关于华为二层交换机集群管理配置规范及说明.docx
- 文档编号:3522069
- 上传时间:2022-11-23
- 格式:DOCX
- 页数:33
- 大小:38.71KB
关于华为二层交换机集群管理配置规范及说明.docx
《关于华为二层交换机集群管理配置规范及说明.docx》由会员分享,可在线阅读,更多相关《关于华为二层交换机集群管理配置规范及说明.docx(33页珍藏版)》请在冰豆网上搜索。
关于华为二层交换机集群管理配置规范及说明
关于华为二层交换机集群管理配置规范及说明
一、组网说明:
榆社县局S3552G交换机E0/1下挂榆社水利小区3号楼S2016C,3号楼S2016C交换机E0/2下挂水利小区2号楼S2403H,3号楼S2016C交换机E0/3下挂水利小区1号楼S2024C。
二、组网图:
三、配置步骤
1、配置管理设备(由汇聚层人员来配置)
(1)启动设备上的NDP和端口E0/1日的NDP协议:
[YS_XianJu_S3552G]ndpenable
YS_XianJu_S3552G]interfaceethernet0/1
[YS_XianJu_S3552G-Ethernet0/1]ndpenable
[YS_XianJu_S3552G-Ethernet0/1]interfaceethernet0/2
[YS_XianJu_S3552G-Ethernet0/2]ndpenable
#配置NDP信息的有效保留时间为200秒
[YS_XianJu_S3552G]ndptimeraging200
#配置NDP报文发送的时间间隔为70秒
[YS_XianJu_S3552G]ndptimerhello70
(2)启动设备上的NTDP和端口E0/1E0/2上的NTDP
[YS_XianJu_S3552G]ntdpenable
[YS_XianJu_S3552G]interfaceethernet0/1
YS_XianJu_S3552G-Ethernet0/1]ntdpenable
[YS_XianJu_S3552G-Ethernet0/1]interfaceethernet0/2
[YS_XianJu_S3552G-Ethernet0/2]ntdpenable
#配置拓扑收集范围为7跳
[YS_XianJu_S3552G]ntdphop7
#配置被收集设备转发拓扑收集请求的延迟时间为150ms
[YS_XianJu_S3552G]ntdptimerhop-delay150
#配置被收集设备的端口转发拓扑收集请求的延迟时间为15ms
[YS_XianJu_S3552G]ntdptimerport-delay15
#配置定时拓扑收集的时间间隔为3分钟
[YS_XianJu_S3552G]ntdptimer3
(3)配置管理vlan
#创建管理vlan
[YS_XianJu_S3552G]vlan4051
#将管理vlan4051作为管理vlan
[YS_XianJu_S3552G]management-vlan4051
#进入以太网端口E0/19
[YS_XianJu_S3552G-Ethernet0/19]
descriptionto_ys_shuili_dishui2_caizhen_xiaoqu
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan45to5135274051
(4)启动集群功能
[YS_XianJu_S3552G]clusterenable
#进入集群视图
YS_XianJu_S3552G]cluster
[YS_XianJu_S3552G-cluster]
#配置集群内部使用的IP地址池起始地址为10.0.1.1有254个地址
[YS_XianJu_S3552G-cluster]ip-pool10.0.1.1255.255.255.0
(5)配置集群名字建立集群
[YS_XianJu_S3552G-cluster]buildYSYD
[YSYD_0.YS_XianJu_S3552G-cluster]
(6)将下挂的两个交换机加入到集群中
[YSYD_0.YS_XianJu_S3552G-cluster]add-member1mac-address00e0-fc01-0011
[YSYD_0.YS_XianJu_S3552G-cluster]add-member2mac-address00e0-fc01-0013
[YSYD_0.YS_XianJu_S3552G-cluster]add-member3mac-address00e0-fc01-0011
#配置成员设备信息的保留时间为100秒
[YSYD_0.YS_XianJu_S3552G-cluster]holdtime100
#配置握手报文定时发送的时间间隔为10秒
[YSYD_0.YS_XianJu_S3552G-cluster]timer10
2、配置成员设备(由接入层维护人员来配置)
以榆社水利小区3号楼S2016C为例:
#启动设备上的NDP和端口Ethernet1/1上的NDP
[YS_ShuiLi_3#Lou_S2016C]ndpenable
[YS_ShuiLi_3#Lou_S2016C]interfaceethernet1/1
[YS_ShuiLi_3#Lou_S2016C-Ethernet1/1]ndpenable
#启动设备上的NTDP和端口Ethernet1/1上的NTDP
[YS_ShuiLi_3#Lou_S2016C]ntdpenable
[YS_ShuiLi_3#Lou_S2016C]interfaceethernet1/1
[YS_ShuiLi_3#Lou_S2016C-Ethernet1/1]ntdpenable
#创建vlan4051创建管理vlan,根汇聚层交换机管理vlan来确定。
[YS_ShuiLi_3#Lou_S2016C]vlan4051
#将vlan4051作为管理vlan
[YS_ShuiLi_3#Lou_S2016C]management-vlan4051
#进入以太网端口E0/1,透传管理vlan4051将二层交换机上联口透传管理vlan
[YS_ShuiLi_3#Lou_S2016C]interfacee0/1
[YS_ShuiLi_3#lou_S2016C-Ethernet0/1]porttrunkpermitvlan4051
#启动集群功能
[YS_ShuiLi_3#Lou_S2016C]clusterenable
四、数据配置举例如下:
1、榆社县局S3552G配置如下:
#
sysnameYS_XianJu_S3552G
#
superpasswordlevel3cipher^#:
+/G*8`P,:
)&"CZHH(&1!
!
#
ntdphop7
ntdptimerport-delay15
ntdptimerhop-delay150
ntdptimer3
#
radiusschemesystem
server-typehuawei
primaryauthentication127.0.0.11645
primaryaccounting127.0.0.11646
user-name-formatwithout-domain
domainsystem
radius-schemesystem
access-limitdisable
stateactive
vlan-assignment-modeinteger
idle-cutdisable
self-service-urldisable
messengertimedisable
domaindefaultenablesystem
#
local-servernas-ip127.0.0.1keyhuawei
local-usersxhuawei
passwordcipher(W_]UELR9IaNK<;9B9.`)Q!
!
service-typetelnetlevel1
#
Specifydeadloopmonitor
#
temperature-limit02080
#
ndptimerhello70
ndptimeraging200
#
management-vlan4051
#
aclnumber3998
rule0denyipdestination10.0.1.00.0.0.255
rule1permitipsource10.0.1.00.0.0.255
aclnumber3999
rule0denyipsource10.0.1.00.0.0.255
rule1permitipdestination10.0.1.00.0.0.255
#
vlan1
#
vlan27
#
vlan28
#
vlan29
#
vlan30
#
vlan31
#
vlan32
#
vlan33
#
vlan34
#
vlan35
#
vlan36
#
vlan37
#
vlan38
#
vlan39
#
vlan40
#
vlan41
#
vlan42
#
vlan43
#
vlan44
#
vlan45
#
vlan46
#
vlan47
#
vlan48
#
vlan49
#
vlan50
#
vlan51
#
vlan52
#
vlan53
#
vlan1672
descriptionto_ys_taichanggaosu(yulin)
#
vlan1711
#
vlan2101
#
vlan2103
#
vlan2104
#
vlan2105
multicast-vlanenable
#
vlan3524
#
vlan3526
#
vlan3527
#
vlan3528
#
vlan3529
#
vlan3530
#
vlan3532
#
vlan3534
#
vlan3535
#
vlan3536
#
vlan3537
#
vlan4051
#
interfaceVlan-interface4051
ipaddress221.131.31.130255.255.255.240
#
interfaceAux0/0
#
interfaceEthernet0/1
shutdown
#
interfaceEthernet0/2
descriptionto_ys_taichanggaosu(yulin)
broadcast-suppression5
portaccessvlan1672
#
interfaceEthernet0/3
descriptionto_ys_donghuixiaoxue
broadcast-suppression5
portaccessvlan3526
#
interfaceEthernet0/4
descriptionto_ys_tudijusushe
broadcast-suppression5
portaccessvlan3528
#
interfaceEthernet0/5
descriptionto_ys_nonghangsushe
broadcast-suppression5
portaccessvlan3529
#
interfaceEthernet0/6
descriptionto_ys_dishuiyixiaoqu
broadcast-suppression5
portaccessvlan3530
#
interfaceEthernet0/7
descriptionto_ys_lianjiazhuang
broadcast-suppression5
portaccessvlan1711
#
interfaceEthernet0/8
descriptionto_ys_dongshengyingyeting
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan2103to21053532
#
interfaceEthernet0/9
descriptionto_ys_xianweidanxiaowenhuazhan
broadcast-suppression5
portaccessvlan3534
#
interfaceEthernet0/10
descriptionto_ys_youzhenxiaoqu
broadcast-suppression5
portaccessvlan3535
#
interfaceEthernet0/11
descriptionto_ys_jiaokejuwenhuazhan
broadcast-suppression5
portaccessvlan3536
#
interfaceEthernet0/12
descriptionto_ys_jishengfuyouyuan
broadcast-suppression5
portaccessvlan3537
#
interfaceEthernet0/13
descriptionto_ys_xiangzhenjuxiaoqu
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan31to33
#
interfaceEthernet0/14
descriptionto_ys_mingzhenjuxiaoqu
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan34to35
#
interfaceEthernet0/15
descriptionto_ys_renhangxiaoqu
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan36
#
interfaceEthernet0/16
descriptionto_ys_huagongxiaoqu
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan27to30
#
interfaceEthernet0/17
descriptionto_ys_gongan,liangshijuxiaoqu
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan37to40
#
interfaceEthernet0/18
descriptionto_ys_gongan,yizhongxuexiaoqu
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan41to44
#
interfaceEthernet0/19
descriptionto_ys_shuili_dishui2_caizhen_xiaoqu
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan45to5135274051
#
interfaceEthernet0/20
descriptionto_ys_guoshuixiaoqu
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan52to53
#
interfaceEthernet0/21
descriptionto_ys_yingchunyingyeting
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan21013524
#
interfaceEthernet0/22
shutdown
#
interfaceEthernet0/23
shutdown
#
interfaceEthernet0/24
shutdown
#
interfaceEthernet0/25
shutdown
#
interfaceEthernet0/26
shutdown
#
interfaceEthernet0/27
shutdown
#
interfaceEthernet0/28
shutdown
#
interfaceEthernet0/29
shutdown
#
interfaceEthernet0/30
shutdown
#
interfaceEthernet0/31
shutdown
#
interfaceEthernet0/32
shutdown
#
interfaceEthernet0/33
shutdown
#
interfaceEthernet0/34
shutdown
#
interfaceEthernet0/35
shutdown
#
interfaceEthernet0/36
shutdown
#
interfaceEthernet0/37
shutdown
#
interfaceEthernet0/38
shutdown
#
interfaceEthernet0/39
shutdown
#
interfaceEthernet0/40
shutdown
#
interfaceEthernet0/41
shutdown
#
interfaceEthernet0/42
shutdown
#
interfaceEthernet0/43
shutdown
#
interfaceEthernet0/44
shutdown
#
interfaceEthernet0/45
shutdown
#
interfaceEthernet0/46
shutdown
#
interfaceEthernet0/47
shutdown
#
interfaceEthernet0/48
shutdown
#
interfaceGigabitEthernet1/1
descriptionto_YS_S6506R_G4/0/12
duplexfull
speed1000
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan27to531672171121012103to210535243526to353035323534to35374051
#
interfaceGigabitEthernet1/2
shutdown
#
interfaceGigabitEthernet1/3
shutdown
#
interfaceGigabitEthernet1/4
shutdown
#
interfaceNULL0
#
cluster
ip-pool10.0.1.1255.255.255.0
buildYSYD
holdtime100
#
[YSYD_0.YS_XianJu_S3552G-cluster]add-member1mac-address00e0-fc01-0011
[YSYD_0.YS_XianJu_S3552G-cluster]add-member2mac-address00e0-fc01-0013
[YSYD_0.YS_XianJu_S3552G-cluster]add-member3mac-address00e0-fc01-0011
#
iproute-static0.0.0.00.0.0.0221.131.31.129preference60
#
snmp-agent
snmp-agentlocal-engineid800007DB000FE215D6606877
snmp-agentcommunityreadjzyd
snmp-agentcommunityreadpublic
snmp-agentcommunitywritesxjzyd
snmp-agentcommunitywriteprivate
snmp-agentcommunityreadpublic@cm0
snmp-agentcommunitywriteprivate@cm0
snmp-agentsys-infolocationBeiJingChina
snmp-agentsys-infoversionall
snmp-agenttarget-hosttrapaddressudp-domain211.142.42.68paramssecuritynamejzyd
snmp-agenttarget-hosttrapaddressudp-domain211.142.42.69paramssecuritynamejzyd
snmp-agenttrapenablestandard
snmp-agenttrapenableconfiguration
snmp-agenttrapenablevrrp
snmp-agenttrapenablebgp
snmp-agenttrapsourceVlan-inter
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- 关于 华为 交换机 集群 管理 配置 规范 说明