DRNI双活网关

·     SW1和SW2组成DR系统，SW4通过DR接口接入DR系统。

·     SW1和SW2通过等价路由接入到上行设备SW3。

·     如果SW1或SW2与上行设备SW3的链路故障，报文可以通过路由绕行到对端DR设备处理，不影响服务器与外部网络的通信。

使用最新的HCL支持DRNI特性

·    SW1和SW2配置VLAN接口100作为双活网关。SW1和SW2在VLAN接口100配置相同的IPv4地址和MAC地址，以便用户通过该网关访问外部网络。

·     配置SW1和SW2通过VLAN接口101实现三层互通。如果SW1或SW2与上行设备SW3的链路故障，报文可以通过路由绕行到对端DR设备处理。

(1)     配置Device A

# 配置DRNI系统参数。

system-view

[SW1] drni system-mac 0002-0002-0002

[SW1] drni system-number 1

[SW1] drni system-priority 123

# 配置Keepalive报文的目的IP地址和源IP地址。

[SW1] drni keepalive ip destination 21.1.1.2 source 21.1.1.1

# 配置端口GigabitEthernet1/0/5工作在三层模式，并配置IP地址为Keepalive报文的源IP地址。

[SW1] interface GigabitEthernet 1/0/5

[SW1-GigabitEthernet1/0/5] port link-mode route

[SW1-GigabitEthernet1/0/5] ip address 21.1.1.1 255.255.255.0

[SW1-GigabitEthernet1/0/5] ipv6 address 21::1 64

[SW1-GigabitEthernet1/0/5] quit

# 配置Keepalive链路接口为DRNI保留接口。

[SW1] drni mad exclude interface GigabitEthernet 1/0/5

# 创建动态二层聚合接口1。

[SW1] interface bridge-aggregation 1

[SW1-Bridge-Aggregation1] link-aggregation mode dynamic

[SW1-Bridge-Aggregation1] quit

# 分别将端口GigabitEthernet1/0/3和GigabitEthernet1/0/4加入到聚合组1中。

[SW1] interface GigabitEthernet 1/0/3

[SW1-GigabitEthernet1/0/3] port link-aggregation group 1

[SW1-GigabitEthernet1/0/3] quit

[SW1] interface GigabitEthernet 1/0/4

[SW1-GigabitEthernet1/0/4] port link-aggregation group 1

[SW1-GigabitEthernet1/0/4] quit

# 将二层聚合接口1配置为IPP口。

[SW1] interface bridge-aggregation 1

[SW1-Bridge-Aggregation1] port drni intra-portal-port 1

[SW1-Bridge-Aggregation1] undo port trunk permit vlan 1

[SW1-Bridge-Aggregation1] quit

# 创建动态二层聚合接口3，并配置该接口为DR口1。

[SW1] interface bridge-aggregation 3

[SW1-Bridge-Aggregation3] link-aggregation mode dynamic

[SW1-Bridge-Aggregation3] port drni group 1

[SW1-Bridge-Aggregation3] quit

# 将端口GigabitEthernet1/0/1和GigabitEthernet1/0/2加入到聚合组3中。

[SW1] interface GigabitEthernet 1/0/1

[SW1-GigabitEthernet1/0/1] port link-aggregation group 3

[SW1-GigabitEthernet1/0/1] quit

[SW1] interface GigabitEthernet 1/0/2

[SW1-GigabitEthernet1/0/2] port link-aggregation group 3

[SW1-GigabitEthernet1/0/2] quit

# 创建VLAN 100、VLAN 101。

[SW1] vlan 100

[SW1-vlan100] quit

[SW1] vlan 101

[SW1-vlan101] quit

# 配置二层聚合接口3为Trunk端口，并允许VLAN 100的报文通过。

[SW1] interface bridge-aggregation 3

[SW1-Bridge-Aggregation3] port link-type trunk

[SW1-Bridge-Aggregation3] port trunk permit vlan 100

[SW1-Bridge-Aggregation3] undo port trunk permit vlan 1

[SW1-Bridge-Aggregation3] quit

# 配置接口Vlan-interface100的IPv4地址和MAC地址，使其作为IPv4双活网关，IPv4地址为100.1.1.100，MAC地址为0000-0010-0010。

[SW1] interface vlan-interface 100

[SW1-Vlan-interface100] ip address 100.1.1.100 255.255.255.0

[SW1-Vlan-interface100] mac-address 0000-0010-0010

# 配置Vlan-interface100接口为DRNI保留接口。

[SW1] drni mad exclude interface vlan-interface100

# 创建接口Vlan-interface101，并配置地址，用于DR设备间三层互通。

[SW1] interface vlan-interface 101

[SW1-Vlan-interface101] ip address 101.1.1.1 255.255.255.0

 [SW1-Vlan-interface101] quit

# 配置Vlan-interface101接口为DRNI保留接口。

[SW1] drni mad exclude interface vlan-interface101

# 配置Router ID为3.3.3.3。

[SW1] router id 3.3.3.3

# 配置OSPF，配置VLAN 100、VLAN 101接口使能OSPF，VLAN 100接口在OSPF中静默，实现DR设备间IPv4网络互通。

[SW1] ospf 1

[SW1-ospf-1] silent-interface vlan-interface 100

[SW1-ospf-1] import-route direct

[SW1-ospf-1] area 0

[SW1-ospf-1-area-0.0.0.0] quit

[SW1-ospf-1] quit

[SW1] interface vlan-interface 100

[SW1-Vlan-interface100] ospf 1 area 0.0.0.0

[SW1-Vlan-interface100] quit

[SW1] interface vlan-interface 101

[SW1-Vlan-interface101] ospf 1 area 0.0.0.0

[SW1-Vlan-interface101] quit

# 创建VLAN 32，配置DR上行口GigabitEthernet1/0/6属于VLAN 32。

[SW1] vlan 32

[SW1-vlan32] quit

[SW1] interface GigabitEthernet 1/0/6

[SW1-GigabitEthernet1/0/6] port link-type trunk

[SW1-GigabitEthernet1/0/6] port trunk permit vlan 32

[SW1-GigabitEthernet1/0/6] undo port trunk permit vlan 1

[SW1-GigabitEthernet1/0/6] quit

# 创建VLAN 32接口，配置VLAN 32接口的地址并使能该接口的OSPF功能。

[SW1] interface vlan-interface 32

[SW1-Vlan-interface32] ip address 32.1.1.1 255.255.255.0

[SW1-Vlan-interface32] ospf 1 area 0

[SW1-Vlan-interface32] quit

(2)     配置Device B

# 配置DRNI系统参数。

system-view

[SW2] drni system-mac 0002-0002-0002

[SW2] drni system-number 2

[SW2] drni system-priority 123

# 配置Keepalive报文的目的IP地址和源IP地址。

[SW2] drni keepalive ip destination 21.1.1.1 source 21.1.1.2

# 配置端口GigabitEthernet1/0/5工作在三层模式，并配置IP地址为Keepalive报文的源IP地址。

[SW2] interface GigabitEthernet 1/0/5

[SW2-GigabitEthernet1/0/5] port link-mode route

[SW2-GigabitEthernet1/0/5] ip address 21.1.1.2 255.255.255.0

[SW2-GigabitEthernet1/0/5] ipv6 address 21::2 64

[SW2-GigabitEthernet1/0/5] quit

# 配置Keepalive链路接口为保留接口。

[SW2] drni mad exclude interface GigabitEthernet 1/0/5

# 创建动态二层聚合接口1。

[SW2] interface bridge-aggregation 1

[SW2-Bridge-Aggregation1] link-aggregation mode dynamic

[SW2-Bridge-Aggregation1] quit

# 分别将端口GigabitEthernet1/0/3和GigabitEthernet1/0/4加入到聚合组1中。

[SW2] interface GigabitEthernet 1/0/3

[SW2-GigabitEthernet1/0/3] port link-aggregation group 1

[SW2-GigabitEthernet1/0/3] quit

[SW2] interface GigabitEthernet 1/0/4

[SW2-GigabitEthernet1/0/4] port link-aggregation group 1

[SW2-GigabitEthernet1/0/4] quit

# 将二层聚合接口1配置为IPP口。

[SW2] interface bridge-aggregation 1

[SW2-Bridge-Aggregation1] port drni intra-portal-port 1

[SW2-Bridge-Aggregation1] undo port trunk permit vlan 1

[SW2-Bridge-Aggregation1] quit

# 创建动态二层聚合接口3，并配置该接口为DR口1。

[SW2] interface bridge-aggregation 3

[SW2-Bridge-Aggregation3] link-aggregation mode dynamic

[SW2-Bridge-Aggregation3] port drni group 1

[SW2-Bridge-Aggregation3] quit

# 将端口GigabitEthernet1/0/1和GigabitEthernet1/0/2加入到聚合组3中。

[SW2] interface GigabitEthernet 1/0/1

[SW2-GigabitEthernet1/0/1] port link-aggregation group 3

[SW2-GigabitEthernet1/0/1] quit

[SW2] interface GigabitEthernet 1/0/2

[SW2-GigabitEthernet1/0/2] port link-aggregation group 3

[SW2-GigabitEthernet1/0/2] quit

# 创建VLAN 100、101。

[SW2] vlan 100

[SW2-vlan100] quit

[SW2] vlan 101

[SW2-vlan101] quit

# 配置二层聚合接口3为Trunk端口，并允许VLAN 100的报文通过。

[SW2] interface bridge-aggregation 3

[SW2-Bridge-Aggregation3] port link-type trunk

[SW2-Bridge-Aggregation3] port trunk permit vlan 100

[SW2-Bridge-Aggregation3] undo port trunk permit vlan 1

[SW2-Bridge-Aggregation3] quit

# 配置接口Vlan-interface100的IPv4地址和MAC地址，使其作为IPv4双活网关，IPv4地址为100.1.1.100，MAC地址为0000-0010-0010。

[SW2] interface vlan-interface 100

[SW2-Vlan-interface100] ip address 100.1.1.100 255.255.255.0

[SW2-Vlan-interface100] mac-address 0000-0010-0010

# 配置Vlan-interface100接口为DRNI保留接口。

[SW2] drni mad exclude interface vlan-interface100

# 创建接口Vlan-interface101，并配置其地址，用于DR设备间三层互通。

[SW2] interface vlan-interface 101

[SW2-vlan-interface101] ip address 101.1.1.2 24

[SW2-vlan-interface101] quit

# 配置Vlan-interface101接口为DRNI保留接口。

[SW2] drni mad exclude interface vlan-interface101

# 配置Router ID为4.4.4.4。

[SW2] router id 4.4.4.4

# 配置OSPF，配置VLAN 100、VLAN 101接口使能OSPF，VLAN 100接口在OSPF中静默，实现DR设备间IPv4网络互通。

[SW2] ospf 1

[SW2-ospf-1] silent-interface vlan-interface100

[SW2-ospf-1] import-route direct

[SW2-ospf-1] area 0

[SW2-ospf-1-area-0.0.0.0] quit

[SW2-ospf-1] quit

[SW2] interface vlan-interface 100

[SW2-Vlan-interface100] ospf 1 area 0.0.0.0

[SW2-Vlan-interface100] quit

[SW2] interface vlan-interface 101

[SW2-Vlan-interface101] ospf 1 area 0.0.0.0

[SW2-Vlan-interface101] quit

# 创建VLAN 33，配置DR上行口GigabitEthernet1/0/6属于VLAN 33。

[SW2] vlan 33

[SW2-vlan33] quit

[SW2] interface GigabitEthernet 1/0/6

[SW2-GigabitEthernet1/0/6] port link-type trunk

[SW2-GigabitEthernet1/0/6] port trunk permit vlan 33

[SW2-GigabitEthernet1/0/6] undo port trunk permit vlan 1

[SW2-GigabitEthernet1/0/6] quit

# 创建VLAN 33接口，配置VLAN 33接口的地址并使能该接口的OSPF功能。

[SW2] interface vlan-interface 33

[SW2-Vlan-interface33] ip address 33.1.1.1 255.255.255.0

 [SW2-Vlan-interface33] ospf 1 area 0

 [SW2-Vlan-interface33] quit

(3)     配置SW3

# 创建VLAN 32，将SW3连接Device A的接口GigabitEthernet1/0/1加入VLAN 32，并配置VLAN接口32的地址

system-view

[SW3] vlan 32

[SW3-vlan32] quit

[SW3] interface GigabitEthernet 1/0/1

[SW3-GigabitEthernet1/0/1] port link-type trunk

[SW3-GigabitEthernet1/0/1] port trunk permit vlan 32

[SW3-GigabitEthernet1/0/1] undo port trunk permit vlan 1

[SW3-GigabitEthernet1/0/] quit

[SW3] interface vlan-interface 32

[SW3-Vlan-interface32] ip address 32.1.1.2 24

 [SW3-Vlan-interface32] quit

# 创建VLAN 33，将SW3连接Device B的接口GigabitEthernet1/0/2加入VLAN 33，并配置VLAN接口33的地址

[SW3] vlan 33

[SW3-vlan33] quit

[SW3] interface GigabitEthernet 1/0/2

[SW3-GigabitEthernet1/0/2] port link-type trunk

[SW3-GigabitEthernet1/0/2] port trunk permit vlan 33

[SW3-GigabitEthernet1/0/2] undo port trunk permit vlan 1

[SW3-GigabitEthernet1/0/2] quit

[SW3] interface vlan-interface 33

[SW3-Vlan-interface33] ip address 33.1.1.2 24

 [SW3-Vlan-interface33] quit

# 配置Router ID为5.5.5.5。

[SW3] router id 5.5.5.5

# 配置VLAN 32接口和VLAN 33接口使能OSPF功能。

[SW3] ospf 1

[SW3-ospf-1] import-route direct

[SW3-ospf-1] area 0

[SW3-ospf-1-area-0.0.0.0] quit

[SW3-ospf-1] quit

[SW3] interface vlan-interface 32

[SW3-Vlan-interface32] ospf 1 area 0

[SW3-Vlan-interface32] quit

[SW3] interface vlan-interface 33

[SW3-Vlan-interface33] ospf 1 area 0

[SW3-Vlan-interface33] quit

# 创建VLAN 22，配置与Network1网络连接的接口GigabitEthernet1/0/3加入VLAN 22，并配置VLAN 22接口的地址。

[SW3] vlan 22

[SW3-vlan22] quit

[SW3] interface GigabitEthernet 1/0/3

[SW3-GigabitEthernet1/0/3] port link-type trunk

[SW3-GigabitEthernet1/0/3] port trunk permit vlan 22

[SW3-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[SW3-GigabitEthernet1/0/3] quit

[SW3] interface vlan-interface 22

[SW3-Vlan-interface22] ip address 22.1.1.1 24

 [SW3-Vlan-interface22] quit

(4)     配置SW4

# 创建二层聚合接口3，并配置该接口为动态聚合模式。

system-view

[SW4] interface bridge-aggregation 3

[SW4-Bridge-Aggregation3] link-aggregation mode dynamic

[SW4-Bridge-Aggregation3] quit

# 将端口GigabitEthernet 1/0/1～GigabitEthernet 1/0/4加入到聚合组3中。

[SW4] interface range GigabitEthernet 1/0/1 to GigabitEthernet 1/0/4

[SW4-if-range] port link-aggregation group 3

[SW4-if-range] quit

# 创建VLAN 100。

[SW4] vlan 100

[SW4-vlan100] quit

[SW4] interface vlan-interface 100

[SW4-Vlan-interface100] ip address 100.1.1.101 24

[SW4-Vlan-interface100] quit

# 配置二层聚合接口3为Trunk端口，并允许VLAN 100的报文通过。

[SW4] interface bridge-aggregation 3

[SW4-Bridge-Aggregation3] port link-type trunk

[SW4-Bridge-Aggregation3] port trunk permit vlan 100

[SW4-Bridge-Aggregation3] undo port trunk permit vlan 1

[SW4-Bridge-Aggregation3] quit

#配置默认路由指向网关

[SW4]ip route-static 0.0.0.0 0 100.1.1.100

手动shutdown SW1的上行口

SW4pingSW3