设备编码：SHDXYQB4-108-C-07_C-07-ASW-RGS6250-M1-01U40_37
带外地址：10.30.0.43
hostname SHDXYQB4-108-C-07_C-07-ASW-RGS6250-M1-01U40_37
no vrf global-vrf
!
vrf definition NET-manage
description For_NetworkManage
rd 1:1
address-family ipv4
exit-address-family
address-family ipv6
exit-address-family
exit
interface m0
description For_management
vrf forwarding NET-manage
ip address 10.30.0.44 255.255.254.0
acl
!
ip access-list extended 2000
10 permit ip host 10.30.0.136 any
15 permit ip host 10.30.0.137 any
1000 deny ip any any
list-remark For SNMP
!
ip access-list extended 2001
10 permit ip 192.168.0.0 0.0.7.255 any
15 permit ip 192.168.8.0 0.0.7.255 any
20 permit ip 192.168.120.0 0.0.0.255 any
25 permit ip 10.254.181.0 0.0.0.255 any
30 permit ip 10.252.134.0 0.0.1.255 any
35 permit ip 10.10.0.0 0.0.0.127 any
40 permit ip 10.30.0.0 0.0.1.255 any
45 permit ip 10.243.72.0 0.0.0.255 any
1000 deny ip any any
list-remark For_SSH_Login
!
创建vlan
vlan range 200 300-302
199
配置静态路由
ip route vrf NET-manage 0.0.0.0 0.0.0.0 10.30.1.254
开启lldp
lldp enable
lldp management-address-tlv 10.30.0.43
开启ntp
ntp server vrf NET-manage 10.30.1.254 source Mgmt 0 p?
配置时区
clock timezone beijing +8 0
开启svi应用的acl
svi acl enable
svi router-acls enable
关闭telnet
no enable services telnet-server
关闭web
no enable services web-server
SNMP 配置
snmp-server system-shutdown
snmp-server host 10.30.1.240 traps version 2c Ragga0ck3rd0M
snmp-server community 7 06343f04281442240e415809713f view GNCVIEW ro 65
snmp-server trap-source mgmt 0
snmp-server user yundiao SNMPGROUP v3 auth sha yundiao*&COC2016 priv aes128 yundiao*&COC2016
snmp-server group SNMPGROUP v3 priv read default write default access 2000
snmp-server host 10.10.0.136 vrf NET-manage traps version 2c priv yundiao
snmp-server host 10.10.0.137 vrf NET-manage traps version 2c priv yundiao
snmp-server host 10.10.0.136 traps version 3 priv yundiao
snmp-server host 10.10.0.137 traps version 3 priv yundiao
snmp-server enable traps
snmp-server community yundiao*&COC2016 ro 2000
五元组
load-balance-profile ruijie
ipv4 field dst-ip src-ip l4-dst-port l4-src-port protocol src-port
ipv6 field dst-ip l4-dst-port l4-src-port protocol src-ip src-port
!
ip ssh cipher-mode ctr
ip ssh hmac-algorithm sha1-96 sha1
ip ssh version 2
ip ssh access-class 2001
no service timestamps debug
no service timestamps log
logging userinfo
logging buffered 1048576
logging file flash:LOG
logging flash interval 1
logging trap warnings
logging server 10.10.0.136 vrf NET-manage udp-port 5000 level warnings
logging server 10.10.0.137 vrf NET-manage udp-port 5000 level warnings
clock timezone beijing +8 0
!
enable service ssh-server
账号密码配置l
!
username sdnadmin password Pr@ject2018
username sdnadmin privilege 15
username openstackadmin password Pr@ject2018
username openstackadmin privilege 15
username COC_operator password Pr@ject2018
username COC_operator privilege 15
username COC_monitor password Pr@ject94
username COC_monitor privilege 1
username yundiao_read password yundiao*&COC2016
username yundiao_read privilege 1
!
vty
!
line vty 0 9
exec-timeout 10 0
session-timeout 10
transport input ssh
access-class 2001 in
logging synchronous
login local
width 256
vlan描述
!
vlan 300
description For_Storage_Outside
!
vlan 301
description For_Compute_Inside
!
vlan 302
description For_Ceph_Inside
!
配置 M - lag
vap domain 1
no fast-convergence
recover up-delay 120 none-vap 60
priority 5
data-sync local 1.1.1.5 neighbor 1.1.1.6
peer-keepalive local 1.1.1.1 neighbor 1.1.1.2
dual-active auto recovery
!
interface HundredGigabitEthernet 0/55
description PT:SHDXYQB4-108-C-07-ASW-RGS6250-01U37:10.30.0.44.100GE0/55.M-LAG_PeerLink
carrier-delay up 2 down 0
port-group 255 mode active
!
interface HundredGigabitEthernet 0/56
description PT:SHDXYQB4-108-C-07-ASW-RGS6250-01U37:10.30.0.44.100GE0/56.M-LAG_PeerLink
carrier-delay up 2 down 0
port-group 255 mode active
!
interface AggregatePort 255
description PT:SHDXYQB4-108-C-07-ASW-RGS6250-01U37:10.30.0.44.BAGG255
no mac-address-learning
switchport mode trunk
peer-link
!
interface TFGigabitEthernet 0/47
description pT:SHDXYQB4-108-C-07-ASW-RGS6250-01U37:10.30.0.44.10GE0/47_M-LAG KeepA1ive
no switchport
port-group 254 mode active
interface TFGigabitEthernet 0/48
description pT:SHDXYQB4-108-C-07-ASW-RGS6250-01U37:10.30.0.44.10GE0/47_M-LAG KeepA1ive
no switchport
port-group 254 mode active
!
interface AggregatePort 254
description pT:SHDXYQB4-108-C-07-ASW-RGS6250-01U37:10.30.0.44.BAGG254
no switchport
ip add 1.1.1.1 255.255.255.252
vap error-down except
!
vlan 4094
name vap
interface vlan 4094
description For_VAP
ip add 1.1.1.5 255.255.255.252
====
第一步：检测心跳链路状态
test#show vap keepalive
Keepalive peer 1.1.1.2
Message HELLO send 38899
Message HELLO recv 38899
第二步：检测 Peerlink 链路状态
test#show vap peer-link
Peer-link AggregatePort 255 is UP
HundredGigabitEthernet 0/55 is UP
HundredGigabitEthernet 0/56 is UP
第三步：检测MLAG数据同步状态
test#show vap data-sync
Local 1.1.1.5, role master
priority: 5
device mac: 7042.d3a4.51f6
Peer 1.1.1.6, connected
priority: 4
device mac: 7042.d3a4.51ff
MLAG 状态正常情况下将能看到跨设备链路聚合状态
test#show vap
Vap domain: 1, Dev id: 1, Mac: 7042.d3a3.f7cb
Vap groups: 11
Vap 1
Local AggregatePort 1 is UP
HundredGigabitEthernet 0/49 is UP
HundredGigabitEthernet 0/50 is UP
Remote AggregatePort 1 is UP
HundredGigabitEthernet 0/49 is UP
HundredGigabitEthernet 0/50 is UP
Vap 11
Local AggregatePort 11 is UP
TenGigabitEthernet 0/1 is UP
Remote AggregatePort 11 is UP
TenGigabitEthernet 0/1 is UP
====
配置上联接口
!
interface HundredGigabitEthernet 0/49
escription uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U40.10.30.0.41.100GE0/49
carrier-delay up 2 down 0
port-group 255 mode active
!
interface HundredGigabitEthernet 0/50
escription uT:SHDXYQB4-108-C-06-CSW-RGS6250-01U37.10.30.0.42.100GE0/49
carrier-delay up 2 down 0
port-group 255 mode active
!
interface AggregatePort 1
description uT:SHDXYQB4-108-C-06-CSW-RGS6250-M-01U40_01U37.10.30.0.41/10.30.0.42.Bagg11
switchport mode trunk
switchport mode trunk
switchport trunk allowed vlan only 199 200 300 301 302
vap 1
!
创建聚合组
inter agg11
inter agg12
inter agg16
inter agg17
inter agg18
inter agg33
inter agg34
inter agg38
inter agg39
inter agg40
将端口加入聚合组
int Te0/1
port-group 11 mode active
int Te0/2
port-group 12 mode active
int Te0/6
port-group 16 mode active
int Te0/7
port-group 17 mode active
int Te0/8
port-group 18 mode active
int Te0/23
port-group 33 mode active
int Te0/24
port-group 34 mode active
int Te0/28
port-group 38 mode active
int Te0/29
port-group 39 mode active
int Te0/30
port-group 40 mode active
端口基础配置
int Te0/1
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U06.10GSlot.8/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/2
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U03.10GSlot.8/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/3
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U09.10GSlot.8/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
switchport mode access
switchport access vlan 301
!
int Te0/4
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U06.10GSlot.8/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
switchport mode access
switchport access vlan 301
!
int Te0/5
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.10GSlot.8/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
switchport mode access
switchport access vlan 301
!
int Te0/6
description dT:CUnchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U15.10GSlot.8/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/7
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U12.10GSlot.8/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/8
description dT:CUnchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U09.10GSlot.8/1
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/23
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U06.10GSlot.8/2
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/24
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U03.10GSlot.8/2
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/25
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U15.10GSlot.8/2
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
switchport mode access
switchport access vlan 300
!
int Te0/26
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U12.10GSlot.8/2
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
switchport mode access
switchport access vlan 300
!
int Te0/27
description dT:Jisuan:SHDXYQB4-108-C-06-SEV-ZXR5300-02U03.10GSlot.8/2
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
switchport mode access
switchport access vlan 300
!
int Te0/28
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U15.10GSlot.8/2
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/29
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U12.10GSlot.8/2
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa
int Te0/30
storm-control broadcast level 10
lacp short-timeout
panning-tree bpduguard enable
spanning-tree portfa description
dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U09.10GSlot.8/2
配置聚合组
inter agg11
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U06.bond1
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfast
vap 11
switchport mode trunk
switchport trunk allowed vlan only 301
inter agg12
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U03.bond1
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 12
switchport mode trunk
switchport trunk allowed vlan only 301
inter agg16
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U15.bond1
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 16
switchport mode trunk
switchport trunk allowed vlan only 302
inter agg17
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U12.bond1
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 17
switchport mode trunk
switchport trunk allowed vlan only 302
inter agg18
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U09.bond1
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 18
switchport mode trunk
switchport trunk allowed vlan only 302
inter agg33
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U06.bond2
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 33
switchport mode trunk
switchport trunk allowed vlan only 300
inter agg34
description dT:Jisuan:SHDXYQB4-108-C-07-SEV-ZXR5300-02U03.bond2
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 34
switchport mode trunk
switchport trunk allowed vlan only 300
inter agg38
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U15.bond2
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 38
switchport mode trunk
switchport trunk allowed vlan only 300
inter agg39
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U12.bond2
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 39
switchport mode trunk
switchport trunk allowed vlan only 300
inter agg40
description dT:Cunchu:SHDXYQB4-108-C-07-SEV-ZXR5300-02U09.bond2
storm-control broadcast level 10
panning-tree bpduguard enable
spanning-tree portfa
vap 40
switchport mode trunk
switchport trunk allowed vlan only 300
!
interface HundredGigabitEthernet 0/51
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/52
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/53
description NO-USE
shutdown
!
interface HundredGigabitEthernet 0/54
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/31
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/32
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/33
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/34
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/35
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/36
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/37
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/38
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/39
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/40
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/41
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/42
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/43
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/44
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/45
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/46
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/9
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/10
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/11
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/12
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/13
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/14
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/15
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/16
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/17
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/18
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/19
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/20
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/21
description NO-USE
shutdown
!
interface TenGigabitEthernet 0/22
description NO-USE
shutdown
!