堆叠实验-典型配置H3C IRF

0.软件安装包

叶焕新:网络工程师软件安装包合集​

网络工程师软件安装包合集 - 知乎22-02-09 更新了华三模拟器HCL21-12-09 更新了eve-ng安装包和安装视频、更新学习视频内容、更新ENSP不被和谐0.华三模拟器0.1.H3C HCL链接: https://pan.baidu.com/s/1C7_soM1aCbt8GSQlv8mNfw 提取码: iwge 1.华为…https://zhuanlan.zhihu.com/p/442906734

理论内容请回顾之前内容

虚拟化堆叠技术-典型配置H3C IRF - 知乎icon-default.png?t=M276https://zhuanlan.zhihu.com/p/465254812

1.需求

1) 配置两台物理设备为一台逻辑设备虚拟化-堆叠

2) 将线路进行端口捆绑

3) 测试网络端口故障的切换效果

4) 测试设备故障时的切换效果

2.实验拓扑

堆叠实验-典型配置H3C IRF_第1张图片

3.IRF配置命令

3.1.主设备配置命令

1) 设备命名

[H3C]sysname SW1

2) 先关闭堆叠的接口

[SW1]int Ten-GigabitEthernet 1/0/52

[SW1-Ten-GigabitEthernet1/0/52]shutdown

3) 配置设备的优先级

[SW1]irf member 1 priority 2

注:优先级默认为1,越大越优,优先为主设备。

4) 关联堆叠接口

[SW1]irf-port 1/1

[SW1]port group interface ten-gigabitethernet 1/0/52

5) 启用堆叠的接口

[SW1]int Ten-GigabitEthernet 1/0/52

[SW1-Ten-GigabitEthernet1/0/52]undo shutdown

6) 激活irf配置

[SW1] irf-port-configuration active

3.2.从设备配置命令

1) 设备命名

[H3C]sysname SW2

2) 先关闭堆叠的接口

[SW2]int Ten-GigabitEthernet 1/0/52

[SW2-Ten-GigabitEthernet1/0/52]shutdown

3) 关联堆叠接口

[SW2]irf-port 1/2

[SW2]port group interface ten-gigabitethernet 1/0/52

4) 启用堆叠的接口

[SW2]int Ten-GigabitEthernet 1/0/52

[SW2-Ten-GigabitEthernet1/0/52]undo shutdown

5) 激活irf配置

[SW2] irf-port-configuration active

4.其他配置命令

4.1.端口捆绑配置命令

堆叠设备上配置捆绑

[SW1]int Bridge-Aggregation 2

[SW1]int ran ten 1/0/50 ten 2/0/51

[SW1-if-range]port link-aggregation group 2

[SW1]int Bridge-Aggregation 2

[SW1-Bridge-Aggregation2]port link-type trunk

[SW1-Bridge-Aggregation2]port trunk permit vlan all

其他设备配置捆绑

[S5820] int Bridge-Aggregation 2

[S5820]int ran ten 1/0/50 ten 1/0/51

[S5820-if-range]port link-aggregation group 2

[S5820]int Bridge-Aggregation 2

[S5820-Bridge-Aggregation2]port link-type trunk

[S5820-Bridge-Aggregation2]port trunk permit vlan all

4.2.配置svi地址

堆叠设备上配置SVI

vlan 10

int vlan 10

ip add 10.1.1.1 24

其他设备上配置SVI

vlan 10

int vlan 10

ip add 10.1.1.2 24

5.验证

5.1.设备状态

[SW1]dis irf

MemberID Role Priority CPU-Mac Description

*+1 Master 2 361b-d50e-0104 ---

2 Standby 1 361b-dc16-0204 ---

--------------------------------------------------

* indicates the device is the master.

+ indicates the device through which the user logs in.

The bridge MAC of the IRF is: 361b-d50e-0100

Auto upgrade : yes

Mac persistent : 6 min

Domain ID : 0

5.2.切换测试

S5820上发起ping堆叠设备

ping -c 100000 10.1.1.1

Ping 10.1.1.1 (10.1.1.1): 56 data bytes, press CTRL_C to break

56 bytes from 10.1.1.1: icmp_seq=0 ttl=255 time=1.000 ms

56 bytes from 10.1.1.1: icmp_seq=1 ttl=255 time=1.000 ms

5.3.端口断线测试

关闭堆叠设备的1/0/50接口

58 packet(s) transmitted, 58 packet(s) received, 0.0% packet loss

round-trip min/avg/max/std-dev = 0.000/0.638/1.000/0.481 ms

没有发现丢包

启用堆叠设备的1/0/50接口

58 packet(s) transmitted, 58 packet(s) received, 0.0% packet loss

round-trip min/avg/max/std-dev = 0.000/0.845/2.000/0.407 ms

关闭堆叠设备的2/0/51接口

56 packet(s) transmitted, 56 packet(s) received, 0.0% packet loss

round-trip min/avg/max/std-dev = 0.000/0.857/2.000/0.479 ms

没有发现丢包

启用堆叠设备的2/0/51接口

28 packet(s) transmitted, 28 packet(s) received, 0.0% packet loss

round-trip min/avg/max/std-dev = 0.000/0.679/2.000/0.538 ms

没有发现丢包

5.4.设备关机测试

关闭堆叠主用设备

119 packet(s) transmitted, 116 packet(s) received, 2.5% packet loss

round-trip min/avg/max/std-dev = 0.000/0.828/2.000/0.530 ms

发现丢包3个

dis irf

MemberID Role Priority CPU-Mac Description

*+2 Master 1 361b-dc16-0204 ---

--------------------------------------------------

* indicates the device is the master.

+ indicates the device through which the user logs in.

The bridge MAC of the IRF is: 361b-d50e-0100

Auto upgrade : yes

Mac persistent : 6 min

Domain ID : 0

启动堆叠主用设备

536 packet(s) transmitted, 536 packet(s) received, 0.0% packet loss

round-trip min/avg/max/std-dev = 0.000/0.746/4.000/0.552 ms

没有发现丢包

dis irf

MemberID Role Priority CPU-Mac Description

1 Standby 2 361b-d50e-0104 ---

*+2 Master 1 361b-dc16-0204 ---

--------------------------------------------------

* indicates the device is the master.

+ indicates the device through which the user logs in.

The bridge MAC of the IRF is: 361b-d50e-0100

Auto upgrade : yes

Mac persistent : 6 min

Domain ID : 0

54 packet(s) transmitted, 54 packet(s) received, 0.0% packet loss, round-trip min/avg/max/std-dev = 0.000/1.037/11.000/1.621 ms

6.总结

整体经典配置得到预期的效果,两台物理设备虚拟化为一台逻辑设备,统一化管理,并具有逻辑设备进行链路聚合功能,在极端情况下物理设备中断,恢复丢包可控制在5个以内,具有良好的风险控制。

但堆叠具有同厂家同型号才能进行,具有排外性,而且技术上是厂家私有的黑盒子,凡事有利有弊。

你可能感兴趣的:(网络安全,网络,网络协议)