一、学习目标
掌握H3C的堆叠,配合链路聚合。最终实现较为典型的小网络高可用方案。
总结写在这:
1、H3C的IRF如果是两台设备堆叠,那两台IRF编号决不能一样,IRF靠优先靠优先级选举当成主设备。
2、IRF设备如果当成核心,下面的汇聚各自连线到核心IRF两台设备上,做线路冗余。从汇聚设备上看,比如设备3的两条线g1/0/1和g1/0/2是一组聚合链路,反推到核心上呢,那就是IRF的G1/0/1和G2/0/1是一组聚合链路,建议IRF和汇聚的聚合链路组group保持一致。
3、IRF设备上创建两条聚合链路,分别冗余的连接汇聚的两台交换机,组成高可用。主机两条聚合链路做成trunk并放行相应的vlan
二、拓扑图和说明
1、拓扑图
2.说明
● 设备1(S5820V2-54QS-GE_1)通过配置irf优先级为10(默认为1)成为IRF主设备
●设备2通过配置IRF编号为2,自动成为备设备
●设备IRF的g1/0/1和设备2的g2/0/1配置成一组链路聚合,如group 1。(等等,为啥是设备2的g2/0/1?哪里来的2?因为该设备的IRF编号改成了2,所以设备2的所有接口编号都是2了以后)
●设备IRF(设备1和2的组合)的g1/0/2和g2/0/2组成一组聚合链路,如group 2。
●设备IRF上创建vlan 10
●将设备的两个聚合链路设置成trunk,并且允许相应的vlan通过,
●将设备3的g1/0/1和g1/0/2组成聚合链路 group 1(和IRF的聚合链路group 1对应),然后设置成trunk,并允许相应的vlan通过,创建vlan10,设置g1/0/3为vlan 10的access口
●将设备4的g1/0/1和g1/0/2组成聚合链路 group 2(和IRF的聚合链路group 2对应),然后设置成trunk,并允许相应的vlan通过,创建vlan10,设置g1/0/3为vlan 10的access口
三、具体配置
1、查看设备1的irf编号
<SW1>dis irf
MemberID Role Priority CPU-Mac Description
*+1 Master 1 4213-afb8-0104 ---
2、调高设备1的irf优先级,优先级数值高了更优
<SW1>sys
[SW1]irf member 1 priority 10
[SW1]save
3、调整设备2的irf编号
[SW2]irf member 1 renumber 2 //修改编号,需要确认
[SW2]save //保存配置,需要按y回车确认,必须保存,不保存的话等会设备重启后配置会丢失
[SW2]quit //退回到用户视图
<SW2>reboot //重启,需要确认。因为修改了设备编号,所以必须重启!
//.....等待设备重启完成.....
[SW2]dis irf //查看设备2的irf编号
MemberID Role Priority CPU-Mac Description
*+2 Master 1 4213-b571-0204 ---
4、配置设备1的IRF
[SW1]int range f1/0/53 to f1/0/54 //进入两个准备堆叠的接口
[SW1-range]shutdown //关闭接口
[SW1]irf-port 1/1 //创建堆叠口,将53、54接口加入堆叠口
[SW1-irf-port1/1]port group interface f1/0/53 //将53接口加入堆叠口
[SW1-irf-port1/1]port group interface f1/0/54 //将54接口加入堆叠口
[SW1-irf-port1/1]display this //查看当前接口上的配置
[SW1]int range f1/0/53 to f1/0/54 //进入两个准备堆叠的接口
[SW1-range]undo shutdown //开启两个堆叠接口
[SW1-range]quit
[SW1]save //保存配置,需要按y回车确认
[SW1]irf-port-configuration active //激活IRF配置
5、配置设备2的IRF
注意,设备2的IRF编号为2之后,所有本机端口编号都会变成2开头
[SW2]int range f1/0/53 to f1/0/54 //进入两个准备堆叠的接口
[SW2-range]shutdown //关闭接口
[SW2]irf-port 2/2 //创建堆叠口,注意设备2的IRF号绝不能与设备1一样。
[SW2-irf-port1/1]port group interface f2/0/53 //将设备2的53接口加入堆叠口
[SW2-irf-port1/1]port group interface f2/0/54 //将设备2的54接口加入堆叠口
[SW2-irf-port1/1]display this //查看当前接口上的配置
[SW2]int range f2/0/53 to f2/0/54 //进入两个准备堆叠的接口
[SW2-range]undo shutdown //开启两个堆叠接口
[SW2-range]quit
[SW2]save //保存配置,需要按y回车确认
[SW2]irf-port-configuration active //激活IRF配置,设备会自动重启
//注意,设备2从启后,就会自动与设备1协商成IRF,设备2的主机名也会变成和主IRF设备名保持一致
6、查看IRF设备状态(登录设备1或设备2都行),并更改设备主机名为IRF-SW(可选)
<SW1>sys
<SW1>sysname IRF-SW
[IRF-SW]dis irf
MemberID Role Priority CPU-Mac Description
*+1 Master 10 4213-afb8-0104 ---
2 Standby 1 4213-b571-0204 ---
--------------------------------------------------
* indicates the device is the master.
+ indicates the device through which the user logs in.
The bridge MAC of the IRF is: 4213-afb8-0100
Auto upgrade : yes
Mac persistent : 6 min
Domain ID : 0
7、配置IRF的链路聚合
//在IRF-SW上配置聚合链路1(group 1),将SW1的g1/0/1与SW2的g/2/0/1做聚合
[IRF-SW]interface Bridge-Aggregation 1 //创建聚合口
[IRF-SW-Bridge-Aggregation1]int g1/0/1 //进入物理接口
[IRF-SW-GigabitEthernet1/0/1]port link-aggregation group 1 //将物理接口加入聚合口
[IRF-SW-GigabitEthernet1/0/1]int g2/0/1
[IRF-SW-GigabitEthernet2/0/1]port link-aggregation group 1 //将物理接口加入聚合口
[IRF-SW-GigabitEthernet2/0/1]display link-aggregation summary //检查两个端口是否都被加入到聚合口
//在IRF-SW上配置聚合链路2(group 2),将SW1的g1/0/2与SW2的g/2/0/2做聚合
[IRF-SW]interface Bridge-Aggregation 2 //创建聚合口
[IRF-SW-Bridge-Aggregation1]int g1/0/2 //进入设备1物理接口g1/0/2
[IRF-SW-GigabitEthernet1/0/2]port link-aggregation group 2 //将设备1物理接口g1/0/2加入聚合口2
[IRF-SW-GigabitEthernet1/0/2]int g2/0/2
[IRF-SW-GigabitEthernet2/0/2]port link-aggregation group 2 //将设备2物理接口g2/0/2加入聚合口2
[IRF-SW-GigabitEthernet2/0/2]display link-aggregation summary //检查两个端口是否都被加入到聚合口
8、配置sw3的链路聚合、vlan
[SW3]int Bridge-Aggregation 1
[SW3-Bridge-Aggregation1]int g1/0/1
[SW3-GigabitEthernet1/0/1]port link-aggregation group 1
[SW3-Bridge-Aggregation1]int g1/0/2
[SW3-GigabitEthernet1/0/2]port link-aggregation group 1
[SW3-GigabitEthernet1/0/2]quit
[SW3]vlan 10
[sw3-vlan10]port g1/0/3
[sw3-vlan10]quit
9、配置sw4的链路聚合、vlan
注意:sw4的聚合链路编号建议也不能和sw1的一样,要和上层的IRF组合设备的聚合链路编号保持一致。
[SW4]int Bridge-Aggregation 2
[SW4-Bridge-Aggregation1]int g1/0/1
[SW4-GigabitEthernet1/0/1]port link-aggregation group 2
[SW4-Bridge-Aggregation2]int g1/0/2
[SW4-GigabitEthernet1/0/2]port link-aggregation group 2
[SW4-GigabitEthernet1/0/2]quit
[SW4]vlan 10
[sw4-vlan10]port g1/0/3
[sw4-vlan10]quit
10、配置IRF、sw3、sw4的聚合端口为Trunk
//.....配置IRF的trunk和vlan.....
[IRF-SW]vlan 10 //给IRF创建VLAN 10
[sw3-vlan10]quit
[IRF-SW]int Bridge-Aggregation 1 //进入聚合接口 group 1
[IRF-SW-Bridge-Aggregation1]port link-type trunk //聚合接口1配置为Trunk类型
[IRF-SW-Bridge-Aggregation1]port trunk permit vlan 10 //放行VLAN10
[IRF-SW-Bridge-Aggregation1]quit
[IRF-SW]dis link-aggregation summary //检查聚合接口
[IRF-SW]int Bridge-Aggregation 2 //进入聚合接口 group 2
[IRF-SW-Bridge-Aggregation2]port link-type trunk //聚合接口1配置为Trunk类型
[IRF-SW-Bridge-Aggregation2]port trunk permit vlan 10 //放行VLAN10
[IRF-SW-Bridge-Aggregation2]quit
[IRF-SW]dis link-aggregation summary //检查聚合接口
[IRF-SW]save
//.....配置sw3的trunk.....
[SW3]int Bridge-Aggregation 1 //进入聚合链路接口1
[SW3-Bridge-Aggregation1]port link-type trunk //接口类型配置为Trunk
[SW3-Bridge-Aggregation1]port trunk permit vlan 10 //Trunk接口允许VLAN10通过
[SW3]save //需要按y回车确认
[SW3]dis link-aggregation summary //检查聚合接口
//.....配置sw4的trunk.....
[SW4]int Bridge-Aggregation 2 //进入聚合链路接口2
[SW4-Bridge-Aggregation2]port link-type trunk //接口类型配置为Trunk
[SW4-Bridge-Aggregation2]port trunk permit vlan 10 //Trunk接口允许VLAN10通过
[SW4]save //需要按y回车确认
[SW4]dis link-aggregation summary //检查聚合接口
11、给pc配置ip,并测试两台pc是否能通。
设备5的ip是10.0.0.100/24,设备6的ip是10.0.0.200/24。
ping一次不通的话,就多ping几次。如果超过3次感觉就有问题了。
四、四台交换机的完整配置贴出来
1、IRF设备1的配置
<IRF-SW>display current-configuration
#
version 7.1.075, Alpha 7571
#
sysname IRF-SW
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 10
irf member 2 priority 1
#
lldp global enable
#
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
#
vlan 1
#
vlan 10
#
irf-port 1/1
port group interface FortyGigE1/0/53
port group interface FortyGigE1/0/54
#
irf-port 2/2
port group interface FortyGigE2/0/53
port group interface FortyGigE2/0/54
#
stp global enable
#
interface Bridge-Aggregation1
port link-type trunk
port trunk permit vlan 1 10
#
interface Bridge-Aggregation2
port link-type trunk
port trunk permit vlan 1 10
#
interface NULL0
#
interface FortyGigE1/0/53
#
interface FortyGigE1/0/54
#
interface FortyGigE2/0/53
#
interface FortyGigE2/0/54
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
port link-aggregation group 2
#
interface GigabitEthernet1/0/3
port link-mode bridge
combo enable fiber
#
//------省略了interface GigabitEthernet1/0/4 到 interface GigabitEthernet1/0/47的配置
#
interface GigabitEthernet1/0/48
port link-mode bridge
combo enable fiber
#
interface GigabitEthernet2/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
port link-aggregation group 1
#
interface GigabitEthernet2/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
port link-aggregation group 2
#
interface GigabitEthernet2/0/3
port link-mode bridge
combo enable fiber
#
//-------省略了interface GigabitEthernet2/0/4 到 interface GigabitEthernet2/0/47的配置
#
interface GigabitEthernet2/0/48
port link-mode bridge
combo enable fiber
#
interface M-GigabitEthernet0/0/0
#
interface Ten-GigabitEthernet1/0/49
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet1/0/50
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet1/0/51
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet1/0/52
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet2/0/49
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet2/0/50
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet2/0/51
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet2/0/52
port link-mode bridge
combo enable fiber
#
scheduler logfile size 16
#
line class aux
user-role network-operator
#
line class console
user-role network-admin
#
line class tty
user-role network-operator
#
line class vty
user-role network-operator
#
line aux 0 1
user-role network-operator
#
line con 0 1
user-role network-admin
#
line vty 0 63
user-role network-operator
#
radius scheme system
user-name-format without-domain
#
domain name system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
return
2、SW3的配置
[sw3]display current-configuration
#
version 7.1.075, Alpha 7571
#
sysname sw3
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
lldp global enable
#
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
#
vlan 1
#
vlan 10
#
stp global enable
#
interface Bridge-Aggregation1
port link-type trunk
port trunk permit vlan 1 10
#
interface Bridge-Aggregation2
#
interface NULL0
#
interface Vlan-interface10
#
interface FortyGigE1/0/53
port link-mode bridge
#
interface FortyGigE1/0/54
port link-mode bridge
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
port link-aggregation group 1
#
interface GigabitEthernet1/0/3
port link-mode bridge
port access vlan 10
combo enable fiber
#
interface GigabitEthernet1/0/4
port link-mode bridge
combo enable fiber
//-------------省略了GigabitEthernet1/0/4到GigabitEthernet1/0/47接口
#
interface GigabitEthernet1/0/48
port link-mode bridge
combo enable fiber
#
interface M-GigabitEthernet0/0/0
#
interface Ten-GigabitEthernet1/0/49
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet1/0/50
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet1/0/51
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet1/0/52
port link-mode bridge
combo enable fiber
#
scheduler logfile size 16
#
line class aux
user-role network-operator
#
line class console
user-role network-admin
#
line class tty
user-role network-operator
#
line class vty
user-role network-operator
#
line aux 0
user-role network-operator
#
line con 0
user-role network-admin
#
line vty 0 63
user-role network-operator
#
radius scheme system
user-name-format without-domain
#
domain name system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
return
3、sw4的完整配置
<sw4>display current-configuration
#
version 7.1.075, Alpha 7571
#
sysname sw4
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
lldp global enable
#
system-working-mode standard
xbar load-single
password-recovery enable
lpu-type f-series
#
vlan 1
#
vlan 10
#
stp global enable
#
interface Bridge-Aggregation2
port link-type trunk
port trunk permit vlan 1 10
#
interface NULL0
#
interface FortyGigE1/0/53
port link-mode bridge
#
interface FortyGigE1/0/54
port link-mode bridge
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
port link-aggregation group 2
#
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
combo enable fiber
port link-aggregation group 2
#
interface GigabitEthernet1/0/3
port link-mode bridge
port access vlan 10
combo enable fiber
#
//-----省略了 interface GigabitEthernet1/0/4 到 interface GigabitEthernet1/0/47 的配置
#
interface GigabitEthernet1/0/48
port link-mode bridge
combo enable fiber
#
interface M-GigabitEthernet0/0/0
#
interface Ten-GigabitEthernet1/0/49
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet1/0/50
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet1/0/51
port link-mode bridge
combo enable fiber
#
interface Ten-GigabitEthernet1/0/52
port link-mode bridge
combo enable fiber
#
scheduler logfile size 16
#
line class aux
user-role network-operator
#
line class console
user-role network-admin
#
line class tty
user-role network-operator
#
line class vty
user-role network-operator
#
line aux 0
user-role network-operator
#
line con 0
user-role network-admin
#
line vty 0 63
user-role network-operator
#
radius scheme system
user-name-format without-domain
#
domain name system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
return
本帖参考了最最最常见的链路聚合、IRF堆叠配置_坏坏-5的博客-CSDN博客_irf堆叠技术的文章,感谢分享。