H3C IRF2配置.docx

前言IRF2（Intelligent Resilient Framework，智能弹性架构）是H3C自主研发的软件虚拟化技术，通过将多台设备虚拟为一台设备，可以简化网络拓扑，提高管理效率，并能提供1:N的设备级备份，帮助您实现业界领先的企业网、数据中心汇聚/核心层解决方案。本章将为您介绍如果使用多台S5820V2&S5830V2系列交换机组建基于IRF技术的虚拟化设备。配置要求本次试验通过2台支持虚拟化交换机进行配置，将两台物理设备进行虚拟化后逻辑合成一台设备。试验环境配置过程主机一： system-viewSysname interface range ten-gigabitethernet 1/0/49 to ten-gigabitethernet 1/0/50Sysname-if-range shutdownSysname-if-range quitSysname irf-port 1/1Sysname-irf-port1/1 port group interface ten-gigabitethernet 1/0/49Sysname-irf-port1/1 port group interface ten-gigabitethernet 1/0/50Sysname-irf-port1/1 quitSysname interface range ten-gigabitethernet 1/0/49 to ten-gigabitethernet 1/0/50Sysname-if-range undo shutdownSysname-if-range quitSysname irf member 1 priority 31Sysname irf-port-configuration activeSysnamesave主机二 system-viewSysname irf member 1 renumber 2Warning: Renumbering the member ID may result in configuration change or loss. Continue? Y/N:ySysname quit reboot system-viewSysname interface range ten-gigabitethernet 2/0/49 to ten-gigabitethernet 2/0/50Sysname-if-range shutdownSysname-if-range quitSysname irf-port 2/2Sysname-irf-port2/2 port group interface ten-gigabitethernet 2/0/25Sysname-irf-port2/2 port group interface ten-gigabitethernet 2/0/26Sysname-irf-port2/2 quitSysname interface range ten-gigabitethernet 2/0/49 to ten-gigabitethernet 2/0/50Sysname-if-range undo shutdownSysname-if-range quit save system-viewSysname irf-port-configuration active 二层利用LACP进行检测，在数据中心组网中，为了实现更简单的拓扑结构，一般在接入层和汇聚层均采用IRF技术进行整合。先将核心交换机与接入交换机之间互连的4个端口进行两两捆绑，然后开启LACP检测。Sysname interface bridge-aggregation 1Sysname-Bridge-Aggregation2 link-aggregation mode dynamicSysname-Bridge-Aggregation2 mad enableSysname-Bridge-Aggregation21二层也还可以利用BFD进行快速检测，在用于BFD MAD检测的接口下必须使用mad ip address命令配置MAD IP地址，而不要配置其它IP地址（包括使用ip address命令配置的普通IP地址、VRRP虚拟IP地址等），以免影响MAD检测功能。（但不推荐，因要将端口如G1/0/1，G2/0/1，G3/0/1，以及接入设备G1/0/1-4划入同一VLAN内，实际情况中很少有有将多个端口划入同一个VLAN） system-viewSysname vlan 1000Sysname-vlan1000 port ten-gigabitethernet 1/0/1 ten-gigabitethernet 2/0/1 ten-gigabitethernet 3/0/1 ten-gigabitethernet 4/0/1Sysname-vlan3 quitSysname interface vlan-interface 1000Sysname-Vlan-interface1000 mad bfd enableSysname-Vlan-interface1000 mad ip address 192.168.2.1 24 member 1Sysname-Vlan-interface1000 mad ip address 192.168.2.2 24 member 2Sysname-Vlan-interface1000 mad ip address 192.168.2.3 24 member 3Sysname-Vlan-interface1000 mad ip address 192.168.2.4 24 member 4Sysname-Vlan-interface1000 quit因为BFD MAD和生成树功能互斥，所以在用于BFD MAD检测的端口上关闭生成树协议。Sysname interface ten-gigabitethernet 1/0/1Sysname-Ten-Gigabitethernet-1/0/1 undo stp enableSysname-Ten-Gigabitethernet-1/0/1 quitSysname interface ten-gigabitethernet 2/0/1Sysname-Ten-Gigabitethernet-2/0/1 undo stp enableSysname-Ten-Gigabitethernet-2/0/1 quitSysname interface ten-gigabitethernet 3/0/1Sysname-Ten-Gigabitethernet-3/0/1 undo stp enableSysname-Ten-Gigabitethernet-3/0/1 quitSysname interface ten-gigabitethernet 4/0/1Sysname-Ten-Gigabitethernet-4/0/1 undo stp enableSysname-Ten-Gigabitethernet-4/0/1 quit重点实际环境中，往往是以上环境进行检测配置，具体配置如下：(1)配置RouterA# 创建VLAN40和VLAN42。 system-viewRouterA vlan 40RouterA-vlan40 quitRouterA vlan 42RouterA-vlan42 quit# 创建一个动态聚合接口40。RouterA interface bridge-aggregation 40RouterA-Bridge-Aggregation40 link-aggregation mode dynamicRouterA-Bridge-Aggregation40 quit# 在聚合接口中添加成员端口Ten-GigabitEthernet1/0/1、Ten-GigabitEthernet1/0/2、Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4。RouterA interface ten-gigabitethernet 1/0/1RouterA-Ten-GigabitEthernet1/0/1 port link-aggregation group 40RouterA-Ten-GigabitEthernet1/0/1 quitRouterA interface ten-gigabitethernet 1/0/2RouterA-Ten-GigabitEthernet1/0/2 port link-aggregation group 40RouterA-Ten-GigabitEthernet1/0/2 quitRouterA interface ten-gigabitethernet 1/0/3RouterA-Ten-GigabitEthernet1/0/3 port link-aggregation group 40RouterA-Ten-GigabitEthernet1/0/3 quitRouterA interface ten-gigabitethernet 1/0/4RouterA-Ten-GigabitEthernet1/0/4 port link-aggregation group 40RouterA-Ten-GigabitEthernet1/0/4 quit# 将聚合接口40加入VLAN40。RouterA interface bridge-aggregation 40RouterA-Bridge-Aggregation40 port access vlan 40# 创建一个动态聚合接口42。RouterA interface bridge-aggregation 42RouterA-Bridge-Aggregation42 link-aggregation mode dynamicRouterA-Bridge-Aggregation42 quit# 在聚合接口中添加成员端口Ten-GigabitEthernet1/0/5、Ten-GigabitEthernet1/0/6。RouterA interface ten-gigabitethernet 1/0/5RouterA-Ten-GigabitEthernet1/0/5 port link-aggregation group 42RouterA-Ten-GigabitEthernet1/0/5 quitRouterA interface ten-gigabitethernet 1/0/6RouterA-Ten-GigabitEthernet1/0/6 port link-aggregation group 42RouterA-Ten-GigabitEthernet1/0/6 quit# 将聚合接口42加入VLAN42。RouterA interface bridge-aggregation 42RouterA-Bridge-Aggregation42 port access vlan 42RouterA-Bridge-Aggregation42 quit# 为VLAN40和VLAN42创建VLAN接口，并配置IP地址。RouterA interface vlan-interface 40RouterA-Vlan-interface40 ip address 10.214.50.2 30RouterA-Vlan-interface40 quitRouterA interface vlan-interface 42RouterA-Vlan-interface42 ip address 10.214.50.9 30RouterA-Vlan-interface42 quit# 配置OSPF，发布本地三个直连网段。RouterA ospfRouterA-ospf-1 import-route directRouterA-ospf-1 area 0RouterA-ospf-1-area-0.0.0.0 network 10.214.60.0 0.0.0.3RouterA-ospf-1-area-0.0.0.0 network 10.214.50.0 0.0.0.3RouterA-ospf-1-area-0.0.0.0 network 10.214.50.8 0.0.0.3RouterA-ospf-1-area-0.0.0.0 quitRouterA-ospf-1 quit(2)配置RouterB# 创建VLAN41、VLAN42。 system-viewRouterB vlan 41 to 42# 创建一个动态聚合接口41。RouterB interface bridge-aggregation 41RouterB-Bridge-Aggregation41 link-aggregation mode dynamicRouterB-Bridge-Aggregation41 quit# 在聚合接口中添加成员端口Ten-GigabitEthernet1/0/1、Ten-GigabitEthernet1/0/2、Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4。RouterB interface ten-gigabitethernet 1/0/1RouterB-Ten-GigabitEthernet1/0/1 port link-aggregation group 41RouterB-Ten-GigabitEthernet1/0/1 quitRouterB interface ten-gigabitethernet 1/0/2RouterB-Ten-GigabitEthernet1/0/2 port link-aggregation group 41RouterB-Ten-GigabitEthernet1/0/2 quitRouterB interface ten-gigabitethernet 1/0/3RouterB-Ten-GigabitEthernet1/0/3 port link-aggregation group 41RouterB-Ten-GigabitEthernet1/0/3 quitRouterB interface ten-gigabitethernet 1/0/4RouterB-Ten-GigabitEthernet1/0/4 port link-aggregation group 41RouterB-Ten-GigabitEthernet1/0/4 quit# 将聚合接口41加入VLAN41。RouterB interface bridge-aggregation 41RouterB-Bridge-Aggregation41 port access vlan 41RouterB-Bridge-Aggregation41 quit# 创建一个动态聚合接口42。RouterB interface bridge-aggregation 42RouterB-Bridge-Aggregation42 link-aggregation mode dynamicRouterB-Bridge-Aggregation42 port access vlan 42RouterB-Bridge-Aggregation42 quit# 在聚合接口中添加成员端口Ten-GigabitEthernet1/0/5、Ten-GigabitEthernet1/0/6。RouterB interface ten-gigabitethernet 1/0/5RouterB-Ten-GigabitEthernet1/0/5 port link-aggregation group 42RouterB-Ten-GigabitEthernet1/0/5 quitRouterB interface ten-gigabitethernet 1/0/6RouterB-Ten-GigabitEthernet1/0/6 port link-aggregation group 42RouterB-Ten-GigabitEthernet1/0/6 quit# 将聚合接口42加入VLAN42。RouterB interface bridge-aggregation 42RouterB-Bridge-Aggregation42 port access vlan 42RouterB-Bridge-Aggregation42 quit# 为VLAN41和VLAN42创建VLAN接口，并配置IP地址。RouterB interface vlan-interface 41RouterB-Vlan-interface41 ip address 10.214.50.6 30RouterB-Vlan-interface41 quitRouterB interface vlan-interface 42RouterB-Vlan-interface42 ip address 10.214.50.10 30RouterB-Vlan-interface42 quit# 配置OSPF，发布本地三个直连网段。RouterB ospfRouterB-ospf-1 import-route directRouterB-ospf-1 area 0RouterB-ospf-1-area-0.0.0.0 network 10.214.70.0 0.0.0.3RouterB-ospf-1-area-0.0.0.0 network 10.214.50.0 0.0.0.3RouterB-ospf-1-area-0.0.0.0 network 10.214.50.8 0.0.0.3RouterB-ospf-1-area-0.0.0.0 quitRouterB-ospf-1 quit(3)配置IRF# 创建VLAN10、VLAN20、VLAN40、VLAN41。 system-viewSysname vlan 10Sysname-vlan10 quitSysname vlan 20Sysname-vlan20 quitSysname vlan 40Sysname-vlan40 quitSysname vlan 41Sysname-vlan41 quit# 创建一个动态聚合接口10。Sysname interface bridge-aggregation 10Sysname-Bridge-Aggregation10 link-aggregation mode dynamicSysname-Bridge-Aggregation10 quit# 在聚合接口中添加成员端口，包括Ten-GigabitEthernet1/0/10、Ten-GigabitEthernet2/0/10、Ten-GigabitEthernet3/0/10、Ten-GigabitEthernet4/0/10。Sysname interface ten-gigabitethernet 1/0/10Sysname-Ten-GigabitEthernet1/0/10 port link-aggregation group 10Sysname-Ten-GigabitEthernet1/0/10 quitSysname interface ten-gigabitethernet 2/0/10Sysname-Ten-GigabitEthernet2/0/10 port link-aggregation group 10Sysname-Ten-GigabitEthernet2/0/10 quitSysname interface ten-gigabitethernet 3/0/10Sysname-Ten-GigabitEthernet3/0/10 port link-aggregation group 10Sysname-Ten-GigabitEthernet3/0/10 quitSysname interface ten-gigabitethernet 4/0/10Sysname-Ten-GigabitEthernet4/0/10 port link-aggregation group 10Sysname-Ten-GigabitEthernet4/0/10 quit# 将聚合接口10加入VLAN10。Sysname interface bridge-aggregation 10Sysname-Bridge-Aggregation10 port access vlan 10Sysname-Bridge-Aggregation10 quit# 请按2. 图12下方表格中的内容配置聚合接口20、40、41，并将聚合组加入相应VLAN，以及在聚合组中加入相应的端口，配置过程不再赘述。# 为VLAN10、VLAN20、VLAN40、VLAN41创建VLAN接口，并配置IP地址。Sysname interface vlan-interface 10Sysname-Vlan-interface10 ip address 10.214.10.1 24Sysname-Vlan-interface10 quitSysname interface vlan-interface 20Sysname-Vlan-interface20 ip address 10.214.20.1 24Sysname-Vlan-interface20 quitSysname interface vlan-interface 40Sysname-Vlan-interface40 ip address 10.214.50.1 30Sysname-Vlan-interface40 quitSysname interface vlan-interface 41Sysname-Vlan-interface41 ip address 10.214.50.5 30Sysname-Vlan-interface41 quit# 配置OSPF，发布本地所有直连网段。Sysname ospfSysname-ospf-1 import-route directSysname-ospf-1 area 0Sysname-ospf-1-area-0.0.0.0 network 10.214.10.0 0.0.0.255Sysname-ospf-1-area-0.0.0