华三S12500交换机大POP点配置指导.docx

华三S12500交换机大POP点配置指导杭州华三通信技术有限公司2015年08月华三S12500交换机大POP点配置指导1 准备工作说明1、上联端口规划准备完毕。2、设备地址规划完毕。2 IRF2堆叠组（二虚一）建立配置(1)配置S12510机框一#设置S12510机框一的成员编号为1。Sysname system-viewSysname irf member 1Info: Member ID change will take effect after the member reboots and operates in IRF mode.#将设备的运行模式切换到IRF模式。Sysname system-viewSysname chassis convert mode irfThe device will switch to IRF mode and reboot. You are recommended to save the current running configuration and specify the configuration file for the next startup. Continue? Y/N:yDo you want to convert the content of the next startup configuration file flash:/startup.cfg to make it available in IRF mode? Y/N:yPlease wait.Saving the converted configuration file to the main board succeeded.Slot 1:Saving the converted configuration file succeeded.Now rebooting, please wait.设备重启后S12510机框一形成了只有一台成员设备的IRF。#关闭Ten-GigabitEthernet1/0/0/24端口。Sysname interface Ten-GigabitEthernet1/0/0/24Sysname-Ten-GigabitEthernet1/0/0/24 shutdownSysname-Ten-GigabitEthernet1/0/0/24 quit#关闭Ten-GigabitEthernet1/1/0/24端口。Sysname interface Ten-GigabitEthernet1/1/0/24Sysname-Ten-GigabitEthernet1/1/0/24 shutdownSysname-Ten-GigabitEthernet1/1/0/24 quit#创建IRF端口1/2，并将它与物理端口Ten-GigabitEthernet1/0/0/24和Ten-GigabitEthernet1/1/0/24绑定。Sysname irf-port 1/2Sysname-irf-port1/2 port group interface Ten-GigabitEthernet 1/0/0/24Sysname-irf-port1/2 port group interface Ten-GigabitEthernet 1/1/0/24Sysname-irf-port1/2 quit#开启Ten-GigabitEthernet1/0/0/24端口。Sysname interface Ten-GigabitEthernet1/0/0/24Sysname-Ten-GigabitEthernet1/0/0/24 undo shutdownSysname-Ten-GigabitEthernet1/0/0/24 quit#开启Ten-GigabitEthernet1/1/0/24端口。Sysname interface Ten-GigabitEthernet1/1/0/24Sysname-Ten-GigabitEthernet1/1/0/24 undo shutdownSysname-Ten-GigabitEthernet1/1/0/24 quit#将当前配置保存到下次启动配置文件。Sysname quitSysname save(2)配置S12510机框二#配置S12510机框二的成员编号为2。Sysname system-viewSysname irf member 2Info: Member ID change will take effect after the member reboots and operates in IRF mode.#将设备的运行模式切换到IRF模式。Sysname chassis convert mode irfThe device will switch to IRF mode and reboot. You are recommended to save the current running configuration and specify the configuration file for the next startup. Continue? Y/N:yDo you want to convert the content of the next startup configuration file flash:/startup.cfg to make it available in IRF mode? Y/N:yPlease wait.Saving the converted configuration file to the main board succeeded.Slot 1:Saving the converted configuration file succeeded.Now rebooting, please wait.设备重启后S12510机框二形成了只有一台成员设备的IRF。#关闭Ten-GigabitEthernet2/0/0/24端口。Sysname interface Ten-GigabitEthernet2/0/0/24Sysname-Ten-GigabitEthernet2/0/0/24 shutdownSysname-Ten-GigabitEthernet2/0/0/24 quit#关闭Ten-GigabitEthernet2/1/0/24端口。Sysname interface Ten-GigabitEthernet2/1/0/24Sysname-Ten-GigabitEthernet2/1/0/24 shutdownSysname-Ten-GigabitEthernet2/1/0/24 quit#创建IRF端口2/1，并将它与物理端口Ten-GigabitEthernet2/0/0/24和Ten-GigabitEthernet2/1/0/24绑定。Sysname irf-port 2/1Sysname-irf-port2/1 port group interface Ten-GigabitEthernet 2/0/0/24Sysname-irf-port2/1 port group interface Ten-GigabitEthernet 2/1/0/24Sysname-irf-port2/1 quit#开启Ten-GigabitEthernet2/0/0/24端口。Sysname interface Ten-GigabitEthernet2/0/0/24Sysname-Ten-GigabitEthernet2/0/0/24 undo shutdownSysname-Ten-GigabitEthernet2/0/0/24 quit#开启Ten-GigabitEthernet2/1/0/24端口。Sysname interface Ten-GigabitEthernet2/1/0/24Sysname-Ten-GigabitEthernet2/1/0/24 undo shutdownSysname-Ten-GigabitEthernet2/1/0/24 quit#将当前配置保存到下次启动配置文件。Sysname quitSysname save(3)激活IRF端口的配置#将机框一的Ten-G1/0/0/24和机框二的Ten-G2/0/0/24进行物理连线；将机框一的Ten-G1/1/0/24和机框二的Ten-G2/1/0/24进行物理连线。#激活S12510机框一设备的IRF端口配置。Sysname irf-port-configuration active#激活S12510机框二设备的IRF端口配置，系统将提示发生IRF合并，用户需要手工重启其中机框二设备，加入以机框一设备为主设备的IRF。Sysname irf-port-configuration active%Jul 9 09:04:48:279 2013 STM/4/STM_MERGE_NEED_REBOOT: -MDC=1; IRF merge occurs and the IRF system needs a reboot.%Jul 9 14:03:06:855 2013 STM/5/STM_MERGE: -MDC=1; IRF merge occurs and the IRF system does not need to reboot.#在本例中，使用S12510机框一作为主设备，因此需要重启S12510机框二。Sysname quitSysname reboot重启完成后，S12510机框一和S12510机框二合并成为一个IRF堆叠组，S12510机框一为主设备。(4)配置BFD MAD检测（堆叠组防分裂检测）#创建VLAN 4091，并将S12510机框一（成员编号为1）上的端口Ten-GigabitEthernet1/0/0/20和S12510机框二（成员编号为2）上的端口Ten-GigabitEthernet2/0/0/20加入VLAN中。Sysname system-viewSysname vlan 4091Sysname-vlan4091 port Ten-GigabitEthernet 1/0/0/20 Ten-GigabitEthernet 2/0/0/20Sysname-vlan4091 quit#创建VLAN接口3，并配置MAD IP地址。Sysname interface vlan-interface 4091Sysname-Vlan-interface4091 mad bfd enableSysname-Vlan-interface4091 mad ip address 192.168.2.1 30 member 1Sysname-Vlan-interface4091 mad ip address 192.168.2.2 30 member 2Sysname-Vlan-interface4091 quit#因为BFD MAD和生成树功能互斥，所以在Ten-GigabitEthernet1/0/0/20和Ten-GigabitEthernet2/0/0/20上关闭生成树协议。Sysname interface Ten-GigabitEthernet 1/0/0/20Sysname-Ten-GigabitEthernet-1/0/0/20 undo stp enableSysname-Ten-GigabitEthernet-1/0/0/20 quitSysname interface Ten-GigabitEthernet 2/0/0/20Sysname-Ten-GigabitEthernet-2/0/0/20 undo stp enableSysname-Ten-GigabitEthernet-2/0/0/20 quit#将机框一的Ten-G1/0/0/20和机框二的Ten-G2/0/0/20进行物理连线。3 MDC（一虚多）建立配置(1)创建并配置虚拟交换机a，供局点a使用。#创建mdca。Device system-viewDevice mdc mdcaExecuting this command will create MDC mdca ID 2 and empty folder /mdc/mdc2 in the root directory of the storage media. Continue? Y/N:yThis MDC was created successfully.#在缺省MDC中删除机框一和机框二上的业务板2，并将该业务板分配给mdca。Device-mdc-2-mdca mdc AdminDevice-mdc-1-Admin undo location chassis 1 slot 2The configuration associated with the specified slot of MDC will be lost. Continue? Y/N:yDevice-mdc-1-Admin undo location chassis 2 slot 2The configuration associated with the specified slot of MDC will be lost. Continue? Y/N:yDevice-mdc-1-Admin mdc mdcaDevice-mdc-2-mdca location chassis 1 slot 2Device-mdc-2-mdca location chassis 2 slot 2#为mdca分配接口Ten-GigabitEthernet1/2/0/1Ten-GigabitEthernet1/2/0/48，以及接口Ten-GigabitEthernet2/2/0/1Ten-GigabitEthernet2/2/0/48Device-mdc-2-mdca allocate interface ten-gigabitethernet 1/2/0/1 to ten-gigabitethernet 1/2/0/48The configurations of the interfaces will be lost. Continue? Y/N:yDevice-mdc-2-mdca allocate interface ten-gigabitethernet 2/2/0/1 to ten-gigabitethernet 2/2/0/48#配置mdca在主控板16和17上的磁盘使用上限均为20%。Device-mdc-2-mdca limit-resource disk chassis 1 slot 16 ratio 20Device-mdc-2-mdca limit-resource disk chassis 1 slot 17 ratio 20Device-mdc-2-mdca limit-resource disk chassis 2 slot 16 ratio 20Device-mdc-2-mdca limit-resource disk chassis 2 slot 17 ratio 20#启动虚拟交换机a。Device-mdc-2-mdca mdc startIt will take some time to start MDC.This MDC was started successfully.Device-mdc-2-mdca quit#切换到虚拟交换机a，并按照提示信息键入CTRL_D进入虚拟交换机a的命令行界面进行配置。Device switchto mdc mdca* Copyright (c) 2004-2015 Hangzhou H3C Tech. Co., Ltd. All rights reserved. * Without the owners prior written consent, * no decompiling or reverse-engineering shall be allowed. *Automatic configuration is running, press CTRL_D to break or press CTRL_B to switch back to the default MDC.Device system-view#将虚拟交换机a的名称修改为MDCA，以便和其它MDC区别。Device sysname MDCA#配置虚拟交换机a的带外网管口的IP地址、使能Telnet服务等基础配置，供用户远程登录虚拟交换机a。MDCA interface M-GigabitEthernet 1/0/0/0MDCA-M-GigabitEthernet1/0/0/0 ip address 192.168.1.251 24MDCA-M-GigabitEthernet1/0/0/0 quitmdca telnet server enablemdca user-interface vty 0 63MDCA-ui-vty0-63 authentication-mode noneMDCA-ui-vty0-63 user-role mdc-admin#从虚拟交换机a返回缺省MDC。MDCA-ui-vty0-63 returnMDCA switchbackDevice4 聚合链路与接口基础配置1） 创建用于上联BAS或SR设备的跨机框二层聚合接口1，并配置该接口为动态聚合模式。DeviceA interface bridge-aggregation 1DeviceA-Bridge-Aggregation1 link-aggregation mode dynamicDeviceA-Bridge-Aggregation1 quit# 分别将端口Ten-GigabitEthernet1/0/0/1和Ten-GigabitEthernet2/0/0/1加入到聚合组1中。DeviceA interface Ten-GigabitEthernet 1/0/0/1DeviceA-Ten-GigabitEthernet1/0/0/1 port link-aggregation group 1DeviceA-Ten-GigabitEthernet1/0/0/1 quitDeviceA interface Ten-GigabitEthernet 2/0/0/1DeviceA-Ten-GigabitEthernet2/0/0/1 port link-aggregation group 1DeviceA-Ten-GigabitEthernet2/0/0/1 quit# 配置二层聚合接口1为Trunk端口，并允许VLAN 10和20的报文通过。DeviceA interface bridge-aggregation 1DeviceA-Bridge-Aggregation1 port link-type trunkDeviceA-Bridge-Aggregation1 undo port trunk permit vlan 1DeviceA-Bridge-Aggregation1 port trunk permit vlan 10 20DeviceA-Bridge-Aggregation1 quit2） 创建用于下联OLT等设备的跨机框二层聚合接口101，并配置该接口为动态聚合模式。DeviceA interface bridge-aggregation 101DeviceA-Bridge-Aggregation101 link-aggregation mode dynamicDeviceA-Bridge-Aggregation101 quit# 分别将端口GigabitEthernet1/3/0/1和GigabitEthernet2/3/0/1加入到聚合组101中。DeviceA interface GigabitEthernet 1/3/0/1DeviceA-GigabitEthernet1/3/0/1 port link-aggregation group 101DeviceA-GigabitEthernet1/3/0/1 quitDeviceA interface GigabitEthernet 2/3/0/1DeviceA-GigabitEthernet2/3/0/1 port link-aggregation group 101DeviceA-GigabitEthernet2/3/0/1 quit# 配置二层聚合接口101为Hybrid端口，并启用qinq功能，允许VLAN 10的报文带单层tag通过，允许VLAN 20的报文不带tag通过。DeviceA interface bridge-aggregation 101DeviceA-Bridge-Aggregation101 port link-type hybridDeviceA-Bridge-Aggregation101 undo port hybrid vlan 1DeviceA-Bridge-Aggregation101 port hybrid vlan 10 taggedDeviceA-Bridge-Aggregation101 port hybrid vlan 20 untaggedDeviceA-Bridge-Aggregation101 qinq enableDeviceA-Bridge-Aggregation101 qinq transparent-vlan 10DeviceA-Bridge-Aggregation101 quit5 QINQ规则配置(1) 配置Device A# 定义类test，匹配方式为或操作，匹配规则为：匹配用户网络VLAN ID值为5-10和15的报文。DeviceA system-viewDeviceA traffic classifier test operator orDeviceA-classifier-test if-match customer-vlan-id 5 to 10DeviceA-classifier-test if-match customer-vlan-id 15DeviceA-classifier-test quit# 创建流行为test，并配置如下动作：添加VLAN ID为20的外层VLAN Tag。DeviceA traffic behavior testDeviceA-behavior-test nest top-most vlan 20DeviceA-behavior-test quit# 创建策略test，为类test指定采用流行为test。DeviceA qos policy testDeviceA-