IRF配置举例

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Copyright © 2018 新华三技术有限公司 版权所有，保留一切权利。 非经本公司书面许可，任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部，并不得以任何形式传播。本文档中的信息可能变动，恕不另行通知。

 

目  录

1 简介

2 配置前提

3 使用限制

3.1 硬件限制

3.2 软件版本限制

3.3 IRF规模

3.4 确定IRF物理端口

3.5 选择连接IRF端口的模块或线缆

3.6 IRF物理端口连接要求

3.7 IRF物理端口配置限制和指导

3.8 IRF与其它软件特性的兼容性与限制

3.9 配置回滚限制

4 两台成员设备的IRF配置举例

4.1 组网需求

4.2 配置思路

4.3 使用版本

4.4 配置步骤

4.4.1 搭建IRF

4.4.2 LACP MAD配置

4.4.3 IRF下行业务配置

4.4.4 IRF上行业务配置

4.5 验证配置

4.6 配置文件

5 相关资料

 

1  简介

本文介绍了如何搭建IRF以及在IRF上配置链路聚合和路由功能。

2  配置前提

本文档中的配置均是在实验室环境下进行的配置和验证，配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置，为了保证配置效果，请确认现有配置和以下举例中的配置不冲突。

本文档假设您已了解IRF特性。

3  使用限制

3.1  硬件限制

本系列交换机仅能与相同系列的交换机之间建立IRF。

3.2  软件版本限制

IRF中所有成员设备的软件版本必须相同，如果有软件版本不同的设备要加入IRF，请确保IRF的启动文件同步加载功能处于开启状态。

3.3  IRF规模

一个IRF系统中最多允许拥有4台成员设备。如果超过上限，则不允许新的成员设备加入。

3.4  确定IRF物理端口

本系列交换机支持使用10GE/40GE/100GE光接口作为IRF物理端口。

3.5  选择连接IRF端口的模块或线缆

如果使用IRF专用接口作为IRF物理端口，则需要使用IRF专用线缆连接。IRF专用线缆能够为成员设备间报文的传输提供很高的可靠性和性能。

如果使用光口作为IRF物理端口，则需要使用光模块和光纤连接。这种连接方式可以将距离很远的物理设备连接组成IRF，使得应用更加灵活。

3.6  IRF物理端口连接要求

本设备上与IRF-Port1口绑定的IRF物理端口只能和邻居成员设备IRF-Port2口上绑定的IRF物理端口相连，本设备上与IRF-Port2口绑定的IRF物理端口只能和邻居成员设备IRF-Port1口上绑定的IRF物理端口相连，如图1所示。否则，不能形成IRF。

一个IRF端口可以与一个或多个IRF物理端口绑定，以提高IRF链路的带宽以及可靠性。本系列交换机最多可以将一个IRF端口与8个IRF物理端口进行绑定。

图1 IRF物理连接示意图

 

3.7  IRF物理端口配置限制和指导

1. IRF物理端口配置限制

以太网接口作为IRF物理端口与IRF端口绑定后，只支持配置部分接口配置命令，包括shutdown、description、flow-interval命令。有关这些命令的详细介绍，请参见“接口管理命令参考”中的“以太网接口”。

2. IRF物理端口的环路避免与SNMP监测

IRF成员设备根据接收和发送报文的端口以及IRF的当前拓扑，来判断报文发送后是否会产生环路。如果判断结果为会产生环路，设备将在环路路径的发送端口处将报文丢弃。该方式会造成大量广播报文在IRF物理端口上被丢弃，此为正常现象。在使用SNMP工具监测设备端口的收发报文记录时，取消对IRF物理端口的监测，可以避免收到大量丢弃报文的告警信息。

3.8  IRF与其它软件特性的兼容性与限制

在组成IRF的所有设备上，最大等价路由条数（通过max-ecmp-num命令配置）配置必须相同，否则这些设备将无法组成IRF。

3.9  配置回滚限制

以下IRF相关配置不支持配置回滚：

·     配置成员设备的描述信息（irf member description）

·     配置IRF中成员设备的优先级（irf member priority）

·     配置IRF端口与IRF物理端口的绑定关系（port group interface）

有关配置回滚的详细介绍，请参见“基础配置指导”中的“配置文件”。

4  两台成员设备的IRF配置举例

4.1  组网需求

·     如图2所示，Device A为公司的核心设备，但由于公司网络规模日益增大，汇聚层SW设备扩展至N台，Device A单台设备的转发能力已无法达到公司网络的需求。为了拓展核心设备的转发能力，又尽量不改变现有网络。现公司希望增加Device B，与Device A组成IRF，来满足当前网络的需求。

·     IRF的上行设备（Router A和Router B）为公司网络的出口路由器；IRF的下行交换机（SW 1、SW 2等）为各个服务器集群的汇聚层设备。

图2 IRF典型配置组网图

设备	接口	IP地址	设备	接口	IP地址
Router A	Vlan-int30	172.24.2.2/24	Router B	Vlan-int30	172.24.2.3/24
	Vlan-int40	172.24.40.2/24		Vlan-int41	172.24.41.3/24
	Vlan-int50	172.24.1.2/24		Vlan-int50	172.24.4.2/24
IRF	Vlan-int10	172.24.10.254/24
	Vlan-int20	172.24.20.254/24
	Vlan-int40	172.24.40.254/24
	Vlan-int41	172.24.41.254/24

 

4.2  配置思路

·     为避免成员设备的单点故障影响到正常的业务转发，可在IRF中配置跨框聚合端口进行业务转发。

·     为尽量降低IRF分裂对业务造成的影响，可在IRF中配置LACP MAD检测。LACP MAD检测只需在一个聚合组中配置即可，其他聚合组中无需配置。LACP MAD检测使用的中间设备必须为H3C的交换机设备且使用的软件版本必须能够识别、处理携带了ActiveID值的LACPDU协议报文，在本例中使用SW 1作为LACP MAD检测的中间设备。

4.3  使用版本

本举例在S6520XG-CMW710-R7724版本上进行配置和验证。

4.4  配置步骤

4.4.1  搭建IRF

1. Device A的配置

(1)     设置Device A的成员编号为1

<DeviceA> system-view

[DeviceA] irf member 1

(2)     根据4.1  图2选定IRF物理端口并关闭这些端口。为便于配置，下文中将使用接口批量配置功能关闭和开启物理端口，关于接口批量配置的介绍，请参见“二层技术-以太网交换配置指导”

[DeviceA] interface range ten-gigabitEthernet 1/0/1 to ten-gigabitEthernet 1/0/2

[DeviceA-if-range] shutdown

[DeviceA-if-range] quit

(3)     创建IRF端口1/1，并将它与物理端口Ten-GigabitEthernet 1/0/1和Ten-GigabitEthernet 1/0/2绑定

[DeviceA] irf-port 1/1

[DeviceA-irf-port2] port group interface ten-gigabitethernet 1/0/1

[DeviceA-irf-port2] port group interface ten-gigabitethernet 1/0/2

[DeviceA-irf-port2] quit

(4)     开启Ten-GigabitEthernet1/0/1～Ten-GigabitEthernet1/0/2端口，并保存配置

[DeviceA] interface range ten-gigabitEthernet 1/0/1 to ten-gigabitEthernet 1/0/2

[DeviceA-if-range] undo shutdown

[DeviceA-if-range] quit

[DeviceA] save

(5)     激活IRF端口下的配置

[DeviceA] irf-port-configuration active

(6)     参照图2和端口连接表连接Device A和Device B之间的IRF端口

2. Device B的配置

(1)     设置Device B的成员编号为2,并重启设备使新编号生效

[DeviceB] irf member 1 renumber 2

Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y

[DeviceB] quit

<DeviceB> reboot

 

(2)     根据4.1  图2选定IRF物理端口并关闭这些端口。为便于配置，下文中将使用接口批量配置功能关闭和开启物理端口，关于接口批量配置的介绍，请参见“二层技术-以太网交换配置指导”

[DeviceB] interface range ten-gigabitEthernet 2/0/1 to ten-gigabitEthernet 2/0/2

[DeviceB-if-range] shutdown

[DeviceB-if-range] quit

(3)     创建IRF端口2/2，并将它与物理端口Ten-GigabitEthernet 2/0/1和Ten-GigabitEthernet 2/0/2绑定

[DeviceB] irf-port 2/2

[DeviceB-irf-port2] port group interface ten-gigabitethernet 2/0/1

[DeviceB-irf-port2] port group interface ten-gigabitethernet 2/0/2

[DeviceB-irf-port2] quit

(4)     开启Ten-GigabitEthernet1/0/1～Ten-GigabitEthernet2/0/2端口，并保存配置

[DeviceB] interface range ten-gigabitEthernet 2/0/1 to ten-gigabitEthernet 2/0/2

[DeviceB-if-range] undo shutdown

[DeviceB-if-range] quit

[DeviceB] save

(5)     激活IRF端口下的配置

[DeviceB] irf-port-configuration active

(6)     参照图2和端口连接表连接Device A和Device B之间的IRF端口

4.4.2  LACP MAD配置

在前面配置完成并重新启动后，IRF已经组建完成，此时可以进行各个业务模块的配置。IRF形成之后，可以从任何一台成员设备登录进行配置，设备名称缺省为Master的名称（此例中为Device A）。

# 创建连接接入层交换机SW 1的动态聚合组，编号为1，并使能LACP MAD检测功能。

<DeviceA> system-view

[DeviceA] interface bridge-aggregation 1

[DeviceA-Bridge-Aggregation1] link-aggregation mode dynamic

[DeviceA-Bridge-Aggregation1] mad enable

You need to assign a domain ID (range: 0-4294967295)

[Current domain is: 0]:

The assigned domain ID is: 0

MAD LACP only enable on dynamic aggregation interface.

[DeviceA-Bridge-Aggregation1] quit

# 配置连接SW 1的端口加入聚合组1。

[DeviceA] interface ten-gigabitethernet 1/0/3

[DeviceA-Ten-GigabitEthernet1/0/3] port link-aggregation group 1

[DeviceA-Ten-GigabitEthernet1/0/3] quit

[DeviceA] interface ten-gigabitethernet 2/0/3

[DeviceA-Ten-GigabitEthernet2/0/3] port link-aggregation group 1

[DeviceA-Ten-GigabitEthernet2/0/3] quit

4.4.3  IRF下行业务配置

1. IRF的配置

# 创建连接接入层交换机SW 2的聚合组，编号为2。

[DeviceA] interface bridge-aggregation 2

[DeviceA-Bridge-Aggregation2] quit

# 配置连接SW 2的端口加入聚合组2。

[DeviceA] interface ten-gigabitethernet 1/0/4

[DeviceA-Ten-GigabitEthernet1/0/4] port link-aggregation group 2

[DeviceA-Ten-GigabitEthernet1/0/4] quit

[DeviceA] interface ten-gigabitethernet 2/0/4

[DeviceA-Ten-GigabitEthernet2/0/4] port link-aggregation group 2

[DeviceA-Ten-GigabitEthernet2/0/4] quit

# 配置与SW 1之间通过Vlan-interface 10连接。

[DeviceA] vlan 10

[DeviceA-vlan10] quit

[DeviceA] interface vlan-interface 10

[DeviceA-Vlan-interface10] ip address 172.24.10.254 24

[DeviceA-Vlan-interface10] quit

[DeviceA] interface bridge-aggregation 1

[DeviceA-Bridge-Aggregation1] port link-type trunk

[DeviceA-Bridge-Aggregation1] undo port trunk permit vlan 1

[DeviceA-Bridge-Aggregation1] port trunk permit vlan 10

[DeviceA-Bridge-Aggregation1] quit

# 配置与SW 2之间通过Vlan-interface 20连接。

[DeviceA] vlan 20

[DeviceA-vlan20] quit

[DeviceA] interface vlan-interface 20

[DeviceA-Vlan-interface20] ip address 172.24.20.254 24

[DeviceA-Vlan-interface20] quit

[DeviceA] interface bridge-aggregation 2

[DeviceA-Bridge-Aggregation2] port link-type trunk

[DeviceA-Bridge-Aggregation2] undo port trunk permit vlan 1

[DeviceA-Bridge-Aggregation2] port trunk permit vlan 20

[DeviceA-Bridge-Aggregation2] quit

2. SW 1的配置

# 创建连接IRF的动态聚合组，编号为1，该聚合组同时用于IRF的LACP MAD检测。

<SW1> system-view

[SW1] interface bridge-aggregation 1

[SW1-Bridge-Aggregation1] link-aggregation mode dynamic

[SW1-Bridge-Aggregation1] quit

# 配置连接IRF的端口加入聚合组1。

[SW1] interface ten-gigabitethernet 4/0/1

[SW1-Ten-GigabitEthernet4/0/1] port link-aggregation group 1

[SW1-Ten-GigabitEthernet4/0/1] quit

[SW1] interface ten-gigabitethernet 4/0/2

[SW1-Ten-GigabitEthernet4/0/2] port link-aggregation group 1

[SW1-Ten-GigabitEthernet4/0/2] quit

# 接入设备SW1上创建所有VLAN。

[SW1] vlan all

# 配置与IRF连接的端口。

[SW1] interface bridge-aggregation 1

[SW1] interface bridge-aggregation 1

[SW1-Bridge-Aggregation1] port link-type trunk

[SW1-Bridge-Aggregation1] undo port trunk permit vlan 1

[SW1-Bridge-Aggregation1] port trunk permit vlan 10

[SW1-Bridge-Aggregation1] quit

# 配置连接服务器的端口GigabitEthernet3/0/1。

[SW1] interface gigabitethernet 3/0/1

[SW1-GigabitEthernet3/0/1] port link-type trunk

[SW1-GigabitEthernet3/0/1] port trunk permit vlan all

[SW1-GigabitEthernet3/0/1] undo port trunk permit vlan 1

[SW1-GigabitEthernet3/0/1] quit

3. SW 2的配置

# 创建连接IRF的聚合组，编号为1。

<SW2> system-view

[SW2] interface bridge-aggregation 1

[SW2-Bridge-Aggregation1] quit

# 配置连接IRF的端口加入聚合组1。

[SW2] interface ten-gigabitethernet 4/0/1

[SW2-Ten-GigabitEthernet4/0/1] port link-aggregation group 1

[SW2-Ten-GigabitEthernet4/0/1] quit

[SW2] interface ten-gigabitethernet 4/0/2

[SW2-Ten-GigabitEthernet4/0/2] port link-aggregation group 1

[SW2-Ten-GigabitEthernet4/0/2] quit

# 接入设备SW 2上创建所有VLAN。

[SW2] vlan all

# 配置与IRF连接的端口。

[SW2] interface bridge-aggregation 1

[SW2-Bridge-Aggregation1] port link-type trunk

[SW2-Bridge-Aggregation1] undo port trunk permit vlan 1

[SW2-Bridge-Aggregation1] port trunk permit vlan 20

[SW2-Bridge-Aggregation1] quit

# 配置连接服务器的端口。

[SW2] interface gigabitethernet 3/0/1

[SW2-GigabitEthernet3/0/1] port link-type trunk

[SW2-GigabitEthernet3/0/1] port trunk permit vlan all

[SW2-GigabitEthernet3/0/1] undo port trunk permit vlan 1

[SW2-GigabitEthernet3/0/1] quit

4.4.4  IRF上行业务配置

1. IRF的配置

# 创建连接出口路由器Router A的聚合组，编号为1023。

[DeviceA] interface bridge-aggregation 1023

[DeviceA-Bridge-Aggregation1023] quit

# 配置连接Router A的端口加入聚合组1023。

[DeviceA] interface ten-gigabitethernet 1/0/7

[DeviceA-Ten-GigabitEthernet1/0/7] port link-aggregation group 1023

[DeviceA-Ten-GigabitEthernet1/0/7] quit

[DeviceA] interface ten-gigabitethernet 2/0/7

[DeviceA-Ten-GigabitEthernet2/0/7] port link-aggregation group 1023

[DeviceA-Ten-GigabitEthernet2/0/7] quit

# 配置与Router A之间通过Vlan-interface40连接。

[DeviceA] vlan 40

[DeviceA-vlan40] quit

[DeviceA] interface vlan-interface 40

[DeviceA-Vlan-interface40] ip address 172.24.40.254 24

[DeviceA-Vlan-interface40] quit

[DeviceA] interface bridge-aggregation 1023

[DeviceA-Bridge-Aggregation1023] port access vlan 40

[DeviceA-Bridge-Aggregation1023] quit

# 创建连接出口路由器Router B的聚合组，编号为1024。

[DeviceA] interface bridge-aggregation 1024

[DeviceA-Bridge-Aggregation1024] quit

# 配置连接Router B的端口加入聚合组1024。

[DeviceA] interface ten-gigabitethernet 1/0/8

[DeviceA-Ten-GigabitEthernet1/0/8] port link-aggregation group 1024

[DeviceA-Ten-GigabitEthernet1/0/8] quit

[DeviceA] interface ten-gigabitethernet 2/0/8

[DeviceA-Ten-GigabitEthernet2/0/8] port link-aggregation group 1024

[DeviceA-Ten-GigabitEthernet2/0/8] quit

# 配置与Router B之间通过Vlan-interface41连接。

[DeviceA] vlan 41

[DeviceA-vlan41] quit

[DeviceA] interface vlan-interface 41

[DeviceA-Vlan-interface41] ip address 172.24.41.254 24

[DeviceA-Vlan-interface41] quit

[DeviceA] interface bridge-aggregation 1024

[DeviceA-Bridge-Aggregation1024] port access vlan 41

[DeviceA-Bridge-Aggregation1024] quit

# 配置IRF与出口路由器之间运行OSPF路由协议。

[DeviceA] ospf

[DeviceA-ospf-1] import-route direct

[DeviceA-ospf-1] area 0

[DeviceA-ospf-1-area-0.0.0.0] network 172.24.40.0 0.0.0.255

[DeviceA-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255

[DeviceA-ospf-1-area-0.0.0.0] quit

[DeviceA-ospf-1] quit

2. Router A的配置

 

# 创建连接IRF的聚合组，编号为1。

<RouterA> system-view

[RouterA] interface bridge-aggregation 1

[RouterA-Bridge-Aggregation1] quit

# 配置连接IRF的端口加入聚合组1。

[RouterA] interface ten-gigabitethernet 4/0/1

[RouterA-Ten-GigabitEthernet4/0/1] port link-mode bridge

[RouterA-Ten-GigabitEthernet4/0/1] port link-aggregation group 1

[RouterA-Ten-GigabitEthernet4/0/1] quit

[RouterA] interface ten-gigabitethernet 2/0/1

[RouterA-Ten-GigabitEthernet2/0/1] port link-mode bridge

[RouterA-Ten-GigabitEthernet2/0/1] port link-aggregation group 1

[RouterA-Ten-GigabitEthernet2/0/1] quit

# 配置与IRF之间通过Vlan-interface 40连接。

[RouterA] vlan 40

[RouterA-vlan40] quit

[RouterA] interface vlan-interface 40

[RouterA-Vlan-interface40] ip address 172.24.40.2 24

[RouterA-Vlan-interface40] quit

[RouterA] interface bridge-aggregation 1

[RouterA-Bridge-Aggregation1] port access vlan 40

[RouterA-Bridge-Aggregation1] quit

# 配置与RouterB之间通过Vlan-interface 30连接。

[RouterA] vlan 30

[RouterA-vlan30] quit

[RouterA] interface vlan-interface 30

[RouterA-Vlan-interface30] ip address 172.24.2.2 24

[RouterA-Vlan-interface30] quit

[RouterA] interface bridge-aggregation 2

[RouterA-Bridge-Aggregation2] port link-type access

[RouterA-Bridge-Aggregation2] port access vlan 30

[RouterA-Bridge-Aggregation2] quit

[RouterA] interface ten-gigabitethernet 4/0/2

[RouterA-Ten-GigabitEthernet4/0/2] port link-mode bridge

[RouterA-Ten-GigabitEthernet4/0/2] port link-aggregation group 2

[RouterA-Ten-GigabitEthernet4/0/2] quit

[RouterA] interface ten-gigabitethernet 2/0/2

[RouterA-Ten-GigabitEthernet2/0/2] port link-mode bridge

[RouterA-Ten-GigabitEthernet2/0/2] port link-aggregation group 2

[RouterA-Ten-GigabitEthernet2/0/2] quit

# 配置Router A通过Vlan-interface 50连接外网。

[RouterA] vlan 50

[RouterA-vlan50] quit

[RouterA] interface vlan-interface 50

[RouterA-Vlan-interface50] ip address 172.24.1.2 24

[RouterA-Vlan-interface50] quit

[RouterA] interface ten-gigabitethernet 4/0/3

[RouterA-Ten-GigabitEthernet4/0/3] port link-mode bridge

[RouterA-Ten-GigabitEthernet4/0/3] port access vlan 50

[RouterA-Ten-GigabitEthernet4/0/3] quit

# 配置Router A与IRF之间运行OSPF路由协议。

[RouterA] ospf

[RouterA-ospf-1] import-route direct

[RouterA-ospf-1] area 0

[RouterA-ospf-1-area-0.0.0.0] network 172.24.40.0 0.0.0.255

[RouterA-ospf-1-area-0.0.0.0] network 172.24.2.0 0.0.0.255

[RouterA-ospf-1-area-0.0.0.0] quit

[RouterA-ospf-1] quit

3. Router B的配置

# 配置与IRF之间通过Vlan-interface 41连接。

<RouterB> system-view

[RouterB] vlan 41

[RouterB-vlan41] quit

[RouterB] interface vlan-interface 41

[RouterB-Vlan-interface41] ip address 172.24.41.3 24

[RouterB-Vlan-interface41] quit

[RouterB] interface bridge-aggregation 1

[RouterB-Bridge-Aggregation1] port access vlan 41

[RouterB-Bridge-Aggregation1] quit

[RouterB] interface bridge-aggregation 1

[RouterB-Bridge-Aggregation1] quit

[RouterB] interface ten-gigabitethernet 4/0/1

[RouterB-Ten-GigabitEthernet4/0/1] port link-mode bridge

[RouterB-Ten-GigabitEthernet4/0/1] port link-aggregation group 1

[RouterB-Ten-GigabitEthernet4/0/1] quit

[RouterB] interface ten-gigabitethernet 2/0/1

[RouterB-Ten-GigabitEthernet2/0/1] port link-mode bridge

[RouterB-Ten-GigabitEthernet2/0/1] port link-aggregation group 1

[RouterB-Ten-GigabitEthernet2/0/1] quit

# 配置与Router A之间通过Vlan-interface 30连接。

[RouterB] vlan 30

[RouterB-vlan30] quit

[RouterB] interface vlan-interface 30

[RouterB-Vlan-interface30] ip address 172.24.2.3 24

[RouterB-Vlan-interface30] quit

[RouterB] interface bridge-aggregation 2

[RouterB-Bridge-Aggregation2] port link-type access

[RouterB-Bridge-Aggregation2] port access vlan 30

[RouterB-Bridge-Aggregation2] quit

[RouterB] interface ten-gigabitethernet 4/0/2

[RouterB-Ten-GigabitEthernet4/0/2] port link-aggregation group 2

[RouterB-Ten-GigabitEthernet4/0/2] quit

[RouterB] interface ten-gigabitethernet 2/0/2

[RouterB-Ten-GigabitEthernet2/0/2] port link-aggregation group 2

[RouterB-Ten-GigabitEthernet2/0/2] quit

# 配置Router B通过Vlan-interface 50连接外网。

[RouterB] vlan 50

[RouterB-vlan50] quit

[RouterB] interface vlan-interface 50

[RouterB-Vlan-interface50] ip address 172.24.4.3 24

[RouterB-Vlan-interface50] quit

[RouterB] interface ten-gigabitethernet 4/0/3

[RouterB-Ten-GigabitEthernet4/0/3] port link-mode bridge

[RouterB-Ten-GigabitEthernet4/0/3] port access vlan 50

[RouterB-Ten-GigabitEthernet4/0/3] quit

# 配置Router B与IRF之间运行OSPF路由协议。

[RouterB] ospf

[RouterB-ospf-1] import-route direct

[RouterB-ospf-1] area 0

[RouterB-ospf-1-area-0.0.0.0] network 172.24.41.0 0.0.0.255

[RouterB-ospf-1-area-0.0.0.0] network 172.24.2.0 0.0.0.255

[RouterB-ospf-1-area-0.0.0.0] quit

[RouterB-ospf-1] quit

4.5  验证配置

(1)     验证IRF建立成功

[DeviceA] display irf

MemberID  Slot  Role    Priority  CPU-Mac         Description

 *+1      0     Master  1         0210-fc01-0000  ---

   2      0     Standby 1         0210-fc02-0000  ---

--------------------------------------------------

 * indicates the device is the master.

 + indicates the device through which the user logs in.

 

 The Bridge MAC of the IRF is: 3822-d60f-2800

 Auto upgrade                : yes

 Mac persistent              : always

 Domain ID                   : 0

 Auto merge                  : yes

从命令行的显示看，当前两台设备IRF成功建立。

(2)     验证跨框聚合有链路备份的作用

从serverGroup 1任意挑选一台PC ping外网IP，关闭IRF的上行端口Ten-GigabitEthernet 1/0/8，出现短暂中断后仍然可以ping通外网。

C:\Users>ping 202.108.22.5 –t

 

正在 Ping 202.108.22.5 具有 32 字节的数据:

来自 202.108.22.5 的回复: 字节=32 时间=1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间=13ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

请求超时。

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

重新开启端口Ten-GigabitEthernet 1/0/8，持续ping，将另外一个上行端口Ten-GigabitEthernet 2/0/8关闭，出现短暂中断后仍然可以ping通外网。

C:\Users>ping 202.108.22.5 –t

 

正在 Ping 202.108.22.5 具有 32 字节的数据:

来自 202.108.22.5 的回复: 字节=32 时间=1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间=13ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

请求超时。

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

来自 202.108.22.5 的回复: 字节=32 时间<1ms TTL=122

(3)     验证IRF物理链路的冗余备份

断开IRF物理链路中的任意一条，IRF仍能正常工作、没有分裂。

4.6  配置文件

·     IRF：

#

irf mac-address persistent always

irf auto-update enable

undo irf link-delay

irf member 1 priority 1

irf member 2 priority 1

#

ospf 1

 import-route direct

 area 0.0.0.0

  network 172.24.40.0 0.0.0.255

  network 172.24.41.0 0.0.0.255

#

vlan 10

#

vlan 20

#

vlan 40

#

vlan 41

#

irf-port 1/1

 port group interface Ten-GigabitEthernet1/0/1 mode enhanced

 port group interface Ten-GigabitEthernet1/0/2 mode enhanced

#

irf-port 2/2

 port group interface Ten-GigabitEthernet2/0/1 mode enhanced

 port group interface Ten-GigabitEthernet2/0/2 mode enhanced

#

interface Bridge-Aggregation1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 link-aggregation mode dynamic

 mad enable

#

interface Bridge-Aggregation2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

#

interface Bridge-Aggregation1023

 port access vlan 40

#

interface Bridge-Aggregation1024

 port access vlan 41

#

interface Vlan-interface10

 ip address 172.24.10.254 255.255.255.0

#

interface Vlan-interface20

 ip address 172.24.20.254 255.255.255.0

#

interface Vlan-interface40

 ip address 172.24.40.254 255.255.255.0

#

interface Ten-GigabitEthernet1/0/3

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet1/0/4

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet1/0/7

 port access vlan 40

 port link-aggregation group 1023

#

interface Ten-GigabitEthernet1/0/8

 port access vlan 41

 port link-aggregation group 1024

#

interface Ten-GigabitEthernet2/0/3

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet2/0/4

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 2

#

interface Ten-GigabitEthernet2/0/7

 port access vlan 40

 port link-aggregation group 1023

#

interface Ten-GigabitEthernet2/0/8

 port access vlan 41

 port link-aggregation group 1024

#

·     SW1：

#

vlan 10

#

interface Bridge-Aggregation1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 link-aggregation mode dynamic

#

interface GigabitEthernet3/0/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 2 to 4094

#

interface Ten-GigabitEthernet4/0/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

interface Ten-GigabitEthernet4/0/2

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 10

 port link-aggregation group 1

#

·     SW2：

#

vlan 20

#

interface Bridge-Aggregation1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

#

interface GigabitEthernet3/0/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 2 to 4094

#

interface Ten-GigabitEthernet4/0/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

interface Ten-GigabitEthernet4/0/2

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

 port link-aggregation group 1

#

·     RouterA：

#

ospf 1

 import-route direct

 area 0.0.0.0

  network 172.24.2.0 0.0.0.255

  network 172.24.40.0 0.0.0.255

#

vlan 30

#

vlan 40

#

vlan 50

#

interface Bridge-Aggregation1

 port access vlan 40

#

interface Bridge-Aggregation2

 port access vlan 30

#

interface Vlan-interface30

 ip address 172.24.2.2 255.255.255.0

#

interface Vlan-interface40

 ip address 172.24.40.2 255.255.255.0

#

interface Vlan-interface50

 ip address 172.24.1.2 255.255.255.0

#

interface Ten-GigabitEthernet2/0/1

 port link-mode bridge

 port access vlan 40

 port link-aggregation group 1

#

interface Ten-GigabitEthernet2/0/2

 port link-mode bridge

 port access vlan 30

 port link-aggregation group 2

#

interface Ten-GigabitEthernet4/0/1

 port link-mode bridge

 port access vlan 40

 port link-aggregation group 1

#

interface Ten-GigabitEthernet4/0/2

 port link-mode bridge

 port access vlan 30

 port link-aggregation group 2

#

interface Ten-GigabitEthernet4/0/3

 port link-mode bridge

 port access vlan 50

#

·     RouterB：

#

ospf 1

 import-route direct

 area 0.0.0.0

  network 172.24.2.0 0.0.0.255

  network 172.24.41.0 0.0.0.255

#

vlan 30

#

vlan 41

#

vlan 50

#

interface Bridge-Aggregation1

 port access vlan 41

#

interface Bridge-Aggregation2

 port access vlan 30

#

interface Vlan-interface30

 ip address 172.24.2.3 255.255.255.0

#

interface Vlan-interface41

 ip address 172.24.41.3 255.255.255.0

#

interface Vlan-interface50

 ip address 172.24.4.3 255.255.255.0

#

interface Ten-GigabitEthernet2/0/1

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet2/0/2

 port link-mode bridge

 port access vlan 30

 port link-aggregation group 2

#

interface Ten-GigabitEthernet4/0/1

 port link-mode bridge

 port access vlan 41

 port link-aggregation group 1

#

interface Ten-GigabitEthernet4/0/2

 port link-mode bridge

 port access vlan 30

 port link-aggregation group 2

#

interface Ten-GigabitEthernet4/0/3

 port link-mode bridge

 port access vlan 50

#

5  相关资料

·     H3C S6520X-EI-G系列交换机 IRF配置指导-R7724

·     H3C S6520X-EI-G系列交换机 IRF命令参考-R7724