二层架构(Spine集中式双活+Leaf M-LAG)
Spine1配置 | 配置说明 | Spine2配置 |
system-view immediately | 进入系统视图并设置立即生效模式 | system-view immediately |
sysname Spine1 | Spine设备命名 | sysname Spine2 |
# | # | |
#配置METH口 | #配置METH口 | |
interface Meth0/0/0 | interface Meth0/0/0 | |
ip address 192.108.39.11 24 | 带外管理CE交换机IP地址 | ip address 192.108.39.12 24 |
# | # | |
#配置设备维护管理用户名和密码 | #配置设备维护管理用户名和密码 | |
user-interface con 0 | 配置设备Console密码,必配,安全考虑 | user-interface con 0 |
authentication-mode password | authentication-mode password | |
set authentication password cipher Huawei@123 | set authentication password cipher Huawei@123 | |
# | # | |
user-interface maximum-vty 21 | 配置VTY用户界面最大数目为21个 | user-interface maximum-vty 21 |
user-interface vty 0 20 | user-interface vty 0 20 | |
authentication-mode aaa | 认证模式为aaa | authentication-mode aaa |
user privilege level 3 | 用户级别是3 | user privilege level 3 |
protocol inbound ssh | 指定接入协议为SSH,安全性更高 | protocol inbound ssh |
# | # | |
stelnet server enable | stelnet server enable | |
# | # | |
aaa | 进入aaa视图 | aaa |
local-user huawei password irreversible-cipher Admin@123 | 配置本地用户名huawei,密码是Admin@123,用于日常登陆维护设备 | local-user huawei password irreversible-cipher Admin@123 |
local-user huawei service-type ssh | 指定接入协议类型为SSH | local-user huawei service-type ssh |
local-user huawei level 3 | 设置huawei用户名的用户级别 | local-user huawei level 3 |
# | # | |
ssh user huawei | ssh user huawei | |
ssh user huawei authentication-type password | ssh user huawei authentication-type password | |
ssh user huawei service-type stelnet | ssh user huawei service-type stelnet | |
# | # |
#配置网络设备与AC对接的参数 SNMP | #配置网络设备与AC对接的参数 SNMP | |
snmp-agent sys-info version v3 | SNMP使用V3版本 | snmp-agent sys-info version v3 |
snmp-agent mib-view included iso-view iso | 配置mib-view视图 | snmp-agent mib-view included iso-view iso |
snmp-agent mib-view included nt iso | snmp-agent mib-view included nt iso | |
snmp-agent mib-view included rd iso | snmp-agent mib-view included rd iso | |
snmp-agent mib-view included wt iso | snmp-agent mib-view included wt iso | |
snmp-agent group v3 dc-admin privacy read-view rd write-view wt notify-view nt | 配置SNMP用户组,并将该MIB视图添加到用户组的属性中,使具备读、写、告警上报功能 | snmp-agent group v3 dc-admin privacy read-view rd write-view wt notify-view nt |
snmp-agent usm-user v3 Snmpv3mgr | 配置SNMP用户,用户名是Snmpv3mgr,专门用于与AC控制器对接 | snmp-agent usm-user v3 Snmpv3mgr |
snmp-agent usm-user v3 Snmpv3mgr group dc-admin | 指定用户对应的组名为dc-admin | snmp-agent usm-user v3 Snmpv3mgr group dc-admin |
snmp-agent usm-user v3 Snmpv3mgr authentication-mode sha | 配置认证方式为SHA | snmp-agent usm-user v3 Snmpv3mgr authentication-mode sha |
Huawei12#$ | 认证密码 | Huawei12#$ |
Huawei12#$ | Huawei12#$ | |
snmp-agent usm-user v3 Snmpv3mgr privacy-mode aes128 | 配置加密方式为AES128 | snmp-agent usm-user v3 Snmpv3mgr privacy-mode aes128 |
Huawei12#$ | 加密密码 | Huawei12#$ |
Huawei12#$ | Huawei12#$ | |
snmp-agent trap enable | 使能交换机发送Trap报文 | snmp-agent trap enable |
snmp-agent trap source loopback1 | 指定发送Trap的源接口,此接口为与Agile Controller-DCN对接的管理接口 | snmp-agent trap source loopback1 |
# | # | |
#配置网络设备与AC对接的参数Netconf | #配置网络设备与AC对接的参数Netconf | |
aaa | aaa | |
local-user netconf password irreversible-cipher Admin@123 | 添加一个Netconf的本地用户,用户名是netconf,密码是Admin@123,专门用于与AC控制器对接 | local-user netconf password irreversible-cipher Admin@123 |
local-user netconf service-type ssh | 配置netconf的接入类型,必须为SSH | local-user netconf service-type ssh |
local-user netconf level 3 | local-user netconf level 3 | |
# | # | |
ssh user netconf authentication-type password | 配置SSH用户认证方式 | ssh user netconf authentication-type password |
ssh user netconf service-type snetconf | 配置SSH用户服务方式 | ssh user netconf service-type snetconf |
snetconf server enable | 使能NETCONF功能 | snetconf server enable |
ssh authorization-type default aaa | ssh authorization-type default aaa | |
# | # | |
rsa local-key-pair create | 配置本地RSA密钥对,防止设备重启密钥修改,和AC断链,命令不保存在配置文件中 | rsa local-key-pair create |
# | # | |
#配置LLDP,感知网络拓扑和服务器位置 | #配置LLDP,感知网络拓扑和服务器位置 | |
lldp enable | 使能LLDP | lldp enable |
lldp mdn enable | 使能全局的MDN功能,使所有接口都支持接收非标准发现协议报文,并根据报文的源MAC地址信息唯一地识别MDN邻居。 | lldp mdn enable |
#配置VXLAN的NVE地址和DFS-Group双活网关 | #配置VXLAN的NVE地址和DFS-Group双活网关 | |
interface LoopBack0 | 配置Loopback0,用作VTEP IP,Spine1和Spine2的地址必须配置一样 | interface LoopBack0 |
description VTEP | description VTEP | |
ip address 10.125.99.1 255.255.255.255 | ip address 10.125.99.1 255.255.255.255 | |
# | # | |
interface Nve1 | 配置设备的NVE地址,Spine1和Spine2的地址必须配置一样 | interface Nve1 |
source 10.125.99.1 | source 10.125.99.1 | |
# | # | |
interface LoopBack1 | 配置Loopback1,用作Router-ID/AC带内管理地址/M-LAG和集中式双活网关的DFS-Group/建立BGP EVPN对等体时发送BGP报文的源接口 | interface LoopBack1 |
description AC-MGMT/DFS-GROUP/ROUTER-ID | description AC-MGMT/DFS-GROUP/ROUTER-ID | |
ip address 10.125.98.1 255.255.255.255 | ip address 10.125.98.2 255.255.255.255 | |
# | # | |
dfs-group 1 | 配置dfs-group | dfs-group 1 |
priority 150 | 配置dfs优先级,默认是100 | priority 100 |
source ip 10.125.98.1 | 配置dfs-group的ip地址 | source ip 10.125.98.2 |
# | # | |
active-active-gateway | 配置集中式双活网关,和M-LAG复用DFS组 | active-active-gateway |
peer 10.125.98.2 | peer 10.125.98.1 | |
# | # | |
#配置M-LAG全局配置 | #配置M-LAG全局配置 | |
stp root primary | 配置根桥方式M-LAG; 配置设备参与生成树计算的桥MAC,采用根桥方式配置M-LAG,必须将部署M-LAG的两台设备均作为STP网络中的根桥且配置相同的桥MAC。建议使用DFS主设备的系统MAC作为桥MAC,可以通过display system mac-address命令查询。 | stp root primary |
stp bridge-address xxxx-xxxx-xxxx | stp bridge-address xxxx-xxxx-xxxx | |
# | # | |
port split dimension interface 40GE 1/0/23 split-type 4*10GE | 配置完端口拆分后需要保存配置并重启单板reset slot 1使配置生效。 示例CE12800单板仅配置1块48*10GE和1块24*40GE,为保障Eth-Trunk链路跨板部署,可以将40GE端口拆分为4*10GE,和10GE单板端口加入同一Eth-Trunk口;当配置多块端口类型相同的单板时,可以直接跨板部署,不需要配置端口拆分。 | port split dimension interface 40GE 1/0/23 split-type 4*10GE |
# | # | |
interface Eth-Trunk0 | 配置M-LAG的peer-link口 | interface Eth-Trunk0 |
stp disable | 根桥方式M-LAG,由于两端设备需要模拟成同一个STP根桥,保证设备peer-link接口不会被阻塞掉,需要将接口STP功能去使能 | stp disable |
trunkport 10GE 4/0/46 to 4/0/47 | peer-link成员口建议跨板,保障链路可靠性 示例CE12800单板仅配置1块48*10GE和1块24*40GE,为保障Eth-Trunk链路跨板部署,可以将40GE端口拆分为4*10GE,和10GE单板端口加入同一Eth-Trunk口;当配置多块端口类型相同的单板时,可以直接跨板部署,不需要配置端口拆分。配置完端口拆分后需要保存配置并重启单板reset slot 1使配置生效。 | trunkport 10GE 4/0/46 to 4/0/47 |
trunkport 40GE 1/0/23:1 to 1/0/23:2 | trunkport 40GE 1/0/23:1 to 1/0/23:2 | |
mode lacp-static | 配置静态LACP模式 | mode lacp-static |
peer-link 1 | peer-link 1 | |
# | # | |
#配置与FW互联的管理链路 | #配置与FW互联的管理链路 | |
vlan 11 | vlan 11 | |
interface Vlanif11 | 创建互联接口vlanif11,并在接口创建vrrp备份组 当Spine为CE6855/CE7855时,与FW互联接口只能是vbdif | interface Vlanif11 |
description "to FW1-2" | description "to FW1-2" | |
ip address 10.125.97.58 255.255.255.248 | ip address 10.125.97.59 255.255.255.248 | |
vrrp vrid 1 virtual-ip 10.125.97.57 | vrrp vrid 1 virtual-ip 10.125.97.57 | |
# | # | |
interface Eth-Trunk1 | 配置与FW主设备对接端口配置 注:主备镜像模式防火墙对接网关配置链路捆绑Eth-Trunk时,两端的仅能配置手工负载分担模式,不能配置LACP模式。因为备防火墙不处理LACP报文,导致LACP协商不成功。 | interface Eth-Trunk1 |
description FW_1_MGMT | description FW_1_MGMT | |
trunkport 10GE 4/0/41 | trunkport 10GE 4/0/41 | |
port default vlan 11 | port default vlan 11 | |
dfs-group 1 m-lag 1 | 配置M-LAG接口 | dfs-group 1 m-lag 1 |
# | # | |
interface Eth-Trunk2 | 配置与FW备设备对接端口配置 | interface Eth-Trunk2 |
description FW_2_MGMT | description FW_2_MGMT | |
trunkport 10GE 4/0/42 | trunkport 10GE 4/0/42 | |
port default vlan 11 | port default vlan 11 | |
dfs-group 1 m-lag 2 | 配置M-LAG接口 | dfs-group 1 m-lag 2 |
# | # | |
#配置与FW互联的业务链路 | #配置与FW互联的业务链路 | |
interface Eth-Trunk11 | 配置与FW主设备对接端口配置 注:主备镜像模式防火墙对接网关配置链路捆绑Eth-Trunk时,两端的仅能配置手工负载分担模式,不能配置LACP模式。因为备防火墙不处理LACP报文,导致LACP协商不成功。 | interface Eth-Trunk11 |
trunkport 10GE 4/0/43 | 业务链路的互联IP地址、vlan及来回路由由AC下发: 当Spine为非CE6855/CE7855时,推荐与FW互联为vlanif接口,此处需要预配置接口为trunk类型; 当Spine为CE6855/CE7855时,与FW互联只能使用vbdif接口,此处只需要预配置M-LAG接口。 | trunkport 10GE 4/0/43 |
port link-type trunk | port link-type trunk | |
undo port trunk allow-pass vlan 1 | undo port trunk allow-pass vlan 1 | |
dfs-group 1 m-lag 3 | dfs-group 1 m-lag 3 | |
# | # | |
interface Eth-Trunk12 | 配置与FW备设备对接端口配置 | interface Eth-Trunk12 |
trunkport 10GE 4/0/44 | trunkport 10GE 4/0/44 | |
port link-type trunk | port link-type trunk | |
undo port trunk allow-pass vlan 1 | undo port trunk allow-pass vlan 1 | |
dfs-group 1 m-lag 4 | dfs-group 1 m-lag 4 | |
# | # | |
#配置与Leaf三层互联端口,只举例2组Leaf,多组Leaf需补全 | #配置与Leaf三层互联端口,只举例2组Leaf,多组Leaf需补全 | |
interface 40GE1/0/0 | interface 40GE1/0/0 | |
description "to ServerLeaf_1" | description "to ServerLeaf_1" | |
undo portswitch | undo portswitch | |
ip address 10.125.97.21 255.255.255.252 | 和ServerLeaf的互联地址,需要在OSPF中进行发布,与Leaf建立OSPF邻居 | ip address 10.125.97.37 255.255.255.252 |
ospf network-type p2p | 配置OSPF接口的网络类型为P2P | ospf network-type p2p |
# | # | |
interface 40GE1/0/1 | interface 40GE1/0/1 | |
description "to ServerLeaf_2" | description "to ServerLeaf_2" | |
undo portswitch | undo portswitch | |
ip address 10.125.97.25 255.255.255.252 | ip address 10.125.97.41 255.255.255.252 | |
ospf network-type p2p | ospf network-type p2p | |
# | # | |
interface 40GE1/0/2 | interface 40GE1/0/2 | |
description "to ServerLeaf_3" | description "to ServerLeaf_3" | |
undo portswitch | undo portswitch | |
ip address 10.125.97.29 255.255.255.252 | ip address 10.125.97.45 255.255.255.252 | |
ospf network-type p2p | ospf network-type p2p | |
# | # | |
interface 40GE1/0/3 | interface 40GE1/0/3 | |
description "to ServerLeaf_4" | description "to ServerLeaf_4" | |
undo portswitch | undo portswitch | |
ip address 10.125.97.33 255.255.255.252 | ip address 10.125.97.49 255.255.255.252 | |
ospf network-type p2p | ospf network-type p2p | |
# | # |
#配置Underlay OSPF路由 | #配置Underlay OSPF路由 | |
ospf 1 router-id 10.125.98.1 | ospf 1 router-id 10.125.98.2 | |
stub-router on-startup 3000 include-stub | 配置Stub路由器,提高故障场景网络收敛性能,当Spine是CE12800系列时,on-startup时间间隔配置为3000S,当Spine是TOR时,时间间隔配置为600S | stub-router on-startup 3000 include-stub |
area 0.0.0.0 | area 0.0.0.0 | |
network 10.125.97.20 0.0.0.3 | network 10.125.97.36 0.0.0.3 | |
network 10.125.97.24 0.0.0.3 | network 10.125.97.40 0.0.0.3 | |
network 10.125.97.28 0.0.0.3 | network 10.125.97.44 0.0.0.3 | |
network 10.125.97.32 0.0.0.3 | 分别建立与4台ServerLeaf的路由邻居 | network 10.125.97.48 0.0.0.3 |
network 10.125.97.56 0.0.0.7 | 发布FW带内管理地址,打通路由 | network 10.125.97.56 0.0.0.7 |
network 10.125.98.1 0.0.0.0 | 发布AC带内管理/DFS-Group/建立EVPN对等体接口地址 | network 10.125.98.2 0.0.0.0 |
network 10.125.99.1 0.0.0.0 | 发布VTEP IP建立VXLAN隧道使用 | network 10.125.99.1 0.0.0.0 |
# | # | |
#使能EVPN作为VXLAN的控制平面 | #使能EVPN作为VXLAN的控制平面 | |
evpn-overlay enable | evpn-overlay enable | |
# | # | |
#配置与Leaf节点建立BGP EVPN对等体关系 | #配置与Leaf节点建立BGP EVPN对等体关系 | |
bgp 100 | bgp 100 | |
router-id 10.125.98.1 | router-id 10.125.98.2 | |
peer 10.125.98.3 as-number 100 | 配置对等体ServerLeaf_1的AS号为100 | peer 10.125.98.3 as-number 100 |
peer 10.125.98.3 connect-interface LoopBack1 | 指定发送BGP报文的源接口 | peer 10.125.98.3 connect-interface LoopBack1 |
peer 10.125.98.4 as-number 100 | peer 10.125.98.4 as-number 100 | |
peer 10.125.98.4 connect-interface LoopBack1 | peer 10.125.98.4 connect-interface LoopBack1 | |
peer 10.125.98.5 as-number 100 | peer 10.125.98.5 as-number 100 | |
peer 10.125.98.5 connect-interface LoopBack1 | peer 10.125.98.5 connect-interface LoopBack1 | |
peer 10.125.98.6 as-number 100 | peer 10.125.98.6 as-number 100 | |
peer 10.125.98.6 connect-interface LoopBack1 | 分别与4台ServerLeaf设备建立BGP EVPN对等体关系 | peer 10.125.98.6 connect-interface LoopBack1 |
# | # | |
l2vpn-family evpn | 使能并进入BGP-EVPN地址族视图 | l2vpn-family evpn |
undo policy vpn-target | 取消对接收的VPN路由或者标签块进行VPN-Target过滤 | undo policy vpn-target |
peer 10.125.98.3 enable | 使能与对等体ServerLeaf_1交换相关的路由信息 | peer 10.125.98.3 enable |
peer 10.125.98.3 advertise arp | 配置向BGP EVPN对等体ServerLeaf_1发布arp路由 | peer 10.125.98.3 advertise arp |
peer 10.125.98.3 reflect-client | 配置将本机作为路由反射器,并分别配置ServerLeaf设备作为其客户 | peer 10.125.98.3 reflect-client |
peer 10.125.98.4 enable | peer 10.125.98.4 enable | |
peer 10.125.98.4 advertise arp | peer 10.125.98.4 advertise arp | |
peer 10.125.98.4 reflect-client | peer 10.125.98.4 reflect-client | |
peer 10.125.98.5 enable | peer 10.125.98.5 enable | |
peer 10.125.98.5 advertise arp | peer 10.125.98.5 advertise arp | |
peer 10.125.98.5 reflect-client | peer 10.125.98.5 reflect-client | |
peer 10.125.98.6 enable | peer 10.125.98.6 enable | |
peer 10.125.98.6 advertise arp | peer 10.125.98.6 advertise arp | |
peer 10.125.98.6 reflect-client | peer 10.125.98.6 reflect-client | |
# | # | |
#云网一体化场景,配置云平台管理网络 | 此处以带内管理举例 | #云网一体化场景,配置云平台管理网络 |
ospf 1 router-id 10.125.98.1 | 云平台FSP节点各平面需二层互通,且需与AC北向平面三层互通。 FSP带内管理网络通过AC上的公共VPC创建,vbdif配置等由AC自动下发,然后在集中式网关underlay路由发布管理网段,打通与AC控制器北向平面路由。建议配置禁止云平台管理网关的接口接收和发送OSPF报文。 | ospf 1 router-id 10.125.98.2 |
silent-interface vbdif 6001 | silent-interface vbdif 6001 | |
silent-interface vbdif 6002 | silent-interface vbdif 6002 | |
silent-interface vbdif 6003 | silent-interface vbdif 6003 | |
area 0.0.0.0 | area 0.0.0.0 | |
network 30.1.31.0 0.0.0.255 | network 30.1.31.0 0.0.0.255 | |
network 30.1.38.0 0.0.0.255 | network 30.1.38.0 0.0.0.255 | |
network 30.1.39.0 0.0.0.255 | network 30.1.39.0 0.0.0.255 | |
# | # | |
#出口网络配置(非CE6855/CE7855) | #出口网络配置(非CE6855/CE7855) | |
interface 10GE4/0/0 | AC上创建外部网关,只下发出口VPN,Spine与PE设备间的互联IP地址、端口配置及路由(静态或动态)等需要手工部署 | interface 10GE4/0/0 |
description "to PE1" | description "to PE1" | |
undo portswitch | 每台Spine配置两个独立的L3接口,分别与两台PE设备互联,形成ECMP路由:当Spine为非CE6855/CE7855设备,可以使用vlanif接口、三层主接口或vbdif接口与PE互联,推荐使用vlanif,此处以三层主接口为例 | undo portswitch |
ip address 10.125.97.1 255.255.255.252 | ip address 10.125.97.9 255.255.255.252 | |
# | # | |
interface 10GE4/0/1 | interface 10GE4/0/1 | |
description "to PE2" | description "to PE2" | |
undo portswitch | undo portswitch | |
ip address 10.125.97.5 255.255.255.252 | ip address 10.125.97.13 255.255.255.252 | |
# | # | |
interface Eth-Trunk20 | 配置Spine间L3逃生路径,单台Spine上行两条链路同时中断时生效。建议跨板保障可靠性。 | interface Eth-Trunk20 |
trunkport 10GE 4/0/45 | trunkport 10GE 4/0/45 | |
trunkport 40GE 1/0/23:3 | trunkport 40GE 1/0/23:3 | |
undo portswitch | undo portswitch | |
description backup_L3_route | description backup_L3_route | |
ip address 10.125.97.17 255.255.255.252 | ip address 10.125.97.18 255.255.255.252 | |
mode lacp-static | mode lacp-static | |
# | 当AC下发的为带VPN的外部网关时,接口需要绑定相应的VPN,并在VPN实例配置默认路由 | # |
ip route-static 0.0.0.0 0.0.0.0 10.125.97.2 preference 120 | 配置到PE的静态路由 | ip route-static 0.0.0.0 0.0.0.0 10.125.97.10 preference 120 |
ip route-static 0.0.0.0 0.0.0.0 10.125.97.6 preference 120 | ip route-static 0.0.0.0 0.0.0.0 10.125.97.14 preference 120 | |
ip route-static 0.0.0.0 0.0.0.0 10.125.97.18 preference 150 | L3逃生路径,优先级较低 | ip route-static 0.0.0.0 0.0.0.0 10.125.97.17 preference 150 |
# | ||
monitor-link group 1 | GW是CE12800设备且只有一块40GE单板下行与Leaf建立隧道时,出口可靠性配置: Spine部署monitor-link,当40G单板故障时,联动连接FW/F5、PE的端口down,防止单点故障隧道不存在流量中断 | monitor-link group 1 |
port 40GE1/0/0 uplink | 下行建立隧道单板只有一块时必配,避免单点故障导致业务长时间中断,大于等于两块时不需要: 配置monitor-link组的上行链路接口:与Leaf互联接口 | port 40GE1/0/0 uplink |
port 40GE1/0/1 uplink | port 40GE1/0/1 uplink | |
port 40GE1/0/2 uplink | port 40GE1/0/2 uplink | |
port 40GE1/0/3 uplink | port 40GE1/0/3 uplink | |
port 10GE4/0/0 downlink 1 | 下行建立隧道单板只有一块时必配,避免单点故障导致业务长时间中断,大于等于两块时不需要: 配置monitor-link组的下行链路接口,包括与FW/F5、PE互联接口 | port 10GE4/0/0 downlink 1 |
port 10GE4/0/1 downlink 2 | port 10GE4/0/1 downlink 2 | |
port 10GE4/0/43 downlink 3 | port 10GE4/0/43 downlink 3 | |
port 10GE4/0/44 downlink 4 | port 10GE4/0/44 downlink 4 | |
port 10GE4/0/39 downlink 5 | port 10GE4/0/39 downlink 5 | |
port 10GE4/0/40 downlink 6 | port 10GE4/0/40 downlink 6 | |
# | # | |
interface 10GE4/0/0 | Spine与PE互联接口配置延时UP,防止设备重启后,路由下发较慢或者下行隧道建立较慢导致业务流量回切时间较长 | interface 10GE4/0/0 |
carrier up-hold-time 180000 | carrier up-hold-time 180000 | |
# | # | |
interface 10GE4/0/1 | interface 10GE4/0/1 | |
carrier up-hold-time 180000 | carrier up-hold-time 180000 | |
# | # | |
#出口网络配置(CE6855/CE7855) | #出口网络配置(CE6855/CE7855) | |
# | AC上创建外部网关,只下发出口VPN,Spine与PE设备间的互联IP地址、端口配置及路由(静态或动态)等需要手工部署 | # |
bridge-domain 4011 | 每台Spine配置两个独立的L3接口,分别与两台PE设备互联,形成ECMP路由:当Spine为CE6855/CE7855设备,由于该形态设备存在约束限制,只能使用vbdif与PE互联,此时BD不能配置VNI | bridge-domain 4014 |
# | # | |
interface Vbdif4011 | interface Vbdif4014 | |
ip address 10.125.97.1 255.255.255.252 | ip address 10.125.97.9 255.255.255.252 | |
# | # | |
interface 10GE4/0/0.1 mode l2 | interface 10GE4/0/0.1 mode l2 | |
encapsulation dot1q vid 4011 | encapsulation dot1q vid 4014 | |
bridge-domain 4011 | bridge-domain 4014 | |
# | # | |
bridge-domain 4012 | bridge-domain 4015 | |
# | # | |
interface Vbdif4012 | interface Vbdif4015 | |
ip address 10.125.97.5 255.255.255.252 | ip address 10.125.97.13 255.255.255.252 | |
# | # | |
interface 10GE4/0/1.1 mode l2 | interface 10GE4/0/1.1 mode l2 | |
encapsulation dot1q vid 4012 | encapsulation dot1q vid 4015 | |
bridge-domain 4012 | bridge-domain 4015 | |
# | # | |
bridge-domain 4013 | 配置Spine间L3逃生路径,单台Spine上行两条链路同时中断时生效。建议跨板保障可靠性。 | bridge-domain 4013 |
# | # | |
interface Vbdif4013 | interface Vbdif4013 | |
ip address 10.125.97.17 255.255.255.252 | ip address 10.125.97.18 255.255.255.252 | |
# | # | |
interface Eth-Trunk20 | interface Eth-Trunk20 | |
trunkport 10GE 4/0/45 | trunkport 10GE 4/0/45 | |
trunkport 40GE 1/0/23:3 | trunkport 40GE 1/0/23:3 | |
description backup_L3_route | description backup_L3_route | |
mode lacp-static | mode lacp-static | |
# | # | |
interface Eth-Trunk20.1 mode l2 | interface Eth-Trunk20.1 mode l2 | |
encapsulation dot1q vid 4013 | encapsulation dot1q vid 4013 | |
bridge-domain 4013 | bridge-domain 4013 | |
# | # | |
ip route-static 0.0.0.0 0.0.0.0 10.125.97.2 preference 120 | 配置到PE的静态路由 | ip route-static 0.0.0.0 0.0.0.0 10.125.97.10 preference 120 |
ip route-static 0.0.0.0 0.0.0.0 10.125.97.6 preference 120 | ip route-static 0.0.0.0 0.0.0.0 10.125.97.14 preference 120 | |
ip route-static 0.0.0.0 0.0.0.0 10.125.97.18 preference 150 | L3逃生路径,优先级较低 | ip route-static 0.0.0.0 0.0.0.0 10.125.97.17 preference 150 |
# | # | |
interface 10GE4/0/0 | Spine与PE互联接口配置延时UP,防止设备重启后,路由下发较慢或者下行隧道建立较慢导致业务流量回切时间较长 | interface 10GE4/0/0 |
carrier up-hold-time 180000 | carrier up-hold-time 180000 | |
# | # | |
interface 10GE4/0/1 | interface 10GE4/0/1 | |
carrier up-hold-time 180000 | carrier up-hold-time 180000 | |
# | # |