所选语种没有对应资源,请选择:

本站点使用Cookies,继续浏览表示您同意我们使用Cookies。Cookies和隐私政策>

提示

尊敬的用户,您的IE浏览器版本过低,为获取更好的浏览体验,请升级您的IE浏览器。

升级
案例库

数据中心网络中CE12808对接C0区CiscoN7K设备时A0区Cisco设备无法学习到CE12808OSPF上引入的汇总路由

发布时间:  2017-12-21  |   浏览次数:  1069  |   下载次数:  37  |   作者:  c00426737  |   文档编号: EKB1001148679

目录

问题描述

如下图所示,某客户使用CE系列交换机搭建数据中心三层网络,使用两台CE12808 分别做虚拟化VS配置,两台虚拟成四台,每台都划分为VS0 和 VS1 ,横向虚拟化采用M-LAG技术。

其中,VS1上联四台CiscoN7K设备,为C0区域,C0区域Cisco设备与A0区域Cisco设备互联(此案例中,客户将CISCO网络划分为数个区域,本案例只涉及A0区域和C0,其中C0区域如图所示,为最上端四台CiscoN7K交换机,A0区域与C0区域相连接,但图中A0区域不做显示)。

VS1采用OSPF与C0区域N7K设备对接。

(CE12808版本:V2R1C00SPC700 ,补丁:V200R001SPH009

 

在与上联的CISCO网络对接后,发现CE12808交换机在对接C0区CISCO N7K设备时,A0区的Cisco设备无法学习到CE12808交换机 OSPF上引入的汇总路由。

设备配置如下:

BF12RT0A-DR:
ospf 65080 router-id 80.98.3.61
 import-route static type 1 route-policy VS1toC0
 preference 110
 preference ase 110
 bandwidth-reference 100000
 area 0.0.0.0
  network 80.98.3.61 0.0.0.0
  network 80.98.100.0 0.0.0.3
  network 80.98.100.4 0.0.0.3
  network 80.98.100.8 0.0.0.3
  network 80.98.100.12 0.0.0.3
  network 81.104.100.132 0.0.0.3

route-policy VS1toC0 permit node 10
 if-match tag 104
#
ip route-static 81.0.0.0 255.0.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.0.0.0 255.0.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2

 

BF12RT0B-DR:
ospf 65080 router-id 80.98.3.62
 import-route static type 1 route-policy VS1toC0
 preference 110
 preference ase 110
 bandwidth-reference 100000
 area 0.0.0.0
  network 80.98.3.62 0.0.0.0
  network 80.98.100.16 0.0.0.3
  network 80.98.100.20 0.0.0.3
  network 80.98.100.24 0.0.0.3
  network 80.98.100.28 0.0.0.3
  network 81.104.100.132 0.0.0.3


#
route-policy VS1toC0 permit node 10
 if-match tag 104
ip route-static 81.0.0.0 255.0.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.0.0.0 255.0.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2

其中 81.0.0.0 网段为LEAF交换机下连服务器网段,

对接后发现C0区域Cisco设备OSPF可以正常学习到这两条回指服务器路由,但A0区域Cisco设备上未通过OSPF学习到该条路由。 无法从A0区域访问服务器。

处理过程

首先,查看A0区域与C0区域Cisco设备OSPF;

邻居关系正常,可学习到其他路由。
随后,在VS1上回指一条32位主机明细路由,发现A0区域Cisco设备上可以通过OSPF学习到该条路由。

得出结论,故障原因应为A0区域或C0区域Cisco设备做了针对81.0.0.0网段策略过滤。

具体配置如下:


BF12RT0A-DR:
ip route-static 81.2.1.32 255.255.255.255 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.2.1.32 255.255.255.255 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2

BF12RT0B-DR:
ip route-static 81.2.1.32 255.255.255.255 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.2.1.32 255.255.255.255 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2

 

根因

由上述分析可知,根因为A0区域或C0区域Cisco设备做了针对81.0.0.0网段策略过滤。

解决方案

将下联服务网段分别汇总写明细路由,但是不写关于81.0.0.0网段的汇总路由。

具体配置如下:

BF12RT0A-DR:
ip route-static 81.2.0.0 255.254.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.2.0.0 255.254.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2
ip route-static 81.4.0.0 255.252.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.4.0.0 255.252.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2
ip route-static 81.16.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.16.0.0 255.240.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2
ip route-static 81.32.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.32.0.0 255.240.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2
ip route-static 81.48.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.48.0.0 255.240.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2

 

BF12RT0B-DR:

ip route-static 81.2.0.0 255.254.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.2.0.0 255.254.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2
ip route-static 81.4.0.0 255.252.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.4.0.0 255.252.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2
ip route-static 81.16.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.16.0.0 255.240.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2
ip route-static 81.32.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.32.0.0 255.240.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2
ip route-static 81.48.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.48.0.0 255.240.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2