温馨提示×

温馨提示×

您好,登录后才能下订单哦!

密码登录×
登录注册×
其他方式登录
点击 登录注册 即表示同意《亿速云用户服务条款》

IRF简书以及使用H3C模拟器HCL完成基础的IRF实施

发布时间:2020-05-31 16:56:17 来源:网络 阅读:3344 作者:EnderJoe 栏目:网络安全

第1部分 IRF简书

1.什么是IRF

IRF简书以及使用H3C模拟器HCL完成基础的IRF实施
硬件虚拟化IRF(智能弹性框架)带来的优势:组网简化:如下图所示,传统的3层架构,核心交换机之间使用了以太捆绑,和接入层交换机运行STP,此时导致接入交换机之间只有部分处于转发状态(可以通过MSTP调整优化不同VLAN间的数据转发)。在实施IRF之后2台核心交换之间实施硬件虚拟化,被视为一台设备。这大大的简化了网络的复杂性。汇聚层的多个设备成为了一个单一的逻辑设备,接入设备直接连接到这个虚拟设备。这种简化后的组网不再需要使用MSTP、VRRP协议,简化了网络配置。同时依靠跨设备的链路聚合(需要特定设备支持),在成员出现故障时不再依赖MSTP、VRRP等协议的收敛,提高了可靠性
IRF简书以及使用H3C模拟器HCL完成基础的IRF实施

2.IRF的成员组成和接口类型

IRF堆叠中的成员设备分为Master和Slave设备
成员设备上用于堆叠连接的物理接口称之为物理堆叠口
物理堆叠口需要和逻辑堆叠口绑定,逻辑堆叠口简称为堆叠口
由多个物理堆叠口聚合的堆叠口成为聚合堆叠口

3. IRF拓扑和拓扑发现

IRF简书以及使用H3C模拟器HCL完成基础的IRF实施
IRF堆叠物理拓扑:链形拓扑和环形拓扑
IRF简书以及使用H3C模拟器HCL完成基础的IRF实施
堆叠设备通过和直连的其他成员交互IRF Hello来收集整个堆叠的拓扑信息
拓扑收集完毕进入角色选举过程

第2部分 IRF实施案例

2.1实施拓扑:

IRF简书以及使用H3C模拟器HCL完成基础的IRF实施
步骤1. 确定IRF设备角色,配置设备的IRF优先级和编号

[IRF2]irf member 1 renumber 2 //将IRF2(即SW2)的成员编号设置为2,默认为1
Renumbering the member ID may result in configuration change or loss. Continue?[Y/N]:y //对成员1中的背板重编号必须可能导致配置改变或者丢弃,是否继续?是
[IRF2]save //切记保存配置
The current configuration will be written to the device. Are you sure? [Y/N]:y //确定保存
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key): //使用默认的配置名称,即start.cfg
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[IRF2]quit
<IRF2>reboot //必须重启设备
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y //该命令将重启设备,继续么?确认继续
Now rebooting, please wait...
%Nov 25 22:02:11:207 2018 IRF2 DEV/5/SYSTEM_REBOOT: System is rebooting now.
!
!
[H3C]sysname IRF1
[IRF1]irf member 1 priority 32 //设置IRF1(SW1)的IRF优先级为32,该值已经最大,保证IRF1设备成为主设备(IRF2并未修改优先级,意味着它使用默认的优先级1)
[IRF1]int r te 1/0/50 to t 1/0/51
[IRF1-if-range]shu //把交换机互联接口关闭,这是必须的一部
[IRF1-if-range]quit
[IRF1]irf-port 1/2 //设置IRF1的逻辑接口2
[IRF1-irf-port1/2]port g int te 1/0/50 //把物理接口加入逻辑接口
You must perform the following tasks for a successful IRF setup:
Save the configuration after completing IRF configuration.
Execute the "irf-port-configuration active" command to activate the IRF ports.
[IRF1-irf-port1/2]port g int te 1/0/51 //把物理接口加入逻辑接口
[IRF1-irf-port1/2]quit
[IRF1]int r te 1/0/50 to t 1/0/51
[IRF1-if-range]un sh //开启物理接口

步骤2. Slave设备加入物理成员接口

[IRF2]int r t 2/0/50 to t 2/0/51 //进入物理接口,注意之前已经“renember”了该设备的板卡号码,所以接口为10G接口的2/0/50和51接口
[IRF2-if-range]shu //IRF2设备重启后关闭物理接口
[IRF2-if-range]quit
[IRF2]irf-port 2/1 //注意,特别推荐使用交叉互联,请对比IRF1设备,否则可能造成堆叠失败
[IRF2-irf-port2/1]port g int t 2/0/50 //把物理接口加入逻辑接口
You must perform the following tasks for a successful IRF setup:
Save the configuration after completing IRF configuration.
Execute the "irf-port-configuration active" command to activate the IRF ports.
[IRF2-irf-port2/1]port g int t 2/0/51 //把物理接口加入逻辑接口
[IRF2-irf-port2/1]quit
[IRF2]int r t 2/0/50 to t 2/0/51
[IRF2-if-range]un shu //开启物理接口
%Nov 25 22:06:39:426 2018 IRF2 IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet2/0/50 changed to up.
%Nov 25 22:06:39:474 2018 IRF2 IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet2/0/50 changed to up.
%Nov 25 22:06:39:495 2018 IRF2 LLDP/6/LLDP_CREATE_NEIGHBOR: Nearest bridge agent neighbor created on port Ten-GigabitEthernet2/0/50 (IfIndex 179), neighbor's chassis ID is 90c6-26d7-0100, port ID is Ten-GigabitEthernet1/0/50.

%Nov 25 22:06:39:648 2018 IRF2 IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet2/0/51 changed to up.
[IRF2-if-range]%Nov 25 22:06:39:659 2018 IRF2 IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet2/0/51 changed to up.
%Nov 25 22:06:39:663 2018 IRF2 LLDP/6/LLDP_CREATE_NEIGHBOR: Nearest bridge agent neighbor created on port Ten-GigabitEthernet2/0/51 (IfIndex 180), neighbor's chassis ID is 90c6-26d7-0100, port ID is Ten-GigabitEthernet1/0/51.

[IRF2]save //保存配置
The current configuration will be written to the device. Are you sure? [Y/N]:y //确定保存配置
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
flash:/startup.cfg exists, overwrite? [Y/N]:y //确定覆盖已经存在的配置
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.

<IRF1>save //保存配置
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.

<IRF1>
此时2台设备的IRF已经配置完毕,但不激活IRF之前,IRF并不工作

步骤3.激活IRF配置

[IRF1]irf-port-configuration active //请在激活IRF配置前确保已经保存配置
[IRF1]%Nov 25 22:08:28:132 2018 IRF1 STM/6/STM_LINK_UP: IRF port 2 came up.
%Nov 25 22:08:45:321 2018 IRF1 STM/4/STM_MERGE: IRF merge occurred.
%Nov 25 22:08:47:660 2018 IRF1 IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/51 changed to down.
%Nov 25 22:08:47:668 2018 IRF1 IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/51 changed to down.
%Nov 25 22:08:49:594 2018 IRF1 STM/3/STM_LINK_DOWN: IRF port 2 went down.
%Nov 25 22:08:49:606 2018 IRF1 IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/50 changed to down.
%Nov 25 22:08:49:612 2018 IRF1 IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/50 changed to down.

[IRF1]

[IRF2]%Nov 25 22:08:46:254 2018 IRF2 STM/6/STM_LINK_UP: IRF port 1 came up.//已经重启
<IRF2>system-view //在IRF设备重启后,暂时不会完成立即IRF,此时依旧显示“IRF2”
System View: return to User View with Ctrl+Z.
[IRF2]int r t 2/0/50 to t 2/0/51
[IRF2-if-range]shu
[IRF2-if-range]und shu //重新关闭关闭,开启物理接口。此时可能已经重启 

启动后,如果成功那么IRF2会变成IRF1
步骤4,IRF实施完毕后的验证

[IRF1]display irf
MemberID    Role    Priority  CPU-Mac         Description
 *+1        Master  32        90c6-26d7-0104  ---
   2        Standby 1         90c6-2ea5-0204  ---
--------------------------------------------------
 * indicates the device is the master.
 + indicates the device through which the user logs in.

 The bridge MAC of the IRF is: 90c6-26d7-0100
 Auto upgrade                : yes
 Mac persistent              : 6 min
 Domain ID                   : 0

[IRF1]dis irf link
Member 1
 IRF Port  Interface                             Status
 1         disable                               --
 2         Ten-GigabitEthernet1/0/50             UP
           Ten-GigabitEthernet1/0/51             UP
Member 2
 IRF Port  Interface                             Status
 1         Ten-GigabitEthernet2/0/50             UP
           Ten-GigabitEthernet2/0/51             DOWN
 2         disable                               --

[IRF1]dis irf topology
                              Topology Info
 -------------------------------------------------------------------------
               IRF-Port1                IRF-Port2
 MemberID    Link       neighbor      Link       neighbor    Belong To
 1           DIS        ---           UP         2           90c6-26d7-0104
 2           UP         1             DIS        ---         90c6-26d7-0104
[IRF1]dis irf conf
 MemberID NewID    IRF-Port1                     IRF-Port2
 1        1        disable                       Ten-GigabitEthernet1/0/50
                                                 Ten-GigabitEthernet1/0/51
 2        2        Ten-GigabitEthernet2/0/50     disable
                   Ten-GigabitEthernet2/0/51

IRF简书以及使用H3C模拟器HCL完成基础的IRF实施

chassis convert mode irf //切换到IRF工作模式(模拟器不支持)
其他厂商还支持VSS、CSS等类似技术,敬请期待乾颐堂安德培训和课程(QCNA、QCIE)

向AI问一下细节

免责声明:本站发布的内容(图片、视频和文字)以原创、转载和分享为主,文章观点不代表本网站立场,如果涉及侵权请联系站长邮箱:is@yisu.com进行举报,并提供相关证据,一经查实,将立刻删除涉嫌侵权内容。

AI