Aruba Multi-Layer DRNI+Dual-Active VLAN Gateway+OSPF Configuration Guide

Multi-Layer DRNI+Dual-Active VLAN Gateway+OSPF
Aruba
Brand
Aruba
Model
Multi-Layer DRNI+Dual-Active VLAN Gateway+OSPF
Category
Networking
Type
Configuration Guide
i
Contents
Example: Configuring multi-layer DRNI+dual-active VLAN gateway+OSPF ·· 1
Network configuration ········································································································································ 1
Applicable product matrix ··································································································································· 3
Analysis ······························································································································································ 3
Configuring the DR systems ······························································································································ 4
Procedure summary ··································································································································· 4
Configuring DRNI ······································································································································· 4
Configuring the dual-active gateways ······································································································ 11
Configuring OSPF between DR member devices ···················································································· 15
Configuring the uplink device ··························································································································· 18
Traffic forwarding models ································································································································· 18
Underlay traffic characteristics ················································································································· 18
Forwarding models ··································································································································· 19
Testing network convergence upon single points of failure ············································································· 19
Verifying the configuration································································································································ 20
Verifying the status of the DR system ······································································································ 20
Verifying the routing protocols·················································································································· 22
Upgrading the devices ····································································································································· 23
Checking the environment ······················································································································· 23
Upgrading the devices ····························································································································· 24
Verifying the traffic interruption time during the upgrade ········································································· 24
Verifying the upgrade result ····················································································································· 24
Expanding the network····································································································································· 24
Checking the environment ······················································································································· 25
Expanding the network ····························································································································· 25
Verifying the traffic interruption time········································································································· 25
Verifying the expansion result ·················································································································· 25
Replacing hardware ········································································································································· 25
Replacing a service module ····················································································································· 25
Replacing a switching fabric module ········································································································ 26
Replace a device ······································································································································ 26
1
Example: Configuring multi-layer
DRNI+dual-active VLAN gateway+OSPF
Network configuration
As shown in Figure 1, the user network uses a three-layer architecture: core-aggregation-access. To
improve network availability, deploy two devices separately on the core layer, aggregation layer, and
access layer. Two devices on each layer form a DR system.
•
Device A and Device B form DR system 1, which acts as the access device and connects to
VM.
•
Device C and Device D form DR system 2, which acts as an aggregation device.
•
Device E and Device F form DR system 3, which acts as the core device and connects to
Server.
To meet the network access requirements of VM and Server, make sure the DR member devices on
the aggregation layer act as both the IPv4 gateway and IPv6 gateway of VM and the DR member
devices on the core layer act as both the IPv4 gateway and IPv6 gateway of Server. Run OSPF
between the DR member devices on the aggregation layer and DR member devices on the core
layer to ensure that they can reach each other at Layer 3.
2
Figure 1 Network diagram
Device
Interface
IP address
Peer device and interface
Device A XGE1/0/24 IPv4: 220.1.1.1/24 Device B: XGE2/0/24
Device B XGE2/0/24 IPv4: 220.1.1.2/24 Device A: XGE1/0/24
Device C
WGE1/0/11 IPv4: 220.1.1.3/24 Device D: WGE2/0/11
Vlan-int10 IPv4: 10.1.1.1/24
IPv6: 10:1::1/64 N/A
Vlan-int20 IPv4: 20.1.1.1/24
IPv6: 20:1::1/64 Device E: Vlan-int20
Device F: Vlan-int20
Device D WGE2/0/11 IPv4: 220.1.1.4/24 Device C: WGE1/0/11
Device E Device F
Device C Device D
Device A
HGE1/0/30
VLAN 10
HGE2/0/31
VLAN 10
HGE1/0/6
HGE2/0/6
HGE1/0/25
VLAN 10
HGE1/0/26
VLAN 10
HGE1/0/31
VLAN 10
HGE2/0/28
HGE2/0/4HGE1/0/4
HGE1/0/26
HGE1/1/8
HGE1/0/29
HGE2/0/29
WGE1/0/11
WGE2/0/11
Keepalive
DR 2
DeviceB
HGE2/0/25
VLAN 10
HGE2/0/26
VLAN 10
HGE2/0/30
VLAN 10
XGE1/4/5
XGE2/4/5
Keepalive
HGE1/0/27
VLAN 10
HGE2/0/27
VLAN 10
XGE1/0/24
XGE2/0/24
HGE1/0/28 HGE2/0/28
DR 2
HGE1/0/28
HGE2/0/26
HGE2/1/8
BAGG1
DR system 3
DR system 2
Keepalive
DR system 1
BAGG1
BAGG1
DR 3
HGE1/0/5
HGE2/0/5
DR 3
Device G
HGE2/0/64
HGE2/0/1
HGE2/0/2
IPL
IPL
IPL
Server
V
M
Access
layer
Aggregation
layer
Core layer
DRNI access of VM
3
Device
Interface
IP address
Peer device and interface
Vlan-int10 IPv4: 10.1.1.1/24
IPv6: 10:1::1/64 N/A
Vlan-int20 IPv4: 20.1.1.1/24
IPv6: 20:1::1/64 Device E: Vlan-int20
Device F: Vlan-int20
Device E
XGE1/4/5 IPv4: 220.1.1.5/24 Device F: XGE2/4/5
Vlan-int20 IPv4: 20.1.1.2/24
IPv6: 20:1::2/64 Device C: Vlan-int20
Device D: Vlan-int20
Vlan-int30 IPv4: 30.1.1.1/24
IPv6: 30:1::1/64 Device G: Vlan-int30
Device F
XGE2/4/5 IPv4: 220.1.1.6/24 Device E: XGE1/4/5
Vlan-int20 IPv4: 20.1.1.2/24
IPv6: 20:1::2/64
Device C: Vlan-int20
Device D: Vlan-int20
Vlan-int30 IPv4: 30.1.1.1/24
IPv6: 30:1::1/64 Device G: Vlan-int30
Applicable product matrix
IMPORTANT:
In addition to running an applicable software version, you must also install the most recent patch, if
any.
Device
HPE FlexFabric 5944 & 5945 Switch Series R6710
HPE FlexFabric 5940 Switch Series R6710
HPE FlexFabric 5710 Switch Series R6710
HPE FlexFabric 12900E Switch Series (Type K) R5210
HPE FlexFabric 12900E Switch Series (Type X) Under verification. To obtain the latest images,
contact Technical Support.
Analysis
Device A and Device B are on the access layer. Device C and Device D are on the aggregation layer.
Device E and Device F are on the core layer.
On Device C and Device D, configure an IPv4 address and an IPv6 address for VLAN-interface 10,
which will act as the IPv4 gateway address and IPv6 gateway address of VM, respectively. Configure
an IPv4 address and an IPv6 address for VLAN-interface 20, which will act as the interconnect
interface to devices on the core layer.
On Device E and Device F, configure an IPv4 address and an IPv6 address for VLAN-interface 30,
which will act as the IPv4 gateway address and IPv6 gateway address of Server, respectively.
Configure an IPv4 address and an IPv6 address for VLAN-interface 20, which will act as the
interconnect interface to devices on the aggregation layer.
4
On Device C, Device D, Device E, and Device F, assign a DRNI virtual IP address to VLAN-interface
20, and enable OSPF to use the secondary IP addresses of interfaces to establish neighbor
relationships. On Device C and Device D, enable OSPF and OSPFv3 on VLAN-interface 10 and
VLAN-interface 20. On Device E and Device F, enable OSPF and OSPFv3 on VLAN-interface 20
and VLAN-interface 30. Configure Device C to use the DRNI virtual IP address of VLAN-interface 20
to establish OSPF/OSPFv3 neighbor relationships with Device D, Device E, and Device F. Configure
Device D, Device E, and Device F in the same way. Each device uses the DRNI virtual IP address to
establish OSPF/OSPFv3 neighbor relationships with the other three devices.
Configuring the DR systems
Procedure summary
•
Configuring DRNI
•
Configuring the dual-active gateways
•
Configuring OSPF between DR member devices
Configuring DRNI
Configuring Device A and Device B
Device A
Device B
Description
Remarks
drni system-mac 2-2-2 drni system-mac 2-2-2 Configure the DR
system MAC address.
You must configure
the same DR
system MAC
address for devices
in the same DR
system.
drni system-number 1 drni system-number 2 Set the DR system
number.
You must set
different DR system
numbers for
devices in the same
DR system.
drni system-priority 123 drni system-priority 123 Set the DR system
priority.
You must set the
same DR system
priority for devices
in the same DR
system.
drni standalone enable drni standalone enable Enable DRNI
standalone mode. N/A
drni keepalive ip destination
220.1.1.2 source 220.1.1.1 drni keepalive ip destination
220.1.1.1 source 220.1.1.2
Configure the
destination and
source IP addresses
of keepalive packets.
N/A
interface
Ten-GigabitEthernet 1/0/24 interface
Ten-GigabitEthernet 2/0/24 Enter the interface
view for the keepalive
link.
N/A
port link-mode route port link-mode route
Configure the
interface for the
keepalive link to
operate in route mode
as a Layer 3 interface.
N/A
ip address 220.1.1.1 24 ip address 220.1.1.2 24
Assign an IP address
N/A
5
Device A
Device B
Description
Remarks
to the interface for the
keepalive link.
quit quit Return to system
view. N/A
drni mad exclude interface
Ten-GigabitEthernet 1/0/24 drni mad exclude interface
Ten-GigabitEthernet 2/0/24
Exclude the interface
used for DR keepalive
detection from the
shutdown action by
DRNI MAD.
N/A
interface bridge-aggregation
1 interface bridge-aggregation
1
Create the aggregate
interface to be used
as the IPP and enter
interface view.
N/A
quit quit Return to system
view. N/A
Interface HundredGigE
1/0/28 interface HundredGigE
2/0/28 Enter the view of the
IPP. N/A
port link-aggregation group
1 port link-aggregation group
1
Assign the IPP to the
aggregation group for
the IPL.
N/A
quit quit Return to system
view. N/A
interface bridge-aggregation
1 interface bridge-aggregation
1
Enter the view of the
aggregation group for
the IPL.
N/A
undo mac-address static
source-check enable undo mac-address static
source-check enable Disable source MAC
check on an interface. N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the IPL
aggregate interface to
operate in dynamic
mode.
N/A
port drni intra-portal-port 1 port drni intra-portal-port 1
Specify the aggregate
interface
(Bridge-Aggregation
1) as the IPP.
N/A
quit quit Return to system
view. N/A
interface bridge-aggregation
2 interface bridge-aggregation
2
Create an aggregate
interface connecting
to VM.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the
aggregate interface
connecting to VM to
operate in dynamic
mode.
N/A
port drni group 2 port drni group 2
Assign the aggregate
interface
(Bridge-Aggregation
2) to DR group 2.
N/A
quit quit Return to system
view. N/A
6
Device A
Device B
Description
Remarks
interface bridge-aggregation
3 interface bridge-aggregation
3
Create an aggregate
interface connecting
to Device C and
Device D.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the
aggregate interface
connecting to Device
C and Device D to
operate in dynamic
mode.
N/A
port drni group 3 port drni group 3
Assign the aggregate
interface
(Bridge-Aggregation
3) to DR group 3.
N/A
quit quit Return to system
view. N/A
interface HundredGigE
1/0/27 interface HundredGigE
2/0/27
Enter the view of the
physical interfaces
connecting the DR
system to VM.
N/A
port link-aggregation group
2 port link-aggregation group
2 Assign the interfaces
to a DR group. N/A
quit quit Return to system
view. N/A
interface range
HundredGigE 1/0/25
HundredGigE 1/0/26
interface range
HundredGigE 2/0/25
HundredGigE 2/0/26
Enter the view of the
physical interfaces
connecting the DR
system to Device C
and Device D.
N/A
port link-aggregation group
3 port link-aggregation group
3 Assign the interfaces
to a DR group. N/A
quit quit Return to system
view. N/A
link-aggregation global
load-sharing algorithm 7 link-aggregation global
load-sharing algorithm 7
Configure a link
aggregation load
sharing algorithm.
To identify whether
traffic is
load-shared among
aggregation
member ports, use
the display
counters
command to view
the traffic on each
aggregation group
member port. If
traffic is not well
load-shared, you
can use this
command to specify
a proper link
aggregation load
sharing algorithm.
7
Configuring Device C and Device D
Device C
Device D
Description
Remarks
drni system-mac 1-1-1 drni system-mac 1-1-1 Configure the DR
system MAC address.
You must configure
the same DR system
MAC address for
devices in the same
DR system.
drni system-number 1 drni system-number 2 Set the DR system
number.
You must set
different DR system
numbers for devices
in the same DR
system.
drni system-priority 124 drni system-priority 124 Set the DR system
priority.
You must set the
same DR system
priority for devices in
the same DR
system.
drni standalone enable drni standalone enable Enable DRNI
standalone mode. N/A
drni keepalive ip
destination 220.1.1.4
source 220.1.1.3
drni keepalive ip
destination 220.1.1.3
source 220.1.1.4
Configure the
destination and source
IP addresses of
keepalive packets.
N/A
interface Twenty-FiveGigE
1/0/11 interface Twenty-FiveGigE
2/0/11 Enter the interface view
for the keepalive link. N/A
port link-mode route port link-mode route
Configure the interface
for the keepalive link to
operate in route mode
as a Layer 3 interface.
N/A
ip address 220.1.1.3 24 ip address 220.1.1.4 24 Assign an IP address to
the interface for the
keepalive link.
N/A
quit quit Return to system view. N/A
drni mad exclude interface
Twenty-FiveGigE 1/0/11 drni mad exclude interface
Twenty-FiveGigE 2/0/11
Exclude the interface
used for DR keepalive
detection from the
shutdown action by
DRNI MAD.
N/A
interface
bridge-aggregation 1 interface
bridge-aggregation 1
Create the aggregate
interface to be used as
the IPP and enter
interface view.
N/A
quit quit Return to system view. N/A
interface HundredGigE
1/0/26 interface HundredGigE
2/0/26 Enter the view of the
IPP. N/A
port link-aggregation
group 1 port link-aggregation
group 1 Assign the IPP to the
aggregation group for
the IPL.
N/A
quit quit Return to system view. N/A
interface
bridge-aggregation 1 interface
bridge-aggregation 1
Enter the view of the
aggregation group for
the IPL.
N/A
8
Device C
Device D
Description
Remarks
undo mac-address static
source-check enable undo mac-address static
source-check enable Disable source MAC
check on an interface. N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the aggregate
interface to operate in
dynamic mode.
N/A
port drni intra-portal-port 1 port drni intra-portal-port 1
Specify the aggregate
interface
(Bridge-Aggregation 1)
as the IPP.
N/A
quit quit Return to system view. N/A
interface
bridge-aggregation 2 interface
bridge-aggregation 2 Create an aggregate
interface connecting to
Device E and Device F.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the aggregate
interface connecting to
Device E and Device F
to operate in dynamic
mode.
N/A
port drni group 2 port drni group 2
Assign the aggregate
interface
(Bridge-Aggregation 2)
to DR group 2.
N/A
quit quit Return to system view. N/A
interface
bridge-aggregation 3 interface
bridge-aggregation 3 Create an aggregate
interface connecting to
Device A and Device B.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the aggregate
interface connecting to
Device A and Device B
to operate in dynamic
mode.
N/A
port drni group 3 port drni group 3
Assign the aggregate
interface
(Bridge-Aggregation 3)
to DR group 3.
N/A
quit quit Return to system view. N/A
interface range
HundredGigE 1/0/28
HundredGigE 1/0/29
interface range
HundredGigE 2/0/28
HundredGigE 2/0/29
Enter the view of the
physical interfaces
connecting the DR
system to Device E and
Device F.
N/A
port link-aggregation
group 2 port link-aggregation
group 2 Assign the interfaces to
a DR group. N/A
quit quit Return to system view. N/A
interface range
HundredGigE 1/0/30
HundredGigE 1/0/31
interface range
HundredGigE 2/0/30
HundredGigE 2/0/31
Enter the view of the
physical interfaces
connecting the DR
system to Device A and
Device B.
N/A
port link-aggregation
group 3 port link-aggregation
group 3 Assign the interfaces to
a DR group. N/A
9
Device C
Device D
Description
Remarks
quit quit Return to system view. N/A
link-aggregation global
load-sharing algorithm 7 link-aggregation global
load-sharing algorithm 7
Configure a link
aggregation load
sharing algorithm.
To identify whether
traffic is load-shared
among aggregation
member ports, use
the display
counters
command to view the
traffic on each
aggregation group
member port. If traffic
is not well
load-shared, you can
use this command to
specify a proper link
aggregation load
sharing algorithm.
Configuring Device E and Device F
Device E
Device F
Description
Remarks
drni system-mac 1-2-3 drni system-mac 1-2-3 Configure the DR system
MAC address.
You must
configure the
same DR system
MAC address for
devices in the
same DR system.
drni system-number 1 drni system-number 2 Set the DR system
number.
You must set
different DR
system numbers
for devices in the
same DR system.
drni system-priority 122 drni system-priority 122 Set the DR system priority.
You must set the
same DR system
priority for devices
in the same DR
system.
drni standalone enable drni standalone enable Enable DRNI standalone
mode. N/A
drni keepalive ip destination
220.1.1.6 source 220.1.1.5
drni keepalive ip
destination 220.1.1.5
source 220.1.1.6
Configure the destination
and source IP addresses
of keepalive packets.
N/A
interface
Ten-GigabitEthernet 1/4/5 interface
Ten-GigabitEthernet 2/4/5 Enter the interface view for
the keepalive link. N/A
port link-mode route port link-mode route
Configure the interface for
the keepalive link to
operate in route mode as a
Layer 3 interface.
N/A
ip address 220.1.1.5 24 ip address 220.1.1.6 24 Assign an IP address to
the interface for the
keepalive link.
N/A
quit quit Return to system view. N/A
drni mad exclude interface
Ten-GigabitEthernet 1/4/5 drni mad exclude interface
Ten-GigabitEthernet 2/4/5 Exclude the interface used
for DR keepalive detection
N/A
10
Device E
Device F
Description
Remarks
from the shutdown action
by DRNI MAD.
interface
bridge-aggregation 1 interface
bridge-aggregation 1
Create the aggregate
interface to be used as the
IPP and enter interface
view.
N/A
quit quit Return to system view. N/A
interface HundredGigE
1/1/8 interface HundredGigE
2/1/8 Enter the view of the IPP. N/A
port link-aggregation group
1 port link-aggregation
group 1
Assign the IPP to the
aggregation group for the
IPL.
N/A
quit quit Return to system view. N/A
interface
bridge-aggregation 1 interface
bridge-aggregation 1
Enter the view of the
aggregation group for the
IPL.
N/A
undo mac-address static
source-check enable undo mac-address static
source-check enable Disable source MAC
check on an interface. N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the aggregate
interface to operate in
dynamic mode.
N/A
port drni intra-portal-port 1 port drni intra-portal-port 1
Specify the aggregate
interface
(Bridge-Aggregation 1) as
the IPL.
N/A
quit quit Return to system view. N/A
interface
bridge-aggregation 2 interface
bridge-aggregation 2 Create an aggregate
interface connecting to
Device C and Device D.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the aggregate
interface connecting to
Device C and Device D to
operate in dynamic mode.
N/A
port drni group 2 port drni group 2
Assign the aggregate
interface
(Bridge-Aggregation 2) to
DR group 2.
N/A
quit quit Return to system view. N/A
interface
bridge-aggregation 3 interface
bridge-aggregation 3 Create an aggregate
interface connecting to
Device G.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the aggregate
interface connecting to
Device G to operate in
dynamic mode.
N/A
port drni group 3 port drni group 3
Assign the aggregate
interface
(Bridge-Aggregation 3) to
DR group 3.
N/A
quit quit Return to system view. N/A
11
Device E
Device F
Description
Remarks
interface range
HundredGigE 1/0/4
HundredGigE 1/0/5
interface range
HundredGigE 2/0/4
HundredGigE 2/0/5
Enter the view of the
physical interfaces
connecting the DR system
to Device C and Device D.
N/A
port link-aggregation group
2 port link-aggregation
group 2 Assign the interfaces to a
DR group. N/A
quit quit Return to system view. N/A
interface
HundredGigE1/0/6 interface
HundredGigE2/0/6
Enter the view of the
physical interface
connecting the DR system
to Device G.
N/A
port link-aggregation group
3 port link-aggregation
group 3 Assign the interfaces to a
DR group. N/A
quit quit Return to system view. N/A
link-aggregation global
load-sharing algorithm 7 link-aggregation global
load-sharing algorithm 7 Configure a link
aggregation load sharing
algorithm.
To identify
whether traffic is
load-shared
among
aggregation
member ports,
use the
display
counters
command to view
the traffic on each
aggregation group
member port. If
traffic is not well
load-shared, you
can use this
command to
specify a proper
link aggregation
load sharing
algorithm.
Configuring the dual-active gateways
Configuring Device A and Device B
Device A
Device B
Description
Remarks
vlan 10 vlan 10 Create VLAN 10. N/A
interface
bridge-aggregation 2 interface
bridge-aggregation 2
Enter the view of the
aggregate interface
connecting to VM.
N/A
port link-type trunk port link-type trunk Set the link type of the
Layer 2 aggregate
interface to trunk.
N/A
port trunk permit vlan 10 port trunk permit vlan 10 Assign the interface to
VLAN 10. N/A
undo port trunk permit
vlan 1 undo port trunk permit
vlan 1 Remove the interface
from VLAN 1. N/A
12
Device A
Device B
Description
Remarks
port lacp system-priority
101 port lacp system-priority
100 Set the LACP priority.
Set different LACP
priorities for different
DR member devices,
so that only member
ports with a higher
priority are selected
upon brain split.
quit quit Return to system view. N/A
interface
bridge-aggregation 3 interface
bridge-aggregation 3
Enter the view of the
aggregate interface
connecting to Device C
and Device D.
N/A
port link-type trunk port link-type trunk
Set the link type of the
Layer 2 aggregate
interface
(Bridge-Aggregation 3) to
trunk.
N/A
port trunk permit vlan 10 port trunk permit vlan 10 Assign the interface to
VLAN 10. N/A
undo port trunk permit
vlan 1 undo port trunk permit
vlan 1 Remove the interface
from VLAN 1. N/A
port lacp system-priority
101 port lacp system-priority
100 Set the LACP priority.
Set different LACP
priorities for different
DR member devices,
so that only member
ports with a higher
priority are selected
upon brain split.
Configuring Device C and Device D
Device C
Device D
Description
Remarks
vlan 10 20 vlan 10 20 Create VLANs 10 and 20. N/A
interface
bridge-aggregation 2 interface
bridge-aggregation 2
Enter the view of the
aggregate interface
connecting to Device E and
Device F.
N/A
port link-type trunk port link-type trunk
Set the link type of the Layer
2 aggregate interface
(Bridge-Aggregation 2) to
trunk.
N/A
port trunk permit vlan 20 port trunk permit vlan 20 Assign the interface to
VLAN 20. N/A
undo port trunk permit
vlan 1 undo port trunk permit
vlan 1 Remove the interface from
VLAN 1. N/A
port lacp system-priority
101 port lacp system-priority
100 Set the LACP priority.
Set different LACP
priorities for
different DR
member devices, so
that only member
ports with a higher
priority are selected
upon brain split.
13
Device C
Device D
Description
Remarks
quit quit Return to system view. N/A
interface
bridge-aggregation 3 interface
bridge-aggregation 3
Enter the view of the
aggregate interface
connecting to Device A and
Device B.
N/A
port link-type trunk port link-type trunk Set the link type of the Layer
2 aggregate interface to
trunk.
N/A
port trunk permit vlan 10 port trunk permit vlan 10 Assign the interface to
VLAN 10. N/A
undo port trunk permit
vlan 1 undo port trunk permit
vlan 1 Remove the interface from
VLAN 1. N/A
port lacp system-priority
101 port lacp system-priority
100 Set the LACP priority.
Set different LACP
priorities for
different DR
member devices, so
that only member
ports with a higher
priority are selected
upon brain split.
quit quit Return to system view. N/A
interface vlan-interface
10 interface vlan-interface
10 Create VLAN-interface 10. N/A
ip address 10.1.1.1
255.255.255.0 ip address 10.1.1.1
255.255.255.0
Assign an IPv4 address to
VLAN-interface 10, which is
to act as an IPv4 dual-active
gateway.
N/A
mac-address
0010-0010-0010 mac-address
0010-0010-0010 Assign a MAC address to
VLAN-interface 10. N/A
ipv6 address 10:1::1 64 ipv6 address 10:1::1 64
Assign an IPv6 address to
VLAN-interface 10, which is
to act as an IPv6 dual-active
gateway.
N/A
quit quit Return to system view. N/A
drni mad exclude
interface
Vlan-interface10
drni mad exclude
interface
Vlan-interface10
Exclude VLAN-interface 10
from the shutdown action by
DRNI MAD.
N/A
interface vlan-interface
20 interface vlan-interface
20 Create VLAN-interface 20. N/A
ip address 20.1.1.1
255.255.255.0 ip address 20.1.1.1
255.255.255.0 Assign an IPv4 address to
VLAN-interface 20.
The address is the
address of the
interface connecting
to core devices.
mac-address
0020-0020-0020 mac-address
0020-0020-0020 Assign a MAC address to
VLAN-interface 20. N/A
ipv6 address 20:1::1 64 ipv6 address 20:1::1 64 Assign an IPv6 address to
VLAN-interface 20.
The address is the
address of the
interface connecting
to core devices.
quit quit Return to system view. N/A
14
Device C
Device D
Description
Remarks
drni mad exclude
interface
Vlan-interface20
drni mad exclude
interface
Vlan-interface20
Exclude VLAN-interface 20
from the shutdown action by
DRNI MAD.
N/A
Configuring Device E and Device F
Device E
Device F
Description
Remarks
vlan 20 30 vlan 20 30 Create VLANs 20 and 30. N/A
interface
bridge-aggregation 2 interface
bridge-aggregation 2
Enter the view of the
aggregate interface
connecting to Device C and
Device D.
N/A
port link-type trunk port link-type trunk Set the link type of the Layer
2 aggregate interface to
trunk.
N/A
port trunk permit vlan 20 port trunk permit vlan 20 Assign the interface to
VLAN 20. N/A
undo port trunk permit
vlan 1 undo port trunk permit
vlan 1 Remove the interface from
VLAN 1. N/A
port lacp system-priority
101 port lacp system-priority
100 Set the LACP priority.
Set different LACP
priorities for different
DR member
devices, so that only
member ports with a
higher priority are
selected upon brain
split.
quit quit Return to system view. N/A
interface
bridge-aggregation 3 interface
bridge-aggregation 3
Enter the view of the
aggregate interface
connecting to Device G.
N/A
port link-type trunk port link-type trunk
Set the link type of the Layer
2 aggregate interface
(Bridge-Aggregation 3) to
trunk.
N/A
port trunk permit vlan 30 port trunk permit vlan 30 Assign the interface to
VLAN 30. N/A
undo port trunk permit
vlan 1 undo port trunk permit
vlan 1 Remove the interface from
VLAN 1. N/A
port lacp system-priority
101 port lacp system-priority
100 Set the LACP priority.
Set different LACP
priorities for different
DR member
devices, so that only
member ports with a
higher priority are
selected upon brain
split.
quit quit Return to system view. N/A
interface vlan-interface
30 interface vlan-interface
30 Create VLAN-interface 30. N/A
ip address 30.1.1.1
ip address 30.1.1.1
Assign an IPv4 address to
The address acts as
15
Device E
Device F
Description
Remarks
255.255.255.0
255.255.255.0
VLAN-interface 30.
the IPv4 dual-active
gateway.
mac-address
0030-0030-0030 mac-address
0030-0030-0030 Assign a MAC address to
VLAN-interface 30. N/A
ipv6 address 30:1::1 64 ipv6 address 30:1::1 64 Assign an IPv6 address to
VLAN-interface 30.
The address acts as
the IPv6 dual-active
gateway.
quit quit Return to system view. N/A
drni mad exclude
interface
Vlan-interface30
drni mad exclude
interface
Vlan-interface30
Exclude VLAN-interface 30
from the shutdown action by
DRNI MAD.
N/A
interface vlan-interface
20 interface vlan-interface
20 Create VLAN-interface 20. N/A
ip address 20.1.1.2
255.255.255.0 ip address 20.1.1.2
255.255.255.0 Assign an IPv4 address to
VLAN-interface 20.
The address is the
address of the
interface connecting
to aggregation
devices.
mac-address
0020-0020-0021 mac-address
0020-0020-0021 Assign a MAC address to
VLAN-interface 20. N/A
ipv6 address 20:1::2 64 ipv6 address 20:1::2 64 Assign an IPv6 address to
VLAN-interface 20.
The address is the
address of the
interface connecting
to aggregation
devices.
quit quit Return to system view. N/A
drni mad exclude
interface
Vlan-interface20
drni mad exclude
interface
Vlan-interface20
Exclude VLAN-interface 20
from the shutdown action by
DRNI MAD.
N/A
Configuring OSPF between DR member devices
Configuring Device C and Device D
Device C
Device D
Description
Remarks
router id 3.3.3.3 router id 4.4.4.4 Configure a router ID. N/A
ospf 1 ospf 1 Configure an OSPF
process. N/A
area 0 area 0 Configure an OSPF area. N/A
quit quit Return to system view. N/A
interface vlan-interface
10 interface vlan-interface
10 Enter VLAN interface
view. N/A
ospf 1 area 0.0.0.0 ospf 1 area 0.0.0.0 Enable OSPF on an
interface. N/A
quit quit Return to system view. N/A
interface vlan-interface
20 interface vlan-interface
20 Enter VLAN interface
view. N/A
16
Device C
Device D
Description
Remarks
ospf 1 area 0.0.0.0 ospf 1 area 0.0.0.0 Enable OSPF on an
interface. N/A
quit quit Return to system view. N/A
ospfv3 1 ospfv3 1 Configure an OSPFv3
process. N/A
router-id 3.3.3.3 router-id 4.4.4.4 Configure a router ID. N/A
area 0 area 0 Configure an OSFPv3
area. N/A
quit quit Return to system view. N/A
interface vlan-interface
10 interface vlan-interface
10 Enter VLAN interface
view. N/A
ospfv3 1 area 0.0.0.0 ospfv3 1 area 0.0.0.0 Enable OSPFv3 on an
interface. N/A
quit quit Return to system view. N/A
interface vlan-interface
20 interface vlan-interface
20 Enter VLAN interface
view. N/A
ospfv3 1 area 0.0.0.0 ospfv3 1 area 0.0.0.0 Enable OSPFv3 on an
interface. N/A
port drni virtual-ip
20.1.1.103
255.255.255.0 active
port drni virtual-ip
20.1.1.104
255.255.255.0 active Assign a DRNI virtual IPv4
address to an interface.
The address is used to
establish OSPF
neighbor relationships
between core devices
and the peer DR
member devices.
port drni ipv6 virtual-ip
FE80::6 link-local port drni ipv6 virtual-ip
FE80::8 link-local Assign a DRNI virtual IPv6
address to an interface.
The address is used to
establish OSPFv3
neighbor relationships
between core devices
and the peer DR
member devices.
ospf peer sub-address
enable 20.1.1.103 ospf peer sub-address
enable 20.1.1.104
Enable OSPF to establish
neighbor relationships
through the secondary IP
addresses of an interface.
The same gateway
interface on different
DR member devices
must be configured
with the same IP
address and MAC
address. Therefore, the
DR member devices
cannot use the primary
address of the interface
to establish neighbor
relationships with other
devices. Therefore, you
must enable OSPF to
establish neighbor
relationships through
the secondary IP
addresses of an
interface.
17
Configuring Device E and Device F
Device E
Device F
Description
Remarks
router id 1.1.1.1 router id 2.2.2.2 Configure a router ID. N/A
ospf 1 ospf 1 Configure an OSPF
process. N/A
area 0 area 0 Configure an OSPF area. N/A
quit quit Return to system view. N/A
interface vlan-interface
20 interface vlan-interface
20 Enter VLAN interface
view. N/A
ospf 1 area 0.0.0.0 ospf 1 area 0.0.0.0 Enable OSPF on an
interface. N/A
quit quit Return to system view. N/A
interface vlan-interface
30 interface vlan-interface
30 Enter VLAN interface
view. N/A
ospf 1 area 0.0.0.0 ospf 1 area 0.0.0.0 Enable OSPF on an
interface. N/A
quit quit Return to system view. N/A
ospfv3 1 ospfv3 1 Configure an OSPFv3
process. N/A
router-id 1.1.1.1 router-id 2.2.2.2 Configure a router ID. N/A
area 0 area 0 Configure an OSPF area. N/A
quit quit Return to system view. N/A
interface vlan-interface
20 interface vlan-interface
20 Enter VLAN interface
view. N/A
ospfv3 1 area 0.0.0.0 ospfv3 1 area 0.0.0.0 Enable OSPFv3 on an
interface. N/A
port drni virtual-ip
20.1.1.101
255.255.255.0 active
port drni virtual-ip
20.1.1.102
255.255.255.0 active
Assign a DRNI virtual IPv4
address to an interface.
The address is used to
establish OSPF
neighbor relationships
between core devices
and the peer DR
member devices.
port drni ipv6 virtual-ip
FE80::2 link-local port drni ipv6 virtual-ip
FE80::4 link-local Assign a DRNI virtual IPv6
address to an interface.
The address is used to
establish OSPFv3
neighbor relationships
between core devices
and the peer DR
member devices.
ospf peer sub-address
enable 20.1.1.101 ospf peer sub-address
enable 20.1.1.102
Enable OSPF to establish
neighbor relationships
through the secondary IP
addresses of an interface.
The same gateway
interface on different DR
member devices must
be configured with the
same IP address and
MAC address.
Therefore, the DR
member devices cannot
use the primary address
of the interface to
establish neighbor
relationships with other
18
Device E
Device F
Description
Remarks
devices. Therefore, you
must enable OSPF to
establish neighbor
relationships through
the secondary IP
addresses of an
interface.
quit quit Return to system view. N/A
interface vlan-interface
30 interface vlan-interface
30 Enter VLAN interface
view. N/A
ospfv3 1 area 0.0.0.0 ospfv3 1 area 0.0.0.0 Enable OSPFv3 on an
interface. N/A
Configuring the uplink device
Device G
Description
vlan 30 Create VLAN 30.
quit Return to system view.
interface bridge-aggregation 3 Create an aggregate interface connecting to Device E and
Device F.
link-aggregation mode dynamic Configure the aggregate interface to operate in dynamic
mode.
quit Return to system view.
Interface range HundredGigE 2/0/1
HundredGigE 2/0/2 Enter the view of the physical interfaces connecting to Device
E and Device F.
port link-aggregation group 3 Assign physical interfaces to aggregation group 3.
quit Return to system view.
interface bridge-aggregation 3 Enter the view of the aggregate interface connecting to
Device E and Device F.
port link-type trunk Set the link type of the Layer 2 aggregate interface to trunk.
port trunk permit vlan 30 Assign the interface to VLAN 30.
undo port trunk permit vlan 1 Remove the interface from VLAN 1.
quit Return to system view.
Interface HundredGigE 2/0/64 Enter the view of the interface connecting to Server.
port access vlan 30 Assign the interface to VLAN 30.
Traffic forwarding models
Underlay traffic characteristics
The forwarding model matrix provides the following characteristics of underlay traffic:
•
No.—Traffic number in the U-X-XXX format:
19
U—Underlay traffic.
X—Protocol number, which can be 4 (IPv4) or 6 (IPv6).
XXX—Traffic sequence number.
•
Traffic type—Type of underlay traffic, which can be IPv4 known unicast or IPv6 known unicast.
•
Direction—Direction of underlay traffic. The value is south-north, which indicates traffic from
the south to north.
•
Forwarding path—Nodes that underlay traffic traverses.
•
Traffic simulation—Traffic simulation method. Typically, a tester is used to simulate server
traffic.
•
Load—Traffic size, which can be light (less than 1000 flows) and heavy (more than 1000 flows).
•
Traffic direction to firewalls/LB—No firewalls or LBs are used in this example. This field is not
involved.
Forwarding models
No. Traffic
type Direction Forwarding path Traffic
simulation Load Traffic
direction to
firewalls/LB
U-4-101 IPv4
known
unicast
South to
north
VM > DR system 1 > DR
system 2 > DR system 3 >
Server Tester Light N/A
U-6-101 IPv6
known
unicast
South to
north
VM > DR system 1 > DR
system 2 > DR system 3 >
Server Tester Light N/A
Testing network convergence upon single points
of failure
Table 1 Network convergence upon single points of failure
Device
Failure type
Traffic interruption time
DRNI
Single point of failure on DR member
links ≤ 500 ms
Single point of failure restored on DR
member links 0 ms
IPL failure ≤ 500 ms
IPL failure restored ≤ 10 ms
Keepalive link failure 0 ms
Keepalive link failure restored 0 ms
Keepalive link and IPL failure ≤ 5000 ms
Keepalive link and IPL restored ≤ 10000 ms
Upgrading the devices ≤ 500ms (legacy method, in which two DR member
devices are separately upgraded)
Expanding the network 0 ms
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28

Aruba Multi-Layer DRNI+Dual-Active VLAN Gateway+OSPF Configuration Guide

Multi-Layer DRNI+Dual-Active VLAN Gateway+OSPF
Aruba
Brand
Aruba
Model
Multi-Layer DRNI+Dual-Active VLAN Gateway+OSPF
Category
Networking
Type
Configuration Guide
Download PDF
report

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI

Related papers

Other documents