H3C設備——IRF2應用

IRF2應用

一、IRF 2.0概述

1、IRF(智能彈性架構）

它的核心思想是將多臺設備通過IRF物理端口連接在—起進行必要的配置後，虛擬化成 —臺分佈式設備。使用這種虛擬化技術可以集合多臺設備的硬件資源和軟件處理能力實現多臺設備的協同工作統—管理和不間斷維護。

2、IRF的基本概念

1、角色
IRF中每臺設備都稱爲成員設備 ，成員設備按照功能不同分爲兩種角色。
Master負責管理整個IRF。
Slave作爲Master的備份設備運行。當Master故障時系統會自動從Slave中選舉一個新的Master接替原Master工作。
Master和Slave均由成員設備選舉產生。—個IRF中同時只能存在—臺Master，其他成員設備都是Slave。
2、IRF端口
— 種專用於IRF的邏輯接口，分爲IRF-Port1和IRF-Port2, 需要和IRF物理端口綁定之後才能生效。
3、IRF 物理端口
設備上可以用於IRF連接的物理端口。 IRF物理端口可能是IRF專用接口以太網接口或者光口。

二、IRF配置思路和步驟

1、配置設備編號

[sw2]irf member 1 renumber 2     //更改設備編號爲2
Renumbering the member ID may result in configuration change or loss. Continue?[Y/N]:y
[sw2]save     //保存
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[sw2]reboot     //重啓設備以啓動設置

2、修改IRF優先級爲5

[sw1]irf member 1 priority 5     //讓其在競選Master時獲勝

3、創建IRF端口，並綁定

[sw1]int Ten-GigabitEthernet 1/0/49
[sw1-Ten-GigabitEthernet1/0/49]shutdown
[sw1-Ten-GigabitEthernet1/0/49]quit
[sw1]irf-port 1/2     //創建設備的IRF端口1
[sw1-irf-port1/2]port group interface Ten-GigabitEthernet 1/0/49     //與物理端口Ten-GigabitEthernet 1/0/49綁定
You must perform the following tasks for a successful IRF setup:
Save the configuration after completing IRF configuration.
Execute the "irf-port-configuration active" command to activate the IRF ports.
[sw1-irf-port1/2]quit
[sw1]int Ten-GigabitEthernet 1/0/49
[sw1-Ten-GigabitEthernet1/0/49]un sh
[sw1-Ten-GigabitEthernet1/0/49]quit
[sw1]save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
flash:/startup.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.

[sw2]int Ten-GigabitEthernet 2/0/49     
[sw2-Ten-GigabitEthernet2/0/49]shutdown
[sw2-Ten-GigabitEthernet2/0/49]quit
[sw2]irf-port 2/1    //創建設備的IRF端口2
[sw2-irf-port2/1]port group interface Ten-GigabitEthernet 2/0/49    //與物理端口Ten-GigabitEthernet 2/0/49綁定
You must perform the following tasks for a successful IRF setup:
Save the configuration after completing IRF configuration.
Execute the "irf-port-configuration active" command to activate the IRF ports.
[sw2-irf-port2/1]quit
[sw2]int Ten-GigabitEthernet 2/0/49
[sw2-Ten-GigabitEthernet2/0/49]un sh
[sw2-Ten-GigabitEthernet2/0/49]quit
[sw2]save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
flash:/startup.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.

4、激活IRF端口配置

[sw1]irf-port-configuration active

[sw2]irf-port-configuration active

三、配置LACP MAD檢測

1、創建兩個動態聚合端口，並配置trunk

[sw1]interface Bridge-Aggregation 2
[sw1-Bridge-Aggregation2]port link trunk
[sw1-Bridge-Aggregation2]port trunk permit vlan all
[sw1-Bridge-Aggregation2]link-aggregation mode dynamic
[sw1-Bridge-Aggregation2]mad enable
You need to assign a domain ID (range: 0-4294967295)
[Current domain is: 0]:
The assigned domain ID is: 0
MAD LACP only enable on dynamic aggregation interface.
[sw1-Bridge-Aggregation2]quit

[sw1]int Bridge-Aggregation 3
[sw1-Bridge-Aggregation3]port link trunk
[sw1-Bridge-Aggregation3]port trunk permit vlan all
[sw1-Bridge-Aggregation3]link-aggregation mode dynamic
[sw1-Bridge-Aggregation3]mad enable
You need to assign a domain ID (range: 0-4294967295)
[Current domain is: 0]:
The assigned domain ID is: 0
MAD LACP only enable on dynamic aggregation interface.
[sw1-Bridge-Aggregation3]quit

2、創建相應的聚合端口組，並配置trunk

[SW3]interface Bridge-Aggregation 2
[SW3-Bridge-Aggregation2]port link trunk
[SW3-Bridge-Aggregation2]port trunk permit vlan all
[SW3-Bridge-Aggregation2]link-aggregation mode dynamic
[SW3-Bridge-Aggregation2]quit

3、在聚合接口上添加成員，並配置trunk

[sw1]interface GigabitEthernet 1/0/1
[sw1-GigabitEthernet1/0/1]port link-type trunk
[sw1-GigabitEthernet1/0/1]port trunk permit vlan all
[sw1-GigabitEthernet1/0/1]port link-aggregation group 2    //加入2組（要相應的組號）
[sw1-GigabitEthernet1/0/1]quit

四、查看IRF和MAD配置的顯示和維護信息

1、查看設備的IRF配置信息

[sw1]display irf
MemberID    Role    Priority  CPU-Mac         Description
 *+1        Master  5         2c63-c480-0304  ---
   2        Standby 1         2c63-c8c5-0404  ---
--------------------------------------------------
 * indicates the device is the master.
 + indicates the device through which the user logs in.

 The bridge MAC of the IRF is: 2c63-c480-0300
 Auto upgrade                : yes
 Mac persistent              : 6 min
 Domain ID                   : 0

字段	描述
Switch	本IRF中成員設備的編號（如果編號前帶"*"，表示該設備是Master設備；如果編號前帶"+"，表示該設備是用戶當前登錄的、正在操作的設備）
Role	本IRF中成員設備的角色，取值可能如下：Slave: 備用設備；Master: 主用設備；Slave Wait: 正在加入IRF；Loading: 正在自動加載系統啓動文件
Priority	成員設備的優先級
CPU-MAC	設備的CPUMAC地址
Description	設備的描述信息（沒有描述信息時，Description字段顯示爲"-----,。如果描述信息較多，無法在終端上完整顯示，則以“…”結尾，省略後面的信息
Bridge MAC of the IRF is	RF的橋MAC地址
Auto upgrade	是否使能自動加載系統啓動文件功能
MAC persistent	是否使能IRF橋MAC保留功能(6min表示IRF的橋MAC地址保留時間爲6 min, always表示IRF的橋MAC地址永久保留不改變，no表示立即改變IRF的橋MAC地址
Domain ID	RF的域編號（當網絡中存在多個IRF時， 用來唯 一 標識 一 個IRF

2、查看IRF的端口信息

[sw1]display irf configuration
 MemberID NewID    IRF-Port1                     IRF-Port2
 1        1        disable                       Ten-GigabitEthernet1/0/49
 2        2        Ten-GigabitEthernet2/0/49     disable

字段	描述
MemberID	成員編號
NewID	設備重啓後將會使用的成員編號
IRF-Port1	設備使用的IRF端口1的配置，即與IRF端口1綁定的物理端口
IRF-Port2	設備使用的IRF端口2的配置，即與IRF端口1綁定的物理端口

3、查看IRF的拓撲信息

[sw1]display irf topology
                              Topology Info
 -------------------------------------------------------------------------
               IRF-Port1                IRF-Port2
 MemberID    Link       neighbor      Link       neighbor    Belong To
 1           DIS        ---           UP         2           2c63-c480-0304
 2           UP         1             DIS        ---         2c63-c480-0304

字段	描述
Switch	成員編號
IRF-Port1	IRF-Port1的信息， 包括Link、 member和neighbor信息
IRF-Port2	IRF-Port2的信息， 包括Link、 member和neighbor信息
Belong To	所屬IRF, 用當前IRF中Master設備的CPU MAC地址來表示
Link	IRF端口的鏈路狀態， 包括： UP：鏈路up；DOWN: 鏈路down；DIS: 沒有使能該IRF端口
neighbor	與該IRF端口直連的設備的成員編號

4、查看當前MAD的狀態信息

[sw1]display mad
MAD ARP disabled.
MAD ND disabled.
MAD LACP enabled.
MAD BFD disabled.

[sw1]display mad verbose
Multi-active recovery state: No
Excluded ports (user-configured):
Excluded ports (system-configured):
  Ten-GigabitEthernet1/0/49
  Ten-GigabitEthernet2/0/49
MAD ARP disabled.
MAD ND disabled.
MAD LACP enabled interface: Bridge-Aggregation2
  MAD status                : Normal
  Member ID    Port                                    MAD status
  1            GigabitEthernet1/0/1                    Normal
  2            GigabitEthernet2/0/1                    Normal
MAD LACP enabled interface: Bridge-Aggregation3
  MAD status                : Normal
  Member ID    Port                                    MAD status
  1            GigabitEthernet1/0/2                    Normal
  2            GigabitEthernet2/0/2                    Normal
MAD BFD disabled.

字段	描述
MAD ARP enabled	關閉了ARPMAD檢測功能
MAD ND enabled	關閉了了NDMAD檢測功能
Excluded ports C configurable)	用戶配置的保留接口
Multi-active recovery state	當前IRF是否被MAD功能設置爲Recovery狀態
MAD LACP enabled interface: Bridge-Aggregation2	使用了LACPMAD的聚合口
MAD LACP enabled interface: Bridge-Aggregation3	使用了LACPMAD的聚合口

5、查看LACP的鏈路聚合信息

[sw1]display link-aggregation verbose