WX6112E两两堆叠与WA1208E-GPH20三层组网外加QINQ的典型配置

WX6112E两两堆叠与WA1208E-GPH20三层组网外加QINQ的典型配置

一、  组网需求：

  客户要求WX6112E两两做堆叠，与WA1208E-GPH20形成三层组网，AP的管理地址采用私网网段，管理vlan15 ，网关起在离AP最近的三层设备上。并且跑业务的时候，不同的热点采用不同的业务vlan号，并且不同业务vlan要在WA6112E上打上相对应的外层标签。并且采用集中转发和本地转发并用的形式。

二、  组网图：

  2台WX6112E用万兆光口进行irf2堆叠，千兆光口与BRAS相连。AP上联poe交换机，poe交换机上联汇聚交换机，汇聚交换机上联BRAS。

          

          

三、  配置步骤：

WX6112E交换板上的配置如下：

 

#

 irf domain 3344                                   //irf堆叠配置

 irf mac-address persistent always

 irf auto-update enable

 irf auto-merge enable

 undo irf link-delay

 irf member 1 priority 32

 irf member 3 priority 2

#

 domain default enable system

#

 telnet server enable

#

switch-mode standard chassis 1

switch-mode normal chassis 1 slot 0

switch-mode normal chassis 1 slot 2

switch-mode normal chassis 1 slot 8

switch-mode normal chassis 1 slot 10

switch-mode standard chassis 3

switch-mode normal chassis 3 slot 0

switch-mode normal chassis 3 slot 2

switch-mode normal chassis 3 slot 8

switch-mode normal chassis 3 slot 10

#

vlan 1

#

vlan 15

#

vlan 300

#

vlan 301

#

vlan 304

#

vlan 305

#

vlan 311

#

vlan 1001 to 1040

#

vlan 1044

#

vlan 1046

#

vlan 1047

#

vlan 1066

#

vlan 1091

#

vlan 1103

#

vlan 1106

#

vlan 1114

#

vlan 1134

#

vlan 1145

#

vlan 1171

#

vlan 1257

#

vlan 4092

#

domain system

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#                                                 //灵活QINQ配置

traffic classifier SheWaiXueYuan-1_nei_1001 operator and  

 if-match customer-vlan-id 1001

traffic classifier SheWaiXueYuan-2_nei_1002 operator and

 if-match customer-vlan-id 1002

traffic classifier SheWaiXueYuan-3_nei_1003 operator and

 if-match customer-vlan-id 1003

traffic classifier TiYuXueYuan_nei_1030 operator and

 if-match customer-vlan-id 1030

traffic classifier JinJiGuanLi_nei_1001 operator and

 if-match customer-vlan-id 1001

traffic classifier JiaoTongXueYuan_nei_1002 operator and

 if-match customer-vlan-id 1002

traffic classifier AnYiDa_nei_1004 operator and

 if-match customer-vlan-id 1004

traffic classifier XinHuaZhuanXiu-Modian_nei_1013 operator and

 if-match customer-vlan-id 1013

traffic classifier YouDianXueYuan_nei_1005 operator and

 if-match customer-vlan-id 1005

traffic classifier AnZhiXueYuan-Modian_nei_1004 operator and

 if-match customer-vlan-id 1004

#

traffic behavior SheWaiXueYuan-1_wai_1044

 nest top-most vlan-id 1044

traffic behavior SheWaiXueYuan-2_wai_1046

 nest top-most vlan-id 1046

traffic behavior SheWaiXueYuan-3_wai_1047

 nest top-most vlan-id 1047

traffic behavior TiYuXueYuan_wai_1106

 nest top-most vlan-id 1106

traffic behavior JinJiGuanLi_wai_1066

 nest top-most vlan-id 1066

traffic behavior JiaoTongXueYuan_wai_1114

 nest top-most vlan-id 1114

traffic behavior AnYiDa_wai_1257

 nest top-most vlan-id 1257

traffic behavior XinHuaZhuanXiu-Modian_wai_1171

 nest top-most vlan-id 1171

traffic behavior YouDianXueYuan_wai_1091

 nest top-most vlan-id 1091

traffic behavior AnZhiXueYuan-Modian_wai_1103

 nest top-most vlan-id 1103

traffic behavior AnZhiXueYuan-Modian_wai_1257

 nest top-most vlan-id 1257

#

qos policy qosAC3slot8_ip18

 classifier YouDianXueYuan_nei_1005 behavior YouDianXueYuan_wai_1091

 classifier JiaoTongXueYuan_nei_1002 behavior JiaoTongXueYuan_wai_1114

 classifier AnYiDa_nei_1004 behavior AnYiDa_wai_1257

 classifier JinJiGuanLi_nei_1001 behavior JinJiGuanLi_wai_1066

 classifier TiYuXueYuan_nei_1030 behavior TiYuXueYuan_wai_1106

qos policy qosAc4slot10_ip27

qos policy qosAc4slot8_ip26

 classifier AnZhiXueYuan-Modian_nei_1004 behavior AnZhiXueYuan-Modian_wai_1103

 classifier SheWaiXueYuan-1_nei_1001 behavior SheWaiXueYuan-1_wai_1044

 classifier SheWaiXueYuan-2_nei_1002 behavior SheWaiXueYuan-2_wai_1046

 classifier SheWaiXueYuan-3_nei_1003 behavior SheWaiXueYuan-3_wai_1047

qos policy qosAc3slot10_ip19

 classifier XinHuaZhuanXiu-Modian_nei_1013 behavior XinHuaZhuanXiu-Modian_wai_1171

 

#                                    //AP管理的地址池配置                              

dhcp server ip-pool huochezhan_se800-1_jizhong_pool1

 network 10.205.136.0 mask 255.255.248.0

 gateway-list 10.205.136.1

 option 43 hex  800B0000 023D84D7 1A3D84D7 13

#

dhcp server ip-pool weigangju_se800-1_jizhong_pool1

 network 10.203.236.0 mask 255.255.254.0

 gateway-list 10.203.236.1

 option 43 hex  800B0000 023D84D7 123D84D7 1A

#

dhcp server ip-pool weigangju_se800-2_jizhong_pool1

 network 10.202.254.0 mask 255.255.254.0

 gateway-list 10.202.254.1

 option 43 hex  800B0000 023D84D7 123D84D7 1A

#

dhcp server ip-pool wulidun_se800_jizhong_pool1

 network 10.203.228.0 mask 255.255.254.0

 gateway-list 10.203.228.1

 option 43 hex  800B0000 023D84D7 123D84D7 1A

#

user-group system

#                                         //远程登录管理的配置

local-user admin

 password cipher Q^BQSRNEC0CQ=^Q`MAF4<1!!

 authorization-attribute level 3

 service-type telnet

#                                      

interface Bridge-Aggregation2

 description TO--75E-1-2

 port link-type trunk

 port trunk permit vlan all

#                                        //与AC内联口的配置      

interface Bridge-Aggregation308

port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 304 to 305 311 tagged

 port hybrid vlan 1066 1091 1114 1257 untagged

 qinq enable

 qinq transparent-vlan 15

#                                       //与AC内联口的配置

interface Bridge-Aggregation310

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 300 to 301 tagged

 port hybrid vlan 1171 untagged

 qinq enable

 qinq transparent-vlan 15

#                                      //与AC内联口的配置

interface Bridge-Aggregation408

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 300 to 301 tagged

 port hybrid vlan 1044 1046 to 1047 1103 untagged

 qinq enable

 qinq transparent-vlan 15

#                                     //与AC内联口的配置

interface Bridge-Aggregation410

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 tagged

 port hybrid vlan 1103 1171 untagged

 qinq enable

 qinq transparent-vlan 15

#

interface NULL0

#                                    //irf2的bfd mad检测的配置                          

interface Vlan-interface4092

 mad bfd enable

 mad ip address 192.168.0.5 255.255.255.252 member 1

 mad ip address 192.168.0.6 255.255.255.252 member 3

#

interface GigabitEthernet1/0/0/1

 port link-mode bridge

#

interface GigabitEthernet1/0/0/2

 port link-mode bridge

#

interface GigabitEthernet1/0/0/3

 port link-mode bridge

#

interface GigabitEthernet1/0/0/4

 port link-mode bridge

#

interface GigabitEthernet1/0/0/5

 port link-mode bridge

#

interface GigabitEthernet1/0/0/6

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan all

 speed 1000    

 duplex full

#

interface GigabitEthernet1/0/0/7

 port link-mode bridge

 loopback-detection enable

#

interface GigabitEthernet1/0/0/8

 port link-mode bridge

#

interface GigabitEthernet1/0/0/9

 port link-mode bridge

#

interface GigabitEthernet1/0/0/10

 port link-mode bridge

#

interface GigabitEthernet1/0/0/11

 port link-mode bridge

#

interface GigabitEthernet1/0/0/12

 port link-mode bridge

#

interface GigabitEthernet1/0/0/13

 port link-mode bridge

#

interface GigabitEthernet1/0/0/14

 port link-mode bridge

#

interface GigabitEthernet1/0/0/15

 port link-mode bridge

#

interface GigabitEthernet1/0/0/16

 port link-mode bridge

#

interface GigabitEthernet1/0/0/17

 port link-mode bridge

#

interface GigabitEthernet1/0/0/18

 port link-mode bridge

#

interface GigabitEthernet1/0/0/19

 port link-mode bridge

#

interface GigabitEthernet1/0/0/20

 port link-mode bridge

#

interface GigabitEthernet1/0/0/21

 port link-mode bridge

#

interface GigabitEthernet1/0/0/22

 port link-mode bridge

#

interface GigabitEthernet1/0/0/23

 port link-mode bridge

#

interface GigabitEthernet1/0/0/24

 port link-mode bridge

#

interface GigabitEthernet1/0/0/25

 port link-mode bridge

 shutdown

#

interface GigabitEthernet1/0/0/26

 port link-mode bridge

 shutdown

#

interface GigabitEthernet1/0/0/27

 port link-mode bridge

 shutdown

#              

interface GigabitEthernet1/0/0/28

 port link-mode bridge

 shutdown

#

interface GigabitEthernet1/0/0/29

 port link-mode bridge

 shutdown

#

interface GigabitEthernet1/0/0/30

 port link-mode bridge

 shutdown

#

interface GigabitEthernet1/0/0/31

 port link-mode bridge

 shutdown

#

interface GigabitEthernet1/0/0/32

 port link-mode bridge

 shutdown

#

interface GigabitEthernet3/0/0/1

 port link-mode bridge

#              

interface GigabitEthernet3/0/0/2

 port link-mode bridge

#

interface GigabitEthernet3/0/0/3

 port link-mode bridge

#

interface GigabitEthernet3/0/0/4

 port link-mode bridge

#

interface GigabitEthernet3/0/0/5

 port link-mode bridge

#

interface GigabitEthernet3/0/0/6

 port link-mode bridge

#

interface GigabitEthernet3/0/0/7

 port link-mode bridge

#

interface GigabitEthernet3/0/0/8

 port link-mode bridge

#

interface GigabitEthernet3/0/0/9

 port link-mode bridge

#

interface GigabitEthernet3/0/0/10

 port link-mode bridge

#

interface GigabitEthernet3/0/0/11

 port link-mode bridge

#

interface GigabitEthernet3/0/0/12

 port link-mode bridge

#

interface GigabitEthernet3/0/0/13

 port link-mode bridge

#

interface GigabitEthernet3/0/0/14

 port link-mode bridge

#

interface GigabitEthernet3/0/0/15

 port link-mode bridge

#

interface GigabitEthernet3/0/0/16

 port link-mode bridge

#

interface GigabitEthernet3/0/0/17

 port link-mode bridge

#

interface GigabitEthernet3/0/0/18

 port link-mode bridge

#

interface GigabitEthernet3/0/0/19

 port link-mode bridge

#

interface GigabitEthernet3/0/0/20

 port link-mode bridge

#

interface GigabitEthernet3/0/0/21

 port link-mode bridge

#

interface GigabitEthernet3/0/0/22

 port link-mode bridge

#

interface GigabitEthernet3/0/0/23

 port link-mode bridge

#

interface GigabitEthernet3/0/0/24

 port link-mode bridge

#              

interface GigabitEthernet3/0/0/25

 port link-mode bridge

 shutdown

#

interface GigabitEthernet3/0/0/26

 port link-mode bridge

 shutdown

#

interface GigabitEthernet3/0/0/27

 port link-mode bridge

 shutdown

#

interface GigabitEthernet3/0/0/28

 port link-mode bridge

 shutdown

#

interface GigabitEthernet3/0/0/29

 port link-mode bridge

 shutdown

#

interface GigabitEthernet3/0/0/30

 port link-mode bridge

 shutdown      

#

interface GigabitEthernet3/0/0/31

 port link-mode bridge

 shutdown

#

interface GigabitEthernet3/0/0/32

 port link-mode bridge

 shutdown

#

interface M-Ethernet1/0/0/0

#

interface Ten-GigabitEthernet1/0/0/34

 port link-mode bridge

 port access vlan 4092

#

interface Ten-GigabitEthernet1/2/0/1

 port link-mode bridge

 description TO--75E-1--T1/2/0/1

 port link-type trunk

 port trunk permit vlan all

 port link-aggregation group 2

#

interface Ten-GigabitEthernet1/2/0/2

 port link-mode bridge

#

interface Ten-GigabitEthernet1/2/0/3

 port link-mode bridge

#

interface Ten-GigabitEthernet1/2/0/4

 port link-mode bridge

#

interface Ten-GigabitEthernet1/8/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 304 to 305 311 tagged

 port hybrid vlan 1066 1091 1114 1257 untagged

 qinq enable

 qinq transparent-vlan 15

 qos apply policy qosAC3slot8_ip18 inbound

 port link-aggregation group 308

#

interface Ten-GigabitEthernet1/8/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 304 to 305 311 tagged

 port hybrid vlan 1066 1091 1114 1257 untagged

 qinq enable

 qinq transparent-vlan 15

 qos apply policy qosAC3slot8_ip18 inbound

 port link-aggregation group 308

#

interface Ten-GigabitEthernet1/10/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 300 to 301 tagged

 port hybrid vlan 1171 untagged

 qinq enable

 qinq transparent-vlan 15

 qos apply policy qosAc3slot10_ip19 inbound

 port link-aggregation group 310

#

interface Ten-GigabitEthernet1/10/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 300 to 301 tagged

 port hybrid vlan 1171 untagged

 qinq enable

 qinq transparent-vlan 15

 qos apply policy qosAc3slot10_ip19 inbound

 port link-aggregation group 310

#

interface Ten-GigabitEthernet3/0/0/34

 port link-mode bridge

#

interface Ten-GigabitEthernet3/2/0/1

 port link-mode bridge

#

interface Ten-GigabitEthernet3/2/0/2

 port link-mode bridge

 description TO--75E-2--T3/2/0/2

 port link-type trunk

 port trunk permit vlan all

 port link-aggregation group 2

#

interface Ten-GigabitEthernet3/2/0/3

 port link-mode bridge

#

interface Ten-GigabitEthernet3/2/0/4

 port link-mode bridge

#

interface Ten-GigabitEthernet3/8/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 300 to 301 tagged

 port hybrid vlan 1044 1046 to 1047 1103 untagged

 qinq enable

 qinq transparent-vlan 15

 qos apply policy qosAc4slot8_ip26 inbound

 port link-aggregation group 408

#

interface Ten-GigabitEthernet3/8/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 300 to 301 tagged

 port hybrid vlan 1044 1046 to 1047 1103 untagged

 qinq enable

 qinq transparent-vlan 15

 qos apply policy qosAc4slot8_ip26 inbound

 port link-aggregation group 408

#

interface Ten-GigabitEthernet3/10/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 tagged

 port hybrid vlan 1103 1171 untagged

 qinq enable

 qinq transparent-vlan 15

 qos apply policy qosAc4slot10_ip27 inbound

 port link-aggregation group 410

#

interface Ten-GigabitEthernet3/10/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 tagged

 port hybrid vlan 1103 1171 untagged

 qinq enable

 qinq transparent-vlan 15

 qos apply policy qosAc4slot10_ip27 inbound

 port link-aggregation group 410

#

interface Ten-GigabitEthernet1/0/0/33

 description TO--75E-4--T3/0/0/33

#

interface Ten-GigabitEthernet3/0/0/33

 description TO--75E-3--T1/0/0/33

 

#                                       //配置指向BRAS的路由                              

 ip route-static 0.0.0.0 0.0.0.0 61.132.215.50

 ip route-static 10.202.254.0 255.255.254.0 61.132.214.17

 ip route-static 10.203.228.0 255.255.254.0 61.132.214.45

 ip route-static 10.203.236.0 255.255.254.0 61.132.214.17

 ip route-static 10.205.136.0 255.255.248.0 61.132.214.1

 ip route-static 10.205.136.0 255.255.248.0 61.132.214.5

#

 dhcp enable

#

 load xml-configuration

#

user-interface aux 1/0 1/1

user-interface aux 3/0 3/1

user-interface vty 0 4

 authentication-mode scheme

 user privilege level 3

 idle-timeout 60 0

user-interface vty 5 15

 authentication-mode scheme

 user privilege level 3

#

irf-port 1/1

 port group interface Ten-GigabitEthernet1/0/0/33 mode enhanced

#

irf-port 3/2

 port group interface Ten-GigabitEthernet3/0/0/33 mode enhanced

#

return

 

AC板上的配置：

#

 domain default enable system

#

 telnet server enable

#

 port-security enable

#

vlan 1

#

vlan 15

#

vlan 302 to 303

#

vlan 309 to 310

#

vlan 1001 to 1002

#

vlan 1003      

#

vlan 1004

#

vlan 1005

#

vlan 1006

#

vlan 1007 to 1009

#

vlan 1010

#

vlan 1011 to 1012

#

vlan 1015

#

domain system

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#

user-group system

 group-attribute allow-guest

#

local-user admin

 password cipher Q^BQSRNEC0CQ=^Q`MAF4<1!!

 authorization-attribute level 3

 service-type telnet

 service-type web

local-user root

 password cipher 0#R9GI2B:5;Q=^Q`MAF4<1!!

 authorization-attribute level 1

 service-type telnet

#

wlan rrm

 dot11a mandatory-rate 6 12 24

 dot11a supported-rate 9 18 36 48 54

 dot11b mandatory-rate 1 2

 dot11b supported-rate 5.5 11

 dot11g mandatory-rate 1 2 5.5 11

 dot11g supported-rate 6 9 12 18 24 36 48 54

 dot11bg calibrate-power

#

wlan service-template 1 clear

 ssid ChinaNet

 bind WLAN-ESS 1

 service-template enable

#                                //与交换板的内联口的配置

interface Bridge-Aggregation1

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 302 to 303 309 to 310 1003 to 1006 1010 1015 tagged

#

interface NULL0

#

interface Vlan-interface1

#

interface M-GigabitEthernet1/0/0

#

interface Ten-GigabitEthernet1/0/1

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 302 to 303 309 to 310 1003 to 1006 1010 1015 tagged

 port link-aggregation group 1

#

interface Ten-GigabitEthernet1/0/2

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 302 to 303 309 to 310 1003 to 1006 1010 1015 tagged

 port link-aggregation group 1

#

interface WLAN-ESS1

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1001 to 1012 1015 untagged

#                                         //AP注册模板的配置（集中）。

wlan ap ahlhsw1fsh103 model WA1208E-GP-H20 id 960

priority level 7

 serial-id 210235A0GNC118006317

 radio 1

  channel 1

  service-template 1 vlan-id 1010

  radio enable

#                                         //AP注册模板的配置（本地）。

wlan ap aotizx3d_4f_1 model WA1208E-GP-H20 id 71

 map-configuration fitap_local.txt

 priority level 7

 serial-id 210235A0C5B099000268

 radio 1

  service-template 1 vlan-id 1001

  radio enable

 

集中转发时poe交换机的配置：

#

 loopback-detection enable

#

radius scheme system

#

domain system

#

local-user admin

 password cipher hnsf!@#

 service-type telnet

 level 3

#

vlan 1

#

vlan 15

#

vlan 40

#

interface Aux1/0/0

#                                            //交换机连接AP端口配置                                    

interface Ethernet1/0/1

 poe enable

 port access vlan 15

 loopback-detection enable

#

interface Ethernet1/0/2

 poe enable

 port access vlan 15

 loopback-detection enable

#

interface Ethernet1/0/3

 poe enable

 port access vlan 15

 loopback-detection enable

#

interface Ethernet1/0/4

 poe enable

 port access vlan 15

 loopback-detection enable

#                                 //交换机上联口的配置

interface GigabitEthernet1/1/1

 port link-type trunk

 port trunk permit vlan all

#

interface GigabitEthernet1/1/2

 port link-type trunk

 port trunk permit vlan all

 shutdown

#

interface GigabitEthernet1/2/1

 port link-type trunk

 port trunk permit vlan all

#

interface GigabitEthernet1/2/2

 port link-type trunk

 port trunk permit vlan all

 shutdown

#

Return

 

本地转发时交换机的配置：

#

 loopback-detection enable

#

radius scheme system

#

domain system

#

vlan 1

#

vlan 15

#

vlan 40

#

vlan 1001 to 1050

#

interface Aux1/0/0

#                                          //连接AP的端口配置                                    

interface Ethernet1/0/1

 poe enable

 port link-type trunk

 port trunk permit vlan all

 port trunk pvid vlan 15

 loopback-detection enable               

#                                        

interface Ethernet1/0/2                 

 port link-type trunk                    

 port trunk permit vlan all              

 port trunk pvid vlan 15

 loopback-detection enable

#

interface Ethernet1/0/3                 

 port link-type trunk                    

 port trunk permit vlan all              

 port trunk pvid vlan 15

 loopback-detection enable

#

interface Ethernet1/0/4               

 port link-type trunk                    

 port trunk permit vlan all              

 port trunk pvid vlan 15

 loopback-detection enable

#                                           //上行口的配置

interface GigabitEthernet1/1/1

 duplex full

 speed 100

 port link-type trunk

 port trunk permit vlan all

                

四、  配置关键点：

1、配置交换板上与AC的内连口的时候一定注意将外层标签配置成untag应为数据流回来的时候是需要去掉外标签的，否则AC板卡无法识别。

2、AP地址池配置完成后，一定要配一条指向网关的路由，要保证网关的可达性。

3、irf配置后一定要配置检测机制，WX6112E堆叠时一定要用万兆光口进行堆叠。