导读:今天向大家介绍有关VSF虚拟化技术的内容,有需要的朋友可以收藏一下!
VSF虚拟化技术
什么是VSF虚拟化技术
VSF是建设网络核心的新技术。它将帮助用户设计和实施高可靠性、高可扩展性的千兆以太网核心和汇聚主干。
VSF( Virtual Switch Framework )就是将多台设备通过VSF端口连接起来形成一台虚拟的逻辑设备。用户对这台虚拟设备进行管理,来实现对虚拟设备中所有物理设备的管理。
目前虚拟化技术分为控制平面虚拟化与数据平面虚拟化两大方向。DCN推出的VSF技术是控制平面虚拟化的一种,顾名思义,就是将所有设备的控制平面合而为一,只有一个主体去处理整个虚拟交换机的协议处理、表项同步等工作。
更确切的说,VSF技术属于横向控制平面虚拟化技术,其将同一层次上的同类型交换机设备虚拟化为一台逻辑设备。
由VSF的Master主体完成对VSF系统的控制,而所有的成员设备可以对流量进行本地转发和处理。
VSF的配置步骤
◆ 1 、配置VSF成员的成员编号(必选)
vsf member <member-id>
◆ 2 、配置VSF成员优先级 (可选)
vsf priority <priority> 优先级默认为1
◆ 3、 配置VSF域 (可选)
vsf domain <domain-id> VSF域默认为1
◆ 4 、配置逻辑VSF口
(1)配置逻辑VSF口
vsf port-group <port-number>
(2)将物理口与逻辑口绑定
vsf port-group interface Ethernet <interface-list>
◆ 5 、设备由独立运行模式转换到VSF运行模式 或 设备由VSF运行模式转换到独立运行模式
switch convert mode ( stand-alone | vsf )
LACP MAD和BFD MAD
Lacp mad 和bfd mad的作用是为了防止VSF链路故障导致VSF分裂,网络中出现两个配置冲突的VSF,这个时候就需要启用MAD进行检测。
LACP MAD配置步骤
(1)创建聚合组
port-group <port-group id> 全局模式下
(2)将端口加入聚合组,至少有一方为active方式
interface ethernet <port-num>全局模式下
port-group <port-group id> mode <active | passive> 端口模式下
(3)配置快速检测(可选)
lacp timeout <long | short>端口模式下
(4)使能LACP MAD
vsf mad lacp <enable | disable> 聚合端口端口模式下
BFD MAD配置步骤
(1)创建用于BFD MAD的vlan
vlan <vlan-id>
(2)将用于进行BFD MAD的端口加入到相应vlan中
switchport interface ethernet <port-num> VLAN模式下配置
(3)为BFD MAD三层接口配置IP地址
Interface vlan <vlan-id>全局模式下配置
vsf mad ip address <ip-addr> <ip-mask> member <member-id> 接口模式下配置
(4) 使能BFD MAD功能
vsf mad bfd <enable | disable> 接口模式下配置
实验
VSF实验
说明:在独立运行模式下进行配置,令两台交换机形成VSF,两台设备分的VSF成员编号分别为1和2,为了让vsf member2成为vsf master,配置member 2的成员优先级为32,两台设备之间建立两个vsf port-group,每个vsf port-group绑定一个万兆端口。
组网图:
●(1)Switch1上的VSF配置:
switch1#config
switch1(config)#vsf member 1
switch1(config)#vsf port-group 1
switch1(config-vsf-port1)#vsf port-group interface ethernet 1/1
switch1(config)#vsf port-group 2
switch1(config-vsf-port1)#vsf port-group interface ethernet 1/2
switch1(config)#exit
switch1(config)#switch convert mode vsf
●(2)Switch2上的VSF配置:
switch2#config
switch1(config)#vsf member 2
switch1(config)#vsf priority 32
switch1(config)#vsf port-group 1
switch1(config-vsf-port1)#vsf port-group interface ethernet 2/1
switch1(config)#vsf port-group 2
switch1(config-vsf-port1)#vsf port-group interface ethernet 2/2
switch1(config)#exit
switch1(config)#switch convert mode vsf
LACP MAD实验
说明:VSF AM为主设备,VSF SM为备份,在Switch上面做lacp mad检测,假如两设备因链路故障导致VSF分裂,网络中出现两个配置冲突的VSF,而配置了该功能后就会把优先级低的设备上所有非保留的端口A-down。
组网图:
(1)LADP MAD配置步骤:
■ VSF设备AM配置信息:
switch convert mode vsf
vsf domain 32
vsf member 1
vsf port-group 1
vsf port-group Interface Ethernet1/0/26
port-group 1
Interface Ethernet1/0/1
switchport mode trunk
port-group 1 mode active
Interface Ethernet16/0/8
switchport mode trunk
port-group 1 mode active
Interface Port-Channel1
vsf mad lacp enable
■ VSF设备SM配置信息:
switch convert mode vsf
vsf domain 32
vsf member 16
vsf port-group 1
vsf port-group Interface Ethernet1/0/26
(2)中间设备配置信息:
port-group 1
Interface Ethernet1/0/1
switchport mode trunk
port-group 1 mode active
Interface Ethernet1/0/8
switchport mode trunk
port-group 1 mode active
◆【测试步骤】
1、在AM上查看VSF设备mad 配置信息:
S5750E-28P-SI#show mad config
Current lacp MAD status: Detecting
Current bfd MAD status: Disable
Reserved ports:
Reserved ports(defaults):
interface Ethernet1/0/26
MAD lacp enabled aggregation port:
Port-Channel1
在AM上查看VSF设备的lacp链路状态:
S5750E-28P-SI(config-if-port-channel1)#show port-group 1 detail
Flags: A -- LACP_Activity, B -- LACP_timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
Port-group number: 1, Mode: active, Load-balance: src-mac
Port-group detail information:
System ID: 0x8000,d8-e0-b8-00-00-63
Local:
Port Status Priority Oper-Key Flag
-----------------------------------------------------------
Ethernet1/0/1 Selected 32768 1 {ACDEF}
Ethernet16/0/8 Selected 32768 1 {ACDEF}
Remote:
Actor Partner Priority Oper-Key SystemID Flag
--------------------------------------------------------------------------------
Ethernet1/0/1 1 32768 1 0x8000,00-03-0f-63-c0-67 {ACDEF}
Ethernet16/0/8 8 32768 1 0x8000,00-03-0f-63-c0-67 {ACDEF}
2、在VSF AM设备上shutdown 堆叠口1/0/26 ,使堆叠分裂,打印member16 pull out
S5750E-28P-SI(config)#int e 1/0/26
S5750E-28P-SI(config-if-ethernet1/0/26)#shutdown
S5750E-28P-SI(config-if-ethernet1/0/26)#%Jan 01 00:33:46 2006 %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet1/0/26, changed state to DOWN
%Jan 01 00:33:46 2006 %LINK-5-CHANGED: Interface Ethernet1/0/26, changed state to administratively DOWN
%Jan 01 00:33:46 2006 %LINEPROTO-5-UPDOWN: Line protocol on Interface Vsf-Port1, changed state to DOWN
interrupt: member 16, slot 1 PULL OUT.
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/1, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/2, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/3, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/4, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/5, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/6, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/7, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/8, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/9, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/10, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/11, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/12, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/13, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/14, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/15, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/16, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/17, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/18, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/19, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/20, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/21, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/22, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/23, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/24, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/25, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/26, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/27, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet16/0/28, changed state to DESTROYED
3、堆叠原SM 设备上打印:
Slot member 16, slot 1 become active master!
Loading startup-config ...
web server is on
Set the port Ethernet16/0/8 mode Trunk successfully
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/1, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/2, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/3, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/4, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/5, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/6, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/7, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/8, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/9, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/10, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/11, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/12, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/13, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/14, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/15, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/16, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/17, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/18, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/19, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/20, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/21, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/22, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/23, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/24, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/25, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/26, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/27, changed state to DESTROYED
%Jan 01 00:33:51 2006 %LINK-3-DESTROY: Interface Ethernet1/0/28, changed state to DESTROYED
4、之后等待一段时间,检测到mad冲突后,堆叠原SM设备上打印信息如下:
由于SM 的优先级 小于 AM 的优先级,查看SM 上所有非保留端口都被A-down 了:
S5750E-28P-SI>%Jan 01 00:34:23 2006 LACP MAD: find acitve conflict! local mad priority 1074004080,local lacp mad priority1074004080, local active id: 16, other mad priority 1074004095,other active id: 1
%Jan 01 00:34:23 2006 %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet16/0/8, changed state to DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/8, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/1, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/2, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/3, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/4, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/5, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/6, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/7, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/9, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/10, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/11, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/12, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/13, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/14, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/15, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/16, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/17, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/18, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/19, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/20, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/21, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/22, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/23, changed state to administratively DOWN
%Jan 01 00:34:23 2006 %LINK-5-CHANGED: Interface Ethernet16/0/24, changed state to administratively DOWN
%Jan 01 00:34:24 2006 %LINK-5-CHANGED: Interface Ethernet16/0/25, changed state to administratively DOWN
%Jan 01 00:34:24 2006 %LINK-5-CHANGED: Interface Ethernet16/0/27, changed state to administratively DOWN
%Jan 01 00:34:24 2006 %LINK-5-CHANGED: Interface Ethernet16/0/28, changed state to administratively DOWN
%Jan 01 00:34:24 2006 %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-Channel1, changed state to DOWN
%Jan 01 00:34:24 2006 %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1,changed state to DOWN
S5750E-28P-SI#show mad config
Current lacp MAD status: Recovery
Current bfd MAD status: Disable
Reserved ports:
Reserved ports(defaults):
interface Ethernet16/0/26
MAD lacp enabled aggregation port:
Port-Channel1
S5750E-28P-SI#
S5750E-28P-SI#show int e s
Codes: A-Down - administratively down, a - auto, f - force, G - Gigabit
Interface Link/Protocol Speed Duplex Vlan Type Alias Name
16/0/1 A-DOWN/DOWN auto auto 1 G-TX
16/0/2 A-DOWN/DOWN auto auto 1 G-TX
16/0/3 A-DOWN/DOWN auto auto 1 G-TX
16/0/4 A-DOWN/DOWN auto auto 1 G-TX
16/0/5 A-DOWN/DOWN auto auto 1 G-TX
16/0/6 A-DOWN/DOWN auto auto 1 G-TX
16/0/7 A-DOWN/DOWN auto auto 1 G-TX
16/0/8 A-DOWN/DOWN auto auto trunk G-TX
16/0/9 A-DOWN/DOWN auto auto 1 G-TX
16/0/10 A-DOWN/DOWN auto auto 1 G-TX
16/0/11 A-DOWN/DOWN auto auto 1 G-TX
16/0/12 A-DOWN/DOWN auto auto 1 G-TX
16/0/13 A-DOWN/DOWN auto auto 1 G-TX
16/0/14 A-DOWN/DOWN auto auto 1 G-TX
16/0/15 A-DOWN/DOWN auto auto 1 G-TX
16/0/16 A-DOWN/DOWN auto auto 1 G-TX
16/0/17 A-DOWN/DOWN auto auto 1 G-TX
16/0/18 A-DOWN/DOWN auto auto 1 G-TX
16/0/19 A-DOWN/DOWN auto auto 1 G-TX
16/0/20 A-DOWN/DOWN auto auto 1 G-TX
16/0/21 A-DOWN/DOWN auto auto 1 G-TX
16/0/22 A-DOWN/DOWN auto auto 1 G-TX
16/0/23 A-DOWN/DOWN auto auto 1 G-TX
16/0/24 A-DOWN/DOWN auto auto 1 G-TX
16/0/25 A-DOWN/DOWN auto auto 1 SFP
16/0/26 DOWN/DOWN auto auto 1 SFP
16/0/27 A-DOWN/DOWN auto auto 1 SFP
16/0/28 A-DOWN/DOWN auto auto 1 SFP
BFD MAD实验
说明:如下图所示,假设用于bfd mad检测的端口为ethernet1/1/1,ethernet2/1/1,vlan为3000。Mad ip地址的配置以192.168.1.1网段为例。
组网图:
BFD MAD配置步骤:
switch的BFD MAD配置如下:
Switch(config)#vlan 3000
Switch(config-vlan3000)#interface ethernet 1/1/1
Switch(config-if-ethernet1/1/1)#switchport access vlan 3000
Switch(config-if-ethernet1/1/1)#interface ethernet 2/1/1
Switch(config-if-ethernet2/1/1)#switchport access vlan 3000
Switch(config-if-ethernet2/1/1)#interface vlan 3000
Switch(config-if-vlan3000)#vsf mad bfd enable
Switch(config-if-vlan3000)#vsf mad ip add 192.168.1.1 255.255.255.0 member 2
Switch(config-if-vlan3000)#vsf mad ip add 192.168.1.2 255.255.255.0 member 1
注意:此时整个vsf是一台设备,所以BFD MAD配置相当于只在一台设备上进行。
关注微信公众号:安徽思恒信息科技有限公司,了解更多技术内容……