基于IRF做冗余组备份,多条链路做聚合后加入冗余口,再把冗余口加入冗余组里
防火墙插卡冗余组规格最大为32,现场做了三层静态聚合,并且针对不同业务创建了多个不同的聚合子接口,在把主备两边的聚合子接口分别加入冗余口,冗余口再加入冗余组实现track联动,但冗余口数量已经超过32个,无法继续添加冗余口到冗余组
主要配置如下:
聚合子接口加入冗余口
interface Reth38
description zwww-LianTong-7606
member interface Route-Aggregation1.380 priority 100
member interface Route-Aggregation2.380 priority 80
#
interface Reth39
description HuLianWang-LianTong-7606
member interface Route-Aggregation1.383 priority 100
member interface Route-Aggregation2.383 priority 80
#
interface Reth40
description VPN0002-LianTong-7606
member interface Route-Aggregation1.384 priority 100
member interface Route-Aggregation2.384 priority 80
#
interface Reth41
description VPN0021-LianTong-7606
member interface Route-Aggregation1.393 priority 100
member interface Route-Aggregation2.393 priority 80
#
interface Reth205
description TO_BJZWWW-HXJHQ-S10508-01_Untrust
ip address 192.168.105.66 255.255.255.240
member interface Route-Aggregation1.205 priority 100
member interface Route-Aggregation2.205 priority 80
#
interface Reth207
description TO_BJZWWW-TYRZQ-S5130S-01_Trust
member interface Route-Aggregation1.207 priority 100
member interface Route-Aggregation2.207 priority 80
#
interface Reth208
description TO_BJZWWW-FWQJRQ-S5130S-01_Trust
member interface Route-Aggregation1.208 priority 100
member interface Route-Aggregation2.208 priority 80
#
interface Reth209
description TO_BJZWWW-YWGLQ-S5130S-01_Trust
member interface Route-Aggregation1.209 priority 100
member interface Route-Aggregation2.209 priority 80
#
interface Reth210
description H3C0-ZhuanWang-S5120S_Trust
member interface Route-Aggregation1.210 priority 100
member interface Route-Aggregation2.210 priority 80
#
interface Reth249
description HuLianWang-ZhongTa-7606
member interface Route-Aggregation1.249 priority 100
member interface Route-Aggregation2.249 priority 80
#
interface Reth250
description zwww-ZhongTa-7606
member interface Route-Aggregation1.250 priority 100
member interface Route-Aggregation2.250 priority 80
#
interface Reth251
description VPN0002-ZhongTa-7606
member interface Route-Aggregation1.251 priority 100
member interface Route-Aggregation2.251 priority 80
#
interface Reth252
description VPN0021-ZhongTa-7606
member interface Route-Aggregation1.262 priority 100
member interface Route-Aggregation2.262 priority 80
冗余口加入冗余组超规格
redundancy group 1
member interface Reth38
member interface Reth39
member interface Reth40
member interface Reth41
member interface Reth205
member interface Reth207
member interface Reth208
member interface Reth209
member interface Reth210
member interface Reth249
member interface Reth250
member interface Reth251
member interface Reth252
.....................
未加入冗余口无法实现设备端口故障时进行切换,冗余组最大规格为32,为硬件限制
可以通过将聚合口加入冗余口后,创建冗余口子接口1.1,1.2, 2.1, 2.2等,再直接把冗余口整个加入冗余组里面,这样可以实现相同功能
interface Reth 1.1
interface Reth 1.2
interface Reth 1.3
redundancy group 1
member interface Reth1
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作