Aruba Multi-Layer DRNI+STP+Dual-Active VLAN Gateway Configuration Guide

Category
Networking
Type
Configuration Guide
1
Contents
Example: Configuring multi-layer DRNI+STP+dual-active VLAN gateways ··· 1
Network configuration ········································································································································ 1
Applicable product matrix ··································································································································· 3
Analysis ······························································································································································ 3
Configuring the DR systems ······························································································································ 3
Procedure summary ··································································································································· 3
Configuring DRNI ······································································································································· 4
Configuring the dual-active gateways ······································································································ 14
Configuring the uplink device ··························································································································· 16
Traffic forwarding models ································································································································· 17
Underlay traffic characteristics ················································································································· 17
Underlay traffic forwarding models ··········································································································· 17
Testing network convergence upon single points of failure ············································································· 17
Verifying the configuration································································································································ 18
Verifying the status of the DR system ······································································································ 18
Verifying that the STP state is normal ······································································································ 20
Upgrading the devices ····································································································································· 21
Checking the environment ······················································································································· 21
Upgrading the devices ····························································································································· 21
Verifying the traffic interruption time during the upgrade ········································································· 21
Verifying the upgrade result ····················································································································· 22
Expanding the network····································································································································· 22
Checking the environment ······················································································································· 22
Expanding the network ····························································································································· 22
Verifying the traffic interruption time········································································································· 22
Verifying the expansion result ·················································································································· 22
Replacing hardware ········································································································································· 23
Replacing a service module ····················································································································· 23
Replacing a switching fabric module ········································································································ 23
Replace a device ······································································································································ 24
1
Example: Configuring multi-layer
DRNI+STP+dual-active VLAN gateways
Network configuration
As shown in Figure 1, the user network uses a three-layer architecture: core-aggregation-access. To
improve network availability, deploy two devices separately on the core layer, aggregation layer, and
access layer. Two devices on each layer form a DR system.
Device A and Device B form DR system 1, which acts as an access device and connects to
Server.
Device C and Device D form DR system 2, which acts as an aggregation device.
Device E and Device F form DR system 3, which acts as the core device and connects to VM.
To meet the network access requirements of VM and Server, make sure the DR member devices on
the core layer act as both the IPv4 gateway and IPv6 gateway of VM and Server.
To avoid loops between aggregation member ports over an IPL because the DR system splits, the
cables are connected incorrectly, or the configuration is incorrect, perform he following tasks:
Configure STP on the DR member devices.
Configure the DR member devices on the core layer (Device E and Device F) as the root
bridges of STP. If you do not do that, when new devices are added to the STP network, they
might dynamically preempt the STP root bridge roles. As a result, the STP network will flap.
NOTE:
This document uses three
-layer DRNI+STP+dual-
active VLAN gateways as an example to describe
how to configure a multi
-layer DRNI network. The configuration procedure for a two-layer
DRNI+STP+dual-active VLAN gateways is similar.
2
Figure 1 Network diagram
Device
Interface
IP address
Peer device and interface
Device A XGE1/0/24 IPv4: 220.1.1.1/24 Device B XGE2/0/24
Device B XGE2/0/24 IPv4: 220.1.1.2/24 Device A: XGE1/0/24
Device C WGE1/0/11 IPv4: 220.1.1.3/24 Device D: WGE2/0/11
Device D WGE2/0/11 IPv4: 220.1.1.4/24 Device C: WGE1/0/11
Device E
XGE1/4/5 IPv4: 220.1.1.5/24 Device F: XGE2/4/5
Vlan-int20 IPv4: 20.1.1.2/24
IPv6: 20:1::2/64 N/A
Spanning tree
edge port
Device E Device F
Device C Device D
Device A
HGE1/0/30
HGE2/0/31
HGE1/0/6
HGE2/0/6
HGE1/0/25
HGE1/0/26
HGE1/0/31
HGE2/0/28
HGE2/0/4
HGE1/0/4
HGE1/0/26
HGE1/1/8
HGE1/0/29
HGE2/0/29
WGE1/0/11
WGE2/0/11
Keepalive
DR 2
DeviceB
HGE2/0/25
HGE2/0/26
HGE2/0/30
XGE1/4/5
XGE2/4/5
Keepalive
IPL
HGE1/0/27
HGE1/0/27
XGE1/0/24
XGE2/0/24
HGE1/0/28 HGE2/0/28
DR 2
HGE1/0/28
Access
layer
Aggregation
layer
Core layer
DRNI access of server
HGE2/0/26
HGE2/1/8
BAGG1
DR system 3
DR system 2
Keepalive
DR system 1
BAGG1
BAGG1
DR 3
HGE1/0/5
HGE2/0/5
DR 3
Device G
HGE2/0/64
HGE2/0/1
HGE2/0/2
Server
V
M
IPL
IPL
VLAN20
VLAN20
VLAN30
VLAN30 VLAN30
VLAN30
VLAN20
VLAN20
VLAN20 VLAN20
VLAN20
VLAN20
VLAN20
VLAN20
VLAN20
VLAN20
VLAN20VLAN20
VLAN20
VLAN20
VLAN20
VLAN20
3
Device
Interface
IP address
Peer device and interface
Vlan-int30 IPv4: 30.1.1.1/24
IPv6: 30:1::1/64 N/A
Device F
XGE2/4/5 IPv4: 220.1.1.6/24 Device E: XGE1/4/5
Vlan-int20 IPv4: 20.1.1.2/24
IPv6: 20:1::2/64
N/A
Vlan-int30 IPv4: 30.1.1.1/24
IPv6: 30:1::1/64
N/A
Applicable product matrix
IMPORTANT:
In addition to running an applicable software version, you must also install the most recent patch, if
any.
Software version
HPE FlexFabric 5944 & 5945 Switch Series R6710
HPE FlexFabric 5940 Switch Series R6710
HPE FlexFabric 5710 Switch Series R6710
HPE FlexFabric 12900E Switch Series (Type K) R5210
HPE FlexFabric 12900E Switch Series (Type X) Under verification. To obtain the latest images,
contact Technical Support.
Analysis
On Device E and Device F, configure an IPv4 address and an IPv6 address for VLAN-interface 20,
which will act as the IPv4 gateway address and IPv6 gateway address of Server, respectively.
Configure an IPv4 address and an IPv6 address for VLAN-interface 30, which will act as the IPv4
gateway address and IPv6 gateway address of VM, respectively, so that both IPv4 users and IPv6
users can access the external network through these gateways.
On Device E and Device F, configure the DR member devices as the STP root bridges to eliminate
the loops between the DR systems.
Configuring the DR systems
Procedure summary
Configuring DRNI
Configuring the dual-active gateways
4
Configuring DRNI
Configuring Device A and Device B
Device A
Device B
Description
Remarks
stp global enable stp global enable Enable the spanning
tree protocol globally.
By default, this
feature is enabled on
fixed-port switches.
drni role priority 10 drni role priority 20 Set the DR role priority
of a DR member device.
DRNI assigns the
primary or secondary
role to a DR member
device based on its
DR role priority. The
smaller the priority
value, the higher the
priority. The device
with the higher priority
is the primary device.
drni system-mac 2-2-2 drni system-mac 2-2-2 Configure the DR
system MAC address.
You must configure
the same DR system
MAC address for
devices in the same
DR system.
drni system-number 1 drni system-number 2 Set the DR system
number.
You must set different
DR system numbers
for devices in the
same DR system.
drni system-priority 123 drni system-priority 123 Set the DR system
priority.
You must set the
same DR system
priority for devices in
the same DR system.
drni standalone enable drni standalone enable Enable DRNI standalone
mode. N/A
drni keepalive ip
destination 220.1.1.2
source 220.1.1.1
drni keepalive ip
destination 220.1.1.1
source 220.1.1.2
Configure the
destination and source
IP addresses of
keepalive packets.
N/A
interface
Ten-GigabitEthernet
1/0/24
interface
Ten-GigabitEthernet
2/0/24
Enter the interface view
for the keepalive link.
N/A
port link-mode route port link-mode route
Configure the interface
for the keepalive link to
operate in route mode as
a Layer 3 interface.
N/A
ip address 220.1.1.1 24 ip address 220.1.1.2 24 Assign an IP address to
a keepalive link
interface.
N/A
quit quit Return to system view. N/A
drni mad exclude
interface
Ten-GigabitEthernet
1/0/24
drni mad exclude interface
Ten-GigabitEthernet
2/0/24
Exclude the interface
used for DR keepalive
detection from the
shutdown action by
DRNI MAD.
N/A
vlan 20 vlan 20 Create VLAN 20. N/A
5
Device A
Device B
Description
Remarks
quit quit Return to system view. N/A
interface
bridge-aggregation 1 interface
bridge-aggregation 1
Create the Layer 2
aggregate interface to
be used as the IPP and
enter Layer 2 aggregate
interface view.
N/A
quit quit Return to system view. N/A
interface HundredGigE
1/0/28 interface HundredGigE
2/0/28
Enter the view of
physical interfaces on
the IPL.
N/A
port link-aggregation
group 1 port link-aggregation
group 1
Assign the physical
interfaces on the IPL to
the aggregation group
for the IPL (aggregation
group 1).
N/A
quit quit Return to system view. N/A
interface
bridge-aggregation 1 interface
bridge-aggregation 1
Enter the view of the
aggregation group for
the IPL.
N/A
undo mac-address static
source-check enable undo mac-address static
source-check enable Disable source MAC
check on an interface. N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the aggregate
interface to operate in
dynamic mode.
N/A
port drni intra-portal-port
1 port drni intra-portal-port 1
Specify the aggregate
interface
(Bridge-Aggregation 1)
as the IPP.
N/A
quit quit Return to system view. N/A
interface
bridge-aggregation 2 interface
bridge-aggregation 2 Create an aggregate
interface connecting to
Server.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the aggregate
interface connecting to
Server to operate in
dynamic mode.
N/A
port drni group 2 port drni group 2
Assign the Layer 2
aggregate interface
(Bridge-Aggregation 2)
to DR group 2.
N/A
quit quit Return to system view. N/A
interface
bridge-aggregation 3 interface
bridge-aggregation 3 Create an aggregate
interface connecting to
Device C and Device D.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the aggregate
interface connecting to
Device C and Device D
to operate in dynamic
mode.
N/A
port drni group 3 port drni group 3 Assign the Layer 3
aggregate interface
N/A
6
Device A
Device B
Description
Remarks
(Bridge-Aggregation 3)
to DR group 2.
quit quit Return to system view. N/A
interface HundredGigE
1/0/27 interface HundredGigE
2/0/27
Enter the view of the
physical interfaces
connecting the DR
system to Server.
N/A
port link-aggregation
group 2 port link-aggregation
group 2 Assign the interfaces to
a DR group. N/A
quit quit Return to system view. N/A
interface
bridge-aggregation 2 interface
bridge-aggregation 2 Enter the view of an
aggregate interface. N/A
port link-type trunk port link-type trunk Set the link type of the
aggregate interface to
trunk.
N/A
undo port trunk permit
vlan 1 undo port trunk permit vlan
1 Remove the trunk port
from VLAN 1. N/A
port trunk permit vlan 20 port trunk permit vlan 20 Assign the interface to
the specified VLAN. N/A
stp edged-port stp edged-port Specify the aggregate
interface as an STP
edge port.
N/A
quit quit Return to system view. N/A
interface range
HundredGigE 1/0/25
HundredGigE 1/0/26
interface range
HundredGigE 2/0/25
HundredGigE 2/0/26
Enter the view of the
physical interfaces
connecting the DR
system to Device C and
Device D.
N/A
port link-aggregation
group 3 port link-aggregation
group 3 Assign the interfaces to
a DR group. N/A
quit quit Return to system view. N/A
interface
bridge-aggregation 3 interface
bridge-aggregation 3 Enter the view of an
aggregate interface. N/A
port link-type trunk port link-type trunk Set the link type of the
aggregate interface to
trunk.
N/A
undo port trunk permit
vlan 1 undo port trunk permit vlan
1 Remove the trunk port
from VLAN 1. N/A
port trunk permit vlan 20 port trunk permit vlan 20 Assign the interface to
the specified VLAN. N/A
quit quit Return to system view. N/A
link-aggregation global
load-sharing algorithm 7 link-aggregation global
load-sharing algorithm 7
Configure a link
aggregation load sharing
algorithm.
To identify whether
traffic is load-shared
among aggregation
member ports, use
the display
counters
command to view the
traffic on each
7
Device A
Device B
Description
Remarks
aggregation group
member port. If traffic
is not well
load-shared, you can
use this command to
specify a proper link
aggregation load
sharing algorithm.
Configuring Device C and Device D
Device C
Device D
Description
Remarks
stp global enable stp global enable Enable the spanning
tree protocol
globally.
By default, this
feature is enabled
on fixed-port
switches.
drni system-mac 1-1-1 drni system-mac 1-1-1 Configure the DR
system MAC
address.
You must configure
the same DR
system MAC
address for devices
in the same DR
system.
drni system-number 1 drni system-number 2 Set the DR system
number.
You must set
different DR system
numbers for devices
in the same DR
system.
drni system-priority 124 drni system-priority 124 Set the DR system
priority.
You must set the
same DR system
priority for devices
in the same DR
system.
drni role priority 10 drni role priority 20 Set the DR role
priority of a DR
member device.
DRNI assigns the
primary or
secondary role to a
DR member device
based on its DR role
priority. The smaller
the priority value,
the higher the
priority. The device
with the higher
priority is the
primary device.
drni standalone enable drni standalone enable Enable DRNI
standalone mode. N/A
drni keepalive ip destination
220.1.1.4 source 220.1.1.3 drni keepalive ip destination
220.1.1.3 source 220.1.1.4
Configure the
destination and
source IP addresses
of keepalive packets.
N/A
interface Twenty-FiveGigE
1/0/11 interface Twenty-FiveGigE
2/0/11
Enter the interface
view for the
keepalive link.
N/A
port link-mode route port link-mode route Configure the
interface for the
keepalive link to
N/A
8
Device C
Device D
Description
Remarks
operate in route
mode as a Layer 3
interface.
ip address 220.1.1.3 24 ip address 220.1.1.4 24 Assign an IP address
to the interface for
the keepalive link.
N/A
quit quit Return to system
view. N/A
drni mad exclude interface
Twenty-FiveGigE 1/0/11 drni mad exclude interface
Twenty-FiveGigE 2/0/11
Exclude the interface
used for DR
keepalive detection
from the shutdown
action by DRNI
MAD.
N/A
vlan 20 vlan 20 Create VLAN 20. N/A
quit quit Return to system
view. N/A
interface
bridge-aggregation 1 interface bridge-aggregation 1
Create the Layer 2
aggregate interface
to be used as the IPP
and enter Layer 2
aggregate interface
view.
N/A
quit quit Return to system
view. N/A
interface HundredGigE
1/0/26 interface HundredGigE 2/0/26 Enter the view of
physical interfaces
on the IPL.
N/A
port link-aggregation group
1 port link-aggregation group 1
Assign the physical
interfaces on the IPL
to the aggregation
group for the IPL
(aggregation group
1).
N/A
interface
bridge-aggregation 1 interface bridge-aggregation 1 Enter the view of the
aggregation group
for the IPL.
N/A
undo mac-address static
source-check enable undo mac-address static
source-check enable
Disable source MAC
check on an
interface.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the
aggregate interface
to operate in
dynamic mode.
N/A
port drni intra-portal-port 1 port drni intra-portal-port 1
Specify the
aggregate interface
(Bridge-Aggregation
1) as the IPP.
N/A
quit quit Return to system
view. N/A
interface
bridge-aggregation 2 interface bridge-aggregation 2 Create an aggregate
interface connecting
to Device E and
N/A
9
Device C
Device D
Description
Remarks
Device F.
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the
aggregate interface
connecting to Device
E and Device F to
operate in dynamic
mode.
N/A
port lacp system-priority
101 port lacp system-priority 100 Set the LACP
priority.
Set different LACP
priorities for
different DR
member devices, so
that only member
ports with a higher
priority are selected
upon brain split.
port drni group 2 port drni group 2
Assign the Layer 2
aggregate interface
(Bridge-Aggregation
2) to DR group 2.
N/A
quit quit Return to system
view. N/A
interface
bridge-aggregation 3 interface bridge-aggregation 3
Create an aggregate
interface connecting
to Device A and
Device B.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the
aggregate interface
connecting to Device
A and Device B to
operate in dynamic
mode.
N/A
port lacp system-priority
101 port lacp system-priority 100 Set the LACP
priority.
Set different LACP
priorities for
different DR
member devices, so
that only member
ports with a higher
priority are selected
upon brain split.
port drni group 3 port drni group 3
Assign the Layer 3
aggregate interface
(Bridge-Aggregation
3) to DR group 3.
N/A
quit quit Return to system
view. N/A
interface range
HundredGigE 1/0/28
HundredGigE 1/0/29
interface range HundredGigE
2/0/28 HundredGigE 2/0/29
Enter the view of the
physical interfaces
connecting the DR
system to Device E
and Device F.
N/A
port link-aggregation group
2 port link-aggregation group 2 Assign the interfaces
to a DR group. N/A
quit quit Return to system
view. N/A
10
Device C
Device D
Description
Remarks
interface
bridge-aggregation 2 interface bridge-aggregation 2 Enter the view of an
aggregate interface. N/A
port link-type trunk port link-type trunk Set the link type of
the aggregate
interface to trunk.
N/A
undo port trunk permit vlan
1 undo port trunk permit vlan 1 Remove the trunk
port from VLAN 1. N/A
port trunk permit vlan 20 port trunk permit vlan 20 Assign the interface
to the specified
VLAN.
N/A
interface range
HundredGigE 1/0/30
HundredGigE 1/0/31
interface range HundredGigE
2/0/30 HundredGigE 2/0/31
Enter the view of the
physical interfaces
connecting the DR
system to Device A
and Device B.
N/A
port link-aggregation group
3 port link-aggregation group 3 Assign the interfaces
to a DR group. N/A
quit quit Return to system
view. N/A
interface
bridge-aggregation 3 interface bridge-aggregation 3 Enter the view of an
aggregate interface. N/A
port link-type trunk port link-type trunk Set the link type of
the aggregate
interface to trunk.
N/A
undo port trunk permit vlan
1 undo port trunk permit vlan 1 Remove the trunk
port from VLAN 1. N/A
port trunk permit vlan 20 port trunk permit vlan 20 Assign the interface
to the specified
VLAN.
N/A
quit quit Return to system
view. N/A
link-aggregation global
load-sharing algorithm 7 link-aggregation global
load-sharing algorithm 7
Configure a link
aggregation load
sharing algorithm.
To identify whether
traffic is load-shared
among aggregation
member ports, use
the display
counters
command to view
the traffic on each
aggregation group
member port. If
traffic is not well
load-shared, you
can use this
command to specify
a proper link
aggregation load
sharing algorithm.
11
Configuring Device E and Device F
Device E
Device F
Description
Remarks
stp global enable stp global enable Enable the
spanning tree
protocol globally.
By default, this
feature is enabled on
fixed-port switches.
drni system-mac 1-2-3 drni system-mac 1-2-3 Configure the DR
system MAC
address.
You must configure
the same DR system
MAC address for
devices in the same
DR system.
drni system-number 1 drni system-number 2 Set the DR system
number.
You must set different
DR system numbers
for devices in the
same DR system.
drni system-priority 122 drni system-priority 122 Set the DR system
priority.
You must set the
same DR system
priority for devices in
the same DR system.
drni role priority 10 drni role priority 20 Set the DR role
priority of a DR
member device.
DRNI assigns the
primary or secondary
role to a DR member
device based on its
DR role priority. The
smaller the priority
value, the higher the
priority. The device
with the higher priority
is the primary device.
drni standalone enable drni standalone enable Enable DRNI
standalone mode. N/A
drni keepalive ip destination
220.1.1.6 source 220.1.1.5 drni keepalive ip destination
220.1.1.5 source 220.1.1.6
Configure the
destination and
source IP
addresses of
keepalive packets.
N/A
interface
Ten-GigabitEthernet 1/4/5 interface
Ten-GigabitEthernet 2/4/5
Enter the interface
view for the
keepalive link.
N/A
port link-mode route port link-mode route
Configure the
interface for the
keepalive link to
operate in route
mode as a Layer 3
interface.
N/A
ip address 220.1.1.5 24 ip address 220.1.1.6 24
Assign an IP
address to the
interface for the
keepalive link.
N/A
quit quit Return to system
view. N/A
drni mad exclude interface
Ten-GigabitEthernet 1/4/5 drni mad exclude interface
Ten-GigabitEthernet 2/4/5
Exclude the
interface used for
DR keepalive
detection from the
shutdown action by
N/A
12
Device E
Device F
Description
Remarks
DRNI MAD.
interface bridge-aggregation
1 interface bridge-aggregation
1
Create the Layer 2
aggregate
interface to be
used as the IPP
and enter Layer 2
aggregate
interface view.
N/A
quit quit Return to system
view. N/A
Interface HundredGigE 1/1/8 interface HundredGigE
2/1/8 Enter the view of
physical interfaces
on the IPL.
N/A
port link-aggregation group 1 port link-aggregation group
1
Assign the physical
interfaces on the
IPL to the
aggregation group
for the IPL
(aggregation group
1).
N/A
quit quit Return to system
view. N/A
interface bridge-aggregation
1 interface bridge-aggregation
1
Enter the view of
the aggregation
group for the IPL.
N/A
undo mac-address static
source-check enable undo mac-address static
source-check enable
Disable source
MAC check on an
interface.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the
aggregate
interface to
operate in dynamic
mode.
N/A
port drni intra-portal-port 1 port drni intra-portal-port 1
Specify the
aggregate
interface
(Bridge-Aggregatio
n 1) as the IPP.
N/A
quit quit Return to system
view. N/A
interface bridge-aggregation
2 interface bridge-aggregation
2
Create an
aggregate
interface
connecting to
Device C and
Device D.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the
aggregate
interface
connecting to
Device C and
Device D to
operate in dynamic
mode.
N/A
13
Device E
Device F
Description
Remarks
port drni group 2 port drni group 2
Assign the Layer 2
aggregate
interface
(Bridge-Aggregatio
n 2) to DR group 2.
N/A
quit quit Return to system
view. N/A
interface bridge-aggregation
3 interface bridge-aggregation
3
Create an
aggregate
interface
connecting to
Device G.
N/A
link-aggregation mode
dynamic link-aggregation mode
dynamic
Configure the
aggregate
interface
connecting to
Device G to
operate in dynamic
mode.
N/A
port drni group 3 port drni group 3
Assign the Layer 3
aggregate
interface
(Bridge-Aggregatio
n 3) to DR group 3.
N/A
quit quit Return to system
view. N/A
interface range HundredGigE
1/0/4 HundredGigE 1/0/5
interface range
HundredGigE 2/0/4
HundredGigE 2/0/5
Enter the view of
the physical
interfaces
connecting the DR
system to Device C
and Device D.
N/A
port link-aggregation group 2 port link-aggregation group
2
Assign the
interfaces to a DR
group.
N/A
quit quit Return to system
view. N/A
interface HundredGigE1/0/6 interface HundredGigE2/0/6
Enter the view of
the physical
interfaces
connecting the DR
system to VM.
N/A
port link-aggregation group 3 port link-aggregation group
3
Assign the
interfaces to a DR
group.
N/A
quit quit Return to system
view. N/A
link-aggregation global
load-sharing algorithm 7 link-aggregation global
load-sharing algorithm 7 Configure a link
aggregation load
sharing algorithm.
To identify whether
traffic is load-shared
among aggregation
member ports, use
the display
counters
command to view the
14
Device E
Device F
Description
Remarks
traffic on each
aggregation group
member port. If traffic
is not well
load-shared, you can
use this command to
specify a proper link
aggregation load
sharing algorithm.
stp instance 0 root primary stp instance 0 root primary Configure the
device as the root
bridge. N/A
Configuring the dual-active gateways
Device E Device F Description Remarks
vlan 20 30 vlan 20 30 Create VLANs 20
and 30. N/A
interface bridge-aggregation 2 interface bridge-aggregation 2
Enter the view of
the aggregate
interface
connecting to
Device D.
N/A
port link-type trunk port link-type trunk
Set the link type of
the Layer 2
aggregate
interface
(Bridge-Aggregati
on 2) to trunk.
N/A
port trunk permit vlan 20 port trunk permit vlan 20 Assign the
interface to VLAN
20.
N/A
undo port trunk permit vlan 1 undo port trunk permit vlan 1 Remove the
interface from
VLAN 1.
N/A
port lacp system-priority 101 port lacp system-priority 100 Set the LACP
priority.
Set different LACP
priorities for
different DR
member devices,
so that only
member ports with
a higher priority
are selected upon
brain split.
quit quit Return to system
view. N/A
interface bridge-aggregation 3 interface bridge-aggregation 3
Enter the view of
the aggregate
interface
connecting to
Device G.
N/A
port link-type trunk port link-type trunk
Set the link type of
N/A
15
Device E Device F Description Remarks
the Layer 2
aggregate
interface to trunk.
port trunk permit vlan 30 port trunk permit vlan 30 Assign the
interface to VLAN
30.
N/A
undo port trunk permit vlan 1 undo port trunk permit vlan 1 Remove the
interface from
VLAN 1.
N/A
port lacp system-priority 101 port lacp system-priority 100 Set the LACP
priority.
Set different LACP
priorities for
different DR
member devices,
so that only
member ports with
a higher priority
are selected upon
brain split.
quit quit Return to system
view. N/A
interface vlan-interface 30 interface vlan-interface 30 Create
VLAN-interface
30.
N/A
ip address 30.1.1.1
255.255.255.0 ip address 30.1.1.1
255.255.255.0
Assign an IPv4
address to
VLAN-interface
30, which is to act
as an IPv4
gateway address.
N/A
mac-address 0030-0030-0030 mac-address 0030-0030-0030
Assign a MAC
address to
VLAN-interface
30.
N/A
ipv6 address 30:1::1 64 ipv6 address 30:1::1 64
Assign an IPv6
address to
VLAN-interface
30, which is to act
as an IPv6
gateway address.
N/A
quit quit Return to system
view. N/A
drni mad exclude interface
Vlan-interface 30 drni mad exclude interface
Vlan-interface 30
Exclude
VLAN-interface
30 from the
shutdown action
by DRNI MAD.
N/A
interface vlan-interface 20 interface vlan-interface 20 Create
VLAN-interface
20.
N/A
ip address 20.1.1.1
255.255.255.0 ip address 20.1.1.1
255.255.255.0
Assign an IPv4
address to
VLAN-interface
20, which is to act
as an IPv4
N/A
16
Device E Device F Description Remarks
gateway address.
mac-address 0020-0020-0021 mac-address 0020-0020-0021
Assign a MAC
address to
VLAN-interface
20.
N/A
ipv6 address 20:1::1 64 ipv6 address 20:1::1 64
Assign an IPv6
address to
VLAN-interface
20, which is to act
as an IPv6
gateway address.
N/A
quit quit Return to system
view. N/A
drni mad exclude interface
Vlan-interface 20 drni mad exclude interface
Vlan-interface 20
Exclude
VLAN-interface
20 from the
shutdown action
by DRNI MAD.
N/A
Configuring the uplink device
Device G
Description
vlan 30 Create VLAN 30.
quit Return to system view.
interface bridge-aggregation 3 Create an aggregate interface.
link-aggregation mode dynamic Configure the aggregate interface to operate in dynamic
mode.
Interface range HundredGigE 2/0/1
HundredGigE 2/0/2 Enter the view of the physical interfaces connecting to Device
E and Device F.
port link-aggregation group 3 Assign physical interfaces to an aggregation group.
quit Return to system view.
interface bridge-aggregation 3 Enter the view of an aggregate interface.
port link-type trunk Set the link type of the aggregate interface to trunk.
port trunk permit vlan 30 Assign the aggregate interface to VLAN 30.
undo port trunk permit vlan 1 Remove the trunk port from VLAN 1.
Interface HundredGigE 2/0/64 Enter the view of the physical interface connecting to VM.
port access vlan 30 Set the link type of the interface to access, and assign it to
VLAN 30
17
Traffic forwarding models
Underlay traffic characteristics
The forwarding model matrix provides the following characteristics of underlay traffic:
No.Traffic number in the U-X-XXX format:
UUnderlay traffic.
XProtocol number, which can be 4 (IPv4) or 6 (IPv6).
XXXTraffic sequence number.
Traffic typeType of underlay traffic, which can be IPv4 known unicast or IPv6 known unicast.
DirectionDirection of underlay traffic. The value is south-north, which indicates traffic from
the south to north.
Forwarding pathNodes that underlay traffic traverses.
Traffic simulationTraffic simulation method. Typically, a tester is used to simulate server
traffic.
LoadTraffic size, which can be light (less than 1000 flows) and heavy (more than 1000 flows).
Underlay traffic forwarding models
No. Traffic
type
Directio
n
Forwarding path Traffic
simulation
Load Descripti
on
U-4-101 IPv4
known
unicast
South to
north
Server > DR system 1 > DR
system 2 > DR system 3 >
VM Tester Light N/A
U-6-101 IPv6
known
unicast
South to
north
Server > DR system 1 > DR
system 2 > DR system 3 >
VM Tester Light N/A
Testing network convergence upon single points
of failure
Table 1 Network convergence upon single points of failure
Device
Failure type
Traffic interruption time
DRNI
Single point of failure on DR member
links 100 ms
Single point of failure restored on DR
member links ≤ 100 ms
IPL failure 500 ms
IPL failure restored 0 ms
Keepalive link failure 0 ms
Keepalive link failure restored 0 ms
Keepalive link and IPL failure ≤ 3000 ms
Keepalive link and IPL restored ≤ 4000 ms
18
Device
Failure type
Traffic interruption time
Upgrading the devices 500ms (legacy method, in which two DR member
devices are separately upgraded)
Expanding the network 0 ms
Replacing hardware
Fixed-port device: ≤ 500 ms
Modular device:
Device replacement: 1000 ms.
Switching fabric module replacement: 0 ms.
Service module replacement: 500 ms.
Verifying the configuration
Verifying the status of the DR system
Verify that the DR system is working correctly on Device E and Device F. Use Device E as an
example. Configure Device F in the same way Device E is configured.
# Display summary information about the IPP and DR interface.
[DeviceE] display drni summary
Flags: A -- Aggregate interface down, B -- No peer DR interface configured
C -- Configuration consistency check failed
IPP: BAGG1
IPP state (cause): UP
Keepalive link state (cause): UP
DR interface information
DR interface DR group Local state (cause) Peer state Remaining down time(s)
BAGG2 2 UP UP -
BAGG3 3 UP UP -
# Verify that keepalive link is working correctly.
[DeviceE] display drni keepalive
Neighbor keepalive link status (cause): Up
Neighbor is alive for: 774 s 381 ms
Keepalive packet transmission status:
Sent: Successful
Received: Successful
Last received keepalive packet information:
Source IP address: 220.1.1.2
Time: 2022/02/07 06:50:17
Action: Accept
DR keepalive parameters:
Destination IP address: 220.1.1.6
Source IP address: 220.1.1.5
Keepalive UDP port : 6400
Keepalive VPN name : N/A
Keepalive interval : 1000 ms
Keepalive timeout : 5 sec
Keepalive hold time: 3 sec
19
# Display the DR system information.
[DeviceE] display drni system
System information
Local system number: 1 Peer system number: 2
Local system MAC: 0001-0002-0003 Peer system MAC: 0001-0002-0003
Local system priority: 122 Peer system priority: 122
Local bridge MAC: 5cc9-995f-7d7e Peer bridge MAC: 5cc9-995f-79fa
Local effective role: Secondary Peer effective role: Primary
Health level: 0
Standalone mode on split: Enabled
In standalone mode: No
System timer information
Timer State Value (s) Remaining time (s)
Auto recovery Disabled - -
Restore delay Disabled 180 -
Consistency-check delay Disabled 90 -
Standalone delay Disabled 0 -
Role to None delay Disabled 60 -
# Display detailed information about the IPP and DR interfaces.
[DeviceE] display drni verbose
Flags: A -- Home_Gateway, B -- Neighbor_Gateway, C -- Other_Gateway,
D -- IPP_Activity, E -- DRCP_Timeout, F -- Gateway_Sync,
G -- Port_Sync, H -- Expired
IPP/IPP ID: BAGG1/1
State: UP
Cause: -
Local DRCP flags/Peer DRCP flags: ABDFG/ABDFG
Local Selected ports (index): HGE1/1/8 (40)
Peer Selected ports indexes: 235
DR interface/DR group ID: BAGG2/2
Local DR interface state: UP
Peer DR interface state: UP
DR group state: UP
Local DR interface down cause: -
Remaining DRNI DOWN time: -
Local DR interface LACP MAC: Config=N/A, Effective=0001-0002-0003
Peer DR interface LACP MAC: Config=N/A, Effective=0001-0002-0003
Local DR interface LACP priority: Config=32768, Effective=122
Peer DR interface LACP priority: Config=32768, Effective=122
Local DRCP flags/Peer DRCP flags: ABDFG/ABDFG
Local Selected ports (index): HGE1/1/4 (20), HGE1/1/5 (25)
Peer Selected ports indexes: 215, 220
DR interface/DR group ID: BAGG3/3
Local DR interface state: UP
Peer DR interface state: UP
DR group state: UP
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25

Aruba Multi-Layer DRNI+STP+Dual-Active VLAN Gateway Configuration Guide

Category
Networking
Type
Configuration Guide

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI