H3C IRF2配置

前言

IRF2（Intelligent Resilient Framework，智能弹性架构）是H3C自主研发的软件虚拟化技术，通过将多台设备虚拟为一台设备，可以简化网络拓扑，提高管理效率，并能提供1:N的设备级备份，帮助您实现业界领先的企业网、数据中心汇聚/核心层解决方案。本章将为您介绍如果使用多台S5820V2&S5830V2系列交换机组建基于IRF技术的虚拟化设备。

配置要求

本次试验通过2台支持虚拟化交换机进行配置，将两台物理设备进行虚拟化后逻辑合成一台设备。

试验环境

配置过程

主机一：

system-view

[Sysname] interface range ten-gigabitethernet 1/0/49 to ten-gigabitethernet 1/0/50

[Sysname-if-range] shutdown [Sysname-if-range] quit

[Sysname] irf-port 1/1

[Sysname-irf-port1/1] port group interface ten-gigabitethernet 1/0/49 [Sysname-irf-port1/1] port group interface ten-gigabitethernet 1/0/50 [Sysname-irf-port1/1] quit

[Sysname] interface range ten-gigabitethernet 1/0/49 to ten-gigabitethernet 1/0/50

[Sysname-if-range] undo shutdown [Sysname-if-range] quit

[Sysname] irf member 1 priority 31 [Sysname] irf-port-configuration active [Sysname]save

主机二

system-view

[Sysname] irf member 1 renumber 2

Warning: Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y [Sysname] quit reboot system-view

[Sysname] interface range ten-gigabitethernet 2/0/49 to ten-gigabitethernet 2/0/50

[Sysname-if-range] shutdown [Sysname-if-range] quit [Sysname] irf-port 2/2

[Sysname-irf-port2/2] port group interface ten-gigabitethernet 2/0/25 [Sysname-irf-port2/2] port group interface ten-gigabitethernet 2/0/26 [Sysname-irf-port2/2] quit

[Sysname] interface range ten-gigabitethernet 2/0/49 to ten-gigabitethernet 2/0/50

[Sysname-if-range] undo shutdown [Sysname-if-range] quit save system-view

[Sysname] irf-port-configuration active

二层利用LACP进行检测，在数据中心组网中，为了实现更简单的拓扑结构，一般在接入层和汇聚层均采用IRF技术进行整合。先将核心交换机与接入交换机之间互连的4个端口进行两两捆绑，然后开启LACP检测。 [Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation2] link-aggregation mode dynamic [Sysname-Bridge-Aggregation2] mad enable [Sysname-Bridge-Aggregation2]1

二层也还可以利用BFD进行快速检测，在用于BFD MAD检测的接口下必须使用mad ip address命令配置MAD IP地址，而不要配置其它IP地址（包括使用ip address命令配置的普通IP地址、VRRP虚拟IP地址等），以免影响MAD检测功能。（但不推荐，因要将端口如G1/0/1，G2/0/1，G3/0/1，以及接入设备G1/0/1-4划入同一VLAN内，实际情况中很少有有将多个端口划入同一个VLAN）

system-view [Sysname] vlan 1000

[Sysname-vlan1000] port ten-gigabitethernet 1/0/1 ten-gigabitethernet 2/0/1 ten-gigabitethernet 3/0/1 ten-gigabitethernet 4/0/1

[Sysname-vlan3] quit

[Sysname] interface vlan-interface 1000 [Sysname-Vlan-interface1000] mad bfd enable

[Sysname-Vlan-interface1000] mad ip address 192.168.2.1 24 member 1 [Sysname-Vlan-interface1000] mad ip address 192.168.2.2 24 member 2 [Sysname-Vlan-interface1000] mad ip address 192.168.2.3 24 member 3 [Sysname-Vlan-interface1000] mad ip address 192.168.2.4 24 member 4 [Sysname-Vlan-interface1000] quit

因为BFD MAD和生成树功能互斥，所以在用于BFD MAD检测的端口上关闭生成树协议。 [Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-Gigabitethernet-1/0/1] undo stp enable [Sysname-Ten-Gigabitethernet-1/0/1] quit [Sysname] interface ten-gigabitethernet 2/0/1

[Sysname-Ten-Gigabitethernet-2/0/1] undo stp enable [Sysname-Ten-Gigabitethernet-2/0/1] quit [Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-Gigabitethernet-3/0/1] undo stp enable [Sysname-Ten-Gigabitethernet-3/0/1] quit [Sysname] interface ten-gigabitethernet 4/0/1

[Sysname-Ten-Gigabitethernet-4/0/1] undo stp enable [Sysname-Ten-Gigabitethernet-4/0/1] quit