02-Virtual Technologies Command Reference

HomeSupportReference GuidesCommand ReferencesH3C SecPath Firewall Series Command References(V7)-6W40202-Virtual Technologies Command Reference
01-IRF commands
Title Size Download
01-IRF commands 183.08 KB

IRF commands

The following compatibility matrix shows the support of hardware platforms for IRF:

 

Hardware

IRF compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

All IRF commands are available only on the default context, except for the commands in Table 1.

Table 1 IRF commands available on both default and non-default contexts

Command category

Commands

Display commands

display irf link

display mad

MAD commands

mad arp enable

mad enable

mad exclude interface

mad nd enable

For more information about contexts, see Virtual Technologies Configuration Guide.

display irf

Use display irf to display IRF fabric information.

Syntax

display irf

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display IRF fabric information.

<Sysname> display irf

MemberID   Role     Priority    CPU-Mac           Description

   1       Loading  1           00e0-fcbe-3102    F1Num001

 *+2       Master   1           00e0-fcb1-ade2    F1Num002

--------------------------------------------------------

 

 * indicates the device is the master.

 + indicates the device through which the user logs in.

 

 The Bridge MAC of the IRF is: 00e0-fc00-1000

 Auto upgrade                   : yes

 Mac persistent                 : always

 Domain ID                      : 30

Table 2 Command output

Field

Description

MemberID

IRF member ID:

·     ID of the master is prefixed with an asterisk (*) sign.

·     ID of the device where you are logged in is prefixed with a plus (+) sign.

Role

Role of the member device in the IRF fabric:

·     Standby—Subordinate device.

·     Master—Master device.

·     Loading—The device is loading software images.

Priority

IRF member priority.

CPU-MAC

MAC address of the CPU in the device.

Description

Description you have configured for the member device.

·     If no description is configured, this field displays a dashed line (-----).

·     If the description exceeds the maximum number of characters that can be displayed, an ellipsis (…) is displayed in place of the exceeding text. To display the complete description, use the display current-configuration command.

Auto upgrade

Status of the software auto-update feature:

·     yes—Enabled.

·     no—Disabled.

MAC persistent

IRF bridge MAC persistence setting:

·     6 min—Bridge MAC address of the IRF fabric remains unchanged for 6 minutes after the address owner leaves.

·     always—Bridge MAC address of the IRF fabric does not change after the address owner leaves.

·     no—Bridge MAC address of the current master replaces the original bridge MAC address as soon as the owner of the original address leaves.

Domain ID

Domain ID of the IRF fabric. The domain ID you assign to an IRF fabric must uniquely identify the fabric in a multi-IRF fabric network.

Related commands

display irf configuration

display irf topology

display irf configuration

Use display irf configuration to display the basic IRF settings of each member device.

Syntax

display irf configuration

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the basic IRF settings of all members.

<Sysname> display irf configuration

 MemberID  NewID    IRF-Port1                   IRF-Port2

 1         1        Ten-GigabitEthernet1/0/1    Ten-GigabitEthernet1/0/2

 2         2        Ten-GigabitEthernet2/0/1    Ten-GigabitEthernet2/0/2

Table 3 Command output

Field

Description

MemberID

Current member ID of the device.

NewID

Member ID assigned to the device. This member ID takes effect at reboot.

IRF-Port1

Physical interfaces bound to IRF-port 1.

This field displays disable if no physical interfaces are bound to the IRF port.

IRF-Port2

Physical interfaces bound to IRF-port 2.

This field displays disable if no physical interfaces are bound to the IRF port.

 

Related commands

display irf

display irf topology

display irf link

Use display irf link to display IRF link information.

Syntax

display irf link

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Examples

# Display IRF link information.

<Sysname> display irf link

Member 1

 IRF Port    Interface                           Status

 1           disable                             --

 2           Ten-GigabitEthernet1/0/1            UP

             Ten-GigabitEthernet1/0/2            ADM

             Ten-GigabitEthernet1/0/3            DOWN

Member 2

 IRF Port    Interface                           Status

 1           Ten-GigabitEthernet2/0/1            UP

             Ten-GigabitEthernet2/0/2            DOWN

             Ten-GigabitEthernet2/0/3            ADM

 2           disable                             --

Table 4 Command output

Field

Description

Member ID

IRF member ID.

IRF Port

IRF port number:

·     1—IRF-port 1.

·     2—IRF-port 2.

Interface

Physical interfaces bound to the IRF port. This field displays disable if no physical interfaces have been bound to the IRF port.

Status

Link state of the IRF physical interface:

·     UP—The link is up.

·     DOWN—The link is down.

·     ADM—The interface has been manually shut down by using the shutdown command.

·     ABSENT—Interface module or expansion interface card that hosts the interface is not present.

 

display irf topology

Use display irf topology to display IRF fabric topology information.

Syntax

display irf topology

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the IRF fabric topology.

<Sysname> display irf topology

                           Topology Info

 -------------------------------------------------------------------------

               IRF-Port1                  IRF-Port2

 MemberID   Link        neighbor      Link        neighbor     Belong To

 1          DOWN        ---           UP          2            000f-cbb8-1a82

 2          UP          1             DIS         ---          000f-cbb8-1a82

Table 5 Command output

Field

Description

IRF-Port1

Information about IRF-port 1, including its link state and neighbor.

IRF-Port2

Information about IRF-port 2, including its link state and neighbor.

MemberID

IRF member ID.

Link

Link state of the IRF port:

·     UP—The IRF link is up.

·     DOWN—The IRF link is down because the port has no physical link or has not been activated by the irf-port-configuration active command.

·     DIS—No physical interfaces have been bound to the IRF port.

·     TIMEOUT—IRF hello interval has timed out.

·     ISOLATE—The device is isolated from the IRF fabric. This issue might be caused by the following reasons:

¡     The IRF fabric does not support the device model.

¡     The maximum number of member devices has exceeded the upper limit.

neighbor

IRF member ID of the device connected to the IRF port.

This field displays three hyphens (---) if no device is connected to the port.

Belong To

IRF fabric that has the device, represented by the CPU MAC address of the master in the IRF fabric.

 

Related commands

display irf

display irf configuration

display irf-port load-sharing mode

Use display irf-port load-sharing mode to display IRF link load sharing mode.

Syntax

display irf-port load-sharing mode [ irf-port [ member-id/irf-port-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

irf-port: Displays IRF port-specific load sharing modes. If you do not specify this keyword, the command displays the global load sharing mode for IRF links.

member-id/irf-port-number: Specifies an IRF port number. The member-id argument represents an IRF member ID. The irf-port-number argument represents the index number (1 or 2) of the IRF port on the member device. If you do not specify the member-id and irf-port-number arguments, this command displays the load sharing mode used on each IRF port in the IRF fabric. If no IRF ports are in up state, this command displays No IRF link exists.

Usage guidelines

To display the global load sharing mode for IRF links, execute this command without any keywords or arguments.

To display the load sharing mode used on each IRF port in the IRF fabric, specify the irf-port keyword without specifying an IRF port.

To display the load sharing mode used on a specific IRF port, specify both the irf-port keyword and the port number of that IRF port.

Examples

# Display the global load sharing mode for IRF links. In this example, because no user-defined global load sharing mode has been configured, the default global load sharing mode applies.

<Sysname> display irf-port load-sharing mode

irf-port Load-Sharing Mode:                                                     

Layer 2 traffic: packet type-based sharing                                     

Layer 3 traffic: packet type-based sharing

# Display the global load sharing mode for IRF links. In this example, because a global load sharing mode has been configured, the configured mode applies.

<Sysname> display irf-port load-sharing mode

irf-port Load-Sharing Mode:

destination-mac address, source-mac address

# Display the load sharing mode of IRF-port 1/1. In this example, because neither port-specific load sharing mode nor user-defined global load sharing mode has been configured, the default global load sharing mode applies.

<Sysname> display irf-port load-sharing mode irf-port 1/1

irf-port1/1 Load-Sharing Mode:

Layer 2 traffic: packet type-based sharing

Layer 3 traffic: packet type-based sharing

# Display the load sharing mode of IRF-port 1/1 after a load sharing mode is configured on the port.

<Sysname> display irf-port load-sharing mode irf-port 1/1

irf-port 1/1 Load-Sharing Mode:

destination-mac address, source-mac address

# Display the load sharing mode used on each IRF port.

<Sysname> display irf-port load-sharing mode irf-port

irf-port 1/2 Load-Sharing Mode:

  destination-ip address,  source-ip address

 

irf-port 2/1 Load-Sharing Mode:

Layer 2 traffic: destination-mac address, source-mac address

Layer 3 traffic: destination-ip address,  source-ip address

Table 6 Command output

Field

Description

irf-port Load-Sharing Mode

Global load sharing mode for IRF links:

·     If no global IRF link load sharing mode has been configured, the default global load sharing mode applies.

·     If a user-defined global load sharing mode has been configured, the configured mode applies.

irf-port1/1 Load-Sharing Mode

Link load sharing mode of IRF-port 1/1:

·     If you have not configured a port-specific load sharing mode, the global IRF link load sharing mode applies.

·     If you have configured a port-specific load sharing mode, the configured mode applies.

Layer 2 traffic: packet type-based sharing

Default load sharing mode for traffic that has no IP header. By default, packets are distributed based on the load sharing mode automatically selected depending on the packet type.

Layer 3 traffic: packet type-based sharing

Default load sharing mode for non-TCP/-UDP IP packets. By default, packets are distributed based on the load sharing mode automatically selected depending on the packet type.

 

display mad

Use display mad to display MAD status and settings.

Syntax

display mad [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

verbose: Displays detailed MAD information. If you do not specify this keyword, the command only displays whether a MAD mechanism is enabled or disabled.

Examples

# Display brief MAD information.

<Sysname> display mad

MAD ARP disabled.

MAD ND disabled.

MAD LACP enabled.

MAD BFD enabled.

# Display detailed MAD information.

<Sysname> display mad verbose

Multi-active recovery state: No

Excluded ports (user-configured):

  GigabitEthernet1/0/1

  GigabitEthernet2/0/1

Excluded ports (system-configured):

  GigabitEthernet1/0/2

  GigabitEthernet2/0/2

MAD ARP disabled.

MAD ND disabled.

MAD LACP enabled interface: Route-Aggregation2

  MAD status                 : Normal

  Member ID       Port                             MAD status

  1               GigabitEthernet1/0/3           Normal

  2               GigabitEthernet2/0/3           Normal

MAD BFD enabled interface: Route-Aggregation2

  MAD status                 : Normal

  Member ID   MAD IP address       Neighbor    MAD status

  1           192.168.1.1/24       2           Normal

  2           192.168.1.2/24       1           Normal

Table 7 Command output

Field

Description

MAD ARP disabled.

Status of ARP MAD.

This field displays MAD ARP enabled if ARP MAD is enabled.

MAD ND disabled.

Status of ND MAD.

This field displays MAD ND enabled if ND MAD is enabled.

MAD LACP enabled.

Status of LACP MAD.

This field displays MAD LACP disabled if LACP MAD is disabled.

MAD BFD enabled.

Status of BFD MAD.

This field displays MAD BFD disabled if BFD MAD is disabled.

Multi-active recovery state

Whether the IRF fabric is in Recovery state:

·     Yes—The IRF fabric is in Recovery state. When MAD detects that an IRF fabric has split into multiple IRF fabrics, it allows one fabric to forward traffic. All the other IRF fabrics are set to the Recovery state. In Recovery state, MAD shuts down all network interfaces in the fabric except for the system- and user-excluded network interfaces.

·     No—The IRF fabric is not in Recovery state. It is active and can forward traffic.

Excluded ports (user-configured)

Network interfaces manually configured to not shut down when the IRF fabric transits to the Recovery state.

Excluded ports (system-configured)

Network interfaces set to not shut down by the system when the IRF fabric transits to the Recovery state. These network interfaces are not manually configured.

·     IRF physical interfaces.

·     Member interfaces of a Layer 2 aggregate interface if the aggregate interface is excluded from the MAD shutdown action.

·     Member interfaces of a Layer 3 aggregate interface if the aggregate interface is excluded from the MAD shutdown action.

MAD ARP enabled interface:

Interfaces on which ARP MAD is enabled.

This field displays MAD ARP disabled if ARP MAD is disabled.

MAD ND enabled  interface:

Interfaces on which ND MAD is enabled.

This field displays MAD ND disabled if ND MAD is disabled.

MAD LACP enabled interface

Interface on which LACP MAD is enabled. This field is displayed for each interface enabled with LACP MAD.

This field displays MAD LACP disabled if LACP MAD is disabled.

MAD status

LACP MAD operating status:

·     Normal—LACP MAD is operating correctly.

·     Faulty—LACP MAD is not operating correctly. Verify the following items:

¡     Verify that the ports on LACP MAD links are up.

¡     Verify that the intermediate device supports extended LACPDUs.

¡     Verify that all member devices have member ports used for LACP MAD.

Member ID

Port

MAD status

LACP MAD details:

·     Member ID—IRF member ID of a device.

·     Port—Member ports of the aggregate interface used for LACP MAD.

·     MAD status—LACP MAD operating state on a member port. Values include Normal and Faulty.

MAD BFD enabled interface:

Layer 3 interface on which BFD MAD is enabled.

This field displays MAD BFD disabled if BFD MAD is disabled.

MAD status

BFD MAD operating status:

·     Normal—BFD MAD is operating correctly.

·     Faulty—BFD MAD is not operating correctly. Check the BFD MAD link for connectivity issues.

·     N/A—BFD MAD link status cannot be detected. If BFD MAD is enabled on a management Ethernet port, it is normal that this field displays N/A.

Member ID

MAD IP address

Neighbor

MAD status

BFD MAD details:

·     Member ID—IRF member ID of the local device.

·     MAD IP address—MAD IP address of a member device.

·     Neighbor—IRF member ID of the neighboring member device.

·     MAD status—BFD MAD link state. Available states:

¡     Normal—BFD MAD is operating correctly.

¡     Faulty—BFD MAD is not operating correctly. Check the BFD MAD link for connectivity issues.

easy-irf

Use easy-irf to bulk-configure basic IRF settings for an IRF member device.

Syntax

easy-irf [ member member-id [ renumber new-member-id ] domain domain-id [ priority priority ] [ irf-port1 interface-list1 ] [ irf-port2 interface-list2 ] ]

Views

System view

Predefined user roles

network-admin

Parameters

member member-id: Specifies the member ID of a member device. The member ID can be 1 or 2.

renumber new-member-id: Specifies a new member ID for the device. The member ID can be 1 or 2. The member device automatically reboots for the new member ID to take effect. If you do not specify this option, the command does not change the member ID.

domain domain-id: Specifies an IRF domain ID in the range of 0 to 4294967295. Assign the same domain ID to all devices you are adding to the same IRF fabric.

priority priority: Specifies an IRF priority in the range of 1 to 32. The greater the priority value, the higher the priority. A member with higher priority is more likely to be the master.

irf-port1 interface-list1: Specifies interfaces bound to IRF-port 1. The interface-list1 argument represents a space-separated list of up to n interface items. Each interface item specifies one interface in the interface-type interface-number form.

irf-port2 interface-list2: Specifies interfaces bound to IRF-port 2. A physical interface can be bound to only one IRF port. The interface-list2 argument represents a space-separated list of up to n interface items. Each interface item specifies one interface in the interface-type interface-number form.

The following compatibility matrix shows the values for the n argument in the irf-port1 interface-list1 and irf-port2 interface-list2 options:

 

Hardware

Value for the n argument (maximum number of physical interfaces for each IRF port)

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

8

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

8

F1003-L, F1005-L, F1010-L

Not supported

F1005, F1010

Not supported

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

8

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

Not supported

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

8

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

8

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

Not supported

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

8

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

1

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

1

vFW1000, vFW2000

Not supported

Usage guidelines

This command bulk-configures basic IRF settings for a member device, including the member ID, domain ID, priority, and IRF port bindings.

The easy IRF feature provides the following configuration methods:

·     Interactive method—Enter the easy-irf command without parameters. The system will guide you to set the parameters step by step.

·     Non-interactive method—Enter the easy-irf command with parameters.

As a best practice, use the interactive method if you are new to IRF.

If you execute this command multiple times, the following settings take effect:

·     The most recent settings for the member ID, domain ID, and priority.

·     IRF port bindings added through repeated executions of the command.

When you specify physical interfaces for an IRF port, you must follow the IRF port binding requirements in Virtual Technologies Configuration Guide.

If you specify physical interfaces by using the interactive method, you must also follow these restrictions and guidelines:

·     Do not enter spaces between the interface type and interface number.

·     Use a comma (,) to separate two physical interfaces. No spaces are allowed between interfaces.

To remove an IRF physical interface from an IRF port, you must use the undo port group interface command in IRF port view.

Examples

# Bulk-configure basic IRF settings by using the non-interactive method. Change the member ID from 2 to 1, set the domain ID to 10, configure the member priority as 10, and bind Ten-GigabitEthernet 2/0/1 and Ten-GigabitEthernet 2/0/2 to IRF-port 1.

<Sysname> system-view

[Sysname] easy-irf member 2 renumber 1 domain 10 priority 10 irf-port1 ten-gigabitethernet 2/0/1 ten-gigabitethernet 2/0/2

*****************************************************************************

                  Configuration summary for member 2

IRF new member ID: 1

IRF domain ID    : 10

IRF priority     : 10

IRF-port 1       : Ten-GigabitEthernet2/0/1, Ten-GigabitEthernet2/0/2

IRF-port 2       : Disabled

*****************************************************************************

Are you sure to use these settings to set up IRF? [Y/N] y

Starting to configure IRF...

Configuration succeeded.

The device will reboot for the new member ID to take effect. Continue? [Y/N] y

# Bulk-configure basic IRF settings by using the interactive method. Change the member ID from 2 to 1, set the domain ID to 10, configure the member priority as 10, and bind Ten-GigabitEthernet 2/0/1 and Ten-GigabitEthernet 2/0/2 to IRF-port 1.

<Sysname> system-view

[Sysname] easy-irf

*****************************************************************************

Welcome to use easy IRF.

To skip the current step, enter a dot sign (.).

To return to the previous step, enter a minus sign (-).

To use the default value (enclosed in []) for each parameter, press Enter without

entering a value.

To quit the setup procedure, press CTRL+C.

*****************************************************************************

Select a member by its ID <2> [2]:2

Specify a new member ID <1~10> [1]: 1

Specify a domain ID <0~4294967295> [0]: 10

Specify a priority <1~32> [1]: 10

Specify IRF-port 1 bindings (a physical interface or a comma-separated physical

interface list)[Disabled]: ten-gigabitethernet2/0/1,ten-gigabitethernet2/0/2

Specify IRF-port 2 bindings (a physical interface or a comma-separated physical

interface list)[Disabled]:

*****************************************************************************

                  Configuration summary for member 2

IRF new member ID: 1

IRF domain ID    : 10

IRF priority     : 10

IRF-port 1       : Ten-GigabitEthernet2/0/1, Ten-GigabitEthernet2/0/2

IRF-port 2       : Disabled

*****************************************************************************

Are you sure to use these settings to set up IRF? [Y/N] y

Starting to configure IRF...

Configuration succeeded.

The device will reboot for the new member ID to take effect. Continue? [Y/N] y

irf auto-update enable

Use irf auto-update enable to enable the software auto-update feature.

Use undo irf auto-update enable to disable the software auto-update feature.

Syntax

irf auto-update enable

undo irf auto-update enable

Default

Software auto-update is enabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This command automatically propagates the current software images of the master device in the IRF fabric to any devices you are adding to the IRF fabric.

To ensure a successful software update, verify that the new device you are adding to the IRF fabric has sufficient storage space for the new software images. If sufficient storage space is not available, the device automatically deletes the current software images. If the reclaimed space is still insufficient, the device cannot complete the auto-update. You must reboot the device, and then access the BootWare menu to delete files.

Examples

# Enable the software auto-update feature.

<Sysname> system-view

[Sysname] irf auto-update enable

irf domain

Use irf domain to assign a domain ID to the IRF fabric.

Use undo irf domain to restore the default.

Syntax

irf domain domain-id

undo irf domain

Default

The IRF domain ID is 0.

Views

System view

Predefined user roles

network-admin

Parameters

domain-id: Specifies a domain ID for the IRF fabric. The value range is 0 to 4294967295.

Usage guidelines

One IRF fabric forms one IRF domain. IRF uses IRF domain IDs to uniquely identify IRF fabrics and prevent IRF fabrics from interfering with one another.

If one IRF fabric uses another IRF fabric as the intermediate device for LACP MAD, ARP MAD, or ND MAD, you must assign the two IRF fabrics different domain IDs for correct split detection. False detection causes IRF split.

An IRF fabric has only one IRF domain ID. You can change the IRF domain ID by using the following commands: irf domain, mad enable, mad arp enable, or mad nd enable. The IRF domain IDs configured by using these commands overwrite each other.

The irf domain command is available only on the default context. The mad enable, mad arp enable, and mad nd enable commands are available on all contexts. If you change the IRF domain ID in one context, the IRF domain IDs in all other contexts change automatically.

Examples

# Set the IRF domain ID to 10.

<Sysname> system-view

[Sysname] irf domain 10

irf mac-address persistent

Use irf mac-address persistent to configure IRF bridge MAC persistence.

Use undo irf mac-address persistent to disable IRF bridge MAC persistence.

Syntax

irf mac-address persistent { always | timer }

undo irf mac-address persistent

Default

The IRF bridge MAC address remains unchanged for 6 minutes after the address owner leaves.

Views

System view

Predefined user roles

network-admin

Parameters

always: Enables the IRF bridge MAC address to be permanent. The IRF bridge MAC address does not change after the address owner leaves the fabric.

timer: Enables the IRF bridge MAC address to remain unchanged for 6 minutes after the address owner leaves. If the owner rejoins the IRF fabric within the time limit, the IRF bridge MAC address does not change. If the owner does not rejoin the IRF fabric within the time limit, the IRF fabric uses the bridge MAC address of the current master as the bridge MAC address.

Usage guidelines

If the undo form of this command is used, bridge MAC address of the current master replaces the original IRF bridge MAC as soon as the original address owner leaves.

If ARP MAD or ND MAD is used with the spanning tree feature, disable IRF bridge MAC persistence by using the undo irf mac-address persistent command.

If the IRF fabric uses a daisy-chain topology and has aggregate links with upstream or downstream devices, do not execute the undo irf mac-address persistent command. Use of this command might result in transmission delay or packet loss after the address owner leaves or reboots.

If the IRF fabric has multichassis aggregate links, do not use the undo irf mac-address persistent command. Use of this command might cause traffic disruption.

By default, an IRF fabric uses the bridge MAC address of the master device as its bridge MAC address.

On a switched LAN, the IRF bridge MAC address must be unique for correct traffic transmission.

When IRF fabrics merge, IRF ignores the IRF bridge MAC address and checks the bridge MAC address of each member device in the IRF fabrics. IRF merge fails if any two member devices have the same bridge MAC address.

Examples

# Enable the IRF bridge MAC address to persist forever.

<Sysname> system-view

[Sysname] irf mac-address persistent always

irf member description

Use irf member description to configure a description for an IRF member device.

Use undo irf member description to restore the default.

Syntax

irf member member-id description text

undo irf member member-id description

Default

No description is configured for an IRF member device.

Views

System view

Predefined user roles

network-admin

Parameters

member-id: Specifies the ID of an IRF member.

text: Specifies a description, a string of 1 to 127 characters.

Examples

# Configure the description as F1Num001 for IRF member 1.

<Sysname> system-view

[Sysname] irf member 1 description F1Num001

irf member priority

Use irf member priority to change the priority of an IRF member device.

Use undo irf member priority to restore the default.

Syntax

irf member member-id priority priority

undo irf member member-id priority

Default

The IRF member priority is 1.

Views

System view

Predefined user roles

network-admin

Parameters

member-id: Specifies an IRF member ID. The member ID can be 1 or 2.

priority: Sets priority in the range of 1 to 32. The greater the priority value, the higher the priority. A member with higher priority is more likely to be the master.

Usage guidelines

The new priority setting takes effect at the next master election, but it does not trigger a master election.

Examples

# Set the priority of IRF member 2 to 32.

<Sysname> system-view

[Sysname] irf member 2 priority 32

irf member renumber

Use irf member renumber to change the member ID of an IRF member device.

Use undo irf member renumber to restore the previous IRF member ID of the device.

Syntax

irf member member-id renumber new-member-id

undo irf member member-id renumber

Default

The IRF member ID is 1.

Views

System view

Predefined user roles

network-admin

Parameters

member-id: Specifies the ID of an IRF member. The IRF member ID can be 1 or 2.

new-member-id: Assigns a new ID to the IRF member. The IRF member ID can be 1 or 2.

Usage guidelines

CAUTION

CAUTION:

IRF member ID change can invalidate member ID-related settings, including interface and file path settings, and cause data loss. Make sure you fully understand its impact on your live network.

 

To have the new ID take effect, you must reboot the IRF member. To cancel the member ID change before you reboot the member device, use the undo irf member renumber command. In the command, set the new member ID to be the same as the old member ID.

When adding a device into an IRF fabric, you must assign a unique IRF member ID to the device. If its IRF member ID has been used in the IRF fabric, the device cannot join the IRF fabric.

Interchanging member IDs between IRF member devices might cause undesirable configuration changes and data loss. For example, the IRF member IDs of Device A and Device B are 2 and 1, respectively. After you interchange their member IDs, their port settings also interchange.

Examples

# Change the ID of an IRF member device from 1 to 2.

<Sysname> display irf

[Sysname] irf member 1 renumber 2

Renumbering the member ID may result in configuration change or loss. Continue?[Y/N]Y

# Before rebooting the device, cancel the change in the preceding example.

[Sysname] undo irf member 1 renumber

Renumbering the member ID may result in configuration change or loss. Continue?[Y/N]y

If you reboot the device after executing the irf member 1 renumber 2 command, the device member ID changes to 2 at system reboot. Using undo irf member 1 renumber cannot restore the member ID to 1. You must use the irf member 2 renumber 1 command to reconfigure the member ID.

irf-port

Use irf-port to enter IRF port view.

Use undo irf-port to remove all port bindings on an IRF port.

Syntax

irf-port member-id/irf-port-number

undo irf-port member-id/irf-port-number

Views

System view

Predefined user roles

network-admin

Parameters

member-id: Specifies an IRF member device by its member ID.

irf-port-number: Specifies an IRF port on the member device. The irf-port-number argument represents the IRF port index and must be 1 or 2.

Usage guidelines

To bind physical interfaces to an IRF port, you must enter IRF port view.

Examples

# Enter IRF-port 2/1 view.

<Sysname> system-view

[Sysname] irf-port 2/1

[Sysname-irf-port2/1]

Related commands

port group interface

irf-port global load-sharing mode

Use irf-port global load-sharing mode to set the global load sharing mode for IRF links.

Use undo irf-port global load-sharing mode to restore the default.

Syntax

irf-port global load-sharing mode { destination-ip | destination-mac | source-ip | source-mac } *

undo irf-port global load-sharing mode

Default

Packets are distributed based on the load sharing mode automatically selected depending on the packet type.

Views

System view

Predefined user roles

network-admin

Parameters

destination-ip: Distributes traffic across IRF member links based on destination IP address.

destination-mac: Distributes packets across IRF member links based on destination MAC address.

source-ip: Distributes packets across IRF member links based on source IP address.

source-mac: Distributes packets across IRF member links based on source MAC address.

Usage guidelines

The global IRF link load sharing mode applies to all IRF ports in the IRF fabric. You can also configure a port-specific load sharing mode for an IRF port in IRF port view by using the irf-port load-sharing mode command.

An IRF port preferentially uses the port-specific load sharing mode. If no port-specific load sharing mode is available, the port uses the global load sharing mode.

You can configure the sharing mode to include a combination of multiple criteria for making traffic distribution decisions. If your device does not support a criterion combination, the system displays an error message.

If you configure the global load sharing mode multiple times, the most recent configuration takes effect.

Examples

# Configure the global IRF link load sharing mode to distribute traffic based on destination MAC address.

<Sysname> system-view

[Sysname] irf-port global load-sharing mode destination-mac

Related commands

irf-port load-sharing mode

irf-port load-sharing mode

Use irf-port load-sharing mode to configure a port-specific load sharing mode for an IRF port to distribute traffic across its physical links.

Use undo irf-port load-sharing mode to restore the default.

Syntax

irf-port load-sharing mode { destination-ip | destination-mac | source-ip | source-mac } *

undo irf-port load-sharing mode

Default

Packets are distributed based on the load sharing mode automatically selected depending on the packet type.

Views

IRF port view

Predefined user roles

network-admin

Parameters

destination-ip: Distributes traffic across IRF member links based on destination IP address.

destination-mac: Distributes packets across IRF member links based on destination MAC address.

source-ip: Distributes packets across IRF member links based on source IP address.

source-mac: Distributes packets across IRF member links based on source MAC address.

Usage guidelines

To successfully configure a port-specific load sharing mode for an IRF port, make sure you have bound a minimum of one physical interface to the IRF port.

You can configure an IRF port-specific load sharing mode to include a combination of multiple criteria for making traffic distribution decisions. If your device does not support a criterion combination, the system displays an error message.

If you configure the port-specific load sharing mode multiple times on an IRF port, the most recent configuration takes effect.

An IRF port preferentially uses the port-specific load sharing mode. If no port-specific load sharing mode is available, the port uses the global load sharing mode.

Examples

# Configure a port-specific load sharing mode for IRF-port 1/1 to distribute traffic based on destination MAC address.

<Sysname> system-view

[Sysname] irf-port 1/1

[Sysname-irf-port1/1] irf-port load-sharing mode destination-mac

Related commands

irf-port global load-sharing mode

irf-port-configuration active

Use irf-port-configuration active to activate IRF ports.

Syntax

irf-port-configuration active

Views

System view

Predefined user roles

network-admin

Usage guidelines

After connecting the physical interfaces between two devices and binding them to the correct IRF ports, you must use this command to activate the settings on the IRF ports. This command merges the two devices into one IRF fabric.

The system activates the IRF port settings automatically in the following situations:

·     The configuration file that the device starts with contains IRF port bindings.

·     You are binding physical interfaces to an IRF port after an IRF fabric is formed.

Examples

To configure and activate IRF-port 1/2 when the port is in DIS state:

# Bind a physical interface to IRF-port 1/2.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] shutdown

[Sysname-Ten-GigabitEthernet1/0/1] quit

[Sysname] irf-port 1/2

[Sysname-irf-port1/2] port group interface Ten-GigabitEthernet 1/0/1

You must perform the following tasks for a successful IRF setup:

Save the configuration after completing IRF configuration.

Execute the "irf-port-configuration active" command to activate the IRF ports.

[Sysname-irf-port1/2] quit

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] undo shutdown

[Sysname-Ten-GigabitEthernet1/0/1] quit

# Save the configuration so the IRF port settings can take effect after the device reboots.

[Sysname] save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):

flash:/startup.cfg exists, overwrite? [Y/N]:y

Validating file. Please wait............................

Saved the current configuration to mainboard device successfully.

# Activate the IRF port.

[Sysname] irf-port-configuration active

mad arp enable

Use mad arp enable to enable ARP MAD.

Use undo mad arp enable to disable ARP MAD.

Syntax

mad arp enable

undo mad arp enable

Default

ARP MAD is disabled.

Views

VLAN interface view

Predefined user roles

network-admin

context-admin

Usage guidelines

Do not configure ARP MAD together with LACP MAD or BFD MAD, because they handle collisions differently.

When you configure ARP MAD, follow these restrictions and guidelines:

 

Category

Restrictions and guidelines

ARP MAD VLAN

·     Do not enable ARP MAD on VLAN-interface 1.

·     If you are using an intermediate device, perform the following tasks:

¡     On the IRF fabric and the intermediate device, create a VLAN for ARP MAD.

¡     On the IRF fabric and the intermediate device, assign the ports of ARP MAD links to the ARP MAD VLAN.

¡     On the IRF fabric, create a VLAN interface for the ARP MAD VLAN.

·     As a best practice, do not use the ARP MAD VLAN for any other purposes.

ARP MAD and feature configuration

If an intermediate device is used, make sure the following requirements are met:

·     Run the spanning tree feature between the IRF fabric and the intermediate device to ensure that there is only one ARP MAD link in forwarding state. For more information about the spanning tree feature and its configuration, see Layer 2—LAN Switching Configuration Guide.

·     Enable the IRF fabric to change its bridge MAC address as soon as the address owner leaves.

·     If the intermediate device is also an IRF fabric, assign the two IRF fabrics different domain IDs for correct split detection.

When you use the mad arp enable command, the system prompts you to enter a domain ID. If you do not want to change the current domain ID, press enter at the prompt.

An IRF fabric has only one IRF domain ID. You can change the IRF domain ID by using the following commands: irf domain, mad enable, mad arp enable, or mad nd enable. The IRF domain IDs configured by using these commands overwrite each other.

You can execute the mad arp enable command on any contexts. If you change the IRF domain ID in one context, the new IRF domain ID takes effect immediately on all contexts.

Examples

# Enable ARP MAD on VLAN-interface 3.

<Sysname> system-view

[Sysname] interface vlan-interface 3

[Sysname-Vlan-interface3] mad arp enable

You need to assign a domain ID (range: 0-4294967295)

[Current domain is: 0]: 1

The assigned domain ID is: 1

Related commands

irf domain

mad bfd enable

Use mad bfd enable to enable BFD MAD.

Use undo mad bfd enable to disable BFD MAD.

Syntax

mad bfd enable

undo mad bfd enable

Default

BFD MAD is disabled.

Views

VLAN interface view

Layer 3 aggregate interface view

Predefined user roles

network-admin

Usage guidelines

Do not configure BFD MAD together with ARP MAD or ND MAD, because they handle collisions differently.

When you configure BFD MAD on a VLAN interface, follow these guidelines:

 

Category

Restrictions and guidelines

BFD MAD VLAN

·     Do not enable BFD MAD on VLAN-interface 1.

·     If you are using an intermediate device, perform the following tasks:

¡     On the IRF fabric and the intermediate device, create a VLAN for BFD MAD.

¡     On the IRF fabric and the intermediate device, assign the ports of BFD MAD links to the BFD MAD VLAN.

¡     On the IRF fabric, create a VLAN interface for the BFD MAD VLAN.

·     Make sure the IRF fabrics on the network use different BFD MAD VLANs.

·     Make sure the BFD MAD VLAN contains only ports on the BFD MAD links. Exclude a port from the BFD MAD VLAN if that port is not on a BFD MAD link. If you have assigned that port to all VLANs by using the port trunk permit vlan all command, use the undo port trunk permit command to exclude that port from the BFD MAD VLAN.

BFD MAD VLAN and feature compatibility

Do not use the BFD MAD VLAN for any purposes other than configuring BFD MAD.

·     Use only the mad bfd enable and mad ip address commands on the BFD MAD-enabled VLAN interface. If you configure other features, both BFD MAD and other features on the interface might run incorrectly.

·     Disable the spanning tree feature on any Layer 2 Ethernet ports in the BFD MAD VLAN. The MAD feature is mutually exclusive with the spanning tree feature.

MAD IP address

·     To avoid network issues, only use the mad ip address command to configure IP addresses on the BFD MAD-enabled VLAN interface. Do not configure an IP address by using the ip address command or configure a VRRP virtual address on the BFD MAD-enabled VLAN interface.

·     Make sure all the MAD IP addresses are on the same subnet.

When you configure BFD MAD on a Layer 3 aggregate interface, follow these restrictions and guidelines:

 

Category

Restrictions and guidelines

BFD MAD-enabled Layer 3 aggregate interface

·     Make sure the Layer 3 aggregate interface operates in static aggregation mode.

·     Make sure the member ports in the aggregation group do not exceed the maximum number of Selected ports allowed for an aggregation group. If the number of member ports exceeds the maximum number of Selected ports, some member ports cannot become Selected. BFD MAD will be unable to work correctly and its state will change to Faulty.

BFD MAD VLAN

·     On the intermediate device (if any), assign the ports on the BFD MAD links to the same VLAN. Do not assign the ports to an aggregate interface. If the ports are hybrid ports, make sure these ports are untagged members of their PVIDs.

·     If the intermediate device acts as a BFD MAD intermediate device for multiple IRF fabrics, assign different BFD MAD VLANs to the IRF fabrics.

·     Do not use the BFD MAD VLAN on the intermediate device for any purposes other than BFD MAD.

·     Make sure the BFD MAD VLAN on the intermediate device contains only ports on the BFD MAD links. Exclude a port from the BFD MAD VLAN if that port is not on a BFD MAD link. If you have assigned that port to all VLANs by using the port trunk permit vlan all command, use the undo port trunk permit command to exclude that port from the BFD MAD VLAN.

BFD MAD-enabled Layer 3 aggregate interface and feature compatibility

Use only the mad bfd enable and mad ip address commands on the BFD MAD-enabled interface. If you configure other features, both BFD MAD and other features on the interface might run incorrectly.

MAD IP address

·     To avoid network issues, only use the mad ip address command to configure IP addresses on the BFD MAD-enabled interface. Do not configure an IP address by using the ip address command or configure a VRRP virtual address on the BFD MAD-enabled interface.

·     Make sure all the MAD IP addresses are on the same subnet.

Examples

# Enable BFD MAD on Route-Aggregation 3.

<Sysname> system-view

[Sysname] interface route-aggregation 3

[Sysname-Route-Aggregation3] mad bfd enable

mad enable

Use mad enable to enable LACP MAD.

Use undo mad enable to disable LACP MAD.

Syntax

mad enable

undo mad enable

Default

LACP MAD is disabled.

Views

Aggregate interface view

Predefined user roles

network-admin

context-admin

Usage guidelines

LACP MAD handles collisions differently than ARP MAD and ND MAD. To avoid conflicts, do not enable LACP MAD together with ARP MAD and ND MAD on an IRF fabric.

LACP MAD requires a device that supports extended LACPDUs for MAD to act as the intermediate device. You must set up a dynamic link aggregation group that spans all IRF member devices between the IRF fabric and the intermediate device. To enable dynamic link aggregation, configure the link-aggregation mode dynamic command on the aggregate interface.

If one IRF fabric uses another IRF fabric as the intermediate device for LACP MAD, you must assign the two IRF fabrics different domain IDs for correct split detection. False detection causes IRF split.

When you use the mad enable command, the system prompts you to enter a domain ID. If you do not want to change the current domain ID, press enter at the prompt.

An IRF fabric has only one IRF domain ID. You can change the IRF domain ID by using the following commands: irf domain, mad enable, mad arp enable, or mad nd enable. The IRF domain IDs configured by using these commands overwrite each other.

You can execute the mad enable command on any contexts. If you change the IRF domain ID in one context, the new IRF domain ID takes effect immediately on all contexts.

Examples

# Enable LACP MAD on Bridge-Aggregation 1, a Layer 2 dynamic aggregate interface.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] link-aggregation mode dynamic

[Sysname-Bridge-Aggregation1] mad enable

You need to assign a domain ID (range: 0-4294967295)

[Current domain is: 0]: 1

The assigned domain ID is: 1

MAD LACP only enable on dynamic aggregation interface.

# Enable LACP MAD on Route-Aggregation 1, a Layer 3 dynamic aggregate interface.

<Sysname> system-view

[Sysname] interface route-aggregation 1

[Sysname-Route-Aggregation1] link-aggregation mode dynamic

[Sysname-Route-Aggregation1] mad enable

You need to assign a domain ID (range: 0-4294967295)

[Current domain is: 0]: 1

The assigned domain ID is: 1

MAD LACP only enable on dynamic aggregation interface.

Related commands

irf domain

mad exclude interface

Use mad exclude interface to exclude an interface from being shut down when the IRF fabric transits to the Recovery state upon detection of a multi-active collision.

Use undo mad exclude interface to configure the IRF fabric to shut down an interface when it transits to the Recovery state upon detection of a multi-active collision.

Syntax

mad exclude interface interface-type interface-number

undo mad exclude interface interface-type interface-number

Default

All network interfaces on a Recovery-state IRF fabric are shut down, except for the network interfaces automatically excluded by the system.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

interface-type interface-number: Specifies an interface by its type and number.

Usage guidelines

If an interface must be kept in up state for special purposes such as Telnet connection, exclude the interface from the shutdown action. As a best practice to avoid incorrect traffic forwarding, do not exclude any interfaces except the interfaces used for Telnet.

The interfaces that have been shut down by MAD come up when the member devices reboot to join the recovered IRF fabric. If the active IRF fabric fails before the IRF link is recovered, use the mad restore command on the inactive IRF fabric to recover the inactive IRF fabric. This command also brings up all interfaces that were shut down by MAD.

Examples

# Exclude GigabitEthernet 1/0/1 from being shut down when the MAD state transits to Recovery.

<Sysname> system-view

[Sysname] mad exclude interface gigabitethernet 1/0/1

Related commands

mad restore

mad ip address

Use mad ip address to assign a MAD IP address to an IRF member device for BFD MAD.

Use undo mad ip address to delete the MAD IP address for an IRF member device.

Syntax

mad ip address ip-address { mask | mask-length } member member-id

undo mad ip address ip-address { mask | mask-length } member member-id

Default

No MAD IP address is configured for an IRF member device.

Views

VLAN interface view

Layer 3 aggregate interface view

Predefined user roles

network-admin

Parameters

ip-address: Specifies an IP address in dotted decimal notation.

mask: Specifies a subnet mask in decimal dotted notation.

mask-length: Specifies a subnet mask in length, in the range of 0 to 32.

member member-id: Specifies the ID of an IRF member.

Usage guidelines

To use BFD MAD, configure a MAD IP address for each IRF member. Make sure all the MAD IP addresses are on the same subnet.

Do not configure a MAD IP address by using the ip address command or configure a VRRP virtual address on the BFD MAD-enabled port or interface.

The master attempts to establish BFD sessions with other member devices by using its MAD IP address as the source IP address.

·     If the IRF fabric is integrated, only the MAD IP address of the master takes effect. The master cannot establish a BFD session with any other member. If you execute the display bfd session command, the state of the BFD sessions is Down.

·     When the IRF fabric splits, the IP addresses of the masters in the partitioned IRF fabrics take effect. The masters can establish a BFD session. If you execute the display bfd session command, the state of the BFD session between the two devices is Up.

Examples

# Assign a MAD IP address to IRF member 1 on Route-Aggregation 3.

<Sysname> system-view

[Sysname] interface route-aggregation 3

[Sysname-Route-Aggregation3] mad ip address 192.168.0.1 255.255.255.0 member 1

# Assign a MAD IP address to IRF member 2 on Route-Aggregation 3.

[Sysname-Route-Aggregation 3] mad ip address 192.168.0.2 255.255.255.0 member 2

Related commands

mad bfd enable

mad nd enable

Use mad nd enable to enable ND MAD.

Use undo mad nd enable to disable ND MAD.

Syntax

mad nd enable

undo mad nd enable

Default

ND MAD is disabled.

Views

VLAN interface view

Predefined user roles

network-admin

context-admin

Usage guidelines

Do not configure ND MAD together with LACP MAD or BFD MAD, because they handle collisions differently.

Do not configure ND MAD on VLAN-interface 1.

If one IRF fabric uses another IRF fabric as the intermediate device for ND MAD, you must assign the two IRF fabrics different domain IDs for correct split detection. False detection causes IRF split.

When you use the mad nd enable command, the system prompts you to enter a domain ID. If you do not want to change the current domain ID, press enter at the prompt.

An IRF fabric has only one IRF domain ID. You can change the IRF domain ID by using the following commands: irf domain, mad enable, mad arp enable, or mad nd enable. The IRF domain IDs configured by using these commands overwrite each other.

You can execute the mad nd enable command on any contexts. If you change the IRF domain ID in one context, the new IRF domain ID takes effect immediately on all contexts.

Examples

# Enable ND MAD on VLAN-interface 3.

<Sysname> system-view

[Sysname] interface vlan-interface 3

[Sysname-Vlan-interface3] mad nd enable

You need to assign a domain ID (range: 0-4294967295)

[Current domain is: 0]: 1

The assigned domain ID is: 1

Related commands

irf domain

mad restore

Use mad restore to restore the normal MAD state of the IRF fabric in Recovery state.

Syntax

mad restore

Views

System view

Predefined user roles

network-admin

Usage guidelines

If the active IRF fabric has failed to work before the IRF split problem is fixed, use this command to restore an IRF fabric in Recovery state. The recovered IRF fabric will take over the active IRF fabric role.

Examples

# Restore the normal MAD state of the IRF fabric in Recovery state.

<Sysname> system-view

[Sysname] mad restore

This command will restore the device from multi-active conflict state. Continue? [Y/N]:Y

Restoring from multi-active conflict state, please wait...

port group interface

Use port group interface to bind a physical interface to an IRF port.

Use undo port group interface to remove the binding of a physical interface to an IRF port.

Syntax

port group interface interface-type interface-number

undo port group interface interface-name

Default

No physical interfaces are bound to an IRF port.

Views

IRF port view

Predefined user roles

network-admin

Parameters

interface-type interface-number: Specifies a physical interface by its type and number.

interface-name: Specifies a physical interface in the interface-typeinterface-number format. No space is allowed between the interface-type and interface-number arguments.

Usage guidelines

Execute this command multiple times to bind multiple physical interfaces to an IRF port. The following compatibility matrix shows the maximum number of physical interfaces for each IRF port on different hardware platforms:

Hardware

Maximum number of physical interfaces for each IRF port

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

8

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

8

F1003-L, F1005-L, F1010-L

Not supported

F1005, F1010

Not supported

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

8

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

Not supported

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

8

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

8

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

Not supported

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

8

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

1

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

1

vFW1000, vFW2000

Not supported

If you use both IRF and context features, make sure you establish the IRF fabric before you configure the context feature. If you configure the context feature on the device first, the context settings might be lost or cannot take effect after the device reboots to join an IRF fabric.

Use the shutdown command to shut down a physical interface before you bind it to or remove it from an IRF port. To bring up the physical interface after a binding or binding removal operation, use the undo shutdown command.

The system does not dynamically remove IRF port bindings when IRF links are lost, for example, because an interface card is removed. To remove IRF port bindings, you must use the undo port group interface command.

For more information about IRF port binding requirements, see Virtual Technologies Configuration Guide.

Examples

# Bind Ten-GigabitEthernet 1/0/1 to IRF-port 1/1 on the IRF member device with a member ID of 1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] shutdown

[Sysname-Ten-GigabitEthernet1/0/1] quit

[Sysname] irf-port 1/1

[Sysname-irf-port1/1] port group interface ten-gigabitethernet 1/0/1

[Sysname-irf-port1/1] quit

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] undo shutdown

Related commands

irf-port

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网