H3C Data Center Switches M-LAG Configuration Guide-6W100

HomeSupportResource CenterConfigure & DeployConfiguration GuidesH3C Data Center Switches M-LAG Configuration Guide-6W100
03-Multi-Layer M-LAG+Dual-Active VLAN Gateway+OSPF Configuration Examples

Example: Configuring multi-layer M-LAG+dual-active VLAN gateway+OSPF

Network configuration

As shown in Figure 1, the user network uses a three-layer architecture: core-aggregation-access. To improve network availability, deploy two devices separately on the core layer, aggregation layer, and access layer. Two devices on each layer form an M-LAG system.

·     Device A and Device B form M-LAG system 1, which acts as the access device and connects to VM.

·     Device C and Device D form M-LAG system 2, which acts as an aggregation device.

·     Device E and Device F form M-LAG system 3, which acts as the core device and connects to Server.

To meet the network access requirements of VM and Server, make sure the M-LAG member devices on the aggregation layer act as both the IPv4 gateway and IPv6 gateway of VM and the M-LAG member devices on the core layer act as both the IPv4 gateway and IPv6 gateway of Server. Run OSPF between the M-LAG member devices on the aggregation layer and M-LAG member devices on the core layer to ensure that they can reach each other at Layer 3.

Figure 1 Network diagram

 

 

Device

Interface

IP address

Peer device and interface

Device A

XGE1/0/24

IPv4:  220.1.1.1/24

Device B: XGE2/0/24

Device B

XGE2/0/24

IPv4: 220.1.1.2/24

Device A: XGE1/0/24

Device C

WGE1/0/11

IPv4: 220.1.1.3/24

Device D: WGE2/0/11

Vlan-int10

IPv4: 10.1.1.1/24

IPv6: 10:1::1/64

N/A

Vlan-int20

IPv4: 20.1.1.1/24

IPv6: 20:1::1/64

Device E: Vlan-int20

Device F: Vlan-int20

Device D

WGE2/0/11

IPv4: 220.1.1.4/24

Device C: WGE1/0/11

Vlan-int10

IPv4: 10.1.1.1/24

IPv6: 10:1::1/64

N/A

Vlan-int20

IPv4: 20.1.1.1/24

IPv6: 20:1::1/64

Device E: Vlan-int20

Device F: Vlan-int20

Device E

XGE1/4/5

IPv4: 220.1.1.5/24

Device F: XGE2/4/5

Vlan-int20

IPv4: 20.1.1.2/24

IPv6: 20:1::2/64

Device C: Vlan-int20

Device D: Vlan-int20

Vlan-int30

IPv4: 30.1.1.1/24

IPv6: 30:1::1/64

Device G: Vlan-int30

Device F

XGE2/4/5

IPv4: 220.1.1.6/24

Device E: XGE1/4/5

Vlan-int20

IPv4: 20.1.1.2/24

IPv6: 20:1::2/64

Device C: Vlan-int20

Device D: Vlan-int20

Vlan-int30

IPv4: 30.1.1.1/24

IPv6: 30:1::1/64

Device G: Vlan-int30

 

Applicable product matrix

IMPORTANT

IMPORTANT:

In addition to running an applicable software version, you must also install the most recent patch, if any.

 

Device

Software version

S6805, S6825, S6850, S9850, S9820-64H, S9820-8C

R6710

S6800/S6860

R6710

S12500X-AF, S6890

R2825

S12500G-AF

Under verification. To obtain the latest images, contact Technical Support.

S6812, S6813

F6628P22 and later

 

Analysis

Device A and Device B are on the access layer. Device C and Device D are on the aggregation layer. Device E and Device F are on the core layer.

On Device C and Device D, configure an IPv4 address and an IPv6 address for VLAN-interface 10, which will act as the IPv4 gateway address and IPv6 gateway address of VM, respectively. Configure an IPv4 address and an IPv6 address for VLAN-interface 20, which will act as the interconnect interface to devices on the core layer.

On Device E and Device F, configure an IPv4 address and an IPv6 address for VLAN-interface 30, which will act as the IPv4 gateway address and IPv6 gateway address of Server, respectively. Configure an IPv4 address and an IPv6 address for VLAN-interface 20, which will act as the interconnect interface to devices on the aggregation layer.

On Device C, Device D, Device E, and Device F, assign an M-LAG virtual IP address to VLAN-interface 20, and enable OSPF to use the secondary IP addresses of interfaces to establish neighbor relationships. On Device C and Device D, enable OSPF and OSPFv3 on VLAN-interface 10 and VLAN-interface 20. On Device E and Device F, enable OSPF and OSPFv3 on VLAN-interface 20 and VLAN-interface 30. Configure Device C to use the M-LAG virtual IP address of VLAN-interface 20 to establish OSPF/OSPFv3 neighbor relationships with Device D, Device E, and Device F. Configure Device D, Device E, and Device F in the same way. Each device uses the M-LAG virtual IP address to establish OSPF/OSPFv3 neighbor relationships with the other three devices.

Configuring the M-LAG systems

Procedure summary

·     Configuring M-LAG

·     Configuring the dual-active gateways

·     Configuring OSPF between M-LAG member devices

Configuring M-LAG

Configuring Device A and Device B

Device A

Device B

Description

Remarks

m-lag system-mac 2-2-2

m-lag system-mac 2-2-2

Configure the M-LAG system MAC address.

You must configure the same M-LAG system MAC address for devices in the same M-LAG system.

m-lag system-number 1

m-lag system-number 2

Set the M-LAG system number.

You must set different M-LAG system numbers for devices in the same M-LAG system.

m-lag system-priority 123

m-lag system-priority 123

Set the M-LAG system priority.

You must set the same M-LAG system priority for devices in the same M-LAG system.

m-lag standalone enable

m-lag standalone enable

Enable M-LAG standalone mode.

N/A

m-lag keepalive ip destination 220.1.1.2 source 220.1.1.1

m-lag keepalive ip destination 220.1.1.1 source 220.1.1.2

Configure the destination and source IP addresses of keepalive packets.

N/A

interface Ten-GigabitEthernet 1/0/24

interface Ten-GigabitEthernet 2/0/24

Enter the interface view for the keepalive link.

N/A

port link-mode route

port link-mode route

Configure the interface for the keepalive link to operate in route mode as a Layer 3 interface.

N/A

ip address 220.1.1.1 24

ip address 220.1.1.2 24

Assign an IP address to the interface for the keepalive link.

N/A

quit

quit

Return to system view.

N/A

m-lag mad exclude interface Ten-GigabitEthernet 1/0/24

m-lag mad exclude interface Ten-GigabitEthernet 2/0/24

Exclude the interface used for M-LAG keepalive detection from the shutdown action by M-LAG MAD.

N/A

interface bridge-aggregation 1

interface bridge-aggregation 1

Create the aggregate interface to be used as the peer-link interface and enter interface view.

N/A

quit

quit

Return to system view.

N/A

Interface HundredGigE 1/0/28

interface HundredGigE 2/0/28

Enter the view of the peer-link interface.

N/A

port link-aggregation group 1

port link-aggregation group 1

Assign the peer-link interface to the aggregation group for the peer link.

N/A

quit

quit

Return to system view.

N/A

interface bridge-aggregation 1

interface bridge-aggregation 1

Enter the view of the aggregation group for the peer link.

N/A

undo mac-address static source-check enable

undo mac-address static source-check enable

Disable source MAC check on an interface.

N/A

link-aggregation mode dynamic

link-aggregation mode dynamic

Configure the peer-link aggregate interface to operate in dynamic mode.

N/A

port m-lag peer-link 1

port m-lag peer-link 1

Specify the aggregate interface (Bridge-Aggregation 1) as the peer-link interface.

N/A

quit

quit

Return to system view.

N/A

interface bridge-aggregation 2

interface bridge-aggregation 2

Create an aggregate interface connecting to VM.

N/A

link-aggregation mode dynamic

link-aggregation mode dynamic

Configure the aggregate interface connecting to VM to operate in dynamic mode.

N/A

port m-lag group 2

port m-lag group 2

Assign the aggregate interface (Bridge-Aggregation 2) to M-LAG group 2.

N/A

quit

quit

Return to system view.

N/A

interface bridge-aggregation 3

interface bridge-aggregation 3

Create an aggregate interface connecting to Device C and Device D.

N/A

link-aggregation mode dynamic

link-aggregation mode dynamic

Configure the aggregate interface connecting to Device C and Device D to operate in dynamic mode.

N/A

port m-lag group 3

port m-lag group 3

Assign the aggregate interface (Bridge-Aggregation 3) to M-LAG group 3.

N/A

quit

quit

Return to system view.

N/A

interface HundredGigE 1/0/27

interface HundredGigE 2/0/27

Enter the view of the physical interfaces connecting the M-LAG system to VM.

N/A

port link-aggregation group 2

port link-aggregation group 2

Assign the interfaces to an M-LAG group.

N/A

quit

quit

Return to system view.

N/A

interface range HundredGigE 1/0/25 HundredGigE 1/0/26

interface range HundredGigE 2/0/25 HundredGigE 2/0/26

Enter the view of the physical interfaces connecting the M-LAG system to Device C and Device D.

N/A

port link-aggregation group 3

port link-aggregation group 3

Assign the interfaces to an M-LAG group.

N/A

quit

quit

Return to system view.

N/A

link-aggregation global load-sharing algorithm 7

link-aggregation global load-sharing algorithm 7

Configure a link aggregation load sharing algorithm.

To identify whether traffic is load-shared among aggregation member ports, use the display counters command to view the traffic on each aggregation group member port. If traffic is not well load-shared, you can use this command to specify a proper link aggregation load sharing algorithm.

This command is not supported on the S6812 and S6813 switches.

 

Configuring Device C and Device D

Device C

Device D

Description

Remarks

m-lag system-mac 1-1-1

m-lag system-mac 1-1-1

Configure the M-LAG system MAC address.

You must configure the same M-LAG system MAC address for devices in the same M-LAG system.

m-lag system-number 1

m-lag system-number 2

Set the M-LAG system number.

You must set different M-LAG system numbers for devices in the same M-LAG system.

m-lag system-priority 124

m-lag system-priority 124

Set the M-LAG system priority.

You must set the same M-LAG system priority for devices in the same M-LAG system.

m-lag standalone enable

m-lag standalone enable

Enable M-LAG standalone mode.

N/A

m-lag keepalive ip destination 220.1.1.4 source 220.1.1.3

m-lag keepalive ip destination 220.1.1.3 source 220.1.1.4

Configure the destination and source IP addresses of keepalive packets.

N/A

interface Twenty-FiveGigE 1/0/11

interface Twenty-FiveGigE 2/0/11

Enter the interface view for the keepalive link.

N/A

port link-mode route

port link-mode route

Configure the interface for the keepalive link to operate in route mode as a Layer 3 interface.

N/A

ip address 220.1.1.3 24

ip address 220.1.1.4 24

Assign an IP address to the interface for the keepalive link.

N/A

quit

quit

Return to system view.

N/A

m-lag mad exclude interface Twenty-FiveGigE 1/0/11

m-lag mad exclude interface Twenty-FiveGigE 2/0/11

Exclude the interface used for M-LAG keepalive detection from the shutdown action by M-LAG MAD.

N/A

interface bridge-aggregation 1

interface bridge-aggregation 1

Create the aggregate interface to be used as the peer-link interface and enter interface view.

N/A

quit

quit

Return to system view.

N/A

interface HundredGigE 1/0/26

interface HundredGigE 2/0/26

Enter the view of the peer-link interface.

N/A

port link-aggregation group 1

port link-aggregation group 1

Assign the peer-link interface to the aggregation group for the peer link.

N/A

quit

quit

Return to system view.

N/A

interface bridge-aggregation 1

interface bridge-aggregation 1

Enter the view of the aggregation group for the peer link.

N/A

undo mac-address static source-check enable

undo mac-address static source-check enable

Disable source MAC check on an interface.

N/A

link-aggregation mode dynamic

link-aggregation mode dynamic

Configure the aggregate interface to operate in dynamic mode.

N/A

port m-lag peer-link 1

port m-lag peer-link 1

Specify the aggregate interface (Bridge-Aggregation 1) as the peer-link interface.

N/A

quit

quit

Return to system view.

N/A

interface bridge-aggregation 2

interface bridge-aggregation 2

Create an aggregate interface connecting to Device E and Device F.

N/A

link-aggregation mode dynamic

link-aggregation mode dynamic

Configure the aggregate interface connecting to Device E and Device F to operate in dynamic mode.

N/A

port m-lag group 2

port m-lag group 2

Assign the aggregate interface (Bridge-Aggregation 2) to M-LAG group 2.

N/A

quit

quit

Return to system view.

N/A

interface bridge-aggregation 3

interface bridge-aggregation 3

Create an aggregate interface connecting to Device A and Device B.

N/A

link-aggregation mode dynamic

link-aggregation mode dynamic

Configure the aggregate interface connecting to Device A and Device B to operate in dynamic mode.

N/A

port m-lag group 3

port m-lag group 3

Assign the aggregate interface (Bridge-Aggregation 3) to M-LAG group 3.

N/A

quit

quit

Return to system view.

N/A

interface range HundredGigE 1/0/28 HundredGigE 1/0/29

interface range HundredGigE 2/0/28 HundredGigE 2/0/29

Enter the view of the physical interfaces connecting the M-LAG system to Device E and Device F.

N/A

port link-aggregation group 2

port link-aggregation group 2

Assign the interfaces to an M-LAG group.

N/A

quit

quit

Return to system view.

N/A

interface range HundredGigE 1/0/30 HundredGigE 1/0/31

interface range HundredGigE 2/0/30 HundredGigE 2/0/31

Enter the view of the physical interfaces connecting the M-LAG system to Device A and Device B.

N/A

port link-aggregation group 3

port link-aggregation group 3

Assign the interfaces to an M-LAG group.

N/A

quit

quit

Return to system view.

N/A

link-aggregation global load-sharing algorithm 7

link-aggregation global load-sharing algorithm 7

Configure a link aggregation load sharing algorithm.

To identify whether traffic is load-shared among aggregation member ports, use the display counters command to view the traffic on each aggregation group member port. If traffic is not well load-shared, you can use this command to specify a proper link aggregation load sharing algorithm.

This command is not supported on the S6812 and S6813 switches.

 

Configuring Device E and Device F

Device E

Device F

Description

Remarks

m-lag system-mac 1-2-3

m-lag system-mac 1-2-3

Configure the M-LAG system MAC address.

You must configure the same M-LAG system MAC address for devices in the same M-LAG system.

m-lag system-number 1

m-lag system-number 2

Set the M-LAG system number.

You must set different M-LAG system numbers for devices in the same M-LAG system.

m-lag system-priority 122

m-lag system-priority 122

Set the M-LAG system priority.

You must set the same M-LAG system priority for devices in the same M-LAG system.

m-lag standalone enable

m-lag standalone enable

Enable M-LAG standalone mode.

N/A

m-lag keepalive ip destination 220.1.1.6 source 220.1.1.5

m-lag keepalive ip destination 220.1.1.5 source 220.1.1.6

Configure the destination and source IP addresses of keepalive packets.

N/A

interface Ten-GigabitEthernet 1/4/5

interface Ten-GigabitEthernet 2/4/5

Enter the interface view for the keepalive link.

N/A

port link-mode route

port link-mode route

Configure the interface for the keepalive link to operate in route mode as a Layer 3 interface.

N/A

ip address 220.1.1.5 24

ip address 220.1.1.6 24

Assign an IP address to the interface for the keepalive link.

N/A

quit

quit

Return to system view.

N/A

m-lag mad exclude  interface Ten-GigabitEthernet 1/4/5

m-lag mad exclude interface Ten-GigabitEthernet 2/4/5

Exclude the interface used for M-LAG keepalive detection from the shutdown action by M-LAG MAD.

N/A

interface bridge-aggregation 1

interface bridge-aggregation 1

Create the aggregate interface to be used as the peer-link interface and enter interface view.

N/A

quit

quit

Return to system view.

N/A

interface HundredGigE 1/1/8

interface HundredGigE 2/1/8

Enter the view of the peer-link interface.

N/A

port link-aggregation group 1

port link-aggregation group 1

Assign the peer-link interface to the aggregation group for the peer link.

N/A

quit

quit

Return to system view.

N/A

interface bridge-aggregation 1

interface bridge-aggregation 1

Enter the view of the aggregation group for the peer link.

N/A

undo mac-address static source-check enable

undo mac-address static source-check enable

Disable source MAC check on an interface.

N/A

link-aggregation mode dynamic

link-aggregation mode dynamic

Configure the aggregate interface to operate in dynamic mode.

N/A

port m-lag peer-link 1

port m-lag peer-link 1

Specify the aggregate interface (Bridge-Aggregation 1) as the peer link.

N/A

quit

quit

Return to system view.

N/A

interface bridge-aggregation 2

interface bridge-aggregation 2

Create an aggregate interface connecting to Device C and Device D.

N/A

link-aggregation mode dynamic

link-aggregation mode dynamic

Configure the aggregate interface connecting to Device C and Device D to operate in dynamic mode.

N/A

port m-lag group 2

port m-lag group 2

Assign the aggregate interface (Bridge-Aggregation 2) to M-LAG group 2.

N/A

quit

quit

Return to system view.

N/A

interface bridge-aggregation 3

interface bridge-aggregation 3

Create an aggregate interface connecting to Device G.

N/A

link-aggregation mode dynamic

link-aggregation mode dynamic

Configure the aggregate interface connecting to Device G to operate in dynamic mode.

N/A

port m-lag group 3

port m-lag group 3

Assign the aggregate interface (Bridge-Aggregation 3) to M-LAG group 3.

N/A

quit

quit

Return to system view.

N/A

interface range HundredGigE 1/0/4 HundredGigE 1/0/5

interface range HundredGigE 2/0/4 HundredGigE 2/0/5

Enter the view of the physical interfaces connecting the M-LAG system to Device C and Device D.

N/A

port link-aggregation group 2

port link-aggregation group 2

Assign the interfaces to an M-LAG group.

N/A

quit

quit

Return to system view.

N/A

interface HundredGigE1/0/6

interface HundredGigE2/0/6

Enter the view of the physical interface connecting the M-LAG system to Device G.

N/A

port link-aggregation group 3

port link-aggregation group 3

Assign the interfaces to an M-LAG group.

N/A

quit

quit

Return to system view.

N/A

link-aggregation global load-sharing algorithm 7

link-aggregation global load-sharing algorithm 7

Configure a link aggregation load sharing algorithm.

To identify whether traffic is load-shared among aggregation member ports, use the display counters command to view the traffic on each aggregation group member port. If traffic is not well load-shared, you can use this command to specify a proper link aggregation load sharing algorithm.

This command is not supported on the S6812 and S6813 switches.

 

Configuring the dual-active gateways

Configuring Device A and Device B

Device A

Device B

Description

Remarks

vlan 10

vlan 10

Create VLAN 10.

N/A

interface bridge-aggregation 2

interface bridge-aggregation 2

Enter the view of the aggregate interface connecting to VM.

N/A

port link-type trunk

port link-type trunk

Set the link type of the Layer 2 aggregate interface to trunk.

N/A

port trunk permit vlan 10

port trunk permit vlan 10

Assign the interface to VLAN 10.

N/A

undo port trunk permit vlan 1

undo port trunk permit vlan 1

Remove the interface from VLAN 1.

N/A

port lacp system-priority 101

port lacp system-priority 100

Set the LACP priority.

Set different LACP priorities for different M-LAG member devices, so that only member ports with a higher priority are selected upon brain split.

quit

quit

Return to system view.

N/A

interface bridge-aggregation 3

interface bridge-aggregation 3

Enter the view of the aggregate interface connecting to Device C and Device D.

N/A

port link-type trunk

port link-type trunk

Set the link type of the Layer 2 aggregate interface (Bridge-Aggregation 3) to trunk.

N/A

port trunk permit vlan 10

port trunk permit vlan 10

Assign the interface to VLAN 10.

N/A

undo port trunk permit vlan 1

undo port trunk permit vlan 1

Remove the interface from VLAN 1.

N/A

port lacp system-priority 101

port lacp system-priority 100

Set the LACP priority.

Set different LACP priorities for different M-LAG member devices, so that only member ports with a higher priority are selected upon brain split.

 

Configuring Device C and Device D

Device C

Device D

Description

Remarks

vlan 10 20

vlan 10 20

Create VLANs 10 and 20.

N/A

interface bridge-aggregation 2

interface bridge-aggregation 2

Enter the view of the aggregate interface connecting to Device E and Device F.

N/A

port link-type trunk

port link-type trunk

Set the link type of the Layer 2 aggregate interface (Bridge-Aggregation 2) to trunk.

N/A

port trunk permit vlan 20

port trunk permit vlan 20

Assign the interface to VLAN 20.

N/A

undo port trunk permit vlan 1

undo port trunk permit vlan 1

Remove the interface from VLAN 1.

N/A

port lacp system-priority 101

port lacp system-priority 100

Set the LACP priority.

Set different LACP priorities for different M-LAG member devices, so that only member ports with a higher priority are selected upon brain split.

quit

quit

Return to system view.

N/A

interface bridge-aggregation 3

interface bridge-aggregation 3

Enter the view of the aggregate interface connecting to Device A and Device B.

N/A

port link-type trunk

port link-type trunk

Set the link type of the Layer 2 aggregate interface to trunk.

N/A

port trunk permit vlan 10

port trunk permit vlan 10

Assign the interface to VLAN 10.

N/A

undo port trunk permit vlan 1

undo port trunk permit vlan 1

Remove the interface from VLAN 1.

N/A

port lacp system-priority 101

port lacp system-priority 100

Set the LACP priority.

Set different LACP priorities for different M-LAG member devices, so that only member ports with a higher priority are selected upon brain split.

quit

quit

Return to system view.

N/A

interface vlan-interface 10

interface vlan-interface 10

Create VLAN-interface 10.

N/A

ip address 10.1.1.1 255.255.255.0

ip address 10.1.1.1 255.255.255.0

Assign an IPv4 address to VLAN-interface 10, which is to act as an IPv4 dual-active gateway.

N/A

mac-address 0010-0010-0010

mac-address 0010-0010-0010

Assign a MAC address to VLAN-interface 10.

N/A

ipv6 address 10:1::1 64

ipv6 address 10:1::1 64

Assign an IPv6 address to VLAN-interface 10, which is to act as an IPv6 dual-active gateway.

N/A

quit

quit

Return to system view.

N/A

m-lag mad exclude  interface Vlan-interface10

m-lag mad exclude  interface Vlan-interface10

Exclude VLAN-interface 10 from the shutdown action by M-LAG MAD.

N/A

interface vlan-interface 20

interface vlan-interface 20

Create VLAN-interface 20.

N/A

ip address 20.1.1.1 255.255.255.0

ip address 20.1.1.1 255.255.255.0

Assign an IPv4 address to VLAN-interface 20.

The address is the address of the interface connecting to core devices.

mac-address 0020-0020-0020

mac-address 0020-0020-0020

Assign a MAC address to VLAN-interface 20.

N/A

ipv6 address 20:1::1 64

ipv6 address 20:1::1 64

Assign an IPv6 address to VLAN-interface 20.

The address is the address of the interface connecting to core devices.

quit

quit

Return to system view.

N/A

m-lag mad exclude  interface Vlan-interface20

m-lag mad exclude  interface Vlan-interface20

Exclude VLAN-interface 20 from the shutdown action by M-LAG MAD.

N/A

 

Configuring Device E and Device F

Device E

Device F

Description

Remarks

vlan 20 30

vlan 20 30

Create VLANs 20 and 30.

N/A

interface bridge-aggregation 2

interface bridge-aggregation 2

Enter the view of the aggregate interface connecting to Device C and Device D.

N/A

port link-type trunk

port link-type trunk

Set the link type of the Layer 2 aggregate interface to trunk.

N/A

port trunk permit vlan 20

port trunk permit vlan 20

Assign the interface to VLAN 20.

N/A

undo port trunk permit vlan 1

undo port trunk permit vlan 1

Remove the interface from VLAN 1.

N/A

port lacp system-priority 101

port lacp system-priority 100

Set the LACP priority.

Set different LACP priorities for different M-LAG member devices, so that only member ports with a higher priority are selected upon brain split.

quit

quit

Return to system view.

N/A

interface bridge-aggregation 3

interface bridge-aggregation 3

Enter the view of the aggregate interface connecting to Device G.

N/A

port link-type trunk

port link-type trunk

Set the link type of the Layer 2 aggregate interface (Bridge-Aggregation 3) to trunk.

N/A

port trunk permit vlan 30

port trunk permit vlan 30

Assign the interface to VLAN 30.

N/A

undo port trunk permit vlan 1

undo port trunk permit vlan 1

Remove the interface from VLAN 1.

N/A

port lacp system-priority 101

port lacp system-priority 100

Set the LACP priority.

Set different LACP priorities for different M-LAG member devices, so that only member ports with a higher priority are selected upon brain split.

quit

quit

Return to system view.

N/A

interface vlan-interface 30

interface vlan-interface 30

Create VLAN-interface 30.

N/A

ip address 30.1.1.1 255.255.255.0

ip address 30.1.1.1 255.255.255.0

Assign an IPv4 address to VLAN-interface 30.

The address acts as the IPv4 dual-active gateway.

mac-address 0030-0030-0030

mac-address 0030-0030-0030

Assign a MAC address to VLAN-interface 30.

N/A

ipv6 address 30:1::1 64

ipv6 address 30:1::1 64

Assign an IPv6 address to VLAN-interface 30.

The address acts as the IPv6 dual-active gateway.

quit

quit

Return to system view.

N/A

m-lag mad exclude  interface Vlan-interface30

m-lag mad exclude  interface Vlan-interface30

Exclude VLAN-interface 30 from the shutdown action by M-LAG MAD.

N/A

interface vlan-interface 20

interface vlan-interface 20

Create VLAN-interface 20.

N/A

ip address 20.1.1.2 255.255.255.0

ip address 20.1.1.2 255.255.255.0

Assign an IPv4 address to VLAN-interface 20.

The address is the address of the interface connecting to aggregation devices.

mac-address 0020-0020-0021

mac-address 0020-0020-0021

Assign a MAC address to VLAN-interface 20.

N/A

ipv6 address 20:1::2 64

ipv6 address 20:1::2 64

Assign an IPv6 address to VLAN-interface 20.

The address is the address of the interface connecting to aggregation devices.

quit

quit

Return to system view.

N/A

m-lag mad exclude  interface Vlan-interface20

m-lag mad exclude  interface Vlan-interface20

Exclude VLAN-interface 20 from the shutdown action by M-LAG MAD.

N/A

 

Configuring OSPF between M-LAG member devices

Configuring Device C and Device D

Device C

Device D

Description

Remarks

router id 3.3.3.3

router id 4.4.4.4

Configure a router ID.

N/A

ospf 1

ospf 1

Configure an OSPF process.

N/A

area 0

area 0

Configure an OSPF area.

N/A

quit

quit

Return to system view.

N/A

interface vlan-interface 10

interface vlan-interface 10

Enter VLAN interface view.

N/A

ospf 1 area 0.0.0.0

ospf 1 area 0.0.0.0

Enable OSPF on an interface.

N/A

quit

quit

Return to system view.

N/A

interface vlan-interface 20

interface vlan-interface 20

Enter VLAN interface view.

N/A

ospf 1 area 0.0.0.0

ospf 1 area 0.0.0.0

Enable OSPF on an interface.

N/A

quit

quit

Return to system view.

N/A

ospfv3 1

ospfv3 1

Configure an OSPFv3 process.

N/A

router-id 3.3.3.3

router-id 4.4.4.4

Configure a router ID.

N/A

area 0

area 0

Configure an OSFPv3 area.

N/A

quit

quit

Return to system view.

N/A

interface vlan-interface 10

interface vlan-interface 10

Enter VLAN interface view.

N/A

ospfv3 1 area 0.0.0.0

ospfv3 1 area 0.0.0.0

Enable OSPFv3 on an interface.

N/A

quit

quit

Return to system view.

N/A

interface vlan-interface 20

interface vlan-interface 20

Enter VLAN interface view.

N/A

ospfv3 1 area 0.0.0.0

ospfv3 1 area 0.0.0.0

Enable OSPFv3 on an interface.

N/A

port m-lag virtual-ip 20.1.1.103 255.255.255.0 active

port m-lag virtual-ip 20.1.1.104 255.255.255.0 active

Assign an M-LAG virtual IPv4 address to an interface.

The address is used to establish OSPF neighbor relationships between core devices and the peer M-LAG member devices.

port m-lag ipv6 virtual-ip FE80::6 link-local

port m-lag ipv6 virtual-ip FE80::8 link-local

Assign an M-LAG virtual IPv6 address to an interface.

The address is used to establish OSPFv3 neighbor relationships between core devices and the peer M-LAG member devices.

ospf peer sub-address enable 20.1.1.103

ospf peer sub-address enable 20.1.1.104

Enable OSPF to establish neighbor relationships through the secondary IP addresses of an interface.

The same gateway interface on different M-LAG member devices must be configured with the same IP address and MAC address. Therefore, the M-LAG member devices cannot use the primary address of the interface to establish neighbor relationships with other devices. Therefore, you must enable OSPF to establish neighbor relationships through the secondary IP addresses of an interface.

 

Configuring Device E and Device F

Device E

Device F

Description

Remarks

router id 1.1.1.1

router id 2.2.2.2

Configure a router ID.

N/A

ospf 1

ospf 1

Configure an OSPF process.

N/A

area 0

area 0

Configure an OSPF area.

N/A

quit

quit

Return to system view.

N/A

interface vlan-interface 20

interface vlan-interface 20

Enter VLAN interface view.

N/A

ospf 1 area 0.0.0.0

ospf 1 area 0.0.0.0

Enable OSPF on an interface.

N/A

quit

quit

Return to system view.

N/A

interface vlan-interface 30

interface vlan-interface 30

Enter VLAN interface view.

N/A

ospf 1 area 0.0.0.0

ospf 1 area 0.0.0.0

Enable OSPF on an interface.

N/A

quit

quit

Return to system view.

N/A

ospfv3 1

ospfv3 1

Configure an OSPFv3 process.

N/A

router-id 1.1.1.1

router-id 2.2.2.2

Configure a router ID.

N/A

area 0

area 0

Configure an OSPF area.

N/A

quit

quit

Return to system view.

N/A

interface vlan-interface 20

interface vlan-interface 20

Enter VLAN interface view.

N/A

ospfv3 1 area 0.0.0.0

ospfv3 1 area 0.0.0.0

Enable OSPFv3 on an interface.

N/A

port m-lag virtual-ip 20.1.1.101 255.255.255.0 active

port m-lag virtual-ip 20.1.1.102 255.255.255.0 active

Assign an M-LAG virtual IPv4 address to an interface.

The address is used to establish OSPF neighbor relationships between core devices and the peer M-LAG member devices.

port m-lag ipv6 virtual-ip FE80::2 link-local

port m-lag ipv6 virtual-ip FE80::4 link-local

Assign an M-LAG virtual IPv6 address to an interface.

The address is used to establish OSPFv3 neighbor relationships between core devices and the peer M-LAG member devices.

ospf peer sub-address enable 20.1.1.101

ospf peer sub-address enable 20.1.1.102

Enable OSPF to establish neighbor relationships through the secondary IP addresses of an interface.

The same gateway interface on different M-LAG member devices must be configured with the same IP address and MAC address. Therefore, the M-LAG member devices cannot use the primary address of the interface to establish neighbor relationships with other devices. Therefore, you must enable OSPF to establish neighbor relationships through the secondary IP addresses of an interface.

quit

quit

Return to system view.

N/A

interface vlan-interface 30

interface vlan-interface 30

Enter VLAN interface view.

N/A

ospfv3 1 area 0.0.0.0

ospfv3 1 area 0.0.0.0

Enable OSPFv3 on an interface.

N/A

 

Configuring the uplink device

Device G

Description

vlan 30

Create VLAN 30.

quit

Return to system view.

interface bridge-aggregation 3

Create an aggregate interface connecting to Device E and Device F.

link-aggregation mode dynamic

Configure the aggregate interface to operate in dynamic mode.

quit

Return to system view.

Interface range HundredGigE 2/0/1 HundredGigE 2/0/2

Enter the view of the physical interfaces connecting to Device E and Device F.

port link-aggregation group 3

Assign physical interfaces to aggregation group 3.

quit

Return to system view.

interface bridge-aggregation 3

Enter the view of the aggregate interface connecting to Device E and Device F.

port link-type trunk

Set the link type of the Layer 2 aggregate interface to trunk.

port trunk permit vlan 30

Assign the interface to VLAN 30.

undo port trunk permit vlan 1

Remove the interface from VLAN 1.

quit

Return to system view.

Interface HundredGigE 2/0/64

Enter the view of the interface connecting to Server.

port access vlan 30

Assign the interface to VLAN 30.

 

Traffic forwarding models

Underlay traffic characteristics

The forwarding model matrix provides the following characteristics of underlay traffic:

·     No.—Traffic number in the U-X-XXX format:

¡     U—Underlay traffic.

¡     X—Protocol number, which can be 4 (IPv4) or 6 (IPv6).

¡     XXX—Traffic sequence number.

·     Traffic type—Type of underlay traffic, which can be IPv4 known unicast or IPv6 known unicast.

·     Direction—Direction of underlay traffic. The value is south-north, which indicates traffic from the south to north.

·     Forwarding path—Nodes that underlay traffic traverses.

·     Traffic simulation—Traffic simulation method. Typically, a tester is used to simulate server traffic.

·     Load—Traffic size, which can be light (less than 1000 flows) and heavy (more than 1000 flows).

·     Traffic direction to firewalls/LB—No firewalls or LBs are used in this example. This field is not involved.

Forwarding models

No.

Traffic type

Direction

Forwarding path

Traffic simulation

Load

Traffic direction to firewalls/LB

U-4-101

IPv4 known unicast

South to north

VM > M-LAG system 1 > M-LAG system 2 > M-LAG system 3 > Server

Tester

Light

N/A

U-6-101

IPv6 known unicast

South to north

VM > M-LAG system 1 > M-LAG system 2 > M-LAG system 3 > Server

Tester

Light

N/A

 

Testing network convergence upon single points of failure

Table 1 Network convergence upon single points of failure

Device

Failure type

Traffic interruption time

M-LAG

Single point of failure on M-LAG member links

≤ 500 ms

Single point of failure restored on M-LAG member links

0 ms

Peer link failure

≤ 500 ms

Peer link failure restored

≤ 10 ms

Keepalive link failure

0 ms

Keepalive link failure restored

0 ms

Keepalive link and Peer link failure

≤ 5000 ms

Keepalive link and Peer link restored

≤ 10000 ms

Upgrading the devices

≤ 500ms (legacy method, in which two M-LAG member devices are separately upgraded)

Expanding the network

0 ms

Replacing hardware

Fixed-port device: ≤ 500 ms

Modular device:

·     Device replacement: ≤ 1000 ms.

·     Switching fabric module replacement: 0 ms.

·     Service module replacement: ≤ 500 ms.

 

Verifying the configuration

Verifying the status of the M-LAG system

Verify that the M-LAG system is working correctly on Device C and Device D. Use Device C as an example.

# Display summary information about the peer-link interface and M-LAG interface.

[DeviceC] display m-lag summary

Flags: A -- Aggregate interface down, B -- No peer M-LAG interface configured

       C -- Configuration consistency check failed

Peer-link interface: BAGG1

Peer-link interface state (cause): UP

Keepalive link state (cause): UP

                     M-LAG interface information

M-LAG interface  M-LAG group  Local state (cause)  Peer state  Remaining down time(s)

BAGG2         2         UP                   UP          -

BAGG3         3         UP                   UP          -

# Verify that keepalive link is working correctly.

[DeviceC] display m-lag keepalive

Neighbor keepalive link status (cause): Up

Neighbor is alive for: 92565 s 440 ms

Keepalive packet transmission status:

  Sent: Successful

  Received: Successful

Last received keepalive packet information:

  Source IP address: 220.1.1.4

  Time: 2022/01/29 03:35:51

  Action: Accept

M-LAG keepalive parameters:

Destination IP address: 220.1.1.4

Source IP address: 220.1.1.3

Keepalive UDP port : 6400

Keepalive VPN name : N/A

Keepalive interval : 1000 ms

Keepalive timeout  : 5 sec

Keepalive hold time: 3 sec

# Display the M-LAG system settings.

[DeviceC] display m-lag system

                     System information

Local system number: 1                      Peer system number: 2

Local system MAC: 0001-0001-0001            Peer system MAC: 0001-0001-0001

Local system priority: 124                  Peer system priority: 124

Local bridge MAC: dcda-8037-2bc0            Peer bridge MAC: 9ce8-9573-aba2

Local effective role: Secondary             Peer effective role: Primary

Health level: 0

Standalone mode on split: Enabled

In standalone mode: No

                     System timer information

Timer                      State       Value (s)    Remaining time (s)

Auto recovery              disabled    -            -

Restore delay              disabled    180          -

Consistency-check delay    disabled    90           -

Standalone delay           disabled    0            -

Role to None delay         disabled    60           -

# Display detailed information about the peer-link interface and M-LAG interfaces.

[DeviceC] display m-lag verbose

Flags: A -- Home_Gateway, B -- Neighbor_Gateway, C -- Other_Gateway,

       D -- PeerLink_Activity, E -- DRCP_Timeout, F -- Gateway_Sync,

       G -- Port_Sync, H -- Expired

Peer-link interface/Peer-link interface ID: BAGG1/1

State: UP

Cause: -

Local DRCP flags/Peer DRCP flags: ABDFG/ABDFG

Local Selected ports (index): HGE1/0/26 (30)

Peer Selected ports indexes: 225

M-LAG interface/M-LAG group ID: BAGG2/2

Local M-LAG interface state: UP

Peer M-LAG interface state: UP

M-LAG group state: UP

Local M-LAG interface down cause: -

Remaining M-LAG DOWN time: -

Local M-LAG interface LACP MAC: Config=N/A, Effective=0001-0001-0001

Peer M-LAG interface LACP MAC: Config=N/A, Effective=0001-0001-0001

Local M-LAG interface LACP priority: Config=32768, Effective=124

Peer M-LAG interface LACP priority: Config=32768, Effective=124

Local DRCP flags/Peer DRCP flags: ABDFG/ABDFG

Local Selected ports (index): HGE1/0/28 (40), HGE1/0/29 (45)

Peer Selected ports indexes: 235, 240

M-LAG interface/M-LAG group ID: BAGG3/3

Local M-LAG interface state: UP

Peer M-LAG interface state: UP

M-LAG group state: UP

Local M-LAG interface down cause: -

Remaining M-LAG DOWN time: -

Local M-LAG interface LACP MAC: Config=N/A, Effective=0001-0001-0001

Peer M-LAG interface LACP MAC: Config=N/A, Effective=0001-0001-0001

Local M-LAG interface LACP priority: Config=32768, Effective=124

Peer M-LAG interface LACP priority: Config=32768, Effective=124

Local DRCP flags/Peer DRCP flags: ABDFG/ABDFG

Local Selected ports (index): HGE1/0/30 (50), HGE1/0/31 (55)

Peer Selected ports indexes: 245, 250

Verifying the routing protocols

# Display the OSPF neighbors of Device C.

[DeviceC] display ospf peer

                           

         OSPF Process 1 with Router ID 3.3.3.3

               Neighbor Brief Information

                               

 Area: 0.0.0.0       

 Router ID       Address         Pri Dead-Time  State             Interface

 1.1.1.1         20.1.1.101      1   36         2-Way/ -          Vlan20

 2.2.2.2         20.1.1.102      1   32         Full/BDR          Vlan20

 4.4.4.4         20.1.1.104      1   31         Full/DR           Vlan20

# Display the OSPFv3 neighbors of Device C.

[DeviceC] display ospfv3 peer

                           

               OSPFv3 Process 1 with Router ID 3.3.3.3

                 

 Area: 0.0.0.0       

-------------------------------------------------------------------------

 Router ID       Pri State             Dead-Time InstID Interface

 1.1.1.1         1   2-Way/ -          00:00:32  0      Vlan20

 2.2.2.2         1   Full/BDR          00:00:40  0      Vlan20

 4.4.4.4         1   Full/DR           00:00:34  0      Vlan20

# Display the OSPF neighbors of Device D.

[DeviceD] display ospf peer

                                

         OSPF Process 1 with Router ID 4.4.4.4

               Neighbor Brief Information

                 

 Area: 0.0.0.0       

 Router ID       Address         Pri Dead-Time  State             Interface

 1.1.1.1         20.1.1.101      1   36         Full/DROther      Vlan20

 2.2.2.2         20.1.1.102      1   33         Full/BDR          Vlan20

 3.3.3.3         20.1.1.103      1   33         Full/DROther      Vlan20

# Display the OSPFv3 neighbors of Device D.

[DeviceD] display ospfv3 peer

OSPFv3 Process 1 with Router ID 4.4.4.4

Area: 0.0.0.0

-------------------------------------------------------------------------

Router ID       Pri State             Dead-Time InstID Interface

1.1.1.1         1   Full/DROther      00:00:33  0      Vlan20

2.2.2.2         1   Full/BDR          00:00:32  0      Vlan20

3.3.3.3         1   Full/DROther      00:00:32  0      Vlan20

# Display the OSPF neighbors of Device E.

[DeviceE] display ospf peer

OSPF Process 1 with Router ID 1.1.1.1

Neighbor Brief Information

Area: 0.0.0.0       

Router ID       Address         Pri Dead-Time  State             Interface

2.2.2.2         20.1.1.102      1   38         Full/BDR          Vlan20

3.3.3.3         20.1.1.103      1   38         2-Way/ -          Vlan20

4.4.4.4         20.1.1.104      1   37         Full/DR           Vlan20

# Display the OSPFv3 neighbors of Device E.

[DeviceE] display ospfv3 peer

 OSPFv3 Process 1 with Router ID 1.1.1.1

Area: 0.0.0.0

------------------------------------------------------------------------

Router ID       Pri State             Dead-Time InstID Interface

2.2.2.2         1   Full/BDR          00:00:38  0      Vlan20

3.3.3.3         1   2-Way/ -          00:00:38  0      Vlan20

4.4.4.4         1   Full/DR           00:00:32  0      Vlan20

# Display the OSPF neighbors of Device F.

[DeviceF] display ospf peer

OSPF Process 1 with Router ID 2.2.2.2

Neighbor Brief Information

Area: 0.0.0.0       

Router ID       Address         Pri Dead-Time  State             Interface

1.1.1.1         20.1.1.101      1   30         Full/DROther      Vlan20

3.3.3.3         20.1.1.103      1   37         Full/DROther      Vlan20

4.4.4.4         20.1.1.104      1   36         Full/DR           Vlan20

# Display the OSPFv3 neighbors of Device F.

[DeviceF] display ospfv3 peer

OSPFv3 Process 1 with Router ID 2.2.2.2

Area: 0.0.0.0

-------------------------------------------------------------------------

Router ID       Pri State             Dead-Time InstID Interface

1.1.1.1         1   Full/DROther      00:00:38  0      Vlan20

3.3.3.3         1   Full/DROther      00:00:37  0      Vlan20

4.4.4.4         1   Full/DR           00:00:31  0      Vlan20

Upgrading the devices

Checking the environment

Execute the commands in "Verifying the configuration" and the following commands to verify that the device is available for an upgrade.

 

Device E

Device F

Description

display device

display device

Displays device information.

display boot-loader

display boot-loader

Displays current software images and startup software images.

display version

display version

Displays system version information.

 

Upgrading the devices

See H3C Switches M-LAG System Upgrade & Replacement & Expansion Guide.

Verifying the traffic interruption time during the upgrade

Verify that the legacy upgrade method is used, in which the two M-LAG member devices are upgraded one by one. Verify that the traffic interruption time is shorter than 500 ms during a switchover and shorter than 150 ms during fallback when the traffic load is light. For more information, see “Testing network convergence upon single points of failure.”

Verifying the upgrade result

Execute the commands in "Verifying the configuration" and the following commands to verify that the device is upgraded successfully.

 

Device E

Device F

Description

display device

display device

Displays device information.

display boot-loader

display boot-loader

Displays current software images and startup software images.

display version

display version

Displays system version information.

 

Expanding the network

An expansion operation adds two leaf devices.

Checking the environment

Execute the commands in "Verifying the configuration" and the following commands to verify that the device is available for an expansion.

 

M-LAG 1

M-LAG 2

Description

display device

display device

Displays device information.

display boot-loader

display boot-loader

Displays current software images and startup software images.

display version

display version

Displays system version information.

 

Expanding the network

1.     Disconnect the device from network management systems.

2.     Upgrade the software of the device as needed.

3.     Preconfigure the device.

4.     Connect the device to network management systems.

5.     Incorporate the device on the controller.

Verifying the traffic interruption time

For more information, see “Testing network convergence upon single points of failure.”

Verifying the expansion result

Execute the following commands to verify that the device is added successfully.

 

M-LAG 1

M-LAG 2

Description

display device

display device

Displays device information.

display boot-loader

display boot-loader

Displays current software images and startup software images.

display version

display version

Displays system version information.

 

Replacing hardware

Replacing a service module

Checking the environment

Execute the commands in “Verifying the configuration" and the following commands to verify that the target device is available for a replacement.

 

M-LAG 1

M-LAG 2

Description

display device

display device

Displays device information.

display boot-loader

display boot-loader

Displays current software images and startup software images.

display version

display version

Displays system version information.

 

Replacing hardware

Switch service and management traffic on the target service module to other service modules.

Power off the device and replace the service module, or replace the service module when the device is running. For more information, see the installation guides for the service module.

For details, see H3C Switches M-LAG System Upgrade & Replacement & Expansion Guide.

Verifying the traffic interruption time

For more information, see “Testing network convergence upon single points of failure.”

Verifying the replacement result

Execute the commands in "Checking the environment."

Replacing a switching fabric module

Checking the environment

Execute the commands in “Verifying the configuration" and the following commands to verify that the target device is available for a replacement.

 

M-LAG 1

M-LAG 2

Description

display device

display device

Displays device information.

display boot-loader

display boot-loader

Displays current software images and startup software images.

display version

display version

Displays system version information.

 

Replacing hardware

Power off the device and replace the switching fabric module, or replace the switching fabric module when the device is running. For more information, see the installation guides for the switching fabric module.

Verifying the traffic interruption time

For more information, see “Testing network convergence upon single points of failure.”

Verifying the replacement result

Execute the commands in "Checking the environment."

Replace a device

Checking the environment

Execute the commands in “Verifying the configuration" and the following commands to verify that the target device is available for a replacement.

 

M-LAG 1

M-LAG 2

Description

display device

display device

Displays device information.

display boot-loader

display boot-loader

Displays current software images and startup software images.

display version

display version

Displays system version information.

 

Replacing hardware

See H3C Switches M-LAG System Upgrade & Replacement & Expansion Guide.

Verifying the traffic interruption time

For more information, see “Testing network convergence upon single points of failure.”

Verifying the replacement result

Execute the commands in "Checking the environment."

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网