CE系列交换机M-LAG与Cisco vPC对接示例
适用产品和版本
CE系列交换机V200R005C10或更高版本。
组网需求
如图2-11所示,左侧为Cisco设备组建的网络,右侧为华为设备组建的网络,两个网络之间通过DCI Leaf互联。Cisco侧两台DCI Leaf组建vPC,华为侧两台DCI Leaf组建M-LAG,vPC与M-LAG之间通过跨设备链路聚合实现对接。
配置思路
- 配置Cisco侧的Leaf1、Leaf2交换机组建vPC,并创建跨设备链路聚合组。
- 配置华为侧的Leaf3、Leaf4交换机组建M-LAG,并创建跨设备链路聚合组。
操作步骤
- 配置Leaf1、Leaf2组建vPC,并创建跨设备链路聚合组。以下为Leaf1和Leaf2的相关配置。
Leaf1# vpc domain 1 //配置vPC域 role priority 10 peer-keepalive destination 10.10.1.2 source 10.10.1.1 auto-recovery interface port-channel1 //配置Peer-link switchport switchport mode trunk switchport trunk allowed vlan 100 spanning-tree port type network vpc peer-link interface port-channel10 //配置互联的链路聚合组 switchport switchport mode trunk switchport trunk allowed vlan 100 //放通互通VLAN vpc 10 interface Ethernet8/1 //将端口加入Peer-link switchport switchport mode trunk switchport trunk allowed vlan 100 channel-group 1 mode active no shutdown interface Ethernet8/2 switchport switchport mode trunk switchport trunk allowed vlan 100 channel-group 1 mode active no shutdown interface Ethernet8/3 //将端口加入DCI互联的链路聚合组 switchport switchport mode trunk switchport trunk allowed vlan 100 channel-group 10 mode active no shutdown interface Ethernet8/4 switchport switchport mode trunk switchport trunk allowed vlan 100 channel-group 10 mode active no shutdown
Leaf2# vpc domain 1 role priority 20 peer-keepalive destination 10.10.1.1 source 10.10.1.2 auto-recovery interface port-channel1 switchport switchport mode trunk switchport trunk allowed vlan 100 spanning-tree port type network vpc peer-link interface port-channel10 switchport switchport mode trunk switchport trunk allowed vlan 100 vpc 10 interface Ethernet8/1 switchport switchport mode trunk switchport trunk allowed vlan 100 channel-group 1 mode active no shutdown interface Ethernet8/2 switchport switchport mode trunk switchport trunk allowed vlan 100 channel-group 1 mode active no shutdown interface Ethernet8/3 switchport switchport mode trunk switchport trunk allowed vlan 100 channel-group 10 mode active no shutdown interface Ethernet8/4 switchport switchport mode trunk switchport trunk allowed vlan 100 channel-group 10 mode active no shutdown
- 配置Leaf3、Leaf4组建M-LAG,并创建跨设备链路聚合组。以下为Leaf3和Leaf4的相关配置。
[~Leaf3] # ip vpn-instance DAD ipv4-family route-distinguisher 1:1 # interface eth-trunk 1 //部署独立三层互联链路作为M-LAG的心跳 trunkport 10ge 1/0/10 trunkport 10ge 1/0/11 mode lacp-static undo portswitch ip binding vpn-instance DAD ip address 10.10.2.1 255.255.255.0 m-lag unpaired-port reserved //配置DAD接口在Peer-link故障时不被Error-Down # stp tc-protection stp bpdu-protection stp mode rstp stp v-stp enable # dfs-group 1 //配置DFS priority 150 source ip 10.10.2.1 vpn-instance DAD peer 10.10.2.2 dual-active detection enhanced enable # interface eth-trunk 0 //配置Peer-link trunkport 40ge 1/0/1 trunkport 40ge 1/0/2 mode lacp-static peer-link 1 port vlan exclude 1 # vlan batch 100 # interface eth-trunk 10 //配置互联的链路聚合组 trunkport 10ge 1/0/1 trunkport 10ge 1/0/2 port link-type trunk undo port trunk allow-pass vlan 1 port trunk allow-pass vlan 100 //放通互通VLAN mode lacp-static dfs-group 1 m-lag 10 stp disable //基于接口关闭STP,使左右两张网络的STP域隔离 #
[~Leaf4] # ip vpn-instance DAD ipv4-family route-distinguisher 2:2 # interface eth-trunk 1 trunkport 10ge 1/0/10 trunkport 10ge 1/0/11 mode lacp-static undo portswitch ip binding vpn-instance DAD ip address 10.10.2.2 255.255.255.0 m-lag unpaired-port reserved # stp tc-protection stp bpdu-protection stp mode rstp stp v-stp enable # dfs-group 1 priority 100 source ip 10.10.2.2 vpn-instance DAD peer 10.10.2.1 dual-active detection enhanced enable # interface eth-trunk 0 trunkport 40ge 1/0/1 trunkport 40ge 1/0/2 mode lacp-static peer-link 1 port vlan exclude 1 # vlan batch 100 # interface eth-trunk 10 trunkport 10ge 1/0/1 trunkport 10ge 1/0/2 port link-type trunk undo port trunk allow-pass vlan 1 port trunk allow-pass vlan 100 mode lacp-static dfs-group 1 m-lag 10 stp disable #