关于华为二层交换机集群管理配置规范及说明Word文档下载推荐.docx

关于华为二层交换机集群管理配置规范及说明Word文档下载推荐.docx

《关于华为二层交换机集群管理配置规范及说明Word文档下载推荐.docx》由会员分享，可在线阅读，更多相关《关于华为二层交换机集群管理配置规范及说明Word文档下载推荐.docx（13页珍藏版）》请在冰豆网上搜索。

[YS_XianJu_S3552G]ndptimerhello70

（2）启动设备上的NTDP和端口上的NTDP

[YS_XianJu_S3552G]ntdpenable

#配置拓扑收集范围为7跳

[YS_XianJu_S3552G]ntdphop7#配置被收集设备转发拓扑收集请求的延迟时间为150ms

[YS_XianJu_S3552G]ntdptimerhop-delay150

15ms

#配置被收集设备的端口转发拓扑收集请求的延迟时间为[YS_XianJu_S3552G]ntdptimerport-delay15#配置定时拓扑收集的时间间隔为3分钟[YS_XianJu_S3552G]ntdptimer3

（3）配置管理vlan

#创建管理vlan[YS_XianJu_S3552G]vlan4051

#将管理vlan4051作为管理vlan[YS_XianJu_S3552G]management-vlan4051#进入以太网端口

descriptionto_ys_shuili_dishui2_caizhen_xiaoqu

portlink-typetrunk

undoporttrunkpermitvlan1

porttrunkpermitvlan45to5135274051

（4）启动集群功能

[YS_XianJu_S3552G]clusterenable

#进入集群视图

YS_XianJu_S3552G]cluster

[YS_XianJu_S3552G-cluster]

#配置集群内部使用的IP地址池起始地址为10.0.1.1有254个地址

[YS_XianJu_S3552G-cluster]ip-pool10.0.1.1255.255.255.0

（5）配置集群名字建立集群

[YS_XianJu_S3552G-cluster]buildYSYD

[YSYD_0.YS_XianJu_S3552G-cluster]

（6）将下挂的两个交换机加入到集群中

[YSYD_0.YS_XianJu_S3552G-cluster]add-member1mac-address00e0-fc01-0011[YSYD_0.YS_XianJu_S3552G-cluster]add-member2mac-address00e0-fc01-0013[YSYD_0.YS_XianJu_S3552G-cluster]add-member3mac-address00e0-fc01-0011#配置成员设备信息的保留时间为100秒

[YSYD_0.YS_XianJu_S3552G-cluster]holdtime100

#配置握手报文定时发送的时间间隔为10秒

[YSYD_0.YS_XianJu_S3552G-cluster]timer10

2、配置成员设备（由接入层维护人员来配置）

以xx水利小区3号楼S2016C为例：

#启动设备上的NDP和端口上的NDP

[YS_ShuiLi_3#Lou_S2016C]ndpenable

#启动设备上的NTDP和端口上的NTDP

[YS_ShuiLi_3#Lou_S2016C]ntdpenable

#创建vlan4051创建管理vian,根汇聚层交换机管理vlan来确定。

[YS_ShuiLi_3#Lou_S2016C]vlan4051

#将vlan4051作为管理vlan

[YS_ShuiLi_3#Lou_S2016C]management-vlan4051

#进入以太网端口透传管理vlan4051将二层交换机上联口透传管理vlan#启动集群功能

[YS_ShuiLi_3#Lou_S2016C]clusterenable

四、数据配置举例如下：

1、xx局S3552G配置如下：

<

YSYD_0.YS_XianJu_S3552G>

discu#sysnameYS_XianJu_S3552G#super

passwordlevel3cipherA#:

+/G*8'

P,:

）&

"

CZHH（&

1!

!

#ntdphop7

ntdptimerport-delay15

ntdptimerhop-delay150

ntdptimer3#radiusschemesystem

server-typehuawei

primaryauthentication127.0.0.11645

primaryaccounting127.0.0.11646

user-name-formatwithout-domain

domainsystem

radius-schemesystem

access-limitdisablestateactivevlan-assignment-modeintegeridle-cutdisableself-service-urldisablemessengertimedisable

domaindefaultenablesystem#local-servernas-ip127.0.0.1keyhuaweilocal-usersxhuawei

passwordcipher（W_]UELR9laNK<

;

9B9.'

）Q!

ndptimeraging200#management-vlan4051#aclnumber3998

rule0denyipdestination10.0.1.00.0.0.255

rule1permitipsource10.0.1.00.0.0.255

aclnumber3999

rule0denyipsource10.0.1.00.0.0.255

rule1permitipdestination10.0.1.00.0.0.255#vlan1#vlan27#vlan28#vlan

29#vlan30#vlan31#vlan32#vlan33#vlan34#vlan35#vlan36#vlan37#vlan38#vlan

39#vlan40#vlan41#vlan42#vlan43#vlan44#vlan45#vlan46#vlan47#vlan48#vlan

49#vlan50#vlan51#vlan52#vlan53#vlan1672

descriptionto_ys_taichanggaosu（yulin）#vlan1711#vlan2101#vlan2103#vlan2104#vlan2105

multicast-vlanenable#vlan3524#vlan3526#vlan3527#vlan3528#vlan

3529#vlan3530#vlan3532#vlan3534#vlan35#vlan3536#vlan3537#vlan4051#interfaceVlan-interface4051

ipaddress221.131.31.130255.255.255.240##

shutdown#descriptionto_ys_taichanggaosu（yulin）broadcast-suppression5

portaccessvlan1672#descriptionto_ys_donghuixiaoxuebroadcast-suppression5

portaccessvlan3526#descriptionto_ys_tudijushebroadcast-suppression5

portaccessvlan3528#descriptionto_ys_nonghangsushebroadcast-suppression5

portaccessvlan3529#descriptionto_ys_dishuiyixiaoqubroadcast-suppression5

portaccessvlan3530#descriptionto_ys_lianjiazhuangbroadcast-suppression5

portaccessvlan1711#descriptionto_ys_dongshengyingyetingportlink-typetrunk

porttrunkpermitvlan2103to21053532#description_xianweidanxiaowenhuazhan

broadcast-suppression5

portaccessvlan3534#descriptionto_ys_youzhenxiaoqubroadcast-suppression5

portaccessvlan35#descriptionto_ys_jiaokejuwenhuazhan

broadcast-suppression5portaccessvlan3536#descriptionto_ys_jishengfuyouyuanbroadcast-suppression5

portaccessvlan3537#descriptionto_ys_xiangzhenjuxiaoqu

porttrunkpermitvlan31to33#descriptionto_ys_mingzhenjuxiaoquportlink-typetrunk

porttrunkpermitvlan34to35#descriptionto_ys_renhangxiaoquportlink-typetrunk

porttrunkpermitvlan36#descriptionto_ys_huagongxiaoqu

porttrunkpermitvlan27to30#descriptionto_ys_gongan,liangshijuxiaoquportlink-typetrunk

porttrunkpermitvlan37to40#descriptionto_ys_gongan,yizhongxuexiaoquportlink-typetrunk

porttrunkpermitvlan41to44#descriptionto_ys_shuili_dishui2_caizhen_xiaoqu

porttrunkpermitvlan45to5135274051#descriptionto_ys_guoshuixiaoqu

porttrunkpermitvlan52to53#descriptionto_ys_yingchunyingyeting

porttrunkpermitvlan21013524#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#shutdown#duplexfull

speed1000

porttrunkpermitvlan27to5316721711to3526to3530to35374051#shutdown#shutdown#shutdown#interfaceNULL0#cluster

ip-pool10.0.1.1255.255.255.0

buildYSYD

holdtime100#[YSYD_0.YS_XianJu_S3552G-cluster]add-member1mac-address00e0-fc01-0011[YSYD_0.YS_XianJu_S3552G-cluster]add-member2mac-address00e0-fc01-0013[YSYD_0.YS_XianJu_S3552G-cluster]add-member3mac-address00e0-fc01-0011#

iproute-static0.0.0.00.0.0.0221.131.31.129preference60#snmp-agent

snmp-agentlocal-engineid8007DB000FE215D

snmp-agentsys-infolocationBeiJingChina

snmp-agentsys-infoversionall

snmp-agenttarget-hosttrapaddressudp-domain211.142.42.68paramssecuritynamejzyd

snmp-agenttarget-hosttrapaddressudp-domain211.142.42.69paramssecuritynamejzyd

snmp-agenttrapenablestandard

snmp-agenttrapenableconfiguration

snmp-agenttrapenablevrrp

snmp-agenttrapenablebgp

snmp-agenttrapsourceVlan-interface4051#ntp-serviceunicast-server211.138.98.2

ntp-serviceunicast-server211.138.98.1#user-interfaceaux0

authentication-modescheme

user-interfacevty04

authentication-modescheme#Return

2、榆社水利小区3号楼S2016C配置如下：

YSYD_1.YS_ShuiLi_3#Lou_S2016C>

discu#sysnameYS_ShuiLi_3#Lou_S2016C对交换机进行命名#superpasswordlevel3cipher八#:

#info-centerloghost10.0.1.1#management-vlan4051修改集群管理vlan（根据汇聚层交换机管理vlan确定）#que-schedulerwrr1248#vlan1#vlan45

port-isolateenable小区交换机端口隔离配置#vlan

46#vlan47#vlan48#vlan49#vlan50#vlan51#vlan3527#vlan4051增加交换机集群管理vlan号（根据汇聚层交换机管理vlan确定）#

interfaceVlan-interface4051##

descriptionto_（描述该交换机的上联交换机及端口）portlink-typetrunk

porttrunkpermitvlan45to51（上联口透传集群管理vlan号）port-isolateuplink-portvlan45（上联口配置本交换机端口隔离vlan）#

description对交换机联端口进行描述

（透传集群管理VLAN）

）

porttrunkpermitvlan464051description对交换机联端口进行描述

porttrunkpermitvlan474051

broadcast-suppression5（对ACCESS^口进行广播抑制）portaccessvian45#broadcast-suppression5

portaccessvian45#broadcast-suppression5

portaccessvian45#interfaceNULL0#snmp-agent

snmp-agentiocai-engineid8007DB000FE237E4CB6877

snmp-agentsys-infoiocationBeiJingChina

snmp-agentsys-infoversionaii

snmp-agenttarget-hosttrapaddressudp-domain10.0.1.1paramssecuritynameciuster

snmp-agenttrapenabiestandard

snmp-agenttrapenabieconfiguration

snmp-agenttrapsourceVlan-interface4051#user-interfaceaux0authentication-modepassword

setauthenticationpasswordcipherN'

C55QKv'

二/Q"

Q'

MAF4v1!

#Return

3、榆社水利1号楼S2024C交换机配置如下：

YSYD_1.YS_ShuiLi_1#Lou_S2024C>

discu#sysnameYS_ShuiLi_1#Lou_S2024C对交换机进行命名#superpasswordlevel3cipherA#:

#info-centerloghost10.0.1.1#management-vlan4051修改集群管理vlan（根据汇聚层交换机管理vlan确定）#que-schedulerwrr1248#vlan1#vlan47

port-isolateenable小区交换机端口隔离配置#vlan4051

增加交换机集群管理vlan号（根据汇聚层交换机管理vlan确定）#

porttrunkpermitvlan474051（上联口透传集群管理vlan号）port-isolateuplink-portvlan47（上联口配置本交换机端口隔离vlan）#

portaccessvlan47#broadcast-suppression5

portaccessvlan47#broad