HCL模拟器下做M-LAG测试（以及和华为配置对比）-二层架构
1.简单二层架构1.1 拓扑图
https://img-blog.csdnimg.cn/direct/a3f1235a9c60433f95ddea2c7b044167.png#pic_center
1.2 配置
1.2.1 Leaf1配置
system-mac必须配置，否则会有一个node处于unknown状态，纵然配置主节点的mac，主节点也须要配置system-mac为本身的mac
## M-LAG配置
m-lag system-mac 0001-0001-0001 # 手动设置MAC，通常建议使用主设备的系统MAC，另一台设备配置需相同
m-lag system-number 1 # 数字小的成为主设备，
m-lag system-priority 130 # 两台的优先级需要一样
m-lag mad exclude interface GigabitEthernet1/0/13 # 配置保留接口，这个接口会在脑裂后不会被关闭
m-lag consistency-check disable # 模拟器中配置完成后，会报一致性检测失败的错，导致接口起不来，使用这条命令能解决，但生产环境中慎用
## keepalive链路配置
interface g1/0/13
ip address 10.1.1.1 255.255.255.252
m-lag keepalive ip destination 10.1.1.2 source 10.1.1.1 # 配置DAD检测接口
## peer-link接口配置
interface Bridge-Aggregation10
link-aggregation mode dynamic
interface GigabitEthernet 1/0/11
port link-aggregation group 10
interface GigabitEthernet 1/0/12
port link-aggregation group 10
interface Bridge-Aggregation10
port m-lag peer-link 1
## M-LAG接口配置
int Bridge-Aggregation 5
port link-type trunk
port trunk permit vlan all
link-aggregation mode dynamic
interface GigabitEthernet 1/0/1
port link-aggregation group 5
int Bridge-Aggregation 5
port m-lag group 5
华为的做法中，peer-link须要关闭STP
1.2.2 Leaf2配置
Leaf2和Leaf1的配置只有渺小的差异
## M-LAG配置
m-lag system-mac 0001-0001-0001
m-lag system-number 2
m-lag system-priority 130
m-lag mad exclude interface GigabitEthernet1/0/13
m-lag consistency-check disable
## keepalive链路配置
interface g1/0/13
ip address 10.1.1.2 255.255.255.252
m-lag keepalive ip destination 10.1.1.1 source 10.1.1.2
## peer-link接口配置
interface Bridge-Aggregation10
link-aggregation mode dynamic
interface GigabitEthernet 1/0/11
port link-aggregation group 10
interface GigabitEthernet 1/0/12
port link-aggregation group 10
interface Bridge-Aggregation10
port m-lag peer-link 1
## M-LAG接口配置
int Bridge-Aggregation 5
port link-type trunk
port trunk permit vlan all
link-aggregation mode dynamic
interface GigabitEthernet 1/0/1
port link-aggregation group 5
int Bridge-Aggregation 5
port m-lag group 5
1.2.3 SW配置
下行交换机上只须要配置链路聚合即可
interface Bridge-Aggregation 5
port link-type trunk
port trunk permit vlan all
link-aggregation mode dynamic
interface range GigabitEthernet 1/0/1 to GigabitEthernet 1/0/2
port link-aggregation group 5
1.3 配置验证
这里只验证基本的通讯即可，因此在三台交换机上都起了一个VLAN100，并测试连通性，主要查看的内容是m-lag配置是否生效，已经天生树是否达到的预期的效果
1.3.1 M-LAG
dis m-lag system
System information
Local system number: 1 Peer system number: 2
Local system MAC: 0001-0001-0001 Peer system MAC: 0001-0001-0001
Local system priority: 130 Peer system priority: 130
Local bridge MAC: a6ca-1833-0100 Peer bridge MAC: a6ca-3325-0200
Local effective role: Primary Peer effective role: Secondary
Health level: 0
Standalone mode on split: Disabled
In standalone mode: No
System timer information
Timer State Value (s) Remaining time (s)
Auto recovery Disabled - -
Restore delay Disabled 300 -
Consistency-check delay Disabled 150 -
Standalone delay Disabled - -
Role to None delay Disabled 60 -
交换机上看到的对端装备为逻辑上的一台装备
dis link-aggregation verbose
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Port Status: S -- Selected, U -- Unselected, I -- Individual
Port: A -- Auto port, M -- Management port, R -- Reference port
Flags:A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
Aggregate Interface: Bridge-Aggregation5
Creation Mode: Manual
Aggregation Mode: Dynamic
Loadsharing Type: Shar
Management VLANs: None
System ID: 0x8000, a6a7-cb71-0300
Local:
Port Status Priority Index Oper-Key Flag
GE1/0/1 S 32768 1 1 {ACDEF}
GE1/0/2 S 32768 2 1 {ACDEF}
Remote:
Actor Priority Index Oper-Key SystemID Flag
GE1/0/1(R) 32768 16387 40005 0x82, 0001-0001-0001 {ACDEF}
GE1/0/2 32768 32771 40005 0x82, 0001-0001-0001 {ACDEF}
1.3.2 天生树
下面是Leaf1和Leaf2上关于VLAN100的天生树信息
dis stp ins 0 int b5
--------------
Bridge ID : 32768.0001-0001-0001
Bridge times : Hello 2s MaxAge 20s FwdDelay 15s MaxHops 20
Root ID/ERPC : 32768.0001-0001-0001, 0
RegRoot ID/IRPC : 32768.0001-0001-0001, 0
RootPort ID : 0.0
BPDU-Protection : Disabled
BPDU Filter : Disabled
Bridge Config-
Digest-Snooping : Disabled
TC or TCN received: 15
Time since last TC: 0 days 0h:6m:52s
--------
Port protocol : Enabled
Port role : Designated Port (Boundary)
Port ID : 128.5125
Port cost(Legacy) : Config=auto, Active=18
Desg.bridge/port : 32768.0001-0001-0001, 128.1029
Port edged : Config=disabled, Active=disabled
Port filter : Config=default, Active=disabled
Point-to-Point : Config=auto, Active=true
Transmit limit : 10 packets/hello-time
TC-Restriction : Disabled
Role-Restriction : Disabled
Protection type : Config=none, Active=none
MST BPDU format : Config=auto, Active=802.1s
Port Config-
Digest-Snooping : Disabled
Rapid transition : True
Num of VLANs mapped : 2
Port times : Hello 2s MaxAge 20s FwdDelay 15s MsgAge 0s RemHops 20
BPDU sent : 208
TCN: 0, Config: 0, RST: 0, MST: 208
BPDU received : 2
TCN: 0, Config: 0, RST: 0, MST: 2
dis stp ins 0 interface b5
--------------
Bridge ID : 32768.0001-0001-0001
Bridge times : Hello 2s MaxAge 20s FwdDelay 15s MaxHops 20
Root ID/ERPC : 32768.0001-0001-0001, 0
RegRoot ID/IRPC : 32768.0001-0001-0001, 0
RootPort ID : 0.0
BPDU-Protection : Disabled
BPDU Filter : Disabled
Bridge Config-
Digest-Snooping : Disabled
TC or TCN received: 20
Time since last TC: 0 days 0h:9m:39s
--------
Port protocol : Enabled
Port role : Designated Port (Boundary)
Port ID : 128.5125
Port cost(Legacy) : Config=auto, Active=18
Desg.bridge/port : 32768.0001-0001-0001, 128.1029
Port edged : Config=disabled, Active=disabled
Port filter : Config=default, Active=disabled
Point-to-Point : Config=auto, Active=true
Transmit limit : 10 packets/hello-time
TC-Restriction : Disabled
Role-Restriction : Disabled
Protection type : Config=none, Active=none
MST BPDU format : Config=auto, Active=802.1s
Port Config-
Digest-Snooping : Disabled
Rapid transition : True
Num of VLANs mapped : 2
Port times : Hello 2s MaxAge 20s FwdDelay 15s MsgAge 0s RemHops 20
BPDU sent : 0
TCN: 0, Config: 0, RST: 0, MST: 0
BPDU received : 0
TCN: 0, Config: 0, RST: 0, MST: 0
可以看到，双方的桥ID都是一模一样的，阐明对于VLAN100，两台leaf交换机都充当了根桥的脚色，实现了逻辑上的一台装备
华为交换机的M-lag组中，主装备会把ID信息自动同步到备装备中，让下游的交换机看到的对端装备是逻辑上的一台，这才气够让LAG创建起来，对于STP，须要手工将两台装备的ID配置成不停，来保证两台交换机都是根桥。
在H3C的交换机上恰好相反，须要在M-lag中手工配置MAC，STP会直接使用这个MAC作为ID的一部门。
免责声明：如果侵犯了您的权益，请联系站长，我们会及时删除侵权内容，谢谢合作！更多信息从访问主页：qidao123.com:ToB企服之家，中国第一个企服评测及商务社交产业平台。
页:
[1]