- Table of Contents
-
- H3C Campus Switches M-LAG Configuration Guide-6W101
- 00-M-LAG network planning for campus networks
- 01-M-LAG and VRRP Configuration Example (Campus)
- 02-M-LAG + Spanning Tree Configuration Example (Campus)
- 03-Dual-Active VLAN Gateway Configuration Example (Campus)
- 04-M-LAG and Loop Detection Configuration Example (Campus)
- 05-Multi-Tier M-LAG and VRRP Configuration Example (Campus)
- 06-M-LAG + VXLAN Distributed Gateway Network Configuration Example (Ethernet Aggregate Link as Peer Link) (Campus)
- 07-M-LAG + EVPN VXLAN Centralized Gateway Network Configuration Example (Ethernet Aggregate Link as Peer Link) (Campus)
- 08-M-LAG and MPLS L3VPN Configuraion Example (Campus)
- 09-M-LAG and Mirroring Configuration Example (Campus)
- Related Documents
-
Title | Size | Download |
---|---|---|
05-Multi-Tier M-LAG and VRRP Configuration Example (Campus) | 485.75 KB |
Example: Configuring multi-tier M-LAG and VRRP (campus)
Configuring tier-1 M-LAG devices
Configuring tier-1 M-LAG devices
Configuring the links between tier-1 M-LAG devices and downlink devices Switch A and Switch B
Configuring the links between tier-1 M-LAG devices and the single-homed server
Configuring the links between tier-1 M-LAG devices and tier-2 M-LAG devices
Configuring the tier-2 M-LAG system
Configuring the links between tier-2 M-LAG devices and tier-1 M-LAG devices
Configuring the links between tier-2 M-LAG devices and the router
Configuring the Layer 3 link connecting the tier-2 M-LAG devices
Configuring the link between the router and tier-2 M-LAG devices
Configuring the link between the router and the network
Configuring downlink devices Switch A and Switch B
Configuring the links between Switch A/Switch B and tier-1 M-LAG devices
Configuring the links between Switch A/Switch B and the servers
Convergence performance test results
Pre-upgrade verification commands
Post-upgrade verification commands
Pre-expansion verification commands
Post-expansion verification commands
Switching fabric module replacement
Example: Configuring multi-tier M-LAG and VRRP (campus)
Network configuration
Building a stable extended Layer 2 network within the campus requires dual-homing access to ensure reliability and load balancing to improve link utilization. Deploy M-LAG between the core tier and distribution tier, and between the distribution tier and access tier to form a loop-free topology. As shown in Figure 1:
· Device A and Device B form a tier-1 M-LAG system M-LAG-1. Switch A and Switch B are connected to M-LAG-1 through M-LAG interfaces.
· Device C and Device D form a tier-2 M-LAG system M-LAG-2. Router is connected to M-LAG-2 through ECMP routes.
· M-LAG-1 and M-LAG-2 are interconnected through M-LAG interfaces.
Deploy multi-tier M-LAG interconnected network to meet the following requirements:
· Layer 2 and Layer 3 connectivity is available within the campus.
· Layer 3 connectivity is available between the campus and the external network.
· VRRP is deployed for the devices in M-LAG-2 at the core tier.
· When both member devices in M-LAG-1 have link failures, the services can still communicate with one another.
· When both member devices in M-LAG-2 have link failures, the services can still communicate with one another.
· IPv4 and IPv6 dual stack is supported.
Interface |
IP addresses |
Remarks |
|
Switch A |
XGE 3/0/8 |
N/A |
Server A |
XGE 3/0/4 |
N/A |
Device A: XGE 3/0/5 |
|
XGE 3/0/5 |
N/A |
Device B: XGE 3/0/5 |
|
Switch B: |
XGE 3/0/8 |
N/A |
Server B |
XGE 3/0/4 |
N/A |
Device A: XGE 3/0/6 |
|
XGE 3/0/5 |
N/A |
Device B: XGE 3/0/6 |
|
Device A |
XGE 3/0/3 |
N/A |
Server C |
XGE 3/0/4 |
N/A |
Device C: XGE 3/0/6 M-LAG interface |
|
XGE 3/0/7 |
N/A |
Device D: XGE 3/0/6 M-LAG interface |
|
XGE 3/0/5 |
N/A |
Switch A: XGE 3/0/4 M-LAG interface |
|
XGE 3/0/6 |
N/A |
Switch B: XGE 3/0/4 M-LAG interface |
|
XGE 3/0/1 |
192.168.1.1/24 |
Device B: XGE 3/0/1 Keepalive link |
|
XGE 3/0/2 |
N/A |
Device B: XGE 3/0/2 Peer-link interface |
|
Device B |
XGE 3/0/3 |
N/A |
Server D |
XGE 3/0/4 |
N/A |
Device C: XGE 3/0/7 M-LAG interface |
|
XGE 3/0/7 |
N/A |
Device D: XGE 3/0/7 M-LAG interface |
|
XGE 3/0/5 |
N/A |
Switch A: XGE 3/0/5 M-LAG interface |
|
XGE 3/0/6 |
N/A |
Switch B: XGE 3/0/5 M-LAG interface |
|
XGE 3/0/1 |
192.168.1.2/24 |
Device A: XGE 3/0/1 Keepalive interface |
|
XGE 3/0/2 |
N/A |
Device A: XGE 3/0/2 Peer-link interface |
|
Device C |
Loopback0 |
3.3.3.3/32 2000::3:3:3:3/128 |
Loopback interface address Router ID |
XGE 3/0/6 |
N/A |
Device A: XGE 3/0/4 M-LAG interface |
|
XGE 3/0/7 |
N/A |
Device B: XGE 3/0/4 M-LAG interface |
|
XGE 3/0/4 |
35.1.1.1/24 35::1/64 |
Router: XGE 3/0/4 |
|
XGE 3/0/1 |
192.168.3.1/24 |
Device D: XGE 3/0/1 Keepalive interface |
|
XGE 3/0/2 |
N/A |
Device D: XGE 3/0/2 Peer-link interface |
|
Vlan-interface34 |
34.1.1.1/24 34::1/64 |
Layer 3 link interconnecting the two M-LAG devices used for east-west traffic forwarding and north-south traffic escape |
|
Vlan-interface10 |
10.1.1.1/24 10::1/64 |
VRRP gateway |
|
Vlan-interface20 |
20.1.1.1/24 20::1/64 |
VRRP gateway |
|
Device D: |
Loopback0 |
4.4.4.4 2000::4:4:4:4/128 |
Loopback interface address Router ID |
XGE 3/0/6 |
N/A |
Device A: XGE 3/0/7 M-LAG interface |
|
XGE 3/0/7 |
N/A |
Device B: XGE 3/0/7 M-LAG interface |
|
XGE 3/0/4 |
45.1.1.1/24 45::1/64 |
Router: XGE 3/0/5 |
|
XGE 3/0/1 |
192.168.3.2/24 |
Device C: XGE 3/0/1 Keepalive interface |
|
XGE 3/0/2 |
|
Device C: XGE 3/0/2 Peer-link interface |
|
Vlan-interface34 |
34.1.1.2/24 34::2/64 |
Layer 3 link interconnecting the two M-LAG devices used for east-west traffic forwarding and north-south traffic escape |
|
Vlan-interface10 |
10.1.1.2/24 10::2/64 |
VRRP gateway |
|
Vlan-interface20 |
20.1.1.2/24 20::2/64 |
VRRP gateway |
|
Router |
Loopback0 |
5.5.5.5 2000::5:5:5:5/128 |
Loopback interface address Router ID |
XGE 3/0/4 |
35.1.1.2/24 35::2/64 |
Device C: XGE 3/0/4 |
|
XGE 3/0/5 |
45.1.1.2/24 45::2/64 |
Device D: XGE 3/0/4 |
|
XGE 3/0/8 |
50.1.1.1/24 50::2/64 |
Network |
Applicable product matrix
IMPORTANT: In addition to running an applicable software version, you must also install the most recent patch, if any. |
Device |
Software version |
S10500, S10500X, S7600, S7600-X, S7600E-X, S7500X, S7500E |
R7625 and later |
S12500G-AF (type T cards) |
R7625 and later |
S12500G-AF (type S cards) |
R8054P04 and later |
S10500X-G, S7500X-G |
R7754P04 and later |
S5590XP-HI-G, S6520X-EI-G, S6520XP-EI-G |
R7754P04 and later |
S6550XE-HI, S6525XE-HI |
R8106P22 and later |
S6520X-EI, S6520X-HI |
F6628P11 and later |
S5590-HI, S5590-EI, S6805-G, S6850-G, S6530X, S9850-G |
R8307P08 and later |
S5560X-HI |
F6628P11 and later |
S5560X-EI |
F6628P11 and later |
Analysis
· Switch A and Switch B are Layer 2 access devices connected to Server A and Server B.
· Server C and Server D are single-homed to the network.
· Server A and Server C belong to the same VLAN. Server B and Server D belong to the same VLAN.
· Configure Device A and Device B at the distribution tier as the tier-1 M-LAG for packet aggregation.
· Configure Device C and Device D at the core tier as the tier-2 M-LAG. Configure VRRP on the devices, and specify the virtual IP address as the gateway address for Server A, Server B, Server C, and Server D. Configure ECMP routes associated with the uplink router.
· The router is a Layer 3 device connected to the external network.
Restrictions and guidelines
All the device parameters before the following configurations use the default settings. When using the following configurations on your devices in a live network, make sure they do not conflict with your current configurations to prevent potential negative impact on your network.
Make sure the settings for the m-lag system-mac command are different for the M-LAG devices at different tiers.
Configuring tier-1 M-LAG devices
Procedure summary
· Configuring tier-1 M-LAG devices
· Configuring the links between tier-1 M-LAG devices and downlink devices Switch A and Switch B
· Configuring the links between tier-1 M-LAG devices and the single-homed server
· Configuring the links between tier-1 M-LAG devices and tier-2 M-LAG devices
Configuring tier-1 M-LAG devices
Device A |
Device B |
Description |
Remarks |
m-lag system-mac 1-1-1 |
m-lag system-mac 1-1-1 |
Configure the M-LAG system MAC address. |
You must configure the same M-LAG system MAC address for devices in the same M-LAG system. |
m-lag system-number 1 |
m-lag system-number 2 |
Configure M-LAG system number. |
You must set different M-LAG system numbers for devices in the same M-LAG system. |
m-lag system-priority 12 |
m-lag system-priority 12 |
Configure the M-LAG system priority. |
You must set the same M-LAG system priority for devices in the same M-LAG system. |
m-lag role priority 100 |
m-lag role priority 200 |
Set the M-LAG role priority of the device. |
N/A |
ip vpn-instance keepalive |
ip vpn-instance keepalive |
Create a VPN instance named keepalive. |
N/A |
quit |
quit |
Return to system view. |
N/A |
m-lag keepalive ip destination 192.168.1.2 source 192.168.1.1 vpn-instance keepalive |
m-lag keepalive ip destination 192.168.1.1 source 192.168.1.2 vpn-instance keepalive |
Configure the destination and source IP addresses of keepalive packets. |
N/A |
interface Ten-gigabitethernet3/0/1 |
interface Ten-gigabitethernet3/0/1 |
Enter the interface view for the keepalive link. |
N/A |
port link-mode route |
port link-mode route |
Configure the interface for the keepalive link to operate in route mode as a Layer 3 interface. |
N/A |
ip binding vpn-instance keepalive |
ip binding vpn-instance keepalive |
Bind a VPN instance. |
N/A |
ip address 192.168.1.1 24 |
ip address 192.168.1.2 24 |
Configure the source IP address of keepalive packets. |
N/A |
quit |
quit |
Return to system view. |
N/A |
m-lag mad exclude interface Ten-gigabitethernet3/0/1 |
m-lag mad exclude interface Ten-gigabitethernet3/0/1 |
Configure DRNI MAD to not shut down the interface attached to the keepalive link. |
N/A |
interface bridge-aggregation 1 |
interface bridge-aggregation 1 |
Create a Layer 2 aggregate interface. |
The interface is used as a peer-link interface. |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Configure the aggregate interface acting as the peer-link interface to operate in dynamic mode. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface Ten-gigabitethernet 3/0/2 |
interface Ten-gigabitethernet 3/0/2 |
Enter the view of the physical interface on the peer link. |
N/A |
port link-aggregation group 1 |
port link-aggregation group 1 |
Assign the physical interface on the peer link to the aggregation group for the peer link (aggregation group 1). |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface bridge-aggregation 1 |
interface bridge-aggregation 1 |
Enter Ethernet aggregate interface view. |
N/A |
port m-lag peer-link 1 |
port m-lag peer-link 1 |
Specify the aggregate interface (Bridge-Aggregation 1) as the peer-link interface. |
N/A |
undo mac-address static source-check enable |
undo mac-address static source-check enable |
Disable the static source check feature to avoid inter-peer link Layer 3 traffic forwarding failures. |
|
quit |
quit |
Return to system view. |
N/A |
Configuring the links between tier-1 M-LAG devices and downlink devices Switch A and Switch B
Device A |
Device B |
Description |
Remarks |
vlan 10 20 |
vlan 10 20 |
Create VLANs. |
N/A |
interface bridge-aggregation 11 |
interface bridge-aggregation 11 |
Create a Layer 2 aggregate interface connected to Switch A. |
N/A |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Configure the aggregate interface to operate in dynamic mode. |
N/A |
port m-lag group 11 |
port m-lag group 11 |
Assign the aggregate interface to M-LAG group 11. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface Ten-gigabitethernet 3/0/5 |
interface Ten-gigabitethernet 3/0/5 |
Enter the view of the physical interface connecting the M-LAG system to Switch A. |
N/A |
port link-aggregation group 11 |
port link-aggregation group 11 |
Assign the interface to the aggregation group. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface bridge-aggregation 12 |
interface bridge-aggregation 12 |
Create a Layer 2 aggregate interface connected to Switch B. |
N/A |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Configure the aggregate interface to operate in dynamic mode. |
N/A |
port m-lag group 12 |
port m-lag group 12 |
Assign the aggregate interface to M-LAG group 12. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface Ten-gigabitethernet 3/0/6 |
interface Ten-gigabitethernet 3/0/6 |
Enter the view of the physical interface connecting the M-LAG system to Switch B. |
N/A |
port link-aggregation group 12 |
port link-aggregation group 12 |
Assign the interface to the aggregation group. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface range bridge-aggregation 11 bridge-aggregation 12 |
interface range bridge-aggregation 11 bridge-aggregation 12 |
Enter Ethernet aggregate interface group view. |
N/A |
port link-type trunk |
port link-type trunk |
Set the link type of the Layer 2 aggregate interface to trunk. |
N/A |
port trunk permit vlan 10 20 |
port trunk permit vlan 10 20 |
Assign the interface to VLAN 10 and VLAN 20. |
N/A |
undo port trunk permit vlan 1 |
undo port trunk permit vlan 1 |
Remove the interface from VLAN 1. |
N/A |
quit |
quit |
Return to system view. |
N/A |
Configuring the links between tier-1 M-LAG devices and the single-homed server
Device A |
Device B |
Description |
Remarks |
interface Ten-gigabitethernet 3/0/3 |
interface Ten-gigabitethernet 3/0/3 |
Enter the view of the physical interface connecting the M-LAG system to the single-homed server. |
N/A |
port access vlan 10 |
port trunk permit vlan 20 |
Assign the interface to VLAN 10 and VLAN 20. |
N/A |
quit |
quit |
Return to system view. |
N/A |
Configuring the links between tier-1 M-LAG devices and tier-2 M-LAG devices
Device A |
Device B |
Description |
Remarks |
interface bridge-aggregation 20 |
interface bridge-aggregation 20 |
Create a Layer 2 aggregate interface connected to tier-2 M-LAG devices. |
N/A |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Configure the aggregate interface to operate in dynamic mode. |
N/A |
port m-lag group 20 |
port m-lag group 20 |
Assign the aggregate interface to M-LAG group 20. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface range Ten-gigabitethernet 3/0/4 Ten-gigabitethernet 3/0/7 |
interface range Ten-gigabitethernet 3/0/4 Ten-gigabitethernet 3/0/7 |
Enter the view of the physical interfaces connecting the M-LAG devices to tier-2 M-LAG devices. |
N/A |
port link-aggregation group 20 |
port link-aggregation group 20 |
Assign the interfaces to the aggregation group. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface bridge-aggregation 20 |
interface bridge-aggregation 20 |
Enter Ethernet aggregate interface view. |
N/A |
port link-type trunk |
port link-type trunk |
Set the link type of the Layer 2 aggregate interface to trunk. |
N/A |
port trunk permit vlan 10 20 |
port trunk permit vlan 10 20 |
Assign the interface to VLAN 10 and VLAN 20. |
N/A |
undo port trunk permit vlan 1 |
undo port trunk permit vlan 1 |
Remove the interface from VLAN 1. |
N/A |
quit |
quit |
Return to system view. |
N/A |
Configuring the tier-2 M-LAG system
Procedure summary
· Configuring the links between tier-2 M-LAG devices and tier-1 M-LAG devices
· Configuring the links between tier-2 M-LAG devices and the router
· Configuring the Layer 3 link connecting the tier-2 M-LAG devices
Configuring tier-2 M-LAG
Device C |
Device D |
Description |
Remarks |
m-lag system-mac 2-2-2 |
m-lag system-mac 2-2-2 |
Configure the M-LAG system MAC address. |
You must configure the same M-LAG system MAC address for devices in the same M-LAG system. |
m-lag system-number 1 |
m-lag system-number 2 |
Configure M-LAG system number. |
You must set different M-LAG system numbers for devices in the same M-LAG system. |
m-lag system-priority 34 |
m-lag system-priority 34 |
Configure the M-LAG system priority. |
You must set the same M-LAG system priority for devices in the same M-LAG system. |
m-lag role priority 100 |
m-lag role priority 200 |
Set the M-LAG role priority of the device. |
N/A |
ip vpn-instance keepalive |
ip vpn-instance keepalive |
Create a VPN instance named keepalive. |
N/A |
quit |
quit |
Return to system view. |
N/A |
m-lag keepalive ip destination 192.168.3.2 source 192.168.3.1 vpn-instance keepalive |
m-lag keepalive ip destination 192.168.3.1 source 192.168.3.2 vpn-instance keepalive |
Configure the destination and source IP addresses of keepalive packets. |
N/A |
interface Ten-gigabitethernet3/0/1 |
interface Ten-gigabitethernet3/0/1 |
Enter the interface view for the keepalive link. |
N/A |
port link-mode route |
port link-mode route |
Configure the interface for the keepalive link to operate in route mode as a Layer 3 interface. |
N/A |
ip binding vpn-instance keepalive |
ip binding vpn-instance keepalive |
Bind a VPN instance. |
N/A |
ip address 192.168.3.1 24 |
ip address 192.168.3.2 24 |
Configure the source IP address of keepalive packets. |
N/A |
quit |
quit |
Return to system view. |
N/A |
m-lag mad exclude interface Ten-gigabitethernet3/0/1 |
m-lag mad exclude interface Ten-gigabitethernet3/0/1 |
Configure DRNI MAD to not shut down the interface attached to the keepalive link. |
N/A |
interface bridge-aggregation 1 |
interface bridge-aggregation 1 |
Create a Layer 2 aggregate interface. |
The interface is used as a peer-link interface. |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Configure the aggregate interface acting as the peer-link interface to operate in dynamic mode. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface Ten-gigabitethernet 3/0/2 |
interface Ten-gigabitethernet 3/0/2 |
Enter the view of the physical interface on the peer link. |
N/A |
port link-aggregation group 1 |
port link-aggregation group 1 |
Assign the physical interface on the peer link to the aggregation group for the peer link (aggregation group 1). |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface bridge-aggregation 1 |
interface bridge-aggregation 1 |
Enter Ethernet aggregate interface view. |
N/A |
port m-lag peer-link 1 |
port m-lag peer-link 1 |
Specify the aggregate interface (Bridge-Aggregation 1) as the peer-link interface. |
N/A |
undo mac-address static source-check enable |
undo mac-address static source-check enable |
Disable the static source check feature to avoid inter-peer link Layer 3 traffic forwarding failures. |
|
quit |
quit |
Return to system view. |
N/A |
Configuring the links between tier-2 M-LAG devices and tier-1 M-LAG devices
Device C |
Device D |
Description |
Remarks |
vlan 10 20 |
vlan 10 20 |
Create VLANs. |
N/A |
interface bridge-aggregation 20 |
interface bridge-aggregation 20 |
Create a Layer 2 aggregate interface connected to tier-1 M-LAG devices. |
N/A |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Configure the aggregate interface to operate in dynamic mode. |
N/A |
port m-lag group 20 |
port m-lag group 20 |
Assign the aggregate interface to M-LAG group 20. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface range Ten-gigabitethernet 3/0/6 Ten-gigabitethernet 3/0/7 |
interface range Ten-gigabitethernet 3/0/6 Ten-gigabitethernet 3/0/7 |
Enter the view of the physical interfaces connecting the M-LAG devices to tier-1 M-LAG devices. |
N/A |
port link-aggregation group 20 |
port link-aggregation group 20 |
Assign the interfaces to the aggregation group. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface bridge-aggregation 20 |
interface bridge-aggregation 20 |
Enter Ethernet aggregate interface view. |
N/A |
port link-type trunk |
port link-type trunk |
Set the link type of the Layer 2 aggregate interface to trunk. |
N/A |
port trunk permit vlan 10 20 |
port trunk permit vlan 10 20 |
Assign the interface to VLAN 10 and VLAN 20. |
N/A |
undo port trunk permit vlan 1 |
undo port trunk permit vlan 1 |
Remove the interface from VLAN 1. |
N/A |
quit |
quit |
Return to system view. |
N/A |
Configuring VRRP gateways
Device C |
Device D |
Description |
Remarks |
interface vlan-interface 10 |
interface vlan-interface 10 |
Create VLAN-interface 10. |
N/A |
ip address 10.1.1.1 24 |
ip address 10.1.1.2 24 |
Assign an IPv4 address to VLAN-interface 10. |
N/A |
vrrp vrid 1 virtual-ip 10.1.1.100 |
vrrp vrid 1 virtual-ip 10.1.1.100 |
Create IPv4 VRRP group 1, and configure virtual IP address 10.1.1.100 for the VRRP group. |
N/A |
vrrp vrid 1 priority 200 |
N/A |
Configure the priority of the device in VRRP group 1. |
This configuration ensures that Device C can become the master. |
ipv6 address 10::1 64 |
ipv6 address 10::2 64 |
Assign an IPv6 address to VLAN-interface 10. |
N/A |
ipv6 address fe80:10::1 link-local |
ipv6 address fe80:10::2 link-local |
Assign an IPv6 link-local address to VLAN-interface 10. |
N/A |
vrrp ipv6 vrid 1 virtual-ip fe80:10::100 link-local |
vrrp ipv6 vrid 1 virtual-ip fe80:10::100 link-local |
Create IPv6 VRRP group 1, and configure virtual IPv6 address fe80:10::100 for IPv6 VRRP group 1. |
N/A |
vrrp ipv6 vrid 1 virtual-ip 10::100 |
vrrp ipv6 vrid 1 virtual-ip 10::100 |
Create IPv6 VRRP group 1, and configure virtual IPv6 address 10::100 for IPv6 VRRP group 1. |
N/A |
vrrp ipv6 vrid 1 priority 200 |
N/A |
Configure the priority of the device in IPv6 VRRP group 1. |
This configuration ensures that Device C can become the master. |
quit |
quit |
Return to system view. |
N/A |
interface vlan-interface 20 |
interface vlan-interface 20 |
Create VLAN-interface 20. |
N/A |
ip address 20.1.1.1 24 |
ip address 20.1.1.2 24 |
Assign an IPv4 address to VLAN-interface 20. |
N/A |
vrrp vrid 2 virtual-ip 20.1.1.100 |
vrrp vrid 2 virtual-ip 20.1.1.100 |
Create IPv4 VRRP group 2, and configure virtual IP address 20.1.1.100 for the VRRP group. |
N/A |
vrrp vrid 2 priority 200 |
N/A |
Configure the priority of the device in VRRP group 2. |
This configuration ensures that Device C can become the master. |
ipv6 address 20::1 64 |
ipv6 address 20::2 64 |
Assign an IPv6 address to VLAN-interface 20. |
N/A |
ipv6 address fe80:20::1 link-local |
ipv6 address fe80:20::2 link-local |
Assign an IPv6 link-local address to VLAN-interface 20. |
N/A |
vrrp ipv6 vrid 2 virtual-ip fe80:20::100 link-local |
vrrp ipv6 vrid 2 virtual-ip fe80:20::100 link-local |
Create IPv6 VRRP group 2, and configure virtual IPv6 address fe80:20::100 for IPv6 VRRP group 2. |
N/A |
vrrp ipv6 vrid 2 virtual-ip 20::100 |
vrrp ipv6 vrid 2 virtual-ip 20::100 |
Create IPv6 VRRP group 2, and configure virtual IPv6 address 20::100 for IPv6 VRRP group 2. |
N/A |
vrrp ipv6 vrid 2 priority 200 |
N/A |
Configure the priority of the device in IPv6 VRRP group 2. |
This configuration ensures that Device C can become the master. |
quit |
quit |
Return to system view. |
N/A |
m-lag mad exclude interface Vlan-interface 10 |
m-lag mad exclude interface Vlan-interface 10 |
Exclude VLAN-interface 101 from the shutdown action by M-LAG MAD. |
This configuration avoids traffic interruption caused by ARP/ND entry synchronization failure when the VLAN interface is in M-LAG MAD DOWN state. |
m-lag mad exclude interface Vlan-interface 20 |
m-lag mad exclude interface Vlan-interface 20 |
Exclude VLAN-interface 101 from the shutdown action by M-LAG MAD. |
Configuring the links between tier-2 M-LAG devices and the router
Device C |
Device D |
Description |
Remarks |
router id 3.3.3.3 |
router id 4.4.4.4 |
Configure a router ID. |
N/A |
ospf 1 |
ospf 1 |
Configure OSPF to implement IPv4 network connectivity between the router and member devices. |
N/A |
import-route direct |
import-route direct |
Redistribute direct routes. |
N/A |
area 0 |
area 0 |
Configure area 0. |
N/A |
quit |
quit |
Return to OSPF view. |
N/A |
quit |
quit |
Return to system view. |
N/A |
ospfv3 1 |
ospfv3 1 |
Enable OSPFv3. |
N/A |
router-id 3.3.3.3 |
router-id 4.4.4.4 |
Configure a router ID. |
N/A |
import-route direct |
import-route direct |
Redistribute direct routes. |
N/A |
area 0 |
area 0 |
Configure area 0. |
N/A |
quit |
quit |
Return to OSPFv3 view. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface loopback 0 |
interface loopback 0 |
Configure loopback interface 0. |
N/A |
ip address 3.3.3.3 32 |
ip address 4.4.4.4 32 |
Configure an IPv4 address for the loopback interface. |
N/A |
ospf 1 area 0 |
ospf 1 area 0 |
Enable OSPF for the interface. |
N/A |
ipv6 address 2000::3:3:3:3 128 |
ipv6 address 2000::4:4:4:4 128 |
Configure an IPv6 address for the loopback interface. |
N/A |
ospfv3 1 area 0.0.0.0 |
ospfv3 1 area 0.0.0.0 |
Enable OSPFv3 for the loopback interface. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface Ten-gigabitethernet 3/0/4 |
interface Ten-gigabitethernet 3/0/4 |
Configure the Ethernet interface connected to the router. |
N/A |
port link-mode route |
port link-mode route |
Configure the interconnected interface as a Layer 3 Ethernet interface. |
N/A |
ip address 35.1.1.1 24 |
ip address 45.1.1.1 24 |
Assign an IPv4 address to the interconnected interface. |
N/A |
ospf 1 area 0 |
ospf 1 area 0 |
Enable OSPF for the interface. |
N/A |
ipv6 address 35::1 64 |
ipv6 address 45::1 64 |
Assign an IPv6 address to the interconnected interface. |
N/A |
ospfv3 1 area 0.0.0.0 |
ospfv3 1 area 0.0.0.0 |
Enable OSPFv3 for the interface. |
N/A |
quit |
quit |
Return to system view. |
N/A |
Configuring the Layer 3 link connecting the tier-2 M-LAG devices
Device C |
Device D |
Description |
Remarks |
vlan 34 |
vlan 34 |
Create a VLAN. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface vlan-interface 34 |
interface vlan-interface 34 |
Configure a VLAN interface. |
Layer 3 link interconnecting the two M-LAG devices used for east-west traffic forwarding and north-south traffic escape. |
ip address 34.1.1.1 24 |
ip address 34.1.1.2 24 |
Assign an IPv4 address to the interface. |
N/A |
ospf 1 area 0 |
ospf 1 area 0 |
Enable OSPF for the interface. |
N/A |
ipv6 address 34::1 64 |
ipv6 address 34::2 64 |
Assign an IPv6 address to the interface. |
N/A |
ospfv3 1 area 0.0.0.0 |
ospfv3 1 area 0.0.0.0 |
Enable OSPFv3 for the interface. |
N/A |
quit |
quit |
Return to system view. |
N/A |
m-lag mad exclude interface Vlan-interface 34 |
m-lag mad exclude interface Vlan-interface 34 |
Exclude VLAN-interface 101 from the shutdown action by M-LAG MAD. |
This configuration avoids traffic interruption caused by ARP/ND entry synchronization failure when the VLAN interface is in M-LAG MAD DOWN state. |
Configuring the router
Procedure summary
· Configuring the link between the router and tier-2 M-LAG devices
· Configuring the link between the router and the network
Configuring the link between the router and tier-2 M-LAG devices
Router |
Description |
Remarks |
router id 5.5.5.5 |
Configure a router ID. |
N/A |
ospf 1 |
Configure OSPF to implement IPv4 network connectivity between M-LAG member devices. |
N/A |
import-route direct |
Redistribute direct routes. |
N/A |
area 0 |
Configure area 0. |
N/A |
quit |
Return to OSPF view. |
N/A |
quit |
Return to system view. |
N/A |
ospfv3 1 |
Enable OSPFv3. |
N/A |
router-id 5.5.5.5 |
Configure a router ID. |
N/A |
import-route direct |
Redistribute direct routes. |
N/A |
area 0 |
Configure area 0. |
N/A |
quit |
Return to OSPFv3 view. |
N/A |
quit |
Return to system view. |
N/A |
interface loopback 0 |
Configure loopback interface 0. |
N/A |
ip address 5.5.5.5 32 |
Configure an IPv4 address for the loopback interface. |
N/A |
ospf 1 area 0 |
Enable OSPF for the interface. |
N/A |
ipv6 address 2000::5:5:5:5 128 |
Configure an IPv6 address for the loopback interface. |
N/A |
ospfv3 1 area 0.0.0.0 |
Enable OSPFv3 for the loopback interface. |
N/A |
quit |
Return to system view. |
N/A |
interface Ten-gigabitethernet 3/0/4 |
Enter Ethernet interface view |
N/A |
port link-mode route |
Configure the interconnected interface to operate in route mode as a Layer 3 interface. |
N/A |
ip address 35.1.1.2 24 |
Configure an IPv4 address for the interface. |
N/A |
ospf 1 area 0 |
Enable OSPF for the interface. |
N/A |
ipv6 address 35::2 64 |
Assign an IPv6 address to the interconnected interface. |
N/A |
ospfv3 1 area 0.0.0.0 |
Enable OSPFv3 for the interface. |
N/A |
quit |
Return to system view. |
N/A |
interface Ten-gigabitethernet 3/0/5 |
Enter Ethernet interface view |
N/A |
port link-mode route |
Configure the interconnected interface as a Layer 3 Ethernet interface. |
N/A |
ip address 45.1.1.2 24 |
Configure an IPv4 address for the interface. |
N/A |
ospf 1 area 0 |
Enable OSPF for the interface. |
N/A |
ipv6 address 45::2 64 |
Assign an IPv6 address to the interconnected interface. |
N/A |
ospfv3 1 area 0.0.0.0 |
Enable OSPFv3 for the interface. |
N/A |
quit |
Return to system view. |
N/A |
Configuring the link between the router and the network
Router |
Description |
Remarks |
vlan 50 |
Create a VLAN. |
N/A |
quit |
Return to system view. |
N/A |
interface vlan-interface 50 |
Configure the VLAN interface connected to the network. |
N/A |
ip address 50.1.1.1 24 |
Assign an IPv4 address to the interface. |
N/A |
ipv6 address 50::1 64 |
Assign an IPv6 address to the interface. |
N/A |
quit |
Return to system view. |
N/A |
interface Ten-gigabitethernet 3/0/8 |
Enter Ethernet interface view |
N/A |
port access vlan 50 |
Remove the interface from VLAN 50. |
N/A |
quit |
Return to system view. |
N/A |
Configuring downlink devices Switch A and Switch B
Procedure summary
· Configuring the links between Switch A/Switch B and tier-1 M-LAG devices
· Configuring the links between Switch A/Switch B and the servers
Configuring the links between Switch A/Switch B and tier-1 M-LAG devices
Switch A |
Switch B |
Description |
Remarks |
vlan 10 20 |
vlan 10 20 |
Create VLANs. |
N/A |
interface bridge-aggregation 11 |
interface bridge-aggregation 12 |
Create a Layer 2 aggregate interface. |
N/A |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Configure the aggregate interface to operate in dynamic mode. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface range Ten-gigabitethernet 3/0/4 Ten-gigabitethernet 3/0/5 |
interface range Ten-gigabitethernet 3/0/4 Ten-gigabitethernet 3/0/5 |
Enter the view of the physical interfaces connecting to the M-LAG devices. |
N/A |
port link-aggregation group 11 |
port link-aggregation group 12 |
Add the interfaces to the aggregation group. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface bridge-aggregation 11 |
interface bridge-aggregation 12 |
Enter Ethernet aggregate interface view. |
N/A |
port link-type trunk |
port link-type trunk |
Set the link type of the aggregate interface to trunk. |
N/A |
port trunk permit vlan 10 20 |
port trunk permit vlan 10 20 |
Assign the interface to VLAN 10 and VLAN 20. |
N/A |
undo port trunk permit vlan 1 |
undo port trunk permit vlan 1 |
Remove the interface from VLAN 1. |
N/A |
quit |
quit |
Return to system view. |
N/A |
interface Ten-gigabitethernet 3/0/8 |
interface Ten-gigabitethernet 3/0/8 |
Enter Ethernet interface view |
N/A |
port link-type trunk |
port link-type trunk |
Set the link type of the aggregate interface to trunk. |
N/A |
port trunk permit vlan 10 20 |
port trunk permit vlan 10 20 |
Assign the interface to VLAN 10 and VLAN 20. |
N/A |
undo port trunk permit vlan 1 |
undo port trunk permit vlan 1 |
Remove the interface from VLAN 1. |
N/A |
quit |
quit |
Return to system view. |
N/A |
Configuring the links between Switch A/Switch B and the servers
Switch A |
Switch B |
Description |
Remarks |
interface Ten-gigabitethernet 3/0/8 |
interface Ten-gigabitethernet 3/0/8 |
Enter the view of the physical interface connecting to the server. |
N/A |
port access permit vlan 10 |
port access permit vlan 20 |
Assign the interface to VLAN 10 and VLAN 20. |
N/A |
quit |
quit |
Return to system view. |
N/A |
Traffic model
About the traffic model
The traffic model contains the following information:
· ID—Traffic ID, in O-X-XXX format. The first segment (O) represents overlay traffic. The second segment (X) represents the IP version (4 for IPv4 and 6 for IPv6). The third segment (XXX) represents a unique number for the traffic, starting from 001.
· Type—Traffic type, such as known unicast/IPv4 and unicast/L2.
· Direction—Traffic direction, such as inter-leaf east-west traffic and north-south traffic.
· Path—The nodes that the traffic traverses from the source to the destination.
· Simulation method—Traffic simulation method. Testers are used to simulate the patterns of traffic on the network set up in this example.
· Simulation traffic load—The network can be tested under light load (fewer than 1000 simulation traffic flows) or heavy load (more than 1000 simulation traffic flows).
· Traffic direction to firewalls/LBs—No firewalls or LBs are used in this example, or traffic is directed to firewalls or LBs through PBR, M-LAG+VRRP, or static routing.
Traffic
ID |
Type |
Direction |
Path |
Simulation method |
Simulation traffic load |
Traffic direction to firewalls/LBs |
Remarks |
O-4-001 |
Known unicast/IPv4 |
North-south traffic |
Server A-Device A&B-Device C&D-Router-Network |
Tester |
Light |
N/A |
When the uplink interface of Device C fails, traffic is forwarded along the Layer 3 link between M- LAG member devices. |
O-4-002 |
Known unicast/IPv4 |
North-south traffic |
Server C-Device A-Device C&D-Router-Network |
Tester |
Light |
N/A |
|
O-4-003 |
Known unicast/IPv4 |
North-south traffic |
Server D-Device B-Device C&D-Router-Network |
Tester |
Light |
N/A |
|
O-4-004 |
Known unicast/IPv4 |
East-west traffic |
Server A-Device A&B-Device C&D-Device A&B-Server B |
Tester |
Light |
N/A |
N/A |
O-4-005 |
Known unicast/IPv4 |
East-west traffic |
Server A-Device A&B-Device C&D-Device B-Server D |
Tester |
Light |
N/A |
N/A |
O-6-001 |
Known unicast/IPv6 |
North-south traffic |
Server A-Device A&B-Device C&D-Router-Network |
Tester |
Light |
N/A |
When the uplink interface of Device C fails, traffic is forwarded along the Layer 3 link between M- LAG member devices. |
O-6-002 |
Known unicast/IPv6 |
North-south traffic |
Server C-Device A-Device D&D-Router-Network |
Tester |
Light |
N/A |
|
O-6-003 |
Known unicast/IPv6 |
North-south traffic |
Server D-Device B-Device C&D-Router-Network |
Tester |
Light |
N/A |
|
O-6-004 |
Known unicast/IPv6 |
East-west traffic |
Server A-Device A&B-Device C&D-Device A&B-Server B |
Tester |
Light |
N/A |
N/A |
O-6-005 |
Known unicast/IPv6 |
East-west traffic |
Server A-Device A&B-Device C&D-Device B-Server D |
Tester |
Light |
N/A |
N/A |
O-L2-001 |
Known unicast L2 |
East-west traffic |
Server A-Device A&B-Device A-Server C |
Tester |
Light |
N/A |
N/A |
Convergence performance test results
Failure test results
Table 1 Link failure test results
Device |
Failure cause |
Traffic downtime |
N/A |
Device A |
Single member link failure in an M-LAG interface |
≤ 400 ms |
N/A |
Recovery from a single M-LAG interface member link failure |
≤ 100 ms |
N/A |
|
Single uplink failure |
≤ 1000 ms |
N/A |
|
Recovery from a single uplink failure |
≤ 100 ms |
N/A |
|
Complete peer link failure |
≤ 1200 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Recovery from a complete peer link failure |
≤ 1000 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Keepalive link failure |
0 ms |
N/A |
|
Recovery from a keepalive link failure |
0 ms |
N/A |
|
Keepalive link and peer link failure |
≤ 4000 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Recovery from a keepalive link and peer link failure |
≤ 4000 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Restart of one M-LAG member device |
≤ 100 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Recovery from M-LAG member device restart |
≤ 500 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Switching fabric module failure |
≤ 100 ms |
N/A |
|
Recovery from a switching fabric module failure |
≤ 100 ms |
N/A |
|
Device C |
Single member link failure in an M-LAG interface |
≤ 400 ms |
N/A |
Recovery from a single M-LAG interface member link failure |
≤ 100 ms |
N/A |
|
Single uplink failure |
≤ 1000 ms |
N/A |
|
Recovery from a single uplink failure |
≤ 100 ms |
N/A |
|
Complete peer link failure |
≤ 1200 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Recovery from a complete peer link failure |
≤ 1000 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Keepalive link failure |
0 ms |
N/A |
|
Recovery from a keepalive link failure |
0 ms |
N/A |
|
Keepalive link and peer link failure |
≤ 4000 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Recovery from a keepalive link and peer link failure |
≤ 4000 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Upgrade operation |
≤ 500 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Restart of one M-LAG member device |
≤ 100 ms |
Focus on M-LAG interface services. Single-homed interface services are not assured. |
|
Recovery from M-LAG member device restart |
≤ 100 ms |
N/A |
|
Recovery from a switching fabric module failure |
≤ 100 ms |
N/A |
Verifying the configuration
Verification commands
Table 2 Verification commands
Device A |
Device B |
Description |
display m-lag summary |
display m-lag summary |
Displays display summary information about the peer-link interface and M-LAG interfaces. |
display m-lag keepalive |
display m-lag keepalive |
Displays M-LAG keepalive packet statistics. |
display m-lag role |
display m-lag role |
Displays M-LAG role information. |
Procedure
Verifying the tier-2 M-LAG system status
View the status of the M-LAG system between Device C and Device D to verify that the M-LAG system can be established correctly. Take Device C as an example:
# Display summary information about the peer-link interface and M-LAG interfaces.
[Device C] display m-lag summary
Flags: A -- Aggregate interface down, B -- No peer M-LAG interface configured
C -- Configuration consistency check failed
Peer-link interface: BAGG1
Peer-link interface state (cause): UP
Keepalive link state (cause): UP
M-LAG interface information
M-LAG IF M-LAG group Local state (cause) Peer state Remaining down time(s)
BAGG20 20 UP UP -
# Display M-LAG keepalive packet statistics to verify that the keepalive packet sending and receiving states are both successful.
[Device C]disp m-lag keepalive
Neighbor keepalive link status (cause): Up
Neighbor is alive for: 229 s 313 ms
Keepalive packet transmission status:
Sent: Successful
Received: Successful
Last received keepalive packet information:
Source IP address: 192.168.3.2
Time: 2020/05/15 14:53:31
Action: Accept
M-LAG keepalive parameters
Destination IP address: 192.168.3.2
Source IP address: 192.168.3.1
Keepalive UDP port : 6400
Keepalive VPN name : keepalive
Keepalive interval : 1000 ms
Keepalive timeout : 5 sec
Keepalive hold time: 3 sec
# Display M-LAG system information.
[Device C] disp m-lag system
System information
Local system number: 1 Peer system number: 2
Local system MAC: 0002-0002-0002 Peer system MAC: 0002-0002-0002
Local system priority: 34 Peer system priority: 34
Local bridge MAC: b0f9-63b6-4c12 Peer bridge MAC: b0f9-63b6-4c1b
Local effective role: Primary Peer effective role: Secondary
Health level: 0
Standalone mode on split: Disabled
In standalone mode: No
System timer information
Timer State Value (s) Remaining time (s)
Auto recovery Disabled - -
Restore delay Disabled 30 -
Consistency-check delay Disabled 15 -
Standalone delay Disabled - -
Role to None delay Disabled 60 -
# Display M-LAG role information.
[Device3] disp m-lag role
Effective role information
Factors Local Peer
Effective role Primary Secondary
Initial role None None
MAD DOWN state Yes Yes
Health level 0 0
Role priority 100 200
Bridge MAC b0f9-63b6-4c12 b0f9-63b6-4c1b
Effective role trigger: peer-link calculation
Effective role reason: Role priority
Configured role information
Factors Local Peer
Configured role Primary Secondary
Role priority 100 200
Bridge MAC b0f9-63b6-4c12 b0f9-63b6-4c1b
Verifying the tier-1 M-LAG system status
# View the status of the M-LAG system between Device A and Device B to verify that the M-LAG system can be established correctly. Take Device A as an example:
# Display summary information about the peer-link interface and M-LAG interfaces, and verify that the peer-link interface is up.
[Device A]disp m-lag summary
Flags: A -- Aggregate interface down, B -- No peer M-LAG interface configured
C -- Configuration consistency check failed
Peer-link interface: BAGG1
Peer-link interface state (cause): UP
Keepalive link state (cause): UP
M-LAG interface information
M-LAG IF M-LAG group Local state (cause) Peer state Remaining down time(s)
BAGG11 11 UP UP -
BAGG12 12 UP UP -
BAGG20 20 UP UP -
# Display M-LAG keepalive packet statistics to verify that the keepalive packet sending and receiving states are both successful.
[Device A] disp m-lag keepalive
Neighbor keepalive link status (cause): Up
Neighbor is alive for: 352 s 646 ms
Keepalive packet transmission status:
Sent: Successful
Received: Successful
Last received keepalive packet information:
Source IP address: 192.168.1.2
Time: 2022/03/15 14:55:27
Action: Accept
M-LAG keepalive parameters
Destination IP address: 192.168.1.2
Source IP address: 192.168.1.1
Keepalive UDP port : 6400
Keepalive VPN name: keepalive
Keepalive interval: 1000 ms
Keepalive timeout: 5 sec
Keepalive hold time: 3 sec
# Display M-LAG system information.
[Device A]disp m-lag system
System information
Local system number: 1 Peer system number: 2
Local system MAC: 0001-0001-0001 Peer system MAC: 0001-0001-0001
Local system priority: 12 Peer system priority: 12
Local bridge MAC: b0f9-63b6-4c00 Peer bridge MAC: b0f9-63b6-4c09
Local effective role: Primary Peer effective role: Secondary
Health level: 0
Standalone mode on split: Disabled
In standalone mode: No
System timer information
Timer State Value (s) Remaining time (s)
Auto recovery Disabled - -
Restore delay Disabled 30 -
Consistency-check delay Disabled 15 -
Standalone delay Disabled - -
Role to None delay Disabled 60 -
# Display M-LAG role information.
[Device A] display m-lag role
Effective role information
Factors Local Peer
Effective role Primary Secondary
Initial role Primary None
MAD DOWN state No Yes
Health level 0 0
Role priority 100 200
Bridge MAC b0f9-63b6-4c00 b0f9-63b6-4c09
Effective role trigger: peer-link calculation
Effective role reason: Single None role
Configured role information
Factors Local Peer
Configured role Primary Secondary
Role priority 100 200
Bridge MAC b0f9-63b6-4c00 b0f9-63b6-4c09
Verifying the routing protocol status
# Display OSPF neighbor and route information on Device C.
[Device C] disp ospf peer
OSPF Process 1 with Router ID 3.3.3.3
Neighbor Brief Information
Area: 0.0.0.0
Router ID Address Pri Dead-Time State Interface
5.5.5.5 35.1.1.2 1 32 Full/DR XGE3/0/4
4.4.4.4 34.1.1.2 1 39 Full/DR Vlan34
[Device C]
[Device C] disp ip routing-table 50.1.1.0
Summary count: 1
Destination/Mask Proto Pre Cost NextHop Interface
50.1.1.0/24 O_ASE2 150 1 35.1.1.2 XGE3/0/4
# Display OSPF neighbor and route information on Router.
[Router] disp ospf peer
OSPF Process 1 with Router ID 5.5.5.5
Neighbor Brief Information
Area: 0.0.0.0
Router ID Address Pri Dead-Time State Interface
3.3.3.3 35.1.1.1 1 35 Full/BDR XGE4/0/4
4.4.4.4 45.1.1.1 1 38 Full/BDR XGE4/0/5
[Router]
[Router] disp ip rou 10.1.1.1
Summary count: 2
Destination/Mask Proto Pre Cost NextHop Interface
10.1.1.0/24 O_ASE2 150 1 35.1.1.1 XGE4/0/4
45.1.1.1 XGE4/0/5
[Router] disp ip rou 20.1.1.1
Summary count : 2
Destination/Mask Proto Pre Cost NextHop Interface
20.1.1.0/24 O_ASE2 150 1 35.1.1.1 XGE4/0/4
45.1.1.1 XGE4/0/5
# Display OSPFv3 neighbor and route information on Device C.
[Device C] disp ospfv3 peer
OSPFv3 Process 1 with Router ID 3.3.3.3
Area: 0.0.0.0
-------------------------------------------------------------------------
Router ID Pri State Dead-Time InstID Interface
5.5.5.5 1 Full/DR 00:00:35 0 XGE3/0/4
4.4.4.4 1 Full/DR 00:00:32 0 Vlan34
[Device C] disp ipv6 routing-table 50::0
Summary count : 1
Destination: 50::/64 Protocol : O_INTRA
NextHop : 35::2 Preference: 10
Interface : XGE3/0/4 Cost : 1
[Device C]
# Display OSPFv3 neighbor and route information on Router.
[Router] disp ospf peer
OSPF Process 1 with Router ID 5.5.5.5
Neighbor Brief Information
Area: 0.0.0.0
Router ID Address Pri Dead-Time State Interface
3.3.3.3 35.1.1.1 1 35 Full/BDR XGE4/0/4
4.4.4.4 45.1.1.1 1 38 Full/BDR XGE4/0/5
[Router] disp ipv6 routing-table 10::
Summary count : 2
Destination: 10::/64 Protocol : O_INTRA
NextHop : 35::1 Preference: 10
Interface : XGE3/0/4 Cost : 1
Destination: 10::/64 Protocol : O_INTRA
NextHop : 45::1 Preference: 10
Interface : XGE3/0/5 Cost : 1
[Router] disp ipv6 routing-table 20::
Summary count : 2
Destination: 20::/64 Protocol : O_INTRA
NextHop : 35::1 Preference: 10
Interface : XGE3/0/4 Cost : 1
Destination: 20::/64 Protocol : O_INTRA
NextHop : 45::1 Preference: 10
Interface : XGE3/0/5 Cost : 1
Verify east-west and north-south traffic forwarding
Server A, Server B, and Server C have Layer 2 and Layer 3 connectivity between them.
Server A, Server C, Server D, and Network have Layer 3 connectivity between them.
Verifying service communication upon downlink interface failure on Device A or Device B
Shut down the interface on Device A connected to Switch A/Switch B, and verify that the services can still communicate with each other (temporary packet loss occurs during traffic switchover).
Shut down the interface on Device B connected to Switch A/Switch B, and verify that the services can still communicate with each other (temporary packet loss occurs during traffic switchover).
Verifying service communication with Network upon uplink interface failure on Device A or Device B
Shut down the interface on Device A connected to Device C/ Device D, and verify that the services can still communicate with each other (temporary packet loss occurs during traffic switchover).
Shut down the interface on Device B connected to Device C/ Device D, and verify that the services can still communicate with each other (temporary packet loss occurs during traffic switchover).
Verifying service communication upon uplink interface failure on Device C Device D
Shut down the interface on Device C connected to Router, and verify that the services can still communicate with each other (temporary packet loss occurs during traffic switchover).
Shut down the interface on Device D connected to Router, and verify that the services can still communicate with each other (temporary packet loss occurs during traffic switchover).
Upgrade procedure
Pre-upgrade verification commands
Before you perform an upgrade, use the commands in "Verifying the configuration" and the commands in the following table to verify that all requirements are met for an upgrade.
Table 3 Pre-upgrade verification commands
Device A/B |
Device C/D |
Description |
display device |
display device |
Displays summary information about the peer link interfaces and M-LAG interfaces in the M-LAG system. |
display boot-loader |
display boot-loader |
Displays the current software images and startup software images. |
display version |
display version |
Displays system version information. |
Upgrade procedure
To upgrade software:
1. Execute the display version command to verify the current BootWare image version and startup software version.
2. Use the release notes for the upgrade software version to evaluate the upgrade impact on your network and verify the following items:
¡ Software and hardware compatibility.
¡ Version and size of the upgrade software.
¡ Compatibility of the upgrade software with the current BootWare image and startup software image.
3. Use the release notes to verify whether the upgrade software images require a license. If licenses are required, check the system for availability of valid licenses. If no valid licenses are available, install licenses first. If no licenses are installed, the upgrade software image installation will fail.
4. Use the dir command to verify that the device has sufficient storage space for the upgrade images. If the storage space is not sufficient, delete unused files by using the delete command. Make sure all MPUs in the system have sufficient storage space.
5. After Device A and Device B form an M-LAG system, perform the following tasks (perform the same tasks on Device C and Device D):
a. Check the LLDP neighbors of Device A to obtain the LLDP state information of all interfaces on Device A.
b. Manually shut down all interfaces connecting to the other devices (except M-LAG peer link interfaces and keepalive interfaces) on Device A.
c. Switch all incoming and outgoing traffic of Device A to Device B.
6. Save the configuration on Device A, and use FTP or TFTP to transfer the upgrade image file to the root directory of a file system. Upgrade Device A and reboot it.
7. When Device A is being rebooted, manually shut down the interfaces connecting Device B to Device A. The interfaces are typically peer link interfaces and keepalive interfaces.
8. After Device A is rebooted, bring up the interfaces that have been shut down on Device B. Wait for M-LAG to restore between Device A and Device B.
9. After Device A and Device B form an M-LAG system again, bring up the interfaces connecting to other devices. Wait for the traffic to restore.
For more information about upgrading software on an M-LAG system, see H3C Switches M-LAG System Upgrade Guide.
For more information about the software upgrade procedure, see the fundamentals configuration guide for the device.
Estimated upgrade downtime
See "Convergence performance test results." The upgrade downtime of each device contains the traffic downtime for restart of one M-LAG member device and recovery from M-LAG member device restart.
Post-upgrade verification commands
After the upgrade finishes, use the commands in "Verifying the configuration" and the commands in the following table to verify that the upgrade has been done correctly.
Table 4 Post-upgrade verification commands
Device A/B |
Device C/D |
Description |
display device |
display device |
Displays summary information about the peer link interfaces and M-LAG interfaces in the M-LAG system. |
display boot-loader |
display boot-loader |
Displays the current software images and startup software images. |
display version |
display version |
Displays system version information. |
Node expansion
Pre-expansion verification commands
Before you perform a node expansion, use the commands in "Verifying the configuration" and the commands in the following table to verify that all requirements are met for an expansion.
Table 5 Pre-expansion verification commands
Device A/B |
Device C/D |
Description |
display device |
display device |
Displays summary information about the peer link interfaces and M-LAG interfaces in the M-LAG system. |
display boot-loader |
display boot-loader |
Displays the current software images and startup software images. |
display version |
display version |
Displays system version information. |
Node expansion
1. Make sure the expansion device is not connected to the management network.
2. Upgrade the device to the target software version.
3. Configure the device.
4. Connect the device to the management network.
Estimated expansion downtime
N/A
Post-expansion verification commands
After the expansion finishes, use the commands in the following table to verify that the expansion has been done correctly.
Table 6 Post-expansion verification commands
Device A/B |
Device C/D |
Description |
display device |
display device |
Displays summary information about the peer link interfaces and M-LAG interfaces in the M-LAG system. |
display boot-loader |
display boot-loader |
Displays the current software images and startup software images. |
display version |
display version |
Displays system version information. |
Replacement procedure
Service module replacement
Pre-replacement verification commands
Execute the commands in "Verifying the configuration" and the following commands to verify that all requirements are met for a replacement.
Table 7 Pre-replacement verification commands
Device A/B |
Device C/D |
Description |
display device |
display device |
Displays device information. |
display boot-loader |
display boot-loader |
Displays the current software images and startup software images. |
display version |
display version |
Displays system version information. |
Replacement procedure
Before you replace an interface module, make sure the service and management traffic has switched over to other interface modules that are operating correctly.
Replace the interface modules online while the system is operating or power off the system before you do the replacement, depending on the evaluation of the conditions.
Estimated replacement downtime
See "Convergence performance test results." The replacement downtime of each interface module contains the traffic downtime for single member link failure in an DR member interface, single uplink failure, recovery from a single member link failure in an DR member interface, and recovery from a single uplink failure.
Post-replacement verification commands
Use the same commands for pre-replacement verification to verify that the system can operate correctly after the hardware replacement.
Switching fabric module replacement
Pre-replacement verification commands
Execute the commands in "Verifying the configuration" and the following commands to verify that all requirements are met for a replacement.
Table 8 Pre-replacement verification commands
Device A/B |
Device C/D |
Description |
display device |
display device |
Displays summary information about the peer link interfaces and M-LAG interfaces in the M-LAG system. |
display boot-loader |
display boot-loader |
Displays the current software images and startup software images. |
display version |
display version |
Displays system version information. |
Replacement procedure
Replace the switching fabric module online while the system is operating or power off the system before you do the replacement, depending on the evaluation of the conditions.
Estimated replacement downtime
See "Convergence performance test results." The replacement downtime of each switching fabric module contains the traffic downtime for switching fabric module failure and recovery from a switching fabric module failure.
Post-replacement verification commands
Use the same commands for pre-replacement verification to verify that the system can operate correctly after the hardware replacement.