Juniper QFX MC-LAG基本配置

吐蕃-鸠摩智

于 2023-05-25 16:09:01 发布

阅读量432

点赞数 1

分类专栏： Juniper 文章标签：网络网络安全运维信息与通信

本文链接：https://blog.csdn.net/zhiqianghan/article/details/130321126

版权

Juniper 专栏收录该内容

12 篇文章 2 订阅

订阅专栏

拓扑：

在这里插入图片描述

QFX-1配置

set system host-name QFX-1
set system root-authentication encrypted-password "$6$hBj8ViOs$PE5b/yTYJTrZhGfKoGTG.gnbVdDMgS2Hx4QvPXc/pAlQ0y/HJSqWjjwokM.i6cK6iGHHKkklAVlOE1uvD9i7y0"
set chassis aggregated-devices ethernet device-count 2
set interfaces xe-0/0/2 ether-options 802.3ad ae1
set interfaces xe-0/0/5 unit 0 family inet address 13.1.1.1/24
set interfaces xe-0/0/10 ether-options 802.3ad ae0
set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae0 unit 0 family ethernet-switching vlan members all
set interfaces ae1 aggregated-ether-options lacp active
set interfaces ae1 aggregated-ether-options lacp system-id 00:01:02:03:04:05
set interfaces ae1 aggregated-ether-options lacp admin-key 1
set interfaces ae1 aggregated-ether-options mc-ae mc-ae-id 1
set interfaces ae1 aggregated-ether-options mc-ae redundancy-group 1
set interfaces ae1 aggregated-ether-options mc-ae chassis-id 0
set interfaces ae1 aggregated-ether-options mc-ae mode active-active
set interfaces ae1 aggregated-ether-options mc-ae status-control active
set interfaces ae1 aggregated-ether-options mc-ae init-delay-time 240
set interfaces ae1 unit 0 family ethernet-switching interface-mode access
set interfaces ae1 unit 0 family ethernet-switching vlan members 10
set interfaces em1 unit 0 family inet address 169.254.0.2/24
set interfaces irb unit 10 family inet address 10.1.1.2/24 vrrp-group 1 virtual-address 10.1.1.1
set interfaces irb unit 10 family inet address 10.1.1.2/24 vrrp-group 1 priority 200
set interfaces irb unit 10 family inet address 10.1.1.2/24 vrrp-group 1 preempt
set interfaces irb unit 10 family inet address 10.1.1.2/24 vrrp-group 1 accept-data
set interfaces irb unit 1000 family inet address 12.1.1.1/30
set multi-chassis multi-chassis-protection 12.1.1.2 interface ae0
set protocols ospf area 0.0.0.0 interface all
set protocols iccp local-ip-addr 12.1.1.1
set protocols iccp peer 12.1.1.2 redundancy-group-id-list 1
set protocols iccp peer 12.1.1.2 liveness-detection minimum-receive-interval 1000
set protocols iccp peer 12.1.1.2 liveness-detection transmit-interval minimum-interval 1000
set switch-options service-id 1
set vlans vlan10 vlan-id 10
set vlans vlan10 l3-interface irb.10
set vlans vlan1000 vlan-id 1000
set vlans vlan1000 l3-interface irb.1000

QFX-2配置

set system host-name QFX-2
set system root-authentication encrypted-password "$6$d90gPqub$nxjb6p4DYmH5DPcA.3QU2I3/wk7KLSqs/0VTdK1sY1gZNJpeopEncxP.SnrHWG76Czw3TqPwE5H18U/DlIxxj0"
set chassis aggregated-devices ethernet device-count 2
set interfaces xe-0/0/2 ether-options 802.3ad ae1
set interfaces xe-0/0/5 unit 0 family inet address 23.1.1.2/24
set interfaces xe-0/0/10 ether-options 802.3ad ae0
set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae0 unit 0 family ethernet-switching vlan members all
set interfaces ae1 aggregated-ether-options lacp active
set interfaces ae1 aggregated-ether-options lacp system-id 00:01:02:03:04:05
set interfaces ae1 aggregated-ether-options lacp admin-key 1
set interfaces ae1 aggregated-ether-options mc-ae mc-ae-id 1
set interfaces ae1 aggregated-ether-options mc-ae redundancy-group 1
set interfaces ae1 aggregated-ether-options mc-ae chassis-id 1
set interfaces ae1 aggregated-ether-options mc-ae mode active-active
set interfaces ae1 aggregated-ether-options mc-ae status-control standby
set interfaces ae1 aggregated-ether-options mc-ae init-delay-time 240
set interfaces ae1 unit 0 family ethernet-switching interface-mode access
set interfaces ae1 unit 0 family ethernet-switching vlan members 10
set interfaces em1 unit 0 family inet address 169.254.0.2/24
set interfaces irb unit 10 family inet address 10.1.1.3/24 vrrp-group 1 virtual-address 10.1.1.1
set interfaces irb unit 10 family inet address 10.1.1.3/24 vrrp-group 1 priority 100
set interfaces irb unit 10 family inet address 10.1.1.3/24 vrrp-group 1 accept-data
set interfaces irb unit 1000 family inet address 12.1.1.2/30
set multi-chassis multi-chassis-protection 12.1.1.1 interface ae0
set protocols ospf area 0.0.0.0 interface all
set protocols iccp local-ip-addr 12.1.1.2
set protocols iccp peer 12.1.1.1 redundancy-group-id-list 1
set protocols iccp peer 12.1.1.1 liveness-detection minimum-receive-interval 1000
set protocols iccp peer 12.1.1.1 liveness-detection transmit-interval minimum-interval 1000
set switch-options service-id 1
set vlans vlan10 vlan-id 10
set vlans vlan10 l3-interface irb.10
set vlans vlan1000 vlan-id 1000
set vlans vlan1000 l3-interface irb.1000

{master:0}
root@QFX-1> show iccp 

Redundancy Group Information for peer 12.1.1.2
  TCP Connection       : Established
  Liveliness Detection : Up
  Redundancy Group ID          Status
    1                           Up   

Client Application: l2ald_iccpd_client
  Redundancy Group IDs Joined: 1 

Client Application: lacpd
  Redundancy Group IDs Joined: 1 

{master:0}
root@QFX-1> show interfaces mc-ae 
 Member Link                  : ae1
 Current State Machine's State: mcae active state
 Local Status                 : active
 Local State                  : up
 Peer Status                  : active
 Peer State                   : up
     Logical Interface        : ae1.0
     Topology Type            : bridge
     Local State              : up
     Peer State               : up
     Peer Ip/MCP/State        : 12.1.1.2 ae0.0 up
     
{master:0}
root@QFX-1> show lacp interfaces 
Aggregated interface: ae0

Aggregated interface: ae1
    LACP state:       Role   Exp   Def  Dist  Col  Syn  Aggr  Timeout  Activity
      xe-0/0/2       Actor    No    No   Yes  Yes  Yes   Yes     Fast    Active
      xe-0/0/2     Partner    No    No   Yes  Yes  Yes   Yes     Fast    Active
    LACP protocol:        Receive State  Transmit State          Mux State 
      xe-0/0/2                  Current   Fast periodic Collecting distributing
如果是distributing，则该端口在MC-LAG中状态正常
如果是Detached，通常是由于system-id和现有peer不一致导致
如果是waiting，是由于该端口被置于standby状态，停止发送LACP包


{master:0}
root@QFX-2> show iccp 

Redundancy Group Information for peer 12.1.1.1
  TCP Connection       : Established
  Liveliness Detection : Up
  Redundancy Group ID          Status
    1                           Up   

Client Application: l2ald_iccpd_client
  Redundancy Group IDs Joined: 1 

Client Application: lacpd
  Redundancy Group IDs Joined: 1 

{master:0}
root@QFX-2> show interfaces mc-ae 
 Member Link                  : ae1
 Current State Machine's State: mcae active state
 Local Status                 : active
 Local State                  : up
 Peer Status                  : active
 Peer State                   : up
     Logical Interface        : ae1.0
     Topology Type            : bridge
     Local State              : up
     Peer State               : up
     Peer Ip/MCP/State        : 12.1.1.1 ae0.0 up

{master:0}
root@QFX-2> show lacp interfaces 
Aggregated interface: ae0

Aggregated interface: ae1
    LACP state:       Role   Exp   Def  Dist  Col  Syn  Aggr  Timeout  Activity
      xe-0/0/2       Actor    No    No   Yes  Yes  Yes   Yes     Fast    Active
      xe-0/0/2     Partner    No    No   Yes  Yes  Yes   Yes     Fast    Active
    LACP protocol:        Receive State  Transmit State          Mux State 
      xe-0/0/2                  Current   Fast periodic Collecting distributing
如果是distributing，则该端口在MC-LAG中状态正常
如果是Detached，通常是由于system-id和现有peer不一致导致
如果是waiting，是由于该端口被置于standby状态，停止发送LACP包

在Server上查看接口状态
Actor是指本端信息，Partner指对端信息
system id为00:01:02:03:04:05

root@Server> show interfaces ae0 extensive 

LACP info:        Role     System             System      Port    Port  Port 
                         priority          identifier  priority  number   key 
  ge-0/0/0.0     Actor        127  00:05:86:71:c0:c0       127       1     1
  ge-0/0/0.0   Partner        127  **00:01:02:03:04:05**       127       1     1
  ge-0/0/1.0     Actor        127  00:05:86:71:c0:c0       127       2     1
  ge-0/0/1.0   Partner        127  **00:01:02:03:04:05**       127   32769     1

1. System-id should be same on both the chassis peers to form MC-LAG
2. Admin-key, mc-ae-id, Switch-option/service-id should be same on both the peers
3. Lacp should be active on both the peers
4. Chassis-id should be different.
5. Mode should be active-active or active-standby
6. Status-control should be active on one peer and standby on the other