- Table of Contents
-
- H3C Data Center Switches M-LAG Configuration Guide-6W100
- 00-M-LAG network planning
- 01-M-LAG+IPv4 and IPv6 Dual-Active VLAN Gateway Configuration Example
- 02-Multi-Layer M-LAG+STP+Dual-Active VLAN Gateway Configuration Examples
- 03-Multi-Layer M-LAG+Dual-Active VLAN Gateway+OSPF Configuration Examples
- 04-Multi-tier M-LAG+Spine Gateways+ECMP Paths to External Network Configuration Example
- 05-M-LAG and VRRP Configuration Example
- 06-M-LAG+RDMA Configuration Example
- 07-M-LAG and EVPN Distributed Gateway (IS-IS for underlay routing) Configuration Example
- 08-M-LAG and EVPN Distributed Gateway (BGP for Underlay Routing) Configuration Example
- 09-M-LAG+EVPN Distributed Gateway (OSPF on Underlay Network)+DHCP Relay+Microsegmentation+Service Chain Configuration Example
- 10-M-LAG+EVPN Centralized Gateway Configuration Example
- 11-Access to M-LAG Through Dynamic Routing and Distributed EVPN Gateways Configuration Example
- 12-M-LAG+EVPN+Monitor Link Configuration Examples
- 13-M-LAG and MVXLAN Configuration Example
- 14-M-LAG and DCI Configuration Example
- 15-M-LAG+EVPN DC Switchover Upon Border Failure Configuration Examples
- Related Documents
-
Title | Size | Download |
---|---|---|
04-Multi-tier M-LAG+Spine Gateways+ECMP Paths to External Network Configuration Example | 288.91 KB |
Example: Configuring multi-tier M-LAG+spine gateways+ECMP paths to the external network
Configuring the links towards the servers
Configuring the interfaces facing single-homed downstream devices
Configuring the links towards the spine tier
Configuring the links towards the leaf tier
Configuring the dual-active VLAN gateways
Configuring the interfaces connected to the external network
Testing network convergence upon single points of failure
Verifying the traffic interruption time
Verifying the expansion result
Replacing a switching fabric module
Example: Configuring multi-tier M-LAG+spine gateways+ECMP paths to the external network
Network configuration
As shown in Figure 1, configure the network as follows:
· Set up an M-LAG system at the spine tier to offer gateway services.
· Set up two M-LAG systems at the leaf tier to offer access services to the servers.
· Attach each server to a leaf M-LAG system by using two links or a single link.
· Attach each leaf device to the spine devices by using M-LAG interfaces.
· Configure the router to provide access to the external network.
Device |
Interface |
IP address |
Interface description and peer device and interface |
Spine 1 |
HGE2/0/1 |
N/A |
Peer-link interface Spine 2: HGE2/0/1 |
HGE2/0/2 |
2.0.0.1/30 |
Keepalive interface Spine 2: HGE2/0/2 |
|
HGE1/0/5 |
25.1.1.1/24 |
Router: HGE1/0/25 |
|
FGE3/0/1 |
N/A |
Leaf 1: FGE1/0/50 |
|
FGE3/0/2 |
N/A |
Leaf 2: FGE1/0/50 |
|
FGE3/0/3 |
N/A |
Leaf 3: FGE1/0/50 |
|
FGE3/0/4 |
N/A |
Leaf 4: FGE1/0/50 |
|
Vlan-interface21 |
21.1.1.1/24 |
Leaf 1 and Leaf 2 Service VLAN |
|
Vlan-interface31 |
31.1.1.1/24 |
Leaf 3 and Leaf 4 Service VLAN |
|
Vlan-interface2000 |
192.168.2.1/30 |
East-west failover VLAN |
|
Spine 2 |
HGE2/0/1 |
N/A |
Peer-link interface Spine 1: HGE2/0/1 |
HGE2/0/2 |
2.0.0.2/30 |
Keepalive interface Spine 1: HGE2/0/2 |
|
HGE2/0/3 |
23.1.1.1/24 |
Router: HGE1/0/26 |
|
FGE3/0/1 |
N/A |
Leaf 1: FGE1/0/49 |
|
FGE3/0/2 |
N/A |
Leaf 2: FGE1/0/49 |
|
FGE3/0/3 |
N/A |
Leaf 3: FGE1/0/49 |
|
FGE3/0/4 |
N/A |
Leaf 4: FGE1/0/49 |
|
Vlan-interface21 |
21.1.1.1/24 |
Leaf 1 and Leaf 2 Service VLAN |
|
Vlan-interface31 |
31.1.1.1/24 |
Leaf 3 and Leaf 4 Service VLAN |
|
Vlan-interface2000 |
192.168.2.2/30 |
East-west failover VLAN |
|
Leaf 1 |
XGE1/0/1 |
N/A |
Member port of an M-LAG system interface Server A |
FGE1/0/49 |
N/A |
Spine 2: FGE3/0/1 |
|
FGE1/0/50 |
N/A |
Spine 1: FGE3/0/1 |
|
FGE1/0/51 |
N/A |
Peer-link interface Leaf 2: FGE1/0/51 |
|
FGE1/0/52 |
1.0.0.1/30 |
Keepalive interface Leaf 2: FGE1/0/52 |
|
FGE1/0/53 |
N/A |
Single-homed link Server C |
|
Leaf 2 |
XGE1/0/1 |
N/A |
Member port of an M-LAG system interface Server A |
FGE1/0/49 |
N/A |
Spine 2: FGE3/0/2 |
|
FGE1/0/50 |
N/A |
Spine 1: FGE3/0/2 |
|
FGE1/0/51 |
N/A |
Peer-link interface Leaf 1: FGE1/0/51 |
|
FGE1/0/52 |
1.0.0.2/30 |
Keepalive interface Leaf 1: FGE1/0/52 |
|
Leaf 3 |
XGE1/0/1 |
N/A |
Member port of an M-LAG system interface Server B |
FGE1/0/49 |
N/A |
Spine 2: FGE3/0/3 |
|
FGE1/0/50 |
N/A |
Spine 1: FGE3/0/3 |
|
FGE1/0/51 |
N/A |
Peer-link interface Leaf 4: FGE1/0/51 |
|
FGE1/0/52 |
1.0.0.5/30 |
Keepalive interface Leaf 4: FGE1/0/52 |
|
Leaf 4 |
XGE1/0/1 |
N/A |
Member port of an M-LAG system interface Server B |
FGE1/0/49 |
N/A |
Spine 2: FGE3/0/4 |
|
FGE1/0/50 |
N/A |
Spine 1: FGE3/0/4 |
|
FGE1/0/51 |
N/A |
Peer-link interface Leaf 3: FGE1/0/51 |
|
FGE1/0/52 |
1.0.0.6/30 |
Keepalive interface Leaf 3: FGE1/0/52 |
|
Router |
HGE1/0/25 |
25.1.1.2 |
Spine 1: HGE2/0/3 |
HGE1/0/26 |
23.1.1.2 |
Spine 2: HGE2/0/3 |
Applicable product matrix
IMPORTANT: In addition to running an applicable software version, you must also install the most recent patch, if any. |
Role |
Device |
Software version |
Spine |
S12500X-AF |
R2825 |
S12500G-AF |
R7625 |
|
Border or leaf |
S6800, S6860 |
R6710 |
S6805, S6825, S6850, S9850, S9820-64H, S9820-8C |
R6710 |
|
S6890 |
R2825 |
|
S6812, S6813 |
F6628P22 and higher |
Restrictions and guidelines
· The member devices in an M-LAG system system must use the same M-LAG system MAC address. Different M-LAG systems must each have a unique M-LAG system MAC address on the network.
· As a best practice, run a dynamic routing protocol between the spine devices and the external network. If you use static routing, traffic interruption might occur upon the reboot of a spine device. This issue typically occurs if the service module accommodating a peer-link interface, keepalive interface, or M-LAG interface requires longer time to reboot than other service modules. To resolve the traffic interruption issue, use one of the following methods:
¡ Select an interface operating at the same speed from each service module and assign the interfaces to the aggregation group of the peer-link interface. This method ensures that the peer-link interface recovers prior to other interfaces. If you select interfaces operating at different speeds, execute the link-aggregation ignore speed command on the peer-link interface. This method might result in traffic congestion or uneven traffic distribution on aggregate links as the number of selected ports might be insufficient.
¡ Create a monitor link group on the spine devices. Configure the router-facing interfaces as uplink interfaces for the monitor link group, and the member interfaces of leaf-facing M-LAG interfaces as downlink interfaces. This method ensures that the uplink interfaces come up prior to the downlink M-LAG interfaces. If you use this method, you must manually change the downlink interfaces in the monitor link group in response to deletion or addition of M-LAG groups and membership changes of M-LAG groups.
Configuring the leaf nodes
Procedure summary
· Configuring the links towards the servers
· Configuring the interfaces facing single-homed downstream devices
· Configuring the links towards the spine tier
|
NOTE: The configuration of Leaf 3 and Leaf 4 is similar to that of Leaf 1 and Leaf 2. This configuration example provides only configuration tasks for Leaf 1 and Leaf 2. |
Configuring M-LAG
Leaf 1 (S6800) |
Leaf 2 (S6800) |
Configuration method |
Description |
Remarks |
interface FortyGigE1/0/52 |
interface FortyGigE1/0/52 |
Manual |
Enter the interface view for the keepalive link. |
N/A |
port link-mode route |
port link-mode route |
Manual |
Configure the interface for keepalive detection to operate in route mode as a Layer 3 interface. |
N/A |
ip address 1.0.0.1 255.255.255.252 |
ip address 1.0.0.2 255.255.255.252 |
Manual |
Assign an IP address to the keepalive interface. |
N/A |
quit |
quit |
Manual |
Return to system view. |
N/A |
m-lag system-mac 00e0-fc00-5800 |
m-lag system-mac 00e0-fc00-5800 |
Manual |
Set the MAC address of the M-LAG system. |
You must assign the same M-LAG system MAC address to the member devices in an M-LAG system system. |
m-lag system-number 1 |
m-lag system-number 2 |
Manual |
Set the M-LAG system number. |
You must assign different M-LAG system numbers to the member devices in an M-LAG system system. |
m-lag system-priority 100 |
m-lag system-priority 100 |
Manual |
(Optional.) Set the M-LAG system priority. |
You must set the same M-LAG system priority on the member devices in an M-LAG system system. The default M-LAG system priority is 32768. The smaller the value, the higher the priority. |
m-lag standalone enable |
m-lag standalone enable |
Manual |
Enable M-LAG standalone mode. |
N/A |
m-lag keepalive ip destination 1.0.0.2 source 1.0.0.1 |
m-lag keepalive ip destination 1.0.0.1 source 1.0.0.2 |
Manual |
Configure the destination and source IP addresses of keepalive packets. |
Exclude the interfaces providing the source and destination IP addresses from the shutdown action by M-LAG MAD. |
m-lag mad exclude interface FortyGigE1/0/52 |
m-lag mad exclude interface FortyGigE1/0/52 |
Manual |
Exclude the keepalive interface from the shutdown action by M-LAG MAD. |
N/A |
m-lag restore-delay 300 |
m-lag restore-delay 300 |
Manual |
Set the data restoration interval. |
This parameter ensures that forwarding entry synchronization finishes before interfaces are brought up. |
interface Bridge-Aggregation1 |
interface Bridge-Aggregation1 |
Manual |
Create a Layer 2 aggregate interface and enter its view. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan all |
port trunk permit vlan all |
Manual |
Configure the trunk interface to permit all VLANs. |
N/A |
interface FortyGigE1/0/51 |
interface FortyGigE1/0/51 |
Manual |
Enter interface view. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan all |
port trunk permit vlan all |
Manual |
Configure the trunk interface to permit all VLANs. |
N/A |
port link-aggregation group 1 |
port link-aggregation group 1 |
Manual |
Assign the interface to aggregation group 1. |
N/A |
interface Bridge-Aggregation1 |
interface Bridge-Aggregation1 |
Manual |
Enter Layer 2 aggregate interface view. |
N/A |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Manual |
Configure the aggregate interface to operate in dynamic mode. |
N/A |
port m-lag peer-link 1 |
port m-lag peer-link 1 |
Manual |
Specify the aggregate interface as a peer-link interface. |
N/A |
undo mac-address static source-check enable |
undo mac-address static source-check enable |
Manual |
Disable static source check. |
Disable static source check on the peer-link interface and spine-facing uplink interfaces. |
Configuring the links towards the servers
Leaf 1 (S6800) |
Leaf 2 (S6800) |
Configuration method |
Description |
Remarks |
VLAN 21 |
VLAN 21 |
Manual |
Create VLAN 21. |
N/A |
quit |
quit |
Manual |
Return to the previous view. |
N/A |
interface Bridge-Aggregation101 |
interface Bridge-Aggregation101 |
Manual |
Create an aggregate interface and enter its view. This interface will be assigned to a server-facing M-LAG group. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan 21 |
port trunk permit vlan 21 |
Manual |
Assign the trunk interface to VLAN 21. |
N/A |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Manual |
Configure the aggregate interface to operate in dynamic mode. |
N/A |
port m-lag group 1 |
port m-lag group 1 |
Manual |
Assign the aggregate interface to M-LAG group 1. |
N/A |
port lacp system-priority 101 |
port lacp system-priority 100 |
Manual |
Set the LACP priority. |
Set different LACP priorities for different M-LAG member devices, so that only member ports with a higher priority are selected upon brain split. |
quit |
quit |
Manual |
Return to the previous view. |
N/A |
interface Ten-GigabitEthernet1/0/1 |
interface Ten-GigabitEthernet 1/0/1 |
Manual |
Enter the view of an M-LAG aggregation member port. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan 21 |
port trunk permit vlan 21 |
Manual |
Assign the trunk interface to VLAN 21. |
N/A |
port link-aggregation group 101 |
port link-aggregation group 101 |
Manual |
Assign the interface to aggregation group 101. |
N/A |
quit |
quit |
Manual |
Return to the previous view. |
N/A |
Configuring the interfaces facing single-homed downstream devices
Leaf 1 (S6800) |
Leaf 2 (S6800) |
Configuration method |
Description |
interface FortyGigE1/0/53 |
interface FortyGigE1/0/53 |
Manual |
Enter the view of an M-LAG aggregation member port. |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
port trunk permit vlan 21 |
port trunk permit vlan 21 |
Manual |
Assign the trunk interface to VLAN 21. |
IMPORTANT: To prevent a peer link down event from triggering the M-LAG MAD DOWN action on the secondary M-LAG device, attach a single-homed downstream device to the primary M-LAG device. |
Configuring the links towards the spine tier
Leaf 1 (S6800) |
Leaf 2 (S6800) |
Configuration method |
Description |
Remarks |
interface Bridge-Aggregation102 |
interface Bridge-Aggregation102 |
Manual |
Create an aggregate interface to be assigned to an M-LAG system group and enter aggregate interface view. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan 21 |
port trunk permit vlan 21 |
Manual |
Assign the trunk interface to VLAN 21. |
N/A |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Manual |
Configure the aggregate interface to operate in dynamic mode. |
N/A |
port m-lag group 2 |
port m-lag group 2 |
Manual |
Assign the aggregate interface to M-LAG group 2. |
N/A |
port lacp system-priority 101 |
port lacp system-priority 100 |
Manual |
Set the LACP priority. |
Set different LACP priorities for different M-LAG member devices, so that only member ports with a higher priority are selected upon brain split. |
quit |
quit |
Manual |
Return to the previous view. |
N/A |
interface FortyGigE1/0/49 |
interface FortyGigE1/0/49 |
Manual |
Enter the view of an M-LAG aggregation member port. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan 21 |
port trunk permit vlan 21 |
Manual |
Assign the trunk interface to VLAN 21. |
N/A |
port link-aggregation group 102 |
port link-aggregation group 102 |
Manual |
Assign the interface to aggregation group 102. |
N/A |
interface FortyGigE1/0/50 |
interface FortyGigE1/0/50 |
Manual |
Enter the view of an M-LAG aggregation member port. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan 21 |
port trunk permit vlan 21 |
Manual |
Assign the trunk interface to VLAN 21. |
N/A |
port link-aggregation group 102 |
port link-aggregation group 102 |
Manual |
Assign the interface to aggregation group 102. |
N/A |
quit |
quit |
Manual |
Return to the previous view. |
N/A |
Configuring the spine nodes
Procedure summary
· Configuring the links towards the leaf tier
· Configuring the dual-active VLAN gateways
· Configuring the interfaces connected to the external network
Configuring M-LAG
Spine 1 |
Spine 2 |
Configuration method |
Description |
Remarks |
interface HundredGigE2/0/2 |
interface HundredGigE2/0/2 |
Manual |
Enter the interface view for the keepalive link. |
N/A |
port link-mode route |
port link-mode route |
Manual |
Configure the interface for keepalive detection to operate in route mode as a Layer 3 interface. |
N/A |
ip address 2.0.0.1 255.255.255.252 |
ip address 2.0.0.2 255.255.255.252 |
Manual |
Assign an IP address to the interface. |
N/A |
quit |
quit |
Manual |
Return to system view. |
N/A |
m-lag restore-delay 300 |
m-lag restore-delay 300 |
Manual |
Set the data restoration interval. |
Set this parameter to 200 on a fixed-port device. |
m-lag role priority 100 |
m-lag role priority 101 |
Manual |
Set M-LAG role priority. |
The M-LAG member devices negotiate their M-LAG roles based on the M-LAG role priority. The smaller the value, the higher the priority to be the primary M-LAG devices. |
m-lag system-mac 542b-de0c-0300 |
m-lag system-mac 542b-de0c-0300 |
Manual |
Set the MAC address of the M-LAG system. |
You must assign the same M-LAG system MAC address to the member devices in an M-LAG system system. |
m-lag system-number 1 |
m-lag system-number 2 |
Manual |
Set the M-LAG system number. |
You must assign different M-LAG system numbers to the member devices in an M-LAG system system. |
m-lag system-priority 100 |
m-lag system-priority 100 |
Manual |
(Optional.) Set the M-LAG system priority. |
You must set the same M-LAG system priority on the member devices in an M-LAG system system. The default M-LAG system priority is 32768. The smaller the value, the higher the priority. |
m-lag standalone enable |
m-lag standalone enable |
Manual |
Enable M-LAG standalone mode. |
N/A |
m-lag keepalive ip destination 2.0.0.2 source 2.0.0.1 |
m-lag keepalive ip destination 2.0.0.1 source 2.0.0.2 |
Manual |
Configure the destination and source IP addresses of keepalive packets. |
Specify a VPN instance according to the network environment. For the interfaces that will be shut down by M-LAG MAD, exclude them from the M-LAG MAD DOWN action as needed. |
m-lag mad exclude interface HundredGigE2/0/2 |
m-lag mad exclude interface HundredGigE2/0/2 |
Manual |
Exclude the keepalive interface from the shutdown action by M-LAG MAD. |
N/A |
interface Bridge-Aggregation 1 |
interface Bridge-Aggregation 1 |
Manual |
Create Bridge-Aggregation 1. |
N/A |
quit |
quit |
Manual |
Return to system view. |
N/A |
interface HundredGigE2/0/1 |
interface HundredGigE2/0/1 |
Manual |
Enter the view of a member port of the peer-link interface. |
N/A |
port link-aggregation group 1 |
port link-aggregation group 1 |
Manual |
Assign the interface to aggregation group 1. |
N/A |
quit |
quit |
Manual |
Return to the previous view. |
N/A |
interface Bridge-Aggregation 1 |
interface Bridge-Aggregation 1 |
Manual |
Enter the view of Bridge-Aggregation 1. |
N/A |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Manual |
Configure the aggregate interface to operate in dynamic mode. |
N/A |
port m-lag peer-link 1 |
port m-lag peer-link 1 |
Manual |
Specify the aggregate interface as a peer-link interface. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan all |
port trunk permit vlan all |
Manual |
Configure the trunk interface to permit all VLANs. |
N/A |
port trunk pvid vlan 4094 |
port trunk pvid vlan 4094 |
Manual |
Set the PVID to 4094 for the trunk interface. |
N/A |
Configuring the links towards the leaf tier
Spine 1 |
Spine 2 |
Configuration method |
Description |
Remarks |
Vlan 21 31 |
Vlan 21 31 |
Manual |
Create VLANs. |
N/A |
quit |
quit |
Manual |
Return to system view. |
N/A |
interface Bridge-Aggregation102 |
interface Bridge-Aggregation102 |
Manual |
Enter the view of the M-LAG group member aggregate interface connected to Leaf 1 and Leaf 2. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan 21 |
port trunk permit vlan 21 |
Manual |
Assign the trunk interface to VLAN 21. |
N/A |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Manual |
Configure the aggregate interface to operate in dynamic mode. |
N/A |
port lacp system-priority 101 |
port lacp system-priority 100 |
Manual |
Set the LACP priority. |
Set different LACP priorities for different M-LAG member devices, so that only member ports with a higher priority are selected upon brain split. |
port m-lag group 2 |
port m-lag group 2 |
Manual |
Assign the aggregate interface to M-LAG group 2. |
N/A |
interface FortyGigE 3/0/1 |
interface FortyGigE 3/0/1 |
Manual |
Enter the view of an M-LAG aggregation member port. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan 21 |
port trunk permit vlan 21 |
Manual |
Assign the trunk interface to VLAN 21. |
N/A |
port link-aggregation group 102 |
port link-aggregation group 102 |
Manual |
Assign the interface to aggregation group 1.02 |
N/A |
interface FortyGigE 3/0/2 |
interface FortyGigE 3/0/2 |
Manual |
Enter the view of an M-LAG aggregation member port. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan 21 |
port trunk permit vlan 21 |
Manual |
Assign the trunk interface to VLAN 21. |
N/A |
port link-aggregation group 102 |
port link-aggregation group 102 |
Manual |
Assign the interface to aggregation group 1.02 |
N/A |
quit |
quit |
Manual |
Return to system view. |
N/A |
interface Bridge-Aggregation103 |
interface Bridge-Aggregation103 |
Manual |
Enter the view of the M-LAG group member aggregate interface connected to Leaf 3 and Leaf 4. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan 31 |
port trunk permit vlan 31 |
Manual |
Assign the trunk interface to VLAN 31. |
N/A |
link-aggregation mode dynamic |
link-aggregation mode dynamic |
Manual |
Configure the aggregate interface to operate in dynamic mode. |
N/A |
port lacp system-priority 101 |
port lacp system-priority 100 |
Manual |
Set the LACP priority. |
Set different LACP priorities for different M-LAG member devices, so that only member ports with a higher priority are selected upon brain split. |
port m-lag group 3 |
port m-lag group 3 |
Manual |
Assign the aggregate interface to M-LAG group 2. |
N/A |
interface FortyGigE 3/0/3 |
interface FortyGigE 3/0/3 |
Manual |
Enter the view of an M-LAG aggregation member port. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan 31 |
port trunk permit vlan 31 |
Manual |
Assign the trunk interface to VLAN 31. |
N/A |
port link-aggregation group 103 |
port link-aggregation group 103 |
Manual |
Assign the interface to aggregation group 1.03 |
N/A |
interface FortyGigE3/0/4 |
interface FortyGigE3/0/4 |
Manual |
Enter the view of an M-LAG aggregation member port. |
N/A |
port link-type trunk |
port link-type trunk |
Manual |
Set the link type of the interface to trunk. |
N/A |
port trunk permit vlan 31 |
port trunk permit vlan 31 |
Manual |
Assign the trunk interface to VLAN 31. |
N/A |
port link-aggregation group 103 |
port link-aggregation group 103 |
Manual |
Assign the interface to aggregation group 1.03 |
N/A |
quit |
quit |
Manual |
Return to the previous view. |
N/A |
Configuring the dual-active VLAN gateways
Spine 1 |
Spine 2 |
Configuration method |
Description |
Remarks |
routing-interface base-mac 3c8c-4003-8ba5 |
routing-interface base-mac 3c8c-4003-8b41 |
Manual |
Configure the base MAC address. |
The base MAC address of Spine 2 is equal to that of Spine 1 + 0X64. This step only applies to S12500X-AF and S6890 switches. |
interface Vlan-interface21 |
interface Vlan-interface21 |
Manual |
Create the VLAN interface of VLAN 21, the service VLAN on Leaf 1 and Leaf 2. |
N/A |
ip address 21.1.1.1 255.255.255.0 |
ip address 21.1.1.1 255.255.255.0 |
Manual |
Assign an IP address to the interface. |
N/A |
mac-address 3c8c-4003-8c08 |
mac-address 3c8c-4003-8c08 |
Manual |
Assign a MAC address to the interface. |
N/A |
quit |
quit |
Manual |
Return to the previous view. |
N/A |
m-lag mad exclude interface Vlan-interface21 |
m-lag mad exclude interface Vlan-interface21 |
Manual |
Exclude the VLAN interface from the M-LAG MAD DOWN action. |
N/A |
interface Vlan-interface31 |
interface Vlan-interface31 |
Manual |
Create the VLAN interface of VLAN 31, the service VLAN on Leaf 3 and Leaf 4. |
N/A |
ip address 31.1.1.1 255.255.255.0 |
ip address 31.1.1.1 255.255.255.0 |
Manual |
Assign an IP address to the interface. |
N/A |
mac-address 3c8c-4003-8c09 |
mac-address 3c8c-4003-8c09 |
Manual |
Assign a MAC address to the interface. |
N/A |
quit |
quit |
Manual |
Return to system view. |
N/A |
m-lag mad exclude interface Vlan-interface31 |
m-lag mad exclude interface Vlan-interface31 |
Manual |
Exclude the VLAN interface from the M-LAG MAD DOWN action. |
N/A |
IMPORTANT: · On the S12500X-AF and S6890 switches, make sure the base MAC address plus the number of reserved MAC addresses produces a MAC address that has the same higher 36 bits as the base MAC address. · You cannot edit or delete the base MAC address within 30 seconds after you configure it. · When you assign a MAC address to a Layer 3 interface after the base MAC address configuration, make sure the following requirements are met: ¡ The MAC address must have the same higher 36 bits as the base MAC address. ¡ The MAC address must be no lower than the base MAC address plus the number of reserved MAC addresses |
Configuring the interfaces connected to the external network
Spine 1 |
Spine 2 |
Configuration method |
Description |
ospf 1 router-id 2.1.1.1 |
ospf 1 router-id 2.1.1.2 |
Manual |
Start an OSPF process. |
import-route direct |
import-route direct |
Manual |
Redistribute direct routes. |
area 0.0.0.0 |
area 0.0.0.0 |
Manual |
Create an OSPF area. |
interface HundredGigE1/0/5 |
interface HundredGigE2/0/3 |
Manual |
Enter the view of the router-facing interface. |
port link-mode route |
port link-mode route |
Manual |
Configure the interface for keepalive detection to operate in route mode as a Layer 3 interface. |
ip address 25.1.1.1 255.255.255.0 |
ip address 23.1.1.1 255.255.255.0 |
Manual |
Assign an IP address to the interface. |
ospf 1 area 0.0.0.0 |
ospf 1 area 0.0.0.0 |
Manual |
Enable OSPF on the interface. |
quit |
quit |
Manual |
Return to system view. |
Vlan 2000 |
Vlan 2000 |
Manual |
Create the east-west failover VLAN. |
quit |
quit |
Manual |
Return to system view. |
interface Vlan-interface2000 |
interface Vlan-interface2000 |
Manual |
Create the VLAN interface of the east-west failover VLAN. |
ip address 192.168.2.1 255.255.255.252 |
ip address 192.168.2.2 255.255.255.252 |
Manual |
Assign an IP address to the interface. |
ospf 1 area 0.0.0.0 |
ospf 1 area 0.0.0.0 |
Manual |
Enable OSPF on the VLAN interface. |
Configuring the router
Router |
Configuration method |
Description |
ospf 1 router-id 3.1.1.1 |
Manual |
Start an OSPF process. |
area 0.0.0.0 |
Manual |
Create an OSPF area. |
interface HundredGigE1/0/25 |
Manual |
Enter the view of the interface connected to Spine 1. |
port link-mode route |
Manual |
Configure the interface for keepalive detection to operate in route mode as a Layer 3 interface. |
ip address 25.1.1.2 24 |
Manual |
Assign an IP address to the interface connected to Spine 1. |
ospf 1 area 0.0.0.0 |
Manual |
Enable OSPF on the interface. |
quit |
Manual |
N/A |
interface HundredGigE1/0/26 |
Manual |
Enter the view of the interface connected to Spine 2. |
port link-mode route |
Manual |
Configure the interface for keepalive detection to operate in route mode as a Layer 3 interface. |
ip address 23.1.1.2 24 |
Manual |
Assign an IP address to the interface connected to Spine 2. |
ospf 1 area 0.0.0.0 |
Manual |
Enable OSPF on the interface. |
Traffic forwarding models
The forwarding model matrix provides the following characteristics of traffic:
· No.—Traffic number in the U-X-XXX format:
¡ U—Underlay traffic.
¡ X—Protocol number, which can be 4 (IPv4).
¡ XXX—Traffic sequence number, starting from 201.
· Traffic type—Type of underlay traffic, which can be IPv4 known unicast.
· Direction—Direction of underlay traffic, which can be south-north or east-west across leaf M-LAG systems.
· Forwarding path—Nodes that underlay traffic traverses.
· Traffic simulation—Traffic simulation method. Typically, a tester is used to simulate server traffic.
· Load—Traffic size, which can be light (less than 1000 flows) and heavy (more than 1000 flows).
Table 1 Traffic forwarding models
No. |
Traffic type |
Direction |
Forwarding path |
Traffic simulation |
Load |
Remarks |
U-4-201 |
IPv4 known unicast |
East-west across leaf M-LAG systems |
Server A > Leaf 1 & Leaf 2 > Spine 1 & Spine 2 > Leaf 3 & Leaf 4 > Server B |
Bond4+ tester |
Light |
Layer 3 forwarding between PMs. |
U-4-202 |
IPv4 known unicast |
East-west across leaf M-LAG systems |
Server B > Leaf 1 & Leaf 2 > Spine 1 & Spine 2 > Leaf 1 & Leaf 2 > Server A |
Bond4+ tester |
Light |
Layer 3 forwarding between PMs. |
U-4-203 |
IPv4 known unicast |
South-north |
Server A > Leaf 1 & Leaf 2 > Spine 1 & Spine 2 > Router |
Bond4+ tester |
Light |
Layer 3 forwarding between PMs and the external network. |
U-4-204 |
IPv4 known unicast |
South-north |
Router > Spine 1 & Spine 2 > Leaf 1 & Leaf 2 > Server A |
Bond4+ tester |
Light |
Layer 3 forwarding between PMs and the external network. |
U-4-205 |
IPv4 known unicast |
East-west across leaf M-LAG systems |
Server C > Leaf 1 > Spine 1 & Spine 2 > Leaf 3 & Leaf 4 > Server B |
Bond4+ tester |
Light |
Layer 3 forwarding between PMs. |
U-4-206 |
IPv4 known unicast |
East-west across leaf M-LAG systems |
Server B > Leaf 3 & Leaf 4 > Spine 1 & Spine 2 > Leaf 1 > Server C |
Bond4+ tester |
Light |
Layer 3 forwarding between PMs. |
U-4-207 |
IPv4 known unicast |
South-north |
Server C > Leaf 1 > Spine 1 & Spine 2 > Router |
Bond4+ tester |
Light |
Layer 3 forwarding between PMs and the external network. |
U-4-208 |
IPv4 known unicast |
South-north |
Router > Spine 1 & Spine 2 > Leaf 1 > Server C |
Bond4+ tester |
Light |
Layer 3 forwarding between PMs and the external network. |
Testing network convergence upon single points of failure
Table 2 Network convergence upon single points of failure
Device |
Failure type |
Traffic interruption time |
M-LAG system at the spine or leaf tier |
Single point of failure on M-LAG member links |
≤ 500 ms |
Single point of failure restored on M-LAG member links |
0 ms |
|
Peer link failure |
For M-LAG member links: ≤ 500 ms For a link attached to a single-homed device: · If the M-LAG MAD DOWN action is not triggered on the attached M-LAG member device, east-west traffic resumes after the peer link recovers. · If the M-LAG MAD DOWN action has been triggered on the attached M-LAG member device, traffic resumes after the peer link and the single-homed link recover. |
|
Peer link failure restored |
0 ms |
|
Keepalive link failure |
0 ms |
|
Keepalive link failure restored |
0 ms |
|
Keepalive link and peer link failure |
≤ 5000 ms |
|
Keepalive link and peer link restored |
≤ 1000 ms |
|
Upgrading the devices |
≤ 500 ms (legacy method, in which two M-LAG member devices are separately upgraded) |
|
Expanding the network |
0 ms |
|
Replacing hardware |
Fixed-port device: ≤ 500 ms Modular device: · Device replacement: ≤ 1000 ms. · Switching fabric module replacement: 0 ms. · Service module replacement: ≤ 500 ms. |
Upgrading the devices
Upgrading the leaf devices
Checking the environment
Execute the commands in "Verifying the configuration" and the following commands to verify that a device is available for an upgrade.
Leaf 1 |
Leaf 2 |
Description |
display device |
display device |
Displays device information. |
display boot-loader |
display boot-loader |
Displays current software images and startup software images. |
display version |
display version |
Displays system version information. |
Upgrading the devices
See H3C Switches M-LAG System Upgrade & Replacement & Expansion Guide.
Verifying the traffic interruption time during the upgrade
Verify that the traffic interruption time is shorter than 500 ms during a switchover and shorter than 150 ms during fallback when the traffic load is light. For more information, see "Testing network convergence upon single points of failure."
Verifying the upgrade result
Execute the commands in "Verifying the configuration" and the following commands to verify that the device is upgraded successfully.
Leaf 1 |
Leaf 2 |
Description |
display device |
display device |
Displays device information. |
display boot-loader |
display boot-loader |
Displays current software images and startup software images. |
display version |
display version |
Displays system version information. |
Upgrading the spine nodes
Checking the environment
Execute the commands in "Verifying the configuration" and the following commands to verify that a device is available for an upgrade.
Spine 1 |
Spine 2 |
Description |
display device |
display device |
Displays device information. |
display boot-loader |
display boot-loader |
Displays current software images and startup software images. |
display version |
display version |
Displays system version information. |
Upgrading the devices
See H3C Switches M-LAG System Upgrade & Replacement & Expansion Guide.
Verifying the traffic interruption time during the upgrade
Verify that the traffic interruption time is shorter than 500 ms during a switchover and shorter than 150 ms during fallback when the traffic load is light. For more information, see "Testing network convergence upon single points of failure."
Verifying the upgrade result
Execute the commands in "Verifying the configuration" and the following commands to verify that the device is upgraded successfully.
Leaf 1 |
Leaf 2 |
Description |
display device |
display device |
Displays device information. |
display boot-loader |
display boot-loader |
Displays current software images and startup software images. |
display version |
display version |
Displays system version information. |
Expanding the network
An expansion operation adds two leaf devices.
Checking the environment
Execute the commands in "Verifying the configuration" and the following commands to verify that a device is available for an expansion.
Leaf 1 |
Leaf 2 |
Description |
display device |
display device |
Displays device information. |
display boot-loader |
display boot-loader |
Displays current software images and startup software images. |
display version |
display version |
Displays system version information. |
Expanding the network
1. Disconnect the device from network management systems.
2. Upgrade the software of the device as needed.
3. Preconfigure the device.
4. Connect the device to network management systems.
5. Incorporate the device on the controller.
Verifying the traffic interruption time
For more information, see "Testing network convergence upon single points of failure."
Verifying the expansion result
Execute the following commands to verify that the device is added successfully.
Leaf 1 |
Leaf 2 |
Description |
display device |
display device |
Displays device information. |
display boot-loader |
display boot-loader |
Displays current software images and startup software images. |
display version |
display version |
Displays system version information. |
Replacing hardware
Replacing a service module
Checking the environment
Execute the commands in "Verifying the configuration" and the following commands to verify that the target device is available for a replacement.
Leaf 1 |
Leaf 2 |
Description |
display device |
display device |
Displays device information. |
display boot-loader |
display boot-loader |
Displays current software images and startup software images. |
display version |
display version |
Displays system version information. |
Replacing hardware
Switch service and management traffic on the target service module to other service modules.
Power off the device and replace the service module, or replace the service module when the device is running. For more information, see the installation guides for the service module.
For details, see H3C Switches M-LAG System Upgrade & Replacement & Expansion Guide.
Verifying the traffic interruption time
For more information, see "Testing network convergence upon single points of failure."
Verifying the replacement result
Execute the commands in "Checking the environment."
Replacing a switching fabric module
Checking the environment
Execute the commands in "Verifying the configuration" and the following commands to verify that the target device is available for a replacement.
Leaf 1 |
Leaf 2 |
Description |
display device |
display device |
Displays device information. |
display boot-loader |
display boot-loader |
Displays current software images and startup software images. |
display version |
display version |
Displays system version information. |
Replacing hardware
Power off the device and replace the switching fabric module, or replace the switching fabric module when the device is running. For more information, see the installation guides for the switching fabric module.
Verifying the traffic interruption time
For more information, see "Testing network convergence upon single points of failure."
Verifying the replacement result
Execute the commands in "Checking the environment."
Verifying the configuration
Commands used for verifying the configuration
Leaf 1 |
Leaf 2 |
Description |
display m-lag summary |
display m-lag summary |
Displays summary information about the peer-link interface and M-LAG interfaces. |
display m-lag system |
display m-lag system |
Displays the M-LAG system settings. |
display m-lag keepalive |
display m-lag keepalive |
Displays M-LAG keepalive packet statistics. |
display m-lag role |
display m-lag role |
Displays M-LAG role information. |
display m-lag consistency { type1 | type2 } |
display m-lag consistency { type1 | type2 } |
Displays information about the configuration consistency check done by M-LAG. |
display m-lag consistency-check status |
display m-lag consistency-check status |
Displays the configuration consistency check status. |
display interface Bridge-Aggregation [ brief ] |
display interface Bridge-Aggregation [ brief ] |
Displays information about Layer 2 aggregate interfaces. |
display stp brief |
display stp brief |
Displays brief spanning tree status and statistics. |
Verifying the status of an M-LAG system system
Verify that M-LAG is working correctly on Spine 1 and Spine 2. Use Spine 1 as an example.
# Display summary information about the peer-link interface and M-LAG interfaces.
<Spine1>dis m-lag summary
Flags: A -- Aggregate interface down, B -- No peer M-LAG interface configured
C -- Configuration consistency check failed
Peer-link interface: BAGG1
Peer-link interface state (cause): UP
Keepalive link state (cause): UP
M-LAG interface information
M-LAG IF M-LAG group Local state (cause) Peer state Remaining down time(s)
BAGG102 2 UP UP -
BAGG103 3 UP UP -
# Verify that the M-LAG system settings are correct.
<Spine1>dis m-lag system
System information
Local system number: 1 Peer system number: 2
Local system MAC: 542b-de0c-0300 Peer system MAC: 542b-de0c-0300
Local system priority: 100 Peer system priority: 100
Local bridge MAC: 5098-b8d3-7e00 Peer bridge MAC: 3c8c-4003-8b41
Local effective role: Primary Peer effective role: Secondary
Health level: 0
Standalone mode on split: Enabled
In standalone mode: No
System timer information
Timer State Value (s) Remaining time (s)
Auto recovery Disabled - -
Restore delay Disabled 60 -
Consistency-check delay Disabled 30 -
Standalone delay Disabled 0 -
Role to None delay Disabled 60 -
# Verify that the keepalive link is working correctly.
<Spine1>dis m-lag keepalive
Neighbor keepalive link status (cause): Up
Neighbor is alive for: 95299 s 891 ms
Keepalive packet transmission status:
Sent: Successful
Received: Successful
Last received keepalive packet information:
Source IP address: 2.0.0.2
Time: 2022/05/31 14:07:47
Action: Accept
M-LAG keepalive parameters:
Destination IP address: 2.0.0.2
Source IP address: 2.0.0.1
Keepalive UDP port : 6400
Keepalive VPN name : N/A
Keepalive interval : 1000 ms
Keepalive timeout : 5 sec
Keepalive hold time: 3 sec
# Verify that Spine 1 is the primary M-LAG device.
<Spine1> display m-lag role
Effective role information
Factors Local Peer
Effective role Primary Secondary
Initial role Primary Secondary
MAD DOWN state No No
Health level 0 0
Role priority 100 101
Bridge MAC 5098-b8d3-7e00 3c8c-4003-8b41
Effective role trigger: Peer link calculation
Effective role reason: MAD status
Configured role information
Factors Local Peer
Configured role Primary Secondary
Role priority 100 101
Bridge MAC 5098-b8d3-7e00 3c8c-4003-8b41
# Verify that Spine 1 and Spine 2 have consistent configurations.
<Spine1>dis m-lag consistency-check status
Global Consistency Check Configuration
Local status : Enabled Peer status : Enabled
Local check mode : Strict Peer check mode : Strict
Consistency Check on Modules
Module Type1 Type2
LAGG Check Not Check
VLAN Check Check
STP Check Not Check
Type1 Consistency Check Result
Global consistency check result: SUCCESS
Inconsistent global modules: -
M-LAG IF M-LAG group ID Check Result Inconsistency modules
BAGG102 2 SUCCESS -
BAGG103 3 SUCCESS -