Powering On and Initially Configuring Data Switches (for Expanding 2 or 4 Controllers to 6 or More Controllers)
When expanding two or four controllers to six or more controllers, you must power on and initially configure data switches.
Powering On Data Switches
This section describes how to power on data switches.
Procedure
- Ensure that power cables are correctly connected.
- Switch on power modules.Figure 11-84 Power button of a switch
- Perform a power-on check.
After powering on the switch, check the following items:
- Check whether the sound of fan rotation can be heard and whether air is exhausted from the air vent.
- Check whether the indicators on switch panels, power modules, and fan modules are normal. For details about the indicator status, see the Product Description.
Configuring New IP Addresses for the Management Network Ports on the Switches and SSH Login User Information (Applicable to CE8850-32CQ-EI Switches)
If you want to use SmartKit to configure switches, change the IP addresses of the management network ports on the switches to ensure that the switches, the maintenance terminal where SmartKit resides, and the original storage system are on the same network.
Context
If you use SmartKit to configure a switch, modify the IP address of the switch's management network port to ensure that this IP address resides in the same network with that of the storage system.
Before modifying the IP address of a switch's management network port and the SSH account, run the reset saved-configuration command to reset the configuration file of the switch. In the mean time, run the reboot fast command to restart the switch for the resetting to take effect.
- The two switches used for controller expansion must be of the same model.
- Switches for controller expansion can only be used for scale-out networking. Do not use them for front-end service networking or other purposes.
- Switches used for controller expansion cannot be stacked or cascaded.
- Do not upgrade the firmware of the switches used for controller expansion.
Procedure
- Use the serial port to log in to a switch.
- Run the system-view command to go to the system view.
- Run the command-privilege level rearrange command to improve command levels in batches.
- Run the commit command to commit the configuration.
- Run the aaa command to enter the AAA view.
- Configure the SSH login user for the switch.
- Run the undo local-user policy security-enhance command to delete SSH login security policies.
- Run the local-user username password irreversible-cipher password command to add a user.
username is the user name and password is the user's password.
- Run the local-user username service-type ssh command to set the user service model.
- Run the local-user username level 15 command to set the user level.
- Change the IP address of the management network port of the switch.
- Run the interface MEth0/0/0 command to enter the management network port view.
- Run the ip address ipaddress mask command to set the IP address.
ipaddress is the new IP address of the management network port and mask is the subnet mask of the management network port.
- Optional: Run the ip route-static ipaddress mask gateway command to set the switch gateway.
ipaddress indicates the destination network segment, mask indicates the subnet mask of the destination network segment, and gateway indicates the gateway.
If the switches, the maintenance terminal where SmartKit resides, and the original storage system are not on the same network, you need to set the switch gateway. To ensure that IP addresses on all network segments can access switches, you are advised to set a default gateway, namely, set ipaddress and mask to 0.0.0.0 and 0.0.0.0.
- Run the user-interface maximum-vty number command to change the number of SSH connections.
number is the maximum number of SSH connections and the value ranges from 0 to 21.
If SmartKit is used to configure switches, you are advised to set number to a value larger than six.
- Run the stelnet server enable command to enable the SSH service.
- Run the ssh authentication-type default password command to set the SSH user authentication mode to password authentication.
- Run the user-interface vty 0 n command to set the number of concurrent users.
n indicates the number of concurrent users and the value must be smaller than that set in 8.
- Run the authentication-mode aaa command to set the user authentication mode.
- Run the user privilege level 15 command to set the user level.
- Run the protocol inbound ssh command to enable the user to support the SSH protocol.
- Run the quit command to return to the system view.
- Run the rsa local-key-pair create command to generate the SSH public key for the user.
- Run the commit command to submit the configuration file.
- Run the quit command to exit the system view.
- Run the save command to save the configuration file.
Example
Add a user admin123 for SSH, and set a new IP address 172.31.8.54 for the management network ports on the switches to ensure that the switches, the maintenance terminal where tool resides, and the original storage system are on the same network.
<HUAWEI>system-view
Enter system view, return user view with return command.
[~HUAWEI]command-privilege level rearrange
Info: The command levels have been upgraded in batch !
Privilege note: 0-VISIT, 1-MONITOR, 10-SYSTEM, 15-MANAGE
[*HUAWEI]commit
[~HUAWEI]aaa (Enter the AAA view.)
[~HUAWEI-aaa]undo local-user policy security-enhance (Delete SSH login security policies.)
Warning: The current operation may reduce the degree of account security. It is strongly recommended to keep this enabled.
[*HUAWEI-aaa]local-user admin123 password irreversible-cipher huawei (Add a user admin123 for SSH.)
[*HUAWEI-aaa]local-user admin123 service-type ssh (Set the user service model.)
[*HUAWEI-aaa]local-user admin123 level 15 (Set the user level.)
[*HUAWEI-aaa]interface MEth0/0/0 (Enter the management network port view.)
[*HUAWEI-MEth0/0/0]ip address 172.31.8.54 255.255.0.0 (Set a new IP address for the management network port)
[*HUAWEI-MEth0/0/0]ip route-static 0.0.0.0 0.0.0.0 172.31.0.1 (Set a default gateway.)
[*HUAWEI]user-interface maximum-vty 21 (Change the number of SSH connections.)
[*HUAWEI]stelnet server enable (Enable the SSH service.)
Info: The Stelnet server is already started.
[*HUAWEI]ssh authentication-type default password (Set the SSH user authentication mode to password authentication.)
[*HUAWEI]user-interface vty 0 4 (Set the number of concurrent users.)
[*HUAWEI-ui-vty0-4]authentication-mode aaa (Set the user authentication mode.)[~HUAWEI-ui-vty0-4]user privilege level 15 (Set the user level.)
Warning: The level of the user-interface(s) will be the default level of AAA users, please check whether it is correct. After the authentication mode is set to AAA, you need to enter the user name and password to log in.
[*HUAWEI-ui-vty0-4]user privilege level 15
[*HUAWEI-ui-vty0-4]protocol inbound ssh (Enable the user to support the SSH protocol.)
[*HUAWEI-ui-vty0-4]quit (Return to the system view.)
[*HUAWEI]rsa local-key-pair create (Generate the SSH public key for the user.)
The key name will be: HUAWEI_Host
% RSA keys defined for HUAWEI_Host already exist.
Confirm to replace them? Please select [Y/N]:y
The range of public key size is (512 ~ 2048).
NOTE: If the key modulus is greater than 512,
it will take a few minutes.
Input the bits in the modulus [default = 2048]:
[*HUAWEI]commit
[~HUAWEI]quit
<HUAWEI>save
Warning: The current configuration will be written to the device. Continue? [Y/N]:y
Info: Please input the file name(*.cfg, *.zip, *.dat):2.dat
Now saving the current configuration to the slot 1 .......
Info: Save the configuration successfully.
(Optional) Manually Configuring Switches (CE8850-32CQ-EI)
If the maintenance terminal where SmartKit is installed cannot log in to the switch through the management network port of the switch, you need to manually configure the switch by referring to this section. If the maintenance terminal where SmartKit is installed can log in to the switch through the management network port of the switch, SmartKit automatically configures the switch during controller expansion. In this case, skip this section.
For details about how to configure switches, see the CloudEngine 7800&6800&5800 Product Documentation.
Procedure for Configuring Switch 0
- Set the global parameters of a spanning tree.
- Run the system-view command to go to the system view.
- Run the stp mode mstp command to set the spanning tree mode to MSTP.
- Run the commit command to activate the spanning tree configuration.
- Run the stp region-configuration command to go to the spanning tree's configuration view.
- Configure a spanning tree instance.
- Run the instance 1 vlan 200 to 203 300 to 303 400 to 403 500 to 503 1000 to 1004 1100 to 1104 1200 to 1203 1300 to 1303 4005 4007 command.
- Run the instance 1 vlan 4010 command.
- Run the instance 2 vlan 2000 to 2003 2100 to 2103 2200 to 2203 2300 to 2303 4008 command.
- Run the commit command to activate the spanning tree configuration.
- Run the quit command to exit the spanning tree's configuration view.
- Configure spanning tree ports.
- Run the port-group group-member 100GE 1/0/1 to 100GE 1/0/32 command to go to the port configuration view.
- Run the stp root-protection command to enable root bridge protection on the ports.
- Run the stp edged-port enable command to enable the edge port function.
- Run the commit command to activate the port configurations.
- Run the quit command to exit the port configuration view.
Retain the default configurations for other spanning tree functions.
- Configure global LLDP parameters.
- Run the system-view command to go to the system view.
- Run the sysname STORAGE-SCALE-SW-0 command to configure the system name.
- Run the lldp enable command to enable the LLDP function globally.
- Run the lldp fast-count 3 command to set the number of LLDP packets to be quickly sent.
- Run the lldp restart 1 command to set the LLDP restart delay.
- Run the lldp transmit interval 20 command to set the interval at which LLDP packets are sent.
- Run the lldp transmit multiplier 10 command to configure the LLDP holdtime multiplier.
- Run the commit command to enable all the preceding configurations.
- Configure LLDP ports.
- Run the port-group group-member 100GE 1/0/1 to 100GE 1/0/32 command to go to the port configuration view.
- Run the undo lldp disable command to enable the LLDP function on ports.
- Run the lldp admin-status txrx command to enable ports to send and receive LLDP packets.
- Run the commit command to enable all the preceding configurations.
- Run the quit command to exit the port configuration view.
Retain the default configurations of other LLDP functions.
- Configure global RDMA parameters.
- Run the system-view command to go to the system view.
- Run the drop-profile ecn_100G command to create weighted random early detection (WRED) drop profiles and go to the WRED drop profile view.
- Run the ecn buffer-size low-limit 7000 high-limit 750000 discard-percentage 30 command to configure explicit congestion notification (ECN) parameters.
- Run the commit command to activate the configurations.
- Run the quit command to exit the WRED drop profile view.
- Run the dcb pfc deadlock-detect interval 100 command to configure the deadlock detection period and recovery time of PFC hardware.
- Run the commit command to activate the configurations.
- Run the dcb pfc command to go to the default PFC configuration view.
- Run the priority 0 2 3 command to configure the RDMA link forwarding priority.
- Configure the function of PFC deadlock detection.
- Run the priority 2 deadlock-detect time 10 deadlock-recovery time 15 command.
- Run the priority 2 turn-off threshold 20 command.
- Run the priority 3 deadlock-detect time 10 deadlock-recovery time 15 command.
- Run the priority 3 turn-off threshold 20 command.
- Run the commit command to activate the configurations.
- Run the quit command to exit the global RDMA configuration view.
- Configure the RDMA parameters of ports.
- Run the port-group group-member 100GE 1/0/1 to 100GE 1/0/32 command to go to the port configuration view.
- Configure the port forwarding priority and QoS parameters.
- Run the undo flow-control command.
- Run the dcb pfc enable mode manual command.
- Run the dcb pfc buffer 2 xoff dynamic 4 command.
- Run the dcb pfc buffer 3 xoff dynamic 4 command.
- Run the qos drr 0 2 3 command.
- Run the qos queue 0 drr weight 10 command.
- Run the qos queue 2 drr weight 90 command.
- Run the qos queue 3 drr weight 90 command.
- Run the qos buffer queue 0 shared-threshold dynamic 1 command.
- Run the qos buffer queue 2 shared-threshold dynamic 10 command.
- Run the qos buffer queue 3 shared-threshold dynamic 10 command.
- Run the qos queue 2 wred ecn_100G command.
- Run the qos queue 3 wred ecn_100G command.
- Run the qos queue 2 ecn command.
- Run the qos queue 3 ecn command.
- Run the commit command to activate the configurations.
- Run the quit command to exit the port configuration view.
Retain the default configurations of other RDMA functions.
- Configure global VLAN parameters.
- Run the system-view command to go to the system view.
- Create VLANs in batches.
- Run the vlan batch 200 to 203 300 to 303 400 to 403 500 to 503 1000 to 1004 1100 to 1104 command.
- Run the vlan batch 1200 to 1203 1300 to 1303 2000 to 2003 2100 to 2103 2200 to 2203 2300 to 2303 4005 4007 4008 4010 command.
- Run the commit command to activate the preceding configurations.
Procedure for Configuring Switch 1
- Set the global parameters of a spanning tree.
- Run the system-view command to go to the system view.
- Run the stp mode mstp command to set the spanning tree mode to MSTP.
- Run the commit command to activate the spanning tree configuration.
- Run the stp region-configuration command to go to the spanning tree's configuration view.
- Configure a spanning tree instance.
- Run the instance 1 vlan 200 to 203 300 to 303 400 to 403 500 to 503 1000 to 1004 1100 to 1104 1200 to 1203 1300 to 1303 4005 4007 command.
- Run the instance 1 vlan 4010 command.
- Run the instance 2 vlan 2000 to 2003 2100 to 2103 2200 to 2203 2300 to 2303 4008 command.
- Run the commit command to activate the spanning tree configuration.
- Run the quit command to exit the spanning tree's configuration view.
- Configure spanning tree ports.
- Run the port-group group-member 100GE 1/0/1 to 100GE 1/0/32 command to go to the port configuration view.
- Run the stp root-protection command to enable root bridge protection on the ports.
- Run the stp edged-port enable command to enable the edge port function.
- Run the commit command to activate the port configurations.
- Run the quit command to exit the port configuration view.
Retain the default configurations for other spanning tree functions.
- Configure global LLDP parameters.
- Run the system-view command to go to the system view.
- Run the sysname STORAGE-SCALE-SW-1 command to configure the system name.
- Run the lldp enable command to enable the LLDP function globally.
- Run the lldp fast-count 3 command to set the number of LLDP packets to be quickly sent.
- Run the lldp restart 1 command to set the LLDP restart delay.
- Run the lldp transmit interval 20 command to set the interval at which LLDP packets are sent.
- Run the lldp transmit multiplier 10 command to configure the LLDP holdtime multiplier.
- Run the commit command to enable all the preceding configurations.
- Configure LLDP ports.
- Run the port-group group-member 100GE 1/0/1 to 100GE 1/0/32 command to go to the port configuration view.
- Run the undo lldp disable command to enable the LLDP function on ports.
- Run the lldp admin-status txrx command to enable ports to send and receive LLDP packets.
- Run the commit command to enable all the preceding configurations.
- Run the quit command to exit the port configuration view.
Retain the default configurations of other LLDP functions.
- Configure global RDMA parameters.
- Run the system-view command to go to the system view.
- Run the drop-profile ecn_100G command to create WRED drop profiles and go to the WRED drop profile view.
- Run the ecn buffer-size low-limit 7000 high-limit 750000 discard-percentage 30 command to configure ECN parameters.
- Run the commit command to activate the configurations.
- Run the quit command to exit the WRED drop profile view.
- Run the dcb pfc deadlock-detect interval 100 command to configure the deadlock detection period and recovery time of PFC hardware.
- Run the commit command to activate the configurations.
- Run the dcb pfc command to go to the default PFC configuration view.
- Run the priority 0 2 3 command to configure the RDMA link forwarding priority.
- Configure the function of PFC deadlock detection.
- Run the priority 2 deadlock-detect time 10 deadlock-recovery time 15 command.
- Run the priority 2 turn-off threshold 20 command.
- Run the priority 3 deadlock-detect time 10 deadlock-recovery time 15 command.
- Run the priority 3 turn-off threshold 20 command.
- Run the commit command to activate the configurations.
- Run the quit command to exit the global RDMA configuration view.
- Configure the RDMA parameters of ports.
- Run the port-group group-member 100GE 1/0/1 to 100GE 1/0/32 command to go to the port configuration view.
- Configure the port forwarding priority and QoS parameters.
- Run the undo flow-control command.
- Run the dcb pfc enable mode manual command.
- Run the dcb pfc buffer 2 xoff dynamic 4 command.
- Run the dcb pfc buffer 3 xoff dynamic 4 command.
- Run the qos drr 0 2 3 command.
- Run the qos queue 0 drr weight 10 command.
- Run the qos queue 2 drr weight 90 command.
- Run the qos queue 3 drr weight 90 command.
- Run the qos buffer queue 0 shared-threshold dynamic 1 command.
- Run the qos buffer queue 2 shared-threshold dynamic 10 command.
- Run the qos buffer queue 3 shared-threshold dynamic 10 command.
- Run the qos queue 2 wred ecn_100G command.
- Run the qos queue 3 wred ecn_100G command.
- Run the qos queue 2 ecn command.
- Run the qos queue 3 ecn command.
- Run the commit command to activate the configurations.
- Run the quit command to exit the port configuration view.
Retain the default configurations of other RDMA functions.
- Configure global VLAN parameters.
- Run the system-view command to go to the system view.
- Create VLANs in batches.
- Run the vlan batch 200 to 203 300 to 303 400 to 403 500 to 503 1000 to 1004 1100 to 1104 command.
- Run the vlan batch 1200 to 1203 1300 to 1303 2000 to 2003 2100 to 2103 2200 to 2203 2300 to 2303 4005 4007 4008 4010 command.
- Run the commit command to activate the preceding configurations.