Page 2
SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V G, V G, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners Notice The information in this document is subject to change without notice.
Page 3
The H3C S5120-EI documentation set includes 10 configuration guides, which describe the software features for the H3C S5120-EI Switch Series Release 2210, and guide you through the software configuration procedures. These configuration guides also provide configuration examples to help you apply software features to different network scenarios.
Page 4
Convention Description Square brackets enclose a set of optional syntax choices separated by vertical bars, from [ x | y | ... ] which you select one or none. Asterisk marked braces enclose a set of required syntax choices separated by vertical { x | y | ...
Obtaining documentation You can access the most up-to-date H3C product documentation on the World Wide Web at http://www.h3c.com. Click the links on the top navigation bar to obtain different categories of product documentation: [Technical Support &...
[Technical Support & Documents > Software Download] – Provides the documentation released with the software version. Technical support customer_service@h3c.com http://www.h3c.com Documentation feedback You can e-mail your comments about product documentation to info@h3c.com. We appreciate your comments.
S5120-EI switches of these models. IRF overview The H3C Intelligent Resilient Framework (IRF) technology creates a large IRF fabric from multiple switches to provide data center class availability and scalability. IRF virtualization technology offers processing power, interaction, unified management and uninterrupted maintenance of multiple switches.
Figure 1 IRF application scenario IP network IP network Slave Master Equal to IRF link Basic concepts IRF member switch roles IRF uses two member switch roles: master and slave. When switches form an IRF fabric, they elect a master to manage the IRF fabric, and all other switches back up the master.
Figure 2 IRF partition IRF merge IRF merge occurs when two partitioned IRF fabrics re-unite or when you configure and connect two independent IRF fabrics to be one IRF fabric, as shown in Figure Figure 3 IRF merge Member priority Member priority determines the role that a member switch during the master election process.
Page 11
Modules Manual • The XFP/SFP+ modules and SFP+ cables available for this switch series are subject to change over time. For the most up-to-date list of XFP/SFP+ modules and cables, consult your H3C sales representative or technical support engineer. Connection requirements...
Figure 5 IRF connections Topology collection Each member exchanges IRF hello packets with neighbors to collect the topology of the IRF fabric. The IRF hello packets carry the topology information, including IRF port connection states, member IDs, priorities, and bridge MAC addresses. Each member records its known topology information locally.
NOTE: During an IRF merge, the switches of the IRF fabric that fails the master election must reboot to re-join the • IRF fabric that wins the election. The reboot can be automatically performed or must be manually performed depends on the switch model. After a master election, all slave member switches initialize and reboot with the configuration on the •...
%Created dir flash:/test. <Master> dir Directory of flash:/ -rw- 10105088 Apr 26 2000 13:44:57 test.app -rw- 2445 Apr 26 2000 15:18:19 config.cfg drw- Jul 14 2008 15:20:35 test 30861 KB total (20961 KB free) To create and access the test folder under the root directory of the Flash on member switch 3, perform the following steps: <Master>...
IRF fabric topology maintenance As soon as a member switch is down or an IRF link is down, its neighbor switches broadcast the leaving of the switch to other members. When a member switch receives the leave message, it looks up its IRF topology database to determine whether the leaving switch is the master.
Page 16
Figure 6 Recover the IRF fabric when IRF link failure occurs If the IRF fabric in active state fails due to exceptions (a member fails or link failure occurs, for example) before the IRF link is recovered, as shown in Figure 7, enable IRF fabric 2 (in recovery state) at the CLI by executing the mad restore command.
IRF fabric configuration task list Before configuring an IRF fabric, plan the roles and functions of all member switches. H3C recommends the configuration procedure in Figure Figure 8 IRF configuration flow chart You can connect physical IRF ports after activating IRF port configurations. After the device detects that the IRF ports are connected normally, master election is started immediately, and then the elected slave switches reboot automatically.
Task Remarks Accessing the master Required Accessing an IRF fabric Accessing a slave Optional Configuring an IRF fabric Specifying a domain ID for an IRF fabric Introduction to IRF domains IRF uses IRF domain IDs for uniquely identifying IRF fabrics. IRF domain IDs prevent IRF fabrics from interfering with one another.
You must assign a domain ID for an IRF fabric before enabling LACP MAD or ARP MAD detection. • H3C recommends that you assign the same domain ID to the members of the same IRF fabric; otherwise, • the LACP MAD or ARP MAD detection function cannot function properly.
Configuring IRF ports IRF ports are logical ports. To use the IRF function on a switch, you must bind its IRF ports with physical IRF ports and activate the IRF configuration on the switch. Follow these steps to configure IRF ports: To do…...
NOTE: To realize IRF link redundancy and load sharing and increase the bandwidth and reliability of IRF links, • bind one IRF port to multiple physical IRF ports by repeatedly executing the port group interface command. You can bind up to two physical IRF ports to an IRF port. The physical ports of an IRF port must be located on the same interface card.
To do… Use the command… Remarks Optional Configure the description of a irf member member-id description text member Not configured by default. Configuring load sharing criteria for IRF links When an IRF port is bound with physical IRF ports, there are multiple IRF links among IRF fabrics. Determine how traffic is load-shared among members by configuring load sharing criteria for IRF links.
To do… Use the command… Remarks Optional By default, the port-specific load sharing criteria are source or irf-port load-sharing mode Configure the port-specific load destination MAC addresses for { destination-ip | destination-mac | sharing criteria Layer 2 packets; the port-specific source-ip | source-mac } * load sharing criteria are source or destination IP addresses for...
CAUTION: Bridge MAC address change may cause a temporary traffic interruption. • If two IRF fabrics have the same bridge MAC address, they cannot be merged into one IRF fabric. • If you use ARP MAD together with the spanning tree feature for an IRF fabric, enable the IRF fabric to •...
Figure The intermediate switch must be an H3C switch capable of handling extended LACPDUs that carry the Active ID field. For more information about LACP and the support of the switch for extended LACPDUs, see Layer 2 — LAN Switching Configuration Guide.
Page 26
CAUTION: If the intermediate switch is in an IRF fabric, you must assign this fabric a different domain ID than the LACP MAD-enabled IRF fabric to avoid false detection of IRF partition. Figure 10 Network diagram Terminal network Device Dynamic aggregation group on Device, used for LACP MAD detection and forwarding service packets...
Page 27
To do… Use the command… Remarks Create an aggregate interface interface bridge-aggregation and enter aggregate interface Required interface-number view Required Configure the aggregation group By default, the aggregation to work in dynamic aggregation link-aggregation mode dynamic group works in static mode aggregation mode.
Page 28
Figure 11 Network diagram IP network Device Device STP domain To avoid loops, all devices in the domain have to be configured with the MSTP function. IRF link Slave Master Transmission path blocked by STP Transmission path for common service packets Transmission path for gratuitous ARP packets Configuring ARP MAD detection Follow these steps to configure ARP MAD:...
Page 29
To do… Use the command… Remarks Return to system view quit — Enter VLAN interface view interface vlan interface-number — Required ip address ip-address { mask | Assign the interface an IP address No IP address is assigned to any mask-length } VLAN interface by default.
Accessing an IRF fabric Accessing the master Access an IRF fabric in either of the following two ways: Local login–Log in through the AUX or console port of a member switch. • • Remote login–Remotely log in at a Layer 3 interface on any member switch through Telnet, Web, or SNMP.
Displaying and maintaining an IRF fabric To do… Use the command… Remarks Display related information about display irf [ | { begin | exclude | Available in any view the IRF fabric include } regular-expression ] display irf topology [ | { begin | Display topology information exclude | include } Available in any view...
Figure 12 Network diagram Configuration considerations To increase the number of access ports, additional devices are needed. In this example, Device B • is added. • To address the requirements for high availability, ease of management and maintenance, use IRF2 technology to create an IRF fabric with Device A and Device B at the access layer.
Page 33
[DeviceA] irf-port 1/2 [DeviceA-irf-port1/2] port group interface ten-gigabitethernet 1/1/2 [DeviceA-irf-port1/2] quit [DeviceA] interface ten-gigabitethernet 1/1/2 [DeviceA-Ten-GigabitEthernet1/1/2] undo shutdown [DeviceA-Ten-GigabitEthernet1/1/2] save # Create IRF port 1 on Device B, and bind it to the physical IRF port Ten-GigabitEthernet 2/1/1. Then save the configuration. <DeviceB>...
Acting as the intermediate device, Device C needs to support LACP to forward and process LACP protocol packets, and help Device A and Device B implement MAD detection. An LACP-supported switch is used here to save the cost. # Create a dynamic aggregation interface. <DeviceC>...
Page 35
To offset the risk of IRF fabric partition, configure MAD to detect multi-active collisions. In this • example, ARP MAD is adopted because the number of members in the IRF fabric is small, and the ARP MAD packets are transmitted over dual links connected to Device C. Enable the spanning tree function on the IRF fabric and Device to prevent loops.
Page 36
[DeviceB-Ten-GigabitEthernet2/1/1] quit [DeviceB] irf-port-configuration active Master election is held between the two devices. As a result of the master election, Device B automatically reboots to join the IRF fabric as a slave switch. The system name on both devices is DevcieA.
Index A B C D E I Displaying and maintaining an IRF fabric,24 Accessing an IRF fabric,23 Establishment, operation, and maintenance of an IRF fabric,3 Basic concepts,2 IRF fabric configuration examples,24 Configuring an IRF fabric,1 1 IRF fabric configuration task list,10 overview,1...