最佳答案
模拟器可以堆叠,未成功需检查配置及步骤,方法如下:
配置基本IRF
[SWA]
interface Ten-GigabitEthernet 1/0/49
shutdown
interface Ten-GigabitEthernet 1/0/50
shutdown
#
irf member 1 priority 32 //修改优先级,将SWA做为Master设备
#
irf-port 1/1 //创建逻辑端口
port group interface Ten-GigabitEthernet 1/0/49
port group interface Ten-GigabitEthernet 1/0/50
#
irf-port-configuration active //激活逻辑端口
#
interface Ten-GigabitEthernet 1/0/49
undo shutdown
interface Ten-GigabitEthernet 1/0/50
undo shutdown
#
Save //保存配置
[SWB]
interface Ten-GigabitEthernet 1/0/49
shutdown
interface Ten-GigabitEthernet 1/0/50
shutdown
#
irf member 1 renumber 2 //Slave设备将member号改为2
#
irf-port 1/2 //创建逻辑端口
port group interface Ten-GigabitEthernet 1/0/49
port group interface Ten-GigabitEthernet 1/0/50
#
irf-port-configuration active //激活逻辑端口
#
interface Ten-GigabitEthernet 1/0/49
undo shutdown
interface Ten-GigabitEthernet 1/0/50
undo shutdown
#
Save //保存配置
#
reboot //Slave设备重启
配置基于BFD方式的MAD检测
vlan 3
port GigabitEthernet 1/0/5 GigabitEthernet 2/0/5 //新增一条BFD检测链路
#
interface Vlan-interface3
mad bfd enable
mad ip address 192.168.3.1 255.255.255.0 member 1 //创建主设备mad地址
mad ip address 192.168.3.2 255.255.255.0 member 2 //创建备设备mad地址
undo shutdown
#
interface GigabitEthernet1/0/5 //将BFD接口STP功能关闭
undo stp enable
#
interface GigabitEthernet2/0/5 //将BFD接口STP功能关闭
undo stp enable
#
save //一定要先保存在测试
(0)
您好,请知:
HCL模拟器中的S5820和F1060是可以进行IRF堆叠的。
以下是HCL模拟器中的S5820、F1060的IRF配置案例,请参考:
https://zhiliao.h3c.com/theme/details/96463
S5820:
1、1号设备关键配置如下:
[H3C]irf member 1 renumber 1 //将1号设备设定为成员1
Renumbering the member ID may result in configuration change or loss. Continue?[Y/N]:y
[H3C]int range Ten-GigabitEthernet 1/0/50 to Ten-GigabitEthernet 1/0/51
[H3C-if-range]shutdown
[H3C-if-range]quit
[H3C]irf-port 1/1 //将物理端口绑定到IRF端口
[H3C-irf-port1/1]port group interface Ten-GigabitEthernet 1/0/50
[H3C-irf-port1/1]port group interface Ten-GigabitEthernet 1/0/51
[H3C-irf-port1/1]quit
[H3C]int range Ten-GigabitEthernet 1/0/50 to Ten-GigabitEthernet 1/0/51
[H3C-if-range]undo shutdown
[H3C-if-range]quit
[H3C]irf-port-configuration active //激活IRF
[H3C]save
2、2号设备关键配置点如下:
[H3C]irf member 1 renumber 2 //将2号设备设定为成员2
[H3C]int range Ten-GigabitEthernet 1/0/50 to Ten-GigabitEthernet 1/0/51
[H3C-if-range]shutdown
[H3C-if-range]quit
[H3C]irf-port 1/2 //将物理端口绑定到IRF端口
[H3C-irf-port1/2]port group interface Ten-GigabitEthernet 1/0/50
[H3C-irf-port1/2]port group interface Ten-GigabitEthernet 1/0/51
[H3C-irf-port1/2]quit
[H3C]int range Ten-GigabitEthernet 1/0/50 to Ten-GigabitEthernet 1/0/51
[H3C-if-range]undo shutdown
[H3C-if-range]quit
[H3C]irf-port-configuration active //激活IRF
[H3C]save
3、分别将成员1设备、成员2设备重启
4、测试
<H3C>dis irf //查看IRF的信息,看到成员1和成员2的设备信息都在一起
MemberID Role Priority CPU-Mac Description
*+1 Master 1 30bd-490a-0104 ---
2 Standby 1 30bd-525e-0204 ---
--------------------------------------------------
* indicates the device is the master.
+ indicates the device through which the user logs in.
The bridge MAC of the IRF is: 30bd-490a-0100
Auto upgrade : yes
Mac persistent : 6 min
Domain ID : 0
<H3C>
<H3C>dis irf link //查看成员1、成员2 IRF链路的状态均为UP
Member 1
IRF Port Interface Status
1 Ten-GigabitEthernet1/0/50 UP
Ten-GigabitEthernet1/0/51 UP
2 disable --
Member 2
IRF Port Interface Status
1 disable --
2 Ten-GigabitEthernet2/0/50 UP
Ten-GigabitEthernet2/0/51 UP
<H3C>
<H3C>dis irf configuration //查看IRF的配置信息
MemberID NewID IRF-Port1 IRF-Port2
1 1 Ten-GigabitEthernet1/0/50 disable
Ten-GigabitEthernet1/0/51
2 2 disable Ten-GigabitEthernet2/0/50
Ten-GigabitEthernet2/0/51
<H3C>
<H3C>dis irf topology //查看IRF的拓扑信息
Topology Info
-------------------------------------------------------------------------
IRF-Port1 IRF-Port2
MemberID Link neighbor Link neighbor Belong To
2 DIS --- UP 1 30bd-490a-0104
1 UP 2 DIS --- 30bd-490a-0104
<H3C>
至此S5820交换机的IRF已配置完成!
F1060:
1、1号设备关键配置点如下:
[H3C]irf member 1 renumber 1 //将1号设备配置为IRF成员1
[H3C]int range GigabitEthernet 1/0/2 to GigabitEthernet 1/0/3
[H3C-if-range]shutdown
[H3C-if-range]quit
[H3C]irf-port 1/1 //将物理端口绑定到IRF端口
[H3C-irf-port1/1]port group interface GigabitEthernet 1/0/2
[H3C-irf-port1/1]port group interface GigabitEthernet 1/0/3
[H3C-irf-port1/1]quit
[H3C]int range GigabitEthernet 1/0/2 to GigabitEthernet 1/0/3
[H3C-if-range]undo shutdown
[H3C-if-range]quit
[H3C]irf-port-configuration active //激活IRF
[H3C]save //保存配置
2、2号设备关键配置点如下:
[H3C]irf member 1 renumber 2 //将2号设备配置为IRF成员2
[H3C]int range GigabitEthernet 1/0/2 to GigabitEthernet 1/0/3
[H3C-if-range]shutdown
[H3C-if-range]quit
[H3C]irf-port 1/2 //将物理端口绑定到IRF口
[H3C-irf-port1/2]port group interface GigabitEthernet 1/0/2
[H3C-irf-port1/2]port group interface GigabitEthernet 1/0/3
[H3C-irf-port1/2]quit
[H3C]int range GigabitEthernet 1/0/2 to GigabitEthernet 1/0/3
[H3C-if-range]undo shutdown
[H3C-if-range]quit
[H3C]irf-port-configuration active //激活IRF
[H3C]save //保存配置
3、分别重启设备1和设备2
4、测试
<H3C>dis irf //查看IRF成员信息,发现设备1和设备2的信息都在一起
MemberID Role Priority CPU-Mac Description
*+1 Master 1 30d3-7ef9-0104 ---
2 Standby 1 30d4-7d89-0204 ---
--------------------------------------------------
* indicates the device is the master.
+ indicates the device through which the user logs in.
The bridge MAC of the IRF is: 30d3-7ef9-0100
Auto upgrade : yes
Mac persistent : 6 min
Domain ID : 0
<H3C>
<H3C>dis irf link //查看IRF链路均为UP
Member 1
IRF Port Interface Status
1 GigabitEthernet1/0/2 UP
GigabitEthernet1/0/3 UP
2 disable --
Member 2
IRF Port Interface Status
1 disable --
2 GigabitEthernet2/0/2 UP
GigabitEthernet2/0/3 UP
<H3C>
<H3C>dis irf configuration //查看IRF配置信息
MemberID NewID IRF-Port1 IRF-Port2
1 1 GigabitEthernet1/0/2 disable
GigabitEthernet1/0/3
2 2 disable GigabitEthernet2/0/2
GigabitEthernet2/0/3
<H3C>
<H3C>dis irf topology //查看IRF拓扑信息
Topology Info
-------------------------------------------------------------------------
IRF-Port1 IRF-Port2
MemberID Link neighbor Link neighbor Belong To
2 DIS --- UP 1 30d3-7ef9-0104
1 UP 2 DIS --- 30d3-7ef9-0104
<H3C>
至此F1060防火墙的IRF已配置完成!
(0)
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论