Escolar Documentos
Profissional Documentos
Cultura Documentos
Abstract This document describes the software features for the HP A Series products and guides you through the software configuration procedures. These configuration guides also provide configuration examples to help you apply software features to different network scenarios. This documentation is intended for network planners, field technical support and servicing engineers, and network administrators working with the HP A Series products.
Part number: 5998-1626 Software version: Release 1211 Document version: 5W100-20110430
Contents
IRF configuration 1
IRF overview 1 Benefits 1 Application scenario 2 IRF topologies 2 Basic concepts 3 Establishment, operation, and maintenance of an IRF virtual device 4 Connecting the IRF member switches 4 Topology collection 7 Master election 7 IRF virtual device management and maintenance 7 IRF multi-active detection 9 IRF virtual device configuration task list 10 Configuring an IRF virtual device 11 Specifying a domain ID for an IRF virtual device 11 Changing the IRF member ID of a switch 13 Configuring IRF ports 13 Specifying a priority for a member switch 15 Configuring a description for a member switch 15 Configuring load sharing criteria for IRF links 15 Specifying the preservation time of bridge MAC address 17 Enabling automatic boot file updating 18 Setting the IRF link down report delay 19 Configuring MAD detection 19 Configuring LACP MAD 20 Configuring BFD MAD 22 Accessing an IRF virtual device 28 Accessing the master 28 Accessing a slave switch 29 Displaying and maintaining an IRF virtual device 29 IRF virtual device configuration examples 30 LACP MAD detection-enabled IRF configuration example 30 BFD MAD detection-enabled IRF configuration example 32 ARP MAD detection-enabled IRF configuration example 35
Index 41
iii
IRF configuration
Establish an IRF virtual device that comprises switches of the HP A5820X series or A5800 series, or establish a mixed IRF virtual device that comprises both the HP A5820X and A5800 switches.
IRF overview
The HP proprietary IRF technology creates a large IRF virtual device from multiple switches to provide data center class availability and scalability. IRF virtualization technology takes advantage of the augmented processing power, interaction, unified management, and uninterrupted maintenance of multiple switches.
Benefits
IRF delivers the following benefits: Simplified topology and streamlined management. An IRF virtual device appears as one node on the network. Log in at any member switch to manage all members of the IRF virtual device. High availability and reliability. The member switches in an IRF virtual device work in 1:N redundancy. One member switch works as the master to manage and maintain the entire IRF virtual device. All other member switches process services as well as back up the master. As soon as the master fails, all other member switches elect a new master among them to prevent service interruption. In addition, you can perform link aggregation not only for IRF links, but also for physical links between the IRF virtual device and its upper or lower layer devices for link redundancy. Network scalability and resiliency. Increase ports, bandwidth, and processing capability of an IRF virtual device simply by adding member switches.
Application scenario
Figure 1 shows an IRF virtual device that comprises two switches, which appear as a single node to the upper and lower layer devices. Figure 1 IRF application scenario
IP network IP network
Slave Equal to
IRF topologies
Create an IRF virtual device in daisy chain topology, or more reliably, ring topology, as shown in Figure 2. In ring chain topology, the failure of one IRF link does not cause the IRF virtual device to split as in daisy chain topology. Rather, the IRF virtual device changes to a daisy chain topology without affecting network services. Figure 2 IRF connections
Basic concepts
IRF member switch roles
IRF uses two member switch roles: master and subordinate (slave). When switches form an IRF virtual device, they elect a master to manage the IRF virtual device, and all other switches back up the master. When the master switch fails, the other switches automatically elect a new master from among them to avoid service interruption. For more information about master election, see Master election.
IRF port
An IRF port is a logical interface for the internal connection between IRF member switches. Each IRF member switch has two IRF ports: IRF-port 1 and IRF-port 2. An IRF port is activated when you bind a physical port to it.
IRF partition
IRF partition occurs when an IRF virtual device splits into two or more IRF virtual devices because of IRF link failures, as shown in Figure 3. The partitioned IRF virtual devices operate with the same IP address and cause routing and forwarding problems on the network. Figure 3 IRF partition
IRF merge
IRF merge occurs when two partitioned IRF virtual devices re-unite or when you configure and connect two independent IRF virtual devices to be one IRF virtual device, as shown in Figure 4. Figure 4 IRF merge
Member priority
Member priority determines the role that a member switch can play in an IRF virtual device. A member with a higher priority is more likely to be a master. The member priority of a switch is user configurable, and defaults to 1. Modify the priority at the CLI.
Switch with 2 Interface Slots (JC101A) TAA Switch with 2 Interface Slots (JG242A)
A5800-48G-PoE+
Ports on the two expansion cards (if installed) on the front panel
All physical ports of an IRF port must be located on the same interface card.
The six fixed SFP+ ports (in two groups) on the front panel: A5800AF-48G Switch (JG225A)
Requirements
with 1 Interface Slot (JC105A) Switch with 1 Interface Slot (JG258A) Switch with 1 Interface Slot (JC104A) TAA Switch with 1 Interface Slot (JG257A) (JC100A)
A5800-48G TAA
A5800-48G-PoE+
All physical ports of an IRF port must be located on the front panel or the expansion interface card on the rear panel.
A5800-48G-PoE+
A5800-24G-PoE+ A5800-24G-PoE+TAA
Switch (JG254A)
A5800-24G-SFP
Switch with 1 Interface Slot (JC103A) Switch with 1 Interface Slot (JG256A) Switch with 2 Interface Slots (JC106A) TAA Switch with 2 Interface Slots (JG259A) Switch (JC102A)
A5800-24G-SFP TAA
The four fixed SFP+ ports and the ports on the expansion interface card (if installed) on the front panel
A5820X-14XG-SFP+
A5820X-14XG-SFP+
The 14 fixed SFP+ ports and the ports on the expansion interface cards (if installed) on the front panel
A5820X-24XG-SFP+ A5820X-24XG-SFP+
The 24 SFP+ ports on the front panel No location limitation to the physical IRF ports.
HP A5820AF-24XG Switch
For a complete list of supported SFP+ ports and interface cards, see HP A5800 Switch Series Installation Guide and HP A5820X Switch Series Installation Guide.
Table 2 lists the SFP+ transceiver modules, optical fibers, and SFP+ cables available for connecting the physical IRF ports on the HP A5800 and A5820X switches. Table 2 SFP+ transceivers, optical fibers, and SFP+ cables available for physical IRF ports Product code Module description Central wavelengt h (in nm) Connector Fiber specifications
50/125 m multimode fiber 850 LC 62.5/125 m multimode fiber 62.5/125 m multimode fiber 1310 LC 50/125 m multimode fiber 9/125 m single-mode fiber
JD092B
82 m (269.03 ft) 66 m (216.54 ft) 33 m (108.27 ft) 26 m (85.30 ft) 220 m (721.78 ft) 220 m (721.78 ft) 100 m (328.08 ft) 10 km (6.21 miles) 40 km (24.86 miles)
JD093B
HP X130 10G SFP+ LC LRM Transceiver HP X130 10G SFP+ LC LR Transceiver HP X240 10G SFP+ SFP+ 0.65m DA Cable HP X240 10G SFP+ SFP+ 1.2m DA Cable HP X240 10G SFP+ SFP+ 3m DA Cable HP X240 10G SFP+ SFP+ 5m DA Cable
JD094B
1310 1550
LC
JD095B
JD096B
JD097B
JG081B
5 m (16.4 ft)
If the IRF member switches are located far from each other, use the SFP+ transceivers with optical fibers. If the IRF member switches are all in one equipment room, use the SFP+ cable. For more information about the interface modules, see HP A-Series Switches Transceiver Modules User Guide. The SFP+ modules and SFP+ cables available for this switch series are subject to change over time. For the most up-to-date list of SFP+ modules and cables, contact HP technical support or marketing staff.
Topology collection
Each member switch exchanges IRF hello packets with its directly connected neighbors to collect topology data, including IRF port connection states, member IDs, priorities, and bridge MAC addresses. Each member switch has a local topology database. At startup, an IRF member switch has only local topology data. When an IRF port goes up, the member switch sends its topology data out of the port periodically. The neighbor switch then updates its topology database with the received topology data. The topology collection lasts for a period of time. After all members eventually get complete topology information (topology convergence), the IRF virtual device enters the next stage: master election.
Master election
Master election is held each time the topology changes, for example, when the IRF virtual device is established, a new member switch is plugged in, the master switch fails or is removed, or the partitioned IRF virtual devices merge. The master is elected based on the following rules in descending order:
1. 2. 3. 4.
The current master, even if a new member has a higher priority. When an IRF virtual device is being formed, all member switches consider themselves as the master, this rule is skipped. The member with a higher priority. The member with the longest system up-time. The member switches exchange system up-time in the IRF hello packets. The member with the lowest bridge MAC address
The IRF virtual device is formed on election of the master. During an IRF merge, the switches of the IRF virtual device that fails the master election automatically reboot to join the IRF virtual device that wins the election. After a master election, all subordinate member switches initialize and reboot with the configuration on the master, and their original configuration, even if has been saved, is lost.
Member ID
An IRF virtual device uses member IDs to uniquely identify its members. Member IDs are also included in interface names and file system names for interface and file system identification. To guarantee the operation of the IRF virtual device, you must assign each member switch a unique member ID.
For example, on the standalone switch Sysname, GigabitEthernet 1/0/1 represents the first fixed port on the front panel. Set its link type to trunk:
<Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] port link-type trunk
For another example, on the IRF virtual device Master, GigabitEthernet 3/0/1 represents the first fixed port on the front panel of member switch 3. Set its link type to trunk:
<Master> system-view [Master] interface gigabitethernet 3/0/1 [Master-GigabitEthernet3/0/1] port link-type trunk
To access the test folder under the root directory of the Flash on the master switch, perform the following steps:
<Master> mkdir test ... %Created dir flash:/test. <Master> dir Directory of flash:/ 0 1 2 -rw-rwdrw10105088 2445 Apr 26 2000 13:44:57 Apr 26 2000 15:18:19 Jul 14 2008 15:20:35 test.app config.cfg test
2.
To create and access the test folder under the root directory of the Flash on member switch 3, perform the following steps:
<Master> mkdir slot3#flash:/test %Created dir slot3#flash:/test. <Master> cd slot3#flash:/test <Master> pwd slot3#flash:/test
Or:
<Master> cd slot3#flash:/ <Master> mkdir test %Created dir slot3#flash:/test.
3.
To copy the test.app file on the master to the root directory of the Flash on member switch 3, perform the following steps:
//The current working path is the root directory of the Flash on slave 3.
<Master> cd flash:/ <Master> pwd flash:
//The current working path is the root directory of the Flash on the master.
<Master> copy test.app slot3#flash:/ Copy flash:/test.app to slot3#flash:/test.app?[Y/N]:y %Copy file flash:/test.app to slot3#flash:/test.app...Done.
This real-time configuration synchronization ensures that all the IRF member switches keep the same configuration file. If the master fails, all the other switches can still operate with the same configuration file.
Detection
MAD detects active IRF devices with the same Layer 3 global configuration by extending the LACP, the BFD protocol, or the gratuitous ARP. For more information, see Configuring MAD detection.
2.
Collision handling
If multiple identical active IRF virtual devices are detected, only the one that has the lowest master ID can operate in active state and forward traffic normally. MAD sets all other IRF virtual devices in the recovery state (disabled) and shuts down all physical ports but the IRF ports and any other ports you have specified with the mad exclude interface command.
3.
Failure recovery
An IRF link failure triggers IRF virtual device partition and causes multi-active collision. In this case, repair the failed IRF link to make the collided IRF virtual devices merge into one and recover the failure. If the IRF virtual device in the recovery state fails before the failure is recovered, repair both the failed IRF virtual device and the failed IRF link, and then the collided IRF virtual devices can merge into one and the failure is recovered. If the IRF virtual device in the active state fails before the failure is recovered, enable the IRF virtual device in the recovery state at the CLI to make it take over the active IRF virtual device and protect the services from being affected. Then, recover the MAD failure. For more information about LACP, see Layer 2LAN Switching Configuration Guide. For information about BFD, see High Availability Configuration Guide. For information about gratuitous ARP, see Layer 3IP Services Configuration Guide.
Connect physical IRF ports with SFP+ cables or fibers after activating IRF port configurations. After the device detects that the IRF ports are connected normally, master election starts immediately, and then the elected subordinate switches reboot automatically. After an IRF virtual device is formed, configure and manage the IRF virtual device by logging in to any device in the IRF. Complete the following tasks to configure an IRF virtual device: Task
Specifying a domain ID for an IRF virtual device Changing the IRF member ID of a switch Configuring IRF ports Specifying a priority for a member switch Configuring a description for a member switch 10
Remarks
Optional. Required. Required. Optional. Optional.
Task
Configuring load sharing criteria for IRF links Specifying the preservation time of bridge MAC address Enabling automatic boot file updating Setting the IRF link down report delay
Remarks
Optional. Optional. Optional. Optional.
Connect the physical IRF ports of devices and make sure that the physical IRF ports are interconnected (a ring connection is recommended). Configuring LACP MAD Configuring BFD MAD Configuring MAD detection Configuring ARP MAD Excluding a port from the shutdown action on detection of multi-active collision Manually recovering an IRF virtual device Accessing an IRF virtual device Accessing the master Accessing a slave switch Optional. Use one of the approaches Configure the MAD detection after an IRF virtual device is established. Optional. Optional. Required. Optional.
11
Switch A
Switch B
Switch C
Switch D
Access network
Remarks
Required if LACP MAD is adopted. Optional if ARP MAD is adopted. By default, the domain ID of an IRF virtual device is 0.
You must assign a domain ID for an IRF virtual device before enabling LACP MAD detection. Although switches with different domain IDs can form an IRF virtual device, HP recommends that you assign the same domain ID to the members of the same IRF virtual device. Otherwise, the LACP MAD detection function cannot function properly. To display the domain IDs and verify your configuration, execute the display irf command in any view.
12
Change the IRF member ID of a switch when it is standalone or after it joins an IRF virtual device. If the switch is standalone, make sure that the member ID of the switch does not conflict with the member ID of any other switch, so the change does not affect the operation of the IRF virtual device. After changing the member ID, save the current configuration, power off the switch, connect the switch to its neighbor switch, power it on, and configure the IRF port to enable IRF on the switch. To change the IRF member ID of a switch: To do
1. Enter system view 2. Change the IRF member ID of the switch
Remarks
Optional. The member ID of a switch defaults to 1.
Verify the IRF member ID of a switch with the display irf configuration command.
13
Remarks
Required. Required.
By default, no physical port is bound to any IRF port. If you specify a binding mode with the mode keyword, ensure that the two ends of the IRF link are using the same mode. Required. Required. Required.
7. Return to system view 8. Enter physical IRF port view 9. Bring up the physical port 10. Return to system view 11. Save the current configuration 12. Activate the IRF port configuration
quit interface interface-type interfacenumber undo shutdown quit save irf-port-configuration active
Bind up to four physical ports to an IRF port for link redundancy and load sharing. The physical ports must meet the requirements in Table 1. Before you create or remove an IRF port binding, always shut down the physical IRF port. After you are finished, perform the undo shutdown command to bring up the port. Before unplugging an interface card that contains any IRF physical port, unplug the cable of the port or shut down the port by using the shutdown command in IRF physical port view. Perform only the shutdown, description and flow-interval commands on the physical port bound to an IRF port. For more information about the shutdown, description, and flow-interval commands, see Layer 2LAN Switching Command Reference.
14
Remarks
Optional. The priority of a member defaults to 1.
The priority setting takes effect immediately after configuration without the need to reboot the switch.
Remarks
Optional Not configured by default
Configure global or IRF port specific load sharing criteria. The switch preferentially uses the port-specific load sharing criteria. If no port-specific load sharing criteria is available, it uses the global load sharing criteria.
15
Remarks
Required. By default:
Interface Slot (JC105A), A580048G TAA Switch with 1 Interface Slot (JG258A), A5800-48G-PoE+ Switch with 1 Interface Slot (JC104A), and A5800-48G-PoE+ TAA Switch with 1 Interface Slot (JG257A) base load sharing calculation on the incoming port number. A5820X series use the combination of the source and destination MAC addresses as the load sharing criteria for Layer 2 packets, and the combination of the source and destination IP addresses for Layer 3 packets.
Remarks
16
To do
Remarks
Required. By default:
Interface Slot (JC105A), A580048G TAA Switch with 1 Interface Slot (JG258A), A5800-48G-PoE+ Switch with 1 Interface Slot (JC104A), and A5800-48G-PoE+ TAA Switch with 1 Interface Slot (JG257A) base load sharing calculation on the incoming port number. A5820X series use the combination of source and destination MAC addresses as the load sharing criteria for Layer 2 packets, and the combination of source and destination IP addresses for Layer 3 packets.
17
To specify the preservation time of the bridge MAC address of an IRF virtual device: To do
1. Enter system view 2. Enable the IRF virtual device to preserve its bridge MAC address permanently even after the master leaves 3. Enable the IRF virtual device to preserve its bridge MAC address for six minutes after the master leaves 4. Enable the IRF virtual device to change its bridge MAC address as soon as the master leaves
Remarks
irf mac-address persistent always Optional. irf mac-address persistent timer By default, the IRF virtual device preserves its bridge MAC address for 6 minutes after the master leaves.
Upload the software version file to be used to the master, and then use the bootrom upgrade command to upgrade the BootROM of the master. Use the boot-loader command with the slot all keywords to specify the software version file as the boot file to be used at the next reboot and apply this configuration on all member switches. Reboot the all member switches in the IRF virtual device to complete the software upgrade process.
When you add a switch to the IRF virtual device, the automatic boot file updating function compares the software versions of the switch and the IRF master. If the versions are different, the switch automatically downloads the boot file from the master, sets the downloaded file as the boot file for the next reboot, and automatically reboots with the new boot file to re-join the IRF virtual device. If automatic upgrade of boot file is enabled, as soon as a switch is added into an IRF virtual device, the IRF virtual device compares its software version with that of the master. If the versions are not consistent, the switch automatically downloads the boot file from the master, reboots with the new boot file, and joins the IRF virtual device again. If the downloaded boot file and the local boot file have duplicate file names, the local file is overwritten.
18
To enable an IRF virtual device to automatically synchronize the boot file of the master to the switch you are adding to the IRF virtual device: To do
1. Enter system view 2. Enable automatic upgrade of boot files for an IRF virtual device
Remarks
Optional Enabled by default
To set the IRF link down report delay: Use the command
system-view irf link-delay interval
Remarks
Optional. The function is disabled by default.
These MAD detection mechanisms operate independently, and you can configure all of them for an IRF virtual device.
19
Network requirements
Every IRF member switch has a link with an intermediate switch, and all these links form a dynamic link aggregation group, as shown in Figure 8. The intermediate switch must be an HP switch capable of handling extended LACPDUs that carry the Active ID field. For more information about LACP and the support of the switch for extended LACPDUs, see Layer 2LAN Switching Configuration Guide.
20
Device
Dynamic aggregation group on Device, used for LACP MAD detection and forwarding service packets
Dynamic aggregation group of the IRF virtual device, used for LACP MAD detection and forwarding services packets
Internet
Transmission path for common service packets Transmission path for LACP MAD detection packets
2. Configuring LACP MAD detection Configure LACP MAD detection by following these steps:
Create an aggregate interface (also required on the intermediate device) Configure the aggregation group to work in dynamic aggregation mode (also required on the intermediate device) Enable LACP MAD detection on the dynamic aggregate interface (not required on the intermediate device) Add member ports to the aggregation group (also required on the intermediate device)
21
Remarks
Required. By default, the domain ID of an IRF virtual device is 0. Required. Required.
By default, the aggregation group works in static aggregation mode. Required. Disabled by default. Even though this command can be configured on both static and dynamic aggregate interfaces, it takes effect only on dynamic aggregate interfaces. This is because this detection approach depends on LACP.
mad enable
6. Return to system view 7. Enter Ethernet interface view 8. Assign the current Ethernet interface to the specified aggregation group
Required.
BFD MAD is implemented with the BFD protocol. To configure BFD MAD detection, configure a MAD IP address on a BFD-enabled Layer 3 interface for each member switch. This MAD address identifies the member during BFD MAD detection. The MAD IP addresses assigned to the member switches must belong to the same network segment.
22
When the IRF virtual device operates normally, only the MAD IP address of the master is effective and the BFD session is down. When the IRF virtual device partitions, the MAD IP addresses of the masters in different IRF virtual devices become effective to activate the BFD sessions to detect for multi-active IRF virtual device collision. Network requirements
2.
BFD MAD detection can be achieved with or without intermediate devices. In a BFD MAD network without an intermediate device, connect all IRF member switches with dedicated BFD MAD links in the full mesh topology, as shown in Figure 9. The interfaces connected by BFD MAD links must belong to the same VLAN. In VLAN interface view, assign different IP addresses on the same network segment for different member switches. Figure 9 Network diagram for BFD MAD detection
Configuring BFD MAD detection Configure BFD MAD detection by following these steps:
3.
Create a VLAN dedicated for BFD MAD detection (also required on the intermediate device if any) Select the physical IRF ports to be used for BFD MAD detection (at least one on each member switch) and add them into the detection-dedicated VLAN (also required on the intermediate device if any) Create VLAN interfaces for the detection-dedicated VLAN, enable BFD MAD detection on these interfaces, and then assign MAD IP addresses for them.
23
Remarks
Required. The default VLAN on the device is VLAN 1. Required. Select one approach according to the port type. BFD MAD detection has no requirement on the link type of the detection port, and you do not need to modify the current link type. By default, the port is an access port.
Hybrid port
6. Return to system view 7. Enter VLAN interface view 8. Enable BFD MAD 9. Configure a MAD IP address for the VLAN interface on the specified member
quit interface vlan-interface interfacenumber mad bfd enable mad ip address ip-address { mask | mask-length } member member-id
Required. Disabled by default. Required. By default, no MAD IP address is configured for any interface.
You must assign all ports on the BFD MAD detection link (on both the IRF member and the intermediate device) to the BFD MAD VLAN, the VLAN specific to the BFD MAD-enabled VLAN interface. A BFD MAD-enabled VLAN interface and all ports in the VLAN do not support any Layer 2 and Layer 3 protocol applications, including ARP and LACP. You cannot enable BFD MAD on VLAN-interface 1. Do not bind a BFD MAD-enabled Layer 3 interface to any VPN instance. The MAD function cannot work with VPN. Do not enable the spanning tree function on the ports on the BFD MAD detection link. The MAD function cannot work with the spanning tree function. Assign the MAD IP address for an interface used for BFD MAD detection only with the mad ip address command, and cannot configure other IP addresses for it ( including common IP address or VRRP virtual IP address configured with the ip address command). If an IRF virtual device configured with the BFD MAD function is partitioned into two IRF virtual devices, routing collision information (for example, %May 5 16:15:47:733 2010 HP ARP/3/ROUTECONFLICT:Chassis=2-Slot=5;Route conflict found, IP:192.168.2.1, VrfIndex:0) may be generated because the new IRF virtual devices still keep the forwarding entries with the destination being the original master. This collision information does not affect the switch forwarding and automatically stops to be generated with the aging of the forwarding entries.
24
With ARP MAD, an IRF member switch sends extended gratuitous ARP packets that convey the domain ID and active ID of the IRF virtual device for detecting an IRF split. The domain ID uniquely identifies an IRF virtual device in the network, and the active ID is identical to the member ID of the master switch in the IRF virtual device. An IRF member switch compares the domain ID and the active ID in each received extended gratuitous ARP packet with its domain ID and active ID: If the domain IDs are different, the extended gratuitous ARP packet is from a different IRF virtual device, and the switch does not continue to process the packet with the MAD mechanism. If the domain IDs are the same, the switch compares the active IDs: If the active IDs are different, the IRF virtual device has split. If the active IDs are the same, the IRF virtual device is operating normally.
2.
Network requirements
Set up ARP MAD links between neighbor IRF member switches, or more commonly, between each IRF member switch and an intermediate switch (see Figure 10). If an intermediate switch is used, you must enable MSTP on the intermediate switch and the IRF virtual device. Figure 10 Network diagram for ARP MAD detection
25
3.
Remarks
Required. By default, the domain ID of an IRF virtual device is 0. Required. The default VLAN on the switch is VLAN 1. Required. Select one approach according to the port type. ARP MAD detection has no requirement on the link type of the detection port, and you do not need to modify the current link type. By default, the port is an access port.
vlan vlan-id quit interface interface-type interfacenumber port access vlan vlan-id port trunk permit vlan vlan-id
Hybrid port
7. Return to system view 8. Enter VLAN interface view 9. Assign the interface an IP address
Required. No IP address is assigned to any VLAN interface by default. Required. By default, ARP MAD is disabled.
Remarks
Required. When an IRF virtual device transits to recovery state, all its service ports are shut down by default.
26
Physical IRF ports are not shut down when the IRF virtual device transits to recovery state. If a certain VLAN interface is required to go on receiving and sending packets (for example, the VLAN interface is used for remote login) after the IRF virtual device transits to recovery state, you need to configure this VLAN interface and its corresponding Layer 2 Ethernet interface not to shut down when the IRF virtual device transits to recovery state. However, if the VLAN interface is up in the IRF virtual device in active state, IP collision occurs in your network.
If the IRF virtual device in active state fails due to exceptions (a member fails or link failure occurs, for example) before the IRF link is recovered, as shown in Figure 12, enable IRF virtual device 2 (in recovery state) at the CLI by executing the mad restore command. Then, the state of IRF virtual device 2 changes from recovery to active without the need of rebooting and takes over IRF virtual device 1. Repair the IRF links. When the IRF link failure is recovered, the two IRF virtual devices merge. More specifically, the priorities of two masters from the two IRF virtual devices are compared, and the IRF virtual device whose masters priority is higher can operate normally. Members (only one in this example) of the IRF virtual device whose masters priority is lower reboot themselves, and the join the other IRF virtual device to complete the IRF virtual device merge. After that, the original IRF virtual device recovers.
27
Figure 12 Recover the IRF virtual device when the IRF link failure occurs and the IRF virtual device in active state fails
Remarks
Required
When you log in to the IRF virtual device, actually you log in to the master. The master is the configuration and control center of an IRF virtual device. When you configure the IRF virtual device on the master, the IRF virtual device synchronizes the configurations to the subordinate switches.
28
To return to the master console, use the quit command. At that time, the master console is reactivated and can output logs. To log in to the specified subordinate switch: To do
1. Enter system view 2. Log in to the specified subordinate switch of an IRF virtual device
Remarks
Required. By default, you actually log in to the master when you log in to the IRF virtual device. Available in user view.
An IRF virtual device allows 15 concurrent VTY log-in users at most. And the maximum number of allowed console log-in users is equal to the number of IRF members.
Remarks
Available in any view
29
To do
Display the load sharing criteria for IRF links
Remarks
Available in any view
Configuration considerations
To increase the number of access ports, additional devices are needed. In this example, Device B is added. To address the requirements for high availability, ease of management and maintenance, use IRF2 technology to create an IRF virtual device with Device A and Device B at the access layer. To offset the risk of IRF virtual device partition, configure MAD to detect multi-active collisions. In this example, LACP MAD is adopted because the number of access devices tends to be large. In
30
addition, for the purpose of LACP MAD, an intermediate device that supports extended LACPDUs must be used.
Configuration procedure
This example assumes that the system names of Device A, Device B and Device C are DeviceA, DeviceB, and DeviceC, respectively, before the IRF virtual device is formed.
1.
# Keep the default member ID of Device A unchanged. # Set the member ID of Device B to 2.
<DeviceB> system-view [DeviceB] irf member 1 renumber 2 Warning: Renumbering the switch number may result in configuration change or loss. Continue? [Y/N]:y [DeviceB]
2.
Power off the two devices and connect IRF links and LACP MAD detection links according to Figure 13. Then power on the two devices.
# Create IRF port 2 on Device A, and bind it to the physical IRF port Ten-GigabitEthernet 1/0/25. Then save the configuration.
<DeviceA> system-view [DeviceA] interface ten-gigabitethernet 1/0/25 [DeviceA-Ten-GigabitEthernet1/0/25] shutdown [DeviceA] irf-port 1/2 [DeviceA-irf-port1/2] port group interface ten-gigabitethernet 1/0/25 [DeviceA-irf-port1/2] quit [DeviceA] interface ten-gigabitethernet 1/0/25 [DeviceA-Ten-GigabitEthernet1/0/25] undo shutdown [DeviceA-Ten-GigabitEthernet1/0/25] save
# Create IRF port 1 on Device B, and bind it to the physical IRF port Ten-GigabitEthernet 2/0/26. Then save the configuration.
<DeviceB> system-view [DeviceB] interface ten-gigabitethernet 2/0/26 [DeviceB-Ten-GigabitEthernet2/0/26] shutdown [DeviceB] irf-port 2/1 [DeviceB-irf-port2/1] port group interface ten-gigabitethernet 2/0/26 [DeviceB-irf-port2/1] quit [DeviceB] interface ten-gigabitethernet 2/0/26 [DeviceB-Ten-GigabitEthernet2/0/26] undo shutdown [DeviceB-Ten-GigabitEthernet2/0/26] save
3.
Master election is held between the two devices. Master election rules are followed. Device B reboots automatically and joins the Device A as a subordinate switch, and the IRF virtual device is formed. The system name on both devices is DevcieA.
31
4.
# Add ports GigabitEthernet 1/0/1 and GigabitEthernet 2/0/1 to the aggregation interface and they are dedicated to the LACP MAD detection for Device A and Device B.
[DeviceA] interface gigabitethernet 1/0/1 [DeviceA-GigabitEthernet1/0/1] port link-aggregation group 2 [DeviceA-GigabitEthernet1/0/1] quit [DeviceA] interface gigabitethernet 2/0/1 [DeviceA-GigabitEthernet2/0/1] port link-aggregation group 2
5.
Acting as the intermediate device, Device C needs to support LACP to forward and process LACP protocol packets, and help Device A and Device B implement MAD detection. An LACP-supported switch is used here to save the cost. # Create a dynamic aggregation interface.
<DeviceC> system-view [DeviceC] interface bridge-aggregation 2 [DeviceC-Bridge-Aggregation2] link-aggregation mode dynamic [DeviceC-Bridge-Aggregation2] quit
# Add ports GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to the aggregation interface and they are used for the LACP MAD detection.
[DeviceC] interface gigabitethernet 1/0/1 [DeviceC-GigabitEthernet1/0/1] port link-aggregation group 2 [DeviceC-GigabitEthernet1/0/1] quit [DeviceC] interface gigabitethernet 1/0/2 [DeviceC-GigabitEthernet1/0/2] port link-aggregation group 2
32
Figure 14 Network diagram for an IRF virtual device that uses BFD MAD detection
Configuration considerations
Device A is located at the distribution layer of the network. To improve the forwarding capability at this layer, additional devices are needed. In this example, Device B is added. To address the requirements for high availability, ease of management and maintenance, use IRF2 technology to create an IRF virtual device with Device A and Device B at the distribution layer. The access devices are each connected to the distribution layer with dual links. To offset the risk of IRF virtual device partition, configure MAD to detect multi-active collisions. In this example, BFD MAD is adopted because the number of member devices is small.
Configuration procedure
This example assumes that the system names of Device A and Device B are DeviceA and DeviceB, respectively, before the IRF virtual device is formed.
1.
# Keep the default member ID of Device A unchanged. # Set the member ID of Device B to 2.
<DeviceB> system-view [DeviceB] irf member 1 renumber 2 Warning: Renumbering the switch number may result in configuration change or loss. Continue? [Y/N]:y [DeviceB]
2.
Power off the two devices and connect IRF links and BFD MAD detection links according to Figure 14. Then power on the two devices.
# Create IRF port 2 on Device A, and bind it to the physical IRF port Ten-GigabitEthernet 1/0/25. Then save the configuration.
<DeviceA> system-view
33
[DeviceA] interface ten-gigabitethernet 1/0/25 [DeviceA-Ten-GigabitEthernet1/0/25] shutdown [DeviceA] irf-port 1/2 [DeviceA-irf-port1/2] port group interface ten-gigabitethernet 1/0/25 [DeviceA-irf-port1/2] quit [DeviceA] interface ten-gigabitethernet 1/0/25 [DeviceA-Ten-GigabitEthernet1/0/25] undo shutdown [DeviceA-Ten-GigabitEthernet1/0/25] save
# Create IRF port 1 on Device B, and bind it to the physical IRF port Ten-GigabitEthernet 2/0/26. Then save the configuration.
<DeviceB> system-view [DeviceB] interface ten-gigabitethernet 2/0/26 [DeviceB-Ten-GigabitEthernet2/0/26] shutdown [DeviceB] irf-port 2/1 [DeviceB-irf-port2/1] port group interface ten-gigabitethernet 2/0/26 [DeviceB-irf-port2/1] quit [DeviceB] interface ten-gigabitethernet 2/0/26 [DeviceB-Ten-GigabitEthernet2/0/26] undo shutdown [DeviceB-Ten-GigabitEthernet2/0/26] save
3.
Master election is held between the two devices. As a result of the master election, Device B automatically reboots to join the IRF virtual device as a subordinate switch. The system name on both devices is DevcieA. Configure BFD MAD detection
4.
# Create VLAN 3, and add port GigabitEthernet 1/0/1 on Device A (with the member ID of 1) and port GigabitEthernet 2/0/1 on Device B (with the member ID of 2) to VLAN 3.
<DeviceA> system-view [DeviceA] vlan 3 [DeviceA-vlan3] port gigabitethernet 1/0/1 gigabitethernet 2/0/1 [DeviceA-vlan3] quit
# Create VLAN-interface 3 and configure the MAD IP address for the interface.
[DeviceA] interface vlan-interface 3 [DeviceA-Vlan-interface3] mad bfd enable [DeviceA-Vlan-interface3] mad ip address 192.168.2.1 24 member 1 [DeviceA-Vlan-interface3] mad ip address 192.168.2.2 24 member 2 [DeviceA-Vlan-interface3] quit
34
Configuration considerations
Device A is located at the distribution layer of the network. To improve the forwarding capability at this layer, additional devices are needed. In this example, Device B is added. To address the requirements for high availability, ease of management and maintenance, use IRF2 technology to create an IRF virtual device with Device A and Device B at the access layer. The IRF virtual device is connected to Device C with dual links. To offset the risk of IRF virtual device partition, configure MAD to detect multi-active collisions. In this example, ARP MAD is adopted because the number of members in the IRF virtual device is small, and the ARP MAD packets are transmitted over dual links connected to Device C. Enable MSTP on the IRF virtual device and Device to prevent loops.
Configuration procedure
This example assumes that the system names of Device A, Device B and Device C are DeviceA, DeviceB, and DeviceC, respectively, before the IRF virtual device is formed.
1.
# Keep the default member ID of Device A unchanged. # Set the member ID of Device B to 2.
<DeviceB> system-view [DeviceB] irf member 1 renumber 2 Warning: Renumbering the switch number may result in configuration change or loss. Continue? [Y/N]:y [DeviceB]
35
2.
Power off the two devices and connect IRF links and ARP MAD detection links according to Figure 14. Then power on the two devices.
# Create IRF port 2 on Device A, and bind it to the physical IRF port Ten-GigabitEthernet 1/0/25. Then save the configuration.
<DeviceA> system-view [DeviceA] interface ten-gigabitethernet 1/0/25 [DeviceA-Ten-GigabitEthernet1/0/25] shutdown [DeviceA] irf-port 1/2 [DeviceA-irf-port1/2] port group interface ten-gigabitethernet 1/0/25 [DeviceA-irf-port1/2] quit [DeviceA] interface ten-gigabitethernet 1/0/25 [DeviceA-Ten-GigabitEthernet1/0/25] undo shutdown [DeviceA-Ten-GigabitEthernet1/0/25] save
# Create IRF port 1 on Device B, and bind it to the physical IRF port Ten-GigabitEthernet 2/0/26. Then save the configuration.
<DeviceB> system-view [DeviceB] interface ten-gigabitethernet 2/0/26 [DeviceB-Ten-GigabitEthernet2/0/26] shutdown [DeviceB] irf-port 2/1 [DeviceB-irf-port2/1] port group interface ten-gigabitethernet 2/0/26 [DeviceB-irf-port2/1] quit [DeviceB] interface ten-gigabitethernet 2/0/26 [DeviceB-Ten-GigabitEthernet2/0/26] undo shutdown [DeviceB-Ten-GigabitEthernet2/0/26] save
3.
Master election is held between the two devices. As a result of the master election, Device B automatically reboots to join the IRF virtual device as a subordinate switch. The system name on both devices is DevcieA. Configure ARP MAD
4.
# Connect the ARP MAD detection links according to Figure 15. # Configure that the bridge MAC address of the IRF virtual device changes as soon as the master leaves.
[DeviceA] undo irf mac-address persistent
# Create VLAN 3, and add port GigabitEthernet 1/0/1 (located on Device A) and port GigabitEthernet 2/0/1 (located on Device B) to VLAN 3.
[DeviceA] vlan 3 [DeviceA-vlan3] port gigabitethernet 1/0/1 gigabitethernet 2/0/1 [DeviceA-vlan3] quit
36
# Create VLAN-interface 3, assign it an IP address, and enable ARP MAD on the interface.
[DeviceA] interface vlan-interface 3 [DeviceA-Vlan-interface3] ip address 192.168.2.1 24 [DeviceA-Vlan-interface3] mad arp enable
5.
Configure Device C
# Create VLAN 3, and add port GigabitEthernet 1/0/1 and port GigabitEthernet 1/0/2 to VLAN 3 to forward ARP MAD packets.
[DeviceC] vlan 3 [DeviceC-vlan3] port gigabitethernet 1/0/1 gigabitethernet 1/0/2 [DeviceC-vlan3] quit
37
Subscription service
HP recommends that you register your product at the Subscriber's Choice for Business website: http://www.hp.com/go/wwalerts After registering, you will receive email notification of product enhancements, new driver versions, firmware updates, and other product resources.
Related information
Documents
To find related documents, browse to the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals For related documentation, navigate to the Networking section, and select a networking category. For a complete list of acronyms and their definitions, see HP A-Series Acronyms.
Websites
HP.com http://www.hp.com HP Networking http://www.hp.com/go/networking HP manuals http://www.hp.com/support/manuals HP download drivers and software http://www.hp.com/support/downloads HP software depot http://www.software.hp.com
38
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention
Boldface Italic [] { x | y | ... } [ x | y | ... ] { x | y | ... } * [ x | y | ... ] * &<1-n> #
Description
Bold text represents commands and keywords that you enter literally as shown. Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none. Asterisk-marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one. Asterisk-marked square brackets enclose optional syntax choices separated by vertical bars, from which you select one choice, multiple choices, or none. The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times. A line that starts with a pound (#) sign is comments.
GUI conventions
Convention
Boldface >
Description
Window names, button names, field names, and menu items are in bold text. For example, the New User window appears; click OK. Multi-level menus are separated by angle brackets. For example, File > Create > Folder.
Symbols
Convention
WARNING CAUTION IMPORTANT NOTE TIP
Description
An alert that calls attention to important information that if not understood or followed can result in personal injury. An alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software. An alert that calls attention to essential information. An alert that contains additional or supplementary information. An alert that provides helpful information.
39
40
Index
accessing a slave switch, 29 accessing an IRF virtual device, 28 accessing the master, 28 application scenario, 2 ARP MAD, 25 ARP MAD detection-enabled IRF example, 35 assigning a domain ID to an IRF virtual device, 12 automatic boot file updating, 18 BFD MAD, 22 BFD MAD detection-enabled IRF example, 32 binding physical ports to IRF ports at the CLI, 4 boot file, 18 bridge MAC address preservation time, 17 changing the IRF member ID of a switch, 13 configuration considerations, 30, 33, 35 configuration file synchronization, 9 configuration procedure, 31, 33, 35 connecting the IRF member switches, 4 connecting the neighbor switches, 6 contacting HP, 38 description for a member switch, 15 documentation conventions used, 39 website, 38 domain ID for an IRF virtual device, 11 establishment of IRF virtual device, 4 example ARP MAD detection-enabled IRF, 35 BFD MAD detection-enabled IRF, 32 LACP MAD detection-enabled IRF, 30 excluding a port from the shutdown action on detection of multi-active collision, 26 file system naming conventions, 8 global load sharing criteria, 16 HP customer support and resources, 38 document conventions, 39 documents and manuals, 38 icons used, 39 subscription service, 38 support contact information, 38 symbols used, 39 websites, 38 icons, 39 interface naming conventions, 8 IRF
41
application scenario, 2 basic concepts, 3 benefits, 1 configuration, 1 establishment of IRF virtual device, 4 maintenance of an IRF virtual device, 4 operation of IRF virtual device, 4 overview, 1 topologies, 2 virtual device task list, 10 IRF configuration, 1 IRF domain, 11 IRF link, 19 IRF member ID, 13 IRF member switch roles, 3 IRF merge, 3 IRF multi-active detection, 9 IRF overview, 1 IRF partition, 3 IRF ports, 3, 13 IRF topologies, 2 IRF virtual device, 11, 28 displaying and maintaining, 29 examples, 30 IRF virtual device maintenance, 7 IRF virtual device management, 7 IRF virtual device task list, 10 IRF virtual device topology maintenance, 9 LACP MAD, 20 LACP MAD detection-enabled IRF example, 30 load sharing criteria for IRF links, 15 MAD detection, 19 maintenance of an IRF virtual device, 4 manually recovering an IRF virtual device, 27 manuals, 38 master election, 7 master switch, 28 member ID, 7 member priority, 4 member switch description, 15 member switch priority, 15 network requirements, 30, 32, 35 operation of IRF virtual device, 4 physical IRF port, 3 port-specific load sharing criteria, 16 preservation time of bridge MAC address, 17
setting the IRF link down report delay, 19 slave switch, 29 specifying a priority for a member switch, 15 subscription service, 38
42