ICOS configuration guide

37
ICOS configuration guide

Transcript of ICOS configuration guide

Page 1: ICOS configuration guide

ICOS configuration guide

Page 2: ICOS configuration guide

ICOS configuration guide

Page 3: ICOS configuration guide

iii

Table of Contents1. mLAG Configuration guide ................................................................................................. 1

1.1. Pre-requirement ...................................................................................................... 21.2. Topology ................................................................................................................. 31.3. Physical Link ........................................................................................................... 41.4. Configuration ........................................................................................................... 5

1.4.1. Create Peer Link .......................................................................................... 51.4.2. Create VPC domain ..................................................................................... 51.4.3. Enable VPC feature ...................................................................................... 51.4.4. Create VPC link ........................................................................................... 61.4.5. Check VPC State ......................................................................................... 6

1.5. Trouble shoot .......................................................................................................... 92. VLAN Configuration guide ................................................................................................ 10

2.1. Pre-requirement ..................................................................................................... 112.2. Topology ............................................................................................................... 122.3. Physical Link ......................................................................................................... 132.4. Parameter Set ....................................................................................................... 142.5. Configuration ......................................................................................................... 15

2.5.1. Configure Switch Port’s mode ..................................................................... 152.5.2. Create VLAN .............................................................................................. 162.5.3. Configure VLAN Port’s PVID ....................................................................... 16

2.6. Trouble Shoot ....................................................................................................... 192.6.1. Troubleshoot table about VLAN ................................................................... 19

3. VRRP Configuration guide ................................................................................................ 213.1. Pre-requirement ..................................................................................................... 223.2. Topology ............................................................................................................... 233.3. Physical Link ......................................................................................................... 243.4. IPs set .................................................................................................................. 253.5. Configuration ......................................................................................................... 26

3.5.1. Create IPs .................................................................................................. 263.5.2. Configure OSPF ......................................................................................... 273.5.3. Test Switch connection ............................................................................... 273.5.4. Configure VRRP ......................................................................................... 283.5.5. Check VRRP State ..................................................................................... 293.5.6. VRRP IP Test ............................................................................................ 293.5.7. VRRP Fault-Tolerance Test ........................................................................ 303.5.8. VRRP Interface Track Test ......................................................................... 31

Page 4: ICOS configuration guide

iv

List of Figures1.1. mLAG Topology .............................................................................................................. 32.1. VLAN Topology ............................................................................................................. 122.2. VLAN Physical Link ....................................................................................................... 133.1. VRRP Topology ............................................................................................................ 233.2. VRRP Physical Link ...................................................................................................... 243.3. VRRP IPs Set ............................................................................................................... 25

Page 5: ICOS configuration guide

v

List of Tables1.1. mLAG Physical Link ........................................................................................................ 41.2. Troubleshoot Table about mLAG ..................................................................................... 92.1. VLAN Parameter Set ..................................................................................................... 142.2. Troubleshoot Table about VLAN .................................................................................... 19

Page 6: ICOS configuration guide

1

Chapter 1. mLAG Configuration guide

Page 7: ICOS configuration guide

mLAG Configuration guide

2

1.1. Pre-requirement1. Support hardware: Aurora 220, Aurora 620, Aurora 720

2. Support software: 1.1.6 or above

Page 8: ICOS configuration guide

mLAG Configuration guide

3

1.2. TopologyFigure 1.1. mLAG Topology

Page 9: ICOS configuration guide

mLAG Configuration guide

4

1.3. Physical LinkTable 1.1. mLAG Physical Link

Switch-A Switch-B Server Switch-A Switch-B

Port 47 Port 47 Eth0 Port 1

Port 48 Port 48 Eth0 Port 1

Page 10: ICOS configuration guide

mLAG Configuration guide

5

1.4. Configuration1.4.1. Create Peer Link

Switch-A:

(Switch-A) >en(Switch-A) #configure(Switch-A) (Config)#interface 0/47-0/48(Switch-A) (Interface 0/47-0/48)#addport lag 60(Switch-A) (Interface 0/47-0/48)#exit(Switch-A) (Config)#interface lag 60(Switch-A) (Interface lag 60)#vpc peer-link(Switch-A) (Interface lag 60)#switchport mode trunk

Switch-B:

(Switch-B) >en(Switch-B) #configure(Switch-B) (Config)#interface 0/47-0/48(Switch-B) (Interface 0/47-0/48)#addport lag 60(Switch-B) (Interface 0/47-0/48)#exit(Switch-B) (Config)#interface lag 60(Switch-B) (Interface lag 60)#vpc peer-link(Switch-B) (Interface lag 60)#switchport mode trunk

1.4.2. Create VPC domainSwitch-A :

(Switch-A) (Config)#vpc domain 1(Switch-A) (Config-VPC 1)#peer detection enable(Switch-A) (Config-VPC 1)#peer-keepalive enable(Switch-A) (Config-VPC 1)# peer-keepalive destination 192.168.1.59 source192.168.1.15

Switch-B :

(Switch-B) (Config)#vpc domain 1(Switch-B) (Config-VPC 1)#peer detection enable(Switch-B) (Config-VPC 1)#peer-keepalive enable(Switch-B) (Config-VPC 1)# peer-keepalive destination 192.168.1.15 source192.168.1.59

1.4.3. Enable VPC featureSwitch-A :

(Switch-A) (Config)#feature vpc

Page 11: ICOS configuration guide

mLAG Configuration guide

6

Switch-B :

(Switch-B) (Config)#feature vpc

1.4.4. Create VPC linkSwitch-A :

(Switch-A) (Config)#interface 0/1(Switch-A) (Interface 0/1)#addport lag 1(Switch-A) (Interface 0/1)#exit(Switch-A) (Config)#interface lag 1(Switch-A) (Interface lag 1)#vpc 1

Switch-B :

(Switch-B) (Config)#interface 0/1(Switch-B) (Interface 0/1)#addport lag 1(Switch-B) (Interface 0/1)#exit(Switch-B) (Config)#interface lag 1(Switch-B) (Interface lag 1)#vpc 1

1.4.5. Check VPC StateSwitch-A :

(Switch-A)# show vpc brief

Page 12: ICOS configuration guide

mLAG Configuration guide

7

(Switch-A)# show vpc 1

Page 13: ICOS configuration guide

mLAG Configuration guide

8

Page 14: ICOS configuration guide

mLAG Configuration guide

9

1.5. Trouble shootTable 1.2. Troubleshoot Table about mLAG

Problem Title Result Troubleshoot

Domain IDs mis-match

2 peer devices cannot beidentified by each other.

Use “show vpc brief” to check domain IDs on SwitchA and Switch B, if domain ID is not same, use “vpcdomain #id” to correct.

vPC peerkeepalive linkand connectivityissues over ser-viceport/mgmt 0

Use “show vpc peer-keepalive” command tocheck, ‘peer is detected’status is ‘false’

Use the “show serviceport” to check if the service-port is up and IP address is available, if no problem,use the “show run vpc” to check if the destination IPand source IP are set correctly.

Page 15: ICOS configuration guide

10

Chapter 2. VLAN Configuration guide

Page 16: ICOS configuration guide

VLAN Configuration guide

11

2.1. Pre-requirement1. Support hardware: Aurora 220, Aurora 620, Aurora 720

2. Support software: 1.1.6 or above

3. Server-1 and Server-3 are connected to Switch-A; Server-2 and Server-4 are connected toSwitch-B.

Required:

1. Server-1 and Server-2 can be intercommunicated, Server-3 and Server-4 can intercommunicate

2. Server-1 cannot communicate with Server-3, and Server-2 cannot communicate with Server-4

Page 17: ICOS configuration guide

VLAN Configuration guide

12

2.2. TopologyFigure 2.1. VLAN Topology

Page 18: ICOS configuration guide

VLAN Configuration guide

13

2.3. Physical LinkFigure 2.2. VLAN Physical Link

Page 19: ICOS configuration guide

VLAN Configuration guide

14

2.4. Parameter SetTable 2.1. VLAN Parameter Set

VLAN Port VLAN 10 VLAN 20 Port Type PVID TAG/UNTAG

0/1 √ none ACCESS 10 UNTAG

0/2 none √ ACCESS 20 UNTAG

0/3 √ √ TRUNK 1 TAG

Page 20: ICOS configuration guide

VLAN Configuration guide

15

2.5. Configuration2.5.1. Configure Switch Port’s mode

Switch-A:

//Configure Switch Port 1 and Port 2’s mode as ‘access’(Switch-A) >en(Switch-A)#configure(Switch-A)(Config) #interface 0/1,0/2(Switch-A)(Interface 0/1,0/2) #switchport mode access(Switch-A)(Interface 0/1,0/2) #show vlan port 0/1

(Switch-A)(Interface 0/1,0/2) #show vlan port 0/2

(Switch-A)(Interface 0/1,0/2) #exit//Configure Switch Port 3’s mode as ‘trunk’(Switch-A)(Config) #interface 0/3(Switch-A)(Interface 0/3) #switchport mode trunk(Switch-A)(Interface 0/3) #show vlan port 0/3

(Switch-A)(Interface 0/3) #exit(Switch-A)(Config) #exit

Switch-B:

Page 21: ICOS configuration guide

VLAN Configuration guide

16

//The same configurations as above Switch-A are stetted for Switch-B(Switch-B) >en(Switch-B)#configure(Switch-B)(Config) #interface 0/1,0/2(Switch-B)(Interface 0/1,0/2) #switchport mode access(Switch-B)(Interface 0/1,0/2) #exit(Switch-B)(Config) #interface 0/3(Switch-B)(Interface 0/3) #switchport mode trunk(Switch-B)(Interface 0/3) #exit(Switch-B)(Config) #exit

2.5.2. Create VLANSwitch-A:

(Switch-A) #vlan database //enter into VLAN config mode(Switch-A) (Vlan)#vlan 10 //create a new VLAN and assign VLAN ID as ‘10’(Switch-A) (Vlan)#vlan name 10 VLAN10 //set the VLAN’s name as ‘VLAN 10’(Switch-A) (Vlan)#vlan20 //create other new VLAN and assign VLAN ID as ‘20’(Switch-A) (Vlan)#vlan name 20 VLAN20 //set the VLAN’s name as ‘VLAN 20’(Switch-A) (Vlan)#show vlan //display information about the configured vlans

(Switch-A) (Vlan)#exit

Switch-B:

//The same configurations as above Switch-A are stetted for Switch-B(Switch-B) #vlan database(Switch-B) (Vlan)#vlan 10(Switch-B) (Vlan)#vlan name 10 VLAN10(Switch-B) (Vlan)#vlan20(Switch-B) (Vlan)#vlan name 20 VLAN20(Switch-B) (Vlan)#exit

2.5.3. Configure VLAN Port’s PVIDSwitch-A:

(Switch-A) #configure//Configure Switch Port 1’s pvid as ‘10’(Switch-A)(Config) #interface 0/1(Switch-A)(Interface 0/1) #switchport access vlan 10(Switch-A)(Interface 0/1) #show vlan port 0/1

Page 22: ICOS configuration guide

VLAN Configuration guide

17

(Switch-A)(Interface 0/1) #exit//Configure Switch Port 2’s pvid as ‘20’(Switch-A)(Config) #interface 0/2(Switch-A)(Interface 0/2) #switchport access vlan 20(Switch-A)(Interface 0/2) #show vlan port 0/2

(Switch-A)(Interface 0/2) #exit//Switch Port 3’s pvid keep the default value ’1’(Switch-A)(Config) #show vlan port 0/3

Page 23: ICOS configuration guide

VLAN Configuration guide

18

(Switch-A)(Config) #exit

Switch-B:

//The same configurations as above Switch-A are stetted for Switch-B(Switch-B) #configure(Switch-B)(Config) #interface 0/1(Switch-B)(Interface 0/1) #switchport access vlan 10(Switch-B)(Interface 0/1) #exit(Switch-B)(Config) #interface 0/2(Switch-B)(Interface 0/2) #switchport access vlan20(Switch-B)(Interface 0/2) #exit(Switch-B)(Config) #exit

Page 24: ICOS configuration guide

VLAN Configuration guide

19

2.6. Trouble ShootSwitch-A and Switch-B:

(Switch-A) #show vlan 10

(Switch-A) #show vlan 20

2.6.1. Troubleshoot table about VLANTable 2.2. Troubleshoot Table about VLAN

ProblemTitle

Problem Description Result Troubleshoot

IP Ad-dress-ing is-sues withVLAN.

Two devices In the sameVLANs have different subnetaddresses.

For example:

Server-1 IP: 192.168.10.2

Server-2: 192.16.10.4

Server-1 and Serv-er-2 cannot inter-communicate

A check of the IP configurationsettings of Server-1 and Serv-er-2. If they are not in the samesubnet. Set the correct IP Ad-dress for Server-1 and Serv-er-2

MissingVLANs

The port doesn’t belongs to theexpected VLAN

For example:

interface 0/1 doesn’t belongvlan 10

Server-1 and Serv-er-2 cannot inter-communicate

Use the “show vlanvlan-id”command to check, if interface0/1 participation state is “Ex-clude”, use the “switchport ac-cess vlanvlan-id” to correct theVLAN membership on a partici-pation port

NativeVLANmismatch

One port is defined as nativeVLAN 1 and the opposite trunkend is defined as native VLAN10

VLAN leaking oc-curs

Use the “show interfacesswitchport trunk” command tocheck whether the local andpeer native VLANs match.

Page 25: ICOS configuration guide

VLAN Configuration guide

20

ProblemTitle

Problem Description Result Troubleshoot

For example

Port 3 of Switch-A is defined asnative VLAN 1

Port3 of Switch-B is defined asnative VLAN 10

If the native VLAN does notmatch on both sides, use“switchport trunk native vlan-vlan-id” to correct

Trunkmodemismatch

One end of the trunk is config-ured as trunk mode “off” andthe other as trunk mode “on”

Causes loss of net-work connectivity

Use the “show interfacesswitchport trunk” commandto check whether a trunk hasbeen established betweenswitches. If not, use “switchportmode trunk” to correct

AllowedVLANson trunks

The list of allowed VLANs doesnot support current VLAN trunkrequirements

Unexpected trafficor no traffic is sentover the trunk

Use the “show interfacesswitchport trunk” command tocheck whether the requiredtrunk vlan in the list of allowedVLANs. If not, use “switchporttrunk allowed vlanvlan-id ” tocorrect

Page 26: ICOS configuration guide

21

Chapter 3. VRRP Configuration guide

Page 27: ICOS configuration guide

VRRP Configuration guide

22

3.1. Pre-requirement1. Support hardware: Aurora 220, Aurora 620, Aurora 720

2. Support software: 1.1.6 or above

Page 28: ICOS configuration guide

VRRP Configuration guide

23

3.2. TopologyFigure 3.1. VRRP Topology

Page 29: ICOS configuration guide

VRRP Configuration guide

24

3.3. Physical LinkFigure 3.2. VRRP Physical Link

Page 30: ICOS configuration guide

VRRP Configuration guide

25

3.4. IPs setFigure 3.3. VRRP IPs Set

Switch-3 acts as a Layer2 switch

Page 31: ICOS configuration guide

VRRP Configuration guide

26

3.5. Configuration3.5.1. Create IPs

Switch-1 (Take Aurora 220 switch as example):

(Switch-1) >en(Switch-1) #configure(Switch-1) (Config)#ip routing(Switch-1) (Config)#interface 0/14(Switch-1) (Interface 0/14)#routing(Switch-1) (Interface 0/14)#ip address 192.168.14.1 255.255.255.0(Switch-1) (Interface 0/14)#exit(Switch-1) (Config)#interface 0/15(Switch-1) (Interface 0/15)#routing(Switch-1) (Interface 0/15)#ip address 192.168.5.251 255.255.255.0(Switch-1) (Interface 0/15)#exit(Switch-1)(Config)#show ip interface brief

Switch-2 (Take Aurora 220 switch as example):

(Switch-2) >en(Switch-2) #configure(Switch-2) (Config)#ip routing(Switch-2) (Config)#interface 0/24(Switch-2) (Interface 0/24)#routing(Switch-2) (Interface 0/24)#ip address 192.168.24.2 255.255.255.0(Switch-2) (Interface 0/24)#exit(Switch-2) (Config)#interface 0/25(Switch-2) (Interface 0/25)#routing(Switch-2) (Interface 0/25)#ip address 192.168.5.252 255.255.255.0(Switch-2) (Interface 0/25)#exit(Switch-2) (Config)#show ip interface brief

Page 32: ICOS configuration guide

VRRP Configuration guide

27

Switch-4 (Take Aurora 220 switch as example):

(Switch-4) >en(Switch-4) #configure(Switch-4) (Config)#ip routing(Switch-4) (Config)#interface 0/41(Switch-4) (Interface 0/41)#routing(Switch-4) (Interface 0/41)#ip address 192.168.14.4 255.255.255.0(Switch-4) (Interface 0/41)#exit(Switch-4) (Config)#interface 0/42(Switch-4) (Interface 0/42)#routing(Switch-4) (Interface 0/42)#ip address 192.168.24.4 255.255.255.0(Switch-4) (Interface 0/42)#exit(Switch-4) (Config)#interface 0/4(Switch-4) (Interface 0/4)#routing(Switch-4) (Interface 0/4)#ip address 192.168.4.4 255.255.255.0(Switch-4) (Interface 0/4)#exit

3.5.2. Configure OSPFSwitch-1:

(Switch-1) (Config)#router ospf(Switch-1) (Config-router)#network 192.168.0.0 0.0.255.255 area 1(Switch-1) (Config-route)#exit

Switch-2:

(Switch-2) (Config)#router ospf(Switch-2) (Config-router)#network 192.168.0.0 0.0.255.255 area 1(Switch-2) (Config-route)#exit

Switch-4:

(Switch-4) (Config)#router ospf(Switch-4) (Config-router)#network 192.168.0.0 0.0.255.255 area 1(Switch-4) (Config-route)#exit

3.5.3. Test Switch connectionSwitch-1:

(Switch-1) #ping 192.168.4.100

Page 33: ICOS configuration guide

VRRP Configuration guide

28

Switch-2:

(Switch-2)#ping 192.168.4.100

3.5.4. Configure VRRPSwitch-1:

(Switch-1) (Config)#ip vrrp(Switch-1) (Config)#interface 0/15(Switch-1) (Interface 0/15)#ip vrrp 1(Switch-1) (Interface 0/15)#ip vrrp 1 mode(Switch-1) (Interface 0/15)#ip vrrp 1 ip 192.168.5.254(Switch-1) (Interface 0/15)# ip vrrp 1 priority 120(Switch-1) (Interface 0/15)# ip vrrp 1 track interface 0/14 decrement 25(Switch-1) (Interface 0/15)#exit

Switch-2:

(Switch-2) (Config)#ip vrrp(Switch-2) (Config)#interface 0/25(Switch-2) (Interface 0/25)#ip vrrp 1(Switch-2) (Interface 0/25)#ip vrrp 1 mode(Switch-2) (Interface 0/25)#ip vrrp 1 ip 192.168.5.254(Switch-2) (Interface 0/25)# ip vrrp 1 priority 100(Switch-2) (Interface 0/25)#exit

Server-1 (Configure IP as 192.168.5.100 and Gateway IP 192.168.5.254)

Page 34: ICOS configuration guide

VRRP Configuration guide

29

3.5.5. Check VRRP StateSwitch-1:

(Switch-1) (Config)#show ip vrrp interface brief

Switch-2:

(Switch-1) (Config)#show ip vrrp interface brief

3.5.6. VRRP IP TestServer-1 PING Server-2:

Page 35: ICOS configuration guide

VRRP Configuration guide

30

3.5.7. VRRP Fault-Tolerance TestSwitch-1:

(Switch-1) (Config)#interface 0/15(Switch-1) (Interface 0/15)#shutdown(Switch-1) (Interface 0/15)#show ip vrrp interface brief

Switch-2:

(Switch-2) (Config)#ishow ip vrrp interface brief

Server-1 PING Server-2:

Page 36: ICOS configuration guide

VRRP Configuration guide

31

Switch-1:

(Switch-1) (Interface 0/15)#no shutdown(Switch-1) (Interface 0/15)#show ip vrrp interface brief

Switch-2:

(Switch-2) (Config)# show ip vrrp interface brief

3.5.8. VRRP Interface Track TestSwitch-1:

(Switch-1) (Config)#interface 0/14(Switch-1) (Interface 0/14)#shutdown(Switch-1) (Interface 0/14)#show ip vrrp interface brief

Switch-2:

(Switch-2) (Config)# show ip vrrp interface brief

Server-1 PING Server-2:

Page 37: ICOS configuration guide

VRRP Configuration guide

32