01-H3C_FCoE典型配置举例
本章节下载: 01-H3C_FCoE典型配置举例 (403.83 KB)
H3C FCoE典型配置举例
资料版本:6W100-20190330
产品版本:Release 7577P04
Copyright © 2019 新华三技术有限公司 版权所有,保留一切权利。
非经本公司书面许可,任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部,并不得以任何形式传播。
除新华三技术有限公司的商标外,本手册中出现的其它公司的商标、产品标识及商品名称,由各自权利人拥有。
本文档中的信息可能变动,恕不另行通知。
本文档介绍了FCoE(Fibre Channel over Ethernet,基于以太网的光纤通道)的FC静态路由、FSPF和FC Zone特性的典型配置举例。
本文档中的配置均是在实验室环境下进行的配置和验证,配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置,为了保证配置效果,请确认现有配置和以下举例中的配置不冲突。
本文假设您已了解FCoE特性。
FCoE功能的使用受License控制,请在使用FCoE功能前,安装有效的数据中心License。
设备只有工作在高级模式或专家模式下,才支持FCoE功能。
目前仅以下接口板支持FCoE功能:
· SF系列接口板
· SG系列接口板
· EC系列接口板
· 下列SE系列接口板:
¡ LSXM1GP44TSSE3
¡ LSXM1GP24TSSE3
¡ LSXM1GT24PTSSE3
¡ LSXM1GT48SE3
如图1所示,网络由三台FCF交换机Switch A~Switch C、1个服务器Server和1个磁盘设备Disk组成。
现要求在Switch A、Switch B和Switch C上配置FCoE功能,实现:
· 任意两台FCF交换机之间都能互通;
· SAN网络中的存储数据流量能够在以太网链路上无损传输;
· Server能够通过Fabric网络访问Disk内的存储资源。
图1 配置FC静态路由组网图
· 为了实现SAN网络中的存储数据流量能够在无损以太网链路上传输,H3C建议用户在交换机和服务器连接的以太网接口上配置DCBX、自动协商模式的PFC、ETS功能;在交换机和磁盘设备连接的以太网接口上配置DCBX、自动协商模式的PFC功能;在交换机与交换机连接的以太网接口上强制开启PFC功能。
· 由于网络拓扑结构比较简单并且稳定,建议用户采用静态方式建立Fabric网络,并为该Fabric网络配置FC静态路由。
· 为了能够实现Server能够访问Disk内的存储资源,需要配置允许默认Zone内的成员互相访问。
配置FC静态路由需要先规划好Fabric网络,即确定Fabric网络中所有FCF交换机需要配置的域ID。
(1) 开启高级模式
# 配置设备工作模式为高级模式(如果已经配置设备为高级模式此步骤可略)。
<SwitchA> system-view
[SwitchA] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the
system to make it effective.
# 保存配置。
[SwitchA] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[SwitchA] quit
# 重启设备。
<SwitchA> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
(2) 部署DCBX
# 全局开启LLDP功能。
<SwitchA> system-view
[SwitchA] lldp global enable
# 在以太网接口Ten-GigabitEthernet1/0/1上开启LLDP功能,并允许发布DCBX TLV。
[SwitchA] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] lldp enable
[SwitchA-Ten-GigabitEthernet1/0/1] lldp tlv-enable dot1-tlv dcbx
[SwitchA-Ten-GigabitEthernet1/0/1] quit
# 创建编号为4000的二层ACL,并为其创建规则来匹配FCoE报文(协议号为0x8906)和FIP报文(协议号为0x8914)。
[SwitchA] acl mac 4000
[SwitchA-acl-mac-4000] rule 0 permit type 8906 ffff
[SwitchA-acl-mac-4000] rule 5 permit type 8914 ffff
[SwitchA-acl-mac-4000] quit
# 定义名为app_c的类,其下各规则间的关系为逻辑或,并定义其匹配ACL 4000。
[SwitchA] traffic classifier app_c operator or
[SwitchA-classifier-app_c] if-match acl mac 4000
[SwitchA-classifier-app_c] quit
# 定义名为app_b的流行为,并配置标记报文的802.1p优先级为3。
[SwitchA] traffic behavior app_b
[SwitchA-behavior-app_b] remark dot1p 3
[SwitchA-behavior-app_b] quit
# 定义名为plcy的策略,为类app_c指定采用的流行为是app_b,并指定该策略为DCBX模式。
[SwitchA] qos policy plcy
[SwitchA-qospolicy-plcy] classifier app_c behavior app_b mode dcbx
[SwitchA-qospolicy-plcy] quit
# 在以太网接口Ten-GigabitEthernet1/0/1的出方向上应用策略plcy。
[SwitchA] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] qos apply policy plcy outbound
(3) 部署PFC
# 在以太网接口Ten-GigabitEthernet1/0/1上配置PFC功能的开启模式为自动协商模式,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control auto
[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3
[SwitchA-Ten-GigabitEthernet1/0/1] qos trust dot1p
[SwitchA-Ten-GigabitEthernet1/0/1] quit
# 在以太网接口Ten-GigabitEthernet1/0/2上配置强制开启PFC功能,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchA] interface ten-gigabitethernet 1/0/2
[SwitchA-Ten-GigabitEthernet1/0/2] priority-flow-control enable
[SwitchA-Ten-GigabitEthernet1/0/2] priority-flow-control no-drop dot1p 3
[SwitchA-Ten-GigabitEthernet1/0/2] qos trust dot1p
[SwitchA-Ten-GigabitEthernet1/0/2] quit
(4) 部署ETS
# 配置802.1p优先级到本地优先级的映射,将802.1p优先级3映射到本地优先级1,配置其它的802.1p优先级映射到本地优先级0。
[SwitchA] qos map-table dot1p-lp
[SwitchA-maptbl-dot1p-lp] import 3 export 1
[SwitchA-maptbl-dot1p-lp] import 0 1 2 4 5 6 7 export 0
[SwitchA-maptbl-dot1p-lp] quit
# 在以太网接口Ten-GigabitEthernet1/0/1上开启并配置WRR队列,使FCoE流量和普通LAN流量各占50%带宽。
[SwitchA] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr byte-count
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af1 group 1 byte-count 1
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr be group 1 byte-count 1
# 在以太网接口Ten-GigabitEthernet1/0/1上配置其它的队列为SP调度方式。
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af2 group sp
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af3 group sp
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af4 group sp
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr ef group sp
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr cs6 group sp
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr cs7 group sp
[SwitchA-Ten-GigabitEthernet1/0/1] quit
(5) 配置FCoE功能
# 配置交换机模式为FCF模式。
[SwitchA] fcoe-mode fcf
# 关闭VSAN 1的Fabric配置功能。
[SwitchA] vsan 1
[SwitchA-vsan1] undo domain configure enable
# 配置Fabric网络的名称。
[SwitchA-vsan1] fabric-name 11:11:11:11:11:11:11:11
# 配置Switch A的域ID为1。
[SwitchA-vsan1] domain-id 1 static
Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y
[SwitchA-vsan1] quit
# 创建VFC1接口,将VFC1接口绑定到以太网接口Ten-GigabitEthernet1/0/1上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchA] interface vfc 1
[SwitchA-Vfc1] bind interface ten-gigabitethernet 1/0/1
[SwitchA-Vfc1] port trunk vsan 1
[SwitchA-Vfc1] quit
# 创建VFC2接口,配置VFC2接口工作在E模式,将VFC2接口绑定到以太网接口Ten-GigabitEthernet1/0/2上,并将VFC2接口以Trunk方式加入VSAN 1。
[SwitchA] interface vfc 2
[SwitchA-Vfc2] fc mode e
[SwitchA-Vfc2] bind interface ten-gigabitethernet 1/0/2
[SwitchA-Vfc2] port trunk vsan 1
[SwitchA-Vfc2] quit
# 配置以太网接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2允许VLAN 10的报文通过。
[SwitchA] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2
[SwitchA-if-range] port link-type trunk
[SwitchA-if-range] port trunk permit vlan 10
[SwitchA-if-range] quit
# 开启VLAN 10的FCoE功能并将其与VSAN 1进行映射。
[SwitchA] vlan 10
[SwitchA-vlan10] fcoe enable vsan 1
[SwitchA-vlan10] quit
# 配置允许默认Zone内的成员互相访问。
[SwitchA] vsan 1
[SwitchA-vsan1] zone default-zone permit
# 在Switch A上配置到达Switch B和Switch C的FC静态路由。
[SwitchA-vsan1] fc route-static 020000 8 vfc 2
[SwitchA-vsan1] fc route-static 030000 8 vfc 2
[SwitchA-vsan1] quit
(1) 开启高级模式
# 配置设备工作模式为高级模式(如果已经配置设备为高级模式此步骤可略)。
<SwitchB> system-view
[SwitchB] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the
system to make it effective.
# 保存配置。
[SwitchB] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[SwitchB] quit
# 重启设备。
<SwitchB> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
(2) 部署PFC
# 在以太网接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上配置强制开启PFC功能,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
<SwitchB> system-view
[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2
[SwitchB-if-range] priority-flow-control enable
[SwitchB-if-range] priority-flow-control no-drop dot1p 3
[SwitchB-if-range] qos trust dot1p
[SwitchB-if-range] quit
(3) 配置FCoE功能
# 配置交换机模式为FCF模式。
[SwitchB] fcoe-mode fcf
# 关闭VSAN 1的Fabric配置功能。
[SwitchB] vsan 1
[SwitchB-vsan1] undo domain configure enable
# 配置Fabric网络的名称。
[SwitchB-vsan1] fabric-name 11:11:11:11:11:11:11:11
# 配置Switch B的域ID为2。
[SwitchB-vsan1] domain-id 2 static
Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y
[SwitchB-vsan1] quit
# 创建VFC1接口,配置VFC1接口工作在E模式,将VFC1接口绑定到以太网接口Ten-GigabitEthernet1/0/1上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchB] interface vfc 1
[SwitchB-Vfc1] fc mode e
[SwitchB-Vfc1] bind interface ten-gigabitethernet 1/0/1
[SwitchB-Vfc1] port trunk vsan 1
[SwitchB-Vfc1] quit
# 创建VFC2接口,配置VFC2接口工作在E模式,将VFC2接口绑定到以太网接口Ten-GigabitEthernet1/0/2上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchB] interface vfc 2
[SwitchB-Vfc2] fc mode e
[SwitchB-Vfc2] bind interface ten-gigabitethernet 1/0/2
[SwitchB-Vfc2] port trunk vsan 1
[SwitchB-Vfc2] quit
# 配置以太网接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2允许VLAN 10的报文通过。
[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2
[SwitchB-if-range] port link-type trunk
[SwitchB-if-range] port trunk permit vlan 10
[SwitchB-if-range] quit
# 开启VLAN 10的FCoE功能并将其与VSAN 1进行映射。
[SwitchB] vlan 10
[SwitchB-vlan10] fcoe enable vsan 1
[SwitchB-vlan10] quit
# 配置允许默认Zone内的成员互相访问。
[SwitchB] vsan 1
[SwitchB-vsan1] zone default-zone permit
# 在Switch B上配置到达Switch A和Switch C的FC静态路由。
[SwitchB-vsan1] fc route-static 010000 8 vfc 1
[SwitchB-vsan1] fc route-static 030000 8 vfc 2
[SwitchB-vsan1] quit
(1) 开启高级模式
# 配置设备工作模式为高级模式(如果已经配置设备为高级模式此步骤可略)。
<SwitchC> system-view
[SwitchC] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the
system to make it effective.
# 保存配置。
[SwitchC] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[SwitchC] quit
# 重启设备。
<SwitchC> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
(2) 部署DCBX
# 全局开启LLDP功能。
<SwitchC> system-view
[SwitchC] lldp global enable
# 在以太网接口Ten-GigabitEthernet1/0/2上开启LLDP功能,并允许发布DCBX TLV。
[SwitchC] interface ten-gigabitethernet 1/0/2
[SwitchC-Ten-GigabitEthernet1/0/2] lldp enable
[SwitchC-Ten-GigabitEthernet1/0/2] lldp tlv-enable dot1-tlv dcbx
[SwitchC-Ten-GigabitEthernet1/0/2] quit
# 创建编号为4000的二层ACL,并为其创建规则来匹配FCoE报文(协议号为0x8906)和FIP报文(协议号为0x8914)。
[SwitchC] acl mac 4000
[SwitchC-acl-mac-4000] rule 0 permit type 8906 ffff
[SwitchC-acl-mac-4000] rule 5 permit type 8914 ffff
[SwitchC-acl-mac-4000] quit
# 定义名为app_c的类,其下各规则间的关系为逻辑或,并定义其匹配ACL 4000。
[SwitchC] traffic classifier app_c operator or
[SwitchC-classifier-app_c] if-match acl mac 4000
[SwitchC-classifier-app_c] quit
# 定义名为app_b的流行为,并配置标记报文的802.1p优先级为3。
[SwitchC] traffic behavior app_b
[SwitchC-behavior-app_b] remark dot1p 3
[SwitchC-behavior-app_b] quit
# 定义名为plcy的策略,为类app_c指定采用的流行为是app_b,并指定该策略为DCBX模式。
[SwitchC] qos policy plcy
[SwitchC-qospolicy-plcy] classifier app_c behavior app_b mode dcbx
[SwitchC-qospolicy-plcy] quit
# 在以太网接口Ten-GigabitEthernet1/0/2的出方向上应用策略plcy。
[SwitchC] interface ten-gigabitethernet 1/0/2
[SwitchC-Ten-GigabitEthernet1/0/2] qos apply policy plcy outbound
(3) 部署PFC
# 在以太网接口Ten-GigabitEthernet1/0/2上配置PFC功能的开启模式为自动协商模式,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchC-Ten-GigabitEthernet1/0/2] priority-flow-control auto
[SwitchC-Ten-GigabitEthernet1/0/2] priority-flow-control no-drop dot1p 3
[SwitchC-Ten-GigabitEthernet1/0/2] qos trust dot1p
[SwitchC-Ten-GigabitEthernet1/0/2] quit
# 在以太网接口Ten-GigabitEthernet1/0/上配置强制开启PFC功能,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchC] interface ten-gigabitethernet 1/0/1
[SwitchC-Ten-GigabitEthernet1/0/1] priority-flow-control enable
[SwitchC-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3
[SwitchC-Ten-GigabitEthernet1/0/1] qos trust dot1p
[SwitchC-Ten-GigabitEthernet1/0/1] quit
(4) 配置FCoE功能
# 配置交换机模式为FCF模式。
[SwitchC] fcoe-mode fcf
# 关闭VSAN 1的Fabric配置功能。
[SwitchC] vsan 1
[SwitchC-vsan1] undo domain configure enable
# 配置Fabric网络的名称。
[SwitchC-vsan1] fabric-name 11:11:11:11:11:11:11:11
# 配置Switch C的域ID为3。
[SwitchC-vsan1] domain-id 3 static
Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y
[SwitchC-vsan1] quit
# 创建VFC1接口,配置VFC1接口工作在E模式,将VFC1接口绑定到以太网接口Ten-GigabitEthernet1/0/1上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchC] interface vfc 1
[SwitchC-Vfc1] fc mode e
[SwitchC-Vfc1] bind interface ten-gigabitethernet 1/0/1
[SwitchC-Vfc1] port trunk vsan 1
[SwitchC-Vfc1] quit
# 创建VFC2接口,将VFC2接口绑定到以太网接口Ten-GigabitEthernet1/0/2上,并将VFC2接口以Trunk方式加入VSAN 1。
[SwitchC] interface vfc 2
[SwitchC-Vfc2] bind interface ten-gigabitethernet 1/0/2
[SwitchC-Vfc2] port trunk vsan 1
[SwitchC-Vfc2] quit
# 配置以太网接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2允许VLAN 10的报文通过。
[SwitchC] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2
[SwitchC-if-range] port link-type trunk
[SwitchC-if-range] port trunk permit vlan 10
[SwitchC-if-range] quit
# 开启VLAN 10的FCoE功能并将其与VSAN 1进行映射。
[SwitchC] vlan 10
[SwitchC-vlan10] fcoe enable vsan 1
[SwitchC-vlan10] quit
# 配置允许默认Zone内的成员互相访问。
[SwitchC] vsan 1
[SwitchC-vsan1] zone default-zone permit
# 在Switch C上配置到达Switch A和Switch B的FC静态路由。
[SwitchC-vsan1] fc route-static 010000 8 vfc 1
[SwitchC-vsan1] fc route-static 020000 8 vfc 1
[SwitchC-vsan1] quit
# 显示Switch A上VSAN 1的FC路由表。
[SwitchA] display fc routing-table vsan 1
Routing Table: VSAN 1
Destinations : 6 Routes : 6
Destination/mask Protocol Preference Cost Interface
0x020000/8 STATIC 10 0 Vfc2
0x030000/8 STATIC 10 0 Vfc2
0xfffc01/24 DIRECT 0 0 InLoop0
0xfffffa/24 DIRECT 0 0 InLoop0
0xfffffc/24 DIRECT 0 0 InLoop0
0xfffffd/24 DIRECT 0 0 InLoop0
以上信息表明,Switch A有到Switch B和Switch C的静态路由。
# 显示Switch B上VSAN 1的FC路由表。
[SwitchB] display fc routing-table vsan 1
Routing Table: VSAN 1
Destinations : 6 Routes : 6
Destination/mask Protocol Preference Cost Interface
0x010000/8 STATIC 10 0 Vfc1
0x030000/8 STATIC 10 0 Vfc2
0xfffc02/24 DIRECT 0 0 InLoop0
0xfffffa/24 DIRECT 0 0 InLoop0
0xfffffc/24 DIRECT 0 0 InLoop0
0xfffffd/24 DIRECT 0 0 InLoop0
以上信息表明,Switch B有到Switch A和Switch C的静态路由。
# 显示Switch C上VSAN 1的FC路由表。
[SwitchC] display fc routing-table vsan 1
Routing Table: VSAN 1
Destinations : 6 Routes : 6
Destination/mask Protocol Preference Cost Interface
0x010000/8 STATIC 10 0 Vfc1
0x020000/8 STATIC 10 0 Vfc1
0xfffc03/24 DIRECT 0 0 InLoop0
0xfffffa/24 DIRECT 0 0 InLoop0
0xfffffc/24 DIRECT 0 0 InLoop0
0xfffffd/24 DIRECT 0 0 InLoop0
以上信息表明,Switch C有到Switch A和Switch B的静态路由。
# 在Switch A上使用fcping命令验证Switch C是否可达。
[SwitchA] fcping fcid fffc03 vsan 1
FCPING fcid 0xfffc03: 128 data bytes, press CTRL_C to break
Reply from 0xfffc03: bytes = 128 time = 23 ms
Reply from 0xfffc03: bytes = 128 time = 9 ms
Reply from 0xfffc03: bytes = 128 time = 19 ms
Reply from 0xfffc03: bytes = 128 time = 14 ms
Reply from 0xfffc03: bytes = 128 time = 25 ms
--- 0xfffc03 fcping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 9/18/25 ms
以上信息表明,Switch A和Switch C之间路由可达。
· Switch A:
#
lldp global enable
#
system-working-mode advance
#
fcoe-mode fcf
#
vsan 1
fabric-name 11:11:11:11:11:11:11:11
domain-id 1 static
undo domain configure enable
fc route-static 020000 8 Vfc2
fc route-static 030000 8 Vfc2
zone default-zone permit
#
vlan 10
fcoe enable vsan 1
#
qos map-table dot1p-lp
import 0 export 0
import 2 export 0
import 3 export 1
import 4 export 0
import 5 export 0
import 6 export 0
import 7 export 0
#
traffic classifier app_c operator or
if-match acl mac 4000
#
traffic behavior app_b
remark dot1p 3
#
qos policy plcy
classifier app_c behavior app_b mode dcbx
#
interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control auto
priority-flow-control no-drop dot1p 3
lldp tlv-enable dot1-tlv dcbx
qos wrr byte-count
qos wrr af1 group 1 byte-count 1
qos wrr af2 group sp
qos wrr af3 group sp
qos wrr af4 group sp
qos wrr ef group sp
qos wrr cs6 group sp
qos wrr cs7 group sp
qos apply policy plcy outbound
#
interface Ten-GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Vfc1
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/1
#
interface Vfc2
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/2
#
acl mac 4000
rule 0 permit type 8906 ffff
rule 5 permit type 8914 ffff
#
· Switch B:
#
system-working-mode advance
#
fcoe-mode fcf
#
vsan 1
fabric-name 11:11:11:11:11:11:11:11
domain-id 2 static
undo domain configure enable
fc route-static 010000 8 Vfc1
fc route-static 030000 8 Vfc2
zone default-zone permit
#
vlan 10
fcoe enable vsan 1
#
interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Ten-GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Vfc1
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/1
#
interface Vfc2
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/2
#
· Switch C:
#
lldp global enable
#
system-working-mode advance
#
fcoe-mode fcf
#
vsan 1
fabric-name 11:11:11:11:11:11:11:11
domain-id 3 static
undo domain configure enable
fc route-static 010000 8 Vfc1
fc route-static 020000 8 Vfc1
zone default-zone permit
#
vlan 10
fcoe enable vsan 1
#
traffic classifier app_c operator or
if-match acl mac 4000
#
traffic behavior app_b
remark dot1p 3
#
qos policy plcy
classifier app_c behavior app_b mode dcbx
#
interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Ten-GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control auto
priority-flow-control no-drop dot1p 3
lldp tlv-enable dot1-tlv dcbx
qos apply policy plcy outbound
#
interface Vfc1
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/1
#
interface Vfc2
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/2
#
acl mac 4000
rule 0 permit type 8906 ffff
rule 5 permit type 8914 ffff
#
如图2所示,网络由三台FCF交换机Switch A~Switch C、1个服务器Server和1个磁盘设备Disk组成。
现要求在Switch A、Switch B和Switch C上配置FCoE功能,实现:
· Fabric网络中任意两台交换机之间的FC报文转发均有最短路径,且FC报文的转发路径能够自动适应网络拓扑结构的变化。
· SAN网络中的存储数据流量能够在以太网链路上无损传输;
· Server能够通过Fabric网络访问Disk内的存储资源。
图2 配置FSPF组网图
· 为了实现SAN网络中的存储数据流量能够在无损以太网链路上传输,H3C建议用户在交换机和服务器连接的以太网接口上配置DCBX、自动协商模式的PFC、ETS功能;在交换机和磁盘设备连接的以太网接口上配置DCBX、自动协商模式的PFC功能;在交换机与交换机连接的以太网接口上强制开启PFC功能。
· 由于网络结构比较复杂,且用户希望所建立的Fabric网络能够自动计算所有交换机之间的FC报文的转发路径,FC报文的转发路径能够自动适应网络拓扑结构的变化,所以建议用户采用动态方式建立Fabric网络,并为该Fabric网络配置FSPF。
· 建议将性能较好的某台FCF交换机的优先级配置为最高,使其被选举为主交换机,为同VSAN内其它FCF交换机分配域ID,从而实现动态建立Fabric网络。
(1) 开启高级模式
# 配置设备工作模式为高级模式(如果已经配置设备为高级模式此步骤可略)。
<SwitchA> system-view
[SwitchA] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the
system to make it effective.
# 保存配置。
[SwitchA] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[SwitchA] quit
# 重启设备。
<SwitchA> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
(2) 部署DCBX
# 全局开启LLDP功能。
<SwitchA> system-view
[SwitchA] lldp global enable
# 在以太网接口Ten-GigabitEthernet1/0/1上开启LLDP功能,并允许发布DCBX TLV。
[SwitchA] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] lldp enable
[SwitchA-Ten-GigabitEthernet1/0/1] lldp tlv-enable dot1-tlv dcbx
[SwitchA-Ten-GigabitEthernet1/0/1] quit
# 创建编号为4000的二层ACL,并为其创建规则来匹配FCoE报文(协议号为0x8906)和FIP报文(协议号为0x8914)。
[SwitchA] acl mac 4000
[SwitchA-acl-mac-4000] rule 0 permit type 8906 ffff
[SwitchA-acl-mac-4000] rule 5 permit type 8914 ffff
[SwitchA-acl-mac-4000] quit
# 定义名为app_c的类,其下各规则间的关系为逻辑或,并定义其匹配ACL 4000。
[SwitchA] traffic classifier app_c operator or
[SwitchA-classifier-app_c] if-match acl mac 4000
[SwitchA-classifier-app_c] quit
# 定义名为app_b的流行为,并配置标记报文的802.1p优先级为3。
[SwitchA] traffic behavior app_b
[SwitchA-behavior-app_b] remark dot1p 3
[SwitchA-behavior-app_b] quit
# 定义名为plcy的策略,为类app_c指定采用的流行为是app_b,并指定该策略为DCBX模式。
[SwitchA] qos policy plcy
[SwitchA-qospolicy-plcy] classifier app_c behavior app_b mode dcbx
[SwitchA-qospolicy-plcy] quit
# 在以太网接口Ten-GigabitEthernet1/0/1的出方向上应用策略plcy。
[SwitchA] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] qos apply policy plcy outbound
(3) 部署PFC
# 在以太网接口Ten-GigabitEthernet1/0/1上配置PFC功能的开启模式为自动协商模式,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control auto
[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3
[SwitchA-Ten-GigabitEthernet1/0/1] qos trust dot1p
[SwitchA-Ten-GigabitEthernet1/0/1] quit
# 在以太网接口Ten-GigabitEthernet1/0/2~Ten-GigabitEthernet1/0/3上配置强制开启PFC功能,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchA] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3
[SwitchA-if-range] priority-flow-control enable
[SwitchA-if-range] priority-flow-control no-drop dot1p 3
[SwitchA-if-range] qos trust dot1p
[SwitchA-if-range] quit
(4) 部署ETS
# 配置802.1p优先级到本地优先级的映射,将802.1p优先级3映射到本地优先级1,配置其它的802.1p优先级映射到本地优先级0。
[SwitchA] qos map-table dot1p-lp
[SwitchA-maptbl-dot1p-lp] import 3 export 1
[SwitchA-maptbl-dot1p-lp] import 0 1 2 4 5 6 7 export 0
[SwitchA-maptbl-dot1p-lp] quit
# 在以太网接口Ten-GigabitEthernet1/0/1上开启并配置WRR队列,使FCoE流量和普通LAN流量各占50%带宽。
[SwitchA] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr byte-count
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af1 group 1 byte-count 1
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr be group 1 byte-count 1
# 在以太网接口Ten-GigabitEthernet1/0/1上配置其它的队列为SP调度方式。
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af2 group sp
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af3 group sp
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr af4 group sp
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr ef group sp
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr cs6 group sp
[SwitchA-Ten-GigabitEthernet1/0/1] qos wrr cs7 group sp
[SwitchA-Ten-GigabitEthernet1/0/1] quit
(5) 配置FCoE功能
# 交换机模式配置为FCF模式。
[SwitchA] fcoe-mode fcf
# 开启Fabric配置功能(缺省已开启,此步骤可选)。
[SwitchA] vsan 1
[SwitchA-vsan1] domain configure enable
# 配置交换机的优先级为1,使Switch A成为主交换机。
[SwitchA-vsan1] priority 1
[SwitchA-vsan1] quit
# 创建VFC1接口,将VFC1接口绑定到以太网接口Ten-GigabitEthernet1/0/1上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchA] interface vfc 1
[SwitchA-Vfc1] bind interface ten-gigabitethernet 1/0/1
[SwitchA-Vfc1] port trunk vsan 1
[SwitchA-Vfc1] quit
# 创建VFC2接口,配置VFC2接口工作在E模式,将VFC2接口绑定到以太网接口Ten-GigabitEthernet1/0/2上,并将VFC2接口以Trunk方式加入VSAN 1。
[SwitchA] interface vfc 2
[SwitchA-Vfc2] fc mode e
[SwitchA-Vfc2] bind interface ten-gigabitethernet 1/0/2
[SwitchA-Vfc2] port trunk vsan 1
[SwitchA-Vfc2] quit
# 创建VFC3接口,配置VFC3接口工作在E模式,将VFC3接口绑定到以太网接口Ten-GigabitEthernet1/0/3上,并将VFC3接口以Trunk方式加入VSAN 1。
[SwitchA] interface vfc 3
[SwitchA-Vfc3] fc mode e
[SwitchA-Vfc3] bind interface ten-gigabitethernet 1/0/3
[SwitchA-Vfc3] port trunk vsan 1
[SwitchA-Vfc3] quit
# 配置以太网接口Ten-GigabitEthernet1/0/1~Ten-GigabitEthernet1/0/3允许VLAN 10的报文通过。
[SwitchA] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/3
[SwitchA-if-range] port link-type trunk
[SwitchA-if-range] port trunk permit vlan 10
[SwitchA-if-range] quit
# 开启VLAN 10的FCoE功能,并将其与VSAN 1进行映射。
[SwitchA] vlan 10
[SwitchA-vlan10] fcoe enable vsan 1
[SwitchA-vlan10] quit
# 配置允许默认Zone内的成员互相访问。
[SwitchA] vsan 1
[SwitchA-vsan1] zone default-zone permit
# 全局开启FSPF功能(缺省已开启,此步骤可选)。
[SwitchA-vsan1] fspf enable
[SwitchA-vsan1] quit
(1) 开启高级模式
# 配置设备工作模式为高级模式(如果已经配置设备为高级模式此步骤可略)。
<SwitchB> system-view
[SwitchB] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the
system to make it effective.
# 保存配置。
[SwitchB] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[SwitchB] quit
# 重启设备。
<SwitchB> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
(2) 部署PFC
# 在以太网接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上配置强制开启PFC功能,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
<SwitchB> system-view
[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2
[SwitchB-if-range] priority-flow-control enable
[SwitchB-if-range] priority-flow-control no-drop dot1p 3
[SwitchB-if-range] qos trust dot1p
[SwitchB-if-range] quit
(3) 配置FCoE功能
# 配置交换机模式为FCF模式。
[SwitchB] fcoe-mode fcf
# 开启Fabric配置功能(缺省已开启,此步骤可选)。
[SwitchB] vsan 1
[SwitchB-vsan1] domain configure enable
# 配置域ID为2。
[SwitchB-vsan1] domain-id 2 preferred
Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y
[SwitchB-vsan1] quit
# 创建VFC1接口,配置VFC1接口工作在E模式,将VFC1接口绑定到以太网接口Ten-GigabitEthernet1/0/1上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchB] interface vfc 1
[SwitchB-Vfc1] fc mode e
[SwitchB-Vfc1] bind interface ten-gigabitethernet 1/0/1
[SwitchB-Vfc1] port trunk vsan 1
[SwitchB-Vfc1] quit
# 创建VFC2接口,配置VFC2接口工作在E模式,将VFC2接口绑定到以太网接口Ten-GigabitEthernet1/0/2上,并将VFC2接口以Trunk方式加入VSAN 1。
[SwitchB] interface vfc 2
[SwitchB-Vfc2] fc mode e
[SwitchB-Vfc2] bind interface ten-gigabitethernet 1/0/2
[SwitchB-Vfc2] port trunk vsan 1
[SwitchB-Vfc2] quit
# 配置以太网接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2允许VLAN 10的报文通过。
[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2
[SwitchB-if-range] port link-type trunk
[SwitchB-if-range] port trunk permit vlan 10
[SwitchB-if-range] quit
# 开启VLAN 10的FCoE功能,并将其与VSAN 1进行映射。
[SwitchB] vlan 10
[SwitchB-vlan10] fcoe enable vsan 1
[SwitchB-vlan10] quit
# 配置允许默认Zone内的成员互相访问。
[SwitchB] vsan 1
[SwitchB-vsan1] zone default-zone permit
# 全局开启FSPF功能(缺省已开启,此步骤可选)。
[SwitchB-vsan1] fspf enable
[SwitchB-vsan1] quit
(1) 开启高级模式
# 配置设备工作模式为高级模式(如果已经配置设备为高级模式此步骤可略)。
<SwitchC> system-view
[SwitchC] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the
system to make it effective.
# 保存配置。
[SwitchC] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[SwitchC] quit
# 重启设备。
<SwitchC> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
(2) 部署DCBX
# 全局开启LLDP功能。
<SwitchC> system-view
[SwitchC] lldp global enable
# 在以太网接口Ten-GigabitEthernet1/0/1上开启LLDP功能,并允许发布DCBX TLV。
[SwitchC] interface ten-gigabitethernet 1/0/1
[SwitchC-Ten-GigabitEthernet1/0/1] lldp enable
[SwitchC-Ten-GigabitEthernet1/0/1] lldp tlv-enable dot1-tlv dcbx
[SwitchC-Ten-GigabitEthernet1/0/1] quit
# 创建编号为4000的二层ACL,并为其创建规则来匹配FCoE报文(协议号为0x8906)和FIP报文(协议号为0x8914)。
[SwitchC] acl mac 4000
[SwitchC-acl-mac-4000] rule 0 permit type 8906 ffff
[SwitchC-acl-mac-4000] rule 5 permit type 8914 ffff
[SwitchC-acl-mac-4000] quit
# 定义名为app_c的类,其下各规则间的关系为逻辑或,并定义其匹配ACL 4000。
[SwitchC] traffic classifier app_c operator or
[SwitchC-classifier-app_c] if-match acl mac 4000
[SwitchC-classifier-app_c] quit
# 定义名为app_b的流行为,并配置标记报文的802.1p优先级为3。
[SwitchC] traffic behavior app_b
[SwitchC-behavior-app_b] remark dot1p 3
[SwitchC-behavior-app_b] quit
# 定义名为plcy的策略,为类app_c指定采用的流行为是app_b,并指定该策略为DCBX模式。
[SwitchC] qos policy plcy
[SwitchC-qospolicy-plcy] classifier app_c behavior app_b mode dcbx
[SwitchC-qospolicy-plcy] quit
# 在以太网接口Ten-GigabitEthernet1/0/1的出方向上应用策略plcy。
[SwitchC] interface ten-gigabitethernet 1/0/1
[SwitchC-Ten-GigabitEthernet1/0/1] qos apply policy plcy outbound
(3) 部署PFC
# 在以太网接口Ten-GigabitEthernet1/0/1上配置PFC功能的开启模式为自动协商模式,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchC-Ten-GigabitEthernet1/0/1] priority-flow-control auto
[SwitchC-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3
[SwitchC-Ten-GigabitEthernet1/0/1] qos trust dot1p
[SwitchC-Ten-GigabitEthernet1/0/1] quit
# 在以太网接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3上配置强制开启PFC功能,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchC] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3
[SwitchC-if-range] priority-flow-control enable
[SwitchC-if-range] priority-flow-control no-drop dot1p 3
[SwitchC-if-range] qos trust dot1p
[SwitchC-if-range] quit
(4) 配置FCoE功能
# 配置交换机模式为FCF模式。
[SwitchC] fcoe-mode fcf
# 开启Fabric配置功能(缺省已开启,此步骤可选)。
[SwitchC] vsan 1
[SwitchC-vsan1] domain configure enable
# 配置域ID为3。
[SwitchC-vsan1] domain-id 3 preferred
Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y
[SwitchC-vsan1] quit
# 创建VFC1接口,将VFC1接口绑定到以太网接口Ten-GigabitEthernet1/0/1上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchC] interface vfc 1
[SwitchC-Vfc1] bind interface ten-gigabitethernet 1/0/1
[SwitchC-Vfc1] port trunk vsan 1
[SwitchC-Vfc1] quit
# 创建VFC2接口,配置VFC2接口工作在E模式,将VFC2接口绑定到以太网接口Ten-GigabitEthernet1/0/2上,并将VFC2接口以Trunk方式加入VSAN 1。
[SwitchC] interface vfc 2
[SwitchC-Vfc2] fc mode e
[SwitchC-Vfc2] bind interface ten-gigabitethernet 1/0/2
[SwitchC-Vfc2] port trunk vsan 1
[SwitchC-Vfc2] quit
# 创建VFC3接口,配置VFC3接口工作在E模式,将VFC3接口绑定到以太网接口Ten-GigabitEthernet1/0/3上,并将VFC3接口以Trunk方式加入VSAN 1。
[SwitchC] interface vfc 3
[SwitchC-Vfc3] fc mode e
[SwitchC-Vfc3] bind interface ten-gigabitethernet 1/0/3
[SwitchC-Vfc3] port trunk vsan 1
[SwitchC-Vfc3] quit
# 配置以太网接口Ten-GigabitEthernet1/0/1~Ten-GigabitEthernet1/0/3允许VLAN 10的报文通过。
[SwitchC] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/3
[SwitchC-if-range] port link-type trunk
[SwitchC-if-range] port trunk permit vlan 10
[SwitchC-if-range] quit
# 开启VLAN 10的FCoE功能,并将其与VSAN 1进行映射。
[SwitchC] vlan 10
[SwitchC-vlan10] fcoe enable vsan 1
[SwitchC-vlan10] quit
# 配置允许默认Zone内的成员互相访问。
[SwitchC] vsan 1
[SwitchC-vsan1] zone default-zone permit
# 全局开启FSPF功能(缺省已开启,此步骤可选)。
[SwitchC-vsan1] fspf enable
[SwitchC-vsan1] quit
(1) 各条链路均连接正常时,验证VSAN 1内FSPF路由信息
# 显示Switch A的FSPF邻居信息。
[SwitchA] display fspf neighbor
FSPF neighbor information of VSAN 1(01):
Interface NbrDomain IfIndex NbrIfIndex Dead Time State
Vfc2 2 0x68 0x68 00:01:06 Full
Vfc3 3 0x69 0x69 00:01:06 Full
上述信息表明,Switch A存在两个邻居(域ID分别为2和3),即Switch B和Switch C。
# 显示Switch A的FC路由表相关信息。
[SwitchA] display fc routing-table vsan 1
Routing Table: VSAN 1
Destinations : 6 Routes : 6
Destination/mask Protocol Preference Cost Interface
0x020000/8 FSPF 20 100 Vfc2
0x030000/8 FSPF 20 100 Vfc3
0xfffc01/24 DIRECT 0 0 InLoop0
0xfffffa/24 DIRECT 0 0 InLoop0
0xfffffc/24 DIRECT 0 0 InLoop0
0xfffffd/24 DIRECT 0 0 InLoop0
以上信息表明,Switch A学到了到达Switch B和Switch C的FSPF路由。
# 使用fcping命令查看Switch A和Switch C之间的路由是否可达
[SwitchA] fcping fcid fffc03 vsan 1
FCPING fcid 0xfffc03: 128 data bytes, press CTRL_C to break.
Reply from 0xfffc03: bytes = 128 time = 1.102 ms
Reply from 0xfffc03: bytes = 128 time = 0.276 ms
Reply from 0xfffc03: bytes = 128 time = 0.253 ms
Reply from 0xfffc03: bytes = 128 time = 0.270 ms
Reply from 0xfffc03: bytes = 128 time = 0.247 ms
--- 0xfffc03 fcping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 0.247/0.430/1.102 ms
以上信息表明,Switch A和Switch C之间路由可达。
# 探测在VSAN 1内Switch A到Switch C的双向路由信息。
[SwitchA] fctracert fcid fffc03 vsan 1
Route present for: 0xfffc03, press CTRL_C to break.
20:00:00:0b:46:00:02:82(0xfffc01)
20:00:00:05:30:00:18:db(0xfffc03)
20:00:00:05:30:00:18:db(0xfffc03)
20:00:00:0b:46:00:02:82(0xfffc01)
Fctracert completed.
以上信息表明,Switch A到Switch C的路径是直接从Switch A到Switch C,没有经过Switch B。
(2) 断开Switch A和Switch C之间的链路时,验证VSAN 1内FSPF路由是否发生变化
# 查看Switch A的FC路由表相关信息。
[SwitchA] display fc routing-table vsan 1
Routing Table: VSAN 1
Destinations : 6 Routes : 6
Destination/mask Protocol Preference Cost Interface
0x020000/8 FSPF 20 100 Vfc2
0x030000/8 FSPF 20 200 Vfc2
0xfffc01/24 DIRECT 0 0 InLoop0
0xfffffa/24 DIRECT 0 0 InLoop0
0xfffffc/24 DIRECT 0 0 InLoop0
0xfffffd/24 DIRECT 0 0 InLoop0
以上信息表明,Switch A上依然存在到达Switch C的FSPF路由。
# 使用fcping命令查看Switch A和Switch C之间的路由是否可达。
[SwitchA] fcping fcid fffc03 vsan 1
FCPING fcid 0xfffc03: 128 data bytes, press CTRL_C to break.
Reply from 0xfffc03: bytes = 128 time = 2.846 ms
Reply from 0xfffc03: bytes = 128 time = 2.810 ms
Reply from 0xfffc03: bytes = 128 time = 2.799 ms
Reply from 0xfffc03: bytes = 128 time = 2.908 ms
Reply from 0xfffc03: bytes = 128 time = 3.840 ms
--- 0xfffc03 fcping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 2.799/3.041/3.840 ms
以上信息表明,断开Switch A和Switch C之间的链路后,FSPF自动切换到另一条链路,Switch A和Switch C之间路由依然可达,从而实现了路由的动态切换。
# 再次探测在VSAN 1内Switch A到Switch C的双向路由信息。
[SwitchA] fctracert fcid fffc03 vsan 1
Route present for: 0xfffc03, press CTRL_C to break.
20:00:00:0b:46:00:02:82(0xfffc01)
20:00:00:e0:fc:00:c5:18(0xfffc02)
20:00:00:05:30:00:18:db(0xfffc03)
20:00:00:05:30:00:18:db(0xfffc03)
20:00:00:e0:fc:00:c5:18(0xfffc02)
20:00:00:0b:46:00:02:82(0xfffc01)
Fctracert completed.
以上信息表明,Switch A到Switch C的路径是经过Switch B的。
· Switch A:
#
lldp global enable
#
system-working-mode advance
#
fcoe-mode fcf
#
vsan 1
priority 1
zone default-zone permit
#
vlan 10
fcoe enable vsan 1
#
qos map-table dot1p-lp
import 0 export 0
import 2 export 0
import 3 export 1
import 4 export 0
import 5 export 0
import 6 export 0
import 7 export 0
#
traffic classifier app_c operator or
if-match acl mac 4000
#
traffic behavior app_b
remark dot1p 3
#
qos policy plcy
classifier app_c behavior app_b mode dcbx
#
interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control auto
priority-flow-control no-drop dot1p 3
lldp tlv-enable dot1-tlv dcbx
qos wrr byte-count
qos wrr af1 group 1 byte-count 1
qos wrr af2 group sp
qos wrr af3 group sp
qos wrr af4 group sp
qos wrr ef group sp
qos wrr cs6 group sp
qos wrr cs7 group sp
qos apply policy plcy outbound
#
interface Ten-GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Ten-GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Vfc1
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/1
#
interface Vfc2
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/2
#
interface Vfc3
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/3
#
acl mac 4000
rule 0 permit type 8906 ffff
rule 5 permit type 8914 ffff
#
· Switch B:
#
system-working-mode advance
#
fcoe-mode fcf
#
vsan 1
domain-id 2 preferred
zone default-zone permit
#
vlan 10
fcoe enable vsan 1
#
interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Ten-GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Vfc1
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/1
#
interface Vfc2
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/2
#
· Switch C:
#
lldp global enable
#
system-working-mode advance
#
fcoe-mode fcf
#
vsan 1
domain-id 3 preferred
zone default-zone permit
#
vlan 10
fcoe enable vsan 1
#
traffic classifier app_c operator or
if-match acl mac 4000
#
traffic behavior app_b
remark dot1p 3
#
qos policy plcy
classifier app_c behavior app_b mode dcbx
#
interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control auto
priority-flow-control no-drop dot1p 3
lldp tlv-enable dot1-tlv dcbx
qos apply policy plcy outbound
#
interface Ten-GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Ten-GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Vfc1
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/1
#
interface Vfc2
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/2
#
interface Vfc3
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/3
#
acl mac 4000
rule 0 permit type 8906 ffff
rule 5 permit type 8914 ffff
#
如图3所示,网络由3台FCF交换机Switch A~Switch C、2台服务器和3个磁盘设备组成。其中Server A为A部门服务器,Server B为B部门服务器。
现要求在Switch A、Switch B和Switch C上配置FCoE功能,实现:
· SAN网络中的存储数据流量能够在以太网链路上无损传输;
· Disk A为A部门专属磁盘,即仅Server A能访问Disk A;
· Disk B为B部门专属磁盘,即仅Server B能访问Disk B;
· Disk C为两部门共同拥有的磁盘,即Server A和Server B能访问Disk C;
· 两个部门之间的业务相互隔离,提高安全性,即Server A和Server B之间不能相互访问。
图3 配置FC Zone组网图
· 为了实现SAN网络中的存储数据流量能够在无损以太网链路上传输,H3C建议用户在交换机和服务器连接的以太网接口上配置DCBX、自动协商模式的PFC、ETS功能;在交换机和磁盘设备连接的以太网接口上配置DCBX、自动协商模式的PFC功能;在交换机与交换机连接的以太网接口上强制开启PFC功能。
· 为实现在VSAN 1中对访问权限进行控制,需要将VSAN 1划分为2个Zone,其中:
¡ Zone1包括Server A、Disk A和Disk C;
¡ Zone2包括Server B、Disk B 和Disk C。
· 因为Zone1和Zone2存在一个Server和多个Disk,所以需要对Zone1和Zone2开启Pairwise特性,配置Server A和Server B角色为Initiator,Disk A、Disk B和Disk C角色为Target。
· Zone的相关配置仅需要在Fabric网络中任意一台设备上配置,以Switch A为例,同时为了保证Fabric网络中各设备数据的一致性,需要激活Zone set并发起向全网的扩散过程,即携带完整数据库信息进行数据同步。
(1) 开启高级模式
# 配置设备工作模式为高级模式(如果已经配置设备为高级模式此步骤可略)。
<SwitchA> system-view
[SwitchA] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the
system to make it effective.
# 保存配置。
[SwitchA] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[SwitchA] quit
# 重启设备。
<SwitchA> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
(2) 部署DCBX
# 全局开启LLDP功能。
<SwitchA> system-view
[SwitchA] lldp global enable
# 在以太网接口Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4上开启LLDP功能,并允许发布DCBX TLV。
[SwitchA] interface range ten-gigabitethernet 1/0/3 to ten-gigabitethernet 1/0/4
[SwitchA-if-range] lldp enable
[SwitchA-if-range] lldp tlv-enable dot1-tlv dcbx
[SwitchA-if-range] quit
# 创建编号为4000的二层ACL,并为其创建规则来匹配FCoE报文(协议号为0x8906)和FIP报文(协议号为0x8914)。
[SwitchA] acl mac 4000
[SwitchA-acl-mac-4000] rule 0 permit type 8906 ffff
[SwitchA-acl-mac-4000] rule 5 permit type 8914 ffff
[SwitchA-acl-mac-4000] quit
# 定义名为app_c的类,其下各规则间的关系为逻辑或,并定义其匹配ACL 4000。
[SwitchA] traffic classifier app_c operator or
[SwitchA-classifier-app_c] if-match acl mac 4000
[SwitchA-classifier-app_c] quit
# 定义名为app_b的流行为,并配置标记报文的802.1p优先级为3。
[SwitchA] traffic behavior app_b
[SwitchA-behavior-app_b] remark dot1p 3
[SwitchA-behavior-app_b] quit
# 定义名为plcy的策略,为类app_c指定采用的流行为是app_b,并指定该策略为DCBX模式。
[SwitchA] qos policy plcy
[SwitchA-qospolicy-plcy] classifier app_c behavior app_b mode dcbx
[SwitchA-qospolicy-plcy] quit
# 在以太网接口Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4的出方向上应用策略plcy。
[SwitchA] interface range ten-gigabitethernet 1/0/3 to ten-gigabitethernet 1/0/4
[SwitchA-if-range] qos apply policy plcy outbound
(3) 部署PFC
# 在以太网接口Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4上配置PFC功能的开启模式为自动协商模式,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchA-if-range] priority-flow-control auto
[SwitchA-if-range] priority-flow-control no-drop dot1p 3
[SwitchA-if-range] qos trust dot1p
# 在以太网接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上配置强制开启PFC功能,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchA] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2
[SwitchA-if-range] priority-flow-control enable
[SwitchA-if-range] priority-flow-control no-drop dot1p 3
[SwitchA-if-range] qos trust dot1p
[SwitchA-if-range] quit
(4) 部署ETS
# 配置802.1p优先级到本地优先级的映射,将802.1p优先级3映射到本地优先级1,配置其它的802.1p优先级映射到本地优先级0。
[SwitchA] qos map-table dot1p-lp
[SwitchA-maptbl-dot1p-lp] import 3 export 1
[SwitchA-maptbl-dot1p-lp] import 0 1 2 4 5 6 7 export 0
[SwitchA-maptbl-dot1p-lp] quit
# 在以太网接口Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4上开启并配置WRR队列,使FCoE流量和普通LAN流量各占50%带宽。
[SwitchA] interface range ten-gigabitethernet 1/0/3 to ten-gigabitethernet 1/0/4
[SwitchA-if-range] qos wrr byte-count
[SwitchA-if-range] qos wrr af1 group 1 byte-count 1
[SwitchA-if-range] qos wrr be group 1 byte-count 1
# 在以太网接口Ten-GigabitEthernet1/0/3和Ten-GigabitEthernet1/0/4上配置其它的队列为SP调度方式。
[SwitchA-if-range] qos wrr af2 group sp
[SwitchA-if-range] qos wrr af3 group sp
[SwitchA-if-range] qos wrr af4 group sp
[SwitchA-if-range] qos wrr ef group sp
[SwitchA-if-range] qos wrr cs6 group sp
[SwitchA-if-range] qos wrr cs7 group sp
[SwitchA-if-range] quit
(5) 配置FCoE功能
# 配置交换机模式为FCF模式。
[SwitchA] fcoe-mode fcf
# 创建VSAN 1。
[SwitchA] vsan 1
# 配置交换机的优先级为1,使Switch A成为主交换机。
[SwitchA-vsan1] priority 1
[SwitchA-vsan1] quit
# 创建VFC1接口,配置VFC1接口工作在E模式,将VFC1接口绑定到以太网接口Ten-GigabitEthernet1/0/1上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchA] interface vfc 1
[SwitchA-Vfc1] fc mode e
[SwitchA-Vfc1] bind interface ten-gigabitethernet 1/0/1
[SwitchA-Vfc1] port trunk vsan 1
[SwitchA-Vfc1] quit
# 创建VFC2接口,配置VFC2接口工作在E模式,将VFC2接口绑定到以太网接口Ten-GigabitEthernet1/0/2上,并将VFC2接口以Trunk方式加入VSAN 1。
[SwitchA] interface vfc 2
[SwitchA-Vfc2] fc mode e
[SwitchA-Vfc2] bind interface ten-gigabitethernet 1/0/2
[SwitchA-Vfc2] port trunk vsan 1
[SwitchA-Vfc2] quit
# 创建VFC3接口,将VFC3接口绑定到以太网接口Ten-GigabitEthernet1/0/3上,并将VFC3接口以Trunk方式加入VSAN 1。
[SwitchA] interface vfc 3
[SwitchA-Vfc3] bind interface ten-gigabitethernet 1/0/3
[SwitchA-Vfc3] port trunk vsan 1
[SwitchA-Vfc3] quit
# 创建VFC4接口,将VFC4接口绑定到以太网接口Ten-GigabitEthernet1/0/4上,并将VFC4接口以Trunk方式加入VSAN 1。
[SwitchA] interface vfc 4
[SwitchA-Vfc4] bind interface ten-gigabitethernet 1/0/4
[SwitchA-Vfc4] port trunk vsan 1
[SwitchA-Vfc4] quit
# 配置以太网接口Ten-GigabitEthernet1/0/1~Ten-GigabitEthernet1/0/4允许VLAN 10的报文通过。
[SwitchA] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/4
[SwitchA-if-range] port link-type trunk
[SwitchA-if-range] port trunk permit vlan 10
[SwitchA-if-range] quit
# 开启VLAN 10的FCoE功能,并将其与VSAN 1进行映射。
[SwitchA] vlan 10
[SwitchA-vlan10] fcoe enable vsan 1
[SwitchA-vlan10] quit
(1) 开启高级模式
# 配置设备工作模式为高级模式(如果已经配置设备为高级模式此步骤可略)。
<SwitchB> system-view
[SwitchB] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the
system to make it effective.
# 保存配置。
[SwitchB] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[SwitchB] quit
# 重启设备。
<SwitchB> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
(2) 部署PFC
# 在以太网接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上配置强制开启PFC功能,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
<SwitchB> system-view
[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2
[SwitchB-if-range] priority-flow-control enable
[SwitchB-if-range] priority-flow-control no-drop dot1p 3
[SwitchB-if-range] qos trust dot1p
[SwitchB-if-range] quit
(3) 配置FCoE功能
# 配置交换机模式为FCF模式。
[SwitchB] fcoe-mode fcf
# 开启Fabric配置功能(缺省已开启,此步骤可选)。
[SwitchB] vsan 1
[SwitchB-vsan1] domain configure enable
# 配置域ID为2。
[SwitchB-vsan1] domain-id 2 preferred
Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y
[SwitchB-vsan1] quit
# 创建VFC1接口,配置VFC1接口工作在E模式,将VFC1接口绑定到以太网接口Ten-GigabitEthernet1/0/1上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchB] interface vfc 1
[SwitchB-Vfc1] fc mode e
[SwitchB-Vfc1] bind interface ten-gigabitethernet 1/0/1
[SwitchB-Vfc1] port trunk vsan 1
[SwitchB-Vfc1] quit
# 创建VFC2接口,配置VFC2接口工作在E模式,将VFC2接口绑定到以太网接口Ten-GigabitEthernet1/0/2上,并将VFC2接口以Trunk方式加入VSAN 1。
[SwitchB] interface vfc 2
[SwitchB-Vfc2] fc mode e
[SwitchB-Vfc2] bind interface ten-gigabitethernet 1/0/2
[SwitchB-Vfc2] port trunk vsan 1
[SwitchB-Vfc2] quit
# 配置以太网接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2允许VLAN 10的报文通过。
[SwitchB] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2
[SwitchB-if-range] port link-type trunk
[SwitchB-if-range] port trunk permit vlan 10
[SwitchB-if-range] quit
# 开启VLAN 10的FCoE功能,并将其与VSAN 1进行映射。
[SwitchB] vlan 10
[SwitchB-vlan10] fcoe enable vsan 1
[SwitchB-vlan10] quit
(1) 开启高级模式
# 配置设备工作模式为高级模式(如果已经配置设备为高级模式此步骤可略)。
<SwitchC> system-view
[SwitchC] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the
system to make it effective.
# 保存配置。
[SwitchC] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[SwitchC] quit
# 重启设备。
<SwitchC> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
(2) 部署DCBX
# 全局开启LLDP功能。
<SwitchC> system-view
[SwitchC] lldp global enable
# 在以太网接口Ten-GigabitEthernet1/0/3~Ten-GigabitEthernet1/0/5上开启LLDP功能,并允许发布DCBX TLV。
[SwitchC] interface range ten-gigabitethernet 1/0/3 to ten-gigabitethernet 1/0/5
[SwitchC-if-range] lldp enable
[SwitchC-if-range] lldp tlv-enable dot1-tlv dcbx
[SwitchC-if-range] quit
# 创建编号为4000的二层ACL,并为其创建规则来匹配FCoE报文(协议号为0x8906)和FIP报文(协议号为0x8914)。
[SwitchC] acl mac 4000
[SwitchC-acl-mac-4000] rule 0 permit type 8906 ffff
[SwitchC-acl-mac-4000] rule 5 permit type 8914 ffff
[SwitchC-acl-mac-4000] quit
# 定义名为app_c的类,其下各规则间的关系为逻辑或,并定义其匹配ACL 4000。
[SwitchC] traffic classifier app_c operator or
[SwitchC-classifier-app_c] if-match acl mac 4000
[SwitchC-classifier-app_c] quit
# 定义名为app_b的流行为,并配置标记报文的802.1p优先级为3。
[SwitchC] traffic behavior app_b
[SwitchC-behavior-app_b] remark dot1p 3
[SwitchC-behavior-app_b] quit
# 定义名为plcy的策略,为类app_c指定采用的流行为是app_b,并指定该策略为DCBX模式。
[SwitchC] qos policy plcy
[SwitchC-qospolicy-plcy] classifier app_c behavior app_b mode dcbx
[SwitchC-qospolicy-plcy] quit
# 在以太网接口Ten-GigabitEthernet1/0/3~Ten-GigabitEthernet1/0/5的出方向上应用策略plcy。
[SwitchC] interface range ten-gigabitethernet 1/0/3 to ten-gigabitethernet 1/0/5
[SwitchC-if-range] qos apply policy plcy outbound
(3) 部署PFC
# 在以太网接口Ten-GigabitEthernet1/0/3~Ten-GigabitEthernet1/0/5上配置PFC功能的开启模式为自动协商模式,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchC-if-range] priority-flow-control auto
[SwitchC-if-range] priority-flow-control no-drop dot1p 3
[SwitchC-if-range] qos trust dot1p
[SwitchC-if-range] quit
# 在以太网接口Ten-GigabitEthernet1/0/1~Ten-GigabitEthernet1/0/2上配置强制开启PFC功能,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchC] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/2
[SwitchC-if-range] priority-flow-control enable
[SwitchC-if-range] priority-flow-control no-drop dot1p 3
[SwitchC-if-range] qos trust dot1p
[SwitchC-if-range] quit
(4) 配置FCoE功能
# 配置交换机模式为FCF模式。
[SwitchC] fcoe-mode fcf
# 创建VSAN 1。
[SwitchC] vsan 1
# 配置域ID为3。
[SwitchC-vsan1] domain-id 3 preferred
Non-disruptive reconfiguration or isolating the switch may be performed. Continue? [Y/N]:y
[SwitchC-vsan1] quit
# 创建VFC1接口,配置VFC1接口工作在E模式,将VFC1接口绑定到以太网接口Ten-GigabitEthernet1/0/1上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchC] interface vfc 1
[SwitchC-Vfc1] fc mode e
[SwitchC-Vfc1] bind interface ten-gigabitethernet 1/0/1
[SwitchC-Vfc1] port trunk vsan 1
[SwitchC-Vfc1] quit
# 创建VFC2接口,配置VFC2接口工作在E模式,将VFC2接口绑定到以太网接口Ten-GigabitEthernet1/0/2上,并将VFC2接口以Trunk方式加入VSAN 1。
[SwitchC] interface vfc 2
[SwitchC-Vfc2] fc mode e
[SwitchC-Vfc2] bind interface ten-gigabitethernet 1/0/2
[SwitchC-Vfc2] port trunk vsan 1
[SwitchC-Vfc2] quit
# 创建VFC3接口,将VFC3接口绑定到以太网接口Ten-GigabitEthernet1/0/3上,并将VFC3接口以Trunk方式加入VSAN 1。
[SwitchC] interface vfc 3
[SwitchC-Vfc3] bind interface ten-gigabitethernet 1/0/3
[SwitchC-Vfc3] port trunk vsan 1
[SwitchC-Vfc3] quit
# 创建VFC4接口,将VFC4接口绑定到以太网接口Ten-GigabitEthernet1/0/4上,并将VFC4接口以Trunk方式加入VSAN 1。
[SwitchC] interface vfc 4
[SwitchC-Vfc4] bind interface ten-gigabitethernet 1/0/4
[SwitchC-Vfc4] port trunk vsan 1
[SwitchC-Vfc4] quit
# 创建VFC5接口,将VFC5接口绑定到以太网接口Ten-GigabitEthernet1/0/5上,并将VFC5接口以Trunk方式加入VSAN 1。
[SwitchC] interface vfc 5
[SwitchC-Vfc5] bind interface ten-gigabitethernet 1/0/5
[SwitchC-Vfc5] port trunk vsan 1
[SwitchC-Vfc5] quit
# 配置以太网接口Ten-GigabitEthernet1/0/1~Ten-GigabitEthernet1/0/5允许VLAN 10的报文通过。
[SwitchC] interface range ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/5
[SwitchC-if-range] port link-type trunk
[SwitchC-if-range] port trunk permit vlan 10
[SwitchC-if-range] quit
# 开启VLAN 10的FCoE功能,并将其与VSAN 1进行映射。
[SwitchC] vlan 10
[SwitchC-vlan10] fcoe enable vsan 1
[SwitchC-vlan10] quit
(1) 在Switch A上获取FC SAN网络建立情况
# 获取VSAN 1内的域信息。
[SwitchA] display fc domain vsan 1
Domain Information of VSAN 1:
Running time information:
State: Stable
Switch WWN: 10:00:00:e0:fc:00:c5:18
Fabric name: 10:00:00:e0:fc:00:c5:18
Priority: 1
Domain ID: 1
Configuration information:
Domain configure: Enabled
Domain auto-reconfigure: Disabled
Fabric name: 10:00:00:e0:fc:00:c5:18
Priority: 1
Domain ID: 1 (preferred)
Principal switch running time information:
Priority: 1
Path Interface
Downstream Vfc1
Downstream Vfc2
上述信息表明,域配置已经结束,Switch A是主交换机,给自己分配的域ID是1。
# 获取Switch A上的节点注册的相关信息。
[SwitchA] display fc login vsan 1
Interface VSAN FCID Node WWN Port WWN
Vfc3 1 0x010000 21:01:00:1a:32:a0:fa:12 21:01:00:1a:32:a0:fa:11
Vfc4 1 0x010001 21:01:00:1b:32:b0:fb:12 21:01:00:1b:32:b0:fb:11
上述信息表明,Switch A为Server A、Server B分配的FC地址分别为0x010000、0x010001。
# 获取VSAN 1内的名称服务数据库的简要信息。
[SwitchA] display fc name-service database vsan 1
VSAN 1:
FCID Type PWWN(vendor) FC4-type:feature
0x010000 0x01(N) 21:01:00:1a:32:a0:fa:11 SCSI-FCP:Initiator
0x010001 0x01(N) 21:01:00:1b:32:b0:fb:11 SCSI-FCP:Initiator
0x030000 0x01(N) 10:00:00:05:30:00:25:a1 SCSI-FCP:Target
0x030001 0x01(N) 10:00:00:05:30:00:25:c1 SCSI-FCP:Target
0x030002 0x01(N) 10:00:00:05:30:00:25:b1 SCSI-FCP:Target
上述信息表明,所有节点设备均成功完成名称服务注册。
(2) 在Switch C上获取FC SAN网络建立情况
# 获取VSAN 1内的域信息。
[SwitchC] display fc domain vsan 1
Domain Information of VSAN 1:
Running time information:
State: Stable
Switch WWN: 10:00:74:25:8a:02:4c:00
Fabric name: 10:00:00:e0:fc:00:c5:18
Priority: 128
Domain ID: 3
Configuration information:
Domain configure: Enabled
Domain auto-reconfigure: Disabled
Fabric name: 10:00:00:e0:fc:00:c5:18
Priority: 128
Domain ID: 3 (preferred)
Principal switch running time information:
Priority: 1
Path Interface
Upstream Vfc2
上述信息表明,域配置已经结束,主交换机给Switch C的分配的域ID是3。
# 获取Switch C上的节点注册的相关信息。
[SwitchC] display fc login vsan 1
Interface VSAN FCID Node WWN Port WWN
Vfc3 1 0x030000 10:00:00:05:30:00:25:a1 10:00:00:05:30:00:25:a2
Vfc4 1 0x030001 10:00:00:05:30:00:25:c1 10:00:00:05:30:00:25:c2
Vfc5 1 0x030002 10:00:00:05:30:00:25:b1 10:00:00:05:30:00:25:b2
上述信息表明,Switch C为Disk A、Disk C、Disk B分配的FC地址分别为0x030000、0x030001、0x030002。
# 获取VSAN 1内的名称服务数据库的简要信息。
[SwitchC] display fc name-service database vsan 1
VSAN 1:
FCID Type PWWN(vendor) FC4-type:feature
0x010000 0x01(N) 21:01:00:1a:32:a0:fa:11 SCSI-FCP:Initiator
0x010001 0x01(N) 21:01:00:1b:32:b0:fb:11 SCSI-FCP:Initiator
0x030000 0x01(N) 10:00:00:05:30:00:25:a1 SCSI-FCP:Target
0x030001 0x01(N) 10:00:00:05:30:00:25:c1 SCSI-FCP:Target
0x030002 0x01(N) 10:00:00:05:30:00:25:b1 SCSI-FCP:Target
上述信息表明,所有节点设备均成功完成名称服务注册。
# 配置VSAN 1工作在增强Zone模式。
[SwitchA-vsan1] zone mode enhanced
The zoning database in this switch would be distributed throughout the fabric. Continue? [Y/N]:y
# 创建Zone1,添开启其Pairwise特性,添加FC ID为010000的成员,角色为Initiator,添加FC ID为030000和030001的成员,角色为Target。
[SwitchA-vsan1] zone name Zone1
[SwitchA-vsan1-zone-Zone1] pairwise-zoning enable
[SwitchA-vsan1-zone-Zone1] member fcid 010000 initiator
[SwitchA-vsan1-zone-Zone1] member fcid 030000 target
[SwitchA-vsan1-zone-Zone1] member fcid 030001 target
[SwitchA-vsan1-zone-Zone1] quit
# 创建Zone2,开启其Pairwise特性,添加FC地址为010001的成员,角色为Initiator,添加FC ID为030001和030002的成员,角色为Target。
[SwitchA-vsan1] zone name Zone2
[SwitchA-vsan1-zone-Zone2] pairwise-zoning enable
[SwitchA-vsan1-zone-Zone2] member fcid 010001 initiator
[SwitchA-vsan1-zone-Zone2] member fcid 030001 target
[SwitchA-vsan1-zone-Zone2] member fcid 030002 target
[SwitchA-vsan1-zone-Zone2] quit
# 创建Zone set Zoneset1,添加Zone1、Zone2为其成员。
[SwitchA-vsan1] zoneset name Zoneset1
[SwitchA-vsan1-zoneset-Zoneset1] member Zone1
[SwitchA-vsan1-zoneset-Zoneset1] member Zone2
[SwitchA-vsan1-zoneset-Zoneset1] quit
# 配置扩散和合并类型为完全扩散和完全合并,即携带完整数据库信息进行数据同步。
[SwitchA-vsan1] zoneset distribute full
# 激活Zone set并发起向全网的扩散过程。
[SwitchA-vsan1] zoneset activate name Zoneset1
[SwitchA-vsan1] quit
在Switch A、Switch B、Switch C上通过显示命令都能够观察到Zone配置结果和数据同步结果。下面以Switch C上的显示为例:
# 查看VSAN 1内的Zone set相关信息。
<SwitchC> display zoneset vsan 1
VSAN 1:
zoneset name Zoneset1
zone name Zone1
fcid 0x010000 initiator
fcid 0x030000 target
fcid 0x030001 target
zone name Zone2
fcid 0x010001 initiator
fcid 0x030001 target
fcid 0x030002 target
上述信息表明,已完成两个Zone的划分。
# 查看FC地址类型成员030001所属于的Zone。
<SwitchC> display zone member fcid 030001
fcid 0x030001
VSAN 1:
zone Zone1
zone Zone2
上述信息表明,Disk C同时属于Zone1和Zone2,即Server A和Server B都能够访问Disk C。
# 查看VSAN 1内的Active Zone set相关信息。
<SwitchC> display zoneset active vsan 1
VSAN 1:
zoneset name Zoneset1
zone name Zone1
*fcid 0x010000
*fcid 0x030000
*fcid 0x030001
zone name Zone2
*fcid 0x010001
*fcid 0x030001
*fcid 0x030002
以上信息表明,Zoneset1已被激活即成为VSAN 1内的Active Zone set。
· Switch A:
#
lldp global enable
#
system-working-mode advance
#
fcoe-mode fcf
#
vsan 1
priority 1
zone mode enhanced
zone name Zone1
pairwise-zoning enable
member fcid 010000 initiator
member fcid 030000 target
member fcid 030001 target
zone name Zone2
member fcid 010001 initiator
member fcid 030001 target
member fcid 030002 target
zoneset name Zoneset1
member Zone1
member Zone2
zoneset activate name Zoneset1
#
vlan 10
fcoe enable vsan 1
#
qos map-table dot1p-lp
import 0 export 0
import 2 export 0
import 3 export 1
import 4 export 0
import 5 export 0
import 6 export 0
import 7 export 0
#
traffic classifier app_c operator or
if-match acl mac 4000
#
traffic behavior app_b
remark dot1p 3
#
qos policy plcy
classifier app_c behavior app_b mode dcbx
#
interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Ten-GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Ten-GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control auto
priority-flow-control no-drop dot1p 3
lldp tlv-enable dot1-tlv dcbx
qos wrr byte-count
qos wrr af1 group 1 byte-count 1
qos wrr af2 group sp
qos wrr af3 group sp
qos wrr af4 group sp
qos wrr ef group sp
qos wrr cs6 group sp
qos wrr cs7 group sp
qos apply policy plcy outbound
#
interface Ten-GigabitEthernet1/0/4
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control auto
priority-flow-control no-drop dot1p 3
lldp tlv-enable dot1-tlv dcbx
qos wrr byte-count
qos wrr af1 group 1 byte-count 1
qos wrr af2 group sp
qos wrr af3 group sp
qos wrr af4 group sp
qos wrr ef group sp
qos wrr cs6 group sp
qos wrr cs7 group sp
qos apply policy plcy outbound
#
interface Vfc1
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/1
#
interface Vfc2
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/2
#
interface Vfc3
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/3
#
interface Vfc4
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/4
#
acl mac 4000
rule 0 permit type 8906 ffff
rule 5 permit type 8914 ffff
#
· Switch B:
#
system-working-mode advance
#
fcoe-mode fcf
#
vsan 1
domain-id 2 preferred
#
vlan 10
fcoe enable vsan 1
#
interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Ten-GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Vfc1
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/1
#
interface Vfc2
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/2
#
· Swtich C:
#
lldp global enable
#
system-working-mode advance
#
fcoe-mode fcf
#
vsan 1
domain-id 3 preferred
#
vlan 10
fcoe enable vsan 1
#
traffic classifier app_c operator or
if-match acl mac 4000
#
traffic behavior app_b
remark dot1p 3
#
qos policy plcy
classifier app_c behavior app_b mode dcbx
#
interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Ten-GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Ten-GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control auto
priority-flow-control no-drop dot1p 3
lldp tlv-enable dot1-tlv dcbx
qos apply policy plcy outbound
#
interface Ten-GigabitEthernet1/0/4
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control auto
priority-flow-control no-drop dot1p 3
lldp tlv-enable dot1-tlv dcbx
qos apply policy plcy outbound
#
interface Ten-GigabitEthernet1/0/5
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control auto
priority-flow-control no-drop dot1p 3
lldp tlv-enable dot1-tlv dcbx
qos apply policy plcy outbound
#
interface Vfc1
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/1
#
interface Vfc2
fc mode e
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/2
#
interface Vfc3
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/3
#
interface Vfc4
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/4
#
interface Vfc5
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/5
#
acl mac 4000
rule 0 permit type 8906 ffff
rule 5 permit type 8914 ffff
#
如图4所示,Switch A是Fabric网络边缘设备,服务器Server A和Server B通过Switch B接入Fabric网络。
现要求在Switch A和Switch B上配置FCoE功能,实现:
· SAN网络中的存储数据流量能够在以太网链路上无损传输;
· 只有成功注册的Server才能访问Fabric内的存储资源;
· Server A和Server B不能互相访问,提高网络安全性。
· 为了实现SAN网络中的存储数据流量能够在无损以太网链路上传输,H3C建议用户在交换机和服务器连接的以太网接口上配置DCBX、自动协商模式的PFC、ETS功能;在交换机和磁盘设备连接的以太网接口上配置DCBX、自动协商模式的PFC功能;在交换机与交换机连接的以太网接口上强制开启PFC功能。
· 为了能够实现Server能够访问Fabric内的存储资源,需要配置允许默认Zone内的成员互相访问。
· 为了能够实现只有成功注册的Server才能访问Fabric内的存储资源,且Server A和Server B不能互相访问,需要在Switch B上配置FIP Snooping功能。
(1) 开启高级模式
# 配置设备工作模式为高级模式(如果已经配置设备为高级模式此步骤可略)。
<SwitchA> system-view
[SwitchA] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the
system to make it effective.
# 保存配置。
[SwitchA] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[SwitchA] quit
# 重启设备。
<SwitchA> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
(2) 部署PFC
# 在以太网接口Ten-GigabitEthernet1/0/1上配置强制开启PFC功能,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
<SwitchA> system-view
[SwitchA] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control enable
[SwitchA-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3
[SwitchA-Ten-GigabitEthernet1/0/1] qos trust dot1p
[SwitchA-Ten-GigabitEthernet1/0/1] quit
(3) 配置FCoE功能
# 配置交换机模式为FCF模式。
[SwitchA] fcoe-mode fcf
# 配置FC-MAP值为0x0efc01。
[SwitchA] fcoe fcmap 0efc01
Changing the FC-MAP will flap all VFC interfaces. Continue? [Y/N]:y
# 开启Fabric配置功能(缺省已开启,此步骤可选)。
[SwitchA] vsan 1
[SwitchA-vsan1] domain configure enable
# 配置交换机的优先级为10,使Switch A参与动态建立Fabric网络。
[SwitchA-vsan1] priority 10
[SwitchA-vsan1] quit
# 创建VFC1接口用于连接Transit交换机,配置VFC1接口工作在F模式,将VFC1接口绑定到以太网接口Ten-GigabitEthernet1/0/1上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchA] interface vfc 1
[SwitchA-Vfc1] fc mode f
[SwitchA-Vfc1] bind interface ten-gigabitethernet 1/0/1
[SwitchA-Vfc1] port trunk vsan 1
[SwitchA-Vfc1] quit
# 创建VFC2接口用于连接Fabric网络中其它FCF交换机,配置VFC1接口工作在E模式,将VFC1接口绑定到以太网接口Ten-GigabitEthernet1/0/2上,并将VFC1接口以Trunk方式加入VSAN 1。
[SwitchA] interface vfc 2
[SwitchA-Vfc2] fc mode e
[SwitchA-Vfc2] bind interface ten-gigabitethernet 1/0/2
[SwitchA-Vfc2] port trunk vsan 1
[SwitchA-Vfc2] quit
# 配置以太网接口Ten-GigabitEthernet1/0/1允许VLAN 10的报文通过。
[SwitchA] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] port link-type trunk
[SwitchA-Ten-GigabitEthernet1/0/1] port trunk permit vlan 10
[SwitchA-Ten-GigabitEthernet1/0/1] quit
# 开启VLAN 10的FCoE功能并将其与VSAN 1进行映射。
[SwitchA] vlan 10
[SwitchA-vlan10] fcoe enable vsan 1
[SwitchA-vlan10] quit
# 配置允许默认Zone内的成员互相访问。
[SwitchA] vsan 1
[SwitchA-vsan1] zone default-zone permit
[SwitchA-vsan1] quit
(1) 开启高级模式
# 配置设备工作模式为高级模式(如果已经配置设备为高级模式此步骤可略)。
<SwitchB> system-view
[SwitchB] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the
system to make it effective.
# 保存配置。
[SwitchB] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
[SwitchB] quit
# 重启设备。
<SwitchB> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
(2) 部署DCBX
# 全局开启LLDP功能。
<SwitchB> system-view
[SwitchB] lldp global enable
# 在以太网接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3上开启LLDP功能,并允许发布DCBX TLV。
[SwitchB] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3
[SwitchB-if-range] lldp enable
[SwitchB-if-range] lldp tlv-enable dot1-tlv dcbx
[SwitchB-if-range] quit
# 创建编号为4000的二层ACL,并为其创建规则来匹配FCoE报文(协议号为0x8906)和FIP报文(协议号为0x8914)。
[SwitchB] acl mac 4000
[SwitchB-acl-mac-4000] rule 0 permit type 8906 ffff
[SwitchB-acl-mac-4000] rule 5 permit type 8914 ffff
[SwitchB-acl-mac-4000] quit
# 定义名为app_c的类,其下各规则间的关系为逻辑或,并定义其匹配ACL 4000。
[SwitchB] traffic classifier app_c operator or
[SwitchB-classifier-app_c] if-match acl mac 4000
[SwitchB-classifier-app_c] quit
# 定义名为app_b的流行为,并配置标记报文的802.1p优先级为3。
[SwitchB] traffic behavior app_b
[SwitchB-behavior-app_b] remark dot1p 3
[SwitchB-behavior-app_b] quit
# 定义名为plcy的策略,为类app_c指定采用的流行为是app_b,并指定该策略为DCBX模式。
[SwitchB] qos policy plcy
[SwitchB-qospolicy-plcy] classifier app_c behavior app_b mode dcbx
[SwitchB-qospolicy-plcy] quit
# 在以太网接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3的出方向上应用策略plcy。
[SwitchB] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3
[SwitchB-if-range] qos apply policy plcy outbound
(3) 部署PFC
# 在以太网接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3上配置PFC功能的开启模式为自动协商模式,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchB-if-range] priority-flow-control auto
[SwitchB-if-range] priority-flow-control no-drop dot1p 3
[SwitchB-if-range] qos trust dot1p
# 在以太网接口Ten-GigabitEthernet1/0/1上配置强制开启PFC功能,且设置对802.1p优先级3开启PFC功能,并配置信任报文自带的802.1p优先级。
[SwitchB] interface ten-gigabitethernet 1/0/1
[SwitchB-Ten-GigabitEthernet1/0/1] priority-flow-control enable
[SwitchB-Ten-GigabitEthernet1/0/1] priority-flow-control no-drop dot1p 3
[SwitchB-Ten-GigabitEthernet1/0/1] qos trust dot1p
[SwitchB-Ten-GigabitEthernet1/0/1] quit
(4) 部署ETS
# 配置802.1p优先级到本地优先级的映射,将802.1p优先级3映射到本地优先级1,配置其它的802.1p优先级映射到本地优先级0。
[SwitchB] qos map-table dot1p-lp
[SwitchB-maptbl-dot1p-lp] import 3 export 1
[SwitchB-maptbl-dot1p-lp] import 0 1 2 4 5 6 7 export 0
[SwitchB-maptbl-dot1p-lp] quit
# 在以太网接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3上开启并配置WRR队列,使FCoE流量和普通LAN流量各占50%带宽。
[SwitchB] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3
[SwitchB-if-range] qos wrr byte-count
[SwitchB-if-range] qos wrr af1 group 1 byte-count 1
[SwitchB-if-range] qos wrr be group 1 byte-count 1
# 在以太网接口Ten-GigabitEthernet1/0/2和Ten-GigabitEthernet1/0/3上配置其它的队列为SP调度方式。
[SwitchB-if-range] qos wrr af2 group sp
[SwitchB-if-range] qos wrr af3 group sp
[SwitchB-if-range] qos wrr af4 group sp
[SwitchB-if-range] qos wrr ef group sp
[SwitchB-if-range] qos wrr cs6 group sp
[SwitchB-if-range] qos wrr cs7 group sp
[SwitchB-if-range] quit
(5) 配置FCoE功能
# 配置交换机模式为Transit模式。
[SwitchB] fcoe-mode transit
# 开启VLAN 10的FIP Snooping功能。
[SwitchB] vlan 10
[SwitchB-vlan10] fip-snooping enable
# 配置VLAN 10的FC-MAP值为0x0efc01。
[SwitchB-vlan10] fip-snooping fc-map 0efc01
Changing the FC-MAP will flap all interfaces. Continue? [Y/N]:y
[SwitchB-vlan10] quit
# 配置以太网接口Ten-GigabitEthernet1/0/1允许VLAN 10的报文通过,并将该接口配置为FCF模式。
[SwitchB] interface ten-gigabitethernet 1/0/1
[SwitchB-Ten-GigabitEthernet1/0/1] port link-type trunk
[SwitchB-Ten-GigabitEthernet1/0/1] port trunk permit vlan 10
[SwitchB-Ten-GigabitEthernet1/0/1] fip-snooping port-mode fcf
[SwitchB-Ten-GigabitEthernet1/0/1] quit
# 配置以太网接口Ten-GigabitEthernet1/0/2~Ten-GigabitEthernet1/0/3允许VLAN 10的报文通过,并将该接口配置为ENode模式。
[SwitchB] interface range ten-gigabitethernet 1/0/2 to ten-gigabitethernet 1/0/3
[SwitchB-if-range] port link-type trunk
[SwitchB-if-range] port trunk permit vlan 10
[SwitchB-if-range] fip-snooping port-mode enode
[SwitchB-if-range] quit
# 显示Switch A上VSAN 1内的域信息。
[SwitchA] display fc domain vsan 1
Domain Information of VSAN 1:
Running time information:
State: Stable
Switch WWN: 20:01:ac:2d:57:97:07:00
Fabric name: 48:33:43:2d:46:43:1B:1B
Priority: 25
Domain ID: 11
Configuration information:
Domain configure: Enabled
Domain auto-reconfigure: Disabled
Fabric name: 48:33:43:2d:46:43:1B:1B
Priority: 10
Domain ID: 0 (preferred)
Principal switch running time information:
Priority: 25
Path Interface
Upstream Vfc2
从上述信息可以看出,Switch A的配置已经结束,主交换机为Switch A分配的域ID为11。
# 显示Switch B交换机获取到的ENode信息。
[SwitchB] display fip-snooping enode
VLAN 10:
Interface ENode WWN ENode MAC
XGE1/0/2 10:00:00:11:22:00:0d:01 0000-1234-0e01
XGE1/0/3 11:00:00:11:22:00:0d:02 0000-1234-0f01
# 显示Switch B交换机获取到的FCF交换机信息。
[SwitchB] display fip-snooping fcf
VLAN 10:
Interface FCF MAC FCF WWN Fabric Name ENode
XGE1/0/1 0000-1234-0d01 20:01:ac:2d:57:97:07:00 48:33:43:2d:46:43:1B:1B 2
# 显示FIP Snooping的会话信息。
[SwitchB] display fip-snooping sessions
VLAN 10:
FCF MAC ENode MAC VN_Port MAC VN_Port WWN
0000-1234-0d01 0000-1234-0e01 0efc-0001-0000 af:10:01:11:22:00:0e:01
0000-1234-0d01 0000-1234-0f01 0efc-0002-0001 af:11:01:11:22:00:0f:01
# 显示已经下刷的FIP Snooping规则。
[SwitchB] display fip-snooping rules
Slot 1:
VLAN 10:
FCF rules information:
Interface Source MAC/Mask Destination MAC/Mask Context
XGE1/0/1 0000-1234-0d01/48 0efc-0000-0000/24 ffffffff
ENode rules information:
Interface Source MAC/Mask Destination MAC/Mask Context
XGE1/0/2 0efc-0001-0000/48 0000-1234-0d01/48 ffffffff
XGE1/0/3 0efc-0002-0000/48 0000-1234-0d01/48 ffffffff
· Switch A:
#
system-working-mode advance
#
fcoe-mode fcf
#
fcoe fcmap 0efc01
#
vsan 1
priority 10
zone default-zone permit
#
vlan 10
fcoe enable vsan 1
#
interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
#
interface Vfc1
port trunk vsan 1
bind interface Ten-GigabitEthernet1/0/1
#
· Switch B:
#
lldp global enable
#
system-working-mode advance
#
fcoe-mode transit
#
vlan 10
fip-snooping enable
fip-snooping fc-map 0efc01
#
qos map-table dot1p-lp
import 0 export 0
import 2 export 0
import 3 export 1
import 4 export 0
import 5 export 0
import 6 export 0
import 7 export 0
#
traffic classifier app_c operator or
if-match acl mac 4000
#
traffic behavior app_b
remark dot1p 3
#
qos policy plcy
classifier app_c behavior app_b mode dcbx
#
interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control enable
priority-flow-control no-drop dot1p 3
fip-snooping port-mode fcf
#
interface Ten-GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control auto
priority-flow-control no-drop dot1p 3
lldp tlv-enable dot1-tlv dcbx
qos wrr byte-count
qos wrr af1 group 1 byte-count 1
qos wrr af2 group sp
qos wrr af3 group sp
qos wrr af4 group sp
qos wrr ef group sp
qos wrr cs6 group sp
qos wrr cs7 group sp
qos apply policy plcy outbound
#
interface Ten-GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 10
priority-flow-control auto
priority-flow-control no-drop dot1p 3
lldp tlv-enable dot1-tlv dcbx
qos wrr byte-count
qos wrr af1 group 1 byte-count 1
qos wrr af2 group sp
qos wrr af3 group sp
qos wrr af4 group sp
qos wrr ef group sp
qos wrr cs6 group sp
qos wrr cs7 group sp
qos apply policy plcy outbound
#
acl mac 4000
rule 0 permit type 8906 ffff
rule 5 permit type 8914 ffff
· H3C S12500-S系列以太网交换机 FCoE配置指导-R757X
· H3C S12500-S系列以太网交换机 FCoE命令参考-R757X
不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!