华三S12500交换机大POP点配置指导

1、华三s12500交换机大pop点配置指导1!hbcitolp解决方案专家杭州华三通信技术有限公司2015年08月华三s12500交换机大pop点配置指导1准备工作说明1、上联端口规划准备完毕。2、设备地址规划完毕。irf2堆叠组（二虚一）建立配置配置s12510机框一#设置s12510机框一的成员编号为1。<sysname> system-viewsysname irf member 1info: member id change will take effect after the member reboots and operates in irf mode.#将设备的运行模式

2、切换到irf模式。<sysname> system-viewsysname chassis convert mode irfthe device will switch to irf mode and reboot. you are recommended to save the current running configuration and specify the configuration file for the next startup. continue? y/n:ydo you want to convcrt the content of the next star

3、tup configuration f订e flash:/startup. cfg to make it available in irf mode? y/n:yplease wa.itsaving the converted configuration f订c to the main board succeeded.slot 1:saving the converted configuration file succeeded.now rcbooting, please wait设备重启后s12510机框一形成了只有一台成员设备的irf。# 关闭ten-gigabitethernetl/0/

4、0/24端 口。sysnamc interface tcn-gigabitethcrnct1/0/0/24 sysname-ten-gigabitethernet1/0/0/24 shutdown sysname-ten-gigabitethernet1/0/0/24 quit# 关闭ten-gigabitethernet 1/1/0/24端口。sysname interface ten-gigabitethernet1/1/0/24 sysname-ten-gi gabitethernetl/1/0/24 shutdownsysname-ten-gigabitethernet1/1/0/24

5、 quit# 创 建 irf 端 口 1/2 ,并 将它与 物理端 口 ten-gigabitethernetl/0/0/24 和 tcn-gigabitethcrnct 1/1/0/24 绑定。sysname irf-port 1/2sysname-irf-portl/2 port group interface ten-gigabitethernet 1/0/0/24 sysrmme-irf-portl/2 port group intcrfacc ten-gigabitethernet 1/1/0/24 sysname-irf-portl/2 quit# 开启 ten-gi gab i

6、tetherne 11 / 0/0/24 端 口。sysname interface tcn-gigabitethcrnct1/0/0/24 sysname-ten-gigabitethernet1/0/0/24 undo shutdown sysname-ten-gigabitethernet1/0/0/24 quit# 开启 tcn-gigabitethcrnctl/1/0/24 端 口。sysname interface ten-gigabitethernet1/1/0/24sysname-ten-gigabitetherne11/i/0/24 undo shutdown sysname

7、-ten-gigabitethemetl/1/0/24 quit#将当前配置保存到下次启动配置文件。sysname quit<sysname> save(2)配置s12510机框二#配置s12510机框二的成员编号为2。<sysname system-viewsysname irf member 2info: member id change will take effect after the member reboots and operates in irf mode.#将设备的运行模式切换到irf模式。sysname chassis convert mode irft

8、he device wil 1 switch to irf mode and reboot. you are recommended to save the current running configuration and specify the configuration file for the next startup. continue? y/n:ydo you want to con ver t the content of the n ext startup conf igura tion file flash:/startup> cfg to make it availa

9、ble in irf mode? y/n:yplease wait.saving the converted configuration file to the main board succeeded.slot 1:saving the converted configuration file succeeded.now rebooting, please wait设备重启后s12510机框二形成了只有一台成员设备的irf。# 关闭 tcn-gigabitethcrnct2/0/0/24 端口。sysname interface ten-gigabitethernet2/0/0/24 sys

10、name-ten-gigabitethernet2/0/0/24 shutdown sysname-tcn-gigabitethcrnct2/0/0/24 quit# 关闭ten-gigabitethernet2/l/0/24端口。sysname interface ten-gigabitethernet2/1/0/24 sysnamc-tcn-gigabitethcrnct2/1/0/24 shutdown sysname-ten-gigabitethernet2/l/0/24 quit# 创 建 trf 端口 2/1 ,并将 它与物 理端口 ten-gi gabi tethernet2/0

11、/0/24 和 tcn-gigabitethcrnct2/1/0/24 绑定。sysname irf-port 2/1sysname-irf-port2/l port group interface ten-gigabitethernet 2/0/0/24sysname-irf-port2/l port group interface ten-gigabitethernet 2/1/0/24 sysname-irf-port2/l quit# 开启ten-gigabitethernet2/0/0/24端 口。sysname interface ten-gigabitethetnet2/0/0/

12、24sysname-ten-gigabitethernet2/0/0/24 undo shutdown sysname-ten-gigabitethernet2/0/0/24 quit# 开启ten-gigabitethernet2/l/0/24端口。sysname interface ten-gigabitethernet2/1/0/24sysname-ten-gigabitethcrnct2/1/0/24 undo shutdownsysname-ten-gigabitethernet2/l/0/24 quit#将当前配置保存到下次启动配置文件。sysname quit<sysnam

13、e> save激活irf端口的配置#将机框一的ten-gl/0/0/24和机框二的ten-g2/0/0/24进行物理连线；将机框一的 ten-gl/1/0/24和机框二的ten-g2/l/0/24进行物理连线。#激活s12510机框一设备的irf端口配置。sysname irf-port-configuration active#激活s12510机框二设备的trf端口配置，系统将提示发生irf合并，用户需要手工 重启其中机框二设备，加入以机框一设备为主设备的irf。sysname irf-portconfiguration active%jul 9 09:04:48:279 2013 s

14、tm/4/stm_merge_need_reb00t: -mdc=1; ire merge occurs and the irf system needs a reboot.% jul9 14:03:06:855 2013 stm/5/stm_merge: -mdc二 1; irf merge occurs and theirf system does not need to reboot.#在本例中，使用s12510机框一作为主设备，因此需要重启s12510机框二。 sysnamc quit<sysname> reboot重启完成后，s12510机框一和s12510机框二合并成为

15、一个irf堆叠组，s12510机框一 为主设备。（4）配置bfd mad检测（堆叠组防分裂检测）# 创建vlan 4091 ,并将s12510机框一（成员编号为1 ）上的端口ten-gigabitethernetl/0/0/20 和 s12510 机框二（成员 编号为 2）上的端口 ten-gigabitethernet2/0/0/20il|入 vlan中。<sysname> system-viewsysname vlan 40911/0/0/20 ten-gigabitethernetsysname-vlan4091 port ten-gigabitethernet2/0/0/2

16、0sysname-vlan4091 quit#创建vun接口3,并配置mad ip地址。sysname interface vlan-interface 4091mad bfd enablemad ip mad ip quitsysname-vlan-interface4091192. 168. 2. 1 30 member 1192.168. 2. 2 30 member 2addressaddresssysnamc-vlan-intcrfacc4091sysname-vlan-interface4091sysnamevian-i nterface4091所以在 tcn-gi gab ite

17、t hornet 1/0/0/20 和#因为bfd mad和生成树功能互斥，ten-gigabitethernet2/0/0/20 上关闭生成树协议。sysname interface ten-gigabitethernet 1/0/0/20sysnamc-tcn-gigabitethcrnct-1/0/0/20 undo stp enablesysnametengigabitethernet-1/0/0/20 quitsysname interface ten-gigabitethernet 2/0/0/20sysnamc-tcn-gigabitethcrnct-2/0/0/20 undo

18、stp enablesysname-ten-gigabitethernet-2/0/0/20 quit#将机框一的ten-gl/0/0/20和机框二的ten-g2/0/0/20进行物理连线。3 mdc （一虚多）建立配置创建并配置虚拟交换机a,供局点a使用。#创建mdcao<device> system-viewdevice mdc mdcaexecuting this command will create mdc mdca id 2 and empty folder /mdc/mdc2 in the root directory of the storage media. co

19、ntinue? y/n:ythis mdc was crcated successfully.#在缺省mdc中删除机框一和机框二上的业务板2,并将该业务板分配给mdcaodevice-mdc_2-mdca mdc admindcvicc-mdc-l-admin undo location chassis 1 slot 2the configuration associated with the specified slot of mdc will be lost. continue? y/n:ydevice-mclc-1-admin undo location chassis 2 slot 2

20、the configuration associated with the specified slot of mdc will be lost.continue? y/n:ydevice-mclc-1-admin mdc mdcadevice-mdc-2-mdca location chassis 1 slot 2device-mdc-2-mdca location chassis 2 slot 2# 为 mdca 分 配 接 口 ten-g igabitethernet 1/2/0/1ten-gigabitethernet1/2/0/48 , 以及接口 ten-gigabitetherne

21、t2/2/0/l tcn-gigabitethcrnct2/2/0/48device-mdc-2-mdca allocate interface ten-gigabitethernet 1/2/0/1 to ten-gigabitethernet 1/2/0/48the configurations of the intcrfaccs will be lost continue? y/n:ydevice-mdc-2-mdca allocate interface ten-gigabitethernet 2/2/0/1 toten-gi gabi tethernet 2/2/0/48#配置mdc

22、a在主控板16和17上的磁盘使用上限均为20%0limit-resourcediskchassis1slot16ratio20limit-resourcediskchassis1slot17ratio20limit-resourcediskchassis2slot16ratio20limit-resourcediskchassis2slot17ratio20dev i ce-mdc-2-mdca device-mdc-2mdca device-mdc-2-mdca dev i ce-mdc-2-mdca#启动虚拟交换机eudevice-mdc-2-mdca mdc startit will t

23、ake some time to start mdc.this mdc was started successfully.device-mdc-2-mdca quit#切换到虚拟交换机a,并按照提示信息键入ctrl_d进入虚拟交换机a的命令行界 面进行配置。device switchto mdc mdca7">1>1t>* copyright (c) 2004-2015 hangzhou h3c tech. co., ltd. all rights reserved. * without the owner" s prior writien consen*

24、 no decompiling or reverse-engineering shall be allowed*>1r* t% xr* #t >t% 吓 7* 吓 >7*t%#t xr* *t% xr% #t xr% #t >7*咛 *t* #t#t#t卜 吟、卜 *t*t* 卜 吟、卜xt"卜 *t* "卜打 *y* "卜automatic configuration is running, press ctrld to break or press ctrlb to switch back to the defauit mdc.<

25、dcvicc> systcm-vicw#将虚拟交换机a的名称修改为mdca,以便和其它mdc区别。device sysname mdca#配置虚拟交换机a的带外网管口的1p地址、使能telnet服务等基础配置，供用 户远程登录虚拟交换机a。mdca interface mgigabitethernet 1/0/0/0mdca-m-gigabitethernetl/0/0/0 ip address 192.168.1.251 24mdca-m-gigabitethernet1/0/0/0 quitmdca telnet server enablemdca user-interface vt

26、y 0 63mdca-ui-vtyo-63 authentication-mode nonemdcaui-vtyo-63 user-role mdc-admin#从虚拟交换机a返回缺省mdc。mdca-ui-vtyo-63 return<mdca> switchbackdevice4聚合链路与接口基础配置1)创建用于上联bas或sr设备的跨机框二层聚合接口 1,并配置该接口为动态聚 合模式。devicea interface bridge-aggregation 1deviceabridgeaggregationl linkaggregation mode dynamicdevic

27、ca-bridgc-aggrcgation1 quit# 分别将端口 ten-gigabitethernetl/0/0/1 和 ten-gigabitethernet2/0/0/l 加入 到聚合组1中。dcvicca intcrfacc tcn-gigabitethernct l/o/o/ldevicea-ten-gigabitethernetl/0/0/1 port link-aggregation group 1 devicea-ten-gigabitethernet1/0/0/叮 quitdcvicca interface tcn-gigabitethcrnct 2/0/0/1devic

28、ea-ten-gigabitethernet2/0/0/l port link-aggregation group 1 devicea-ten-gigabitethernet2/0/0/叮 quit#配置二层聚合接口 1为trunk端口，并允许vlan 10和20的报文通过。deviceaj interface bridge-aggregation 1devicea-bri dgeaggregatiorh dcvicca-bridgc-aggrcgationl devicea-bridge-aggregationl devicea-bri dgeaggregationlport link-ty

29、pe trunkundo port trunk permit vlan 1port trunk permit vlan 10 20 quit2）创建用于下联olt等设备的跨机框二层聚合接口 101,并配置该接口为动态聚合模式。devicea interface bridge-aggregation 101devicea-bridge-aggregationlol link-aggregation mode dynamic devicea-bridge-aggregationlol quit# 分别将端口 gigabitethernetl/3/0/1 和 gigabitethernet2/3/0

30、/l 加入到聚合组 101 中。dcvicca interface gigabitethcrnct 1/3/0/1devicea-gigabitethernetl/3/0/1 port link-aggregation group 101 devicea-gigabitethernet1/3/0/叮 quitdcvicca interface gigabitethcrnct 2/3/0/1 devicea-gigabitethernet2/3/0/l port link-aggregation group 101 devicea-gigabitethernet2/3/0/叮 quit#配置二层

31、聚合接口 101为hybrid端口，并启用qinq功能，允许vlan 10的报文 带单层tag通过，允许vlan 20的报文不带tag通过。devicea interface bridge-aggregation 101devicea-bridge-aggregationlol devicea-bridge-aggregationlol devicea-bri dgeaggregationl01 devicea-bridge-aggregationlol devicea-bridge-aggregationlolportundopor tportqinqlink-type hybrid por

32、t hybrid hybrid vlan hybrid vlan enablevlan 110 tagged20 untaggeddevicea-bridge-aggregationlol qinq transparent-vlan 10 devicea-bridge-aggregation101 quit5 qinq规则配置(1)配置 device a#定义类test,匹配方式为或操作，匹配规则为：匹配用户网络vlan id值为5-10 和15的报文。<devicea> system-viewdcvicca traffic classifier test operator ord

33、eviceaclassifiertest if-match customer-v1an-id 5 to 10 devicea-classifier-test if-meitch customer-vlanid 15 devicea-classifier-test quit#创建流行为test,并配置如下动作：添加vlan id为20的外层vlan tag0 devicea traffic behavior testdevicea-behavior-test nest top-most vlan 20 devicea-behavior-test quit#创建策略test,为类test指定采用流行为testodevi