发布时间: 2017-12-21 | 浏览次数: 1438 | 下载次数: 37 | 作者: c00426737 | 文档编号: EKB1001148679
如下图所示,某客户使用CE系列交换机搭建数据中心三层网络,使用两台CE12808 分别做虚拟化VS配置,两台虚拟成四台,每台都划分为VS0 和 VS1 ,横向虚拟化采用M-LAG技术。
其中,VS1上联四台CiscoN7K设备,为C0区域,C0区域Cisco设备与A0区域Cisco设备互联(此案例中,客户将CISCO网络划分为数个区域,本案例只涉及A0区域和C0,其中C0区域如图所示,为最上端四台CiscoN7K交换机,A0区域与C0区域相连接,但图中A0区域不做显示)。
VS1采用OSPF与C0区域N7K设备对接。
(CE12808版本:V2R1C00SPC700 ,补丁:V200R001SPH009)
在与上联的CISCO网络对接后,发现CE12808交换机在对接C0区CISCO N7K设备时,A0区的Cisco设备无法学习到CE12808交换机 OSPF上引入的汇总路由。
设备配置如下:
BF12RT0A-DR:
ospf 65080 router-id 80.98.3.61
import-route static type 1 route-policy VS1toC0
preference 110
preference ase 110
bandwidth-reference 100000
area 0.0.0.0
network 80.98.3.61 0.0.0.0
network 80.98.100.0 0.0.0.3
network 80.98.100.4 0.0.0.3
network 80.98.100.8 0.0.0.3
network 80.98.100.12 0.0.0.3
network 81.104.100.132 0.0.0.3
route-policy VS1toC0 permit node 10
if-match tag 104
#
ip route-static 81.0.0.0 255.0.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.0.0.0 255.0.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2
BF12RT0B-DR:
ospf 65080 router-id 80.98.3.62
import-route static type 1 route-policy VS1toC0
preference 110
preference ase 110
bandwidth-reference 100000
area 0.0.0.0
network 80.98.3.62 0.0.0.0
network 80.98.100.16 0.0.0.3
network 80.98.100.20 0.0.0.3
network 80.98.100.24 0.0.0.3
network 80.98.100.28 0.0.0.3
network 81.104.100.132 0.0.0.3
#
route-policy VS1toC0 permit node 10
if-match tag 104
ip route-static 81.0.0.0 255.0.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.0.0.0 255.0.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2
其中 81.0.0.0 网段为LEAF交换机下连服务器网段,
对接后发现C0区域Cisco设备OSPF可以正常学习到这两条回指服务器路由,但A0区域Cisco设备上未通过OSPF学习到该条路由。 无法从A0区域访问服务器。
首先,查看A0区域与C0区域Cisco设备OSPF;
邻居关系正常,可学习到其他路由。
随后,在VS1上回指一条32位主机明细路由,发现A0区域Cisco设备上可以通过OSPF学习到该条路由。
得出结论,故障原因应为A0区域或C0区域Cisco设备做了针对81.0.0.0网段策略过滤。
具体配置如下:
BF12RT0A-DR:
ip route-static 81.2.1.32 255.255.255.255 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.2.1.32 255.255.255.255 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2
BF12RT0B-DR:
ip route-static 81.2.1.32 255.255.255.255 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.2.1.32 255.255.255.255 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2
由上述分析可知,根因为A0区域或C0区域Cisco设备做了针对81.0.0.0网段策略过滤。
将下联服务网段分别汇总写明细路由,但是不写关于81.0.0.0网段的汇总路由。
具体配置如下:
BF12RT0A-DR:
ip route-static 81.2.0.0 255.254.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.2.0.0 255.254.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2
ip route-static 81.4.0.0 255.252.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.4.0.0 255.252.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2
ip route-static 81.16.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.16.0.0 255.240.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2
ip route-static 81.32.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.32.0.0 255.240.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2
ip route-static 81.48.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4001
ip route-static 81.48.0.0 255.240.0.0 Eth-Trunk2 81.104.100.145 tag 104 description ByPass_BF12SW0A-DR_Eth-Trunk2
BF12RT0B-DR:
ip route-static 81.2.0.0 255.254.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.2.0.0 255.254.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2
ip route-static 81.4.0.0 255.252.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.4.0.0 255.252.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2
ip route-static 81.16.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.16.0.0 255.240.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2
ip route-static 81.32.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.32.0.0 255.240.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2
ip route-static 81.48.0.0 255.240.0.0 Vlanif4020 81.104.100.17 preference 100 tag 104 description BF95FW0A(0B)-DR_Vlanif4020
ip route-static 81.48.0.0 255.240.0.0 Eth-Trunk2 81.104.100.149 tag 104 description ByPass_BF12SW0B-DR_Eth-Trunk2