华三M-lag典型配置

Posted 2023-03-08 害怕网络暴力

拓扑

S6850-1

[H3C]ip vpn-instance keepalive
//建立vpn实例，后续给keepalive链路使用
[H3C-vpn-instance-keepalive]qu
[H3C]interface Bridge-Aggregation 1   //创建peer-link链路
[H3C-Bridge-Aggregation1]qu
[H3C]interface range g1/0/3 g1/0/4
[H3C-if-range]port link-aggregation group  1
[H3C-if-range]qu
[H3C]interface Bridge-Aggregation 1
[H3C-Bridge-Aggregation1]port m-lag peer-link 1
[H3C-Bridge-Aggregation1]link-aggregation mode  dynamic

[H3C]interface  Bridge-Aggregation 2    //创建和S6508-3的聚合接口
[H3C-Bridge-Aggregation2]qu
[H3C]interface g1/0/5
[H3C-GigabitEthernet1/0/5]port link-aggregation group  2
[H3C-GigabitEthernet1/0/5]qu
[H3C]interface Bridge-Aggregation 2
[H3C-Bridge-Aggregation2]port m-lag group 2   //绑定m-lag组
[H3C-Bridge-Aggregation2]link-aggregation mode  dynamic

[H3C]interface ragg 1    //创建keepalive链路
[H3C-Route-Aggregation1]qu
[H3C]interface range g1/0/1 g1/0/2
[H3C-if-range]port link-mode route
[H3C-if-range]port link-aggregation group  1
[H3C-if-range]qu
[H3C]interface ragg 1
[H3C-Route-Aggregation1]ip binding vpn-instance  keepalive
Some configurations on the interface are removed.
[H3C-Route-Aggregation1]ip address  1.1.1.1 30
[H3C-Route-Aggregation1]link-aggregation mode  dynamic

[H3C]m-lag mad exclude interface Route-Aggregation 1
//配置M-LAG的Peer-link链路中断后，Keepalive链路为非阻断场景，如果不配置，则会造成二次故障场景产生，当故障设备恢复后会导致M-lag系统来回震荡
[H3C]m-lag restore-delay 180
//当M-lag系统分裂后，重新恢复，备机会等待180s才会将业务接口UP，避免转发黑洞
[H3C]m-lag system-mac 1-1-1
//配置M-lag系统的全局MAC，主要用于LACP的system-id和stp的桥ID
[H3C]m-lag system-number 1
//配置m-lag系统中的角色，主设备配置为1，备设备配置为2
[H3C]m-lag system-priority 123
//配置m-lag中LACP的优先级
[H3C]m-lag standalone enable delay  600
//开启DR设备独立工作功能，仅Peer-link和Keeaplive同时故障时生效，故障后，设备会形成双主，但是与其他设备组成的M-LAG接口lacp会采用独立的system-id与对端进行lacp协商，最终只会有一台设备协商成功，防止了故障场景的转发问题。
[H3C]m-lag keepalive ip destination 1.1.1.2 source 1.1.1.1 vpn-instance keepalive
//配置keepalive链路并指定相关的vpn-instance

S6850-2
端口加入聚合组的配置和-1一样

 m-lag restore-delay 180
 m-lag system-mac 0001-0001-0001
 m-lag system-number 2
 m-lag system-priority 123
 m-lag standalone enable delay 600
 m-lag keepalive ip destination 1.1.1.1 source 1.1.1.2 vpn-instance keepalive

S6850-3

[H3C]interface Bridge-Aggregation 2
[H3C-Bridge-Aggregation2]qu
[H3C]interface range g1/0/5 g1/0/6
[H3C-if-range]port link-aggregation group  2
[H3C-if-range]qu
[H3C]interface Bridge-Aggregation 2
[H3C-Bridge-Aggregation2]link-aggregation mode  dynamic

验证