H3C 堆叠IRF + 链路聚合实验

一、学习目标

掌握H3C的堆叠,配合链路聚合。最终实现较为典型的小网络高可用方案。

总结写在这:

1、H3C的IRF如果是两台设备堆叠,那两台IRF编号决不能一样,IRF靠优先靠优先级选举当成主设备。

2、IRF设备如果当成核心,下面的汇聚各自连线到核心IRF两台设备上,做线路冗余。从汇聚设备上看,比如设备3的两条线g1/0/1和g1/0/2是一组聚合链路,反推到核心上呢,那就是IRF的G1/0/1和G2/0/1是一组聚合链路,建议IRF和汇聚的聚合链路组group保持一致。

3、IRF设备上创建两条聚合链路,分别冗余的连接汇聚的两台交换机,组成高可用。主机两条聚合链路做成trunk并放行相应的vlan

二、拓扑图和说明

1、拓扑图

 2.说明

● 设备1(S5820V2-54QS-GE_1)通过配置irf优先级为10(默认为1)成为IRF主设备

●设备2通过配置IRF编号为2,自动成为备设备

●设备IRF的g1/0/1和设备2的g2/0/1配置成一组链路聚合,如group 1。(等等,为啥是设备2的g2/0/1?哪里来的2?因为该设备的IRF编号改成了2,所以设备2的所有接口编号都是2了以后)

●设备IRF(设备1和2的组合)的g1/0/2和g2/0/2组成一组聚合链路,如group 2。

●设备IRF上创建vlan 10

●将设备的两个聚合链路设置成trunk,并且允许相应的vlan通过,

●将设备3的g1/0/1和g1/0/2组成聚合链路 group 1(和IRF的聚合链路group 1对应),然后设置成trunk,并允许相应的vlan通过,创建vlan10,设置g1/0/3为vlan 10的access口

●将设备4的g1/0/1和g1/0/2组成聚合链路 group 2(和IRF的聚合链路group 2对应),然后设置成trunk,并允许相应的vlan通过,创建vlan10,设置g1/0/3为vlan 10的access口

三、具体配置

1、查看设备1的irf编号

<SW1>dis irf
MemberID    Role    Priority  CPU-Mac         Description
 *+1        Master  1         4213-afb8-0104  ---

2、调高设备1的irf优先级,优先级数值高了更优

<SW1>sys
[SW1]irf member 1 priority 10
[SW1]save

3、调整设备2的irf编号

[SW2]irf member 1 renumber 2  //修改编号,需要确认
[SW2]save    //保存配置,需要按y回车确认,必须保存,不保存的话等会设备重启后配置会丢失
[SW2]quit    //退回到用户视图
<SW2>reboot  //重启,需要确认。因为修改了设备编号,所以必须重启!

//.....等待设备重启完成.....

[SW2]dis irf   //查看设备2的irf编号
MemberID    Role    Priority  CPU-Mac         Description
 *+2        Master  1         4213-b571-0204  ---

4、配置设备1的IRF

[SW1]int range f1/0/53 to f1/0/54    //进入两个准备堆叠的接口
[SW1-range]shutdown                  //关闭接口

[SW1]irf-port 1/1   //创建堆叠口,将53、54接口加入堆叠口
[SW1-irf-port1/1]port group interface f1/0/53     //将53接口加入堆叠口
[SW1-irf-port1/1]port group interface f1/0/54     //将54接口加入堆叠口
[SW1-irf-port1/1]display this                     //查看当前接口上的配置

[SW1]int range f1/0/53 to f1/0/54    //进入两个准备堆叠的接口
[SW1-range]undo shutdown             //开启两个堆叠接口
[SW1-range]quit

[SW1]save                           //保存配置,需要按y回车确认
[SW1]irf-port-configuration active  //激活IRF配置

5、配置设备2的IRF

注意,设备2的IRF编号为2之后,所有本机端口编号都会变成2开头

[SW2]int range f1/0/53 to f1/0/54    //进入两个准备堆叠的接口
[SW2-range]shutdown                  //关闭接口

[SW2]irf-port 2/2   //创建堆叠口,注意设备2的IRF号绝不能与设备1一样。
[SW2-irf-port1/1]port group interface f2/0/53     //将设备2的53接口加入堆叠口
[SW2-irf-port1/1]port group interface f2/0/54     //将设备2的54接口加入堆叠口
[SW2-irf-port1/1]display this                     //查看当前接口上的配置

[SW2]int range f2/0/53 to f2/0/54    //进入两个准备堆叠的接口
[SW2-range]undo shutdown             //开启两个堆叠接口
[SW2-range]quit

[SW2]save                           //保存配置,需要按y回车确认
[SW2]irf-port-configuration active  //激活IRF配置,设备会自动重启

//注意,设备2从启后,就会自动与设备1协商成IRF,设备2的主机名也会变成和主IRF设备名保持一致

6、查看IRF设备状态(登录设备1或设备2都行),并更改设备主机名为IRF-SW(可选)

<SW1>sys
<SW1>sysname IRF-SW
[IRF-SW]dis irf
MemberID    Role    Priority  CPU-Mac         Description
 *+1        Master  10        4213-afb8-0104  ---
   2        Standby 1         4213-b571-0204  ---
--------------------------------------------------
 * indicates the device is the master.
 + indicates the device through which the user logs in.

 The bridge MAC of the IRF is: 4213-afb8-0100
 Auto upgrade                : yes
 Mac persistent              : 6 min
 Domain ID                   : 0

7、配置IRF的链路聚合

//在IRF-SW上配置聚合链路1(group 1),将SW1的g1/0/1与SW2的g/2/0/1做聚合
[IRF-SW]interface Bridge-Aggregation 1  //创建聚合口
[IRF-SW-Bridge-Aggregation1]int g1/0/1  //进入物理接口
[IRF-SW-GigabitEthernet1/0/1]port link-aggregation group 1  //将物理接口加入聚合口
[IRF-SW-GigabitEthernet1/0/1]int g2/0/1  
[IRF-SW-GigabitEthernet2/0/1]port link-aggregation group 1  //将物理接口加入聚合口
[IRF-SW-GigabitEthernet2/0/1]display link-aggregation summary  //检查两个端口是否都被加入到聚合口


//在IRF-SW上配置聚合链路2(group 2),将SW1的g1/0/2与SW2的g/2/0/2做聚合
[IRF-SW]interface Bridge-Aggregation 2  //创建聚合口
[IRF-SW-Bridge-Aggregation1]int g1/0/2  //进入设备1物理接口g1/0/2
[IRF-SW-GigabitEthernet1/0/2]port link-aggregation group 2  //将设备1物理接口g1/0/2加入聚合口2
[IRF-SW-GigabitEthernet1/0/2]int g2/0/2  
[IRF-SW-GigabitEthernet2/0/2]port link-aggregation group 2  //将设备2物理接口g2/0/2加入聚合口2
[IRF-SW-GigabitEthernet2/0/2]display link-aggregation summary  //检查两个端口是否都被加入到聚合口

8、配置sw3的链路聚合、vlan

[SW3]int Bridge-Aggregation 1
[SW3-Bridge-Aggregation1]int g1/0/1
[SW3-GigabitEthernet1/0/1]port link-aggregation group 1
[SW3-Bridge-Aggregation1]int g1/0/2
[SW3-GigabitEthernet1/0/2]port link-aggregation group 1
[SW3-GigabitEthernet1/0/2]quit
[SW3]vlan 10
[sw3-vlan10]port g1/0/3
[sw3-vlan10]quit

9、配置sw4的链路聚合、vlan

注意:sw4的聚合链路编号建议也不能和sw1的一样,要和上层的IRF组合设备的聚合链路编号保持一致。

[SW4]int Bridge-Aggregation 2
[SW4-Bridge-Aggregation1]int g1/0/1
[SW4-GigabitEthernet1/0/1]port link-aggregation group 2
[SW4-Bridge-Aggregation2]int g1/0/2
[SW4-GigabitEthernet1/0/2]port link-aggregation group 2
[SW4-GigabitEthernet1/0/2]quit
[SW4]vlan 10
[sw4-vlan10]port g1/0/3
[sw4-vlan10]quit

10、配置IRF、sw3、sw4的聚合端口为Trunk

//.....配置IRF的trunk和vlan.....
[IRF-SW]vlan 10                                     //给IRF创建VLAN 10
[sw3-vlan10]quit

[IRF-SW]int Bridge-Aggregation 1                    //进入聚合接口 group 1
[IRF-SW-Bridge-Aggregation1]port link-type trunk    //聚合接口1配置为Trunk类型
[IRF-SW-Bridge-Aggregation1]port trunk permit vlan 10  //放行VLAN10
[IRF-SW-Bridge-Aggregation1]quit
[IRF-SW]dis link-aggregation summary                //检查聚合接口

[IRF-SW]int Bridge-Aggregation 2                       //进入聚合接口 group 2
[IRF-SW-Bridge-Aggregation2]port link-type trunk       //聚合接口1配置为Trunk类型
[IRF-SW-Bridge-Aggregation2]port trunk permit vlan 10  //放行VLAN10
[IRF-SW-Bridge-Aggregation2]quit
[IRF-SW]dis link-aggregation summary                //检查聚合接口
[IRF-SW]save


//.....配置sw3的trunk.....
[SW3]int Bridge-Aggregation 1                       //进入聚合链路接口1
[SW3-Bridge-Aggregation1]port link-type trunk       //接口类型配置为Trunk
[SW3-Bridge-Aggregation1]port trunk permit vlan 10  //Trunk接口允许VLAN10通过
[SW3]save                                           //需要按y回车确认
[SW3]dis link-aggregation summary                   //检查聚合接口


//.....配置sw4的trunk.....
[SW4]int Bridge-Aggregation 2                       //进入聚合链路接口2
[SW4-Bridge-Aggregation2]port link-type trunk       //接口类型配置为Trunk
[SW4-Bridge-Aggregation2]port trunk permit vlan 10  //Trunk接口允许VLAN10通过
[SW4]save                                           //需要按y回车确认
[SW4]dis link-aggregation summary                   //检查聚合接口

11、给pc配置ip,并测试两台pc是否能通。

设备5的ip是10.0.0.100/24,设备6的ip是10.0.0.200/24。

ping一次不通的话,就多ping几次。如果超过3次感觉就有问题了。

四、四台交换机的完整配置贴出来

1、IRF设备1的配置

<IRF-SW>display current-configuration
#
 version 7.1.075, Alpha 7571
#
 sysname IRF-SW
#
 irf mac-address persistent timer
 irf auto-update enable
 undo irf link-delay
 irf member 1 priority 10
 irf member 2 priority 1
#
 lldp global enable
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
vlan 10
#
irf-port 1/1
 port group interface FortyGigE1/0/53
 port group interface FortyGigE1/0/54
#
irf-port 2/2
 port group interface FortyGigE2/0/53
 port group interface FortyGigE2/0/54
#
 stp global enable
#
interface Bridge-Aggregation1
 port link-type trunk
 port trunk permit vlan 1 10
#
interface Bridge-Aggregation2
 port link-type trunk
 port trunk permit vlan 1 10
#
interface NULL0
#
interface FortyGigE1/0/53
#
interface FortyGigE1/0/54
#
interface FortyGigE2/0/53
#
interface FortyGigE2/0/54
#
interface GigabitEthernet1/0/1
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan 1 10
 combo enable fiber
 port link-aggregation group 1
#
interface GigabitEthernet1/0/2
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan 1 10
 combo enable fiber
 port link-aggregation group 2
#
interface GigabitEthernet1/0/3
 port link-mode bridge
 combo enable fiber
#
//------省略了interface GigabitEthernet1/0/4 到 interface GigabitEthernet1/0/47的配置
#
interface GigabitEthernet1/0/48
 port link-mode bridge
 combo enable fiber
#
interface GigabitEthernet2/0/1
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan 1 10
 combo enable fiber
 port link-aggregation group 1
#
interface GigabitEthernet2/0/2
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan 1 10
 combo enable fiber
 port link-aggregation group 2
#
interface GigabitEthernet2/0/3
 port link-mode bridge
 combo enable fiber
#
//-------省略了interface GigabitEthernet2/0/4 到 interface GigabitEthernet2/0/47的配置
#
interface GigabitEthernet2/0/48
 port link-mode bridge
 combo enable fiber
#
interface M-GigabitEthernet0/0/0
#
interface Ten-GigabitEthernet1/0/49
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet1/0/50
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet1/0/51
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet1/0/52
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet2/0/49
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet2/0/50
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet2/0/51
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet2/0/52
 port link-mode bridge
 combo enable fiber
#
 scheduler logfile size 16
#
line class aux
 user-role network-operator
#
line class console
 user-role network-admin
#
line class tty
 user-role network-operator
#
line class vty
 user-role network-operator
#
line aux 0 1
 user-role network-operator
#
line con 0 1
 user-role network-admin
#
line vty 0 63
 user-role network-operator
#
radius scheme system
 user-name-format without-domain
#
domain name system
#
 domain default enable system
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
return

2、SW3的配置

[sw3]display current-configuration
#
 version 7.1.075, Alpha 7571
#
 sysname sw3
#
 irf mac-address persistent timer
 irf auto-update enable
 undo irf link-delay
 irf member 1 priority 1
#
 lldp global enable
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
vlan 10
#
 stp global enable
#
interface Bridge-Aggregation1
 port link-type trunk
 port trunk permit vlan 1 10
#
interface Bridge-Aggregation2
#
interface NULL0
#
interface Vlan-interface10
#
interface FortyGigE1/0/53
 port link-mode bridge
#
interface FortyGigE1/0/54
 port link-mode bridge
#
interface GigabitEthernet1/0/1
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan 1 10
 combo enable fiber
 port link-aggregation group 1
#
interface GigabitEthernet1/0/2
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan 1 10
 combo enable fiber
 port link-aggregation group 1
#
interface GigabitEthernet1/0/3
 port link-mode bridge
 port access vlan 10
 combo enable fiber
#
interface GigabitEthernet1/0/4
 port link-mode bridge
 combo enable fiber
//-------------省略了GigabitEthernet1/0/4到GigabitEthernet1/0/47接口
#
interface GigabitEthernet1/0/48
 port link-mode bridge
 combo enable fiber
#
interface M-GigabitEthernet0/0/0
#
interface Ten-GigabitEthernet1/0/49
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet1/0/50
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet1/0/51
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet1/0/52
 port link-mode bridge
 combo enable fiber
#
 scheduler logfile size 16
#
line class aux
 user-role network-operator
#
line class console
 user-role network-admin
#
line class tty
 user-role network-operator
#
line class vty
 user-role network-operator
#
line aux 0
 user-role network-operator
#
line con 0
 user-role network-admin
#
line vty 0 63
 user-role network-operator
#
radius scheme system
 user-name-format without-domain
#
domain name system
#
 domain default enable system
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
return

3、sw4的完整配置

<sw4>display current-configuration
#
 version 7.1.075, Alpha 7571
#
 sysname sw4
#
 irf mac-address persistent timer
 irf auto-update enable
 undo irf link-delay
 irf member 1 priority 1
#
 lldp global enable
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
vlan 10
#
 stp global enable
#
interface Bridge-Aggregation2
 port link-type trunk
 port trunk permit vlan 1 10
#
interface NULL0
#
interface FortyGigE1/0/53
 port link-mode bridge
#
interface FortyGigE1/0/54
 port link-mode bridge
#
interface GigabitEthernet1/0/1
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan 1 10
 combo enable fiber
 port link-aggregation group 2
#
interface GigabitEthernet1/0/2
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan 1 10
 combo enable fiber
 port link-aggregation group 2
#
interface GigabitEthernet1/0/3
 port link-mode bridge
 port access vlan 10
 combo enable fiber
#
//-----省略了 interface GigabitEthernet1/0/4 到 interface GigabitEthernet1/0/47 的配置
#
interface GigabitEthernet1/0/48
 port link-mode bridge
 combo enable fiber
#
interface M-GigabitEthernet0/0/0
#
interface Ten-GigabitEthernet1/0/49
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet1/0/50
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet1/0/51
 port link-mode bridge
 combo enable fiber
#
interface Ten-GigabitEthernet1/0/52
 port link-mode bridge
 combo enable fiber
#
 scheduler logfile size 16
#
line class aux
 user-role network-operator
#
line class console
 user-role network-admin
#
line class tty
 user-role network-operator
#
line class vty
 user-role network-operator
#
line aux 0
 user-role network-operator
#
line con 0
 user-role network-admin
#
line vty 0 63
 user-role network-operator
#
radius scheme system
 user-name-format without-domain
#
domain name system
#
 domain default enable system
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
return

本帖参考了最最最常见的链路聚合、IRF堆叠配置_坏坏-5的博客-CSDN博客_irf堆叠技术的文章,感谢分享。

  • 13
    点赞
  • 110
    收藏
    觉得还不错? 一键收藏
  • 4
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 4
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值