关于华为二层交换机集群管理配置规范及说明Word文档下载推荐.docx
- 文档编号:21471420
- 上传时间:2023-01-30
- 格式:DOCX
- 页数:13
- 大小:20.37KB
关于华为二层交换机集群管理配置规范及说明Word文档下载推荐.docx
《关于华为二层交换机集群管理配置规范及说明Word文档下载推荐.docx》由会员分享,可在线阅读,更多相关《关于华为二层交换机集群管理配置规范及说明Word文档下载推荐.docx(13页珍藏版)》请在冰豆网上搜索。
[YS_XianJu_S3552G]ndptimerhello70
(2)启动设备上的NTDP和端口上的NTDP
[YS_XianJu_S3552G]ntdpenable
#配置拓扑收集范围为7跳
[YS_XianJu_S3552G]ntdphop7#配置被收集设备转发拓扑收集请求的延迟时间为150ms
[YS_XianJu_S3552G]ntdptimerhop-delay150
15ms
#配置被收集设备的端口转发拓扑收集请求的延迟时间为[YS_XianJu_S3552G]ntdptimerport-delay15#配置定时拓扑收集的时间间隔为3分钟[YS_XianJu_S3552G]ntdptimer3
(3)配置管理vlan
#创建管理vlan[YS_XianJu_S3552G]vlan4051
#将管理vlan4051作为管理vlan[YS_XianJu_S3552G]management-vlan4051#进入以太网端口
descriptionto_ys_shuili_dishui2_caizhen_xiaoqu
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan45to5135274051
(4)启动集群功能
[YS_XianJu_S3552G]clusterenable
#进入集群视图
YS_XianJu_S3552G]cluster
[YS_XianJu_S3552G-cluster]
#配置集群内部使用的IP地址池起始地址为10.0.1.1有254个地址
[YS_XianJu_S3552G-cluster]ip-pool10.0.1.1255.255.255.0
(5)配置集群名字建立集群
[YS_XianJu_S3552G-cluster]buildYSYD
[YSYD_0.YS_XianJu_S3552G-cluster]
(6)将下挂的两个交换机加入到集群中
[YSYD_0.YS_XianJu_S3552G-cluster]add-member1mac-address00e0-fc01-0011[YSYD_0.YS_XianJu_S3552G-cluster]add-member2mac-address00e0-fc01-0013[YSYD_0.YS_XianJu_S3552G-cluster]add-member3mac-address00e0-fc01-0011#配置成员设备信息的保留时间为100秒
[YSYD_0.YS_XianJu_S3552G-cluster]holdtime100
#配置握手报文定时发送的时间间隔为10秒
[YSYD_0.YS_XianJu_S3552G-cluster]timer10
2、配置成员设备(由接入层维护人员来配置)
以xx水利小区3号楼S2016C为例:
#启动设备上的NDP和端口上的NDP
[YS_ShuiLi_3#Lou_S2016C]ndpenable
#启动设备上的NTDP和端口上的NTDP
[YS_ShuiLi_3#Lou_S2016C]ntdpenable
#创建vlan4051创建管理vian,根汇聚层交换机管理vlan来确定。
[YS_ShuiLi_3#Lou_S2016C]vlan4051
#将vlan4051作为管理vlan
[YS_ShuiLi_3#Lou_S2016C]management-vlan4051
#进入以太网端口透传管理vlan4051将二层交换机上联口透传管理vlan#启动集群功能
[YS_ShuiLi_3#Lou_S2016C]clusterenable
四、数据配置举例如下:
1、xx局S3552G配置如下:
<
YSYD_0.YS_XianJu_S3552G>
discu#sysnameYS_XianJu_S3552G#super
passwordlevel3cipherA#:
+/G*8'
P,:
)&
"
CZHH(&
1!
!
#ntdphop7
ntdptimerport-delay15
ntdptimerhop-delay150
ntdptimer3#radiusschemesystem
server-typehuawei
primaryauthentication127.0.0.11645
primaryaccounting127.0.0.11646
user-name-formatwithout-domain
domainsystem
radius-schemesystem
access-limitdisablestateactivevlan-assignment-modeintegeridle-cutdisableself-service-urldisablemessengertimedisable
domaindefaultenablesystem#local-servernas-ip127.0.0.1keyhuaweilocal-usersxhuawei
passwordcipher(W_]UELR9laNK<
;
9B9.'
)Q!
ndptimeraging200#management-vlan4051#aclnumber3998
rule0denyipdestination10.0.1.00.0.0.255
rule1permitipsource10.0.1.00.0.0.255
aclnumber3999
rule0denyipsource10.0.1.00.0.0.255
rule1permitipdestination10.0.1.00.0.0.255#vlan1#vlan27#vlan28#vlan
29#vlan30#vlan31#vlan32#vlan33#vlan34#vlan35#vlan36#vlan37#vlan38#vlan
39#vlan40#vlan41#vlan42#vlan43#vlan44#vlan45#vlan46#vlan47#vlan48#vlan
49#vlan50#vlan51#vlan52#vlan53#vlan1672
descriptionto_ys_taichanggaosu(yulin)#vlan1711#vlan2101#vlan2103#vlan2104#vlan2105
multicast-vlanenable#vlan3524#vlan3526#vlan3527#vlan3528#vlan
3529#vlan3530#vlan3532#vlan3534#vlan35#vlan3536#vlan3537#vlan4051#interfaceVlan-interface4051
ipaddress221.131.31.130255.255.255.240##
shutdown#descriptionto_ys_taichanggaosu(yulin)broadcast-suppression5
portaccessvlan1672#descriptionto_ys_donghuixiaoxuebroadcast-suppression5
portaccessvlan3526#descriptionto_ys_tudijushebroadcast-suppression5
portaccessvlan3528#descriptionto_ys_nonghangsushebroadcast-suppression5
portaccessvlan3529#descriptionto_ys_dishuiyixiaoqubroadcast-suppression5
portaccessvlan3530#descriptionto_ys_lianjiazhuangbroadcast-suppression5
portaccessvlan1711#descriptionto_ys_dongshengyingyetingportlink-typetrunk
porttrunkpermitvlan2103to21053532#description_xianweidanxiaowenhuazhan
broadcast-suppression5
portaccessvlan3534#descriptionto_ys_youzhenxiaoqubroadcast-suppression5
portaccessvlan35#descriptionto_ys_jiaokejuwenhuazhan
broadcast-suppression5portaccessvlan3536#descriptionto_ys_jishengfuyouyuanbroadcast-suppression5
portaccessvlan3537#descriptionto_ys_xiangzhenjuxiaoqu
porttrunkpermitvlan31to33#descriptionto_ys_mingzhenjuxiaoquportlink-typetrunk
porttrunkpermitvlan34to35#descriptionto_ys_renhangxiaoquportlink-typetrunk
porttrunkpermitvlan36#descriptionto_ys_huagongxiaoqu
porttrunkpermitvlan27to30#descriptionto_ys_gongan,liangshijuxiaoquportlink-typetrunk
porttrunkpermitvlan37to40#descriptionto_ys_gongan,yizhongxuexiaoquportlink-typetrunk
porttrunkpermitvlan41to44#descriptionto_ys_shuili_dishui2_caizhen_xiaoqu
porttrunkpermitvlan45to5135274051#descriptionto_ys_guoshuixiaoqu
porttrunkpermitvlan52to53#descriptionto_ys_yingchunyingyeting
porttrunkpermitvlan21013524#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#duplexfull
speed1000
porttrunkpermitvlan27to5316721711to3526to3530to35374051#shutdown#shutdown#shutdown#interfaceNULL0#cluster
ip-pool10.0.1.1255.255.255.0
buildYSYD
holdtime100#[YSYD_0.YS_XianJu_S3552G-cluster]add-member1mac-address00e0-fc01-0011[YSYD_0.YS_XianJu_S3552G-cluster]add-member2mac-address00e0-fc01-0013[YSYD_0.YS_XianJu_S3552G-cluster]add-member3mac-address00e0-fc01-0011#
iproute-static0.0.0.00.0.0.0221.131.31.129preference60#snmp-agent
snmp-agentlocal-engineid8007DB000FE215D
snmp-agentsys-infolocationBeiJingChina
snmp-agentsys-infoversionall
snmp-agenttarget-hosttrapaddressudp-domain211.142.42.68paramssecuritynamejzyd
snmp-agenttarget-hosttrapaddressudp-domain211.142.42.69paramssecuritynamejzyd
snmp-agenttrapenablestandard
snmp-agenttrapenableconfiguration
snmp-agenttrapenablevrrp
snmp-agenttrapenablebgp
snmp-agenttrapsourceVlan-interface4051#ntp-serviceunicast-server211.138.98.2
ntp-serviceunicast-server211.138.98.1#user-interfaceaux0
authentication-modescheme
user-interfacevty04
authentication-modescheme#Return
2、榆社水利小区3号楼S2016C配置如下:
YSYD_1.YS_ShuiLi_3#Lou_S2016C>
discu#sysnameYS_ShuiLi_3#Lou_S2016C对交换机进行命名#superpasswordlevel3cipher八#:
#info-centerloghost10.0.1.1#management-vlan4051修改集群管理vlan(根据汇聚层交换机管理vlan确定)#que-schedulerwrr1248#vlan1#vlan45
port-isolateenable小区交换机端口隔离配置#vlan
46#vlan47#vlan48#vlan49#vlan50#vlan51#vlan3527#vlan4051增加交换机集群管理vlan号(根据汇聚层交换机管理vlan确定)#
interfaceVlan-interface4051##
descriptionto_(描述该交换机的上联交换机及端口)portlink-typetrunk
porttrunkpermitvlan45to51(上联口透传集群管理vlan号)port-isolateuplink-portvlan45(上联口配置本交换机端口隔离vlan)#
description对交换机联端口进行描述
(透传集群管理VLAN)
)
porttrunkpermitvlan464051description对交换机联端口进行描述
porttrunkpermitvlan474051
broadcast-suppression5(对ACCESS^口进行广播抑制)portaccessvian45#broadcast-suppression5
portaccessvian45#broadcast-suppression5
portaccessvian45#interfaceNULL0#snmp-agent
snmp-agentiocai-engineid8007DB000FE237E4CB6877
snmp-agentsys-infoiocationBeiJingChina
snmp-agentsys-infoversionaii
snmp-agenttarget-hosttrapaddressudp-domain10.0.1.1paramssecuritynameciuster
snmp-agenttrapenabiestandard
snmp-agenttrapenabieconfiguration
snmp-agenttrapsourceVlan-interface4051#user-interfaceaux0authentication-modepassword
setauthenticationpasswordcipherN'
C55QKv'
二/Q"
Q'
MAF4v1!
#Return
3、榆社水利1号楼S2024C交换机配置如下:
YSYD_1.YS_ShuiLi_1#Lou_S2024C>
discu#sysnameYS_ShuiLi_1#Lou_S2024C对交换机进行命名#superpasswordlevel3cipherA#:
#info-centerloghost10.0.1.1#management-vlan4051修改集群管理vlan(根据汇聚层交换机管理vlan确定)#que-schedulerwrr1248#vlan1#vlan47
port-isolateenable小区交换机端口隔离配置#vlan4051
增加交换机集群管理vlan号(根据汇聚层交换机管理vlan确定)#
porttrunkpermitvlan474051(上联口透传集群管理vlan号)port-isolateuplink-portvlan47(上联口配置本交换机端口隔离vlan)#
portaccessvlan47#broadcast-suppression5
portaccessvlan47#broad
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- 关于 华为 交换机 集群 管理 配置 规范 说明