Checking The Configuration; Configuring Layer 2 Flow Import; Establishing The Configuration Task - Huawei S9700 Series Configuration Manual

S9700 Core Routing Switch
Configuration Guide - SPU
After the service type is changed, the original service configurations are no longer in effect.
The configurations of the new service type take effect after the SPU restarts.
----End

1.2.3 Checking the Configuration

You can check the current service type before and after configuring the service type of the SPU.
Procedure
l
----End

1.3 Configuring Layer 2 Flow Import

To implement Layer 2 communication between the S9700 switch and an SPU, group interfaces
that need to communicate with into the same VLAN, and configure Layer 2 flow import on the
S9700 switch and SPU.

1.3.1 Establishing the Configuration Task

This section describes the pre-configuration tasks and data required for configuring Layer 2 flow
import.
Applicable Environment
When an SPU provides the firewall, load balancing or IPSec, the LPUs of the S9700 switch need
to forward traffic to the SPU for processing.
To implement Layer 2 forwarding of firewall or load balancing, perform the either of the
following configurations:
l
l
When the IPSec service is used, add interfaces on the LPUs and virtual XGE interfaces on the
S9700 switch to the same VLAN, and configure the virtual XGE sub-interfaces on the SPU to
allow this VLAN to pass.
l
Issue 01 (2012-03-15)
NOTE
Run the display service-type command in the system view to check the service type of the
SPU.
Aggregate the two pairs of XGE interfaces on the S9700 switch and SPU into Eth-Trunk
interfaces to provide higher bandwidth. Then add the interfaces of the LPUs and Eth-Trunk
interfaces to the same VLAN. This configuration is recommended.
Add interfaces on the LPUs and virtual XGE interfaces on the S9700 switch to the same
VLAN, and configure the virtual XGE sub-interfaces on the SPU to allow this VLAN to
pass.
Layer 2 flow import with interfaces aggregated
As shown in Figure 1-2, GE 3/0/0 on an LPU forwards traffic to the SPU. After processing
the traffic, the SPU forwards the traffic to GE 3/0/1. Then GE 3/0/1 forwards the traffic to
the LPU. If two pairs of XGE interfaces on the S9700 switch and SPU are aggregated into
Eth-Trunk interfaces, add GE 3/0/0, Eth-Trunk 0, and Eth-Trunk 1 to the same VLAN.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 SPU Pre-Configuration
4