Page 1
No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd. Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are the property of their respective owners.
For complete information, see IRF configuration guide for the switch. Hardware requirements An S6820 switch can form an IRF fabric only with switches in the same series. Software requirements All IRF member devices must run the same system software version.
The ports on LSWM18CQMSEC modules cannot be used as IRF physical interfaces. Grouped port binding restrictions The S6820 switch series contains grouped ports, as shown in Table When you use the ports in a group for IRF links, follow these restrictions and guidelines: •...
Connecting IRF ports When you connect two neighboring IRF members, connect the physical interfaces of IRF-port 1 on one member to the physical interfaces of IRF-port 2 on the other. Licensing requirements For a license-based feature to run correctly on an IRF fabric, make sure the licenses installed for the feature on all member devices are the same.
Figure 2 Network diagram after IRF deployment Distribution Access Analysis The requirements in this example include the following categories: • IRF setup • LACP MAD configuration • Network connectivity configuration IRF setup To set up an IRF fabric, determine the items in Table Table 3 Basic IRF setup Item...
LACP MAD configuration IMPORTANT: For LACP MAD to run correctly, you must make sure the intermediate device supports extended LACPDUs for LACP MAD. To run LACP MAD, the IRF fabric and intermediate device must each have a dynamic Ethernet link aggregation.
Figure 5 Connection diagram for the IRF fabrics in a Layer 2 network Software versions used This configuration example was created and verified on R6301. Restrictions and guidelines Restrictions and guidelines for LACP MAD configuration When you configure LACP MAD, follow these restrictions and guidelines: •...
Page 10
[DeviceA-if-range] quit # Bind HundredGigE 1/0/25 and HundredGigE 1/0/26 to IRF-port 1/1. [DeviceA] irf-port 1/1 [DeviceA-irf-port1/1] port group interface hundredgige 1/0/25 [DeviceA-irf-port1/1] port group interface hundredgige 1/0/26 [DeviceA-irf-port1/1] quit # Bind HundredGigE 1/0/27 and HundredGigE 1/0/28 to IRF-port 1/2. [DeviceA] irf-port 1/2 [DeviceA-irf-port1/2] port group interface hundredgige 1/0/27 [DeviceA-irf-port1/2] port group interface hundredgige 1/0/28 [DeviceA-irf-port1/2] quit...
Page 11
[DeviceB] interface range hundredgige 2/0/25 to hundredgige 2/0/28 [DeviceB-if-range] undo shutdown [DeviceB-if-range] quit # Save the running configuration. [DeviceB] quit <DeviceB> save # Connect Device B to Device A, as shown in Figure # Activate the IRF port configuration. <DeviceB> system-view [DeviceB] irf-port-configuration active Device B has a lower priority than Device A, and Device B fails master election and reboots.
Configure Device D: # Assign member ID 4 to Device D, and reboot the device to effect the member ID change. <DeviceD> system-view [DeviceD] irf member 1 renumber 4 Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y [DeviceD] quit <DeviceD>...
Page 13
[IRF] interface bridge-aggregation 2 [IRF-Bridge-Aggregation2] link-aggregation mode dynamic [IRF-Bridge-Aggregation2] mad enable You need to assign a domain ID (range: 0-4294967295) [Current domain is: 1]: The assigned domain ID is: 1 [IRF-Bridge-Aggregation2] quit # Create a named interface range that contains uplink ports to the distribution layer IRF fabric. In this example, the interface range name is lacp, and each member device has two links to the distribution layer IRF fabric.
[Sysname-HundredGigE4/2/0/1] port link-aggregation group 2 [Sysname-HundredGigE4/2/0/1] quit [Sysname] interface hundredgige 4/3/0/1 [Sysname-HundredGigE4/3/0/1] port link-aggregation group 2 [Sysname-HundredGigE4/3/0/1] quit Configuring network connectivity settings This section provides the VLAN and link aggregation configuration procedure for end devices (for example, a server in VLAN 10). Configure the IRF fabric at the access layer: # Create VLAN 10.
Verifying the configuration Verify the IRF setup, multichassis link aggregations, ring topology, and LACP MAD. Verifying the IRF setup # Verify that the IRF fabric has been formed. [IRF] display irf MemberID Role Priority CPU-Mac Description Master 00e0-fc0f-8c02 Standby 1 00e0-fc0f-8c03 Standby 1 00e0-fc0f-8c04...
Reply from 10.153.116.111: bytes=32 time<1ms TTL=128 Reply from 10.153.116.111: bytes=32 time<1ms TTL=128 Request timed out. Reply from 10.153.116.111: bytes=32 time<1ms TTL=128 Reply from 10.153.116.111: bytes=32 time<1ms TTL=128 The output shows that the IP address can be pinged after transient traffic disruption. # On the IRF fabric at the access layer, shut down HundredGigE 1/0/29 and HundredGigE 1/0/30 (member ports of Bridge-Aggregation 2).
Page 17
%Jan 1 05:19:10:184 2019 H3C IFNET/3/PHY_UPDOWN: HundredGigE2/0/25 link status is down. %Jan 1 05:19:10:184 2019 H3C IFNET/3/PHY_UPDOWN: HundredGigE2/0/26 link status is down. %Jan 1 05:19:10:186 2019 H3C DEV/3/BOARD_REMOVED: Board is removed from Slot 3, type is MAIN_BOARD_TYPE_54QT. %Jan 1 05:19:10:186 2019 H3C DEV/3/BOARD_REMOVED: Board is removed from Slot 4, type is MAIN_BOARD_TYPE_54QT.
[Sysname] %Jan 1 05:24:41:249 2019 H3C IFNET/3/PHY_UPDOWN: Ten-GigabitEthernet2/0/10 link status is up. %Jan 1 05:24:41:249 2019 H3C IFNET/5/LINK_UPDOWN: Line protocol on the interface Ten-GigabitEthernet2/0/10 is up. %Jan 1 05:24:41:325 2019 H3C IFNET/3/PHY_UPDOWN: HundredGigE2/0/29 link status is up. %Jan 1 05:24:41:325 2019 H3C IFNET/3/PHY_UPDOWN: HundredGigE2/0/30 link status is up.
Page 19
vlan 10 irf-port1/1 port group interface HundredGigE1/0/25 port group interface HundredGigE1/0/26 irf-port1/2 port group interface HundredGigE1/0/27 port group interface HundredGigE1/0/28 irf-port2/1 port group interface HundredGigE2/0/25 port group interface HundredGigE2/0/26 irf-port2/2 port group interface HundredGigE2/0/27 port group interface HundredGigE2/0/28 irf-port3/1 port group interface HundredGigE3/0/25 port group interface HundredGigE3/0/26 irf-port3/2 port group interface HundredGigE3/0/27...
Page 20
port trunk permit vlan 1 10 port link-aggregation group 2 interface HundredGigE1/0/30 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 port link-aggregation group 2 interface HundredGigE2/0/29 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 port link-aggregation group 2 interface HundredGigE2/0/30 port link-mode bridge...
Page 21
port link-aggregation group 3 interface Ten-GigabitEthernet2/0/10 port link-mode bridge port access vlan 10 port link-aggregation group 3 • IRF fabric at the distribution layer: irf domain 2 vlan10 interface Bridge-Aggregation2 port link-type trunk port trunk permit vlan 1 10 link-aggregation mode dynamic mad enable interface HundredGigE1/2/0/1 port link-mode bridge...
interface HundredGigE3/3/0/1 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 port link-aggregation group 2 interface HundredGigE4/2/0/1 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 port link-aggregation group 2 interface HundredGigE4/3/0/1 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 port link-aggregation group 2...
Page 23
Figure 7 Network diagram before IRF deployment Figure 8 Network diagram after IRF deployment...
Analysis The requirements in this example include the following categories: • IRF setup • BFD MAD configuration • Network connectivity configuration IRF setup To set up an IRF fabric, determine the items in Table Table 5 Basic IRF setup Choice this Item Analysis...
Network connectivity configuration IRF is typically used with link aggregation to simplify the network topology. For high availability, set up multichassis link aggregations with the downstream switches and the upstream egress routers, as shown in Figure 11. The figure uses a single device to represents the four-chassis IRF fabric. A link aggregation could span one member device, some of the member devices, or all member devices, depending on the link redundancy requirements and number of available links.
Restrictions and guidelines Restrictions and guidelines for BFD MAD configuration When you configure BFD MAD, follow these restrictions and guidelines: Category Restrictions and guidelines • Do not enable BFD MAD on VLAN-interface 1. • If you are using an intermediate device, perform the following tasks on both the IRF fabric and the intermediate device: Create a VLAN and VLAN interface for BFD MAD.
Page 29
[DeviceA-if-range] quit # Bind HundredGigE 1/0/25 and HundredGigE 1/0/26 to IRF-port 1/1. [DeviceA] irf-port 1/1 [DeviceA-irf-port1/1] port group interface hundredgige 1/0/25 [DeviceA-irf-port1/1] port group interface hundredgige 1/0/26 [DeviceA-irf-port1/1] quit # Bind HundredGigE 1/0/27 and HundredGigE 1/0/28 to IRF-port 1/2. [DeviceA] irf-port 1/2 [DeviceA-irf-port1/2] port group interface hundredgige 1/0/27 [DeviceA-irf-port1/2] port group interface hundredgige 1/0/28 [DeviceA-irf-port1/2] quit...
Page 30
[DeviceB] interface range hundredgige 2/0/25 to hundredgige 2/0/28 [DeviceB-if-range] undo shutdown [DeviceB-if-range] quit # Save the running configuration. [DeviceB] quit <DeviceB> save # Connect Device B to Device A, as shown in Figure # Activate the IRF port configuration. <DeviceB> system-view [DeviceB] irf-port-configuration active Device B has a lower priority than Device A, and Device B fails master election and reboots.
Configure Device D: # Assign member ID 4 to Device D, and reboot the device to effect the member ID change. <DeviceD> system-view [DeviceD] irf member 1 renumber 4 Renumbering the member ID may result in configuration change or loss. Continue? [Y/N]:y [DeviceD] quit <DeviceD>...
# Add all ports used for BFD MAD to the VLAN, including Twenty-FiveGigE 1/0/1, Twenty-FiveGigE 2/0/1, Twenty-FiveGigE 3/0/1, and Twenty-FiveGigE 4/0/1. [IRF-vlan1000] port twenty-fivegige 1/0/1 twenty-fivegige 2/0/1 twenty-fivegige 3/0/1 twenty-fivegige 4/0/1 [IRF-vlan3] quit # Create VLAN-interface 1000, and configure a MAD IP address for each member device on the interface.
Page 33
[RouterA] interface bridge-aggregation 40 [RouterA-Bridge-Aggregation40] link-aggregation mode dynamic [RouterA-Bridge-Aggregation40] quit # Assign Twenty-FiveGigE 1/0/1, Twenty-FiveGigE 1/0/2, Twenty-FiveGigE 1/0/3, and Twenty-FiveGigE 1/0/4 to the aggregation group for Bridge-Aggregation 40. [RouterA] interface twenty-fivegige 1/0/1 [RouterA-Twenty-FiveGigE1/0/1] port link-aggregation group 40 [RouterA-Twenty-FiveGigE1/0/1] quit [RouterA] interface twenty-fivegige 1/0/2 [RouterA-Twenty-FiveGigE1/0/2] port link-aggregation group 40 [RouterA-Twenty-FiveGigE1/0/2] quit [RouterA] interface twenty-fivegige 1/0/3...
Page 34
[RouterA-ospf-1-area-0.0.0.0] network 10.214.60.0 0.0.0.3 [RouterA-ospf-1-area-0.0.0.0] network 10.214.50.0 0.0.0.3 [RouterA-ospf-1-area-0.0.0.0] network 10.214.50.8 0.0.0.3 [RouterA-ospf-1-area-0.0.0.0] quit [RouterA-ospf-1] quit Configure Router B: # Create VLANs 41 and 42. <RouterB> system-view [RouterB] vlan 41 to 42 # Create Bridge-Aggregation 41, and set its link aggregation mode to dynamic. [RouterB] interface bridge-aggregation 41 [RouterB-Bridge-Aggregation41] link-aggregation mode dynamic [RouterB-Bridge-Aggregation41] quit...
Page 35
# Create VLAN-interface 41 and VLAN-interface 42, and assign IP addresses to the VLAN interfaces. [RouterB] interface vlan-interface 41 [RouterB-Vlan-interface41] ip address 10.214.50.6 30 [RouterB-Vlan-interface41] quit [RouterB] interface vlan-interface 42 [RouterB-Vlan-interface42] ip address 10.214.50.10 30 [RouterB-Vlan-interface42] quit # Configure OSPF. [RouterB] ospf [RouterB-ospf-1] import-route direct [RouterB-ospf-1] area 0...
Page 36
[IRF-Bridge-Aggregation10] port access vlan 10 [IRF-Bridge-Aggregation10] quit # Repeat the previous Bridge-Aggregation 10 configuration steps to configure Bridge-Aggregation interfaces 20, 40, and 41, in compliance with the scheme in Table (Details not shown.) # Create interfaces for VLANs 10, 20, 40, and 41, and assign IP addresses to the interfaces. [IRF] interface vlan-interface 10 [IRF-Vlan-interface10] ip address 10.214.10.1 24 [IRF-Vlan-interface10] quit...
Configure Device F in the same way you configure Device E, in compliance with Table (Details not shown.) Verifying the configuration Verify the IRF setup, routing configuration, multichassis link aggregations, ring topology, and BFD MAD. Verifying the IRF setup # Verify that the IRF fabric has been formed. [IRF] display irf MemberID Role...
10.214.10.1/32 Direct 0 127.0.0.1 InLoop0 10.214.20.0/24 Direct 0 10.214.20.1 Vlan20 10.214.20.1/32 Direct 0 127.0.0.1 InLoop0 10.214.50.0/30 Direct 0 10.214.50.1 Vlan40 10.214.50.1/32 Direct 0 127.0.0.1 InLoop0 10.214.50.4/30 Direct 0 10.214.50.5 Vlan41 10.214.50.5/32 Direct 0 127.0.0.1 InLoop0 10.214.50.8/30 OSPF 10.214.50.2 Vlan40 10.214.60.0/30 OSPF 10.214.50.2 Vlan40...
Page 39
%Jan 1 05:19:10:184 2019 H3C IFNET/3/PHY_UPDOWN: HundredGigE2/0/25 link status is down. %Jan 1 05:19:10:184 2019 H3C IFNET/3/PHY_UPDOWN: HundredGigE2/0/26 link status is down. %Jan 1 05:19:10:186 2019 H3C DEV/3/BOARD_REMOVED: Board is removed from Slot 3, type is MAIN_BOARD_TYPE_54QT. %Jan 1 05:19:10:186 2019 H3C DEV/3/BOARD_REMOVED: Board is removed from Slot 4, type is MAIN_BOARD_TYPE_54QT.
1 00:52:26:257 2019 H3C STM/4/STM_LINK_RECOVERY: Merge occurs. %Jan 1 00:52:30:834 2019 H3C STM/3/STM_LINK_STATUS_DOWN: IRF port 2 is down. %Jan 1 00:52:30:835 2019 H3C IFNET/3/PHY_UPDOWN: HundredGigE1/0/28 link status is down. %Jan 1 00:52:30:836 2019 H3C IFNET/5/LINK_UPDOWN: Line protocol on the interface HundredGigE1/0/28 is down.
Page 41
irf-port1/1 port group interface HundredGigE1/0/25 port group interface HundredGigE1/0/26 irf-port1/2 port group interface HundredGigE1/0/27 port group interface HundredGigE1/0/28 irf-port2/1 port group interface HundredGigE2/0/25 port group interface HundredGigE2/0/26 irf-port2/2 port group interface HundredGigE2/0/27 port group interface HundredGigE2/0/28 irf-port3/1 port group interface HundredGigE3/0/25 port group interface HundredGigE3/0/26 irf-port3/2 port group interface HundredGigE3/0/27...
Page 42
interface Vlan-interface10 ip address 10.214.10.1 255.255.255.0 interface Vlan-interface20 ip address 10.214.20.1 255.255.255.0 interface Vlan-interface40 ip address 10.214.50.1 255.255.255.252 interface Vlan-interface41 ip address 10.214.50.5 255.255.255.252 interface Vlan-interface1000 mad bfd enable mad ip address 192.168.2.1 255.255.255.0 member 1 mad ip address 192.168.2.2 255.255.255.0 member 2 mad ip address 192.168.2.3 255.255.255.0 member 3 mad ip address 192.168.2.4 255.255.255.0 member 4 interface Twenty-FiveGigE1/0/1...
Page 43
interface Twenty-FiveGigE2/0/10 port link-mode bridge port access vlan 10 port link-aggregation group 10 interface Twenty-FiveGigE2/0/11 port link-mode bridge port access vlan 20 port link-aggregation group 20 interface Twenty-FiveGigE2/0/13 port link-mode bridge port access vlan 40 port link-aggregation group 40 interface Twenty-FiveGigE2/0/14 port link-mode bridge port access vlan 41 port link-aggregation group 41...
Page 44
undo stp enable port access vlan 1000 interface Twenty-FiveGigE4/0/10 port link-mode bridge port access vlan 10 port link-aggregation group 10 interface Twenty-FiveGigE4/0/11 port link-mode bridge port access vlan 20 port link-aggregation group 20 interface Twenty-FiveGigE4/0/13 port link-mode bridge port access vlan 40 port link-aggregation group 40 interface Twenty-FiveGigE4/0/14 port link-mode bridge...
Page 45
interface Twenty-FiveGigE1/0/4 port link-mode bridge port access vlan 1000 interface Twenty-FiveGigE1/0/49 port link-mode bridge port link-aggregation group 10 interface Twenty-FiveGigE1/0/50 port link-mode bridge port link-aggregation group 10 interface Twenty-FiveGigE1/0/51 port link-mode bridge port link-aggregation group 10 interface Twenty-FiveGigE1/0/52 port link-mode bridge port link-aggregation group 10 •...
Page 46
interface Bridge-Aggregation42 port access vlan 42 link-aggregation mode dynamic interface Vlan-interface40 ip address 10.214.50.2 255.255.255.252 interface Vlan-interface42 ip address 10.214.50.9 255.255.255.252 interface Twenty-FiveGigE1/0/1 port link-mode bridge port access vlan 40 port link-aggregation group 40 interface Twenty-FiveGigE1/0/2 port link-mode bridge port access vlan 40 port link-aggregation group 40 interface Twenty-FiveGigE1/0/3 port link-mode bridge...
Page 47
vlan 41 vlan 42 interface Bridge-Aggregation41 port access vlan 41 link-aggregation mode dynamic interface Bridge-Aggregation42 port access vlan 42 link-aggregation mode dynamic interface Vlan-interface41 ip address 10.214.50.6 255.255.255.252 interface Vlan-interface42 ip address 10.214.50.10 255.255.255.252 interface Twenty-FiveGigE1/0/1 port link-mode bridge port access vlan 41 port link-aggregation group 41 interface Twenty-FiveGigE1/0/2 port link-mode bridge...