溫馨提示×

溫馨提示×

您好,登錄后才能下訂單哦!

密碼登錄×
登錄注冊×
其他方式登錄
點擊 登錄注冊 即表示同意《億速云用戶服務(wù)條款》

IRF簡書以及使用H3C模擬器HCL完成基礎(chǔ)的IRF實施

發(fā)布時間:2020-05-31 16:56:17 來源:網(wǎng)絡(luò) 閱讀:3401 作者:EnderJoe 欄目:網(wǎng)絡(luò)安全

第1部分 IRF簡書

1.什么是IRF

IRF簡書以及使用H3C模擬器HCL完成基礎(chǔ)的IRF實施
硬件虛擬化IRF(智能彈性框架)帶來的優(yōu)勢:組網(wǎng)簡化:如下圖所示,傳統(tǒng)的3層架構(gòu),核心交換機之間使用了以太捆綁,和接入層交換機運行STP,此時導(dǎo)致接入交換機之間只有部分處于轉(zhuǎn)發(fā)狀態(tài)(可以通過MSTP調(diào)整優(yōu)化不同VLAN間的數(shù)據(jù)轉(zhuǎn)發(fā))。在實施IRF之后2臺核心交換之間實施硬件虛擬化,被視為一臺設(shè)備。這大大的簡化了網(wǎng)絡(luò)的復(fù)雜性。匯聚層的多個設(shè)備成為了一個單一的邏輯設(shè)備,接入設(shè)備直接連接到這個虛擬設(shè)備。這種簡化后的組網(wǎng)不再需要使用MSTP、VRRP協(xié)議,簡化了網(wǎng)絡(luò)配置。同時依靠跨設(shè)備的鏈路聚合(需要特定設(shè)備支持),在成員出現(xiàn)故障時不再依賴MSTP、VRRP等協(xié)議的收斂,提高了可靠性
IRF簡書以及使用H3C模擬器HCL完成基礎(chǔ)的IRF實施

2.IRF的成員組成和接口類型

IRF堆疊中的成員設(shè)備分為Master和Slave設(shè)備
成員設(shè)備上用于堆疊連接的物理接口稱之為物理堆疊口
物理堆疊口需要和邏輯堆疊口綁定,邏輯堆疊口簡稱為堆疊口
由多個物理堆疊口聚合的堆疊口成為聚合堆疊口

3. IRF拓?fù)浜屯負(fù)浒l(fā)現(xiàn)

IRF簡書以及使用H3C模擬器HCL完成基礎(chǔ)的IRF實施
IRF堆疊物理拓?fù)洌烘溞瓮負(fù)浜铜h(huán)形拓?fù)?br/>IRF簡書以及使用H3C模擬器HCL完成基礎(chǔ)的IRF實施
堆疊設(shè)備通過和直連的其他成員交互IRF Hello來收集整個堆疊的拓?fù)湫畔?br/>拓?fù)涫占戤呥M入角色選舉過程

第2部分 IRF實施案例

2.1實施拓?fù)洌?/h3>

IRF簡書以及使用H3C模擬器HCL完成基礎(chǔ)的IRF實施
步驟1. 確定IRF設(shè)備角色,配置設(shè)備的IRF優(yōu)先級和編號

[IRF2]irf member 1 renumber 2 //將IRF2(即SW2)的成員編號設(shè)置為2,默認(rèn)為1
Renumbering the member ID may result in configuration change or loss. Continue?[Y/N]:y //對成員1中的背板重編號必須可能導(dǎo)致配置改變或者丟棄,是否繼續(xù)?是
[IRF2]save //切記保存配置
The current configuration will be written to the device. Are you sure? [Y/N]:y //確定保存
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key): //使用默認(rèn)的配置名稱,即start.cfg
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[IRF2]quit
<IRF2>reboot //必須重啟設(shè)備
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y //該命令將重啟設(shè)備,繼續(xù)么?確認(rèn)繼續(xù)
Now rebooting, please wait...
%Nov 25 22:02:11:207 2018 IRF2 DEV/5/SYSTEM_REBOOT: System is rebooting now.
!
!
[H3C]sysname IRF1
[IRF1]irf member 1 priority 32 //設(shè)置IRF1(SW1)的IRF優(yōu)先級為32,該值已經(jīng)最大,保證IRF1設(shè)備成為主設(shè)備(IRF2并未修改優(yōu)先級,意味著它使用默認(rèn)的優(yōu)先級1)
[IRF1]int r te 1/0/50 to t 1/0/51
[IRF1-if-range]shu //把交換機互聯(lián)接口關(guān)閉,這是必須的一部
[IRF1-if-range]quit
[IRF1]irf-port 1/2 //設(shè)置IRF1的邏輯接口2
[IRF1-irf-port1/2]port g int te 1/0/50 //把物理接口加入邏輯接口
You must perform the following tasks for a successful IRF setup:
Save the configuration after completing IRF configuration.
Execute the "irf-port-configuration active" command to activate the IRF ports.
[IRF1-irf-port1/2]port g int te 1/0/51 //把物理接口加入邏輯接口
[IRF1-irf-port1/2]quit
[IRF1]int r te 1/0/50 to t 1/0/51
[IRF1-if-range]un sh //開啟物理接口

步驟2. Slave設(shè)備加入物理成員接口

[IRF2]int r t 2/0/50 to t 2/0/51 //進入物理接口,注意之前已經(jīng)“renember”了該設(shè)備的板卡號碼,所以接口為10G接口的2/0/50和51接口
[IRF2-if-range]shu //IRF2設(shè)備重啟后關(guān)閉物理接口
[IRF2-if-range]quit
[IRF2]irf-port 2/1 //注意,特別推薦使用交叉互聯(lián),請對比IRF1設(shè)備,否則可能造成堆疊失敗
[IRF2-irf-port2/1]port g int t 2/0/50 //把物理接口加入邏輯接口
You must perform the following tasks for a successful IRF setup:
Save the configuration after completing IRF configuration.
Execute the "irf-port-configuration active" command to activate the IRF ports.
[IRF2-irf-port2/1]port g int t 2/0/51 //把物理接口加入邏輯接口
[IRF2-irf-port2/1]quit
[IRF2]int r t 2/0/50 to t 2/0/51
[IRF2-if-range]un shu //開啟物理接口
%Nov 25 22:06:39:426 2018 IRF2 IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet2/0/50 changed to up.
%Nov 25 22:06:39:474 2018 IRF2 IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet2/0/50 changed to up.
%Nov 25 22:06:39:495 2018 IRF2 LLDP/6/LLDP_CREATE_NEIGHBOR: Nearest bridge agent neighbor created on port Ten-GigabitEthernet2/0/50 (IfIndex 179), neighbor's chassis ID is 90c6-26d7-0100, port ID is Ten-GigabitEthernet1/0/50.

%Nov 25 22:06:39:648 2018 IRF2 IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet2/0/51 changed to up.
[IRF2-if-range]%Nov 25 22:06:39:659 2018 IRF2 IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet2/0/51 changed to up.
%Nov 25 22:06:39:663 2018 IRF2 LLDP/6/LLDP_CREATE_NEIGHBOR: Nearest bridge agent neighbor created on port Ten-GigabitEthernet2/0/51 (IfIndex 180), neighbor's chassis ID is 90c6-26d7-0100, port ID is Ten-GigabitEthernet1/0/51.

[IRF2]save //保存配置
The current configuration will be written to the device. Are you sure? [Y/N]:y //確定保存配置
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
flash:/startup.cfg exists, overwrite? [Y/N]:y //確定覆蓋已經(jīng)存在的配置
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.

<IRF1>save //保存配置
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.

<IRF1>
此時2臺設(shè)備的IRF已經(jīng)配置完畢,但不激活I(lǐng)RF之前,IRF并不工作

步驟3.激活I(lǐng)RF配置

[IRF1]irf-port-configuration active //請在激活I(lǐng)RF配置前確保已經(jīng)保存配置
[IRF1]%Nov 25 22:08:28:132 2018 IRF1 STM/6/STM_LINK_UP: IRF port 2 came up.
%Nov 25 22:08:45:321 2018 IRF1 STM/4/STM_MERGE: IRF merge occurred.
%Nov 25 22:08:47:660 2018 IRF1 IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/51 changed to down.
%Nov 25 22:08:47:668 2018 IRF1 IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/51 changed to down.
%Nov 25 22:08:49:594 2018 IRF1 STM/3/STM_LINK_DOWN: IRF port 2 went down.
%Nov 25 22:08:49:606 2018 IRF1 IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/50 changed to down.
%Nov 25 22:08:49:612 2018 IRF1 IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/50 changed to down.

[IRF1]

[IRF2]%Nov 25 22:08:46:254 2018 IRF2 STM/6/STM_LINK_UP: IRF port 1 came up.//已經(jīng)重啟
<IRF2>system-view //在IRF設(shè)備重啟后,暫時不會完成立即IRF,此時依舊顯示“IRF2”
System View: return to User View with Ctrl+Z.
[IRF2]int r t 2/0/50 to t 2/0/51
[IRF2-if-range]shu
[IRF2-if-range]und shu //重新關(guān)閉關(guān)閉,開啟物理接口。此時可能已經(jīng)重啟 

啟動后,如果成功那么IRF2會變成IRF1
步驟4,IRF實施完畢后的驗證

[IRF1]display irf
MemberID    Role    Priority  CPU-Mac         Description
 *+1        Master  32        90c6-26d7-0104  ---
   2        Standby 1         90c6-2ea5-0204  ---
--------------------------------------------------
 * indicates the device is the master.
 + indicates the device through which the user logs in.

 The bridge MAC of the IRF is: 90c6-26d7-0100
 Auto upgrade                : yes
 Mac persistent              : 6 min
 Domain ID                   : 0

[IRF1]dis irf link
Member 1
 IRF Port  Interface                             Status
 1         disable                               --
 2         Ten-GigabitEthernet1/0/50             UP
           Ten-GigabitEthernet1/0/51             UP
Member 2
 IRF Port  Interface                             Status
 1         Ten-GigabitEthernet2/0/50             UP
           Ten-GigabitEthernet2/0/51             DOWN
 2         disable                               --

[IRF1]dis irf topology
                              Topology Info
 -------------------------------------------------------------------------
               IRF-Port1                IRF-Port2
 MemberID    Link       neighbor      Link       neighbor    Belong To
 1           DIS        ---           UP         2           90c6-26d7-0104
 2           UP         1             DIS        ---         90c6-26d7-0104
[IRF1]dis irf conf
 MemberID NewID    IRF-Port1                     IRF-Port2
 1        1        disable                       Ten-GigabitEthernet1/0/50
                                                 Ten-GigabitEthernet1/0/51
 2        2        Ten-GigabitEthernet2/0/50     disable
                   Ten-GigabitEthernet2/0/51

IRF簡書以及使用H3C模擬器HCL完成基礎(chǔ)的IRF實施

chassis convert mode irf //切換到IRF工作模式(模擬器不支持)
其他廠商還支持VSS、CSS等類似技術(shù),敬請期待乾頤堂安德培訓(xùn)和課程(QCNA、QCIE)

向AI問一下細(xì)節(jié)

免責(zé)聲明:本站發(fā)布的內(nèi)容(圖片、視頻和文字)以原創(chuàng)、轉(zhuǎn)載和分享為主,文章觀點不代表本網(wǎng)站立場,如果涉及侵權(quán)請聯(lián)系站長郵箱:is@yisu.com進行舉報,并提供相關(guān)證據(jù),一經(jīng)查實,將立刻刪除涉嫌侵權(quán)內(nèi)容。

AI