搜索
关于华为二层交换机集群管理配置规范及说明一、组网说明：榆社县局S3552G交换机E0/1下挂榆社水利小区3号楼S2016C，3号楼S2016C交换机E0/2下挂水利小区2号楼S2403H，3号楼S2016C交换机E0/3下挂水利小区1号楼S2024C。二、组网图：YS_ShuiLi_3#Lou_S2016CYS_XianJu_S3552GE0/1E0/1E0/2E0/3E0/1E0/1YS_ShuiLi_2#Lou_S2403HYS_ShuiLi_1#Lou_S2024C三、配置步骤1、配置管理设备（由汇聚层人员来配置）（1）启动设备上的NDP和端口E0/1日的NDP协议：[YS_XianJu_S3552G]ndpenableYS_XianJu_S3552G]interfaceethernet0/1[YS_XianJu_S3552G-Ethernet0/1]ndpenable[YS_XianJu_S3552G-Ethernet0/1]interfaceethernet0/2[YS_XianJu_S3552G-Ethernet0/2]ndpenable#配置NDP信息的有效保留时间为200秒[YS_XianJu_S3552G]ndptimeraging200#配置NDP报文发送的时间间隔为70秒[YS_XianJu_S3552G]ndptimerhello70（2）启动设备上的NTDP和端口E0/1E0/2上的NTDP[YS_XianJu_S3552G]ntdpenable[YS_XianJu_S3552G]interfaceethernet0/1YS_XianJu_S3552G-Ethernet0/1]ntdpenable[YS_XianJu_S3552G-Ethernet0/1]interfaceethernet0/2[YS_XianJu_S3552G-Ethernet0/2]ntdpenable#配置拓扑收集范围为7跳[YS_XianJu_S3552G]ntdphop7#配置被收集设备转发拓扑收集请求的延迟时间为150ms[YS_XianJu_S3552G]ntdptimerhop-delay150#配置被收集设备的端口转发拓扑收集请求的延迟时间为15ms[YS_XianJu_S3552G]ntdptimerport-delay15#配置定时拓扑收集的时间间隔为3分钟[YS_XianJu_S3552G]ntdptimer3(3)配置管理vlan#创建管理vlan[YS_XianJu_S3552G]vlan4051#将管理vlan4051作为管理vlan[YS_XianJu_S3552G]management-vlan4051#进入以太网端口E0/19[YS_XianJu_S3552G-Ethernet0/19]descriptionto_ys_shuili_dishui2_caizhen_xiaoquportlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan45to5135274051（4）启动集群功能[YS_XianJu_S3552G]clusterenable#进入集群视图YS_XianJu_S3552G]cluster[YS_XianJu_S3552G-cluster]#配置集群内部使用的IP地址池起始地址为10.0.1.1有254个地址[YS_XianJu_S3552G-cluster]ip-pool10.0.1.1255.255.255.0（5）配置集群名字建立集群[YS_XianJu_S3552G-cluster]buildYSYD[YSYD_0.YS_XianJu_S3552G-cluster]（6）将下挂的两个交换机加入到集群中[YSYD_0.YS_XianJu_S3552G-cluster]add-member1mac-address00e0-fc01-0011[YSYD_0.YS_XianJu_S3552G-cluster]add-member2mac-address00e0-fc01-0013[YSYD_0.YS_XianJu_S3552G-cluster]add-member3mac-address00e0-fc01-0011#配置成员设备信息的保留时间为100秒[YSYD_0.YS_XianJu_S3552G-cluster]holdtime100#配置握手报文定时发送的时间间隔为10秒[YSYD_0.YS_XianJu_S3552G-cluster]timer102、配置成员设备（由接入层维护人员来配置）以榆社水利小区3号楼S2016C为例：#启动设备上的NDP和端口Ethernet1/1上的NDP[YS_ShuiLi_3#Lou_S2016C]ndpenable[YS_ShuiLi_3#Lou_S2016C]interfaceethernet1/1[YS_ShuiLi_3#Lou_S2016C-Ethernet1/1]ndpenable#启动设备上的NTDP和端口Ethernet1/1上的NTDP[YS_ShuiLi_3#Lou_S2016C]ntdpenable[YS_ShuiLi_3#Lou_S2016C]interfaceethernet1/1[YS_ShuiLi_3#Lou_S2016C-Ethernet1/1]ntdpenable#创建vlan4051创建管理vlan，根汇聚层交换机管理vlan来确定。[YS_ShuiLi_3#Lou_S2016C]vlan4051#将vlan4051作为管理vlan[YS_ShuiLi_3#Lou_S2016C]management-vlan4051#进入以太网端口E0/1,透传管理vlan4051将二层交换机上联口透传管理vlan[YS_ShuiLi_3#Lou_S2016C]interfacee0/1[YS_ShuiLi_3#lou_S2016C-Ethernet0/1]porttrunkpermitvlan4051#启动集群功能[YS_ShuiLi_3#Lou_S2016C]clusterenable四、数据配置举例如下：1、榆社县局S3552G配置如下：YSYD_0.YS_XianJu_S3552Gdiscu#sysnameYS_XianJu_S3552G#superpasswordlevel3cipher^#:+/G*8`P,:)&CZHH(&1!!#ntdphop7ntdptimerport-delay15ntdptimerhop-delay150ntdptimer3#radiusschemesystemserver-typehuaweiprimaryauthentication127.0.0.11645primaryaccounting127.0.0.11646user-name-formatwithout-domaindomainsystemradius-schemesystemaccess-limitdisablestateactivevlan-assignment-modeintegeridle-cutdisableself-service-urldisablemessengertimedisabledomaindefaultenablesystem#local-servernas-ip127.0.0.1keyhuaweilocal-usersxhuaweipasswordcipher(W_]UELR9IaNK;9B9.`)Q!!service-typetelnetlevel1#Specifydeadloopmonitor#temperature-limit02080#ndptimerhello70ndptimeraging200#management-vlan4051#aclnumber3998rule0denyipdestination10.0.1.00.0.0.255rule1permitipsource10.0.1.00.0.0.255aclnumber3999rule0denyipsource10.0.1.00.0.0.255rule1permitipdestination10.0.1.00.0.0.255#vlan1#vlan27#vlan28#vlan29#vlan30#vlan31#vlan32#vlan33#vlan34#vlan35#vlan36#vlan37#vlan38#vlan39#vlan40#vlan41#vlan42#vlan43#vlan44#vlan45#vlan46#vlan47#vlan48#vlan49#vlan50#vlan51#vlan52#vlan53#vlan1672descriptionto_ys_taichanggaosu(yulin)#vlan1711#vlan2101#vlan2103#vlan2104#vlan2105multicast-vlanenable#vlan3524#vlan3526#vlan3527#vlan3528#vlan3529#vlan3530#vlan3532#vlan3534#vlan3535#vlan3536#vlan3537#vlan4051#interfaceVlan-interface4051ipaddress221.131.31.130255.255.255.240#interfaceAux0/0#interfaceEthernet0/1shutdown#interfaceEthernet0/2descriptionto_ys_taichanggaosu(yulin)broadcast-suppression5portaccessvlan1672#interfaceEthernet0/3descriptionto_ys_donghuixiaoxuebroadcast-suppression5portaccessvlan3526#interfaceEthernet0/4descriptionto_ys_tudijusushebroadcast-suppression5portaccessvlan3528#interfaceEthernet0/5descriptionto_ys_nonghangsushebroadcast-suppression5portaccessvlan3529#interfaceEthernet0/6descriptionto_ys_dishuiyixiaoqubroadcast-suppression5portaccessvlan3530#interfaceEthernet0/7descriptionto_ys_lianjiazhuangbroadcast-suppression5portaccessvlan1711#interfaceEthernet0/8descriptionto_ys_dongshengyingyetingportlink-typetrunkundoporttrunkpermitvlan1porttrunkpermitvlan2103to21053532#interfaceEthernet0/9descriptionto_ys_xianweidanxiaowenhuazhanbroadcast-suppression5portaccessvlan3534#interfaceEthernet0/10descriptionto_ys_youzhenxiaoqubroadcast-suppression5portaccessvlan3535#interfaceEthernet0/11descriptionto_ys_jiaokejuwenhuazhanbroadcast-suppression5portaccessvlan3536#interfaceEthernet0/12descriptionto_ys_jis