关于华为二层交换机集群管理配置规范及说明.docVIP

关于华为二层交换机集群管理配置规范及说明一、组网说明：榆社县局S3552G交换机E0/1下挂榆社水利小区3号楼S2016C，3号楼S2016C交换机E0/2下挂水利小区2号楼S2403H，3号楼S2016C交换机E0/3下挂水利小区1号楼S2024C。二、组网图： 三、配置步骤 1、 配置管理设备 （由汇聚层人员来配置）（1）启动设备上的NDP和端口 E0/1 日的NDP 协议： YS_XianJu_S3552G ndp enable YS_XianJu_S3552G interface ethernet 0/1 YS_XianJu_S3552G -Ethernet0/1 ndp enable YS_XianJu_S3552G -Ethernet0/1 interface ethernet 0/2 YS_XianJu_S3552G -Ethernet0/2 ndp enable # 配置NDP信息的有效保留时间为 200秒 YS_XianJu_S3552G ndp timer aging 200 # 配置NDP报文发送的时间间隔为 70秒 YS_XianJu_S3552G ndp timer hello 70 （2）启动设备上的NTDP和端口E0/1 E0/2上的NTDPYS_XianJu_S3552G ntdp enable YS_XianJu_S3552G interface ethernet 0/1 YS_XianJu_S3552G -Ethernet0/1 ntdp enable YS_XianJu_S3552G -Ethernet0/1 interface ethernet 0/2YS_XianJu_S3552G -Ethernet0/2 ntdp enable # 配置拓扑收集范围为 7跳 YS_XianJu_S3552G ntdp hop 7 # 配置被收集设备转发拓扑收集请求的延迟时间为150ms YS_XianJu_S3552G ntdp timer hop-delay 150 # 配置被收集设备的端口转发拓扑收集请求的延迟时间为 15ms YS_XianJu_S3552G ntdp timer port-delay 15 # 配置定时拓扑收集的时间间隔为 3分钟 YS_XianJu_S3552G ntdp timer 3 (3)配置管理vlan#创建管理vlanYS_XianJu_S3552Gvlan 4051#将管理vlan4051作为管理vlanYS_XianJu_S3552Gmanagement-vlan 4051#进入以太网端口E0/19YS_XianJu_S3552G-Ethernet0/19 description to_ys_shuili_dishui2_caizhen_xiaoqu port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 45 to 51 3527 4051（4）启动集群功能 YS_XianJu_S3552G cluster enable # 进入集群视图 YS_XianJu_S3552G cluster YS_XianJu_S3552G -cluster # 配置集群内部使用的 IP地址池 起始地址为 10.0.1.1 有 254个地址 YS_XianJu_S3552G -cluster ip-pool 10.0.1.1 255.255.255.0 （5） 配置集群名字 建立集群 YS_XianJu_S3552G -cluster build YSYDYSYD_0.YS_XianJu_S3552G -cluster （6） 将下挂的两个交换机加入到集群中 YSYD_0.YS_XianJu_S3552G -cluster add-member 1 mac-address 00e0-fc01-0011 YSYD_0.YS_XianJu_S3552G -cluster add-member 2 mac-address 00e0-fc01-0013 YSYD_0.YS_XianJu_S3552G -cluster add-member 3 mac-address 00e0-fc01-0011 # 配置成员设备信息的保留时间为 100秒 YSYD_0.YS_XianJu_S3552G -cluster holdtime 100 # 配置握手报文定时发送的时间间隔为 10秒 YSYD_0.YS_XianJu_S3552G -cluster timer 10 2、配置成员设备（由接入层维护人员来配置） 以榆社水利小区3号楼S2016C为例 ： # 启动设备上的NDP和端口 Ethernet1/1上的NDP YS_ShuiLi_3#Lou_S2016C ndp enable YS_ShuiLi_3#Lou_S2016C interface ethernet 1/1 YS_ShuiLi_3#Lou_S2016C -Ethernet1/1 ndp enable # 启动设备上的NTDP和端口Ethernet1/1上的NTDP YS_ShuiLi_3#Lou_S2016C ntdp enable YS_ShuiLi_3#Lou_S2016C interface ethernet 1/1 YS_ShuiLi_3#Lou_S2016C -Ethernet1/1 ntdp enable #创建vlan 4051 创建管理vlan，根汇聚层交换机管理vlan来确定。YS_ShuiLi_3#Lou_S2016C vlan 4051#将vlan4051作为管理vlan YS_ShuiLi_3#Lou_S2016C management-vlan 4051#进入以太网端口E0/1,透传管理vlan 4051 将二层交换机上联口透传管理vlanYS_ShuiLi_3#Lou_S2016C interface e0/1YS_ShuiLi_3#lou_S2016C-Ethernet0/1port trunk permit vlan 4051# 启动集群功能 YS_ShuiLi_3#Lou_S2016C cluster enable四、数据配置举例如下：1、榆社县局S3552G配置如下：dis cu# sysname YS_XianJu_S3552G# super password level 3 cipher #:+/G*8P,:)&CZHH(&1!# ntdp hop 7 ntdp timer port-delay 15 ntdp timer hop-delay 150 ntdp timer 3#radius scheme system server-type huawei primary authentication 127.0.0.1 1645 primary accounting 127.0.0.1 1646 user-name-format without-domaindomain system radius-scheme system access-limit disable state active vlan-assignment-mode integer idle-cut disable self-service-url disable messenger time disable domain default enable system# local-server nas-ip 127.0.0.1 key huaweilocal-user sxhuawei password cipher (W_UELR9IaNK;9B9.)Q! service-type telnet level 1# Specify deadloop monitor# temperature-limit 0 20 80# ndp timer hello 70 ndp timer aging 200# management-vlan 4051#acl number 3998 rule 0 deny ip destination 10.0.1.0 0.0.0.255 rule 1 permit ip source 10.0.1.0 0.0.0.255acl number 3999 rule 0 deny ip source 10.0.1.0 0.0.0.255 rule 1 permit ip destination 10.0.1.0 0.0.0.255#vlan 1#vlan 27#vlan 28#vlan 29#vlan 30#vlan 31#vlan 32#vlan 33#vlan 34#vlan 35#vlan 36 #vlan 37#vlan 38#vlan 39#vlan 40#vlan 41#vlan 42#vlan 43#vlan 44#vlan 45#vlan 46#vlan 47# vlan 48#vlan 49#vlan 50#vlan 51#vlan 52#vlan 53#vlan 1672 description to_ys_taichanggaosu(yulin)#vlan 1711#vlan 2101#vlan 2103#vlan 2104# vlan 2105 multicast-vlan enable#vlan 3524#vlan 3526#vlan 3527#vlan 3528#vlan 3529#vlan 3530#vlan 3532#vlan 3534#vlan 3535#vlan 3536# vlan 3537#vlan 4051#interface Vlan-interface4051 ip address 221.131.31.130 255.255.255.240#interface Aux0/0#interface Ethernet0/1 shutdown#interface Ethernet0/2 description to_ys_taichanggaosu(yulin) broadcast-suppression 5 port access vlan 1672#interface Ethernet0/3 description to_ys_donghuixiaoxue broadcast-suppression 5 port access vlan 3526#interface Ethernet0/4 description to_ys_tudijusushe broadcast-suppression 5 port access vlan 3528#interface Ethernet0/5 description to_ys_nonghangsushe broadcast-suppression 5 port access vlan 3529#interface Ethernet0/6 description to_ys_dishuiyixiaoqu broadcast-suppression 5 port access vlan 3530#interface Ethernet0/7 description to_ys_lianjiazhuang broadcast-suppression 5 port access vlan 1711#interface Ethernet0/8 description to_ys_dongshengyingyeting port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 2103 to 2105 3532#interface Ethernet0/9 description to_ys_xianweidanxiaowenhuazhan broadcast-suppression 5 port access vlan 3534#interface Ethernet0/10 description to_ys_youzhenxiaoqu broadcast-suppression 5 port access vlan 3535#interface Ethernet0/11 description to_ys_jiaokejuwenhuazhan broadcast-suppression 5 port access vlan 3536#interface Ethernet0/12 description to_ys_jishengfuyouyuan broadcast-suppression 5 port access vlan 3537# interface Ethernet0/13 description to_ys_xiangzhenjuxiaoqu port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 31 to 33#interface Ethernet0/14 description to_ys_mingzhenjuxiaoqu port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 34 to 35#interface Ethernet0/15 description to_ys_renhangxiaoqu port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 36#interface Ethernet0/16 description to_ys_huagongxiaoqu port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 27 to 30#interface Ethernet0/17 description to_ys_gongan,liangshijuxiaoqu port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 37 to 40#interface Ethernet0/18 description to_ys_gongan,yizhongxuexiaoqu port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 41 to 44#interface Ethernet0/19 description to_ys_shuili_dishui2_caizhen_xiaoqu port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 45 to 51 3527 4051#interface Ethernet0/20 description to_ys_guoshuixiaoqu port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 52 to 53#interface Ethernet0/21 description to_ys_yingchunyingyeting port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 2101 3524#interface Ethernet0/22 shutdown#interface Ethernet0/23 shutdown#interface Ethernet0/24 shutdown#interface Ethernet0/25 shutdown#interface Ethernet0/26 shutdown #interface Ethernet0/27 shutdown#interface Ethernet0/28 shutdown#interface Ethernet0/29 shutdown#interface Ethernet0/30 shutdown#interface Ethernet0/31 shutdown#interface Ethernet0/32 shutdown#interface Ethernet0/33 shutdown# interface Ethernet0/34 shutdown#interface Ethernet0/35 shutdown#interface Ethernet0/36 shutdown#interface Ethernet0/37 shutdown#interface Ethernet0/38 shutdown#interface Ethernet0/39 shutdown#interface Ethernet0/40 shutdown#interface Ethernet0/41 shutdown#interface Ethernet0/42 shutdown#interface Ethernet0/43 shutdown#interface Ethernet0/44 shutdown#interface Ethernet0/45 shutdown#interface Ethernet0/46 shutdown#interface Ethernet0/47 shutdown#interface Ethernet0/48 shutdown #interface GigabitEthernet1/1 description to_YS_S6506R_G4/0/12 duplex full speed 1000 port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 27 to 53 1672 1711 2101 2103 to 2105 3524 3526 to 3530 3532 3534 to 3537 4051#interface GigabitEthernet1/2 shutdown#interface GigabitEthernet1/3 shutdown#interface GigabitEthernet1/4 shutdown#interface NULL0#cluster ip-pool 10.0.1.1 255.255.255.0 build YSYD holdtime 100#YSYD_0.YS_XianJu_S3552G -cluster add-member 1 mac-address 00e0-fc01-0011 YSYD_0.YS_XianJu_S3552G -cluster add-member 2 mac-address 00e0-fc01-0013 YSYD_0.YS_XianJu_S3552G -cluster add-member 3 mac-address 00e0-fc01-0011 # ip route-static 0.0.0.0 0.0.0.0 221.131.31.129 preference 60# snmp-agent snmp-agent local-engineid 800007DB000FE215D6606877 snmp-agent community read jzyd snmp-agent community read public snmp-agent community write sxjzyd snmp-agent community write private snmp-agent community read publiccm0 snmp-agent community write privatecm0 snmp-agent sys-info location BeiJing China snmp-agent sys-info version all snmp-agent target-host trap address udp-domain 211.142.42.68 params securityname jzyd snmp-agent target-host trap address udp-domain 211.142.42.69 params securityname jzyd snmp-agent trap enable standard snmp-agent trap enable configuration snmp-agent trap enable vrrp snmp-agent trap enable bgp snmp-agent trap source Vlan-interface4051# ntp-service unicast-server 211.138.98.2 ntp-service unicast-server 211.138.98.1#user-interface aux 0 authentication-mode schemeuser-interface vty 0 4 authentication-mode scheme#Return2、榆社水利小区3号楼S2016C配置如下：dis cu# sysname YS_ShuiLi_3#Lou_S2016C 对交换机进行命名# super password level 3 cipher #:+/G*8P,:)&CZHH(&1!# info-center loghost 10.0.1.1# management-vlan 4051 修改集群管理vlan（根据汇聚层交换机管理vlan确定）# queue-scheduler wrr 1 2 4 8#vlan 1#vlan 45port-isolate enable 小区交换机端口隔离配置#vlan 46#vlan 47#vlan 48#vlan 49# vlan 50#vlan 51#vlan 3527#vlan 4051 增加交换机集群管理vlan号（根据汇聚层交换机管理vlan确定）#interface Vlan-interface4051#interface Aux0/0#interface Ethernet0/1 description to_YS_XianJu_S3552G_E0/19 （描述该交换机的上联交换机及端口） port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 45 to 51 3527 4051 （上联口透传集群管理vlan号） port-isolate uplink-port vlan 45 （上联口配置本交换机端口隔离vlan）#interface Ethernet0/2description to_ YS_ShuiLi_2#Lou_S2403H_E0/1 (对交换机联端口进行描述) port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 46 4051 (透传集群管理VLAN) interface Ethernet0/3description to_ YS_ShuiLi_1#Lou_S2024C_E0/1 (对交换机联端口进行描述) port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 47 4051 (透传集群管理VLAN)interface Ethernet0/4 broadcast-suppression 5 （对ACCESS端口进行广播抑制） port access vlan 45#interface Ethernet0/5 broadcast-suppression 5 port access vlan 45#interface Ethernet0/6 broadcast-suppression 5 port access vlan 45#interface Ethernet0/7 broadcast-suppression 5 port access vlan 45#interface Ethernet0/8 broadcast-suppression 5 port access vlan 45#interface Ethernet0/9 broadcast-suppression 5 port access vlan 45#interface Ethernet0/10 broadcast-suppression 5 port access vlan 45#interface Ethernet0/11 broadcast-suppression 5 port access vlan 45#interface Ethernet0/12 broadcast-suppression 5 port access vlan 45#interface Ethernet0/13 broadcast-suppression 5 port access vlan 45# interface Ethernet0/14 broadcast-suppression 5 port access vlan 45#interface Ethernet0/15 broadcast-suppression 5 port access vlan 45#interface Ethernet0/16broadcast-suppression 5 port access vlan 45#interface NULL0# snmp-agent snmp-agent local-engineid 800007DB000FE237E4CB6877 snmp-agent community read publiccm1 snmp-agent community write privatecm1 snmp-agent sys-info location BeiJing China snmp-agent sys-info version all snmp-agent target-host trap address udp-domain 10.0.1.1 params securityname cluster snmp-agent trap enable standard snmp-agent trap enable configuration snmp-agent trap source Vlan-interface4051#user-interface aux 0 authentication-mode password set authentication password cipher NC55QK=/Q=QMAF41!#Return3、榆社水利1号楼S2024C交换机配置如下：dis cu# sysname YS_ShuiLi_1#Lou_S2024C 对交换机进行命名# super password level 3 cipher #:+/G*8P,:)&CZHH(&1!# info-center loghost 10.0.1.1# management-vlan 4051 修改集群管理vlan（根据汇聚层交换机管理vlan确定）# queue-scheduler wrr 1 2 4 8#vlan 1#vlan 47port-isolate enable 小区交换机端口隔离配置#vlan 4051 增加交换机集群管理vlan号（根据汇聚层交换机管理vlan确定）#interface Vlan-interface4051#interface Aux0/0#interface Ethernet0/1 description to_ YS_ShuiLi_3#Lou_S2016C_E0/3 （描述该交换机的上联交换机及端口） port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 47 4051 （上联口透传集群管理vlan号） port-isolate uplink-port vlan 47 （上联口配置本交换机端口隔离vlan）#interface Ethernet0/2broadcast-suppression 5 port access vlan 47#interface Ethernet0/3broadcast-suppression 5 port access vlan 47#interface Ethernet0/4 broadcast-suppression 5 （对ACCESS端口进行广播抑制） port access vlan 47#interface Ethernet0/5 broadcast-suppression 5 port access vlan 47#interface Ethernet0/6 broadcast-suppression 5 port access vlan 47#interface Ethernet0/7 broadcast-suppression 5 port access vlan 47#interface Ethernet0/8 broadcast-suppression 5 port access vlan 47#interface Ethernet0/9 broadcast-suppression 5 port access vlan 47#interface Ethernet0/10 broadcast-suppression 5 port access vlan 47#interface Ethernet0/11 broadcast-suppression 5 port access vlan 47#interface Ethernet0/12 broadcast-suppression 5 port access vlan 47#interface Ethernet0/13 broadcast-suppression 5 port access vlan 47# interface Ethernet0/14 broadcast-suppression 5 port access vlan 47#interface Ethernet0/15 broadcast-suppression 5 port access vlan 47#interface Ethernet0/16broadcast-suppression 5 port access vlan 47#interface Ethernet0/17 broadcast-suppression 5 port access vlan 47#interface Ethernet0/18 broadcast-suppression 5 port access vlan 47#interface Ethernet0/19 broadcast-suppression 5 port access vlan 47#interface Ethernet0/20 broadcast-suppression 5 port access vlan 47#interface Ethernet0/21 broadcast-suppression 5 port access vlan 47# interface Ethernet0/22 broadcast-suppression 5 port access vlan 47#interface Ethernet0/23 broadcast-suppression 5 port access vlan 47#interface Ethernet0/24broadcast-suppression 5 port access vlan 47#interface NULL0#cluster administrator-address 000f-e22e-0f80 name huawei# snmp-agent snmp-agent local-engineid 800007DB00E0FC2D944E6877 snmp-agent community read publiccm3 snmp-agent community write privatecm3 snmp-agent sys-info contact HuaWei BeiJing China snmp-agent sys-info location BeiJing China snmp-agent sys-info version all snmp-agent target-host trap address udp-domain 10.10.0.1 params securityname cluster snmp-agent trap enable standard#user-interface aux 0 authentication-mode password set authentication password cipher NC55QK=/Q=QMAF41!#Return4、水利小区2号S2403H配置如下：dis cu# sysname YS_ShuiLi_2#Lou_S2403H 对交换机进行命名#radius scheme system server-type huawei primary authentication 127.0.0.1 1645 primary accounting 127.0.0.1 1646 user-name-format without-domaindomain system radius-scheme system access-limit disable state active idle-cut disable self-service-url disable messenger time disable domain default enable system# local-server nas-ip 127.0.0.1 key huawei# info-center loghost 10.10.0.1# management-vlan 4051 修改集群管理vlan（根据汇聚层交换机管理vlan确定）#interface Aux0/0#vlan 1#vlan 46port-isolate enable 小区交换机端口隔离配置#vlan 4051 增加交换机集群管理vlan号（根据汇聚层交换机管理vlan确定）#interface Vlan-interface4051#interface Ethernet0/1description to_ YS_ShuiLi_3#Lou_S2016C_E0/3 （描述该交换机的上联交换机及端口） port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 46 4051 （上联口透传集群管理vlan号） port-isolate uplink-port vlan 46 （上联口配置本交换机端口隔离vlan）#interface