H3C设备——IRF2应用

IRF2应用

---

一、IRF 2.0概述

1、IRF(智能弹性架构）

它的核心思想是将多台设备通过IRF物理端口连接在—起进行必要的配置后，虚拟化成 —台分布式设备。使用这种虚拟化技术可以集合多台设备的硬件资源和软件处理能力实现多台设备的协同工作统—管理和不间断维护。

2、IRF的基本概念

1、角色
IRF中每台设备都称为成员设备 ，成员设备按照功能不同分为两种角色。
Master负责管理整个IRF。
Slave作为Master的备份设备运行。当Master故障时系统会自动从Slave中选举一个新的Master接替原Master工作。
Master和Slave均由成员设备选举产生。—个IRF中同时只能存在—台Master，其他成员设备都是Slave。
2、IRF端口
— 种专用于IRF的逻辑接口，分为IRF-Port1和IRF-Port2, 需要和IRF物理端口绑定之后才能生效。
3、IRF 物理端口
设备上可以用于IRF连接的物理端口。 IRF物理端口可能是IRF专用接口以太网接口或者光口。

二、IRF配置思路和步骤

1、配置设备编号

[sw2]irf member 1 renumber 2     //更改设备编号为2
Renumbering the member ID may result in configuration change or loss. Continue?[Y/N]:y
[sw2]save     //保存
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[sw2]reboot     //重启设备以启动设置

2、修改IRF优先级为5

[sw1]irf member 1 priority 5     //让其在竞选Master时获胜

3、创建IRF端口，并绑定

[sw1]int Ten-GigabitEthernet 1/0/49
[sw1-Ten-GigabitEthernet1/0/49]shutdown
[sw1-Ten-GigabitEthernet1/0/49]quit
[sw1]irf-port 1/2     //创建设备的IRF端口1
[sw1-irf-port1/2]port group interface Ten-GigabitEthernet 1/0/49     //与物理端口Ten-GigabitEthernet 1/0/49绑定
You must perform the following tasks for a successful IRF setup:
Save the configuration after completing IRF configuration.
Execute the "irf-port-configuration active" command to activate the IRF ports.
[sw1-irf-port1/2]quit
[sw1]int Ten-GigabitEthernet 1/0/49
[sw1-Ten-GigabitEthernet1/0/49]un sh
[sw1-Ten-GigabitEthernet1/0/49]quit
[sw1]save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
flash:/startup.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.

[sw2]int Ten-GigabitEthernet 2/0/49     
[sw2-Ten-GigabitEthernet2/0/49]shutdown
[sw2-Ten-GigabitEthernet2/0/49]quit
[sw2]irf-port 2/1    //创建设备的IRF端口2
[sw2-irf-port2/1]port group interface Ten-GigabitEthernet 2/0/49    //与物理端口Ten-GigabitEthernet 2/0/49绑定
You must perform the following tasks for a successful IRF setup:
Save the configuration after completing IRF configuration.
Execute the "irf-port-configuration active" command to activate the IRF ports.
[sw2-irf-port2/1]quit
[sw2]int Ten-GigabitEthernet 2/0/49
[sw2-Ten-GigabitEthernet2/0/49]un sh
[sw2-Ten-GigabitEthernet2/0/49]quit
[sw2]save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
flash:/startup.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.

4、激活IRF端口配置

[sw1]irf-port-configuration active

[sw2]irf-port-configuration active

三、配置LACP MAD检测

1、创建两个动态聚合端口，并配置trunk

[sw1]interface Bridge-Aggregation 2
[sw1-Bridge-Aggregation2]port link trunk
[sw1-Bridge-Aggregation2]port trunk permit vlan all
[sw1-Bridge-Aggregation2]link-aggregation mode dynamic
[sw1-Bridge-Aggregation2]mad enable
You need to assign a domain ID (range: 0-4294967295)
[Current domain is: 0]:
The assigned domain ID is: 0
MAD LACP only enable on dynamic aggregation interface.
[sw1-Bridge-Aggregation2]quit

[sw1]int Bridge-Aggregation 3
[sw1-Bridge-Aggregation3]port link trunk
[sw1-Bridge-Aggregation3]port trunk permit vlan all
[sw1-Bridge-Aggregation3]link-aggregation mode dynamic
[sw1-Bridge-Aggregation3]mad enable
You need to assign a domain ID (range: 0-4294967295)
[Current domain is: 0]:
The assigned domain ID is: 0
MAD LACP only enable on dynamic aggregation interface.
[sw1-Bridge-Aggregation3]quit

2、创建相应的聚合端口组，并配置trunk

[SW3]interface Bridge-Aggregation 2
[SW3-Bridge-Aggregation2]port link trunk
[SW3-Bridge-Aggregation2]port trunk permit vlan all
[SW3-Bridge-Aggregation2]link-aggregation mode dynamic
[SW3-Bridge-Aggregation2]quit

3、在聚合接口上添加成员，并配置trunk

[sw1]interface GigabitEthernet 1/0/1
[sw1-GigabitEthernet1/0/1]port link-type trunk
[sw1-GigabitEthernet1/0/1]port trunk permit vlan all
[sw1-GigabitEthernet1/0/1]port link-aggregation group 2    //加入2组（要相应的组号）
[sw1-GigabitEthernet1/0/1]quit

四、查看IRF和MAD配置的显示和维护信息

1、查看设备的IRF配置信息

[sw1]display irf
MemberID    Role    Priority  CPU-Mac         Description
 *+1        Master  5         2c63-c480-0304  ---
   2        Standby 1         2c63-c8c5-0404  ---
--------------------------------------------------
 * indicates the device is the master.
 + indicates the device through which the user logs in.

 The bridge MAC of the IRF is: 2c63-c480-0300
 Auto upgrade                : yes
 Mac persistent              : 6 min
 Domain ID                   : 0

字段	描述
Switch	本IRF中成员设备的编号（如果编号前带"*“，表示该设备是Master设备；如果编号前带”+"，表示该设备是用户当前登录的、正在操作的设备）
Role	本IRF中成员设备的角色，取值可能如下：Slave: 备用设备；Master: 主用设备；Slave Wait: 正在加入IRF；Loading: 正在自动加载系统启动文件
Priority	成员设备的优先级
CPU-MAC	设备的CPUMAC地址
Description	设备的描述信息（没有描述信息时，Description字段显示为"-----,。如果描述信息较多，无法在终端上完整显示，则以“…”结尾，省略后面的信息
Bridge MAC of the IRF is	RF的桥MAC地址
Auto upgrade	是否使能自动加载系统启动文件功能
MAC persistent	是否使能IRF桥MAC保留功能(6min表示IRF的桥MAC地址保留时间为6 min, always表示IRF的桥MAC地址永久保留不改变，no表示立即改变IRF的桥MAC地址
Domain ID	RF的域编号（当网络中存在多个IRF时， 用来唯 一 标识 一 个IRF

2、查看IRF的端口信息

[sw1]display irf configuration
 MemberID NewID    IRF-Port1                     IRF-Port2
 1        1        disable                       Ten-GigabitEthernet1/0/49
 2        2        Ten-GigabitEthernet2/0/49     disable

字段	描述
MemberID	成员编号
NewID	设备重启后将会使用的成员编号
IRF-Port1	设备使用的IRF端口1的配置，即与IRF端口1绑定的物理端口
IRF-Port2	设备使用的IRF端口2的配置，即与IRF端口1绑定的物理端口

3、查看IRF的拓扑信息

[sw1]display irf topology
                              Topology Info
 -------------------------------------------------------------------------
               IRF-Port1                IRF-Port2
 MemberID    Link       neighbor      Link       neighbor    Belong To
 1           DIS        ---           UP         2           2c63-c480-0304
 2           UP         1             DIS        ---         2c63-c480-0304

字段	描述
Switch	成员编号
IRF-Port1	IRF-Port1的信息， 包括Link、 member和neighbor信息
IRF-Port2	IRF-Port2的信息， 包括Link、 member和neighbor信息
Belong To	所属IRF, 用当前IRF中Master设备的CPU MAC地址来表示
Link	IRF端口的链路状态， 包括： UP：链路up；DOWN: 链路down；DIS: 没有使能该IRF端口
neighbor	与该IRF端口直连的设备的成员编号

4、查看当前MAD的状态信息

[sw1]display mad
MAD ARP disabled.
MAD ND disabled.
MAD LACP enabled.
MAD BFD disabled.

[sw1]display mad verbose
Multi-active recovery state: No
Excluded ports (user-configured):
Excluded ports (system-configured):
  Ten-GigabitEthernet1/0/49
  Ten-GigabitEthernet2/0/49
MAD ARP disabled.
MAD ND disabled.
MAD LACP enabled interface: Bridge-Aggregation2
  MAD status                : Normal
  Member ID    Port                                    MAD status
  1            GigabitEthernet1/0/1                    Normal
  2            GigabitEthernet2/0/1                    Normal
MAD LACP enabled interface: Bridge-Aggregation3
  MAD status                : Normal
  Member ID    Port                                    MAD status
  1            GigabitEthernet1/0/2                    Normal
  2            GigabitEthernet2/0/2                    Normal
MAD BFD disabled.

字段	描述
MAD ARP enabled	关闭了ARPMAD检测功能
MAD ND enabled	关闭了了NDMAD检测功能
Excluded ports C configurable)	用户配置的保留接口
Multi-active recovery state	当前IRF是否被MAD功能设置为Recovery状态
MAD LACP enabled interface: Bridge-Aggregation2	使用了LACPMAD的聚合口
MAD LACP enabled interface: Bridge-Aggregation3	使用了LACPMAD的聚合口

5、查看LACP的链路聚合信息

[sw1]display link-aggregation verbose