两块板卡AC如何通过内联口做irf堆叠

本文档介绍无线控制器业务板同框IRF典型配置举例。IRF是将多台AC设备以星型拓扑连接在一起，进行必要配置后虚拟化成一台分布式设备。通过IRF特性可以集合多台设备的硬件资源和软件处理能力，实现多台设备的协同工作、统一管理和不间断维护。当配置了IRF后，用户通过IRF设备中的任意端口都可以登录IRF系统，对所有成员设备进行统一管理，同时，对于网络中的其它设备和网管来说，整个IRF就是一个网络节点，简化了网络拓扑，降低了管理难度。

IRF中有多台成员设备，其中一台作为主设备，负责IRF的运行、管理和维护；其它成员设备作为从设备，从设备在作为备份的同时也可以处理业务。一旦主设备故障，系统会迅速自动选举新的主设备，以保证业务不中断，从而实现了设备的1:N备份。当同一IRF域中同时存在多个主设备，则根据角色选举规则选择最优设备为主设备，选举比较先后顺序为优先级、系统运行时间、CPU MAC大小，优先级大的优，系统运行时间长的优（时间差小于10分钟则认为运行时间相同），MAC小的更优。

星型IRF所有的成员设备接入二层网络，只要成员设备间二层互通，就可以利用现有的物理连接来转发成员设备间的流量和IRF协议报文，不需要专门的物理线路和接口来转发。

本文档适用于使用Comware V7软件版本的无线控制器和接入点产品，不严格与具体硬件版本对应，如果使用过程中与产品实际情况有差异，请参考相关产品手册，或以设备实际情况为准。

本文档中的配置均是在实验室环境下进行的配置和验证，配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置，为了保证配置效果，请确认现有配置和以下举例中的配置不冲突。

本文档假设您已了解星型IRF基础与LACP等相关特性。

如图1所示，AC 1与AC 2是2块无线控制器业务板，插在一台支持无线控制器业务板的框式交换机Switch上，AC 1与AC 2使用内联口1和内联口2建立同框星型IRF，IRF与框式交换机Switch之间通过跨板动态聚合链路连接进行业务通信，AC1与AC2的内联口3和内联口4都为该聚合成员口，具体要求如下：

·              AC 1与AC 2成功建立IRF。

·              IRF与框式交换机Switch之间的动态聚合都正常。

                        图1 无线控制器业务板同框IRF网络

1.1.1  配置Switch

(1)      配置聚合接口

# 创建二层聚合接口1，并进入二层聚合接口1视图将该聚合口配置为动态聚合口。

system-view

[Switch]interface Bridge-Aggregation 1

[Switch-Bridge-Aggregation1]link-aggregation mode dynamic

[Switch-Bridge-Aggregation1]quit                                   

# 将Switch内联口Ten-GigabitEthernet 2/2/0/3加入到聚合组1中。

[Switch]interface Ten-GigabitEthernet 2/2/0/3                                  

[Switch-Ten-GigabitEthernet2/2/0/3]port link-aggregation group 1               

[Switch-Ten-GigabitEthernet2/2/0/3]quit

# 将Switch内联口Ten-GigabitEthernet 2/2/0/4加入到聚合组1中。

[Switch]interface Ten-GigabitEthernet 2/2/0/4                               

[Switch-Ten-GigabitEthernet2/2/0/4]port link-aggregation group 1               

[Switch-Ten-GigabitEthernet2/2/0/4]quit

# 将Switch内联口Ten-GigabitEthernet 2/5/0/3加入到聚合组1中。

[Switch]interface Ten-GigabitEthernet 2/5/0/3                                  

[Switch-Ten-GigabitEthernet2/5/0/3]port link-aggregation group 1               

[Switch-Ten-GigabitEthernet2/5/0/3]quit

# 将Switch内联口Ten-GigabitEthernet 2/5/0/4加入到聚合组1中。

[Switch]interface Ten-GigabitEthernet 2/5/0/4                                  

[Switch-Ten-GigabitEthernet2/5/0/4]port link-aggregation group 1               

[Switch-Ten-GigabitEthernet2/5/0/4]quit

# 创建二层聚合接口2，并进入二层聚合接口2视图。

[Switch]interface Bridge-Aggregation 2

[Switch-Bridge-Aggregation1]quit                                        

# 将Switch内联口Ten-GigabitEthernet 2/2/0/1加入到聚合组2中。

[Switch]interface Ten-GigabitEthernet 2/2/0/1                                  

[Switch-Ten-GigabitEthernet2/2/0/1]port link-aggregation group 2               

[Switch-Ten-GigabitEthernet2/2/0/1]quit

# 将Switch内联口Ten-GigabitEthernet 2/2/0/2加入到聚合组2中。

[Switch]interface Ten-GigabitEthernet 2/2/0/2                                  

[Switch-Ten-GigabitEthernet2/2/0/2]port link-aggregation group 2               

[Switch-Ten-GigabitEthernet2/2/0/2]quit

# 创建二层聚合接口3，并进入二层聚合接口3视图。

[Switch]interface Bridge-Aggregation 3

[Switch-Bridge-Aggregation1]quit                                        

# 将Switch内联口Ten-GigabitEthernet 2/5/0/1加入到聚合组3中。

[Switch]interface Ten-GigabitEthernet 2/5/0/1                                  

[Switch-Ten-GigabitEthernet2/5/0/1]port link-aggregation group 3               

[Switch-Ten-GigabitEthernet2/5/0/1]quit

# 将Switch内联口Ten-GigabitEthernet 2/5/0/2加入到聚合组3中。

[Switch]interface Ten-GigabitEthernet 2/5/0/2                                  

[Switch-Ten-GigabitEthernet2/5/0/2]port link-aggregation group 3                

[Switch-Ten-GigabitEthernet2/5/0/2]quit

(2)      配置VLAN

# 创建VLAN 400，并将Switch侧与IRF端口连接的端口加入到该VLAN中，该VLAN用于将IRF链路与一般业务链路隔离，所以Switch上所有其它端口都不允许VLAN 400通过。

[Switch]vlan 400

[Switch-vlan400]port Bridge-Aggregation 2                             

[Switch-vlan400]port Bridge-Aggregation 3

[Switch-vlan400]quit

(3)      配置STP

#给聚合口2与聚合口3去使能STP。

[Switch]interface Bridge-Aggregation 2

[Switch-Bridge-Aggregation2]undo stp enable

[Switch]interface Bridge-Aggregation 3

[Switch-Bridge-Aggregation3]undo stp enable

1.1.2  配置AC 1

(1)      配置IRF端口

# 创建IRF逻辑口1，并将内联10GE口Ten-GigabitEthernet 1/0/1和Ten-GigabitEthernet 1/0/2加入到IRF逻辑口1。

system-view                                                                               

[AC 1]vlan 400                                          

[AC 1]irf-port 1                                                                                                     

[AC 1-irf-port1]port group interface Ten-GigabitEthernet 1/0/1                 

You must perform the following tasks for a successful IRF setup:                

Save the configuration after completing IRF configuration.                     

Execute the \"irf-port-configuration active\" command to activate the IRF ports.

[AC 1-irf-port1]port group interface Ten-GigabitEthernet 1/0/2

[AC 1-irf-port1]quit

(2)      配置成员优先级

# 指定AC 1的优先级为2， AC 1的优先级高于AC 2，保证AC 1可竞选为主设备。

[AC 1]irf member 1 priority 2

(3)      激活IRF端口

# 保存配置并激活IRF端口配置。

[AC 1]save                                                                  

The current configuration will be written to the device. Are you sure? [Y/N]:y 

Please input the file name(*.cfg)[cfa0:/startup.cfg]                           

(To leave the existing filename unchanged, press the enter key):irf.cfg               

Validating file. Please wait...                                                

Saved the current configuration to mainboard device successfully.                                                              

[AC 1]irf-port-configuration active

1.1.3  配置AC 2

(1)      配置成员编号

#配置AC 2的成员编号为2，并重启设备使其生效。

system-view

[AC 2]vlan 400 

[AC 2]irf member 1 renumber 2

Renumbering the member ID may result in configuration change or loss. Continue?[

Y/N]:y

[AC 2] quit                                                                         

reboot                                                             

Start to check configuration with next startup configuration file, please wait..

.......DONE!                                                                    

Current configuration may be lost after the reboot, save current configuration?

[Y/N]:y                                                                        

Please input the file name(*.cfg)[cfa0:/startup.cfg]                           

(To leave the existing filename unchanged, press the enter key):irf.cfg               

cfa0:/startup.cfg exists, overwrite? [Y/N]:y                                   

Validating file. Please wait...                                                 

Saved the current configuration to mainboard device successfully.              

This command will reboot the device. Continue? [Y/N]:y

Now rebooting, please wait...     

(2)      配置IRF端口

# 创建IRF逻辑口2，并将内联10GE口Ten-GigabitEthernet 2/0/1和Ten-GigabitEthernet 2/0/2加入到IRF逻辑口2。

system-view                                                                                                                              

[AC 2]irf-port 2                                                                                                      

[AC 2-irf-port2]port group interface Ten-GigabitEthernet 2/0/1                 

You must perform the following tasks for a successful IRF setup:               

Save the configuration after completing IRF configuration.                     

Execute the \"irf-port-configuration active\" command to activate the IRF ports.

[AC 2-irf-port2]port group interface Ten-GigabitEthernet 2/0/2

[AC 2-irf-port2]quit

(3)      激活IRF端口

# 保存配置并激活IRF端口配置，所有成员设备配置完成后竞选为备的设备会merge重启，重启之后IRF建立成功。

[AC 2]save                                                                     

The current configuration will be written to the device. Are you sure? [Y/N]:y 

Please input the file name(*.cfg)[cfa0:/ irf.cfg]                    

(To leave the existing filename unchanged, press the enter key):               

Validating file. Please wait...                                                 

Saved the current configuration to mainboard device successfully.                                                             

[AC 2]irf-port-configuration active

[AC 2]                                                    

System is starting...

1.1.4  配置IRF

配置聚合接口

# 删除AC设备默认聚合接口1。

[AC 1]undo interface Bridge-Aggregation 1

# 创建二层聚合接口1，并进入二层聚合接口1视图将该聚合口配置为动态聚合口。

[AC 1]interface Bridge-Aggregation 1

[AC 1-Bridge-Aggregation1]link-aggregation mode dynamic

[AC 1-Bridge-Aggregation1]quit                                        

# 将内联10GE口Ten-GigabitEthernet 1/0/3加入到聚合组1中。

[AC 1]interface Ten-GigabitEthernet 1/0/3

[AC 1-Ten-GigabitEthernet1/0/3]port link-aggregation group 1

[AC 1-Ten-GigabitEthernet1/0/3]quit

# 将内联10GE口Ten-GigabitEthernet 1/0/4加入到聚合组1中。

[AC 1]interface Ten-GigabitEthernet 1/0/4

[AC 1-Ten-GigabitEthernet1/0/4]port link-aggregation group 1

[AC 1-Ten-GigabitEthernet1/0/4]quit

# 将内联10GE口Ten-GigabitEthernet 2/0/3加入到聚合组1中。

[AC 1]interface Ten-GigabitEthernet 2/0/3

[AC 1-Ten-GigabitEthernet2/0/3]port link-aggregation group 1

[AC 1-Ten-GigabitEthernet2/0/3]quit

# 将内联10GE口Ten-GigabitEthernet 2/0/4加入到聚合组1中。

[AC 1]interface Ten-GigabitEthernet 2/0/4

[AC 1-Ten-GigabitEthernet2/0/4]port link-aggregation group 1

[AC 1-Ten-GigabitEthernet2/0/4]quit

1.2  验证配置

(1)      IRF建立好后可在IRF上使用命令display irf查看IRF信息。AC 1的优先级高于AC 2，所以AC 1为主设备。

[AC 1]display irf                                                              

Member ID    Role    Priority  CPU MAC         Description                     

  *+1        Master  2         50da-005b-8b98  ---                             

    2        Standby 1         70f9-6d17-2e37  ---                             

--------------------------------------------------                             

The asterisk (*) indicates the master.                                         

The plus sign (+) indicates the device through which you are logged in.        

The right angle bracket (>) indicates the device's stack capability is disabled.

Bridge MAC of the IRF: 50da-005b-8b98                                          

Auto upgrade         : Enabled                                                 

MAC persistence      : 6 min                                                    

Topo-domain ID       : 0                                                       

Auto merge           : Enabled                                                 

[AC 1]

(2)      IRF建立好后可在IRF上使用命令display irf link查看IRF链路状态信息，IRF端口都为Up状态。

[AC 1]display irf link                                                         

Member ID   Member Interfaces                   Status                         

1           XGE1/0/1(ctrl&data)                 Up                             

            XGE1/0/2(ctrl&data)                 Up                             

2           XGE2/0/1(ctrl&data)                 Up                             

            XGE2/0/2(ctrl&data)                 Up                              

[AC 1]

(3)      在IRF上使用命令display link-aggregation verbose查看聚合组1的详细信息。4个成员端口都处于聚合组1中且为选中状态。

[AC 1]display link-aggregation verbose                                         

Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing                 

Port Status: S -- Selected, U -- Unselected, I -- Individual                   

Flags:  A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,               

        D -- Synchronization, E -- Collecting, F -- Distributing,              

        G -- Defaulted, H -- Expired                                           

Aggregate Interface: Bridge-Aggregation1                                       

Aggregation Mode: Dynamic                                                      

Loadsharing Type: NonS                                                         

System ID: 0x8000, 50da-005b-8b98                                              

Local:                                                                         

  Port             Status  Priority Oper-Key  Flag                             

--------------------------------------------------------------------------------

  XGE1/0/3         S       32768    1         {ACDEF}                          

  XGE1/0/4         S       32768    1         {ACDEF}                          

  XGE2/0/3         S       32768    1         {ACDEF}                          

  XGE2/0/4         S       32768    1         {ACDEF}                          

Remote:                                                                        

  Actor            Partner Priority Oper-Key  SystemID               Flag      

--------------------------------------------------------------------------------

  XGE1/0/3         1943    32768    3         0x8000, 741f-4a56-9890 {ACDEF}   

  XGE1/0/4         1944    32768    3         0x8000, 741f-4a56-9890 {ACDEF}   

  XGE2/0/3         2234    32768    3         0x8000, 741f-4a56-9890 {ACDEF}   

  XGE2/0/4         2235    32768    3         0x8000, 741f-4a56-9890 {ACDEF}   

[AC 1]

(4)      在Switch上使用命令display link-aggregation verbose查看聚合组的详细信息，发现3个聚合口里面的聚合成员口都处于选中状态。动态聚合组1中有4个成员端口且为选中状态，聚合组2中有2个成员端口且为选中状态，聚合组3中有2个成员端口且为选中状态。                                                       

[Switch]display link-aggregation verbose                                       

Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing                 

Port Status: S -- Selected, U -- Unselected, I -- Individual                   

Flags:  A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,               

        D -- Synchronization, E -- Collecting, F -- Distributing,              

        G -- Defaulted, H -- Expired                                           

Aggregate Interface: Bridge-Aggregation1                                       

Aggregation Mode: Dynamic                                                      

Loadsharing Type: Shar                                                         

System ID: 0x8000, 741f-4a56-9890                                              

Local:                                                                         

  Port             Status  Priority Oper-Key  Flag                             

--------------------------------------------------------------------------------

  XGE2/2/0/3       S       32768    3         {ACDEF}                          

  XGE2/2/0/4       S       32768    3         {ACDEF}                          

  XGE2/5/0/3       S       32768    3         {ACDEF}                          

  XGE2/5/0/4       S       32768    3         {ACDEF}                          

Remote:                                                                        

  Actor            Partner Priority Oper-Key  SystemID               Flag      

--------------------------------------------------------------------------------

  XGE2/2/0/3       5       32768    1         0x8000, 50da-005b-8b98 {ACDEF}   

  XGE2/2/0/4       6       32768    1         0x8000, 50da-005b-8b98 {ACDEF}   

  XGE2/5/0/3       11      32768    1         0x8000, 50da-005b-8b98 {ACDEF}   

  XGE2/5/0/4       12      32768    1         0x8000, 50da-005b-8b98 {ACDEF}   

Aggregate Interface: Bridge-Aggregation2                                       

Aggregation Mode: Static                                                       

Loadsharing Type: Shar                                                          

  Port             Status  Priority Oper-Key                                   

--------------------------------------------------------------------------------

  XGE2/2/0/1       S       32768    1                                          

  XGE2/2/0/2       S       32768    1                                          

Aggregate Interface: Bridge-Aggregation3                                       

Aggregation Mode: Static                                                       

Loadsharing Type: Shar                                                         

  Port             Status  Priority Oper-Key                                   

--------------------------------------------------------------------------------

  XGE2/5/0/1       S       32768    2                                          

  XGE2/5/0/2       S       32768    2                                          

·              配置成员编号时，必须保证不同AC设备之间成员编号唯一，且需重启该设备后配置才可生效。

·              配置成员域编号时，必须保证各成员AC设备之间域编号相同。

·              每个成员AC设备上只能创建与其成员编号对应的IRF逻辑端口，给IRF逻辑端口添加物理成员口后，必须保存配置重启该成员设备或者执行激活IRF配置后才可生效，无线控制器业务板的所有内联口均支持加入IRF逻辑端口。

·              IRF与框式交换机的IRF链路和业务链路之间需二层隔离。

·              如果存在多条IRF链路，需在框式交换机将多条链路进行聚合。

·              建议在交换机Switch将与IRF堆叠口连接的端口配置为access口。

·              IRF建立成功后再在IRF上配置二层动态聚合口。

·              交换机Switch上与IRF端口连接的端口需去使能生成树功能。

·              License可在IRF建立之前也可在建立之后安装，可在单台成员设备上也可在每个成员设备上都安装，每个AC成员设备都可共享所有AC成员设备上License叠加的总和。且密钥ak文件只能被安装在其所在的AC成员设备上。

·              配置时如果使用到文件系统中某个文件，需先指定成员编号，再指定该文件所在具体位置，如不指定成员编号则直接进入主设备的文件系统。