配置SEP多实例示例
本示例中的组网特点是封闭环路上存在两个SEP段,不同的SEP段处理不同的VLAN业务,实现流量负载负担,并提供链路备份。
组网需求
在普通的SEP组网图中,一个物理环上只能配置一个SEP段,也只能指定一个阻塞点。当SEP段处于完整状态时,阻塞端口会阻止所有的业务数据通过。这样,所有业务数据在SEP段上只能通过一条路径传输,阻塞端口侧的链路空闲,造成带宽浪费。
为了解决带宽浪费问题,并实现负载分担,华为公司实现了SEP多实例。
如图13-18所示,多台二层交换设备Router1~Router4形成环形网络接入上层网络。在汇聚层上运行SEP协议。在Router1~Router4上配置SEP多实例,通过两个SEP段解决带宽浪费问题,实现负载分担并提供链路备份。
操作步骤
- 创建SEP段和控制VLAN
配置Segment ID为1的SEP段和VLAN ID为10的控制VLAN
# 配置Router1。<Huawei> system-view
[Huawei] sysname Router1
[Router1] sep segment 1
[Router1-sep-segment1] control-vlan 10
[Router1-sep-segment1] quit
# 配置Router2。<Huawei> system-view
[Huawei] sysname Router2
[Router2] sep segment1
[Router2-sep-segment1] control-vlan 10
[Router2-sep-segment1] quit
# 配置Router3。<Huawei> system-view
[Huawei] sysname Router3
[Router3] sep segment 1
[Router3-sep-segment1] control-vlan 10
[Router3-sep-segment1] quit
# 配置Router4。<Huawei> system-view
[Huawei] sysname Router4
[Router4] sep segment 1
[Router4-sep-segment1] control-vlan 10
[Router4-sep-segment1] quit
配置Segment ID为2的SEP段和VLAN ID为10的控制VLAN
# 配置Router1。[Router1] sep segment 2
[Router1-sep-segment2] control-vlan 10
[Router1-sep-segment2] quit
# 配置Router2。[Router2] sep segment2
[Router2-sep-segment2] control-vlan 10
[Router2-sep-segment2] quit
# 配置Router3。[Router3] sep segment 2
[Router3-sep-segment2] control-vlan 10
[Router3-sep-segment2] quit
# 配置Router4。[Router4] sep segment 2
[Router4-sep-segment2] control-vlan 10
[Router4-sep-segment2] quit
- 配置SEP段保护实例,并将实例与用户VLAN映射。
# 配置Router1。
[Router1] vlan batch 100 to 500
[Router1] sep segment 1
[Router1-sep-segment1] protected-instance 1
[Router1-sep-segment1] quit
[Router1] sep segment 2
[Router1-sep-segment2] protected-instance 2
[Router1-sep-segment2] quit
[Router1] stp region-configuration
[Router1-mst-region] instance 1 vlan 100 to 300
[Router1-mst-region] instance 2 vlan 301 to 500
[Router1-mst-region] active region-configuration
[Router1-mst-region] quit
Router2~Router4配置略。Router2~Router4配置与Router1配置类似,具体配置请参见本示例配置文件。
- 将环网上的设备加入SEP段,并配置端口角色
缺省情况下,二层端口上STP处于使能状态。在将端口加入SEP段之前,请先去使能STP。
# 配置Router1的端口GE7/0/1端口角色为主边缘端口,GE7/0/3端口角色为副边缘端口。
[Router1] interface gigabitethernet 7/0/1
[Router1-GigabitEthernet7/0/1] stp disable
[Router1-GigabitEthernet7/0/1] sep segment 1 edge primary
[Router1-GigabitEthernet7/0/1] sep segment 2 edge primary
[Router1-GigabitEthernet7/0/1] quit
[Router1] interface gigabitethernet 7/0/3
[Router1-GigabitEthernet7/0/3] stp disable
[Router1-GigabitEthernet7/0/3] sep segment 1 edge secondary
[Router1-GigabitEthernet7/0/3] sep segment 2 edge secondary
[Router1-GigabitEthernet7/0/3] quit
# 配置Router2。[Router2] interface gigabitethernet 7/0/1
[Router2-GigabitEthernet7/0/1] stp disable
[Router2-GigabitEthernet7/0/1] sep segment 1
[Router2-GigabitEthernet7/0/1] sep segment 2
[Router2-GigabitEthernet7/0/1] quit
[Router2] interface gigabitethernet 7/0/2
[Router2-GigabitEthernet7/0/2] stp disable
[Router2-GigabitEthernet7/0/2] sep segment 1
[Router2-GigabitEthernet7/0/2] sep segment 2
[Router2-GigabitEthernet7/0/2] quit
# 配置Router3。[Router3] interface gigabitethernet 7/0/1
[Router3-GigabitEthernet7/0/1] stp disable
[Router3-GigabitEthernet7/0/1] sep segment 1
[Router3-GigabitEthernet7/0/1] sep segment 2
[Router3-GigabitEthernet7/0/1] quit
[Router3] interface gigabitethernet 7/0/2
[Router3-GigabitEthernet7/0/2] stp disable
[Router3-GigabitEthernet7/0/2] sep segment 1
[Router3-GigabitEthernet7/0/2] sep segment 2
[Router3-GigabitEthernet7/0/2] quit
# 配置Router4。
[Router4] interface gigabitethernet 7/0/1
[Router4-GigabitEthernet7/0/1] stp disable
[Router4-GigabitEthernet7/0/1] sep segment 1
[Router4-GigabitEthernet7/0/1] sep segment 2
[Router4-GigabitEthernet7/0/1] quit
[Router4] interface gigabitethernet 7/0/3
[Router4-GigabitEthernet7/0/3] stp disable
[Router4-GigabitEthernet7/0/3] sep segment 1
[Router4-GigabitEthernet7/0/3] sep segment 2
[Router4-GigabitEthernet7/0/3] quit
- 灵活指定阻塞端口
# 在主边缘端口所在的设备Router1上配置阻塞端口的方式是系统名+端口名,抢占模式是延时抢占。
[Router1] sep segment 1
[Router1-sep-segment1] block port sysname Router3 interface gigabitethernet 7/0/1
[Router1-sep-segment1] preempt delay 15
[Router1-sep-segment1] quit
[Router1] sep segment 2
[Router1-sep-segment2] block port sysname Router2 interface gigabitethernet 7/0/1
[Router1-sep-segment2] preempt delay 15
[Router1-sep-segment2] quit
- 在本配置举例中,需要模拟端口故障然后恢复来完成延时抢占,为保证延时抢占功能在两个SEP段上都生效,需模拟位于两个SEP段上的端口故障。比如:
- 在SEP segment 1上,在Router2的GE7/0/1接口视图下执行命令shutdown来模拟端口故障,然后执行命令undo shutdown来模拟端口故障恢复。
- 在SEP segment 2上,在Router3的GE7/0/1接口视图下执行命令shutdown来模拟端口故障,然后执行命令undo shutdown来模拟端口故障恢复。
- 配置CE1、CE2、Router1~Router4的二层转发功能
具体配置过程略。请参考本配置举例中的配置文件。
- 验证配置结果
# 模拟故障产生情况下,查看阻塞端口是否能够从阻塞状态放开进入转发状态。
# 将Router2上的端口GE7/0/1 shutdown模拟端口故障。
# 在Router3上执行命令display sep interface,查看在Segment 1中端口GE7/0/1能否从阻塞状态放开进入转发状态。
[Router3] display sep interface gigabitethernet 7/0/1
SEP segment 1 ---------------------------------------------------------------- Interface Port Role Neighbor Status Port Status ---------------------------------------------------------------- GE7/0/1 common up forwarding SEP segment 2 ---------------------------------------------------------------- Interface Port Role Neighbor Status Port Status ---------------------------------------------------------------- GE7/0/1 common up forwarding
# 从上述表项可以发现GE7/0/1的状态可以成功从阻塞状态进入转发状态,Segment 1中转发路径变化并没有影响Segment 2的转发路径。
配置文件
Router1的配置文件
# sysname Router1 # vlan batch 10 100 to 500 # stp region-configuration instance 1 vlan 100 to 300 instance 2 vlan 301 to 500 active region-configuration # sep segment 1 control-vlan 10 block port sysname Router3 interface GigabitEthernet7/0/1 preempt delay 15 protected-instance 1 sep segment 2 control-vlan 10 block port sysname Router2 interface GigabitEthernet7/0/1 preempt delay 15 protected-instance 2 # interface GigabitEthernet7/0/1 port hybrid tagged vlan 10 100 to 500 stp disable sep segment 1 edge primary sep segment 2 edge primary # interface GigabitEthernet7/0/3 port hybrid tagged vlan 10 100 to 500 stp disable sep segment 1 edge secondary sep segment 2 edge secondary # return
Router2的配置文件
# sysname Router2 # vlan batch 10 100 to 500 # stp region-configuration instance 1 vlan 100 to 300 instance 2 vlan 301 to 500 active region-configuration # sep segment 1 control-vlan 10 protected-instance 1 sep segment 2 control-vlan 10 protected-instance 2 # interface GigabitEthernet7/0/1 port hybrid tagged vlan 10 100 to 500 stp disable sep segment 1 sep segment 2 # interface GigabitEthernet7/0/2 port hybrid tagged vlan 10 100 to 500 stp disable sep segment 1 sep segment 2 # interface GigabitEthernet7/0/3 port hybrid tagged vlan 100 to 300 # return
Router3的配置文件
# sysname Router3 # vlan batch 10 100 to 500 # stp region-configuration instance 1 vlan 100 to 300 instance 2 vlan 301 to 500 active region-configuration # sep segment 1 control-vlan 10 protected-instance 1 sep segment 2 control-vlan 10 protected-instance 2 # interface GigabitEthernet7/0/1 port hybrid tagged vlan 10 100 to 500 stp disable sep segment 1 sep segment 2 # interface GigabitEthernet7/0/2 port hybrid tagged vlan 10 100 to 500 stp disable sep segment 1 sep segment 2 # interface GigabitEthernet7/0/3 port hybrid tagged vlan 301 to 500 # return
Router4的配置文件
# sysname Router4 # vlan batch 10 100 to 500 # stp region-configuration instance 1 vlan 100 to 300 instance 2 vlan 301 to 500 active region-configuration # sep segment 1 control-vlan 10 protected-instance 1 sep segment 2 control-vlan 10 protected-instance 2 # interface GigabitEthernet7/0/1 port hybrid tagged vlan 10 100 to 500 stp disable sep segment 1 sep segment 2 # interface GigabitEthernet7/0/3 port hybrid tagged vlan 10 100 to 500 stp disable sep segment 1 sep segment 2 # return
CE1的配置文件
# sysname CE1 # vlan batch 100 to 300 # interface GigabitEthernet7/0/1 port hybrid tagged vlan 100 to 300 # return
CE2的配置文件
# sysname CE2 # vlan batch 301 to 500 # interface GigabitEthernet7/0/1 port hybrid tagged vlan 301 to 500 # return