
?undo stp enable
#
interface Ten-GigabitEthernet1/4/1
?port link-mode bridge
?port link-aggregation group 2
#
interface Ten-GigabitEthernet2/3/1
?port link-mode bridge
?port access vlan 10
?undo stp enable
?evi enable
?port link-aggregation group 1
#
interface Ten-GigabitEthernet2/3/2
?port link-mode bridge
?port access vlan 3
?undo stp enable
#
interface Ten-GigabitEthernet2/4/1
?port link-mode bridge
?port link-aggregation group 2
#
interface Tunnel1 mode evi
?evi selective-flooding mac-address 0100-5e00-0012 vlan 1000
?evi extend-vlan 1000
?source LoopBack0
?evi network-id 1
?evi neighbor-discovery client enable 1.1.1.1
#
ospf 1
?area 0.0.0.0
? network 2.2.2.2 0.0.0.0
? network 10.1.2.0 0.0.0.255
#
return
· CE B:
#
?sysname CEB
#
vlan 1
#
vlan 11
#
vlan 1000
#
interface Bridge-Aggregation2
?port link-type trunk
?port trunk permit vlan 1 1000
?link-aggregation mode dynamic
#
interface Vlan-interface11
?ip address 11.1.2.1 255.255.255.0
#
interface Vlan-interface1000
?ip address 100.0.0.2 255.255.255.0
?vrrp vrid 1 virtual-ip 100.0.0.254
#
interface Ten-GigabitEthernet1/2/5
?port link-mode bridge
?port access vlan 11
#
interface Ten-GigabitEthernet1/2/7
?port link-mode bridge
?port link-type trunk
?port trunk permit vlan 1 1000
#
interface Ten-GigabitEthernet1/4/1
?port link-mode bridge
?port link-aggregation group 2
#
interface Ten-GigabitEthernet1/4/2
?port link-mode bridge
?port link-aggregation group 2
#
ospf 1
?area 0.0.0.0
? network 11.1.2.0 0.0.0.255
? network 100.0.0.0 0.0.0.255
#
return
· H3C S7500E-XS系列交换机 EVI配置指导-R758X
· H3C S7500E-XS系列交换机 EVI命令参考-R758X
· H3C S7500E-XS系列交换机 虚拟化技术配置指导-R758X
· H3C S7500E-XS系列交换机 虚拟化技术命令参考-R758X
不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!