配置M-LAG雙歸接入普通乙太網路示例（根橋方式）

技术颜良發表於2024-04-05

組網需求

如圖4-22所示，採用M-LAG方式將主機雙歸接入普通乙太網路。由於使用者對於業務的可靠性要求很高，如果主機和接入裝置之間做鏈路聚合只能保證鏈路級的可靠性，接入裝置發生故障時則會導致業務中斷。這時使用者可以採用跨裝置鏈路聚合技術，正常工作時鏈路進行負載分擔且任何一臺裝置故障對業務均沒有影響，保證業務的高可靠性。由於普通乙太網路中存在阻塞埠無法傳輸M-LAG主備裝置的心跳報文，這裡採用配置DFS Group繫結管理網口IP地址，保證M-LAG主備裝置的心跳報文能夠正常傳輸。

圖4-22 配置M-LAG雙歸接入普通乙太網路組網圖
配置M-LAG雙歸接入普通乙太網路示例（根橋方式）

配置思路

  1. 將SwitchA和SwitchB配置為根橋，配置相同的橋ID，保證M-LAG主備裝置在二層網路中處於根橋地位。

  2. 分別在SwitchA和SwitchB上配置管理網口的IP地址，且保證能夠三層互通，用於M-LAG主備裝置間心跳報文的傳輸。

  3. 分別在SwitchA和SwitchB上配置M-LAG特性，實現伺服器的雙歸接入。

  4. 在SwitchC和SwitchD上建立VLANIF介面並配置IP地址，在VLANIF介面上建立VRRP備份組，作為M-LAG主備裝置的閘道器。

操作步驟

  1. 將SwitchA和SwitchB配置為根橋，配置相同的橋ID

    配置M-LAG雙歸接入普通乙太網路示例（根橋方式）

    如果組成M-LAG的裝置下行接入的是交換裝置，必須配置根保護功能。

    # 配置SwitchA。

    <HUAWEI> system-view
[~HUAWEI] sysname SwitchA
[*HUAWEI] commit
[~SwitchA] stp root primary
[*SwitchA] stp bridge-address 39-39-39
[*SwitchA] interface eth-trunk 1
[*SwitchA-Eth-Trunk1] trunkport 10ge 1/0/5
[*SwitchA-Eth-Trunk1] trunkport 10ge 1/0/6
[*SwitchA-Eth-Trunk1] stp edged-port enable
[*SwitchA-Eth-Trunk1] commit
[~SwitchA-Eth-Trunk1] quit

    # 配置SwitchB。

    <HUAWEI> system-view
[~HUAWEI] sysname SwitchB
[*HUAWEI] commit
[~SwitchB] stp root primary
[*SwitchB] stp bridge-address 39-39-39
[*SwitchB] interface eth-trunk 1
[*SwitchB-Eth-Trunk1] trunkport 10ge 1/0/5
[*SwitchB-Eth-Trunk1] trunkport 10ge 1/0/6
[*SwitchB-Eth-Trunk1] stp edged-port enable
[*SwitchB-Eth-Trunk1] commit
[~SwitchB-Eth-Trunk1] quit

  2. 分別配置SwitchA和SwitchB管理網口的IP地址

    # 配置SwitchA。

    [~SwitchA] interface meth 0/0/0
[~SwitchA-MEth0/0/0] ip address 10.1.1.1 24
[*SwitchA-MEth0/0/0] quit
[*SwitchA] commit

    # 配置SwitchB。

    [~SwitchB] interface meth 0/0/0
[~SwitchB-MEth0/0/0] ip address 10.1.1.2 24
[*SwitchB-MEth0/0/0] quit
[*SwitchB] commit

  3. 在SwitchA和SwitchB上分別建立DFS並繫結管理網口的IP地址

    SwitchA和SwitchB管理網口需要保證能夠三層互通。

    # 配置SwitchA。

    [~SwitchA] dfs-group 1
[*SwitchA-dfs-group-1] source ip 10.1.1.1
[*SwitchA-dfs-group-1] priority 150
[*SwitchA-dfs-group-1] quit
[*SwitchA] commit

    # 配置SwitchB。

    [~SwitchB] dfs-group 1
[*SwitchB-dfs-group-1] source ip 10.1.1.2
[*SwitchB-dfs-group-1] priority 120
[*SwitchB-dfs-group-1] quit
[*SwitchB] commit

  4. 配置SwitchA和SwitchB之間的Peer-link

    # 配置SwitchA。

    [~SwitchA] interface eth-trunk 0
[*SwitchA-Eth-Trunk0] trunkport 10ge 1/0/3
[*SwitchA-Eth-Trunk0] trunkport 10ge 2/0/4
[*SwitchA-Eth-Trunk0] undo stp enable
[*SwitchA-Eth-Trunk0] mode lacp-static
[*SwitchA-Eth-Trunk0] peer-link 1
[*SwitchA-Eth-Trunk0] quit
[*SwitchA] commit

    # 配置SwitchB。

    [~SwitchB] interface eth-trunk 0
[*SwitchB-Eth-Trunk0] trunkport 10ge 1/0/3
[*SwitchB-Eth-Trunk0] trunkport 10ge 2/0/4
[*SwitchB-Eth-Trunk0] undo stp enable
[*SwitchB-Eth-Trunk0] mode lacp-static
[*SwitchB-Eth-Trunk0] peer-link 1
[*SwitchB-Eth-Trunk0] quit
[*SwitchB] commit

  5. 配置SwitchA和SwitchB連線伺服器的Eth-Trunk介面加入VLAN 11並繫結DFS Group

    伺服器上行連線交換機的埠需要繫結在一個聚合鏈路中且鏈路聚合模式需要和交換機側的聚合模式匹配。

    # 配置SwitchA。

    [~SwitchA] vlan batch 11
[*SwitchA] interface eth-trunk 1
[*SwitchA-Eth-Trunk1] mode lacp-dynamic
[*SwitchA-Eth-Trunk1] port link-type access
[*SwitchA-Eth-Trunk1] port default vlan 11
[*SwitchA-Eth-Trunk1] dfs-group 1 m-lag 1
[*SwitchA-Eth-Trunk1] quit
[*SwitchA] commit

    # 配置SwitchB。

    [~SwitchB] vlan batch 11
[*SwitchB] interface eth-trunk 1
[*SwitchB-Eth-Trunk1] mode lacp-dynamic
[*SwitchB-Eth-Trunk1] port link-type access
[*SwitchB-Eth-Trunk1] port default vlan 11
[*SwitchB-Eth-Trunk1] dfs-group 1 m-lag 1
[*SwitchB-Eth-Trunk1] quit
[*SwitchB] commit

  6. 配置SwitchA和SwitchC之間為聚合鏈路以及SwitchB和SwitchD之間為聚合鏈路，並配置介面型別和透過的VLAN

    # 配置SwitchA。

    [~SwitchA] interface eth-trunk 2
[*SwitchA-Eth-Trunk2] mode lacp-static
[*SwitchA-Eth-Trunk2] port link-type trunk
[*SwitchA-Eth-Trunk2] port trunk allow-pass vlan 11
[*SwitchA-Eth-Trunk2] trunkport 10ge 1/0/1
[*SwitchA-Eth-Trunk2] trunkport 10ge 1/0/2
[*SwitchA-Eth-Trunk2] quit
[*SwitchA] commit

    # 配置SwitchB。

    [~SwitchB] interface eth-trunk 2
[*SwitchB-Eth-Trunk2] mode lacp-static
[*SwitchB-Eth-Trunk2] port link-type trunk
[*SwitchB-Eth-Trunk2] port trunk allow-pass vlan 11
[*SwitchB-Eth-Trunk2] trunkport 10ge 1/0/1
[*SwitchB-Eth-Trunk2] trunkport 10ge 1/0/2
[*SwitchB-Eth-Trunk2] quit
[*SwitchB] commit

    # 配置SwitchC。

    <HUAWEI> system-view
[~HUAWEI] sysname SwitchC
[*HUAWEI] commit
[~SwitchC] vlan batch 11
[*SwitchC] interface eth-trunk 2
[*SwitchC-Eth-Trunk2] mode lacp-static
[*SwitchC-Eth-Trunk2] port link-type trunk
[*SwitchC-Eth-Trunk2] port trunk allow-pass vlan 11
[*SwitchC-Eth-Trunk2] trunkport 10ge 1/0/1
[*SwitchC-Eth-Trunk2] trunkport 10ge 1/0/2
[*SwitchC-Eth-Trunk2] quit
[*SwitchC] commit

    # 配置SwitchD。

    <HUAWEI> system-view
[~HUAWEI] sysname SwitchD
[*HUAWEI] commit
[~SwitchD] vlan batch 11
[*SwitchD] interface eth-trunk 2
[*SwitchD-Eth-Trunk2] mode lacp-static
[*SwitchD-Eth-Trunk2] port link-type trunk
[*SwitchD-Eth-Trunk2] port trunk allow-pass vlan 11
[*SwitchD-Eth-Trunk2] trunkport 10ge 1/0/1
[*SwitchD-Eth-Trunk2] trunkport 10ge 1/0/2
[*SwitchD-Eth-Trunk2] quit
[*SwitchD] commit

  7. 在SwitchC和SwitchD上建立VLANIF介面並配置IP地址，在VLANIF介面上建立VRRP備份組

    # 在SwitchC上建立VRRP備份組1，配置SwitchC在該備份組中的優先順序為120。

    [~SwitchC] interface vlanif 11
[*SwitchC-Vlanif11] ip address 10.2.1.1 24
[*SwitchC-Vlanif11] vrrp vrid 1 virtual-ip 10.2.1.111
[*SwitchC-Vlanif11] vrrp vrid 1 priority 120
[*SwitchC-Vlanif11] quit
[*SwitchC] commit

    # 在SwitchD上建立VRRP備份組1，其在該備份組中的優先順序為預設值100。

    [~SwitchD] interface vlanif 11
[*SwitchD-Vlanif11] ip address 10.2.1.2 24
[*SwitchD-Vlanif11] vrrp vrid 1 virtual-ip 10.2.1.111
[*SwitchD-Vlanif11] quit
[*SwitchD] commit

  8. 驗證配置結果

    • 執行命令display dfs-group，檢視M-LAG的相關資訊。

      # 檢視DFS Group編號為1的M-LAG資訊。

      [~SwitchA] display dfs-group 1 m-lag
*                : Local node
Heart beat state : OK
Node 1 *
  Dfs-Group ID   : 1
  Priority       : 150
  Address        : ip address 10.1.1.1
  State          : Master
  Causation      : -
  System ID      : 0025-9e95-7c31
  SysName        : SwitchA
  Version        : V100R006C00
  Device Type    : CE12800
Node 2
  Dfs-Group ID   : 1
  Priority       : 120
  Address        : ip address 10.1.1.2
  State          : Backup
  Causation      : -
  System ID      : 0025-9e95-7c11
  SysName        : SwitchB
  Version        : V100R006C00
  Device Type    : CE12800

      # 檢視SwitchA上的M-LAG資訊。

      [~SwitchA] display dfs-group 1 node 1 m-lag brief
* - Local node

M-Lag ID     Interface      Port State    Status                Consistency-check
       1     Eth-Trunk 1    Up            active(*)-active      --


Failed reason:                                                                  
    1 -- Relationship between vlan and port is inconsistent                     
    2 -- STP configuration under the port is inconsistent                       
    3 -- STP port priority configuration is inconsistent                        
    4 -- LACP mode of M-LAG is inconsistent                                     
    5 -- M-LAG configuration is inconsistent                                    
    6 -- The number of M-LAG members is inconsistent

      # 檢視SwitchB上的M-LAG資訊。

      [~SwitchA] display dfs-group 1 node 2 m-lag brief
* - Local node

M-Lag ID     Interface      Port State    Status                Consistency-check
       1     Eth-Trunk 1    Up            active-active(*)      --


Failed reason:                                                                  
    1 -- Relationship between vlan and port is inconsistent                     
    2 -- STP configuration under the port is inconsistent                       
    3 -- STP port priority configuration is inconsistent                        
    4 -- LACP mode of M-LAG is inconsistent                                     
    5 -- M-LAG configuration is inconsistent                                    
    6 -- The number of M-LAG members is inconsistent

      透過以上顯示資訊可以看到，“Heart beat state”的狀態是“OK”，表明心跳狀態正常；SwitchA作為Node 1，優先順序為150，“State”的狀態是“Master”；SwitchB作為Node 2，優先順序為120，“State”的狀態是“Backup”。同時“Causation”的狀態是“-”，Node 1的“Port State”狀態為“Up”，Node 2的“Port State”狀態為“Up”，且Node 1和Node 2的M-LAG狀態均為“active”，表明M-LAG的配置正確。

    • 在SwitchC和SwitchD上分別執行display vrrp命令，可以看到SwitchC在備份組中的狀態為Master，SwitchD在備份組中的狀態為Backup。

      [~SwitchC] display vrrp verbose
Vlanif11 | Virtual Router 1
State        : Master
Virtual IP     : 10.2.1.111
Master IP      : 10.2.1.1
PriorityRun    : 120
PriorityConfig : 120                                                        
MasterPriority : 120                                                        
Preempt        : YES   Delay Time : 0s    Remain : --    
TimerRun       : 1s                                                              
TimerConfig    : 1s                                                           
Auth Type      : NONE                                                            
Virtual MAC    : 0000-5e00-0101                                                
Check TTL      : YES                                                             
Config Type    : Normal                                                   
Create Time       : 2020-01-30 11:39:18                                           
Last Change Time  : 2020-02-04 11:38:58 
      [~SwitchD] display vrrp verbose
Vlanif11 | Virtual Router 1
State        : Backup
Virtual IP     : 10.2.1.111
Master IP      : 10.2.1.1
PriorityRun    : 100
PriorityConfig : 100                                                        
MasterPriority : 120                                                        
Preempt        : YES   Delay Time : 0s   Remain : --     
TimerRun       : 1s                                                        
TimerConfig    : 1s                                                        
Auth Type      : NONE                                                       
Virtual MAC    : 0000-5e00-0101                                             
Check TTL      : YES                                                        
Config Type    : Normal                                                
Create Time      : 2020-01-30 11:39:18                                      
Last Change Time : 2020-02-04 11:38:58

配置檔案

  • SwitchA的配置檔案

    #
sysname SwitchA
#
dfs-group 1
 priority 150
 source ip 10.1.1.1
#
vlan batch 11
#
stp bridge-address 0039-0039-0039
stp instance 0 root primary
#
interface MEth0/0/0
 ip address 10.1.1.1 255.255.255.0
#
interface Eth-Trunk0
 stp disable
 mode lacp-static
 peer-link 1
#
interface Eth-Trunk1
 port default vlan 11
 stp edged-port enable
 mode lacp-dynamic
 dfs-group 1 m-lag 1
#
interface Eth-Trunk2
 port link-type trunk
 port trunk allow-pass vlan 11
 mode lacp-static 
#
interface 10GE1/0/1
 eth-trunk 2
#
interface 10GE1/0/2
 eth-trunk 2
#
interface 10GE1/0/3
 eth-trunk 0
#
interface 10GE1/0/5
 eth-trunk 1
#
interface 10GE1/0/6
 eth-trunk 1
#
interface 10GE2/0/4
 eth-trunk 0
#
return

  • SwitchB的配置檔案

    #
sysname SwitchB
#
dfs-group 1
 priority 120
 source ip 10.1.1.2
#
vlan batch 11
#
stp bridge-address 0039-0039-0039
stp instance 0 root primary
#
interface MEth0/0/0
 ip address 10.1.1.2 255.255.255.0
#
interface Eth-Trunk0
 stp disable
 mode lacp-static
 peer-link 1
#
interface Eth-Trunk1
 port default vlan 11
 stp edged-port enable
 mode lacp-dynamic
 dfs-group 1 m-lag 1
#
interface Eth-Trunk2
 port link-type trunk
 port trunk allow-pass vlan 11
 mode lacp-static
#
interface 10GE1/0/1
 eth-trunk 2
#
interface 10GE1/0/2
 eth-trunk 2
#
interface 10GE1/0/3
 eth-trunk 0
#
interface 10GE1/0/5
 eth-trunk 1
#
interface 10GE1/0/6
 eth-trunk 1
#
interface 10GE2/0/4
 eth-trunk 0
#
return

  • SwitchC的配置檔案

    #
sysname SwitchC
#
vlan batch 11
#
interface Vlanif11
 ip address 10.2.1.1 255.255.255.0
 vrrp vrid 1 virtual-ip 10.2.1.111
 vrrp vrid 1 priority 120
#
interface Eth-Trunk2
 port link-type trunk
 port trunk allow-pass vlan 11
 mode lacp-static
#
interface 10GE1/0/1
 eth-trunk 2
#
interface 10GE1/0/2
 eth-trunk 2
#
return

  • SwitchD的配置檔案

    #
sysname SwitchD
#
vlan batch 11
#
interface Vlanif11
 ip address 10.2.1.2 255.255.255.0
 vrrp vrid 1 virtual-ip 10.2.1.111
#
interface Eth-Trunk2
 port link-type trunk
 port trunk allow-pass vlan 11
 mode lacp-static
#
interface 10GE1/0/1
 eth-trunk 2
#
interface 10GE1/0/2
 eth-trunk 2
#
return
https://support.huawei.com/enterprise/zh/doc/EDOC1100138437/adf0bbdf

相關文章