H3C S6890產品DLDP典型配置舉例

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

資料版本：6W100-20190628

 

 

目  錄

1 簡介

2 配置前提

3 DLDP自動模式配置舉例

3.1 組網需求

3.2 使用版本

3.3 配置注意事項

3.3.1 配置步驟

3.3.2 驗證配置

3.3.3 配置文件

4 DLDP手動模式配置舉例

4.1 組網需求

4.2 使用版本

4.3 配置注意事項

4.3.1 配置步驟

4.3.2 驗證配置

4.3.3 配置文件

5 DLDP混合模式配置舉例

5.1 組網需求

5.2 使用版本

5.3 配置注意事項

5.3.1 配置步驟

5.3.2 驗證配置

5.3.3 配置文件

6 相關資料

 

1  簡介

本文檔介紹了DLDP的三種典型案例。

DLDP是H3C自主研發的一種鏈路層協議，可以監控光纖或銅質雙絞線的鏈路狀態。如果發現單向鏈路存在，DLDP會根據用戶配置，自動關閉或通知用戶手工關閉相關接口，以防止網絡問題的發生。

2  配置前提

本文檔中的配置均是在實驗室環境下進行的配置和驗證，配置前設備的所有參數均采用出廠時的缺省配置。如果您已經對設備進行了配置，為了保證配置效果，請確認現有配置和以下舉例中的配置不衝突。

本文檔假設您已了解DLDP特性。

3  DLDP自動模式配置舉例

3.1  組網需求

如圖1所示，Device A和Device B之間分別通過一對光纖進行連接。

現要求在這兩台設備上配置DLDP自動模式，實現：

·     DLDP能夠檢測到光纖交叉連接或一條光纖未連接的單向鏈路故障；

·     當DLDP檢測到單向鏈路故障後，DLDP會自動關閉故障接口；

·     當網絡管理員排除故障後，故障接口能夠自動恢複正常。

圖1 DLDP自動模式配置組網圖

 

3.2  使用版本

本舉例是在S6890-CMW710-R2712版本上進行配置和驗證的。

3.3  配置注意事項

·     為確保DLDP能夠正常工作，需要將兩端接口的雙工模式都配置為全雙工模式，速率都配置為相同的強製速率。

·     為確保DLDP能夠正常工作，要保證兩端設備的DLDP功能都處於開啟狀態，且Advertisement報文的發送間隔、DLDP認證模式和密碼都相同。

·     缺省情況下，S6890係列交換機的接口處於ADM（Administratively Down）狀態，請根據實際需要在對應接口視圖下使用undo shutdown命令開啟接口。

3.3.1  配置步驟

(1)     Device A的配置

# 全局開啟DLDP功能。

<DeviceA> system-view

[DeviceA] dldp global enable

# 在接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上配置雙工模式為全雙工、端口速率為10000Mbps，並開啟DLDP功能。

[DeviceA] interface ten-gigabitethernet 1/0/1

[DeviceA-Ten-GigabitEthernet1/0/1] duplex full

[DeviceA-Ten-GigabitEthernet1/0/1] speed 10000

[DeviceA-Ten-GigabitEthernet1/0/1] dldp enable

[DeviceA-Ten-GigabitEthernet1/0/1] quit

[DeviceA] interface ten-gigabitethernet 1/0/2

[DeviceA-Ten-GigabitEthernet1/0/2] duplex full

[DeviceA-Ten-GigabitEthernet1/0/2] speed 10000

[DeviceA-Ten-GigabitEthernet1/0/2] dldp enable

[DeviceA-Ten-GigabitEthernet1/0/2] quit

# 配置Advertisement報文的發送間隔為5秒（缺省情況下，Advertisement報文的發送間隔為5秒），配置DLDP認證模式為明文認證，認證密碼為abc。

[DeviceA] dldp interval 5

[DeviceA] dldp authentication-mode simple

[DeviceA] dldp authentication-password simple abc

# 配置發現單向鏈路後接口的關閉模式為自動模式（缺省情況下，關閉模式為自動模式）。

[DeviceA] dldp unidirectional-shutdown auto

(2)     Device B的配置

Device B上的配置與Device A上的配置完全一致，此處不再贅述。

3.3.2  驗證配置

配置完成後，通過使用display dldp命令可以查看DLDP的全局配置信息和接口上的DLDP信息。例如：

# 查看Device A上DLDP的全局配置信息和所有接口上的DLDP信息。

[DeviceA] display dldp

 DLDP global status: Enabled

 DLDP advertisement interval: 5s

 DLDP authentication-mode: Simple

 DLDP authentication-password: ******

 DLDP unidirectional-shutdown mode: Auto

 DLDP delaydown-timer value: 1s

 Number of enabled ports: 2

 

Interface Ten-GigabitEthernet1/0/1

 DLDP port state: Bidirectional

 Number of the port’s neighbors: 1

  Neighbor MAC address: 0023-8956-3600

  Neighbor port index: 1

  Neighbor state: Confirmed

  Neighbor aged time: 11s

 

Interface Ten-GigabitEthernet1/0/2

 DLDP port state: Bidirectional

 Number of the port’s neighbors: 1

  Neighbor MAC address: 0023-8956-3600

  Neighbor port index: 2

  Neighbor state: Confirmed

  Neighbor aged time: 12s

由此可見，接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上的DLDP接口狀態均為Bidirectional，表明這兩個接口所在的鏈路均處於雙通狀態。

# 在Device A上配置允許日誌信息輸出到當前終端，且輸出的日誌信息最低為6級。

[DeviceA] quit

<DeviceA> terminal monitor

The current terminal is enabled to display logs.

<DeviceA> terminal logging level 6

如圖2所示，以Device A和Device B的兩對光纖被錯誤地進行了交叉連接為例。

圖2 光纖交叉連接組網圖

 

網絡管理員會在Device A上看到如下日誌信息：

<DeviceA>%Jul 11 17:40:31:089 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/1 changed to down.

%Jul 11 17:40:31:091 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/1 changed to down.

%Jul 11 17:40:31:677 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/2 changed to down.

%Jul 11 17:40:31:678 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/2 changed to down.

%Jul 11 17:40:38:544 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/1 changed to up.

%Jul 11 17:40:38:836 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/2 changed to up.

上述信息表明，接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2的物理狀態都先down後up，而鏈路狀態則都down後未再up。

# 查看Device A上接口Ten-GigabitEthernet1/0/1的運行狀態和相關信息。

[DeviceA]display interface ten-gigabitethernet 1/0/1

Ten-GigabitEthernet1/0/1

Current state: UP

Line protocol state: DOWN(DLDP)

IP packet frame type: Ethernet II, hardware address: 00e0-fc00-5929

Description: Ten-GigabitEthernet1/0/1 Interface

Bandwidth: 10000000kbps

Loopback is not set

Media type is optical fiber, Port hardware type is 10G_BASE_SR_SFP

10Gbps-speed mode, full-duplex mode

Link speed type is force link, link duplex type is force link

Flow-control is not enabled

Maximum frame length: 9216

Allow jumbo frame to pass

Broadcast max-ratio: 100%

Multicast max-ratio: 100%

Unicast max-ratio: 100%

PVID: 1

Mdi type: automdix

Port link-type: Access

 Tagged Vlan:   none

 UnTagged Vlan: 1

Port priority: 0

Last link flapping: 0 hours 11 minutes 9 seconds

Last clearing of counters: Never

 Peak input rate: 141 bytes/sec, at 2018-01-01 01:37:08

 Peak output rate: 84 bytes/sec, at 2018-01-01 05:39:56

 Last 300 second input:  0 packets/sec 99 bytes/sec 0%

 Last 300 second output:  0 packets/sec 63 bytes/sec 0%

 Input (total):  26470 packets, 2469445 bytes

          0 unicasts, 1 broadcasts, 26469 multicasts, 0 pauses

 Input (normal):  26470 packets, - bytes

          0 unicasts, 1 broadcasts, 26469 multicasts, 0 pauses

 Input:  0 input errors, 0 runts, 0 giants, 0 throttles

          0 CRC, 0 frame, - overruns, 0 aborts

          - ignored, - parity errors

 Output (total): 16962 packets, 1165236 bytes

          0 unicasts, 0 broadcasts, 16962 multicasts, 0 pauses

 Output (normal): 16962 packets, - bytes

          0 unicasts, 0 broadcasts, 16962 multicasts, 0 pauses

 Output: 0 output errors, - underruns, - buffer failures

          0 aborts, 0 deferred, 0 collisions, 0 late collisions

          0 lost carrier, - no carrier

上述信息表明，光纖被交叉連接後，接口Ten-GigabitEthernet1/0/1物理狀態最終為up，鏈路層被DLDP協議自動關閉了。查看Device A上接口Ten-GigabitEthernet1/0/2的運行狀態也和Ten-GigabitEthernet1/0/1一樣。

# 查看Device A上DLDP的全局配置信息和所有接口上的DLDP信息。

<DeviceA> display dldp

 DLDP global status: Enabled

 DLDP advertisement interval: 5s

 DLDP authentication-mode: Simple

 DLDP authentication-password: ******

 DLDP unidirectional-shutdown mode: Auto

 DLDP delaydown-timer value: 1s

 Number of enabled ports: 2

 

Interface Ten-GigabitEthernet1/0/1

 DLDP port state: Unidirectional

 Number of the port’s neighbors: 0 (Maximum number ever detected: 1)

 

Interface Ten-GigabitEthernet1/0/2

 DLDP port state: Unidirectional

 Number of the port’s neighbors: 0 (Maximum number ever detected: 1)

上述信息表明，接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上的DLDP接口狀態均為Unidirectional，說明這兩個接口所在的鏈路均處於單通狀態。由此可知，DLDP在接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上都檢測到了單向鏈路。

網絡管理員將這兩對光纖重新進行正確連接後，在設備上可以看到如下日誌信息：

<DeviceA>%Jul 11 17:42:57:709 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/1 changed to down.

%Jul 11 17:42:58:603 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/2 changed to down.

%Jul 11 17:43:02:342 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/1 changed to up.

%Jul 11 17:43:02:343 2018 DeviceA DLDP/6/DLDP_NEIGHBOR_CONFIRMED: A neighbor was confirmed on interface Ten-GigabitEthernet1/0/1. The neighbor's system MAC is 0023-8956-3600, and the port index is 1.

%Jul 11 17:43:02:344 2018 DeviceA DLDP/6/DLDP_LINK_BIDIRECTIONAL: DLDP detected a bidirectional link on interface Ten-GigabitEthernet1/0/1.

%Jul 11 17:43:02:353 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/1 changed to up.

%Jul 11 17:43:02:357 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/2 changed to up.

%Jul 11 17:43:02:362 2018 DeviceA DLDP/6/DLDP_NEIGHBOR_CONFIRMED: A neighbor was confirmed on interface Ten-GigabitEthernet1/0/2. The neighbor's system MAC is 0023-8956-3600, and the port index is 2.

%Jul 11 17:43:02:362 2018 DeviceA DLDP/6/DLDP_LINK_BIDIRECTIONAL: DLDP detected a bidirectional link on interface Ten-GigabitEthernet1/0/2.

%Jul 11 17:43:02:368 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/2 changed to up.

上述信息表明，接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2的物理狀態和鏈路狀態均已up，並各自確定了DLDP鄰居，所在鏈路也變為雙通狀態。

3.3.3  配置文件

·     Device A

#

 dldp global enable

 dldp authentication-mode simple

 dldp authentication-password cipher $c$3$wHDzwD/AZNW+q+otXapfZ/tUB/Wgbg==

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 speed 10000

 duplex full

 dldp enable

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 speed 10000

 duplex full

 dldp enable

#

·     Device B

Device B上的配置文件與Device A完全一致，此處不再贅述。

4  DLDP手動模式配置舉例

4.1  組網需求

如圖3所示，Device A和Device B之間分別通過一對光纖進行連接。

現要求在這兩台設備上配置DLDP手動模式，實現：

·     DLDP能夠檢測到光纖交叉連接或一條光纖未連接的單向鏈路故障；

·     當DLDP檢測到單向鏈路後，網絡管理員可以通過檢查鏈路連接情況來判斷是否需要手工關閉接口，避免由於網絡性能較差、設備業務量較大或CPU利用率較高等情況造成DLDP對單通的誤判而自動關閉接口；

·     當網絡管理員排除故障並重新將故障接口打開後，故障接口才能夠恢複正常。

圖3 DLDP手動模式配置組網圖

 

4.2  使用版本

本舉例是在S6890-CMW710-R2712版本上進行配置和驗證的。

4.3  配置注意事項

·     為確保DLDP能夠正常工作，需要將兩端接口的雙工模式都配置為全雙工模式，速率都配置為相同的強製速率。

·     為確保DLDP能夠正常工作，要保證兩端設備的DLDP功能都處於使能狀態，且Advertisement報文的發送間隔、DLDP認證模式和密碼都相同。

·     缺省情況下，S6890係列交換機的接口處於ADM（Administratively Down）狀態，請根據實際需要在對應接口視圖下使用undo shutdown命令開啟接口。

4.3.1  配置步驟

(1)     Device A的配置

# 全局開啟DLDP功能。

<DeviceA> system-view

[DeviceA] dldp global enable

# 在端口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上配置雙工模式為全雙工、端口速率為10000Mbps，並開啟DLDP功能。

[DeviceA] interface ten-gigabitethernet 1/0/1

[DeviceA-Ten-GigabitEthernet1/0/1] duplex full

[DeviceA-Ten-GigabitEthernet1/0/1] speed 10000

[DeviceA-Ten-GigabitEthernet1/0/1] dldp enable

[DeviceA-Ten-GigabitEthernet1/0/1] quit

[DeviceA] interface ten-gigabitethernet 1/0/2

[DeviceA-Ten-GigabitEthernet1/0/2] duplex full

[DeviceA-Ten-GigabitEthernet1/0/2] speed 10000

[DeviceA-Ten-GigabitEthernet1/0/2] dldp enable

[DeviceA-Ten-GigabitEthernet1/0/2] quit

# 配置Advertisement報文的發送間隔為5秒（缺省情況下，Advertisement報文的發送間隔為5秒），配置DLDP認證模式為明文認證，認證密碼為abc。

[DeviceA] dldp interval 5

[DeviceA] dldp authentication-mode simple

[DeviceA] dldp authentication-password simple abc

# 配置發現單向鏈路後端口的關閉模式為手動模式。

[DeviceA] dldp unidirectional-shutdown manual

(2)     Device B的配置

Device B上的配置與Device A上的配置完全一致，此處不再贅述。

4.3.2  驗證配置

配置完成後，通過使用display dldp命令可以查看DLDP的全局配置信息和接口上的DLDP信息。例如：

# 查看Device A上DLDP的全局配置信息和所有接口上的DLDP信息。

[DeviceA] display dldp

 DLDP global status: Enabled

 DLDP advertisement interval: 5s

 DLDP authentication-mode: Simple

 DLDP authentication-password: ******

 DLDP unidirectional-shutdown mode: Manual

 DLDP delaydown-timer value: 1s

 Number of enabled ports: 2

 

Interface Ten-GigabitEthernet1/0/1

 DLDP port state: Bidirectional

 Number of the port’s neighbors: 1

  Neighbor MAC address: 0023-8956-3600

  Neighbor port index: 1

  Neighbor state: Confirmed

  Neighbor aged time: 11s

 

Interface Ten-GigabitEthernet1/0/2

 DLDP port state: Bidirectional

 Number of the port’s neighbors: 1

  Neighbor MAC address: 0023-8956-3600

  Neighbor port index: 2

  Neighbor state: Confirmed

  Neighbor aged time: 12s

由此可見，接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上的DLDP接口狀態均為Bidirectional，說明這兩個接口所在的鏈路均處於雙通狀態。

# 在Device A上配置允許日誌信息輸出到當前終端，且輸出的日誌信息最低為6級。

[DeviceA] quit

<DeviceA> terminal monitor

The current terminal is enabled to display logs.

<DeviceA> terminal logging level 6

如圖4所示，以連接Device A和Device B的兩對光纖被錯誤地進行了交叉連接為例。

圖4 光纖交叉連接組網圖

 

網絡管理員會在Device A上看到如下日誌信息：

<DeviceA>%Jul 12 08:29:17:786 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/1 changed to down.

%Jul 12 08:29:17:787 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/1 changed to down.

%Jul 12 08:29:17:800 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/2 changed to down.

%Jul 12 08:29:17:800 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/2 changed to down.

%Jul 12 08:29:25:004 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/1 changed to up.

%Jul 12 08:29:25:005 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/1 changed to up.

%Jul 12 08:29:25:893 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/2 changed to up.

%Jul 12 08:29:25:894 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/2 changed to up.

以上信息表明，接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2的物理狀態和鏈路狀態都先down後up。

# 查看Device A上接口Ten-GigabitEthernet1/0/1的運行狀態和相關信息。

[DeviceA]display interface ten-gigabitethernet 1/0/1

Ten-GigabitEthernet1/0/1

Current state: UP

Line protocol state: UP

IP packet frame type: Ethernet II, hardware address: 00e0-fc00-5929

Description: Ten-GigabitEthernet1/0/1 Interface

Bandwidth: 10000000kbps

Loopback is not set

Media type is optical fiber, Port hardware type is 10G_BASE_SR_SFP

10Gbps-speed mode, full-duplex mode

Link speed type is force link, link duplex type is force link

Flow-control is not enabled

Maximum frame length: 9216

Allow jumbo frame to pass

Broadcast max-ratio: 100%

Multicast max-ratio: 100%

Unicast max-ratio: 100%

PVID: 1

Mdi type: automdix

Port link-type: Access

 Tagged Vlan:   none

 UnTagged Vlan: 1

Port priority: 0

Last link flapping: 0 hours 11 minutes 9 seconds

Last clearing of counters: Never

 Peak input rate: 141 bytes/sec, at 2018-01-01 01:37:08

 Peak output rate: 104 bytes/sec, at 2018-01-01 06:40:58

 Last 300 second input:  0 packets/sec 27 bytes/sec 0%

 Last 300 second output:  1 packets/sec 101 bytes/sec 0%

 Input (total):  27226 packets, 2547709 bytes

          0 unicasts, 1 broadcasts, 27225 multicasts, 0 pauses

 Input (normal):  27226 packets, - bytes

          0 unicasts, 1 broadcasts, 27225 multicasts, 0 pauses

 Input:  0 input errors, 0 runts, 0 giants, 0 throttles

          0 CRC, 0 frame, - overruns, 0 aborts

          - ignored, - parity errors

 Output (total): 17991 packets, 1260564 bytes

          0 unicasts, 0 broadcasts, 17991 multicasts, 0 pauses

 Output (normal): 17991 packets, - bytes

          0 unicasts, 0 broadcasts, 17991 multicasts, 0 pauses

 Output: 0 output errors, - underruns, - buffer failures

          0 aborts, 0 deferred, 0 collisions, 0 late collisions

          0 lost carrier, - no carrier

上述信息表明，光纖被交叉連接後，接口Ten-GigabitEthernet1/0/1物理狀態最終為up，鏈路層協議狀態最終也為up，由此可知DLDP協議並沒有關閉接口Ten-GigabitEthernet1/0/1。查看Device A上接口Ten-GigabitEthernet1/0/2的運行狀態也和Ten-GigabitEthernet1/0/1一樣。

# 查看Device A上DLDP的全局配置信息和所有接口上的DLDP信息。

<DeviceA> display dldp

 DLDP global status: Enabled

 DLDP advertisement interval: 5s

 DLDP authentication-mode: Simple

 DLDP authentication-password: ******

 DLDP unidirectional-shutdown mode: Manual

 DLDP delaydown-timer value: 1s

 Number of enabled ports: 2

 

Interface Ten-GigabitEthernet1/0/1

 DLDP port state: Unidirectional

 Number of the port’s neighbors: 0 (Maximum number ever detected: 1)

 

Interface Ten-GigabitEthernet1/0/2

 DLDP port state: Unidirectional

 Number of the port’s neighbors: 0 (Maximum number ever detected: 1)

以上信息表明，接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上的DLDP接口狀態均為Unidirectional，說明這兩個接口所在的鏈路均處於單通狀態。由此可知，DLDP在接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上都檢測到了單向鏈路，但並未關閉這兩個接口。

網絡管理員將故障端口手工關閉：

# 關閉接口Ten-GigabitEthernet1/0/1。

<DeviceA> system-view

[DeviceA] interface ten-gigabitethernet 1/0/1

[DeviceA-Ten-GigabitEthernet1/0/1] shutdown

Device A上隨即輸出以下日誌信息：

[DeviceA-Ten-GigabitEthernet1/0/1]%Jul 12 08:34:23:717 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/1 changed to down.

%Jul 12 08:34:23:718 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/1 changed to down.

%Jul 12 08:34:23:778 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/2 changed to down.

%Jul 12 08:34:23:779 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/2 changed to down.

以上信息表明，接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2的物理狀態和鏈路狀態均已變為down。

# 關閉接口Ten-GigabitEthernet1/0/2。

[DeviceA-Ten-GigabitEthernet1/0/1] quit

[DeviceA] interface ten-gigabitethernet 1/0/2

[DeviceA-Ten-GigabitEthernet1/0/2] shutdown

然後，網絡管理員將連接Device A和Device B的兩對光纖重新進行了正確連接。檢查無誤後，網絡管理員將已排除故障的端口重新打開：

# 打開接口Ten-GigabitEthernet1/0/2。

[DeviceA-Ten-GigabitEthernet1/0/2] undo shutdown

Device A上隨即輸出以下日誌信息：

[DeviceA-Ten-GigabitEthernet1/0/2]%Jul 12 08:46:17:677 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/2 changed to up.

%Jul 12 08:46:17:678 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/2 changed to up.

%Jul 12 08:46:17:959 2018 DeviceA DLDP/6/DLDP_NEIGHBOR_CONFIRMED: A neighbor was confirmed on interface Ten-GigabitEthernet1/0/2. The neighbor's system MAC is 0023-8956-3600, and the port index is 2.

%Jul 12 08:46:17:959 2018 DeviceA DLDP/6/DLDP_LINK_BIDIRECTIONAL: DLDP detected a bidirectional link on interface Ten-GigabitEthernet1/0/2.

以上信息表明，接口Ten-GigabitEthernet1/0/2的物理狀態和鏈路狀態均已up，並確定了DLDP鄰居，所在鏈路也變為雙通狀態。

# 打開接口Ten-GigabitEthernet1/0/1。

[DeviceA-Ten-GigabitEthernet1/0/2] quit

[DeviceA] interface ten-gigabitethernet 1/0/1

[DeviceA-Ten-GigabitEthernet1/0/1] undo shutdown

Device A上隨即輸出以下日誌信息：

[DeviceA-Ten-GigabitEthernet1/0/1]%Jul 12 08:48:25:952 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/1 changed to up.

%Jul 12 08:48:25:952 2018 DeviceA DLDP/6/DLDP_NEIGHBOR_CONFIRMED: A neighbor was confirmed on interface Ten-GigabitEthernet1/0/1. The neighbor's system MAC is 0023-8956-3600, and the port index is 1.

%Jul 12 08:48:25:953 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/1 changed to up.

%Jul 12 08:48:25:953 2018 DeviceA DLDP/6/DLDP_LINK_BIDIRECTIONAL: DLDP detected a bidirectional link on interface Ten-GigabitEthernet1/0/1.

以上信息表明，接口Ten-GigabitEthernet1/0/1的物理狀態和鏈路狀態均已up，並確定了DLDP鄰居，所在鏈路也變為雙通狀態。

4.3.3  配置文件

·     Device A

#

 dldp global enable

 dldp authentication-mode simple

 dldp authentication-password cipher $c$3$wHDzwD/AZNW+q+otXapfZ/tUB/Wgbg==

 dldp unidirectional-shutdown manual

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 speed 10000

 duplex full

 dldp enable

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 speed 10000

 duplex full

 dldp enable

#

·     Device B

Device B上的配置文件與Device A完全一致，此處不再贅述。

5  DLDP混合模式配置舉例

5.1  組網需求

如圖5所示，Device A和Device B之間分別通過一對光纖進行連接。

現要求在這兩台設備上配置DLDP混合模式，實現：

·     DLDP能夠檢測到光纖交叉連接或一條光纖未連接的單向鏈路故障；

·     當DLDP檢測到單向鏈路故障後，DLDP會自動關閉故障接口；

·     當網絡管理員排除故障並重新將故障接口打開後，故障接口才能夠恢複正常。

圖5 DLDP混合模式配置組網圖

 

5.2  使用版本

本舉例是在S6890-CMW710-R2712版本上進行配置和驗證的。

5.3  配置注意事項

·     為確保DLDP能夠正常工作，需要將兩端接口的雙工模式都配置為全雙工模式，速率都配置為相同的強製速率。

·     為確保DLDP能夠正常工作，要保證兩端設備的DLDP功能都處於開啟狀態，且Advertisement報文的發送間隔、DLDP認證模式和密碼都相同。

·     缺省情況下，S6890係列交換機的接口處於ADM（Administratively Down）狀態，請根據實際需要在對應接口視圖下使用undo shutdown命令開啟接口。

5.3.1  配置步驟

(1)     Device A的配置

# 全局開啟DLDP功能。

<DeviceA> system-view

[DeviceA] dldp global enable

# 在接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上配置雙工模式為全雙工、端口速率為10000Mbps，並開啟DLDP功能。

[DeviceA] interface ten-gigabitethernet 1/0/1

[DeviceA-Ten-GigabitEthernet1/0/1] duplex full

[DeviceA-Ten-GigabitEthernet1/0/1] speed 10000

[DeviceA-Ten-GigabitEthernet1/0/1] dldp enable

[DeviceA-Ten-GigabitEthernet1/0/1] quit

[DeviceA] interface ten-gigabitethernet 1/0/2

[DeviceA-Ten-GigabitEthernet1/0/2] duplex full

[DeviceA-Ten-GigabitEthernet1/0/2] speed 10000

[DeviceA-Ten-GigabitEthernet1/0/2] dldp enable

[DeviceA-Ten-GigabitEthernet1/0/2] quit

# 配置Advertisement報文的發送間隔為5秒（缺省情況下，Advertisement報文的發送間隔為5秒），配置DLDP認證模式為明文認證，認證密碼為abc。

[DeviceA] dldp interval 5

[DeviceA] dldp authentication-mode simple

[DeviceA] dldp authentication-password simple abc

# 配置發現單向鏈路後接口的關閉模式為混合模式。

[DeviceA] dldp unidirectional-shutdown hybrid

(2)     Device B的配置

Device B上的配置與Device A上的配置完全一致，此處不再贅述。

5.3.2  驗證配置

配置完成後，通過使用display dldp命令可以查看DLDP的全局配置信息和接口上的DLDP信息。例如：

# 查看Device A上DLDP的全局配置信息和所有接口上的DLDP信息。

[DeviceA] display dldp

 DLDP global status: Enabled

 DLDP advertisement interval: 5s

 DLDP authentication-mode: Simple

 DLDP authentication-password: ******

 DLDP unidirectional-shutdown mode: Hybrid

 DLDP delaydown-timer value: 1s

 Number of enabled ports: 2

 

Interface Ten-GigabitEthernet1/0/1

 DLDP port state: Bidirectional

 Number of the port’s neighbors: 1

  Neighbor MAC address: 0023-8956-3600

  Neighbor port index: 1

  Neighbor state: Confirmed

  Neighbor aged time: 11s

 

Interface Ten-GigabitEthernet1/0/2

 DLDP port state: Bidirectional

 Number of the port’s neighbors: 1

  Neighbor MAC address: 0023-8956-3600

  Neighbor port index: 2

  Neighbor state: Confirmed

  Neighbor aged time: 12s

由此可見，接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上的DLDP接口狀態均為Bidirectional，表明這兩個接口所在的鏈路均處於雙通狀態。

# 在Device A上配置允許日誌信息輸出到當前終端，且輸出的日誌信息最低為6級。

[DeviceA] quit

<DeviceA> terminal monitor

The current terminal is enabled to display logs.

<DeviceA> terminal logging level 6

如3.3.2  圖2所示，以Device A和Device B的兩對光纖被錯誤地進行了交叉連接為例。

圖6 光纖交叉連接組網圖

 

網絡管理員會在Device A上看到如下日誌信息：

<DeviceA>%Jan  4 07:16:06:556 2018 DeviceA DLDP/5/DLDP_NEIGHBOR_AGED: A neighbor on interface

Ten-GigabitEthernet1/0/1 was deleted because the neighbor was aged. The neighbor's system MAC is 0023-8956-3600, and the port index is 162.

%Jan  4 07:16:06:560 2018 DeviceA DLDP/5/DLDP_NEIGHBOR_AGED: A neighbor on interface

Ten-GigabitEthernet1/0/2 was deleted because the neighbor was aged. The neighbor's system MAC is 0023-8956-3600, and the port index is 165.

%Jan  4 07:16:06:724 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/1 changed to down.

%Jan  4 07:16:06:730 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/2 changed to down.

%Jan  4 07:16:06:736 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/1 changed to down.

%Jan  4 07:16:06:738 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/2 changed to down.

%Jan  4 07:16:07:152 2018 DeviceA DLDP/3/DLDP_LINK_UNIDIRECTIONAL: DLDP detected a unidirectional link on interface Ten-GigabitEthernet1/0/1. DLDP automatically shut down the interface. Please manually bring up the interface.

%Jan  4 07:16:07:156 2018 DeviceA DLDP/3/DLDP_LINK_UNIDIRECTIONAL: DLDP detected a unidirectional link on interface Ten-GigabitEthernet1/0/2. DLDP automatically shut down the interface. Please manually bring up the interface.

上述信息表明，接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2的物理狀態和都鏈路狀態均已變為down。

# 查看Device A上接口Ten-GigabitEthernet1/0/1的運行狀態和相關信息。

[DeviceA]display interface ten-gigabitethernet 1/0/1

Ten-GigabitEthernet1/0/1

Current state: DOWN

Line protocol state: DOWN(DLDP)

IP packet frame type: Ethernet II, hardware address: 00e0-fc00-5929

Description: Ten-GigabitEthernet1/0/1 Interface

Bandwidth: 10000000kbps

Loopback is not set

Media type is optical fiber, Port hardware type is 10G_BASE_SR_SFP

10Gbps-speed mode, full-duplex mode

Link speed type is force link, link duplex type is force link

Flow-control is not enabled

Maximum frame length: 9216

Allow jumbo frame to pass

Broadcast max-ratio: 100%

Multicast max-ratio: 100%

Unicast max-ratio: 100%

PVID: 1

Mdi type: automdix

Port link-type: Access

 Tagged Vlan:   none

 UnTagged Vlan: 1

Port priority: 0

Last link flapping: 0 hours 11 minutes 9 seconds

Last clearing of counters: Never

 Peak input rate: 141 bytes/sec, at 2018-01-01 01:37:08

 Peak output rate: 84 bytes/sec, at 2018-01-01 05:39:56

 Last 300 second input:  0 packets/sec 99 bytes/sec 0%

 Last 300 second output:  0 packets/sec 63 bytes/sec 0%

 Input (total):  26470 packets, 2469445 bytes

          0 unicasts, 1 broadcasts, 26469 multicasts, 0 pauses

 Input (normal):  26470 packets, - bytes

          0 unicasts, 1 broadcasts, 26469 multicasts, 0 pauses

 Input:  0 input errors, 0 runts, 0 giants, 0 throttles

          0 CRC, 0 frame, - overruns, 0 aborts

          - ignored, - parity errors

 Output (total): 16962 packets, 1165236 bytes

          0 unicasts, 0 broadcasts, 16962 multicasts, 0 pauses

 Output (normal): 16962 packets, - bytes

          0 unicasts, 0 broadcasts, 16962 multicasts, 0 pauses

 Output: 0 output errors, - underruns, - buffer failures

          0 aborts, 0 deferred, 0 collisions, 0 late collisions

          0 lost carrier, - no carrier

上述信息表明，光纖被交叉連接後，接口Ten-GigabitEthernet1/0/1物理狀態變為down，鏈路層被DLDP協議自動關閉了。查看Device A上接口Ten-GigabitEthernet1/0/2的運行狀態也和Ten-GigabitEthernet1/0/1一樣。

# 查看Device A上DLDP的全局配置信息和所有接口上的DLDP信息。

<DeviceA> display dldp

 DLDP global status: Enabled

 DLDP advertisement interval: 5s

 DLDP authentication-mode: Simple

 DLDP authentication-password: ******

 DLDP unidirectional-shutdown mode: Hybrid

 DLDP delaydown-timer value: 1s

 Number of enabled ports: 2

 

Interface Ten-GigabitEthernet1/0/1

 DLDP port state: Unidirectional

 Number of the port’s neighbors: 0 (Maximum number ever detected: 1)

 

Interface Ten-GigabitEthernet1/0/2

 DLDP port state: Unidirectional

 Number of the port’s neighbors: 0 (Maximum number ever detected: 1)

上述信息表明，接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上的DLDP接口狀態均為Unidirectional，說明這兩個接口所在的鏈路均處於單通狀態。由此可知，DLDP在接口Ten-GigabitEthernet1/0/1和Ten-GigabitEthernet1/0/2上都檢測到了單向鏈路。

網絡管理員將這兩對光纖重新進行正確連接，並將Device A的兩個接口重新打開：

# 打開接口Ten-GigabitEthernet1/0/1。

<DeviceA> system-view

[DeviceA] interface ten-gigabitethernet 1/0/1

[DeviceA-Ten-GigabitEthernet1/0/1] undo shutdown

在設備上可以看到如下日誌信息：

[DeviceA-Ten-GigabitEthernet1/0/1]%Jan  4 07:33:26:574 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/1 changed to up.

%Jan  4 07:33:57:562 2018 DeviceA DLDP/6/DLDP_NEIGHBOR_CONFIRMED: A neighbor was confirmed on interface Ten-GigabitEthernet1/0/1. The neighbor's system MAC is 0023-8956-3600, and the port index is 162.

%Jan  4 07:33:57:563 2018 DeviceA DLDP/6/DLDP_LINK_BIDIRECTIONAL: DLDP detected a bidirectional link on interface Ten-GigabitEthernet1/0/1.

%Jan  4 07:33:57:590 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/1 changed to up.

%Jan  4 07:33:57:609 2018 DeviceA STP/6/STP_DETECTED_TC: Instance 0's port Ten-GigabitEthernet1/0/1 detected a topology change.

上述信息表明，接口Ten-GigabitEthernet1/0/1的物理狀態和鏈路狀態均已up，並確定了DLDP鄰居，所在鏈路也變為雙通狀態。

# 打開接口Ten-GigabitEthernet1/0/2。

[DeviceA-Ten-GigabitEthernet1/0/2] quit

[DeviceA] interface Ten-GigabitEthernet1/0/2

[DeviceA-Ten-GigabitEthernet1/0/2] undo shutdown

在設備上可以看到如下日誌信息：

[DeviceA-Ten-GigabitEthernet1/0/2]%Jan  4 07:35:26:574 2018 DeviceA IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/2 changed to up.

%Jan  4 07:35:57:562 2018 DeviceA DLDP/6/DLDP_NEIGHBOR_CONFIRMED: A neighbor was confirmed on interface Ten-GigabitEthernet1/0/2. The neighbor's system MAC is 0023-8956-3600, and the port index is 162.

%Jan  4 07:35:57:563 2018 DeviceA DLDP/6/DLDP_LINK_BIDIRECTIONAL: DLDP detected a bidirectional link on interface Ten-GigabitEthernet1/0/2.

%Jan  4 07:35:57:590 2018 DeviceA IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/2 changed to up.

%Jan  4 07:35:57:609 2018 DeviceA STP/6/STP_DETECTED_TC: Instance 0's port Ten-GigabitEthernet1/0/2 detected a topology change.

上述信息表明，接口Ten-GigabitEthernet1/0/2的物理狀態和鏈路狀態均已up，並各自確定了DLDP鄰居，所在鏈路也變為雙通狀態。

5.3.3  配置文件

·     Device A

#

 dldp global enable

 dldp authentication-mode simple

 dldp authentication-password cipher $c$3$wHDzwD/AZNW+q+otXapfZ/tUB/Wgbg==

 dldp unidirectional-shutdown hybrid

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 speed 10000

 duplex full

 dldp enable

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 speed 10000

 duplex full

 dldp enable

#

·     Device B

Device B上的配置文件與Device A完全一致，此處不再贅述。

6  相關資料

·     H3C S6890係列以太網交換機 可靠性配置指導（R27xx）

·     H3C S6890係列以太網交換機 可靠性命令參考（R27xx）