交換機故障自動切換以及SuperVlan的配置

2022-03-22     IT狂人日誌

原標題:交換機故障自動切換以及SuperVlan的配置

在華為的交換機上,一般採用VRRP的技術來實現交換機的冗餘,但是VRRP本身無法感知故障、自動切換,因此需要配置VRRP與接口狀態聯動,以實現設備或者鏈路故障時,交換機自動切換,從而保證數據流量的正常轉發。

本文主要涉及華為交換機的以下幾個技術點:Eth-Trunk、VRRP、Super-VLAN。

Super VLAN又稱為VLAN聚合(VLAN Aggregation),一個Super VLAN中包含多個Sub VLAN,每個Sub VLAN是一個廣播域,不同Sub VLAN之間二層相互隔離,只能三層通訊。

看上去有點亂,像只醜陋的蟲子,不過大致還原了客戶環境,將就著看吧。

按照從上到下的配置順序,演示一下Eth-Trunk、VRRP和Super-VLAN相結合的配置。

路由器和兩台核心之間,跑的是OSPF協議,區域0。各交換機之間,都是雙鏈路,全部需要配置Eth-Trunk,有點煩,先規劃好再動手。

一、路由器的配置

interface GigabitEthernet0/0/0

ip address 1.1.1.1 255.255.255.252

#

interface GigabitEthernet0/0/1

ip address 2.1.1.1 255.255.255.252

#

interface GigabitEthernet0/0/2

ip address 222.92.xx.xx 255.255.255.248

#

ospf 1

area 0

network 1.1.1.1 0.0.0.0

network 2.1.1.1 0.0.0.0

network 222.92.xx.xx 0.0.0.0

二、核心交換機的配置

兩台交換機差不多,就是關鍵部位需要做一下小修改,所以只貼出來核心1的配置了:

Sysname Core1

#

interface GigabitEthernet0/0/1

ip address 1.1.1.2 255.255.255.252

#

vlan batch 11 to 15 101 to 180 301 to 305 400 //指創建VLAN

#

vlan 11

aggregate-vlan //配置聚合VLAN

access-vlan 101 to 116 301

vlan 12

aggregate-vlan

access-vlan 117 to 132 302

vlan 13

aggregate-vlan

access-vlan 133 to 148 303

vlan 14

aggregate-vlan

access-vlan 149 to 164 304

vlan 15

aggregate-vlan

access-vlan 165 to 180 305

#

interface Vlanif11

ip address 10.1.1.2 255.255.255.0

vrrp vrid 1 virtual-ip 10.1.1.1 //vrrp1的虛擬IP為10.1.1.1

vrrp vrid 1 priority 120 //vrrp1的優先級為120

vrrp vrid 1 preempt-mode timer delay 20 //vrrp1的搶占時間為20秒

vrrp vrid 1 track interface gigabitethernet1/0/1 reduced 100 //監視上行接口,一旦斷開就降優先級,讓核心2頂上

vrrp vrid 1 track interface eth-trunk 13 reduced 100 //監視下行接口,目的同上

vrrp advertise send-mode 301

#

interface Vlanif12

ip address 10.1.2.2 255.255.255.0

vrrp vrid 2 virtual-ip 10.1.2.1

vrrp vrid 2 priority 120

vrrp vrid 2 preempt-mode timer delay 20

vrrp vrid 2 track interface gigabitethernet1/0/1 reduced 100

vrrp vrid 2 track interface eth-trunk 13 reduced 100

vrrp advertise send-mode 302

#

interface Vlanif13

ip address 10.1.3.2 255.255.255.0

vrrp vrid 3 virtual-ip 10.1.3.1

vrrp vrid 3 priority 120

vrrp vrid 3 preempt-mode timer delay 20

vrrp vrid 3 track interface gigabitethernet1/0/1 reduced 100

vrrp vrid 3 track interface eth-trunk 13 reduced 100

vrrp advertise send-mode 303

#

interface Vlanif14

ip address 10.1.4.2 255.255.255.0

vrrp vrid 4 virtual-ip 10.1.4.1

vrrp vrid 4 priority 120

vrrp vrid 4 preempt-mode timer delay 20

vrrp vrid 4 track interface gigabitethernet1/0/1 reduced 100

vrrp vrid 4 track interfaceeth-trunk 13 reduced 100

vrrp advertise send-mode 304

#

interface Vlanif15

ip address 10.1.5.2 255.255.255.0

vrrp vrid 5 virtual-ip 10.1.5.1

vrrp vrid 5 priority 120

vrrp vrid 5 preempt-mode timer delay 20

vrrp vrid 5 track interface gigabitethernet1/0/1 reduced 100

vrrp vrid 5 track interface eth-trunk 13 reduced 100

vrrp advertise send-mode 305

#

interface Eth-Trunk12 //創建eth-trunk,其實是先創建再調用的,只是在配置文件裡面排在後面而已

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 301 to 305

mode lacp

#

interface GigabitEthernet1/0/2

eth-trunk 12

#

interface GigabitEthernet1/0/3

eth-trunk 12

#

interface Eth-Trunk13

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 301 to 305

mode lacp

#

interface GigabitEthernet1/0/4

eth-trunk 13

#

interface GigabitEthernet1/0/5

eth-trunk 13

#

ospf 1

area 0.0.0.0

network 1.1.1.2 0.0.0.0

network 10.1.1.0 0.0.0.255

network 10.1.2.0 0.0.0.255

network 10.1.3.0 0.0.0.255

network 10.1.4.0 0.0.0.255

network 10.1.5.0 0.0.0.255

#

相信大伙兒都看出來了,平時流量全都在Master上面跑呢,核心2隻是個打醬油的角色,哪天核心1出問題了,才輪到它上;

按照我平時的配置習慣,肯定不是這樣的,但是客戶說,這樣的優點是:核心2不會有損耗,哪天核心1跑累了,可以切換一下角色……好吧,只能說也挺有想法的。

三、匯聚交換機的配置

以下是配置命令,不是配置完成後的配置文件——配置的時候,先在記事本裡面寫好,然後直接粘貼到交換機上的,所以也就很方便地粘貼在文檔中了。

vlan bat 11 to 15 101 to 180

int Eth-Trunk 13

mode lacp-static

p l t

p t a v a

int g0/0/3

eth-trunk 13

int g0/0/4

eth-trunk 13

int Eth-Trunk 34

mode lacp-static

p l t

p t a v a

int g0/0/1

eth-trunk 34

int g0/0/2

eth-trunk 34

int Eth-Trunk 35

mode lacp-static

p l t

p t a v a

int g0/0/5

eth-trunk 35

int g0/0/6

eth-trunk 35

int Eth-Trunk 36

mode lacp-static

p l t

p t a v a

int g0/0/7

eth-trunk 36

int g0/0/8

eth-trunk 36

int Eth-Trunk 37

mode lacp-static

p l t

p t a v a

int g0/0/9

eth-trunk 37

int g0/0/10

eth-trunk 37

int Eth-Trunk 38

mode lacp-static

p l t

p t a v a

int g0/0/11

eth-trunk 38

int g0/0/12

eth-trunk 38

全是Eth-Trunk,頭都暈了,我配置之前,是先在圖上標好的,建議你也這麼做,不然很容易搞錯的;如下圖所示,紅色數字表示Eth-Trunk編號

四、接入交換機的配置

此處省略500字,反正就是繼續Eth-Trunk,然後劃分VLAN,終端接口配置為access……這個簡單,前面好多文章裡面都有。

總算配置完了,回頭再看上面的拓撲圖,感覺更像是架飛機,也許是因為帶上了紅色的標識?

文章來源: https://twgreatdaily.com/zh-mo/0d8bc0a6947af0d9f38a315396776e16.html